@bitgo/wasm-utxo 4.31.0 → 4.33.0

package/dist/cjs/js/wasm/wasm_utxo_bg.wasm.d.ts

@@ -2,39 +2,31 @@
 /* eslint-disable */
 export const memory: WebAssembly.Memory;
 export const __wbg_addressnamespace_free: (a: number, b: number) => void;
+export const __wbg_bip322namespace_free: (a: number, b: number) => void;
+export const __wbg_messagenamespace_free: (a: number, b: number) => void;
 export const __wbg_utxolibcompatnamespace_free: (a: number, b: number) => void;
-export const __wbg_wasmdimensions_free: (a: number, b: number) => void;
-export const __wbg_wasmutxonamespace_free: (a: number, b: number) => void;
-export const addressnamespace_from_output_script_with_coin: (a: number, b: number, c: number, d: number, e: number, f: number, g: number) => void;
-export const addressnamespace_to_output_script_with_coin: (a: number, b: number, c: number, d: number, e: number) => void;
-export const isInspectEnabled: () => number;
-export const parsePsbtRawToJson: (a: number, b: number, c: number, d: number, e: number) => void;
-export const utxolibcompatnamespace_from_output_script: (a: number, b: number, c: number, d: number, e: number, f: number) => void;
-export const utxolibcompatnamespace_to_output_script: (a: number, b: number, c: number, d: number, e: number, f: number) => void;
-export const wasmdimensions_empty: () => number;
-export const wasmdimensions_from_input: (a: number, b: number, c: number, d: number, e: number, f: number, g: number) => void;
-export const wasmdimensions_from_input_script_type: (a: number, b: number, c: number, d: number) => void;
-export const wasmdimensions_from_output_script_length: (a: number) => number;
-export const wasmdimensions_from_output_script_type: (a: number, b: number, c: number) => void;
-export const wasmdimensions_from_psbt: (a: number, b: number) => void;
-export const wasmdimensions_get_input_vsize: (a: number, b: number, c: number) => number;
-export const wasmdimensions_get_input_weight: (a: number, b: number, c: number) => number;
-export const wasmdimensions_get_output_vsize: (a: number) => number;
-export const wasmdimensions_get_output_weight: (a: number) => number;
-export const wasmdimensions_get_vsize: (a: number, b: number, c: number) => number;
-export const wasmdimensions_get_weight: (a: number, b: number, c: number) => number;
-export const wasmdimensions_has_segwit: (a: number) => number;
-export const wasmdimensions_plus: (a: number, b: number) => number;
-export const wasmdimensions_times: (a: number, b: number) => number;
-export const wasmutxonamespace_get_wasm_utxo_version: (a: number) => void;
-export const parsePsbtToJson: (a: number, b: number, c: number, d: number, e: number) => void;
-export const parseTxToJson: (a: number, b: number, c: number, d: number, e: number) => void;
 export const __wbg_wasmdashtransaction_free: (a: number, b: number) => void;
+export const __wbg_wasmecpair_free: (a: number, b: number) => void;
+export const __wbg_wasmreplayprotection_free: (a: number, b: number) => void;
 export const __wbg_wasmtransaction_free: (a: number, b: number) => void;
 export const __wbg_wasmzcashtransaction_free: (a: number, b: number) => void;
 export const __wbg_wrappsbt_free: (a: number, b: number) => void;
 export const __wbg_zcashunifiedaddress_free: (a: number, b: number) => void;
 export const __wbg_zcashv6transaction_free: (a: number, b: number) => void;
+export const addressnamespace_from_output_script_with_coin: (a: number, b: number, c: number, d: number, e: number, f: number, g: number) => void;
+export const addressnamespace_to_output_script_with_coin: (a: number, b: number, c: number, d: number, e: number) => void;
+export const bip322namespace_add_bip322_input: (a: number, b: number, c: number, d: number, e: number, f: number, g: number, h: number, i: number, j: number, k: number, l: number, m: number) => void;
+export const bip322namespace_get_bip322_message: (a: number, b: number, c: number) => void;
+export const bip322namespace_verify_bip322_psbt_input: (a: number, b: number, c: number, d: number, e: number, f: number, g: number, h: number, i: number, j: number) => void;
+export const bip322namespace_verify_bip322_psbt_input_with_pubkeys: (a: number, b: number, c: number, d: number, e: number, f: number, g: number, h: number, i: number, j: number, k: number, l: number) => void;
+export const bip322namespace_verify_bip322_tx_input: (a: number, b: number, c: number, d: number, e: number, f: number, g: number, h: number, i: number, j: number, k: number, l: number) => void;
+export const bip322namespace_verify_bip322_tx_input_with_pubkeys: (a: number, b: number, c: number, d: number, e: number, f: number, g: number, h: number, i: number, j: number, k: number, l: number) => void;
+export const isInspectEnabled: () => number;
+export const messagenamespace_sign_message: (a: number, b: number, c: number, d: number) => void;
+export const messagenamespace_verify_message: (a: number, b: number, c: number, d: number, e: number, f: number) => void;
+export const parsePsbtRawToJson: (a: number, b: number, c: number, d: number, e: number) => void;
+export const utxolibcompatnamespace_from_output_script: (a: number, b: number, c: number, d: number, e: number, f: number) => void;
+export const utxolibcompatnamespace_to_output_script: (a: number, b: number, c: number, d: number, e: number, f: number) => void;
 export const wasmdashtransaction_from_bytes: (a: number, b: number, c: number) => void;
 export const wasmdashtransaction_get_inputs: (a: number, b: number) => void;
 export const wasmdashtransaction_get_outputs: (a: number, b: number) => void;
@@ -45,6 +37,19 @@ export const wasmdashtransaction_lock_time: (a: number) => number;
 export const wasmdashtransaction_output_count: (a: number) => number;
 export const wasmdashtransaction_to_bytes: (a: number, b: number) => void;
 export const wasmdashtransaction_version: (a: number) => number;
+export const wasmecpair_from_private_key: (a: number, b: number, c: number) => void;
+export const wasmecpair_from_public_key: (a: number, b: number, c: number) => void;
+export const wasmecpair_from_wif: (a: number, b: number, c: number) => void;
+export const wasmecpair_from_wif_mainnet: (a: number, b: number, c: number) => void;
+export const wasmecpair_from_wif_testnet: (a: number, b: number, c: number) => void;
+export const wasmecpair_private_key: (a: number) => number;
+export const wasmecpair_public_key: (a: number) => number;
+export const wasmecpair_to_wif: (a: number, b: number) => void;
+export const wasmecpair_to_wif_mainnet: (a: number, b: number) => void;
+export const wasmecpair_to_wif_testnet: (a: number, b: number) => void;
+export const wasmreplayprotection_from_addresses: (a: number, b: number, c: number, d: number, e: number) => void;
+export const wasmreplayprotection_from_output_scripts: (a: number, b: number) => number;
+export const wasmreplayprotection_from_public_keys: (a: number, b: number, c: number) => void;
 export const wasmtransaction_add_input: (a: number, b: number, c: number, d: number, e: number, f: number) => void;
 export const wasmtransaction_add_input_at_index: (a: number, b: number, c: number, d: number, e: number, f: number, g: number) => void;
 export const wasmtransaction_add_output: (a: number, b: number, c: number, d: bigint) => number;
@@ -107,6 +112,7 @@ export const wrappsbt_update_output_with_descriptor: (a: number, b: number, c: n
 export const wrappsbt_validate_signature_at_input: (a: number, b: number, c: number, d: number, e: number) => void;
 export const wrappsbt_verify_signature_with_key: (a: number, b: number, c: number, d: number) => void;
 export const zcash_branch_id_for_height: (a: number, b: number, c: number, d: number) => void;
+export const zcash_ironwood_version_group_id: () => number;
 export const zcashunifiedaddress_contains: (a: number, b: number, c: number, d: number) => void;
 export const zcashunifiedaddress_orchardReceiver: (a: number, b: number) => void;
 export const zcashunifiedaddress_parse: (a: number, b: number, c: number, d: number, e: number) => void;
@@ -126,14 +132,18 @@ export const wasmtransaction_input_count: (a: number) => number;
 export const wasmtransaction_output_count: (a: number) => number;
 export const wasmzcashtransaction_input_count: (a: number) => number;
 export const wasmzcashtransaction_output_count: (a: number) => number;
+export const parsePsbtToJson: (a: number, b: number, c: number, d: number, e: number) => void;
+export const parseTxToJson: (a: number, b: number, c: number, d: number, e: number) => void;
 export const wasmtransaction_lock_time: (a: number) => number;
 export const wasmtransaction_version: (a: number) => number;
 export const wasmzcashtransaction_lock_time: (a: number) => number;
 export const wasmzcashtransaction_version: (a: number) => number;
 export const wrappsbt_lock_time: (a: number) => number;
 export const wrappsbt_version: (a: number) => number;
+export const __wbg_wasmutxonamespace_free: (a: number, b: number) => void;
 export const __wbg_wrapdescriptor_free: (a: number, b: number) => void;
 export const __wbg_wrapminiscript_free: (a: number, b: number) => void;
+export const wasmutxonamespace_get_wasm_utxo_version: (a: number) => void;
 export const wrapdescriptor_atDerivationIndex: (a: number, b: number, c: number) => void;
 export const wrapdescriptor_descType: (a: number, b: number) => void;
 export const wrapdescriptor_encode: (a: number, b: number) => void;
@@ -154,23 +164,16 @@ export const wrapminiscript_fromStringExt: (a: number, b: number, c: number, d:
 export const wrapminiscript_node: (a: number, b: number) => void;
 export const wrapminiscript_toAsmString: (a: number, b: number) => void;
 export const wrapminiscript_toString: (a: number, b: number) => void;
-export const __wbg_bip322namespace_free: (a: number, b: number) => void;
 export const __wbg_bitgopsbt_free: (a: number, b: number) => void;
 export const __wbg_fixedscriptwalletnamespace_free: (a: number, b: number) => void;
 export const __wbg_inscriptionsnamespace_free: (a: number, b: number) => void;
-export const __wbg_messagenamespace_free: (a: number, b: number) => void;
 export const __wbg_wasmbip32_free: (a: number, b: number) => void;
-export const __wbg_wasmecpair_free: (a: number, b: number) => void;
-export const __wbg_wasmreplayprotection_free: (a: number, b: number) => void;
+export const __wbg_wasmdimensions_free: (a: number, b: number) => void;
 export const __wbg_wasmrootwalletkeys_free: (a: number, b: number) => void;
-export const bip322namespace_add_bip322_input: (a: number, b: number, c: number, d: number, e: number, f: number, g: number, h: number, i: number, j: number, k: number, l: number, m: number) => void;
-export const bip322namespace_get_bip322_message: (a: number, b: number, c: number) => void;
-export const bip322namespace_verify_bip322_psbt_input: (a: number, b: number, c: number, d: number, e: number, f: number, g: number, h: number, i: number, j: number) => void;
-export const bip322namespace_verify_bip322_psbt_input_with_pubkeys: (a: number, b: number, c: number, d: number, e: number, f: number, g: number, h: number, i: number, j: number, k: number, l: number) => void;
-export const bip322namespace_verify_bip322_tx_input: (a: number, b: number, c: number, d: number, e: number, f: number, g: number, h: number, i: number, j: number, k: number, l: number) => void;
-export const bip322namespace_verify_bip322_tx_input_with_pubkeys: (a: number, b: number, c: number, d: number, e: number, f: number, g: number, h: number, i: number, j: number, k: number, l: number) => void;
 export const bitgopsbt_add_input: (a: number, b: number, c: number, d: number, e: number, f: bigint, g: number, h: number, i: number, j: number, k: number) => void;
 export const bitgopsbt_add_input_at_index: (a: number, b: number, c: number, d: number, e: number, f: number, g: bigint, h: number, i: number, j: number, k: number, l: number) => void;
+export const bitgopsbt_add_ironwood_output: (a: number, b: number, c: number, d: number, e: bigint, f: number, g: number, h: number, i: number, j: number, k: number) => void;
+export const bitgopsbt_add_ironwood_v6_signature: (a: number, b: number, c: number, d: number, e: number, f: number, g: number) => void;
 export const bitgopsbt_add_output: (a: number, b: number, c: number, d: number, e: bigint) => void;
 export const bitgopsbt_add_output_at_index: (a: number, b: number, c: number, d: number, e: number, f: bigint) => void;
 export const bitgopsbt_add_output_with_address: (a: number, b: number, c: number, d: number, e: bigint) => void;
@@ -183,11 +186,14 @@ export const bitgopsbt_add_wallet_input_at_index: (a: number, b: number, c: numb
 export const bitgopsbt_add_wallet_output: (a: number, b: number, c: number, d: number, e: bigint, f: number) => void;
 export const bitgopsbt_add_wallet_output_at_index: (a: number, b: number, c: number, d: number, e: number, f: bigint, g: number) => void;
 export const bitgopsbt_combine_inputs: (a: number, b: number, c: number, d: number) => void;
+export const bitgopsbt_combine_ironwood_proof: (a: number, b: number, c: number, d: number) => void;
 export const bitgopsbt_combine_musig2_nonces: (a: number, b: number, c: number) => void;
 export const bitgopsbt_consensus_branch_id: (a: number) => number;
 export const bitgopsbt_create_empty: (a: number, b: number, c: number, d: number, e: number, f: number) => void;
 export const bitgopsbt_create_empty_zcash: (a: number, b: number, c: number, d: number, e: number, f: number, g: number, h: number, i: number) => void;
 export const bitgopsbt_create_empty_zcash_at_height: (a: number, b: number, c: number, d: number, e: number, f: number, g: number, h: number, i: number) => void;
+export const bitgopsbt_create_empty_zcash_v6: (a: number, b: number, c: number, d: number, e: number, f: number, g: number) => void;
+export const bitgopsbt_create_empty_zcash_v6_at_height: (a: number, b: number, c: number, d: number, e: number, f: number, g: number) => void;
 export const bitgopsbt_delete_input_kv: (a: number, b: number, c: number, d: number) => void;
 export const bitgopsbt_delete_kv: (a: number, b: number, c: number) => void;
 export const bitgopsbt_delete_output_kv: (a: number, b: number, c: number, d: number) => void;
@@ -216,6 +222,8 @@ export const bitgopsbt_get_outputs: (a: number, b: number) => void;
 export const bitgopsbt_get_outputs_with_address: (a: number, b: number) => void;
 export const bitgopsbt_get_unsigned_tx: (a: number, b: number) => void;
 export const bitgopsbt_input_count: (a: number) => number;
+export const bitgopsbt_ironwood_v6_transparent_sighash: (a: number, b: number, c: number) => void;
+export const bitgopsbt_ironwood_v6_txid: (a: number, b: number) => void;
 export const bitgopsbt_is_musig2_input: (a: number, b: number) => number;
 export const bitgopsbt_lock_time: (a: number) => number;
 export const bitgopsbt_network: (a: number, b: number) => void;
@@ -226,11 +234,13 @@ export const bitgopsbt_remove_input: (a: number, b: number, c: number) => void;
 export const bitgopsbt_remove_output: (a: number, b: number, c: number) => void;
 export const bitgopsbt_serialize: (a: number, b: number) => void;
 export const bitgopsbt_set_input_kv: (a: number, b: number, c: number, d: number, e: number, f: number) => void;
+export const bitgopsbt_set_ironwood_out_ciphertext: (a: number, b: number, c: number, d: number, e: number) => void;
 export const bitgopsbt_set_kv: (a: number, b: number, c: number, d: number, e: number) => void;
 export const bitgopsbt_set_output_kv: (a: number, b: number, c: number, d: number, e: number, f: number) => void;
 export const bitgopsbt_sign_all_musig2_inputs: (a: number, b: number, c: number) => void;
 export const bitgopsbt_sign_all_replay_protection_inputs: (a: number, b: number, c: number) => void;
 export const bitgopsbt_sign_all_wallet_inputs: (a: number, b: number, c: number) => void;
+export const bitgopsbt_sign_ironwood_v6: (a: number, b: number, c: number, d: number) => void;
 export const bitgopsbt_sign_musig2_input: (a: number, b: number, c: number, d: number) => void;
 export const bitgopsbt_sign_single_input_with_privkey: (a: number, b: number, c: number, d: number) => void;
 export const bitgopsbt_sign_single_input_with_xpriv: (a: number, b: number, c: number, d: number) => void;
@@ -254,8 +264,6 @@ export const fixedscriptwalletnamespace_supports_script_type: (a: number, b: num
 export const fixedscriptwalletnamespace_to_wallet_keys: (a: number, b: number, c: number, d: number, e: number) => void;
 export const inscriptionsnamespace_create_inscription_reveal_data: (a: number, b: number, c: number, d: number, e: number, f: number, g: number) => void;
 export const inscriptionsnamespace_sign_reveal_transaction: (a: number, b: number, c: number, d: number, e: number, f: number, g: number, h: number, i: number, j: bigint) => void;
-export const messagenamespace_sign_message: (a: number, b: number, c: number, d: number) => void;
-export const messagenamespace_verify_message: (a: number, b: number, c: number, d: number, e: number, f: number) => void;
 export const wasmbip32_chain_code: (a: number) => number;
 export const wasmbip32_depth: (a: number) => number;
 export const wasmbip32_derive: (a: number, b: number, c: number) => void;
@@ -278,28 +286,30 @@ export const wasmbip32_private_key: (a: number) => number;
 export const wasmbip32_public_key: (a: number) => number;
 export const wasmbip32_to_base58: (a: number, b: number) => void;
 export const wasmbip32_to_wif: (a: number, b: number) => void;
-export const wasmecpair_from_private_key: (a: number, b: number, c: number) => void;
-export const wasmecpair_from_public_key: (a: number, b: number, c: number) => void;
-export const wasmecpair_from_wif: (a: number, b: number, c: number) => void;
-export const wasmecpair_from_wif_mainnet: (a: number, b: number, c: number) => void;
-export const wasmecpair_from_wif_testnet: (a: number, b: number, c: number) => void;
-export const wasmecpair_private_key: (a: number) => number;
-export const wasmecpair_public_key: (a: number) => number;
-export const wasmecpair_to_wif: (a: number, b: number) => void;
-export const wasmecpair_to_wif_mainnet: (a: number, b: number) => void;
-export const wasmecpair_to_wif_testnet: (a: number, b: number) => void;
-export const wasmreplayprotection_from_addresses: (a: number, b: number, c: number, d: number, e: number) => void;
-export const wasmreplayprotection_from_output_scripts: (a: number, b: number) => number;
-export const wasmreplayprotection_from_public_keys: (a: number, b: number, c: number) => void;
+export const wasmdimensions_empty: () => number;
+export const wasmdimensions_from_input: (a: number, b: number, c: number, d: number, e: number, f: number, g: number) => void;
+export const wasmdimensions_from_input_script_type: (a: number, b: number, c: number, d: number) => void;
+export const wasmdimensions_from_output_script_length: (a: number) => number;
+export const wasmdimensions_from_output_script_type: (a: number, b: number, c: number) => void;
+export const wasmdimensions_from_psbt: (a: number, b: number) => void;
+export const wasmdimensions_get_input_vsize: (a: number, b: number, c: number) => number;
+export const wasmdimensions_get_input_weight: (a: number, b: number, c: number) => number;
+export const wasmdimensions_get_output_vsize: (a: number) => number;
+export const wasmdimensions_get_output_weight: (a: number) => number;
+export const wasmdimensions_get_vsize: (a: number, b: number, c: number) => number;
+export const wasmdimensions_get_weight: (a: number, b: number, c: number) => number;
+export const wasmdimensions_has_segwit: (a: number) => number;
+export const wasmdimensions_plus: (a: number, b: number) => number;
+export const wasmdimensions_times: (a: number, b: number) => number;
 export const wasmrootwalletkeys_backup_key: (a: number) => number;
 export const wasmrootwalletkeys_bitgo_key: (a: number) => number;
 export const wasmrootwalletkeys_new: (a: number, b: number, c: number, d: number) => void;
 export const wasmrootwalletkeys_user_key: (a: number) => number;
 export const wasmrootwalletkeys_with_derivation_prefixes: (a: number, b: number, c: number, d: number, e: number, f: number, g: number, h: number, i: number, j: number) => void;
 export const wasmbip32_from_bip32_properties: (a: number, b: number) => void;
+export const bitgopsbt_sign_replay_protection_inputs: (a: number, b: number, c: number) => void;
 export const bitgopsbt_sign_wallet_input: (a: number, b: number, c: number, d: number) => void;
 export const bitgopsbt_sign_all_with_xpriv: (a: number, b: number, c: number) => void;
-export const bitgopsbt_sign_replay_protection_inputs: (a: number, b: number, c: number) => void;
 export const rustsecp256k1_v0_10_0_context_create: (a: number) => number;
 export const rustsecp256k1_v0_10_0_context_destroy: (a: number) => void;
 export const rustsecp256k1_v0_10_0_default_error_callback_fn: (a: number, b: number) => void;

package/dist/esm/js/fixedScriptWallet/ZcashBitGoPsbt.d.ts

@@ -3,6 +3,15 @@ import { BitGoPsbt, type CreateEmptyOptions, type HydrationUnspent } from "./Bit
 import { ZcashTransaction, type ITransaction } from "../transaction.js";
 /** Zcash network names */
 export type ZcashNetworkName = "zcash" | "zcashTest" | "zec" | "tzec";
+/**
+ * Zcash v6 (Ironwood) version group id (0xd884b698). Its presence marks a PSBT as v6 — see
+ * `ZcashIronwoodBitGoPsbt`.
+ *
+ * Read from the wasm layer rather than hard-coded, so it cannot drift from
+ * `ZCASH_IRONWOOD_VERSION_GROUP_ID` in `src/zcash/transaction.rs`: a divergence would make the
+ * v4/v6 discrimination in {@link ZcashBitGoPsbt.fromBytes} silently classify v6 bytes as v4.
+ */
+export declare const IRONWOOD_VERSION_GROUP_ID: number;
 /** Options for creating an empty Zcash PSBT (preferred method using block height) */
 export type CreateEmptyZcashOptions = CreateEmptyOptions & {
     /** Block height to determine consensus branch ID automatically */
@@ -98,6 +107,8 @@ export declare class ZcashBitGoPsbt extends BitGoPsbt {
      *
      * @param bytes - The PSBT bytes
      * @param network - Zcash network name ("zcash", "zcashTest", "zec", "tzec")
+     * @throws Error if the deserialized PSBT is a v6 (Ironwood) PSBT — use
+     *   {@link ZcashIronwoodBitGoPsbt.fromBytes} instead
      * @returns A ZcashBitGoPsbt instance
      */
     static fromBytes(bytes: Uint8Array, network: ZcashNetworkName): ZcashBitGoPsbt;

package/dist/esm/js/fixedScriptWallet/ZcashBitGoPsbt.js

@@ -1,7 +1,16 @@
-import { BitGoPsbt as WasmBitGoPsbt, zcash_branch_id_for_height } from "../wasm/wasm_utxo.js";
+import { BitGoPsbt as WasmBitGoPsbt, zcash_branch_id_for_height, zcash_ironwood_version_group_id, } from "../wasm/wasm_utxo.js";
 import { RootWalletKeys } from "./RootWalletKeys.js";
 import { BitGoPsbt } from "./BitGoPsbt.js";
 import { ZcashTransaction } from "../transaction.js";
+/**
+ * Zcash v6 (Ironwood) version group id (0xd884b698). Its presence marks a PSBT as v6 — see
+ * `ZcashIronwoodBitGoPsbt`.
+ *
+ * Read from the wasm layer rather than hard-coded, so it cannot drift from
+ * `ZCASH_IRONWOOD_VERSION_GROUP_ID` in `src/zcash/transaction.rs`: a divergence would make the
+ * v4/v6 discrimination in {@link ZcashBitGoPsbt.fromBytes} silently classify v6 bytes as v4.
+ */
+export const IRONWOOD_VERSION_GROUP_ID = zcash_ironwood_version_group_id();
 /**
  * Zcash-specific PSBT implementation
  *
@@ -87,11 +96,17 @@ export class ZcashBitGoPsbt extends BitGoPsbt {
      *
      * @param bytes - The PSBT bytes
      * @param network - Zcash network name ("zcash", "zcashTest", "zec", "tzec")
+     * @throws Error if the deserialized PSBT is a v6 (Ironwood) PSBT — use
+     *   {@link ZcashIronwoodBitGoPsbt.fromBytes} instead
      * @returns A ZcashBitGoPsbt instance
      */
     static fromBytes(bytes, network) {
         const wasm = WasmBitGoPsbt.from_bytes(bytes, network);
-        return new ZcashBitGoPsbt(wasm);
+        const psbt = new ZcashBitGoPsbt(wasm);
+        if (psbt.versionGroupId === IRONWOOD_VERSION_GROUP_ID) {
+            throw new Error("this is a v6 (Ironwood) PSBT: use ZcashIronwoodBitGoPsbt.fromBytes instead");
+        }
+        return psbt;
     }
     /**
      * Reconstruct a Zcash PSBT from a network-format transaction (unsigned, half-signed, or fully-signed).

package/dist/esm/js/fixedScriptWallet/ZcashIronwoodBitGoPsbt.d.ts

@@ -0,0 +1,233 @@
+import { type BIP32Arg } from "../bip32.js";
+import { type ECPairArg } from "../ecpair.js";
+import { type WalletKeysArg } from "./RootWalletKeys.js";
+import { ZcashBitGoPsbt, type ZcashNetworkName } from "./ZcashBitGoPsbt.js";
+/**
+ * Options for creating an empty Zcash v6 (Ironwood) shielding PSBT.
+ *
+ * Deliberately narrower than `CreateEmptyZcashOptions`: `version` and `versionGroupId` are fixed by
+ * the v6 format, so accepting them would only let a caller ask for something that is then ignored.
+ */
+export type CreateEmptyIronwoodOptions = {
+    /** Block height to determine the consensus branch ID automatically (at/after NU6.3 activation) */
+    blockHeight: number;
+    /** Lock time (default: 0) */
+    lockTime?: number;
+    /** Zcash transaction expiry height */
+    expiryHeight?: number;
+};
+/**
+ * Options for creating an empty Zcash v6 (Ironwood) shielding PSBT with an explicit consensus
+ * branch ID.
+ *
+ * Like {@link CreateEmptyIronwoodOptions}, this omits `version` and `versionGroupId` — both are
+ * fixed by the v6 format. The consensus branch ID is *not* fixed: it tracks the active network
+ * upgrade, so it stays a caller-supplied parameter exactly as it is for v4.
+ */
+export type CreateEmptyIronwoodWithConsensusBranchIdOptions = {
+    /** Zcash consensus branch ID (e.g. the NU6.3 branch ID) */
+    consensusBranchId: number;
+    /** Lock time (default: 0) */
+    lockTime?: number;
+    /** Zcash transaction expiry height */
+    expiryHeight?: number;
+};
+/**
+ * A fresh ZIP-302 "no memo" memo field: the `0xf6` marker byte followed by 511 zero bytes. The
+ * default for {@link ZcashIronwoodBitGoPsbt.addShieldedOutput}'s `memo` option.
+ *
+ * Not the same as an all-zeros memo, which decodes as a *text* memo holding the empty string and is
+ * rendered as such by wallets. Exported so callers can pass it explicitly, and so the distinction is
+ * visible rather than buried in a default.
+ *
+ * A function rather than a shared constant: a module-level `Uint8Array` is mutable, so one caller
+ * writing into it would silently change the default memo for every later output.
+ */
+export declare function zip302NoMemo(): Uint8Array;
+/**
+ * A Zcash **v6 (Ironwood / NU6.3)** shielding PSBT.
+ *
+ * Distinct from the generic `ZcashBitGoPsbt` (v4/Sapling-shaped transactions): a v6 PSBT carries
+ * its shielded side as an orchard PCZT in the proprietary map rather than Sapling fields, and its
+ * lifecycle mirrors the microservice build → sign → combine flow rather than the v4 ZIP-243
+ * signing path.
+ *
+ * Method names carry no `ironwood` prefix — the class name already says it. They follow the base
+ * `BitGoPsbt` vocabulary (`createEmpty`, `fromBytes`, `addOutput`-style adders, `getId`) so the v6
+ * surface reads the same as the v4 one; the wasm bindings keep their `ironwood_v6_*` names because
+ * they live on the single flat `BitGoPsbt` struct, where the prefix is what disambiguates them.
+ *
+ * @example
+ * ```typescript
+ * const psbt = ZcashIronwoodBitGoPsbt.createEmpty("zcash", walletKeys, { blockHeight });
+ * psbt.addWalletInput(...);
+ * psbt.addWalletOutput(...);
+ * psbt.addShieldedOutput(recipient, amount, { anchor });
+ * const sighash = psbt.transparentSighash(0);
+ * // ... sign sighash externally, then:
+ * psbt.addTransparentSignature(0, pubkey, sig);
+ * const tx = psbt.combineProof(proof);
+ * ```
+ */
+export declare class ZcashIronwoodBitGoPsbt extends ZcashBitGoPsbt {
+    /**
+     * Create an empty Zcash **v6 (Ironwood)** shielding PSBT, with the consensus branch ID
+     * determined from block height.
+     *
+     * Add transparent inputs/outputs with the usual `addWalletInput` / `addWalletOutput`, the
+     * shielded output with {@link addShieldedOutput}, then sign the transparent inputs over
+     * {@link transparentSighash} and finish with {@link combineProof}.
+     *
+     * @param network - Zcash network name ("zcash", "zcashTest", "zec", "tzec")
+     * @param walletKeys - The wallet's root keys (sets global xpubs in the PSBT)
+     * @param options - Options including blockHeight (at/after NU6.3 activation)
+     */
+    static createEmpty(network: ZcashNetworkName, walletKeys: WalletKeysArg, options: CreateEmptyIronwoodOptions): ZcashIronwoodBitGoPsbt;
+    /**
+     * Create an empty Zcash **v6 (Ironwood)** shielding PSBT with an explicit consensus branch ID.
+     *
+     * **Advanced use only.** Prefer {@link createEmpty}, which derives the branch ID from a block
+     * height and rejects heights before NU6.3 activation. Reach for this only when you already know
+     * the branch ID — regtest, a future upgrade, or replaying a known-good value.
+     *
+     * Only the *version group ID* is fixed by the v6 format; the consensus branch ID tracks the active
+     * network upgrade and remains caller-supplied, exactly as for v4.
+     *
+     * @param network - Zcash network name ("zcash", "zcashTest", "zec", "tzec")
+     * @param walletKeys - The wallet's root keys (sets global xpubs in the PSBT)
+     * @param options - Options including the required consensusBranchId
+     */
+    static createEmptyWithConsensusBranchId(network: ZcashNetworkName, walletKeys: WalletKeysArg, options: CreateEmptyIronwoodWithConsensusBranchIdOptions): ZcashIronwoodBitGoPsbt;
+    /**
+     * Not applicable to v6, and not implementable: a broadcast v6 transaction carries the shielded
+     * side as a proof plus a binding signature, while every v6 operation here needs the PCZT — which
+     * holds witness data (`rseed`, `rcv`, `alpha`, the note plaintext) that is deliberately *not*
+     * recoverable from the transaction. Decoding the transparent skeleton alone would yield a PSBT
+     * that `getId`, `transparentSighash`, `combineProof`, and even `serialize`/{@link fromBytes} all
+     * reject. Inherited only because JS statics are inherited.
+     */
+    static fromNetworkFormat(): never;
+    /**
+     * Not applicable to v6: the legacy half-signed format is a v4-era p2ms encoding with no way to
+     * carry the PCZT, and no v6 transaction has ever been produced in it. Inherited only because JS
+     * statics are inherited.
+     */
+    static fromHalfSignedLegacyTransaction(): never;
+    /**
+     * Deserialize a v6 (Ironwood) Zcash PSBT from bytes.
+     *
+     * @param bytes - The PSBT bytes
+     * @param network - Zcash network name ("zcash", "zcashTest", "zec", "tzec")
+     * @throws Error if the deserialized PSBT is not a v6 (Ironwood) PSBT
+     * @returns A ZcashIronwoodBitGoPsbt instance
+     */
+    static fromBytes(bytes: Uint8Array, network: ZcashNetworkName): ZcashIronwoodBitGoPsbt;
+    /**
+     * Add the shielded output (Constructor role). Stores the orchard PCZT in the PSBT.
+     *
+     * Named for the shielded/transparent split rather than the note type, leaving room for a
+     * transparent-output variant alongside the inherited `addOutput` / `addWalletOutput`.
+     *
+     * @param recipient - 43-byte raw Orchard/Ironwood address
+     * @param amount - note value in zatoshi
+     * @param options.anchor - 32-byte Ironwood note-commitment-tree root
+     * @param options.memo - optional 512-byte memo (defaults to the ZIP-302 "no memo" encoding)
+     * @param options.ovk - optional 32-byte outgoing viewing key (omit for a keyless build)
+     */
+    addShieldedOutput(recipient: Uint8Array, amount: bigint, options: {
+        anchor: Uint8Array;
+        memo?: Uint8Array;
+        ovk?: Uint8Array;
+    }): void;
+    /**
+     * Client-managed `ovk`: re-encrypt the shielded output's `out_ciphertext` under **this wallet's**
+     * `ovk`, derived as the ECDH agreement of `rootWalletKeys.bitgoKey()` and `userKey`. Both are root
+     * keys, so the `ovk` does not depend on which inputs the transaction spends, and the server can
+     * re-derive the identical value from its own private key plus the user's public key in order to
+     * validate `out_ciphertext` before countersigning. The server never sees `userKey` or the `ovk`.
+     *
+     * `userKey` must be the wallet's user root key — passing the backup or BitGo key throws, since an
+     * `ovk` derived from those is one neither the user nor the server can reproduce, and the resulting
+     * transaction would broadcast fine while leaving the shielded output permanently unrecoverable.
+     *
+     * Normally you do not call this directly: {@link sign} performs it on the first signing round.
+     *
+     * Must be called **before** signing: `out_ciphertext` is committed by the ZIP-244 sighash, so
+     * calling this after any transparent signature has been added (via
+     * {@link addTransparentSignature}) throws rather than silently invalidating that signature.
+     *
+     * @param actionIndex - index of the Ironwood action whose output to re-encrypt (always `0`: only
+     *   one shielded output per transaction is supported, see {@link addShieldedOutput})
+     * @param userKey - the wallet's user root key (an xpriv)
+     * @param rootWalletKeys - the wallet's root keys, supplying the BitGo cosigner pubkey
+     */
+    setShieldedOutCiphertext(actionIndex: number, userKey: BIP32Arg, rootWalletKeys: WalletKeysArg): void;
+    /**
+     * The canonical (display-order) ZIP-244 v6 txid as a lowercase hex string, matching
+     * `ITransaction.getId()`. Defined once the transparent inputs/outputs and the shielded output are
+     * in place; unchanged by signing or proving.
+     */
+    getId(): string;
+    /**
+     * The ZIP-244 per-input transparent sighash (32 bytes) the key controlling transparent input
+     * `index` must sign.
+     */
+    transparentSighash(index: number): Uint8Array;
+    /**
+     * Ingest a transparent-input signature returned by the client/HSM, after verifying it against
+     * {@link transparentSighash} for that input.
+     *
+     * @param index - transparent input index
+     * @param pubkey - the signing public key
+     * @param sig - DER ECDSA signature with the trailing SIGHASH_ALL byte (as in a scriptSig)
+     */
+    addTransparentSignature(index: number, pubkey: Uint8Array, sig: Uint8Array): void;
+    /**
+     * Sign every transparent input `key` resolves a private key for, over the ZIP-244 transparent
+     * sighash. The v6 (Ironwood) counterpart to the inherited `sign(key)` — that base implementation
+     * rejects v6 PSBTs outright, since it only knows the ZIP-243 digest.
+     *
+     * If no transparent signature has been added to this PSBT yet, this is the first signing round and
+     * `key` must be the wallet's user root key: it is used with `rootWalletKeys.bitgoKey()` to derive
+     * this wallet's `ovk` and finalize `out_ciphertext` — the client-managed-`ovk` flow — before any
+     * sighash is computed. Once a signature exists, that step is a no-op, so a caller passes
+     * `rootWalletKeys` on every signing round unconditionally: `psbt.sign(userXpriv, rootWalletKeys)`
+     * and later `psbt.sign(bitgoXpriv, rootWalletKeys)` — only the first call actually uses it.
+     * `rootWalletKeys` is mandatory precisely so that step can never be silently skipped by omission.
+     *
+     * **The user must sign first**, and this is enforced: a first round opened by any other key throws
+     * rather than deriving an `ovk` that neither the user nor the server can reproduce. One consequence
+     * is that a backup-key recovery cannot open the first signing round of a shielding transaction.
+     *
+     * `rootWalletKeys` is typed optional only so this override type-checks against the inherited
+     * `sign(key)` signature — omitting it throws at runtime rather than silently signing without the
+     * `ovk` step.
+     *
+     * @param key - an xpriv (BIP32Arg); raw privkeys (ECPairArg) are not meaningful here, since
+     *   `out_ciphertext` derivation needs the key's `bip32_derivation` path
+     * @param rootWalletKeys - the wallet's root keys (required). Any {@link WalletKeysArg} form, same
+     *   as {@link setShieldedOutCiphertext} and {@link createEmpty} — an xpub triple, a utxo-lib
+     *   `RootWalletKeys`, or this package's own — so it is never sensitive to which copy of the class
+     *   a caller's `RootWalletKeys` came from.
+     * @returns the transparent input indices that were signed
+     */
+    sign(key: BIP32Arg | ECPairArg, rootWalletKeys?: WalletKeysArg): number[];
+    /**
+     * @deprecated Not supported for v6 (Ironwood): always throws. Inherited only because the base
+     * class's single-input overload must be preserved for the override to type-check; use
+     * {@link sign} (all matching inputs) instead.
+     */
+    sign(inputIndex: number, key: BIP32Arg | ECPairArg): void;
+    /**
+     * Transaction Extractor role: given the external prover's `proof` bytes, finalize the
+     * transparent inputs, apply the shielded binding signature, and return the broadcast-ready v6
+     * transaction bytes. Requires every transparent input to be signed via
+     * {@link addTransparentSignature}.
+     *
+     * Terminal: the wasm binding drops the stored PCZT on success, so any later v6 call on this PSBT
+     * throws — including after a `serialize`/{@link fromBytes} round-trip, since the PCZT is gone
+     * from the bytes too. Build a fresh PSBT instead. On failure nothing is dropped, so a call that
+     * errors (bad proof, unsigned input) leaves the PSBT retryable.
+     */
+    combineProof(proof: Uint8Array): Uint8Array;
+}