@getomnichain/omnichain 0.6.1 → 0.6.2

package/CHANGELOG.md

@@ -8,6 +8,29 @@ The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.1.0/),
 
 ## [Unreleased]
 
+## [0.6.2] — 2026-10-04
+
+Adds multi-signer UTXO transactions (RIN-267). A consumer that spends pre-selected inputs owned by several keys can now assemble, sign per key, finalize and broadcast without importing `bitcoinjs-lib`. Keys stay with the consumer; the SDK receives signer objects.
+
+### Added
+
+- **`UtxoChain.assembleTransaction({ inputs, outputs, rbfEnabled? }): UnsignedUtxoTransaction`**: builds from explicit inputs (`{ utxo, parentTxHex }`) and outputs (`{ kind: 'address', address, valueSats }` or `{ kind: 'opReturn', data }`), in the given order, with no coin selection and no automatic change.
+  - Inputs are added the way `createTransferUnsignedTransaction` adds them (`nonWitnessUtxo` always, `witnessUtxo` on segwit and P2SH, RBF or final sequence).
+  - `feeSats` is inputs minus outputs, `feeRateSatsPerVByte` is `feeSats / estimatedVBytes`, `changeAddress` is `null`, and `inputsToSign` groups input indices by `ownerAddress`.
+  - Every input is checked against its parent transaction (txid, output value, output script) and against its `ownerAddress`, so the reported fee is what the chain will charge.
+  - Address outputs must be at or above the chain's dust value; at most one OP_RETURN output of up to 80 bytes; outputs may not exceed inputs.
+- **`UnsignedUtxoTransaction.signWith(signer): UnsignedUtxoTransaction`**: signs the P2WPKH and P2PKH inputs whose script belongs to `signer.publicKey` and returns a new transaction, so calls chain. Repeating a key is a no-op; a key that owns no input throws. Taproot, P2WSH and P2SH inputs are never signed. Works on transactions from `createTransferUnsignedTransaction` too.
+- **Parent checks before signing and finalizing**: `signWith` and `finalize` require every input's parent transaction, refuse a declared amount or script that differs from the parent output, and refuse a transaction whose real fee differs from `feeSats`. The signer is never called for such a transaction, so a provider that misreports an amount cannot lead to a signed, fee-burning transaction.
+- **`UnsignedUtxoTransaction.finalize(): { hex, txid, vsize }`**: requires a signature on every input (naming the first unsigned index), verifies every signature in strict low-S mode, refuses a fee rate of 5000 sat/vB or more, and returns broadcast-ready hex with its txid and real vsize.
+- **`UtxoChain.addressForPublicKey(publicKey, scriptType = 'p2wpkh')`**: P2WPKH or P2PKH address of a 33-byte compressed public key on the chain's network. P2WPKH on a network without segwit (Dogecoin) throws `FeatureNotSupported`.
+- **`utxoFromRawTransaction(rawTxHex, vout, ownerAddress)`**: reads one output of a raw transaction into an `UnspentTransactionOutput`, without a network call; the txid is computed from the hex.
+- **Types**: `UtxoPsbtInput`, `UtxoPsbtOutput`, `AssembleUtxoTransactionRequest`, `UtxoSigner`, `FinalizedUtxoTransaction`, `UtxoSingleKeyScriptType`, and `UtxoNetworkInfo`, which is now the declared type of `UtxoNetworkParams.networkInfo` (same structure as before).
+
+### Note
+
+- Additive only; no existing method changes behaviour. All errors are `ChainError` (`InvalidArgument`, `InvalidAddress`, or `FeatureNotSupported`).
+- TypeScript-only; omnichain-py has no counterpart.
+
 ## [0.6.1] — 2026-10-04
 
 Adds a raw storage-slot read to `EvmChain` (RIN-320). Consumers can read contract state, including an EIP-7702 delegate's state in the EOA's own storage, without reaching through `getProvider()`.
@@ -516,6 +539,7 @@ Initial npm release of `@getomnichain/omnichain`. Replaces prior vendored-submod
 
 ---
 
+[0.6.2]: https://github.com/getomnichain/omnichain/releases/tag/v0.6.2
 [0.6.1]: https://github.com/getomnichain/omnichain/releases/tag/v0.6.1
 [0.5.1]: https://github.com/getomnichain/omnichain/releases/tag/v0.5.1
 [0.5.0]: https://github.com/getomnichain/omnichain/releases/tag/v0.5.0

package/dist/cjs/utxo/bytes.js

@@ -0,0 +1,11 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.isByteArray = isByteArray;
+exports.sameBytes = sameBytes;
+function isByteArray(value) {
+    return ArrayBuffer.isView(value) && value.BYTES_PER_ELEMENT === 1;
+}
+function sameBytes(a, b) {
+    return Buffer.from(a.buffer, a.byteOffset, a.byteLength).equals(Buffer.from(b.buffer, b.byteOffset, b.byteLength));
+}
+//# sourceMappingURL=bytes.js.map

package/dist/cjs/utxo/bytes.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"bytes.js","sourceRoot":"","sources":["../../../utxo/bytes.ts"],"names":[],"mappings":";;AAAA,kCAEC;AAED,8BAEC;AAND,SAAgB,WAAW,CAAC,KAAc;IACxC,OAAO,WAAW,CAAC,MAAM,CAAC,KAAK,CAAC,IAAK,KAAoB,CAAC,iBAAiB,KAAK,CAAC,CAAC;AACpF,CAAC;AAED,SAAgB,SAAS,CAAC,CAAa,EAAE,CAAa;IACpD,OAAO,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,UAAU,EAAE,CAAC,CAAC,UAAU,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,UAAU,EAAE,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC;AACrH,CAAC"}

package/dist/cjs/utxo/index.js

@@ -14,9 +14,12 @@ var __exportStar = (this && this.__exportStar) || function(m, exports) {
     for (var p in m) if (p !== "default" && !Object.prototype.hasOwnProperty.call(exports, p)) __createBinding(exports, m, p);
 };
 Object.defineProperty(exports, "__esModule", { value: true });
+exports.utxoFromRawTransaction = void 0;
 __exportStar(require("./coin_selection.js"), exports);
 __exportStar(require("./ecc.js"), exports);
 __exportStar(require("./fee.js"), exports);
+var raw_transaction_ts_1 = require("./raw_transaction.js");
+Object.defineProperty(exports, "utxoFromRawTransaction", { enumerable: true, get: function () { return raw_transaction_ts_1.utxoFromRawTransaction; } });
 __exportStar(require("./script.js"), exports);
 __exportStar(require("./tools/broadcaster.js"), exports);
 __exportStar(require("./tools/chain_tip_provider.js"), exports);

package/dist/cjs/utxo/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../utxo/index.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;AAAA,sDAAoC;AACpC,2CAAyB;AACzB,2CAAyB;AACzB,8CAA4B;AAC5B,yDAAuC;AACvC,gEAA8C;AAC9C,2DAAyC;AACzC,sEAAoD;AACpD,2DAAyC;AACzC,iEAA+C;AAC/C,4CAA0B;AAC1B,kDAAgC;AAChC,mDAAiC;AACjC,wDAAsC;AACtC,2DAAyC;AACzC,+DAA6C;AAC7C,iDAA+B;AAC/B,iDAA+B;AAC/B,kDAAgC"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../utxo/index.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;AAAA,sDAAoC;AACpC,2CAAyB;AACzB,2CAAyB;AACzB,2DAA8D;AAArD,4HAAA,sBAAsB,OAAA;AAC/B,8CAA4B;AAC5B,yDAAuC;AACvC,gEAA8C;AAC9C,2DAAyC;AACzC,sEAAoD;AACpD,2DAAyC;AACzC,iEAA+C;AAC/C,4CAA0B;AAC1B,kDAAgC;AAChC,mDAAiC;AACjC,wDAAsC;AACtC,2DAAyC;AACzC,+DAA6C;AAC7C,iDAA+B;AAC/B,iDAA+B;AAC/B,kDAAgC"}

package/dist/cjs/utxo/keys.js

@@ -0,0 +1,56 @@
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || (function () {
+    var ownKeys = function(o) {
+        ownKeys = Object.getOwnPropertyNames || function (o) {
+            var ar = [];
+            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
+            return ar;
+        };
+        return ownKeys(o);
+    };
+    return function (mod) {
+        if (mod && mod.__esModule) return mod;
+        var result = {};
+        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
+        __setModuleDefault(result, mod);
+        return result;
+    };
+})();
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.COMPACT_SIGNATURE_BYTES = void 0;
+exports.isCompressedPublicKey = isCompressedPublicKey;
+exports.singleKeyPayment = singleKeyPayment;
+exports.verifyStrictSignature = verifyStrictSignature;
+const bitcoinjs_lib_1 = require("bitcoinjs-lib");
+const ecc = __importStar(require("tiny-secp256k1"));
+const bytes_ts_1 = require("./bytes.js");
+const script_ts_1 = require("./script.js");
+exports.COMPACT_SIGNATURE_BYTES = 64;
+function isCompressedPublicKey(publicKey) {
+    return (0, bytes_ts_1.isByteArray)(publicKey) && ecc.isPointCompressed(publicKey);
+}
+function singleKeyPayment(publicKey, scriptType, network) {
+    return scriptType === script_ts_1.UtxoScriptTypes.P2WPKH
+        ? bitcoinjs_lib_1.payments.p2wpkh({ pubkey: publicKey, network })
+        : bitcoinjs_lib_1.payments.p2pkh({ pubkey: publicKey, network });
+}
+function verifyStrictSignature(publicKey, hash, signature) {
+    return ecc.verify(hash, publicKey, signature, true);
+}
+//# sourceMappingURL=keys.js.map

package/dist/cjs/utxo/keys.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"keys.js","sourceRoot":"","sources":["../../../utxo/keys.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AASA,sDAEC;AAED,4CAQC;AAED,sDAMC;AA7BD,iDAAyC;AACzC,oDAAsC;AAEtC,yCAAyC;AACzC,2CAAuE;AAG1D,QAAA,uBAAuB,GAAG,EAAE,CAAC;AAE1C,SAAgB,qBAAqB,CAAC,SAAkB;IACtD,OAAO,IAAA,sBAAW,EAAC,SAAS,CAAC,IAAI,GAAG,CAAC,iBAAiB,CAAC,SAAS,CAAC,CAAC;AACpE,CAAC;AAED,SAAgB,gBAAgB,CAC9B,SAAqB,EACrB,UAAmC,EACnC,OAAwB;IAExB,OAAO,UAAU,KAAK,2BAAe,CAAC,MAAM;QAC1C,CAAC,CAAC,wBAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,EAAE,SAAS,EAAE,OAAO,EAAE,CAAC;QACjD,CAAC,CAAC,wBAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,EAAE,SAAS,EAAE,OAAO,EAAE,CAAC,CAAC;AACrD,CAAC;AAED,SAAgB,qBAAqB,CACnC,SAAqB,EACrB,IAAgB,EAChB,SAAqB;IAErB,OAAO,GAAG,CAAC,MAAM,CAAC,IAAI,EAAE,SAAS,EAAE,SAAS,EAAE,IAAI,CAAC,CAAC;AACtD,CAAC"}

package/dist/cjs/utxo/raw_transaction.js

@@ -0,0 +1,39 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.decodeRawTransaction = decodeRawTransaction;
+exports.utxoFromRawTransaction = utxoFromRawTransaction;
+const bitcoinjs_lib_1 = require("bitcoinjs-lib");
+const errors_ts_1 = require("../errors.js");
+const script_ts_1 = require("./script.js");
+const HEX_BYTES = /^(?:[0-9a-fA-F]{2})+$/;
+function decodeRawTransaction(rawTxHex) {
+    if (typeof rawTxHex !== 'string' || !HEX_BYTES.test(rawTxHex))
+        return null;
+    try {
+        return bitcoinjs_lib_1.Transaction.fromHex(rawTxHex);
+    }
+    catch {
+        return null;
+    }
+}
+function utxoFromRawTransaction(rawTxHex, vout, ownerAddress) {
+    const tx = decodeRawTransaction(rawTxHex);
+    if (tx === null) {
+        throw new errors_ts_1.ChainError(errors_ts_1.ChainErrorKinds.InvalidArgument, 'utxoFromRawTransaction: rawTxHex is not a valid transaction');
+    }
+    const txid = tx.getId();
+    const output = Number.isInteger(vout) && vout >= 0 ? tx.outs[vout] : undefined;
+    if (output === undefined) {
+        throw new errors_ts_1.ChainError(errors_ts_1.ChainErrorKinds.InvalidArgument, `utxoFromRawTransaction: transaction ${txid} has no output ${vout} (it has ${tx.outs.length})`, { txHash: txid });
+    }
+    return {
+        txid,
+        vout,
+        valueSats: Number(output.value),
+        scriptPubKeyHex: Buffer.from(output.script).toString('hex'),
+        scriptType: (0, script_ts_1.detectScriptType)(output.script),
+        confirmations: 0,
+        ownerAddress,
+    };
+}
+//# sourceMappingURL=raw_transaction.js.map

package/dist/cjs/utxo/raw_transaction.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"raw_transaction.js","sourceRoot":"","sources":["../../../utxo/raw_transaction.ts"],"names":[],"mappings":";;AASA,oDAOC;AAED,wDA8BC;AAhDD,iDAA4C;AAE5C,4CAA2D;AAE3D,2CAA+C;AAG/C,MAAM,SAAS,GAAG,uBAAuB,CAAC;AAE1C,SAAgB,oBAAoB,CAAC,QAAgB;IACnD,IAAI,OAAO,QAAQ,KAAK,QAAQ,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,QAAQ,CAAC;QAAE,OAAO,IAAI,CAAC;IAC3E,IAAI,CAAC;QACH,OAAO,2BAAW,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;IACvC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED,SAAgB,sBAAsB,CACpC,QAAgB,EAChB,IAAY,EACZ,YAAoB;IAEpB,MAAM,EAAE,GAAG,oBAAoB,CAAC,QAAQ,CAAC,CAAC;IAC1C,IAAI,EAAE,KAAK,IAAI,EAAE,CAAC;QAChB,MAAM,IAAI,sBAAU,CAClB,2BAAe,CAAC,eAAe,EAC/B,6DAA6D,CAC9D,CAAC;IACJ,CAAC;IACD,MAAM,IAAI,GAAG,EAAE,CAAC,KAAK,EAAE,CAAC;IACxB,MAAM,MAAM,GAAG,MAAM,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;IAC/E,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;QACzB,MAAM,IAAI,sBAAU,CAClB,2BAAe,CAAC,eAAe,EAC/B,uCAAuC,IAAI,kBAAkB,IAAI,YAAY,EAAE,CAAC,IAAI,CAAC,MAAM,GAAG,EAC9F,EAAE,MAAM,EAAE,IAAI,EAAE,CACjB,CAAC;IACJ,CAAC;IACD,OAAO;QACL,IAAI;QACJ,IAAI;QACJ,SAAS,EAAE,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC;QAC/B,eAAe,EAAE,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC;QAC3D,UAAU,EAAE,IAAA,4BAAgB,EAAC,MAAM,CAAC,MAAM,CAAC;QAC3C,aAAa,EAAE,CAAC;QAChB,YAAY;KACb,CAAC;AACJ,CAAC"}

package/dist/cjs/utxo/script.js.map

@@ -1 +1 @@
-{"version":3,"file":"script.js","sourceRoot":"","sources":["../../../utxo/script.ts"],"names":[],"mappings":";;;AAgBA,4CA4BC;AAED,sDAEC;AAED,oDAGC;AAED,kDAOC;AA9DD,iDAA8F;AAE9F,qEAA+D;AAElD,QAAA,eAAe,GAAG;IAC7B,KAAK,EAAE,OAAO;IACd,IAAI,EAAE,MAAM;IACZ,MAAM,EAAE,QAAQ;IAChB,KAAK,EAAE,OAAO;IACd,IAAI,EAAE,MAAM;IACZ,QAAQ,EAAE,WAAW;IACrB,WAAW,EAAE,cAAc;CACnB,CAAC;AAIX,SAAgB,gBAAgB,CAAC,MAAkB;IACjD,MAAM,CAAC,GAAG,MAAM,CAAC;IACjB,IACE,CAAC,CAAC,MAAM,KAAK,EAAE;QACf,CAAC,CAAC,CAAC,CAAC,KAAK,IAAI;QACb,CAAC,CAAC,CAAC,CAAC,KAAK,IAAI;QACb,CAAC,CAAC,CAAC,CAAC,KAAK,IAAI;QACb,CAAC,CAAC,EAAE,CAAC,KAAK,IAAI;QACd,CAAC,CAAC,EAAE,CAAC,KAAK,IAAI,EACd,CAAC;QACD,OAAO,uBAAe,CAAC,KAAK,CAAC;IAC/B,CAAC;IACD,IAAI,CAAC,CAAC,MAAM,KAAK,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC,KAAK,IAAI,IAAI,CAAC,CAAC,CAAC,CAAC,KAAK,IAAI,IAAI,CAAC,CAAC,EAAE,CAAC,KAAK,IAAI,EAAE,CAAC;QACxE,OAAO,uBAAe,CAAC,IAAI,CAAC;IAC9B,CAAC;IACD,IAAI,CAAC,CAAC,MAAM,KAAK,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC,KAAK,IAAI,IAAI,CAAC,CAAC,CAAC,CAAC,KAAK,IAAI,EAAE,CAAC;QACtD,OAAO,uBAAe,CAAC,MAAM,CAAC;IAChC,CAAC;IACD,IAAI,CAAC,CAAC,MAAM,KAAK,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC,KAAK,IAAI,IAAI,CAAC,CAAC,CAAC,CAAC,KAAK,IAAI,EAAE,CAAC;QACtD,OAAO,uBAAe,CAAC,KAAK,CAAC;IAC/B,CAAC;IACD,IAAI,CAAC,CAAC,MAAM,KAAK,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC,KAAK,IAAI,IAAI,CAAC,CAAC,CAAC,CAAC,KAAK,IAAI,EAAE,CAAC;QACtD,OAAO,uBAAe,CAAC,IAAI,CAAC;IAC9B,CAAC;IACD,IAAI,CAAC,CAAC,MAAM,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,KAAK,IAAI,EAAE,CAAC;QAClC,OAAO,uBAAe,CAAC,QAAQ,CAAC;IAClC,CAAC;IACD,OAAO,uBAAe,CAAC,WAAW,CAAC;AACrC,CAAC;AAED,SAAgB,qBAAqB,CAAC,UAAkB,EAAE,OAAyB;IACjF,OAAO,uBAAU,CAAC,cAAc,CAAC,UAAU,EAAE,OAAO,CAAC,CAAC;AACxD,CAAC;AAED,SAAgB,oBAAoB,CAAC,UAAkB,EAAE,OAAyB;IAChF,MAAM,MAAM,GAAG,qBAAqB,CAAC,UAAU,EAAE,OAAO,CAAC,CAAC;IAC1D,OAAO,gBAAgB,CAAC,MAAM,CAAC,CAAC;AAClC,CAAC;AAED,SAAgB,mBAAmB,CAAC,IAAgB;IAClD,IAAI,IAAI,CAAC,MAAM,GAAG,4CAAmB,EAAE,CAAC;QACtC,MAAM,IAAI,KAAK,CACb,yBAAyB,IAAI,CAAC,MAAM,gBAAgB,4CAAmB,QAAQ,CAChF,CAAC;IACJ,CAAC;IACD,OAAO,sBAAS,CAAC,OAAO,CAAC,CAAC,uBAAO,CAAC,SAAS,EAAE,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AACnE,CAAC"}
+{"version":3,"file":"script.js","sourceRoot":"","sources":["../../../utxo/script.ts"],"names":[],"mappings":";;;AAkBA,4CA4BC;AAED,sDAEC;AAED,oDAGC;AAED,kDAOC;AAhED,iDAA8F;AAE9F,qEAA+D;AAElD,QAAA,eAAe,GAAG;IAC7B,KAAK,EAAE,OAAO;IACd,IAAI,EAAE,MAAM;IACZ,MAAM,EAAE,QAAQ;IAChB,KAAK,EAAE,OAAO;IACd,IAAI,EAAE,MAAM;IACZ,QAAQ,EAAE,WAAW;IACrB,WAAW,EAAE,cAAc;CACnB,CAAC;AAMX,SAAgB,gBAAgB,CAAC,MAAkB;IACjD,MAAM,CAAC,GAAG,MAAM,CAAC;IACjB,IACE,CAAC,CAAC,MAAM,KAAK,EAAE;QACf,CAAC,CAAC,CAAC,CAAC,KAAK,IAAI;QACb,CAAC,CAAC,CAAC,CAAC,KAAK,IAAI;QACb,CAAC,CAAC,CAAC,CAAC,KAAK,IAAI;QACb,CAAC,CAAC,EAAE,CAAC,KAAK,IAAI;QACd,CAAC,CAAC,EAAE,CAAC,KAAK,IAAI,EACd,CAAC;QACD,OAAO,uBAAe,CAAC,KAAK,CAAC;IAC/B,CAAC;IACD,IAAI,CAAC,CAAC,MAAM,KAAK,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC,KAAK,IAAI,IAAI,CAAC,CAAC,CAAC,CAAC,KAAK,IAAI,IAAI,CAAC,CAAC,EAAE,CAAC,KAAK,IAAI,EAAE,CAAC;QACxE,OAAO,uBAAe,CAAC,IAAI,CAAC;IAC9B,CAAC;IACD,IAAI,CAAC,CAAC,MAAM,KAAK,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC,KAAK,IAAI,IAAI,CAAC,CAAC,CAAC,CAAC,KAAK,IAAI,EAAE,CAAC;QACtD,OAAO,uBAAe,CAAC,MAAM,CAAC;IAChC,CAAC;IACD,IAAI,CAAC,CAAC,MAAM,KAAK,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC,KAAK,IAAI,IAAI,CAAC,CAAC,CAAC,CAAC,KAAK,IAAI,EAAE,CAAC;QACtD,OAAO,uBAAe,CAAC,KAAK,CAAC;IAC/B,CAAC;IACD,IAAI,CAAC,CAAC,MAAM,KAAK,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC,KAAK,IAAI,IAAI,CAAC,CAAC,CAAC,CAAC,KAAK,IAAI,EAAE,CAAC;QACtD,OAAO,uBAAe,CAAC,IAAI,CAAC;IAC9B,CAAC;IACD,IAAI,CAAC,CAAC,MAAM,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,KAAK,IAAI,EAAE,CAAC;QAClC,OAAO,uBAAe,CAAC,QAAQ,CAAC;IAClC,CAAC;IACD,OAAO,uBAAe,CAAC,WAAW,CAAC;AACrC,CAAC;AAED,SAAgB,qBAAqB,CAAC,UAAkB,EAAE,OAAyB;IACjF,OAAO,uBAAU,CAAC,cAAc,CAAC,UAAU,EAAE,OAAO,CAAC,CAAC;AACxD,CAAC;AAED,SAAgB,oBAAoB,CAAC,UAAkB,EAAE,OAAyB;IAChF,MAAM,MAAM,GAAG,qBAAqB,CAAC,UAAU,EAAE,OAAO,CAAC,CAAC;IAC1D,OAAO,gBAAgB,CAAC,MAAM,CAAC,CAAC;AAClC,CAAC;AAED,SAAgB,mBAAmB,CAAC,IAAgB;IAClD,IAAI,IAAI,CAAC,MAAM,GAAG,4CAAmB,EAAE,CAAC;QACtC,MAAM,IAAI,KAAK,CACb,yBAAyB,IAAI,CAAC,MAAM,gBAAgB,4CAAmB,QAAQ,CAChF,CAAC;IACJ,CAAC;IACD,OAAO,sBAAS,CAAC,OAAO,CAAC,CAAC,uBAAO,CAAC,SAAS,EAAE,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AACnE,CAAC"}

package/dist/cjs/utxo/unsigned_utxo_transaction.js

@@ -2,8 +2,12 @@
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.UnsignedUtxoTransaction = void 0;
 const bitcoinjs_lib_1 = require("bitcoinjs-lib");
+const errors_ts_1 = require("../errors.js");
 const network_type_ts_1 = require("../network_type.js");
 const unsigned_transaction_ts_1 = require("../unsigned_transaction.js");
+const bytes_ts_1 = require("./bytes.js");
+const keys_ts_1 = require("./keys.js");
+const script_ts_1 = require("./script.js");
 class UnsignedUtxoTransaction extends unsigned_transaction_ts_1.UnsignedTransaction {
     params;
     psbtBase64;
@@ -31,6 +35,137 @@ class UnsignedUtxoTransaction extends unsigned_transaction_ts_1.UnsignedTransact
     toPsbt() {
         return bitcoinjs_lib_1.Psbt.fromBase64(this.psbtBase64, { network: this.params.networkInfo });
     }
+    signWith(signer) {
+        if (!(0, keys_ts_1.isCompressedPublicKey)(signer?.publicKey)) {
+            throw this.invalid('signWith: signer.publicKey must be a 33-byte compressed secp256k1 public key');
+        }
+        const psbt = this.toPsbt();
+        const prevouts = this.verifiedPrevouts(psbt, 'signWith');
+        const owned = this.inputIndicesOwnedBy(prevouts, signer.publicKey);
+        if (owned.length === 0) {
+            throw this.invalid('signWith: the signer owns none of the inputs');
+        }
+        const checkedSigner = {
+            publicKey: signer.publicKey,
+            sign: (hash) => {
+                const signature = signer.sign(hash);
+                if (!(0, bytes_ts_1.isByteArray)(signature) || signature.length !== keys_ts_1.COMPACT_SIGNATURE_BYTES) {
+                    throw this.invalid(`signWith: signer.sign must return a ${keys_ts_1.COMPACT_SIGNATURE_BYTES}-byte compact ECDSA signature`);
+                }
+                return signature;
+            },
+        };
+        for (const index of owned) {
+            if (hasSignatureFrom(psbt, index, signer.publicKey))
+                continue;
+            try {
+                psbt.signInput(index, checkedSigner);
+            }
+            catch (err) {
+                if ((0, errors_ts_1.isChainError)(err))
+                    throw err;
+                throw this.invalid(`signWith: signing input ${index} failed: ${errorMessage(err)}`, err);
+            }
+        }
+        return this.withPsbt(psbt);
+    }
+    finalize() {
+        const psbt = this.toPsbt();
+        this.verifiedPrevouts(psbt, 'finalize');
+        psbt.data.inputs.forEach((input, index) => {
+            if (!input.partialSig || input.partialSig.length === 0) {
+                throw this.invalid(`finalize: input ${index} is not signed`);
+            }
+            if (!signaturesAreValid(psbt, index)) {
+                throw this.invalid(`finalize: input ${index} has an invalid signature`);
+            }
+        });
+        let tx;
+        try {
+            psbt.finalizeAllInputs();
+            tx = psbt.extractTransaction();
+        }
+        catch (err) {
+            throw this.invalid(`finalize: ${errorMessage(err)}`, err);
+        }
+        return { hex: tx.toHex(), txid: tx.getId(), vsize: tx.virtualSize() };
+    }
+    verifiedPrevouts(psbt, method) {
+        const prevouts = psbt.data.inputs.map((input, index) => {
+            if (!input.nonWitnessUtxo) {
+                throw this.invalid(`${method}: input ${index} carries no parent transaction (nonWitnessUtxo)`);
+            }
+            const parent = parseParent(input.nonWitnessUtxo);
+            if (parent === null) {
+                throw this.invalid(`${method}: input ${index} has a parent transaction that does not parse`);
+            }
+            const spent = psbt.txInputs[index];
+            if (!(0, bytes_ts_1.sameBytes)(parent.getHash(), spent.hash)) {
+                throw this.invalid(`${method}: input ${index} has a parent transaction that is not the one it spends`);
+            }
+            const prevout = parent.outs[spent.index];
+            if (prevout === undefined) {
+                throw this.invalid(`${method}: input ${index} spends output ${spent.index}, which its parent transaction does not have`);
+            }
+            if (input.witnessUtxo && input.witnessUtxo.value !== prevout.value) {
+                throw this.invalid(`${method}: input ${index} declares ${input.witnessUtxo.value} sats, but its parent output holds ${prevout.value} sats`);
+            }
+            if (input.witnessUtxo && !(0, bytes_ts_1.sameBytes)(input.witnessUtxo.script, prevout.script)) {
+                throw this.invalid(`${method}: input ${index} declares a script that differs from its parent output`);
+            }
+            return prevout;
+        });
+        const realFeeSats = prevouts.reduce((sum, prevout) => sum + prevout.value, 0n) -
+            psbt.txOutputs.reduce((sum, output) => sum + output.value, 0n);
+        if (Number(realFeeSats) !== this.feeSats) {
+            throw this.invalid(`${method}: the transaction would pay ${realFeeSats} sats in fees, not the reported ${this.feeSats} sats`);
+        }
+        return prevouts;
+    }
+    inputIndicesOwnedBy(prevouts, publicKey) {
+        const ownedScripts = [script_ts_1.UtxoScriptTypes.P2WPKH, script_ts_1.UtxoScriptTypes.P2PKH].map((scriptType) => (0, keys_ts_1.singleKeyPayment)(publicKey, scriptType, this.params.networkInfo).output);
+        return prevouts.flatMap((prevout, index) => ownedScripts.some((owned) => (0, bytes_ts_1.sameBytes)(owned, prevout.script)) ? [index] : []);
+    }
+    withPsbt(psbt) {
+        return new UnsignedUtxoTransaction({
+            chainId: this.chainId,
+            params: this.params,
+            psbtBase64: psbt.toBase64(),
+            selectedInputs: this.selectedInputs,
+            feeSats: this.feeSats,
+            feeRateSatsPerVByte: this.feeRateSatsPerVByte,
+            estimatedVBytes: this.estimatedVBytes,
+            totalInputSats: this.totalInputSats,
+            totalOutputSats: this.totalOutputSats,
+            changeAddress: this.changeAddress,
+            inputsToSign: this.inputsToSign,
+        });
+    }
+    invalid(message, cause) {
+        return new errors_ts_1.ChainError(errors_ts_1.ChainErrorKinds.InvalidArgument, `UnsignedUtxoTransaction.${message}`, { chainId: this.chainId }, cause);
+    }
 }
 exports.UnsignedUtxoTransaction = UnsignedUtxoTransaction;
+function parseParent(nonWitnessUtxo) {
+    try {
+        return bitcoinjs_lib_1.Transaction.fromBuffer(nonWitnessUtxo);
+    }
+    catch {
+        return null;
+    }
+}
+function hasSignatureFrom(psbt, index, publicKey) {
+    return psbt.data.inputs[index].partialSig?.some((sig) => (0, bytes_ts_1.sameBytes)(sig.pubkey, publicKey)) ?? false;
+}
+function signaturesAreValid(psbt, index) {
+    try {
+        return psbt.validateSignaturesOfInput(index, keys_ts_1.verifyStrictSignature);
+    }
+    catch {
+        return false;
+    }
+}
+function errorMessage(err) {
+    return err instanceof Error ? err.message : String(err);
+}
 //# sourceMappingURL=unsigned_utxo_transaction.js.map

package/dist/cjs/utxo/unsigned_utxo_transaction.js.map

@@ -1 +1 @@
-{"version":3,"file":"unsigned_utxo_transaction.js","sourceRoot":"","sources":["../../../utxo/unsigned_utxo_transaction.ts"],"names":[],"mappings":";;;AAAA,iDAAqC;AAErC,wDAAiD;AACjD,wEAAiE;AAmBjE,MAAa,uBAAwB,SAAQ,6CAAmB;IACrD,MAAM,CAAoB;IAC1B,UAAU,CAAS;IACnB,cAAc,CAAsC;IACpD,OAAO,CAAS;IAChB,mBAAmB,CAAS;IAC5B,eAAe,CAAS;IACxB,cAAc,CAAS;IACvB,eAAe,CAAS;IACxB,aAAa,CAAgB;IAC7B,YAAY,CAAqC;IAE1D,YAAY,IAAiC;QAC3C,KAAK,CAAC,IAAI,CAAC,OAAO,EAAE,6BAAW,CAAC,GAAG,CAAC,CAAC;QACrC,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC;QAC1B,IAAI,CAAC,UAAU,GAAG,IAAI,CAAC,UAAU,CAAC;QAClC,IAAI,CAAC,cAAc,GAAG,IAAI,CAAC,cAAc,CAAC;QAC1C,IAAI,CAAC,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC;QAC5B,IAAI,CAAC,mBAAmB,GAAG,IAAI,CAAC,mBAAmB,CAAC;QACpD,IAAI,CAAC,eAAe,GAAG,IAAI,CAAC,eAAe,CAAC;QAC5C,IAAI,CAAC,cAAc,GAAG,IAAI,CAAC,cAAc,CAAC;QAC1C,IAAI,CAAC,eAAe,GAAG,IAAI,CAAC,eAAe,CAAC;QAC5C,IAAI,CAAC,aAAa,GAAG,IAAI,CAAC,aAAa,CAAC;QACxC,IAAI,CAAC,YAAY,GAAG,IAAI,CAAC,YAAY,CAAC;IACxC,CAAC;IAED,MAAM;QACJ,OAAO,oBAAI,CAAC,UAAU,CAAC,IAAI,CAAC,UAAU,EAAE,EAAE,OAAO,EAAE,IAAI,CAAC,MAAM,CAAC,WAAW,EAAE,CAAC,CAAC;IAChF,CAAC;CACF;AA7BD,0DA6BC"}
+{"version":3,"file":"unsigned_utxo_transaction.js","sourceRoot":"","sources":["../../../utxo/unsigned_utxo_transaction.ts"],"names":[],"mappings":";;;AAAA,iDAAkD;AAElD,4CAAyE;AACzE,wDAAiD;AACjD,wEAAiE;AAEjE,yCAAoD;AACpD,uCAKmB;AACnB,2CAA8C;AAkB9C,MAAa,uBAAwB,SAAQ,6CAAmB;IACrD,MAAM,CAAoB;IAC1B,UAAU,CAAS;IACnB,cAAc,CAAsC;IACpD,OAAO,CAAS;IAChB,mBAAmB,CAAS;IAC5B,eAAe,CAAS;IACxB,cAAc,CAAS;IACvB,eAAe,CAAS;IACxB,aAAa,CAAgB;IAC7B,YAAY,CAAqC;IAE1D,YAAY,IAAiC;QAC3C,KAAK,CAAC,IAAI,CAAC,OAAO,EAAE,6BAAW,CAAC,GAAG,CAAC,CAAC;QACrC,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC;QAC1B,IAAI,CAAC,UAAU,GAAG,IAAI,CAAC,UAAU,CAAC;QAClC,IAAI,CAAC,cAAc,GAAG,IAAI,CAAC,cAAc,CAAC;QAC1C,IAAI,CAAC,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC;QAC5B,IAAI,CAAC,mBAAmB,GAAG,IAAI,CAAC,mBAAmB,CAAC;QACpD,IAAI,CAAC,eAAe,GAAG,IAAI,CAAC,eAAe,CAAC;QAC5C,IAAI,CAAC,cAAc,GAAG,IAAI,CAAC,cAAc,CAAC;QAC1C,IAAI,CAAC,eAAe,GAAG,IAAI,CAAC,eAAe,CAAC;QAC5C,IAAI,CAAC,aAAa,GAAG,IAAI,CAAC,aAAa,CAAC;QACxC,IAAI,CAAC,YAAY,GAAG,IAAI,CAAC,YAAY,CAAC;IACxC,CAAC;IAED,MAAM;QACJ,OAAO,oBAAI,CAAC,UAAU,CAAC,IAAI,CAAC,UAAU,EAAE,EAAE,OAAO,EAAE,IAAI,CAAC,MAAM,CAAC,WAAW,EAAE,CAAC,CAAC;IAChF,CAAC;IAED,QAAQ,CAAC,MAAkB;QACzB,IAAI,CAAC,IAAA,+BAAqB,EAAC,MAAM,EAAE,SAAS,CAAC,EAAE,CAAC;YAC9C,MAAM,IAAI,CAAC,OAAO,CAAC,8EAA8E,CAAC,CAAC;QACrG,CAAC;QACD,MAAM,IAAI,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC;QAC3B,MAAM,QAAQ,GAAG,IAAI,CAAC,gBAAgB,CAAC,IAAI,EAAE,UAAU,CAAC,CAAC;QACzD,MAAM,KAAK,GAAG,IAAI,CAAC,mBAAmB,CAAC,QAAQ,EAAE,MAAM,CAAC,SAAS,CAAC,CAAC;QACnE,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACvB,MAAM,IAAI,CAAC,OAAO,CAAC,8CAA8C,CAAC,CAAC;QACrE,CAAC;QACD,MAAM,aAAa,GAAG;YACpB,SAAS,EAAE,MAAM,CAAC,SAAS;YAC3B,IAAI,EAAE,CAAC,IAAgB,EAAc,EAAE;gBACrC,MAAM,SAAS,GAAG,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;gBACpC,IAAI,CAAC,IAAA,sBAAW,EAAC,SAAS,CAAC,IAAI,SAAS,CAAC,MAAM,KAAK,iCAAuB,EAAE,CAAC;oBAC5E,MAAM,IAAI,CAAC,OAAO,CAChB,uCAAuC,iCAAuB,+BAA+B,CAC9F,CAAC;gBACJ,CAAC;gBACD,OAAO,SAAS,CAAC;YACnB,CAAC;SACF,CAAC;QACF,KAAK,MAAM,KAAK,IAAI,KAAK,EAAE,CAAC;YAC1B,IAAI,gBAAgB,CAAC,IAAI,EAAE,KAAK,EAAE,MAAM,CAAC,SAAS,CAAC;gBAAE,SAAS;YAC9D,IAAI,CAAC;gBACH,IAAI,CAAC,SAAS,CAAC,KAAK,EAAE,aAAa,CAAC,CAAC;YACvC,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,IAAI,IAAA,wBAAY,EAAC,GAAG,CAAC;oBAAE,MAAM,GAAG,CAAC;gBACjC,MAAM,IAAI,CAAC,OAAO,CAAC,2BAA2B,KAAK,YAAY,YAAY,CAAC,GAAG,CAAC,EAAE,EAAE,GAAG,CAAC,CAAC;YAC3F,CAAC;QACH,CAAC;QACD,OAAO,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;IAC7B,CAAC;IAED,QAAQ;QACN,MAAM,IAAI,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC;QAC3B,IAAI,CAAC,gBAAgB,CAAC,IAAI,EAAE,UAAU,CAAC,CAAC;QACxC,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,KAAK,EAAE,KAAK,EAAE,EAAE;YACxC,IAAI,CAAC,KAAK,CAAC,UAAU,IAAI,KAAK,CAAC,UAAU,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;gBACvD,MAAM,IAAI,CAAC,OAAO,CAAC,mBAAmB,KAAK,gBAAgB,CAAC,CAAC;YAC/D,CAAC;YACD,IAAI,CAAC,kBAAkB,CAAC,IAAI,EAAE,KAAK,CAAC,EAAE,CAAC;gBACrC,MAAM,IAAI,CAAC,OAAO,CAAC,mBAAmB,KAAK,2BAA2B,CAAC,CAAC;YAC1E,CAAC;QACH,CAAC,CAAC,CAAC;QACH,IAAI,EAAe,CAAC;QACpB,IAAI,CAAC;YACH,IAAI,CAAC,iBAAiB,EAAE,CAAC;YACzB,EAAE,GAAG,IAAI,CAAC,kBAAkB,EAAE,CAAC;QACjC,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,IAAI,CAAC,OAAO,CAAC,aAAa,YAAY,CAAC,GAAG,CAAC,EAAE,EAAE,GAAG,CAAC,CAAC;QAC5D,CAAC;QACD,OAAO,EAAE,GAAG,EAAE,EAAE,CAAC,KAAK,EAAE,EAAE,IAAI,EAAE,EAAE,CAAC,KAAK,EAAE,EAAE,KAAK,EAAE,EAAE,CAAC,WAAW,EAAE,EAAE,CAAC;IACxE,CAAC;IAEO,gBAAgB,CAAC,IAAU,EAAE,MAAc;QACjD,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,KAAK,EAAE,EAAE;YACrD,IAAI,CAAC,KAAK,CAAC,cAAc,EAAE,CAAC;gBAC1B,MAAM,IAAI,CAAC,OAAO,CAAC,GAAG,MAAM,WAAW,KAAK,iDAAiD,CAAC,CAAC;YACjG,CAAC;YACD,MAAM,MAAM,GAAG,WAAW,CAAC,KAAK,CAAC,cAAc,CAAC,CAAC;YACjD,IAAI,MAAM,KAAK,IAAI,EAAE,CAAC;gBACpB,MAAM,IAAI,CAAC,OAAO,CAAC,GAAG,MAAM,WAAW,KAAK,+CAA+C,CAAC,CAAC;YAC/F,CAAC;YACD,MAAM,KAAK,GAAG,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;YACnC,IAAI,CAAC,IAAA,oBAAS,EAAC,MAAM,CAAC,OAAO,EAAE,EAAE,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC;gBAC7C,MAAM,IAAI,CAAC,OAAO,CAAC,GAAG,MAAM,WAAW,KAAK,yDAAyD,CAAC,CAAC;YACzG,CAAC;YACD,MAAM,OAAO,GAAG,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;YACzC,IAAI,OAAO,KAAK,SAAS,EAAE,CAAC;gBAC1B,MAAM,IAAI,CAAC,OAAO,CAAC,GAAG,MAAM,WAAW,KAAK,kBAAkB,KAAK,CAAC,KAAK,8CAA8C,CAAC,CAAC;YAC3H,CAAC;YACD,IAAI,KAAK,CAAC,WAAW,IAAI,KAAK,CAAC,WAAW,CAAC,KAAK,KAAK,OAAO,CAAC,KAAK,EAAE,CAAC;gBACnE,MAAM,IAAI,CAAC,OAAO,CAChB,GAAG,MAAM,WAAW,KAAK,aAAa,KAAK,CAAC,WAAW,CAAC,KAAK,sCAAsC,OAAO,CAAC,KAAK,OAAO,CACxH,CAAC;YACJ,CAAC;YACD,IAAI,KAAK,CAAC,WAAW,IAAI,CAAC,IAAA,oBAAS,EAAC,KAAK,CAAC,WAAW,CAAC,MAAM,EAAE,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC;gBAC9E,MAAM,IAAI,CAAC,OAAO,CAAC,GAAG,MAAM,WAAW,KAAK,wDAAwD,CAAC,CAAC;YACxG,CAAC;YACD,OAAO,OAAO,CAAC;QACjB,CAAC,CAAC,CAAC;QACH,MAAM,WAAW,GACf,QAAQ,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,OAAO,EAAE,EAAE,CAAC,GAAG,GAAG,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC;YAC1D,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,MAAM,EAAE,EAAE,CAAC,GAAG,GAAG,MAAM,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;QACjE,IAAI,MAAM,CAAC,WAAW,CAAC,KAAK,IAAI,CAAC,OAAO,EAAE,CAAC;YACzC,MAAM,IAAI,CAAC,OAAO,CAChB,GAAG,MAAM,+BAA+B,WAAW,mCAAmC,IAAI,CAAC,OAAO,OAAO,CAC1G,CAAC;QACJ,CAAC;QACD,OAAO,QAAQ,CAAC;IAClB,CAAC;IAEO,mBAAmB,CAAC,QAA4B,EAAE,SAAqB;QAC7E,MAAM,YAAY,GAAG,CAAC,2BAAe,CAAC,MAAM,EAAE,2BAAe,CAAC,KAAK,CAAC,CAAC,GAAG,CACtE,CAAC,UAAU,EAAE,EAAE,CAAC,IAAA,0BAAgB,EAAC,SAAS,EAAE,UAAU,EAAE,IAAI,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC,MAAO,CACzF,CAAC;QACF,OAAO,QAAQ,CAAC,OAAO,CAAC,CAAC,OAAO,EAAE,KAAK,EAAE,EAAE,CACzC,YAAY,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,IAAA,oBAAS,EAAC,KAAK,EAAE,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAC9E,CAAC;IACJ,CAAC;IAEO,QAAQ,CAAC,IAAU;QACzB,OAAO,IAAI,uBAAuB,CAAC;YACjC,OAAO,EAAE,IAAI,CAAC,OAAO;YACrB,MAAM,EAAE,IAAI,CAAC,MAAM;YACnB,UAAU,EAAE,IAAI,CAAC,QAAQ,EAAE;YAC3B,cAAc,EAAE,IAAI,CAAC,cAAc;YACnC,OAAO,EAAE,IAAI,CAAC,OAAO;YACrB,mBAAmB,EAAE,IAAI,CAAC,mBAAmB;YAC7C,eAAe,EAAE,IAAI,CAAC,eAAe;YACrC,cAAc,EAAE,IAAI,CAAC,cAAc;YACnC,eAAe,EAAE,IAAI,CAAC,eAAe;YACrC,aAAa,EAAE,IAAI,CAAC,aAAa;YACjC,YAAY,EAAE,IAAI,CAAC,YAAY;SAChC,CAAC,CAAC;IACL,CAAC;IAEO,OAAO,CAAC,OAAe,EAAE,KAAe;QAC9C,OAAO,IAAI,sBAAU,CACnB,2BAAe,CAAC,eAAe,EAC/B,2BAA2B,OAAO,EAAE,EACpC,EAAE,OAAO,EAAE,IAAI,CAAC,OAAO,EAAE,EACzB,KAAK,CACN,CAAC;IACJ,CAAC;CACF;AA5JD,0DA4JC;AAID,SAAS,WAAW,CAAC,cAA0B;IAC7C,IAAI,CAAC;QACH,OAAO,2BAAW,CAAC,UAAU,CAAC,cAAc,CAAC,CAAC;IAChD,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED,SAAS,gBAAgB,CAAC,IAAU,EAAE,KAAa,EAAE,SAAqB;IACxE,OAAO,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,UAAU,EAAE,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,IAAA,oBAAS,EAAC,GAAG,CAAC,MAAM,EAAE,SAAS,CAAC,CAAC,IAAI,KAAK,CAAC;AACtG,CAAC;AAED,SAAS,kBAAkB,CAAC,IAAU,EAAE,KAAa;IACnD,IAAI,CAAC;QACH,OAAO,IAAI,CAAC,yBAAyB,CAAC,KAAK,EAAE,+BAAqB,CAAC,CAAC;IACtE,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC;AAED,SAAS,YAAY,CAAC,GAAY;IAChC,OAAO,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;AAC1D,CAAC"}

package/dist/cjs/utxo/utxo_chain.js

@@ -19,6 +19,9 @@ const utxo_transaction_status_ts_1 = require("./utxo_transaction_status.js");
 require("./ecc.js");
 const coin_selection_ts_1 = require("./coin_selection.js");
 const fee_ts_1 = require("./fee.js");
+const bytes_ts_1 = require("./bytes.js");
+const keys_ts_1 = require("./keys.js");
+const raw_transaction_ts_1 = require("./raw_transaction.js");
 const script_ts_1 = require("./script.js");
 const utxo_network_params_ts_1 = require("./utxo_network_params.js");
 const unsigned_utxo_transaction_ts_1 = require("./unsigned_utxo_transaction.js");
@@ -268,6 +271,72 @@ class UtxoChain extends chain_base_ts_1.Chain {
     async createTransferUnsignedTransaction(req) {
         return this.buildTransfer(req, undefined);
     }
+    assembleTransaction(request) {
+        const { inputs, outputs } = request;
+        if (inputs.length === 0) {
+            throw this.invalidArgument('assembleTransaction: at least one input is required');
+        }
+        if (outputs.length === 0) {
+            throw this.invalidArgument('assembleTransaction: at least one output is required');
+        }
+        const spentOutpoints = new Set();
+        const inputScriptTypes = inputs.map((input, index) => {
+            const scriptType = this.checkPsbtInput(input, index);
+            const outpoint = `${input.utxo.txid.toLowerCase()}:${input.utxo.vout}`;
+            if (spentOutpoints.has(outpoint)) {
+                throw this.invalidArgument(`assembleTransaction: inputs[${index}] spends ${outpoint} a second time`);
+            }
+            spentOutpoints.add(outpoint);
+            return scriptType;
+        });
+        const resolvedOutputs = outputs.map((output, index) => this.resolvePsbtOutput(output, index));
+        const opReturnDataLengths = resolvedOutputs.flatMap((o) => o.opReturnDataLength === null ? [] : [o.opReturnDataLength]);
+        if (opReturnDataLengths.length > 1) {
+            throw this.invalidArgument('assembleTransaction: at most one opReturn output is allowed');
+        }
+        const totalInputSats = inputs.reduce((sum, { utxo }) => sum + utxo.valueSats, 0);
+        const totalOutputSats = resolvedOutputs.reduce((sum, o) => sum + o.valueSats, 0);
+        if (totalOutputSats > totalInputSats) {
+            throw this.invalidArgument(`assembleTransaction: outputs total ${totalOutputSats} sats but inputs only ${totalInputSats} sats`);
+        }
+        const sequence = (request.rbfEnabled ?? this.rbfEnabled) ? utxo_network_params_ts_1.RBF_SEQUENCE : utxo_network_params_ts_1.FINAL_SEQUENCE;
+        const psbt = new bitcoinjs_lib_1.Psbt({ network: this.params.networkInfo });
+        const inputsToSign = {};
+        inputs.forEach(({ utxo, parentTxHex }, index) => {
+            this.addInputToPsbt({ psbt, utxo, sequence, parentTxHex });
+            (inputsToSign[utxo.ownerAddress] ??= []).push(index);
+        });
+        for (const output of resolvedOutputs) {
+            psbt.addOutput({ script: output.script, value: BigInt(output.valueSats) });
+        }
+        const estimatedVBytes = (0, fee_ts_1.estimateTxVBytes)(inputScriptTypes, resolvedOutputs.flatMap((o) => (o.opReturnDataLength === null ? [(0, script_ts_1.detectScriptType)(o.script)] : [])), opReturnDataLengths);
+        const feeSats = totalInputSats - totalOutputSats;
+        return new unsigned_utxo_transaction_ts_1.UnsignedUtxoTransaction({
+            chainId: this.chainId,
+            params: this.params,
+            psbtBase64: psbt.toBase64(),
+            selectedInputs: inputs.map(({ utxo }) => utxo),
+            feeSats,
+            feeRateSatsPerVByte: feeSats / estimatedVBytes,
+            estimatedVBytes,
+            totalInputSats,
+            totalOutputSats,
+            changeAddress: null,
+            inputsToSign,
+        });
+    }
+    addressForPublicKey(publicKey, scriptType = script_ts_1.UtxoScriptTypes.P2WPKH) {
+        if (!(0, keys_ts_1.isCompressedPublicKey)(publicKey)) {
+            throw this.invalidArgument('addressForPublicKey: publicKey must be a 33-byte compressed secp256k1 public key');
+        }
+        if (scriptType !== script_ts_1.UtxoScriptTypes.P2WPKH && scriptType !== script_ts_1.UtxoScriptTypes.P2PKH) {
+            throw this.invalidArgument(`addressForPublicKey: scriptType must be '${script_ts_1.UtxoScriptTypes.P2WPKH}' or '${script_ts_1.UtxoScriptTypes.P2PKH}', got ${String(scriptType)}`);
+        }
+        if (scriptType === script_ts_1.UtxoScriptTypes.P2WPKH && !this.params.networkInfo.bech32) {
+            throw new errors_ts_1.ChainError(errors_ts_1.ChainErrorKinds.FeatureNotSupported, `${this.name}: the network has no segwit addresses; use scriptType '${script_ts_1.UtxoScriptTypes.P2PKH}'`, { chainId: this.chainId });
+        }
+        return (0, keys_ts_1.singleKeyPayment)(publicKey, scriptType, this.params.networkInfo).address;
+    }
     async broadcast(signed, opts) {
         if (opts && opts.signal !== undefined) {
             throw new errors_ts_1.ChainError(errors_ts_1.ChainErrorKinds.FeatureNotSupported, `UTXO broadcast: signal is not honored in 0.3.0 (silently ignoring would let a caller conclude 'not sent' while the tx still lands). Cancellation returns in 0.3.1.`, { chainId: this.chainId });
@@ -465,6 +534,66 @@ class UtxoChain extends chain_base_ts_1.Chain {
         }
         psbt.addInput(input);
     }
+    checkPsbtInput({ utxo, parentTxHex }, index) {
+        const field = `assembleTransaction: inputs[${index}]`;
+        const parent = (0, raw_transaction_ts_1.decodeRawTransaction)(parentTxHex);
+        if (parent === null) {
+            throw this.invalidArgument(`${field}.parentTxHex is not a valid transaction`);
+        }
+        const parentTxid = parent.getId();
+        if (typeof utxo.txid !== 'string' || utxo.txid.toLowerCase() !== parentTxid) {
+            throw this.invalidArgument(`${field}: parentTxHex is transaction ${parentTxid}, not utxo.txid ${String(utxo.txid)}`, { txHash: parentTxid });
+        }
+        const parentOutput = Number.isInteger(utxo.vout) && utxo.vout >= 0 ? parent.outs[utxo.vout] : undefined;
+        if (parentOutput === undefined) {
+            throw this.invalidArgument(`${field}: transaction ${parentTxid} has no output ${utxo.vout} (it has ${parent.outs.length})`, { txHash: parentTxid });
+        }
+        if (Number(parentOutput.value) !== utxo.valueSats) {
+            throw this.invalidArgument(`${field}: utxo.valueSats ${utxo.valueSats} does not match the parent output value ${parentOutput.value}`, { txHash: parentTxid });
+        }
+        const script = Buffer.from(parentOutput.script);
+        if (typeof utxo.scriptPubKeyHex !== 'string' || utxo.scriptPubKeyHex.toLowerCase() !== script.toString('hex')) {
+            throw this.invalidArgument(`${field}: utxo.scriptPubKeyHex does not match the parent output script`, { txHash: parentTxid });
+        }
+        const scriptType = (0, script_ts_1.detectScriptType)(script);
+        if (scriptType === script_ts_1.UtxoScriptTypes.OpReturn || scriptType === script_ts_1.UtxoScriptTypes.NonStandard) {
+            throw this.invalidArgument(`${field}: cannot spend an output of script type ${scriptType}`, { txHash: parentTxid });
+        }
+        if (!(0, bytes_ts_1.sameBytes)(this.outputScriptFor(utxo.ownerAddress, `${field}.utxo.ownerAddress`), script)) {
+            throw this.invalidArgument(`${field}: utxo.ownerAddress ${utxo.ownerAddress} does not own the output it spends`, { txHash: parentTxid, address: utxo.ownerAddress });
+        }
+        return scriptType;
+    }
+    resolvePsbtOutput(output, index) {
+        const field = `assembleTransaction: outputs[${index}]`;
+        if (output.kind === 'address') {
+            const script = this.outputScriptFor(output.address, `${field}.address`);
+            if (!Number.isSafeInteger(output.valueSats) || output.valueSats < this.params.dustValueSats) {
+                throw this.invalidArgument(`${field}.valueSats must be an integer of at least ${this.params.dustValueSats} sats (dust), got ${output.valueSats}`);
+            }
+            return { script, valueSats: output.valueSats, opReturnDataLength: null };
+        }
+        if (output.kind === 'opReturn') {
+            if (!(0, bytes_ts_1.isByteArray)(output.data) || output.data.length > utxo_network_params_ts_1.OP_RETURN_MAX_BYTES) {
+                throw this.invalidArgument(`${field}.data must be a byte array of at most ${utxo_network_params_ts_1.OP_RETURN_MAX_BYTES} bytes`);
+            }
+            return { script: (0, script_ts_1.buildOpReturnScript)(output.data), valueSats: 0, opReturnDataLength: output.data.length };
+        }
+        throw this.invalidArgument(`${field}.kind must be 'address' or 'opReturn', got ${String(output.kind)}`);
+    }
+    outputScriptFor(address, field) {
+        const script = this.validateAddress(address) ? tryOutputScript(address, this.params.networkInfo) : null;
+        if (script === null) {
+            throw new errors_ts_1.ChainError(errors_ts_1.ChainErrorKinds.InvalidAddress, `${this.name}: ${field} is not a valid address: ${String(address)}`, { chainId: this.chainId, address });
+        }
+        return script;
+    }
+    invalidArgument(message, meta = {}) {
+        return new errors_ts_1.ChainError(errors_ts_1.ChainErrorKinds.InvalidArgument, `${this.name}: ${message}`, {
+            chainId: this.chainId,
+            ...meta,
+        });
+    }
     async resolveFeeRate(overrideRate, targetBlocks) {
         if (overrideRate !== undefined) {
             if (overrideRate < 1) {
@@ -502,6 +631,14 @@ class UtxoChain extends chain_base_ts_1.Chain {
     }
 }
 exports.UtxoChain = UtxoChain;
+function tryOutputScript(address, network) {
+    try {
+        return (0, script_ts_1.addressToScriptPubKey)(address, network);
+    }
+    catch {
+        return null;
+    }
+}
 function bigintToNumber(value) {
     if (value > BigInt(Number.MAX_SAFE_INTEGER)) {
         throw new errors_ts_1.ChainError(errors_ts_1.ChainErrorKinds.InvalidArgument, `UTXO amount ${value} exceeds Number.MAX_SAFE_INTEGER`);