@dynamic-labs-wallet/btc-utils 1.0.104 → 1.0.106

package/index.cjs

@@ -726,8 +726,12 @@ function _instanceof$3(left, right) {
  * Converts an ECDSA signature to DER format
  *
  * @param signature - The ECDSA signature
+ * @param sighashType - The sighash type to append as the DER trailing byte.
+ *   Must match the type the signing hash was built with, or the signature will
+ *   fail verification at finalize/broadcast. Defaults to SIGHASH_ALL.
  * @returns The DER encoded signature
  */ var convertSignatureToDER = function(signature) {
+    var sighashType = arguments.length > 1 && arguments[1] !== void 0 ? arguments[1] : bitcoin__namespace.Transaction.SIGHASH_ALL;
     var r = _instanceof$3(signature.r, Uint8Array) ? signature.r : new Uint8Array(signature.r);
     var s = _instanceof$3(signature.s, Uint8Array) ? signature.s : new Uint8Array(signature.s);
     var r32 = new Uint8Array(32);
@@ -739,7 +743,7 @@ function _instanceof$3(left, right) {
     var rawSignature = new Uint8Array(64);
     rawSignature.set(r32, 0);
     rawSignature.set(s32, 32);
-    var derSignature = bitcoin__namespace.script.signature.encode(rawSignature, bitcoin__namespace.Transaction.SIGHASH_ALL);
+    var derSignature = bitcoin__namespace.script.signature.encode(rawSignature, sighashType);
     return derSignature;
 };
 
@@ -1210,19 +1214,34 @@ function _instanceof$2(left, right) {
  * Converts a signature to a Buffer format suitable for Taproot (BIP340/Schnorr)
  *
  * @param signature - The signature from MPC (can be Uint8Array, Buffer, or EcdsaSignature object)
- * @returns A Buffer containing the 64-byte Schnorr signature
+ * @param sighashType - The sighash type the signing hash was built with. Per
+ *   BIP-341 the signature stays 64 bytes for SIGHASH_DEFAULT and gains the
+ *   sighash type as a 65th byte for any other type. Defaults to SIGHASH_DEFAULT.
+ * @returns A Buffer containing the 64-byte (or 65-byte) Schnorr signature
  */ var convertSignatureToTaprootBuffer = function(signature) {
+    var sighashType = arguments.length > 1 && arguments[1] !== void 0 ? arguments[1] : bitcoin__namespace.Transaction.SIGHASH_DEFAULT;
+    var schnorrSignature;
     if (_instanceof$2(signature, Uint8Array) || Buffer.isBuffer(signature)) {
-        return Buffer.from(signature);
+        schnorrSignature = Buffer.from(signature);
+    } else {
+        var r = signature.r;
+        var s = signature.s;
+        var rBuf = Buffer.isBuffer(r) ? r : Buffer.from(r);
+        var sBuf = Buffer.isBuffer(s) ? s : Buffer.from(s);
+        // Safe: creates Uint8Array views over Buffer's underlying memory without copying
+        schnorrSignature = Buffer.concat([
+            new Uint8Array(rBuf),
+            new Uint8Array(sBuf)
+        ]);
+    }
+    if (sighashType === bitcoin__namespace.Transaction.SIGHASH_DEFAULT) {
+        return schnorrSignature;
     }
-    var r = signature.r;
-    var s = signature.s;
-    var rBuf = Buffer.isBuffer(r) ? r : Buffer.from(r);
-    var sBuf = Buffer.isBuffer(s) ? s : Buffer.from(s);
-    // Safe: creates Uint8Array views over Buffer's underlying memory without copying
     return Buffer.concat([
-        new Uint8Array(rBuf),
-        new Uint8Array(sBuf)
+        new Uint8Array(schnorrSignature),
+        new Uint8Array([
+            sighashType
+        ])
     ]);
 };
 
@@ -1306,6 +1325,72 @@ function _instanceof$1(left, right) {
     }
 };
 
+/**
+ * Resolves the sighash type for a PSBT input.
+ *
+ * The type is read from the PSBT itself (BIP-174 `PSBT_IN_SIGHASH_TYPE`), never
+ * supplied by the caller — the signing hash and the policy layer's verification
+ * hash must be derived from the same bytes, or every non-default signature
+ * would be rejected as tampered.
+ *
+ * When the input declares nothing, falls back to the historical default:
+ * SIGHASH_DEFAULT (0x00) for Taproot, SIGHASH_ALL (0x01) otherwise.
+ *
+ * @param input - The PSBT input to resolve the sighash type for
+ * @param isTaproot - Whether the input is spent as Taproot. Defaults to
+ *   detecting `tapInternalKey`; pass explicitly when the caller already knows
+ *   which signing branch it is on, so the fallback matches the hash function
+ *   actually used.
+ * @returns The sighash type to build and encode the signature with
+ */ var getSigHashType = function(input) {
+    var isTaproot = arguments.length > 1 && arguments[1] !== void 0 ? arguments[1] : Boolean(input.tapInternalKey);
+    var _input_sighashType;
+    return (_input_sighashType = input.sighashType) !== null && _input_sighashType !== void 0 ? _input_sighashType : isTaproot ? bitcoin__namespace.Transaction.SIGHASH_DEFAULT : bitcoin__namespace.Transaction.SIGHASH_ALL;
+};
+
+/**
+ * Throws unless every input's PSBT-declared sighash type is in the allow-list.
+ *
+ * Call this before any signing begins — inputs are signed in parallel, so
+ * throwing partway through would leave a partially signed PSBT behind.
+ *
+ * An empty array permits nothing rather than everything: a caller whose
+ * allow-list computes to empty must not silently get the guard disabled. Omit
+ * the parameter entirely to permit any declared type.
+ *
+ * @param inputsToSign - The wallet-owned inputs about to be signed, with their PSBT indexes
+ * @param isTaproot - Whether signing takes the Taproot branch, so the fallback
+ *   sighash type matches the hash function actually used
+ * @param allowedSighash - Optional allow-list of permitted sighash types
+ */ var assertSighashAllowed = function(inputsToSign, isTaproot, allowedSighash) {
+    if (!allowedSighash) {
+        return;
+    }
+    var _iteratorNormalCompletion = true, _didIteratorError = false, _iteratorError = undefined;
+    try {
+        for(var _iterator = inputsToSign[Symbol.iterator](), _step; !(_iteratorNormalCompletion = (_step = _iterator.next()).done); _iteratorNormalCompletion = true){
+            var _step_value = _step.value, input = _step_value.input, index = _step_value.index;
+            var sigHashType = getSigHashType(input, isTaproot);
+            if (!allowedSighash.includes(sigHashType)) {
+                throw new Error("Input ".concat(index, " declares sighash type ").concat(sigHashType, ", which is not in allowedSighash: ").concat(allowedSighash.join(', ') || '(empty)'));
+            }
+        }
+    } catch (err) {
+        _didIteratorError = true;
+        _iteratorError = err;
+    } finally{
+        try {
+            if (!_iteratorNormalCompletion && _iterator.return != null) {
+                _iterator.return();
+            }
+        } finally{
+            if (_didIteratorError) {
+                throw _iteratorError;
+            }
+        }
+    }
+};
+
 function _instanceof(left, right) {
     if (right != null && typeof Symbol !== "undefined" && right[Symbol.hasInstance]) {
         return !!right[Symbol.hasInstance](left);
@@ -1412,11 +1497,13 @@ function _type_of(obj) {
     for(var i = 0; i < psbt.inputCount; i++){
         var input = psbt.data.inputs[i];
         if (input.tapInternalKey) {
-            // Taproot (BIP-341) - uses hashForWitnessV1 with SIGHASH_DEFAULT
-            var hash = tx.hashForWitnessV1(i, prevOutScripts, values, bitcoin__namespace.Transaction.SIGHASH_DEFAULT);
+            // Taproot (BIP-341) - uses hashForWitnessV1 with the input's declared
+            // sighash type, defaulting to SIGHASH_DEFAULT
+            var hash = tx.hashForWitnessV1(i, prevOutScripts, values, getSigHashType(input, true));
             sighashes.push(Buffer.from(hash).toString('hex'));
         } else {
-            // Native SegWit (BIP-143) - uses hashForWitnessV0 with SIGHASH_ALL
+            // Native SegWit (BIP-143) - uses hashForWitnessV0 with the input's
+            // declared sighash type, defaulting to SIGHASH_ALL
             // witnessUtxo is guaranteed to exist from collectPSBTInputData validation
             var _input_witnessUtxo = input.witnessUtxo, script = _input_witnessUtxo.script, value = _input_witnessUtxo.value;
             // Build P2PKH script code from the pubkey hash in the witness program
@@ -1428,7 +1515,7 @@ function _type_of(obj) {
             if (!scriptCode) {
                 throw new Error("Failed to generate scriptCode for input ".concat(i));
             }
-            var hash1 = tx.hashForWitnessV0(i, scriptCode, value, bitcoin__namespace.Transaction.SIGHASH_ALL);
+            var hash1 = tx.hashForWitnessV0(i, scriptCode, value, getSigHashType(input, false));
             sighashes.push(Buffer.from(hash1).toString('hex'));
         }
     }
@@ -1470,6 +1557,7 @@ function _type_of(obj) {
     return Buffer.from(formattedMessage).toString('hex');
 };
 
+exports.assertSighashAllowed = assertSighashAllowed;
 exports.calculateBip322Hash = calculateBip322Hash;
 exports.calculateTaprootTweak = calculateTaprootTweak;
 exports.collectPSBTInputData = collectPSBTInputData;
@@ -1489,6 +1577,7 @@ exports.getBitcoinNetwork = getBitcoinNetwork;
 exports.getDefaultRpcUrl = getDefaultRpcUrl;
 exports.getFeeRates = getFeeRates;
 exports.getPublicKeyFromPrivateKey = getPublicKeyFromPrivateKey;
+exports.getSigHashType = getSigHashType;
 exports.getUTXOs = getUTXOs;
 exports.initEccLib = initEccLib;
 exports.normalizeForCompressed = normalizeForCompressed;

package/index.esm.js

@@ -706,8 +706,12 @@ function _instanceof$3(left, right) {
  * Converts an ECDSA signature to DER format
  *
  * @param signature - The ECDSA signature
+ * @param sighashType - The sighash type to append as the DER trailing byte.
+ *   Must match the type the signing hash was built with, or the signature will
+ *   fail verification at finalize/broadcast. Defaults to SIGHASH_ALL.
  * @returns The DER encoded signature
  */ var convertSignatureToDER = function(signature) {
+    var sighashType = arguments.length > 1 && arguments[1] !== void 0 ? arguments[1] : bitcoin.Transaction.SIGHASH_ALL;
     var r = _instanceof$3(signature.r, Uint8Array) ? signature.r : new Uint8Array(signature.r);
     var s = _instanceof$3(signature.s, Uint8Array) ? signature.s : new Uint8Array(signature.s);
     var r32 = new Uint8Array(32);
@@ -719,7 +723,7 @@ function _instanceof$3(left, right) {
     var rawSignature = new Uint8Array(64);
     rawSignature.set(r32, 0);
     rawSignature.set(s32, 32);
-    var derSignature = bitcoin.script.signature.encode(rawSignature, bitcoin.Transaction.SIGHASH_ALL);
+    var derSignature = bitcoin.script.signature.encode(rawSignature, sighashType);
     return derSignature;
 };
 
@@ -1190,19 +1194,34 @@ function _instanceof$2(left, right) {
  * Converts a signature to a Buffer format suitable for Taproot (BIP340/Schnorr)
  *
  * @param signature - The signature from MPC (can be Uint8Array, Buffer, or EcdsaSignature object)
- * @returns A Buffer containing the 64-byte Schnorr signature
+ * @param sighashType - The sighash type the signing hash was built with. Per
+ *   BIP-341 the signature stays 64 bytes for SIGHASH_DEFAULT and gains the
+ *   sighash type as a 65th byte for any other type. Defaults to SIGHASH_DEFAULT.
+ * @returns A Buffer containing the 64-byte (or 65-byte) Schnorr signature
  */ var convertSignatureToTaprootBuffer = function(signature) {
+    var sighashType = arguments.length > 1 && arguments[1] !== void 0 ? arguments[1] : bitcoin.Transaction.SIGHASH_DEFAULT;
+    var schnorrSignature;
     if (_instanceof$2(signature, Uint8Array) || Buffer.isBuffer(signature)) {
-        return Buffer.from(signature);
+        schnorrSignature = Buffer.from(signature);
+    } else {
+        var r = signature.r;
+        var s = signature.s;
+        var rBuf = Buffer.isBuffer(r) ? r : Buffer.from(r);
+        var sBuf = Buffer.isBuffer(s) ? s : Buffer.from(s);
+        // Safe: creates Uint8Array views over Buffer's underlying memory without copying
+        schnorrSignature = Buffer.concat([
+            new Uint8Array(rBuf),
+            new Uint8Array(sBuf)
+        ]);
+    }
+    if (sighashType === bitcoin.Transaction.SIGHASH_DEFAULT) {
+        return schnorrSignature;
     }
-    var r = signature.r;
-    var s = signature.s;
-    var rBuf = Buffer.isBuffer(r) ? r : Buffer.from(r);
-    var sBuf = Buffer.isBuffer(s) ? s : Buffer.from(s);
-    // Safe: creates Uint8Array views over Buffer's underlying memory without copying
     return Buffer.concat([
-        new Uint8Array(rBuf),
-        new Uint8Array(sBuf)
+        new Uint8Array(schnorrSignature),
+        new Uint8Array([
+            sighashType
+        ])
     ]);
 };
 
@@ -1286,6 +1305,72 @@ function _instanceof$1(left, right) {
     }
 };
 
+/**
+ * Resolves the sighash type for a PSBT input.
+ *
+ * The type is read from the PSBT itself (BIP-174 `PSBT_IN_SIGHASH_TYPE`), never
+ * supplied by the caller — the signing hash and the policy layer's verification
+ * hash must be derived from the same bytes, or every non-default signature
+ * would be rejected as tampered.
+ *
+ * When the input declares nothing, falls back to the historical default:
+ * SIGHASH_DEFAULT (0x00) for Taproot, SIGHASH_ALL (0x01) otherwise.
+ *
+ * @param input - The PSBT input to resolve the sighash type for
+ * @param isTaproot - Whether the input is spent as Taproot. Defaults to
+ *   detecting `tapInternalKey`; pass explicitly when the caller already knows
+ *   which signing branch it is on, so the fallback matches the hash function
+ *   actually used.
+ * @returns The sighash type to build and encode the signature with
+ */ var getSigHashType = function(input) {
+    var isTaproot = arguments.length > 1 && arguments[1] !== void 0 ? arguments[1] : Boolean(input.tapInternalKey);
+    var _input_sighashType;
+    return (_input_sighashType = input.sighashType) !== null && _input_sighashType !== void 0 ? _input_sighashType : isTaproot ? bitcoin.Transaction.SIGHASH_DEFAULT : bitcoin.Transaction.SIGHASH_ALL;
+};
+
+/**
+ * Throws unless every input's PSBT-declared sighash type is in the allow-list.
+ *
+ * Call this before any signing begins — inputs are signed in parallel, so
+ * throwing partway through would leave a partially signed PSBT behind.
+ *
+ * An empty array permits nothing rather than everything: a caller whose
+ * allow-list computes to empty must not silently get the guard disabled. Omit
+ * the parameter entirely to permit any declared type.
+ *
+ * @param inputsToSign - The wallet-owned inputs about to be signed, with their PSBT indexes
+ * @param isTaproot - Whether signing takes the Taproot branch, so the fallback
+ *   sighash type matches the hash function actually used
+ * @param allowedSighash - Optional allow-list of permitted sighash types
+ */ var assertSighashAllowed = function(inputsToSign, isTaproot, allowedSighash) {
+    if (!allowedSighash) {
+        return;
+    }
+    var _iteratorNormalCompletion = true, _didIteratorError = false, _iteratorError = undefined;
+    try {
+        for(var _iterator = inputsToSign[Symbol.iterator](), _step; !(_iteratorNormalCompletion = (_step = _iterator.next()).done); _iteratorNormalCompletion = true){
+            var _step_value = _step.value, input = _step_value.input, index = _step_value.index;
+            var sigHashType = getSigHashType(input, isTaproot);
+            if (!allowedSighash.includes(sigHashType)) {
+                throw new Error("Input ".concat(index, " declares sighash type ").concat(sigHashType, ", which is not in allowedSighash: ").concat(allowedSighash.join(', ') || '(empty)'));
+            }
+        }
+    } catch (err) {
+        _didIteratorError = true;
+        _iteratorError = err;
+    } finally{
+        try {
+            if (!_iteratorNormalCompletion && _iterator.return != null) {
+                _iterator.return();
+            }
+        } finally{
+            if (_didIteratorError) {
+                throw _iteratorError;
+            }
+        }
+    }
+};
+
 function _instanceof(left, right) {
     if (right != null && typeof Symbol !== "undefined" && right[Symbol.hasInstance]) {
         return !!right[Symbol.hasInstance](left);
@@ -1392,11 +1477,13 @@ function _type_of(obj) {
     for(var i = 0; i < psbt.inputCount; i++){
         var input = psbt.data.inputs[i];
         if (input.tapInternalKey) {
-            // Taproot (BIP-341) - uses hashForWitnessV1 with SIGHASH_DEFAULT
-            var hash = tx.hashForWitnessV1(i, prevOutScripts, values, bitcoin.Transaction.SIGHASH_DEFAULT);
+            // Taproot (BIP-341) - uses hashForWitnessV1 with the input's declared
+            // sighash type, defaulting to SIGHASH_DEFAULT
+            var hash = tx.hashForWitnessV1(i, prevOutScripts, values, getSigHashType(input, true));
             sighashes.push(Buffer.from(hash).toString('hex'));
         } else {
-            // Native SegWit (BIP-143) - uses hashForWitnessV0 with SIGHASH_ALL
+            // Native SegWit (BIP-143) - uses hashForWitnessV0 with the input's
+            // declared sighash type, defaulting to SIGHASH_ALL
             // witnessUtxo is guaranteed to exist from collectPSBTInputData validation
             var _input_witnessUtxo = input.witnessUtxo, script = _input_witnessUtxo.script, value = _input_witnessUtxo.value;
             // Build P2PKH script code from the pubkey hash in the witness program
@@ -1408,7 +1495,7 @@ function _type_of(obj) {
             if (!scriptCode) {
                 throw new Error("Failed to generate scriptCode for input ".concat(i));
             }
-            var hash1 = tx.hashForWitnessV0(i, scriptCode, value, bitcoin.Transaction.SIGHASH_ALL);
+            var hash1 = tx.hashForWitnessV0(i, scriptCode, value, getSigHashType(input, false));
             sighashes.push(Buffer.from(hash1).toString('hex'));
         }
     }
@@ -1450,4 +1537,4 @@ function _type_of(obj) {
     return Buffer.from(formattedMessage).toString('hex');
 };
 
-export { calculateBip322Hash, calculateTaprootTweak, collectPSBTInputData, computeBip322HashHex, convertSignatureToDER, convertSignatureToTaprootBuffer, createLegacyAddress, createNativeSegWitAddress, createSegWitAddress, createTaprootAddress, doesInputBelongToAddress, encodeBip322Signature, extractPsbtSighashes, extractPublicKeyHex, getAddressTypeFromDerivationPath, getBitcoinNetwork, getDefaultRpcUrl, getFeeRates, getPublicKeyFromPrivateKey, getUTXOs, initEccLib, normalizeForCompressed, normalizeForTaproot, normalizePublicKey, privateKeyToWIF, publicKeyToBitcoinAddress, selectUTXOs, toBitcoinNetwork, toBuffer, wifToPrivateKey };
+export { assertSighashAllowed, calculateBip322Hash, calculateTaprootTweak, collectPSBTInputData, computeBip322HashHex, convertSignatureToDER, convertSignatureToTaprootBuffer, createLegacyAddress, createNativeSegWitAddress, createSegWitAddress, createTaprootAddress, doesInputBelongToAddress, encodeBip322Signature, extractPsbtSighashes, extractPublicKeyHex, getAddressTypeFromDerivationPath, getBitcoinNetwork, getDefaultRpcUrl, getFeeRates, getPublicKeyFromPrivateKey, getSigHashType, getUTXOs, initEccLib, normalizeForCompressed, normalizeForTaproot, normalizePublicKey, privateKeyToWIF, publicKeyToBitcoinAddress, selectUTXOs, toBitcoinNetwork, toBuffer, wifToPrivateKey };

package/package.json

@@ -1,11 +1,11 @@
 {
   "name": "@dynamic-labs-wallet/btc-utils",
-  "version": "1.0.104",
+  "version": "1.0.106",
   "license": "MIT",
   "type": "module",
   "sideEffects": false,
   "dependencies": {
-    "@dynamic-labs-wallet/core": "1.0.104",
+    "@dynamic-labs-wallet/core": "1.0.106",
     "bitcoinjs-lib": "^7.0.0",
     "bip322-js": "^3.0.0",
     "@noble/hashes": "1.7.1",

package/src/assertSighashAllowed/assertSighashAllowed.d.ts

@@ -0,0 +1,21 @@
+import type * as bitcoin from 'bitcoinjs-lib';
+/**
+ * Throws unless every input's PSBT-declared sighash type is in the allow-list.
+ *
+ * Call this before any signing begins — inputs are signed in parallel, so
+ * throwing partway through would leave a partially signed PSBT behind.
+ *
+ * An empty array permits nothing rather than everything: a caller whose
+ * allow-list computes to empty must not silently get the guard disabled. Omit
+ * the parameter entirely to permit any declared type.
+ *
+ * @param inputsToSign - The wallet-owned inputs about to be signed, with their PSBT indexes
+ * @param isTaproot - Whether signing takes the Taproot branch, so the fallback
+ *   sighash type matches the hash function actually used
+ * @param allowedSighash - Optional allow-list of permitted sighash types
+ */
+export declare const assertSighashAllowed: (inputsToSign: {
+    input: bitcoin.Psbt["data"]["inputs"][number];
+    index: number;
+}[], isTaproot: boolean, allowedSighash?: number[]) => void;
+//# sourceMappingURL=assertSighashAllowed.d.ts.map

package/src/assertSighashAllowed/assertSighashAllowed.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"assertSighashAllowed.d.ts","sourceRoot":"","sources":["../../src/assertSighashAllowed/assertSighashAllowed.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,KAAK,OAAO,MAAM,eAAe,CAAC;AAG9C;;;;;;;;;;;;;;GAcG;AACH,eAAO,MAAM,oBAAoB,iBACjB;IAAE,KAAK,EAAE,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,CAAC;IAAC,KAAK,EAAE,MAAM,CAAA;CAAE,EAAE,aACrE,OAAO,mBACD,MAAM,EAAE,KACxB,IAgBF,CAAC"}

package/src/assertSighashAllowed/index.d.ts

@@ -0,0 +1,2 @@
+export { assertSighashAllowed } from './assertSighashAllowed.js';
+//# sourceMappingURL=index.d.ts.map

package/src/assertSighashAllowed/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/assertSighashAllowed/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,oBAAoB,EAAE,MAAM,2BAA2B,CAAC"}

package/src/convertSignatureToDER/convertSignatureToDER.d.ts

@@ -3,7 +3,10 @@ import type { EcdsaSignature } from '#internal/core';
  * Converts an ECDSA signature to DER format
  *
  * @param signature - The ECDSA signature
+ * @param sighashType - The sighash type to append as the DER trailing byte.
+ *   Must match the type the signing hash was built with, or the signature will
+ *   fail verification at finalize/broadcast. Defaults to SIGHASH_ALL.
  * @returns The DER encoded signature
  */
-export declare const convertSignatureToDER: (signature: EcdsaSignature) => Uint8Array;
+export declare const convertSignatureToDER: (signature: EcdsaSignature, sighashType?: number) => Uint8Array;
 //# sourceMappingURL=convertSignatureToDER.d.ts.map

package/src/convertSignatureToDER/convertSignatureToDER.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"convertSignatureToDER.d.ts","sourceRoot":"","sources":["../../src/convertSignatureToDER/convertSignatureToDER.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,gBAAgB,CAAC;AAErD;;;;;GAKG;AACH,eAAO,MAAM,qBAAqB,cAAe,cAAc,eAmB9D,CAAC"}
+{"version":3,"file":"convertSignatureToDER.d.ts","sourceRoot":"","sources":["../../src/convertSignatureToDER/convertSignatureToDER.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,gBAAgB,CAAC;AAErD;;;;;;;;GAQG;AACH,eAAO,MAAM,qBAAqB,cACrB,cAAc,gBACZ,MAAM,eAoBpB,CAAC"}

package/src/convertSignatureToTaprootBuffer/convertSignatureToTaprootBuffer.d.ts

@@ -3,7 +3,10 @@ import type { EcdsaSignature } from '#internal/core';
  * Converts a signature to a Buffer format suitable for Taproot (BIP340/Schnorr)
  *
  * @param signature - The signature from MPC (can be Uint8Array, Buffer, or EcdsaSignature object)
- * @returns A Buffer containing the 64-byte Schnorr signature
+ * @param sighashType - The sighash type the signing hash was built with. Per
+ *   BIP-341 the signature stays 64 bytes for SIGHASH_DEFAULT and gains the
+ *   sighash type as a 65th byte for any other type. Defaults to SIGHASH_DEFAULT.
+ * @returns A Buffer containing the 64-byte (or 65-byte) Schnorr signature
  */
-export declare const convertSignatureToTaprootBuffer: (signature: EcdsaSignature | Uint8Array | Buffer) => Buffer;
+export declare const convertSignatureToTaprootBuffer: (signature: EcdsaSignature | Uint8Array | Buffer, sighashType?: number) => Buffer;
 //# sourceMappingURL=convertSignatureToTaprootBuffer.d.ts.map

package/src/convertSignatureToTaprootBuffer/convertSignatureToTaprootBuffer.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"convertSignatureToTaprootBuffer.d.ts","sourceRoot":"","sources":["../../src/convertSignatureToTaprootBuffer/convertSignatureToTaprootBuffer.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,gBAAgB,CAAC;AAErD;;;;;GAKG;AACH,eAAO,MAAM,+BAA+B,cAAe,cAAc,GAAG,UAAU,GAAG,MAAM,KAAG,MAWjG,CAAC"}
+{"version":3,"file":"convertSignatureToTaprootBuffer.d.ts","sourceRoot":"","sources":["../../src/convertSignatureToTaprootBuffer/convertSignatureToTaprootBuffer.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,gBAAgB,CAAC;AAErD;;;;;;;;GAQG;AACH,eAAO,MAAM,+BAA+B,cAC/B,cAAc,GAAG,UAAU,GAAG,MAAM,gBAClC,MAAM,KAClB,MAmBF,CAAC"}

package/src/extractPsbtSighashes/extractPsbtSighashes.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"extractPsbtSighashes.d.ts","sourceRoot":"","sources":["../../src/extractPsbtSighashes/extractPsbtSighashes.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,2BAA2B,CAAC;AAMhE;;;;;;;GAOG;AACH,eAAO,MAAM,oBAAoB,eACnB,MAAM,YACT,cAAc,GAAG,SAAS,GAAG,SAAS,KAC9C,MAAM,EA4CR,CAAC"}
+{"version":3,"file":"extractPsbtSighashes.d.ts","sourceRoot":"","sources":["../../src/extractPsbtSighashes/extractPsbtSighashes.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,2BAA2B,CAAC;AAOhE;;;;;;;GAOG;AACH,eAAO,MAAM,oBAAoB,eACnB,MAAM,YACT,cAAc,GAAG,SAAS,GAAG,SAAS,KAC9C,MAAM,EA8CR,CAAC"}

package/src/getSigHashType/getSigHashType.d.ts

@@ -0,0 +1,21 @@
+import * as bitcoin from 'bitcoinjs-lib';
+/**
+ * Resolves the sighash type for a PSBT input.
+ *
+ * The type is read from the PSBT itself (BIP-174 `PSBT_IN_SIGHASH_TYPE`), never
+ * supplied by the caller — the signing hash and the policy layer's verification
+ * hash must be derived from the same bytes, or every non-default signature
+ * would be rejected as tampered.
+ *
+ * When the input declares nothing, falls back to the historical default:
+ * SIGHASH_DEFAULT (0x00) for Taproot, SIGHASH_ALL (0x01) otherwise.
+ *
+ * @param input - The PSBT input to resolve the sighash type for
+ * @param isTaproot - Whether the input is spent as Taproot. Defaults to
+ *   detecting `tapInternalKey`; pass explicitly when the caller already knows
+ *   which signing branch it is on, so the fallback matches the hash function
+ *   actually used.
+ * @returns The sighash type to build and encode the signature with
+ */
+export declare const getSigHashType: (input: bitcoin.Psbt["data"]["inputs"][number], isTaproot?: boolean) => number;
+//# sourceMappingURL=getSigHashType.d.ts.map

package/src/getSigHashType/getSigHashType.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"getSigHashType.d.ts","sourceRoot":"","sources":["../../src/getSigHashType/getSigHashType.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,OAAO,MAAM,eAAe,CAAC;AAEzC;;;;;;;;;;;;;;;;;GAiBG;AACH,eAAO,MAAM,cAAc,UAClB,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,0BAE5C,MAAkH,CAAC"}

package/src/getSigHashType/index.d.ts

@@ -0,0 +1,2 @@
+export { getSigHashType } from './getSigHashType.js';
+//# sourceMappingURL=index.d.ts.map

package/src/getSigHashType/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/getSigHashType/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,cAAc,EAAE,MAAM,qBAAqB,CAAC"}

package/src/index.d.ts

@@ -16,6 +16,8 @@ export { convertSignatureToTaprootBuffer } from './convertSignatureToTaprootBuff
 export { collectPSBTInputData } from './collectPSBTInputData/index.js';
 export { doesInputBelongToAddress } from './doesInputBelongToAddress/index.js';
 export { getBitcoinNetwork } from './getBitcoinNetwork/index.js';
+export { getSigHashType } from './getSigHashType/index.js';
+export { assertSighashAllowed } from './assertSighashAllowed/index.js';
 export { initEccLib } from './initEccLib/index.js';
 export { extractPublicKeyHex } from './extractPublicKeyHex/index.js';
 export type { UTXO } from './types.js';

package/src/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../packages/src/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,yBAAyB,EAAE,MAAM,sCAAsC,CAAC;AACjF,OAAO,EAAE,kBAAkB,EAAE,MAAM,+BAA+B,CAAC;AACnE,OAAO,EAAE,gCAAgC,EAAE,MAAM,6CAA6C,CAAC;AAC/F,OAAO,EAAE,mBAAmB,EAAE,MAAM,gCAAgC,CAAC;AACrE,OAAO,EAAE,qBAAqB,EAAE,MAAM,kCAAkC,CAAC;AACzE,OAAO,EAAE,eAAe,EAAE,MAAM,4BAA4B,CAAC;AAC7D,OAAO,EAAE,eAAe,EAAE,MAAM,4BAA4B,CAAC;AAC7D,OAAO,EAAE,0BAA0B,EAAE,MAAM,uCAAuC,CAAC;AACnF,OAAO,EAAE,qBAAqB,EAAE,MAAM,kCAAkC,CAAC;AACzE,OAAO,EAAE,QAAQ,EAAE,MAAM,qBAAqB,CAAC;AAC/C,OAAO,EAAE,WAAW,EAAE,MAAM,wBAAwB,CAAC;AACrD,OAAO,EAAE,WAAW,EAAE,MAAM,wBAAwB,CAAC;AACrD,OAAO,EAAE,gBAAgB,EAAE,MAAM,6BAA6B,CAAC;AAC/D,OAAO,EAAE,qBAAqB,EAAE,MAAM,kCAAkC,CAAC;AACzE,OAAO,EAAE,+BAA+B,EAAE,MAAM,4CAA4C,CAAC;AAC7F,OAAO,EAAE,oBAAoB,EAAE,MAAM,iCAAiC,CAAC;AACvE,OAAO,EAAE,wBAAwB,EAAE,MAAM,qCAAqC,CAAC;AAC/E,OAAO,EAAE,iBAAiB,EAAE,MAAM,8BAA8B,CAAC;AACjE,OAAO,EAAE,UAAU,EAAE,MAAM,uBAAuB,CAAC;AACnD,OAAO,EAAE,mBAAmB,EAAE,MAAM,gCAAgC,CAAC;AACrE,YAAY,EAAE,IAAI,EAAE,MAAM,YAAY,CAAC;AAGvC,OAAO,EAAE,mBAAmB,EAAE,MAAM,gCAAgC,CAAC;AACrE,OAAO,EAAE,mBAAmB,EAAE,MAAM,gCAAgC,CAAC;AACrE,OAAO,EAAE,yBAAyB,EAAE,MAAM,sCAAsC,CAAC;AACjF,OAAO,EAAE,oBAAoB,EAAE,MAAM,iCAAiC,CAAC;AAGvE,OAAO,EAAE,QAAQ,EAAE,MAAM,qBAAqB,CAAC;AAC/C,OAAO,EAAE,sBAAsB,EAAE,MAAM,mCAAmC,CAAC;AAC3E,OAAO,EAAE,mBAAmB,EAAE,MAAM,gCAAgC,CAAC;AACrE,OAAO,EAAE,gBAAgB,EAAE,MAAM,6BAA6B,CAAC;AAG/D,OAAO,EAAE,oBAAoB,EAAE,MAAM,iCAAiC,CAAC;AACvE,OAAO,EAAE,oBAAoB,EAAE,MAAM,iCAAiC,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../packages/src/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,yBAAyB,EAAE,MAAM,sCAAsC,CAAC;AACjF,OAAO,EAAE,kBAAkB,EAAE,MAAM,+BAA+B,CAAC;AACnE,OAAO,EAAE,gCAAgC,EAAE,MAAM,6CAA6C,CAAC;AAC/F,OAAO,EAAE,mBAAmB,EAAE,MAAM,gCAAgC,CAAC;AACrE,OAAO,EAAE,qBAAqB,EAAE,MAAM,kCAAkC,CAAC;AACzE,OAAO,EAAE,eAAe,EAAE,MAAM,4BAA4B,CAAC;AAC7D,OAAO,EAAE,eAAe,EAAE,MAAM,4BAA4B,CAAC;AAC7D,OAAO,EAAE,0BAA0B,EAAE,MAAM,uCAAuC,CAAC;AACnF,OAAO,EAAE,qBAAqB,EAAE,MAAM,kCAAkC,CAAC;AACzE,OAAO,EAAE,QAAQ,EAAE,MAAM,qBAAqB,CAAC;AAC/C,OAAO,EAAE,WAAW,EAAE,MAAM,wBAAwB,CAAC;AACrD,OAAO,EAAE,WAAW,EAAE,MAAM,wBAAwB,CAAC;AACrD,OAAO,EAAE,gBAAgB,EAAE,MAAM,6BAA6B,CAAC;AAC/D,OAAO,EAAE,qBAAqB,EAAE,MAAM,kCAAkC,CAAC;AACzE,OAAO,EAAE,+BAA+B,EAAE,MAAM,4CAA4C,CAAC;AAC7F,OAAO,EAAE,oBAAoB,EAAE,MAAM,iCAAiC,CAAC;AACvE,OAAO,EAAE,wBAAwB,EAAE,MAAM,qCAAqC,CAAC;AAC/E,OAAO,EAAE,iBAAiB,EAAE,MAAM,8BAA8B,CAAC;AACjE,OAAO,EAAE,cAAc,EAAE,MAAM,2BAA2B,CAAC;AAC3D,OAAO,EAAE,oBAAoB,EAAE,MAAM,iCAAiC,CAAC;AACvE,OAAO,EAAE,UAAU,EAAE,MAAM,uBAAuB,CAAC;AACnD,OAAO,EAAE,mBAAmB,EAAE,MAAM,gCAAgC,CAAC;AACrE,YAAY,EAAE,IAAI,EAAE,MAAM,YAAY,CAAC;AAGvC,OAAO,EAAE,mBAAmB,EAAE,MAAM,gCAAgC,CAAC;AACrE,OAAO,EAAE,mBAAmB,EAAE,MAAM,gCAAgC,CAAC;AACrE,OAAO,EAAE,yBAAyB,EAAE,MAAM,sCAAsC,CAAC;AACjF,OAAO,EAAE,oBAAoB,EAAE,MAAM,iCAAiC,CAAC;AAGvE,OAAO,EAAE,QAAQ,EAAE,MAAM,qBAAqB,CAAC;AAC/C,OAAO,EAAE,sBAAsB,EAAE,MAAM,mCAAmC,CAAC;AAC3E,OAAO,EAAE,mBAAmB,EAAE,MAAM,gCAAgC,CAAC;AACrE,OAAO,EAAE,gBAAgB,EAAE,MAAM,6BAA6B,CAAC;AAG/D,OAAO,EAAE,oBAAoB,EAAE,MAAM,iCAAiC,CAAC;AACvE,OAAO,EAAE,oBAAoB,EAAE,MAAM,iCAAiC,CAAC"}