@btc-vision/bitcoin 6.5.6 → 7.0.0-alpha.0

package/build/workers/types.d.ts

@@ -0,0 +1,365 @@
+/**
+ * Worker thread types for parallel signing operations.
+ *
+ * SECURITY NOTES:
+ * - Private keys are NEVER shared via SharedArrayBuffer
+ * - Keys are cloned via postMessage (isolated per worker)
+ * - Keys are zeroed immediately after signing
+ * - Workers are pooled for performance but keys don't persist
+ *
+ * @packageDocumentation
+ */
+/**
+ * Signature type enum for worker operations.
+ */
+export declare const SignatureType: {
+    /** ECDSA signature (secp256k1) */
+    readonly ECDSA: 0;
+    /** Schnorr signature (BIP340) */
+    readonly Schnorr: 1;
+};
+export type SignatureType = (typeof SignatureType)[keyof typeof SignatureType];
+/**
+ * Message sent to worker for signing operation.
+ *
+ * SECURITY: privateKey is cloned via postMessage, NOT shared.
+ * Worker MUST zero the key after signing.
+ */
+export interface SigningTaskMessage {
+    /** Message type discriminator */
+    readonly type: 'sign';
+    /** Task identifier for correlation */
+    readonly taskId: string;
+    /** Hash to sign (32 bytes) */
+    readonly hash: Uint8Array;
+    /** Private key (32 bytes) - WILL BE ZEROED after use */
+    readonly privateKey: Uint8Array;
+    /** Public key for verification (33 or 65 bytes) */
+    readonly publicKey: Uint8Array;
+    /** Signature type (ECDSA or Schnorr) */
+    readonly signatureType: SignatureType;
+    /** Low R signing for ECDSA (optional) */
+    readonly lowR?: boolean | undefined;
+    /** Input index this signature is for */
+    readonly inputIndex: number;
+    /** Sighash type for encoding */
+    readonly sighashType: number;
+    /** Leaf hash for Taproot script-path (optional) */
+    readonly leafHash?: Uint8Array | undefined;
+}
+/**
+ * Initialization message for worker with ECC library.
+ */
+export interface WorkerInitMessage {
+    /** Message type discriminator */
+    readonly type: 'init';
+    /** Serialized ECC library functions (or library identifier) */
+    readonly eccLibId: string;
+}
+/**
+ * Shutdown message for worker.
+ */
+export interface WorkerShutdownMessage {
+    /** Message type discriminator */
+    readonly type: 'shutdown';
+}
+/**
+ * Individual task in a batch (without privateKey - shared across batch).
+ */
+export interface BatchSigningTask {
+    /** Task identifier */
+    readonly taskId: string;
+    /** Hash to sign (32 bytes) */
+    readonly hash: Uint8Array;
+    /** Public key for verification */
+    readonly publicKey: Uint8Array;
+    /** Signature type */
+    readonly signatureType: SignatureType;
+    /** Low R for ECDSA */
+    readonly lowR?: boolean | undefined;
+    /** Input index */
+    readonly inputIndex: number;
+    /** Sighash type */
+    readonly sighashType: number;
+    /** Leaf hash for Taproot */
+    readonly leafHash?: Uint8Array | undefined;
+}
+/**
+ * Batch signing message - multiple tasks with single private key.
+ * More efficient than sending tasks one at a time.
+ */
+export interface BatchSigningMessage {
+    /** Message type discriminator */
+    readonly type: 'signBatch';
+    /** Batch identifier for correlation */
+    readonly batchId: string;
+    /** Tasks to sign */
+    readonly tasks: readonly BatchSigningTask[];
+    /** Private key (32 bytes) - WILL BE ZEROED after all tasks */
+    readonly privateKey: Uint8Array;
+}
+/**
+ * Individual result from a batch.
+ */
+export interface BatchSigningTaskResult {
+    /** Task identifier */
+    readonly taskId: string;
+    /** Signature bytes */
+    readonly signature: Uint8Array;
+    /** Input index */
+    readonly inputIndex: number;
+    /** Public key used */
+    readonly publicKey: Uint8Array;
+    /** Signature type */
+    readonly signatureType: SignatureType;
+    /** Leaf hash (if applicable) */
+    readonly leafHash?: Uint8Array | undefined;
+}
+/**
+ * Individual error from a batch.
+ */
+export interface BatchSigningTaskError {
+    /** Task identifier */
+    readonly taskId: string;
+    /** Input index */
+    readonly inputIndex: number;
+    /** Error message */
+    readonly error: string;
+}
+/**
+ * Batch result message from worker.
+ */
+export interface BatchSigningResultMessage {
+    /** Message type discriminator */
+    readonly type: 'batchResult';
+    /** Batch identifier for correlation */
+    readonly batchId: string;
+    /** Successful results */
+    readonly results: readonly BatchSigningTaskResult[];
+    /** Errors */
+    readonly errors: readonly BatchSigningTaskError[];
+}
+/**
+ * All possible messages to worker.
+ */
+export type WorkerMessage = SigningTaskMessage | BatchSigningMessage | WorkerInitMessage | WorkerShutdownMessage;
+/**
+ * Result from worker after signing.
+ */
+export interface SigningResultMessage {
+    /** Message type discriminator */
+    readonly type: 'result';
+    /** Task identifier for correlation */
+    readonly taskId: string;
+    /** Signature bytes (64 bytes raw for Schnorr, or with sighash for ECDSA) */
+    readonly signature: Uint8Array;
+    /** Input index this signature is for */
+    readonly inputIndex: number;
+    /** Public key used for signing */
+    readonly publicKey: Uint8Array;
+    /** Signature type that was used */
+    readonly signatureType: SignatureType;
+    /** Leaf hash for Taproot script-path spending (if applicable) */
+    readonly leafHash?: Uint8Array | undefined;
+}
+/**
+ * Error result from worker.
+ */
+export interface SigningErrorMessage {
+    /** Message type discriminator */
+    readonly type: 'error';
+    /** Task identifier for correlation */
+    readonly taskId: string;
+    /** Error message */
+    readonly error: string;
+    /** Input index that failed */
+    readonly inputIndex: number;
+}
+/**
+ * Worker ready message.
+ */
+export interface WorkerReadyMessage {
+    /** Message type discriminator */
+    readonly type: 'ready';
+}
+/**
+ * Worker shutdown acknowledgment.
+ */
+export interface WorkerShutdownAckMessage {
+    /** Message type discriminator */
+    readonly type: 'shutdown-ack';
+}
+/**
+ * Union of all worker response types.
+ */
+export type WorkerResponse = SigningResultMessage | SigningErrorMessage | BatchSigningResultMessage | WorkerReadyMessage | WorkerShutdownAckMessage;
+/**
+ * Type guard for error responses.
+ */
+export declare function isSigningError(response: WorkerResponse): response is SigningErrorMessage;
+/**
+ * Type guard for success responses.
+ */
+export declare function isSigningResult(response: WorkerResponse): response is SigningResultMessage;
+/**
+ * Type guard for batch result responses.
+ */
+export declare function isBatchResult(response: WorkerResponse): response is BatchSigningResultMessage;
+/**
+ * Type guard for ready responses.
+ */
+export declare function isWorkerReady(response: WorkerResponse): response is WorkerReadyMessage;
+/**
+ * Interface for the ECC library used by workers.
+ * Provides signing functions for ECDSA and Schnorr signatures.
+ */
+export interface WorkerEccLib {
+    /**
+     * Create an ECDSA signature.
+     *
+     * @param hash - 32-byte hash to sign
+     * @param privateKey - 32-byte private key
+     * @param lowR - Optional: grind for low R value
+     * @returns 64-byte raw signature (r || s)
+     */
+    sign(hash: Uint8Array, privateKey: Uint8Array, lowR?: boolean): Uint8Array;
+    /**
+     * Create a Schnorr signature (BIP340).
+     *
+     * @param hash - 32-byte hash to sign
+     * @param privateKey - 32-byte private key
+     * @returns 64-byte Schnorr signature
+     */
+    signSchnorr(hash: Uint8Array, privateKey: Uint8Array): Uint8Array;
+}
+/**
+ * Configuration for the worker signing pool.
+ */
+export interface WorkerPoolConfig {
+    /**
+     * Number of workers to create.
+     * Default: number of CPU cores (navigator.hardwareConcurrency or os.cpus().length)
+     */
+    readonly workerCount?: number;
+    /**
+     * Timeout per signing operation in milliseconds.
+     * Worker is terminated if exceeded (key safety measure).
+     * Default: 30000 (30 seconds)
+     */
+    readonly taskTimeoutMs?: number;
+    /**
+     * Maximum time a worker can hold a private key in milliseconds.
+     * Acts as a safety net - worker is terminated if signing takes too long.
+     * Default: 5000 (5 seconds)
+     */
+    readonly maxKeyHoldTimeMs?: number;
+    /**
+     * Whether to verify signatures after signing.
+     * Adds overhead but ensures correctness.
+     * Default: true
+     */
+    readonly verifySignatures?: boolean;
+    /**
+     * Whether to preserve workers between signing batches.
+     * true = workers stay alive (faster for multiple batches)
+     * false = workers terminated after each batch (more secure)
+     * Default: true (use preserveWorkers() to enable)
+     */
+    readonly preserveWorkers?: boolean;
+}
+/**
+ * Signing task for the worker queue.
+ */
+export interface SigningTask {
+    /** Task identifier */
+    readonly taskId: string;
+    /** Input index */
+    readonly inputIndex: number;
+    /** Hash to sign (32 bytes) */
+    readonly hash: Uint8Array;
+    /** Signature type */
+    readonly signatureType: SignatureType;
+    /** Low R for ECDSA */
+    readonly lowR?: boolean | undefined;
+    /** Sighash type */
+    readonly sighashType: number;
+    /** Leaf hash for Taproot script-path */
+    readonly leafHash?: Uint8Array | undefined;
+}
+/**
+ * Signer key pair interface for parallel signing.
+ *
+ * SECURITY: getPrivateKey() is only called when dispatching to worker.
+ * The returned bytes are cloned to the worker and then the original
+ * should be considered potentially compromised (in main thread memory).
+ *
+ * For maximum security, use a hardware wallet that never exposes keys.
+ */
+export interface ParallelSignerKeyPair {
+    /** Public key (compressed 33 bytes or uncompressed 65 bytes) */
+    readonly publicKey: Uint8Array;
+    /**
+     * Get private key bytes (32 bytes).
+     *
+     * SECURITY WARNING: This exposes the raw private key.
+     * - Called only when dispatching to worker
+     * - Key is cloned to worker via postMessage
+     * - Original in main thread should be zeroed by caller if possible
+     *
+     * For high-security applications, use hardware wallets instead.
+     */
+    getPrivateKey(): Uint8Array;
+    /**
+     * Optional: Sign ECDSA directly (fallback if workers unavailable).
+     */
+    sign?(hash: Uint8Array, lowR?: boolean): Uint8Array;
+    /**
+     * Optional: Sign Schnorr directly (fallback if workers unavailable).
+     */
+    signSchnorr?(hash: Uint8Array): Uint8Array;
+}
+/**
+ * Result of a parallel signing batch.
+ */
+export interface ParallelSigningResult {
+    /** Whether all signatures were created successfully */
+    readonly success: boolean;
+    /** Signatures indexed by input index */
+    readonly signatures: ReadonlyMap<number, SigningResultMessage>;
+    /** Errors indexed by input index */
+    readonly errors: ReadonlyMap<number, string>;
+    /** Total time taken in milliseconds */
+    readonly durationMs: number;
+}
+/**
+ * Worker state for pool management.
+ */
+export declare const WorkerState: {
+    /** Worker is initializing */
+    readonly Initializing: 0;
+    /** Worker is ready and idle */
+    readonly Idle: 1;
+    /** Worker is processing a task */
+    readonly Busy: 2;
+    /** Worker is shutting down */
+    readonly ShuttingDown: 3;
+    /** Worker has terminated */
+    readonly Terminated: 4;
+};
+export type WorkerState = (typeof WorkerState)[keyof typeof WorkerState];
+/**
+ * Internal worker wrapper for pool management.
+ */
+export interface PooledWorker {
+    /** Unique worker identifier */
+    readonly id: number;
+    /** Current worker state */
+    state: WorkerState;
+    /** The actual worker instance */
+    readonly worker: Worker;
+    /** Current task ID (if busy) */
+    currentTaskId: string | null;
+    /** Timestamp when current task started */
+    taskStartTime: number | null;
+}
+//# sourceMappingURL=types.d.ts.map

package/build/workers/types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../src/workers/types.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAEH;;GAEG;AACH,eAAO,MAAM,aAAa;IACtB,kCAAkC;;IAElC,iCAAiC;;CAE3B,CAAC;AAEX,MAAM,MAAM,aAAa,GAAG,CAAC,OAAO,aAAa,CAAC,CAAC,MAAM,OAAO,aAAa,CAAC,CAAC;AAE/E;;;;;GAKG;AACH,MAAM,WAAW,kBAAkB;IAC/B,iCAAiC;IACjC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,sCAAsC;IACtC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,8BAA8B;IAC9B,QAAQ,CAAC,IAAI,EAAE,UAAU,CAAC;IAC1B,wDAAwD;IACxD,QAAQ,CAAC,UAAU,EAAE,UAAU,CAAC;IAChC,mDAAmD;IACnD,QAAQ,CAAC,SAAS,EAAE,UAAU,CAAC;IAC/B,wCAAwC;IACxC,QAAQ,CAAC,aAAa,EAAE,aAAa,CAAC;IACtC,yCAAyC;IACzC,QAAQ,CAAC,IAAI,CAAC,EAAE,OAAO,GAAG,SAAS,CAAC;IACpC,wCAAwC;IACxC,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,gCAAgC;IAChC,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,mDAAmD;IACnD,QAAQ,CAAC,QAAQ,CAAC,EAAE,UAAU,GAAG,SAAS,CAAC;CAC9C;AAED;;GAEG;AACH,MAAM,WAAW,iBAAiB;IAC9B,iCAAiC;IACjC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,+DAA+D;IAC/D,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;CAC7B;AAED;;GAEG;AACH,MAAM,WAAW,qBAAqB;IAClC,iCAAiC;IACjC,QAAQ,CAAC,IAAI,EAAE,UAAU,CAAC;CAC7B;AAED;;GAEG;AACH,MAAM,WAAW,gBAAgB;IAC7B,sBAAsB;IACtB,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,8BAA8B;IAC9B,QAAQ,CAAC,IAAI,EAAE,UAAU,CAAC;IAC1B,kCAAkC;IAClC,QAAQ,CAAC,SAAS,EAAE,UAAU,CAAC;IAC/B,qBAAqB;IACrB,QAAQ,CAAC,aAAa,EAAE,aAAa,CAAC;IACtC,sBAAsB;IACtB,QAAQ,CAAC,IAAI,CAAC,EAAE,OAAO,GAAG,SAAS,CAAC;IACpC,kBAAkB;IAClB,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,mBAAmB;IACnB,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,4BAA4B;IAC5B,QAAQ,CAAC,QAAQ,CAAC,EAAE,UAAU,GAAG,SAAS,CAAC;CAC9C;AAED;;;GAGG;AACH,MAAM,WAAW,mBAAmB;IAChC,iCAAiC;IACjC,QAAQ,CAAC,IAAI,EAAE,WAAW,CAAC;IAC3B,uCAAuC;IACvC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,oBAAoB;IACpB,QAAQ,CAAC,KAAK,EAAE,SAAS,gBAAgB,EAAE,CAAC;IAC5C,8DAA8D;IAC9D,QAAQ,CAAC,UAAU,EAAE,UAAU,CAAC;CACnC;AAED;;GAEG;AACH,MAAM,WAAW,sBAAsB;IACnC,sBAAsB;IACtB,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,sBAAsB;IACtB,QAAQ,CAAC,SAAS,EAAE,UAAU,CAAC;IAC/B,kBAAkB;IAClB,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,sBAAsB;IACtB,QAAQ,CAAC,SAAS,EAAE,UAAU,CAAC;IAC/B,qBAAqB;IACrB,QAAQ,CAAC,aAAa,EAAE,aAAa,CAAC;IACtC,gCAAgC;IAChC,QAAQ,CAAC,QAAQ,CAAC,EAAE,UAAU,GAAG,SAAS,CAAC;CAC9C;AAED;;GAEG;AACH,MAAM,WAAW,qBAAqB;IAClC,sBAAsB;IACtB,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,kBAAkB;IAClB,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,oBAAoB;IACpB,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;CAC1B;AAED;;GAEG;AACH,MAAM,WAAW,yBAAyB;IACtC,iCAAiC;IACjC,QAAQ,CAAC,IAAI,EAAE,aAAa,CAAC;IAC7B,uCAAuC;IACvC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,yBAAyB;IACzB,QAAQ,CAAC,OAAO,EAAE,SAAS,sBAAsB,EAAE,CAAC;IACpD,aAAa;IACb,QAAQ,CAAC,MAAM,EAAE,SAAS,qBAAqB,EAAE,CAAC;CACrD;AAED;;GAEG;AACH,MAAM,MAAM,aAAa,GAAG,kBAAkB,GAAG,mBAAmB,GAAG,iBAAiB,GAAG,qBAAqB,CAAC;AAEjH;;GAEG;AACH,MAAM,WAAW,oBAAoB;IACjC,iCAAiC;IACjC,QAAQ,CAAC,IAAI,EAAE,QAAQ,CAAC;IACxB,sCAAsC;IACtC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,4EAA4E;IAC5E,QAAQ,CAAC,SAAS,EAAE,UAAU,CAAC;IAC/B,wCAAwC;IACxC,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,kCAAkC;IAClC,QAAQ,CAAC,SAAS,EAAE,UAAU,CAAC;IAC/B,mCAAmC;IACnC,QAAQ,CAAC,aAAa,EAAE,aAAa,CAAC;IACtC,iEAAiE;IACjE,QAAQ,CAAC,QAAQ,CAAC,EAAE,UAAU,GAAG,SAAS,CAAC;CAC9C;AAED;;GAEG;AACH,MAAM,WAAW,mBAAmB;IAChC,iCAAiC;IACjC,QAAQ,CAAC,IAAI,EAAE,OAAO,CAAC;IACvB,sCAAsC;IACtC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,oBAAoB;IACpB,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,8BAA8B;IAC9B,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;CAC/B;AAED;;GAEG;AACH,MAAM,WAAW,kBAAkB;IAC/B,iCAAiC;IACjC,QAAQ,CAAC,IAAI,EAAE,OAAO,CAAC;CAC1B;AAED;;GAEG;AACH,MAAM,WAAW,wBAAwB;IACrC,iCAAiC;IACjC,QAAQ,CAAC,IAAI,EAAE,cAAc,CAAC;CACjC;AAED;;GAEG;AACH,MAAM,MAAM,cAAc,GACpB,oBAAoB,GACpB,mBAAmB,GACnB,yBAAyB,GACzB,kBAAkB,GAClB,wBAAwB,CAAC;AAE/B;;GAEG;AACH,wBAAgB,cAAc,CAAC,QAAQ,EAAE,cAAc,GAAG,QAAQ,IAAI,mBAAmB,CAExF;AAED;;GAEG;AACH,wBAAgB,eAAe,CAAC,QAAQ,EAAE,cAAc,GAAG,QAAQ,IAAI,oBAAoB,CAE1F;AAED;;GAEG;AACH,wBAAgB,aAAa,CAAC,QAAQ,EAAE,cAAc,GAAG,QAAQ,IAAI,yBAAyB,CAE7F;AAED;;GAEG;AACH,wBAAgB,aAAa,CAAC,QAAQ,EAAE,cAAc,GAAG,QAAQ,IAAI,kBAAkB,CAEtF;AAED;;;GAGG;AACH,MAAM,WAAW,YAAY;IACzB;;;;;;;OAOG;IACH,IAAI,CAAC,IAAI,EAAE,UAAU,EAAE,UAAU,EAAE,UAAU,EAAE,IAAI,CAAC,EAAE,OAAO,GAAG,UAAU,CAAC;IAE3E;;;;;;OAMG;IACH,WAAW,CAAC,IAAI,EAAE,UAAU,EAAE,UAAU,EAAE,UAAU,GAAG,UAAU,CAAC;CACrE;AAED;;GAEG;AACH,MAAM,WAAW,gBAAgB;IAC7B;;;OAGG;IACH,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,CAAC;IAE9B;;;;OAIG;IACH,QAAQ,CAAC,aAAa,CAAC,EAAE,MAAM,CAAC;IAEhC;;;;OAIG;IACH,QAAQ,CAAC,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAEnC;;;;OAIG;IACH,QAAQ,CAAC,gBAAgB,CAAC,EAAE,OAAO,CAAC;IAEpC;;;;;OAKG;IACH,QAAQ,CAAC,eAAe,CAAC,EAAE,OAAO,CAAC;CACtC;AAED;;GAEG;AACH,MAAM,WAAW,WAAW;IACxB,sBAAsB;IACtB,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,kBAAkB;IAClB,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,8BAA8B;IAC9B,QAAQ,CAAC,IAAI,EAAE,UAAU,CAAC;IAC1B,qBAAqB;IACrB,QAAQ,CAAC,aAAa,EAAE,aAAa,CAAC;IACtC,sBAAsB;IACtB,QAAQ,CAAC,IAAI,CAAC,EAAE,OAAO,GAAG,SAAS,CAAC;IACpC,mBAAmB;IACnB,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,wCAAwC;IACxC,QAAQ,CAAC,QAAQ,CAAC,EAAE,UAAU,GAAG,SAAS,CAAC;CAC9C;AAED;;;;;;;;GAQG;AACH,MAAM,WAAW,qBAAqB;IAClC,gEAAgE;IAChE,QAAQ,CAAC,SAAS,EAAE,UAAU,CAAC;IAE/B;;;;;;;;;OASG;IACH,aAAa,IAAI,UAAU,CAAC;IAE5B;;OAEG;IACH,IAAI,CAAC,CAAC,IAAI,EAAE,UAAU,EAAE,IAAI,CAAC,EAAE,OAAO,GAAG,UAAU,CAAC;IAEpD;;OAEG;IACH,WAAW,CAAC,CAAC,IAAI,EAAE,UAAU,GAAG,UAAU,CAAC;CAC9C;AAED;;GAEG;AACH,MAAM,WAAW,qBAAqB;IAClC,uDAAuD;IACvD,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAC;IAC1B,wCAAwC;IACxC,QAAQ,CAAC,UAAU,EAAE,WAAW,CAAC,MAAM,EAAE,oBAAoB,CAAC,CAAC;IAC/D,oCAAoC;IACpC,QAAQ,CAAC,MAAM,EAAE,WAAW,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAC7C,uCAAuC;IACvC,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;CAC/B;AAED;;GAEG;AACH,eAAO,MAAM,WAAW;IACpB,6BAA6B;;IAE7B,+BAA+B;;IAE/B,kCAAkC;;IAElC,8BAA8B;;IAE9B,4BAA4B;;CAEtB,CAAC;AAEX,MAAM,MAAM,WAAW,GAAG,CAAC,OAAO,WAAW,CAAC,CAAC,MAAM,OAAO,WAAW,CAAC,CAAC;AAEzE;;GAEG;AACH,MAAM,WAAW,YAAY;IACzB,+BAA+B;IAC/B,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IACpB,2BAA2B;IAC3B,KAAK,EAAE,WAAW,CAAC;IACnB,iCAAiC;IACjC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,gCAAgC;IAChC,aAAa,EAAE,MAAM,GAAG,IAAI,CAAC;IAC7B,0CAA0C;IAC1C,aAAa,EAAE,MAAM,GAAG,IAAI,CAAC;CAChC"}

package/build/workers/types.js

@@ -0,0 +1,60 @@
+/**
+ * Worker thread types for parallel signing operations.
+ *
+ * SECURITY NOTES:
+ * - Private keys are NEVER shared via SharedArrayBuffer
+ * - Keys are cloned via postMessage (isolated per worker)
+ * - Keys are zeroed immediately after signing
+ * - Workers are pooled for performance but keys don't persist
+ *
+ * @packageDocumentation
+ */
+/**
+ * Signature type enum for worker operations.
+ */
+export const SignatureType = {
+    /** ECDSA signature (secp256k1) */
+    ECDSA: 0,
+    /** Schnorr signature (BIP340) */
+    Schnorr: 1,
+};
+/**
+ * Type guard for error responses.
+ */
+export function isSigningError(response) {
+    return response.type === 'error';
+}
+/**
+ * Type guard for success responses.
+ */
+export function isSigningResult(response) {
+    return response.type === 'result';
+}
+/**
+ * Type guard for batch result responses.
+ */
+export function isBatchResult(response) {
+    return response.type === 'batchResult';
+}
+/**
+ * Type guard for ready responses.
+ */
+export function isWorkerReady(response) {
+    return response.type === 'ready';
+}
+/**
+ * Worker state for pool management.
+ */
+export const WorkerState = {
+    /** Worker is initializing */
+    Initializing: 0,
+    /** Worker is ready and idle */
+    Idle: 1,
+    /** Worker is processing a task */
+    Busy: 2,
+    /** Worker is shutting down */
+    ShuttingDown: 3,
+    /** Worker has terminated */
+    Terminated: 4,
+};
+//# sourceMappingURL=types.js.map

package/build/workers/types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../../src/workers/types.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAEH;;GAEG;AACH,MAAM,CAAC,MAAM,aAAa,GAAG;IACzB,kCAAkC;IAClC,KAAK,EAAE,CAAC;IACR,iCAAiC;IACjC,OAAO,EAAE,CAAC;CACJ,CAAC;AAqMX;;GAEG;AACH,MAAM,UAAU,cAAc,CAAC,QAAwB;IACnD,OAAO,QAAQ,CAAC,IAAI,KAAK,OAAO,CAAC;AACrC,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,eAAe,CAAC,QAAwB;IACpD,OAAO,QAAQ,CAAC,IAAI,KAAK,QAAQ,CAAC;AACtC,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,aAAa,CAAC,QAAwB;IAClD,OAAO,QAAQ,CAAC,IAAI,KAAK,aAAa,CAAC;AAC3C,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,aAAa,CAAC,QAAwB;IAClD,OAAO,QAAQ,CAAC,IAAI,KAAK,OAAO,CAAC;AACrC,CAAC;AAyID;;GAEG;AACH,MAAM,CAAC,MAAM,WAAW,GAAG;IACvB,6BAA6B;IAC7B,YAAY,EAAE,CAAC;IACf,+BAA+B;IAC/B,IAAI,EAAE,CAAC;IACP,kCAAkC;IAClC,IAAI,EAAE,CAAC;IACP,8BAA8B;IAC9B,YAAY,EAAE,CAAC;IACf,4BAA4B;IAC5B,UAAU,EAAE,CAAC;CACP,CAAC"}

package/package.json

@@ -1,7 +1,13 @@
 {
     "name": "@btc-vision/bitcoin",
     "type": "module",
-    "version": "6.5.6",
+    "version": "7.0.0-alpha.0",
+    "sideEffects": false,
+    "overrides": {
+        "ecpair": {
+            "valibot": "^1.2.0"
+        }
+    },
     "description": "Client-side Bitcoin JavaScript library",
     "engines": {
         "node": ">=24.0.0"
@@ -26,6 +32,58 @@
             "types": "./browser/index.d.ts",
             "import": "./browser/index.js",
             "default": "./browser/index.js"
+        },
+        "./address": {
+            "types": "./build/address.d.ts",
+            "import": "./build/address.js"
+        },
+        "./script": {
+            "types": "./build/script.d.ts",
+            "import": "./build/script.js"
+        },
+        "./crypto": {
+            "types": "./build/crypto.d.ts",
+            "import": "./build/crypto.js"
+        },
+        "./transaction": {
+            "types": "./build/transaction.d.ts",
+            "import": "./build/transaction.js"
+        },
+        "./block": {
+            "types": "./build/block.d.ts",
+            "import": "./build/block.js"
+        },
+        "./psbt": {
+            "types": "./build/psbt.d.ts",
+            "import": "./build/psbt.js"
+        },
+        "./networks": {
+            "types": "./build/networks.d.ts",
+            "import": "./build/networks.js"
+        },
+        "./payments": {
+            "types": "./build/payments/index.d.ts",
+            "import": "./build/payments/index.js"
+        },
+        "./payments/*": {
+            "types": "./build/payments/*.d.ts",
+            "import": "./build/payments/*.js"
+        },
+        "./io": {
+            "types": "./build/io/index.d.ts",
+            "import": "./build/io/index.js"
+        },
+        "./ecc": {
+            "types": "./build/ecc/index.d.ts",
+            "import": "./build/ecc/index.js"
+        },
+        "./types": {
+            "types": "./build/types.d.ts",
+            "import": "./build/types.js"
+        },
+        "./errors": {
+            "types": "./build/errors.d.ts",
+            "import": "./build/errors.js"
         }
     },
     "browser": {
@@ -58,15 +116,13 @@
     },
     "scripts": {
         "watch": "tsc --watch",
-        "build": "eslint src && tsc",
+        "build": "eslint src && tsc --build tsconfig.build.json",
         "setup": "npm i && npm run build",
         "browserBuild": "vite build --config vite.config.browser.ts",
         "audit": "better-npm-audit audit -l high",
         "clean": "rimraf build",
         "coverage": "vitest run --coverage",
         "doc": "typedoc",
-        "format": "npm run prettier -- --write",
-        "formatjs": "npm run prettier -- --write",
         "format:ci": "npm run prettier -- --check && npm run prettier -- --check",
         "gitdiff:ci": "npm run build && git diff --exit-code",
         "integration": "vitest run --config vitest.config.integration.ts",
@@ -76,8 +132,11 @@
         "test": "npm run build && npm run lint && vitest run",
         "test:watch": "vitest",
         "unit": "vitest run",
+        "bench": "vitest bench benchmark/",
+        "bench:run": "npx tsx benchmark/signing.bench.ts",
         "check:circular": "madge --circular --extensions ts,tsx src/",
-        "prebuild": "npm run check:circular"
+        "prebuild:ecc": "npx tsx scripts/bundle-ecc.ts",
+        "prebuild": "npm run prebuild:ecc && npm run check:circular"
     },
     "devDependencies": {
         "@eslint/js": "^9.39.2",
@@ -91,7 +150,7 @@
         "bip68": "^1.0.4",
         "bs58": "^6.0.0",
         "dhttp": "^3.0.3",
-        "ecpair": "^2.1.0",
+        "ecpair": "^3.0.0",
         "eslint": "^9.39.2",
         "https-browserify": "^1.0.0",
         "madge": "^8.0.0",
@@ -120,12 +179,11 @@
         "@noble/secp256k1": "^3.0.0",
         "assert": "^2.1.0",
         "bech32": "^2.0.0",
-        "bip174": "^2.1.1",
+        "bip174": "^3.0.0",
         "browserify-zlib": "^0.2.0",
         "bs58check": "^4.0.0",
         "buffer": "^6.0.3",
         "process": "^0.11.10",
-        "typeforce": "^1.18.0",
         "varuint-bitcoin": "^2.0.0"
     }
 }

package/scripts/bundle-ecc.ts

@@ -0,0 +1,111 @@
+/**
+ * Build script to bundle @noble/secp256k1 + hashes for embedding in workers.
+ *
+ * This creates a self-contained IIFE that can be executed in a worker
+ * without any network requests or module system dependencies.
+ *
+ * Usage: npx tsx scripts/bundle-ecc.ts
+ */
+
+import { build } from 'esbuild';
+import { writeFileSync, mkdirSync } from 'fs';
+import { dirname, resolve } from 'path';
+import { fileURLToPath } from 'url';
+
+const __dirname = dirname(fileURLToPath(import.meta.url));
+const projectRoot = resolve(__dirname, '..');
+
+async function bundleEcc(): Promise<void> {
+    console.log('Bundling @noble/secp256k1 + hashes for worker embedding...');
+
+    // Create a wrapper that exports everything we need
+    const entryCode = `
+        import * as secp from '@noble/secp256k1';
+        import { sha256 } from '@noble/hashes/sha2.js';
+        import { hmac } from '@noble/hashes/hmac.js';
+
+        // Configure hashes for sync operations
+        secp.hashes.sha256 = sha256;
+        secp.hashes.hmacSha256 = (key, ...msgs) => {
+            const merged = new Uint8Array(msgs.reduce((acc, m) => acc + m.length, 0));
+            let offset = 0;
+            for (const m of msgs) {
+                merged.set(m, offset);
+                offset += m.length;
+            }
+            return hmac(sha256, key, merged);
+        };
+
+        export { secp, sha256, hmac };
+    `;
+
+    // Write temp entry file
+    const tempEntry = resolve(projectRoot, 'scripts/.temp-ecc-entry.js');
+    writeFileSync(tempEntry, entryCode);
+
+    // Bundle everything as IIFE
+    const result = await build({
+        entryPoints: [tempEntry],
+        bundle: true,
+        format: 'iife',
+        globalName: 'nobleBundle',
+        platform: 'browser',
+        target: 'es2020',
+        minify: true,
+        write: false,
+    });
+
+    // Clean up temp file
+    const { unlinkSync } = await import('fs');
+    unlinkSync(tempEntry);
+
+    if (result.outputFiles.length === 0) {
+        throw new Error('esbuild produced no output');
+    }
+
+    const bundledCode = result.outputFiles[0].text;
+
+    // Generate TypeScript file with the bundled code as a constant
+    const outputContent = `/**
+ * Bundled @noble/secp256k1 + hashes for worker embedding.
+ *
+ * AUTO-GENERATED FILE - DO NOT EDIT
+ * Generated by: scripts/bundle-ecc.ts
+ *
+ * This embeds the entire @noble/secp256k1 library with sha256/hmac
+ * as an IIFE string that can be executed in a Web Worker without network requests.
+ *
+ * @packageDocumentation
+ */
+
+/**
+ * Bundled @noble/secp256k1 + hashes library as an IIFE string.
+ *
+ * When executed, this creates a global \`nobleBundle\` object with:
+ * - secp: The full @noble/secp256k1 module (with hashes configured)
+ * - sha256: The sha256 hash function
+ * - hmac: The hmac function
+ */
+export const ECC_BUNDLE = ${JSON.stringify(bundledCode)};
+
+/**
+ * Size of the bundled code in bytes.
+ */
+export const ECC_BUNDLE_SIZE = ${bundledCode.length};
+`;
+
+    // Ensure output directory exists
+    const outputPath = resolve(projectRoot, 'src/workers/ecc-bundle.ts');
+    mkdirSync(dirname(outputPath), { recursive: true });
+
+    // Write the output file
+    writeFileSync(outputPath, outputContent, 'utf-8');
+
+    console.log('Bundle created: ' + outputPath);
+    console.log('Bundle size: ' + (bundledCode.length / 1024).toFixed(2) + ' KB');
+}
+
+bundleEcc().catch((error) => {
+    console.error('Failed to bundle ECC library:', error);
+    process.exit(1);
+});