@bitgo/wasm-utxo 4.32.0 → 4.33.0

package/dist/cjs/js/fixedScriptWallet/ZcashIronwoodBitGoPsbt.d.ts

@@ -1,3 +1,5 @@
+import { type BIP32Arg } from "../bip32.js";
+import { type ECPairArg } from "../ecpair.js";
 import { type WalletKeysArg } from "./RootWalletKeys.js";
 import { ZcashBitGoPsbt, type ZcashNetworkName } from "./ZcashBitGoPsbt.js";
 /**
@@ -137,6 +139,29 @@ export declare class ZcashIronwoodBitGoPsbt extends ZcashBitGoPsbt {
         memo?: Uint8Array;
         ovk?: Uint8Array;
     }): void;
+    /**
+     * Client-managed `ovk`: re-encrypt the shielded output's `out_ciphertext` under **this wallet's**
+     * `ovk`, derived as the ECDH agreement of `rootWalletKeys.bitgoKey()` and `userKey`. Both are root
+     * keys, so the `ovk` does not depend on which inputs the transaction spends, and the server can
+     * re-derive the identical value from its own private key plus the user's public key in order to
+     * validate `out_ciphertext` before countersigning. The server never sees `userKey` or the `ovk`.
+     *
+     * `userKey` must be the wallet's user root key — passing the backup or BitGo key throws, since an
+     * `ovk` derived from those is one neither the user nor the server can reproduce, and the resulting
+     * transaction would broadcast fine while leaving the shielded output permanently unrecoverable.
+     *
+     * Normally you do not call this directly: {@link sign} performs it on the first signing round.
+     *
+     * Must be called **before** signing: `out_ciphertext` is committed by the ZIP-244 sighash, so
+     * calling this after any transparent signature has been added (via
+     * {@link addTransparentSignature}) throws rather than silently invalidating that signature.
+     *
+     * @param actionIndex - index of the Ironwood action whose output to re-encrypt (always `0`: only
+     *   one shielded output per transaction is supported, see {@link addShieldedOutput})
+     * @param userKey - the wallet's user root key (an xpriv)
+     * @param rootWalletKeys - the wallet's root keys, supplying the BitGo cosigner pubkey
+     */
+    setShieldedOutCiphertext(actionIndex: number, userKey: BIP32Arg, rootWalletKeys: WalletKeysArg): void;
     /**
      * The canonical (display-order) ZIP-244 v6 txid as a lowercase hex string, matching
      * `ITransaction.getId()`. Defined once the transparent inputs/outputs and the shielded output are
@@ -157,6 +182,42 @@ export declare class ZcashIronwoodBitGoPsbt extends ZcashBitGoPsbt {
      * @param sig - DER ECDSA signature with the trailing SIGHASH_ALL byte (as in a scriptSig)
      */
     addTransparentSignature(index: number, pubkey: Uint8Array, sig: Uint8Array): void;
+    /**
+     * Sign every transparent input `key` resolves a private key for, over the ZIP-244 transparent
+     * sighash. The v6 (Ironwood) counterpart to the inherited `sign(key)` — that base implementation
+     * rejects v6 PSBTs outright, since it only knows the ZIP-243 digest.
+     *
+     * If no transparent signature has been added to this PSBT yet, this is the first signing round and
+     * `key` must be the wallet's user root key: it is used with `rootWalletKeys.bitgoKey()` to derive
+     * this wallet's `ovk` and finalize `out_ciphertext` — the client-managed-`ovk` flow — before any
+     * sighash is computed. Once a signature exists, that step is a no-op, so a caller passes
+     * `rootWalletKeys` on every signing round unconditionally: `psbt.sign(userXpriv, rootWalletKeys)`
+     * and later `psbt.sign(bitgoXpriv, rootWalletKeys)` — only the first call actually uses it.
+     * `rootWalletKeys` is mandatory precisely so that step can never be silently skipped by omission.
+     *
+     * **The user must sign first**, and this is enforced: a first round opened by any other key throws
+     * rather than deriving an `ovk` that neither the user nor the server can reproduce. One consequence
+     * is that a backup-key recovery cannot open the first signing round of a shielding transaction.
+     *
+     * `rootWalletKeys` is typed optional only so this override type-checks against the inherited
+     * `sign(key)` signature — omitting it throws at runtime rather than silently signing without the
+     * `ovk` step.
+     *
+     * @param key - an xpriv (BIP32Arg); raw privkeys (ECPairArg) are not meaningful here, since
+     *   `out_ciphertext` derivation needs the key's `bip32_derivation` path
+     * @param rootWalletKeys - the wallet's root keys (required). Any {@link WalletKeysArg} form, same
+     *   as {@link setShieldedOutCiphertext} and {@link createEmpty} — an xpub triple, a utxo-lib
+     *   `RootWalletKeys`, or this package's own — so it is never sensitive to which copy of the class
+     *   a caller's `RootWalletKeys` came from.
+     * @returns the transparent input indices that were signed
+     */
+    sign(key: BIP32Arg | ECPairArg, rootWalletKeys?: WalletKeysArg): number[];
+    /**
+     * @deprecated Not supported for v6 (Ironwood): always throws. Inherited only because the base
+     * class's single-input overload must be preserved for the override to type-check; use
+     * {@link sign} (all matching inputs) instead.
+     */
+    sign(inputIndex: number, key: BIP32Arg | ECPairArg): void;
     /**
      * Transaction Extractor role: given the external prover's `proof` bytes, finalize the
      * transparent inputs, apply the shielded binding signature, and return the broadcast-ready v6

package/dist/cjs/js/fixedScriptWallet/ZcashIronwoodBitGoPsbt.js

@@ -3,6 +3,7 @@ Object.defineProperty(exports, "__esModule", { value: true });
 exports.ZcashIronwoodBitGoPsbt = void 0;
 exports.zip302NoMemo = zip302NoMemo;
 const wasm_utxo_js_1 = require("../wasm/wasm_utxo.js");
+const bip32_js_1 = require("../bip32.js");
 const RootWalletKeys_js_1 = require("./RootWalletKeys.js");
 const ZcashBitGoPsbt_js_1 = require("./ZcashBitGoPsbt.js");
 /**
@@ -136,6 +137,31 @@ class ZcashIronwoodBitGoPsbt extends ZcashBitGoPsbt_js_1.ZcashBitGoPsbt {
         const memo = options.memo ?? zip302NoMemo();
         this.wasm.add_ironwood_output(recipient, amount, options.ovk, options.anchor, memo);
     }
+    /**
+     * Client-managed `ovk`: re-encrypt the shielded output's `out_ciphertext` under **this wallet's**
+     * `ovk`, derived as the ECDH agreement of `rootWalletKeys.bitgoKey()` and `userKey`. Both are root
+     * keys, so the `ovk` does not depend on which inputs the transaction spends, and the server can
+     * re-derive the identical value from its own private key plus the user's public key in order to
+     * validate `out_ciphertext` before countersigning. The server never sees `userKey` or the `ovk`.
+     *
+     * `userKey` must be the wallet's user root key — passing the backup or BitGo key throws, since an
+     * `ovk` derived from those is one neither the user nor the server can reproduce, and the resulting
+     * transaction would broadcast fine while leaving the shielded output permanently unrecoverable.
+     *
+     * Normally you do not call this directly: {@link sign} performs it on the first signing round.
+     *
+     * Must be called **before** signing: `out_ciphertext` is committed by the ZIP-244 sighash, so
+     * calling this after any transparent signature has been added (via
+     * {@link addTransparentSignature}) throws rather than silently invalidating that signature.
+     *
+     * @param actionIndex - index of the Ironwood action whose output to re-encrypt (always `0`: only
+     *   one shielded output per transaction is supported, see {@link addShieldedOutput})
+     * @param userKey - the wallet's user root key (an xpriv)
+     * @param rootWalletKeys - the wallet's root keys, supplying the BitGo cosigner pubkey
+     */
+    setShieldedOutCiphertext(actionIndex, userKey, rootWalletKeys) {
+        this.wasm.set_ironwood_out_ciphertext(actionIndex, bip32_js_1.BIP32.from(userKey).wasm, RootWalletKeys_js_1.RootWalletKeys.from(rootWalletKeys).wasm);
+    }
     /**
      * The canonical (display-order) ZIP-244 v6 txid as a lowercase hex string, matching
      * `ITransaction.getId()`. Defined once the transparent inputs/outputs and the shielded output are
@@ -162,6 +188,27 @@ class ZcashIronwoodBitGoPsbt extends ZcashBitGoPsbt_js_1.ZcashBitGoPsbt {
     addTransparentSignature(index, pubkey, sig) {
         this.wasm.add_ironwood_v6_signature(index, pubkey, sig);
     }
+    // The second parameter is `WalletKeysArg` in the public (first) overload above — the only form
+    // callers see. It widens here solely to stay assignable to the deprecated `(inputIndex, key)`
+    // overload, whose own second parameter is a key; narrowing it to `WalletKeysArg` is TS2394.
+    sign(keyOrIndex, keyOrRootWalletKeys) {
+        if (typeof keyOrIndex === "number") {
+            throw new Error("not supported for v6 (Ironwood): single-input sign(inputIndex, key) has no ZIP-244 " +
+                "equivalent; use sign(key) to sign all matching inputs");
+        }
+        if (!(0, bip32_js_1.isBIP32Arg)(keyOrIndex)) {
+            throw new Error("not supported for v6 (Ironwood): a raw privkey (ECPairArg) has no bip32_derivation path " +
+                "to resolve out_ciphertext's ovk from; pass an xpriv");
+        }
+        if (keyOrRootWalletKeys === undefined) {
+            throw new Error("rootWalletKeys is required for v6 (Ironwood) signing: sign(key, rootWalletKeys) — pass it " +
+                "on every signing round, even Bitgo's, so the client-managed-ovk step is never silently " +
+                "skipped");
+        }
+        const wasmKey = bip32_js_1.BIP32.from(keyOrIndex).wasm;
+        const keys = RootWalletKeys_js_1.RootWalletKeys.from(keyOrRootWalletKeys);
+        return Array.from(this.wasm.sign_ironwood_v6(wasmKey, keys.wasm), Number);
+    }
     /**
      * Transaction Extractor role: given the external prover's `proof` bytes, finalize the
      * transparent inputs, apply the shielded binding signature, and return the broadcast-ready v6

package/dist/cjs/js/wasm/wasm_utxo.d.ts

@@ -524,6 +524,21 @@ export class BitGoPsbt {
      */
     serialize(): Uint8Array;
     set_input_kv(index: number, key: any, value: Uint8Array): void;
+    /**
+     * Client-managed `ovk`: re-encrypt the Ironwood output's `out_ciphertext` under this wallet's
+     * `ovk`, derived as the ECDH agreement of `root_wallet_keys.bitgo_key()` and `user_xpriv` — two
+     * root keys, so the result is transaction-independent and the server can re-derive the identical
+     * `ovk` from its own privkey plus the user's pubkey in order to validate `out_ciphertext`. The
+     * server never sees `user_xpriv` or the `ovk` itself.
+     *
+     * `user_xpriv` must be the wallet's user root key; any other key is rejected, since an `ovk`
+     * derived from it is one neither the user nor the server can reproduce.
+     *
+     * Must be called before signing: `out_ciphertext` is ZIP-244 sighash-committed, so calling this
+     * after any transparent signature has been collected for the PSBT is rejected (it would
+     * silently invalidate that signature).
+     */
+    set_ironwood_out_ciphertext(action_index: number, user_xpriv: WasmBIP32, root_wallet_keys: WasmRootWalletKeys): void;
     set_kv(key: any, value: Uint8Array): void;
     set_output_kv(index: number, key: any, value: Uint8Array): void;
     /**
@@ -593,6 +608,22 @@ export class BitGoPsbt {
      * - `Err(WasmUtxoError)` if signing fails
      */
     sign_all_with_xpriv(xpriv: WasmBIP32): any;
+    /**
+     * Sign every transparent input `xpriv` resolves a key for, over the ZIP-244 transparent
+     * sighash — the v6 (Ironwood) counterpart to `sign_all_wallet_inputs`, which rejects v6 PSBTs
+     * (it only knows the ZIP-243 digest).
+     *
+     * If no transparent signature has been collected yet, this is the first signing round and
+     * `xpriv` must be the wallet's user root key: it is used with `root_wallet_keys.bitgo_key()` to
+     * derive this wallet's `ovk` and finalize `out_ciphertext` before computing any sighash (it is
+     * sighash-committed). Any other key signing first is rejected, rather than deriving an `ovk`
+     * nobody can reproduce. Once a signature exists, the step is skipped and any key may sign — so
+     * callers pass `root_wallet_keys` unconditionally on every signing round without needing to know
+     * which key is signing; it is mandatory precisely so the step can never be skipped by omission.
+     *
+     * Returns the indices of the transparent inputs that were signed.
+     */
+    sign_ironwood_v6(xpriv: WasmBIP32, root_wallet_keys: WasmRootWalletKeys): Uint32Array;
     /**
      * Sign a single MuSig2 keypath input.
      *

package/dist/cjs/js/wasm/wasm_utxo.js

@@ -2027,6 +2027,38 @@ class BitGoPsbt {
             wasm.__wbindgen_add_to_stack_pointer(16);
         }
     }
+    /**
+     * Client-managed `ovk`: re-encrypt the Ironwood output's `out_ciphertext` under this wallet's
+     * `ovk`, derived as the ECDH agreement of `root_wallet_keys.bitgo_key()` and `user_xpriv` — two
+     * root keys, so the result is transaction-independent and the server can re-derive the identical
+     * `ovk` from its own privkey plus the user's pubkey in order to validate `out_ciphertext`. The
+     * server never sees `user_xpriv` or the `ovk` itself.
+     *
+     * `user_xpriv` must be the wallet's user root key; any other key is rejected, since an `ovk`
+     * derived from it is one neither the user nor the server can reproduce.
+     *
+     * Must be called before signing: `out_ciphertext` is ZIP-244 sighash-committed, so calling this
+     * after any transparent signature has been collected for the PSBT is rejected (it would
+     * silently invalidate that signature).
+     * @param {number} action_index
+     * @param {WasmBIP32} user_xpriv
+     * @param {WasmRootWalletKeys} root_wallet_keys
+     */
+    set_ironwood_out_ciphertext(action_index, user_xpriv, root_wallet_keys) {
+        try {
+            const retptr = wasm.__wbindgen_add_to_stack_pointer(-16);
+            _assertClass(user_xpriv, WasmBIP32);
+            _assertClass(root_wallet_keys, WasmRootWalletKeys);
+            wasm.bitgopsbt_set_ironwood_out_ciphertext(retptr, this.__wbg_ptr, action_index, user_xpriv.__wbg_ptr, root_wallet_keys.__wbg_ptr);
+            var r0 = getDataViewMemory0().getInt32(retptr + 4 * 0, true);
+            var r1 = getDataViewMemory0().getInt32(retptr + 4 * 1, true);
+            if (r1) {
+                throw takeObject(r0);
+            }
+        } finally {
+            wasm.__wbindgen_add_to_stack_pointer(16);
+        }
+    }
     /**
      * @param {any} key
      * @param {Uint8Array} value
@@ -2201,6 +2233,44 @@ class BitGoPsbt {
             wasm.__wbindgen_add_to_stack_pointer(16);
         }
     }
+    /**
+     * Sign every transparent input `xpriv` resolves a key for, over the ZIP-244 transparent
+     * sighash — the v6 (Ironwood) counterpart to `sign_all_wallet_inputs`, which rejects v6 PSBTs
+     * (it only knows the ZIP-243 digest).
+     *
+     * If no transparent signature has been collected yet, this is the first signing round and
+     * `xpriv` must be the wallet's user root key: it is used with `root_wallet_keys.bitgo_key()` to
+     * derive this wallet's `ovk` and finalize `out_ciphertext` before computing any sighash (it is
+     * sighash-committed). Any other key signing first is rejected, rather than deriving an `ovk`
+     * nobody can reproduce. Once a signature exists, the step is skipped and any key may sign — so
+     * callers pass `root_wallet_keys` unconditionally on every signing round without needing to know
+     * which key is signing; it is mandatory precisely so the step can never be skipped by omission.
+     *
+     * Returns the indices of the transparent inputs that were signed.
+     * @param {WasmBIP32} xpriv
+     * @param {WasmRootWalletKeys} root_wallet_keys
+     * @returns {Uint32Array}
+     */
+    sign_ironwood_v6(xpriv, root_wallet_keys) {
+        try {
+            const retptr = wasm.__wbindgen_add_to_stack_pointer(-16);
+            _assertClass(xpriv, WasmBIP32);
+            _assertClass(root_wallet_keys, WasmRootWalletKeys);
+            wasm.bitgopsbt_sign_ironwood_v6(retptr, this.__wbg_ptr, xpriv.__wbg_ptr, root_wallet_keys.__wbg_ptr);
+            var r0 = getDataViewMemory0().getInt32(retptr + 4 * 0, true);
+            var r1 = getDataViewMemory0().getInt32(retptr + 4 * 1, true);
+            var r2 = getDataViewMemory0().getInt32(retptr + 4 * 2, true);
+            var r3 = getDataViewMemory0().getInt32(retptr + 4 * 3, true);
+            if (r3) {
+                throw takeObject(r2);
+            }
+            var v1 = getArrayU32FromWasm0(r0, r1).slice();
+            wasm.__wbindgen_export4(r0, r1 * 4, 4);
+            return v1;
+        } finally {
+            wasm.__wbindgen_add_to_stack_pointer(16);
+        }
+    }
     /**
      * Sign a single MuSig2 keypath input.
      *

package/dist/cjs/js/wasm/wasm_utxo_bg.wasm.d.ts

@@ -2,10 +2,12 @@
 /* eslint-disable */
 export const memory: WebAssembly.Memory;
 export const __wbg_addressnamespace_free: (a: number, b: number) => void;
-export const __wbg_inscriptionsnamespace_free: (a: number, b: number) => void;
+export const __wbg_bip322namespace_free: (a: number, b: number) => void;
+export const __wbg_messagenamespace_free: (a: number, b: number) => void;
 export const __wbg_utxolibcompatnamespace_free: (a: number, b: number) => void;
 export const __wbg_wasmdashtransaction_free: (a: number, b: number) => void;
 export const __wbg_wasmecpair_free: (a: number, b: number) => void;
+export const __wbg_wasmreplayprotection_free: (a: number, b: number) => void;
 export const __wbg_wasmtransaction_free: (a: number, b: number) => void;
 export const __wbg_wasmzcashtransaction_free: (a: number, b: number) => void;
 export const __wbg_wrappsbt_free: (a: number, b: number) => void;
@@ -13,8 +15,16 @@ export const __wbg_zcashunifiedaddress_free: (a: number, b: number) => void;
 export const __wbg_zcashv6transaction_free: (a: number, b: number) => void;
 export const addressnamespace_from_output_script_with_coin: (a: number, b: number, c: number, d: number, e: number, f: number, g: number) => void;
 export const addressnamespace_to_output_script_with_coin: (a: number, b: number, c: number, d: number, e: number) => void;
-export const inscriptionsnamespace_create_inscription_reveal_data: (a: number, b: number, c: number, d: number, e: number, f: number, g: number) => void;
-export const inscriptionsnamespace_sign_reveal_transaction: (a: number, b: number, c: number, d: number, e: number, f: number, g: number, h: number, i: number, j: bigint) => void;
+export const bip322namespace_add_bip322_input: (a: number, b: number, c: number, d: number, e: number, f: number, g: number, h: number, i: number, j: number, k: number, l: number, m: number) => void;
+export const bip322namespace_get_bip322_message: (a: number, b: number, c: number) => void;
+export const bip322namespace_verify_bip322_psbt_input: (a: number, b: number, c: number, d: number, e: number, f: number, g: number, h: number, i: number, j: number) => void;
+export const bip322namespace_verify_bip322_psbt_input_with_pubkeys: (a: number, b: number, c: number, d: number, e: number, f: number, g: number, h: number, i: number, j: number, k: number, l: number) => void;
+export const bip322namespace_verify_bip322_tx_input: (a: number, b: number, c: number, d: number, e: number, f: number, g: number, h: number, i: number, j: number, k: number, l: number) => void;
+export const bip322namespace_verify_bip322_tx_input_with_pubkeys: (a: number, b: number, c: number, d: number, e: number, f: number, g: number, h: number, i: number, j: number, k: number, l: number) => void;
+export const isInspectEnabled: () => number;
+export const messagenamespace_sign_message: (a: number, b: number, c: number, d: number) => void;
+export const messagenamespace_verify_message: (a: number, b: number, c: number, d: number, e: number, f: number) => void;
+export const parsePsbtRawToJson: (a: number, b: number, c: number, d: number, e: number) => void;
 export const utxolibcompatnamespace_from_output_script: (a: number, b: number, c: number, d: number, e: number, f: number) => void;
 export const utxolibcompatnamespace_to_output_script: (a: number, b: number, c: number, d: number, e: number, f: number) => void;
 export const wasmdashtransaction_from_bytes: (a: number, b: number, c: number) => void;
@@ -37,6 +47,9 @@ export const wasmecpair_public_key: (a: number) => number;
 export const wasmecpair_to_wif: (a: number, b: number) => void;
 export const wasmecpair_to_wif_mainnet: (a: number, b: number) => void;
 export const wasmecpair_to_wif_testnet: (a: number, b: number) => void;
+export const wasmreplayprotection_from_addresses: (a: number, b: number, c: number, d: number, e: number) => void;
+export const wasmreplayprotection_from_output_scripts: (a: number, b: number) => number;
+export const wasmreplayprotection_from_public_keys: (a: number, b: number, c: number) => void;
 export const wasmtransaction_add_input: (a: number, b: number, c: number, d: number, e: number, f: number) => void;
 export const wasmtransaction_add_input_at_index: (a: number, b: number, c: number, d: number, e: number, f: number, g: number) => void;
 export const wasmtransaction_add_output: (a: number, b: number, c: number, d: bigint) => number;
@@ -119,6 +132,8 @@ export const wasmtransaction_input_count: (a: number) => number;
 export const wasmtransaction_output_count: (a: number) => number;
 export const wasmzcashtransaction_input_count: (a: number) => number;
 export const wasmzcashtransaction_output_count: (a: number) => number;
+export const parsePsbtToJson: (a: number, b: number, c: number, d: number, e: number) => void;
+export const parseTxToJson: (a: number, b: number, c: number, d: number, e: number) => void;
 export const wasmtransaction_lock_time: (a: number) => number;
 export const wasmtransaction_version: (a: number) => number;
 export const wasmzcashtransaction_lock_time: (a: number) => number;
@@ -128,8 +143,6 @@ export const wrappsbt_version: (a: number) => number;
 export const __wbg_wasmutxonamespace_free: (a: number, b: number) => void;
 export const __wbg_wrapdescriptor_free: (a: number, b: number) => void;
 export const __wbg_wrapminiscript_free: (a: number, b: number) => void;
-export const isInspectEnabled: () => number;
-export const parsePsbtRawToJson: (a: number, b: number, c: number, d: number, e: number) => void;
 export const wasmutxonamespace_get_wasm_utxo_version: (a: number) => void;
 export const wrapdescriptor_atDerivationIndex: (a: number, b: number, c: number) => void;
 export const wrapdescriptor_descType: (a: number, b: number) => void;
@@ -151,22 +164,12 @@ export const wrapminiscript_fromStringExt: (a: number, b: number, c: number, d:
 export const wrapminiscript_node: (a: number, b: number) => void;
 export const wrapminiscript_toAsmString: (a: number, b: number) => void;
 export const wrapminiscript_toString: (a: number, b: number) => void;
-export const parsePsbtToJson: (a: number, b: number, c: number, d: number, e: number) => void;
-export const parseTxToJson: (a: number, b: number, c: number, d: number, e: number) => void;
-export const __wbg_bip322namespace_free: (a: number, b: number) => void;
 export const __wbg_bitgopsbt_free: (a: number, b: number) => void;
 export const __wbg_fixedscriptwalletnamespace_free: (a: number, b: number) => void;
-export const __wbg_messagenamespace_free: (a: number, b: number) => void;
+export const __wbg_inscriptionsnamespace_free: (a: number, b: number) => void;
 export const __wbg_wasmbip32_free: (a: number, b: number) => void;
 export const __wbg_wasmdimensions_free: (a: number, b: number) => void;
-export const __wbg_wasmreplayprotection_free: (a: number, b: number) => void;
 export const __wbg_wasmrootwalletkeys_free: (a: number, b: number) => void;
-export const bip322namespace_add_bip322_input: (a: number, b: number, c: number, d: number, e: number, f: number, g: number, h: number, i: number, j: number, k: number, l: number, m: number) => void;
-export const bip322namespace_get_bip322_message: (a: number, b: number, c: number) => void;
-export const bip322namespace_verify_bip322_psbt_input: (a: number, b: number, c: number, d: number, e: number, f: number, g: number, h: number, i: number, j: number) => void;
-export const bip322namespace_verify_bip322_psbt_input_with_pubkeys: (a: number, b: number, c: number, d: number, e: number, f: number, g: number, h: number, i: number, j: number, k: number, l: number) => void;
-export const bip322namespace_verify_bip322_tx_input: (a: number, b: number, c: number, d: number, e: number, f: number, g: number, h: number, i: number, j: number, k: number, l: number) => void;
-export const bip322namespace_verify_bip322_tx_input_with_pubkeys: (a: number, b: number, c: number, d: number, e: number, f: number, g: number, h: number, i: number, j: number, k: number, l: number) => void;
 export const bitgopsbt_add_input: (a: number, b: number, c: number, d: number, e: number, f: bigint, g: number, h: number, i: number, j: number, k: number) => void;
 export const bitgopsbt_add_input_at_index: (a: number, b: number, c: number, d: number, e: number, f: number, g: bigint, h: number, i: number, j: number, k: number, l: number) => void;
 export const bitgopsbt_add_ironwood_output: (a: number, b: number, c: number, d: number, e: bigint, f: number, g: number, h: number, i: number, j: number, k: number) => void;
@@ -231,11 +234,13 @@ export const bitgopsbt_remove_input: (a: number, b: number, c: number) => void;
 export const bitgopsbt_remove_output: (a: number, b: number, c: number) => void;
 export const bitgopsbt_serialize: (a: number, b: number) => void;
 export const bitgopsbt_set_input_kv: (a: number, b: number, c: number, d: number, e: number, f: number) => void;
+export const bitgopsbt_set_ironwood_out_ciphertext: (a: number, b: number, c: number, d: number, e: number) => void;
 export const bitgopsbt_set_kv: (a: number, b: number, c: number, d: number, e: number) => void;
 export const bitgopsbt_set_output_kv: (a: number, b: number, c: number, d: number, e: number, f: number) => void;
 export const bitgopsbt_sign_all_musig2_inputs: (a: number, b: number, c: number) => void;
 export const bitgopsbt_sign_all_replay_protection_inputs: (a: number, b: number, c: number) => void;
 export const bitgopsbt_sign_all_wallet_inputs: (a: number, b: number, c: number) => void;
+export const bitgopsbt_sign_ironwood_v6: (a: number, b: number, c: number, d: number) => void;
 export const bitgopsbt_sign_musig2_input: (a: number, b: number, c: number, d: number) => void;
 export const bitgopsbt_sign_single_input_with_privkey: (a: number, b: number, c: number, d: number) => void;
 export const bitgopsbt_sign_single_input_with_xpriv: (a: number, b: number, c: number, d: number) => void;
@@ -257,8 +262,8 @@ export const fixedscriptwalletnamespace_output_script_with_network_str: (a: numb
 export const fixedscriptwalletnamespace_p2sh_p2pk_output_script: (a: number, b: number, c: number) => void;
 export const fixedscriptwalletnamespace_supports_script_type: (a: number, b: number, c: number, d: number, e: number) => void;
 export const fixedscriptwalletnamespace_to_wallet_keys: (a: number, b: number, c: number, d: number, e: number) => void;
-export const messagenamespace_sign_message: (a: number, b: number, c: number, d: number) => void;
-export const messagenamespace_verify_message: (a: number, b: number, c: number, d: number, e: number, f: number) => void;
+export const inscriptionsnamespace_create_inscription_reveal_data: (a: number, b: number, c: number, d: number, e: number, f: number, g: number) => void;
+export const inscriptionsnamespace_sign_reveal_transaction: (a: number, b: number, c: number, d: number, e: number, f: number, g: number, h: number, i: number, j: bigint) => void;
 export const wasmbip32_chain_code: (a: number) => number;
 export const wasmbip32_depth: (a: number) => number;
 export const wasmbip32_derive: (a: number, b: number, c: number) => void;
@@ -296,9 +301,6 @@ export const wasmdimensions_get_weight: (a: number, b: number, c: number) => num
 export const wasmdimensions_has_segwit: (a: number) => number;
 export const wasmdimensions_plus: (a: number, b: number) => number;
 export const wasmdimensions_times: (a: number, b: number) => number;
-export const wasmreplayprotection_from_addresses: (a: number, b: number, c: number, d: number, e: number) => void;
-export const wasmreplayprotection_from_output_scripts: (a: number, b: number) => number;
-export const wasmreplayprotection_from_public_keys: (a: number, b: number, c: number) => void;
 export const wasmrootwalletkeys_backup_key: (a: number) => number;
 export const wasmrootwalletkeys_bitgo_key: (a: number) => number;
 export const wasmrootwalletkeys_new: (a: number, b: number, c: number, d: number) => void;

package/dist/esm/js/fixedScriptWallet/ZcashIronwoodBitGoPsbt.d.ts

@@ -1,3 +1,5 @@
+import { type BIP32Arg } from "../bip32.js";
+import { type ECPairArg } from "../ecpair.js";
 import { type WalletKeysArg } from "./RootWalletKeys.js";
 import { ZcashBitGoPsbt, type ZcashNetworkName } from "./ZcashBitGoPsbt.js";
 /**
@@ -137,6 +139,29 @@ export declare class ZcashIronwoodBitGoPsbt extends ZcashBitGoPsbt {
         memo?: Uint8Array;
         ovk?: Uint8Array;
     }): void;
+    /**
+     * Client-managed `ovk`: re-encrypt the shielded output's `out_ciphertext` under **this wallet's**
+     * `ovk`, derived as the ECDH agreement of `rootWalletKeys.bitgoKey()` and `userKey`. Both are root
+     * keys, so the `ovk` does not depend on which inputs the transaction spends, and the server can
+     * re-derive the identical value from its own private key plus the user's public key in order to
+     * validate `out_ciphertext` before countersigning. The server never sees `userKey` or the `ovk`.
+     *
+     * `userKey` must be the wallet's user root key — passing the backup or BitGo key throws, since an
+     * `ovk` derived from those is one neither the user nor the server can reproduce, and the resulting
+     * transaction would broadcast fine while leaving the shielded output permanently unrecoverable.
+     *
+     * Normally you do not call this directly: {@link sign} performs it on the first signing round.
+     *
+     * Must be called **before** signing: `out_ciphertext` is committed by the ZIP-244 sighash, so
+     * calling this after any transparent signature has been added (via
+     * {@link addTransparentSignature}) throws rather than silently invalidating that signature.
+     *
+     * @param actionIndex - index of the Ironwood action whose output to re-encrypt (always `0`: only
+     *   one shielded output per transaction is supported, see {@link addShieldedOutput})
+     * @param userKey - the wallet's user root key (an xpriv)
+     * @param rootWalletKeys - the wallet's root keys, supplying the BitGo cosigner pubkey
+     */
+    setShieldedOutCiphertext(actionIndex: number, userKey: BIP32Arg, rootWalletKeys: WalletKeysArg): void;
     /**
      * The canonical (display-order) ZIP-244 v6 txid as a lowercase hex string, matching
      * `ITransaction.getId()`. Defined once the transparent inputs/outputs and the shielded output are
@@ -157,6 +182,42 @@ export declare class ZcashIronwoodBitGoPsbt extends ZcashBitGoPsbt {
      * @param sig - DER ECDSA signature with the trailing SIGHASH_ALL byte (as in a scriptSig)
      */
     addTransparentSignature(index: number, pubkey: Uint8Array, sig: Uint8Array): void;
+    /**
+     * Sign every transparent input `key` resolves a private key for, over the ZIP-244 transparent
+     * sighash. The v6 (Ironwood) counterpart to the inherited `sign(key)` — that base implementation
+     * rejects v6 PSBTs outright, since it only knows the ZIP-243 digest.
+     *
+     * If no transparent signature has been added to this PSBT yet, this is the first signing round and
+     * `key` must be the wallet's user root key: it is used with `rootWalletKeys.bitgoKey()` to derive
+     * this wallet's `ovk` and finalize `out_ciphertext` — the client-managed-`ovk` flow — before any
+     * sighash is computed. Once a signature exists, that step is a no-op, so a caller passes
+     * `rootWalletKeys` on every signing round unconditionally: `psbt.sign(userXpriv, rootWalletKeys)`
+     * and later `psbt.sign(bitgoXpriv, rootWalletKeys)` — only the first call actually uses it.
+     * `rootWalletKeys` is mandatory precisely so that step can never be silently skipped by omission.
+     *
+     * **The user must sign first**, and this is enforced: a first round opened by any other key throws
+     * rather than deriving an `ovk` that neither the user nor the server can reproduce. One consequence
+     * is that a backup-key recovery cannot open the first signing round of a shielding transaction.
+     *
+     * `rootWalletKeys` is typed optional only so this override type-checks against the inherited
+     * `sign(key)` signature — omitting it throws at runtime rather than silently signing without the
+     * `ovk` step.
+     *
+     * @param key - an xpriv (BIP32Arg); raw privkeys (ECPairArg) are not meaningful here, since
+     *   `out_ciphertext` derivation needs the key's `bip32_derivation` path
+     * @param rootWalletKeys - the wallet's root keys (required). Any {@link WalletKeysArg} form, same
+     *   as {@link setShieldedOutCiphertext} and {@link createEmpty} — an xpub triple, a utxo-lib
+     *   `RootWalletKeys`, or this package's own — so it is never sensitive to which copy of the class
+     *   a caller's `RootWalletKeys` came from.
+     * @returns the transparent input indices that were signed
+     */
+    sign(key: BIP32Arg | ECPairArg, rootWalletKeys?: WalletKeysArg): number[];
+    /**
+     * @deprecated Not supported for v6 (Ironwood): always throws. Inherited only because the base
+     * class's single-input overload must be preserved for the override to type-check; use
+     * {@link sign} (all matching inputs) instead.
+     */
+    sign(inputIndex: number, key: BIP32Arg | ECPairArg): void;
     /**
      * Transaction Extractor role: given the external prover's `proof` bytes, finalize the
      * transparent inputs, apply the shielded binding signature, and return the broadcast-ready v6

package/dist/esm/js/fixedScriptWallet/ZcashIronwoodBitGoPsbt.js

@@ -1,4 +1,5 @@
 import { BitGoPsbt as WasmBitGoPsbt } from "../wasm/wasm_utxo.js";
+import { BIP32, isBIP32Arg } from "../bip32.js";
 import { RootWalletKeys } from "./RootWalletKeys.js";
 import { IRONWOOD_VERSION_GROUP_ID, ZcashBitGoPsbt, } from "./ZcashBitGoPsbt.js";
 /**
@@ -132,6 +133,31 @@ export class ZcashIronwoodBitGoPsbt extends ZcashBitGoPsbt {
         const memo = options.memo ?? zip302NoMemo();
         this.wasm.add_ironwood_output(recipient, amount, options.ovk, options.anchor, memo);
     }
+    /**
+     * Client-managed `ovk`: re-encrypt the shielded output's `out_ciphertext` under **this wallet's**
+     * `ovk`, derived as the ECDH agreement of `rootWalletKeys.bitgoKey()` and `userKey`. Both are root
+     * keys, so the `ovk` does not depend on which inputs the transaction spends, and the server can
+     * re-derive the identical value from its own private key plus the user's public key in order to
+     * validate `out_ciphertext` before countersigning. The server never sees `userKey` or the `ovk`.
+     *
+     * `userKey` must be the wallet's user root key — passing the backup or BitGo key throws, since an
+     * `ovk` derived from those is one neither the user nor the server can reproduce, and the resulting
+     * transaction would broadcast fine while leaving the shielded output permanently unrecoverable.
+     *
+     * Normally you do not call this directly: {@link sign} performs it on the first signing round.
+     *
+     * Must be called **before** signing: `out_ciphertext` is committed by the ZIP-244 sighash, so
+     * calling this after any transparent signature has been added (via
+     * {@link addTransparentSignature}) throws rather than silently invalidating that signature.
+     *
+     * @param actionIndex - index of the Ironwood action whose output to re-encrypt (always `0`: only
+     *   one shielded output per transaction is supported, see {@link addShieldedOutput})
+     * @param userKey - the wallet's user root key (an xpriv)
+     * @param rootWalletKeys - the wallet's root keys, supplying the BitGo cosigner pubkey
+     */
+    setShieldedOutCiphertext(actionIndex, userKey, rootWalletKeys) {
+        this.wasm.set_ironwood_out_ciphertext(actionIndex, BIP32.from(userKey).wasm, RootWalletKeys.from(rootWalletKeys).wasm);
+    }
     /**
      * The canonical (display-order) ZIP-244 v6 txid as a lowercase hex string, matching
      * `ITransaction.getId()`. Defined once the transparent inputs/outputs and the shielded output are
@@ -158,6 +184,27 @@ export class ZcashIronwoodBitGoPsbt extends ZcashBitGoPsbt {
     addTransparentSignature(index, pubkey, sig) {
         this.wasm.add_ironwood_v6_signature(index, pubkey, sig);
     }
+    // The second parameter is `WalletKeysArg` in the public (first) overload above — the only form
+    // callers see. It widens here solely to stay assignable to the deprecated `(inputIndex, key)`
+    // overload, whose own second parameter is a key; narrowing it to `WalletKeysArg` is TS2394.
+    sign(keyOrIndex, keyOrRootWalletKeys) {
+        if (typeof keyOrIndex === "number") {
+            throw new Error("not supported for v6 (Ironwood): single-input sign(inputIndex, key) has no ZIP-244 " +
+                "equivalent; use sign(key) to sign all matching inputs");
+        }
+        if (!isBIP32Arg(keyOrIndex)) {
+            throw new Error("not supported for v6 (Ironwood): a raw privkey (ECPairArg) has no bip32_derivation path " +
+                "to resolve out_ciphertext's ovk from; pass an xpriv");
+        }
+        if (keyOrRootWalletKeys === undefined) {
+            throw new Error("rootWalletKeys is required for v6 (Ironwood) signing: sign(key, rootWalletKeys) — pass it " +
+                "on every signing round, even Bitgo's, so the client-managed-ovk step is never silently " +
+                "skipped");
+        }
+        const wasmKey = BIP32.from(keyOrIndex).wasm;
+        const keys = RootWalletKeys.from(keyOrRootWalletKeys);
+        return Array.from(this.wasm.sign_ironwood_v6(wasmKey, keys.wasm), Number);
+    }
     /**
      * Transaction Extractor role: given the external prover's `proof` bytes, finalize the
      * transparent inputs, apply the shielded binding signature, and return the broadcast-ready v6

package/dist/esm/js/wasm/wasm_utxo.d.ts

@@ -524,6 +524,21 @@ export class BitGoPsbt {
      */
     serialize(): Uint8Array;
     set_input_kv(index: number, key: any, value: Uint8Array): void;
+    /**
+     * Client-managed `ovk`: re-encrypt the Ironwood output's `out_ciphertext` under this wallet's
+     * `ovk`, derived as the ECDH agreement of `root_wallet_keys.bitgo_key()` and `user_xpriv` — two
+     * root keys, so the result is transaction-independent and the server can re-derive the identical
+     * `ovk` from its own privkey plus the user's pubkey in order to validate `out_ciphertext`. The
+     * server never sees `user_xpriv` or the `ovk` itself.
+     *
+     * `user_xpriv` must be the wallet's user root key; any other key is rejected, since an `ovk`
+     * derived from it is one neither the user nor the server can reproduce.
+     *
+     * Must be called before signing: `out_ciphertext` is ZIP-244 sighash-committed, so calling this
+     * after any transparent signature has been collected for the PSBT is rejected (it would
+     * silently invalidate that signature).
+     */
+    set_ironwood_out_ciphertext(action_index: number, user_xpriv: WasmBIP32, root_wallet_keys: WasmRootWalletKeys): void;
     set_kv(key: any, value: Uint8Array): void;
     set_output_kv(index: number, key: any, value: Uint8Array): void;
     /**
@@ -593,6 +608,22 @@ export class BitGoPsbt {
      * - `Err(WasmUtxoError)` if signing fails
      */
     sign_all_with_xpriv(xpriv: WasmBIP32): any;
+    /**
+     * Sign every transparent input `xpriv` resolves a key for, over the ZIP-244 transparent
+     * sighash — the v6 (Ironwood) counterpart to `sign_all_wallet_inputs`, which rejects v6 PSBTs
+     * (it only knows the ZIP-243 digest).
+     *
+     * If no transparent signature has been collected yet, this is the first signing round and
+     * `xpriv` must be the wallet's user root key: it is used with `root_wallet_keys.bitgo_key()` to
+     * derive this wallet's `ovk` and finalize `out_ciphertext` before computing any sighash (it is
+     * sighash-committed). Any other key signing first is rejected, rather than deriving an `ovk`
+     * nobody can reproduce. Once a signature exists, the step is skipped and any key may sign — so
+     * callers pass `root_wallet_keys` unconditionally on every signing round without needing to know
+     * which key is signing; it is mandatory precisely so the step can never be skipped by omission.
+     *
+     * Returns the indices of the transparent inputs that were signed.
+     */
+    sign_ironwood_v6(xpriv: WasmBIP32, root_wallet_keys: WasmRootWalletKeys): Uint32Array;
     /**
      * Sign a single MuSig2 keypath input.
      *

package/dist/esm/js/wasm/wasm_utxo_bg.js

@@ -2023,6 +2023,38 @@ export class BitGoPsbt {
             wasm.__wbindgen_add_to_stack_pointer(16);
         }
     }
+    /**
+     * Client-managed `ovk`: re-encrypt the Ironwood output's `out_ciphertext` under this wallet's
+     * `ovk`, derived as the ECDH agreement of `root_wallet_keys.bitgo_key()` and `user_xpriv` — two
+     * root keys, so the result is transaction-independent and the server can re-derive the identical
+     * `ovk` from its own privkey plus the user's pubkey in order to validate `out_ciphertext`. The
+     * server never sees `user_xpriv` or the `ovk` itself.
+     *
+     * `user_xpriv` must be the wallet's user root key; any other key is rejected, since an `ovk`
+     * derived from it is one neither the user nor the server can reproduce.
+     *
+     * Must be called before signing: `out_ciphertext` is ZIP-244 sighash-committed, so calling this
+     * after any transparent signature has been collected for the PSBT is rejected (it would
+     * silently invalidate that signature).
+     * @param {number} action_index
+     * @param {WasmBIP32} user_xpriv
+     * @param {WasmRootWalletKeys} root_wallet_keys
+     */
+    set_ironwood_out_ciphertext(action_index, user_xpriv, root_wallet_keys) {
+        try {
+            const retptr = wasm.__wbindgen_add_to_stack_pointer(-16);
+            _assertClass(user_xpriv, WasmBIP32);
+            _assertClass(root_wallet_keys, WasmRootWalletKeys);
+            wasm.bitgopsbt_set_ironwood_out_ciphertext(retptr, this.__wbg_ptr, action_index, user_xpriv.__wbg_ptr, root_wallet_keys.__wbg_ptr);
+            var r0 = getDataViewMemory0().getInt32(retptr + 4 * 0, true);
+            var r1 = getDataViewMemory0().getInt32(retptr + 4 * 1, true);
+            if (r1) {
+                throw takeObject(r0);
+            }
+        } finally {
+            wasm.__wbindgen_add_to_stack_pointer(16);
+        }
+    }
     /**
      * @param {any} key
      * @param {Uint8Array} value
@@ -2197,6 +2229,44 @@ export class BitGoPsbt {
             wasm.__wbindgen_add_to_stack_pointer(16);
         }
     }
+    /**
+     * Sign every transparent input `xpriv` resolves a key for, over the ZIP-244 transparent
+     * sighash — the v6 (Ironwood) counterpart to `sign_all_wallet_inputs`, which rejects v6 PSBTs
+     * (it only knows the ZIP-243 digest).
+     *
+     * If no transparent signature has been collected yet, this is the first signing round and
+     * `xpriv` must be the wallet's user root key: it is used with `root_wallet_keys.bitgo_key()` to
+     * derive this wallet's `ovk` and finalize `out_ciphertext` before computing any sighash (it is
+     * sighash-committed). Any other key signing first is rejected, rather than deriving an `ovk`
+     * nobody can reproduce. Once a signature exists, the step is skipped and any key may sign — so
+     * callers pass `root_wallet_keys` unconditionally on every signing round without needing to know
+     * which key is signing; it is mandatory precisely so the step can never be skipped by omission.
+     *
+     * Returns the indices of the transparent inputs that were signed.
+     * @param {WasmBIP32} xpriv
+     * @param {WasmRootWalletKeys} root_wallet_keys
+     * @returns {Uint32Array}
+     */
+    sign_ironwood_v6(xpriv, root_wallet_keys) {
+        try {
+            const retptr = wasm.__wbindgen_add_to_stack_pointer(-16);
+            _assertClass(xpriv, WasmBIP32);
+            _assertClass(root_wallet_keys, WasmRootWalletKeys);
+            wasm.bitgopsbt_sign_ironwood_v6(retptr, this.__wbg_ptr, xpriv.__wbg_ptr, root_wallet_keys.__wbg_ptr);
+            var r0 = getDataViewMemory0().getInt32(retptr + 4 * 0, true);
+            var r1 = getDataViewMemory0().getInt32(retptr + 4 * 1, true);
+            var r2 = getDataViewMemory0().getInt32(retptr + 4 * 2, true);
+            var r3 = getDataViewMemory0().getInt32(retptr + 4 * 3, true);
+            if (r3) {
+                throw takeObject(r2);
+            }
+            var v1 = getArrayU32FromWasm0(r0, r1).slice();
+            wasm.__wbindgen_export4(r0, r1 * 4, 4);
+            return v1;
+        } finally {
+            wasm.__wbindgen_add_to_stack_pointer(16);
+        }
+    }
     /**
      * Sign a single MuSig2 keypath input.
      *

package/dist/esm/js/wasm/wasm_utxo_bg.wasm.d.ts

@@ -2,10 +2,12 @@
 /* eslint-disable */
 export const memory: WebAssembly.Memory;
 export const __wbg_addressnamespace_free: (a: number, b: number) => void;
-export const __wbg_inscriptionsnamespace_free: (a: number, b: number) => void;
+export const __wbg_bip322namespace_free: (a: number, b: number) => void;
+export const __wbg_messagenamespace_free: (a: number, b: number) => void;
 export const __wbg_utxolibcompatnamespace_free: (a: number, b: number) => void;
 export const __wbg_wasmdashtransaction_free: (a: number, b: number) => void;
 export const __wbg_wasmecpair_free: (a: number, b: number) => void;
+export const __wbg_wasmreplayprotection_free: (a: number, b: number) => void;
 export const __wbg_wasmtransaction_free: (a: number, b: number) => void;
 export const __wbg_wasmzcashtransaction_free: (a: number, b: number) => void;
 export const __wbg_wrappsbt_free: (a: number, b: number) => void;
@@ -13,8 +15,16 @@ export const __wbg_zcashunifiedaddress_free: (a: number, b: number) => void;
 export const __wbg_zcashv6transaction_free: (a: number, b: number) => void;
 export const addressnamespace_from_output_script_with_coin: (a: number, b: number, c: number, d: number, e: number, f: number, g: number) => void;
 export const addressnamespace_to_output_script_with_coin: (a: number, b: number, c: number, d: number, e: number) => void;
-export const inscriptionsnamespace_create_inscription_reveal_data: (a: number, b: number, c: number, d: number, e: number, f: number, g: number) => void;
-export const inscriptionsnamespace_sign_reveal_transaction: (a: number, b: number, c: number, d: number, e: number, f: number, g: number, h: number, i: number, j: bigint) => void;
+export const bip322namespace_add_bip322_input: (a: number, b: number, c: number, d: number, e: number, f: number, g: number, h: number, i: number, j: number, k: number, l: number, m: number) => void;
+export const bip322namespace_get_bip322_message: (a: number, b: number, c: number) => void;
+export const bip322namespace_verify_bip322_psbt_input: (a: number, b: number, c: number, d: number, e: number, f: number, g: number, h: number, i: number, j: number) => void;
+export const bip322namespace_verify_bip322_psbt_input_with_pubkeys: (a: number, b: number, c: number, d: number, e: number, f: number, g: number, h: number, i: number, j: number, k: number, l: number) => void;
+export const bip322namespace_verify_bip322_tx_input: (a: number, b: number, c: number, d: number, e: number, f: number, g: number, h: number, i: number, j: number, k: number, l: number) => void;
+export const bip322namespace_verify_bip322_tx_input_with_pubkeys: (a: number, b: number, c: number, d: number, e: number, f: number, g: number, h: number, i: number, j: number, k: number, l: number) => void;
+export const isInspectEnabled: () => number;
+export const messagenamespace_sign_message: (a: number, b: number, c: number, d: number) => void;
+export const messagenamespace_verify_message: (a: number, b: number, c: number, d: number, e: number, f: number) => void;
+export const parsePsbtRawToJson: (a: number, b: number, c: number, d: number, e: number) => void;
 export const utxolibcompatnamespace_from_output_script: (a: number, b: number, c: number, d: number, e: number, f: number) => void;
 export const utxolibcompatnamespace_to_output_script: (a: number, b: number, c: number, d: number, e: number, f: number) => void;
 export const wasmdashtransaction_from_bytes: (a: number, b: number, c: number) => void;
@@ -37,6 +47,9 @@ export const wasmecpair_public_key: (a: number) => number;
 export const wasmecpair_to_wif: (a: number, b: number) => void;
 export const wasmecpair_to_wif_mainnet: (a: number, b: number) => void;
 export const wasmecpair_to_wif_testnet: (a: number, b: number) => void;
+export const wasmreplayprotection_from_addresses: (a: number, b: number, c: number, d: number, e: number) => void;
+export const wasmreplayprotection_from_output_scripts: (a: number, b: number) => number;
+export const wasmreplayprotection_from_public_keys: (a: number, b: number, c: number) => void;
 export const wasmtransaction_add_input: (a: number, b: number, c: number, d: number, e: number, f: number) => void;
 export const wasmtransaction_add_input_at_index: (a: number, b: number, c: number, d: number, e: number, f: number, g: number) => void;
 export const wasmtransaction_add_output: (a: number, b: number, c: number, d: bigint) => number;
@@ -119,6 +132,8 @@ export const wasmtransaction_input_count: (a: number) => number;
 export const wasmtransaction_output_count: (a: number) => number;
 export const wasmzcashtransaction_input_count: (a: number) => number;
 export const wasmzcashtransaction_output_count: (a: number) => number;
+export const parsePsbtToJson: (a: number, b: number, c: number, d: number, e: number) => void;
+export const parseTxToJson: (a: number, b: number, c: number, d: number, e: number) => void;
 export const wasmtransaction_lock_time: (a: number) => number;
 export const wasmtransaction_version: (a: number) => number;
 export const wasmzcashtransaction_lock_time: (a: number) => number;
@@ -128,8 +143,6 @@ export const wrappsbt_version: (a: number) => number;
 export const __wbg_wasmutxonamespace_free: (a: number, b: number) => void;
 export const __wbg_wrapdescriptor_free: (a: number, b: number) => void;
 export const __wbg_wrapminiscript_free: (a: number, b: number) => void;
-export const isInspectEnabled: () => number;
-export const parsePsbtRawToJson: (a: number, b: number, c: number, d: number, e: number) => void;
 export const wasmutxonamespace_get_wasm_utxo_version: (a: number) => void;
 export const wrapdescriptor_atDerivationIndex: (a: number, b: number, c: number) => void;
 export const wrapdescriptor_descType: (a: number, b: number) => void;
@@ -151,22 +164,12 @@ export const wrapminiscript_fromStringExt: (a: number, b: number, c: number, d:
 export const wrapminiscript_node: (a: number, b: number) => void;
 export const wrapminiscript_toAsmString: (a: number, b: number) => void;
 export const wrapminiscript_toString: (a: number, b: number) => void;
-export const parsePsbtToJson: (a: number, b: number, c: number, d: number, e: number) => void;
-export const parseTxToJson: (a: number, b: number, c: number, d: number, e: number) => void;
-export const __wbg_bip322namespace_free: (a: number, b: number) => void;
 export const __wbg_bitgopsbt_free: (a: number, b: number) => void;
 export const __wbg_fixedscriptwalletnamespace_free: (a: number, b: number) => void;
-export const __wbg_messagenamespace_free: (a: number, b: number) => void;
+export const __wbg_inscriptionsnamespace_free: (a: number, b: number) => void;
 export const __wbg_wasmbip32_free: (a: number, b: number) => void;
 export const __wbg_wasmdimensions_free: (a: number, b: number) => void;
-export const __wbg_wasmreplayprotection_free: (a: number, b: number) => void;
 export const __wbg_wasmrootwalletkeys_free: (a: number, b: number) => void;
-export const bip322namespace_add_bip322_input: (a: number, b: number, c: number, d: number, e: number, f: number, g: number, h: number, i: number, j: number, k: number, l: number, m: number) => void;
-export const bip322namespace_get_bip322_message: (a: number, b: number, c: number) => void;
-export const bip322namespace_verify_bip322_psbt_input: (a: number, b: number, c: number, d: number, e: number, f: number, g: number, h: number, i: number, j: number) => void;
-export const bip322namespace_verify_bip322_psbt_input_with_pubkeys: (a: number, b: number, c: number, d: number, e: number, f: number, g: number, h: number, i: number, j: number, k: number, l: number) => void;
-export const bip322namespace_verify_bip322_tx_input: (a: number, b: number, c: number, d: number, e: number, f: number, g: number, h: number, i: number, j: number, k: number, l: number) => void;
-export const bip322namespace_verify_bip322_tx_input_with_pubkeys: (a: number, b: number, c: number, d: number, e: number, f: number, g: number, h: number, i: number, j: number, k: number, l: number) => void;
 export const bitgopsbt_add_input: (a: number, b: number, c: number, d: number, e: number, f: bigint, g: number, h: number, i: number, j: number, k: number) => void;
 export const bitgopsbt_add_input_at_index: (a: number, b: number, c: number, d: number, e: number, f: number, g: bigint, h: number, i: number, j: number, k: number, l: number) => void;
 export const bitgopsbt_add_ironwood_output: (a: number, b: number, c: number, d: number, e: bigint, f: number, g: number, h: number, i: number, j: number, k: number) => void;
@@ -231,11 +234,13 @@ export const bitgopsbt_remove_input: (a: number, b: number, c: number) => void;
 export const bitgopsbt_remove_output: (a: number, b: number, c: number) => void;
 export const bitgopsbt_serialize: (a: number, b: number) => void;
 export const bitgopsbt_set_input_kv: (a: number, b: number, c: number, d: number, e: number, f: number) => void;
+export const bitgopsbt_set_ironwood_out_ciphertext: (a: number, b: number, c: number, d: number, e: number) => void;
 export const bitgopsbt_set_kv: (a: number, b: number, c: number, d: number, e: number) => void;
 export const bitgopsbt_set_output_kv: (a: number, b: number, c: number, d: number, e: number, f: number) => void;
 export const bitgopsbt_sign_all_musig2_inputs: (a: number, b: number, c: number) => void;
 export const bitgopsbt_sign_all_replay_protection_inputs: (a: number, b: number, c: number) => void;
 export const bitgopsbt_sign_all_wallet_inputs: (a: number, b: number, c: number) => void;
+export const bitgopsbt_sign_ironwood_v6: (a: number, b: number, c: number, d: number) => void;
 export const bitgopsbt_sign_musig2_input: (a: number, b: number, c: number, d: number) => void;
 export const bitgopsbt_sign_single_input_with_privkey: (a: number, b: number, c: number, d: number) => void;
 export const bitgopsbt_sign_single_input_with_xpriv: (a: number, b: number, c: number, d: number) => void;
@@ -257,8 +262,8 @@ export const fixedscriptwalletnamespace_output_script_with_network_str: (a: numb
 export const fixedscriptwalletnamespace_p2sh_p2pk_output_script: (a: number, b: number, c: number) => void;
 export const fixedscriptwalletnamespace_supports_script_type: (a: number, b: number, c: number, d: number, e: number) => void;
 export const fixedscriptwalletnamespace_to_wallet_keys: (a: number, b: number, c: number, d: number, e: number) => void;
-export const messagenamespace_sign_message: (a: number, b: number, c: number, d: number) => void;
-export const messagenamespace_verify_message: (a: number, b: number, c: number, d: number, e: number, f: number) => void;
+export const inscriptionsnamespace_create_inscription_reveal_data: (a: number, b: number, c: number, d: number, e: number, f: number, g: number) => void;
+export const inscriptionsnamespace_sign_reveal_transaction: (a: number, b: number, c: number, d: number, e: number, f: number, g: number, h: number, i: number, j: bigint) => void;
 export const wasmbip32_chain_code: (a: number) => number;
 export const wasmbip32_depth: (a: number) => number;
 export const wasmbip32_derive: (a: number, b: number, c: number) => void;
@@ -296,9 +301,6 @@ export const wasmdimensions_get_weight: (a: number, b: number, c: number) => num
 export const wasmdimensions_has_segwit: (a: number) => number;
 export const wasmdimensions_plus: (a: number, b: number) => number;
 export const wasmdimensions_times: (a: number, b: number) => number;
-export const wasmreplayprotection_from_addresses: (a: number, b: number, c: number, d: number, e: number) => void;
-export const wasmreplayprotection_from_output_scripts: (a: number, b: number) => number;
-export const wasmreplayprotection_from_public_keys: (a: number, b: number, c: number) => void;
 export const wasmrootwalletkeys_backup_key: (a: number) => number;
 export const wasmrootwalletkeys_bitgo_key: (a: number) => number;
 export const wasmrootwalletkeys_new: (a: number, b: number, c: number, d: number) => void;

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@bitgo/wasm-utxo",
   "description": "WebAssembly wrapper for rust-bitcoin (beta)",
-  "version": "4.32.0",
+  "version": "4.33.0",
   "type": "module",
   "repository": {
     "type": "git",