@bitgo-beta/abstract-utxo 1.1.1-beta.232 → 1.1.1-beta.2321

package/dist/cjs/src/impl/zec/address.d.ts

@@ -0,0 +1,79 @@
+import { fixedScriptWallet } from '@bitgo/wasm-utxo';
+import type { UnifiedRecipientPreference } from '@bitgo-beta/sdk-core';
+import { AddressCodec } from '../../transaction/recipient';
+import { UtxoCoinName, WasmUtxoCoinName } from '../../names';
+import type { ZecAddressCodecOutput } from './types';
+export type ZcashAddressKind = 'transparent' | 'shielded';
+/**
+ * Address codec for Zcash coins ('zec'/'tzec') that understands ZIP-316
+ * Unified Addresses in addition to ordinary transparent addresses.
+ *
+ * - `decode` resolves the bytes a recipient pays to (see its doc): by default
+ *   the transparent scriptPubKey; with `unifiedRecipientPreference: 'shielded'`
+ *   the raw Orchard/Ironwood receiver of a Unified Address.
+ * - `encode`/`toExtendedAddressFormat` are unchanged: scripts can only be
+ *   written back out as transparent addresses.
+ * - `isValidAddress` accepts transparent addresses and Unified Addresses with
+ *   a transparent or Orchard receiver.
+ */
+export declare class ZecAddressCodec extends AddressCodec {
+    /** The Zcash network name for wasm calls — 'zec' or 'tzec'. */
+    private readonly zcashNetworkName;
+    /** How Unified Address recipients resolve when this codec decodes them. */
+    private readonly unifiedRecipientPreference;
+    constructor(coinName: UtxoCoinName, wasmName: WasmUtxoCoinName, unifiedRecipientPreference?: UnifiedRecipientPreference);
+    /**
+     * Whether `address` is a valid Zcash address for this coin's network.
+     *
+     * Mirrors the pre-codec `Zec.isValidAddress` logic exactly: the address is
+     * valid iff it has a usable transparent receiver (an ordinary transparent
+     * address, or a UA carrying a transparent receiver) or an Orchard receiver
+     * (a UA carrying one).
+     */
+    isValidAddress(address: string): boolean;
+    /**
+     * Resolve `address` to the bytes this codec's unified-recipient preference pays to.
+     *
+     * - `'transparent'` (default) resolves the scriptPubKey: an ordinary
+     *   transparent address decodes to its own script, and a UA with a
+     *   transparent receiver decodes to that receiver's script. A UA without a
+     *   transparent receiver (e.g. Orchard-only) throws, since a shielded
+     *   output has no script.
+     * - `'shielded'` resolves the raw Orchard (Ironwood) receiver — the
+     *   43-byte diversifier + `pk_d` — of a UA carrying one. Any other address
+     *   (plain transparent, transparent-only UA, malformed, wrong network)
+     *   throws, since it has no Orchard receiver to resolve.
+     */
+    decode(address: string): Uint8Array;
+    /** Change addresses are always transparent wallet addresses. */
+    decodeChangeAddress(address: string): Uint8Array;
+    isMatchingScript(output: ZecAddressCodecOutput): boolean;
+    /** Preserve a shielded output's original UA only after validating it against the raw script. */
+    toExtendedAddressFormat(script: Buffer, address?: string): string;
+}
+/**
+ * Whether `address` is a well-formed ZIP-316 Unified Address for `network`
+ * with an Orchard receiver. BitGo only supports Orchard, so a UA without one
+ * (e.g. Sapling- or transparent-only) is not considered valid here.
+ */
+export declare function isShieldedZcashAddress(address: string, network: fixedScriptWallet.ZcashNetworkName): boolean;
+/**
+ * Classify a Zcash address string as transparent or shielded, validating it in
+ * the process. Returns undefined if the address is neither a valid transparent
+ * address nor a well-formed ZIP-316 Unified Address for `network`.
+ */
+export declare function getZcashAddressKind(address: string, network: fixedScriptWallet.ZcashNetworkName): ZcashAddressKind | undefined;
+/**
+ * Standalone counterpart to `Zec.isValidAddress`, parameterized by `network`
+ * instead of requiring a coin instance. Accepts transparent addresses and
+ * shielded ZIP-316 Unified Addresses.
+ *
+ * Not structurally identical to `Zec.isValidAddress`: the base class also
+ * round-trips the parsed script through each known encoding format (see
+ * `AbstractUtxoCoin.isValidAddress`), whereas this only calls
+ * `toOutputScriptWithCoin` once via `getZcashAddressKind`. They agree in
+ * practice since zec/tzec have no alternate transparent-address encoding to
+ * round-trip against, but that's not guaranteed to remain true.
+ */
+export declare function isValidZcashAddress(address: string, network: fixedScriptWallet.ZcashNetworkName): boolean;
+//# sourceMappingURL=address.d.ts.map

package/dist/cjs/src/impl/zec/address.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"address.d.ts","sourceRoot":"","sources":["../../../../../src/impl/zec/address.ts"],"names":[],"mappings":"AAAA,OAAO,EAA0B,iBAAiB,EAA4B,MAAM,kBAAkB,CAAC;AACvG,OAAO,KAAK,EAAE,0BAA0B,EAAE,MAAM,sBAAsB,CAAC;AAEvE,OAAO,EAAE,YAAY,EAAE,MAAM,6BAA6B,CAAC;AAC3D,OAAO,EAAE,YAAY,EAAE,gBAAgB,EAAE,MAAM,aAAa,CAAC;AAE7D,OAAO,KAAK,EAAE,qBAAqB,EAAE,MAAM,SAAS,CAAC;AAErD,MAAM,MAAM,gBAAgB,GAAG,aAAa,GAAG,UAAU,CAAC;AAE1D;;;;;;;;;;;GAWG;AACH,qBAAa,eAAgB,SAAQ,YAAY;IAC/C,+DAA+D;IAC/D,OAAO,CAAC,QAAQ,CAAC,gBAAgB,CAAqC;IACtE,2EAA2E;IAC3E,OAAO,CAAC,QAAQ,CAAC,0BAA0B,CAA6B;gBAGtE,QAAQ,EAAE,YAAY,EACtB,QAAQ,EAAE,gBAAgB,EAC1B,0BAA0B,GAAE,0BAA0C;IAOxE;;;;;;;OAOG;IACM,cAAc,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO;IAOjD;;;;;;;;;;;;OAYG;IACM,MAAM,CAAC,OAAO,EAAE,MAAM,GAAG,UAAU;IAkB5C,gEAAgE;IACvD,mBAAmB,CAAC,OAAO,EAAE,MAAM,GAAG,UAAU;IAGhD,gBAAgB,CAAC,MAAM,EAAE,qBAAqB,GAAG,OAAO;IA6BjE,gGAAgG;IACvF,uBAAuB,CAAC,MAAM,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,MAAM,GAAG,MAAM;CAM3E;AAED;;;;GAIG;AACH,wBAAgB,sBAAsB,CAAC,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,iBAAiB,CAAC,gBAAgB,GAAG,OAAO,CAM5G;AAED;;;;GAIG;AACH,wBAAgB,mBAAmB,CACjC,OAAO,EAAE,MAAM,EACf,OAAO,EAAE,iBAAiB,CAAC,gBAAgB,GAC1C,gBAAgB,GAAG,SAAS,CAa9B;AAED;;;;;;;;;;;GAWG;AACH,wBAAgB,mBAAmB,CAAC,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,iBAAiB,CAAC,gBAAgB,GAAG,OAAO,CAEzG"}

package/dist/cjs/src/impl/zec/address.js

@@ -0,0 +1,157 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.ZecAddressCodec = void 0;
+exports.isShieldedZcashAddress = isShieldedZcashAddress;
+exports.getZcashAddressKind = getZcashAddressKind;
+exports.isValidZcashAddress = isValidZcashAddress;
+const wasm_utxo_1 = require("@bitgo/wasm-utxo");
+const recipient_1 = require("../../transaction/recipient");
+/**
+ * Address codec for Zcash coins ('zec'/'tzec') that understands ZIP-316
+ * Unified Addresses in addition to ordinary transparent addresses.
+ *
+ * - `decode` resolves the bytes a recipient pays to (see its doc): by default
+ *   the transparent scriptPubKey; with `unifiedRecipientPreference: 'shielded'`
+ *   the raw Orchard/Ironwood receiver of a Unified Address.
+ * - `encode`/`toExtendedAddressFormat` are unchanged: scripts can only be
+ *   written back out as transparent addresses.
+ * - `isValidAddress` accepts transparent addresses and Unified Addresses with
+ *   a transparent or Orchard receiver.
+ */
+class ZecAddressCodec extends recipient_1.AddressCodec {
+    constructor(coinName, wasmName, unifiedRecipientPreference = 'transparent') {
+        super(coinName, wasmName);
+        this.zcashNetworkName = wasmName;
+        this.unifiedRecipientPreference = unifiedRecipientPreference;
+    }
+    /**
+     * Whether `address` is a valid Zcash address for this coin's network.
+     *
+     * Mirrors the pre-codec `Zec.isValidAddress` logic exactly: the address is
+     * valid iff it has a usable transparent receiver (an ordinary transparent
+     * address, or a UA carrying a transparent receiver) or an Orchard receiver
+     * (a UA carrying one).
+     */
+    isValidAddress(address) {
+        return (wasm_utxo_1.zcashAddress.hasTransparentReceiver(address, this.wasmName) ||
+            wasm_utxo_1.zcashAddress.hasOrchardReceiver(address, this.wasmName));
+    }
+    /**
+     * Resolve `address` to the bytes this codec's unified-recipient preference pays to.
+     *
+     * - `'transparent'` (default) resolves the scriptPubKey: an ordinary
+     *   transparent address decodes to its own script, and a UA with a
+     *   transparent receiver decodes to that receiver's script. A UA without a
+     *   transparent receiver (e.g. Orchard-only) throws, since a shielded
+     *   output has no script.
+     * - `'shielded'` resolves the raw Orchard (Ironwood) receiver — the
+     *   43-byte diversifier + `pk_d` — of a UA carrying one. Any other address
+     *   (plain transparent, transparent-only UA, malformed, wrong network)
+     *   throws, since it has no Orchard receiver to resolve.
+     */
+    decode(address) {
+        if (this.unifiedRecipientPreference !== 'shielded') {
+            return wasm_utxo_1.zcashAddress.toTransparentReceiverWithCoin(address, this.wasmName);
+        }
+        // The raw Orchard receiver exists only for a Unified Address carrying one; anything else
+        // (plain transparent address, transparent-only UA, malformed, wrong network) throws.
+        let unified;
+        try {
+            unified = wasm_utxo_1.fixedScriptWallet.ZcashUnifiedAddress.parse(address, this.zcashNetworkName);
+        }
+        catch {
+            throw new Error(`address ${address} is not a valid address for network ${this.zcashNetworkName}`);
+        }
+        if (!unified?.hasOrchardReceiver) {
+            throw new Error(`address ${address} has no Orchard receiver to resolve as shielded`);
+        }
+        return wasm_utxo_1.zcashAddress.toShieldedReceiverWithCoin(address, this.wasmName);
+    }
+    /** Change addresses are always transparent wallet addresses. */
+    decodeChangeAddress(address) {
+        return wasm_utxo_1.zcashAddress.toTransparentReceiverWithCoin(address, this.wasmName);
+    }
+    isMatchingScript(output) {
+        const address = output.address;
+        if (address === undefined || address === null) {
+            return true;
+        }
+        if (recipient_1.AddressCodec.isScriptRecipient(address)) {
+            return super.isMatchingScript(output);
+        }
+        const matchesOutput = (decode) => {
+            try {
+                return Buffer.from(decode()).equals(Buffer.from(output.script));
+            }
+            catch {
+                return false;
+            }
+        };
+        const isShielded = output.isShielded;
+        if (isShielded === true) {
+            return matchesOutput(() => wasm_utxo_1.zcashAddress.toShieldedReceiverWithCoin(address, this.wasmName));
+        }
+        if (isShielded === false) {
+            return matchesOutput(() => wasm_utxo_1.zcashAddress.toTransparentReceiverWithCoin(address, this.wasmName));
+        }
+        return (matchesOutput(() => wasm_utxo_1.zcashAddress.toTransparentReceiverWithCoin(address, this.wasmName)) ||
+            matchesOutput(() => wasm_utxo_1.zcashAddress.toShieldedReceiverWithCoin(address, this.wasmName)));
+    }
+    /** Preserve a shielded output's original UA only after validating it against the raw script. */
+    toExtendedAddressFormat(script, address) {
+        if (address !== undefined && !this.isMatchingScript({ address, script })) {
+            throw new Error(`address ${address} does not match the output script`);
+        }
+        return address ?? super.toExtendedAddressFormat(script);
+    }
+}
+exports.ZecAddressCodec = ZecAddressCodec;
+/**
+ * Whether `address` is a well-formed ZIP-316 Unified Address for `network`
+ * with an Orchard receiver. BitGo only supports Orchard, so a UA without one
+ * (e.g. Sapling- or transparent-only) is not considered valid here.
+ */
+function isShieldedZcashAddress(address, network) {
+    try {
+        return wasm_utxo_1.fixedScriptWallet.ZcashUnifiedAddress.parse(address, network).hasOrchardReceiver;
+    }
+    catch {
+        return false;
+    }
+}
+/**
+ * Classify a Zcash address string as transparent or shielded, validating it in
+ * the process. Returns undefined if the address is neither a valid transparent
+ * address nor a well-formed ZIP-316 Unified Address for `network`.
+ */
+function getZcashAddressKind(address, network) {
+    // ZcashNetworkName also permits 'zcash'/'zcashTest', which toOutputScriptWithCoin
+    // doesn't accept (it takes a CoinName, i.e. 'zec'/'tzec'). Skip straight to the
+    // shielded check for those rather than relying on an unsafe cast + caught throw.
+    if ((0, wasm_utxo_1.isCoinName)(network)) {
+        try {
+            wasm_utxo_1.address.toOutputScriptWithCoin(address, network);
+            return 'transparent';
+        }
+        catch {
+            // not a valid transparent address; fall through to shielded check
+        }
+    }
+    return isShieldedZcashAddress(address, network) ? 'shielded' : undefined;
+}
+/**
+ * Standalone counterpart to `Zec.isValidAddress`, parameterized by `network`
+ * instead of requiring a coin instance. Accepts transparent addresses and
+ * shielded ZIP-316 Unified Addresses.
+ *
+ * Not structurally identical to `Zec.isValidAddress`: the base class also
+ * round-trips the parsed script through each known encoding format (see
+ * `AbstractUtxoCoin.isValidAddress`), whereas this only calls
+ * `toOutputScriptWithCoin` once via `getZcashAddressKind`. They agree in
+ * practice since zec/tzec have no alternate transparent-address encoding to
+ * round-trip against, but that's not guaranteed to remain true.
+ */
+function isValidZcashAddress(address, network) {
+    return getZcashAddressKind(address, network) !== undefined;
+}
+//# sourceMappingURL=data:application/json;base64,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

package/dist/cjs/src/impl/zec/index.d.ts

@@ -0,0 +1,7 @@
+export * from './zec';
+export * from './tzec';
+export * from './shieldedAddress';
+export * from './address';
+export * from './recipients';
+export * from './types';
+//# sourceMappingURL=index.d.ts.map

package/dist/cjs/src/impl/zec/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../../src/impl/zec/index.ts"],"names":[],"mappings":"AAAA,cAAc,OAAO,CAAC;AACtB,cAAc,QAAQ,CAAC;AACvB,cAAc,mBAAmB,CAAC;AAClC,cAAc,WAAW,CAAC;AAC1B,cAAc,cAAc,CAAC;AAC7B,cAAc,SAAS,CAAC"}

package/dist/cjs/src/impl/zec/index.js

@@ -0,0 +1,23 @@
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __exportStar = (this && this.__exportStar) || function(m, exports) {
+    for (var p in m) if (p !== "default" && !Object.prototype.hasOwnProperty.call(exports, p)) __createBinding(exports, m, p);
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+__exportStar(require("./zec"), exports);
+__exportStar(require("./tzec"), exports);
+__exportStar(require("./shieldedAddress"), exports);
+__exportStar(require("./address"), exports);
+__exportStar(require("./recipients"), exports);
+__exportStar(require("./types"), exports);
+//# sourceMappingURL=data:application/json;base64,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

package/dist/cjs/src/impl/zec/recipients.d.ts

@@ -0,0 +1,86 @@
+import { fixedScriptWallet } from '@bitgo/wasm-utxo';
+import type { UnifiedRecipientPreference } from '@bitgo-beta/sdk-core';
+import type { AddressCodec } from '../../transaction/recipient';
+import { ZcashCoinName } from './types';
+/**
+ * How a recipient parsed from a Zcash PSBT is spent.
+ *
+ * The decode-side counterpart of utxo-core's `buildTransaction/zcash.ts` `ZcashDestination` on
+ * the build side: a shielded recipient is an Orchard/Ironwood output stored in the v6 (Ironwood)
+ * PSBT's orchard PCZT, and everything else is an ordinary transparent output. A transparent
+ * output resolved from a Unified Address carries that original UA (`zcashUnifiedTransparent`), a
+ * plain address does not.
+ */
+export type PsbtRecipientDestination = {
+    kind: 'zcashShielded';
+    /**
+     * The Unified Address the output was addressed to — the original multi-receiver UA the
+     * client passed when the PSBT stores one verbatim, otherwise a re-encoded single-receiver
+     * Orchard UA.
+     */
+    unifiedAddress: string;
+} | {
+    kind: 'zcashUnifiedTransparent';
+    /** The original Unified Address the transparent receiver was resolved from. */
+    unifiedAddress: string;
+} | {
+    kind: 'transparent';
+};
+/** A recipient resolved from a decoded Zcash PSBT's external outputs. */
+export interface PsbtRecipient {
+    /** Amount in satoshis. */
+    amount: bigint;
+    /**
+     * The recipient address. For a shielded output this is the Unified Address the output was
+     * addressed to — the original multi-receiver UA when the PSBT stores one verbatim, otherwise a
+     * re-encoded single-receiver Orchard UA. For a transparent output it is the original Unified
+     * Address when one was stored, else the decoded transparent address.
+     */
+    address: string;
+    /**
+     * Raw receiver bytes: the 43-byte Orchard/Ironwood receiver for a shielded output, the
+     * scriptPubKey for a transparent one.
+     */
+    script: Uint8Array;
+    /**
+     * The original Unified Address the client supplied for this recipient, when the PSBT stores
+     * one: the v6 (Ironwood) PCZT for a shielded output, the transparent-output proprietary
+     * key-value map for a v4 transparent output. `undefined` when the recipient was built from a
+     * plain address.
+     */
+    unifiedAddress?: string;
+    destination: PsbtRecipientDestination;
+}
+/**
+ * Resolve the recipient list of a decoded Zcash PSBT (v4 Sapling-shaped or v6 Ironwood).
+ *
+ * Mirrors the recipient resolution of wallet-platform's utxo-core `buildTransaction` in the
+ * decode direction: every non-wallet output with a resolvable address is a recipient. A
+ * shielded output parses with `isShielded: true`, its `script` being the raw 43-byte receiver;
+ * when the build stored the client's original Unified Address (the v6 PCZT for shielded
+ * outputs, the transparent-output proprietary key-value map for v4), both the parsed address
+ * and `unifiedAddress` report it verbatim. Opaque outputs with no address (e.g. OP_RETURN) are
+ * skipped, as they carry no recipient.
+ */
+export declare function resolvePsbtRecipients(psbt: fixedScriptWallet.ZcashBitGoPsbt, walletKeys: fixedScriptWallet.RootWalletKeys, addressCodec: AddressCodec): PsbtRecipient[];
+/**
+ * Infer the Unified-Address recipient preference for a Zcash transaction when the caller did
+ * not pass one — the counterpart of wallet-platform's utxo-core `buildTransaction`
+ * `classifyRecipientShieldedness`.
+ *
+ * A recipient that resolves to a transparent output — an ordinary transparent address, or a
+ * Unified Address carrying a transparent receiver — is classified `'transparent'`; a Unified
+ * Address carrying only an Orchard/Ironwood receiver is classified `'shielded'`. A mix of
+ * shielded and transparent recipients is rejected. An address that is neither a transparent
+ * address nor a Unified Address propagates the Unified-Address parse error — it is not
+ * silently defaulted to `'transparent'`.
+ *
+ * @returns `'shielded'` when every recipient resolves shielded, `undefined` when every
+ *   recipient resolves transparent (the build's default). The `'transparent'` arm of the
+ *   return type exists so callers can pass the explicit preference through unchanged; this
+ *   function itself never returns `'transparent'`.
+ */
+export declare function getUnifiedRecipientPreference(name: ZcashCoinName, recipients: {
+    address: string | undefined;
+}[]): UnifiedRecipientPreference | undefined;
+//# sourceMappingURL=recipients.d.ts.map

package/dist/cjs/src/impl/zec/recipients.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"recipients.d.ts","sourceRoot":"","sources":["../../../../../src/impl/zec/recipients.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,iBAAiB,EAAgB,MAAM,kBAAkB,CAAC;AACnE,OAAO,KAAK,EAAE,0BAA0B,EAAE,MAAM,sBAAsB,CAAC;AAGvE,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,6BAA6B,CAAC;AAEhE,OAAO,EAAE,aAAa,EAAE,MAAM,SAAS,CAAC;AAExC;;;;;;;;GAQG;AACH,MAAM,MAAM,wBAAwB,GAChC;IACE,IAAI,EAAE,eAAe,CAAC;IACtB;;;;OAIG;IACH,cAAc,EAAE,MAAM,CAAC;CACxB,GACD;IACE,IAAI,EAAE,yBAAyB,CAAC;IAChC,+EAA+E;IAC/E,cAAc,EAAE,MAAM,CAAC;CACxB,GACD;IAAE,IAAI,EAAE,aAAa,CAAA;CAAE,CAAC;AAE5B,yEAAyE;AACzE,MAAM,WAAW,aAAa;IAC5B,0BAA0B;IAC1B,MAAM,EAAE,MAAM,CAAC;IACf;;;;;OAKG;IACH,OAAO,EAAE,MAAM,CAAC;IAChB;;;OAGG;IACH,MAAM,EAAE,UAAU,CAAC;IACnB;;;;;OAKG;IACH,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,WAAW,EAAE,wBAAwB,CAAC;CACvC;AAED;;;;;;;;;;GAUG;AACH,wBAAgB,qBAAqB,CACnC,IAAI,EAAE,iBAAiB,CAAC,cAAc,EACtC,UAAU,EAAE,iBAAiB,CAAC,cAAc,EAC5C,YAAY,EAAE,YAAY,GACzB,aAAa,EAAE,CAoCjB;AAED;;;;;;;;;;;;;;;;GAgBG;AACH,wBAAgB,6BAA6B,CAC3C,IAAI,EAAE,aAAa,EACnB,UAAU,EAAE;IAAE,OAAO,EAAE,MAAM,GAAG,SAAS,CAAA;CAAE,EAAE,GAC5C,0BAA0B,GAAG,SAAS,CA0BxC"}

package/dist/cjs/src/impl/zec/recipients.js

@@ -0,0 +1,98 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.resolvePsbtRecipients = resolvePsbtRecipients;
+exports.getUnifiedRecipientPreference = getUnifiedRecipientPreference;
+const wasm_utxo_1 = require("@bitgo/wasm-utxo");
+const replayProtection_1 = require("../../transaction/fixedScript/replayProtection");
+/**
+ * Resolve the recipient list of a decoded Zcash PSBT (v4 Sapling-shaped or v6 Ironwood).
+ *
+ * Mirrors the recipient resolution of wallet-platform's utxo-core `buildTransaction` in the
+ * decode direction: every non-wallet output with a resolvable address is a recipient. A
+ * shielded output parses with `isShielded: true`, its `script` being the raw 43-byte receiver;
+ * when the build stored the client's original Unified Address (the v6 PCZT for shielded
+ * outputs, the transparent-output proprietary key-value map for v4), both the parsed address
+ * and `unifiedAddress` report it verbatim. Opaque outputs with no address (e.g. OP_RETURN) are
+ * skipped, as they carry no recipient.
+ */
+function resolvePsbtRecipients(psbt, walletKeys, addressCodec) {
+    const parsed = psbt.parseTransactionWithWalletKeys(walletKeys, {
+        replayProtection: { publicKeys: (0, replayProtection_1.getReplayProtectionPubkeys)('zec') },
+    });
+    const recipients = [];
+    parsed.outputs.forEach((output, i) => {
+        // Wallet-owned (change) outputs.
+        if (output.scriptId !== null) {
+            return;
+        }
+        // Opaque outputs (e.g. OP_RETURN) carry no recipient address.
+        if (output.address === null) {
+            return;
+        }
+        // The raw parsed receiver/script is authoritative; proprietary Unified Address metadata
+        // must match it before it is exposed to callers.
+        if (!addressCodec.isMatchingScript(output)) {
+            throw new Error(`Output ${i} address ${output.address} does not match its raw recipient`);
+        }
+        // The original client-passed Unified Address, stored verbatim in the PSBT's key-value
+        // transparent-output proprietary map for a v4 transparent output.
+        const unifiedAddress = output.isShielded ? output.address : psbt.transparentOutputUnifiedAddress(i) ?? undefined;
+        recipients.push({
+            amount: output.value,
+            address: output.address,
+            script: output.script,
+            unifiedAddress,
+            destination: output.isShielded
+                ? { kind: 'zcashShielded', unifiedAddress: output.address }
+                : unifiedAddress
+                    ? { kind: 'zcashUnifiedTransparent', unifiedAddress }
+                    : { kind: 'transparent' },
+        });
+    });
+    return recipients;
+}
+/**
+ * Infer the Unified-Address recipient preference for a Zcash transaction when the caller did
+ * not pass one — the counterpart of wallet-platform's utxo-core `buildTransaction`
+ * `classifyRecipientShieldedness`.
+ *
+ * A recipient that resolves to a transparent output — an ordinary transparent address, or a
+ * Unified Address carrying a transparent receiver — is classified `'transparent'`; a Unified
+ * Address carrying only an Orchard/Ironwood receiver is classified `'shielded'`. A mix of
+ * shielded and transparent recipients is rejected. An address that is neither a transparent
+ * address nor a Unified Address propagates the Unified-Address parse error — it is not
+ * silently defaulted to `'transparent'`.
+ *
+ * @returns `'shielded'` when every recipient resolves shielded, `undefined` when every
+ *   recipient resolves transparent (the build's default). The `'transparent'` arm of the
+ *   return type exists so callers can pass the explicit preference through unchanged; this
+ *   function itself never returns `'transparent'`.
+ */
+function getUnifiedRecipientPreference(name, recipients) {
+    const shieldedness = recipients.map((recipient) => {
+        if (recipient.address === undefined) {
+            // Raw script inherently transparent.
+            return 'transparent';
+        }
+        // Ordinary transparent address, or a Unified Address carrying a transparent receiver:
+        // resolves transparently either way (the build's default when no preference is given).
+        if (wasm_utxo_1.zcashAddress.hasTransparentReceiver(recipient.address, name)) {
+            return 'transparent';
+        }
+        // A shielded (Orchard/Ironwood-only) Unified Address is the only remaining resolvable
+        // form. An address that is none of the above propagates the parse error instead of
+        // assuming a default.
+        const unified = wasm_utxo_1.fixedScriptWallet.ZcashUnifiedAddress.parse(recipient.address, name);
+        if (unified.hasOrchardReceiver) {
+            return 'shielded';
+        }
+        throw new Error(`address ${recipient.address} carries no transparent or Orchard receiver`);
+    });
+    const hasShielded = shieldedness.includes('shielded');
+    const hasTransparent = shieldedness.includes('transparent');
+    if (hasShielded && hasTransparent) {
+        throw new Error('Mixed shielded and transparent recipients are not supported');
+    }
+    return hasShielded ? 'shielded' : undefined;
+}
+//# sourceMappingURL=data:application/json;base64,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

package/dist/cjs/src/impl/zec/shieldedAddress.d.ts

@@ -0,0 +1,36 @@
+import type { UtxoCoinName } from '../../names';
+/**
+ * Platform-reported shielded address details (wallet-platform
+ * `coinSpecific.shielded` for Zcash Orchard/Ironwood addresses).
+ */
+export interface ShieldedAddressDetails {
+    /** Receiver type, e.g. 'ironwood'. */
+    type?: string;
+    /** 11-byte hex diversifier. */
+    diversifier?: string;
+    /** 32-byte hex `pk_d`. */
+    pkD?: string;
+    /** Wallet address index the diversifier was derived from. */
+    diversifierIndex?: number;
+}
+/**
+ * Verify a Zcash shielded (Orchard/Ironwood) wallet address returned by the platform.
+ *
+ * Shielded custodial wallets use RedPallas threshold keys whose keychains carry no
+ * secp256k1 xpubs, so the address cannot be locally rederived the way fixed-script
+ * (transparent) addresses are (`assertFixedScriptWalletAddress` would throw reading
+ * `pub`). Instead, this checks the address is a well-formed Orchard Unified Address
+ * whose 43-byte receiver matches the diversifier and `pk_d` the platform reports in
+ * `coinSpecific.shielded` — i.e. the UA really encodes the reported shielded receiver.
+ *
+ * @throws {UnexpectedAddressError} if the address is not a valid Orchard UA, the
+ *   platform-reported data is missing/malformed, or the UA's Orchard receiver does
+ *   not match the reported diversifier/`pk_d`
+ */
+export declare function assertShieldedWalletAddress(coinName: UtxoCoinName, params: {
+    address: string;
+    coinSpecific?: {
+        shielded?: ShieldedAddressDetails;
+    };
+}): void;
+//# sourceMappingURL=shieldedAddress.d.ts.map

package/dist/cjs/src/impl/zec/shieldedAddress.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"shieldedAddress.d.ts","sourceRoot":"","sources":["../../../../../src/impl/zec/shieldedAddress.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAEhD;;;GAGG;AACH,MAAM,WAAW,sBAAsB;IACrC,sCAAsC;IACtC,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,+BAA+B;IAC/B,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,0BAA0B;IAC1B,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,6DAA6D;IAC7D,gBAAgB,CAAC,EAAE,MAAM,CAAC;CAC3B;AAED;;;;;;;;;;;;;GAaG;AACH,wBAAgB,2BAA2B,CACzC,QAAQ,EAAE,YAAY,EACtB,MAAM,EAAE;IACN,OAAO,EAAE,MAAM,CAAC;IAChB,YAAY,CAAC,EAAE;QAAE,QAAQ,CAAC,EAAE,sBAAsB,CAAA;KAAE,CAAC;CACtD,GACA,IAAI,CAoCN"}

package/dist/cjs/src/impl/zec/shieldedAddress.js

@@ -0,0 +1,51 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.assertShieldedWalletAddress = assertShieldedWalletAddress;
+const wasm_utxo_1 = require("@bitgo/wasm-utxo");
+const sdk_core_1 = require("@bitgo-beta/sdk-core");
+/**
+ * Verify a Zcash shielded (Orchard/Ironwood) wallet address returned by the platform.
+ *
+ * Shielded custodial wallets use RedPallas threshold keys whose keychains carry no
+ * secp256k1 xpubs, so the address cannot be locally rederived the way fixed-script
+ * (transparent) addresses are (`assertFixedScriptWalletAddress` would throw reading
+ * `pub`). Instead, this checks the address is a well-formed Orchard Unified Address
+ * whose 43-byte receiver matches the diversifier and `pk_d` the platform reports in
+ * `coinSpecific.shielded` — i.e. the UA really encodes the reported shielded receiver.
+ *
+ * @throws {UnexpectedAddressError} if the address is not a valid Orchard UA, the
+ *   platform-reported data is missing/malformed, or the UA's Orchard receiver does
+ *   not match the reported diversifier/`pk_d`
+ */
+function assertShieldedWalletAddress(coinName, params) {
+    const shielded = params.coinSpecific?.shielded;
+    if (!shielded?.diversifier || !shielded.pkD) {
+        throw new sdk_core_1.UnexpectedAddressError('address validation failure: shielded address missing diversifier or pkD');
+    }
+    const diversifier = Buffer.from(shielded.diversifier, 'hex');
+    const pkD = Buffer.from(shielded.pkD, 'hex');
+    if (diversifier.length !== 11) {
+        throw new sdk_core_1.UnexpectedAddressError(`address validation failure: invalid diversifier length ${diversifier.length}`);
+    }
+    if (pkD.length !== 32) {
+        throw new sdk_core_1.UnexpectedAddressError(`address validation failure: invalid pkD length ${pkD.length}`);
+    }
+    // Only zec/tzec produce shielded addresses, so the name is always a valid ZcashNetworkName.
+    const network = coinName;
+    let ua;
+    try {
+        ua = wasm_utxo_1.fixedScriptWallet.ZcashUnifiedAddress.parse(params.address, network);
+    }
+    catch (e) {
+        throw new sdk_core_1.UnexpectedAddressError(`address validation failure: not a valid unified address: ${params.address}`);
+    }
+    const orchard = ua.orchardReceiver;
+    if (!orchard || orchard.length !== 43) {
+        throw new sdk_core_1.UnexpectedAddressError('address validation failure: unified address carries no Orchard receiver');
+    }
+    const expectedReceiver = Buffer.concat([diversifier, pkD]);
+    if (!Buffer.from(orchard).equals(expectedReceiver)) {
+        throw new sdk_core_1.UnexpectedAddressError('address validation failure: unified address Orchard receiver does not match shielded coinSpecific');
+    }
+}
+//# sourceMappingURL=data:application/json;base64,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