@babylonlabs-io/ts-sdk 3.2.1 → 3.3.0

package/dist/{buildAndBroadcastReclaim-CE77jzTp.cjs → buildAndBroadcastReclaim-DPk36Uhp.cjs}

@@ -1,2 +1,2 @@
-"use strict";var zt=Object.defineProperty;var Yt=(e,t,r)=>t in e?zt(e,t,{enumerable:!0,configurable:!0,writable:!0,value:r}):e[t]=r;var j=(e,t,r)=>Yt(e,typeof t!="symbol"?t+"":t,r);const Re=require("./BTCVaultRegistry.abi-BH2-LHxN.cjs"),g=require("./bitcoin-D-O2GjbC.cjs"),F=require("./PayoutManager-B1Ev0r7o.cjs"),k=require("./tbv/core/wasm/index.cjs"),I=require("./registration-records-DaBufozs.cjs"),A=require("bitcoinjs-lib"),h=require("./constants-CAm10Qwp.cjs"),w=require("./verifyScriptPathSchnorrSignature-CahYx5Td.cjs"),K=require("buffer"),ne=require("./validation-C6XTfZak.cjs"),z=require("./signing-DvISftFk.cjs"),st=require("./deriveVaultRoot-C3uqnJto.cjs"),le=require("./types-DGr5HWwD.cjs"),xe=require("viem"),S=require("./state-C4WoNCy1.cjs"),J=require("./sha2-Ce6KewYx.cjs"),H=require("./challengeAssert-C3eMcM5Y.cjs"),Wt=require("./secp256k1-DDHQ1_za.cjs"),jt=require("./btcTxHash-CGb5BqFL.cjs"),Jt=/^0x[0-9a-fA-F]{64}$/,Qt=/^0x[0-9a-fA-F]{40}$/,Zt=/^0x([0-9a-fA-F]{2})*$/;function de(e,t){if(e.length!==66)throw new Error(`${t} must be 32 bytes (66 hex chars with 0x prefix), got length ${e.length}`);if(!Jt.test(e))throw new Error(`${t} must contain only hex characters after the 0x prefix`)}function er(e,t){if(!Qt.test(e))throw new Error(`${t} must be a 20-byte 0x-prefixed hex address (42 chars)`)}function tr(e,t){if(!Zt.test(e))throw new Error(`${t} must be a 0x-prefixed hex string with an even number of hex chars`)}function Be(e){er(e.btcVaultRegistryAddress,"btcVaultRegistryAddress"),de(e.vaultId,"vaultId");const t=g.ensureHexPrefix(e.secret);if(de(t,"secret"),e.hashlock!==void 0&&(de(e.hashlock,"hashlock"),!F.validateSecretAgainstHashlock(t,e.hashlock)))throw new Error("Invalid secret: SHA256(secret) does not match the provided hashlock");return t}async function rr(e){const{btcVaultRegistryAddress:t,vaultId:r,hashlock:o,activationMetadata:n,writeContract:s,signal:a}=e;a==null||a.throwIfAborted();const i=Be({btcVaultRegistryAddress:t,vaultId:r,secret:e.secret,hashlock:o});return tr(n,"activationMetadata"),s({address:t,abi:Re.BTCVaultRegistryABI,functionName:"activateVaultWithSecret",args:[r,i,n]})}async function or(e){const{btcVaultRegistryAddress:t,vaultId:r,hashlock:o,writeContract:n,signal:s}=e;s==null||s.throwIfAborted();const a=Be({btcVaultRegistryAddress:t,vaultId:r,secret:e.secret,hashlock:o});return n({address:t,abi:Re.BTCVaultRegistryABI,functionName:"activateVaultWithSecretAndRedeem",args:[r,a]})}async function nr(e){const{btcVaultRegistryAddress:t,vaultId:r,hashlock:o,writeContract:n,signal:s}=e;if(s==null||s.throwIfAborted(),typeof o!="string")throw new Error("hashlock is required to claim an expired vault");const a=Be({btcVaultRegistryAddress:t,vaultId:r,secret:e.secret,hashlock:o});return n({address:t,abi:Re.BTCVaultRegistryABI,functionName:"claimExpiredVault",args:[r,a]})}class V extends Error{constructor(t,r){super(t,r),this.name="AssertBindingError"}}function pe(e,t){try{return A.Psbt.fromBase64(t)}catch(r){throw new V(`${e} PSBT cannot be parsed.`,{cause:r})}}function sr(e,t,r){const o=t.txInputs[r];if(!o)throw new V(`${e} PSBT has no input ${r}.`);return o.hash}function ze(e){return A.Transaction.fromBuffer(e.data.globalMap.unsignedTx.toBuffer()).getHash()}function he(e,t,r,o,n,s){const a=t.txInputs[r];if(!a)throw new V(`${e} PSBT has no input ${r}.`);if(!a.hash.equals(o)||a.index!==n)throw new V(`${e} input ${r} does not spend ${s}: the graph pairs this ${e} with a different transaction.`)}function ir(e,t){var n;const r=(n=e.data.inputs[h.ASSERT_CLAIM_INPUT_INDEX])==null?void 0:n.witnessUtxo;if(r===void 0)throw new V(`Assert input ${h.ASSERT_CLAIM_INPUT_INDEX} carries no witnessUtxo, so the amount and script its signature commits to cannot be checked; refusing to sign assert.`);const o=t.txOutputs[h.CLAIM_CONNECTOR_OUTPUT_INDEX];if(!o)throw new V(`Claim PSBT has no output ${h.CLAIM_CONNECTOR_OUTPUT_INDEX} for the Assert to spend; refusing to sign assert.`);if(r.value!==o.value)throw new V(`Assert input ${h.ASSERT_CLAIM_INPUT_INDEX} declares a prevout of ${r.value} sats but the Claim's output ${h.CLAIM_CONNECTOR_OUTPUT_INDEX} is worth ${o.value}; refusing to sign assert.`);if(!r.script.equals(o.script))throw new V(`Assert input ${h.ASSERT_CLAIM_INPUT_INDEX} declares a prevout script that is not the Claim's output ${h.CLAIM_CONNECTOR_OUTPUT_INDEX} script; refusing to sign assert.`)}function it(e){const t=pe("Claim",e.claimPsbtBase64),r=pe("Assert",e.assertPsbtBase64),o=pe("Payout",e.payoutClaimerPsbtBase64);he("Assert",r,h.ASSERT_CLAIM_INPUT_INDEX,ze(t),h.CLAIM_CONNECTOR_OUTPUT_INDEX,"Claim:0"),ir(r,t),he("Payout",o,h.PAYOUT_ASSERT_INPUT_INDEX,ze(r),h.ASSERT_PAYOUT_OUTPUT_INDEX,"Assert:0"),he("Payout",o,h.PAYOUT_PEGIN_INPUT_INDEX,sr("Claim",t,h.CLAIM_PEGIN_INPUT_INDEX),h.PEGIN_VAULT_OUTPUT_INDEX,"this vault's PegIn:0")}function ge(e,t){try{return A.Psbt.fromBase64(t)}catch(r){throw new Error(`${e} PSBT cannot be parsed.`,{cause:r})}}function Ye(e,t,r,o){var a;const n=[{inputIndex:h.PAYOUT_PEGIN_INPUT_INDEX,expectedSats:r,source:`the vault's PegIn output ${h.PEGIN_VAULT_OUTPUT_INDEX}`},{inputIndex:h.PAYOUT_ASSERT_INPUT_INDEX,expectedSats:o.value,source:`the Assert's output ${h.ASSERT_PAYOUT_OUTPUT_INDEX}`}];for(const{inputIndex:i,expectedSats:u,source:l}of n){const c=(a=t.data.inputs[i])==null?void 0:a.witnessUtxo;if(c===void 0)throw new Error(`${e} Payout input ${i} carries no witnessUtxo, so the amount its signature commits to cannot be checked; refusing to sign payout.`);if(c.value!==u)throw new Error(`${e} Payout input ${i} declares a prevout of ${c.value} sats but ${l} is worth ${u}; refusing to sign payout.`)}const s=t.data.inputs[h.PAYOUT_ASSERT_INPUT_INDEX].witnessUtxo;if(!(s!=null&&s.script.equals(o.script)))throw new Error(`${e} Payout input ${h.PAYOUT_ASSERT_INPUT_INDEX} declares a prevout script that is not the Assert's output ${h.ASSERT_PAYOUT_OUTPUT_INDEX} script; refusing to sign payout.`)}async function ar(e){const{vault:t}=e,r={vaultCoreVersion:t.vaultCoreVersion,numVaultKeepers:t.vaultKeeperBtcPubkeys.length,numUniversalChallengers:t.universalChallengerBtcPubkeys.length,councilSize:t.councilSize,protocolFeeRate:t.protocolFeeRate};w.assertPayoutFeeBandDomain(r);const o=ge("Claimer Payout",e.payoutClaimerPsbtBase64),n=ge("Depositor Payout",e.payoutDepositorPsbtBase64),s=ge("Assert",e.assertPsbtBase64);if(!n.data.globalMap.unsignedTx.toBuffer().equals(o.data.globalMap.unsignedTx.toBuffer()))throw new Error("Depositor and claimer Payout PSBTs describe different transactions; refusing to sign payout.");const a=s.txOutputs[h.ASSERT_PAYOUT_OUTPUT_INDEX];if(a===void 0)throw new Error(`Assert transaction has no output ${h.ASSERT_PAYOUT_OUTPUT_INDEX}; the Payout's implicit fee cannot be measured.`);if(o.txInputs.length!==h.DEPOSITOR_PAYOUT_INPUT_COUNT)throw new Error(`Payout transaction must have exactly ${h.DEPOSITOR_PAYOUT_INPUT_COUNT} inputs, got ${o.txInputs.length}`);const i=o.txInputs[h.PAYOUT_PEGIN_INPUT_INDEX].sequence;if(i!==t.timelockPegin)throw new Error(`Payout input ${h.PAYOUT_PEGIN_INPUT_INDEX} sequence ${i} must equal the PegIn CSV timelock ${t.timelockPegin}; refusing to sign payout.`);const u=o.txInputs[h.PAYOUT_ASSERT_INPUT_INDEX].sequence;if(u!==t.timelockAssert)throw new Error(`Payout input ${h.PAYOUT_ASSERT_INPUT_INDEX} sequence ${u} must equal the Assert CSV timelock ${t.timelockAssert}; refusing to sign payout.`);Ye("Claimer",o,t.peginVaultOutputValueSats,a),Ye("Depositor",n,t.peginVaultOutputValueSats,a);const l=t.peginVaultOutputValueSats+a.value,c=o.txOutputs;if(c.length!==h.NON_VP_CLAIMER_PAYOUT_OUTPUT_COUNT)throw new Error(`Payout transaction has ${c.length} output(s), expected exactly ${h.NON_VP_CLAIMER_PAYOUT_OUTPUT_COUNT} for a depositor-as-claimer payout.`);let p=0;for(const d of c)p+=d.value;if(p>l)throw new Error(`Payout outputs (${p} sats) exceed inputs (${l} sats); invalid transaction.`);await w.assertPayoutFeeInBand(r,{implicitFeeSats:l-p,out0Len:c[h.PAYOUT_DESTINATION_OUTPUT_INDEX].script.length,out1Len:void 0})}class at extends Error{constructor(t,r){super("Transaction graph's challenger set does not match the vault's (local ∪ universal)"+(t.length>0?` (missing: ${t.join(", ")})`:"")+(r.length>0?` (unexpected: ${r.join(", ")})`:"")+". Refusing to sign an incomplete or padded challenger set."),this.missing=t,this.unexpected=r,this.name="ChallengerSetMismatchError"}}function ut(e){const t=w.deriveLocalChallengers({claimerBtcPubkey:e.depositorBtcPubkey,depositorBtcPubkey:e.depositorBtcPubkey,vaultProviderBtcPubkey:e.vaultProviderBtcPubkey,vaultKeeperBtcPubkeys:e.vaultKeeperBtcPubkeys}),r=e.universalChallengerBtcPubkeys.map(We),o=t.filter(c=>r.includes(c));if(o.length>0)throw new Error(`Cannot check the challenger set: vault keepers and universal challengers overlap (${o.join(", ")}).`);const n=e.graphChallengerPubkeys.map(We),s=new Set(n);if(s.size!==n.length)throw new Error("Transaction graph lists the same challenger more than once.");const a=[...t,...r],i=new Set(a),u=a.filter(c=>!s.has(c)),l=n.filter(c=>!i.has(c));if(u.length>0||l.length>0)throw new at(u,l)}function We(e){return g.stripHexPrefix(e).toLowerCase()}class ct extends Error{constructor(t,r){super(`Payout transaction output ${h.PAYOUT_DESTINATION_OUTPUT_INDEX} pays ${r}, not the vault's registered payout script ${t}. Refusing to sign a payout to another destination.`),this.expectedScriptHex=t,this.actualScriptHex=r,this.name="PayoutDestinationError"}}function lt(e){let t;try{t=A.Psbt.fromBase64(e.payoutPsbtBase64)}catch(c){throw new Error("Payout PSBT cannot be parsed.",{cause:c})}const{version:r,locktime:o,outs:n}=ur(t);if(r!==h.PAYOUT_TX_VERSION||o!==h.PAYOUT_TX_LOCKTIME)throw new Error(`Payout transaction has version ${r} and locktime ${o}, expected ${h.PAYOUT_TX_VERSION} and ${h.PAYOUT_TX_LOCKTIME}.`);if(n.length!==h.NON_VP_CLAIMER_PAYOUT_OUTPUT_COUNT)throw new Error(`Payout transaction has ${n.length} output(s), expected exactly ${h.NON_VP_CLAIMER_PAYOUT_OUTPUT_COUNT} for a depositor-as-claimer payout.`);const s=g.stripHexPrefix(e.registeredPayoutScriptPubKey).toLowerCase();if(s.length===0)throw new Error("registeredPayoutScriptPubKey is empty; the vault's on-chain payout script is required to check the Payout destination.");const a=n[h.PAYOUT_DESTINATION_OUTPUT_INDEX].script.toString("hex").toLowerCase();if(a!==s)throw new ct(s,a);const i=n[h.NON_VP_CLAIMER_PAYOUT_OUTPUT_COUNT-1];if(i.value!==h.PAYOUT_ANCHOR_DUST_SATS)throw new Error(`Payout CPFP anchor value ${i.value} sats must equal ${h.PAYOUT_ANCHOR_DUST_SATS} sats.`);const u=g.stripHexPrefix(I.deriveP2trScript(g.stripHexPrefix(e.depositorBtcPubkey).toLowerCase())),l=i.script.toString("hex").toLowerCase();if(l!==u)throw new Error(`Payout CPFP anchor pays ${l}, not the depositor's BIP-86 P2TR ${u}. Refusing to sign a payout whose fee-bump output is spendable by somebody else.`)}function ur(e){return{version:e.version,locktime:e.locktime,outs:e.txOutputs.map(t=>({script:K.Buffer.from(t.script),value:t.value}))}}class Z extends Error{constructor(t){super(t),this.name="PayoutInputLeafError"}}function dt(e){const t=A.Psbt.fromBase64(e.payoutDepositorPsbtBase64),r=A.Psbt.fromBase64(e.payoutClaimerPsbtBase64),o=t.data.globalMap.unsignedTx.toBuffer(),n=r.data.globalMap.unsignedTx.toBuffer();if(!o.equals(n))throw new Z("Depositor and claimer Payout PSBTs describe different transactions; the graph is inconsistent.");const s=r.data.inputs[h.PAYOUT_ASSERT_INPUT_INDEX],a=t.data.inputs[h.PAYOUT_ASSERT_INPUT_INDEX];if(!s||!a)throw new Z("Payout PSBT has no Assert-connector input.");if(!s.tapLeafScript||s.tapLeafScript.length!==1)throw new Z("Claimer Payout PSBT must carry exactly one leaf on the Assert-connector input.");if(a.tapLeafScript&&a.tapLeafScript.length>0)throw new Z("Depositor Payout PSBT already carries an Assert-connector leaf; refusing to overwrite it.");return t.updateInput(h.PAYOUT_ASSERT_INPUT_INDEX,{tapLeafScript:s.tapLeafScript,...s.tapInternalKey?{tapInternalKey:s.tapInternalKey}:{},...s.tapMerkleRoot?{tapMerkleRoot:s.tapMerkleRoot}:{}}),t.toBase64()}class pt extends Error{constructor(t,r,o){super(`Transaction graph does not belong to vault ${t}: its Claim spends PegIn ${o}, which derives vault ${r}. Refusing to sign for a graph served for another vault.`),this.expectedVaultId=t,this.derivedVaultId=r,this.peginTxid=o,this.name="VaultIdBindingError"}}function cr(e){let t;try{t=A.Psbt.fromBase64(e)}catch(o){throw new Error("Claim PSBT cannot be parsed.",{cause:o})}const r=t.txInputs[h.CLAIM_PEGIN_INPUT_INDEX];if(!r)throw new Error("Claim PSBT carries no PegIn input to bind the vault to.");return ht("Claim PSBT",t.txInputs.length,r.index),Ne(r.hash)}function lr(e){const t=e.ins[h.CLAIM_PEGIN_INPUT_INDEX];if(!t)throw new Error("Artifacts file's claim_tx carries no PegIn input to bind the vault to.");return ht("Artifacts file's claim_tx",e.ins.length,t.index),Ne(t.hash)}function ht(e,t,r){if(t!==1||r!==w.PEGIN_DEPOSITOR_CLAIM_VOUT)throw new Error(`${e} must have exactly one input spending PegIn output ${w.PEGIN_DEPOSITOR_CLAIM_VOUT}; it has ${t} input(s) and the first spends output ${r}.`)}function Ve(e){const t=Y(I.derivePeginVaultId(e.peginTxid,e.depositorEthAddress)),r=Y(e.expectedVaultId);if(t!==r)throw new pt(r,t,e.peginTxid)}function Y(e){return`0x${(e.startsWith("0x")?e.slice(2):e).toLowerCase()}`}function Ne(e){return K.Buffer.from(e).reverse().toString("hex")}function se(e,t){const r=g.stripHexPrefix(e);if(!/^(?:[0-9a-fA-F]{2})+$/.test(r))throw new Error(`${t} must be non-empty, even-length hex.`);return r.toLowerCase()}function gt(e){const t=se(e.servedVerifyingKeyHex,"source.verifyingKeyHex"),r=se(e.trustedVerifyingKeyHex,"trustedVerifyingKeyHex");if(t===r)return r;throw new Error(`Vault provider served Groth16 verifying key ${t} but the trusted key for prover circuit version ${e.proverCircuitVersion} is ${r}; refusing to sign a claim whose proof would verify under a substituted key.`)}const M=3;class ft extends Error{constructor(t,r){super(`Artifacts belong to vault ${r}, not ${t}. Select the artifacts file saved for this vault.`),this.expectedVaultId=t,this.actualVaultId=r,this.name="ArtifactsVaultMismatchError"}}const dr=/^(?:[0-9a-fA-F]{2})+$/;function pr(e){const t=fr(e,"babe_sessions"),r=Object.keys(t);if(r.length===0)return{joined:!1};for(const[o,n]of Object.entries(t)){const s=typeof n=="object"&&n!==null?n.decryptor_artifacts_hex:void 0;if(typeof s!="string"||!dr.test(s))throw new Error(`Artifacts file is missing a usable "babe_sessions": the entry for ${o} carries no non-empty hex "decryptor_artifacts_hex".`)}return{joined:!0,challengerPubkeys:r}}function Pt(e){let t;try{t=JSON.parse(e)}catch(a){throw new Error("Artifacts file is not valid JSON.",{cause:a})}const r=fe(t.vault_id,"vault_id"),o=gr(fe(t.claim_tx,"claim_tx")),n=Pe(t.prover_circuit_version,"prover_circuit_version"),s=t.claimable_event_block_number===void 0?0n:BigInt(Pe(t.claimable_event_block_number,"claimable_event_block_number"));return{vaultCoreVersion:t.vault_core_version===void 0?void 0:Pe(t.vault_core_version,"vault_core_version"),vaultId:r,claimTxid:o.getId(),peginTxid:lr(o),proverCircuitVersion:n,claimableEventBlockNumber:s,verifyingKeyHex:fe(t.verifying_key,"verifying_key"),babeSessions:pr(t.babe_sessions)}}async function hr(e){const t=Pt(e.artifactsJson),r=Y(e.expectedVaultId),o=Y(t.vaultId);if(r!==o)throw new ft(r,o);Ve({peginTxid:t.peginTxid,depositorEthAddress:e.depositorEthAddress,expectedVaultId:r});const n=e.txGraphVersion??M;if(t.vaultCoreVersion!==void 0&&t.vaultCoreVersion!==n)throw new Error(`Artifacts record vault core version ${t.vaultCoreVersion}, but verification was asked for version ${n}.`);if(t.claimableEventBlockNumber===0n)throw new Error("Artifacts carry no claimable event block number. They were assembled before the Ethereum withdrawal was initiated; assemble them again.");if(t.claimableEventBlockNumber!==e.expectedClaimableEventBlockNumber)throw new Error(`Artifacts record claimable event block ${t.claimableEventBlockNumber} but the vault's finalized VaultClaimableBy event is at block ${e.expectedClaimableEventBlockNumber}; the prover would prove the wrong block, so refusing the file.`);if(t.proverCircuitVersion!==e.expectedProverCircuitVersion)throw new Error(`Artifacts record prover circuit version ${t.proverCircuitVersion} but the vault's stamped params say ${e.expectedProverCircuitVersion}; a proof for the wrong circuit fails at start-claim, so refusing the file.`);const s=se(t.verifyingKeyHex,'Artifacts file "verifying_key"'),a=se(e.trustedVerifyingKeyHex,"trustedVerifyingKeyHex");if(s!==a)throw new Error(`Artifacts carry Groth16 verifying key ${s} but the trusted key for prover circuit version ${e.expectedProverCircuitVersion} is ${a}; refusing a file whose proof would verify under a substituted key.`);return await k.verifyWatchtowerArtifacts(n,e.artifactsJson),t}function gr(e){try{return A.Transaction.fromHex(e)}catch(t){throw new Error("Artifacts file carries an unparseable claim_tx.",{cause:t})}}function fe(e,t){if(typeof e!="string"||e.length===0)throw new Error(`Artifacts file is missing a usable "${t}".`);return e}function Pe(e,t){if(typeof e!="number"||!Number.isSafeInteger(e)||e<0)throw new Error(`Artifacts file is missing a usable "${t}".`);return e}function fr(e,t){if(e===void 0)return{};if(typeof e!="object"||e===null||Array.isArray(e))throw new Error(`Artifacts file is missing a usable "${t}".`);return e}function yt(e,t){return`wronglyChallenged:${e}:${t}`}function vt(e){const t=[{id:"claim",kind:"claim",psbtBase64:e.claim,inputIndex:h.CLAIM_PEGIN_INPUT_INDEX},{id:"assert",kind:"assert",psbtBase64:e.assert,inputIndex:h.ASSERT_CLAIM_INPUT_INDEX},{id:"payoutClaimer",kind:"payoutClaimer",psbtBase64:e.payoutClaimer,inputIndex:h.PAYOUT_ASSERT_INPUT_INDEX},{id:"payoutDepositor",kind:"payoutDepositor",psbtBase64:e.payoutDepositor,inputIndex:h.PAYOUT_PEGIN_INPUT_INDEX}];for(const r of Object.keys(e.wronglyChallenged))e.wronglyChallenged[r].forEach((o,n)=>{t.push({id:yt(r,n),kind:"wronglyChallenged",psbtBase64:o,inputIndex:h.WRONGLY_CHALLENGED_INPUT_INDEX})});return t}const Pr="{}",yr=ne.COMPRESSED_PUBKEY_HEX_LEN-ne.X_ONLY_PUBKEY_HEX_LEN;function D(e){const t=e.replace(/^0x/,"").toLowerCase();if(t.length===ne.COMPRESSED_PUBKEY_HEX_LEN)return t.slice(yr);if(t.length===ne.X_ONLY_PUBKEY_HEX_LEN)return t;throw new Error(`Public key must be 33-byte compressed or 32-byte x-only hex, got ${t.length/2} bytes.`)}async function je(e,t,r){const o=await e.getPublicKeyHex();if(D(o)!==D(t))throw new Error("Connected wallet does not hold the vault's depositor key. Select the account that made the deposit, then try again.");const n=await e.getAddress();if(!g.isAddressFromPublicKey(n,o,r))throw new Error(`Connected wallet reports address "${n}", which is not derived from the vault's depositor key. Select the account that made the deposit, then try again.`);return n}async function bt(e,t,r,o){const n=D(o);if(n!==r.depositorBtcPubkey)throw new Error(`Depositor key ${n} is not the vault's registered depositor key ${r.depositorBtcPubkey}; refusing to plan a claim for another key.`);try{I.assertPayoutScriptMatchesPopKey(g.ensureHexPrefix(r.registeredPayoutScriptPubKey),r.depositorBtcPubkey,o)}catch(p){throw new Error(`Registered payout script ${r.registeredPayoutScriptPubKey} failed the depositor-key derivation check: ${p instanceof Error?p.message:String(p)}. This SDK registers only P2TR of the depositor's x-only key or P2WPKH of the compressed key (the contract bounds the script's length alone, PeginLogic.sol:237-240 @ c559f5c2); refusing to sign a claim that pays it.`,{cause:p})}if(e!==M)throw new Error(`Graph version ${e} is not the delegated-claim graph version ${M}; vaults on earlier graphs have no delegated-claim path.`);if(e!==r.vaultCoreVersion)throw new Error(`Graph version ${e} does not match the vault context's vault core version ${r.vaultCoreVersion}; they are one axis and must agree.`);const[s,a,i,u,l]=await Promise.all([k.buildClaimPsbt(e,t),k.buildAssertClaimerPsbt(e,t),k.buildPayoutClaimerPsbt(e,t),k.buildWronglyChallengedPsbts(e,t),k.buildPayoutDepositorPsbt(e,t)]);Ve({peginTxid:cr(s),depositorEthAddress:r.depositorEthAddress,expectedVaultId:r.vaultId}),it({claimPsbtBase64:s,assertPsbtBase64:a,payoutClaimerPsbtBase64:i});for(const p of[i,l])lt({payoutPsbtBase64:p,registeredPayoutScriptPubKey:r.registeredPayoutScriptPubKey,depositorBtcPubkey:r.depositorBtcPubkey});const c=dt({payoutDepositorPsbtBase64:l,payoutClaimerPsbtBase64:i});return await ar({payoutClaimerPsbtBase64:i,payoutDepositorPsbtBase64:c,assertPsbtBase64:a,vault:r}),ut({graphChallengerPubkeys:Object.keys(u),depositorBtcPubkey:o,vaultProviderBtcPubkey:r.vaultProviderBtcPubkey,vaultKeeperBtcPubkeys:r.vaultKeeperBtcPubkeys,universalChallengerBtcPubkeys:r.universalChallengerBtcPubkeys}),{claim:s,assert:a,payoutClaimer:i,payoutDepositor:c,wronglyChallenged:u}}async function mt(e){gt({servedVerifyingKeyHex:e.source.verifyingKeyHex,trustedVerifyingKeyHex:e.trustedVerifyingKeyHex,proverCircuitVersion:e.vault.proverCircuitVersion});const t=await bt(e.vault.txGraphVersion,e.source.txGraphJson,e.vault,e.depositorPublicKey);return{depositorPublicKey:e.depositorPublicKey,btcNetwork:e.btcNetwork,trustedVerifyingKeyHex:e.trustedVerifyingKeyHex,source:e.source,vault:e.vault,babeSessionsJson:e.babeSessionsJson===void 0?Pr:e.babeSessionsJson,requests:vt(t)}}function ce(e,t,r){w.assertScriptPathSchnorrSignature({requestedPsbtHex:Oe(t.psbtBase64),signatureHex:r,signerXOnlyPubkeyHex:D(e.depositorPublicKey),inputIndex:t.inputIndex})}function Oe(e){return K.Buffer.from(e,"base64").toString("hex")}function wt(e){return K.Buffer.from(e,"hex").toString("base64")}class G extends Error{constructor(t){super(t),this.name="SigningPlanMismatchError"}}function vr(e,t){if(e.length!==t.length)throw new G(`Plan has ${e.length} requests but the graph builds ${t.length}; the plan was altered after planning.`);for(let r=0;r<t.length;r++){const o=t[r],n=e[r];if(n.id!==o.id)throw new G(`Plan request at position ${r} is "${n.id}" but the graph builds "${o.id}" there; the plan was altered after planning.`);if(n.kind!==o.kind)throw new G(`Plan request "${n.id}" has kind "${n.kind}" but the graph builds "${o.kind}"; the plan was altered after planning.`);if(n.inputIndex!==o.inputIndex)throw new G(`Plan request "${n.id}" signs inputIndex ${n.inputIndex} but the graph builds ${o.inputIndex}; the plan was altered after planning.`);if(n.psbtBase64!==o.psbtBase64)throw new G(`Plan request "${n.id}" carries a psbt that differs from the one the graph builds; the plan was altered after planning.`)}}function br(e,t){const r=new Set(e.map(a=>a.id)),o=[...r].filter(a=>!t.has(a)),n=[...t.keys()].filter(a=>!r.has(a));if(o.length===0&&n.length===0)return;const s=a=>a.map(i=>`"${i}"`).join(", ");throw new Error(`Signatures do not cover the plan: ${t.size} signatures for ${e.length} requests`+(o.length>0?`; missing ${s(o)}`:"")+(n.length>0?`; extra ${s(n)}`:"")+".")}function X(e,t){const r=e.get(t);if(r===void 0)throw new Error(`No signature for request "${t}"; the plan was not fully signed.`);return r}async function xt(e){const{plan:t,signatures:r}=e,{txGraphVersion:o}=t.vault,n=t.source.txGraphJson,s=gt({servedVerifyingKeyHex:t.source.verifyingKeyHex,trustedVerifyingKeyHex:t.trustedVerifyingKeyHex,proverCircuitVersion:t.vault.proverCircuitVersion}),a=await bt(o,n,t.vault,t.depositorPublicKey),i=vt(a);vr(t.requests,i),br(i,r);for(const c of i)ce(t,c,X(r,c.id));const u={};for(const c of Object.keys(a.wronglyChallenged))u[c]=a.wronglyChallenged[c].map((p,d)=>X(r,yt(c,d)));const l=await k.finalizeClaimTx(o,n,X(r,"claim"));return k.buildWatchtowerArtifacts({txGraphVersion:o,graphJson:n,signedClaimTxHex:l,assertClaimerSigHex:X(r,"assert"),payoutClaimerSigHex:X(r,"payoutClaimer"),wronglyChallengedSigs:u,depositorPayoutSigHex:X(r,"payoutDepositor"),verifyingKeyHex:s,claimableEventBlockNumber:t.vault.claimableEventBlockNumber,proverCircuitVersion:t.vault.proverCircuitVersion,vaultIdHex:t.vault.vaultId,babeSessionsJson:t.babeSessionsJson,expectedVaultCoreVersion:t.vault.vaultCoreVersion})}function mr(e){return typeof e.signDelegatedClaimPsbt=="function"}class Et extends Error{constructor(t,r,o,n){super(t,n),this.signatures=r,this.failedRequestId=o,this.name="DelegatedClaimSigningIncompleteError"}}const Tt={assert:"intentBound",payoutDepositor:"intentBound",payoutClaimer:"standalone",claim:"standalone",wronglyChallenged:"standalone"},wr=["payoutClaimer","claim","wronglyChallenged"];async function _t(e,t,r={}){var n;if((n=r.signal)==null||n.throwIfAborted(),xr(e),D(e.depositorPublicKey)!==e.vault.depositorBtcPubkey)throw new Error(`Plan depositor key ${D(e.depositorPublicKey)} is not the vault's registered depositor key ${e.vault.depositorBtcPubkey}; the plan was not built for this vault.`);if(F.supportsDepositApproval(t)){if(!mr(t))throw new Error("Approval wallet does not implement signDelegatedClaimPsbt; the claim ceremony needs it because the device signs some claim PSBTs with no loaded intent and needs its own derivation fields on them.");const s=Tr(r,e);At(s.depositTerms,e.vault);const a=Er(e),i=await je(t,e.depositorPublicKey,e.btcNetwork);return _r(e,t,i,s,a,r)}const o=await je(t,e.depositorPublicKey,e.btcNetwork);return Ar(e,t,o,r.signal)}function xr(e){const t=new Set;for(const r of e.requests){if(t.has(r.id))throw new Error(`Delegated-claim plan lists request "${r.id}" more than once; its signatures could not be keyed, so nothing is signed.`);t.add(r.id)}}function Er(e){const t=e.requests.filter(n=>Tt[n.kind]==="intentBound"),r=wr.flatMap(n=>e.requests.filter(s=>s.kind===n)),o=t.length+r.length;if(o!==e.requests.length)throw new Error(`Delegated-claim plan has ${e.requests.length} signing requests but only ${o} are of a kind this signer can place in the device ceremony; the plan and the signer disagree on the request kinds.`);return{intentBound:t,standalone:r}}function Ct(e,t){if(t.size!==e.requests.length)throw new Error(`Delegated-claim signing ended with ${t.size} signatures for ${e.requests.length} requests; the set is incomplete and must not be treated as signed.`)}function Tr(e,t){if(e.depositTerms===void 0)throw new Error("An approval wallet signs Assert and the depositor Payout only under this vault's loaded intent; pass depositTerms (rebuilt from on-chain state) so it can be approved.");if(e.vaultContext===void 0)throw new Error("An approval wallet releases a loaded intent only through the vault-root derivation; pass vaultContext so that derivation can run before and after the intent-bound signatures.");const r=g.uint8ArrayToHex(e.vaultContext.depositorBtcPubkey);if(r!==t.vault.depositorBtcPubkey)throw new Error(`vaultContext derives from depositor key ${r} but this plan's vault is registered to ${t.vault.depositorBtcPubkey}; the device would derive for another depositor.`);return{depositTerms:e.depositTerms,vaultContext:e.vaultContext}}function At(e,t){const r=n=>n.map(s=>D(s)).sort().join(",");if(r(e.vaultKeeperBtcPubkeys)!==r(t.vaultKeeperBtcPubkeys)||r(e.universalChallengerBtcPubkeys)!==r(t.universalChallengerBtcPubkeys))throw new Error("Deposit terms carry different keeper or challenger rosters than the vault context this claim signs for; the device would bind the Assert to the wrong intent.");if(e.vaultCoreVersion!==t.vaultCoreVersion)throw new Error(`Deposit terms describe vault core version ${e.vaultCoreVersion} but the vault context has version ${t.vaultCoreVersion}; the device would bind the Assert to the wrong intent.`);if(e.timelockPegin!==t.timelockPegin)throw new Error(`Deposit terms describe timelockPegin ${e.timelockPegin} but the vault context has ${t.timelockPegin}; the device would bind the Assert to the wrong intent.`);if(e.timelockAssert!==t.timelockAssert)throw new Error(`Deposit terms describe timelockAssert ${e.timelockAssert} but the vault context has ${t.timelockAssert}; the device would bind the Assert to the wrong intent.`);if(e.protocolFeeRate!==t.protocolFeeRate)throw new Error(`Deposit terms describe protocolFeeRate ${e.protocolFeeRate} but the vault context has ${t.protocolFeeRate}; the device would bind the Assert to the wrong intent.`);if(e.vaults.length===0)throw new Error("Deposit terms describe no vault group, so they cannot name the vault context's vault provider; the device would bind the Assert to the wrong intent.");const o=D(t.vaultProviderBtcPubkey);for(const n of e.vaults)if(D(n.vaultProviderBtcPubkey)!==o)throw new Error(`Deposit terms group at htlcVout ${n.htlcVout} names a different vault provider than the vault context this claim signs for; the device would bind the Assert to the wrong intent.`)}async function _r(e,t,r,o,{intentBound:n,standalone:s},a){var P;const i=Cr(e,a.resume),u=[...n,...s];let l=0;const c={phase:"clearing any loaded intent"},p=async f=>{var m;c.phase="signing",(m=a.signal)==null||m.throwIfAborted();const v=await t.signDelegatedClaimPsbt(Oe(f.psbtBase64),z.createTaprootScriptPathSignOptionsForInput(e.depositorPublicKey,f.inputIndex,r)),y=await k.extractTapScriptSig(wt(v),f.inputIndex);ce(e,f,y),i.set(f.id,y)},d=async f=>{var y;c.phase=f,(y=a.signal)==null||y.throwIfAborted(),(await st.deriveVaultRoot(t,o.vaultContext)).fill(0)};typeof t.validateDepositTerms=="function"&&await t.validateDepositTerms(o.depositTerms);try{await d("clearing any loaded intent"),c.phase="approving the deposit terms",(P=a.signal)==null||P.throwIfAborted(),await t.approveDepositTerms(o.depositTerms);for(const f of n)await p(f),l++;await d("releasing the loaded intent");for(const f of s)i.has(f.id)||await p(f),l++}catch(f){const v=u[l];if(i.size===0||v===void 0)throw f;const y=c.phase==="signing"?`stopped at "${v.id}"`:`stopped before "${v.id}" while ${c.phase}`;throw new Et(`Delegated-claim signing ${y}; ${i.size} of ${e.requests.length} signatures were collected.`,i,v.id,{cause:f})}return Ct(e,i),i}function Cr(e,t){const r=new Map;if(!t)return r;for(const o of e.requests){const n=t.get(o.id);if(!(n===void 0||Tt[o.kind]==="intentBound")){try{ce(e,o,n)}catch{continue}r.set(o.id,n)}}return r}async function Ar(e,t,r,o){const n=e.requests,s=await F.signPsbtsWithFallback(t,n.map(i=>Oe(i.psbtBase64)),n.map(i=>z.createTaprootScriptPathSignOptionsForInput(e.depositorPublicKey,i.inputIndex,r)),o),a=new Map;for(let i=0;i<n.length;i++){const u=await k.extractTapScriptSig(wt(s[i]),n[i].inputIndex);ce(e,n[i],u),a.set(n[i].id,u)}return Ct(e,a),a}async function Sr(e){const t=await mt({depositorPublicKey:e.depositorPublicKey,btcNetwork:e.btcNetwork,source:e.source,trustedVerifyingKeyHex:e.trustedVerifyingKeyHex,vault:e.vault,babeSessionsJson:e.babeSessionsJson}),r=await _t(t,e.btcWallet,{depositTerms:e.depositTerms,vaultContext:e.vaultContext});return xt({plan:t,signatures:r})}async function kr(e){const t=await st.deriveVaultRoot(e.btcWallet,e.vaultContext);let r;try{r=await k.expandWotsSeed(t,e.htlcVout)}finally{t.fill(0)}let o;try{o=await k.wotsKeypairFromSeed(r)}finally{r.fill(0)}return $r(o.pk_hash,e.expectedWotsPkHash),await k.validateWotsKeypairAgainstGraph(e.txGraphVersion,o.keypair,e.txGraphJson),{wotsKeypairJson:JSON.stringify(o.keypair),pkHash:o.pk_hash}}function $r(e,t){if(re(e)!==re(t))throw new Error(`Derived WOTS public-key hash ${re(e)} does not match the vault's on-chain depositorWotsPkHash ${re(t)}. The wallet, the HTLC output index, or the derivation itself is not the one this vault was created with.`)}function re(e){return`0x${(e.startsWith("0x")?e.slice(2):e).toLowerCase()}`}function ye(e,t,r){const o=`${e} operation key (admin=${t.ethAddress})`,n=I.assertOnChainBtcPubkey(t.btcPubKey,`${e} roster key (admin=${t.ethAddress})`),s=I.assertOnChainBtcPubkey(r,o);return{adminAddress:t.ethAddress,genesisBtcPubkey:n,operationBtcPubkey:s,rotated:s!==n}}function Ir(e){const t=new Map;for(const r of e){const o=t.get(r.operationBtcPubkey);if(o)throw new Error(`Participant operation key collision: ${o} and ${r.adminAddress} both resolve to operation key ${r.operationBtcPubkey}`);t.set(r.operationBtcPubkey,r.adminAddress)}}function St(e,t,r){if(t.vaultKeepers.length!==e.vaultKeepers.length||t.universalChallengers.length!==e.universalChallengers.length)throw new Error(`Operation-key resolution returned ${t.vaultKeepers.length} keeper and ${t.universalChallengers.length} challenger keys for a roster of ${e.vaultKeepers.length} keepers and ${e.universalChallengers.length} challengers`);const o=ye("vault provider",{ethAddress:e.vaultProviderEthAddress,btcPubKey:e.vaultProviderGenesisBtcPubkey},t.vaultProvider),n=e.vaultKeepers.map((a,i)=>ye("vault keeper",a,t.vaultKeepers[i])),s=e.universalChallengers.map((a,i)=>ye("universal challenger",a,t.universalChallengers[i]));return Ir([o,...n,...s]),{vaultProvider:o,vaultKeepers:n,universalChallengers:s,vaultKeeperOperationKeysSorted:n.map(a=>a.operationBtcPubkey).sort(),universalChallengerOperationKeysSorted:s.map(a=>a.operationBtcPubkey).sort(),resolvedAt:r,query:e}}async function kt(e){const t=await e.operationKeyReader.getCurrentOperationKeys(e.query,e.blockNumber);return St(e.query,t,{mode:"current"})}async function He(e){const t=await e.operationKeyReader.getOperationKeysAtEpochs(e.query,e.epochs);return St(e.query,t,{mode:"epochs",epochs:e.epochs})}async function $t(e){const{basic:t,protocol:r}=e.vault,{registryReader:o,vaultKeeperReader:n,universalChallengerReader:s,operationKeyReader:a}=e.readers,[i,u,l,c]=await Promise.all([n.getVaultKeepersByVersion(t.applicationEntryPoint,r.appVaultKeepersVersion),s.getUniversalChallengersByVersion(r.universalChallengersVersion),o.getVaultProviderGenesisBtcPubKey(t.vaultProvider),o.getVaultKeyEpochs(e.vaultId)]);if(i.length===0)throw new Error(`No vault keepers for version ${r.appVaultKeepersVersion}`);if(u.length===0)throw new Error(`No universal challengers for version ${r.universalChallengersVersion}`);return He({operationKeyReader:a,query:{vaultProviderEthAddress:t.vaultProvider,vaultProviderGenesisBtcPubkey:`0x${l}`,applicationEntryPoint:t.applicationEntryPoint,vaultKeepers:i,universalChallengers:u},epochs:c})}async function Rr(e){const{vaultId:t,readers:r}=e,o=await r.registryReader.getVaultData(t),{basic:n,protocol:s}=o;if(s.vaultCoreVersion!==M)throw new Error(`Vault ${t} is stamped vault core version ${s.vaultCoreVersion}; delegated claim requires ${M}.`);const a=I.assertOnChainBtcPubkey(n.depositorBtcPubKey,`getBtcVaultBasicInfo(${t}).depositorBtcPubKey`);if(n.status!==le.OnChainBtcVaultStatus.REDEEMED)throw new I.VaultClaimableByNotFoundError(t,n.depositorBtcPubKey,n.createdAt,n.createdAt,`the vault's status is ${n.status}, not Redeemed (${le.OnChainBtcVaultStatus.REDEEMED}); no scan was made`);const[i,u,l,c]=await Promise.all([$t({vaultId:t,vault:o,readers:r}),r.registryReader.getRegistrationRecordsAtBlock(n.createdAt),r.registryReader.getVaultClaimableBy(t,n.depositorBtcPubKey,n.createdAt).catch(b=>{throw I.isVaultClaimableByNotFoundError(b)?new I.VaultClaimableByNotFoundError(t,n.depositorBtcPubKey,b.fromBlock,b.toBlock,"the vault is Redeemed but no VaultClaimableBy authorizes this depositor key in the finalized range. Either the redeem has not finalized yet (the scan stops about two epochs behind the tip), or the vault was redeemed for a vault keeper alone (redeemForAVK emits no depositor log), or the node did not serve every block scanned.",{cause:b}):b}),r.protocolParamsReader.getOffchainParamsByVersion(s.offchainParamsVersion)]),p=le.deriveTimelockPegin(c.timelockAssert),d=I.findRegistrationRecord(u,t,n.createdAt);I.assertRegisteredPayoutScriptBounds(d);const P=I.registrationPrePeginTxHash(d);if(P.toLowerCase()!==s.prePeginTxHash.toLowerCase())throw new Error(`Registration log of vault ${t} records prePeginTxHash ${P} but the vault record says ${s.prePeginTxHash}; refusing an inconsistent node.`);if(d.vaultCoreVersion!==s.vaultCoreVersion)throw new Error(`Registration log of vault ${t} records vault core version ${d.vaultCoreVersion} but the vault record says ${s.vaultCoreVersion}; refusing an inconsistent node.`);if(d.amount!==n.amount)throw new Error(`Registration log of vault ${t} records amount ${d.amount} sats but the vault record says ${n.amount}; refusing an inconsistent node.`);if(d.depositor.toLowerCase()!==n.depositor.toLowerCase())throw new Error(`Registration log of vault ${t} records depositor ${d.depositor} but the vault record says ${n.depositor}; refusing an inconsistent node.`);if(d.vaultProvider.toLowerCase()!==n.vaultProvider.toLowerCase())throw new Error(`Registration log of vault ${t} records vaultProvider ${d.vaultProvider} but the vault record says ${n.vaultProvider}; refusing an inconsistent node.`);if(l.vaultCoreVersion!==s.vaultCoreVersion)throw new Error(`Redemption log of vault ${t} records vault core version ${l.vaultCoreVersion} but the vault record says ${s.vaultCoreVersion}; refusing an inconsistent node.`);if(l.proverCircuitVersion!==d.proverCircuitVersion)throw new Error(`Redemption log of vault ${t} records proverCircuitVersion ${l.proverCircuitVersion} but the registration log says ${d.proverCircuitVersion}; refusing an inconsistent node.`);if(d.proverCircuitVersion!==c.proverCircuitVersion)throw new Error(`Registration log of vault ${t} records proverCircuitVersion ${d.proverCircuitVersion} but the stamped offchain params say ${c.proverCircuitVersion}; refusing an inconsistent node.`);const f=I.calculateBtcTxHash(s.depositorSignedPeginTx);for(const[b,_]of[["Registration",d.peginTxHash],["Redemption",l.peginTxHash]])if(_.toLowerCase()!==f.toLowerCase())throw new Error(`${b} log of vault ${t} records peginTxHash ${_} but the vault's depositor-signed PegIn hashes to ${f}; refusing an inconsistent node.`);const v=Y(I.derivePeginVaultId(f,n.depositor));if(v!==Y(t))throw new Error(`Depositor-signed PegIn of vault ${t} derives vault id ${v} with depositor ${n.depositor}; refusing an inconsistent node.`);for(const b of["offchainParamsVersion","universalChallengersVersion","appVaultKeepersVersion"]){if(d[b]!==s[b])throw new Error(`Registration log of vault ${t} records ${b} ${d[b]} but the vault record says ${s[b]}; refusing an inconsistent node.`);if(l[b]!==s[b])throw new Error(`Redemption log of vault ${t} records ${b} ${l[b]} but the vault record says ${s[b]}; refusing an inconsistent node.`)}const y=A.Transaction.fromHex(g.stripHexPrefix(s.depositorSignedPeginTx));if(y.ins.length!==1)throw new Error(`Depositor-signed PegIn of vault ${t} has ${y.ins.length} inputs; it spends Pre-PegIn ${s.prePeginTxHash} output ${s.htlcVout} with exactly one; refusing an inconsistent node.`);const m=Ne(y.ins[0].hash),$=y.ins[0].index;if(m!==g.stripHexPrefix(s.prePeginTxHash).toLowerCase()||$!==s.htlcVout)throw new Error(`Depositor-signed PegIn of vault ${t} spends ${m}:${$} but the vault record says Pre-PegIn ${s.prePeginTxHash} output ${s.htlcVout}; refusing an inconsistent node.`);const T=y.outs[h.PEGIN_VAULT_OUTPUT_INDEX];if(T===void 0)throw new Error(`Depositor-signed PegIn of vault ${t} has no output ${h.PEGIN_VAULT_OUTPUT_INDEX}; the Payout cannot spend the Vault UTXO.`);if(BigInt(T.value)!==n.amount)throw new Error(`Depositor-signed PegIn of vault ${t} pays ${T.value} sats to output ${h.PEGIN_VAULT_OUTPUT_INDEX} but the vault record says ${n.amount}; refusing an inconsistent node.`);return{context:{vaultId:t,depositorEthAddress:n.depositor,depositorBtcPubkey:a,registeredPayoutScriptPubKey:g.stripHexPrefix(d.depositorPayoutScriptPubKey),vaultProviderBtcPubkey:i.vaultProvider.operationBtcPubkey,vaultKeeperBtcPubkeys:[...i.vaultKeeperOperationKeysSorted],universalChallengerBtcPubkeys:[...i.universalChallengerOperationKeysSorted],txGraphVersion:M,proverCircuitVersion:c.proverCircuitVersion,vaultCoreVersion:s.vaultCoreVersion,claimableEventBlockNumber:l.blockNumber,peginVaultOutputValueSats:T.value,protocolFeeRate:c.feeRate,councilSize:c.securityCouncilKeys.length,timelockPegin:p,timelockAssert:Number(c.timelockAssert)},vault:o,registrationRecord:d,registrationRecords:u,participantKeys:i,offchainParams:c,depositorBtcPubKeyBytes32:n.depositorBtcPubKey,depositorWotsPkHash:s.depositorWotsPkHash,prePeginTxHash:s.prePeginTxHash,peginTxHash:f,vaultProvider:n.vaultProvider,htlcVout:s.htlcVout}}const It=8,Br=6e3,Vr=10*6e4,Nr=10;class De extends Error{constructor(t){super(t),this.name="PeginRegistrationMissingError"}}class Ke extends Error{constructor(t){super(t),this.name="PeginRegistrationNotFinalError"}}function Rt(e){return e instanceof De||e instanceof Error&&e.name==="PeginRegistrationMissingError"}function Or(e){return e instanceof Ke||e instanceof Error&&e.name==="PeginRegistrationNotFinalError"}function Je(e){const{currentBlock:t,createdAtBlock:r}=e,o=t-r+1n;return o<0n?0:Number(o)}async function Hr(e){const{vaultRegistryReader:t,getBlockNumber:r,vaultIds:o,required:n=It,pollIntervalMs:s=Br,timeoutMs:a=Vr,signal:i,onProgress:u}=e;if(o.length===0)throw new Error("waitForPeginRegistrationDepth requires at least one vault ID");const l=Date.now();let c=!1,p=0,d;for(;;){if(i!=null&&i.aborted)throw new Error(`Aborted while waiting for peg-in registration depth (${o.length} vault(s))`);if(Date.now()-l>=a)throw new Ke(`Peg-in registration did not reach ${n} Ethereum confirmations within ${a}ms. The registration transaction was submitted but is not yet final, so the Pre-PegIn Bitcoin transaction was never sent and no funds are at risk. Resume this deposit from the dashboard once the network settles.`+(d instanceof Error?` Last read error: ${d.message}`:""));try{const P=await r(),f=await Promise.all(o.map(y=>t.getVaultBasicInfo(y))),v=f.findIndex(y=>y.depositor===xe.zeroAddress||y.createdAt===0n);if(v!==-1){if(p+=1,!c&&p>Nr)throw new De(`Vault ${o[v]} is still not visible on-chain after ${p} reads — the registration does not exist.`);console.warn(`Peg-in registration for vault ${o[v]} is not visible in chain state at block ${P} — a lagging RPC backend or an Ethereum reorg. Still polling.`),u==null||u({confirmations:0,required:n})}else{c=!0,p=0,d=void 0;let y=f[0],m=Je({currentBlock:P,createdAtBlock:f[0].createdAt});for(const $ of f.slice(1)){const T=Je({currentBlock:P,createdAtBlock:$.createdAt});T<m&&(m=T,y=$)}if(u==null||u({confirmations:m,required:n}),m>=n)return{confirmations:m,basicInfo:y}}}catch(P){if(Rt(P))throw P;console.warn(`Registration-depth read failed (retrying in ${s}ms): `+(P instanceof Error?P.message:String(P))),d=P}await new Promise((P,f)=>{const v=()=>{clearTimeout(y),f(new Error(`Aborted while waiting for peg-in registration depth (${o.length} vault(s))`))},y=setTimeout(()=>{i==null||i.removeEventListener("abort",v),P()},s);i==null||i.addEventListener("abort",v,{once:!0})})}}const Dr=/^(?:[0-9a-f]{2})*$/,Kr=/^[0-9a-f]{64}$/,Ur=/^([0-9a-f]{64}):(0|[1-9][0-9]*)$/,Mr=-2147483648,Lr=2147483647,ve=4294967295,Qe=2,Ze=2,ie=0;class x extends Error{constructor(t){super(t),this.name="GraphFingerprintError"}}function C(e,t,r){const o=e[t];if(o===void 0)throw new x(`Graph tx ${r} is missing "${t}"`);return o}function ee(e,t){if(!Array.isArray(e))throw new x(`Graph tx ${t} is not an array`);return e}function N(e,t){if(e===null||typeof e!="object"||Array.isArray(e))throw new x(`Graph tx ${t} is not an object`);return e}function Q(e,t,r,o){if(typeof e!="number"||!Number.isSafeInteger(e)||e<r||e>o)throw new x(`Graph tx ${t} is not an integer in [${r}, ${o}]`);return e}function be(e,t){if(typeof e!="string"||!Dr.test(e))throw new x(`Graph tx ${t} is not lowercase hex without a prefix`);return K.Buffer.from(e,"hex")}function ae(e,t){if(typeof e!="string"||!Kr.test(e))throw new x(`Graph ${t} is not 32 bytes of lowercase hex`);return e}function et(e,t){const r=N(e,t),o=new A.Transaction;return o.version=Q(C(r,"version",t),`${t}.version`,Mr,Lr),o.locktime=Q(C(r,"lock_time",t),`${t}.lock_time`,0,ve),ee(C(r,"input",t),`${t}.input`).forEach((n,s)=>{const a=`${t}.input[${s}]`,i=N(n,a),u=C(i,"previous_output",a),l=typeof u=="string"&&Ur.exec(u);if(!l)throw new x(`Graph tx ${a}.previous_output is not "<txid>:<vout>"`);const c=Q(Number(l[2]),`${a}.previous_output vout`,0,ve);o.addInput(K.Buffer.from(l[1],"hex").reverse(),c,Q(C(i,"sequence",a),`${a}.sequence`,0,ve),be(C(i,"script_sig",a),`${a}.script_sig`)),o.ins[s].witness=ee(C(i,"witness",a),`${a}.witness`).map((p,d)=>be(p,`${a}.witness[${d}]`))}),ee(C(r,"output",t),`${t}.output`).forEach((n,s)=>{const a=`${t}.output[${s}]`,i=N(n,a);o.addOutput(be(C(i,"script_pubkey",a),`${a}.script_pubkey`),Q(C(i,"value",a),`${a}.value`,0,Number.MAX_SAFE_INTEGER))}),new Uint8Array(o.toBuffer())}function L(e,t){const r=g.stripHexPrefix(e).toLowerCase();let o;try{o=A.Transaction.fromHex(r)}catch(n){throw new x(`Presign ${t} is not one transaction: ${n instanceof Error?n.message:String(n)}`)}if(o.toHex()!==r)throw new x(`Presign ${t} is not a canonical transaction encoding`);return o}function Bt(e,t){const r=e.ins[t];if(r)return{txid:K.Buffer.from(r.hash).reverse().toString("hex"),vout:r.index}}function Vt(e,t){if(!e.outs[ie])throw new x(`Presign ${t}.claim_tx must have output ${ie}`)}function Fr(e,t,r){if(e.ins.length!==1)throw new x(`Presign ${r}.claim_tx must have exactly one input, got ${e.ins.length}`);Vt(e,r);const o=Bt(e,0);if((o==null?void 0:o.txid)!==t||o.vout!==w.PEGIN_DEPOSITOR_CLAIM_VOUT){const n=o?`${o.txid}:${o.vout}`:"no input";throw new x(`Presign ${r}.claim_tx must spend ${t}:${w.PEGIN_DEPOSITOR_CLAIM_VOUT}, got ${n}`)}}function Ue(e,t,r){const o=Bt(e,0);if((o==null?void 0:o.txid)!==t||o.vout!==ie){const n=o?`${o.txid}:${o.vout}`:"no input";throw new x(`Presign ${r}.assert_tx input 0 must spend ${t}:${ie}, got ${n}`)}}function Nt(e){const t=L(e.peginTxHex,`${e.path}.pegin_tx`),r=L(e.claimTxHex,`${e.path}.claim_tx`),o=L(e.assertTxHex,`${e.path}.assert_tx`);return{peginTx:t,claimTx:r,assertTx:o}}function Xr(e){const t=L(e.claimTxHex,`${e.path}.claim_tx`),r=L(e.assertTxHex,`${e.path}.assert_tx`);Vt(t,e.path),Ue(r,t.getId(),e.path)}function qr(e){const{peginTx:t,claimTx:r,assertTx:o}=Nt(e);Fr(r,t.getId(),e.path),Ue(o,r.getId(),e.path)}function Gr(e,t){const[r,...o]=e.ins;if(!r||o.length>0)throw new x(`Presign claim_tx must have exactly one input, got ${e.ins.length}`);const n=K.Buffer.from(r.hash).reverse().toString("hex");if(n!==t||r.index!==w.PEGIN_DEPOSITOR_CLAIM_VOUT)throw new x(`Presign claim_tx must spend ${t}:${w.PEGIN_DEPOSITOR_CLAIM_VOUT}, got ${n}:${r.index}`);if(e.version!==Qe)throw new x(`Presign claim_tx version must be ${Qe}, got ${e.version}`);if(r.witness.length>0)throw new x(`Presign claim_tx input must have an empty witness, got ${r.witness.length} item(s)`);if(e.outs.length!==Ze)throw new x(`Presign claim_tx must have exactly ${Ze} outputs, got ${e.outs.length}`)}function Ot(e){const t=[...e.challengers].sort((o,n)=>o.pubkey<n.pubkey?-1:o.pubkey>n.pubkey?1:0),r=[e.peginTx,e.claimTx,e.assertTx,e.payoutTx];return t.forEach((o,n)=>{const s=ae(o.pubkey,"challenger pubkey");if(n>0&&t[n-1].pubkey===s)throw new x(`Graph lists challenger ${s} twice`);r.push(J.hexToBytes(s),o.nopayoutTx);for(const a of o.outputLabelHashes)r.push(J.hexToBytes(ae(a,"output_label_hashes entry")))}),J.bytesToHex(J.sha256(J.concatBytes(...r)))}function zr(e){const t=g.stripHexPrefix(e.peginTxid).toLowerCase(),{peginTx:r,claimTx:o,assertTx:n}=Nt({peginTxHex:e.peginTxHex,claimTxHex:e.claimTxHex,assertTxHex:e.assertTxHex,path:"depositor_graph"});if(r.getId()!==t)throw new x(`Presign pegin_tx hashes to ${r.getId()}, expected ${t}`);Gr(o,t),Ue(n,o.getId(),"depositor_graph");const s=a=>new Uint8Array(a.toBuffer());return Ot({peginTx:s(r),claimTx:s(o),assertTx:s(n),payoutTx:s(L(e.payoutTxHex,"payout_tx")),challengers:e.challengers.map(a=>({pubkey:g.canonicalizeBtcPubkey(a.challenger_pubkey),nopayoutTx:s(L(a.nopayout_tx.tx_hex,"nopayout_tx")),outputLabelHashes:a.output_label_hashes.map(i=>g.stripHexPrefix(i).toLowerCase())}))})}function Ht(e){const t=o=>et(N(C(e,o,"graph"),o).tx,o),r=N(C(e,"challenger_subgraphs","graph"),"challenger_subgraphs");return Ot({peginTx:t("pegin_tx"),claimTx:t("claim_tx"),assertTx:t("assert_tx"),payoutTx:t("payout_tx"),challengers:Object.entries(r).map(([o,n])=>{const s=`challenger_subgraphs[${o}]`,a=N(n,s);return{pubkey:o,nopayoutTx:et(N(C(a,"nopayout_tx",s),`${s}.nopayout_tx`).tx,`${s}.nopayout_tx`),outputLabelHashes:ee(C(a,"output_label_hashes",s),`${s}.output_label_hashes`).map((i,u)=>ae(i,`${s}.output_label_hashes[${u}]`))}})})}function Yr(e){const t=N(C(e,"challenger_pubkeys","graph"),"challenger_pubkeys"),r=new Set;for(const o of["local","universal"])ee(C(t,o,"challenger_pubkeys"),`challenger_pubkeys.${o}`).forEach((n,s)=>{const a=ae(n,`challenger_pubkeys.${o}[${s}]`);if(r.has(a))throw new x(`Graph declares challenger ${a} more than once`);r.add(a)});return r}function Wr(e,t){const r=Ht(e);if(r!==t)throw new x(`Graph fingerprint ${r} does not match the presign fingerprint ${t}`);const o=Object.keys(N(e.challenger_subgraphs,"challenger_subgraphs")),n=Yr(e);if(o.length!==n.size||o.some(s=>!n.has(s)))throw new x(`Graph challenger_subgraphs keys ${o.join(", ")} do not match challenger_pubkeys ${[...n].join(", ")}`)}const jr=1;function Jr(e,t,r){const o=r.map(p=>g.stripHexPrefix(p).toLowerCase()),n=t.filter(p=>o.includes(p));if(n.length>0)throw new Error(`Cannot validate challenger set: vault keepers and universal challengers overlap (${n.join(", ")})`);const s=[...t,...o],a=e.map(p=>g.stripHexPrefix(p.challenger_pubkey).toLowerCase()),i=new Set(a);if(i.size!==a.length)throw new Error("Depositor graph contains duplicate challenger entries in challenger_presign_data");const u=new Set(s),l=s.filter(p=>!i.has(p)),c=a.filter(p=>!u.has(p));if(l.length>0||c.length>0)throw new Error("Depositor graph challenger set does not match expected (local ∪ universal)"+(l.length>0?` (missing: ${l.join(", ")})`:"")+(c.length>0?` (unexpected: ${c.join(", ")})`:""));return g.getSortedXOnlyPubkeys(s)}function Qr(e,t,r){const o=r>=h.ASSERT_MARKER_FIRST_VAULT_CORE_VERSION?1:0,n=h.ASSERT_NON_CHALLENGER_OUTPUT_COUNT+h.CHALLENGE_ASSERT_CONNECTORS_PER_CHALLENGER*t+o;if(e.outs.length!==n)throw new Error(`Assert must have ${n} outputs for ${t} challengers (vault core version ${r}), got ${e.outs.length}`)}async function Dt(e,t){const r=w.deriveLocalChallengers({claimerBtcPubkey:t.depositorBtcPubkey,depositorBtcPubkey:t.depositorBtcPubkey,vaultProviderBtcPubkey:t.vaultProviderBtcPubkey,vaultKeeperBtcPubkeys:t.vaultKeeperBtcPubkeys}),o=Jr(e.challenger_presign_data,r,t.universalChallengerBtcPubkeys),n=g.stripHexPrefix(t.depositorBtcPubkey),s=A.Transaction.fromHex(g.stripHexPrefix(e.assert_tx.tx_hex));Qr(s,o.length,t.vaultCoreVersion);const a=[];for(const i of e.challenger_presign_data){const u=g.stripHexPrefix(i.challenger_pubkey),l=o.indexOf(u.toLowerCase()),c=await Zr({challenger:i,challengerPubkey:u,challengerIndex:l,challengerCount:o.length,claimerPubkey:n,assertTx:s,ctx:t});a.push({challenger:i,challengerPubkey:u,prevouts:c})}return{localChallengers:r,noPayouts:a}}async function Zr(e){const{challenger:t,challengerPubkey:r,challengerIndex:o,challengerCount:n,claimerPubkey:s,assertTx:a,ctx:i}=e;H.assertNoPayoutOutputMatchesChallenger(t.nopayout_tx.tx_hex,r,i.network);const u=A.Transaction.fromHex(g.stripHexPrefix(t.nopayout_tx.tx_hex)),l=A.Transaction.fromHex(g.stripHexPrefix(t.challenge_assert_x_tx.tx_hex)),c=A.Transaction.fromHex(g.stripHexPrefix(t.challenge_assert_y_tx.tx_hex)),p=await k.getChallengeAssertOutputScriptPubKey({txGraphVersion:i.vaultCoreVersion,claimer:s,challenger:r,timelockChallengeAssert:i.timelockChallengeAssert,outputLabelHashes:t.output_label_hashes.map(P=>P.toLowerCase()),network:i.network});for(const[P,f]of[["X",l],["Y",c]])H.assertChallengeAssertIsCanonical({challengeAssertTx:f,assertTx:a,half:P,challengerIndex:o,challengerCount:n,challengerPubkey:r,outputConnectorScriptPubKey:p});const d=[a.outs[h.ASSERT_PAYOUT_OUTPUT_INDEX],l.outs[h.CHALLENGE_ASSERT_OUTPUT_CONNECTOR_INDEX],c.outs[h.CHALLENGE_ASSERT_OUTPUT_CONNECTOR_INDEX]];return H.assertCanonicalNoPayoutShape({noPayoutTx:u,assertTxid:a.getId(),challengeAssertXTxid:l.getId(),challengeAssertYTxid:c.getId(),timelockChallengeAssert:i.timelockChallengeAssert,prevoutValues:[d[0].value,d[1].value,d[2].value]}),d.map(P=>({script_pubkey:g.uint8ArrayToHex(new Uint8Array(P.script)),value:P.value}))}async function eo(e,t,r){const o=[],n=[],s=[],{localChallengers:a,noPayouts:i}=await Dt(e,r),u=await w.buildPayoutPsbt({vaultCoreVersion:r.vaultCoreVersion,vkClaimerPayoutScriptPubKeys:r.vkClaimerPayoutScriptPubKeys,vpCommissionScriptPubKey:r.vpCommissionScriptPubKey,payoutTxHex:e.payout_tx.tx_hex,peginTxHex:r.peginTxHex,assertTxHex:e.assert_tx.tx_hex,timelockAssert:r.timelockAssert,depositorBtcPubkey:r.depositorBtcPubkey,vaultProviderBtcPubkey:r.vaultProviderBtcPubkey,vaultKeeperBtcPubkeys:r.vaultKeeperBtcPubkeys,universalChallengerBtcPubkeys:r.universalChallengerBtcPubkeys,timelockPegin:r.timelockPegin,network:r.network,claimerBtcPubkey:r.depositorBtcPubkey,registeredPayoutScriptPubKey:r.registeredPayoutScriptPubKey,commissionBps:jr,protocolFeeRate:r.protocolFeeRate,councilMembers:r.councilMembers,councilQuorum:r.councilQuorum});o.push(u.psbtHex),n.push(z.createTaprootScriptPathSignOptions(t,h.DEPOSITOR_SIGNED_INPUT_COUNT));const l=g.stripHexPrefix(r.depositorBtcPubkey);for(const{challenger:c,challengerPubkey:p,prevouts:d}of i){const P=o.length,f=await H.buildNoPayoutPsbt({noPayoutTxHex:c.nopayout_tx.tx_hex,challengerPubkey:p,prevouts:d,connectorParams:{txGraphVersion:r.vaultCoreVersion,claimer:l,localChallengers:a,universalChallengers:r.universalChallengerBtcPubkeys,timelockAssert:r.timelockAssert,councilMembers:r.councilMembers,councilQuorum:r.councilQuorum}});o.push(f),n.push(z.createTaprootScriptPathSignOptions(t,h.DEPOSITOR_SIGNED_INPUT_COUNT)),s.push({challengerPubkey:p,noPayoutIdx:P})}return{psbtHexes:o,signOptions:n,challengerEntries:s}}function to(e,t,r){w.assertPsbtUnsignedTxMatches(e[0]);const n=w.extractPayoutSignature(e[0].returnedPsbtHex,r);w.assertScriptPathSchnorrSignature({requestedPsbtHex:e[0].requestedPsbtHex,signatureHex:n,signerXOnlyPubkeyHex:r,inputIndex:0});const s={};for(const a of t){w.assertPsbtUnsignedTxMatches(e[a.noPayoutIdx]);const i=w.extractPayoutSignature(e[a.noPayoutIdx].returnedPsbtHex,r);w.assertScriptPathSchnorrSignature({requestedPsbtHex:e[a.noPayoutIdx].requestedPsbtHex,signatureHex:i,signerXOnlyPubkeyHex:r,inputIndex:0}),s[a.challengerPubkey]={nopayout_signature:i}}return{payout_signatures:{payout_signature:n},per_challenger:s}}async function Kt(e){const{depositorGraph:t,btcWallet:r,signingContext:o}=e;qr({peginTxHex:o.peginTxHex,claimTxHex:t.claim_tx.tx_hex,assertTxHex:t.assert_tx.tx_hex,path:"depositor_graph"});const n=await r.getPublicKeyHex(),{depositorPubkey:s}=g.validateWalletPubkey(n,g.stripHexPrefix(o.depositorBtcPubkey)),{psbtHexes:a,signOptions:i,challengerEntries:u}=await eo(t,n,o),l=await F.signPsbtsWithFallback(r,a,i),c=a.map((p,d)=>({requestedPsbtHex:p,returnedPsbtHex:l[d]}));return to(c,u,s)}const ro=1e4,q=10;async function Me(e){const{statusReader:t,vaultId:r,peginTxid:o,targetStatuses:n,timeoutMs:s,pollIntervalMs:a=ro,signal:i}=e,u=Date.now();for(;;){if(i!=null&&i.aborted)throw new Error(`Polling aborted for vault ${r.slice(0,q)}… (target: ${[...n].join(", ")})`);if(Date.now()-u>=s)throw new Error(`Polling timeout after ${s}ms for vault ${r.slice(0,q)}… (target: ${[...n].join(", ")})`);try{const l=await t.getPeginStatusByVaultId({vault_id:r},i);if(S.vaultIdKey(l.vault_id)!==S.vaultIdKey(r))throw new Error(`getPeginStatusByVaultId returned status for vault ${l.vault_id.slice(0,q)}…, requested ${r.slice(0,q)}…`);if(l.pegin_txid.toLowerCase()!==o.toLowerCase())throw new Error(`getPeginStatusByVaultId returned status for pegin ${l.pegin_txid.slice(0,8)}…, requested ${o.slice(0,8)}…`);const c=l.status;if(n.has(c)||c===S.DaemonStatus.ACTIVATED)return c;if(c===S.DaemonStatus.EXPIRED||S.VP_TERMINAL_FAILURE_STATUSES.has(c))throw new Error(`Vault ${r.slice(0,q)}… reached terminal status "${c}" while waiting for ${[...n].join(", ")}`)}catch(l){if(!(l instanceof S.JsonRpcError&&l.code===S.RpcErrorCode.PEGIN_NOT_FOUND))throw l}await new Promise((l,c)=>{const p=()=>{clearTimeout(d),c(new Error(`Polling aborted for vault ${r.slice(0,q)}… (target: ${[...n].join(", ")})`))},d=setTimeout(()=>{i==null||i.removeEventListener("abort",p),l()},a);i==null||i.addEventListener("abort",p,{once:!0})})}}const oo=1200*1e3,Ut=new Set([S.DaemonStatus.PENDING_ACKS,S.DaemonStatus.PENDING_ACTIVATION,S.DaemonStatus.ACTIVATED_PENDING_BROADCAST,S.DaemonStatus.ACTIVATED]),no=new Set([S.DaemonStatus.PENDING_DEPOSITOR_SIGNATURES,...Ut]);function so(e){return e.map(t=>({claimerPubkeyXOnly:g.processPublicKeyToXOnly(t.claimer_pubkey),payoutTxHex:t.payout_tx.tx_hex,assertTxHex:t.assert_tx.tx_hex}))}function O(e){return g.processPublicKeyToXOnly(e).toLowerCase()}function io(e,t){const r=(u,l,c)=>{throw new Error(`Deposit terms ${u} (${String(l)}) does not match the vault's version-locked signing context (${String(c)}); refusing to sign payouts against terms that describe a different graph.`)},o=[["protocolFeeRate",e.protocolFeeRate,t.protocolFeeRate],["vaultCoreVersion",e.vaultCoreVersion,t.vaultCoreVersion],["timelockPegin",e.timelockPegin,t.timelockPegin],["timelockAssert",e.timelockAssert,t.timelockAssert]];for(const[u,l,c]of o)l!==c&&r(u,l,c);const n=u=>u.map(O).sort(),s=(u,l)=>{const c=n(u),p=n(l);return c.length===p.length&&c.every((d,P)=>d===p[P])};s(e.vaultKeeperBtcPubkeys,t.vaultKeeperBtcPubkeys)||r("vaultKeeperBtcPubkeys",e.vaultKeeperBtcPubkeys.join(","),t.vaultKeeperBtcPubkeys.join(",")),s(e.universalChallengerBtcPubkeys,t.universalChallengerBtcPubkeys)||r("universalChallengerBtcPubkeys",e.universalChallengerBtcPubkeys.join(","),t.universalChallengerBtcPubkeys.join(","));const a=O(t.vaultProviderBtcPubkey),i=e.vaults.map(u=>O(u.vaultProviderBtcPubkey));i.includes(a)||r("vaults[].vaultProviderBtcPubkey",i.join(",")||"<no vaults>",t.vaultProviderBtcPubkey)}function ao(e,t,r,o){const n=O(o),s=[O(t),...r.map(O)],a=new Set(s);if(a.size!==s.length)throw new Error("Cannot validate claimer set: signing context contains duplicate vault provider or vault keeper key");if(a.has(n))throw new Error("Cannot validate claimer set: depositor key overlaps with vault provider or vault keeper set");const i=e.map(d=>O(d.claimer_pubkey));if(new Set(i).size!==i.length)throw new Error("Presign response contains duplicate claimer entries");const u=i.filter(d=>d!==n),l=new Set(u),c=s.filter(d=>!l.has(d)),p=u.filter(d=>!a.has(d));if(c.length>0||p.length>0)throw new Error("Presign response claimer set does not match expected (vault provider ∪ vault keepers)"+(c.length>0?` (missing: ${c.join(", ")})`:"")+(p.length>0?` (unexpected: ${p.join(", ")})`:""))}function tt(e,t){return{vaultCoreVersion:t.vaultCoreVersion,payoutTxHex:e.payoutTxHex,peginTxHex:t.peginTxHex,assertTxHex:e.assertTxHex,vaultProviderBtcPubkey:t.vaultProviderBtcPubkey,vaultKeeperBtcPubkeys:t.vaultKeeperBtcPubkeys,universalChallengerBtcPubkeys:t.universalChallengerBtcPubkeys,depositorBtcPubkey:t.depositorBtcPubkey,timelockPegin:t.timelockPegin,timelockAssert:t.timelockAssert,registeredPayoutScriptPubKey:t.registeredPayoutScriptPubKey,claimerBtcPubkey:e.claimerPubkeyXOnly,commissionBps:t.commissionBps,protocolFeeRate:t.protocolFeeRate,councilMembers:t.councilMembers,councilQuorum:t.councilQuorum,vkClaimerPayoutScriptPubKeys:t.vkClaimerPayoutScriptPubKeys,vpCommissionScriptPubKey:t.vpCommissionScriptPubKey}}async function uo(e,t,r,o){const n=new F.PayoutManager({network:t.network,btcWallet:e}),s=r.length;o==null||o(0,s);let a;if(n.supportsBatchSigning())a=(await n.signPayoutTransactionsBatch(r.map(l=>tt(l,t)))).map(l=>l.payoutSignature);else{a=[];for(let u=0;u<r.length;u++){o==null||o(u,s);const l=await n.signPayoutTransaction(tt(r[u],t));a.push(l.signature)}}const i={};for(let u=0;u<r.length;u++)i[r[u].claimerPubkeyXOnly]={payout_signature:a[u]};return o==null||o(s,s),i}async function co(e){const{statusReader:t,presignClient:r,btcWallet:o,vaultId:n,peginTxid:s,depositorPk:a,signingContext:i,depositTerms:u,timeoutMs:l=oo,signal:c,onProgress:p,recordGraphFingerprint:d}=e,P=await Me({statusReader:t,vaultId:n,peginTxid:s,targetStatuses:no,timeoutMs:l,signal:c});if(Ut.has(P))return;c==null||c.throwIfAborted(),u!==void 0&&io(u,i);const f=F.supportsDepositApproval(o)?o:void 0;let v;if(f){if(!u)throw new Error("runDepositorPresignFlow: this wallet requires approved deposit terms but none were provided. Fresh deposits must pass PreparePeginResult.depositTerms; resume flows must rebuild them from on-chain state (the vault app's rebuildDepositTerms).");v=u}const y=await r.requestDepositorPresignTransactions({pegin_txid:s,depositor_pk:a},c);c==null||c.throwIfAborted(),y.txs.forEach((U,te)=>{Xr({claimTxHex:U.claim_tx.tx_hex,assertTxHex:U.assert_tx.tx_hex,path:`txs[${te}]`})});const m=zr({peginTxid:s,peginTxHex:i.peginTxHex,claimTxHex:y.depositor_graph.claim_tx.tx_hex,assertTxHex:y.depositor_graph.assert_tx.tx_hex,payoutTxHex:y.depositor_graph.payout_tx.tx_hex,challengers:y.depositor_graph.challenger_presign_data}),$={vaultCoreVersion:i.vaultCoreVersion,peginTxHex:i.peginTxHex,depositorBtcPubkey:a,vaultProviderBtcPubkey:i.vaultProviderBtcPubkey,vaultKeeperBtcPubkeys:i.vaultKeeperBtcPubkeys,universalChallengerBtcPubkeys:i.universalChallengerBtcPubkeys,timelockPegin:i.timelockPegin,timelockAssert:i.timelockAssert,timelockChallengeAssert:i.timelockChallengeAssert,councilMembers:i.councilMembers,councilQuorum:i.councilQuorum,network:i.network,registeredPayoutScriptPubKey:i.registeredPayoutScriptPubKey,protocolFeeRate:i.protocolFeeRate,vkClaimerPayoutScriptPubKeys:i.vkClaimerPayoutScriptPubKeys,vpCommissionScriptPubKey:i.vpCommissionScriptPubKey};await Dt(y.depositor_graph,$),c==null||c.throwIfAborted();const T=O(a);ao(y.txs,i.vaultProviderBtcPubkey,i.vaultKeeperBtcPubkeys,a);const b=y.txs.filter(U=>O(U.claimer_pubkey)!==T),_=so(b);f&&v&&(typeof f.validateDepositTerms=="function"&&await f.validateDepositTerms(v),await f.approveDepositTerms(v)),c==null||c.throwIfAborted();const B=await uo(o,i,_,p);c==null||c.throwIfAborted();const E=await Kt({depositorGraph:y.depositor_graph,btcWallet:o,signingContext:$});c==null||c.throwIfAborted(),await d(m),c==null||c.throwIfAborted();const W={...B};W[g.stripHexPrefix(a)]=E.payout_signatures,await r.submitDepositorPresignatures({pegin_txid:s,depositor_pk:a,signatures:W,depositor_claimer_presignatures:E},c)}const lo=300*1e3,po=new Set([S.DaemonStatus.PENDING_DEPOSITOR_WOTS_PK,...S.POST_WOTS_STATUSES]);async function ho(e){const{statusReader:t,wotsSubmitter:r,vaultId:o,peginTxid:n,depositorPk:s,wotsPublicKeys:a,timeoutMs:i=lo,signal:u}=e;u==null||u.throwIfAborted();const l=await Me({statusReader:t,vaultId:o,peginTxid:n,targetStatuses:po,timeoutMs:i,signal:u});S.POST_WOTS_STATUSES.has(l)||(u==null||u.throwIfAborted(),await r.submitDepositorWotsKey({pegin_txid:n,depositor_pk:s,wots_public_keys:a},u))}function oe(e){return e.registration||e.operation}function Mt(e,t,r){const o=g.canonicalizeBtcPubkey(e);return{registration:o===g.canonicalizeBtcPubkey(t),operation:o===g.canonicalizeBtcPubkey(r)}}function Ee(e,t,r){const o=me(e);return{registration:rt(o,me(t)),operation:rt(o,me(r))}}function me(e){return e.map(g.canonicalizeBtcPubkey).sort()}function rt(e,t){return e.length===t.length&&e.every((r,o)=>r===t[o])}async function go(e){const{vaultProviderEthAddress:t,hintBtcPubkey:r,registrationBtcPubkey:o,readCurrentOperationBtcPubkey:n,context:s}=e;if(!r)return;const a=g.canonicalizeBtcPubkey(r);if(a===g.canonicalizeBtcPubkey(o))return;const i=g.canonicalizeBtcPubkey(await n());if(a!==i)throw new Error(`Vault provider BTC pubkey mismatch for ${t}: indexer hint matches neither the registration key nor the current operation key on-chain.${s?` ${s}`:""}`)}class ue extends Error{constructor(t){super(t),this.name="ApplicationEntryPointMismatchError"}}function fo(e){return e instanceof ue||e instanceof Error&&e.name==="ApplicationEntryPointMismatchError"}const ot=e=>e.map(g.canonicalizeBtcPubkey).sort();async function Po(e){const{vaultRegistryReader:t,vaultKeeperReader:r,universalChallengerReader:o,vaultProviderEthAddress:n,applicationEntryPoint:s,expectedVaultProviderBtcPubkey:a,expectedVaultKeeperBtcPubkeys:i,expectedUniversalChallengerBtcPubkeys:u,operationKeyReader:l,onIndexerServingOperationKeys:c,onIndexerHintsInconsistent:p,blockNumber:d}=e,[P,f,v,y]=await Promise.all([t.getVaultProviderApplication(n,d),t.getVaultProviderGenesisBtcPubKey(n,d),o.getLatestUniversalChallengersVersion(d),o.getCurrentUcKeyEpoch(d)]);if(!xe.isAddress(s,{strict:!1}))throw new ue(`The application entry point this deposit was prepared for is not a valid address: ${s}`);if(!xe.isAddressEqual(P,s))throw new ue(`Vault provider ${n} is registered to application ${P}, but this deposit was prepared for ${s}. Refusing to build: the vault keeper roster, its version, and the keeper key epoch would all resolve against a different application than the one selected.`);const[m,$]=await Promise.all([r.getCurrentVaultKeepersVersion(P,d),r.getCurrentAppKeeperKeyEpoch(P,d)]),[T,b]=await Promise.all([r.getVaultKeepersByVersion(P,m,d),o.getUniversalChallengersByVersion(v,d)]),_={vaultProvider:g.canonicalizeBtcPubkey(f),vaultKeepers:ot(T.map(R=>R.btcPubKey)),universalChallengers:ot(b.map(R=>R.btcPubKey))},B=await kt({operationKeyReader:l,query:{vaultProviderEthAddress:n,vaultProviderGenesisBtcPubkey:`0x${f}`,applicationEntryPoint:P,vaultKeepers:T,universalChallengers:b},blockNumber:d}),E={vaultProvider:B.vaultProvider.operationBtcPubkey,vaultKeepers:[...B.vaultKeeperOperationKeysSorted],universalChallengers:[...B.universalChallengerOperationKeysSorted]},W=Mt(a,_.vaultProvider,E.vaultProvider),U=Ee(i,_.vaultKeepers,E.vaultKeepers),te=Ee(u,_.universalChallengers,E.universalChallengers);if(!oe(W))throw new Error(`Vault provider BTC pubkey indexer hint does not match BTCVaultRegistry for ${n}. Refresh and try again.`);if(!oe(U))throw new Error(`Vault keeper BTC pubkeys (v${m}) indexer set does not match ApplicationRegistry on-chain set. Refresh and try again.`);if(!oe(te))throw new Error(`Universal challenger BTC pubkeys (v${v}) indexer set does not match ProtocolParams on-chain set. Refresh and try again.`);const qe=[W,U,te],Gt=qe.some(R=>R.registration&&!R.operation),Ge=qe.some(R=>R.operation&&!R.registration);if(Gt&&Ge){const R=`Indexer participant hints are internally inconsistent for vault provider ${n}: some roles match the registration keys while others match the rotated operation keys.`;throw p==null||p(R),new Error(`${R} Refresh and try again.`)}return Ge&&(c==null||c(`Indexer is serving rotated operation keys for vault provider ${n}`)),{vaultProviderBtcPubkeyXOnly:E.vaultProvider,vaultKeeperBtcPubkeysSorted:E.vaultKeepers,universalChallengerBtcPubkeysSorted:E.universalChallengers,expectedAppVaultKeepersVersion:m,expectedUniversalChallengersVersion:v,appKeeperKeyEpoch:$,ucKeyEpoch:y,registrationKeys:_,participantKeys:B}}function yo(e){return/^[0-9a-fA-F]{64}$/.test(e)}function vo(e){const{amountSats:t,minDeposit:r,maxDeposit:o,btcBalance:n,estimatedFeeSats:s,depositorClaimValue:a}=e;return!(t<=0n||t<r||o&&o>0n&&t>o||s==null||a==null||t+s+a>n)}function bo(e,t,r){return e<=0n?{valid:!1,error:"Deposit amount must be greater than zero"}:e<t?{valid:!1,error:`Minimum deposit is ${g.formatSatoshisToBtc(t)} BTC`}:r&&r>0n&&e>r?{valid:!1,error:`Maximum deposit is ${g.formatSatoshisToBtc(r)} BTC`}:{valid:!0}}function mo(e){const{amount:t,effectiveRemaining:r}=e;return r===null?{valid:!0}:r===0n?{valid:!1,error:"Supply cap reached — deposits temporarily paused"}:t>r?{valid:!1,error:`Vault size exceeds remaining capacity (${g.formatSatoshisToBtc(r)} BTC)`}:{valid:!0}}function wo(e,t){if(!e||e.length===0)return{valid:!1,error:"At least one vault provider must be selected"};const r=t.map(n=>n.toLowerCase());return e.filter(n=>!r.includes(n.toLowerCase())).length>0?{valid:!1,error:"Invalid vault provider selected"}:{valid:!0}}function Lt(e,t,r){if(!e||e.length===0)return{valid:!1,error:"At least one vault amount required"};for(let o=0;o<e.length;o++){const n=e[o];if(n<=0n)return{valid:!1,error:`Vault ${o+1} amount must be positive`};if(t&&n<t)return{valid:!1,error:`Vault ${o+1} amount ${g.formatSatoshisToBtc(n)} BTC is below minimum deposit ${g.formatSatoshisToBtc(t)} BTC`};if(r&&n>r)return{valid:!1,error:`Vault ${o+1} amount ${g.formatSatoshisToBtc(n)} BTC exceeds maximum deposit ${g.formatSatoshisToBtc(r)} BTC`}}return{valid:!0}}function Ft(e){const t=g.stripHexPrefix(e);return yo(t)?{valid:!0}:{valid:!1,error:"Invalid pubkey format: must be 64 hex characters (32-byte x-only public key, no 0x prefix)"}}function xo(e){if(!e||e.length===0)throw new Error("No vault keepers available. The system requires at least one vault keeper to create a deposit.")}function Eo(e){if(!e||e.length===0)throw new Error("No universal challengers available. The system requires at least one universal challenger to create a deposit.")}function To(e){if(e.length===0)throw new Error("No spendable UTXOs available")}function _o(e){const{vaultAmounts:t,confirmedUTXOs:r,vaultProviderBtcPubkey:o,vaultKeeperBtcPubkeys:n,universalChallengerBtcPubkeys:s,minDeposit:a,maxDeposit:i}=e,u=Lt(t,a,i);if(!u.valid)throw new Error(u.error);const l=Ft(o);if(!l.valid)throw new Error(l.error);xo(n),Eo(s),To(r)}class Le extends Error{constructor(t){super(t),this.name="ParticipantKeyDriftError"}}function Co(e){return e instanceof Le||e instanceof Error&&e.name==="ParticipantKeyDriftError"}function nt(e,t,r){return t.length===r.length&&t.every((o,n)=>o===r[n])?null:`${e} expected [${t.join(", ")}], got [${r.join(", ")}]`}async function Ao(e){const{vaultRegistryReader:t,operationKeyReader:r,vaultIds:o,expected:n}=e,s=n.query;if(o.length===0)return;const a=await t.getVaultKeyEpochsBatch(o),i=[];for(const[u,l]of a.entries()){const c=o[u];let p;try{p=await He({operationKeyReader:r,query:s,epochs:l})}catch(f){i.push(`vault ${c}: could not resolve participants at frozen epochs (vp=${l.vpKeyEpoch}, keeper=${l.appKeeperKeyEpoch}, uc=${l.ucKeyEpoch}): ${f.message}`);continue}p.vaultProvider.operationBtcPubkey!==n.vaultProvider.operationBtcPubkey&&i.push(`vault ${c}: vault provider key expected ${n.vaultProvider.operationBtcPubkey}, got ${p.vaultProvider.operationBtcPubkey}`);const d=nt(`vault ${c}: vault keeper keys`,n.vaultKeeperOperationKeysSorted,p.vaultKeeperOperationKeysSorted);d&&i.push(d);const P=nt(`vault ${c}: universal challenger keys`,n.universalChallengerOperationKeysSorted,p.universalChallengerOperationKeysSorted);P&&i.push(P)}if(i.length>0)throw new Le(`Aborting BTC broadcast: participant operation keys changed during registration (${i.join("; ")}). The Pre-PegIn was not broadcast; the registered ETH vault will time out per protocol rules.`)}class Fe extends Error{constructor(t){super(t),this.name="RegisteredVaultVersionMismatchError"}}function So(e){return e instanceof Fe||e instanceof Error&&e.name==="RegisteredVaultVersionMismatchError"}async function ko(e){const{vaultRegistryReader:t,vaultIds:r,expectedOffchainParamsVersion:o,expectedAppVaultKeepersVersion:n,expectedUniversalChallengersVersion:s,expectedVaultCoreVersion:a}=e,i=await t.getProtocolInfoBatch(r),u=[];if(i.forEach((l,c)=>{const p=r[c];l.offchainParamsVersion!==o&&u.push(`vault ${p}: offchainParams expected v${o}, got v${l.offchainParamsVersion}`),l.appVaultKeepersVersion!==n&&u.push(`vault ${p}: appVaultKeepers expected v${n}, got v${l.appVaultKeepersVersion}`),l.universalChallengersVersion!==s&&u.push(`vault ${p}: universalChallengers expected v${s}, got v${l.universalChallengersVersion}`),l.vaultCoreVersion!==a&&u.push(`vault ${p}: vaultCoreVersion expected v${a} (build-time active), got v${l.vaultCoreVersion}`)}),u.length>0)throw new Fe(`Aborting BTC broadcast: signer-set or offchain-params versions changed during registration (${u.join("; ")}). The Pre-PegIn was not broadcast; the registered ETH vault will time out per protocol rules.`)}class Xt extends Error{constructor(r,o){super(`Refund not yet mature (BIP68 not final): ${o.message}`);j(this,"vaultId");j(this,"cause");this.name="BIP68NotMatureError",this.vaultId=r,this.cause=o}}const $o=/^0x[0-9a-fA-F]{64}$/,Io=/^(?:0x)?(?:[0-9a-fA-F]{2})+$/,qt=/^(?:0x)?(?:[0-9a-fA-F]{64}|[0-9a-fA-F]{66})$/,Xe=160,Te=2e3,_e=10n,Ce=100n;function Ro(e){if(!Number.isFinite(e)||e<=0)throw new Error(`feeRateSatsVb must be a positive finite number, got ${e}`);return BigInt(Math.ceil(e*Xe))}const Bo=1,Vo=/non-BIP68-final/i;function Ae(e,t){if(e.length!==66)throw new Error(`${t} must be 32 bytes (66 hex chars with 0x prefix), got length ${e.length}`);if(!$o.test(e))throw new Error(`${t} must contain only hex characters after the 0x prefix`)}function we(e,t){if(!Number.isInteger(e)||e<0)throw new Error(`${t} must be a non-negative integer, got ${e}`)}function No(e){if(Ae(e.hashlock,"hashlock"),!Number.isInteger(e.htlcVout)||e.htlcVout<0)throw new Error(`htlcVout must be a non-negative integer, got ${e.htlcVout}`);if(!Array.isArray(e.batch)||e.batch.length===0)throw new Error("batch must be a non-empty array of HTLC entries");if(e.htlcVout>=e.batch.length)throw new Error(`htlcVout ${e.htlcVout} is out of range for batch of size ${e.batch.length}`);for(let r=0;r<e.batch.length;r++){const o=e.batch[r];if(Ae(o.hashlock,`batch[${r}].hashlock`),!Number.isInteger(o.htlcVout)||o.htlcVout!==r)throw new Error(`batch[${r}].htlcVout must equal ${r} (contiguous vout-ordered vector), got ${o.htlcVout}`);if(typeof o.amount!="bigint"||o.amount<=0n)throw new Error(`batch[${r}].amount must be a positive bigint, got ${o.amount}`)}const t=e.batch[e.htlcVout];if(t.hashlock.toLowerCase()!==e.hashlock.toLowerCase())throw new Error(`batch[${e.htlcVout}].hashlock (${t.hashlock}) does not match target hashlock (${e.hashlock})`);if(t.amount!==e.amount)throw new Error(`batch[${e.htlcVout}].amount (${t.amount}) does not match target amount (${e.amount})`);if(we(e.offchainParamsVersion,"offchainParamsVersion"),we(e.appVaultKeepersVersion,"appVaultKeepersVersion"),we(e.universalChallengersVersion,"universalChallengersVersion"),Wt.assertValidVaultCoreVersion(e.vaultCoreVersion,"VaultRefundData.vaultCoreVersion"),typeof e.unsignedPrePeginTxHex!="string"||e.unsignedPrePeginTxHex.length===0)throw new Error("unsignedPrePeginTxHex must be a non-empty hex string");if(!Io.test(e.unsignedPrePeginTxHex))throw new Error("unsignedPrePeginTxHex must be a hex byte string (optional 0x prefix, even length)");if(!e.depositorBtcPubkey||!qt.test(e.depositorBtcPubkey))throw new Error("depositorBtcPubkey must be 32 or 33 bytes of hex (optional 0x prefix)");if(typeof e.amount!="bigint"||e.amount<=0n)throw new Error(`amount must be a positive bigint, got ${e.amount}`)}function Oo(e){if(!e.vaultProviderPubkey||!qt.test(e.vaultProviderPubkey))throw new Error("vaultProviderPubkey must be 32 or 33 bytes of hex");if(e.vaultKeeperPubkeys.length===0)throw new Error("vaultKeeperPubkeys must be non-empty");if(e.universalChallengerPubkeys.length===0)throw new Error("universalChallengerPubkeys must be non-empty");if(!Number.isInteger(e.timelockRefund)||e.timelockRefund<=0)throw new Error(`timelockRefund must be a positive integer, got ${e.timelockRefund}`);if(typeof e.feeRate!="bigint"||e.feeRate<=0n)throw new Error(`protocol feeRate must be a positive bigint, got ${e.feeRate}`);if(typeof e.minPeginFeeRate!="bigint"||e.minPeginFeeRate<=0n)throw new Error(`minPeginFeeRate must be a positive bigint, got ${e.minPeginFeeRate}`);if(!Number.isInteger(e.numLocalChallengers)||e.numLocalChallengers<0)throw new Error("numLocalChallengers must be a non-negative integer");if(!Number.isInteger(e.councilQuorum)||!Number.isInteger(e.councilSize)||e.councilQuorum<=0||e.councilSize<=0||e.councilQuorum>e.councilSize)throw new Error(`councilQuorum (${e.councilQuorum}) must be in [1, councilSize=${e.councilSize}]`)}async function Ho(e){const{vaultId:t,readVault:r,readPrePeginContext:o,feeRate:n,signPsbt:s,broadcastTx:a,signal:i}=e;i==null||i.throwIfAborted(),Ae(t,"vaultId");const u=await r();No(u),i==null||i.throwIfAborted();const l=await o(u);if(Oo(l),i==null||i.throwIfAborted(),!Number.isFinite(n)||n<=0)throw new Error(`feeRate must be a positive number, got ${n}`);if(n>Te)throw new Error(`feeRate ${n} sat/vB exceeds refund safety cap ${Te} sat/vB; refusing to sign refund.`);const c=BigInt(Math.ceil(n*Xe)),p=u.amount*_e/Ce;if(c>p)throw new Error(`Refund fee ${c} sats exceeds the per-vault safety cap of ${p} sats (${_e}/${Ce} of vault.amount=${u.amount}); refusing to sign refund.`);i==null||i.throwIfAborted();const d=g.processPublicKeyToXOnly(u.depositorBtcPubkey),P=g.stripHexPrefix(u.unsignedPrePeginTxHex),f=F.findAuthAnchorOpReturn(P);if(f!==void 0&&f.vout!==u.batch.length)throw new Error(`Auth-anchor OP_RETURN at vout ${f.vout} does not match batch size (${u.batch.length} HTLC outputs expect the anchor at vout ${u.batch.length}). Refund refused — sibling HTLC vector is incomplete.`);const v=f==null?void 0:f.hash;let y;try{y=A.Transaction.fromHex(P)}catch(E){throw new Error(`Failed to parse funded Pre-PegIn transaction hex: ${E instanceof Error?E.message:String(E)}`)}if(y.outs.length<u.batch.length)throw new Error(`Funded Pre-PegIn tx has ${y.outs.length} outputs but batch requires at least ${u.batch.length} HTLC outputs. Refund refused — funded tx shape disagrees with sibling vector.`);const{psbtHex:m}=await H.buildRefundPsbt({prePeginParams:{vaultCoreVersion:u.vaultCoreVersion,depositorPubkey:d,vaultProviderPubkey:g.stripHexPrefix(l.vaultProviderPubkey),vaultKeeperPubkeys:l.vaultKeeperPubkeys.map(g.stripHexPrefix),universalChallengerPubkeys:l.universalChallengerPubkeys.map(g.stripHexPrefix),hashlocks:u.batch.map(E=>g.stripHexPrefix(E.hashlock)),timelockRefund:l.timelockRefund,pegInAmounts:u.batch.map(E=>E.amount),feeRate:l.feeRate,minPeginFeeRate:l.minPeginFeeRate,numLocalChallengers:l.numLocalChallengers,councilQuorum:l.councilQuorum,councilSize:l.councilSize,network:l.network,authAnchorHash:v},fundedPrePeginTxHex:P,htlcVout:u.htlcVout,refundFee:c,hashlock:g.stripHexPrefix(u.hashlock)});i==null||i.throwIfAborted();const $=z.createTaprootScriptPathSignOptions(u.depositorBtcPubkey,Bo),T=await s(m,$);w.assertPsbtUnsignedTxMatches({requestedPsbtHex:m,returnedPsbtHex:T});const b=0,_=w.extractPayoutSignature(T,d,b);w.assertScriptPathSchnorrSignature({requestedPsbtHex:m,signatureHex:_,signerXOnlyPubkeyHex:d,inputIndex:b});const B=H.finalizeScriptPathWithSignatures({requestedPsbtHex:m,signaturesHex:[_],signerXOnlyPubkeyHex:d});i==null||i.throwIfAborted();try{return await a(B)}catch(E){throw E instanceof Error&&Vo.test(E.message)?new Xt(t,E):E}}class Se extends Error{constructor(r,o,n){super(r);j(this,"feeSats");j(this,"sweptTotalSats");this.name="ReclaimUneconomicalError",this.feeSats=o,this.sweptTotalSats=n}}const ke=2e3,$e=25n,Ie=100n,Do=10n;async function Ko(e,t,r){for(let o=0;o<e.length;o++){const n=jt.calculateBtcTxHash(e[o].depositorSignedPeginTxHex),s=g.ensureHexPrefix(await k.deriveVaultId(g.stripHexPrefix(n),g.stripHexPrefix(r))).toLowerCase();if(s!==t[o].toLowerCase())throw new Error(`Reserve ${o} belongs to vault ${s}, not the requested ${t[o].toLowerCase()}. Refusing to sweep a reserve whose vault is not the one the caller asked for — the reserve funds that vault's claim transaction and cannot be replaced.`)}}async function Uo(e){const{vaultIds:t,depositorEthAddress:r,depositorBtcPubkey:o,readVaults:n,feeRate:s,signPsbt:a,broadcastTx:i,signal:u}=e;if(u==null||u.throwIfAborted(),t.length===0)throw new Error("Reclaim requires at least one vault id; got none.");if(!Number.isFinite(s)||s<=0)throw new Error(`feeRate must be a positive number, got ${s}`);if(s>ke)throw new Se(`Fee rate ${s} sat/vB exceeds the reclaim safety cap of ${ke} sat/vB; refusing to sign.`,0n,0n);const l=await n();if(u==null||u.throwIfAborted(),l.length!==t.length)throw new Error(`readVaults returned ${l.length} reserves for ${t.length} vault id(s); refusing to sweep a set that does not match the request.`);await Ko(l,t,r),u==null||u.throwIfAborted();const c=g.processPublicKeyToXOnly(o),p=l.map(b=>({depositorSignedPeginTxHex:b.depositorSignedPeginTxHex,observed:b.observed,expectedValue:b.expectedClaimValue})),d=H.estimateReclaimFeeSats(s,p.length),P=p.reduce((b,_)=>b+_.expectedValue,0n),f=P*$e/Ie;if(d>f)throw new Se(`Reclaim fee ${d} sats exceeds ${$e}/${Ie} of the swept total (${P} sats, cap ${f} sats). The reserve is not at risk — it stays where it is until fee rates fall.`,d,P);u==null||u.throwIfAborted();const{psbtHex:v}=H.buildReclaimPsbt({depositorPubkey:c,inputs:p,feeSats:d});u==null||u.throwIfAborted();const y=z.createTaprootScriptPathSignOptions(o,p.length),m=await a(v,y);w.assertPsbtUnsignedTxMatches({requestedPsbtHex:v,returnedPsbtHex:m});const $=p.map((b,_)=>{const B=w.extractPayoutSignature(m,c,_);return w.assertScriptPathSchnorrSignature({requestedPsbtHex:v,signatureHex:B,signerXOnlyPubkeyHex:c,inputIndex:_}),B}),T=H.finalizeScriptPathWithSignatures({requestedPsbtHex:v,signaturesHex:$,signerXOnlyPubkeyHex:c});return u==null||u.throwIfAborted(),i(T)}exports.ApplicationEntryPointMismatchError=ue;exports.ArtifactsVaultMismatchError=ft;exports.AssertBindingError=V;exports.BIP68NotMatureError=Xt;exports.ChallengerSetMismatchError=at;exports.DELEGATED_CLAIM_TX_GRAPH_VERSION=M;exports.DelegatedClaimSigningIncompleteError=Et;exports.GraphFingerprintError=x;exports.PEGIN_ETH_CONFIRMATIONS=It;exports.ParticipantKeyDriftError=Le;exports.PayoutDestinationError=ct;exports.PayoutInputLeafError=Z;exports.PeginRegistrationMissingError=De;exports.PeginRegistrationNotFinalError=Ke;exports.RECLAIM_MAX_FEE_FRACTION_DENOMINATOR=Ie;exports.RECLAIM_MAX_FEE_FRACTION_NUMERATOR=$e;exports.RECLAIM_MAX_FEE_RATE_SATS_VB=ke;exports.RECLAIM_WARN_FEE_FRACTION_NUMERATOR=Do;exports.REFUND_MAX_FEE_FRACTION_DENOMINATOR=Ce;exports.REFUND_MAX_FEE_FRACTION_NUMERATOR=_e;exports.REFUND_MAX_FEE_RATE_SATS_VB=Te;exports.REFUND_VSIZE=Xe;exports.ReclaimUneconomicalError=Se;exports.RegisteredVaultVersionMismatchError=Fe;exports.SigningPlanMismatchError=G;exports.VaultIdBindingError=pt;exports.activateVault=rr;exports.activateVaultAndRedeem=or;exports.assembleWatchtowerArtifacts=Sr;exports.assembleWatchtowerArtifactsFromSignatures=xt;exports.assertArtifactsUsableForVault=hr;exports.assertAssertBindsClaimAndPayout=it;exports.assertChallengerSetMatchesVault=ut;exports.assertClaimSpendsVault=Ve;exports.assertPayoutPaysRegisteredScript=lt;exports.assertReturnedGraphMatchesFingerprint=Wr;exports.assertTermsMatchVault=At;exports.assertVaultProviderHintAccepted=go;exports.buildAndBroadcastReclaim=Uo;exports.buildAndBroadcastRefund=Ho;exports.claimExpiredVault=nr;exports.copyAssertConnectorLeaf=dt;exports.deriveClaimerWotsKeypair=kr;exports.estimateRefundFeeSats=Ro;exports.fingerprintReturnedGraph=Ht;exports.isApplicationEntryPointMismatchError=fo;exports.isDepositAmountValid=vo;exports.isHintAccepted=oe;exports.isParticipantKeyDriftError=Co;exports.isPeginRegistrationMissingError=Rt;exports.isPeginRegistrationNotFinalError=Or;exports.isRegisteredVaultVersionMismatchError=So;exports.matchKeyHint=Mt;exports.matchKeySetHint=Ee;exports.planDelegatedClaimSigning=mt;exports.readDelegatedClaimVaultContext=Rr;exports.readStampedParticipantKeys=$t;exports.resolveCurrentParticipantKeys=kt;exports.resolveParticipantKeysAtEpochs=He;exports.runDepositorPresignFlow=co;exports.signDelegatedClaimPlan=_t;exports.signDepositorGraph=Kt;exports.submitWotsPublicKey=ho;exports.summarizeWatchtowerArtifacts=Pt;exports.validateDepositAmount=bo;exports.validateMultiVaultDepositInputs=_o;exports.validateOnChainParticipantKeys=Po;exports.validateProviderSelection=wo;exports.validateRemainingCapacity=mo;exports.validateVaultAmounts=Lt;exports.validateVaultProviderPubkey=Ft;exports.verifyRegisteredParticipantKeys=Ao;exports.verifyRegisteredVaultVersions=ko;exports.waitForPeginRegistrationDepth=Hr;exports.waitForPeginStatus=Me;
-//# sourceMappingURL=buildAndBroadcastReclaim-CE77jzTp.cjs.map
+"use strict";var zt=Object.defineProperty;var Yt=(e,t,r)=>t in e?zt(e,t,{enumerable:!0,configurable:!0,writable:!0,value:r}):e[t]=r;var j=(e,t,r)=>Yt(e,typeof t!="symbol"?t+"":t,r);const Re=require("./BTCVaultRegistry.abi-BH2-LHxN.cjs"),g=require("./bitcoin-D-O2GjbC.cjs"),F=require("./PayoutManager-B1Ev0r7o.cjs"),k=require("./tbv/core/wasm/index.cjs"),I=require("./registration-records-XQMIKjGV.cjs"),A=require("bitcoinjs-lib"),h=require("./constants-CAm10Qwp.cjs"),w=require("./verifyScriptPathSchnorrSignature-CahYx5Td.cjs"),K=require("buffer"),ne=require("./validation-C6XTfZak.cjs"),z=require("./signing-DvISftFk.cjs"),st=require("./deriveVaultRoot-C3uqnJto.cjs"),le=require("./types-BC2TGzcp.cjs"),xe=require("viem"),S=require("./state-C4WoNCy1.cjs"),J=require("./sha2-Ce6KewYx.cjs"),H=require("./challengeAssert-C3eMcM5Y.cjs"),Wt=require("./secp256k1-DDHQ1_za.cjs"),jt=require("./btcTxHash-CGb5BqFL.cjs"),Jt=/^0x[0-9a-fA-F]{64}$/,Qt=/^0x[0-9a-fA-F]{40}$/,Zt=/^0x([0-9a-fA-F]{2})*$/;function de(e,t){if(e.length!==66)throw new Error(`${t} must be 32 bytes (66 hex chars with 0x prefix), got length ${e.length}`);if(!Jt.test(e))throw new Error(`${t} must contain only hex characters after the 0x prefix`)}function er(e,t){if(!Qt.test(e))throw new Error(`${t} must be a 20-byte 0x-prefixed hex address (42 chars)`)}function tr(e,t){if(!Zt.test(e))throw new Error(`${t} must be a 0x-prefixed hex string with an even number of hex chars`)}function Be(e){er(e.btcVaultRegistryAddress,"btcVaultRegistryAddress"),de(e.vaultId,"vaultId");const t=g.ensureHexPrefix(e.secret);if(de(t,"secret"),e.hashlock!==void 0&&(de(e.hashlock,"hashlock"),!F.validateSecretAgainstHashlock(t,e.hashlock)))throw new Error("Invalid secret: SHA256(secret) does not match the provided hashlock");return t}async function rr(e){const{btcVaultRegistryAddress:t,vaultId:r,hashlock:o,activationMetadata:n,writeContract:s,signal:a}=e;a==null||a.throwIfAborted();const i=Be({btcVaultRegistryAddress:t,vaultId:r,secret:e.secret,hashlock:o});return tr(n,"activationMetadata"),s({address:t,abi:Re.BTCVaultRegistryABI,functionName:"activateVaultWithSecret",args:[r,i,n]})}async function or(e){const{btcVaultRegistryAddress:t,vaultId:r,hashlock:o,writeContract:n,signal:s}=e;s==null||s.throwIfAborted();const a=Be({btcVaultRegistryAddress:t,vaultId:r,secret:e.secret,hashlock:o});return n({address:t,abi:Re.BTCVaultRegistryABI,functionName:"activateVaultWithSecretAndRedeem",args:[r,a]})}async function nr(e){const{btcVaultRegistryAddress:t,vaultId:r,hashlock:o,writeContract:n,signal:s}=e;if(s==null||s.throwIfAborted(),typeof o!="string")throw new Error("hashlock is required to claim an expired vault");const a=Be({btcVaultRegistryAddress:t,vaultId:r,secret:e.secret,hashlock:o});return n({address:t,abi:Re.BTCVaultRegistryABI,functionName:"claimExpiredVault",args:[r,a]})}class V extends Error{constructor(t,r){super(t,r),this.name="AssertBindingError"}}function pe(e,t){try{return A.Psbt.fromBase64(t)}catch(r){throw new V(`${e} PSBT cannot be parsed.`,{cause:r})}}function sr(e,t,r){const o=t.txInputs[r];if(!o)throw new V(`${e} PSBT has no input ${r}.`);return o.hash}function ze(e){return A.Transaction.fromBuffer(e.data.globalMap.unsignedTx.toBuffer()).getHash()}function he(e,t,r,o,n,s){const a=t.txInputs[r];if(!a)throw new V(`${e} PSBT has no input ${r}.`);if(!a.hash.equals(o)||a.index!==n)throw new V(`${e} input ${r} does not spend ${s}: the graph pairs this ${e} with a different transaction.`)}function ir(e,t){var n;const r=(n=e.data.inputs[h.ASSERT_CLAIM_INPUT_INDEX])==null?void 0:n.witnessUtxo;if(r===void 0)throw new V(`Assert input ${h.ASSERT_CLAIM_INPUT_INDEX} carries no witnessUtxo, so the amount and script its signature commits to cannot be checked; refusing to sign assert.`);const o=t.txOutputs[h.CLAIM_CONNECTOR_OUTPUT_INDEX];if(!o)throw new V(`Claim PSBT has no output ${h.CLAIM_CONNECTOR_OUTPUT_INDEX} for the Assert to spend; refusing to sign assert.`);if(r.value!==o.value)throw new V(`Assert input ${h.ASSERT_CLAIM_INPUT_INDEX} declares a prevout of ${r.value} sats but the Claim's output ${h.CLAIM_CONNECTOR_OUTPUT_INDEX} is worth ${o.value}; refusing to sign assert.`);if(!r.script.equals(o.script))throw new V(`Assert input ${h.ASSERT_CLAIM_INPUT_INDEX} declares a prevout script that is not the Claim's output ${h.CLAIM_CONNECTOR_OUTPUT_INDEX} script; refusing to sign assert.`)}function it(e){const t=pe("Claim",e.claimPsbtBase64),r=pe("Assert",e.assertPsbtBase64),o=pe("Payout",e.payoutClaimerPsbtBase64);he("Assert",r,h.ASSERT_CLAIM_INPUT_INDEX,ze(t),h.CLAIM_CONNECTOR_OUTPUT_INDEX,"Claim:0"),ir(r,t),he("Payout",o,h.PAYOUT_ASSERT_INPUT_INDEX,ze(r),h.ASSERT_PAYOUT_OUTPUT_INDEX,"Assert:0"),he("Payout",o,h.PAYOUT_PEGIN_INPUT_INDEX,sr("Claim",t,h.CLAIM_PEGIN_INPUT_INDEX),h.PEGIN_VAULT_OUTPUT_INDEX,"this vault's PegIn:0")}function ge(e,t){try{return A.Psbt.fromBase64(t)}catch(r){throw new Error(`${e} PSBT cannot be parsed.`,{cause:r})}}function Ye(e,t,r,o){var a;const n=[{inputIndex:h.PAYOUT_PEGIN_INPUT_INDEX,expectedSats:r,source:`the vault's PegIn output ${h.PEGIN_VAULT_OUTPUT_INDEX}`},{inputIndex:h.PAYOUT_ASSERT_INPUT_INDEX,expectedSats:o.value,source:`the Assert's output ${h.ASSERT_PAYOUT_OUTPUT_INDEX}`}];for(const{inputIndex:i,expectedSats:u,source:l}of n){const c=(a=t.data.inputs[i])==null?void 0:a.witnessUtxo;if(c===void 0)throw new Error(`${e} Payout input ${i} carries no witnessUtxo, so the amount its signature commits to cannot be checked; refusing to sign payout.`);if(c.value!==u)throw new Error(`${e} Payout input ${i} declares a prevout of ${c.value} sats but ${l} is worth ${u}; refusing to sign payout.`)}const s=t.data.inputs[h.PAYOUT_ASSERT_INPUT_INDEX].witnessUtxo;if(!(s!=null&&s.script.equals(o.script)))throw new Error(`${e} Payout input ${h.PAYOUT_ASSERT_INPUT_INDEX} declares a prevout script that is not the Assert's output ${h.ASSERT_PAYOUT_OUTPUT_INDEX} script; refusing to sign payout.`)}async function ar(e){const{vault:t}=e,r={vaultCoreVersion:t.vaultCoreVersion,numVaultKeepers:t.vaultKeeperBtcPubkeys.length,numUniversalChallengers:t.universalChallengerBtcPubkeys.length,councilSize:t.councilSize,protocolFeeRate:t.protocolFeeRate};w.assertPayoutFeeBandDomain(r);const o=ge("Claimer Payout",e.payoutClaimerPsbtBase64),n=ge("Depositor Payout",e.payoutDepositorPsbtBase64),s=ge("Assert",e.assertPsbtBase64);if(!n.data.globalMap.unsignedTx.toBuffer().equals(o.data.globalMap.unsignedTx.toBuffer()))throw new Error("Depositor and claimer Payout PSBTs describe different transactions; refusing to sign payout.");const a=s.txOutputs[h.ASSERT_PAYOUT_OUTPUT_INDEX];if(a===void 0)throw new Error(`Assert transaction has no output ${h.ASSERT_PAYOUT_OUTPUT_INDEX}; the Payout's implicit fee cannot be measured.`);if(o.txInputs.length!==h.DEPOSITOR_PAYOUT_INPUT_COUNT)throw new Error(`Payout transaction must have exactly ${h.DEPOSITOR_PAYOUT_INPUT_COUNT} inputs, got ${o.txInputs.length}`);const i=o.txInputs[h.PAYOUT_PEGIN_INPUT_INDEX].sequence;if(i!==t.timelockPegin)throw new Error(`Payout input ${h.PAYOUT_PEGIN_INPUT_INDEX} sequence ${i} must equal the PegIn CSV timelock ${t.timelockPegin}; refusing to sign payout.`);const u=o.txInputs[h.PAYOUT_ASSERT_INPUT_INDEX].sequence;if(u!==t.timelockAssert)throw new Error(`Payout input ${h.PAYOUT_ASSERT_INPUT_INDEX} sequence ${u} must equal the Assert CSV timelock ${t.timelockAssert}; refusing to sign payout.`);Ye("Claimer",o,t.peginVaultOutputValueSats,a),Ye("Depositor",n,t.peginVaultOutputValueSats,a);const l=t.peginVaultOutputValueSats+a.value,c=o.txOutputs;if(c.length!==h.NON_VP_CLAIMER_PAYOUT_OUTPUT_COUNT)throw new Error(`Payout transaction has ${c.length} output(s), expected exactly ${h.NON_VP_CLAIMER_PAYOUT_OUTPUT_COUNT} for a depositor-as-claimer payout.`);let p=0;for(const d of c)p+=d.value;if(p>l)throw new Error(`Payout outputs (${p} sats) exceed inputs (${l} sats); invalid transaction.`);await w.assertPayoutFeeInBand(r,{implicitFeeSats:l-p,out0Len:c[h.PAYOUT_DESTINATION_OUTPUT_INDEX].script.length,out1Len:void 0})}class at extends Error{constructor(t,r){super("Transaction graph's challenger set does not match the vault's (local ∪ universal)"+(t.length>0?` (missing: ${t.join(", ")})`:"")+(r.length>0?` (unexpected: ${r.join(", ")})`:"")+". Refusing to sign an incomplete or padded challenger set."),this.missing=t,this.unexpected=r,this.name="ChallengerSetMismatchError"}}function ut(e){const t=w.deriveLocalChallengers({claimerBtcPubkey:e.depositorBtcPubkey,depositorBtcPubkey:e.depositorBtcPubkey,vaultProviderBtcPubkey:e.vaultProviderBtcPubkey,vaultKeeperBtcPubkeys:e.vaultKeeperBtcPubkeys}),r=e.universalChallengerBtcPubkeys.map(We),o=t.filter(c=>r.includes(c));if(o.length>0)throw new Error(`Cannot check the challenger set: vault keepers and universal challengers overlap (${o.join(", ")}).`);const n=e.graphChallengerPubkeys.map(We),s=new Set(n);if(s.size!==n.length)throw new Error("Transaction graph lists the same challenger more than once.");const a=[...t,...r],i=new Set(a),u=a.filter(c=>!s.has(c)),l=n.filter(c=>!i.has(c));if(u.length>0||l.length>0)throw new at(u,l)}function We(e){return g.stripHexPrefix(e).toLowerCase()}class ct extends Error{constructor(t,r){super(`Payout transaction output ${h.PAYOUT_DESTINATION_OUTPUT_INDEX} pays ${r}, not the vault's registered payout script ${t}. Refusing to sign a payout to another destination.`),this.expectedScriptHex=t,this.actualScriptHex=r,this.name="PayoutDestinationError"}}function lt(e){let t;try{t=A.Psbt.fromBase64(e.payoutPsbtBase64)}catch(c){throw new Error("Payout PSBT cannot be parsed.",{cause:c})}const{version:r,locktime:o,outs:n}=ur(t);if(r!==h.PAYOUT_TX_VERSION||o!==h.PAYOUT_TX_LOCKTIME)throw new Error(`Payout transaction has version ${r} and locktime ${o}, expected ${h.PAYOUT_TX_VERSION} and ${h.PAYOUT_TX_LOCKTIME}.`);if(n.length!==h.NON_VP_CLAIMER_PAYOUT_OUTPUT_COUNT)throw new Error(`Payout transaction has ${n.length} output(s), expected exactly ${h.NON_VP_CLAIMER_PAYOUT_OUTPUT_COUNT} for a depositor-as-claimer payout.`);const s=g.stripHexPrefix(e.registeredPayoutScriptPubKey).toLowerCase();if(s.length===0)throw new Error("registeredPayoutScriptPubKey is empty; the vault's on-chain payout script is required to check the Payout destination.");const a=n[h.PAYOUT_DESTINATION_OUTPUT_INDEX].script.toString("hex").toLowerCase();if(a!==s)throw new ct(s,a);const i=n[h.NON_VP_CLAIMER_PAYOUT_OUTPUT_COUNT-1];if(i.value!==h.PAYOUT_ANCHOR_DUST_SATS)throw new Error(`Payout CPFP anchor value ${i.value} sats must equal ${h.PAYOUT_ANCHOR_DUST_SATS} sats.`);const u=g.stripHexPrefix(I.deriveP2trScript(g.stripHexPrefix(e.depositorBtcPubkey).toLowerCase())),l=i.script.toString("hex").toLowerCase();if(l!==u)throw new Error(`Payout CPFP anchor pays ${l}, not the depositor's BIP-86 P2TR ${u}. Refusing to sign a payout whose fee-bump output is spendable by somebody else.`)}function ur(e){return{version:e.version,locktime:e.locktime,outs:e.txOutputs.map(t=>({script:K.Buffer.from(t.script),value:t.value}))}}class Z extends Error{constructor(t){super(t),this.name="PayoutInputLeafError"}}function dt(e){const t=A.Psbt.fromBase64(e.payoutDepositorPsbtBase64),r=A.Psbt.fromBase64(e.payoutClaimerPsbtBase64),o=t.data.globalMap.unsignedTx.toBuffer(),n=r.data.globalMap.unsignedTx.toBuffer();if(!o.equals(n))throw new Z("Depositor and claimer Payout PSBTs describe different transactions; the graph is inconsistent.");const s=r.data.inputs[h.PAYOUT_ASSERT_INPUT_INDEX],a=t.data.inputs[h.PAYOUT_ASSERT_INPUT_INDEX];if(!s||!a)throw new Z("Payout PSBT has no Assert-connector input.");if(!s.tapLeafScript||s.tapLeafScript.length!==1)throw new Z("Claimer Payout PSBT must carry exactly one leaf on the Assert-connector input.");if(a.tapLeafScript&&a.tapLeafScript.length>0)throw new Z("Depositor Payout PSBT already carries an Assert-connector leaf; refusing to overwrite it.");return t.updateInput(h.PAYOUT_ASSERT_INPUT_INDEX,{tapLeafScript:s.tapLeafScript,...s.tapInternalKey?{tapInternalKey:s.tapInternalKey}:{},...s.tapMerkleRoot?{tapMerkleRoot:s.tapMerkleRoot}:{}}),t.toBase64()}class pt extends Error{constructor(t,r,o){super(`Transaction graph does not belong to vault ${t}: its Claim spends PegIn ${o}, which derives vault ${r}. Refusing to sign for a graph served for another vault.`),this.expectedVaultId=t,this.derivedVaultId=r,this.peginTxid=o,this.name="VaultIdBindingError"}}function cr(e){let t;try{t=A.Psbt.fromBase64(e)}catch(o){throw new Error("Claim PSBT cannot be parsed.",{cause:o})}const r=t.txInputs[h.CLAIM_PEGIN_INPUT_INDEX];if(!r)throw new Error("Claim PSBT carries no PegIn input to bind the vault to.");return ht("Claim PSBT",t.txInputs.length,r.index),Ne(r.hash)}function lr(e){const t=e.ins[h.CLAIM_PEGIN_INPUT_INDEX];if(!t)throw new Error("Artifacts file's claim_tx carries no PegIn input to bind the vault to.");return ht("Artifacts file's claim_tx",e.ins.length,t.index),Ne(t.hash)}function ht(e,t,r){if(t!==1||r!==w.PEGIN_DEPOSITOR_CLAIM_VOUT)throw new Error(`${e} must have exactly one input spending PegIn output ${w.PEGIN_DEPOSITOR_CLAIM_VOUT}; it has ${t} input(s) and the first spends output ${r}.`)}function Ve(e){const t=Y(I.derivePeginVaultId(e.peginTxid,e.depositorEthAddress)),r=Y(e.expectedVaultId);if(t!==r)throw new pt(r,t,e.peginTxid)}function Y(e){return`0x${(e.startsWith("0x")?e.slice(2):e).toLowerCase()}`}function Ne(e){return K.Buffer.from(e).reverse().toString("hex")}function se(e,t){const r=g.stripHexPrefix(e);if(!/^(?:[0-9a-fA-F]{2})+$/.test(r))throw new Error(`${t} must be non-empty, even-length hex.`);return r.toLowerCase()}function gt(e){const t=se(e.servedVerifyingKeyHex,"source.verifyingKeyHex"),r=se(e.trustedVerifyingKeyHex,"trustedVerifyingKeyHex");if(t===r)return r;throw new Error(`Vault provider served Groth16 verifying key ${t} but the trusted key for prover circuit version ${e.proverCircuitVersion} is ${r}; refusing to sign a claim whose proof would verify under a substituted key.`)}const M=3;class ft extends Error{constructor(t,r){super(`Artifacts belong to vault ${r}, not ${t}. Select the artifacts file saved for this vault.`),this.expectedVaultId=t,this.actualVaultId=r,this.name="ArtifactsVaultMismatchError"}}const dr=/^(?:[0-9a-fA-F]{2})+$/;function pr(e){const t=fr(e,"babe_sessions"),r=Object.keys(t);if(r.length===0)return{joined:!1};for(const[o,n]of Object.entries(t)){const s=typeof n=="object"&&n!==null?n.decryptor_artifacts_hex:void 0;if(typeof s!="string"||!dr.test(s))throw new Error(`Artifacts file is missing a usable "babe_sessions": the entry for ${o} carries no non-empty hex "decryptor_artifacts_hex".`)}return{joined:!0,challengerPubkeys:r}}function Pt(e){let t;try{t=JSON.parse(e)}catch(a){throw new Error("Artifacts file is not valid JSON.",{cause:a})}const r=fe(t.vault_id,"vault_id"),o=gr(fe(t.claim_tx,"claim_tx")),n=Pe(t.prover_circuit_version,"prover_circuit_version"),s=t.claimable_event_block_number===void 0?0n:BigInt(Pe(t.claimable_event_block_number,"claimable_event_block_number"));return{vaultCoreVersion:t.vault_core_version===void 0?void 0:Pe(t.vault_core_version,"vault_core_version"),vaultId:r,claimTxid:o.getId(),peginTxid:lr(o),proverCircuitVersion:n,claimableEventBlockNumber:s,verifyingKeyHex:fe(t.verifying_key,"verifying_key"),babeSessions:pr(t.babe_sessions)}}async function hr(e){const t=Pt(e.artifactsJson),r=Y(e.expectedVaultId),o=Y(t.vaultId);if(r!==o)throw new ft(r,o);Ve({peginTxid:t.peginTxid,depositorEthAddress:e.depositorEthAddress,expectedVaultId:r});const n=e.txGraphVersion??M;if(t.vaultCoreVersion!==void 0&&t.vaultCoreVersion!==n)throw new Error(`Artifacts record vault core version ${t.vaultCoreVersion}, but verification was asked for version ${n}.`);if(t.claimableEventBlockNumber===0n)throw new Error("Artifacts carry no claimable event block number. They were assembled before the Ethereum withdrawal was initiated; assemble them again.");if(t.claimableEventBlockNumber!==e.expectedClaimableEventBlockNumber)throw new Error(`Artifacts record claimable event block ${t.claimableEventBlockNumber} but the vault's finalized VaultClaimableBy event is at block ${e.expectedClaimableEventBlockNumber}; the prover would prove the wrong block, so refusing the file.`);if(t.proverCircuitVersion!==e.expectedProverCircuitVersion)throw new Error(`Artifacts record prover circuit version ${t.proverCircuitVersion} but the vault's stamped params say ${e.expectedProverCircuitVersion}; a proof for the wrong circuit fails at start-claim, so refusing the file.`);const s=se(t.verifyingKeyHex,'Artifacts file "verifying_key"'),a=se(e.trustedVerifyingKeyHex,"trustedVerifyingKeyHex");if(s!==a)throw new Error(`Artifacts carry Groth16 verifying key ${s} but the trusted key for prover circuit version ${e.expectedProverCircuitVersion} is ${a}; refusing a file whose proof would verify under a substituted key.`);return await k.verifyWatchtowerArtifacts(n,e.artifactsJson),t}function gr(e){try{return A.Transaction.fromHex(e)}catch(t){throw new Error("Artifacts file carries an unparseable claim_tx.",{cause:t})}}function fe(e,t){if(typeof e!="string"||e.length===0)throw new Error(`Artifacts file is missing a usable "${t}".`);return e}function Pe(e,t){if(typeof e!="number"||!Number.isSafeInteger(e)||e<0)throw new Error(`Artifacts file is missing a usable "${t}".`);return e}function fr(e,t){if(e===void 0)return{};if(typeof e!="object"||e===null||Array.isArray(e))throw new Error(`Artifacts file is missing a usable "${t}".`);return e}function yt(e,t){return`wronglyChallenged:${e}:${t}`}function vt(e){const t=[{id:"claim",kind:"claim",psbtBase64:e.claim,inputIndex:h.CLAIM_PEGIN_INPUT_INDEX},{id:"assert",kind:"assert",psbtBase64:e.assert,inputIndex:h.ASSERT_CLAIM_INPUT_INDEX},{id:"payoutClaimer",kind:"payoutClaimer",psbtBase64:e.payoutClaimer,inputIndex:h.PAYOUT_ASSERT_INPUT_INDEX},{id:"payoutDepositor",kind:"payoutDepositor",psbtBase64:e.payoutDepositor,inputIndex:h.PAYOUT_PEGIN_INPUT_INDEX}];for(const r of Object.keys(e.wronglyChallenged))e.wronglyChallenged[r].forEach((o,n)=>{t.push({id:yt(r,n),kind:"wronglyChallenged",psbtBase64:o,inputIndex:h.WRONGLY_CHALLENGED_INPUT_INDEX})});return t}const Pr="{}",yr=ne.COMPRESSED_PUBKEY_HEX_LEN-ne.X_ONLY_PUBKEY_HEX_LEN;function D(e){const t=e.replace(/^0x/,"").toLowerCase();if(t.length===ne.COMPRESSED_PUBKEY_HEX_LEN)return t.slice(yr);if(t.length===ne.X_ONLY_PUBKEY_HEX_LEN)return t;throw new Error(`Public key must be 33-byte compressed or 32-byte x-only hex, got ${t.length/2} bytes.`)}async function je(e,t,r){const o=await e.getPublicKeyHex();if(D(o)!==D(t))throw new Error("Connected wallet does not hold the vault's depositor key. Select the account that made the deposit, then try again.");const n=await e.getAddress();if(!g.isAddressFromPublicKey(n,o,r))throw new Error(`Connected wallet reports address "${n}", which is not derived from the vault's depositor key. Select the account that made the deposit, then try again.`);return n}async function bt(e,t,r,o){const n=D(o);if(n!==r.depositorBtcPubkey)throw new Error(`Depositor key ${n} is not the vault's registered depositor key ${r.depositorBtcPubkey}; refusing to plan a claim for another key.`);try{I.assertPayoutScriptMatchesPopKey(g.ensureHexPrefix(r.registeredPayoutScriptPubKey),r.depositorBtcPubkey,o)}catch(p){throw new Error(`Registered payout script ${r.registeredPayoutScriptPubKey} failed the depositor-key derivation check: ${p instanceof Error?p.message:String(p)}. This SDK registers only P2TR of the depositor's x-only key or P2WPKH of the compressed key (the contract bounds the script's length alone, PeginLogic.sol:237-240 @ c559f5c2); refusing to sign a claim that pays it.`,{cause:p})}if(e!==M)throw new Error(`Graph version ${e} is not the delegated-claim graph version ${M}; vaults on earlier graphs have no delegated-claim path.`);if(e!==r.vaultCoreVersion)throw new Error(`Graph version ${e} does not match the vault context's vault core version ${r.vaultCoreVersion}; they are one axis and must agree.`);const[s,a,i,u,l]=await Promise.all([k.buildClaimPsbt(e,t),k.buildAssertClaimerPsbt(e,t),k.buildPayoutClaimerPsbt(e,t),k.buildWronglyChallengedPsbts(e,t),k.buildPayoutDepositorPsbt(e,t)]);Ve({peginTxid:cr(s),depositorEthAddress:r.depositorEthAddress,expectedVaultId:r.vaultId}),it({claimPsbtBase64:s,assertPsbtBase64:a,payoutClaimerPsbtBase64:i});for(const p of[i,l])lt({payoutPsbtBase64:p,registeredPayoutScriptPubKey:r.registeredPayoutScriptPubKey,depositorBtcPubkey:r.depositorBtcPubkey});const c=dt({payoutDepositorPsbtBase64:l,payoutClaimerPsbtBase64:i});return await ar({payoutClaimerPsbtBase64:i,payoutDepositorPsbtBase64:c,assertPsbtBase64:a,vault:r}),ut({graphChallengerPubkeys:Object.keys(u),depositorBtcPubkey:o,vaultProviderBtcPubkey:r.vaultProviderBtcPubkey,vaultKeeperBtcPubkeys:r.vaultKeeperBtcPubkeys,universalChallengerBtcPubkeys:r.universalChallengerBtcPubkeys}),{claim:s,assert:a,payoutClaimer:i,payoutDepositor:c,wronglyChallenged:u}}async function mt(e){gt({servedVerifyingKeyHex:e.source.verifyingKeyHex,trustedVerifyingKeyHex:e.trustedVerifyingKeyHex,proverCircuitVersion:e.vault.proverCircuitVersion});const t=await bt(e.vault.txGraphVersion,e.source.txGraphJson,e.vault,e.depositorPublicKey);return{depositorPublicKey:e.depositorPublicKey,btcNetwork:e.btcNetwork,trustedVerifyingKeyHex:e.trustedVerifyingKeyHex,source:e.source,vault:e.vault,babeSessionsJson:e.babeSessionsJson===void 0?Pr:e.babeSessionsJson,requests:vt(t)}}function ce(e,t,r){w.assertScriptPathSchnorrSignature({requestedPsbtHex:Oe(t.psbtBase64),signatureHex:r,signerXOnlyPubkeyHex:D(e.depositorPublicKey),inputIndex:t.inputIndex})}function Oe(e){return K.Buffer.from(e,"base64").toString("hex")}function wt(e){return K.Buffer.from(e,"hex").toString("base64")}class G extends Error{constructor(t){super(t),this.name="SigningPlanMismatchError"}}function vr(e,t){if(e.length!==t.length)throw new G(`Plan has ${e.length} requests but the graph builds ${t.length}; the plan was altered after planning.`);for(let r=0;r<t.length;r++){const o=t[r],n=e[r];if(n.id!==o.id)throw new G(`Plan request at position ${r} is "${n.id}" but the graph builds "${o.id}" there; the plan was altered after planning.`);if(n.kind!==o.kind)throw new G(`Plan request "${n.id}" has kind "${n.kind}" but the graph builds "${o.kind}"; the plan was altered after planning.`);if(n.inputIndex!==o.inputIndex)throw new G(`Plan request "${n.id}" signs inputIndex ${n.inputIndex} but the graph builds ${o.inputIndex}; the plan was altered after planning.`);if(n.psbtBase64!==o.psbtBase64)throw new G(`Plan request "${n.id}" carries a psbt that differs from the one the graph builds; the plan was altered after planning.`)}}function br(e,t){const r=new Set(e.map(a=>a.id)),o=[...r].filter(a=>!t.has(a)),n=[...t.keys()].filter(a=>!r.has(a));if(o.length===0&&n.length===0)return;const s=a=>a.map(i=>`"${i}"`).join(", ");throw new Error(`Signatures do not cover the plan: ${t.size} signatures for ${e.length} requests`+(o.length>0?`; missing ${s(o)}`:"")+(n.length>0?`; extra ${s(n)}`:"")+".")}function X(e,t){const r=e.get(t);if(r===void 0)throw new Error(`No signature for request "${t}"; the plan was not fully signed.`);return r}async function xt(e){const{plan:t,signatures:r}=e,{txGraphVersion:o}=t.vault,n=t.source.txGraphJson,s=gt({servedVerifyingKeyHex:t.source.verifyingKeyHex,trustedVerifyingKeyHex:t.trustedVerifyingKeyHex,proverCircuitVersion:t.vault.proverCircuitVersion}),a=await bt(o,n,t.vault,t.depositorPublicKey),i=vt(a);vr(t.requests,i),br(i,r);for(const c of i)ce(t,c,X(r,c.id));const u={};for(const c of Object.keys(a.wronglyChallenged))u[c]=a.wronglyChallenged[c].map((p,d)=>X(r,yt(c,d)));const l=await k.finalizeClaimTx(o,n,X(r,"claim"));return k.buildWatchtowerArtifacts({txGraphVersion:o,graphJson:n,signedClaimTxHex:l,assertClaimerSigHex:X(r,"assert"),payoutClaimerSigHex:X(r,"payoutClaimer"),wronglyChallengedSigs:u,depositorPayoutSigHex:X(r,"payoutDepositor"),verifyingKeyHex:s,claimableEventBlockNumber:t.vault.claimableEventBlockNumber,proverCircuitVersion:t.vault.proverCircuitVersion,vaultIdHex:t.vault.vaultId,babeSessionsJson:t.babeSessionsJson,expectedVaultCoreVersion:t.vault.vaultCoreVersion})}function mr(e){return typeof e.signDelegatedClaimPsbt=="function"}class Et extends Error{constructor(t,r,o,n){super(t,n),this.signatures=r,this.failedRequestId=o,this.name="DelegatedClaimSigningIncompleteError"}}const Tt={assert:"intentBound",payoutDepositor:"intentBound",payoutClaimer:"standalone",claim:"standalone",wronglyChallenged:"standalone"},wr=["payoutClaimer","claim","wronglyChallenged"];async function _t(e,t,r={}){var n;if((n=r.signal)==null||n.throwIfAborted(),xr(e),D(e.depositorPublicKey)!==e.vault.depositorBtcPubkey)throw new Error(`Plan depositor key ${D(e.depositorPublicKey)} is not the vault's registered depositor key ${e.vault.depositorBtcPubkey}; the plan was not built for this vault.`);if(F.supportsDepositApproval(t)){if(!mr(t))throw new Error("Approval wallet does not implement signDelegatedClaimPsbt; the claim ceremony needs it because the device signs some claim PSBTs with no loaded intent and needs its own derivation fields on them.");const s=Tr(r,e);At(s.depositTerms,e.vault);const a=Er(e),i=await je(t,e.depositorPublicKey,e.btcNetwork);return _r(e,t,i,s,a,r)}const o=await je(t,e.depositorPublicKey,e.btcNetwork);return Ar(e,t,o,r.signal)}function xr(e){const t=new Set;for(const r of e.requests){if(t.has(r.id))throw new Error(`Delegated-claim plan lists request "${r.id}" more than once; its signatures could not be keyed, so nothing is signed.`);t.add(r.id)}}function Er(e){const t=e.requests.filter(n=>Tt[n.kind]==="intentBound"),r=wr.flatMap(n=>e.requests.filter(s=>s.kind===n)),o=t.length+r.length;if(o!==e.requests.length)throw new Error(`Delegated-claim plan has ${e.requests.length} signing requests but only ${o} are of a kind this signer can place in the device ceremony; the plan and the signer disagree on the request kinds.`);return{intentBound:t,standalone:r}}function Ct(e,t){if(t.size!==e.requests.length)throw new Error(`Delegated-claim signing ended with ${t.size} signatures for ${e.requests.length} requests; the set is incomplete and must not be treated as signed.`)}function Tr(e,t){if(e.depositTerms===void 0)throw new Error("An approval wallet signs Assert and the depositor Payout only under this vault's loaded intent; pass depositTerms (rebuilt from on-chain state) so it can be approved.");if(e.vaultContext===void 0)throw new Error("An approval wallet releases a loaded intent only through the vault-root derivation; pass vaultContext so that derivation can run before and after the intent-bound signatures.");const r=g.uint8ArrayToHex(e.vaultContext.depositorBtcPubkey);if(r!==t.vault.depositorBtcPubkey)throw new Error(`vaultContext derives from depositor key ${r} but this plan's vault is registered to ${t.vault.depositorBtcPubkey}; the device would derive for another depositor.`);return{depositTerms:e.depositTerms,vaultContext:e.vaultContext}}function At(e,t){const r=n=>n.map(s=>D(s)).sort().join(",");if(r(e.vaultKeeperBtcPubkeys)!==r(t.vaultKeeperBtcPubkeys)||r(e.universalChallengerBtcPubkeys)!==r(t.universalChallengerBtcPubkeys))throw new Error("Deposit terms carry different keeper or challenger rosters than the vault context this claim signs for; the device would bind the Assert to the wrong intent.");if(e.vaultCoreVersion!==t.vaultCoreVersion)throw new Error(`Deposit terms describe vault core version ${e.vaultCoreVersion} but the vault context has version ${t.vaultCoreVersion}; the device would bind the Assert to the wrong intent.`);if(e.timelockPegin!==t.timelockPegin)throw new Error(`Deposit terms describe timelockPegin ${e.timelockPegin} but the vault context has ${t.timelockPegin}; the device would bind the Assert to the wrong intent.`);if(e.timelockAssert!==t.timelockAssert)throw new Error(`Deposit terms describe timelockAssert ${e.timelockAssert} but the vault context has ${t.timelockAssert}; the device would bind the Assert to the wrong intent.`);if(e.protocolFeeRate!==t.protocolFeeRate)throw new Error(`Deposit terms describe protocolFeeRate ${e.protocolFeeRate} but the vault context has ${t.protocolFeeRate}; the device would bind the Assert to the wrong intent.`);if(e.vaults.length===0)throw new Error("Deposit terms describe no vault group, so they cannot name the vault context's vault provider; the device would bind the Assert to the wrong intent.");const o=D(t.vaultProviderBtcPubkey);for(const n of e.vaults)if(D(n.vaultProviderBtcPubkey)!==o)throw new Error(`Deposit terms group at htlcVout ${n.htlcVout} names a different vault provider than the vault context this claim signs for; the device would bind the Assert to the wrong intent.`)}async function _r(e,t,r,o,{intentBound:n,standalone:s},a){var P;const i=Cr(e,a.resume),u=[...n,...s];let l=0;const c={phase:"clearing any loaded intent"},p=async f=>{var m;c.phase="signing",(m=a.signal)==null||m.throwIfAborted();const v=await t.signDelegatedClaimPsbt(Oe(f.psbtBase64),z.createTaprootScriptPathSignOptionsForInput(e.depositorPublicKey,f.inputIndex,r)),y=await k.extractTapScriptSig(wt(v),f.inputIndex);ce(e,f,y),i.set(f.id,y)},d=async f=>{var y;c.phase=f,(y=a.signal)==null||y.throwIfAborted(),(await st.deriveVaultRoot(t,o.vaultContext)).fill(0)};typeof t.validateDepositTerms=="function"&&await t.validateDepositTerms(o.depositTerms);try{await d("clearing any loaded intent"),c.phase="approving the deposit terms",(P=a.signal)==null||P.throwIfAborted(),await t.approveDepositTerms(o.depositTerms);for(const f of n)await p(f),l++;await d("releasing the loaded intent");for(const f of s)i.has(f.id)||await p(f),l++}catch(f){const v=u[l];if(i.size===0||v===void 0)throw f;const y=c.phase==="signing"?`stopped at "${v.id}"`:`stopped before "${v.id}" while ${c.phase}`;throw new Et(`Delegated-claim signing ${y}; ${i.size} of ${e.requests.length} signatures were collected.`,i,v.id,{cause:f})}return Ct(e,i),i}function Cr(e,t){const r=new Map;if(!t)return r;for(const o of e.requests){const n=t.get(o.id);if(!(n===void 0||Tt[o.kind]==="intentBound")){try{ce(e,o,n)}catch{continue}r.set(o.id,n)}}return r}async function Ar(e,t,r,o){const n=e.requests,s=await F.signPsbtsWithFallback(t,n.map(i=>Oe(i.psbtBase64)),n.map(i=>z.createTaprootScriptPathSignOptionsForInput(e.depositorPublicKey,i.inputIndex,r)),o),a=new Map;for(let i=0;i<n.length;i++){const u=await k.extractTapScriptSig(wt(s[i]),n[i].inputIndex);ce(e,n[i],u),a.set(n[i].id,u)}return Ct(e,a),a}async function Sr(e){const t=await mt({depositorPublicKey:e.depositorPublicKey,btcNetwork:e.btcNetwork,source:e.source,trustedVerifyingKeyHex:e.trustedVerifyingKeyHex,vault:e.vault,babeSessionsJson:e.babeSessionsJson}),r=await _t(t,e.btcWallet,{depositTerms:e.depositTerms,vaultContext:e.vaultContext});return xt({plan:t,signatures:r})}async function kr(e){const t=await st.deriveVaultRoot(e.btcWallet,e.vaultContext);let r;try{r=await k.expandWotsSeed(t,e.htlcVout)}finally{t.fill(0)}let o;try{o=await k.wotsKeypairFromSeed(r)}finally{r.fill(0)}return $r(o.pk_hash,e.expectedWotsPkHash),await k.validateWotsKeypairAgainstGraph(e.txGraphVersion,o.keypair,e.txGraphJson),{wotsKeypairJson:JSON.stringify(o.keypair),pkHash:o.pk_hash}}function $r(e,t){if(re(e)!==re(t))throw new Error(`Derived WOTS public-key hash ${re(e)} does not match the vault's on-chain depositorWotsPkHash ${re(t)}. The wallet, the HTLC output index, or the derivation itself is not the one this vault was created with.`)}function re(e){return`0x${(e.startsWith("0x")?e.slice(2):e).toLowerCase()}`}function ye(e,t,r){const o=`${e} operation key (admin=${t.ethAddress})`,n=I.assertOnChainBtcPubkey(t.btcPubKey,`${e} roster key (admin=${t.ethAddress})`),s=I.assertOnChainBtcPubkey(r,o);return{adminAddress:t.ethAddress,genesisBtcPubkey:n,operationBtcPubkey:s,rotated:s!==n}}function Ir(e){const t=new Map;for(const r of e){const o=t.get(r.operationBtcPubkey);if(o)throw new Error(`Participant operation key collision: ${o} and ${r.adminAddress} both resolve to operation key ${r.operationBtcPubkey}`);t.set(r.operationBtcPubkey,r.adminAddress)}}function St(e,t,r){if(t.vaultKeepers.length!==e.vaultKeepers.length||t.universalChallengers.length!==e.universalChallengers.length)throw new Error(`Operation-key resolution returned ${t.vaultKeepers.length} keeper and ${t.universalChallengers.length} challenger keys for a roster of ${e.vaultKeepers.length} keepers and ${e.universalChallengers.length} challengers`);const o=ye("vault provider",{ethAddress:e.vaultProviderEthAddress,btcPubKey:e.vaultProviderGenesisBtcPubkey},t.vaultProvider),n=e.vaultKeepers.map((a,i)=>ye("vault keeper",a,t.vaultKeepers[i])),s=e.universalChallengers.map((a,i)=>ye("universal challenger",a,t.universalChallengers[i]));return Ir([o,...n,...s]),{vaultProvider:o,vaultKeepers:n,universalChallengers:s,vaultKeeperOperationKeysSorted:n.map(a=>a.operationBtcPubkey).sort(),universalChallengerOperationKeysSorted:s.map(a=>a.operationBtcPubkey).sort(),resolvedAt:r,query:e}}async function kt(e){const t=await e.operationKeyReader.getCurrentOperationKeys(e.query,e.blockNumber);return St(e.query,t,{mode:"current"})}async function He(e){const t=await e.operationKeyReader.getOperationKeysAtEpochs(e.query,e.epochs);return St(e.query,t,{mode:"epochs",epochs:e.epochs})}async function $t(e){const{basic:t,protocol:r}=e.vault,{registryReader:o,vaultKeeperReader:n,universalChallengerReader:s,operationKeyReader:a}=e.readers,[i,u,l,c]=await Promise.all([n.getVaultKeepersByVersion(t.applicationEntryPoint,r.appVaultKeepersVersion),s.getUniversalChallengersByVersion(r.universalChallengersVersion),o.getVaultProviderGenesisBtcPubKey(t.vaultProvider),o.getVaultKeyEpochs(e.vaultId)]);if(i.length===0)throw new Error(`No vault keepers for version ${r.appVaultKeepersVersion}`);if(u.length===0)throw new Error(`No universal challengers for version ${r.universalChallengersVersion}`);return He({operationKeyReader:a,query:{vaultProviderEthAddress:t.vaultProvider,vaultProviderGenesisBtcPubkey:`0x${l}`,applicationEntryPoint:t.applicationEntryPoint,vaultKeepers:i,universalChallengers:u},epochs:c})}async function Rr(e){const{vaultId:t,readers:r}=e,o=await r.registryReader.getVaultData(t),{basic:n,protocol:s}=o;if(s.vaultCoreVersion!==M)throw new Error(`Vault ${t} is stamped vault core version ${s.vaultCoreVersion}; delegated claim requires ${M}.`);const a=I.assertOnChainBtcPubkey(n.depositorBtcPubKey,`getBtcVaultBasicInfo(${t}).depositorBtcPubKey`);if(n.status!==le.OnChainBtcVaultStatus.REDEEMED)throw new I.VaultClaimableByNotFoundError(t,n.depositorBtcPubKey,n.createdAt,n.createdAt,`the vault's status is ${n.status}, not Redeemed (${le.OnChainBtcVaultStatus.REDEEMED}); no scan was made`);const[i,u,l,c]=await Promise.all([$t({vaultId:t,vault:o,readers:r}),r.registryReader.getRegistrationRecordsAtBlock(n.createdAt),r.registryReader.getVaultClaimableBy(t,n.depositorBtcPubKey,n.createdAt).catch(b=>{throw I.isVaultClaimableByNotFoundError(b)?new I.VaultClaimableByNotFoundError(t,n.depositorBtcPubKey,b.fromBlock,b.toBlock,"the vault is Redeemed but no VaultClaimableBy authorizes this depositor key in the finalized range. Either the redeem has not finalized yet (the scan stops about two epochs behind the tip), or the vault was redeemed for a vault keeper alone (redeemForAVK emits no depositor log), or the node did not serve every block scanned.",{cause:b}):b}),r.protocolParamsReader.getOffchainParamsByVersion(s.offchainParamsVersion)]),p=le.deriveTimelockPegin(c.timelockAssert),d=I.findRegistrationRecord(u,t,n.createdAt);I.assertRegisteredPayoutScriptBounds(d);const P=I.registrationPrePeginTxHash(d);if(P.toLowerCase()!==s.prePeginTxHash.toLowerCase())throw new Error(`Registration log of vault ${t} records prePeginTxHash ${P} but the vault record says ${s.prePeginTxHash}; refusing an inconsistent node.`);if(d.vaultCoreVersion!==s.vaultCoreVersion)throw new Error(`Registration log of vault ${t} records vault core version ${d.vaultCoreVersion} but the vault record says ${s.vaultCoreVersion}; refusing an inconsistent node.`);if(d.amount!==n.amount)throw new Error(`Registration log of vault ${t} records amount ${d.amount} sats but the vault record says ${n.amount}; refusing an inconsistent node.`);if(d.depositor.toLowerCase()!==n.depositor.toLowerCase())throw new Error(`Registration log of vault ${t} records depositor ${d.depositor} but the vault record says ${n.depositor}; refusing an inconsistent node.`);if(d.vaultProvider.toLowerCase()!==n.vaultProvider.toLowerCase())throw new Error(`Registration log of vault ${t} records vaultProvider ${d.vaultProvider} but the vault record says ${n.vaultProvider}; refusing an inconsistent node.`);if(l.vaultCoreVersion!==s.vaultCoreVersion)throw new Error(`Redemption log of vault ${t} records vault core version ${l.vaultCoreVersion} but the vault record says ${s.vaultCoreVersion}; refusing an inconsistent node.`);if(l.proverCircuitVersion!==d.proverCircuitVersion)throw new Error(`Redemption log of vault ${t} records proverCircuitVersion ${l.proverCircuitVersion} but the registration log says ${d.proverCircuitVersion}; refusing an inconsistent node.`);if(d.proverCircuitVersion!==c.proverCircuitVersion)throw new Error(`Registration log of vault ${t} records proverCircuitVersion ${d.proverCircuitVersion} but the stamped offchain params say ${c.proverCircuitVersion}; refusing an inconsistent node.`);const f=I.calculateBtcTxHash(s.depositorSignedPeginTx);for(const[b,_]of[["Registration",d.peginTxHash],["Redemption",l.peginTxHash]])if(_.toLowerCase()!==f.toLowerCase())throw new Error(`${b} log of vault ${t} records peginTxHash ${_} but the vault's depositor-signed PegIn hashes to ${f}; refusing an inconsistent node.`);const v=Y(I.derivePeginVaultId(f,n.depositor));if(v!==Y(t))throw new Error(`Depositor-signed PegIn of vault ${t} derives vault id ${v} with depositor ${n.depositor}; refusing an inconsistent node.`);for(const b of["offchainParamsVersion","universalChallengersVersion","appVaultKeepersVersion"]){if(d[b]!==s[b])throw new Error(`Registration log of vault ${t} records ${b} ${d[b]} but the vault record says ${s[b]}; refusing an inconsistent node.`);if(l[b]!==s[b])throw new Error(`Redemption log of vault ${t} records ${b} ${l[b]} but the vault record says ${s[b]}; refusing an inconsistent node.`)}const y=A.Transaction.fromHex(g.stripHexPrefix(s.depositorSignedPeginTx));if(y.ins.length!==1)throw new Error(`Depositor-signed PegIn of vault ${t} has ${y.ins.length} inputs; it spends Pre-PegIn ${s.prePeginTxHash} output ${s.htlcVout} with exactly one; refusing an inconsistent node.`);const m=Ne(y.ins[0].hash),$=y.ins[0].index;if(m!==g.stripHexPrefix(s.prePeginTxHash).toLowerCase()||$!==s.htlcVout)throw new Error(`Depositor-signed PegIn of vault ${t} spends ${m}:${$} but the vault record says Pre-PegIn ${s.prePeginTxHash} output ${s.htlcVout}; refusing an inconsistent node.`);const T=y.outs[h.PEGIN_VAULT_OUTPUT_INDEX];if(T===void 0)throw new Error(`Depositor-signed PegIn of vault ${t} has no output ${h.PEGIN_VAULT_OUTPUT_INDEX}; the Payout cannot spend the Vault UTXO.`);if(BigInt(T.value)!==n.amount)throw new Error(`Depositor-signed PegIn of vault ${t} pays ${T.value} sats to output ${h.PEGIN_VAULT_OUTPUT_INDEX} but the vault record says ${n.amount}; refusing an inconsistent node.`);return{context:{vaultId:t,depositorEthAddress:n.depositor,depositorBtcPubkey:a,registeredPayoutScriptPubKey:g.stripHexPrefix(d.depositorPayoutScriptPubKey),vaultProviderBtcPubkey:i.vaultProvider.operationBtcPubkey,vaultKeeperBtcPubkeys:[...i.vaultKeeperOperationKeysSorted],universalChallengerBtcPubkeys:[...i.universalChallengerOperationKeysSorted],txGraphVersion:M,proverCircuitVersion:c.proverCircuitVersion,vaultCoreVersion:s.vaultCoreVersion,claimableEventBlockNumber:l.blockNumber,peginVaultOutputValueSats:T.value,protocolFeeRate:c.feeRate,councilSize:c.securityCouncilKeys.length,timelockPegin:p,timelockAssert:Number(c.timelockAssert)},vault:o,registrationRecord:d,registrationRecords:u,participantKeys:i,offchainParams:c,depositorBtcPubKeyBytes32:n.depositorBtcPubKey,depositorWotsPkHash:s.depositorWotsPkHash,prePeginTxHash:s.prePeginTxHash,peginTxHash:f,vaultProvider:n.vaultProvider,htlcVout:s.htlcVout}}const It=8,Br=6e3,Vr=10*6e4,Nr=10;class De extends Error{constructor(t){super(t),this.name="PeginRegistrationMissingError"}}class Ke extends Error{constructor(t){super(t),this.name="PeginRegistrationNotFinalError"}}function Rt(e){return e instanceof De||e instanceof Error&&e.name==="PeginRegistrationMissingError"}function Or(e){return e instanceof Ke||e instanceof Error&&e.name==="PeginRegistrationNotFinalError"}function Je(e){const{currentBlock:t,createdAtBlock:r}=e,o=t-r+1n;return o<0n?0:Number(o)}async function Hr(e){const{vaultRegistryReader:t,getBlockNumber:r,vaultIds:o,required:n=It,pollIntervalMs:s=Br,timeoutMs:a=Vr,signal:i,onProgress:u}=e;if(o.length===0)throw new Error("waitForPeginRegistrationDepth requires at least one vault ID");const l=Date.now();let c=!1,p=0,d;for(;;){if(i!=null&&i.aborted)throw new Error(`Aborted while waiting for peg-in registration depth (${o.length} vault(s))`);if(Date.now()-l>=a)throw new Ke(`Peg-in registration did not reach ${n} Ethereum confirmations within ${a}ms. The registration transaction was submitted but is not yet final, so the Pre-PegIn Bitcoin transaction was never sent and no funds are at risk. Resume this deposit from the dashboard once the network settles.`+(d instanceof Error?` Last read error: ${d.message}`:""));try{const P=await r(),f=await Promise.all(o.map(y=>t.getVaultBasicInfo(y))),v=f.findIndex(y=>y.depositor===xe.zeroAddress||y.createdAt===0n);if(v!==-1){if(p+=1,!c&&p>Nr)throw new De(`Vault ${o[v]} is still not visible on-chain after ${p} reads — the registration does not exist.`);console.warn(`Peg-in registration for vault ${o[v]} is not visible in chain state at block ${P} — a lagging RPC backend or an Ethereum reorg. Still polling.`),u==null||u({confirmations:0,required:n})}else{c=!0,p=0,d=void 0;let y=f[0],m=Je({currentBlock:P,createdAtBlock:f[0].createdAt});for(const $ of f.slice(1)){const T=Je({currentBlock:P,createdAtBlock:$.createdAt});T<m&&(m=T,y=$)}if(u==null||u({confirmations:m,required:n}),m>=n)return{confirmations:m,basicInfo:y}}}catch(P){if(Rt(P))throw P;console.warn(`Registration-depth read failed (retrying in ${s}ms): `+(P instanceof Error?P.message:String(P))),d=P}await new Promise((P,f)=>{const v=()=>{clearTimeout(y),f(new Error(`Aborted while waiting for peg-in registration depth (${o.length} vault(s))`))},y=setTimeout(()=>{i==null||i.removeEventListener("abort",v),P()},s);i==null||i.addEventListener("abort",v,{once:!0})})}}const Dr=/^(?:[0-9a-f]{2})*$/,Kr=/^[0-9a-f]{64}$/,Ur=/^([0-9a-f]{64}):(0|[1-9][0-9]*)$/,Mr=-2147483648,Lr=2147483647,ve=4294967295,Qe=2,Ze=2,ie=0;class x extends Error{constructor(t){super(t),this.name="GraphFingerprintError"}}function C(e,t,r){const o=e[t];if(o===void 0)throw new x(`Graph tx ${r} is missing "${t}"`);return o}function ee(e,t){if(!Array.isArray(e))throw new x(`Graph tx ${t} is not an array`);return e}function N(e,t){if(e===null||typeof e!="object"||Array.isArray(e))throw new x(`Graph tx ${t} is not an object`);return e}function Q(e,t,r,o){if(typeof e!="number"||!Number.isSafeInteger(e)||e<r||e>o)throw new x(`Graph tx ${t} is not an integer in [${r}, ${o}]`);return e}function be(e,t){if(typeof e!="string"||!Dr.test(e))throw new x(`Graph tx ${t} is not lowercase hex without a prefix`);return K.Buffer.from(e,"hex")}function ae(e,t){if(typeof e!="string"||!Kr.test(e))throw new x(`Graph ${t} is not 32 bytes of lowercase hex`);return e}function et(e,t){const r=N(e,t),o=new A.Transaction;return o.version=Q(C(r,"version",t),`${t}.version`,Mr,Lr),o.locktime=Q(C(r,"lock_time",t),`${t}.lock_time`,0,ve),ee(C(r,"input",t),`${t}.input`).forEach((n,s)=>{const a=`${t}.input[${s}]`,i=N(n,a),u=C(i,"previous_output",a),l=typeof u=="string"&&Ur.exec(u);if(!l)throw new x(`Graph tx ${a}.previous_output is not "<txid>:<vout>"`);const c=Q(Number(l[2]),`${a}.previous_output vout`,0,ve);o.addInput(K.Buffer.from(l[1],"hex").reverse(),c,Q(C(i,"sequence",a),`${a}.sequence`,0,ve),be(C(i,"script_sig",a),`${a}.script_sig`)),o.ins[s].witness=ee(C(i,"witness",a),`${a}.witness`).map((p,d)=>be(p,`${a}.witness[${d}]`))}),ee(C(r,"output",t),`${t}.output`).forEach((n,s)=>{const a=`${t}.output[${s}]`,i=N(n,a);o.addOutput(be(C(i,"script_pubkey",a),`${a}.script_pubkey`),Q(C(i,"value",a),`${a}.value`,0,Number.MAX_SAFE_INTEGER))}),new Uint8Array(o.toBuffer())}function L(e,t){const r=g.stripHexPrefix(e).toLowerCase();let o;try{o=A.Transaction.fromHex(r)}catch(n){throw new x(`Presign ${t} is not one transaction: ${n instanceof Error?n.message:String(n)}`)}if(o.toHex()!==r)throw new x(`Presign ${t} is not a canonical transaction encoding`);return o}function Bt(e,t){const r=e.ins[t];if(r)return{txid:K.Buffer.from(r.hash).reverse().toString("hex"),vout:r.index}}function Vt(e,t){if(!e.outs[ie])throw new x(`Presign ${t}.claim_tx must have output ${ie}`)}function Fr(e,t,r){if(e.ins.length!==1)throw new x(`Presign ${r}.claim_tx must have exactly one input, got ${e.ins.length}`);Vt(e,r);const o=Bt(e,0);if((o==null?void 0:o.txid)!==t||o.vout!==w.PEGIN_DEPOSITOR_CLAIM_VOUT){const n=o?`${o.txid}:${o.vout}`:"no input";throw new x(`Presign ${r}.claim_tx must spend ${t}:${w.PEGIN_DEPOSITOR_CLAIM_VOUT}, got ${n}`)}}function Ue(e,t,r){const o=Bt(e,0);if((o==null?void 0:o.txid)!==t||o.vout!==ie){const n=o?`${o.txid}:${o.vout}`:"no input";throw new x(`Presign ${r}.assert_tx input 0 must spend ${t}:${ie}, got ${n}`)}}function Nt(e){const t=L(e.peginTxHex,`${e.path}.pegin_tx`),r=L(e.claimTxHex,`${e.path}.claim_tx`),o=L(e.assertTxHex,`${e.path}.assert_tx`);return{peginTx:t,claimTx:r,assertTx:o}}function Xr(e){const t=L(e.claimTxHex,`${e.path}.claim_tx`),r=L(e.assertTxHex,`${e.path}.assert_tx`);Vt(t,e.path),Ue(r,t.getId(),e.path)}function qr(e){const{peginTx:t,claimTx:r,assertTx:o}=Nt(e);Fr(r,t.getId(),e.path),Ue(o,r.getId(),e.path)}function Gr(e,t){const[r,...o]=e.ins;if(!r||o.length>0)throw new x(`Presign claim_tx must have exactly one input, got ${e.ins.length}`);const n=K.Buffer.from(r.hash).reverse().toString("hex");if(n!==t||r.index!==w.PEGIN_DEPOSITOR_CLAIM_VOUT)throw new x(`Presign claim_tx must spend ${t}:${w.PEGIN_DEPOSITOR_CLAIM_VOUT}, got ${n}:${r.index}`);if(e.version!==Qe)throw new x(`Presign claim_tx version must be ${Qe}, got ${e.version}`);if(r.witness.length>0)throw new x(`Presign claim_tx input must have an empty witness, got ${r.witness.length} item(s)`);if(e.outs.length!==Ze)throw new x(`Presign claim_tx must have exactly ${Ze} outputs, got ${e.outs.length}`)}function Ot(e){const t=[...e.challengers].sort((o,n)=>o.pubkey<n.pubkey?-1:o.pubkey>n.pubkey?1:0),r=[e.peginTx,e.claimTx,e.assertTx,e.payoutTx];return t.forEach((o,n)=>{const s=ae(o.pubkey,"challenger pubkey");if(n>0&&t[n-1].pubkey===s)throw new x(`Graph lists challenger ${s} twice`);r.push(J.hexToBytes(s),o.nopayoutTx);for(const a of o.outputLabelHashes)r.push(J.hexToBytes(ae(a,"output_label_hashes entry")))}),J.bytesToHex(J.sha256(J.concatBytes(...r)))}function zr(e){const t=g.stripHexPrefix(e.peginTxid).toLowerCase(),{peginTx:r,claimTx:o,assertTx:n}=Nt({peginTxHex:e.peginTxHex,claimTxHex:e.claimTxHex,assertTxHex:e.assertTxHex,path:"depositor_graph"});if(r.getId()!==t)throw new x(`Presign pegin_tx hashes to ${r.getId()}, expected ${t}`);Gr(o,t),Ue(n,o.getId(),"depositor_graph");const s=a=>new Uint8Array(a.toBuffer());return Ot({peginTx:s(r),claimTx:s(o),assertTx:s(n),payoutTx:s(L(e.payoutTxHex,"payout_tx")),challengers:e.challengers.map(a=>({pubkey:g.canonicalizeBtcPubkey(a.challenger_pubkey),nopayoutTx:s(L(a.nopayout_tx.tx_hex,"nopayout_tx")),outputLabelHashes:a.output_label_hashes.map(i=>g.stripHexPrefix(i).toLowerCase())}))})}function Ht(e){const t=o=>et(N(C(e,o,"graph"),o).tx,o),r=N(C(e,"challenger_subgraphs","graph"),"challenger_subgraphs");return Ot({peginTx:t("pegin_tx"),claimTx:t("claim_tx"),assertTx:t("assert_tx"),payoutTx:t("payout_tx"),challengers:Object.entries(r).map(([o,n])=>{const s=`challenger_subgraphs[${o}]`,a=N(n,s);return{pubkey:o,nopayoutTx:et(N(C(a,"nopayout_tx",s),`${s}.nopayout_tx`).tx,`${s}.nopayout_tx`),outputLabelHashes:ee(C(a,"output_label_hashes",s),`${s}.output_label_hashes`).map((i,u)=>ae(i,`${s}.output_label_hashes[${u}]`))}})})}function Yr(e){const t=N(C(e,"challenger_pubkeys","graph"),"challenger_pubkeys"),r=new Set;for(const o of["local","universal"])ee(C(t,o,"challenger_pubkeys"),`challenger_pubkeys.${o}`).forEach((n,s)=>{const a=ae(n,`challenger_pubkeys.${o}[${s}]`);if(r.has(a))throw new x(`Graph declares challenger ${a} more than once`);r.add(a)});return r}function Wr(e,t){const r=Ht(e);if(r!==t)throw new x(`Graph fingerprint ${r} does not match the presign fingerprint ${t}`);const o=Object.keys(N(e.challenger_subgraphs,"challenger_subgraphs")),n=Yr(e);if(o.length!==n.size||o.some(s=>!n.has(s)))throw new x(`Graph challenger_subgraphs keys ${o.join(", ")} do not match challenger_pubkeys ${[...n].join(", ")}`)}const jr=1;function Jr(e,t,r){const o=r.map(p=>g.stripHexPrefix(p).toLowerCase()),n=t.filter(p=>o.includes(p));if(n.length>0)throw new Error(`Cannot validate challenger set: vault keepers and universal challengers overlap (${n.join(", ")})`);const s=[...t,...o],a=e.map(p=>g.stripHexPrefix(p.challenger_pubkey).toLowerCase()),i=new Set(a);if(i.size!==a.length)throw new Error("Depositor graph contains duplicate challenger entries in challenger_presign_data");const u=new Set(s),l=s.filter(p=>!i.has(p)),c=a.filter(p=>!u.has(p));if(l.length>0||c.length>0)throw new Error("Depositor graph challenger set does not match expected (local ∪ universal)"+(l.length>0?` (missing: ${l.join(", ")})`:"")+(c.length>0?` (unexpected: ${c.join(", ")})`:""));return g.getSortedXOnlyPubkeys(s)}function Qr(e,t,r){const o=r>=h.ASSERT_MARKER_FIRST_VAULT_CORE_VERSION?1:0,n=h.ASSERT_NON_CHALLENGER_OUTPUT_COUNT+h.CHALLENGE_ASSERT_CONNECTORS_PER_CHALLENGER*t+o;if(e.outs.length!==n)throw new Error(`Assert must have ${n} outputs for ${t} challengers (vault core version ${r}), got ${e.outs.length}`)}async function Dt(e,t){const r=w.deriveLocalChallengers({claimerBtcPubkey:t.depositorBtcPubkey,depositorBtcPubkey:t.depositorBtcPubkey,vaultProviderBtcPubkey:t.vaultProviderBtcPubkey,vaultKeeperBtcPubkeys:t.vaultKeeperBtcPubkeys}),o=Jr(e.challenger_presign_data,r,t.universalChallengerBtcPubkeys),n=g.stripHexPrefix(t.depositorBtcPubkey),s=A.Transaction.fromHex(g.stripHexPrefix(e.assert_tx.tx_hex));Qr(s,o.length,t.vaultCoreVersion);const a=[];for(const i of e.challenger_presign_data){const u=g.stripHexPrefix(i.challenger_pubkey),l=o.indexOf(u.toLowerCase()),c=await Zr({challenger:i,challengerPubkey:u,challengerIndex:l,challengerCount:o.length,claimerPubkey:n,assertTx:s,ctx:t});a.push({challenger:i,challengerPubkey:u,prevouts:c})}return{localChallengers:r,noPayouts:a}}async function Zr(e){const{challenger:t,challengerPubkey:r,challengerIndex:o,challengerCount:n,claimerPubkey:s,assertTx:a,ctx:i}=e;H.assertNoPayoutOutputMatchesChallenger(t.nopayout_tx.tx_hex,r,i.network);const u=A.Transaction.fromHex(g.stripHexPrefix(t.nopayout_tx.tx_hex)),l=A.Transaction.fromHex(g.stripHexPrefix(t.challenge_assert_x_tx.tx_hex)),c=A.Transaction.fromHex(g.stripHexPrefix(t.challenge_assert_y_tx.tx_hex)),p=await k.getChallengeAssertOutputScriptPubKey({txGraphVersion:i.vaultCoreVersion,claimer:s,challenger:r,timelockChallengeAssert:i.timelockChallengeAssert,outputLabelHashes:t.output_label_hashes.map(P=>P.toLowerCase()),network:i.network});for(const[P,f]of[["X",l],["Y",c]])H.assertChallengeAssertIsCanonical({challengeAssertTx:f,assertTx:a,half:P,challengerIndex:o,challengerCount:n,challengerPubkey:r,outputConnectorScriptPubKey:p});const d=[a.outs[h.ASSERT_PAYOUT_OUTPUT_INDEX],l.outs[h.CHALLENGE_ASSERT_OUTPUT_CONNECTOR_INDEX],c.outs[h.CHALLENGE_ASSERT_OUTPUT_CONNECTOR_INDEX]];return H.assertCanonicalNoPayoutShape({noPayoutTx:u,assertTxid:a.getId(),challengeAssertXTxid:l.getId(),challengeAssertYTxid:c.getId(),timelockChallengeAssert:i.timelockChallengeAssert,prevoutValues:[d[0].value,d[1].value,d[2].value]}),d.map(P=>({script_pubkey:g.uint8ArrayToHex(new Uint8Array(P.script)),value:P.value}))}async function eo(e,t,r){const o=[],n=[],s=[],{localChallengers:a,noPayouts:i}=await Dt(e,r),u=await w.buildPayoutPsbt({vaultCoreVersion:r.vaultCoreVersion,vkClaimerPayoutScriptPubKeys:r.vkClaimerPayoutScriptPubKeys,vpCommissionScriptPubKey:r.vpCommissionScriptPubKey,payoutTxHex:e.payout_tx.tx_hex,peginTxHex:r.peginTxHex,assertTxHex:e.assert_tx.tx_hex,timelockAssert:r.timelockAssert,depositorBtcPubkey:r.depositorBtcPubkey,vaultProviderBtcPubkey:r.vaultProviderBtcPubkey,vaultKeeperBtcPubkeys:r.vaultKeeperBtcPubkeys,universalChallengerBtcPubkeys:r.universalChallengerBtcPubkeys,timelockPegin:r.timelockPegin,network:r.network,claimerBtcPubkey:r.depositorBtcPubkey,registeredPayoutScriptPubKey:r.registeredPayoutScriptPubKey,commissionBps:jr,protocolFeeRate:r.protocolFeeRate,councilMembers:r.councilMembers,councilQuorum:r.councilQuorum});o.push(u.psbtHex),n.push(z.createTaprootScriptPathSignOptions(t,h.DEPOSITOR_SIGNED_INPUT_COUNT));const l=g.stripHexPrefix(r.depositorBtcPubkey);for(const{challenger:c,challengerPubkey:p,prevouts:d}of i){const P=o.length,f=await H.buildNoPayoutPsbt({noPayoutTxHex:c.nopayout_tx.tx_hex,challengerPubkey:p,prevouts:d,connectorParams:{txGraphVersion:r.vaultCoreVersion,claimer:l,localChallengers:a,universalChallengers:r.universalChallengerBtcPubkeys,timelockAssert:r.timelockAssert,councilMembers:r.councilMembers,councilQuorum:r.councilQuorum}});o.push(f),n.push(z.createTaprootScriptPathSignOptions(t,h.DEPOSITOR_SIGNED_INPUT_COUNT)),s.push({challengerPubkey:p,noPayoutIdx:P})}return{psbtHexes:o,signOptions:n,challengerEntries:s}}function to(e,t,r){w.assertPsbtUnsignedTxMatches(e[0]);const n=w.extractPayoutSignature(e[0].returnedPsbtHex,r);w.assertScriptPathSchnorrSignature({requestedPsbtHex:e[0].requestedPsbtHex,signatureHex:n,signerXOnlyPubkeyHex:r,inputIndex:0});const s={};for(const a of t){w.assertPsbtUnsignedTxMatches(e[a.noPayoutIdx]);const i=w.extractPayoutSignature(e[a.noPayoutIdx].returnedPsbtHex,r);w.assertScriptPathSchnorrSignature({requestedPsbtHex:e[a.noPayoutIdx].requestedPsbtHex,signatureHex:i,signerXOnlyPubkeyHex:r,inputIndex:0}),s[a.challengerPubkey]={nopayout_signature:i}}return{payout_signatures:{payout_signature:n},per_challenger:s}}async function Kt(e){const{depositorGraph:t,btcWallet:r,signingContext:o}=e;qr({peginTxHex:o.peginTxHex,claimTxHex:t.claim_tx.tx_hex,assertTxHex:t.assert_tx.tx_hex,path:"depositor_graph"});const n=await r.getPublicKeyHex(),{depositorPubkey:s}=g.validateWalletPubkey(n,g.stripHexPrefix(o.depositorBtcPubkey)),{psbtHexes:a,signOptions:i,challengerEntries:u}=await eo(t,n,o),l=await F.signPsbtsWithFallback(r,a,i),c=a.map((p,d)=>({requestedPsbtHex:p,returnedPsbtHex:l[d]}));return to(c,u,s)}const ro=1e4,q=10;async function Me(e){const{statusReader:t,vaultId:r,peginTxid:o,targetStatuses:n,timeoutMs:s,pollIntervalMs:a=ro,signal:i}=e,u=Date.now();for(;;){if(i!=null&&i.aborted)throw new Error(`Polling aborted for vault ${r.slice(0,q)}… (target: ${[...n].join(", ")})`);if(Date.now()-u>=s)throw new Error(`Polling timeout after ${s}ms for vault ${r.slice(0,q)}… (target: ${[...n].join(", ")})`);try{const l=await t.getPeginStatusByVaultId({vault_id:r},i);if(S.vaultIdKey(l.vault_id)!==S.vaultIdKey(r))throw new Error(`getPeginStatusByVaultId returned status for vault ${l.vault_id.slice(0,q)}…, requested ${r.slice(0,q)}…`);if(l.pegin_txid.toLowerCase()!==o.toLowerCase())throw new Error(`getPeginStatusByVaultId returned status for pegin ${l.pegin_txid.slice(0,8)}…, requested ${o.slice(0,8)}…`);const c=l.status;if(n.has(c)||c===S.DaemonStatus.ACTIVATED)return c;if(c===S.DaemonStatus.EXPIRED||S.VP_TERMINAL_FAILURE_STATUSES.has(c))throw new Error(`Vault ${r.slice(0,q)}… reached terminal status "${c}" while waiting for ${[...n].join(", ")}`)}catch(l){if(!(l instanceof S.JsonRpcError&&l.code===S.RpcErrorCode.PEGIN_NOT_FOUND))throw l}await new Promise((l,c)=>{const p=()=>{clearTimeout(d),c(new Error(`Polling aborted for vault ${r.slice(0,q)}… (target: ${[...n].join(", ")})`))},d=setTimeout(()=>{i==null||i.removeEventListener("abort",p),l()},a);i==null||i.addEventListener("abort",p,{once:!0})})}}const oo=1200*1e3,Ut=new Set([S.DaemonStatus.PENDING_ACKS,S.DaemonStatus.PENDING_ACTIVATION,S.DaemonStatus.ACTIVATED_PENDING_BROADCAST,S.DaemonStatus.ACTIVATED]),no=new Set([S.DaemonStatus.PENDING_DEPOSITOR_SIGNATURES,...Ut]);function so(e){return e.map(t=>({claimerPubkeyXOnly:g.processPublicKeyToXOnly(t.claimer_pubkey),payoutTxHex:t.payout_tx.tx_hex,assertTxHex:t.assert_tx.tx_hex}))}function O(e){return g.processPublicKeyToXOnly(e).toLowerCase()}function io(e,t){const r=(u,l,c)=>{throw new Error(`Deposit terms ${u} (${String(l)}) does not match the vault's version-locked signing context (${String(c)}); refusing to sign payouts against terms that describe a different graph.`)},o=[["protocolFeeRate",e.protocolFeeRate,t.protocolFeeRate],["vaultCoreVersion",e.vaultCoreVersion,t.vaultCoreVersion],["timelockPegin",e.timelockPegin,t.timelockPegin],["timelockAssert",e.timelockAssert,t.timelockAssert]];for(const[u,l,c]of o)l!==c&&r(u,l,c);const n=u=>u.map(O).sort(),s=(u,l)=>{const c=n(u),p=n(l);return c.length===p.length&&c.every((d,P)=>d===p[P])};s(e.vaultKeeperBtcPubkeys,t.vaultKeeperBtcPubkeys)||r("vaultKeeperBtcPubkeys",e.vaultKeeperBtcPubkeys.join(","),t.vaultKeeperBtcPubkeys.join(",")),s(e.universalChallengerBtcPubkeys,t.universalChallengerBtcPubkeys)||r("universalChallengerBtcPubkeys",e.universalChallengerBtcPubkeys.join(","),t.universalChallengerBtcPubkeys.join(","));const a=O(t.vaultProviderBtcPubkey),i=e.vaults.map(u=>O(u.vaultProviderBtcPubkey));i.includes(a)||r("vaults[].vaultProviderBtcPubkey",i.join(",")||"<no vaults>",t.vaultProviderBtcPubkey)}function ao(e,t,r,o){const n=O(o),s=[O(t),...r.map(O)],a=new Set(s);if(a.size!==s.length)throw new Error("Cannot validate claimer set: signing context contains duplicate vault provider or vault keeper key");if(a.has(n))throw new Error("Cannot validate claimer set: depositor key overlaps with vault provider or vault keeper set");const i=e.map(d=>O(d.claimer_pubkey));if(new Set(i).size!==i.length)throw new Error("Presign response contains duplicate claimer entries");const u=i.filter(d=>d!==n),l=new Set(u),c=s.filter(d=>!l.has(d)),p=u.filter(d=>!a.has(d));if(c.length>0||p.length>0)throw new Error("Presign response claimer set does not match expected (vault provider ∪ vault keepers)"+(c.length>0?` (missing: ${c.join(", ")})`:"")+(p.length>0?` (unexpected: ${p.join(", ")})`:""))}function tt(e,t){return{vaultCoreVersion:t.vaultCoreVersion,payoutTxHex:e.payoutTxHex,peginTxHex:t.peginTxHex,assertTxHex:e.assertTxHex,vaultProviderBtcPubkey:t.vaultProviderBtcPubkey,vaultKeeperBtcPubkeys:t.vaultKeeperBtcPubkeys,universalChallengerBtcPubkeys:t.universalChallengerBtcPubkeys,depositorBtcPubkey:t.depositorBtcPubkey,timelockPegin:t.timelockPegin,timelockAssert:t.timelockAssert,registeredPayoutScriptPubKey:t.registeredPayoutScriptPubKey,claimerBtcPubkey:e.claimerPubkeyXOnly,commissionBps:t.commissionBps,protocolFeeRate:t.protocolFeeRate,councilMembers:t.councilMembers,councilQuorum:t.councilQuorum,vkClaimerPayoutScriptPubKeys:t.vkClaimerPayoutScriptPubKeys,vpCommissionScriptPubKey:t.vpCommissionScriptPubKey}}async function uo(e,t,r,o){const n=new F.PayoutManager({network:t.network,btcWallet:e}),s=r.length;o==null||o(0,s);let a;if(n.supportsBatchSigning())a=(await n.signPayoutTransactionsBatch(r.map(l=>tt(l,t)))).map(l=>l.payoutSignature);else{a=[];for(let u=0;u<r.length;u++){o==null||o(u,s);const l=await n.signPayoutTransaction(tt(r[u],t));a.push(l.signature)}}const i={};for(let u=0;u<r.length;u++)i[r[u].claimerPubkeyXOnly]={payout_signature:a[u]};return o==null||o(s,s),i}async function co(e){const{statusReader:t,presignClient:r,btcWallet:o,vaultId:n,peginTxid:s,depositorPk:a,signingContext:i,depositTerms:u,timeoutMs:l=oo,signal:c,onProgress:p,recordGraphFingerprint:d}=e,P=await Me({statusReader:t,vaultId:n,peginTxid:s,targetStatuses:no,timeoutMs:l,signal:c});if(Ut.has(P))return;c==null||c.throwIfAborted(),u!==void 0&&io(u,i);const f=F.supportsDepositApproval(o)?o:void 0;let v;if(f){if(!u)throw new Error("runDepositorPresignFlow: this wallet requires approved deposit terms but none were provided. Fresh deposits must pass PreparePeginResult.depositTerms; resume flows must rebuild them from on-chain state (the vault app's rebuildDepositTerms).");v=u}const y=await r.requestDepositorPresignTransactions({pegin_txid:s,depositor_pk:a},c);c==null||c.throwIfAborted(),y.txs.forEach((U,te)=>{Xr({claimTxHex:U.claim_tx.tx_hex,assertTxHex:U.assert_tx.tx_hex,path:`txs[${te}]`})});const m=zr({peginTxid:s,peginTxHex:i.peginTxHex,claimTxHex:y.depositor_graph.claim_tx.tx_hex,assertTxHex:y.depositor_graph.assert_tx.tx_hex,payoutTxHex:y.depositor_graph.payout_tx.tx_hex,challengers:y.depositor_graph.challenger_presign_data}),$={vaultCoreVersion:i.vaultCoreVersion,peginTxHex:i.peginTxHex,depositorBtcPubkey:a,vaultProviderBtcPubkey:i.vaultProviderBtcPubkey,vaultKeeperBtcPubkeys:i.vaultKeeperBtcPubkeys,universalChallengerBtcPubkeys:i.universalChallengerBtcPubkeys,timelockPegin:i.timelockPegin,timelockAssert:i.timelockAssert,timelockChallengeAssert:i.timelockChallengeAssert,councilMembers:i.councilMembers,councilQuorum:i.councilQuorum,network:i.network,registeredPayoutScriptPubKey:i.registeredPayoutScriptPubKey,protocolFeeRate:i.protocolFeeRate,vkClaimerPayoutScriptPubKeys:i.vkClaimerPayoutScriptPubKeys,vpCommissionScriptPubKey:i.vpCommissionScriptPubKey};await Dt(y.depositor_graph,$),c==null||c.throwIfAborted();const T=O(a);ao(y.txs,i.vaultProviderBtcPubkey,i.vaultKeeperBtcPubkeys,a);const b=y.txs.filter(U=>O(U.claimer_pubkey)!==T),_=so(b);f&&v&&(typeof f.validateDepositTerms=="function"&&await f.validateDepositTerms(v),await f.approveDepositTerms(v)),c==null||c.throwIfAborted();const B=await uo(o,i,_,p);c==null||c.throwIfAborted();const E=await Kt({depositorGraph:y.depositor_graph,btcWallet:o,signingContext:$});c==null||c.throwIfAborted(),await d(m),c==null||c.throwIfAborted();const W={...B};W[g.stripHexPrefix(a)]=E.payout_signatures,await r.submitDepositorPresignatures({pegin_txid:s,depositor_pk:a,signatures:W,depositor_claimer_presignatures:E},c)}const lo=300*1e3,po=new Set([S.DaemonStatus.PENDING_DEPOSITOR_WOTS_PK,...S.POST_WOTS_STATUSES]);async function ho(e){const{statusReader:t,wotsSubmitter:r,vaultId:o,peginTxid:n,depositorPk:s,wotsPublicKeys:a,timeoutMs:i=lo,signal:u}=e;u==null||u.throwIfAborted();const l=await Me({statusReader:t,vaultId:o,peginTxid:n,targetStatuses:po,timeoutMs:i,signal:u});S.POST_WOTS_STATUSES.has(l)||(u==null||u.throwIfAborted(),await r.submitDepositorWotsKey({pegin_txid:n,depositor_pk:s,wots_public_keys:a},u))}function oe(e){return e.registration||e.operation}function Mt(e,t,r){const o=g.canonicalizeBtcPubkey(e);return{registration:o===g.canonicalizeBtcPubkey(t),operation:o===g.canonicalizeBtcPubkey(r)}}function Ee(e,t,r){const o=me(e);return{registration:rt(o,me(t)),operation:rt(o,me(r))}}function me(e){return e.map(g.canonicalizeBtcPubkey).sort()}function rt(e,t){return e.length===t.length&&e.every((r,o)=>r===t[o])}async function go(e){const{vaultProviderEthAddress:t,hintBtcPubkey:r,registrationBtcPubkey:o,readCurrentOperationBtcPubkey:n,context:s}=e;if(!r)return;const a=g.canonicalizeBtcPubkey(r);if(a===g.canonicalizeBtcPubkey(o))return;const i=g.canonicalizeBtcPubkey(await n());if(a!==i)throw new Error(`Vault provider BTC pubkey mismatch for ${t}: indexer hint matches neither the registration key nor the current operation key on-chain.${s?` ${s}`:""}`)}class ue extends Error{constructor(t){super(t),this.name="ApplicationEntryPointMismatchError"}}function fo(e){return e instanceof ue||e instanceof Error&&e.name==="ApplicationEntryPointMismatchError"}const ot=e=>e.map(g.canonicalizeBtcPubkey).sort();async function Po(e){const{vaultRegistryReader:t,vaultKeeperReader:r,universalChallengerReader:o,vaultProviderEthAddress:n,applicationEntryPoint:s,expectedVaultProviderBtcPubkey:a,expectedVaultKeeperBtcPubkeys:i,expectedUniversalChallengerBtcPubkeys:u,operationKeyReader:l,onIndexerServingOperationKeys:c,onIndexerHintsInconsistent:p,blockNumber:d}=e,[P,f,v,y]=await Promise.all([t.getVaultProviderApplication(n,d),t.getVaultProviderGenesisBtcPubKey(n,d),o.getLatestUniversalChallengersVersion(d),o.getCurrentUcKeyEpoch(d)]);if(!xe.isAddress(s,{strict:!1}))throw new ue(`The application entry point this deposit was prepared for is not a valid address: ${s}`);if(!xe.isAddressEqual(P,s))throw new ue(`Vault provider ${n} is registered to application ${P}, but this deposit was prepared for ${s}. Refusing to build: the vault keeper roster, its version, and the keeper key epoch would all resolve against a different application than the one selected.`);const[m,$]=await Promise.all([r.getCurrentVaultKeepersVersion(P,d),r.getCurrentAppKeeperKeyEpoch(P,d)]),[T,b]=await Promise.all([r.getVaultKeepersByVersion(P,m,d),o.getUniversalChallengersByVersion(v,d)]),_={vaultProvider:g.canonicalizeBtcPubkey(f),vaultKeepers:ot(T.map(R=>R.btcPubKey)),universalChallengers:ot(b.map(R=>R.btcPubKey))},B=await kt({operationKeyReader:l,query:{vaultProviderEthAddress:n,vaultProviderGenesisBtcPubkey:`0x${f}`,applicationEntryPoint:P,vaultKeepers:T,universalChallengers:b},blockNumber:d}),E={vaultProvider:B.vaultProvider.operationBtcPubkey,vaultKeepers:[...B.vaultKeeperOperationKeysSorted],universalChallengers:[...B.universalChallengerOperationKeysSorted]},W=Mt(a,_.vaultProvider,E.vaultProvider),U=Ee(i,_.vaultKeepers,E.vaultKeepers),te=Ee(u,_.universalChallengers,E.universalChallengers);if(!oe(W))throw new Error(`Vault provider BTC pubkey indexer hint does not match BTCVaultRegistry for ${n}. Refresh and try again.`);if(!oe(U))throw new Error(`Vault keeper BTC pubkeys (v${m}) indexer set does not match ApplicationRegistry on-chain set. Refresh and try again.`);if(!oe(te))throw new Error(`Universal challenger BTC pubkeys (v${v}) indexer set does not match ProtocolParams on-chain set. Refresh and try again.`);const qe=[W,U,te],Gt=qe.some(R=>R.registration&&!R.operation),Ge=qe.some(R=>R.operation&&!R.registration);if(Gt&&Ge){const R=`Indexer participant hints are internally inconsistent for vault provider ${n}: some roles match the registration keys while others match the rotated operation keys.`;throw p==null||p(R),new Error(`${R} Refresh and try again.`)}return Ge&&(c==null||c(`Indexer is serving rotated operation keys for vault provider ${n}`)),{vaultProviderBtcPubkeyXOnly:E.vaultProvider,vaultKeeperBtcPubkeysSorted:E.vaultKeepers,universalChallengerBtcPubkeysSorted:E.universalChallengers,expectedAppVaultKeepersVersion:m,expectedUniversalChallengersVersion:v,appKeeperKeyEpoch:$,ucKeyEpoch:y,registrationKeys:_,participantKeys:B}}function yo(e){return/^[0-9a-fA-F]{64}$/.test(e)}function vo(e){const{amountSats:t,minDeposit:r,maxDeposit:o,btcBalance:n,estimatedFeeSats:s,depositorClaimValue:a}=e;return!(t<=0n||t<r||o&&o>0n&&t>o||s==null||a==null||t+s+a>n)}function bo(e,t,r){return e<=0n?{valid:!1,error:"Deposit amount must be greater than zero"}:e<t?{valid:!1,error:`Minimum deposit is ${g.formatSatoshisToBtc(t)} BTC`}:r&&r>0n&&e>r?{valid:!1,error:`Maximum deposit is ${g.formatSatoshisToBtc(r)} BTC`}:{valid:!0}}function mo(e){const{amount:t,effectiveRemaining:r}=e;return r===null?{valid:!0}:r===0n?{valid:!1,error:"Supply cap reached — deposits temporarily paused"}:t>r?{valid:!1,error:`Vault size exceeds remaining capacity (${g.formatSatoshisToBtc(r)} BTC)`}:{valid:!0}}function wo(e,t){if(!e||e.length===0)return{valid:!1,error:"At least one vault provider must be selected"};const r=t.map(n=>n.toLowerCase());return e.filter(n=>!r.includes(n.toLowerCase())).length>0?{valid:!1,error:"Invalid vault provider selected"}:{valid:!0}}function Lt(e,t,r){if(!e||e.length===0)return{valid:!1,error:"At least one vault amount required"};for(let o=0;o<e.length;o++){const n=e[o];if(n<=0n)return{valid:!1,error:`Vault ${o+1} amount must be positive`};if(t&&n<t)return{valid:!1,error:`Vault ${o+1} amount ${g.formatSatoshisToBtc(n)} BTC is below minimum deposit ${g.formatSatoshisToBtc(t)} BTC`};if(r&&n>r)return{valid:!1,error:`Vault ${o+1} amount ${g.formatSatoshisToBtc(n)} BTC exceeds maximum deposit ${g.formatSatoshisToBtc(r)} BTC`}}return{valid:!0}}function Ft(e){const t=g.stripHexPrefix(e);return yo(t)?{valid:!0}:{valid:!1,error:"Invalid pubkey format: must be 64 hex characters (32-byte x-only public key, no 0x prefix)"}}function xo(e){if(!e||e.length===0)throw new Error("No vault keepers available. The system requires at least one vault keeper to create a deposit.")}function Eo(e){if(!e||e.length===0)throw new Error("No universal challengers available. The system requires at least one universal challenger to create a deposit.")}function To(e){if(e.length===0)throw new Error("No spendable UTXOs available")}function _o(e){const{vaultAmounts:t,confirmedUTXOs:r,vaultProviderBtcPubkey:o,vaultKeeperBtcPubkeys:n,universalChallengerBtcPubkeys:s,minDeposit:a,maxDeposit:i}=e,u=Lt(t,a,i);if(!u.valid)throw new Error(u.error);const l=Ft(o);if(!l.valid)throw new Error(l.error);xo(n),Eo(s),To(r)}class Le extends Error{constructor(t){super(t),this.name="ParticipantKeyDriftError"}}function Co(e){return e instanceof Le||e instanceof Error&&e.name==="ParticipantKeyDriftError"}function nt(e,t,r){return t.length===r.length&&t.every((o,n)=>o===r[n])?null:`${e} expected [${t.join(", ")}], got [${r.join(", ")}]`}async function Ao(e){const{vaultRegistryReader:t,operationKeyReader:r,vaultIds:o,expected:n}=e,s=n.query;if(o.length===0)return;const a=await t.getVaultKeyEpochsBatch(o),i=[];for(const[u,l]of a.entries()){const c=o[u];let p;try{p=await He({operationKeyReader:r,query:s,epochs:l})}catch(f){i.push(`vault ${c}: could not resolve participants at frozen epochs (vp=${l.vpKeyEpoch}, keeper=${l.appKeeperKeyEpoch}, uc=${l.ucKeyEpoch}): ${f.message}`);continue}p.vaultProvider.operationBtcPubkey!==n.vaultProvider.operationBtcPubkey&&i.push(`vault ${c}: vault provider key expected ${n.vaultProvider.operationBtcPubkey}, got ${p.vaultProvider.operationBtcPubkey}`);const d=nt(`vault ${c}: vault keeper keys`,n.vaultKeeperOperationKeysSorted,p.vaultKeeperOperationKeysSorted);d&&i.push(d);const P=nt(`vault ${c}: universal challenger keys`,n.universalChallengerOperationKeysSorted,p.universalChallengerOperationKeysSorted);P&&i.push(P)}if(i.length>0)throw new Le(`Aborting BTC broadcast: participant operation keys changed during registration (${i.join("; ")}). The Pre-PegIn was not broadcast; the registered ETH vault will time out per protocol rules.`)}class Fe extends Error{constructor(t){super(t),this.name="RegisteredVaultVersionMismatchError"}}function So(e){return e instanceof Fe||e instanceof Error&&e.name==="RegisteredVaultVersionMismatchError"}async function ko(e){const{vaultRegistryReader:t,vaultIds:r,expectedOffchainParamsVersion:o,expectedAppVaultKeepersVersion:n,expectedUniversalChallengersVersion:s,expectedVaultCoreVersion:a}=e,i=await t.getProtocolInfoBatch(r),u=[];if(i.forEach((l,c)=>{const p=r[c];l.offchainParamsVersion!==o&&u.push(`vault ${p}: offchainParams expected v${o}, got v${l.offchainParamsVersion}`),l.appVaultKeepersVersion!==n&&u.push(`vault ${p}: appVaultKeepers expected v${n}, got v${l.appVaultKeepersVersion}`),l.universalChallengersVersion!==s&&u.push(`vault ${p}: universalChallengers expected v${s}, got v${l.universalChallengersVersion}`),l.vaultCoreVersion!==a&&u.push(`vault ${p}: vaultCoreVersion expected v${a} (build-time active), got v${l.vaultCoreVersion}`)}),u.length>0)throw new Fe(`Aborting BTC broadcast: signer-set or offchain-params versions changed during registration (${u.join("; ")}). The Pre-PegIn was not broadcast; the registered ETH vault will time out per protocol rules.`)}class Xt extends Error{constructor(r,o){super(`Refund not yet mature (BIP68 not final): ${o.message}`);j(this,"vaultId");j(this,"cause");this.name="BIP68NotMatureError",this.vaultId=r,this.cause=o}}const $o=/^0x[0-9a-fA-F]{64}$/,Io=/^(?:0x)?(?:[0-9a-fA-F]{2})+$/,qt=/^(?:0x)?(?:[0-9a-fA-F]{64}|[0-9a-fA-F]{66})$/,Xe=160,Te=2e3,_e=10n,Ce=100n;function Ro(e){if(!Number.isFinite(e)||e<=0)throw new Error(`feeRateSatsVb must be a positive finite number, got ${e}`);return BigInt(Math.ceil(e*Xe))}const Bo=1,Vo=/non-BIP68-final/i;function Ae(e,t){if(e.length!==66)throw new Error(`${t} must be 32 bytes (66 hex chars with 0x prefix), got length ${e.length}`);if(!$o.test(e))throw new Error(`${t} must contain only hex characters after the 0x prefix`)}function we(e,t){if(!Number.isInteger(e)||e<0)throw new Error(`${t} must be a non-negative integer, got ${e}`)}function No(e){if(Ae(e.hashlock,"hashlock"),!Number.isInteger(e.htlcVout)||e.htlcVout<0)throw new Error(`htlcVout must be a non-negative integer, got ${e.htlcVout}`);if(!Array.isArray(e.batch)||e.batch.length===0)throw new Error("batch must be a non-empty array of HTLC entries");if(e.htlcVout>=e.batch.length)throw new Error(`htlcVout ${e.htlcVout} is out of range for batch of size ${e.batch.length}`);for(let r=0;r<e.batch.length;r++){const o=e.batch[r];if(Ae(o.hashlock,`batch[${r}].hashlock`),!Number.isInteger(o.htlcVout)||o.htlcVout!==r)throw new Error(`batch[${r}].htlcVout must equal ${r} (contiguous vout-ordered vector), got ${o.htlcVout}`);if(typeof o.amount!="bigint"||o.amount<=0n)throw new Error(`batch[${r}].amount must be a positive bigint, got ${o.amount}`)}const t=e.batch[e.htlcVout];if(t.hashlock.toLowerCase()!==e.hashlock.toLowerCase())throw new Error(`batch[${e.htlcVout}].hashlock (${t.hashlock}) does not match target hashlock (${e.hashlock})`);if(t.amount!==e.amount)throw new Error(`batch[${e.htlcVout}].amount (${t.amount}) does not match target amount (${e.amount})`);if(we(e.offchainParamsVersion,"offchainParamsVersion"),we(e.appVaultKeepersVersion,"appVaultKeepersVersion"),we(e.universalChallengersVersion,"universalChallengersVersion"),Wt.assertValidVaultCoreVersion(e.vaultCoreVersion,"VaultRefundData.vaultCoreVersion"),typeof e.unsignedPrePeginTxHex!="string"||e.unsignedPrePeginTxHex.length===0)throw new Error("unsignedPrePeginTxHex must be a non-empty hex string");if(!Io.test(e.unsignedPrePeginTxHex))throw new Error("unsignedPrePeginTxHex must be a hex byte string (optional 0x prefix, even length)");if(!e.depositorBtcPubkey||!qt.test(e.depositorBtcPubkey))throw new Error("depositorBtcPubkey must be 32 or 33 bytes of hex (optional 0x prefix)");if(typeof e.amount!="bigint"||e.amount<=0n)throw new Error(`amount must be a positive bigint, got ${e.amount}`)}function Oo(e){if(!e.vaultProviderPubkey||!qt.test(e.vaultProviderPubkey))throw new Error("vaultProviderPubkey must be 32 or 33 bytes of hex");if(e.vaultKeeperPubkeys.length===0)throw new Error("vaultKeeperPubkeys must be non-empty");if(e.universalChallengerPubkeys.length===0)throw new Error("universalChallengerPubkeys must be non-empty");if(!Number.isInteger(e.timelockRefund)||e.timelockRefund<=0)throw new Error(`timelockRefund must be a positive integer, got ${e.timelockRefund}`);if(typeof e.feeRate!="bigint"||e.feeRate<=0n)throw new Error(`protocol feeRate must be a positive bigint, got ${e.feeRate}`);if(typeof e.minPeginFeeRate!="bigint"||e.minPeginFeeRate<=0n)throw new Error(`minPeginFeeRate must be a positive bigint, got ${e.minPeginFeeRate}`);if(!Number.isInteger(e.numLocalChallengers)||e.numLocalChallengers<0)throw new Error("numLocalChallengers must be a non-negative integer");if(!Number.isInteger(e.councilQuorum)||!Number.isInteger(e.councilSize)||e.councilQuorum<=0||e.councilSize<=0||e.councilQuorum>e.councilSize)throw new Error(`councilQuorum (${e.councilQuorum}) must be in [1, councilSize=${e.councilSize}]`)}async function Ho(e){const{vaultId:t,readVault:r,readPrePeginContext:o,feeRate:n,signPsbt:s,broadcastTx:a,signal:i}=e;i==null||i.throwIfAborted(),Ae(t,"vaultId");const u=await r();No(u),i==null||i.throwIfAborted();const l=await o(u);if(Oo(l),i==null||i.throwIfAborted(),!Number.isFinite(n)||n<=0)throw new Error(`feeRate must be a positive number, got ${n}`);if(n>Te)throw new Error(`feeRate ${n} sat/vB exceeds refund safety cap ${Te} sat/vB; refusing to sign refund.`);const c=BigInt(Math.ceil(n*Xe)),p=u.amount*_e/Ce;if(c>p)throw new Error(`Refund fee ${c} sats exceeds the per-vault safety cap of ${p} sats (${_e}/${Ce} of vault.amount=${u.amount}); refusing to sign refund.`);i==null||i.throwIfAborted();const d=g.processPublicKeyToXOnly(u.depositorBtcPubkey),P=g.stripHexPrefix(u.unsignedPrePeginTxHex),f=F.findAuthAnchorOpReturn(P);if(f!==void 0&&f.vout!==u.batch.length)throw new Error(`Auth-anchor OP_RETURN at vout ${f.vout} does not match batch size (${u.batch.length} HTLC outputs expect the anchor at vout ${u.batch.length}). Refund refused — sibling HTLC vector is incomplete.`);const v=f==null?void 0:f.hash;let y;try{y=A.Transaction.fromHex(P)}catch(E){throw new Error(`Failed to parse funded Pre-PegIn transaction hex: ${E instanceof Error?E.message:String(E)}`)}if(y.outs.length<u.batch.length)throw new Error(`Funded Pre-PegIn tx has ${y.outs.length} outputs but batch requires at least ${u.batch.length} HTLC outputs. Refund refused — funded tx shape disagrees with sibling vector.`);const{psbtHex:m}=await H.buildRefundPsbt({prePeginParams:{vaultCoreVersion:u.vaultCoreVersion,depositorPubkey:d,vaultProviderPubkey:g.stripHexPrefix(l.vaultProviderPubkey),vaultKeeperPubkeys:l.vaultKeeperPubkeys.map(g.stripHexPrefix),universalChallengerPubkeys:l.universalChallengerPubkeys.map(g.stripHexPrefix),hashlocks:u.batch.map(E=>g.stripHexPrefix(E.hashlock)),timelockRefund:l.timelockRefund,pegInAmounts:u.batch.map(E=>E.amount),feeRate:l.feeRate,minPeginFeeRate:l.minPeginFeeRate,numLocalChallengers:l.numLocalChallengers,councilQuorum:l.councilQuorum,councilSize:l.councilSize,network:l.network,authAnchorHash:v},fundedPrePeginTxHex:P,htlcVout:u.htlcVout,refundFee:c,hashlock:g.stripHexPrefix(u.hashlock)});i==null||i.throwIfAborted();const $=z.createTaprootScriptPathSignOptions(u.depositorBtcPubkey,Bo),T=await s(m,$);w.assertPsbtUnsignedTxMatches({requestedPsbtHex:m,returnedPsbtHex:T});const b=0,_=w.extractPayoutSignature(T,d,b);w.assertScriptPathSchnorrSignature({requestedPsbtHex:m,signatureHex:_,signerXOnlyPubkeyHex:d,inputIndex:b});const B=H.finalizeScriptPathWithSignatures({requestedPsbtHex:m,signaturesHex:[_],signerXOnlyPubkeyHex:d});i==null||i.throwIfAborted();try{return await a(B)}catch(E){throw E instanceof Error&&Vo.test(E.message)?new Xt(t,E):E}}class Se extends Error{constructor(r,o,n){super(r);j(this,"feeSats");j(this,"sweptTotalSats");this.name="ReclaimUneconomicalError",this.feeSats=o,this.sweptTotalSats=n}}const ke=2e3,$e=25n,Ie=100n,Do=10n;async function Ko(e,t,r){for(let o=0;o<e.length;o++){const n=jt.calculateBtcTxHash(e[o].depositorSignedPeginTxHex),s=g.ensureHexPrefix(await k.deriveVaultId(g.stripHexPrefix(n),g.stripHexPrefix(r))).toLowerCase();if(s!==t[o].toLowerCase())throw new Error(`Reserve ${o} belongs to vault ${s}, not the requested ${t[o].toLowerCase()}. Refusing to sweep a reserve whose vault is not the one the caller asked for — the reserve funds that vault's claim transaction and cannot be replaced.`)}}async function Uo(e){const{vaultIds:t,depositorEthAddress:r,depositorBtcPubkey:o,readVaults:n,feeRate:s,signPsbt:a,broadcastTx:i,signal:u}=e;if(u==null||u.throwIfAborted(),t.length===0)throw new Error("Reclaim requires at least one vault id; got none.");if(!Number.isFinite(s)||s<=0)throw new Error(`feeRate must be a positive number, got ${s}`);if(s>ke)throw new Se(`Fee rate ${s} sat/vB exceeds the reclaim safety cap of ${ke} sat/vB; refusing to sign.`,0n,0n);const l=await n();if(u==null||u.throwIfAborted(),l.length!==t.length)throw new Error(`readVaults returned ${l.length} reserves for ${t.length} vault id(s); refusing to sweep a set that does not match the request.`);await Ko(l,t,r),u==null||u.throwIfAborted();const c=g.processPublicKeyToXOnly(o),p=l.map(b=>({depositorSignedPeginTxHex:b.depositorSignedPeginTxHex,observed:b.observed,expectedValue:b.expectedClaimValue})),d=H.estimateReclaimFeeSats(s,p.length),P=p.reduce((b,_)=>b+_.expectedValue,0n),f=P*$e/Ie;if(d>f)throw new Se(`Reclaim fee ${d} sats exceeds ${$e}/${Ie} of the swept total (${P} sats, cap ${f} sats). The reserve is not at risk — it stays where it is until fee rates fall.`,d,P);u==null||u.throwIfAborted();const{psbtHex:v}=H.buildReclaimPsbt({depositorPubkey:c,inputs:p,feeSats:d});u==null||u.throwIfAborted();const y=z.createTaprootScriptPathSignOptions(o,p.length),m=await a(v,y);w.assertPsbtUnsignedTxMatches({requestedPsbtHex:v,returnedPsbtHex:m});const $=p.map((b,_)=>{const B=w.extractPayoutSignature(m,c,_);return w.assertScriptPathSchnorrSignature({requestedPsbtHex:v,signatureHex:B,signerXOnlyPubkeyHex:c,inputIndex:_}),B}),T=H.finalizeScriptPathWithSignatures({requestedPsbtHex:v,signaturesHex:$,signerXOnlyPubkeyHex:c});return u==null||u.throwIfAborted(),i(T)}exports.ApplicationEntryPointMismatchError=ue;exports.ArtifactsVaultMismatchError=ft;exports.AssertBindingError=V;exports.BIP68NotMatureError=Xt;exports.ChallengerSetMismatchError=at;exports.DELEGATED_CLAIM_TX_GRAPH_VERSION=M;exports.DelegatedClaimSigningIncompleteError=Et;exports.GraphFingerprintError=x;exports.PEGIN_ETH_CONFIRMATIONS=It;exports.ParticipantKeyDriftError=Le;exports.PayoutDestinationError=ct;exports.PayoutInputLeafError=Z;exports.PeginRegistrationMissingError=De;exports.PeginRegistrationNotFinalError=Ke;exports.RECLAIM_MAX_FEE_FRACTION_DENOMINATOR=Ie;exports.RECLAIM_MAX_FEE_FRACTION_NUMERATOR=$e;exports.RECLAIM_MAX_FEE_RATE_SATS_VB=ke;exports.RECLAIM_WARN_FEE_FRACTION_NUMERATOR=Do;exports.REFUND_MAX_FEE_FRACTION_DENOMINATOR=Ce;exports.REFUND_MAX_FEE_FRACTION_NUMERATOR=_e;exports.REFUND_MAX_FEE_RATE_SATS_VB=Te;exports.REFUND_VSIZE=Xe;exports.ReclaimUneconomicalError=Se;exports.RegisteredVaultVersionMismatchError=Fe;exports.SigningPlanMismatchError=G;exports.VaultIdBindingError=pt;exports.activateVault=rr;exports.activateVaultAndRedeem=or;exports.assembleWatchtowerArtifacts=Sr;exports.assembleWatchtowerArtifactsFromSignatures=xt;exports.assertArtifactsUsableForVault=hr;exports.assertAssertBindsClaimAndPayout=it;exports.assertChallengerSetMatchesVault=ut;exports.assertClaimSpendsVault=Ve;exports.assertPayoutPaysRegisteredScript=lt;exports.assertReturnedGraphMatchesFingerprint=Wr;exports.assertTermsMatchVault=At;exports.assertVaultProviderHintAccepted=go;exports.buildAndBroadcastReclaim=Uo;exports.buildAndBroadcastRefund=Ho;exports.claimExpiredVault=nr;exports.copyAssertConnectorLeaf=dt;exports.deriveClaimerWotsKeypair=kr;exports.estimateRefundFeeSats=Ro;exports.fingerprintReturnedGraph=Ht;exports.isApplicationEntryPointMismatchError=fo;exports.isDepositAmountValid=vo;exports.isHintAccepted=oe;exports.isParticipantKeyDriftError=Co;exports.isPeginRegistrationMissingError=Rt;exports.isPeginRegistrationNotFinalError=Or;exports.isRegisteredVaultVersionMismatchError=So;exports.matchKeyHint=Mt;exports.matchKeySetHint=Ee;exports.planDelegatedClaimSigning=mt;exports.readDelegatedClaimVaultContext=Rr;exports.readStampedParticipantKeys=$t;exports.resolveCurrentParticipantKeys=kt;exports.resolveParticipantKeysAtEpochs=He;exports.runDepositorPresignFlow=co;exports.signDelegatedClaimPlan=_t;exports.signDepositorGraph=Kt;exports.submitWotsPublicKey=ho;exports.summarizeWatchtowerArtifacts=Pt;exports.validateDepositAmount=bo;exports.validateMultiVaultDepositInputs=_o;exports.validateOnChainParticipantKeys=Po;exports.validateProviderSelection=wo;exports.validateRemainingCapacity=mo;exports.validateVaultAmounts=Lt;exports.validateVaultProviderPubkey=Ft;exports.verifyRegisteredParticipantKeys=Ao;exports.verifyRegisteredVaultVersions=ko;exports.waitForPeginRegistrationDepth=Hr;exports.waitForPeginStatus=Me;
+//# sourceMappingURL=buildAndBroadcastReclaim-DPk36Uhp.cjs.map