@gvnrdao/dh-sdk 0.0.269 → 0.0.271

package/dist/index.js

@@ -31149,7 +31149,6 @@ var require_pkg_src = __commonJS({
       executeLitAction: () => executeLitAction,
       executePkpOperation: () => executePkpOperation,
       executePriceOracle: () => executePriceOracle,
-      executePriceOracleConsensus: () => executePriceOracleConsensus,
       executeVaultSnapshot: () => executeVaultSnapshot,
       generateSessionSignatures: () => generateSessionSignatures,
       generateSessionSignaturesWithCache: () => generateSessionSignaturesWithCache,
@@ -31392,17 +31391,17 @@ var require_pkg_src = __commonJS({
         hash: "856da2d48ac2b76fc0d493a5a3df2decbf8e0fbbaff550996a0c48733bdd4660"
       },
       ucdMintValidator: {
-        cid: "QmNgE555xr7SGduoJWXk8oLMPiKCT3xYdDg7uCWLVp6Ewk",
+        cid: "QmWZJpS3Q25XKo9ptzVcYz7pnW5hbqhuSvrhu7Qo7EcxEk",
         authorizedCidHex: cidToHex(
-          "QmNgE555xr7SGduoJWXk8oLMPiKCT3xYdDg7uCWLVp6Ewk"
+          "QmWZJpS3Q25XKo9ptzVcYz7pnW5hbqhuSvrhu7Qo7EcxEk"
         ),
         name: "Ucd Mint Validator",
         description: "Production Ucd Mint Validator",
         version: "1.0.0",
         deployed: true,
-        deployedAt: 1779894180903,
-        size: 69530,
-        hash: "64e45e5a1918af2e375f12e5036757364080a15b640e8b7d76b513109c1e0b3c",
+        deployedAt: 1780330809889,
+        size: 66616,
+        hash: "6015049e636fc2dd4dcce07e2f2bc1df20a8e8c466a5f054918e5f6773c26ac4",
         validatorWalletAddress: "0x36f3dd61c4c08a56d29ed2fd6d5f111b67b6a7a1",
         pkp: {
           publicKey: "0x041ab17cd91fc5c0b761eea6092d032807561b621b82c488826776e04a9158d61ba64d809a4729f0501289d980732cb06d8dfd06999dd9c8efd2f495dad78b31bb",
@@ -31410,17 +31409,17 @@ var require_pkg_src = __commonJS({
         }
       },
       processPaymentValidator: {
-        cid: "QmVmgq1zAuwdiyYsBx9LoUZFJetz2qC7EAjjwB55Yb3ZPJ",
+        cid: "QmRZjMcJzEAzepwN3uJBbgGxMPULvCw6LMpQ94w19sv3Cx",
         authorizedCidHex: cidToHex(
-          "QmVmgq1zAuwdiyYsBx9LoUZFJetz2qC7EAjjwB55Yb3ZPJ"
+          "QmRZjMcJzEAzepwN3uJBbgGxMPULvCw6LMpQ94w19sv3Cx"
         ),
         name: "Process Payment Validator",
         description: "Production Process Payment Validator",
         version: "1.0.0",
         deployed: true,
-        deployedAt: 1779894189375,
-        size: 65519,
-        hash: "cc3d394347166f9611bdb780f0dfcabea0d5e6fe21ebfddd1b481432e59e0d8d",
+        deployedAt: 1780330829127,
+        size: 62605,
+        hash: "44e7fa2bc52d08c52821945a2bfd8fb8a5745d1f5669b2a45666fa34e7966198",
         validatorWalletAddress: "0xc2ed5a59bd81eb4d1a19a0147b86ab69aa4c28ba",
         pkp: {
           publicKey: "0x04cfccb9b6c7addc79469c0e9fafebef4c70801302c62cdb26b610723a9b8527d23f98a40158c7340d83fd0e62d02b5ec74c12f7a86d98e8c6973b4811110f19ad",
@@ -31428,17 +31427,17 @@ var require_pkg_src = __commonJS({
         }
       },
       extendPositionValidator: {
-        cid: "QmSVjVq18N2mzhrjxCLs1UGFqAD4TLwG6CEGZzCFSb4GoZ",
+        cid: "Qmb4y62Ftjar5EXcREyXC84U7QEMhCQgycHYCmJxLichvt",
         authorizedCidHex: cidToHex(
-          "QmSVjVq18N2mzhrjxCLs1UGFqAD4TLwG6CEGZzCFSb4GoZ"
+          "Qmb4y62Ftjar5EXcREyXC84U7QEMhCQgycHYCmJxLichvt"
         ),
         name: "Extend Position Validator",
         description: "Production Extend Position Validator",
         version: "1.0.1",
         deployed: true,
-        deployedAt: 1779894197740,
-        size: 64948,
-        hash: "97cdc90fa70e4dfb3c64b073bb22257c3a696d3392e3cca3b4d7ae7304751845",
+        deployedAt: 1780330862404,
+        size: 62034,
+        hash: "2eedfed0a406fa24457b29621de7657ca598bf9a3bc928ea5d5febdeef17c1e1",
         validatorWalletAddress: "0xb3f4271c475887a86a2f21446f0968c30cc74c97",
         pkp: {
           publicKey: "0x04e52338f6a0c3362800f1a94c4c8f08be5030dde0fa217388c53d1c1a4790f4443c9f2886b2d2d8f4b75a9a156e9b028011b1a1cf7648da0e556aa980ec692836",
@@ -31446,17 +31445,17 @@ var require_pkg_src = __commonJS({
         }
       },
       btcWithdrawal: {
-        cid: "QmWBZxCTXP52fxakJRRQ4wiDwF9AS4E5RJXtRinnaShbtu",
+        cid: "QmetrNkAUQ54PHzHLRR7TfDk3oGKnCf22m2bQwj24eB253",
         authorizedCidHex: cidToHex(
-          "QmWBZxCTXP52fxakJRRQ4wiDwF9AS4E5RJXtRinnaShbtu"
+          "QmetrNkAUQ54PHzHLRR7TfDk3oGKnCf22m2bQwj24eB253"
         ),
         name: "Btc Withdrawal",
         description: "Production Btc Withdrawal",
         version: "1.0.0",
         deployed: true,
-        deployedAt: 1779894206894,
-        size: 76209,
-        hash: "ac5756d09e0a4f04513af18fdb6f3054ebd0bcb61bc51e8de7c98049b1a296c3",
+        deployedAt: 1780330882060,
+        size: 73295,
+        hash: "c31e8f993806e8031fec42712eca04cb2e3b12f4ff37db98bcd28f46c766d710",
         validatorWalletAddress: "0xbb137fbda353199e9419b698c57a742124d4987d",
         pkp: {
           publicKey: "0x043616787c5432415c24378c4ef48de2bcd6bb7b575b837e3cff09171802662da7105d79586c7659677a0ecbaddac4cce06cb2a11f69a16fa0c4d7002ac7d51a4d",
@@ -31464,17 +31463,17 @@ var require_pkg_src = __commonJS({
         }
       },
       liquidationValidator: {
-        cid: "QmcQAWj3nCsAbHkqBnBnk6LzqKEvVy7Ed5awnTQ9s9Nznq",
+        cid: "QmRuLKJmsD8yN6Ez89L9mzSM3zyarjGwFMBwn23CkajizZ",
         authorizedCidHex: cidToHex(
-          "QmcQAWj3nCsAbHkqBnBnk6LzqKEvVy7Ed5awnTQ9s9Nznq"
+          "QmRuLKJmsD8yN6Ez89L9mzSM3zyarjGwFMBwn23CkajizZ"
         ),
         name: "Liquidation Validator",
         description: "Production Liquidation Validator",
         version: "1.0.0",
         deployed: true,
-        deployedAt: 1779894215050,
-        size: 56114,
-        hash: "b0fcc1acfbf40e4e77de2d3327447e691b0e4a82fe0b34bd8d47d1c6051e9766",
+        deployedAt: 1780330901287,
+        size: 53200,
+        hash: "7bb6d4451dbdcc4f5e4d60bf15db064608877afb4800e44f186fcb987194c36b",
         validatorWalletAddress: "0x1542f863ee0340f6a067573e80ae66dd9b3838fa",
         pkp: {
           publicKey: "0x041a241de58976c13e3d7ca5a18e494f7330151e3818706135d50176e78ffb673e58b11f0b67a87c73fade6c6b27d6e7a7377ea9f4c10bf31880f1d725f18cc6f8",
@@ -31482,17 +31481,17 @@ var require_pkg_src = __commonJS({
         }
       },
       priceOracle: {
-        cid: "QmYvwgGkFcvkqFB93oebMRDeqFgiHBAxRUcd6qKgktqXAf",
+        cid: "QmR5mjqhxfEPuBMbxhcXkJpdAMDzYfkpUWPgcPNCiSuhqh",
         authorizedCidHex: cidToHex(
-          "QmYvwgGkFcvkqFB93oebMRDeqFgiHBAxRUcd6qKgktqXAf"
+          "QmR5mjqhxfEPuBMbxhcXkJpdAMDzYfkpUWPgcPNCiSuhqh"
         ),
         name: "Price Oracle",
         description: "Production Price Oracle (Chipotle main+getPrivateKey)",
         version: "1.1.0",
         deployed: true,
-        deployedAt: 1779199116800,
-        size: 11179,
-        hash: "83102b059588020143ca5fbc0f651318fa1436914a6236e356758c8d31468a78",
+        deployedAt: 1780330918696,
+        size: 8134,
+        hash: "7aa3339f0501c3f628e4eaf00d39cfff76789d923aa440894c4e5a0b696c7f12",
         validatorWalletAddress: "0x831ddf3048547b983efe3ccbbb35a45a53191651",
         pkp: {
           publicKey: "0x043beaa1da47875601a8d6f430b1438ee2d4732eefd06e5c63a474bbdaf9e7df1797b1b951e041b627c2bf839788164825324c9cbd1e2d6f740fdd4bff69b1900b",
@@ -31500,17 +31499,17 @@ var require_pkg_src = __commonJS({
         }
       },
       loanVaultBtcBalance: {
-        cid: "QmWqHBGzyhQB4Usfs47W7nGGYsCivJXFaJQCRqoPE8hy6i",
+        cid: "QmbXoFbhtqWsgKkLxtxwd6fDuKvvBpPhpMmdqUU1UC9GMn",
         authorizedCidHex: cidToHex(
-          "QmWqHBGzyhQB4Usfs47W7nGGYsCivJXFaJQCRqoPE8hy6i"
+          "QmbXoFbhtqWsgKkLxtxwd6fDuKvvBpPhpMmdqUU1UC9GMn"
         ),
         name: "Loan Vault Btc Balance",
         description: "Production Loan Vault Btc Balance",
         version: "1.0.0",
         deployed: true,
-        deployedAt: 1779894223069,
-        size: 45960,
-        hash: "7ee25d0058e7f9f50f7c97f966cbbea46c53e3e08891d0403b41223ddaf03a5f",
+        deployedAt: 1780330936276,
+        size: 43046,
+        hash: "160e4ed6d0c05871d65408906cb2ce900f3ce67a2a3a27549254773e3569d37e",
         validatorWalletAddress: "0x47feea74c8739d24b44faa67217f2f99970e15e7",
         pkp: {
           publicKey: "0x043616787c5432415c24378c4ef48de2bcd6bb7b575b837e3cff09171802662da7105d79586c7659677a0ecbaddac4cce06cb2a11f69a16fa0c4d7002ac7d51a4d",
@@ -32306,14 +32305,11 @@ ${errorReport}`);
     init_debug_logger();
     init_session_signature_cache();
     var import_ethers13 = require_lib2();
-    var ACTIVE_LOAN_LIQUIDATION_THRESHOLD_BPS = 13e3;
     var EXPIRED_LOAN_MIN_LIQUIDATION_THRESHOLD_BPS = 11e3;
     var GRACE_PERIOD_DAYS = 30;
     var SATOSHIS_PER_BITCOIN = 100000000n;
     var PRICE_ORACLE_DECIMALS = 100000000n;
     var UCD_TOKEN_DECIMALS = 1000000000000000000n;
-    var PRICE_ORACLE_OUTLIER_DEVIATION_THRESHOLD = 0.02;
-    var PRICE_ORACLE_DISPERSION_THRESHOLD = 0.05;
     var MAX_BTC_AMOUNT = 25e6 * 1e8;
     var UTXO_QUERY_MAX_RETRIES = 3;
     var UTXO_QUERY_RETRY_DELAY_MS = 500;
@@ -32397,7 +32393,7 @@ ${errorReport}`);
     }
     function calculateLiquidationThreshold(isExpired, daysIntoGracePeriod, activeLoanThresholdBps, maxExpiredThresholdBps) {
       if (!isExpired) {
-        return activeLoanThresholdBps ?? ACTIVE_LOAN_LIQUIDATION_THRESHOLD_BPS;
+        return activeLoanThresholdBps;
       }
       const maxThreshold = maxExpiredThresholdBps ?? EXPIRED_LOAN_MIN_LIQUIDATION_THRESHOLD_BPS;
       const day = Math.min(daysIntoGracePeriod, GRACE_PERIOD_DAYS);
@@ -32665,7 +32661,7 @@ ${errorReport}`);
             positionId,
             positionState.vaultAddress
           ),
-          this.config.priceOracle.getBTCPriceConsensus()
+          this.config.priceOracle.getBTCPrice()
         ]);
         const protocolParams = createProtocolParametersModule({
           termManagerAddress: this.config.termManagerAddress,
@@ -32771,7 +32767,7 @@ ${errorReport}`);
             true
             // Always skip UTXO validation for fast path
           ),
-          this.config.priceOracle.getBTCPriceConsensus()
+          this.config.priceOracle.getBTCPrice()
         ]);
         const protocolParams = createProtocolParametersModule({
           termManagerAddress: this.config.termManagerAddress,
@@ -33073,7 +33069,7 @@ ${errorReport}`);
        *
        * @param positionId - Position to check
        * @param additionalDebt - Additional UCD debt to add
-       * @param requiredRatioBps - Required collateral ratio (e.g., 13000 for 130%)
+       * @param requiredRatioBps - Required collateral ratio (e.g., 11000 for 110%)
        * @returns True if sufficient collateral exists
        */
       async hasSufficientCollateral(positionId, additionalDebt, requiredRatioBps) {
@@ -33834,27 +33830,23 @@ ${errorReport}`);
       static {
         this.ACTIVE_PROVIDER_NAMES = [
           "cryptocompare",
-          "coinbase",
-          "binance",
           "coinmarketcap",
           "coingecko"
         ];
       }
       static {
-        this.MIN_DISTINCT_PROVIDERS = 3;
+        this.REQUIRED_PROVIDER_COUNT = 3;
       }
       /**
        * @param priceProvidersOrConfig - REQUIRED in production flows. An array of
-       *   `{name, apiKey}` entries. Every provider needs an apiKey. Names are
-       *   deduplicated so three entries with `name: "coingecko"` collapse to a
-       *   single provider.
+       *   exactly 3 `{name, apiKey}` entries, one per locked provider. Every entry
+       *   needs an apiKey. Names are deduplicated so three entries with
+       *   `name: "coingecko"` collapse to a single provider — which then fails the
+       *   strict count check.
        * @param legacySources - Test-only back door. When supplied, the constructor
        *   trusts the caller-supplied array verbatim and skips credential checks.
-       *   This path is exercised exclusively by unit tests that inject in-process
-       *   `fetchPrice` stubs.
-       * @param _mode - Ignored. Previously used to branch between dev / prod
-       *   validation. The oracle no longer has a "dev" relaxation; the parameter
-       *   is kept only for backward compatibility with existing call sites.
+       *   The strict count is still enforced (exactly 3).
+       * @param _mode - Ignored. Retained for backward-compatible call sites.
        */
       constructor(priceProvidersOrConfig, legacySources, _mode) {
         if (legacySources && Array.isArray(legacySources)) {
@@ -33862,7 +33854,7 @@ ${errorReport}`);
         } else {
           if (!Array.isArray(priceProvidersOrConfig)) {
             throw new Error(
-              "Price oracle requires a priceProviders array \u2014 defaults and fallbacks have been removed. Pass 3 distinct {name, apiKey} entries from the supported set: " + _PriceOracleModule.ACTIVE_PROVIDER_NAMES.join(", ")
+              `Price oracle requires a priceProviders array \u2014 defaults and fallbacks have been removed. Pass exactly ${_PriceOracleModule.REQUIRED_PROVIDER_COUNT} distinct {name, apiKey} entries from the locked set: ` + _PriceOracleModule.ACTIVE_PROVIDER_NAMES.join(", ")
             );
           }
           this.sources = this.buildSources(priceProvidersOrConfig);
@@ -33871,39 +33863,31 @@ ${errorReport}`);
         this.validateProviderCount();
       }
       /**
-       * Enforces the unconditional, mode-independent 3-provider rule.
-       *
-       * Every caller — mint, extend, withdraw, liquidate, payment, balance — must
-       * end up with at least {@link PriceOracleModule.MIN_DISTINCT_PROVIDERS}
-       * distinct sources. Any relaxation here re-opens the oracle-manipulation
-       * path flagged as H-5 in the audit.
+       * Enforces strict 3-of-3. Any deviation re-opens the consensus-manipulation
+       * path flagged as H-2 in the audit. There is no "≥3" or "3 of N" mode.
        */
       validateProviderCount() {
-        if (this.sources.length < _PriceOracleModule.MIN_DISTINCT_PROVIDERS) {
+        if (this.sources.length !== _PriceOracleModule.REQUIRED_PROVIDER_COUNT) {
           throw new Error(
-            `Price oracle requires at least ${_PriceOracleModule.MIN_DISTINCT_PROVIDERS} eligible providers for consensus. Currently configured: ${this.sources.length} provider(s). Supported active providers: ${_PriceOracleModule.ACTIVE_PROVIDER_NAMES.join(", ")}`
+            `Price oracle requires exactly ${_PriceOracleModule.REQUIRED_PROVIDER_COUNT} providers. Currently configured: ${this.sources.length} provider(s). Locked production set: ${_PriceOracleModule.ACTIVE_PROVIDER_NAMES.join(", ")}`
           );
         }
       }
       /**
        * Build price sources from the caller-supplied config.
        *
-       * Rules (all unconditional — there is no dev-mode relaxation):
-       *   - Every entry must be a supported provider name.
+       * Rules (all unconditional):
+       *   - Exactly 3 entries — reject fewer and reject more.
+       *   - Every entry must be a supported provider name from the locked set.
        *   - Every entry must carry an `apiKey`.
-       *   - Duplicates by `name` are rejected outright. Three CoinGecko entries
-       *     with different keys are still "one provider" from a risk standpoint
-       *     and do not satisfy the distinct-source requirement.
-       *   - The final set must contain at least 3 distinct providers.
+       *   - Duplicates by `name` are rejected outright.
        *
-       * Throws as soon as any rule is violated — silently dropping an invalid
-       * entry would let the caller think consensus was achieved while the oracle
-       * was actually running on a smaller / weaker pool.
+       * Throws as soon as any rule is violated.
        */
       buildSources(priceProviders) {
-        if (priceProviders.length === 0) {
+        if (priceProviders.length !== _PriceOracleModule.REQUIRED_PROVIDER_COUNT) {
           throw new Error(
-            "priceProviders must be a non-empty array of 3 distinct providers, each with an apiKey."
+            `priceProviders must contain exactly ${_PriceOracleModule.REQUIRED_PROVIDER_COUNT} entries. Received: ${priceProviders.length}. Locked production set: ${_PriceOracleModule.ACTIVE_PROVIDER_NAMES.join(", ")}`
           );
         }
         const sources = [];
@@ -33916,35 +33900,16 @@ ${errorReport}`);
           const name = provider.name.toLowerCase();
           if (!_PriceOracleModule.ACTIVE_PROVIDER_NAMES.includes(name)) {
             throw new Error(
-              `Unsupported price provider "${provider.name}". Supported: ${_PriceOracleModule.ACTIVE_PROVIDER_NAMES.join(", ")}`
+              `Unsupported price provider "${provider.name}". Locked production set: ${_PriceOracleModule.ACTIVE_PROVIDER_NAMES.join(", ")}`
             );
           }
           if (seen.has(name)) {
             throw new Error(
-              `Duplicate price provider "${name}" \u2014 the oracle requires 3 DISTINCT providers so a single upstream failure or manipulation cannot compromise consensus. Use 3 different provider names from: ${_PriceOracleModule.ACTIVE_PROVIDER_NAMES.join(", ")}`
+              `Duplicate price provider "${name}" \u2014 the oracle requires ${_PriceOracleModule.REQUIRED_PROVIDER_COUNT} DISTINCT providers so a single upstream failure or manipulation cannot compromise consensus. Use ${_PriceOracleModule.REQUIRED_PROVIDER_COUNT} different provider names from: ${_PriceOracleModule.ACTIVE_PROVIDER_NAMES.join(", ")}`
             );
           }
           seen.add(name);
           switch (name) {
-            case "binance":
-              if (!provider.apiKey) {
-                throw new Error(
-                  "Binance provider requires an apiKey"
-                );
-              }
-              sources.push(
-                this.createBinanceSource(
-                  provider.apiKey,
-                  priority++
-                )
-              );
-              break;
-            case "coinbase":
-              if (!provider.apiKey) {
-                throw new Error("Coinbase provider requires an apiKey");
-              }
-              sources.push(this.createCoinbaseSource(provider.apiKey, priority++));
-              break;
             case "cryptocompare":
               if (!provider.apiKey) {
                 throw new Error("CryptoCompare provider requires an apiKey");
@@ -33975,12 +33940,7 @@ ${errorReport}`);
               throw new Error(`Unhandled provider: ${name}`);
           }
         }
-        if (sources.length < _PriceOracleModule.MIN_DISTINCT_PROVIDERS) {
-          throw new Error(
-            `Insufficient price providers: need at least ${_PriceOracleModule.MIN_DISTINCT_PROVIDERS} distinct entries, got ${sources.length}.`
-          );
-        }
-        return this.selectSampledSources(sources);
+        return sources;
       }
       /**
        * Create CryptoCompare price source
@@ -34052,21 +34012,12 @@ ${errorReport}`);
           }
         };
       }
-      selectSampledSources(sources) {
-        return [...sources].sort((a, b2) => a.name.toLowerCase().localeCompare(b2.name.toLowerCase())).slice(0, 3).map((s, idx) => ({ ...s, priority: idx + 1 }));
-      }
       /**
        * Create CoinGecko price source.
        *
        * CoinGecko's public endpoint has no authentication, but we intentionally
        * require the caller to supply either a Demo (`x-cg-demo-api-key`) or Pro
-       * (`x-cg-pro-api-key`) key. Reasons:
-       *   - An authenticated call has a predictable rate limit and per-key quota,
-       *     so node-level retries won't silently drop under load.
-       *   - The key identifies the Diamond Hands tenant, making ETL/abuse
-       *     traceable and revokable.
-       *   - It keeps the same "every provider needs a credential" invariant
-       *     across all supported providers (removes a special case).
+       * (`x-cg-pro-api-key`) key.
        */
       createCoinGeckoSource(apiKey, priority) {
         if (!apiKey) {
@@ -34092,59 +34043,6 @@ ${errorReport}`);
           priority
         };
       }
-      /**
-       * Create Binance price source. Requires apiKey.
-       *
-       * The public `/ticker/price` endpoint does not require a secret; only the
-       * API key is sent as `X-MBX-APIKEY` for per-key rate limiting and
-       * revokability.
-       */
-      createBinanceSource(apiKey, priority) {
-        if (!apiKey) {
-          throw new Error("createBinanceSource requires an apiKey");
-        }
-        const fetchJson = this.createFetchJson();
-        return {
-          name: "Binance",
-          fetchPrice: async () => {
-            const url = new URL("https://api.binance.com/api/v3/ticker/price");
-            url.searchParams.set("symbol", "BTCUSDT");
-            const data = await fetchJson(url.toString(), {
-              "X-MBX-APIKEY": apiKey
-            });
-            const price = Number(data?.price);
-            if (!Number.isFinite(price) || price <= 0) {
-              throw new Error("Invalid Binance price payload");
-            }
-            return price;
-          },
-          priority
-        };
-      }
-      /**
-       * Create Coinbase price source. Requires apiKey.
-       */
-      createCoinbaseSource(apiKey, priority) {
-        if (!apiKey) {
-          throw new Error("createCoinbaseSource requires an apiKey");
-        }
-        const fetchJson = this.createFetchJson();
-        return {
-          name: "Coinbase",
-          fetchPrice: async () => {
-            const data = await fetchJson(
-              "https://api.coinbase.com/v2/prices/BTC-USDT/spot",
-              { "CB-ACCESS-KEY": apiKey }
-            );
-            const price = Number(data?.data?.amount);
-            if (!Number.isFinite(price) || price <= 0) {
-              throw new Error("Invalid Coinbase price payload");
-            }
-            return price;
-          },
-          priority
-        };
-      }
       createCoinMarketCapSource(apiKey, priority) {
         const fetchJson = this.createFetchJson();
         return {
@@ -34169,17 +34067,21 @@ ${errorReport}`);
         };
       }
       /**
-       * Get BTC price in USD with 8 decimals
+       * Get BTC price in USD with 8 decimals.
+       *
+       * Strict 3-of-3: queries all sources in parallel; if any one fails, the whole
+       * call fails (no fallback). All three prices must lie within 1% of each other
+       * (`(hi - lo) / lo <= 0.01`). Returns the median of the three.
        *
-       * CRITICAL OPTIMIZATION: Queries all sources in parallel with Promise.race()
-       * All three providers must resolve and agree within 1% tolerance.
-       * Returns the median price.
+       * This is the only signed-price path in the codebase. The previously-exposed
+       * `getBTCPriceConsensus()` (with outlier filtering + lenient survivor median)
+       * was removed in the H-2 fix.
        */
       async getBTCPrice() {
         const startTime = Date.now();
-        if (this.sources.length !== 3) {
+        if (this.sources.length !== _PriceOracleModule.REQUIRED_PROVIDER_COUNT) {
           throw new Error(
-            `Price oracle requires exactly 3 providers. Currently configured: ${this.sources.length}`
+            `Price oracle requires exactly ${_PriceOracleModule.REQUIRED_PROVIDER_COUNT} providers. Currently configured: ${this.sources.length}`
           );
         }
         const GLOBAL_TIMEOUT_MS = 8e3;
@@ -34216,91 +34118,6 @@ ${errorReport}`);
         console.log(`[Price Oracle] Price with 8 decimals: ${priceWith8Decimals}`);
         return priceWith8Decimals;
       }
-      /**
-       * Consensus across multiple sources with outlier detection
-       * Returns median price from valid sources after filtering outliers
-       *
-       * Master's Wisdom: Two-Path Validation
-       * 1. If ONE source is outlier (>2% from median) → FILTER it, continue with remaining
-       * 2. If ALL sources too dispersed (>5% spread) → REJECT all, throw error
-       *
-       * Logic Flow:
-       * 1. Calculate initial median from all sources
-       * 2. Filter individual outliers (>2% from median)
-       * 3. If outliers found: remove them, require minimum 2 sources remaining
-       * 4. Recalculate median from valid sources only
-       * 5. Check if remaining sources are too dispersed (max/min ratio > 1.05)
-       * 6. Return final median or throw appropriate error
-       */
-      async getBTCPriceConsensus() {
-        console.log(`[Price Oracle] Fetching BTC price with consensus...`);
-        const OUTLIER_DEVIATION = PRICE_ORACLE_OUTLIER_DEVIATION_THRESHOLD;
-        const DISPERSION_THRESHOLD = PRICE_ORACLE_DISPERSION_THRESHOLD;
-        const results = await Promise.allSettled(
-          this.sources.map(async (source) => {
-            const price = await source.fetchPrice();
-            return { source: source.name, price };
-          })
-        );
-        const successful = results.filter((r) => r.status === "fulfilled").map((r) => r.value);
-        if (successful.length === 0) {
-          throw new Error("No price sources returned data");
-        }
-        console.log(
-          `[Price Oracle] Got prices from ${successful.length}/${this.sources.length} sources:`
-        );
-        successful.forEach((s) => {
-          console.log(`   ${s.source}: $${s.price.toLocaleString()}`);
-        });
-        const prices = successful.map((s) => s.price);
-        prices.sort((a, b2) => a - b2);
-        const initialMedian = prices[Math.floor(prices.length / 2)];
-        const minPrice = prices[0];
-        const maxPrice = prices[prices.length - 1];
-        const dispersionRatio = maxPrice / minPrice;
-        const validPrices = successful.filter((s) => {
-          const deviation = Math.abs(s.price - initialMedian) / initialMedian;
-          return deviation <= OUTLIER_DEVIATION;
-        });
-        if (dispersionRatio > 1 + DISPERSION_THRESHOLD && validPrices.length === successful.length) {
-          throw new Error(
-            `Price consensus failed: sources too dispersed (${((dispersionRatio - 1) * 100).toFixed(1)}% spread)`
-          );
-        }
-        if (validPrices.length < successful.length) {
-          const outliers = successful.filter(
-            (s) => !validPrices.find((v) => v.source === s.source)
-          );
-          console.log(`[Price Oracle] \u26A0\uFE0F  Detected ${outliers.length} outlier(s):`);
-          outliers.forEach((o) => {
-            const deviation = Math.abs(o.price - initialMedian) / initialMedian;
-            console.log(
-              `   ${o.source}: $${o.price.toLocaleString()} (${(deviation * 100).toFixed(1)}% deviation)`
-            );
-          });
-          if (validPrices.length < 2) {
-            throw new Error(
-              "Price consensus failed: insufficient valid sources after outlier removal"
-            );
-          }
-          console.log(
-            `[Price Oracle] \u2705 Outliers filtered, continuing with ${validPrices.length} valid sources`
-          );
-          const validPricesOnly = validPrices.map((v) => v.price);
-          validPricesOnly.sort((a, b2) => a - b2);
-          const finalMedian = validPricesOnly[Math.floor(validPricesOnly.length / 2)];
-          console.log(
-            `[Price Oracle] \u2705 Consensus price (median): $${finalMedian.toLocaleString()}`
-          );
-          const priceCents2 = Math.round(finalMedian * 100);
-          return BigInt(priceCents2) * 1000000n;
-        }
-        console.log(
-          `[Price Oracle] \u2705 Consensus price (median): $${initialMedian.toLocaleString()}`
-        );
-        const priceCents = Math.round(initialMedian * 100);
-        return BigInt(priceCents) * 1000000n;
-      }
     };
     var VaultBalanceModule = class {
       constructor(config) {
@@ -34706,30 +34523,16 @@ ${errorReport}`);
       const oracle = params?.customSources ? new PriceOracleModule({}, params.customSources, params?.mode) : new PriceOracleModule(params?.priceProviders, void 0, params?.mode);
       return await oracle.getBTCPrice();
     }
-    async function executePriceOracleConsensus(params) {
-      global.Lit = {
-        Actions: {
-          broadcastAndCollect: async ({
-            name,
-            value
-          }) => {
-            return [value];
-          }
-        }
-      };
-      const oracle = params?.customSources ? new PriceOracleModule({}, params.customSources, params?.mode) : new PriceOracleModule(params?.priceProviders, void 0, params?.mode);
-      return await oracle.getBTCPriceConsensus();
-    }
     var NOLA_EXECUTORS = {
       /**
        * Vault Snapshot Executor
-       * 
+       *
        * Returns complete position health metrics:
        * - BTC balance (total, authorized, available)
        * - Collateral ratio and liquidation risk
        * - Term status (duration, expiry, grace period)
        * - Protocol parameters (fees, thresholds)
-       * 
+       *
        * Cost: FREE (no LIT Action execution)
        * Same data as LIT Action would return
        */
@@ -34741,39 +34544,20 @@ ${errorReport}`);
       },
       /**
        * Price Oracle Executor
-       * 
-       * Returns current BTC price in USD with 8 decimals:
-       * - Queries CoinGecko, Binance, Coinbase in parallel
-       * - First successful response wins (fastest path)
-       * - Automatic fallback if primary source fails
-       * - Same price format as LIT Action validator
-       * 
+       *
+       * Returns BTC price in USD (8 decimals) via strict 3-of-3 consensus:
+       * - All 3 configured providers must respond
+       * - Prices must agree within 1%
+       * - Returns the median
+       *
        * Cost: FREE (no LIT Action execution)
        * Use for: Price display, mint preview, collateral ratio calculation
        */
       priceOracle: {
         name: "price-oracle",
-        description: "Get current BTC price (fastest source)",
+        description: "Get current BTC price (strict 3-of-3 consensus)",
         executor: executePriceOracle,
-        version: "1.0.0"
-      },
-      /**
-       * Price Oracle Consensus Executor
-       * 
-       * Returns BTC price using multi-source consensus:
-       * - Queries ALL configured sources
-       * - Filters outliers (>2% deviation from median)
-       * - Returns median of valid sources
-       * - Rejects if sources too dispersed (>5% spread)
-       * 
-       * Cost: FREE (no LIT Action execution)
-       * Use for: High-stakes operations requiring price validation
-       */
-      priceOracleConsensus: {
-        name: "price-oracle-consensus",
-        description: "Get BTC price with multi-source consensus",
-        executor: executePriceOracleConsensus,
-        version: "1.0.0"
+        version: "2.0.0"
       }
     };
   }
@@ -110387,30 +110171,6 @@ var LoanCreator = class {
         `\u2705 Using btc-transaction-signer authorizedCidHex for certification (on-chain v${this.config.loanCreationValidatorVersion} getCid): ${certificationCid}`
       );
     }
-    const litAny = this.config.litOps;
-    if (litAny.config && isServiceMode) {
-      litAny.config.validatorVersion = this.config.loanCreationValidatorVersion;
-      if (this.config.ethRpcUrl) {
-        litAny.config.ethRpcUrl = this.config.ethRpcUrl;
-      }
-    }
-    if (certificationCid && isServiceMode) {
-      if (typeof this.config.litOps.updateCertificationCid === "function") {
-        this.config.litOps.updateCertificationCid(certificationCid);
-        if (this.config.debug) {
-          log.info(
-            `\u2705 Stored certificationCid in LitOps for validation: ${certificationCid}`
-          );
-        }
-      } else {
-        this.config.litOps._certificationCid = certificationCid;
-        if (this.config.debug) {
-          log.info(
-            `\u26A0\uFE0F  LitOps.updateCertificationCid not available; stored _certificationCid fallback`
-          );
-        }
-      }
-    }
     if (!isServiceMode && !this.config.litOpsSigner) {
       return failure(
         new SDKError({
@@ -112420,16 +112180,17 @@ var BitcoinOperations = class {
     return { verified: false, reason: "not yet visible after retries" };
   }
   /**
-   * Get current BTC price using LIT Protocol price oracle
+   * Get current BTC price using LIT Protocol price oracle.
    *
-   * Queries the decentralized price oracle via LIT Actions.
-   * Supports fast mode (single source) and full mode (consensus).
+   * Strict 3-of-3: all three configured providers must respond within 1% of
+   * each other, and the median is returned. The previous `mode: "fast" | "full"`
+   * parameter (with single-source and lenient-consensus variants) was removed
+   * in the H-2 audit fix — there is only one strict path now.
    *
-   * @param mode - Price fetch mode: "fast" (single source) or "full" (consensus)
    * @param sign - Whether to request PKP signature on the price
    * @returns BTC price result with timestamp and source
    */
-  async getPrice(mode = "fast", sign = false) {
+  async getPrice(sign = false) {
     if (!this.litOps) {
       return failure(
         new SDKError({
@@ -112444,13 +112205,11 @@ var BitcoinOperations = class {
       async () => {
         if (this.config.debug) {
           log.info("\u{1F4B0} Fetching BTC price via LIT Protocol oracle", {
-            mode,
             sign,
             hasSigner: !!this.config.signer
           });
         }
         const result = await this.litOps.getBTCPrice({
-          mode,
           sign,
           signer: this.config.signer,
           pkpId: this.config.priceOraclePkpId,
@@ -112488,7 +112247,6 @@ var BitcoinOperations = class {
           try {
             const litOpsConfig = this.litOps?.getConfig?.() || {};
             log.error("\u274C BTC price oracle failed", {
-              mode,
               sign,
               errorMessage: error2 instanceof Error ? error2.message : String(error2),
               errorStack: error2 instanceof Error ? error2.stack : void 0,
@@ -112505,7 +112263,6 @@ var BitcoinOperations = class {
           severity: "MEDIUM" /* MEDIUM */,
           originalError: error2 instanceof Error ? error2 : new Error(String(error2)),
           context: {
-            mode,
             sign,
             serviceEndpoint: this.litOps?.getConfig?.()?.serviceEndpoint,
             network: this.litOps?.getConfig?.()?.network
@@ -122872,7 +122629,7 @@ Error data: ${errorData || "none"}`
         source: json.data.source
       };
     }
-    const result = await this.bitcoinOperations.getPrice("fast", false);
+    const result = await this.bitcoinOperations.getPrice(false);
     if (!result.success) {
       const cause = result.error?.originalError?.message ?? String(result.error);
       throw new Error(`Failed to get BTC price: ${cause}`);