@notabene/verify-proof 1.11.0 → 1.12.0-next.12

package/dist/cjs/tron-IM2O2VLM.cjs

@@ -0,0 +1,57 @@
+'use strict';
+
+var buffer = require('buffer');
+var javascriptSdk = require('@notabene/javascript-sdk');
+var ox = require('ox');
+var base = require('@scure/base');
+
+if (typeof globalThis !== 'undefined' && !globalThis.Buffer) { globalThis.Buffer = buffer.Buffer; }
+function verifyTIP191(address, message, proof) {
+  try {
+    const payload = getSignPayload(ox.Hex.fromString(message));
+    const signature = ox.Signature.fromHex(proof);
+    const publicKey = ox.Secp256k1.recoverPublicKey({ payload, signature });
+    const hex = `0x41${ox.Hash.keccak256(
+      `0x${ox.PublicKey.toHex(publicKey).slice(4)}`
+    ).substring(26)}`;
+    const bytes = ox.Bytes.from(hex);
+    const checksum = ox.Bytes.from(ox.Hash.sha256(ox.Hash.sha256(hex))).slice(0, 4);
+    const checked = ox.Bytes.concat(bytes, checksum);
+    const b58 = base.base58.encode(checked);
+    return b58 === address;
+  } catch (error) {
+    return false;
+  }
+}
+async function verifyPersonalSignTIP191(proof) {
+  const [ns, , address] = proof.address.split(/:/);
+  if (ns !== "tron") return { ...proof, status: javascriptSdk.ProofStatus.FAILED };
+  const verified = verifyTIP191(
+    address,
+    proof.attestation,
+    proof.proof
+  );
+  return {
+    ...proof,
+    status: verified ? javascriptSdk.ProofStatus.VERIFIED : javascriptSdk.ProofStatus.FAILED
+  };
+}
+function encode(data) {
+  const message = ox.Hex.from(data);
+  return ox.Hex.concat(
+    // Personal Sign Format: `0x19 ‖ "Ethereum Signed Message:\n" ‖ message.length ‖ message`
+    "0x19",
+    ox.Hex.fromString("TRON Signed Message:\n" + ox.Hex.size(message)),
+    message
+  );
+}
+function getSignPayload(data) {
+  return ox.Hash.keccak256(encode(data));
+}
+
+exports.encode = encode;
+exports.getSignPayload = getSignPayload;
+exports.verifyPersonalSignTIP191 = verifyPersonalSignTIP191;
+exports.verifyTIP191 = verifyTIP191;
+//# sourceMappingURL=tron-IM2O2VLM.cjs.map
+//# sourceMappingURL=tron-IM2O2VLM.cjs.map

package/dist/cjs/tron-IM2O2VLM.cjs.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../src/tron.ts"],"names":["Hex","Signature","Secp256k1","Hash","PublicKey","Bytes","base58","ProofStatus"],"mappings":";;;;;;;;AAIO,SAAS,YAAA,CACd,OAAA,EACA,OAAA,EACA,KAAA,EACS;AACT,EAAA,IAAI;AACF,IAAA,MAAM,OAAA,GAAU,cAAA,CAAeA,MAAA,CAAI,UAAA,CAAW,OAAO,CAAC,CAAA;AACtD,IAAA,MAAM,SAAA,GAAYC,YAAA,CAAU,OAAA,CAAQ,KAAK,CAAA;AACzC,IAAA,MAAM,YAAYC,YAAA,CAAU,gBAAA,CAAiB,EAAE,OAAA,EAAS,WAAW,CAAA;AACnE,IAAA,MAAM,GAAA,GAAe,OAAOC,OAAA,CAAK,SAAA;AAAA,MAC/B,KAAKC,YAAA,CAAU,KAAA,CAAM,SAAS,CAAA,CAAE,KAAA,CAAM,CAAC,CAAC,CAAA;AAAA,KAC1C,CAAE,SAAA,CAAU,EAAE,CAAC,CAAA,CAAA;AACf,IAAA,MAAM,KAAA,GAAQC,QAAA,CAAM,IAAA,CAAK,GAAG,CAAA;AAC5B,IAAA,MAAM,QAAA,GAAWA,QAAA,CAAM,IAAA,CAAKF,OAAA,CAAK,MAAA,CAAOA,OAAA,CAAK,MAAA,CAAO,GAAG,CAAC,CAAC,CAAA,CAAE,KAAA,CAAM,GAAG,CAAC,CAAA;AACrE,IAAA,MAAM,OAAA,GAAUE,QAAA,CAAM,MAAA,CAAO,KAAA,EAAO,QAAQ,CAAA;AAC5C,IAAA,MAAM,GAAA,GAAMC,WAAA,CAAO,MAAA,CAAO,OAAO,CAAA;AACjC,IAAA,OAAO,GAAA,KAAQ,OAAA;AAAA,EAEjB,SAAS,KAAA,EAAO;AACd,IAAA,OAAO,KAAA;AAAA,EACT;AACF;AAEA,eAAsB,yBACpB,KAAA,EACyB;AACzB,EAAA,MAAM,CAAC,MAAM,OAAO,IAAI,KAAA,CAAM,OAAA,CAAQ,MAAM,GAAG,CAAA;AAC/C,EAAA,IAAI,EAAA,KAAO,QAAQ,OAAO,EAAE,GAAG,KAAA,EAAO,MAAA,EAAQC,0BAAY,MAAA,EAAO;AAEjE,EAAA,MAAM,QAAA,GAAW,YAAA;AAAA,IACf,OAAA;AAAA,IACA,KAAA,CAAM,WAAA;AAAA,IACN,KAAA,CAAM;AAAA,GACR;AACA,EAAA,OAAO;AAAA,IACL,GAAG,KAAA;AAAA,IACH,MAAA,EAAQ,QAAA,GAAWA,yBAAA,CAAY,QAAA,GAAWA,yBAAA,CAAY;AAAA,GACxD;AACF;AAEO,SAAS,OAAO,IAAA,EAAsC;AAC3D,EAAA,MAAM,OAAA,GAAUP,MAAA,CAAI,IAAA,CAAK,IAAI,CAAA;AAC7B,EAAA,OAAOA,MAAA,CAAI,MAAA;AAAA;AAAA,IAET,MAAA;AAAA,IACAA,OAAI,UAAA,CAAW,wBAAA,GAA2BA,MAAA,CAAI,IAAA,CAAK,OAAO,CAAC,CAAA;AAAA,IAC3D;AAAA,GACF;AACF;AACO,SAAS,eAAe,IAAA,EAAsC;AACnE,EAAA,OAAOG,OAAA,CAAK,SAAA,CAAU,MAAA,CAAO,IAAI,CAAC,CAAA;AACpC","file":"tron-IM2O2VLM.cjs","sourcesContent":["import { ProofStatus, SignatureProof } from \"@notabene/javascript-sdk\";\nimport { Secp256k1, Hex, Signature, Hash, Bytes, PublicKey } from \"ox\";\nimport { base58 } from \"@scure/base\";\n\nexport function verifyTIP191(\n  address: string,\n  message: string,\n  proof: Hex.Hex,\n): boolean {\n  try {\n    const payload = getSignPayload(Hex.fromString(message));\n    const signature = Signature.fromHex(proof);\n    const publicKey = Secp256k1.recoverPublicKey({ payload, signature });\n    const hex: Hex.Hex = `0x41${Hash.keccak256(\n      `0x${PublicKey.toHex(publicKey).slice(4)}`,\n    ).substring(26)}`;\n    const bytes = Bytes.from(hex);\n    const checksum = Bytes.from(Hash.sha256(Hash.sha256(hex))).slice(0, 4);\n    const checked = Bytes.concat(bytes, checksum);\n    const b58 = base58.encode(checked);\n    return b58 === address;\n  // eslint-disable-next-line @typescript-eslint/no-unused-vars\n  } catch (error) {\n    return false;\n  }\n}\n\nexport async function verifyPersonalSignTIP191(\n  proof: SignatureProof,\n): Promise<SignatureProof> {\n  const [ns, , address] = proof.address.split(/:/);\n  if (ns !== \"tron\") return { ...proof, status: ProofStatus.FAILED };\n\n  const verified = verifyTIP191(\n    address as Hex.Hex,\n    proof.attestation,\n    proof.proof as Hex.Hex,\n  );\n  return {\n    ...proof,\n    status: verified ? ProofStatus.VERIFIED : ProofStatus.FAILED,\n  };\n}\n\nexport function encode(data: Hex.Hex | Bytes.Bytes): Hex.Hex {\n  const message = Hex.from(data);\n  return Hex.concat(\n    // Personal Sign Format: `0x19 ‖ \"Ethereum Signed Message:\\n\" ‖ message.length ‖ message`\n    \"0x19\",\n    Hex.fromString(\"TRON Signed Message:\\n\" + Hex.size(message)),\n    message,\n  );\n}\nexport function getSignPayload(data: Hex.Hex | Bytes.Bytes): Hex.Hex {\n  return Hash.keccak256(encode(data));\n}\n"]}

package/dist/cjs/xlm-CHT7RN4Z.cjs

@@ -0,0 +1,27 @@
+'use strict';
+
+var buffer = require('buffer');
+var javascriptSdk = require('@notabene/javascript-sdk');
+var stellarSdk = require('@stellar/stellar-sdk');
+
+if (typeof globalThis !== 'undefined' && !globalThis.Buffer) { globalThis.Buffer = buffer.Buffer; }
+function verifyStellarSignature(proof) {
+  const [ns, , address] = proof.address.split(/:/);
+  if (ns !== "stellar") return { ...proof, status: javascriptSdk.ProofStatus.FAILED };
+  try {
+    const keypair = stellarSdk.Keypair.fromPublicKey(address);
+    const messageBuffer = buffer.Buffer.from(proof.attestation, "utf-8");
+    const signatureBuffer = buffer.Buffer.from(proof.proof, "base64");
+    const verified = keypair.verify(messageBuffer, signatureBuffer);
+    return {
+      ...proof,
+      status: verified ? javascriptSdk.ProofStatus.VERIFIED : javascriptSdk.ProofStatus.FAILED
+    };
+  } catch {
+    return { ...proof, status: javascriptSdk.ProofStatus.FAILED };
+  }
+}
+
+exports.verifyStellarSignature = verifyStellarSignature;
+//# sourceMappingURL=xlm-CHT7RN4Z.cjs.map
+//# sourceMappingURL=xlm-CHT7RN4Z.cjs.map

package/dist/cjs/xlm-CHT7RN4Z.cjs.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../src/xlm.ts"],"names":["ProofStatus","Keypair","Buffer"],"mappings":";;;;;;;AAGO,SAAS,uBACd,KAAA,EACgB;AAChB,EAAA,MAAM,CAAC,MAAM,OAAO,IAAI,KAAA,CAAM,OAAA,CAAQ,MAAM,GAAG,CAAA;AAC/C,EAAA,IAAI,EAAA,KAAO,WAAW,OAAO,EAAE,GAAG,KAAA,EAAO,MAAA,EAAQA,0BAAY,MAAA,EAAO;AAEpE,EAAA,IAAI;AACF,IAAA,MAAM,OAAA,GAAUC,kBAAA,CAAQ,aAAA,CAAc,OAAO,CAAA;AAC7C,IAAA,MAAM,aAAA,GAAgBC,aAAA,CAAO,IAAA,CAAK,KAAA,CAAM,aAAa,OAAO,CAAA;AAC5D,IAAA,MAAM,eAAA,GAAkBA,aAAA,CAAO,IAAA,CAAK,KAAA,CAAM,OAAO,QAAQ,CAAA;AAEzD,IAAA,MAAM,QAAA,GAAW,OAAA,CAAQ,MAAA,CAAO,aAAA,EAAe,eAAe,CAAA;AAE9D,IAAA,OAAO;AAAA,MACL,GAAG,KAAA;AAAA,MACH,MAAA,EAAQ,QAAA,GAAWF,yBAAA,CAAY,QAAA,GAAWA,yBAAA,CAAY;AAAA,KACxD;AAAA,EACF,CAAA,CAAA,MAAQ;AACN,IAAA,OAAO,EAAE,GAAG,KAAA,EAAO,MAAA,EAAQA,0BAAY,MAAA,EAAO;AAAA,EAChD;AACF","file":"xlm-CHT7RN4Z.cjs","sourcesContent":["import { ProofStatus, SignatureProof } from \"@notabene/javascript-sdk\";\nimport { Keypair } from \"@stellar/stellar-sdk\";\n\nexport function verifyStellarSignature(\n  proof: SignatureProof,\n): SignatureProof {\n  const [ns, , address] = proof.address.split(/:/);\n  if (ns !== \"stellar\") return { ...proof, status: ProofStatus.FAILED };\n\n  try {\n    const keypair = Keypair.fromPublicKey(address);\n    const messageBuffer = Buffer.from(proof.attestation, \"utf-8\");\n    const signatureBuffer = Buffer.from(proof.proof, \"base64\");\n\n    const verified = keypair.verify(messageBuffer, signatureBuffer);\n\n    return {\n      ...proof,\n      status: verified ? ProofStatus.VERIFIED : ProofStatus.FAILED,\n    };\n  } catch {\n    return { ...proof, status: ProofStatus.FAILED };\n  }\n}\n"]}

package/dist/cjs/xrpl-HJ2XWSOO.cjs

@@ -0,0 +1,74 @@
+'use strict';
+
+var buffer = require('buffer');
+var javascriptSdk = require('@notabene/javascript-sdk');
+var xrpl = require('xrpl');
+var rippleKeypairs = require('ripple-keypairs');
+
+if (typeof globalThis !== 'undefined' && !globalThis.Buffer) { globalThis.Buffer = buffer.Buffer; }
+function verifyXRPL(message, publicKey, proof) {
+  return rippleKeypairs.verify(buffer.Buffer.from(message).toString("hex"), proof, publicKey);
+}
+var xrplTestnetWs = [
+  "wss://s.altnet.rippletest.net:51233",
+  "wss://testnet.xrpl-labs.com/"
+];
+var xrplMainnetWs = [
+  "wss://s1.ripple.com",
+  "wss://xrplcluster.com/",
+  // full node
+  "wss://s2.ripple.com/"
+];
+async function getPublicKey(address, isTest) {
+  const servers = isTest ? xrplTestnetWs : xrplMainnetWs;
+  for (const server of servers) {
+    try {
+      const client = new xrpl.Client(server);
+      await client.connect();
+      const response = await client.request({
+        command: "account_tx",
+        account: address,
+        binary: false,
+        limit: 2,
+        forward: false
+      });
+      await client.disconnect();
+      return getSigningPubkeyFromLatestTx(response.result?.transactions);
+    } catch (error) {
+      let errorMessage = "Connection to XRPL server failed";
+      if (error instanceof Error) {
+        errorMessage += `: ${error.message}`;
+      }
+      console.error(errorMessage);
+    }
+  }
+}
+function getSigningPubkeyFromLatestTx(latestTx) {
+  for (let i = 0; i < latestTx.length; i++) {
+    const signingPubKey = latestTx[i]?.tx_json?.SigningPubKey ?? "0x";
+    return signingPubKey;
+  }
+  throw new Error("No valid pubkey found in the latest transactions");
+}
+async function verifyPersonalSignXRPL(proof, publicKey, isTest) {
+  const [ns, , address] = proof.address.split(/:/);
+  if (ns !== "xrpl") return { ...proof, status: javascriptSdk.ProofStatus.FAILED };
+  if (!publicKey) {
+    publicKey = await getPublicKey(address, isTest);
+  }
+  if (!publicKey) {
+    return { ...proof, status: javascriptSdk.ProofStatus.FAILED };
+  }
+  const verified = verifyXRPL(proof.attestation, publicKey, proof.proof);
+  return {
+    ...proof,
+    status: verified ? javascriptSdk.ProofStatus.VERIFIED : javascriptSdk.ProofStatus.FAILED
+  };
+}
+
+exports.verifyPersonalSignXRPL = verifyPersonalSignXRPL;
+exports.verifyXRPL = verifyXRPL;
+exports.xrplMainnetWs = xrplMainnetWs;
+exports.xrplTestnetWs = xrplTestnetWs;
+//# sourceMappingURL=xrpl-HJ2XWSOO.cjs.map
+//# sourceMappingURL=xrpl-HJ2XWSOO.cjs.map

package/dist/cjs/xrpl-HJ2XWSOO.cjs.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../src/xrpl.ts"],"names":["verify","Buffer","Client","ProofStatus"],"mappings":";;;;;;;;AAIO,SAAS,UAAA,CACd,OAAA,EACA,SAAA,EACA,KAAA,EACS;AACT,EAAA,OAAOA,qBAAA,CAAOC,cAAO,IAAA,CAAK,OAAO,EAAE,QAAA,CAAS,KAAK,CAAA,EAAG,KAAA,EAAO,SAAS,CAAA;AACtE;AAEO,IAAM,aAAA,GAAgB;AAAA,EAC3B,qCAAA;AAAA,EACA;AACF;AAEO,IAAM,aAAA,GAAgB;AAAA,EAC3B,qBAAA;AAAA,EACA,wBAAA;AAAA;AAAA,EACA;AACF;AAGA,eAAe,YAAA,CACb,SACA,MAAA,EAC6B;AAC7B,EAAA,MAAM,OAAA,GAAU,SAAS,aAAA,GAAgB,aAAA;AAEzC,EAAA,KAAA,MAAW,UAAU,OAAA,EAAS;AAC5B,IAAA,IAAI;AACF,MAAA,MAAM,MAAA,GAAS,IAAIC,WAAA,CAAO,MAAM,CAAA;AAChC,MAAA,MAAM,OAAO,OAAA,EAAQ;AAErB,MAAA,MAAM,QAAA,GAAW,MAAM,MAAA,CAAO,OAAA,CAAQ;AAAA,QACpC,OAAA,EAAS,YAAA;AAAA,QACT,OAAA,EAAS,OAAA;AAAA,QACT,MAAA,EAAQ,KAAA;AAAA,QACR,KAAA,EAAO,CAAA;AAAA,QACP,OAAA,EAAS;AAAA,OACV,CAAA;AAED,MAAA,MAAM,OAAO,UAAA,EAAW;AACxB,MAAA,OAAO,4BAAA,CAA6B,QAAA,CAAS,MAAA,EAAQ,YAAY,CAAA;AAAA,IACnE,SAAS,KAAA,EAAO;AACd,MAAA,IAAI,YAAA,GAAe,kCAAA;AACnB,MAAA,IAAI,iBAAiB,KAAA,EAAO;AAC1B,QAAA,YAAA,IAAgB,CAAA,EAAA,EAAK,MAAM,OAAO,CAAA,CAAA;AAAA,MACpC;AACA,MAAA,OAAA,CAAQ,MAAM,YAAY,CAAA;AAAA,IAE5B;AAAA,EACF;AACF;AAEA,SAAS,6BACP,QAAA,EACQ;AACR,EAAA,KAAA,IAAS,CAAA,GAAI,CAAA,EAAG,CAAA,GAAI,QAAA,CAAS,QAAQ,CAAA,EAAA,EAAK;AAExC,IAAA,MAAM,aAAA,GAAgB,QAAA,CAAS,CAAC,CAAA,EAAG,SAAS,aAAA,IAAiB,IAAA;AAG7D,IAAA,OAAO,aAAA;AAAA,EACT;AACA,EAAA,MAAM,IAAI,MAAM,kDAAkD,CAAA;AACpE;AAEA,eAAsB,sBAAA,CACpB,KAAA,EACA,SAAA,EACA,MAAA,EACyB;AACzB,EAAA,MAAM,CAAC,MAAM,OAAO,IAAI,KAAA,CAAM,OAAA,CAAQ,MAAM,GAAG,CAAA;AAC/C,EAAA,IAAI,EAAA,KAAO,QAAQ,OAAO,EAAE,GAAG,KAAA,EAAO,MAAA,EAAQC,0BAAY,MAAA,EAAO;AAEjE,EAAA,IAAI,CAAC,SAAA,EAAW;AACd,IAAA,SAAA,GAAY,MAAM,YAAA,CAAa,OAAA,EAAS,MAAM,CAAA;AAAA,EAChD;AAEA,EAAA,IAAI,CAAC,SAAA,EAAW;AACd,IAAA,OAAO,EAAE,GAAG,KAAA,EAAO,MAAA,EAAQA,0BAAY,MAAA,EAAO;AAAA,EAChD;AAEA,EAAA,MAAM,WAAW,UAAA,CAAW,KAAA,CAAM,WAAA,EAAa,SAAA,EAAW,MAAM,KAAK,CAAA;AAErE,EAAA,OAAO;AAAA,IACL,GAAG,KAAA;AAAA,IACH,MAAA,EAAQ,QAAA,GAAWA,yBAAA,CAAY,QAAA,GAAWA,yBAAA,CAAY;AAAA,GACxD;AACF","file":"xrpl-HJ2XWSOO.cjs","sourcesContent":["import { ProofStatus, SignatureProof } from \"@notabene/javascript-sdk\";\nimport { AccountTxTransaction, Client } from \"xrpl\";\nimport { verify } from \"ripple-keypairs\";\n\nexport function verifyXRPL(\n  message: string,\n  publicKey: string,\n  proof: string\n): boolean {\n  return verify(Buffer.from(message).toString(\"hex\"), proof, publicKey);\n}\n\nexport const xrplTestnetWs = [\n  \"wss://s.altnet.rippletest.net:51233\",\n  \"wss://testnet.xrpl-labs.com/\",\n];\n\nexport const xrplMainnetWs = [\n  \"wss://s1.ripple.com\",\n  \"wss://xrplcluster.com/\", // full node\n  \"wss://s2.ripple.com/\",\n];\n\n// If the public key is not provided, we need to get it directly\nasync function getPublicKey(\n  address: string,\n  isTest?: boolean\n): Promise<string | undefined> {\n  const servers = isTest ? xrplTestnetWs : xrplMainnetWs;\n\n  for (const server of servers) {\n    try {\n      const client = new Client(server);\n      await client.connect();\n\n      const response = await client.request({\n        command: \"account_tx\",\n        account: address,\n        binary: false,\n        limit: 2,\n        forward: false,\n      });\n\n      await client.disconnect();\n      return getSigningPubkeyFromLatestTx(response.result?.transactions);\n    } catch (error) {\n      let errorMessage = \"Connection to XRPL server failed\";\n      if (error instanceof Error) {\n        errorMessage += `: ${error.message}`;\n      }\n      console.error(errorMessage);\n      // Continue to next server\n    }\n  }\n}\n\nfunction getSigningPubkeyFromLatestTx(\n  latestTx: AccountTxTransaction[]\n): string {\n  for (let i = 0; i < latestTx.length; i++) {\n    // Check if the Account in the .tx is the address derived from the pubkey\n    const signingPubKey = latestTx[i]?.tx_json?.SigningPubKey ?? \"0x\";\n    // TODO: https://github.com/Cypher-Laboratory/xrpl-publickey-getter/blob/main/src/pubKeyGetter.ts#L98\n    // Check the public key matches the address properly\n    return signingPubKey;\n  }\n  throw new Error(\"No valid pubkey found in the latest transactions\");\n}\n\nexport async function verifyPersonalSignXRPL(\n  proof: SignatureProof,\n  publicKey?: string,\n  isTest?: boolean\n): Promise<SignatureProof> {\n  const [ns, , address] = proof.address.split(/:/);\n  if (ns !== \"xrpl\") return { ...proof, status: ProofStatus.FAILED };\n\n  if (!publicKey) {\n    publicKey = await getPublicKey(address, isTest);\n  }\n\n  if (!publicKey) {\n    return { ...proof, status: ProofStatus.FAILED };\n  }\n\n  const verified = verifyXRPL(proof.attestation, publicKey, proof.proof);\n\n  return {\n    ...proof,\n    status: verified ? ProofStatus.VERIFIED : ProofStatus.FAILED,\n  };\n}\n"]}

package/dist/esm/bitcoin-BTZ4TXEK.js

@@ -0,0 +1,401 @@
+import { Buffer } from 'buffer';
+import { ProofStatus, ProofTypes } from '@notabene/javascript-sdk';
+import { encode } from 'varuint-bitcoin';
+import { createBase58check, bech32, base64 } from '@scure/base';
+import { Hash } from 'ox';
+import { secp256k1 } from '@noble/curves/secp256k1';
+import { Verifier } from 'bip322-js';
+
+if (typeof globalThis !== 'undefined' && !globalThis.Buffer) { globalThis.Buffer = Buffer; }
+var CHARSET = "qpzry9x8gf2tvdw0s3jn54khce6mua7l";
+var GENERATOR = [
+  BigInt("0x98f2bc8e61"),
+  BigInt("0x79b76d99e2"),
+  BigInt("0xf33e5fb3c4"),
+  BigInt("0xae2eabe2a8"),
+  BigInt("0x1e4f43e470")
+];
+function polymod(values) {
+  let c = BigInt(1);
+  for (const d of values) {
+    const c0 = c >> BigInt(35);
+    c = (c & BigInt("0x07ffffffff")) << BigInt(5) ^ BigInt(d);
+    for (let i = 0; i < 5; i++) {
+      if (c0 >> BigInt(i) & BigInt(1)) {
+        c ^= GENERATOR[i];
+      }
+    }
+  }
+  return c ^ BigInt(1);
+}
+function prefixExpand(prefix) {
+  const result = [];
+  for (let i = 0; i < prefix.length; i++) {
+    result.push(prefix.charCodeAt(i) & 31);
+  }
+  result.push(0);
+  return result;
+}
+function decodeCashAddr(address, defaultPrefix = "bitcoincash") {
+  let prefix;
+  const colonIndex = address.indexOf(":");
+  if (colonIndex !== -1) {
+    prefix = address.slice(0, colonIndex).toLowerCase();
+  } else {
+    prefix = defaultPrefix;
+  }
+  const rawPayload = colonIndex !== -1 ? address.slice(colonIndex + 1) : address;
+  if (/[A-Z]/.test(rawPayload) && /[a-z]/.test(rawPayload)) {
+    throw new Error("Invalid CashAddr: mixed case");
+  }
+  const payload = rawPayload.toLowerCase();
+  const words = [];
+  for (const ch of payload) {
+    const idx = CHARSET.indexOf(ch);
+    if (idx === -1) throw new Error("Invalid CashAddr character: " + ch);
+    words.push(idx);
+  }
+  if (words.length < 8) throw new Error("CashAddr too short");
+  const checksumData = [...prefixExpand(prefix), ...words];
+  if (polymod(checksumData) !== BigInt(0)) {
+    throw new Error("Invalid CashAddr checksum");
+  }
+  const dataWords = words.slice(0, -8);
+  const payloadBytes = bech32.fromWords(dataWords);
+  if (payloadBytes.length === 0) {
+    throw new Error("Invalid CashAddr padding");
+  }
+  const versionByte = payloadBytes[0];
+  const type = versionByte >> 3 & 15;
+  const hashSizeBits = versionByte & 7;
+  const expectedSizes = [20, 24, 28, 32, 40, 48, 56, 64];
+  const expectedSize = expectedSizes[hashSizeBits];
+  const hashBytes = payloadBytes.slice(1);
+  if (hashBytes.length !== expectedSize) {
+    throw new Error(
+      `Hash length mismatch: expected ${expectedSize}, got ${hashBytes.length}`
+    );
+  }
+  return { prefix, type, hash: Uint8Array.from(hashBytes) };
+}
+
+// src/bitcoin.ts
+var CHAIN_CONFIGS = {
+  bitcoin: {
+    messagePrefix: "Bitcoin Signed Message:\n",
+    pubKeyHashVersion: 0,
+    // 1...
+    scriptHashVersion: 5,
+    // 3...
+    bech32Prefix: "bc",
+    isTestnet: false
+  },
+  bitcoincash: {
+    messagePrefix: "Bitcoin Signed Message:\n",
+    pubKeyHashVersion: 0,
+    // 1...
+    scriptHashVersion: 5,
+    // 3...
+    bech32Prefix: "bc",
+    isTestnet: false
+  },
+  litecoin: {
+    messagePrefix: "Litecoin Signed Message:\n",
+    pubKeyHashVersion: 48,
+    // L... or M...
+    scriptHashVersion: 50,
+    // 3... or M...
+    bech32Prefix: "ltc",
+    isTestnet: false
+  },
+  dogecoin: {
+    messagePrefix: "Dogecoin Signed Message:\n",
+    pubKeyHashVersion: 30,
+    // D...
+    scriptHashVersion: 22,
+    // A...
+    isTestnet: false
+  },
+  dash: {
+    messagePrefix: "DarkCoin Signed Message:\n",
+    pubKeyHashVersion: 76,
+    // X...
+    scriptHashVersion: 16,
+    // 7...
+    isTestnet: false
+  },
+  zcash: {
+    messagePrefix: "Zcash Signed Message:\n",
+    pubKeyHashVersion: Uint8Array.from([28, 184]),
+    // <-- FIXED
+    scriptHashVersion: Uint8Array.from([28, 189]),
+    isTestnet: false
+  },
+  testnet: {
+    messagePrefix: "Bitcoin Signed Message:\n",
+    pubKeyHashVersion: 111,
+    // m or n
+    scriptHashVersion: 196,
+    // 2
+    bech32Prefix: "tb",
+    isTestnet: true
+  }
+};
+async function verifyBTCSignature(proof) {
+  const parts = proof.address.split(":");
+  const ns = parts[0];
+  const address = parts.slice(2).join(":");
+  if (ns !== "bip122") return { ...proof, status: ProofStatus.FAILED };
+  const chainConfig = getChainConfig(address);
+  if (!chainConfig) return { ...proof, status: ProofStatus.FAILED };
+  const isZcash = address.startsWith("t1") || address.startsWith("t3");
+  if (isZcash) {
+    return verifyBIP137(address, proof, chainConfig);
+  }
+  if (chainConfig.isTestnet) {
+    try {
+      return verifyBIP322(address, proof);
+    } catch {
+      return { ...proof, status: ProofStatus.FAILED };
+    }
+  }
+  const isTaproot = address.startsWith("bc1p") || address.startsWith("tb1p");
+  if (isTaproot && proof.type === ProofTypes.BIP137) {
+    return verifyBIP322(address, proof);
+  }
+  try {
+    switch (proof.type) {
+      case ProofTypes.BIP137:
+        return verifyBIP137(address, proof, chainConfig);
+      case ProofTypes.BIP322:
+        return verifyBIP322(address, proof);
+      default:
+        return {
+          ...proof,
+          status: ProofStatus.FAILED
+        };
+    }
+  } catch {
+    return {
+      ...proof,
+      status: ProofStatus.FAILED
+    };
+  }
+}
+function getChainConfig(address) {
+  if (address.startsWith("1") || address.startsWith("3") || address.startsWith("bc1")) {
+    return CHAIN_CONFIGS["bitcoin"];
+  }
+  if (address.startsWith("t1") || address.startsWith("t3")) {
+    return CHAIN_CONFIGS["zcash"];
+  }
+  if (address.startsWith("L") || address.startsWith("M") || address.startsWith("ltc1")) {
+    return CHAIN_CONFIGS["litecoin"];
+  }
+  if (address.startsWith("D") || address.startsWith("A")) {
+    return CHAIN_CONFIGS["dogecoin"];
+  }
+  if (address.startsWith("X") || address.startsWith("7")) {
+    return CHAIN_CONFIGS["dash"];
+  }
+  if (address.startsWith("q") || address.startsWith("bitcoincash:")) {
+    return CHAIN_CONFIGS["bitcoincash"];
+  }
+  if (address.startsWith("m") || address.startsWith("n") || address.startsWith("2") || address.startsWith("tb1")) {
+    return CHAIN_CONFIGS["testnet"];
+  }
+  return CHAIN_CONFIGS["bitcoin"];
+}
+function verifyBIP322(address, proof) {
+  const { attestation, proof: signatureProof } = proof;
+  const verified = Verifier.verifySignature(
+    address,
+    attestation,
+    signatureProof
+  );
+  return {
+    ...proof,
+    status: verified ? ProofStatus.VERIFIED : ProofStatus.FAILED
+  };
+}
+function verifyBIP137(address, proof, chainConfig) {
+  const derivationMode = getDerivationMode(address);
+  const useSegwitEncoding = Boolean(
+    chainConfig.bech32Prefix && (derivationMode === "Native SegWit" /* NATIVE */ || derivationMode === "SegWit" /* SEGWIT */ && !address.startsWith("1"))
+  );
+  const verified = verify(
+    proof.attestation,
+    address,
+    proof.proof,
+    useSegwitEncoding,
+    chainConfig
+  );
+  return {
+    ...proof,
+    status: verified ? ProofStatus.VERIFIED : ProofStatus.FAILED
+  };
+}
+function getDerivationMode(address) {
+  if (address.match("^(bc1|tb1|ltc1).*")) {
+    return "Native SegWit" /* NATIVE */;
+  } else if (address.match("^[32M].*")) {
+    return "SegWit" /* SEGWIT */;
+  } else if (address.match("^[1nmL].*")) {
+    return "Legacy" /* LEGACY */;
+  } else if (address.match("^(D).*")) {
+    return "Dogecoin" /* DOGECOIN */;
+  } else if (address.match("^(q).*") || address.startsWith("bitcoincash:")) {
+    return "Bitcoin Cash" /* BCH */;
+  } else if (address.match("^(t1|t3).*")) {
+    return "Legacy" /* LEGACY */;
+  } else if (address.match("^[X7].*")) {
+    return "Legacy" /* LEGACY */;
+  } else {
+    throw new Error(
+      "INVALID ADDRESS: ".concat(address).concat(" is not a valid or a supported address")
+    );
+  }
+}
+function decodeSignature(proof) {
+  const sigbytes = base64.decode(proof);
+  if (sigbytes.length !== 65) throw new Error("Invalid signature length");
+  const flagByte = sigbytes[0] - 27;
+  if (flagByte > 15 || flagByte < 0) {
+    throw new Error("Invalid signature parameter");
+  }
+  const compressed = !!(flagByte & 12);
+  const recovery = flagByte & 3;
+  const signature = secp256k1.Signature.fromCompact(sigbytes.slice(1));
+  return {
+    compressed,
+    segwitType: !(flagByte & 8) ? void 0 : !(flagByte & 4) ? "p2sh(p2wpkh)" /* P2SH_P2WPKH */ : "p2wpkh" /* P2WPKH */,
+    signature: signature.addRecoveryBit(recovery)
+  };
+}
+function verify(attestation, address, proof, checkSegwitAlways, chainConfig) {
+  const { compressed, segwitType, signature } = decodeSignature(proof);
+  if (checkSegwitAlways && !compressed) {
+    throw new Error(
+      "checkSegwitAlways can only be used with a compressed pubkey signature flagbyte"
+    );
+  }
+  const hash = magicHash(attestation, chainConfig.messagePrefix);
+  const publicKey = signature.recoverPublicKey(hash);
+  const publicKeyBytes = publicKey.toRawBytes(compressed);
+  const publicKeyHash = hash160(publicKeyBytes);
+  if (address.startsWith("q") || address.startsWith("bitcoincash:")) {
+    try {
+      const decoded = decodeCashAddr(address);
+      if (decoded.type !== 0) return false;
+      if (decoded.hash.length !== publicKeyHash.length) return false;
+      for (let i = 0; i < decoded.hash.length; i++) {
+        if (decoded.hash[i] !== publicKeyHash[i]) return false;
+      }
+      return true;
+    } catch {
+      return false;
+    }
+  }
+  let actual = "";
+  if (segwitType) {
+    if (segwitType === "p2sh(p2wpkh)" /* P2SH_P2WPKH */) {
+      const redeemScript = new Uint8Array(22);
+      redeemScript[0] = 0;
+      redeemScript[1] = 20;
+      redeemScript.set(publicKeyHash, 2);
+      const redeemScriptHash = hash160(redeemScript);
+      actual = encodeBase58AddressFormat(
+        chainConfig.scriptHashVersion,
+        redeemScriptHash
+      );
+    } else {
+      if (chainConfig.bech32Prefix) {
+        actual = encodeBech32Address(publicKeyHash, chainConfig.bech32Prefix);
+      } else {
+        actual = encodeBase58AddressFormat(
+          chainConfig.scriptHashVersion,
+          publicKeyHash
+        );
+      }
+    }
+  } else {
+    if (address.startsWith("3") && !segwitType) {
+      const redeemScript = new Uint8Array(22);
+      redeemScript[0] = 0;
+      redeemScript[1] = 20;
+      redeemScript.set(publicKeyHash, 2);
+      const redeemScriptHash = hash160(redeemScript);
+      const p2shP2wpkh = encodeBase58AddressFormat(
+        chainConfig.scriptHashVersion,
+        redeemScriptHash
+      );
+      const legacyP2sh = encodeBase58AddressFormat(
+        chainConfig.scriptHashVersion,
+        publicKeyHash
+      );
+      if (address === p2shP2wpkh || address === legacyP2sh) {
+        return true;
+      }
+      actual = legacyP2sh;
+    } else if (address.startsWith("bc1q") || address.startsWith("tb1q") || address.startsWith("ltc1q")) {
+      if (chainConfig.bech32Prefix) {
+        actual = encodeBech32Address(publicKeyHash, chainConfig.bech32Prefix);
+      } else {
+        actual = encodeBase58AddressFormat(
+          chainConfig.pubKeyHashVersion,
+          publicKeyHash
+        );
+      }
+    } else if (checkSegwitAlways && chainConfig.bech32Prefix) {
+      try {
+        actual = encodeBech32Address(publicKeyHash, chainConfig.bech32Prefix);
+      } catch (e) {
+        actual = encodeBase58AddressFormat(
+          chainConfig.scriptHashVersion,
+          publicKeyHash
+        );
+      }
+    } else {
+      actual = encodeBase58AddressFormat(
+        chainConfig.pubKeyHashVersion,
+        publicKeyHash
+      );
+    }
+  }
+  return actual === address;
+}
+var base58check = createBase58check(Hash.sha256);
+function encodeBase58AddressFormat(version, publicKeyHash) {
+  const prefixBytes = typeof version === "number" ? Uint8Array.of(version) : version;
+  const payload = new Uint8Array(prefixBytes.length + publicKeyHash.length);
+  payload.set(prefixBytes);
+  payload.set(publicKeyHash, prefixBytes.length);
+  return base58check.encode(payload);
+}
+function magicHash(attestation, messagePrefix) {
+  const prefix = new TextEncoder().encode(messagePrefix);
+  const message = new TextEncoder().encode(attestation);
+  const length = encode(message.length).buffer;
+  const buffer = new Uint8Array(
+    prefix.length + length.byteLength + message.length
+  );
+  buffer.set(prefix);
+  buffer.set(new Uint8Array(length), prefix.length);
+  buffer.set(message, prefix.length + length.byteLength);
+  return hash256(buffer);
+}
+function encodeBech32Address(publicKeyHash, prefix = "bc") {
+  const bwords = bech32.toWords(publicKeyHash);
+  bwords.unshift(0);
+  return bech32.encode(prefix, bwords);
+}
+function hash256(buffer) {
+  return Hash.sha256(Hash.sha256(buffer));
+}
+function hash160(buffer) {
+  return Hash.ripemd160(Hash.sha256(buffer));
+}
+
+export { verifyBTCSignature };
+//# sourceMappingURL=bitcoin-BTZ4TXEK.js.map
+//# sourceMappingURL=bitcoin-BTZ4TXEK.js.map

package/dist/esm/bitcoin-BTZ4TXEK.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../src/cashaddr.ts","../../src/bitcoin.ts"],"names":["encodeLength","bech32"],"mappings":";;;;;;;;;AAOA,IAAM,OAAA,GAAU,kCAAA;AAOhB,IAAM,SAAA,GAAY;AAAA,EAChB,OAAO,cAAc,CAAA;AAAA,EACrB,OAAO,cAAc,CAAA;AAAA,EACrB,OAAO,cAAc,CAAA;AAAA,EACrB,OAAO,cAAc,CAAA;AAAA,EACrB,OAAO,cAAc;AACvB,CAAA;AAeA,SAAS,QAAQ,MAAA,EAA0B;AACzC,EAAA,IAAI,CAAA,GAAI,OAAO,CAAC,CAAA;AAChB,EAAA,KAAA,MAAW,KAAK,MAAA,EAAQ;AAEtB,IAAA,MAAM,EAAA,GAAK,CAAA,IAAK,MAAA,CAAO,EAAE,CAAA;AAEzB,IAAA,CAAA,GAAA,CAAM,CAAA,GAAI,OAAO,cAAc,CAAA,KAAM,OAAO,CAAC,CAAA,GAAK,OAAO,CAAC,CAAA;AAE1D,IAAA,KAAA,IAAS,CAAA,GAAI,CAAA,EAAG,CAAA,GAAI,CAAA,EAAG,CAAA,EAAA,EAAK;AAC1B,MAAA,IAAK,MAAM,MAAA,CAAO,CAAC,CAAA,GAAK,MAAA,CAAO,CAAC,CAAA,EAAG;AACjC,QAAA,CAAA,IAAK,UAAU,CAAC,CAAA;AAAA,MAClB;AAAA,IACF;AAAA,EACF;AAEA,EAAA,OAAO,CAAA,GAAI,OAAO,CAAC,CAAA;AACrB;AAWA,SAAS,aAAa,MAAA,EAA0B;AAC9C,EAAA,MAAM,SAAmB,EAAC;AAC1B,EAAA,KAAA,IAAS,CAAA,GAAI,CAAA,EAAG,CAAA,GAAI,MAAA,CAAO,QAAQ,CAAA,EAAA,EAAK;AAEtC,IAAA,MAAA,CAAO,IAAA,CAAK,MAAA,CAAO,UAAA,CAAW,CAAC,IAAI,EAAI,CAAA;AAAA,EACzC;AAEA,EAAA,MAAA,CAAO,KAAK,CAAC,CAAA;AACb,EAAA,OAAO,MAAA;AACT;AAsBO,SAAS,cAAA,CACd,OAAA,EACA,aAAA,GAAgB,aAAA,EACoC;AACpD,EAAA,IAAI,MAAA;AAGJ,EAAA,MAAM,UAAA,GAAa,OAAA,CAAQ,OAAA,CAAQ,GAAG,CAAA;AACtC,EAAA,IAAI,eAAe,EAAA,EAAI;AACrB,IAAA,MAAA,GAAS,OAAA,CAAQ,KAAA,CAAM,CAAA,EAAG,UAAU,EAAE,WAAA,EAAY;AAAA,EACpD,CAAA,MAAO;AACL,IAAA,MAAA,GAAS,aAAA;AAAA,EACX;AAGA,EAAA,MAAM,aAAa,UAAA,KAAe,EAAA,GAAK,QAAQ,KAAA,CAAM,UAAA,GAAa,CAAC,CAAA,GAAI,OAAA;AACvE,EAAA,IAAI,QAAQ,IAAA,CAAK,UAAU,KAAK,OAAA,CAAQ,IAAA,CAAK,UAAU,CAAA,EAAG;AACxD,IAAA,MAAM,IAAI,MAAM,8BAA8B,CAAA;AAAA,EAChD;AACA,EAAA,MAAM,OAAA,GAAU,WAAW,WAAA,EAAY;AAGvC,EAAA,MAAM,QAAkB,EAAC;AACzB,EAAA,KAAA,MAAW,MAAM,OAAA,EAAS;AACxB,IAAA,MAAM,GAAA,GAAM,OAAA,CAAQ,OAAA,CAAQ,EAAE,CAAA;AAC9B,IAAA,IAAI,QAAQ,EAAA,EAAI,MAAM,IAAI,KAAA,CAAM,iCAAiC,EAAE,CAAA;AACnE,IAAA,KAAA,CAAM,KAAK,GAAG,CAAA;AAAA,EAChB;AAGA,EAAA,IAAI,MAAM,MAAA,GAAS,CAAA,EAAG,MAAM,IAAI,MAAM,oBAAoB,CAAA;AAG1D,EAAA,MAAM,eAAe,CAAC,GAAG,aAAa,MAAM,CAAA,EAAG,GAAG,KAAK,CAAA;AACvD,EAAA,IAAI,OAAA,CAAQ,YAAY,CAAA,KAAM,MAAA,CAAO,CAAC,CAAA,EAAG;AACvC,IAAA,MAAM,IAAI,MAAM,2BAA2B,CAAA;AAAA,EAC7C;AAGA,EAAA,MAAM,SAAA,GAAY,KAAA,CAAM,KAAA,CAAM,CAAA,EAAG,EAAE,CAAA;AAEnC,EAAA,MAAM,YAAA,GAAe,MAAA,CAAO,SAAA,CAAU,SAAS,CAAA;AAC/C,EAAA,IAAI,YAAA,CAAa,WAAW,CAAA,EAAG;AAC7B,IAAA,MAAM,IAAI,MAAM,0BAA0B,CAAA;AAAA,EAC5C;AAGA,EAAA,MAAM,WAAA,GAAc,aAAa,CAAC,CAAA;AAClC,EAAA,MAAM,IAAA,GAAQ,eAAe,CAAA,GAAK,EAAA;AAClC,EAAA,MAAM,eAAe,WAAA,GAAc,CAAA;AAGnC,EAAA,MAAM,aAAA,GAAgB,CAAC,EAAA,EAAI,EAAA,EAAI,IAAI,EAAA,EAAI,EAAA,EAAI,EAAA,EAAI,EAAA,EAAI,EAAE,CAAA;AACrD,EAAA,MAAM,YAAA,GAAe,cAAc,YAAY,CAAA;AAE/C,EAAA,MAAM,SAAA,GAAY,YAAA,CAAa,KAAA,CAAM,CAAC,CAAA;AACtC,EAAA,IAAI,SAAA,CAAU,WAAW,YAAA,EAAc;AACrC,IAAA,MAAM,IAAI,KAAA;AAAA,MACR,CAAA,+BAAA,EAAkC,YAAY,CAAA,MAAA,EAAS,SAAA,CAAU,MAAM,CAAA;AAAA,KACzE;AAAA,EACF;AAEA,EAAA,OAAO,EAAE,MAAA,EAAQ,IAAA,EAAM,MAAM,UAAA,CAAW,IAAA,CAAK,SAAS,CAAA,EAAE;AAC1D;;;ACjIA,IAAM,aAAA,GAA6C;AAAA,EACjD,OAAA,EAAS;AAAA,IACP,aAAA,EAAe,4BAAA;AAAA,IACf,iBAAA,EAAmB,CAAA;AAAA;AAAA,IACnB,iBAAA,EAAmB,CAAA;AAAA;AAAA,IACnB,YAAA,EAAc,IAAA;AAAA,IACd,SAAA,EAAW;AAAA,GACb;AAAA,EACA,WAAA,EAAa;AAAA,IACX,aAAA,EAAe,4BAAA;AAAA,IACf,iBAAA,EAAmB,CAAA;AAAA;AAAA,IACnB,iBAAA,EAAmB,CAAA;AAAA;AAAA,IACnB,YAAA,EAAc,IAAA;AAAA,IACd,SAAA,EAAW;AAAA,GACb;AAAA,EACA,QAAA,EAAU;AAAA,IACR,aAAA,EAAe,6BAAA;AAAA,IACf,iBAAA,EAAmB,EAAA;AAAA;AAAA,IACnB,iBAAA,EAAmB,EAAA;AAAA;AAAA,IACnB,YAAA,EAAc,KAAA;AAAA,IACd,SAAA,EAAW;AAAA,GACb;AAAA,EACA,QAAA,EAAU;AAAA,IACR,aAAA,EAAe,6BAAA;AAAA,IACf,iBAAA,EAAmB,EAAA;AAAA;AAAA,IACnB,iBAAA,EAAmB,EAAA;AAAA;AAAA,IACnB,SAAA,EAAW;AAAA,GACb;AAAA,EACA,IAAA,EAAM;AAAA,IACJ,aAAA,EAAe,6BAAA;AAAA,IACf,iBAAA,EAAmB,EAAA;AAAA;AAAA,IACnB,iBAAA,EAAmB,EAAA;AAAA;AAAA,IACnB,SAAA,EAAW;AAAA,GACb;AAAA,EACA,KAAA,EAAO;AAAA,IACL,aAAA,EAAe,0BAAA;AAAA,IACf,mBAAmB,UAAA,CAAW,IAAA,CAAK,CAAC,EAAA,EAAM,GAAI,CAAC,CAAA;AAAA;AAAA,IAC/C,mBAAmB,UAAA,CAAW,IAAA,CAAK,CAAC,EAAA,EAAM,GAAI,CAAC,CAAA;AAAA,IAC/C,SAAA,EAAW;AAAA,GACb;AAAA,EAEA,OAAA,EAAS;AAAA,IACP,aAAA,EAAe,4BAAA;AAAA,IACf,iBAAA,EAAmB,GAAA;AAAA;AAAA,IACnB,iBAAA,EAAmB,GAAA;AAAA;AAAA,IACnB,YAAA,EAAc,IAAA;AAAA,IACd,SAAA,EAAW;AAAA;AAEf,CAAA;AAaA,eAAsB,mBACpB,KAAA,EACyB;AAIzB,EAAA,MAAM,KAAA,GAAQ,KAAA,CAAM,OAAA,CAAQ,KAAA,CAAM,GAAG,CAAA;AACrC,EAAA,MAAM,EAAA,GAAK,MAAM,CAAC,CAAA;AAClB,EAAA,MAAM,UAAU,KAAA,CAAM,KAAA,CAAM,CAAC,CAAA,CAAE,KAAK,GAAG,CAAA;AACvC,EAAA,IAAI,EAAA,KAAO,UAAU,OAAO,EAAE,GAAG,KAAA,EAAO,MAAA,EAAQ,YAAY,MAAA,EAAO;AAGnE,EAAA,MAAM,WAAA,GAAc,eAAe,OAAO,CAAA;AAC1C,EAAA,IAAI,CAAC,aAAa,OAAO,EAAE,GAAG,KAAA,EAAO,MAAA,EAAQ,YAAY,MAAA,EAAO;AAEhE,EAAA,MAAM,UAAU,OAAA,CAAQ,UAAA,CAAW,IAAI,CAAA,IAAK,OAAA,CAAQ,WAAW,IAAI,CAAA;AACnE,EAAA,IAAI,OAAA,EAAS;AACX,IAAA,OAAO,YAAA,CAAa,OAAA,EAAS,KAAA,EAAO,WAAW,CAAA;AAAA,EACjD;AAGA,EAAA,IAAI,YAAY,SAAA,EAAW;AACzB,IAAA,IAAI;AACF,MAAA,OAAO,YAAA,CAAa,SAAS,KAAK,CAAA;AAAA,IACpC,CAAA,CAAA,MAAQ;AACN,MAAA,OAAO,EAAE,GAAG,KAAA,EAAO,MAAA,EAAQ,YAAY,MAAA,EAAO;AAAA,IAChD;AAAA,EACF;AAGA,EAAA,MAAM,YAAY,OAAA,CAAQ,UAAA,CAAW,MAAM,CAAA,IAAK,OAAA,CAAQ,WAAW,MAAM,CAAA;AAIzE,EAAA,IAAI,SAAA,IAAa,KAAA,CAAM,IAAA,KAAS,UAAA,CAAW,MAAA,EAAQ;AACjD,IAAA,OAAO,YAAA,CAAa,SAAS,KAAK,CAAA;AAAA,EACpC;AAEA,EAAA,IAAI;AACF,IAAA,QAAQ,MAAM,IAAA;AAAM,MAClB,KAAK,UAAA,CAAW,MAAA;AACd,QAAA,OAAO,YAAA,CAAa,OAAA,EAAS,KAAA,EAAO,WAAW,CAAA;AAAA,MACjD,KAAK,UAAA,CAAW,MAAA;AACd,QAAA,OAAO,YAAA,CAAa,SAAS,KAAK,CAAA;AAAA,MACpC;AACE,QAAA,OAAO;AAAA,UACL,GAAG,KAAA;AAAA,UACH,QAAQ,WAAA,CAAY;AAAA,SACtB;AAAA;AACJ,EACF,CAAA,CAAA,MAAQ;AACN,IAAA,OAAO;AAAA,MACL,GAAG,KAAA;AAAA,MACH,QAAQ,WAAA,CAAY;AAAA,KACtB;AAAA,EACF;AACF;AAEA,SAAS,eAAe,OAAA,EAA8B;AACpD,EAAA,IACE,OAAA,CAAQ,UAAA,CAAW,GAAG,CAAA,IACtB,OAAA,CAAQ,UAAA,CAAW,GAAG,CAAA,IACtB,OAAA,CAAQ,UAAA,CAAW,KAAK,CAAA,EACxB;AACA,IAAA,OAAO,cAAc,SAAS,CAAA;AAAA,EAChC;AACA,EAAA,IAAI,QAAQ,UAAA,CAAW,IAAI,KAAK,OAAA,CAAQ,UAAA,CAAW,IAAI,CAAA,EAAG;AACxD,IAAA,OAAO,cAAc,OAAO,CAAA;AAAA,EAC9B;AACA,EAAA,IACE,OAAA,CAAQ,UAAA,CAAW,GAAG,CAAA,IACtB,OAAA,CAAQ,UAAA,CAAW,GAAG,CAAA,IACtB,OAAA,CAAQ,UAAA,CAAW,MAAM,CAAA,EACzB;AACA,IAAA,OAAO,cAAc,UAAU,CAAA;AAAA,EACjC;AACA,EAAA,IAAI,QAAQ,UAAA,CAAW,GAAG,KAAK,OAAA,CAAQ,UAAA,CAAW,GAAG,CAAA,EAAG;AACtD,IAAA,OAAO,cAAc,UAAU,CAAA;AAAA,EACjC;AACA,EAAA,IAAI,QAAQ,UAAA,CAAW,GAAG,KAAK,OAAA,CAAQ,UAAA,CAAW,GAAG,CAAA,EAAG;AACtD,IAAA,OAAO,cAAc,MAAM,CAAA;AAAA,EAC7B;AACA,EAAA,IAAI,QAAQ,UAAA,CAAW,GAAG,KAAK,OAAA,CAAQ,UAAA,CAAW,cAAc,CAAA,EAAG;AACjE,IAAA,OAAO,cAAc,aAAa,CAAA;AAAA,EACpC;AAEA,EAAA,IACE,OAAA,CAAQ,UAAA,CAAW,GAAG,CAAA,IACtB,QAAQ,UAAA,CAAW,GAAG,CAAA,IACtB,OAAA,CAAQ,WAAW,GAAG,CAAA,IACtB,OAAA,CAAQ,UAAA,CAAW,KAAK,CAAA,EACxB;AACA,IAAA,OAAO,cAAc,SAAS,CAAA;AAAA,EAChC;AAEA,EAAA,OAAO,cAAc,SAAS,CAAA;AAChC;AAEA,SAAS,YAAA,CAAa,SAAiB,KAAA,EAAuB;AAC5D,EAAA,MAAM,EAAE,WAAA,EAAa,KAAA,EAAO,cAAA,EAAe,GAAI,KAAA;AAC/C,EAAA,MAAM,WAAW,QAAA,CAAS,eAAA;AAAA,IACxB,OAAA;AAAA,IACA,WAAA;AAAA,IACA;AAAA,GACF;AACA,EAAA,OAAO;AAAA,IACL,GAAG,KAAA;AAAA,IACH,MAAA,EAAQ,QAAA,GAAW,WAAA,CAAY,QAAA,GAAW,WAAA,CAAY;AAAA,GACxD;AACF;AAEA,SAAS,YAAA,CACP,OAAA,EACA,KAAA,EACA,WAAA,EACA;AACA,EAAA,MAAM,cAAA,GAAiB,kBAAkB,OAAO,CAAA;AAKhD,EAAA,MAAM,iBAAA,GAAoB,OAAA;AAAA,IACxB,WAAA,CAAY,iBACT,cAAA,KAAmB,eAAA,iBACjB,mBAAmB,QAAA,iBAAyB,CAAC,OAAA,CAAQ,UAAA,CAAW,GAAG,CAAA;AAAA,GAC1E;AAEA,EAAA,MAAM,QAAA,GAAW,MAAA;AAAA,IACf,KAAA,CAAM,WAAA;AAAA,IACN,OAAA;AAAA,IACA,KAAA,CAAM,KAAA;AAAA,IACN,iBAAA;AAAA,IACA;AAAA,GACF;AAEA,EAAA,OAAO;AAAA,IACL,GAAG,KAAA;AAAA,IACH,MAAA,EAAQ,QAAA,GAAW,WAAA,CAAY,QAAA,GAAW,WAAA,CAAY;AAAA,GACxD;AACF;AAEA,SAAS,kBAAkB,OAAA,EAAiB;AAC1C,EAAA,IAAI,OAAA,CAAQ,KAAA,CAAM,mBAAmB,CAAA,EAAG;AACtC,IAAA,OAAO,eAAA;AAAA,EACT,CAAA,MAAA,IAAW,OAAA,CAAQ,KAAA,CAAM,UAAU,CAAA,EAAG;AACpC,IAAA,OAAO,QAAA;AAAA,EACT,CAAA,MAAA,IAAW,OAAA,CAAQ,KAAA,CAAM,WAAW,CAAA,EAAG;AACrC,IAAA,OAAO,QAAA;AAAA,EACT,CAAA,MAAA,IAAW,OAAA,CAAQ,KAAA,CAAM,QAAQ,CAAA,EAAG;AAClC,IAAA,OAAO,UAAA;AAAA,EACT,CAAA,MAAA,IAAW,QAAQ,KAAA,CAAM,QAAQ,KAAK,OAAA,CAAQ,UAAA,CAAW,cAAc,CAAA,EAAG;AACxE,IAAA,OAAO,cAAA;AAAA,EACT,CAAA,MAAA,IAAW,OAAA,CAAQ,KAAA,CAAM,YAAY,CAAA,EAAG;AACtC,IAAA,OAAO,QAAA;AAAA,EACT,CAAA,MAAA,IAAW,OAAA,CAAQ,KAAA,CAAM,SAAS,CAAA,EAAG;AACnC,IAAA,OAAO,QAAA;AAAA,EACT,CAAA,MAAO;AACL,IAAA,MAAM,IAAI,KAAA;AAAA,MACR,mBAAA,CACG,MAAA,CAAO,OAAO,CAAA,CACd,OAAO,wCAAwC;AAAA,KACpD;AAAA,EACF;AACF;AAQA,SAAS,gBAAgB,KAAA,EAAiC;AACxD,EAAA,MAAM,QAAA,GAAW,MAAA,CAAO,MAAA,CAAO,KAAK,CAAA;AACpC,EAAA,IAAI,SAAS,MAAA,KAAW,EAAA,EAAI,MAAM,IAAI,MAAM,0BAA0B,CAAA;AACtE,EAAA,MAAM,QAAA,GAAW,QAAA,CAAS,CAAC,CAAA,GAAI,EAAA;AAC/B,EAAA,IAAI,QAAA,GAAW,EAAA,IAAM,QAAA,GAAW,CAAA,EAAG;AACjC,IAAA,MAAM,IAAI,MAAM,6BAA6B,CAAA;AAAA,EAC/C;AACA,EAAA,MAAM,UAAA,GAAa,CAAC,EAAE,QAAA,GAAW,EAAA,CAAA;AACjC,EAAA,MAAM,WAAW,QAAA,GAAW,CAAA;AAC5B,EAAA,MAAM,YAAY,SAAA,CAAU,SAAA,CAAU,YAAY,QAAA,CAAS,KAAA,CAAM,CAAC,CAAC,CAAA;AAEnE,EAAA,OAAO;AAAA,IACL,UAAA;AAAA,IACA,UAAA,EAAY,EAAE,QAAA,GAAW,CAAA,CAAA,GACrB,SACA,EAAE,QAAA,GAAW,KACb,cAAA,qBACA,QAAA;AAAA,IACJ,SAAA,EAAW,SAAA,CAAU,cAAA,CAAe,QAAQ;AAAA,GAC9C;AACF;AAEA,SAAS,MAAA,CACP,WAAA,EACA,OAAA,EACA,KAAA,EACA,mBACA,WAAA,EACA;AACA,EAAA,MAAM,EAAE,UAAA,EAAY,UAAA,EAAY,SAAA,EAAU,GAAI,gBAAgB,KAAK,CAAA;AACnE,EAAA,IAAI,iBAAA,IAAqB,CAAC,UAAA,EAAY;AACpC,IAAA,MAAM,IAAI,KAAA;AAAA,MACR;AAAA,KACF;AAAA,EACF;AACA,EAAA,MAAM,IAAA,GAAO,SAAA,CAAU,WAAA,EAAa,WAAA,CAAY,aAAa,CAAA;AAC7D,EAAA,MAAM,SAAA,GAAY,SAAA,CAAU,gBAAA,CAAiB,IAAI,CAAA;AACjD,EAAA,MAAM,cAAA,GAAiB,SAAA,CAAU,UAAA,CAAW,UAAU,CAAA;AACtD,EAAA,MAAM,aAAA,GAAgB,QAAQ,cAAc,CAAA;AAE5C,EAAA,IAAI,QAAQ,UAAA,CAAW,GAAG,KAAK,OAAA,CAAQ,UAAA,CAAW,cAAc,CAAA,EAAG;AACjE,IAAA,IAAI;AACF,MAAA,MAAM,OAAA,GAAU,eAAe,OAAO,CAAA;AACtC,MAAA,IAAI,OAAA,CAAQ,IAAA,KAAS,CAAA,EAAG,OAAO,KAAA;AAC/B,MAAA,IAAI,OAAA,CAAQ,IAAA,CAAK,MAAA,KAAW,aAAA,CAAc,QAAQ,OAAO,KAAA;AACzD,MAAA,KAAA,IAAS,IAAI,CAAA,EAAG,CAAA,GAAI,OAAA,CAAQ,IAAA,CAAK,QAAQ,CAAA,EAAA,EAAK;AAC5C,QAAA,IAAI,QAAQ,IAAA,CAAK,CAAC,MAAM,aAAA,CAAc,CAAC,GAAG,OAAO,KAAA;AAAA,MACnD;AACA,MAAA,OAAO,IAAA;AAAA,IACT,CAAA,CAAA,MAAQ;AACN,MAAA,OAAO,KAAA;AAAA,IACT;AAAA,EACF;AAEA,EAAA,IAAI,MAAA,GAAiB,EAAA;AAErB,EAAA,IAAI,UAAA,EAAY;AACd,IAAA,IAAI,eAAe,cAAA,oBAA0B;AAE3C,MAAA,MAAM,YAAA,GAAe,IAAI,UAAA,CAAW,EAAE,CAAA;AACtC,MAAA,YAAA,CAAa,CAAC,CAAA,GAAI,CAAA;AAClB,MAAA,YAAA,CAAa,CAAC,CAAA,GAAI,EAAA;AAClB,MAAA,YAAA,CAAa,GAAA,CAAI,eAAe,CAAC,CAAA;AACjC,MAAA,MAAM,gBAAA,GAAmB,QAAQ,YAAY,CAAA;AAC7C,MAAA,MAAA,GAAS,yBAAA;AAAA,QACP,WAAA,CAAY,iBAAA;AAAA,QACZ;AAAA,OACF;AAAA,IACF,CAAA,MAAO;AAEL,MAAA,IAAI,YAAY,YAAA,EAAc;AAC5B,QAAA,MAAA,GAAS,mBAAA,CAAoB,aAAA,EAAe,WAAA,CAAY,YAAY,CAAA;AAAA,MACtE,CAAA,MAAO;AAEL,QAAA,MAAA,GAAS,yBAAA;AAAA,UACP,WAAA,CAAY,iBAAA;AAAA,UACZ;AAAA,SACF;AAAA,MAEF;AAAA,IACF;AAAA,EACF,CAAA,MAAO;AAEL,IAAA,IAAI,OAAA,CAAQ,UAAA,CAAW,GAAG,CAAA,IAAK,CAAC,UAAA,EAAY;AAE1C,MAAA,MAAM,YAAA,GAAe,IAAI,UAAA,CAAW,EAAE,CAAA;AACtC,MAAA,YAAA,CAAa,CAAC,CAAA,GAAI,CAAA;AAClB,MAAA,YAAA,CAAa,CAAC,CAAA,GAAI,EAAA;AAClB,MAAA,YAAA,CAAa,GAAA,CAAI,eAAe,CAAC,CAAA;AACjC,MAAA,MAAM,gBAAA,GAAmB,QAAQ,YAAY,CAAA;AAC7C,MAAA,MAAM,UAAA,GAAa,yBAAA;AAAA,QACjB,WAAA,CAAY,iBAAA;AAAA,QACZ;AAAA,OACF;AAEA,MAAA,MAAM,UAAA,GAAa,yBAAA;AAAA,QACjB,WAAA,CAAY,iBAAA;AAAA,QACZ;AAAA,OACF;AACA,MAAA,IAAI,OAAA,KAAY,UAAA,IAAc,OAAA,KAAY,UAAA,EAAY;AACpD,QAAA,OAAO,IAAA;AAAA,MACT;AACA,MAAA,MAAA,GAAS,UAAA;AAAA,IACX,CAAA,MAAA,IAAW,OAAA,CAAQ,UAAA,CAAW,MAAM,CAAA,IAAK,OAAA,CAAQ,UAAA,CAAW,MAAM,CAAA,IAAK,OAAA,CAAQ,UAAA,CAAW,OAAO,CAAA,EAAG;AAGlG,MAAA,IAAI,YAAY,YAAA,EAAc;AAC5B,QAAA,MAAA,GAAS,mBAAA,CAAoB,aAAA,EAAe,WAAA,CAAY,YAAY,CAAA;AAAA,MACtE,CAAA,MAAO;AACL,QAAA,MAAA,GAAS,yBAAA;AAAA,UACP,WAAA,CAAY,iBAAA;AAAA,UACZ;AAAA,SACF;AAAA,MACF;AAAA,IACF,CAAA,MAAA,IAAW,iBAAA,IAAqB,WAAA,CAAY,YAAA,EAAc;AACxD,MAAA,IAAI;AACF,QAAA,MAAA,GAAS,mBAAA,CAAoB,aAAA,EAAe,WAAA,CAAY,YAAY,CAAA;AAAA,MAGtE,SAAS,CAAA,EAAG;AACV,QAAA,MAAA,GAAS,yBAAA;AAAA,UACP,WAAA,CAAY,iBAAA;AAAA,UACZ;AAAA,SACF;AAAA,MAEF;AAAA,IACF,CAAA,MAAO;AACL,MAAA,MAAA,GAAS,yBAAA;AAAA,QACP,WAAA,CAAY,iBAAA;AAAA,QACZ;AAAA,OACF;AAAA,IACF;AAAA,EACF;AAEA,EAAA,OAAO,MAAA,KAAW,OAAA;AACpB;AAEA,IAAM,WAAA,GAAc,iBAAA,CAAkB,IAAA,CAAK,MAAM,CAAA;AAEjD,SAAS,yBAAA,CACP,SACA,aAAA,EACA;AACA,EAAA,MAAM,cACJ,OAAO,OAAA,KAAY,WAAW,UAAA,CAAW,EAAA,CAAG,OAAO,CAAA,GAAI,OAAA;AAEzD,EAAA,MAAM,UAAU,IAAI,UAAA,CAAW,WAAA,CAAY,MAAA,GAAS,cAAc,MAAM,CAAA;AACxE,EAAA,OAAA,CAAQ,IAAI,WAAW,CAAA;AACvB,EAAA,OAAA,CAAQ,GAAA,CAAI,aAAA,EAAe,WAAA,CAAY,MAAM,CAAA;AAC7C,EAAA,OAAO,WAAA,CAAY,OAAO,OAAO,CAAA;AACnC;AAEA,SAAS,SAAA,CAAU,aAAqB,aAAA,EAAuB;AAC7D,EAAA,MAAM,MAAA,GAAS,IAAI,WAAA,EAAY,CAAE,OAAO,aAAa,CAAA;AACrD,EAAA,MAAM,OAAA,GAAU,IAAI,WAAA,EAAY,CAAE,OAAO,WAAW,CAAA;AACpD,EAAA,MAAM,MAAA,GAASA,MAAA,CAAa,OAAA,CAAQ,MAAM,CAAA,CAAE,MAAA;AAC5C,EAAA,MAAM,SAAS,IAAI,UAAA;AAAA,IACjB,MAAA,CAAO,MAAA,GAAS,MAAA,CAAO,UAAA,GAAa,OAAA,CAAQ;AAAA,GAC9C;AACA,EAAA,MAAA,CAAO,IAAI,MAAM,CAAA;AACjB,EAAA,MAAA,CAAO,IAAI,IAAI,UAAA,CAAW,MAAM,CAAA,EAAG,OAAO,MAAM,CAAA;AAChD,EAAA,MAAA,CAAO,GAAA,CAAI,OAAA,EAAS,MAAA,CAAO,MAAA,GAAS,OAAO,UAAU,CAAA;AACrD,EAAA,OAAO,QAAQ,MAAM,CAAA;AACvB;AAEA,SAAS,mBAAA,CACP,aAAA,EACA,MAAA,GAAiB,IAAA,EACT;AACR,EAAA,MAAM,MAAA,GAASC,MAAAA,CAAO,OAAA,CAAQ,aAAa,CAAA;AAC3C,EAAA,MAAA,CAAO,QAAQ,CAAC,CAAA;AAChB,EAAA,OAAOA,MAAAA,CAAO,MAAA,CAAO,MAAA,EAAQ,MAAM,CAAA;AACrC;AAEA,SAAS,QAAQ,MAAA,EAAgC;AAC/C,EAAA,OAAO,IAAA,CAAK,MAAA,CAAO,IAAA,CAAK,MAAA,CAAO,MAAM,CAAC,CAAA;AACxC;AAEA,SAAS,QAAQ,MAAA,EAAgC;AAC/C,EAAA,OAAO,IAAA,CAAK,SAAA,CAAU,IAAA,CAAK,MAAA,CAAO,MAAM,CAAC,CAAA;AAC3C","file":"bitcoin-BTZ4TXEK.js","sourcesContent":["import { bech32 } from \"@scure/base\";\n\n/**\n * CashAddr base32 character set.\n * Each character maps to its 5-bit index value (0–31).\n * Spec: https://github.com/bitcoincashorg/bitcoincash.org/blob/master/spec/cashaddr.md\n */\nconst CHARSET = \"qpzry9x8gf2tvdw0s3jn54khce6mua7l\";\n\n/**\n * Generator polynomials for the CashAddr BCH checksum.\n * These five constants define the GF(2^32) polynomial used to compute\n * and validate the 40-bit checksum appended to every CashAddr string.\n */\nconst GENERATOR = [\n  BigInt(\"0x98f2bc8e61\"),\n  BigInt(\"0x79b76d99e2\"),\n  BigInt(\"0xf33e5fb3c4\"),\n  BigInt(\"0xae2eabe2a8\"),\n  BigInt(\"0x1e4f43e470\"),\n];\n\n/**\n * Computes the CashAddr BCH checksum over an array of 5-bit values.\n *\n * The input should be the concatenation of:\n *   - the prefix expansion (see {@link prefixExpand})\n *   - all payload words including the 8 checksum words\n *\n * A valid address produces a result of `0n`; any other value indicates\n * a corrupt or invalid address.\n *\n * @param values - Array of 5-bit integers covering prefix + full payload\n * @returns The 40-bit checksum residue as a bigint (0n = valid)\n */\nfunction polymod(values: number[]): bigint {\n  let c = BigInt(1);\n  for (const d of values) {\n    // Extract the top 5 bits before shifting\n    const c0 = c >> BigInt(35);\n    // Shift the accumulator left by 5 bits and XOR in the next data word\n    c = ((c & BigInt(\"0x07ffffffff\")) << BigInt(5)) ^ BigInt(d);\n    // Apply each generator polynomial for set bits in c0\n    for (let i = 0; i < 5; i++) {\n      if ((c0 >> BigInt(i)) & BigInt(1)) {\n        c ^= GENERATOR[i];\n      }\n    }\n  }\n  // Final XOR with 1 so a valid address yields 0\n  return c ^ BigInt(1);\n}\n\n/**\n * Expands a CashAddr prefix into the form required by the checksum algorithm.\n *\n * Each character of the prefix is reduced to its lower 5 bits, then a zero\n * byte is appended as a separator between the prefix and the payload words.\n *\n * @param prefix - The human-readable prefix (e.g. `\"bitcoincash\"`)\n * @returns Array of 5-bit integers representing the expanded prefix\n */\nfunction prefixExpand(prefix: string): number[] {\n  const result: number[] = [];\n  for (let i = 0; i < prefix.length; i++) {\n    // Keep only the lower 5 bits of each character's ASCII code\n    result.push(prefix.charCodeAt(i) & 0x1f);\n  }\n  // Zero separator between prefix and payload\n  result.push(0);\n  return result;\n}\n\n/**\n * Decodes a CashAddr string into its prefix, address type, and raw hash.\n *\n * Supports both prefixed (`bitcoincash:q...`) and prefix-less (`q...`) forms.\n * Validates the BCH checksum and rejects non-P2PKH types or malformed input.\n *\n * Address type values (upper nibble of the version byte):\n *   - `0` — P2PKH (pay-to-public-key-hash)\n *   - `1` — P2SH  (pay-to-script-hash)\n *\n * @param address - The CashAddr string to decode\n * @param defaultPrefix - Prefix to assume when none is present in the address (default: `\"bitcoincash\"`)\n * @returns An object with:\n *   - `prefix` — the decoded human-readable prefix\n *   - `type`   — the address type (0 = P2PKH, 1 = P2SH, …)\n *   - `hash`   — the raw public-key or script hash bytes\n * @throws If the address contains invalid characters, fails the checksum, has a mismatched hash length,\n *   contains mixed upper/lower case, or if the payload contains invalid 5-to-8-bit padding\n *   (thrown by {@link bech32.fromWords} from `@scure/base`)\n */\nexport function decodeCashAddr(\n  address: string,\n  defaultPrefix = \"bitcoincash\"\n): { prefix: string; type: number; hash: Uint8Array } {\n  let prefix: string;\n\n  // Split on \":\" to separate an explicit prefix from the payload\n  const colonIndex = address.indexOf(\":\");\n  if (colonIndex !== -1) {\n    prefix = address.slice(0, colonIndex).toLowerCase();\n  } else {\n    prefix = defaultPrefix;\n  }\n\n  // CashAddr spec forbids mixed upper/lower case\n  const rawPayload = colonIndex !== -1 ? address.slice(colonIndex + 1) : address;\n  if (/[A-Z]/.test(rawPayload) && /[a-z]/.test(rawPayload)) {\n    throw new Error(\"Invalid CashAddr: mixed case\");\n  }\n  const payload = rawPayload.toLowerCase();\n\n  // Map each character to its 5-bit index in the CashAddr alphabet\n  const words: number[] = [];\n  for (const ch of payload) {\n    const idx = CHARSET.indexOf(ch);\n    if (idx === -1) throw new Error(\"Invalid CashAddr character: \" + ch);\n    words.push(idx);\n  }\n\n  // Minimum length: at least 1 data word + 8 checksum words\n  if (words.length < 8) throw new Error(\"CashAddr too short\");\n\n  // Verify the BCH checksum over prefix expansion + all payload words\n  const checksumData = [...prefixExpand(prefix), ...words];\n  if (polymod(checksumData) !== BigInt(0)) {\n    throw new Error(\"Invalid CashAddr checksum\");\n  }\n\n  // Strip the 8 trailing checksum words; the remainder encodes (version_byte || hash)\n  const dataWords = words.slice(0, -8);\n  // Convert from 5-bit words to 8-bit bytes using bech32.fromWords (equivalent to convertBits(data, 5, 8))\n  const payloadBytes = bech32.fromWords(dataWords);\n  if (payloadBytes.length === 0) {\n    throw new Error(\"Invalid CashAddr padding\");\n  }\n\n  // The first byte is the version byte: upper nibble = type, lower 3 bits = hash size index\n  const versionByte = payloadBytes[0];\n  const type = (versionByte >> 3) & 0x0f;\n  const hashSizeBits = versionByte & 0x07;\n\n  // Look up the expected hash length in bytes from the size index\n  const expectedSizes = [20, 24, 28, 32, 40, 48, 56, 64];\n  const expectedSize = expectedSizes[hashSizeBits];\n\n  const hashBytes = payloadBytes.slice(1);\n  if (hashBytes.length !== expectedSize) {\n    throw new Error(\n      `Hash length mismatch: expected ${expectedSize}, got ${hashBytes.length}`\n    );\n  }\n\n  return { prefix, type, hash: Uint8Array.from(hashBytes) };\n}\n","import {\n  ProofStatus,\n  ProofTypes,\n  SignatureProof,\n} from \"@notabene/javascript-sdk\";\n\nimport { encode as encodeLength } from \"varuint-bitcoin\";\nimport { base64, bech32, createBase58check } from \"@scure/base\";\nimport { Hash } from \"ox\";\nimport { secp256k1 } from \"@noble/curves/secp256k1\";\nimport { SignatureType } from \"@noble/curves/abstract/weierstrass\";\nimport { Verifier } from \"bip322-js\";\nimport { decodeCashAddr } from \"./cashaddr\";\n\nenum SEGWIT_TYPES {\n  P2WPKH = \"p2wpkh\",\n  P2SH_P2WPKH = \"p2sh(p2wpkh)\",\n}\n\ninterface ChainConfig {\n  messagePrefix: string;\n  pubKeyHashVersion: number | Uint8Array;\n  scriptHashVersion: number | Uint8Array;\n  bech32Prefix?: string;\n  isTestnet?: boolean;\n}\n\nconst CHAIN_CONFIGS: Record<string, ChainConfig> = {\n  bitcoin: {\n    messagePrefix: \"\\u0018Bitcoin Signed Message:\\n\",\n    pubKeyHashVersion: 0x00, // 1...\n    scriptHashVersion: 0x05, // 3...\n    bech32Prefix: \"bc\",\n    isTestnet: false,\n  },\n  bitcoincash: {\n    messagePrefix: \"\\u0018Bitcoin Signed Message:\\n\",\n    pubKeyHashVersion: 0x00, // 1...\n    scriptHashVersion: 0x05, // 3...\n    bech32Prefix: \"bc\",\n    isTestnet: false,\n  },\n  litecoin: {\n    messagePrefix: \"\\u0019Litecoin Signed Message:\\n\",\n    pubKeyHashVersion: 0x30, // L... or M...\n    scriptHashVersion: 0x32, // 3... or M...\n    bech32Prefix: \"ltc\",\n    isTestnet: false,\n  },\n  dogecoin: {\n    messagePrefix: \"\\u0019Dogecoin Signed Message:\\n\",\n    pubKeyHashVersion: 0x1e, // D...\n    scriptHashVersion: 0x16, // A...\n    isTestnet: false,\n  },\n  dash: {\n    messagePrefix: \"\\u0019DarkCoin Signed Message:\\n\",\n    pubKeyHashVersion: 0x4c, // X...\n    scriptHashVersion: 0x10, // 7...\n    isTestnet: false,\n  },\n  zcash: {\n    messagePrefix: \"\\u0018Zcash Signed Message:\\n\",\n    pubKeyHashVersion: Uint8Array.from([0x1c, 0xb8]), // <-- FIXED\n    scriptHashVersion: Uint8Array.from([0x1c, 0xbd]),\n    isTestnet: false,\n  },\n\n  testnet: {\n    messagePrefix: \"\\u0018Bitcoin Signed Message:\\n\",\n    pubKeyHashVersion: 0x6f, // m or n\n    scriptHashVersion: 0xc4, // 2\n    bech32Prefix: \"tb\",\n    isTestnet: true,\n  },\n};\n\nenum DerivationMode {\n  LEGACY = \"Legacy\",\n  NATIVE = \"Native SegWit\",\n  SEGWIT = \"SegWit\",\n  P2SH_SEGWIT = \"p2sh\",\n  BCH = \"Bitcoin Cash\",\n  ETHEREUM = \"Ethereum\",\n  DOGECOIN = \"Dogecoin\",\n  UNKNOWN = \"Unknown\",\n}\n\nexport async function verifyBTCSignature(\n  proof: SignatureProof\n): Promise<SignatureProof> {\n  // Split on \":\" but rejoin from index 2 onwards so that a prefixed CashAddr\n  // like \"bitcoincash:qr...\" in the third segment is preserved whole.\n  // e.g. \"bip122:<chainId>:bitcoincash:qr...\" → address = \"bitcoincash:qr...\"\n  const parts = proof.address.split(\":\");\n  const ns = parts[0];\n  const address = parts.slice(2).join(\":\");\n  if (ns !== \"bip122\") return { ...proof, status: ProofStatus.FAILED };\n\n  // Map chainId to our chain configuration\n  const chainConfig = getChainConfig(address);\n  if (!chainConfig) return { ...proof, status: ProofStatus.FAILED };\n\n  const isZcash = address.startsWith(\"t1\") || address.startsWith(\"t3\");\n  if (isZcash) {\n    return verifyBIP137(address, proof, chainConfig);\n  }\n\n  // Use BIP322 for testnet addresses\n  if (chainConfig.isTestnet) {\n    try {\n      return verifyBIP322(address, proof);\n    } catch {\n      return { ...proof, status: ProofStatus.FAILED };\n    }\n  }\n\n  // Check if this is a Taproot address (bc1p or tb1p)\n  const isTaproot = address.startsWith(\"bc1p\") || address.startsWith(\"tb1p\");\n\n  // For Taproot addresses with BIP-137 proof type, use BIP-322 verification\n  // since BIP-137 doesn't officially support Taproot\n  if (isTaproot && proof.type === ProofTypes.BIP137) {\n    return verifyBIP322(address, proof);\n  }\n\n  try {\n    switch (proof.type) {\n      case ProofTypes.BIP137:\n        return verifyBIP137(address, proof, chainConfig);\n      case ProofTypes.BIP322:\n        return verifyBIP322(address, proof);\n      default:\n        return {\n          ...proof,\n          status: ProofStatus.FAILED,\n        };\n    }\n  } catch {\n    return {\n      ...proof,\n      status: ProofStatus.FAILED,\n    };\n  }\n}\n\nfunction getChainConfig(address: string): ChainConfig {\n  if (\n    address.startsWith(\"1\") ||\n    address.startsWith(\"3\") ||\n    address.startsWith(\"bc1\")\n  ) {\n    return CHAIN_CONFIGS[\"bitcoin\"];\n  }\n  if (address.startsWith(\"t1\") || address.startsWith(\"t3\")) {\n    return CHAIN_CONFIGS[\"zcash\"];\n  }\n  if (\n    address.startsWith(\"L\") ||\n    address.startsWith(\"M\") ||\n    address.startsWith(\"ltc1\")\n  ) {\n    return CHAIN_CONFIGS[\"litecoin\"];\n  }\n  if (address.startsWith(\"D\") || address.startsWith(\"A\")) {\n    return CHAIN_CONFIGS[\"dogecoin\"];\n  }\n  if (address.startsWith(\"X\") || address.startsWith(\"7\")) {\n    return CHAIN_CONFIGS[\"dash\"];\n  }\n  if (address.startsWith(\"q\") || address.startsWith(\"bitcoincash:\")) {\n    return CHAIN_CONFIGS[\"bitcoincash\"];\n  }\n    // Bitcoin testnet addresses can start with \"m\", \"n\", \"2\", or \"tb1\"\n  if (\n    address.startsWith(\"m\") ||\n    address.startsWith(\"n\") ||\n    address.startsWith(\"2\") ||\n    address.startsWith(\"tb1\")\n  ) {\n    return CHAIN_CONFIGS[\"testnet\"]\n  }\n\n  return CHAIN_CONFIGS[\"bitcoin\"];\n}\n\nfunction verifyBIP322(address: string, proof: SignatureProof) {\n  const { attestation, proof: signatureProof } = proof;\n  const verified = Verifier.verifySignature(\n    address,\n    attestation,\n    signatureProof\n  );\n  return {\n    ...proof,\n    status: verified ? ProofStatus.VERIFIED : ProofStatus.FAILED,\n  };\n}\n\nfunction verifyBIP137(\n  address: string,\n  proof: SignatureProof,\n  chainConfig: ChainConfig\n) {\n  const derivationMode = getDerivationMode(address);\n\n  // For legacy addresses (starting with \"1\"), never use SegWit encoding\n  // For P2SH addresses (starting with \"3\"), use SegWit encoding if they have bech32 support\n  // For native SegWit addresses (bc1, tb1, ltc1), always use SegWit encoding\n  const useSegwitEncoding = Boolean(\n    chainConfig.bech32Prefix &&\n      (derivationMode === DerivationMode.NATIVE ||\n        (derivationMode === DerivationMode.SEGWIT && !address.startsWith(\"1\")))\n  );\n\n  const verified = verify(\n    proof.attestation,\n    address,\n    proof.proof,\n    useSegwitEncoding,\n    chainConfig\n  );\n\n  return {\n    ...proof,\n    status: verified ? ProofStatus.VERIFIED : ProofStatus.FAILED,\n  };\n}\n\nfunction getDerivationMode(address: string) {\n  if (address.match(\"^(bc1|tb1|ltc1).*\")) {\n    return DerivationMode.NATIVE;\n  } else if (address.match(\"^[32M].*\")) {\n    return DerivationMode.SEGWIT;\n  } else if (address.match(\"^[1nmL].*\")) {\n    return DerivationMode.LEGACY;\n  } else if (address.match(\"^(D).*\")) {\n    return DerivationMode.DOGECOIN;\n  } else if (address.match(\"^(q).*\") || address.startsWith(\"bitcoincash:\")) {\n    return DerivationMode.BCH;\n  } else if (address.match(\"^(t1|t3).*\")) {\n    return DerivationMode.LEGACY; // Zcash addresses\n  } else if (address.match(\"^[X7].*\")) {\n    return DerivationMode.LEGACY; // Dash addresses\n  } else {\n    throw new Error(\n      \"INVALID ADDRESS: \"\n        .concat(address)\n        .concat(\" is not a valid or a supported address\")\n    );\n  }\n}\n\ntype DecodedSignature = {\n  compressed: boolean;\n  segwitType?: SEGWIT_TYPES;\n  signature: SignatureType;\n};\n\nfunction decodeSignature(proof: string): DecodedSignature {\n  const sigbytes = base64.decode(proof);\n  if (sigbytes.length !== 65) throw new Error(\"Invalid signature length\");\n  const flagByte = sigbytes[0] - 27;\n  if (flagByte > 15 || flagByte < 0) {\n    throw new Error(\"Invalid signature parameter\");\n  }\n  const compressed = !!(flagByte & 12); // Are there cases that aren't compressed?\n  const recovery = flagByte & 3;\n  const signature = secp256k1.Signature.fromCompact(sigbytes.slice(1));\n\n  return {\n    compressed,\n    segwitType: !(flagByte & 8)\n      ? undefined\n      : !(flagByte & 4)\n      ? SEGWIT_TYPES.P2SH_P2WPKH\n      : SEGWIT_TYPES.P2WPKH,\n    signature: signature.addRecoveryBit(recovery),\n  };\n}\n\nfunction verify(\n  attestation: string,\n  address: string,\n  proof: string,\n  checkSegwitAlways: boolean,\n  chainConfig: ChainConfig\n) {\n  const { compressed, segwitType, signature } = decodeSignature(proof);\n  if (checkSegwitAlways && !compressed) {\n    throw new Error(\n      \"checkSegwitAlways can only be used with a compressed pubkey signature flagbyte\"\n    );\n  }\n  const hash = magicHash(attestation, chainConfig.messagePrefix);\n  const publicKey = signature.recoverPublicKey(hash);\n  const publicKeyBytes = publicKey.toRawBytes(compressed);\n  const publicKeyHash = hash160(publicKeyBytes);\n  // Special handling for Bitcoin Cash addresses\n  if (address.startsWith(\"q\") || address.startsWith(\"bitcoincash:\")) {\n    try {\n      const decoded = decodeCashAddr(address);\n      if (decoded.type !== 0) return false; // Must be P2PKH\n      if (decoded.hash.length !== publicKeyHash.length) return false;\n      for (let i = 0; i < decoded.hash.length; i++) {\n        if (decoded.hash[i] !== publicKeyHash[i]) return false;\n      }\n      return true;\n    } catch {\n      return false;\n    }\n  }\n\n  let actual: string = \"\";\n\n  if (segwitType) {\n    if (segwitType === SEGWIT_TYPES.P2SH_P2WPKH) {\n      // P2SH-P2WPKH: address is hash160 of the witness redeem script, not the raw pubkey hash\n      const redeemScript = new Uint8Array(22);\n      redeemScript[0] = 0x00; // OP_0\n      redeemScript[1] = 0x14; // push 20 bytes\n      redeemScript.set(publicKeyHash, 2);\n      const redeemScriptHash = hash160(redeemScript);\n      actual = encodeBase58AddressFormat(\n        chainConfig.scriptHashVersion,\n        redeemScriptHash\n      );\n    } else {\n      // parsed.segwitType === SEGWIT_TYPES.P2WPKH\n      if (chainConfig.bech32Prefix) {\n        actual = encodeBech32Address(publicKeyHash, chainConfig.bech32Prefix);\n      } else {\n        // Fallback to legacy if bech32 not supported\n        actual = encodeBase58AddressFormat(\n          chainConfig.scriptHashVersion,\n          publicKeyHash\n        );\n        // base58 can be p2pkh or p2sh-p2wpkh\n      }\n    }\n  } else {\n    // For addresses starting with \"3\" (P2SH), try both P2SH-P2WPKH and legacy P2SH encodings if segwitType is undefined\n    if (address.startsWith(\"3\") && !segwitType) {\n      // P2SH-P2WPKH: script hash of the redeem script (OP_0 <pubkeyhash>)\n      const redeemScript = new Uint8Array(22);\n      redeemScript[0] = 0x00; // OP_0\n      redeemScript[1] = 0x14; // push 20 bytes\n      redeemScript.set(publicKeyHash, 2);\n      const redeemScriptHash = hash160(redeemScript);\n      const p2shP2wpkh = encodeBase58AddressFormat(\n        chainConfig.scriptHashVersion,\n        redeemScriptHash\n      );\n      // Legacy P2SH: script hash of the public key\n      const legacyP2sh = encodeBase58AddressFormat(\n        chainConfig.scriptHashVersion,\n        publicKeyHash\n      );\n      if (address === p2shP2wpkh || address === legacyP2sh) {\n        return true;\n      }\n      actual = legacyP2sh; // fallback for error reporting\n    } else if (address.startsWith(\"bc1q\") || address.startsWith(\"tb1q\") || address.startsWith(\"ltc1q\")) {\n      // For native SegWit P2WPKH addresses (bc1q/tb1q/ltc1q), always encode as bech32\n      // This handles Ledger wallets that sign without segwit flags\n      if (chainConfig.bech32Prefix) {\n        actual = encodeBech32Address(publicKeyHash, chainConfig.bech32Prefix);\n      } else {\n        actual = encodeBase58AddressFormat(\n          chainConfig.pubKeyHashVersion,\n          publicKeyHash\n        );\n      }\n    } else if (checkSegwitAlways && chainConfig.bech32Prefix) {\n      try {\n        actual = encodeBech32Address(publicKeyHash, chainConfig.bech32Prefix);\n        // if address is bech32 it is not p2sh\n        // eslint-disable-next-line @typescript-eslint/no-unused-vars\n      } catch (e) {\n        actual = encodeBase58AddressFormat(\n          chainConfig.scriptHashVersion,\n          publicKeyHash\n        );\n        // base58 can be p2pkh or p2sh-p2wpkh\n      }\n    } else {\n      actual = encodeBase58AddressFormat(\n        chainConfig.pubKeyHashVersion,\n        publicKeyHash\n      );\n    }\n  }\n\n  return actual === address;\n}\n\nconst base58check = createBase58check(Hash.sha256);\n\nfunction encodeBase58AddressFormat(\n  version: number | Uint8Array,\n  publicKeyHash: Uint8Array\n) {\n  const prefixBytes =\n    typeof version === \"number\" ? Uint8Array.of(version) : version; // Accept raw Uint8Array for Zcash\n\n  const payload = new Uint8Array(prefixBytes.length + publicKeyHash.length);\n  payload.set(prefixBytes);\n  payload.set(publicKeyHash, prefixBytes.length);\n  return base58check.encode(payload);\n}\n\nfunction magicHash(attestation: string, messagePrefix: string) {\n  const prefix = new TextEncoder().encode(messagePrefix);\n  const message = new TextEncoder().encode(attestation);\n  const length = encodeLength(message.length).buffer;\n  const buffer = new Uint8Array(\n    prefix.length + length.byteLength + message.length\n  );\n  buffer.set(prefix);\n  buffer.set(new Uint8Array(length), prefix.length);\n  buffer.set(message, prefix.length + length.byteLength);\n  return hash256(buffer);\n}\n\nfunction encodeBech32Address(\n  publicKeyHash: Uint8Array,\n  prefix: string = \"bc\"\n): string {\n  const bwords = bech32.toWords(publicKeyHash);\n  bwords.unshift(0);\n  return bech32.encode(prefix, bwords);\n}\n\nfunction hash256(buffer: Uint8Array): Uint8Array {\n  return Hash.sha256(Hash.sha256(buffer));\n}\n\nfunction hash160(buffer: Uint8Array): Uint8Array {\n  return Hash.ripemd160(Hash.sha256(buffer));\n}\n"]}