@secondlayer/stacks 6.4.1 → 6.5.1

package/dist/src/sbtc/index.d.cts

@@ -151,6 +151,111 @@ type Client<TExtended extends Record<string, unknown> = Record<string, unknown>>
 	nonceManager?: NonceManager
 	extend: <const TNew extends Record<string, unknown>>(fn: (client: Client<TExtended>) => TNew) => Client<TExtended & TNew> & TNew
 } & TExtended;
+/** The registry's current signer set (`get-current-signer-data`). */
+interface SbtcSignerSet {
+	/** 33-byte compressed signer public keys. */
+	signerPublicKeys: Uint8Array[];
+	/** Signatures needed to spend the peg UTXO. */
+	signaturesRequired: number;
+	/**
+	* Raw aggregate-key field: a 33-byte public key while DKG runs, or the v2
+	* marker `0xFF || block hash` once DKG is disabled. Not checked here.
+	*/
+	aggregatePubkey: Uint8Array;
+	signerPrincipal: string;
+}
+/** Options for {@link getSignersAddress}. */
+interface SbtcPegAddressOptions {
+	/**
+	* Peg script format. Leave it out to pick the format the signers lock to
+	* at `burnBlockHeight`.
+	*/
+	version?: "v1" | "v2";
+	/** Bitcoin height to resolve the format at. Defaults to the node's burn tip. */
+	burnBlockHeight?: number;
+	/**
+	* Height at which the signers switch to v2. Defaults to
+	* {@link SBTC_V2_SIGNING_BURN_HEIGHT_MAINNET} on mainnet; required on other
+	* networks unless `version` is given.
+	*/
+	v2ActivationBurnHeight?: number;
+}
+type BitcoinNetwork = "mainnet" | "testnet" | "regtest";
+declare class BaseError extends Error {
+	private;
+	name: string;
+	shortMessage: string;
+	details?: string;
+	constructor(shortMessage: string, options?: {
+		cause?: Error
+		details?: string
+		code?: string
+	});
+	/**
+	* Stable identifier for programmatic handling; survives message
+	* rewording and minification. An explicit `code` option wins, else it
+	* is derived from `name` (`TimeoutError` gives `TIMEOUT_ERROR`).
+	*/
+	get code(): string;
+	set code(value: string);
+	toJSON(): {
+		name: string
+		code: string
+		message: string
+		shortMessage: string
+		details: string | undefined
+		cause: string | undefined
+	};
+}
+/**
+* Bitcoin height at which mainnet sBTC signers start locking the peg UTXO to
+* the v2 script (`MAINNET_V2_SIGNING_BLOCK_HEIGHT` in the sBTC signer). From
+* this height the next sweep pays the v2 output; until that sweep confirms,
+* the peg funds still sit at the v1 address.
+*/
+declare const SBTC_V2_SIGNING_BURN_HEIGHT_MAINNET = 972295;
+/**
+* Unspendable internal key of v2 peg outputs: the `/0/0` child of the
+* BIP341 NUMS point with an all-zero chain code (`V2_NUMS_X_COORDINATE`).
+*/
+declare const SBTC_V2_INTERNAL_KEY: Uint8Array;
+/**
+* The registry's aggregate-key field holds the v2 marker `0xFF || block hash`
+* instead of a public key. There is no aggregate key to derive an address
+* from: the v2 peg is derived from the signer set and threshold.
+*/
+declare class SbtcV2MarkerError extends BaseError {
+	name: string;
+}
+/**
+* Check a registry aggregate key and return it. A key is 33 bytes starting
+* with `0x02`/`0x03`. Throws {@link SbtcV2MarkerError} on the v2 marker
+* (`0xFF` prefix) and a plain `Error` on anything else.
+*/
+declare function assertRegistryAggregateKey(key: Uint8Array): Uint8Array;
+/**
+* The x-only Bitcoin signing key of one registry signer: the unhardened
+* `/0/0` BIP32 child of its 33-byte public key, with chain code
+* `SHA256("sbtc/signer/chain-code/v1" || pubkey)`.
+*/
+declare function deriveSbtcSigningKey(registryPublicKey: Uint8Array): Uint8Array;
+/** A v2 sBTC peg output: the `multi_a` leaf, its scriptPubKey and address. */
+interface SbtcV2PegOutput {
+	/** Sorted x-only signing keys in the script. */
+	signingKeys: Uint8Array[];
+	signaturesRequired: number;
+	/** `<k1> CHECKSIG <k2> CHECKSIGADD … <m> NUMEQUAL`. */
+	signingScript: Uint8Array;
+	/** `OP_1 <32-byte output key>`. */
+	scriptPubKey: Uint8Array;
+	address: string;
+}
+/**
+* Derive the v2 peg output from the registry signer set and threshold:
+* `tr(NUMS_V2, multi_a(m, signer_1/0/0, …))` with the derived keys x-only and
+* sorted. Mirrors `SignerKeySet::derive` + `script_pubkey` in the sBTC signer.
+*/
+declare function deriveSbtcV2PegOutput(signerPublicKeys: readonly Uint8Array[], signaturesRequired: number, network?: BitcoinNetwork): SbtcV2PegOutput;
 /**
 * sBTC mainnet contract identifiers.
 *
@@ -292,7 +397,6 @@ type SbtcTokenEvent = SbtcTokenTransferEvent | SbtcTokenMintEvent | SbtcTokenBur
 type SbtcEventByTopic<T extends SbtcEventTopic> = Extract<SbtcRegistryEvent, {
 	topic: T
 }>;
-type BitcoinNetwork = "mainnet" | "testnet" | "regtest";
 /**
 * Format a `(buff 1) + (buff 32)` BTC recipient tuple into a canonical
 * Bitcoin address string. Defaults to mainnet encoding; pass `network`
@@ -426,10 +530,18 @@ type SbtcActions = {
 		getSymbol: () => Promise<string>
 		getDecimals: () => Promise<bigint>
 		getTokenUri: () => Promise<string | null>
-		/** Current signer-set aggregate pubkey (33B compressed) from `sbtc-registry`. */
+		/** Current signer set and threshold from `sbtc-registry`. */
+		getSignerSet: () => Promise<SbtcSignerSet>
+		/**
+		* Current signer-set aggregate pubkey (33B compressed) from `sbtc-registry`.
+		* Throws `SbtcV2MarkerError` once the registry holds the v2 marker.
+		*/
 		getSignersPublicKey: () => Promise<Uint8Array>
-		/** Signers' taproot deposit address, network-aware from `client.chain`. */
-		getSignersAddress: () => Promise<string>
+		/**
+		* Signers' peg address (v1 aggregate key or v2 `multi_a`, by Bitcoin
+		* height), network-aware from `client.chain`.
+		*/
+		getSignersAddress: (options?: SbtcPegAddressOptions) => Promise<string>
 	}
 };
 /**
@@ -448,4 +560,4 @@ type SbtcActions = {
 * const balance = await client.sbtc.getBalance("SP1...");
 */
 declare function sbtc(): (client: Client) => SbtcActions;
-export { CompletedDepositEvent, KeyRotationEvent, SBTC_ASSET_IDENTIFIER_MAINNET, SBTC_ASSET_IDENTIFIER_TESTNET, SBTC_BTC_ADDRESS_VERSION, SBTC_CONTRACTS, SBTC_DECIMALS, SBTC_EVENT_TOPICS, SBTC_TOKEN_ABI, SBTC_UNIT_NAME, SbtcActions, SbtcBtcRecipient, SbtcEventByTopic, SbtcEventTopic, SbtcNetwork, SbtcRegistryEvent, SbtcTokenBurnEvent, SbtcTokenEvent, SbtcTokenMintEvent, SbtcTokenTransferEvent, UpdateProtocolContractEvent, WithdrawalAcceptEvent, WithdrawalCreateEvent, WithdrawalRejectEvent, bitcoinTxidFromHex, bitcoinTxidToHex, formatBtcAddress, satsToSbtc, sbtc, sbtcContractId, sbtcToSats, validateBitcoinTxid };
+export { CompletedDepositEvent, KeyRotationEvent, SBTC_ASSET_IDENTIFIER_MAINNET, SBTC_ASSET_IDENTIFIER_TESTNET, SBTC_BTC_ADDRESS_VERSION, SBTC_CONTRACTS, SBTC_DECIMALS, SBTC_EVENT_TOPICS, SBTC_TOKEN_ABI, SBTC_UNIT_NAME, SBTC_V2_INTERNAL_KEY, SBTC_V2_SIGNING_BURN_HEIGHT_MAINNET, SbtcActions, SbtcBtcRecipient, SbtcEventByTopic, SbtcEventTopic, SbtcNetwork, SbtcPegAddressOptions, SbtcRegistryEvent, SbtcSignerSet, SbtcTokenBurnEvent, SbtcTokenEvent, SbtcTokenMintEvent, SbtcTokenTransferEvent, SbtcV2MarkerError, SbtcV2PegOutput, UpdateProtocolContractEvent, WithdrawalAcceptEvent, WithdrawalCreateEvent, WithdrawalRejectEvent, assertRegistryAggregateKey, bitcoinTxidFromHex, bitcoinTxidToHex, deriveSbtcSigningKey, deriveSbtcV2PegOutput, formatBtcAddress, satsToSbtc, sbtc, sbtcContractId, sbtcToSats, validateBitcoinTxid };

package/dist/src/sbtc/index.d.ts

@@ -151,6 +151,111 @@ type Client<TExtended extends Record<string, unknown> = Record<string, unknown>>
 	nonceManager?: NonceManager
 	extend: <const TNew extends Record<string, unknown>>(fn: (client: Client<TExtended>) => TNew) => Client<TExtended & TNew> & TNew
 } & TExtended;
+/** The registry's current signer set (`get-current-signer-data`). */
+interface SbtcSignerSet {
+	/** 33-byte compressed signer public keys. */
+	signerPublicKeys: Uint8Array[];
+	/** Signatures needed to spend the peg UTXO. */
+	signaturesRequired: number;
+	/**
+	* Raw aggregate-key field: a 33-byte public key while DKG runs, or the v2
+	* marker `0xFF || block hash` once DKG is disabled. Not checked here.
+	*/
+	aggregatePubkey: Uint8Array;
+	signerPrincipal: string;
+}
+/** Options for {@link getSignersAddress}. */
+interface SbtcPegAddressOptions {
+	/**
+	* Peg script format. Leave it out to pick the format the signers lock to
+	* at `burnBlockHeight`.
+	*/
+	version?: "v1" | "v2";
+	/** Bitcoin height to resolve the format at. Defaults to the node's burn tip. */
+	burnBlockHeight?: number;
+	/**
+	* Height at which the signers switch to v2. Defaults to
+	* {@link SBTC_V2_SIGNING_BURN_HEIGHT_MAINNET} on mainnet; required on other
+	* networks unless `version` is given.
+	*/
+	v2ActivationBurnHeight?: number;
+}
+type BitcoinNetwork = "mainnet" | "testnet" | "regtest";
+declare class BaseError extends Error {
+	private;
+	name: string;
+	shortMessage: string;
+	details?: string;
+	constructor(shortMessage: string, options?: {
+		cause?: Error
+		details?: string
+		code?: string
+	});
+	/**
+	* Stable identifier for programmatic handling; survives message
+	* rewording and minification. An explicit `code` option wins, else it
+	* is derived from `name` (`TimeoutError` gives `TIMEOUT_ERROR`).
+	*/
+	get code(): string;
+	set code(value: string);
+	toJSON(): {
+		name: string
+		code: string
+		message: string
+		shortMessage: string
+		details: string | undefined
+		cause: string | undefined
+	};
+}
+/**
+* Bitcoin height at which mainnet sBTC signers start locking the peg UTXO to
+* the v2 script (`MAINNET_V2_SIGNING_BLOCK_HEIGHT` in the sBTC signer). From
+* this height the next sweep pays the v2 output; until that sweep confirms,
+* the peg funds still sit at the v1 address.
+*/
+declare const SBTC_V2_SIGNING_BURN_HEIGHT_MAINNET = 972295;
+/**
+* Unspendable internal key of v2 peg outputs: the `/0/0` child of the
+* BIP341 NUMS point with an all-zero chain code (`V2_NUMS_X_COORDINATE`).
+*/
+declare const SBTC_V2_INTERNAL_KEY: Uint8Array;
+/**
+* The registry's aggregate-key field holds the v2 marker `0xFF || block hash`
+* instead of a public key. There is no aggregate key to derive an address
+* from: the v2 peg is derived from the signer set and threshold.
+*/
+declare class SbtcV2MarkerError extends BaseError {
+	name: string;
+}
+/**
+* Check a registry aggregate key and return it. A key is 33 bytes starting
+* with `0x02`/`0x03`. Throws {@link SbtcV2MarkerError} on the v2 marker
+* (`0xFF` prefix) and a plain `Error` on anything else.
+*/
+declare function assertRegistryAggregateKey(key: Uint8Array): Uint8Array;
+/**
+* The x-only Bitcoin signing key of one registry signer: the unhardened
+* `/0/0` BIP32 child of its 33-byte public key, with chain code
+* `SHA256("sbtc/signer/chain-code/v1" || pubkey)`.
+*/
+declare function deriveSbtcSigningKey(registryPublicKey: Uint8Array): Uint8Array;
+/** A v2 sBTC peg output: the `multi_a` leaf, its scriptPubKey and address. */
+interface SbtcV2PegOutput {
+	/** Sorted x-only signing keys in the script. */
+	signingKeys: Uint8Array[];
+	signaturesRequired: number;
+	/** `<k1> CHECKSIG <k2> CHECKSIGADD … <m> NUMEQUAL`. */
+	signingScript: Uint8Array;
+	/** `OP_1 <32-byte output key>`. */
+	scriptPubKey: Uint8Array;
+	address: string;
+}
+/**
+* Derive the v2 peg output from the registry signer set and threshold:
+* `tr(NUMS_V2, multi_a(m, signer_1/0/0, …))` with the derived keys x-only and
+* sorted. Mirrors `SignerKeySet::derive` + `script_pubkey` in the sBTC signer.
+*/
+declare function deriveSbtcV2PegOutput(signerPublicKeys: readonly Uint8Array[], signaturesRequired: number, network?: BitcoinNetwork): SbtcV2PegOutput;
 /**
 * sBTC mainnet contract identifiers.
 *
@@ -292,7 +397,6 @@ type SbtcTokenEvent = SbtcTokenTransferEvent | SbtcTokenMintEvent | SbtcTokenBur
 type SbtcEventByTopic<T extends SbtcEventTopic> = Extract<SbtcRegistryEvent, {
 	topic: T
 }>;
-type BitcoinNetwork = "mainnet" | "testnet" | "regtest";
 /**
 * Format a `(buff 1) + (buff 32)` BTC recipient tuple into a canonical
 * Bitcoin address string. Defaults to mainnet encoding; pass `network`
@@ -426,10 +530,18 @@ type SbtcActions = {
 		getSymbol: () => Promise<string>
 		getDecimals: () => Promise<bigint>
 		getTokenUri: () => Promise<string | null>
-		/** Current signer-set aggregate pubkey (33B compressed) from `sbtc-registry`. */
+		/** Current signer set and threshold from `sbtc-registry`. */
+		getSignerSet: () => Promise<SbtcSignerSet>
+		/**
+		* Current signer-set aggregate pubkey (33B compressed) from `sbtc-registry`.
+		* Throws `SbtcV2MarkerError` once the registry holds the v2 marker.
+		*/
 		getSignersPublicKey: () => Promise<Uint8Array>
-		/** Signers' taproot deposit address, network-aware from `client.chain`. */
-		getSignersAddress: () => Promise<string>
+		/**
+		* Signers' peg address (v1 aggregate key or v2 `multi_a`, by Bitcoin
+		* height), network-aware from `client.chain`.
+		*/
+		getSignersAddress: (options?: SbtcPegAddressOptions) => Promise<string>
 	}
 };
 /**
@@ -448,4 +560,4 @@ type SbtcActions = {
 * const balance = await client.sbtc.getBalance("SP1...");
 */
 declare function sbtc(): (client: Client) => SbtcActions;
-export { CompletedDepositEvent, KeyRotationEvent, SBTC_ASSET_IDENTIFIER_MAINNET, SBTC_ASSET_IDENTIFIER_TESTNET, SBTC_BTC_ADDRESS_VERSION, SBTC_CONTRACTS, SBTC_DECIMALS, SBTC_EVENT_TOPICS, SBTC_TOKEN_ABI, SBTC_UNIT_NAME, SbtcActions, SbtcBtcRecipient, SbtcEventByTopic, SbtcEventTopic, SbtcNetwork, SbtcRegistryEvent, SbtcTokenBurnEvent, SbtcTokenEvent, SbtcTokenMintEvent, SbtcTokenTransferEvent, UpdateProtocolContractEvent, WithdrawalAcceptEvent, WithdrawalCreateEvent, WithdrawalRejectEvent, bitcoinTxidFromHex, bitcoinTxidToHex, formatBtcAddress, satsToSbtc, sbtc, sbtcContractId, sbtcToSats, validateBitcoinTxid };
+export { CompletedDepositEvent, KeyRotationEvent, SBTC_ASSET_IDENTIFIER_MAINNET, SBTC_ASSET_IDENTIFIER_TESTNET, SBTC_BTC_ADDRESS_VERSION, SBTC_CONTRACTS, SBTC_DECIMALS, SBTC_EVENT_TOPICS, SBTC_TOKEN_ABI, SBTC_UNIT_NAME, SBTC_V2_INTERNAL_KEY, SBTC_V2_SIGNING_BURN_HEIGHT_MAINNET, SbtcActions, SbtcBtcRecipient, SbtcEventByTopic, SbtcEventTopic, SbtcNetwork, SbtcPegAddressOptions, SbtcRegistryEvent, SbtcSignerSet, SbtcTokenBurnEvent, SbtcTokenEvent, SbtcTokenMintEvent, SbtcTokenTransferEvent, SbtcV2MarkerError, SbtcV2PegOutput, UpdateProtocolContractEvent, WithdrawalAcceptEvent, WithdrawalCreateEvent, WithdrawalRejectEvent, assertRegistryAggregateKey, bitcoinTxidFromHex, bitcoinTxidToHex, deriveSbtcSigningKey, deriveSbtcV2PegOutput, formatBtcAddress, satsToSbtc, sbtc, sbtcContractId, sbtcToSats, validateBitcoinTxid };

package/dist/src/sbtc/index.js

@@ -1,24 +1,33 @@
 import {
   bytesToHex2,
-  hexToBytes2
+  hexToBytes2,
+  concatBytes2
 } from "../../shared/stacks-esm-7a0ehykf.js";
 import"../../shared/stacks-esm-kbz5s6v8.js";
 import"../../shared/stacks-esm-gs60rd15.js";
 import"../../shared/stacks-esm-896kv9yv.js";
-import"../../shared/stacks-esm-zwbhghxb.js";
-import"../../shared/stacks-esm-hv11fdgy.js";
+import"../../shared/stacks-esm-90bwm9ng.js";
+import"../../shared/stacks-esm-kd5gn8v3.js";
 import {
+  BITCOIN_NETWORK_PARAMS,
+  taprootTweakPubkey2,
   publicKeyToP2trAddress2
-} from "../../shared/stacks-esm-e2qhfgke.js";
+} from "../../shared/stacks-esm-ph2fd7hg.js";
 import {
   stringifyBtcAddress2
-} from "../../shared/stacks-esm-ss9ap75h.js";
+} from "../../shared/stacks-esm-47b3bb9e.js";
+import {
+  getBurnBlockHeight2
+} from "../../shared/stacks-esm-zvpv6a06.js";
 import {
   getContract2,
   resolveNetworkContract
-} from "../../shared/stacks-esm-w8kswk0r.js";
-import"../../shared/stacks-esm-hcjqgrtm.js";
+} from "../../shared/stacks-esm-2g7h9sbq.js";
+import"../../shared/stacks-esm-60wsk8b7.js";
 import"../../shared/stacks-esm-x8gjr2v6.js";
+import {
+  BaseError2
+} from "../../shared/stacks-esm-7v18h5dk.js";
 
 // src/sbtc/abi.ts
 var SBTC_TOKEN_ABI = {
@@ -77,6 +86,25 @@ var SBTC_REGISTRY_ABI = {
       access: "read-only",
       args: [],
       outputs: { buff: { length: 33 } }
+    },
+    {
+      name: "get-current-signer-data",
+      access: "read-only",
+      args: [],
+      outputs: {
+        tuple: [
+          {
+            name: "current-aggregate-pubkey",
+            type: { buff: { length: 33 } }
+          },
+          { name: "current-signature-threshold", type: "uint128" },
+          { name: "current-signer-principal", type: "principal" },
+          {
+            name: "current-signer-set",
+            type: { list: { type: { buff: { length: 33 } }, length: 128 } }
+          }
+        ]
+      }
     }
   ]
 };
@@ -122,6 +150,90 @@ function sbtcContractId(network, contract) {
   return `${cfg.address}.${cfg[contract]}`;
 }
 
+// src/sbtc/peg.ts
+import { schnorr } from "@noble/curves/secp256k1.js";
+import { sha256 } from "@noble/hashes/sha2.js";
+import { bech32m } from "@scure/base";
+import { HDKey } from "@scure/bip32";
+var SBTC_V2_SIGNING_BURN_HEIGHT_MAINNET = 972295;
+var MAX_SIGNERS = 16;
+var SBTC_V2_INTERNAL_KEY = hexToBytes2("4a30b2e461b280c0b13a03799096ab1256589153fc4b9c8cead16dc0b6420697");
+var CHAIN_CODE_DOMAIN = new TextEncoder().encode("sbtc/signer/chain-code/v1");
+var OP_CHECKSIG = 172;
+var OP_CHECKSIGADD = 186;
+var OP_NUMEQUAL = 156;
+var OP_PUSHNUM_BASE = 80;
+var TAPSCRIPT_LEAF_VERSION = 192;
+
+class SbtcV2MarkerError extends BaseError2 {
+  name = "SbtcV2MarkerError";
+}
+function assertRegistryAggregateKey(key) {
+  if (key.length === 33 && key[0] === 255) {
+    throw new SbtcV2MarkerError("sbtc-registry aggregate key is the v2 marker (0xFF || block hash), not a public key", {
+      details: "Derive the v2 peg from the signer set: getSignersAddress(client, { version: 'v2' })."
+    });
+  }
+  if (key.length !== 33 || key[0] !== 2 && key[0] !== 3) {
+    throw new Error(`sbtc-registry aggregate key is not a compressed public key (${key.length} bytes, prefix 0x${(key[0] ?? 0).toString(16).padStart(2, "0")})`);
+  }
+  return key;
+}
+function deriveSbtcSigningKey(registryPublicKey) {
+  if (registryPublicKey.length !== 33 || registryPublicKey[0] !== 2 && registryPublicKey[0] !== 3) {
+    throw new Error("sBTC signer key must be a 33-byte compressed public key");
+  }
+  const master = new HDKey({
+    publicKey: registryPublicKey,
+    chainCode: sha256(concatBytes2(CHAIN_CODE_DOMAIN, registryPublicKey))
+  });
+  const child = master.deriveChild(0).deriveChild(0).publicKey;
+  if (!child)
+    throw new Error("BIP32 derivation returned no public key");
+  return child.slice(1);
+}
+function compareBytes(a, b) {
+  for (let i = 0;i < a.length; i++) {
+    const d = a[i] - b[i];
+    if (d !== 0)
+      return d;
+  }
+  return a.length - b.length;
+}
+function compactSize(n) {
+  if (n < 253)
+    return Uint8Array.of(n);
+  if (n <= 65535)
+    return Uint8Array.of(253, n & 255, n >> 8);
+  throw new Error("tapscript too long");
+}
+function deriveSbtcV2PegOutput(signerPublicKeys, signaturesRequired, network = "mainnet") {
+  const unique = new Map;
+  for (const key of signerPublicKeys.map(deriveSbtcSigningKey)) {
+    unique.set(bytesToHex2(key), key);
+  }
+  const signingKeys = [...unique.values()].sort(compareBytes);
+  if (signingKeys.length > MAX_SIGNERS) {
+    throw new Error(`sBTC v2 peg holds at most ${MAX_SIGNERS} signer keys, got ${signingKeys.length}`);
+  }
+  if (!Number.isInteger(signaturesRequired) || signaturesRequired < 1 || signaturesRequired > signingKeys.length) {
+    throw new Error(`sBTC v2 threshold must be between 1 and ${signingKeys.length}, got ${signaturesRequired}`);
+  }
+  const signingScript = concatBytes2(...signingKeys.map((key, i) => concatBytes2(Uint8Array.of(32), key, Uint8Array.of(i === 0 ? OP_CHECKSIG : OP_CHECKSIGADD))), Uint8Array.of(OP_PUSHNUM_BASE + signaturesRequired, OP_NUMEQUAL));
+  const leafHash = schnorr.utils.taggedHash("TapLeaf", Uint8Array.of(TAPSCRIPT_LEAF_VERSION), compactSize(signingScript.length), signingScript);
+  const outputKey = taprootTweakPubkey2(SBTC_V2_INTERNAL_KEY, leafHash);
+  return {
+    signingKeys,
+    signaturesRequired,
+    signingScript,
+    scriptPubKey: concatBytes2(Uint8Array.of(81, 32), outputKey),
+    address: bech32m.encode(BITCOIN_NETWORK_PARAMS[network].hrp, [
+      1,
+      ...bech32m.toWords(outputKey)
+    ])
+  };
+}
+
 // src/sbtc/actions.ts
 function getTokenContract(client) {
   const contract = resolveNetworkContract(client, SBTC_CONTRACTS);
@@ -173,17 +285,41 @@ async function getTokenUri(client) {
   const token = getTokenContract(client);
   return await token.read.getTokenUri({});
 }
+async function getSignerSet(client) {
+  const registry = getRegistryContract(client);
+  const data = await registry.read.getCurrentSignerData({});
+  return {
+    signerPublicKeys: data.currentSignerSet,
+    signaturesRequired: Number(data.currentSignatureThreshold),
+    aggregatePubkey: data.currentAggregatePubkey,
+    signerPrincipal: data.currentSignerPrincipal
+  };
+}
 async function getSignersPublicKey(client) {
   const registry = getRegistryContract(client);
   const pubkey = await registry.read.getCurrentAggregatePubkey({});
   if (!pubkey || pubkey.length !== 33 || pubkey.every((b) => b === 0)) {
     throw new Error("sbtc-registry returned no aggregate pubkey (signer set not yet rotated in on this network)");
   }
-  return pubkey;
+  return assertRegistryAggregateKey(pubkey);
 }
-async function getSignersAddress(client) {
-  const pubkey = await getSignersPublicKey(client);
-  return publicKeyToP2trAddress2(pubkey, bitcoinNetworkFromChain(client));
+async function getSignersAddress(client, options = {}) {
+  const network = bitcoinNetworkFromChain(client);
+  const version = options.version ?? await pegVersionAt(client, options);
+  if (version === "v1") {
+    const pubkey = await getSignersPublicKey(client);
+    return publicKeyToP2trAddress2(pubkey, network);
+  }
+  const { signerPublicKeys, signaturesRequired } = await getSignerSet(client);
+  return deriveSbtcV2PegOutput(signerPublicKeys, signaturesRequired, network).address;
+}
+async function pegVersionAt(client, options) {
+  const activation = options.v2ActivationBurnHeight ?? (client.chain?.network === "mainnet" ? SBTC_V2_SIGNING_BURN_HEIGHT_MAINNET : undefined);
+  if (activation == null) {
+    throw new Error(`sBTC v2 signing has no fixed activation height on ${client.chain?.network ?? "this network"}; pass { version } or { v2ActivationBurnHeight }`);
+  }
+  const height = options.burnBlockHeight ?? await getBurnBlockHeight2(client);
+  return height >= activation ? "v2" : "v1";
 }
 // src/sbtc/utils.ts
 function formatBtcAddress(recipient, network = "mainnet") {
@@ -241,8 +377,9 @@ function sbtc() {
       getSymbol: () => getSymbol(client),
       getDecimals: () => getDecimals(client),
       getTokenUri: () => getTokenUri(client),
+      getSignerSet: () => getSignerSet(client),
       getSignersPublicKey: () => getSignersPublicKey(client),
-      getSignersAddress: () => getSignersAddress(client)
+      getSignersAddress: (options) => getSignersAddress(client, options)
     }
   });
 }
@@ -255,8 +392,14 @@ export {
   SBTC_EVENT_TOPICS,
   SBTC_TOKEN_ABI,
   SBTC_UNIT_NAME,
+  SBTC_V2_INTERNAL_KEY,
+  SBTC_V2_SIGNING_BURN_HEIGHT_MAINNET,
+  SbtcV2MarkerError,
+  assertRegistryAggregateKey,
   bitcoinTxidFromHex,
   bitcoinTxidToHex,
+  deriveSbtcSigningKey,
+  deriveSbtcV2PegOutput,
   formatBtcAddress,
   satsToSbtc,
   sbtc,
@@ -265,5 +408,5 @@ export {
   validateBitcoinTxid
 };
 
-//# debugId=38B52C86BBC6201364756E2164756E21
+//# debugId=4D1E6BA701859ED164756E2164756E21
 //# sourceMappingURL=index.js.map