@bitcoinerlab/descriptors 2.0.1 → 2.0.3

package/README.md

@@ -73,11 +73,11 @@ const wpkhOutput = new Output({
 });
 ```
 
-Refer to [the API](https://bitcoinerlab.com/modules/descriptors/api/classes/_Internal_.Output.html#constructor) for the complete list of parameters in the constructor.
+For miniscript-based descriptors, the `signersPubKeys` parameter in the constuctor becomes particularly important. It specifies the spending path of a previous output with multiple spending paths. Detailed information about the constructor parameters, including `signersPubKeys`, can be found in [the API documentation](https://bitcoinerlab.com/modules/descriptors/api/classes/_Internal_.Output.html#constructor) and in [this Stack Exchange answer](https://bitcoin.stackexchange.com/a/118036/89665).
 
 The `Output` class [offers various helpful methods](https://bitcoinerlab.com/modules/descriptors/api/classes/_Internal_.Output.html), including `getAddress()`, which returns the address associated with the descriptor, `getScriptPubKey()`, which returns the `scriptPubKey` for the descriptor, `expand()`, which decomposes a descriptor into its elemental parts, `updatePsbtAsInput()` and `updatePsbtAsOutput()`.
 
-The `updatePsbtAsInput()` method is an essential part of the library, responsible for adding an input to the PSBT corresponding to the UTXO  described by the descriptor. Additionally, when the descriptor expresses an absolute time-spending condition, such as "This UTXO can only be spent after block N," `updatePsbtAsInput()` adds timelock information to the PSBT.
+The `updatePsbtAsInput()` method is an essential part of the library, responsible for adding an input to the PSBT corresponding to the UTXO  described by the descriptor. Additionally, when the descriptor expresses an absolute time-spending condition, such as "This UTXO can only be spent after block N", `updatePsbtAsInput()` adds timelock information to the PSBT.
 
 To call `updatePsbtAsInput()`, use the following syntax:
 

package/dist/descriptors.d.ts

@@ -90,7 +90,7 @@ export declare function DescriptorsFactory(ecc: TinySecp256k1Interface): {
              * Important: As mentioned above, note that this function only applies to
              * miniscript descriptors.
              */
-            getScriptSatisfaction(signatures: PartialSig[]): Buffer;
+            getScriptSatisfaction(signatures: PartialSig[] | 'DANGEROUSLY_USE_FAKE_SIGNATURES'): Buffer;
             /**
              * Gets the nSequence required to fulfill this `Output`.
              */
@@ -257,22 +257,34 @@ export declare function DescriptorsFactory(ecc: TinySecp256k1Interface): {
              */
             network?: Network;
             /**
-             * An array of preimages. This info is necessary to finalize Psbts.
+             * An array of preimages if the miniscript-based descriptor uses them.
+             *
+             * This info is necessary to finalize Psbts. Leave it `undefined` if your
+             * miniscript-based descriptor does not use preimages or you don't know
+             * or don't wanto use them.
+             *
+             * You can also leave it `undefined` if only need to generate the
+             * `scriptPubKey` or `address` for a descriptor.
+             *
              * @defaultValue `[]`
              */
             preimages?: Preimage[];
             /**
              * An array of the public keys used for signing the transaction when
-             * spending the output associated with this descriptor. This parameter is
-             * only used if the descriptor object is being used to finalize a
-             * transaction. It is necessary to specify the spending path when working
-             * with miniscript-based expressions that have multiple spending paths.
-             * Set this parameter to an array containing the public keys involved in
-             * the desired spending path. Leave it `undefined` if you only need to
-             * generate the `scriptPubKey` or `address` for a descriptor, or if all
-             * the public keys involved in the descriptor will sign the transaction.
-             * In the latter case, the satisfier will automatically choose the most
-             * optimal spending path (if more than one is available).
+             * spending the previous output associated with this descriptor.
+             *
+             * This parameter is only used if the descriptor object is being used to
+             * finalize a transaction. It is necessary to specify the spending path
+             * when working with miniscript-based expressions that have multiple
+             * spending paths.
+             *
+             * Set this parameter to an array containing the public
+             * keys involved in the desired spending path. Leave it `undefined` if you
+             * only need to generate the `scriptPubKey` or `address` for a descriptor,
+             * or if all the public keys involved in the descriptor will sign the
+             * transaction. In the latter case, the satisfier will automatically
+             * choose the most optimal spending path (if more than one is available).
+             *
              * For more details on using this parameter, refer to [this Stack Exchange
              * answer](https://bitcoin.stackexchange.com/a/118036/89665).
              */
@@ -328,7 +340,7 @@ export declare function DescriptorsFactory(ecc: TinySecp256k1Interface): {
              * Important: As mentioned above, note that this function only applies to
              * miniscript descriptors.
              */
-            getScriptSatisfaction(signatures: PartialSig[]): Buffer;
+            getScriptSatisfaction(signatures: PartialSig[] | 'DANGEROUSLY_USE_FAKE_SIGNATURES'): Buffer;
             /**
              * Gets the nSequence required to fulfill this `Output`.
              */

package/dist/descriptors.js

@@ -522,8 +522,28 @@ function DescriptorsFactory(ecc) {
          *
          * `signatures` must be passed using this format (pairs of `pubKey/signature`):
          * `interface PartialSig { pubkey: Buffer; signature: Buffer; }`
+         *
+         *  * Alternatively, if you do not have the signatures, you can use the option
+         * `'DANGEROUSLY_USE_FAKE_SIGNATURES'`. This will generate script satisfactions
+         * using 72-byte zero-padded signatures. While this can be useful in
+         * modules like coinselector that require estimating transaction size before
+         * signing, it is critical to understand the risks:
+         * - Using this option generales invalid unlocking scripts.
+         * - It should NEVER be used with real transactions.
+         * - Its primary use is for testing and size estimation purposes only.
+         *
+         * ⚠️ Warning: Misuse of 'DANGEROUSLY_USE_FAKE_SIGNATURES' can lead to security
+         * vulnerabilities, including but not limited to invalid transaction generation.
+         * Ensure you fully understand the implications before use.
+         *
          */
         signatures) {
+            if (signatures === 'DANGEROUSLY_USE_FAKE_SIGNATURES')
+                signatures = __classPrivateFieldGet(this, _Output_signersPubKeys, "f").map(pubkey => ({
+                    pubkey,
+                    // https://transactionfee.info/charts/bitcoin-script-ecdsa-length/
+                    signature: Buffer.alloc(72, 0)
+                }));
             const miniscript = __classPrivateFieldGet(this, _Output_miniscript, "f");
             const expandedMiniscript = __classPrivateFieldGet(this, _Output_expandedMiniscript, "f");
             const expansionMap = __classPrivateFieldGet(this, _Output_expansionMap, "f");
@@ -750,7 +770,8 @@ function DescriptorsFactory(ecc) {
             //signatures don't matter
             const fakeSignatures = signersPubKeys.map(pubkey => ({
                 pubkey,
-                signature: Buffer.alloc(64, 0)
+                // https://transactionfee.info/charts/bitcoin-script-ecdsa-length/
+                signature: Buffer.alloc(72, 0)
             }));
             const { nLockTime, nSequence } = (0, miniscript_1.satisfyMiniscript)({
                 expandedMiniscript,

package/dist/types.d.ts

@@ -9,13 +9,15 @@ import type { Payment, Network } from 'bitcoinjs-lib';
  */
 export type Preimage = {
     /**
-     * Use same expressions as in miniscript. For example: "sha256(cdabb7f2dce7bfbd8a0b9570c6fd1e712e5d64045e9d6b517b3d5072251dc204)" or "ripemd160(095ff41131e5946f3c85f79e44adbcf8e27e080e)"
+     * Use same string expressions as in miniscript. For example: "sha256(cdabb7f2dce7bfbd8a0b9570c6fd1e712e5d64045e9d6b517b3d5072251dc204)" or "ripemd160(095ff41131e5946f3c85f79e44adbcf8e27e080e)"
+     *
      * Accepted functions: sha256, hash256, ripemd160, hash160
+     *
      * Digests must be: 64-character HEX for sha256, hash160 or 30-character HEX for ripemd160 or hash160.
      */
     digest: string;
     /**
-     * Hex encoded preimate. Preimages are always 32 bytes (so, 64 character in hex).
+     * Hex encoded preimage. Preimages are always 32 bytes (so, 64 character in hex).
      */
     preimage: string;
 };

package/package.json

@@ -2,7 +2,7 @@
   "name": "@bitcoinerlab/descriptors",
   "description": "This library parses and creates Bitcoin Miniscript Descriptors and generates Partially Signed Bitcoin Transactions (PSBTs). It provides PSBT finalizers and signers for single-signature, BIP32 and Hardware Wallets.",
   "homepage": "https://github.com/bitcoinerlab/descriptors",
-  "version": "2.0.1",
+  "version": "2.0.3",
   "author": "Jose-Luis Landabaso",
   "license": "MIT",
   "repository": {