@gvnrdao/dh-sdk 0.0.279 → 0.0.281

package/dist/index.mjs

@@ -3964,9 +3964,9 @@ var init_deployment_addresses = __esm({
     };
     LOCALHOST_DEPLOYMENT = {
       network: "localhost",
-      chainId: 31337,
-      timestamp: "2026-03-23T15:33:34.068Z",
-      deployer: "",
+      chainId: 1337,
+      timestamp: "2026-06-15T13:32:40.927Z",
+      deployer: "0xf39Fd6e51aad88F6F4ce6aB8827279cffFb92266",
       contracts: {
         MessageHashBuilder: "0xE6E340D132b5f46d1e472DebcD681B2aBc16e57E",
         UpgradeValidator: "0x8A791620dd6260079BF849Dc5567aDC3F2FdC318",
@@ -3975,15 +3975,13 @@ var init_deployment_addresses = __esm({
         PositionManagerCoreModule: "0xB7f8BC63BbcaD18155201308C8f3540b07f84F5e",
         TermManagerModule: "0x0DCd1Bf9A1b36cE34237eEaFef220932846BCD82",
         LoanOperationsManagerModule: "0x68B1D87F95878fE05B998F19b66F4baba5De1aed",
-        BTCSpendAuthorizer: "0x59b670e9fA9D0A427751Af201D676719a970857b",
-        CollateralManagerModule: "0xa85233C63b9Ee964Add6F2cffe00Fd84eb32338f",
-        LiquidationManagerModule: "0x7a2088a1bFc9d81c55368AE168C2C02570cB814F",
+        BTCSpendAuthorizer: "0xc6e7DF5E7b4f2A278906862b61205850344D4e7d",
+        CollateralManagerModule: "0x322813Fd9A801c5507c9de605d63CEA4f2CE6c44",
+        LiquidationManagerModule: "0x4A679253410272dd5232B3Ff7cF5dbB88f295319",
         CircuitBreakerModule: "0x0B306BF915C4d645ff596e518fAf3F9669b97016",
-        AdminModule: "0xc5a5C42992dECbae36851359345FE25997F5C42d",
+        AdminModule: "0x09635F643e140090A9A8Dcd712eD6285858ceBef",
         PositionManagerViews: "0x959922bE3CAee4b8Cd9a407cc3ac1C251C2007B1",
-        PositionManager: "0x84eA74d481Ee0A5332c457a4d796187F6Ba67fEB",
-        OperationAuthorizationRegistry: "0x7969c5eD335650692Bc04293B07F5BF2e7A673C0",
-        PKPValidation: "0xcbEAF3BDe82155F56486Fb5a1072cb8baAf547cc"
+        PositionManager: "0x84eA74d481Ee0A5332c457a4d796187F6Ba67fEB"
       },
       latestEnv: {
         UCD_TOKEN: "0xe7f1725E7734CE288F8367e1Bb143E90bb3F0512",
@@ -4016,15 +4014,13 @@ var init_deployment_addresses = __esm({
       PositionManagerCoreModule: "0xB7f8BC63BbcaD18155201308C8f3540b07f84F5e",
       TermManagerModule: "0x0DCd1Bf9A1b36cE34237eEaFef220932846BCD82",
       LoanOperationsManagerModule: "0x68B1D87F95878fE05B998F19b66F4baba5De1aed",
-      BTCSpendAuthorizer: "0x59b670e9fA9D0A427751Af201D676719a970857b",
-      CollateralManagerModule: "0xa85233C63b9Ee964Add6F2cffe00Fd84eb32338f",
-      LiquidationManagerModule: "0x7a2088a1bFc9d81c55368AE168C2C02570cB814F",
+      BTCSpendAuthorizer: "0xc6e7DF5E7b4f2A278906862b61205850344D4e7d",
+      CollateralManagerModule: "0x322813Fd9A801c5507c9de605d63CEA4f2CE6c44",
+      LiquidationManagerModule: "0x4A679253410272dd5232B3Ff7cF5dbB88f295319",
       CircuitBreakerModule: "0x0B306BF915C4d645ff596e518fAf3F9669b97016",
-      AdminModule: "0xc5a5C42992dECbae36851359345FE25997F5C42d",
+      AdminModule: "0x09635F643e140090A9A8Dcd712eD6285858ceBef",
       PositionManagerViews: "0x959922bE3CAee4b8Cd9a407cc3ac1C251C2007B1",
-      PositionManager: "0x84eA74d481Ee0A5332c457a4d796187F6Ba67fEB",
-      OperationAuthorizationRegistry: "0x7969c5eD335650692Bc04293B07F5BF2e7A673C0",
-      PKPValidation: "0xcbEAF3BDe82155F56486Fb5a1072cb8baAf547cc"
+      PositionManager: "0x84eA74d481Ee0A5332c457a4d796187F6Ba67fEB"
     };
     ALL_DEPLOYMENTS = {
       sepolia: SEPOLIA_DEPLOYMENT,
@@ -31388,103 +31384,103 @@ var require_pkg_src = __commonJS({
         }
       },
       btcTransactionSigner: {
-        cid: "QmTrtAnUFpAi6tpw74UPCiULqe9Z4SBE4b4neekY8evK5Y",
+        cid: "QmZs56sVTCJv7mgvyRYfpYHFvFLcSeXa4H44qUYT7z14QP",
         authorizedCidHex: cidToHex(
-          "QmTrtAnUFpAi6tpw74UPCiULqe9Z4SBE4b4neekY8evK5Y"
+          "QmZs56sVTCJv7mgvyRYfpYHFvFLcSeXa4H44qUYT7z14QP"
         ),
         name: "Btc Transaction Signer",
         description: "Production Btc Transaction Signer",
         version: "1.0.0",
         deployed: true,
-        deployedAt: 1780976122896,
-        size: 41048,
-        hash: "93725b2020e1914e93f1e21bdcc75d9cb28bc0b6bc4ea9b470f112e1f068998f"
+        deployedAt: 1781542204806,
+        size: 42376,
+        hash: "f4aed3d88f6fbff6623ed2047436cecd4f561a74883171ea6f4ebe0a1129973c"
       },
       ucdMintValidator: {
-        cid: "QmTWKgfSHfYWTosPJBzu2s4sM2U6qhvmA9pXbkUzDxdQTJ",
+        cid: "QmPir8F8jmJ4ssQpEC3xFxkEnZxMHcgS6VxBQE1jkTLj5K",
         authorizedCidHex: cidToHex(
-          "QmTWKgfSHfYWTosPJBzu2s4sM2U6qhvmA9pXbkUzDxdQTJ"
+          "QmPir8F8jmJ4ssQpEC3xFxkEnZxMHcgS6VxBQE1jkTLj5K"
         ),
         name: "Ucd Mint Validator",
         description: "Production Ucd Mint Validator",
         version: "1.0.0",
         deployed: true,
-        deployedAt: 1781116591564,
-        size: 68521,
-        hash: "5a955863b32c003314ab29c37b157e06d00a2f93c2d9085a02ca73b71838a72f",
-        validatorWalletAddress: "0x82db9f515957aa380b596c6ea2bd30cef181f236",
+        deployedAt: 1781542207366,
+        size: 72074,
+        hash: "567a51d3beaedbda4f0af2636835ca8a2af89c2264e91f8dc31f522c1a424b7b",
+        validatorWalletAddress: "0x82DB9F515957aA380B596C6eA2Bd30CEF181f236",
         pkp: {
           publicKey: "0x041ab17cd91fc5c0b761eea6092d032807561b621b82c488826776e04a9158d61ba64d809a4729f0501289d980732cb06d8dfd06999dd9c8efd2f495dad78b31bb",
           ethAddress: "0xc7e1588Db94Bbe92Ab209B833235144Fc5b97607"
         }
       },
       processPaymentValidator: {
-        cid: "QmVJ9UaUz8vfvHCEwVY584e9RTEcqy3f3T89UNtzzFSdcz",
+        cid: "QmVq19NXJEpMMvaWQdsU5czLoqh28WGWoGgKMSYFaCmfa9",
         authorizedCidHex: cidToHex(
-          "QmVJ9UaUz8vfvHCEwVY584e9RTEcqy3f3T89UNtzzFSdcz"
+          "QmVq19NXJEpMMvaWQdsU5czLoqh28WGWoGgKMSYFaCmfa9"
         ),
         name: "Process Payment Validator",
         description: "Production Process Payment Validator",
         version: "1.0.0",
         deployed: true,
-        deployedAt: 1780976120346,
-        size: 64473,
-        hash: "8cf2ea8e2bf39ab02c6ac1706d8bec2aa16aa1f04f4789b11fa8215e04ac2d7e",
-        validatorWalletAddress: "0x82db9f515957aa380b596c6ea2bd30cef181f236",
+        deployedAt: 1781542209526,
+        size: 68239,
+        hash: "ada27fea57aa3f3b861c49e75ed1f80b72500fdccc1d6e88ee1a3c1396b81867",
+        validatorWalletAddress: "0x82DB9F515957aA380B596C6eA2Bd30CEF181f236",
         pkp: {
           publicKey: "0x04cfccb9b6c7addc79469c0e9fafebef4c70801302c62cdb26b610723a9b8527d23f98a40158c7340d83fd0e62d02b5ec74c12f7a86d98e8c6973b4811110f19ad",
           ethAddress: "0xc7e1588Db94Bbe92Ab209B833235144Fc5b97607"
         }
       },
       extendPositionValidator: {
-        cid: "QmW2zjWbsVzm8q4oMEHZ1SCeijygZFMvvi9zHqUQWm3jut",
+        cid: "QmP2u3bgKLtfqsFMp6Li72zMY8ZZH3ttAqp9W2wwonUmcb",
         authorizedCidHex: cidToHex(
-          "QmW2zjWbsVzm8q4oMEHZ1SCeijygZFMvvi9zHqUQWm3jut"
+          "QmP2u3bgKLtfqsFMp6Li72zMY8ZZH3ttAqp9W2wwonUmcb"
         ),
         name: "Extend Position Validator",
         description: "Production Extend Position Validator",
         version: "1.0.1",
         deployed: true,
-        deployedAt: 1781116610064,
-        size: 63508,
-        hash: "187c71046858bde0753fe479634bd2901e3d7f3689b5f39a82b3c5fa3a47b53d",
-        validatorWalletAddress: "0x82db9f515957aa380b596c6ea2bd30cef181f236",
+        deployedAt: 1781542211640,
+        size: 66543,
+        hash: "0db666fa2888e9acea13d8e4d79edd4ca252f5a4bb06d97e53aa14a9a34b7143",
+        validatorWalletAddress: "0x82DB9F515957aA380B596C6eA2Bd30CEF181f236",
         pkp: {
           publicKey: "0x04e52338f6a0c3362800f1a94c4c8f08be5030dde0fa217388c53d1c1a4790f4443c9f2886b2d2d8f4b75a9a156e9b028011b1a1cf7648da0e556aa980ec692836",
           ethAddress: "0xc7e1588Db94Bbe92Ab209B833235144Fc5b97607"
         }
       },
       btcWithdrawal: {
-        cid: "QmcxHLCcXpx5Jstd1hQmwjU2KPDzP2KYEdMgbZVn84nY6n",
+        cid: "QmXtmLdGuEqMKKAtV7d8sHpUV32Kt74na4dRQdpWLasbHJ",
         authorizedCidHex: cidToHex(
-          "QmcxHLCcXpx5Jstd1hQmwjU2KPDzP2KYEdMgbZVn84nY6n"
+          "QmXtmLdGuEqMKKAtV7d8sHpUV32Kt74na4dRQdpWLasbHJ"
         ),
         name: "Btc Withdrawal",
         description: "Production Btc Withdrawal",
         version: "1.0.0",
         deployed: true,
-        deployedAt: 1781116627244,
-        size: 76218,
-        hash: "1e686e517ab1b8163904a27d3e1962cecb2f49b3cc7ecdc8f2ff5e5847fe3762",
-        validatorWalletAddress: "0x82db9f515957aa380b596c6ea2bd30cef181f236",
+        deployedAt: 1781542212709,
+        size: 79782,
+        hash: "e824eb473df8eba3a025ac3adc46730dbf89f90884d7c05a78cc07b90d6bc4df",
+        validatorWalletAddress: "0x82DB9F515957aA380B596C6eA2Bd30CEF181f236",
         pkp: {
           publicKey: "0x043616787c5432415c24378c4ef48de2bcd6bb7b575b837e3cff09171802662da7105d79586c7659677a0ecbaddac4cce06cb2a11f69a16fa0c4d7002ac7d51a4d",
           ethAddress: "0xc7e1588Db94Bbe92Ab209B833235144Fc5b97607"
         }
       },
       liquidationValidator: {
-        cid: "QmZv8cRhvQqEGscWufU4rYPrKNt3ruAhQWK2ei3ohJBiZA",
+        cid: "QmVicBXuZVY8t4DXLPjvXjzLqnBtnogAh5HT7BaL9VeDwF",
         authorizedCidHex: cidToHex(
-          "QmZv8cRhvQqEGscWufU4rYPrKNt3ruAhQWK2ei3ohJBiZA"
+          "QmVicBXuZVY8t4DXLPjvXjzLqnBtnogAh5HT7BaL9VeDwF"
         ),
         name: "Liquidation Validator",
         description: "Production Liquidation Validator",
         version: "1.0.0",
         deployed: true,
-        deployedAt: 1781116646357,
-        size: 54901,
-        hash: "017ec04899089b98991a5aab6eeae5e3214c2cc9de7ef9b3fc0cd5ad85c3556c",
-        validatorWalletAddress: "0x82db9f515957aa380b596c6ea2bd30cef181f236",
+        deployedAt: 1781542213421,
+        size: 58444,
+        hash: "0f42e9f8984433fef95875d35eb3c8d985e7ce15ad309e6aa1093d6fd1ba0bb5",
+        validatorWalletAddress: "0x82DB9F515957aA380B596C6eA2Bd30CEF181f236",
         pkp: {
           publicKey: "0x041a241de58976c13e3d7ca5a18e494f7330151e3818706135d50176e78ffb673e58b11f0b67a87c73fade6c6b27d6e7a7377ea9f4c10bf31880f1d725f18cc6f8",
           ethAddress: "0xc7e1588Db94Bbe92Ab209B833235144Fc5b97607"
@@ -31509,18 +31505,18 @@ var require_pkg_src = __commonJS({
         }
       },
       loanVaultBtcBalance: {
-        cid: "Qmd7ZAWQzxjbFXjk39HuyRCN18FDG1LDifXceaikNFYRbm",
+        cid: "QmUmqL4LcjDSpw2TtuWMcw8xYk8hPxgagY2qHDU8Mx1PLG",
         authorizedCidHex: cidToHex(
-          "Qmd7ZAWQzxjbFXjk39HuyRCN18FDG1LDifXceaikNFYRbm"
+          "QmUmqL4LcjDSpw2TtuWMcw8xYk8hPxgagY2qHDU8Mx1PLG"
         ),
         name: "Loan Vault Btc Balance",
         description: "Production Loan Vault Btc Balance",
         version: "1.0.0",
         deployed: true,
-        deployedAt: 1780976125009,
-        size: 44634,
-        hash: "f7ba0f8778a15f349122237c44391800bb082d2090a87cc1631f0a764439d029",
-        validatorWalletAddress: "0x82db9f515957aa380b596c6ea2bd30cef181f236",
+        deployedAt: 1781542215432,
+        size: 48397,
+        hash: "da3750a70e532b87f3590a3e2d8c2d51e700589f6e111bb291384ab01304af35",
+        validatorWalletAddress: "0x82DB9F515957aA380B596C6eA2Bd30CEF181f236",
         pkp: {
           publicKey: "0x043616787c5432415c24378c4ef48de2bcd6bb7b575b837e3cff09171802662da7105d79586c7659677a0ecbaddac4cce06cb2a11f69a16fa0c4d7002ac7d51a4d",
           ethAddress: "0xc7e1588Db94Bbe92Ab209B833235144Fc5b97607"
@@ -31533,18 +31529,18 @@ var require_pkg_src = __commonJS({
       // Requires BitcoinProviderRegistry.addAllowedCid(chainId, keccak256(utf8(cid)))
       // on each target chain (the action decrypts registry slots). No OAR entry.
       btcAddressBalance: {
-        cid: "QmVmF9CHFDhhV51bNX87tVyd95oQS56u78ThFYKzMwEbFS",
+        cid: "QmWRDAg7ZCBFFhGfdXR7aUtQsG5qqBb1yVdLCxh8dPD7G5",
         authorizedCidHex: cidToHex(
-          "QmVmF9CHFDhhV51bNX87tVyd95oQS56u78ThFYKzMwEbFS"
+          "QmWRDAg7ZCBFFhGfdXR7aUtQsG5qqBb1yVdLCxh8dPD7G5"
         ),
         name: "Btc Address Balance",
         description: "Address-only signed total BTC balance via registry consensus (no positionId, no price)",
         version: "0.1.0",
         deployed: true,
-        deployedAt: 1781116681558,
-        size: 21957,
-        hash: "b17977304be6b117bcb29feafc3bb654113d72d5147ceeba92e91b4d7f5c0327",
-        validatorWalletAddress: "0x82db9f515957aa380b596c6ea2bd30cef181f236",
+        deployedAt: 1781542217452,
+        size: 25519,
+        hash: "000e2f8bdbccdc95b0db0fb3f12412e2e76eea16a8456d37914d324437ae291c",
+        validatorWalletAddress: "0x82DB9F515957aA380B596C6eA2Bd30CEF181f236",
         pkp: {
           publicKey: "0x0498cbb31facfa26e3ec83ccdabfe4fe341ca0282e0c3cb81da7113723b9726e1e49efa92165cc3faa66ced4454cea56dbab12267852d6525a55d7c4f128b912cd",
           ethAddress: "0xc7e1588Db94Bbe92Ab209B833235144Fc5b97607"
@@ -31577,18 +31573,18 @@ var require_pkg_src = __commonJS({
         hash: "03ee5be239c91c735d2c95db89a0d1b77e602cfc18af8eb64b3281fddcd90a72"
       },
       staleSpendRecoveryValidator: {
-        cid: "QmRZuRrxzsbp3WejuMfJJgws1iteRk87p1nGna82Cgun2k",
+        cid: "QmWqJZqoKUqMaGTXe9WUSwdDyeBwXJ9dnR3ioFnVK4RkN5",
         authorizedCidHex: cidToHex(
-          "QmRZuRrxzsbp3WejuMfJJgws1iteRk87p1nGna82Cgun2k"
+          "QmWqJZqoKUqMaGTXe9WUSwdDyeBwXJ9dnR3ioFnVK4RkN5"
         ),
         name: "Stale Spend Recovery Validator",
         description: "Production Stale Spend Recovery Validator",
         version: "1.0.0",
         deployed: true,
-        deployedAt: 1781116700324,
-        size: 31148,
-        hash: "c93591c7c7f51b519243499d78bd5ac0df1e368caa76c08d6a5d7aea9e3a49cc",
-        validatorWalletAddress: "0x82db9f515957aa380b596c6ea2bd30cef181f236",
+        deployedAt: 1781542219438,
+        size: 34413,
+        hash: "26b11730cf5d9eb4af0b1fe65192d26ccee50369c0472211a0ea11e26ef51cc5",
+        validatorWalletAddress: "0x82DB9F515957aA380B596C6eA2Bd30CEF181f236",
         pkp: {
           publicKey: "0x046da0ad6da7dd4a0063cbeac6f2bdb6a9889c2178b23470833356a8ee5630f7f0eee0db348d9d9aaaadd23eccf0063c8f68ee5e446abe30b882bf1de4c932bc21",
           ethAddress: "0xc7e1588Db94Bbe92Ab209B833235144Fc5b97607"
@@ -33335,12 +33331,83 @@ ${errorReport}`);
     function isAbortError(error2) {
       return error2 instanceof Error && error2.name === "AbortError";
     }
+    var BLOCKSTREAM_TOKEN_URL = "https://login.blockstream.com/realms/blockstream-public/protocol/openid-connect/token";
+    var oauthTokenCache = /* @__PURE__ */ new Map();
+    var OAUTH_TOKEN_TIMEOUT_MS = 1e4;
+    async function getBlockstreamBearerToken(auth, timeoutMs) {
+      const tokenUrl = auth.tokenUrl || BLOCKSTREAM_TOKEN_URL;
+      const key = `${tokenUrl}
+${auth.clientId}`;
+      const cached = oauthTokenCache.get(key);
+      if (cached)
+        return cached;
+      const promise = (async () => {
+        const body = `grant_type=client_credentials&client_id=${encodeURIComponent(auth.clientId)}&client_secret=${encodeURIComponent(auth.clientSecret)}&scope=openid`;
+        const controller = new AbortController();
+        const timeoutId = setTimeout(
+          () => controller.abort(),
+          timeoutMs && timeoutMs > 0 ? timeoutMs : OAUTH_TOKEN_TIMEOUT_MS
+        );
+        let resp;
+        try {
+          resp = await fetch(tokenUrl, {
+            method: "POST",
+            headers: { "Content-Type": "application/x-www-form-urlencoded" },
+            body,
+            signal: controller.signal
+          });
+        } finally {
+          clearTimeout(timeoutId);
+        }
+        if (!resp.ok) {
+          throw new Error(
+            `Blockstream OAuth token exchange failed: ${resp.status} ${resp.statusText}`
+          );
+        }
+        const json = await resp.json();
+        const token = json?.access_token;
+        if (typeof token !== "string" || token.length === 0) {
+          throw new Error(
+            "Blockstream OAuth token exchange returned no access_token"
+          );
+        }
+        return token;
+      })();
+      promise.catch(() => oauthTokenCache.delete(key));
+      oauthTokenCache.set(key, promise);
+      return promise;
+    }
+    async function authHeaders(auth, timeoutMs) {
+      if (!auth)
+        return {};
+      switch (auth.provider) {
+        case "esplora":
+          return {};
+        case "maestro":
+          return { "api-key": auth.apiKey };
+        case "blockstream-enterprise": {
+          const token = await getBlockstreamBearerToken(auth, timeoutMs);
+          return { Authorization: `Bearer ${token}` };
+        }
+        default:
+          return {};
+      }
+    }
     var BitcoinDataProvider = class {
       constructor(config) {
         this.config = config;
         this.timeout = config.timeout || 15e3;
         this.logger = LitActionLogger.create("BitcoinDataProvider");
       }
+      /**
+       * Merge per-provider auth headers into a base header set. No-op for public
+       * Esplora / regtest faucet (no `auth`); attaches the `api-key` header for
+       * Maestro and performs a (memoized) OAuth exchange → `Bearer` for Blockstream
+       * Enterprise. Awaited at every fetch site so a single run shares one token.
+       */
+      async withAuth(base22 = {}) {
+        return { ...base22, ...await authHeaders(this.config.auth, this.timeout) };
+      }
       /**
        * Get current Bitcoin block height from provider
        */
@@ -33359,11 +33426,11 @@ ${errorReport}`);
             `${this.config.providerUrl}/blocks/tip/height`,
             {
               signal: controller.signal,
-              headers: {
+              headers: await this.withAuth({
                 Accept: "text/plain",
                 "User-Agent": "Mozilla/5.0 (compatible; DiamondHandsValidator/1.0)",
                 "ngrok-skip-browser-warning": "true"
-              }
+              })
             }
           );
           clearTimeout(timeoutId);
@@ -33533,12 +33600,12 @@ ${errorReport}`);
        * Internal method to fetch UTXOs from a specific provider
        *
        * Supports standard Esplora API format:
-       * - Standard format: {providerUrl}/address/{address}/utxos
+       * - Standard format: {providerUrl}/address/{address}/utxo
        * - providerUrl must include full base path (e.g., "http://localhost:3002/api/esplora")
        */
       async fetchUTXOsFromProvider(providerUrl, address) {
         this.logger.stepStart("1", "fetchUTXOsFromProvider");
-        const endpoint = `${providerUrl}/address/${address}/utxos`;
+        const endpoint = `${providerUrl}/address/${address}/utxo`;
         this.logger.log("1", `Fetching UTXOs from ${endpoint}`);
         const controller = new AbortController();
         const timeoutId = setTimeout(() => controller.abort(), this.timeout);
@@ -33548,18 +33615,18 @@ ${errorReport}`);
             this.getCurrentBlockHeight(),
             fetch(endpoint, {
               signal: controller.signal,
-              headers: {
+              headers: await this.withAuth({
                 Accept: "application/json",
                 "Content-Type": "application/json",
                 "User-Agent": "Mozilla/5.0 (compatible; DiamondHandsValidator/1.0)",
                 "ngrok-skip-browser-warning": "true"
                 // Skip ngrok browser warning page
-              }
+              })
             })
           ]);
           clearTimeout(timeoutId);
           litDebugLog(
-            `[BitcoinDataProvider] parallel(tipHeight + GET utxos) wall ${Date.now() - tParallel}ms endpoint tail .../${address.slice(0, 12)}.../utxos (timeout budget ${this.timeout}ms)`
+            `[BitcoinDataProvider] parallel(tipHeight + GET utxo) wall ${Date.now() - tParallel}ms endpoint tail .../${address.slice(0, 12)}.../utxo (timeout budget ${this.timeout}ms)`
           );
           this.logger.log("1", `Current block height: ${currentBlockHeight}`);
           if (!response.ok) {
@@ -33671,12 +33738,12 @@ ${errorReport}`);
           const t0 = Date.now();
           const response = await fetch(endpoint, {
             signal: controller.signal,
-            headers: {
+            headers: await this.withAuth({
               Accept: "application/json",
               "Content-Type": "application/json",
               "User-Agent": "Mozilla/5.0 (compatible; DiamondHandsValidator/1.0)",
               "ngrok-skip-browser-warning": "true"
-            }
+            })
           });
           clearTimeout(timeoutId);
           litDebugLog(
@@ -33750,7 +33817,8 @@ ${errorReport}`);
         try {
           const t0 = Date.now();
           const response = await fetch(`${this.config.providerUrl}/tx/${txid}`, {
-            signal: controller.signal
+            signal: controller.signal,
+            headers: await this.withAuth()
           });
           clearTimeout(timeoutId);
           litDebugLog(
@@ -33772,7 +33840,7 @@ ${errorReport}`);
             try {
               const tipResp = await fetch(
                 `${this.config.providerUrl}/blocks/tip/height`,
-                { signal: controller.signal }
+                { signal: controller.signal, headers: await this.withAuth() }
               );
               if (!tipResp.ok) {
                 return { txid: data.txid ?? txid, confirmations: 1 };
@@ -33823,7 +33891,8 @@ ${errorReport}`);
         const timeoutId = setTimeout(() => controller.abort(), this.timeout);
         try {
           const response = await fetch(`${this.config.providerUrl}/tx/${txid}`, {
-            signal: controller.signal
+            signal: controller.signal,
+            headers: await this.withAuth()
           });
           clearTimeout(timeoutId);
           if (!response.ok) {
@@ -122336,29 +122405,46 @@ Error data: ${errorData || "none"}`
         "Content-Type": "application/json",
         ...await this.getAuthHeader()
       };
-      const resp = await fetch(
-        `${this.config.serviceEndpoint}/api/lit/pending-withdrawals/execute`,
-        {
-          method: "POST",
-          headers,
-          body: JSON.stringify({
-            positionId: envelope.positionId,
-            txid: envelope.txid,
-            vout: envelope.vout,
-            satoshis: envelope.satoshis,
-            targetAddress: envelope.targetAddress,
-            // CRIT-1: send the user-signed targetAmount so the Lit Action can
-            // bind it into its hash recomputation AND cross-check against the
-            // on-chain authorizer record.
-            targetAmount: envelope.targetAmount,
-            networkFee: envelope.networkFee,
-            userSignature: envelope.userSignature,
-            borrowerAddress: envelope.borrowerAddress,
-            chainId: envelope.chainId,
-            timestamp: envelope.timestamp
-          })
+      const PHASE2_CLIENT_TIMEOUT_MS = 6e4;
+      const abort = new AbortController();
+      const abortTimer = setTimeout(() => abort.abort(), PHASE2_CLIENT_TIMEOUT_MS);
+      let resp;
+      try {
+        resp = await fetch(
+          `${this.config.serviceEndpoint}/api/lit/pending-withdrawals/execute`,
+          {
+            method: "POST",
+            headers,
+            signal: abort.signal,
+            body: JSON.stringify({
+              positionId: envelope.positionId,
+              txid: envelope.txid,
+              vout: envelope.vout,
+              satoshis: envelope.satoshis,
+              targetAddress: envelope.targetAddress,
+              // CRIT-1: send the user-signed targetAmount so the Lit Action can
+              // bind it into its hash recomputation AND cross-check against the
+              // on-chain authorizer record.
+              targetAmount: envelope.targetAmount,
+              networkFee: envelope.networkFee,
+              userSignature: envelope.userSignature,
+              borrowerAddress: envelope.borrowerAddress,
+              chainId: envelope.chainId,
+              timestamp: envelope.timestamp
+            })
+          }
+        );
+      } catch (fetchErr) {
+        if (abort.signal.aborted) {
+          return {
+            success: false,
+            error: "Withdrawal signing timed out. Your withdrawal is still authorized on-chain \u2014 retry Execute from Pending Withdrawals to complete it."
+          };
         }
-      );
+        throw fetchErr;
+      } finally {
+        clearTimeout(abortTimer);
+      }
       const json = await resp.json();
       if (!json.success || !json.data?.success) {
         const errMsg = json.data?.error ?? json.error ?? "BTC broadcast failed";
@@ -122632,38 +122718,68 @@ Error data: ${errorData || "none"}`
           error: "chainId required for recoverStaleSpend (set DiamondHandsSDKConfig.chainId)"
         };
       }
-      const rpcUrl = params.rpcUrl ?? this.config.ethRpcUrl;
-      if (!rpcUrl) {
-        return {
-          success: false,
-          failedStep: "config",
-          error: "ethRpcUrl required for recoverStaleSpend \u2014 set DiamondHandsSDKConfig.ethRpcUrl or pass rpcUrl"
+      let attRes;
+      if (this.config.mode === "service" && this.config.serviceEndpoint) {
+        const headers = {
+          "Content-Type": "application/json",
+          ...await this.getAuthHeader()
         };
-      }
-      const sdkBitcoinProviderUrl = this.config.bitcoinProviders?.[0]?.url;
-      const attRes = await this.litOps.requestStaleSpendRecoveryAttestation({
-        chainId,
-        positionId: this.toBytes32(params.positionId),
-        utxoTxid: params.utxoTxid,
-        utxoVout: params.utxoVout,
-        invalidatorTxid: params.invalidatorTxid,
-        contractAddresses: {
-          PositionManager: contractAddresses.positionManager,
-          BTCSpendAuthorizer: btcSpendAuthorizerAddress,
-          ...contractAddresses.bitcoinProviderRegistry && {
-            BitcoinProviderRegistry: contractAddresses.bitcoinProviderRegistry
+        const resp = await fetch(
+          `${this.config.serviceEndpoint}/api/lit/stale-spend/recover`,
+          {
+            method: "POST",
+            headers,
+            body: JSON.stringify({
+              positionId: this.toBytes32(params.positionId),
+              utxoTxid: params.utxoTxid,
+              utxoVout: params.utxoVout,
+              invalidatorTxid: params.invalidatorTxid,
+              chainId,
+              ...params.minConfirmations !== void 0 && {
+                minConfirmations: params.minConfirmations
+              }
+            })
           }
-        },
-        rpcUrl,
-        ...sdkBitcoinProviderUrl && { bitcoinProviderUrl: sdkBitcoinProviderUrl },
-        // Hardhat (chainId 1337/31337) has no on-chain BitcoinProviderRegistry —
-        // Lit Actions read `devBitcoinProviderUrl` from globalThis. Always pass;
-        // non-hardhat chains ignore it. (Single source of truth: bitcoinProviderUrl.)
-        ...sdkBitcoinProviderUrl && { devBitcoinProviderUrl: sdkBitcoinProviderUrl },
-        ...params.minConfirmations !== void 0 && {
-          minConfirmations: params.minConfirmations
+        );
+        const json = await resp.json();
+        attRes = json.data ?? {
+          success: false,
+          error: json.error ?? "stale-spend recovery request failed"
+        };
+      } else {
+        const rpcUrl = params.rpcUrl ?? this.config.ethRpcUrl;
+        if (!rpcUrl) {
+          return {
+            success: false,
+            failedStep: "config",
+            error: "ethRpcUrl required for recoverStaleSpend \u2014 set DiamondHandsSDKConfig.ethRpcUrl or pass rpcUrl"
+          };
         }
-      });
+        const sdkBitcoinProviderUrl = this.config.bitcoinProviders?.[0]?.url;
+        attRes = await this.litOps.requestStaleSpendRecoveryAttestation({
+          chainId,
+          positionId: this.toBytes32(params.positionId),
+          utxoTxid: params.utxoTxid,
+          utxoVout: params.utxoVout,
+          invalidatorTxid: params.invalidatorTxid,
+          contractAddresses: {
+            PositionManager: contractAddresses.positionManager,
+            BTCSpendAuthorizer: btcSpendAuthorizerAddress,
+            ...contractAddresses.bitcoinProviderRegistry && {
+              BitcoinProviderRegistry: contractAddresses.bitcoinProviderRegistry
+            }
+          },
+          rpcUrl,
+          ...sdkBitcoinProviderUrl && { bitcoinProviderUrl: sdkBitcoinProviderUrl },
+          // Hardhat (chainId 1337/31337) has no on-chain BitcoinProviderRegistry —
+          // Lit Actions read `devBitcoinProviderUrl` from globalThis. Always pass;
+          // non-hardhat chains ignore it. (Single source of truth: bitcoinProviderUrl.)
+          ...sdkBitcoinProviderUrl && { devBitcoinProviderUrl: sdkBitcoinProviderUrl },
+          ...params.minConfirmations !== void 0 && {
+            minConfirmations: params.minConfirmations
+          }
+        });
+      }
       if (!attRes.success || !attRes.signature || !attRes.attestation) {
         return {
           success: false,

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@gvnrdao/dh-sdk",
-  "version": "0.0.279",
+  "version": "0.0.281",
   "description": "TypeScript SDK for Diamond Hands Protocol - Bitcoin-backed lending with LIT Protocol PKPs",
   "main": "dist/index.js",
   "types": "dist/index.d.ts",
@@ -81,8 +81,8 @@
   },
   "sideEffects": false,
   "dependencies": {
-    "@gvnrdao/dh-lit-actions": "^0.0.309",
-    "@gvnrdao/dh-lit-ops": "^0.0.297",
+    "@gvnrdao/dh-lit-actions": "^0.0.310",
+    "@gvnrdao/dh-lit-ops": "^0.0.298",
     "@noble/hashes": "^1.5.0",
     "axios": "^1.17.0",
     "bech32": "^2.0.0",