@bitgo/wasm-utxo 5.5.0 → 5.5.1

package/dist/cjs/js/fixedScriptWallet/ZcashIronwoodBitGoPsbt.d.ts

@@ -135,7 +135,9 @@ export declare class ZcashIronwoodBitGoPsbt extends ZcashBitGoPsbt {
      * @param amount - note value in zatoshi
      * @param options.anchor - 32-byte Ironwood note-commitment-tree root
      * @param options.memo - optional 512-byte memo (defaults to the ZIP-302 "no memo" encoding)
-     * @param options.ovk - optional 32-byte outgoing viewing key (omit for a keyless build)
+     * @param options.ovk - optional 32-byte outgoing viewing key (omit for a keyless build). Has no
+     *   effect in the normal flow: {@link sign}'s first round re-encrypts every action's
+     *   `out_ciphertext` under the wallet `ovk`, replacing whatever this produced
      * @param options.unifiedAddress - optional full Unified Address string this output was addressed
      *   to. Its Orchard receiver must equal `recipient`. The PCZT itself only carries the raw 43-byte
      *   receiver — a lossy encoding for a multi-receiver UA, since any transparent/Sapling receiver
@@ -156,12 +158,14 @@ export declare class ZcashIronwoodBitGoPsbt extends ZcashBitGoPsbt {
      * {@link addShieldedOutput}).
      *
      * @param outputs - one entry per recipient; `memo` defaults per-entry to the ZIP-302 "no memo"
-     *   encoding, exactly as {@link addShieldedOutput}'s does
+     *   encoding, exactly as {@link addShieldedOutput}'s does, and `ovk` is likewise replaced by
+     *   {@link sign}'s first round
      * @param anchor - 32-byte Ironwood note-commitment-tree root, shared by every output
      * @returns the action index assigned to each output, in the same order as `outputs` — the
-     *   orchard builder pads/reorders actions, so a client-managed-`ovk` caller must use these
-     *   indices (not the position in `outputs`) when later calling
-     *   `setIronwoodOutCiphertext`/`setIronwoodOutCiphertextForUser` for a specific recipient.
+     *   orchard builder pads/reorders actions, so any caller correlating per-action data (a stored
+     *   unified address, an explicit `setShieldedOutCiphertext` call) must use these indices, not the
+     *   position in `outputs` — though note {@link sign}'s first round already patches every action's
+     *   `out_ciphertext` with the wallet `ovk` on its own.
      */
     addShieldedOutputs(outputs: Array<{
         recipient: Uint8Array;
@@ -181,14 +185,16 @@ export declare class ZcashIronwoodBitGoPsbt extends ZcashBitGoPsbt {
      * `ovk` derived from those is one neither the user nor the server can reproduce, and the resulting
      * transaction would broadcast fine while leaving the shielded output permanently unrecoverable.
      *
-     * Normally you do not call this directly: {@link sign} performs it on the first signing round.
+     * Normally you do not call this directly: {@link sign} performs it for **every** action on the
+     * first signing round (idempotently — same `ovk`, same bytes).
      *
      * Must be called **before** signing: `out_ciphertext` is committed by the ZIP-244 sighash, so
      * calling this after any transparent signature has been added (via
      * {@link addTransparentSignature}) throws rather than silently invalidating that signature.
      *
-     * @param actionIndex - index of the Ironwood action whose output to re-encrypt (always `0`: only
-     *   one shielded output per transaction is supported, see {@link addShieldedOutput})
+     * @param actionIndex - index of the Ironwood action whose output to re-encrypt; use an index
+     *   returned by {@link addShieldedOutputs} (the orchard builder may reorder actions, so it is not
+     *   necessarily the output's position in the call)
      * @param userKey - the wallet's user root key (an xpriv)
      * @param rootWalletKeys - the wallet's root keys, supplying the BitGo cosigner pubkey
      */
@@ -220,7 +226,8 @@ export declare class ZcashIronwoodBitGoPsbt extends ZcashBitGoPsbt {
      *
      * If no transparent signature has been added to this PSBT yet, this is the first signing round and
      * `key` must be the wallet's user root key: it is used with `rootWalletKeys.bitgoKey()` to derive
-     * this wallet's `ovk` and finalize `out_ciphertext` — the client-managed-`ovk` flow — before any
+     * this wallet's `ovk` and finalize **every** action's `out_ciphertext` — the client-managed-`ovk`
+     * flow, multi-recipient builds included — before any
      * sighash is computed. Once a signature exists, that step is a no-op, so a caller passes
      * `rootWalletKeys` on every signing round unconditionally: `psbt.sign(userXpriv, rootWalletKeys)`
      * and later `psbt.sign(bitgoXpriv, rootWalletKeys)` — only the first call actually uses it.

package/dist/cjs/js/fixedScriptWallet/ZcashIronwoodBitGoPsbt.js

@@ -136,7 +136,9 @@ class ZcashIronwoodBitGoPsbt extends ZcashBitGoPsbt_js_1.ZcashBitGoPsbt {
      * @param amount - note value in zatoshi
      * @param options.anchor - 32-byte Ironwood note-commitment-tree root
      * @param options.memo - optional 512-byte memo (defaults to the ZIP-302 "no memo" encoding)
-     * @param options.ovk - optional 32-byte outgoing viewing key (omit for a keyless build)
+     * @param options.ovk - optional 32-byte outgoing viewing key (omit for a keyless build). Has no
+     *   effect in the normal flow: {@link sign}'s first round re-encrypts every action's
+     *   `out_ciphertext` under the wallet `ovk`, replacing whatever this produced
      * @param options.unifiedAddress - optional full Unified Address string this output was addressed
      *   to. Its Orchard receiver must equal `recipient`. The PCZT itself only carries the raw 43-byte
      *   receiver — a lossy encoding for a multi-receiver UA, since any transparent/Sapling receiver
@@ -155,12 +157,14 @@ class ZcashIronwoodBitGoPsbt extends ZcashBitGoPsbt_js_1.ZcashBitGoPsbt {
      * {@link addShieldedOutput}).
      *
      * @param outputs - one entry per recipient; `memo` defaults per-entry to the ZIP-302 "no memo"
-     *   encoding, exactly as {@link addShieldedOutput}'s does
+     *   encoding, exactly as {@link addShieldedOutput}'s does, and `ovk` is likewise replaced by
+     *   {@link sign}'s first round
      * @param anchor - 32-byte Ironwood note-commitment-tree root, shared by every output
      * @returns the action index assigned to each output, in the same order as `outputs` — the
-     *   orchard builder pads/reorders actions, so a client-managed-`ovk` caller must use these
-     *   indices (not the position in `outputs`) when later calling
-     *   `setIronwoodOutCiphertext`/`setIronwoodOutCiphertextForUser` for a specific recipient.
+     *   orchard builder pads/reorders actions, so any caller correlating per-action data (a stored
+     *   unified address, an explicit `setShieldedOutCiphertext` call) must use these indices, not the
+     *   position in `outputs` — though note {@link sign}'s first round already patches every action's
+     *   `out_ciphertext` with the wallet `ovk` on its own.
      */
     addShieldedOutputs(outputs, anchor) {
         return Array.from(this.wasm.add_ironwood_outputs(outputs.map((o) => ({
@@ -182,14 +186,16 @@ class ZcashIronwoodBitGoPsbt extends ZcashBitGoPsbt_js_1.ZcashBitGoPsbt {
      * `ovk` derived from those is one neither the user nor the server can reproduce, and the resulting
      * transaction would broadcast fine while leaving the shielded output permanently unrecoverable.
      *
-     * Normally you do not call this directly: {@link sign} performs it on the first signing round.
+     * Normally you do not call this directly: {@link sign} performs it for **every** action on the
+     * first signing round (idempotently — same `ovk`, same bytes).
      *
      * Must be called **before** signing: `out_ciphertext` is committed by the ZIP-244 sighash, so
      * calling this after any transparent signature has been added (via
      * {@link addTransparentSignature}) throws rather than silently invalidating that signature.
      *
-     * @param actionIndex - index of the Ironwood action whose output to re-encrypt (always `0`: only
-     *   one shielded output per transaction is supported, see {@link addShieldedOutput})
+     * @param actionIndex - index of the Ironwood action whose output to re-encrypt; use an index
+     *   returned by {@link addShieldedOutputs} (the orchard builder may reorder actions, so it is not
+     *   necessarily the output's position in the call)
      * @param userKey - the wallet's user root key (an xpriv)
      * @param rootWalletKeys - the wallet's root keys, supplying the BitGo cosigner pubkey
      */

package/dist/cjs/js/wasm/wasm_utxo.d.ts

@@ -144,7 +144,9 @@ export class BitGoPsbt {
      *
      * * `recipient` - raw Orchard/Ironwood address ([`ORCHARD_ADDRESS_SIZE`] bytes)
      * * `amount` - note value in zatoshi
-     * * `ovk` - optional outgoing viewing key ([`OVK_SIZE`] bytes; `None` for a keyless build)
+     * * `ovk` - optional outgoing viewing key ([`OVK_SIZE`] bytes; `None` for a keyless build).
+     *   Has no effect in the normal flow: `sign_ironwood_v6`'s first round re-encrypts every
+     *   action's `out_ciphertext` under the wallet `ovk`, replacing whatever this produced
      * * `anchor` - Ironwood note-commitment-tree root ([`ANCHOR_SIZE`] bytes)
      * * `memo` - ZIP-302 memo field ([`MEMO_SIZE`] bytes)
      * * `unified_address` - optional full Unified Address the output was addressed to; if given,
@@ -168,9 +170,10 @@ export class BitGoPsbt {
      * output.
      *
      * Returns the action index assigned to each output, in the same order as `outputs` — the
-     * orchard builder pads/reorders actions, so a client-managed-`ovk` caller must use these
-     * indices (not the position in `outputs`) when later calling `set_ironwood_out_ciphertext`
-     * for a specific recipient.
+     * orchard builder pads/reorders actions, so a caller correlating per-action data (a stored
+     * Unified Address, an explicit `set_ironwood_out_ciphertext` call) must use these indices, not
+     * the position in `outputs` — though note `sign_ironwood_v6`'s first round already patches
+     * every action's `out_ciphertext` with the wallet `ovk` on its own.
      */
     add_ironwood_outputs(outputs: any, anchor: Uint8Array): Uint32Array;
     /**
@@ -665,7 +668,8 @@ export class BitGoPsbt {
      *
      * If no transparent signature has been collected yet, this is the first signing round and
      * `xpriv` must be the wallet's user root key: it is used with `root_wallet_keys.bitgo_key()` to
-     * derive this wallet's `ovk` and finalize `out_ciphertext` before computing any sighash (it is
+     * derive this wallet's `ovk` and finalize every action's `out_ciphertext` (multi-recipient
+     * builds included) before computing any sighash (it is
      * sighash-committed). Any other key signing first is rejected, rather than deriving an `ovk`
      * nobody can reproduce. Once a signature exists, the step is skipped and any key may sign — so
      * callers pass `root_wallet_keys` unconditionally on every signing round without needing to know

package/dist/cjs/js/wasm/wasm_utxo.js

@@ -475,7 +475,9 @@ class BitGoPsbt {
      *
      * * `recipient` - raw Orchard/Ironwood address ([`ORCHARD_ADDRESS_SIZE`] bytes)
      * * `amount` - note value in zatoshi
-     * * `ovk` - optional outgoing viewing key ([`OVK_SIZE`] bytes; `None` for a keyless build)
+     * * `ovk` - optional outgoing viewing key ([`OVK_SIZE`] bytes; `None` for a keyless build).
+     *   Has no effect in the normal flow: `sign_ironwood_v6`'s first round re-encrypts every
+     *   action's `out_ciphertext` under the wallet `ovk`, replacing whatever this produced
      * * `anchor` - Ironwood note-commitment-tree root ([`ANCHOR_SIZE`] bytes)
      * * `memo` - ZIP-302 memo field ([`MEMO_SIZE`] bytes)
      * * `unified_address` - optional full Unified Address the output was addressed to; if given,
@@ -527,9 +529,10 @@ class BitGoPsbt {
      * output.
      *
      * Returns the action index assigned to each output, in the same order as `outputs` — the
-     * orchard builder pads/reorders actions, so a client-managed-`ovk` caller must use these
-     * indices (not the position in `outputs`) when later calling `set_ironwood_out_ciphertext`
-     * for a specific recipient.
+     * orchard builder pads/reorders actions, so a caller correlating per-action data (a stored
+     * Unified Address, an explicit `set_ironwood_out_ciphertext` call) must use these indices, not
+     * the position in `outputs` — though note `sign_ironwood_v6`'s first round already patches
+     * every action's `out_ciphertext` with the wallet `ovk` on its own.
      * @param {any} outputs
      * @param {Uint8Array} anchor
      * @returns {Uint32Array}
@@ -2369,7 +2372,8 @@ class BitGoPsbt {
      *
      * If no transparent signature has been collected yet, this is the first signing round and
      * `xpriv` must be the wallet's user root key: it is used with `root_wallet_keys.bitgo_key()` to
-     * derive this wallet's `ovk` and finalize `out_ciphertext` before computing any sighash (it is
+     * derive this wallet's `ovk` and finalize every action's `out_ciphertext` (multi-recipient
+     * builds included) before computing any sighash (it is
      * sighash-committed). Any other key signing first is rejected, rather than deriving an `ovk`
      * nobody can reproduce. Once a signature exists, the step is skipped and any key may sign — so
      * callers pass `root_wallet_keys` unconditionally on every signing round without needing to know

package/dist/cjs/js/wasm/wasm_utxo_bg.wasm.d.ts

@@ -158,6 +158,8 @@ export const wasmbip32_from_bip32_properties: (a: number, b: number) => void;
 export const bitgopsbt_sign_replay_protection_inputs: (a: number, b: number, c: number) => void;
 export const bitgopsbt_sign_wallet_input: (a: number, b: number, c: number, d: number) => void;
 export const bitgopsbt_sign_all_with_xpriv: (a: number, b: number, c: number) => void;
+export const __wbg_wasmutxonamespace_free: (a: number, b: number) => void;
+export const wasmutxonamespace_get_wasm_utxo_version: (a: number) => void;
 export const __wbg_addressnamespace_free: (a: number, b: number) => void;
 export const __wbg_bip322namespace_free: (a: number, b: number) => void;
 export const __wbg_inscriptionsnamespace_free: (a: number, b: number) => void;
@@ -306,11 +308,8 @@ export const wasmzcashtransaction_lock_time: (a: number) => number;
 export const wasmzcashtransaction_version: (a: number) => number;
 export const wrappsbt_lock_time: (a: number) => number;
 export const wrappsbt_version: (a: number) => number;
-export const __wbg_wasmutxonamespace_free: (a: number, b: number) => void;
-export const wasmutxonamespace_get_wasm_utxo_version: (a: number) => void;
 export const __wbg_wrapdescriptor_free: (a: number, b: number) => void;
 export const __wbg_wrapminiscript_free: (a: number, b: number) => void;
-export const isInspectEnabled: () => number;
 export const parsePsbtRawToJson: (a: number, b: number, c: number, d: number, e: number) => void;
 export const wrapdescriptor_atDerivationIndex: (a: number, b: number, c: number) => void;
 export const wrapdescriptor_descType: (a: number, b: number) => void;
@@ -332,6 +331,7 @@ export const wrapminiscript_fromStringExt: (a: number, b: number, c: number, d:
 export const wrapminiscript_node: (a: number, b: number) => void;
 export const wrapminiscript_toAsmString: (a: number, b: number) => void;
 export const wrapminiscript_toString: (a: number, b: number) => void;
+export const isInspectEnabled: () => number;
 export const parsePsbtToJson: (a: number, b: number, c: number, d: number, e: number) => void;
 export const parseTxToJson: (a: number, b: number, c: number, d: number, e: number) => void;
 export const rustsecp256k1_v0_10_0_context_create: (a: number) => number;

package/dist/esm/js/fixedScriptWallet/ZcashIronwoodBitGoPsbt.d.ts

@@ -135,7 +135,9 @@ export declare class ZcashIronwoodBitGoPsbt extends ZcashBitGoPsbt {
      * @param amount - note value in zatoshi
      * @param options.anchor - 32-byte Ironwood note-commitment-tree root
      * @param options.memo - optional 512-byte memo (defaults to the ZIP-302 "no memo" encoding)
-     * @param options.ovk - optional 32-byte outgoing viewing key (omit for a keyless build)
+     * @param options.ovk - optional 32-byte outgoing viewing key (omit for a keyless build). Has no
+     *   effect in the normal flow: {@link sign}'s first round re-encrypts every action's
+     *   `out_ciphertext` under the wallet `ovk`, replacing whatever this produced
      * @param options.unifiedAddress - optional full Unified Address string this output was addressed
      *   to. Its Orchard receiver must equal `recipient`. The PCZT itself only carries the raw 43-byte
      *   receiver — a lossy encoding for a multi-receiver UA, since any transparent/Sapling receiver
@@ -156,12 +158,14 @@ export declare class ZcashIronwoodBitGoPsbt extends ZcashBitGoPsbt {
      * {@link addShieldedOutput}).
      *
      * @param outputs - one entry per recipient; `memo` defaults per-entry to the ZIP-302 "no memo"
-     *   encoding, exactly as {@link addShieldedOutput}'s does
+     *   encoding, exactly as {@link addShieldedOutput}'s does, and `ovk` is likewise replaced by
+     *   {@link sign}'s first round
      * @param anchor - 32-byte Ironwood note-commitment-tree root, shared by every output
      * @returns the action index assigned to each output, in the same order as `outputs` — the
-     *   orchard builder pads/reorders actions, so a client-managed-`ovk` caller must use these
-     *   indices (not the position in `outputs`) when later calling
-     *   `setIronwoodOutCiphertext`/`setIronwoodOutCiphertextForUser` for a specific recipient.
+     *   orchard builder pads/reorders actions, so any caller correlating per-action data (a stored
+     *   unified address, an explicit `setShieldedOutCiphertext` call) must use these indices, not the
+     *   position in `outputs` — though note {@link sign}'s first round already patches every action's
+     *   `out_ciphertext` with the wallet `ovk` on its own.
      */
     addShieldedOutputs(outputs: Array<{
         recipient: Uint8Array;
@@ -181,14 +185,16 @@ export declare class ZcashIronwoodBitGoPsbt extends ZcashBitGoPsbt {
      * `ovk` derived from those is one neither the user nor the server can reproduce, and the resulting
      * transaction would broadcast fine while leaving the shielded output permanently unrecoverable.
      *
-     * Normally you do not call this directly: {@link sign} performs it on the first signing round.
+     * Normally you do not call this directly: {@link sign} performs it for **every** action on the
+     * first signing round (idempotently — same `ovk`, same bytes).
      *
      * Must be called **before** signing: `out_ciphertext` is committed by the ZIP-244 sighash, so
      * calling this after any transparent signature has been added (via
      * {@link addTransparentSignature}) throws rather than silently invalidating that signature.
      *
-     * @param actionIndex - index of the Ironwood action whose output to re-encrypt (always `0`: only
-     *   one shielded output per transaction is supported, see {@link addShieldedOutput})
+     * @param actionIndex - index of the Ironwood action whose output to re-encrypt; use an index
+     *   returned by {@link addShieldedOutputs} (the orchard builder may reorder actions, so it is not
+     *   necessarily the output's position in the call)
      * @param userKey - the wallet's user root key (an xpriv)
      * @param rootWalletKeys - the wallet's root keys, supplying the BitGo cosigner pubkey
      */
@@ -220,7 +226,8 @@ export declare class ZcashIronwoodBitGoPsbt extends ZcashBitGoPsbt {
      *
      * If no transparent signature has been added to this PSBT yet, this is the first signing round and
      * `key` must be the wallet's user root key: it is used with `rootWalletKeys.bitgoKey()` to derive
-     * this wallet's `ovk` and finalize `out_ciphertext` — the client-managed-`ovk` flow — before any
+     * this wallet's `ovk` and finalize **every** action's `out_ciphertext` — the client-managed-`ovk`
+     * flow, multi-recipient builds included — before any
      * sighash is computed. Once a signature exists, that step is a no-op, so a caller passes
      * `rootWalletKeys` on every signing round unconditionally: `psbt.sign(userXpriv, rootWalletKeys)`
      * and later `psbt.sign(bitgoXpriv, rootWalletKeys)` — only the first call actually uses it.

package/dist/esm/js/fixedScriptWallet/ZcashIronwoodBitGoPsbt.js

@@ -132,7 +132,9 @@ export class ZcashIronwoodBitGoPsbt extends ZcashBitGoPsbt {
      * @param amount - note value in zatoshi
      * @param options.anchor - 32-byte Ironwood note-commitment-tree root
      * @param options.memo - optional 512-byte memo (defaults to the ZIP-302 "no memo" encoding)
-     * @param options.ovk - optional 32-byte outgoing viewing key (omit for a keyless build)
+     * @param options.ovk - optional 32-byte outgoing viewing key (omit for a keyless build). Has no
+     *   effect in the normal flow: {@link sign}'s first round re-encrypts every action's
+     *   `out_ciphertext` under the wallet `ovk`, replacing whatever this produced
      * @param options.unifiedAddress - optional full Unified Address string this output was addressed
      *   to. Its Orchard receiver must equal `recipient`. The PCZT itself only carries the raw 43-byte
      *   receiver — a lossy encoding for a multi-receiver UA, since any transparent/Sapling receiver
@@ -151,12 +153,14 @@ export class ZcashIronwoodBitGoPsbt extends ZcashBitGoPsbt {
      * {@link addShieldedOutput}).
      *
      * @param outputs - one entry per recipient; `memo` defaults per-entry to the ZIP-302 "no memo"
-     *   encoding, exactly as {@link addShieldedOutput}'s does
+     *   encoding, exactly as {@link addShieldedOutput}'s does, and `ovk` is likewise replaced by
+     *   {@link sign}'s first round
      * @param anchor - 32-byte Ironwood note-commitment-tree root, shared by every output
      * @returns the action index assigned to each output, in the same order as `outputs` — the
-     *   orchard builder pads/reorders actions, so a client-managed-`ovk` caller must use these
-     *   indices (not the position in `outputs`) when later calling
-     *   `setIronwoodOutCiphertext`/`setIronwoodOutCiphertextForUser` for a specific recipient.
+     *   orchard builder pads/reorders actions, so any caller correlating per-action data (a stored
+     *   unified address, an explicit `setShieldedOutCiphertext` call) must use these indices, not the
+     *   position in `outputs` — though note {@link sign}'s first round already patches every action's
+     *   `out_ciphertext` with the wallet `ovk` on its own.
      */
     addShieldedOutputs(outputs, anchor) {
         return Array.from(this.wasm.add_ironwood_outputs(outputs.map((o) => ({
@@ -178,14 +182,16 @@ export class ZcashIronwoodBitGoPsbt extends ZcashBitGoPsbt {
      * `ovk` derived from those is one neither the user nor the server can reproduce, and the resulting
      * transaction would broadcast fine while leaving the shielded output permanently unrecoverable.
      *
-     * Normally you do not call this directly: {@link sign} performs it on the first signing round.
+     * Normally you do not call this directly: {@link sign} performs it for **every** action on the
+     * first signing round (idempotently — same `ovk`, same bytes).
      *
      * Must be called **before** signing: `out_ciphertext` is committed by the ZIP-244 sighash, so
      * calling this after any transparent signature has been added (via
      * {@link addTransparentSignature}) throws rather than silently invalidating that signature.
      *
-     * @param actionIndex - index of the Ironwood action whose output to re-encrypt (always `0`: only
-     *   one shielded output per transaction is supported, see {@link addShieldedOutput})
+     * @param actionIndex - index of the Ironwood action whose output to re-encrypt; use an index
+     *   returned by {@link addShieldedOutputs} (the orchard builder may reorder actions, so it is not
+     *   necessarily the output's position in the call)
      * @param userKey - the wallet's user root key (an xpriv)
      * @param rootWalletKeys - the wallet's root keys, supplying the BitGo cosigner pubkey
      */

package/dist/esm/js/wasm/wasm_utxo.d.ts

@@ -144,7 +144,9 @@ export class BitGoPsbt {
      *
      * * `recipient` - raw Orchard/Ironwood address ([`ORCHARD_ADDRESS_SIZE`] bytes)
      * * `amount` - note value in zatoshi
-     * * `ovk` - optional outgoing viewing key ([`OVK_SIZE`] bytes; `None` for a keyless build)
+     * * `ovk` - optional outgoing viewing key ([`OVK_SIZE`] bytes; `None` for a keyless build).
+     *   Has no effect in the normal flow: `sign_ironwood_v6`'s first round re-encrypts every
+     *   action's `out_ciphertext` under the wallet `ovk`, replacing whatever this produced
      * * `anchor` - Ironwood note-commitment-tree root ([`ANCHOR_SIZE`] bytes)
      * * `memo` - ZIP-302 memo field ([`MEMO_SIZE`] bytes)
      * * `unified_address` - optional full Unified Address the output was addressed to; if given,
@@ -168,9 +170,10 @@ export class BitGoPsbt {
      * output.
      *
      * Returns the action index assigned to each output, in the same order as `outputs` — the
-     * orchard builder pads/reorders actions, so a client-managed-`ovk` caller must use these
-     * indices (not the position in `outputs`) when later calling `set_ironwood_out_ciphertext`
-     * for a specific recipient.
+     * orchard builder pads/reorders actions, so a caller correlating per-action data (a stored
+     * Unified Address, an explicit `set_ironwood_out_ciphertext` call) must use these indices, not
+     * the position in `outputs` — though note `sign_ironwood_v6`'s first round already patches
+     * every action's `out_ciphertext` with the wallet `ovk` on its own.
      */
     add_ironwood_outputs(outputs: any, anchor: Uint8Array): Uint32Array;
     /**
@@ -665,7 +668,8 @@ export class BitGoPsbt {
      *
      * If no transparent signature has been collected yet, this is the first signing round and
      * `xpriv` must be the wallet's user root key: it is used with `root_wallet_keys.bitgo_key()` to
-     * derive this wallet's `ovk` and finalize `out_ciphertext` before computing any sighash (it is
+     * derive this wallet's `ovk` and finalize every action's `out_ciphertext` (multi-recipient
+     * builds included) before computing any sighash (it is
      * sighash-committed). Any other key signing first is rejected, rather than deriving an `ovk`
      * nobody can reproduce. Once a signature exists, the step is skipped and any key may sign — so
      * callers pass `root_wallet_keys` unconditionally on every signing round without needing to know

package/dist/esm/js/wasm/wasm_utxo_bg.js

@@ -471,7 +471,9 @@ export class BitGoPsbt {
      *
      * * `recipient` - raw Orchard/Ironwood address ([`ORCHARD_ADDRESS_SIZE`] bytes)
      * * `amount` - note value in zatoshi
-     * * `ovk` - optional outgoing viewing key ([`OVK_SIZE`] bytes; `None` for a keyless build)
+     * * `ovk` - optional outgoing viewing key ([`OVK_SIZE`] bytes; `None` for a keyless build).
+     *   Has no effect in the normal flow: `sign_ironwood_v6`'s first round re-encrypts every
+     *   action's `out_ciphertext` under the wallet `ovk`, replacing whatever this produced
      * * `anchor` - Ironwood note-commitment-tree root ([`ANCHOR_SIZE`] bytes)
      * * `memo` - ZIP-302 memo field ([`MEMO_SIZE`] bytes)
      * * `unified_address` - optional full Unified Address the output was addressed to; if given,
@@ -523,9 +525,10 @@ export class BitGoPsbt {
      * output.
      *
      * Returns the action index assigned to each output, in the same order as `outputs` — the
-     * orchard builder pads/reorders actions, so a client-managed-`ovk` caller must use these
-     * indices (not the position in `outputs`) when later calling `set_ironwood_out_ciphertext`
-     * for a specific recipient.
+     * orchard builder pads/reorders actions, so a caller correlating per-action data (a stored
+     * Unified Address, an explicit `set_ironwood_out_ciphertext` call) must use these indices, not
+     * the position in `outputs` — though note `sign_ironwood_v6`'s first round already patches
+     * every action's `out_ciphertext` with the wallet `ovk` on its own.
      * @param {any} outputs
      * @param {Uint8Array} anchor
      * @returns {Uint32Array}
@@ -2365,7 +2368,8 @@ export class BitGoPsbt {
      *
      * If no transparent signature has been collected yet, this is the first signing round and
      * `xpriv` must be the wallet's user root key: it is used with `root_wallet_keys.bitgo_key()` to
-     * derive this wallet's `ovk` and finalize `out_ciphertext` before computing any sighash (it is
+     * derive this wallet's `ovk` and finalize every action's `out_ciphertext` (multi-recipient
+     * builds included) before computing any sighash (it is
      * sighash-committed). Any other key signing first is rejected, rather than deriving an `ovk`
      * nobody can reproduce. Once a signature exists, the step is skipped and any key may sign — so
      * callers pass `root_wallet_keys` unconditionally on every signing round without needing to know

package/dist/esm/js/wasm/wasm_utxo_bg.wasm.d.ts

@@ -158,6 +158,8 @@ export const wasmbip32_from_bip32_properties: (a: number, b: number) => void;
 export const bitgopsbt_sign_replay_protection_inputs: (a: number, b: number, c: number) => void;
 export const bitgopsbt_sign_wallet_input: (a: number, b: number, c: number, d: number) => void;
 export const bitgopsbt_sign_all_with_xpriv: (a: number, b: number, c: number) => void;
+export const __wbg_wasmutxonamespace_free: (a: number, b: number) => void;
+export const wasmutxonamespace_get_wasm_utxo_version: (a: number) => void;
 export const __wbg_addressnamespace_free: (a: number, b: number) => void;
 export const __wbg_bip322namespace_free: (a: number, b: number) => void;
 export const __wbg_inscriptionsnamespace_free: (a: number, b: number) => void;
@@ -306,11 +308,8 @@ export const wasmzcashtransaction_lock_time: (a: number) => number;
 export const wasmzcashtransaction_version: (a: number) => number;
 export const wrappsbt_lock_time: (a: number) => number;
 export const wrappsbt_version: (a: number) => number;
-export const __wbg_wasmutxonamespace_free: (a: number, b: number) => void;
-export const wasmutxonamespace_get_wasm_utxo_version: (a: number) => void;
 export const __wbg_wrapdescriptor_free: (a: number, b: number) => void;
 export const __wbg_wrapminiscript_free: (a: number, b: number) => void;
-export const isInspectEnabled: () => number;
 export const parsePsbtRawToJson: (a: number, b: number, c: number, d: number, e: number) => void;
 export const wrapdescriptor_atDerivationIndex: (a: number, b: number, c: number) => void;
 export const wrapdescriptor_descType: (a: number, b: number) => void;
@@ -332,6 +331,7 @@ export const wrapminiscript_fromStringExt: (a: number, b: number, c: number, d:
 export const wrapminiscript_node: (a: number, b: number) => void;
 export const wrapminiscript_toAsmString: (a: number, b: number) => void;
 export const wrapminiscript_toString: (a: number, b: number) => void;
+export const isInspectEnabled: () => number;
 export const parsePsbtToJson: (a: number, b: number, c: number, d: number, e: number) => void;
 export const parseTxToJson: (a: number, b: number, c: number, d: number, e: number) => void;
 export const rustsecp256k1_v0_10_0_context_create: (a: number) => number;

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@bitgo/wasm-utxo",
   "description": "WebAssembly wrapper for rust-bitcoin (beta)",
-  "version": "5.5.0",
+  "version": "5.5.1",
   "type": "module",
   "repository": {
     "type": "git",