@bitgo/wasm-utxo 1.27.0 → 1.29.0

package/dist/cjs/js/wasm/wasm_utxo_bg.wasm.d.ts

@@ -2,16 +2,60 @@
 /* eslint-disable */
 export const memory: WebAssembly.Memory;
 export const __wbg_addressnamespace_free: (a: number, b: number) => void;
+export const __wbg_inscriptionsnamespace_free: (a: number, b: number) => void;
+export const __wbg_utxolibcompatnamespace_free: (a: number, b: number) => void;
+export const __wbg_wasmtransaction_free: (a: number, b: number) => void;
+export const __wbg_wasmzcashtransaction_free: (a: number, b: number) => void;
+export const __wbg_wrapdescriptor_free: (a: number, b: number) => void;
+export const __wbg_wrapminiscript_free: (a: number, b: number) => void;
+export const __wbg_wrappsbt_free: (a: number, b: number) => void;
+export const addressnamespace_from_output_script_with_coin: (a: number, b: number, c: number, d: number, e: number, f: number, g: number) => void;
+export const addressnamespace_to_output_script_with_coin: (a: number, b: number, c: number, d: number, e: number) => void;
+export const inscriptionsnamespace_create_inscription_reveal_data: (a: number, b: number, c: number, d: number, e: number, f: number, g: number) => void;
+export const inscriptionsnamespace_sign_reveal_transaction: (a: number, b: number, c: number, d: number, e: number, f: number, g: number, h: number, i: number, j: bigint) => void;
+export const utxolibcompatnamespace_from_output_script: (a: number, b: number, c: number, d: number, e: number, f: number) => void;
+export const utxolibcompatnamespace_to_output_script: (a: number, b: number, c: number, d: number, e: number, f: number) => void;
+export const wasmtransaction_from_bytes: (a: number, b: number, c: number) => void;
+export const wasmtransaction_get_vsize: (a: number) => number;
+export const wasmtransaction_to_bytes: (a: number, b: number) => void;
+export const wasmzcashtransaction_from_bytes: (a: number, b: number, c: number) => void;
+export const wasmzcashtransaction_to_bytes: (a: number, b: number) => void;
+export const wrapdescriptor_atDerivationIndex: (a: number, b: number, c: number) => void;
+export const wrapdescriptor_descType: (a: number, b: number) => void;
+export const wrapdescriptor_encode: (a: number, b: number) => void;
+export const wrapdescriptor_fromString: (a: number, b: number, c: number, d: number, e: number) => void;
+export const wrapdescriptor_fromStringDetectType: (a: number, b: number, c: number) => void;
+export const wrapdescriptor_hasWildcard: (a: number) => number;
+export const wrapdescriptor_maxWeightToSatisfy: (a: number, b: number) => void;
+export const wrapdescriptor_node: (a: number, b: number) => void;
+export const wrapdescriptor_scriptPubkey: (a: number, b: number) => void;
+export const wrapdescriptor_toAsmString: (a: number, b: number) => void;
+export const wrapdescriptor_toString: (a: number, b: number) => void;
+export const wrapminiscript_encode: (a: number, b: number) => void;
+export const wrapminiscript_fromBitcoinScript: (a: number, b: number, c: number, d: number, e: number) => void;
+export const wrapminiscript_fromString: (a: number, b: number, c: number, d: number, e: number) => void;
+export const wrapminiscript_node: (a: number, b: number) => void;
+export const wrapminiscript_toAsmString: (a: number, b: number) => void;
+export const wrapminiscript_toString: (a: number, b: number) => void;
+export const wrappsbt_addInput: (a: number, b: number, c: number, d: number, e: number, f: bigint, g: number, h: number, i: number) => void;
+export const wrappsbt_addOutput: (a: number, b: number, c: number, d: bigint) => number;
+export const wrappsbt_clone: (a: number) => number;
+export const wrappsbt_deserialize: (a: number, b: number, c: number) => void;
+export const wrappsbt_finalize: (a: number, b: number) => void;
+export const wrappsbt_getUnsignedTx: (a: number, b: number) => void;
+export const wrappsbt_new: (a: number, b: number) => number;
+export const wrappsbt_serialize: (a: number, b: number) => void;
+export const wrappsbt_signWithPrv: (a: number, b: number, c: number, d: number) => void;
+export const wrappsbt_signWithXprv: (a: number, b: number, c: number, d: number) => void;
+export const wrappsbt_updateInputWithDescriptor: (a: number, b: number, c: number, d: number) => void;
+export const wrappsbt_updateOutputWithDescriptor: (a: number, b: number, c: number, d: number) => void;
 export const __wbg_bip322namespace_free: (a: number, b: number) => void;
 export const __wbg_bitgopsbt_free: (a: number, b: number) => void;
 export const __wbg_fixedscriptwalletnamespace_free: (a: number, b: number) => void;
-export const __wbg_utxolibcompatnamespace_free: (a: number, b: number) => void;
 export const __wbg_wasmbip32_free: (a: number, b: number) => void;
 export const __wbg_wasmdimensions_free: (a: number, b: number) => void;
 export const __wbg_wasmecpair_free: (a: number, b: number) => void;
-export const __wbg_wasmreplayprotection_free: (a: number, b: number) => void;
-export const addressnamespace_from_output_script_with_coin: (a: number, b: number, c: number, d: number, e: number, f: number, g: number) => void;
-export const addressnamespace_to_output_script_with_coin: (a: number, b: number, c: number, d: number, e: number) => void;
+export const __wbg_wasmrootwalletkeys_free: (a: number, b: number) => void;
 export const bip322namespace_add_bip322_input: (a: number, b: number, c: number, d: number, e: number, f: number, g: number, h: number, i: number, j: number, k: number, l: number, m: number) => void;
 export const bip322namespace_verify_bip322_psbt_input: (a: number, b: number, c: number, d: number, e: number, f: number, g: number, h: number, i: number, j: number) => void;
 export const bip322namespace_verify_bip322_psbt_input_with_pubkeys: (a: number, b: number, c: number, d: number, e: number, f: number, g: number, h: number, i: number, j: number, k: number, l: number) => void;
@@ -33,11 +77,18 @@ export const bitgopsbt_extract_transaction: (a: number, b: number) => void;
 export const bitgopsbt_finalize_all_inputs: (a: number, b: number) => void;
 export const bitgopsbt_from_bytes: (a: number, b: number, c: number, d: number, e: number) => void;
 export const bitgopsbt_generate_musig2_nonces: (a: number, b: number, c: number, d: number, e: number) => void;
+export const bitgopsbt_is_musig2_input: (a: number, b: number) => number;
 export const bitgopsbt_lock_time: (a: number) => number;
 export const bitgopsbt_network: (a: number, b: number) => void;
 export const bitgopsbt_parse_outputs_with_wallet_keys: (a: number, b: number, c: number, d: number, e: number) => void;
 export const bitgopsbt_parse_transaction_with_wallet_keys: (a: number, b: number, c: number, d: number, e: number, f: number) => void;
 export const bitgopsbt_serialize: (a: number, b: number) => void;
+export const bitgopsbt_sign_all_musig2_inputs: (a: number, b: number, c: number) => void;
+export const bitgopsbt_sign_all_replay_protection_inputs: (a: number, b: number, c: number) => void;
+export const bitgopsbt_sign_all_wallet_inputs: (a: number, b: number, c: number) => void;
+export const bitgopsbt_sign_musig2_input: (a: number, b: number, c: number, d: number) => void;
+export const bitgopsbt_sign_single_input_with_privkey: (a: number, b: number, c: number, d: number) => void;
+export const bitgopsbt_sign_single_input_with_xpriv: (a: number, b: number, c: number, d: number) => void;
 export const bitgopsbt_sign_with_privkey: (a: number, b: number, c: number, d: number) => void;
 export const bitgopsbt_sign_with_xpriv: (a: number, b: number, c: number, d: number) => void;
 export const bitgopsbt_unsigned_txid: (a: number, b: number) => void;
@@ -49,11 +100,10 @@ export const bitgopsbt_version_group_id: (a: number) => number;
 export const fixedscriptwalletnamespace_address: (a: number, b: number, c: number, d: number, e: number, f: number, g: number) => void;
 export const fixedscriptwalletnamespace_address_with_network_str: (a: number, b: number, c: number, d: number, e: number, f: number, g: number, h: number) => void;
 export const fixedscriptwalletnamespace_chain_code_table: () => number;
+export const fixedscriptwalletnamespace_create_op_return_script: (a: number, b: number, c: number) => void;
 export const fixedscriptwalletnamespace_output_script: (a: number, b: number, c: number, d: number, e: number) => void;
 export const fixedscriptwalletnamespace_output_script_with_network_str: (a: number, b: number, c: number, d: number, e: number, f: number) => void;
 export const fixedscriptwalletnamespace_supports_script_type: (a: number, b: number, c: number, d: number, e: number) => void;
-export const utxolibcompatnamespace_from_output_script: (a: number, b: number, c: number, d: number, e: number, f: number) => void;
-export const utxolibcompatnamespace_to_output_script: (a: number, b: number, c: number, d: number, e: number, f: number) => void;
 export const wasmbip32_chain_code: (a: number) => number;
 export const wasmbip32_depth: (a: number) => number;
 export const wasmbip32_derive: (a: number, b: number, c: number) => void;
@@ -99,61 +149,22 @@ export const wasmecpair_public_key: (a: number) => number;
 export const wasmecpair_to_wif: (a: number, b: number) => void;
 export const wasmecpair_to_wif_mainnet: (a: number, b: number) => void;
 export const wasmecpair_to_wif_testnet: (a: number, b: number) => void;
-export const wasmreplayprotection_from_addresses: (a: number, b: number, c: number, d: number, e: number) => void;
-export const wasmreplayprotection_from_output_scripts: (a: number, b: number) => number;
-export const wasmreplayprotection_from_public_keys: (a: number, b: number, c: number) => void;
-export const wasmbip32_from_bip32_properties: (a: number, b: number) => void;
-export const __wbg_inscriptionsnamespace_free: (a: number, b: number) => void;
-export const __wbg_wasmdashtransaction_free: (a: number, b: number) => void;
-export const __wbg_wasmrootwalletkeys_free: (a: number, b: number) => void;
-export const __wbg_wasmtransaction_free: (a: number, b: number) => void;
-export const __wbg_wasmzcashtransaction_free: (a: number, b: number) => void;
-export const __wbg_wrapdescriptor_free: (a: number, b: number) => void;
-export const __wbg_wrapminiscript_free: (a: number, b: number) => void;
-export const __wbg_wrappsbt_free: (a: number, b: number) => void;
-export const inscriptionsnamespace_create_inscription_reveal_data: (a: number, b: number, c: number, d: number, e: number, f: number, g: number) => void;
-export const inscriptionsnamespace_sign_reveal_transaction: (a: number, b: number, c: number, d: number, e: number, f: number, g: number, h: number, i: number, j: bigint) => void;
-export const wasmdashtransaction_from_bytes: (a: number, b: number, c: number) => void;
-export const wasmdashtransaction_to_bytes: (a: number, b: number) => void;
 export const wasmrootwalletkeys_backup_key: (a: number) => number;
 export const wasmrootwalletkeys_bitgo_key: (a: number) => number;
 export const wasmrootwalletkeys_new: (a: number, b: number, c: number, d: number) => void;
 export const wasmrootwalletkeys_user_key: (a: number) => number;
 export const wasmrootwalletkeys_with_derivation_prefixes: (a: number, b: number, c: number, d: number, e: number, f: number, g: number, h: number, i: number, j: number) => void;
-export const wasmtransaction_from_bytes: (a: number, b: number, c: number) => void;
-export const wasmtransaction_get_vsize: (a: number) => number;
-export const wasmtransaction_to_bytes: (a: number, b: number) => void;
-export const wasmzcashtransaction_from_bytes: (a: number, b: number, c: number) => void;
-export const wasmzcashtransaction_to_bytes: (a: number, b: number) => void;
-export const wrapdescriptor_atDerivationIndex: (a: number, b: number, c: number) => void;
-export const wrapdescriptor_descType: (a: number, b: number) => void;
-export const wrapdescriptor_encode: (a: number, b: number) => void;
-export const wrapdescriptor_fromString: (a: number, b: number, c: number, d: number, e: number) => void;
-export const wrapdescriptor_fromStringDetectType: (a: number, b: number, c: number) => void;
-export const wrapdescriptor_hasWildcard: (a: number) => number;
-export const wrapdescriptor_maxWeightToSatisfy: (a: number, b: number) => void;
-export const wrapdescriptor_node: (a: number, b: number) => void;
-export const wrapdescriptor_scriptPubkey: (a: number, b: number) => void;
-export const wrapdescriptor_toAsmString: (a: number, b: number) => void;
-export const wrapdescriptor_toString: (a: number, b: number) => void;
-export const wrapminiscript_encode: (a: number, b: number) => void;
-export const wrapminiscript_fromBitcoinScript: (a: number, b: number, c: number, d: number, e: number) => void;
-export const wrapminiscript_fromString: (a: number, b: number, c: number, d: number, e: number) => void;
-export const wrapminiscript_node: (a: number, b: number) => void;
-export const wrapminiscript_toAsmString: (a: number, b: number) => void;
-export const wrapminiscript_toString: (a: number, b: number) => void;
-export const wrappsbt_addInput: (a: number, b: number, c: number, d: number, e: number, f: bigint, g: number, h: number, i: number) => void;
-export const wrappsbt_addOutput: (a: number, b: number, c: number, d: bigint) => number;
-export const wrappsbt_clone: (a: number) => number;
-export const wrappsbt_deserialize: (a: number, b: number, c: number) => void;
-export const wrappsbt_finalize: (a: number, b: number) => void;
-export const wrappsbt_getUnsignedTx: (a: number, b: number) => void;
-export const wrappsbt_new: (a: number, b: number) => number;
-export const wrappsbt_serialize: (a: number, b: number) => void;
-export const wrappsbt_signWithPrv: (a: number, b: number, c: number, d: number) => void;
-export const wrappsbt_signWithXprv: (a: number, b: number, c: number, d: number) => void;
-export const wrappsbt_updateInputWithDescriptor: (a: number, b: number, c: number, d: number) => void;
-export const wrappsbt_updateOutputWithDescriptor: (a: number, b: number, c: number, d: number) => void;
+export const wasmbip32_from_bip32_properties: (a: number, b: number) => void;
+export const bitgopsbt_sign_replay_protection_inputs: (a: number, b: number, c: number) => void;
+export const bitgopsbt_sign_all_with_xpriv: (a: number, b: number, c: number) => void;
+export const bitgopsbt_sign_wallet_input: (a: number, b: number, c: number, d: number) => void;
+export const __wbg_wasmdashtransaction_free: (a: number, b: number) => void;
+export const __wbg_wasmreplayprotection_free: (a: number, b: number) => void;
+export const wasmdashtransaction_from_bytes: (a: number, b: number, c: number) => void;
+export const wasmdashtransaction_to_bytes: (a: number, b: number) => void;
+export const wasmreplayprotection_from_addresses: (a: number, b: number, c: number, d: number, e: number) => void;
+export const wasmreplayprotection_from_output_scripts: (a: number, b: number) => number;
+export const wasmreplayprotection_from_public_keys: (a: number, b: number, c: number) => void;
 export const rustsecp256k1_v0_10_0_context_create: (a: number) => number;
 export const rustsecp256k1_v0_10_0_context_destroy: (a: number) => void;
 export const rustsecp256k1_v0_10_0_default_error_callback_fn: (a: number, b: number) => void;

package/dist/esm/js/bip32.d.ts

@@ -138,3 +138,10 @@ export declare class BIP32 implements BIP32Interface {
      */
     get wasm(): WasmBIP32;
 }
+/**
+ * Type guard to check if a value is a BIP32Arg
+ *
+ * @param key - The value to check
+ * @returns true if the value is a BIP32Arg (string, BIP32, WasmBIP32, or BIP32Interface)
+ */
+export declare function isBIP32Arg(key: unknown): key is BIP32Arg;

package/dist/esm/js/bip32.js

@@ -171,3 +171,18 @@ export class BIP32 {
         return this._wasm;
     }
 }
+/**
+ * Type guard to check if a value is a BIP32Arg
+ *
+ * @param key - The value to check
+ * @returns true if the value is a BIP32Arg (string, BIP32, WasmBIP32, or BIP32Interface)
+ */
+export function isBIP32Arg(key) {
+    return (typeof key === "string" ||
+        key instanceof BIP32 ||
+        key instanceof WasmBIP32 ||
+        (typeof key === "object" &&
+            key !== null &&
+            "derive" in key &&
+            typeof key.derive === "function"));
+}

package/dist/esm/js/fixedScriptWallet/BitGoPsbt.d.ts

@@ -371,16 +371,63 @@ export declare class BitGoPsbt {
      */
     verifySignature(inputIndex: number, key: BIP32Arg | ECPairArg): boolean;
     /**
-     * Sign a single input with a private key
+     * Sign all matching inputs with a private key.
+     *
+     * This method signs all inputs that match the provided key in a single efficient pass.
+     * It accepts either:
+     * - An xpriv (BIP32Arg: base58 string, BIP32 instance, or WasmBIP32) for wallet inputs
+     * - A raw privkey (ECPairArg: Buffer, ECPair instance, or WasmECPair) for replay protection inputs
+     *
+     * **Note:** MuSig2 inputs are skipped by this method when using xpriv because they require
+     * FirstRound state. After calling this method, sign MuSig2 inputs individually using
+     * `signInput()` after calling `generateMusig2Nonces()`.
+     *
+     * @param key - Either an xpriv (BIP32Arg) or a raw privkey (ECPairArg)
+     * @returns Array of input indices that were signed
+     * @throws Error if signing fails
+     *
+     * @example
+     * ```typescript
+     * // Sign all wallet inputs with user's xpriv
+     * const signedIndices = psbt.sign(userXpriv);
+     * console.log(`Signed inputs: ${signedIndices.join(", ")}`);
+     *
+     * // Sign all replay protection inputs with raw privkey
+     * const rpSignedIndices = psbt.sign(replayProtectionPrivkey);
+     * ```
+     */
+    sign(key: BIP32Arg | ECPairArg): number[];
+    /**
+     * Sign a single input with a private key.
+     *
+     * @deprecated Use `sign(key)` to sign all matching inputs (more efficient), or use
+     * `signInput(inputIndex, key)` for explicit single-input signing.
+     *
+     * **Note:** This method is NOT more efficient than `sign(key)` for non-MuSig2 inputs.
+     * The underlying miniscript library signs all inputs regardless. This overload exists
+     * for backward compatibility only.
+     *
+     * @param inputIndex - The index of the input to sign (0-based)
+     * @param key - Either an xpriv (BIP32Arg) or a raw privkey (ECPairArg)
+     * @throws Error if signing fails, or if generateMusig2Nonces() was not called first for MuSig2 inputs
+     */
+    sign(inputIndex: number, key: BIP32Arg | ECPairArg): void;
+    /**
+     * Sign a single input with a private key.
      *
      * This method signs a specific input using the provided key. It accepts either:
-     * - An xpriv (BIP32Arg: base58 string, BIP32 instance, or WasmBIP32) for wallet inputs - derives the key and signs
-     * - A raw privkey (ECPairArg: Buffer, ECPair instance, or WasmECPair) for replay protection inputs - signs directly
+     * - An xpriv (BIP32Arg: base58 string, BIP32 instance, or WasmBIP32) for wallet inputs
+     * - A raw privkey (ECPairArg: Buffer, ECPair instance, or WasmECPair) for replay protection inputs
      *
-     * This method automatically detects and handles different input types:
-     * - For regular inputs: uses standard PSBT signing
-     * - For MuSig2 inputs: uses the FirstRound state stored by generateMusig2Nonces()
-     * - For replay protection inputs: signs with legacy P2SH sighash
+     * **Important:** This method is NOT faster than `sign(key)` for non-MuSig2 inputs.
+     * The underlying miniscript library signs all inputs regardless. This method uses a
+     * save/restore pattern to ensure only the target input receives the signature.
+     *
+     * Use this method only when you need precise control over which inputs are signed,
+     * for example:
+     * - Signing MuSig2 inputs (after calling generateMusig2Nonces())
+     * - Mixed transactions where different inputs need different keys
+     * - Testing or debugging signing behavior
      *
      * @param inputIndex - The index of the input to sign (0-based)
      * @param key - Either an xpriv (BIP32Arg) or a raw privkey (ECPairArg)
@@ -388,28 +435,15 @@ export declare class BitGoPsbt {
      *
      * @example
      * ```typescript
-     * // Parse transaction to identify input types
-     * const parsed = psbt.parseTransactionWithWalletKeys(walletKeys, replayProtection);
-     *
-     * // Sign regular wallet inputs with xpriv
-     * for (let i = 0; i < parsed.inputs.length; i++) {
-     *   const input = parsed.inputs[i];
-     *   if (input.scriptId !== null && input.scriptType !== "p2shP2pk") {
-     *     psbt.sign(i, userXpriv);
-     *   }
-     * }
+     * // Sign a specific MuSig2 input after nonce generation
+     * psbt.generateMusig2Nonces(userXpriv);
+     * psbt.signInput(musig2InputIndex, userXpriv);
      *
-     * // Sign replay protection inputs with raw privkey
-     * const userPrivkey = bip32.fromBase58(userXpriv).privateKey!;
-     * for (let i = 0; i < parsed.inputs.length; i++) {
-     *   const input = parsed.inputs[i];
-     *   if (input.scriptType === "p2shP2pk") {
-     *     psbt.sign(i, userPrivkey);
-     *   }
-     * }
+     * // Sign a specific replay protection input
+     * psbt.signInput(rpInputIndex, replayProtectionPrivkey);
      * ```
      */
-    sign(inputIndex: number, key: BIP32Arg | ECPairArg): void;
+    signInput(inputIndex: number, key: BIP32Arg | ECPairArg): void;
     /**
      * @deprecated - use verifySignature with the replay protection key instead
      *

package/dist/esm/js/fixedScriptWallet/BitGoPsbt.js

@@ -1,7 +1,7 @@
 import { BitGoPsbt as WasmBitGoPsbt } from "../wasm/wasm_utxo.js";
 import { RootWalletKeys } from "./RootWalletKeys.js";
 import { ReplayProtection } from "./ReplayProtection.js";
-import { BIP32 } from "../bip32.js";
+import { BIP32, isBIP32Arg } from "../bip32.js";
 import { ECPair } from "../ecpair.js";
 export class BitGoPsbt {
     _wasm;
@@ -303,17 +303,49 @@ export class BitGoPsbt {
         const wasmECPair = ECPair.from(key).wasm;
         return this._wasm.verify_signature_with_pub(inputIndex, wasmECPair);
     }
+    sign(inputIndexOrKey, key) {
+        // Detect which overload was called
+        if (typeof inputIndexOrKey === "number") {
+            // Called as sign(inputIndex, key) - deprecated single-input signing
+            if (key === undefined) {
+                throw new Error("Key is required when signing a single input");
+            }
+            this.signInput(inputIndexOrKey, key);
+            return;
+        }
+        // Called as sign(key) - sign all matching inputs
+        const keyArg = inputIndexOrKey;
+        if (isBIP32Arg(keyArg)) {
+            // It's a BIP32Arg - sign all wallet inputs (ECDSA + MuSig2)
+            const wasmKey = BIP32.from(keyArg);
+            // Sign all non-MuSig2 wallet inputs
+            const walletSigned = this._wasm.sign_all_wallet_inputs(wasmKey.wasm);
+            // Sign all MuSig2 keypath inputs (more efficient - reuses SighashCache)
+            const musig2Signed = this._wasm.sign_all_musig2_inputs(wasmKey.wasm);
+            return [...walletSigned, ...musig2Signed];
+        }
+        else {
+            // It's an ECPairArg - sign all replay protection inputs
+            const wasmKey = ECPair.from(keyArg);
+            return this._wasm.sign_replay_protection_inputs(wasmKey.wasm);
+        }
+    }
     /**
-     * Sign a single input with a private key
+     * Sign a single input with a private key.
      *
      * This method signs a specific input using the provided key. It accepts either:
-     * - An xpriv (BIP32Arg: base58 string, BIP32 instance, or WasmBIP32) for wallet inputs - derives the key and signs
-     * - A raw privkey (ECPairArg: Buffer, ECPair instance, or WasmECPair) for replay protection inputs - signs directly
+     * - An xpriv (BIP32Arg: base58 string, BIP32 instance, or WasmBIP32) for wallet inputs
+     * - A raw privkey (ECPairArg: Buffer, ECPair instance, or WasmECPair) for replay protection inputs
+     *
+     * **Important:** This method is NOT faster than `sign(key)` for non-MuSig2 inputs.
+     * The underlying miniscript library signs all inputs regardless. This method uses a
+     * save/restore pattern to ensure only the target input receives the signature.
      *
-     * This method automatically detects and handles different input types:
-     * - For regular inputs: uses standard PSBT signing
-     * - For MuSig2 inputs: uses the FirstRound state stored by generateMusig2Nonces()
-     * - For replay protection inputs: signs with legacy P2SH sighash
+     * Use this method only when you need precise control over which inputs are signed,
+     * for example:
+     * - Signing MuSig2 inputs (after calling generateMusig2Nonces())
+     * - Mixed transactions where different inputs need different keys
+     * - Testing or debugging signing behavior
      *
      * @param inputIndex - The index of the input to sign (0-based)
      * @param key - Either an xpriv (BIP32Arg) or a raw privkey (ECPairArg)
@@ -321,42 +353,30 @@ export class BitGoPsbt {
      *
      * @example
      * ```typescript
-     * // Parse transaction to identify input types
-     * const parsed = psbt.parseTransactionWithWalletKeys(walletKeys, replayProtection);
-     *
-     * // Sign regular wallet inputs with xpriv
-     * for (let i = 0; i < parsed.inputs.length; i++) {
-     *   const input = parsed.inputs[i];
-     *   if (input.scriptId !== null && input.scriptType !== "p2shP2pk") {
-     *     psbt.sign(i, userXpriv);
-     *   }
-     * }
+     * // Sign a specific MuSig2 input after nonce generation
+     * psbt.generateMusig2Nonces(userXpriv);
+     * psbt.signInput(musig2InputIndex, userXpriv);
      *
-     * // Sign replay protection inputs with raw privkey
-     * const userPrivkey = bip32.fromBase58(userXpriv).privateKey!;
-     * for (let i = 0; i < parsed.inputs.length; i++) {
-     *   const input = parsed.inputs[i];
-     *   if (input.scriptType === "p2shP2pk") {
-     *     psbt.sign(i, userPrivkey);
-     *   }
-     * }
+     * // Sign a specific replay protection input
+     * psbt.signInput(rpInputIndex, replayProtectionPrivkey);
      * ```
      */
-    sign(inputIndex, key) {
-        // Detect key type
-        // If string or has 'derive' method → BIP32Arg
-        // Otherwise → ECPairArg
-        if (typeof key === "string" ||
-            (typeof key === "object" &&
-                key !== null &&
-                "derive" in key &&
-                typeof key.derive === "function")) {
+    signInput(inputIndex, key) {
+        if (isBIP32Arg(key)) {
             // It's a BIP32Arg
             const wasmKey = BIP32.from(key);
-            this._wasm.sign_with_xpriv(inputIndex, wasmKey.wasm);
+            // Route to the appropriate method based on input type
+            if (this._wasm.is_musig2_input(inputIndex)) {
+                // MuSig2 keypath: true single-input signing (efficient)
+                this._wasm.sign_musig2_input(inputIndex, wasmKey.wasm);
+            }
+            else {
+                // ECDSA/Schnorr script path: save/restore pattern (not faster than bulk)
+                this._wasm.sign_wallet_input(inputIndex, wasmKey.wasm);
+            }
         }
         else {
-            // It's an ECPairArg
+            // It's an ECPairArg - for replay protection inputs
             const wasmKey = ECPair.from(key);
             this._wasm.sign_with_privkey(inputIndex, wasmKey.wasm);
         }

package/dist/esm/js/fixedScriptWallet/chains.d.ts

@@ -5,6 +5,11 @@ export declare const chainCodes: readonly [0, 1, 10, 11, 20, 21, 30, 31, 40, 41]
 export type ChainCode = (typeof chainCodes)[number];
 /** Whether a chain is for receiving (external) or change (internal) addresses */
 export type Scope = "internal" | "external";
+/**
+ * Assert that a number is a valid chain code.
+ * @throws Error if the number is not a valid chain code
+ */
+export declare function assertChainCode(n: number): ChainCode;
 /**
  * ChainCode namespace with utility functions for working with chain codes.
  */

package/dist/esm/js/fixedScriptWallet/chains.js

@@ -11,10 +11,13 @@ export const chainCodes = [0, 1, 10, 11, 20, 21, 30, 31, 40, 41];
 const chainCodeSet = new Set(chainCodes);
 const chainToMeta = new Map();
 const scriptTypeToChain = new Map();
-// Initialize from WASM (called once at load time)
-function assertChainCode(n) {
+/**
+ * Assert that a number is a valid chain code.
+ * @throws Error if the number is not a valid chain code
+ */
+export function assertChainCode(n) {
     if (!chainCodeSet.has(n)) {
-        throw new Error(`Invalid chain code from WASM: ${n}`);
+        throw new Error(`Invalid chain code: ${n}`);
     }
     return n;
 }

package/dist/esm/js/fixedScriptWallet/index.d.ts

@@ -3,8 +3,8 @@ export { RootWalletKeys, type WalletKeysArg, type IWalletKeys } from "./RootWall
 export { ReplayProtection, type ReplayProtectionArg } from "./ReplayProtection.js";
 export { outputScript, address } from "./address.js";
 export { Dimensions } from "./Dimensions.js";
-export { type OutputScriptType, type InputScriptType, type ScriptType } from "./scriptType.js";
-export { ChainCode, chainCodes, type Scope } from "./chains.js";
+export { outputScriptTypes, inputScriptTypes, type OutputScriptType, type InputScriptType, type ScriptType, } from "./scriptType.js";
+export { ChainCode, chainCodes, assertChainCode, type Scope } from "./chains.js";
 export { BitGoPsbt, type NetworkName, type ScriptId, type ParsedInput, type ParsedOutput, type ParsedTransaction, type SignPath, type CreateEmptyOptions, type AddInputOptions, type AddOutputOptions, type AddWalletInputOptions, type AddWalletOutputOptions, } from "./BitGoPsbt.js";
 export { ZcashBitGoPsbt, type ZcashNetworkName, type CreateEmptyZcashOptions, } from "./ZcashBitGoPsbt.js";
 import type { ScriptType } from "./scriptType.js";
@@ -34,3 +34,20 @@ import type { ScriptType } from "./scriptType.js";
  * ```
  */
 export declare function supportsScriptType(coin: CoinName, scriptType: ScriptType): boolean;
+/**
+ * Create an OP_RETURN output script with optional data
+ *
+ * @param data - Optional data bytes to include in the OP_RETURN script
+ * @returns The OP_RETURN script as a Uint8Array
+ *
+ * @example
+ * ```typescript
+ * // Empty OP_RETURN
+ * const script = createOpReturnScript();
+ *
+ * // OP_RETURN with data
+ * const data = new Uint8Array([1, 2, 3, 4]);
+ * const script = createOpReturnScript(data);
+ * ```
+ */
+export declare function createOpReturnScript(data?: Uint8Array): Uint8Array;

package/dist/esm/js/fixedScriptWallet/index.js

@@ -3,7 +3,8 @@ export { RootWalletKeys } from "./RootWalletKeys.js";
 export { ReplayProtection } from "./ReplayProtection.js";
 export { outputScript, address } from "./address.js";
 export { Dimensions } from "./Dimensions.js";
-export { ChainCode, chainCodes } from "./chains.js";
+export { outputScriptTypes, inputScriptTypes, } from "./scriptType.js";
+export { ChainCode, chainCodes, assertChainCode } from "./chains.js";
 // Bitcoin-like PSBT (for all non-Zcash networks)
 export { BitGoPsbt, } from "./BitGoPsbt.js";
 // Zcash-specific PSBT subclass
@@ -36,3 +37,22 @@ export { ZcashBitGoPsbt, } from "./ZcashBitGoPsbt.js";
 export function supportsScriptType(coin, scriptType) {
     return FixedScriptWalletNamespace.supports_script_type(coin, scriptType);
 }
+/**
+ * Create an OP_RETURN output script with optional data
+ *
+ * @param data - Optional data bytes to include in the OP_RETURN script
+ * @returns The OP_RETURN script as a Uint8Array
+ *
+ * @example
+ * ```typescript
+ * // Empty OP_RETURN
+ * const script = createOpReturnScript();
+ *
+ * // OP_RETURN with data
+ * const data = new Uint8Array([1, 2, 3, 4]);
+ * const script = createOpReturnScript(data);
+ * ```
+ */
+export function createOpReturnScript(data) {
+    return FixedScriptWalletNamespace.create_op_return_script(data);
+}

package/dist/esm/js/fixedScriptWallet/scriptType.d.ts

@@ -1,16 +1,26 @@
 /**
- * Fixed-script wallet output script types (2-of-3 multisig)
+ * All output script types for fixed-script wallets (2-of-3 multisig)
  *
- * This type represents the abstract script type, independent of chain (external/internal).
+ * This represents the abstract script type, independent of chain (external/internal).
  * Use this for checking network support or when you need the script type without derivation info.
  */
-export type OutputScriptType = "p2sh" | "p2shP2wsh" | "p2wsh" | "p2tr" | "p2trLegacy" | "p2trMusig2";
+export declare const outputScriptTypes: readonly ["p2sh", "p2shP2wsh", "p2wsh", "p2trLegacy", "p2trMusig2"];
 /**
- * Input script types for fixed-script wallets
+ * Output script type for fixed-script wallets
+ *
+ * Note: "p2tr" is an alias for "p2trLegacy" for backward compatibility.
+ */
+export type OutputScriptType = (typeof outputScriptTypes)[number] | "p2tr";
+/**
+ * All input script types for fixed-script wallets
  *
  * These are more specific than output types and include single-sig and taproot variants.
  */
-export type InputScriptType = "p2shP2pk" | "p2sh" | "p2shP2wsh" | "p2wsh" | "p2trLegacy" | "p2trMusig2ScriptPath" | "p2trMusig2KeyPath";
+export declare const inputScriptTypes: readonly ["p2shP2pk", "p2sh", "p2shP2wsh", "p2wsh", "p2trLegacy", "p2trMusig2ScriptPath", "p2trMusig2KeyPath"];
+/**
+ * Input script type for fixed-script wallets
+ */
+export type InputScriptType = (typeof inputScriptTypes)[number];
 /**
  * Union of all script types that can be checked for network support
  */

package/dist/esm/js/fixedScriptWallet/scriptType.js

@@ -1 +1,27 @@
-export {};
+/**
+ * All output script types for fixed-script wallets (2-of-3 multisig)
+ *
+ * This represents the abstract script type, independent of chain (external/internal).
+ * Use this for checking network support or when you need the script type without derivation info.
+ */
+export const outputScriptTypes = [
+    "p2sh",
+    "p2shP2wsh",
+    "p2wsh",
+    "p2trLegacy",
+    "p2trMusig2",
+];
+/**
+ * All input script types for fixed-script wallets
+ *
+ * These are more specific than output types and include single-sig and taproot variants.
+ */
+export const inputScriptTypes = [
+    "p2shP2pk",
+    "p2sh",
+    "p2shP2wsh",
+    "p2wsh",
+    "p2trLegacy",
+    "p2trMusig2ScriptPath",
+    "p2trMusig2KeyPath",
+];