@bitgo/wasm-utxo 1.27.0 → 1.28.0

package/dist/cjs/js/wasm/wasm_utxo.js

@@ -731,6 +731,25 @@ class BitGoPsbt {
             wasm.__wbindgen_export4(deferred1_0, deferred1_1, 1);
         }
     }
+    /**
+     * Check if an input is a MuSig2 keypath input.
+     *
+     * MuSig2 inputs require special handling: nonces must be generated first with
+     * `generate_musig2_nonces()`, then signed with `sign_musig2_input()`.
+     *
+     * # Arguments
+     * - `input_index`: The index of the input to check (0-based)
+     *
+     * # Returns
+     * - `true` if the input is a MuSig2 keypath input
+     * - `false` otherwise (or if input_index is out of bounds)
+     * @param {number} input_index
+     * @returns {boolean}
+     */
+    is_musig2_input(input_index) {
+        const ret = wasm.bitgopsbt_is_musig2_input(this.__wbg_ptr, input_index);
+        return ret !== 0;
+    }
     /**
      * Sign a single input with an extended private key (xpriv)
      *
@@ -866,6 +885,75 @@ class BitGoPsbt {
             wasm.__wbindgen_add_to_stack_pointer(16);
         }
     }
+    /**
+     * Sign a single MuSig2 keypath input.
+     *
+     * This uses the FirstRound state generated by `generate_musig2_nonces()`.
+     * Each FirstRound can only be used once (nonce reuse is a security risk).
+     *
+     * For non-MuSig2 inputs, returns an error (use `sign_wallet_input` instead).
+     *
+     * # Arguments
+     * - `input_index`: The index of the input to sign (0-based)
+     * - `xpriv`: The extended private key as a WasmBIP32 instance
+     *
+     * # Returns
+     * - `Ok(())` if signing was successful
+     * - `Err(WasmUtxoError)` if signing fails, no FirstRound exists, or not a MuSig2 input
+     * @param {number} input_index
+     * @param {WasmBIP32} xpriv
+     */
+    sign_musig2_input(input_index, xpriv) {
+        try {
+            const retptr = wasm.__wbindgen_add_to_stack_pointer(-16);
+            _assertClass(xpriv, WasmBIP32);
+            wasm.bitgopsbt_sign_musig2_input(retptr, this.__wbg_ptr, input_index, xpriv.__wbg_ptr);
+            var r0 = getDataViewMemory0().getInt32(retptr + 4 * 0, true);
+            var r1 = getDataViewMemory0().getInt32(retptr + 4 * 1, true);
+            if (r1) {
+                throw takeObject(r0);
+            }
+        } finally {
+            wasm.__wbindgen_add_to_stack_pointer(16);
+        }
+    }
+    /**
+     * Sign a single non-MuSig2 wallet input using save/restore pattern.
+     *
+     * For MuSig2 inputs, returns an error (use `sign_musig2_input` instead).
+     * For ECDSA inputs, this uses a save/restore pattern: clones the PSBT,
+     * signs all inputs on the clone, then copies only the target input's
+     * signatures back.
+     *
+     * **Important:** This is NOT faster than `sign_all_wallet_inputs()` for ECDSA inputs.
+     * The underlying library signs all inputs regardless. This method just ensures
+     * that only the specified input gets signatures added to the PSBT.
+     * Use `sign_all_wallet_inputs()` when signing multiple inputs with the same key.
+     *
+     * # Arguments
+     * - `input_index`: The index of the input to sign (0-based)
+     * - `xpriv`: The extended private key as a WasmBIP32 instance
+     *
+     * # Returns
+     * - `Ok(())` if the input was signed
+     * - `Err(WasmUtxoError)` if signing fails or input is MuSig2
+     * @param {number} input_index
+     * @param {WasmBIP32} xpriv
+     */
+    sign_wallet_input(input_index, xpriv) {
+        try {
+            const retptr = wasm.__wbindgen_add_to_stack_pointer(-16);
+            _assertClass(xpriv, WasmBIP32);
+            wasm.bitgopsbt_sign_single_input_with_xpriv(retptr, this.__wbg_ptr, input_index, xpriv.__wbg_ptr);
+            var r0 = getDataViewMemory0().getInt32(retptr + 4 * 0, true);
+            var r1 = getDataViewMemory0().getInt32(retptr + 4 * 1, true);
+            if (r1) {
+                throw takeObject(r0);
+            }
+        } finally {
+            wasm.__wbindgen_add_to_stack_pointer(16);
+        }
+    }
     /**
      * Sign a single input with a raw private key
      *
@@ -994,6 +1082,41 @@ class BitGoPsbt {
             wasm.__wbindgen_add_to_stack_pointer(16);
         }
     }
+    /**
+     * Sign all non-MuSig2 inputs with an extended private key (xpriv) in a single pass.
+     *
+     * This is more efficient than calling `sign_with_xpriv` for each input individually.
+     * The underlying miniscript library's `sign` method signs all matching inputs at once.
+     *
+     * **Note:** MuSig2 inputs are skipped by this method because they require FirstRound
+     * state from nonce generation. After calling this method, sign MuSig2 inputs
+     * individually using `sign_with_xpriv`.
+     *
+     * # Arguments
+     * - `xpriv`: The extended private key as a WasmBIP32 instance
+     *
+     * # Returns
+     * - `Ok(JsValue)` with an array of input indices that were signed
+     * - `Err(WasmUtxoError)` if signing fails
+     * @param {WasmBIP32} xpriv
+     * @returns {any}
+     */
+    sign_all_with_xpriv(xpriv) {
+        try {
+            const retptr = wasm.__wbindgen_add_to_stack_pointer(-16);
+            _assertClass(xpriv, WasmBIP32);
+            wasm.bitgopsbt_sign_all_wallet_inputs(retptr, this.__wbg_ptr, xpriv.__wbg_ptr);
+            var r0 = getDataViewMemory0().getInt32(retptr + 4 * 0, true);
+            var r1 = getDataViewMemory0().getInt32(retptr + 4 * 1, true);
+            var r2 = getDataViewMemory0().getInt32(retptr + 4 * 2, true);
+            if (r2) {
+                throw takeObject(r1);
+            }
+            return takeObject(r0);
+        } finally {
+            wasm.__wbindgen_add_to_stack_pointer(16);
+        }
+    }
     /**
      * Add a PayGo attestation to a PSBT output
      *
@@ -1103,6 +1226,75 @@ class BitGoPsbt {
             wasm.__wbindgen_add_to_stack_pointer(16);
         }
     }
+    /**
+     * Sign all MuSig2 keypath inputs in a single pass with optimized sighash computation.
+     *
+     * This is more efficient than calling `sign_musig2_input()` for each input because
+     * it reuses the SighashCache across all inputs, avoiding redundant computation of
+     * sha_prevouts, sha_amounts, sha_scriptpubkeys, sha_sequences, and sha_outputs.
+     *
+     * Each MuSig2 input requires a FirstRound from `generate_musig2_nonces()`.
+     * FirstRounds that have already been consumed (signed) are skipped.
+     *
+     * # Arguments
+     * - `xpriv`: The extended private key as a WasmBIP32 instance
+     *
+     * # Returns
+     * - `Ok(JsValue)` with an array of input indices that were signed
+     * - `Err(WasmUtxoError)` if signing fails
+     * @param {WasmBIP32} xpriv
+     * @returns {any}
+     */
+    sign_all_musig2_inputs(xpriv) {
+        try {
+            const retptr = wasm.__wbindgen_add_to_stack_pointer(-16);
+            _assertClass(xpriv, WasmBIP32);
+            wasm.bitgopsbt_sign_all_musig2_inputs(retptr, this.__wbg_ptr, xpriv.__wbg_ptr);
+            var r0 = getDataViewMemory0().getInt32(retptr + 4 * 0, true);
+            var r1 = getDataViewMemory0().getInt32(retptr + 4 * 1, true);
+            var r2 = getDataViewMemory0().getInt32(retptr + 4 * 2, true);
+            if (r2) {
+                throw takeObject(r1);
+            }
+            return takeObject(r0);
+        } finally {
+            wasm.__wbindgen_add_to_stack_pointer(16);
+        }
+    }
+    /**
+     * Sign all non-MuSig2 wallet inputs in a single efficient pass.
+     *
+     * This signs all ECDSA (P2SH, P2SH-P2WSH, P2WSH) and Taproot script path (P2TR)
+     * inputs that match the provided xpriv. MuSig2 keypath inputs are skipped.
+     *
+     * This is the most efficient way to sign wallet inputs. After calling this,
+     * sign any MuSig2 inputs using `sign_all_musig2_inputs()` or `sign_musig2_input()`.
+     *
+     * # Arguments
+     * - `xpriv`: The extended private key as a WasmBIP32 instance
+     *
+     * # Returns
+     * - `Ok(JsValue)` with an array of input indices that were signed
+     * - `Err(WasmUtxoError)` if signing fails
+     * @param {WasmBIP32} xpriv
+     * @returns {any}
+     */
+    sign_all_wallet_inputs(xpriv) {
+        try {
+            const retptr = wasm.__wbindgen_add_to_stack_pointer(-16);
+            _assertClass(xpriv, WasmBIP32);
+            wasm.bitgopsbt_sign_all_wallet_inputs(retptr, this.__wbg_ptr, xpriv.__wbg_ptr);
+            var r0 = getDataViewMemory0().getInt32(retptr + 4 * 0, true);
+            var r1 = getDataViewMemory0().getInt32(retptr + 4 * 1, true);
+            var r2 = getDataViewMemory0().getInt32(retptr + 4 * 2, true);
+            if (r2) {
+                throw takeObject(r1);
+            }
+            return takeObject(r0);
+        } finally {
+            wasm.__wbindgen_add_to_stack_pointer(16);
+        }
+    }
     /**
      * Add an output to the PSBT by address
      *
@@ -1292,6 +1484,72 @@ class BitGoPsbt {
             wasm.__wbindgen_add_to_stack_pointer(16);
         }
     }
+    /**
+     * Sign a single input with an extended private key, using save/restore for ECDSA inputs.
+     *
+     * For MuSig2 inputs, this returns an error (use sign_with_xpriv which handles FirstRound).
+     * For ECDSA inputs, this clones the PSBT, signs all, then copies only the target
+     * input's signatures back.
+     *
+     * **Important:** This is NOT faster than `sign_all_with_xpriv` for ECDSA inputs.
+     * The underlying miniscript library signs all inputs regardless. This method
+     * just prevents signatures from being added to other inputs.
+     *
+     * # Arguments
+     * - `input_index`: The index of the input to sign (0-based)
+     * - `xpriv`: The extended private key as a WasmBIP32 instance
+     *
+     * # Returns
+     * - `Ok(())` if the input was signed
+     * - `Err(WasmUtxoError)` if signing fails
+     * @param {number} input_index
+     * @param {WasmBIP32} xpriv
+     */
+    sign_single_input_with_xpriv(input_index, xpriv) {
+        try {
+            const retptr = wasm.__wbindgen_add_to_stack_pointer(-16);
+            _assertClass(xpriv, WasmBIP32);
+            wasm.bitgopsbt_sign_single_input_with_xpriv(retptr, this.__wbg_ptr, input_index, xpriv.__wbg_ptr);
+            var r0 = getDataViewMemory0().getInt32(retptr + 4 * 0, true);
+            var r1 = getDataViewMemory0().getInt32(retptr + 4 * 1, true);
+            if (r1) {
+                throw takeObject(r0);
+            }
+        } finally {
+            wasm.__wbindgen_add_to_stack_pointer(16);
+        }
+    }
+    /**
+     * Sign all replay protection inputs with a raw private key.
+     *
+     * This iterates through all inputs looking for P2SH-P2PK (replay protection) inputs
+     * that match the provided public key and signs them.
+     *
+     * # Arguments
+     * - `ecpair`: The ECPair containing the private key
+     *
+     * # Returns
+     * - `Ok(JsValue)` with an array of input indices that were signed
+     * - `Err(WasmUtxoError)` if signing fails
+     * @param {WasmECPair} ecpair
+     * @returns {any}
+     */
+    sign_replay_protection_inputs(ecpair) {
+        try {
+            const retptr = wasm.__wbindgen_add_to_stack_pointer(-16);
+            _assertClass(ecpair, WasmECPair);
+            wasm.bitgopsbt_sign_all_replay_protection_inputs(retptr, this.__wbg_ptr, ecpair.__wbg_ptr);
+            var r0 = getDataViewMemory0().getInt32(retptr + 4 * 0, true);
+            var r1 = getDataViewMemory0().getInt32(retptr + 4 * 1, true);
+            var r2 = getDataViewMemory0().getInt32(retptr + 4 * 2, true);
+            if (r2) {
+                throw takeObject(r1);
+            }
+            return takeObject(r0);
+        } finally {
+            wasm.__wbindgen_add_to_stack_pointer(16);
+        }
+    }
     /**
      * Parse outputs with wallet keys to identify which outputs belong to a wallet
      *
@@ -1318,6 +1576,71 @@ class BitGoPsbt {
             wasm.__wbindgen_add_to_stack_pointer(16);
         }
     }
+    /**
+     * Sign a single input with a raw private key, using save/restore for regular inputs.
+     *
+     * For replay protection inputs (P2SH-P2PK), this uses direct signing which is
+     * already single-input. For regular inputs, this clones the PSBT, signs all,
+     * then copies only the target input's signatures back.
+     *
+     * **Important:** This is NOT faster than signing all inputs for regular (non-RP) inputs.
+     * The underlying miniscript library signs all inputs regardless.
+     *
+     * # Arguments
+     * - `input_index`: The index of the input to sign (0-based)
+     * - `ecpair`: The ECPair containing the private key
+     *
+     * # Returns
+     * - `Ok(())` if the input was signed
+     * - `Err(WasmUtxoError)` if signing fails
+     * @param {number} input_index
+     * @param {WasmECPair} ecpair
+     */
+    sign_single_input_with_privkey(input_index, ecpair) {
+        try {
+            const retptr = wasm.__wbindgen_add_to_stack_pointer(-16);
+            _assertClass(ecpair, WasmECPair);
+            wasm.bitgopsbt_sign_single_input_with_privkey(retptr, this.__wbg_ptr, input_index, ecpair.__wbg_ptr);
+            var r0 = getDataViewMemory0().getInt32(retptr + 4 * 0, true);
+            var r1 = getDataViewMemory0().getInt32(retptr + 4 * 1, true);
+            if (r1) {
+                throw takeObject(r0);
+            }
+        } finally {
+            wasm.__wbindgen_add_to_stack_pointer(16);
+        }
+    }
+    /**
+     * Sign all replay protection inputs with a raw private key.
+     *
+     * This iterates through all inputs looking for P2SH-P2PK (replay protection) inputs
+     * that match the provided public key and signs them.
+     *
+     * # Arguments
+     * - `ecpair`: The ECPair containing the private key
+     *
+     * # Returns
+     * - `Ok(JsValue)` with an array of input indices that were signed
+     * - `Err(WasmUtxoError)` if signing fails
+     * @param {WasmECPair} ecpair
+     * @returns {any}
+     */
+    sign_all_replay_protection_inputs(ecpair) {
+        try {
+            const retptr = wasm.__wbindgen_add_to_stack_pointer(-16);
+            _assertClass(ecpair, WasmECPair);
+            wasm.bitgopsbt_sign_all_replay_protection_inputs(retptr, this.__wbg_ptr, ecpair.__wbg_ptr);
+            var r0 = getDataViewMemory0().getInt32(retptr + 4 * 0, true);
+            var r1 = getDataViewMemory0().getInt32(retptr + 4 * 1, true);
+            var r2 = getDataViewMemory0().getInt32(retptr + 4 * 2, true);
+            if (r2) {
+                throw takeObject(r1);
+            }
+            return takeObject(r0);
+        } finally {
+            wasm.__wbindgen_add_to_stack_pointer(16);
+        }
+    }
     /**
      * Parse transaction with wallet keys to identify wallet inputs/outputs
      * @param {WasmRootWalletKeys} wallet_keys

package/dist/cjs/js/wasm/wasm_utxo_bg.wasm.d.ts

@@ -2,16 +2,60 @@
 /* eslint-disable */
 export const memory: WebAssembly.Memory;
 export const __wbg_addressnamespace_free: (a: number, b: number) => void;
+export const __wbg_inscriptionsnamespace_free: (a: number, b: number) => void;
+export const __wbg_utxolibcompatnamespace_free: (a: number, b: number) => void;
+export const __wbg_wasmtransaction_free: (a: number, b: number) => void;
+export const __wbg_wasmzcashtransaction_free: (a: number, b: number) => void;
+export const __wbg_wrapdescriptor_free: (a: number, b: number) => void;
+export const __wbg_wrapminiscript_free: (a: number, b: number) => void;
+export const __wbg_wrappsbt_free: (a: number, b: number) => void;
+export const addressnamespace_from_output_script_with_coin: (a: number, b: number, c: number, d: number, e: number, f: number, g: number) => void;
+export const addressnamespace_to_output_script_with_coin: (a: number, b: number, c: number, d: number, e: number) => void;
+export const inscriptionsnamespace_create_inscription_reveal_data: (a: number, b: number, c: number, d: number, e: number, f: number, g: number) => void;
+export const inscriptionsnamespace_sign_reveal_transaction: (a: number, b: number, c: number, d: number, e: number, f: number, g: number, h: number, i: number, j: bigint) => void;
+export const utxolibcompatnamespace_from_output_script: (a: number, b: number, c: number, d: number, e: number, f: number) => void;
+export const utxolibcompatnamespace_to_output_script: (a: number, b: number, c: number, d: number, e: number, f: number) => void;
+export const wasmtransaction_from_bytes: (a: number, b: number, c: number) => void;
+export const wasmtransaction_get_vsize: (a: number) => number;
+export const wasmtransaction_to_bytes: (a: number, b: number) => void;
+export const wasmzcashtransaction_from_bytes: (a: number, b: number, c: number) => void;
+export const wasmzcashtransaction_to_bytes: (a: number, b: number) => void;
+export const wrapdescriptor_atDerivationIndex: (a: number, b: number, c: number) => void;
+export const wrapdescriptor_descType: (a: number, b: number) => void;
+export const wrapdescriptor_encode: (a: number, b: number) => void;
+export const wrapdescriptor_fromString: (a: number, b: number, c: number, d: number, e: number) => void;
+export const wrapdescriptor_fromStringDetectType: (a: number, b: number, c: number) => void;
+export const wrapdescriptor_hasWildcard: (a: number) => number;
+export const wrapdescriptor_maxWeightToSatisfy: (a: number, b: number) => void;
+export const wrapdescriptor_node: (a: number, b: number) => void;
+export const wrapdescriptor_scriptPubkey: (a: number, b: number) => void;
+export const wrapdescriptor_toAsmString: (a: number, b: number) => void;
+export const wrapdescriptor_toString: (a: number, b: number) => void;
+export const wrapminiscript_encode: (a: number, b: number) => void;
+export const wrapminiscript_fromBitcoinScript: (a: number, b: number, c: number, d: number, e: number) => void;
+export const wrapminiscript_fromString: (a: number, b: number, c: number, d: number, e: number) => void;
+export const wrapminiscript_node: (a: number, b: number) => void;
+export const wrapminiscript_toAsmString: (a: number, b: number) => void;
+export const wrapminiscript_toString: (a: number, b: number) => void;
+export const wrappsbt_addInput: (a: number, b: number, c: number, d: number, e: number, f: bigint, g: number, h: number, i: number) => void;
+export const wrappsbt_addOutput: (a: number, b: number, c: number, d: bigint) => number;
+export const wrappsbt_clone: (a: number) => number;
+export const wrappsbt_deserialize: (a: number, b: number, c: number) => void;
+export const wrappsbt_finalize: (a: number, b: number) => void;
+export const wrappsbt_getUnsignedTx: (a: number, b: number) => void;
+export const wrappsbt_new: (a: number, b: number) => number;
+export const wrappsbt_serialize: (a: number, b: number) => void;
+export const wrappsbt_signWithPrv: (a: number, b: number, c: number, d: number) => void;
+export const wrappsbt_signWithXprv: (a: number, b: number, c: number, d: number) => void;
+export const wrappsbt_updateInputWithDescriptor: (a: number, b: number, c: number, d: number) => void;
+export const wrappsbt_updateOutputWithDescriptor: (a: number, b: number, c: number, d: number) => void;
 export const __wbg_bip322namespace_free: (a: number, b: number) => void;
 export const __wbg_bitgopsbt_free: (a: number, b: number) => void;
 export const __wbg_fixedscriptwalletnamespace_free: (a: number, b: number) => void;
-export const __wbg_utxolibcompatnamespace_free: (a: number, b: number) => void;
 export const __wbg_wasmbip32_free: (a: number, b: number) => void;
 export const __wbg_wasmdimensions_free: (a: number, b: number) => void;
 export const __wbg_wasmecpair_free: (a: number, b: number) => void;
-export const __wbg_wasmreplayprotection_free: (a: number, b: number) => void;
-export const addressnamespace_from_output_script_with_coin: (a: number, b: number, c: number, d: number, e: number, f: number, g: number) => void;
-export const addressnamespace_to_output_script_with_coin: (a: number, b: number, c: number, d: number, e: number) => void;
+export const __wbg_wasmrootwalletkeys_free: (a: number, b: number) => void;
 export const bip322namespace_add_bip322_input: (a: number, b: number, c: number, d: number, e: number, f: number, g: number, h: number, i: number, j: number, k: number, l: number, m: number) => void;
 export const bip322namespace_verify_bip322_psbt_input: (a: number, b: number, c: number, d: number, e: number, f: number, g: number, h: number, i: number, j: number) => void;
 export const bip322namespace_verify_bip322_psbt_input_with_pubkeys: (a: number, b: number, c: number, d: number, e: number, f: number, g: number, h: number, i: number, j: number, k: number, l: number) => void;
@@ -33,11 +77,18 @@ export const bitgopsbt_extract_transaction: (a: number, b: number) => void;
 export const bitgopsbt_finalize_all_inputs: (a: number, b: number) => void;
 export const bitgopsbt_from_bytes: (a: number, b: number, c: number, d: number, e: number) => void;
 export const bitgopsbt_generate_musig2_nonces: (a: number, b: number, c: number, d: number, e: number) => void;
+export const bitgopsbt_is_musig2_input: (a: number, b: number) => number;
 export const bitgopsbt_lock_time: (a: number) => number;
 export const bitgopsbt_network: (a: number, b: number) => void;
 export const bitgopsbt_parse_outputs_with_wallet_keys: (a: number, b: number, c: number, d: number, e: number) => void;
 export const bitgopsbt_parse_transaction_with_wallet_keys: (a: number, b: number, c: number, d: number, e: number, f: number) => void;
 export const bitgopsbt_serialize: (a: number, b: number) => void;
+export const bitgopsbt_sign_all_musig2_inputs: (a: number, b: number, c: number) => void;
+export const bitgopsbt_sign_all_replay_protection_inputs: (a: number, b: number, c: number) => void;
+export const bitgopsbt_sign_all_wallet_inputs: (a: number, b: number, c: number) => void;
+export const bitgopsbt_sign_musig2_input: (a: number, b: number, c: number, d: number) => void;
+export const bitgopsbt_sign_single_input_with_privkey: (a: number, b: number, c: number, d: number) => void;
+export const bitgopsbt_sign_single_input_with_xpriv: (a: number, b: number, c: number, d: number) => void;
 export const bitgopsbt_sign_with_privkey: (a: number, b: number, c: number, d: number) => void;
 export const bitgopsbt_sign_with_xpriv: (a: number, b: number, c: number, d: number) => void;
 export const bitgopsbt_unsigned_txid: (a: number, b: number) => void;
@@ -52,8 +103,6 @@ export const fixedscriptwalletnamespace_chain_code_table: () => number;
 export const fixedscriptwalletnamespace_output_script: (a: number, b: number, c: number, d: number, e: number) => void;
 export const fixedscriptwalletnamespace_output_script_with_network_str: (a: number, b: number, c: number, d: number, e: number, f: number) => void;
 export const fixedscriptwalletnamespace_supports_script_type: (a: number, b: number, c: number, d: number, e: number) => void;
-export const utxolibcompatnamespace_from_output_script: (a: number, b: number, c: number, d: number, e: number, f: number) => void;
-export const utxolibcompatnamespace_to_output_script: (a: number, b: number, c: number, d: number, e: number, f: number) => void;
 export const wasmbip32_chain_code: (a: number) => number;
 export const wasmbip32_depth: (a: number) => number;
 export const wasmbip32_derive: (a: number, b: number, c: number) => void;
@@ -99,61 +148,22 @@ export const wasmecpair_public_key: (a: number) => number;
 export const wasmecpair_to_wif: (a: number, b: number) => void;
 export const wasmecpair_to_wif_mainnet: (a: number, b: number) => void;
 export const wasmecpair_to_wif_testnet: (a: number, b: number) => void;
-export const wasmreplayprotection_from_addresses: (a: number, b: number, c: number, d: number, e: number) => void;
-export const wasmreplayprotection_from_output_scripts: (a: number, b: number) => number;
-export const wasmreplayprotection_from_public_keys: (a: number, b: number, c: number) => void;
-export const wasmbip32_from_bip32_properties: (a: number, b: number) => void;
-export const __wbg_inscriptionsnamespace_free: (a: number, b: number) => void;
-export const __wbg_wasmdashtransaction_free: (a: number, b: number) => void;
-export const __wbg_wasmrootwalletkeys_free: (a: number, b: number) => void;
-export const __wbg_wasmtransaction_free: (a: number, b: number) => void;
-export const __wbg_wasmzcashtransaction_free: (a: number, b: number) => void;
-export const __wbg_wrapdescriptor_free: (a: number, b: number) => void;
-export const __wbg_wrapminiscript_free: (a: number, b: number) => void;
-export const __wbg_wrappsbt_free: (a: number, b: number) => void;
-export const inscriptionsnamespace_create_inscription_reveal_data: (a: number, b: number, c: number, d: number, e: number, f: number, g: number) => void;
-export const inscriptionsnamespace_sign_reveal_transaction: (a: number, b: number, c: number, d: number, e: number, f: number, g: number, h: number, i: number, j: bigint) => void;
-export const wasmdashtransaction_from_bytes: (a: number, b: number, c: number) => void;
-export const wasmdashtransaction_to_bytes: (a: number, b: number) => void;
 export const wasmrootwalletkeys_backup_key: (a: number) => number;
 export const wasmrootwalletkeys_bitgo_key: (a: number) => number;
 export const wasmrootwalletkeys_new: (a: number, b: number, c: number, d: number) => void;
 export const wasmrootwalletkeys_user_key: (a: number) => number;
 export const wasmrootwalletkeys_with_derivation_prefixes: (a: number, b: number, c: number, d: number, e: number, f: number, g: number, h: number, i: number, j: number) => void;
-export const wasmtransaction_from_bytes: (a: number, b: number, c: number) => void;
-export const wasmtransaction_get_vsize: (a: number) => number;
-export const wasmtransaction_to_bytes: (a: number, b: number) => void;
-export const wasmzcashtransaction_from_bytes: (a: number, b: number, c: number) => void;
-export const wasmzcashtransaction_to_bytes: (a: number, b: number) => void;
-export const wrapdescriptor_atDerivationIndex: (a: number, b: number, c: number) => void;
-export const wrapdescriptor_descType: (a: number, b: number) => void;
-export const wrapdescriptor_encode: (a: number, b: number) => void;
-export const wrapdescriptor_fromString: (a: number, b: number, c: number, d: number, e: number) => void;
-export const wrapdescriptor_fromStringDetectType: (a: number, b: number, c: number) => void;
-export const wrapdescriptor_hasWildcard: (a: number) => number;
-export const wrapdescriptor_maxWeightToSatisfy: (a: number, b: number) => void;
-export const wrapdescriptor_node: (a: number, b: number) => void;
-export const wrapdescriptor_scriptPubkey: (a: number, b: number) => void;
-export const wrapdescriptor_toAsmString: (a: number, b: number) => void;
-export const wrapdescriptor_toString: (a: number, b: number) => void;
-export const wrapminiscript_encode: (a: number, b: number) => void;
-export const wrapminiscript_fromBitcoinScript: (a: number, b: number, c: number, d: number, e: number) => void;
-export const wrapminiscript_fromString: (a: number, b: number, c: number, d: number, e: number) => void;
-export const wrapminiscript_node: (a: number, b: number) => void;
-export const wrapminiscript_toAsmString: (a: number, b: number) => void;
-export const wrapminiscript_toString: (a: number, b: number) => void;
-export const wrappsbt_addInput: (a: number, b: number, c: number, d: number, e: number, f: bigint, g: number, h: number, i: number) => void;
-export const wrappsbt_addOutput: (a: number, b: number, c: number, d: bigint) => number;
-export const wrappsbt_clone: (a: number) => number;
-export const wrappsbt_deserialize: (a: number, b: number, c: number) => void;
-export const wrappsbt_finalize: (a: number, b: number) => void;
-export const wrappsbt_getUnsignedTx: (a: number, b: number) => void;
-export const wrappsbt_new: (a: number, b: number) => number;
-export const wrappsbt_serialize: (a: number, b: number) => void;
-export const wrappsbt_signWithPrv: (a: number, b: number, c: number, d: number) => void;
-export const wrappsbt_signWithXprv: (a: number, b: number, c: number, d: number) => void;
-export const wrappsbt_updateInputWithDescriptor: (a: number, b: number, c: number, d: number) => void;
-export const wrappsbt_updateOutputWithDescriptor: (a: number, b: number, c: number, d: number) => void;
+export const wasmbip32_from_bip32_properties: (a: number, b: number) => void;
+export const bitgopsbt_sign_all_with_xpriv: (a: number, b: number, c: number) => void;
+export const bitgopsbt_sign_replay_protection_inputs: (a: number, b: number, c: number) => void;
+export const bitgopsbt_sign_wallet_input: (a: number, b: number, c: number, d: number) => void;
+export const __wbg_wasmdashtransaction_free: (a: number, b: number) => void;
+export const __wbg_wasmreplayprotection_free: (a: number, b: number) => void;
+export const wasmdashtransaction_from_bytes: (a: number, b: number, c: number) => void;
+export const wasmdashtransaction_to_bytes: (a: number, b: number) => void;
+export const wasmreplayprotection_from_addresses: (a: number, b: number, c: number, d: number, e: number) => void;
+export const wasmreplayprotection_from_output_scripts: (a: number, b: number) => number;
+export const wasmreplayprotection_from_public_keys: (a: number, b: number, c: number) => void;
 export const rustsecp256k1_v0_10_0_context_create: (a: number) => number;
 export const rustsecp256k1_v0_10_0_context_destroy: (a: number) => void;
 export const rustsecp256k1_v0_10_0_default_error_callback_fn: (a: number, b: number) => void;

package/dist/esm/js/bip32.d.ts

@@ -138,3 +138,10 @@ export declare class BIP32 implements BIP32Interface {
      */
     get wasm(): WasmBIP32;
 }
+/**
+ * Type guard to check if a value is a BIP32Arg
+ *
+ * @param key - The value to check
+ * @returns true if the value is a BIP32Arg (string, BIP32, WasmBIP32, or BIP32Interface)
+ */
+export declare function isBIP32Arg(key: unknown): key is BIP32Arg;

package/dist/esm/js/bip32.js

@@ -171,3 +171,18 @@ export class BIP32 {
         return this._wasm;
     }
 }
+/**
+ * Type guard to check if a value is a BIP32Arg
+ *
+ * @param key - The value to check
+ * @returns true if the value is a BIP32Arg (string, BIP32, WasmBIP32, or BIP32Interface)
+ */
+export function isBIP32Arg(key) {
+    return (typeof key === "string" ||
+        key instanceof BIP32 ||
+        key instanceof WasmBIP32 ||
+        (typeof key === "object" &&
+            key !== null &&
+            "derive" in key &&
+            typeof key.derive === "function"));
+}

package/dist/esm/js/fixedScriptWallet/BitGoPsbt.d.ts

@@ -371,16 +371,63 @@ export declare class BitGoPsbt {
      */
     verifySignature(inputIndex: number, key: BIP32Arg | ECPairArg): boolean;
     /**
-     * Sign a single input with a private key
+     * Sign all matching inputs with a private key.
+     *
+     * This method signs all inputs that match the provided key in a single efficient pass.
+     * It accepts either:
+     * - An xpriv (BIP32Arg: base58 string, BIP32 instance, or WasmBIP32) for wallet inputs
+     * - A raw privkey (ECPairArg: Buffer, ECPair instance, or WasmECPair) for replay protection inputs
+     *
+     * **Note:** MuSig2 inputs are skipped by this method when using xpriv because they require
+     * FirstRound state. After calling this method, sign MuSig2 inputs individually using
+     * `signInput()` after calling `generateMusig2Nonces()`.
+     *
+     * @param key - Either an xpriv (BIP32Arg) or a raw privkey (ECPairArg)
+     * @returns Array of input indices that were signed
+     * @throws Error if signing fails
+     *
+     * @example
+     * ```typescript
+     * // Sign all wallet inputs with user's xpriv
+     * const signedIndices = psbt.sign(userXpriv);
+     * console.log(`Signed inputs: ${signedIndices.join(", ")}`);
+     *
+     * // Sign all replay protection inputs with raw privkey
+     * const rpSignedIndices = psbt.sign(replayProtectionPrivkey);
+     * ```
+     */
+    sign(key: BIP32Arg | ECPairArg): number[];
+    /**
+     * Sign a single input with a private key.
+     *
+     * @deprecated Use `sign(key)` to sign all matching inputs (more efficient), or use
+     * `signInput(inputIndex, key)` for explicit single-input signing.
+     *
+     * **Note:** This method is NOT more efficient than `sign(key)` for non-MuSig2 inputs.
+     * The underlying miniscript library signs all inputs regardless. This overload exists
+     * for backward compatibility only.
+     *
+     * @param inputIndex - The index of the input to sign (0-based)
+     * @param key - Either an xpriv (BIP32Arg) or a raw privkey (ECPairArg)
+     * @throws Error if signing fails, or if generateMusig2Nonces() was not called first for MuSig2 inputs
+     */
+    sign(inputIndex: number, key: BIP32Arg | ECPairArg): void;
+    /**
+     * Sign a single input with a private key.
      *
      * This method signs a specific input using the provided key. It accepts either:
-     * - An xpriv (BIP32Arg: base58 string, BIP32 instance, or WasmBIP32) for wallet inputs - derives the key and signs
-     * - A raw privkey (ECPairArg: Buffer, ECPair instance, or WasmECPair) for replay protection inputs - signs directly
+     * - An xpriv (BIP32Arg: base58 string, BIP32 instance, or WasmBIP32) for wallet inputs
+     * - A raw privkey (ECPairArg: Buffer, ECPair instance, or WasmECPair) for replay protection inputs
      *
-     * This method automatically detects and handles different input types:
-     * - For regular inputs: uses standard PSBT signing
-     * - For MuSig2 inputs: uses the FirstRound state stored by generateMusig2Nonces()
-     * - For replay protection inputs: signs with legacy P2SH sighash
+     * **Important:** This method is NOT faster than `sign(key)` for non-MuSig2 inputs.
+     * The underlying miniscript library signs all inputs regardless. This method uses a
+     * save/restore pattern to ensure only the target input receives the signature.
+     *
+     * Use this method only when you need precise control over which inputs are signed,
+     * for example:
+     * - Signing MuSig2 inputs (after calling generateMusig2Nonces())
+     * - Mixed transactions where different inputs need different keys
+     * - Testing or debugging signing behavior
      *
      * @param inputIndex - The index of the input to sign (0-based)
      * @param key - Either an xpriv (BIP32Arg) or a raw privkey (ECPairArg)
@@ -388,28 +435,15 @@ export declare class BitGoPsbt {
      *
      * @example
      * ```typescript
-     * // Parse transaction to identify input types
-     * const parsed = psbt.parseTransactionWithWalletKeys(walletKeys, replayProtection);
-     *
-     * // Sign regular wallet inputs with xpriv
-     * for (let i = 0; i < parsed.inputs.length; i++) {
-     *   const input = parsed.inputs[i];
-     *   if (input.scriptId !== null && input.scriptType !== "p2shP2pk") {
-     *     psbt.sign(i, userXpriv);
-     *   }
-     * }
+     * // Sign a specific MuSig2 input after nonce generation
+     * psbt.generateMusig2Nonces(userXpriv);
+     * psbt.signInput(musig2InputIndex, userXpriv);
      *
-     * // Sign replay protection inputs with raw privkey
-     * const userPrivkey = bip32.fromBase58(userXpriv).privateKey!;
-     * for (let i = 0; i < parsed.inputs.length; i++) {
-     *   const input = parsed.inputs[i];
-     *   if (input.scriptType === "p2shP2pk") {
-     *     psbt.sign(i, userPrivkey);
-     *   }
-     * }
+     * // Sign a specific replay protection input
+     * psbt.signInput(rpInputIndex, replayProtectionPrivkey);
      * ```
      */
-    sign(inputIndex: number, key: BIP32Arg | ECPairArg): void;
+    signInput(inputIndex: number, key: BIP32Arg | ECPairArg): void;
     /**
      * @deprecated - use verifySignature with the replay protection key instead
      *