@bitgo/abstract-utxo 13.4.0 → 13.4.1

package/dist/cjs/test/unit/offlineVault/pox5.js

@@ -0,0 +1,207 @@
+"use strict";
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+const assert_1 = __importDefault(require("assert"));
+const crypto_1 = require("crypto");
+const utxo_descriptors_1 = require("@bitgo/utxo-descriptors");
+const wasm_utxo_1 = require("@bitgo/wasm-utxo");
+const testutils_1 = require("@bitgo/wasm-utxo/testutils");
+const offlineVault_1 = require("../../../src/offlineVault");
+const builder_1 = require("../../../src/descriptor/builder");
+const validatePolicy_1 = require("../../../src/descriptor/validatePolicy");
+const descriptor_1 = require("../../../src/descriptor");
+const deriveKeyWithSeed_1 = require("../../../src/deriveKeyWithSeed");
+const UNLOCK_HEIGHT = 840000;
+const DERIVATION_ID = 'pox5-test-seed';
+const INPUT_VALUE = 100000n;
+const CHANGE_VALUE = 60000n;
+const EXTERNAL_VALUE = 30000n;
+const coinNames = ['btc', 'tbtcstxsignet'];
+function sha256(value) {
+    return (0, crypto_1.createHash)('sha256').update(value).digest();
+}
+function getWalletKeys() {
+    const rootPrv = (0, testutils_1.getKey)('pox5-offline-vault-root');
+    const userPrv = (0, deriveKeyWithSeed_1.deriveKeyWithSeed)(rootPrv, DERIVATION_ID).key;
+    const [, backup, bitgo] = (0, testutils_1.getKeyTriple)('pox5-offline-vault');
+    return { rootPrv, keys: [userPrv.neutered(), backup.neutered(), bitgo.neutered()] };
+}
+function getForeignKeys() {
+    const [a, b, c] = (0, testutils_1.getKeyTriple)('pox5-offline-vault-foreign');
+    return [a.neutered(), b.neutered(), c.neutered()];
+}
+function createLockupDescriptor(keys, unlockHeight = UNLOCK_HEIGHT) {
+    return utxo_descriptors_1.pox5.createPox5LockupDescriptor({
+        unlockHeight,
+        stakerCommitment: sha256(Buffer.alloc(32, 0x42)),
+        earlyExitKey: Buffer.from((0, testutils_1.getKey)('pox5-offline-vault-early-exit').publicKey),
+        stakerKeys: keys,
+    });
+}
+function createPox5Tx(params = {}) {
+    const { rootPrv, keys } = getWalletKeys();
+    const external = (0, builder_1.getDescriptorFromBuilder)({ name: 'Wsh2Of3', keys, path: '0/*' });
+    const internal = (0, builder_1.getDescriptorFromBuilder)({ name: 'Wsh2Of3', keys, path: '1/*' });
+    const lockup = params.lockupDescriptor ?? createLockupDescriptor(params.lockupKeys ?? keys);
+    const lockupAtIndex = lockup.atDerivationIndex(0);
+    const inputs = Array.from({ length: params.lockupInputs ?? 1 }, (_, i) => ({
+        hash: Buffer.alloc(32, i + 1).toString('hex'),
+        index: 0,
+        witnessUtxo: { script: lockupAtIndex.scriptPubkey(), value: INPUT_VALUE },
+        descriptor: lockupAtIndex,
+        sequence: params.sequence ?? 0xfffffffe,
+    }));
+    const psbt = wasm_utxo_1.descriptorWallet.createPsbt({ version: 2, locktime: params.locktime ?? UNLOCK_HEIGHT }, inputs, [
+        { script: external.atDerivationIndex(7).scriptPubkey(), value: EXTERNAL_VALUE },
+        {
+            script: internal.atDerivationIndex(3).scriptPubkey(),
+            value: CHANGE_VALUE,
+            descriptor: internal.atDerivationIndex(3),
+        },
+    ]);
+    const tx = {
+        xpubsWithDerivationPath: {
+            user: { xpub: keys[0].toBase58(), derivedFromParentWithSeed: DERIVATION_ID },
+            backup: { xpub: keys[1].toBase58() },
+            bitgo: { xpub: keys[2].toBase58() },
+        },
+        coinSpecific: { txHex: Buffer.from(psbt.serialize()).toString('hex') },
+        descriptors: [
+            { name: 'external', value: external.toString() },
+            { name: 'internal', value: internal.toString() },
+            { name: `pox5-lockup-u${UNLOCK_HEIGHT}-test`, value: lockup.toString() },
+        ],
+    };
+    return { tx, rootPrv };
+}
+function halfSign(coinName, { tx, rootPrv }) {
+    const { halfSigned } = (0, offlineVault_1.createHalfSigned)(coinName, rootPrv, DERIVATION_ID, tx);
+    return wasm_utxo_1.Psbt.deserialize(Buffer.from(halfSigned.txHex, 'hex'));
+}
+describe('OfflineVault PoX-5 lockup descriptor', function () {
+    for (const coinName of coinNames) {
+        describe(coinName, function () {
+            it('explains a late exit including nLockTime', function () {
+                const { tx } = createPox5Tx();
+                const explanation = (0, offlineVault_1.getTransactionExplanation)(coinName, tx);
+                assert_1.default.strictEqual(explanation.locktime, UNLOCK_HEIGHT);
+                assert_1.default.strictEqual(explanation.outputs.length, 1);
+                assert_1.default.strictEqual(explanation.outputs[0].amount, EXTERNAL_VALUE.toString());
+                assert_1.default.strictEqual(explanation.changeOutputs.length, 1);
+                assert_1.default.strictEqual(explanation.changeOutputs[0].amount, CHANGE_VALUE.toString());
+                assert_1.default.strictEqual(explanation.fee.fee, (INPUT_VALUE - EXTERNAL_VALUE - CHANGE_VALUE).toString());
+            });
+            it('half-signs a late exit', function () {
+                const signed = halfSign(coinName, createPox5Tx());
+                assert_1.default.ok(signed.hasPartialSignatures(0));
+                const sigs = signed.getPartialSignatures(0);
+                assert_1.default.strictEqual(sigs.length, 1);
+                assert_1.default.ok(signed.validateSignatureAtInput(0, sigs[0].pubkey));
+            });
+            it('half-signs a late exit with nLockTime above the unlock height', function () {
+                halfSign(coinName, createPox5Tx({ locktime: UNLOCK_HEIGHT + 100 }));
+            });
+            describe('rejects', function () {
+                function assertRejected(params, message) {
+                    const tx = createPox5Tx(params);
+                    assert_1.default.throws(() => halfSign(coinName, tx), message);
+                }
+                it('lockup descriptors with foreign staker keys', function () {
+                    const params = { lockupKeys: getForeignKeys() };
+                    assert_1.default.throws(() => (0, offlineVault_1.getTransactionExplanation)(coinName, createPox5Tx(params).tx), /does not match policy/);
+                    assertRejected(params, /does not match policy/);
+                });
+                it('lockup descriptors with only one foreign staker key', function () {
+                    const { keys } = getWalletKeys();
+                    const [foreign] = getForeignKeys();
+                    assertRejected({ lockupKeys: [keys[0], keys[1], foreign] }, /does not match policy/);
+                });
+                it('lockup descriptors with permuted staker keys', function () {
+                    const { keys } = getWalletKeys();
+                    assertRejected({ lockupKeys: [keys[1], keys[0], keys[2]] }, /does not match policy/);
+                });
+                it('malformed lockup descriptors', function () {
+                    const { keys } = getWalletKeys();
+                    // unlock height is outside of the block height range
+                    const node = wasm_utxo_1.ast.fromDescriptor(createLockupDescriptor(keys));
+                    node.wsh.and_v[0]['v:or_i'][0] = { after: 600000000 };
+                    const malformed = wasm_utxo_1.Descriptor.fromString(wasm_utxo_1.ast.formatNode(node), 'derivable');
+                    assertRejected({ lockupDescriptor: malformed }, /does not match policy/);
+                });
+                it('non-canonical lockup descriptors', function () {
+                    const { keys } = getWalletKeys();
+                    const xpubs = keys.map((k) => k.toBase58() + '/*');
+                    // plain 2-of-3 with the early exit branch removed
+                    const other = wasm_utxo_1.Descriptor.fromString(`wsh(and_v(v:pk(${xpubs[0]}),multi(2,${xpubs.join(',')})))`, 'derivable');
+                    assertRejected({ lockupDescriptor: other }, /does not match policy/);
+                });
+                it('nLockTime below the unlock height', function () {
+                    assertRejected({ locktime: UNLOCK_HEIGHT - 1 }, /nLockTime must be at least/);
+                });
+                it('nLockTime that is a timestamp', function () {
+                    assertRejected({ locktime: 500000000 }, /nLockTime must be a block height/);
+                });
+                it('final sequence on the lockup input', function () {
+                    assertRejected({ sequence: 0xffffffff }, /non-final sequence/);
+                });
+                it('more than one lockup input', function () {
+                    assertRejected({ lockupInputs: 2 }, /exactly one PoX-5 lockup input/);
+                });
+            });
+            it('still explains and signs a regular Wsh2Of3 transaction', function () {
+                const { rootPrv, keys } = getWalletKeys();
+                const external = (0, builder_1.getDescriptorFromBuilder)({ name: 'Wsh2Of3', keys, path: '0/*' });
+                const input = external.atDerivationIndex(1);
+                const psbt = wasm_utxo_1.descriptorWallet.createPsbt({ version: 2, locktime: 0 }, [
+                    {
+                        hash: '01'.repeat(32),
+                        index: 0,
+                        witnessUtxo: { script: input.scriptPubkey(), value: INPUT_VALUE },
+                        descriptor: input,
+                    },
+                ], [{ script: external.atDerivationIndex(2).scriptPubkey(), value: 90000n }]);
+                const tx = {
+                    xpubsWithDerivationPath: {
+                        user: { xpub: keys[0].toBase58(), derivedFromParentWithSeed: DERIVATION_ID },
+                        backup: { xpub: keys[1].toBase58() },
+                        bitgo: { xpub: keys[2].toBase58() },
+                    },
+                    coinSpecific: { txHex: Buffer.from(psbt.serialize()).toString('hex') },
+                    descriptors: [{ name: 'external', value: external.toString() }],
+                };
+                assert_1.default.strictEqual((0, offlineVault_1.getTransactionExplanation)(coinName, tx).locktime, 0);
+                assert_1.default.ok(halfSign(coinName, { tx, rootPrv }).hasPartialSignatures(0));
+            });
+        });
+    }
+    describe('getPolicyForEnv(prod)', function () {
+        function validate(descriptors, keys) {
+            (0, validatePolicy_1.assertDescriptorPolicy)(descriptors.map((value, i) => (0, descriptor_1.toNamedDescriptorNative)({ name: String(i), value: value.toString() }, 'derivable')), (0, validatePolicy_1.getPolicyForEnv)('prod'), [keys[0], keys[1], keys[2]]);
+        }
+        it('accepts wallet descriptors together with the PoX-5 lockup descriptor', function () {
+            const { keys } = getWalletKeys();
+            const external = (0, builder_1.getDescriptorFromBuilder)({ name: 'Wsh2Of3', keys, path: '0/*' });
+            validate([external, createLockupDescriptor(keys)], keys);
+            validate([createLockupDescriptor(keys, 900000)], keys);
+        });
+        it('rejects a lockup descriptor with foreign keys', function () {
+            const { keys } = getWalletKeys();
+            assert_1.default.throws(() => validate([createLockupDescriptor(getForeignKeys())], keys), /does not match policy/);
+        });
+        it('accepts Wsh2Of3CltvDrop descriptors', function () {
+            const { keys } = getWalletKeys();
+            const cltvDrop = (0, builder_1.getDescriptorFromBuilder)({ name: 'Wsh2Of3CltvDrop', keys, path: '0/*', locktime: 1000 });
+            validate([cltvDrop], keys);
+        });
+        it('returns false instead of throwing for descriptors a template cannot parse', function () {
+            const { keys } = getWalletKeys();
+            const lockup = (0, descriptor_1.toNamedDescriptorNative)({ name: 'lockup', value: createLockupDescriptor(keys).toString() }, 'derivable');
+            for (const name of ['Wsh2Of3', 'Wsh2Of3CltvDrop', 'ShWsh2Of3CltvDrop', 'SbtcDeposit']) {
+                assert_1.default.strictEqual((0, validatePolicy_1.getValidatorDescriptorTemplate)(name).validate([lockup], [keys[0], keys[1], keys[2]]), false);
+            }
+        });
+    });
+});
+//# sourceMappingURL=data:application/json;base64,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

package/dist/cjs/test/unit/sweep.d.ts

@@ -0,0 +1,2 @@
+import 'mocha';
+//# sourceMappingURL=sweep.d.ts.map

package/dist/cjs/test/unit/sweep.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sweep.d.ts","sourceRoot":"","sources":["../../../../test/unit/sweep.ts"],"names":[],"mappings":"AAAA,OAAO,OAAO,CAAC"}

package/dist/cjs/test/unit/sweep.js

@@ -0,0 +1,92 @@
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || (function () {
+    var ownKeys = function(o) {
+        ownKeys = Object.getOwnPropertyNames || function (o) {
+            var ar = [];
+            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
+            return ar;
+        };
+        return ownKeys(o);
+    };
+    return function (mod) {
+        if (mod && mod.__esModule) return mod;
+        var result = {};
+        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
+        __setModuleDefault(result, mod);
+        return result;
+    };
+})();
+Object.defineProperty(exports, "__esModule", { value: true });
+require("mocha");
+const assert = __importStar(require("assert"));
+const nock = require("nock");
+const sdk_core_1 = require("@bitgo/sdk-core");
+const util_1 = require("./util");
+nock.disableNetConnect();
+describe('Wallet.sweep', function () {
+    const bgUrl = sdk_core_1.common.Environments[util_1.defaultBitGo.getEnv()].uri;
+    const coin = (0, util_1.getUtxoCoin)('btc');
+    const walletId = '5b34252f1bf349930e34020a00000000';
+    const keyIds = ['key-user', 'key-backup', 'key-bitgo'];
+    const wallet = (0, util_1.getUtxoWallet)(coin, { id: walletId, coin: coin.getChain(), keys: keyIds });
+    const userPrv = (0, util_1.getDefaultWalletKeys)().user.toBase58();
+    // Sweep destination is derived from unrelated keys so that the prebuild explanation
+    // classifies it as an external output rather than a wallet change output.
+    const destinationKeys = (0, util_1.createWasmWalletKeys)('sweep-destination');
+    const destination = (0, util_1.getWalletAddress)('btc', destinationKeys.walletKeys);
+    // Sweep-shaped prebuild: a single wallet input spending to a single external output.
+    // The /sweepWallet response does not carry a `pubs` field.
+    const psbt = (0, util_1.constructPsbt)([{ scriptType: 'p2sh', value: BigInt(100000) }], [{ address: destination, value: BigInt(99000) }], 'btc', (0, util_1.getDefaultWasmWalletKeys)().walletKeys);
+    const txHex = Buffer.from(psbt.serialize()).toString('hex');
+    const txid = '856e0d0f0f0f5f1a455d0f8c4c9a3a4fbd0b0d7a0d9f4e3c2b1a0f9e8d7c6b5a4';
+    function nockSweepPrebuild() {
+        return nock(bgUrl)
+            .post(`/api/v2/${coin.getChain()}/wallet/${walletId}/sweepWallet`)
+            .reply(200, { txHex, walletId });
+    }
+    function nockKeychainFetches() {
+        return keyIds.map((id, i) => nock(bgUrl).get(`/api/v2/${coin.getChain()}/key/${id}`).reply(200, { pub: util_1.keychainsBase58[i].pub }));
+    }
+    function nockSendTransaction() {
+        return nock(bgUrl).post(`/api/v2/${coin.getChain()}/wallet/${walletId}/tx/send`).reply(200, { txid, tx: txHex });
+    }
+    afterEach(function () {
+        nock.cleanAll();
+    });
+    it('explains the sweep prebuild with the wallet pubs and completes the sweep', async function () {
+        const sweepScope = nockSweepPrebuild();
+        // The wallet keychains are fetched exactly once: the pubs are used both for
+        // explaining the prebuild and for signing, so no further key fetch is expected.
+        const keyScopes = nockKeychainFetches();
+        const sendScope = nockSendTransaction();
+        const result = await wallet.sweep({ address: destination, xprv: userPrv });
+        assert.strictEqual(result.txid, txid);
+        [sweepScope, ...keyScopes, sendScope].forEach((scope) => assert.ok(scope.isDone()));
+    });
+    it('rejects a sweep prebuild whose outputs do not match the requested destination', async function () {
+        const sweepScope = nockSweepPrebuild();
+        const keyScopes = nockKeychainFetches();
+        const otherAddress = (0, util_1.getWalletAddress)('btc', (0, util_1.createWasmWalletKeys)('other-address').walletKeys);
+        await assert.rejects(wallet.sweep({ address: otherAddress, xprv: userPrv }), {
+            message: `invalid sweep destination ${destination}, specified ${otherAddress}`,
+        });
+        [sweepScope, ...keyScopes].forEach((scope) => assert.ok(scope.isDone()));
+    });
+});
+//# sourceMappingURL=data:application/json;base64,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