@vultisig/core-chain 1.1.0 → 1.2.0

package/dist/chains/cosmos/thor/lp/validation.js

@@ -10,26 +10,91 @@ const extractPoolStatus = (raw) => {
     return undefined;
 };
 /**
- * Verify a THORChain pool is currently depositable.
+ * Build the mimir flag key THORChain uses to pause LP deposits for a
+ * single pool. Format: `PAUSELPDEPOSIT-{CHAIN}-{ASSET_PLUS_CONTRACT}`.
  *
- * Hits the thornode `/thorchain/pool/{asset}` endpoint and asserts the
- * `status` field is `Available`. Throws on `Staged`, `Suspended`, or any
- * other non-Available state, and on network failures or unexpected payloads.
+ * Examples:
+ *   BTC.BTC                     → PAUSELPDEPOSIT-BTC-BTC
+ *   DOGE.DOGE                   → PAUSELPDEPOSIT-DOGE-DOGE
+ *   ETH.USDC-0XA0B...           → PAUSELPDEPOSIT-ETH-USDC-0XA0B...
  *
- * Use this as the fail-fast gate before building an LP add payload — it is
- * cheaper than building the payload first and discovering at broadcast time
- * that the pool is paused.
+ * Note: `CHAIN.ASSET` splits on the FIRST `.`; the rest (including any
+ * `-CONTRACT` suffix) is the asset portion, which is appended with a
+ * single `-` separator.
+ */
+export const poolPauseMimirKey = (pool) => {
+    const dotIdx = pool.indexOf('.');
+    if (dotIdx <= 0 || dotIdx >= pool.length - 1) {
+        throw new Error(`poolPauseMimirKey: invalid pool id ${pool}`);
+    }
+    const chain = pool.slice(0, dotIdx);
+    const asset = pool.slice(dotIdx + 1);
+    return `PAUSELPDEPOSIT-${chain}-${asset}`;
+};
+/**
+ * Fetch the raw thornode mimir map. Returns an object with flag keys as
+ * numbers. Used to check per-pool LP deposit pauses (PAUSELPDEPOSIT-*),
+ * liquidity lockup (LIQUIDITYLOCKUPBLOCKS), etc.
+ */
+export const getThorchainMimir = async () => {
+    const url = `${cosmosRpcUrl[Chain.THORChain]}/thorchain/mimir`;
+    const raw = await queryUrl(url);
+    if (!raw || typeof raw !== 'object') {
+        throw new Error(`getThorchainMimir: unexpected response shape from ${url}`);
+    }
+    // thornode /thorchain/mimir returns numeric values, but the JSON could
+    // deserialize as number or numeric string depending on the upstream
+    // proxy. Normalize to number, drop entries we can't coerce — downstream
+    // callers do `typeof v === 'number' && v > 0` checks anyway, and a NaN
+    // would silently defeat those.
+    const out = {};
+    for (const [k, v] of Object.entries(raw)) {
+        if (typeof v === 'number' && Number.isFinite(v)) {
+            out[k] = v;
+        }
+        else if (typeof v === 'string' && /^-?\d+$/.test(v)) {
+            out[k] = Number(v);
+        }
+    }
+    return out;
+};
+/**
+ * Verify a THORChain pool is currently depositable. Checks TWO layers:
+ *
+ * 1. **Thornode pool status** — `/thorchain/pool/{asset}.status` must be
+ *    `Available`. Catches staged / suspended pools.
+ * 2. **Mimir per-pool pause flag** — `PAUSELPDEPOSIT-{chain}-{asset}`
+ *    must not be set. Catches the case where the pool is listed as
+ *    available BUT the THORChain handler rejects LP adds for it via
+ *    mimir (what happened to BTC.BTC on 2026-04-10: pool.status was
+ *    `Available`, deposits silently accepted into mempool, handler
+ *    rejected at execution with "deposits are paused for asset
+ *    (btc.btc): internal error"). Without the mimir check, the user
+ *    signs a tx that is guaranteed to fail on-chain.
+ *
+ * Use this as the fail-fast gate before building an LP add payload.
  */
 export const assertPoolDepositable = async (pool) => {
     assertValidPoolId(pool);
-    const url = `${cosmosRpcUrl[Chain.THORChain]}/thorchain/pool/${encodeURIComponent(pool)}`;
-    const raw = await queryUrl(url);
-    const status = extractPoolStatus(raw);
+    // Run both checks in parallel — they hit different endpoints so there
+    // is no reason to serialize them.
+    const [poolRaw, mimir] = await Promise.all([
+        queryUrl(`${cosmosRpcUrl[Chain.THORChain]}/thorchain/pool/${encodeURIComponent(pool)}`),
+        getThorchainMimir(),
+    ]);
+    // Check 1: thornode pool.status
+    const status = extractPoolStatus(poolRaw);
     if (status === undefined) {
-        throw new Error(`assertPoolDepositable: pool ${pool} response from ${url} did not include a string \`status\` field`);
+        throw new Error(`assertPoolDepositable: pool ${pool} response from thornode did not include a string \`status\` field`);
     }
     if (status !== 'Available') {
         throw new Error(`assertPoolDepositable: pool ${pool} status is ${status}, must be Available for LP add`);
     }
+    // Check 2: mimir per-pool PAUSELPDEPOSIT flag
+    const pauseKey = poolPauseMimirKey(pool);
+    const pauseValue = mimir[pauseKey];
+    if (typeof pauseValue === 'number' && pauseValue > 0) {
+        throw new Error(`assertPoolDepositable: pool ${pool} has LP deposits paused on-chain via mimir ${pauseKey}=${pauseValue}. THORChain validators have disabled new adds for this pool; any tx would be rejected at handler execution time.`);
+    }
 };
 //# sourceMappingURL=validation.js.map

package/dist/chains/cosmos/thor/lp/validation.js.map

@@ -1 +1 @@
-{"version":3,"file":"validation.js","sourceRoot":"","sources":["../../../../../../../../packages/core/chain/chains/cosmos/thor/lp/validation.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,EAAE,MAAM,4BAA4B,CAAA;AAClD,OAAO,EAAE,YAAY,EAAE,MAAM,iDAAiD,CAAA;AAC9E,OAAO,EAAE,QAAQ,EAAE,MAAM,oCAAoC,CAAA;AAE7D,OAAO,EAAE,iBAAiB,EAAE,MAAM,SAAS,CAAA;AAE3C,MAAM,iBAAiB,GAAG,CAAC,GAAY,EAAsB,EAAE;IAC7D,IAAI,GAAG,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,QAAQ,IAAI,GAAG,EAAE,CAAC;QACtD,MAAM,MAAM,GAAI,GAA2B,CAAC,MAAM,CAAA;QAClD,OAAO,OAAO,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,CAAA;IACxD,CAAC;IACD,OAAO,SAAS,CAAA;AAClB,CAAC,CAAA;AAED;;;;;;;;;;GAUG;AACH,MAAM,CAAC,MAAM,qBAAqB,GAAG,KAAK,EAAE,IAAY,EAAiB,EAAE;IACzE,iBAAiB,CAAC,IAAI,CAAC,CAAA;IACvB,MAAM,GAAG,GAAG,GAAG,YAAY,CAAC,KAAK,CAAC,SAAS,CAAC,mBAAmB,kBAAkB,CAAC,IAAI,CAAC,EAAE,CAAA;IACzF,MAAM,GAAG,GAAG,MAAM,QAAQ,CAAU,GAAG,CAAC,CAAA;IACxC,MAAM,MAAM,GAAG,iBAAiB,CAAC,GAAG,CAAC,CAAA;IACrC,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;QACzB,MAAM,IAAI,KAAK,CACb,+BAA+B,IAAI,kBAAkB,GAAG,4CAA4C,CACrG,CAAA;IACH,CAAC;IACD,IAAI,MAAM,KAAK,WAAW,EAAE,CAAC;QAC3B,MAAM,IAAI,KAAK,CACb,+BAA+B,IAAI,cAAc,MAAM,gCAAgC,CACxF,CAAA;IACH,CAAC;AACH,CAAC,CAAA"}
+{"version":3,"file":"validation.js","sourceRoot":"","sources":["../../../../../../../../packages/core/chain/chains/cosmos/thor/lp/validation.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,EAAE,MAAM,4BAA4B,CAAA;AAClD,OAAO,EAAE,YAAY,EAAE,MAAM,iDAAiD,CAAA;AAC9E,OAAO,EAAE,QAAQ,EAAE,MAAM,oCAAoC,CAAA;AAE7D,OAAO,EAAE,iBAAiB,EAAE,MAAM,SAAS,CAAA;AAE3C,MAAM,iBAAiB,GAAG,CAAC,GAAY,EAAsB,EAAE;IAC7D,IAAI,GAAG,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,QAAQ,IAAI,GAAG,EAAE,CAAC;QACtD,MAAM,MAAM,GAAI,GAA2B,CAAC,MAAM,CAAA;QAClD,OAAO,OAAO,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,CAAA;IACxD,CAAC;IACD,OAAO,SAAS,CAAA;AAClB,CAAC,CAAA;AAED;;;;;;;;;;;;GAYG;AACH,MAAM,CAAC,MAAM,iBAAiB,GAAG,CAAC,IAAY,EAAU,EAAE;IACxD,MAAM,MAAM,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAA;IAChC,IAAI,MAAM,IAAI,CAAC,IAAI,MAAM,IAAI,IAAI,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC7C,MAAM,IAAI,KAAK,CAAC,sCAAsC,IAAI,EAAE,CAAC,CAAA;IAC/D,CAAC;IACD,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,MAAM,CAAC,CAAA;IACnC,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,CAAA;IACpC,OAAO,kBAAkB,KAAK,IAAI,KAAK,EAAE,CAAA;AAC3C,CAAC,CAAA;AAED;;;;GAIG;AACH,MAAM,CAAC,MAAM,iBAAiB,GAAG,KAAK,IAAqC,EAAE;IAC3E,MAAM,GAAG,GAAG,GAAG,YAAY,CAAC,KAAK,CAAC,SAAS,CAAC,kBAAkB,CAAA;IAC9D,MAAM,GAAG,GAAG,MAAM,QAAQ,CAAU,GAAG,CAAC,CAAA;IACxC,IAAI,CAAC,GAAG,IAAI,OAAO,GAAG,KAAK,QAAQ,EAAE,CAAC;QACpC,MAAM,IAAI,KAAK,CACb,qDAAqD,GAAG,EAAE,CAC3D,CAAA;IACH,CAAC;IACD,uEAAuE;IACvE,oEAAoE;IACpE,wEAAwE;IACxE,uEAAuE;IACvE,+BAA+B;IAC/B,MAAM,GAAG,GAA2B,EAAE,CAAA;IACtC,KAAK,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,GAA8B,CAAC,EAAE,CAAC;QACpE,IAAI,OAAO,CAAC,KAAK,QAAQ,IAAI,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,CAAC;YAChD,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,CAAA;QACZ,CAAC;aAAM,IAAI,OAAO,CAAC,KAAK,QAAQ,IAAI,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC;YACtD,GAAG,CAAC,CAAC,CAAC,GAAG,MAAM,CAAC,CAAC,CAAC,CAAA;QACpB,CAAC;IACH,CAAC;IACD,OAAO,GAAG,CAAA;AACZ,CAAC,CAAA;AAED;;;;;;;;;;;;;;;GAeG;AACH,MAAM,CAAC,MAAM,qBAAqB,GAAG,KAAK,EAAE,IAAY,EAAiB,EAAE;IACzE,iBAAiB,CAAC,IAAI,CAAC,CAAA;IAEvB,sEAAsE;IACtE,kCAAkC;IAClC,MAAM,CAAC,OAAO,EAAE,KAAK,CAAC,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC;QACzC,QAAQ,CACN,GAAG,YAAY,CAAC,KAAK,CAAC,SAAS,CAAC,mBAAmB,kBAAkB,CAAC,IAAI,CAAC,EAAE,CAC9E;QACD,iBAAiB,EAAE;KACpB,CAAC,CAAA;IAEF,gCAAgC;IAChC,MAAM,MAAM,GAAG,iBAAiB,CAAC,OAAO,CAAC,CAAA;IACzC,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;QACzB,MAAM,IAAI,KAAK,CACb,+BAA+B,IAAI,mEAAmE,CACvG,CAAA;IACH,CAAC;IACD,IAAI,MAAM,KAAK,WAAW,EAAE,CAAC;QAC3B,MAAM,IAAI,KAAK,CACb,+BAA+B,IAAI,cAAc,MAAM,gCAAgC,CACxF,CAAA;IACH,CAAC;IAED,8CAA8C;IAC9C,MAAM,QAAQ,GAAG,iBAAiB,CAAC,IAAI,CAAC,CAAA;IACxC,MAAM,UAAU,GAAG,KAAK,CAAC,QAAQ,CAAC,CAAA;IAClC,IAAI,OAAO,UAAU,KAAK,QAAQ,IAAI,UAAU,GAAG,CAAC,EAAE,CAAC;QACrD,MAAM,IAAI,KAAK,CACb,+BAA+B,IAAI,8CAA8C,QAAQ,IAAI,UAAU,kHAAkH,CAC1N,CAAA;IACH,CAAC;AACH,CAAC,CAAA"}

package/dist/chains/utxo/tx/buildSignBitcoinFromPsbt.d.ts

@@ -0,0 +1,21 @@
+import { SignBitcoin } from '@vultisig/core-mpc/types/vultisig/keysign/v1/wasm_execute_contract_payload_pb';
+import { Network, Psbt } from 'bitcoinjs-lib';
+type BuildSignBitcoinFromPsbtInput = {
+    psbt: Psbt;
+    senderAddress: string;
+    /** Bitcoin network for address decoding. Defaults to mainnet. */
+    network?: Network;
+};
+/**
+ * Decompose a BIP-174 PSBT into a structured SignBitcoin proto message.
+ * Co-signing devices can verify every input/output and compute exact sighashes
+ * from these fields without receiving an opaque blob.
+ *
+ * Currently supports P2WPKH and P2SH-P2WPKH inputs only.
+ * P2TR (Taproot/BIP-341) requires a different sighash algorithm and is planned for follow-up.
+ * P2PKH (legacy) requires legacy sighash (not BIP-143).
+ * See https://github.com/bitcoin/bips/blob/master/bip-0174.mediawiki
+ */
+export declare const buildSignBitcoinFromPsbt: ({ psbt, senderAddress, network, }: BuildSignBitcoinFromPsbtInput) => SignBitcoin;
+export {};
+//# sourceMappingURL=buildSignBitcoinFromPsbt.d.ts.map

package/dist/chains/utxo/tx/buildSignBitcoinFromPsbt.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"buildSignBitcoinFromPsbt.d.ts","sourceRoot":"","sources":["../../../../../../../packages/core/chain/chains/utxo/tx/buildSignBitcoinFromPsbt.ts"],"names":[],"mappings":"AACA,OAAO,EAGL,WAAW,EAEZ,MAAM,+EAA+E,CAAA;AACtF,OAAO,EAEL,OAAO,EAGP,IAAI,EAGL,MAAM,eAAe,CAAA;AAsEtB,KAAK,6BAA6B,GAAG;IACnC,IAAI,EAAE,IAAI,CAAA;IACV,aAAa,EAAE,MAAM,CAAA;IACrB,iEAAiE;IACjE,OAAO,CAAC,EAAE,OAAO,CAAA;CAClB,CAAA;AAED;;;;;;;;;GASG;AACH,eAAO,MAAM,wBAAwB,GAAI,mCAItC,6BAA6B,KAAG,WA4IlC,CAAA"}

package/dist/chains/utxo/tx/buildSignBitcoinFromPsbt.js

@@ -0,0 +1,182 @@
+import { create } from '@bufbuild/protobuf';
+import { BitcoinInputSchema, BitcoinOutputSchema, SignBitcoinSchema, } from '@vultisig/core-mpc/types/vultisig/keysign/v1/wasm_execute_contract_payload_pb';
+import { address as btcAddress, networks, opcodes, script as bscript, Transaction, } from 'bitcoinjs-lib';
+/**
+ * Detect the script type from a scriptPubKey buffer.
+ * See https://github.com/bitcoin/bips/blob/master/bip-0141.mediawiki
+ */
+const detectScriptType = (scriptPubKey, redeemScript) => {
+    // P2WPKH: OP_0 PUSH_20 <20-byte-hash> (22 bytes)
+    if (scriptPubKey.length === 22 && scriptPubKey[0] === 0x00 && scriptPubKey[1] === 0x14) {
+        return 'p2wpkh';
+    }
+    // P2PKH: OP_DUP OP_HASH160 PUSH_20 <20-byte-hash> OP_EQUALVERIFY OP_CHECKSIG (25 bytes)
+    if (scriptPubKey.length === 25 &&
+        scriptPubKey[0] === 0x76 &&
+        scriptPubKey[1] === 0xa9 &&
+        scriptPubKey[2] === 0x14 &&
+        scriptPubKey[23] === 0x88 &&
+        scriptPubKey[24] === 0xac) {
+        return 'p2pkh';
+    }
+    // P2TR: OP_1 PUSH_32 <32-byte-key> (34 bytes)
+    if (scriptPubKey.length === 34 && scriptPubKey[0] === 0x51 && scriptPubKey[1] === 0x20) {
+        return 'p2tr';
+    }
+    // P2WSH: OP_0 PUSH_32 <32-byte-hash> (34 bytes)
+    if (scriptPubKey.length === 34 && scriptPubKey[0] === 0x00 && scriptPubKey[1] === 0x20) {
+        return 'p2wsh';
+    }
+    // P2SH-P2WPKH: only when redeemScript is a valid P2WPKH witness program
+    const redeem = redeemScript ? Buffer.from(redeemScript) : undefined;
+    if (scriptPubKey.length === 23 &&
+        scriptPubKey[0] === 0xa9 &&
+        scriptPubKey[1] === 0x14 &&
+        scriptPubKey[22] === 0x87 &&
+        redeem?.length === 22 &&
+        redeem[0] === 0x00 &&
+        redeem[1] === 0x14) {
+        return 'p2sh-p2wpkh';
+    }
+    return 'unknown';
+};
+/** Script types that computePreSigningHashes can produce sighashes for. */
+const SUPPORTED_SCRIPT_TYPES = new Set(['p2wpkh', 'p2sh-p2wpkh']);
+const isOpReturn = (script) => {
+    const chunks = bscript.decompile(script);
+    return chunks !== null && chunks[0] === opcodes.OP_RETURN;
+};
+const getOpReturnHex = (script) => {
+    const chunks = bscript.decompile(script);
+    if (!chunks || chunks[0] !== opcodes.OP_RETURN)
+        return undefined;
+    const dataChunks = chunks
+        .slice(1)
+        .filter((chunk) => Buffer.isBuffer(chunk));
+    if (dataChunks.length === 0)
+        return undefined;
+    return Buffer.concat(dataChunks).toString('hex');
+};
+/**
+ * Decompose a BIP-174 PSBT into a structured SignBitcoin proto message.
+ * Co-signing devices can verify every input/output and compute exact sighashes
+ * from these fields without receiving an opaque blob.
+ *
+ * Currently supports P2WPKH and P2SH-P2WPKH inputs only.
+ * P2TR (Taproot/BIP-341) requires a different sighash algorithm and is planned for follow-up.
+ * P2PKH (legacy) requires legacy sighash (not BIP-143).
+ * See https://github.com/bitcoin/bips/blob/master/bip-0174.mediawiki
+ */
+export const buildSignBitcoinFromPsbt = ({ psbt, senderAddress, network = networks.bitcoin, }) => {
+    // Compute anyInputHasBip32 once (not per-input) for O(n) ownership detection
+    const anyInputHasBip32 = psbt.data.inputs.some(inp => (inp.bip32Derivation && inp.bip32Derivation.length > 0) ||
+        (inp.tapBip32Derivation &&
+            inp.tapBip32Derivation.length > 0));
+    const inputs = psbt.txInputs.map((txInput, i) => {
+        const inputData = psbt.data.inputs[i];
+        // Prefer witnessUtxo; fall back to nonWitnessUtxo (full prev tx)
+        let scriptPubKey;
+        let inputValue;
+        if (inputData.witnessUtxo) {
+            scriptPubKey = Buffer.from(inputData.witnessUtxo.script);
+            inputValue = BigInt(inputData.witnessUtxo.value);
+            // Fee snipe mitigation: cross-validate against nonWitnessUtxo if present.
+            // A malicious PSBT can lie about witnessUtxo.value; BIP-143 commits to it
+            // in the sighash, causing excess fees if the actual UTXO is worth more.
+            // See https://blog.trezor.io/details-of-the-multisig-change-address-issue-and-its-mitigation-6370ad73ed2a
+            if (inputData.nonWitnessUtxo) {
+                const prevTx = Transaction.fromBuffer(Buffer.from(inputData.nonWitnessUtxo));
+                // BIP-174: verify nonWitnessUtxo txid matches the input's prevout hash
+                const prevTxId = prevTx.getId();
+                const expectedTxId = Buffer.from(txInput.hash).reverse().toString('hex');
+                if (prevTxId !== expectedTxId) {
+                    throw new Error(`Input #${i}: nonWitnessUtxo txid (${prevTxId.slice(0, 16)}...) does not match ` +
+                        `input prevout (${expectedTxId.slice(0, 16)}...)`);
+                }
+                const prevOutput = prevTx.outs[txInput.index];
+                if (prevOutput && BigInt(prevOutput.value) !== inputValue) {
+                    throw new Error(`Input #${i}: witnessUtxo value (${inputValue}) does not match ` +
+                        `nonWitnessUtxo value (${prevOutput.value}) - possible fee snipe`);
+                }
+            }
+        }
+        else if (inputData.nonWitnessUtxo) {
+            const prevTx = Transaction.fromBuffer(Buffer.from(inputData.nonWitnessUtxo));
+            const prevOutput = prevTx.outs[txInput.index];
+            if (!prevOutput) {
+                throw new Error(`Input #${i}: nonWitnessUtxo has no output at index ${txInput.index}`);
+            }
+            scriptPubKey = Buffer.from(prevOutput.script);
+            inputValue = BigInt(prevOutput.value);
+        }
+        else {
+            throw new Error(`Input #${i} missing both witnessUtxo and nonWitnessUtxo`);
+        }
+        if (inputValue < 0n) {
+            throw new Error(`Input #${i}: negative amount (${inputValue})`);
+        }
+        const scriptType = detectScriptType(scriptPubKey, inputData.redeemScript);
+        // Fail early for unsupported script types rather than at sighash time.
+        // This gives a clearer error at decomposition time.
+        const hasBip32 = (inputData.bip32Derivation && inputData.bip32Derivation.length > 0) ||
+            (inputData.tapBip32Derivation &&
+                inputData.tapBip32Derivation.length > 0);
+        const isOurs = anyInputHasBip32 ? !!hasBip32 : true;
+        if (isOurs && !SUPPORTED_SCRIPT_TYPES.has(scriptType)) {
+            const hints = {
+                p2tr: 'P2TR (Taproot) requires BIP-341 sighash. See https://github.com/bitcoin/bips/blob/master/bip-0341.mediawiki',
+                p2pkh: 'P2PKH (legacy) requires legacy sighash, not BIP-143.',
+                p2wsh: 'P2WSH requires BIP-143 with the full witnessScript as scriptCode.',
+                unknown: `Unrecognized scriptPubKey: ${scriptPubKey.toString('hex')}`,
+            };
+            throw new Error(`Input #${i}: unsupported script type '${scriptType}' for signing. ${hints[scriptType] ?? ''}`);
+        }
+        const sighashType = inputData.sighashType ?? 1; // SIGHASH_ALL
+        const redeemScript = inputData.redeemScript
+            ? Buffer.from(inputData.redeemScript).toString('hex')
+            : undefined;
+        return create(BitcoinInputSchema, {
+            hash: Buffer.from(txInput.hash).reverse().toString('hex'),
+            index: txInput.index,
+            amount: inputValue,
+            scriptPubKey: scriptPubKey.toString('hex'),
+            scriptType,
+            sighashType,
+            isOurs,
+            redeemScript,
+            sequence: txInput.sequence,
+        });
+    });
+    const outputs = psbt.txOutputs.map((txOutput, outputIndex) => {
+        const script = Buffer.from(txOutput.script);
+        const opReturn = isOpReturn(script);
+        let outputAddress = '';
+        if (!opReturn) {
+            try {
+                outputAddress = btcAddress.fromOutputScript(txOutput.script, network);
+            }
+            catch {
+                // Non-standard output - address stays empty
+            }
+        }
+        // Change detection: Vultisig uses a single address per UTXO chain (no HD change
+        // derivation), so address comparison is the primary signal. BIP32 derivation on
+        // outputs is NOT used alone because a malicious dApp could inject derivation paths
+        // on attacker outputs to disguise them as change. Address match is unforgeable
+        // since only the vault owner knows the private key for that address.
+        return create(BitcoinOutputSchema, {
+            amount: BigInt(txOutput.value),
+            address: outputAddress,
+            opReturnData: opReturn ? getOpReturnHex(script) : undefined,
+            scriptPubKey: script.toString('hex'),
+            isChange: outputAddress !== '' && outputAddress === senderAddress,
+        });
+    });
+    return create(SignBitcoinSchema, {
+        version: psbt.version,
+        locktime: psbt.locktime,
+        inputs,
+        outputs,
+    });
+};
+//# sourceMappingURL=buildSignBitcoinFromPsbt.js.map

package/dist/chains/utxo/tx/buildSignBitcoinFromPsbt.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"buildSignBitcoinFromPsbt.js","sourceRoot":"","sources":["../../../../../../../packages/core/chain/chains/utxo/tx/buildSignBitcoinFromPsbt.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,EAAE,MAAM,oBAAoB,CAAA;AAC3C,OAAO,EACL,kBAAkB,EAClB,mBAAmB,EAEnB,iBAAiB,GAClB,MAAM,+EAA+E,CAAA;AACtF,OAAO,EACL,OAAO,IAAI,UAAU,EAErB,QAAQ,EACR,OAAO,EAEP,MAAM,IAAI,OAAO,EACjB,WAAW,GACZ,MAAM,eAAe,CAAA;AAKtB;;;GAGG;AACH,MAAM,gBAAgB,GAAG,CACvB,YAAoB,EACpB,YAAyB,EACb,EAAE;IACd,iDAAiD;IACjD,IAAI,YAAY,CAAC,MAAM,KAAK,EAAE,IAAI,YAAY,CAAC,CAAC,CAAC,KAAK,IAAI,IAAI,YAAY,CAAC,CAAC,CAAC,KAAK,IAAI,EAAE,CAAC;QACvF,OAAO,QAAQ,CAAA;IACjB,CAAC;IACD,wFAAwF;IACxF,IACE,YAAY,CAAC,MAAM,KAAK,EAAE;QAC1B,YAAY,CAAC,CAAC,CAAC,KAAK,IAAI;QACxB,YAAY,CAAC,CAAC,CAAC,KAAK,IAAI;QACxB,YAAY,CAAC,CAAC,CAAC,KAAK,IAAI;QACxB,YAAY,CAAC,EAAE,CAAC,KAAK,IAAI;QACzB,YAAY,CAAC,EAAE,CAAC,KAAK,IAAI,EACzB,CAAC;QACD,OAAO,OAAO,CAAA;IAChB,CAAC;IACD,8CAA8C;IAC9C,IAAI,YAAY,CAAC,MAAM,KAAK,EAAE,IAAI,YAAY,CAAC,CAAC,CAAC,KAAK,IAAI,IAAI,YAAY,CAAC,CAAC,CAAC,KAAK,IAAI,EAAE,CAAC;QACvF,OAAO,MAAM,CAAA;IACf,CAAC;IACD,gDAAgD;IAChD,IAAI,YAAY,CAAC,MAAM,KAAK,EAAE,IAAI,YAAY,CAAC,CAAC,CAAC,KAAK,IAAI,IAAI,YAAY,CAAC,CAAC,CAAC,KAAK,IAAI,EAAE,CAAC;QACvF,OAAO,OAAO,CAAA;IAChB,CAAC;IACD,wEAAwE;IACxE,MAAM,MAAM,GAAG,YAAY,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,SAAS,CAAA;IACnE,IACE,YAAY,CAAC,MAAM,KAAK,EAAE;QAC1B,YAAY,CAAC,CAAC,CAAC,KAAK,IAAI;QACxB,YAAY,CAAC,CAAC,CAAC,KAAK,IAAI;QACxB,YAAY,CAAC,EAAE,CAAC,KAAK,IAAI;QACzB,MAAM,EAAE,MAAM,KAAK,EAAE;QACrB,MAAM,CAAC,CAAC,CAAC,KAAK,IAAI;QAClB,MAAM,CAAC,CAAC,CAAC,KAAK,IAAI,EAClB,CAAC;QACD,OAAO,aAAa,CAAA;IACtB,CAAC;IACD,OAAO,SAAS,CAAA;AAClB,CAAC,CAAA;AAED,2EAA2E;AAC3E,MAAM,sBAAsB,GAA4B,IAAI,GAAG,CAAC,CAAC,QAAQ,EAAE,aAAa,CAAC,CAAC,CAAA;AAE1F,MAAM,UAAU,GAAG,CAAC,MAAc,EAAW,EAAE;IAC7C,MAAM,MAAM,GAAG,OAAO,CAAC,SAAS,CAAC,MAAM,CAAC,CAAA;IACxC,OAAO,MAAM,KAAK,IAAI,IAAI,MAAM,CAAC,CAAC,CAAC,KAAK,OAAO,CAAC,SAAS,CAAA;AAC3D,CAAC,CAAA;AAED,MAAM,cAAc,GAAG,CAAC,MAAc,EAAsB,EAAE;IAC5D,MAAM,MAAM,GAAG,OAAO,CAAC,SAAS,CAAC,MAAM,CAAC,CAAA;IACxC,IAAI,CAAC,MAAM,IAAI,MAAM,CAAC,CAAC,CAAC,KAAK,OAAO,CAAC,SAAS;QAAE,OAAO,SAAS,CAAA;IAChE,MAAM,UAAU,GAAG,MAAM;SACtB,KAAK,CAAC,CAAC,CAAC;SACR,MAAM,CAAC,CAAC,KAAK,EAAmB,EAAE,CAAC,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAA;IAC7D,IAAI,UAAU,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,SAAS,CAAA;IAC7C,OAAO,MAAM,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAA;AAClD,CAAC,CAAA;AASD;;;;;;;;;GASG;AACH,MAAM,CAAC,MAAM,wBAAwB,GAAG,CAAC,EACvC,IAAI,EACJ,aAAa,EACb,OAAO,GAAG,QAAQ,CAAC,OAAO,GACI,EAAe,EAAE;IAC/C,6EAA6E;IAC7E,MAAM,gBAAgB,GAAG,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAC5C,GAAG,CAAC,EAAE,CACJ,CAAC,GAAG,CAAC,eAAe,IAAI,GAAG,CAAC,eAAe,CAAC,MAAM,GAAG,CAAC,CAAC;QACvD,CAAC,GAAG,CAAC,kBAAkB;YACrB,GAAG,CAAC,kBAAkB,CAAC,MAAM,GAAG,CAAC,CAAC,CACvC,CAAA;IAED,MAAM,MAAM,GAAG,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,OAAO,EAAE,CAAC,EAAE,EAAE;QAC9C,MAAM,SAAS,GAAG,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,CAAA;QAErC,iEAAiE;QACjE,IAAI,YAAoB,CAAA;QACxB,IAAI,UAAkB,CAAA;QACtB,IAAI,SAAS,CAAC,WAAW,EAAE,CAAC;YAC1B,YAAY,GAAG,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,WAAW,CAAC,MAAM,CAAC,CAAA;YACxD,UAAU,GAAG,MAAM,CAAC,SAAS,CAAC,WAAW,CAAC,KAAK,CAAC,CAAA;YAEhD,0EAA0E;YAC1E,0EAA0E;YAC1E,wEAAwE;YACxE,0GAA0G;YAC1G,IAAI,SAAS,CAAC,cAAc,EAAE,CAAC;gBAC7B,MAAM,MAAM,GAAG,WAAW,CAAC,UAAU,CACnC,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,cAAc,CAAC,CACtC,CAAA;gBACD,uEAAuE;gBACvE,MAAM,QAAQ,GAAG,MAAM,CAAC,KAAK,EAAE,CAAA;gBAC/B,MAAM,YAAY,GAAG,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAA;gBACxE,IAAI,QAAQ,KAAK,YAAY,EAAE,CAAC;oBAC9B,MAAM,IAAI,KAAK,CACb,UAAU,CAAC,0BAA0B,QAAQ,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,sBAAsB;wBAC9E,kBAAkB,YAAY,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,MAAM,CACpD,CAAA;gBACH,CAAC;gBACD,MAAM,UAAU,GAAG,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,CAAA;gBAC7C,IAAI,UAAU,IAAI,MAAM,CAAC,UAAU,CAAC,KAAK,CAAC,KAAK,UAAU,EAAE,CAAC;oBAC1D,MAAM,IAAI,KAAK,CACb,UAAU,CAAC,wBAAwB,UAAU,mBAAmB;wBAC9D,yBAAyB,UAAU,CAAC,KAAK,wBAAwB,CACpE,CAAA;gBACH,CAAC;YACH,CAAC;QACH,CAAC;aAAM,IAAI,SAAS,CAAC,cAAc,EAAE,CAAC;YACpC,MAAM,MAAM,GAAG,WAAW,CAAC,UAAU,CACnC,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,cAAc,CAAC,CACtC,CAAA;YACD,MAAM,UAAU,GAAG,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,CAAA;YAC7C,IAAI,CAAC,UAAU,EAAE,CAAC;gBAChB,MAAM,IAAI,KAAK,CACb,UAAU,CAAC,2CAA2C,OAAO,CAAC,KAAK,EAAE,CACtE,CAAA;YACH,CAAC;YACD,YAAY,GAAG,MAAM,CAAC,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,CAAA;YAC7C,UAAU,GAAG,MAAM,CAAC,UAAU,CAAC,KAAK,CAAC,CAAA;QACvC,CAAC;aAAM,CAAC;YACN,MAAM,IAAI,KAAK,CACb,UAAU,CAAC,8CAA8C,CAC1D,CAAA;QACH,CAAC;QAED,IAAI,UAAU,GAAG,EAAE,EAAE,CAAC;YACpB,MAAM,IAAI,KAAK,CAAC,UAAU,CAAC,sBAAsB,UAAU,GAAG,CAAC,CAAA;QACjE,CAAC;QAED,MAAM,UAAU,GAAG,gBAAgB,CAAC,YAAY,EAAE,SAAS,CAAC,YAAY,CAAC,CAAA;QAEzE,uEAAuE;QACvE,oDAAoD;QACpD,MAAM,QAAQ,GACZ,CAAC,SAAS,CAAC,eAAe,IAAI,SAAS,CAAC,eAAe,CAAC,MAAM,GAAG,CAAC,CAAC;YACnE,CAAC,SAAS,CAAC,kBAAkB;gBAC3B,SAAS,CAAC,kBAAkB,CAAC,MAAM,GAAG,CAAC,CAAC,CAAA;QAC5C,MAAM,MAAM,GAAG,gBAAgB,CAAC,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAA;QAEnD,IAAI,MAAM,IAAI,CAAC,sBAAsB,CAAC,GAAG,CAAC,UAAU,CAAC,EAAE,CAAC;YACtD,MAAM,KAAK,GAA2B;gBACpC,IAAI,EAAE,6GAA6G;gBACnH,KAAK,EAAE,sDAAsD;gBAC7D,KAAK,EAAE,mEAAmE;gBAC1E,OAAO,EAAE,8BAA8B,YAAY,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE;aACtE,CAAA;YACD,MAAM,IAAI,KAAK,CACb,UAAU,CAAC,8BAA8B,UAAU,kBAAkB,KAAK,CAAC,UAAU,CAAC,IAAI,EAAE,EAAE,CAC/F,CAAA;QACH,CAAC;QAED,MAAM,WAAW,GAAG,SAAS,CAAC,WAAW,IAAI,CAAC,CAAA,CAAC,cAAc;QAE7D,MAAM,YAAY,GAAG,SAAS,CAAC,YAAY;YACzC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,YAAY,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC;YACrD,CAAC,CAAC,SAAS,CAAA;QAEb,OAAO,MAAM,CAAC,kBAAkB,EAAE;YAChC,IAAI,EAAE,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,CAAC,KAAK,CAAC;YACzD,KAAK,EAAE,OAAO,CAAC,KAAK;YACpB,MAAM,EAAE,UAAU;YAClB,YAAY,EAAE,YAAY,CAAC,QAAQ,CAAC,KAAK,CAAC;YAC1C,UAAU;YACV,WAAW;YACX,MAAM;YACN,YAAY;YACZ,QAAQ,EAAE,OAAO,CAAC,QAAQ;SAC3B,CAAC,CAAA;IACJ,CAAC,CAAC,CAAA;IAEF,MAAM,OAAO,GAAG,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE,WAAW,EAAE,EAAE;QAC3D,MAAM,MAAM,GAAG,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAA;QAC3C,MAAM,QAAQ,GAAG,UAAU,CAAC,MAAM,CAAC,CAAA;QAEnC,IAAI,aAAa,GAAG,EAAE,CAAA;QACtB,IAAI,CAAC,QAAQ,EAAE,CAAC;YACd,IAAI,CAAC;gBACH,aAAa,GAAG,UAAU,CAAC,gBAAgB,CAAC,QAAQ,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;YACvE,CAAC;YAAC,MAAM,CAAC;gBACP,4CAA4C;YAC9C,CAAC;QACH,CAAC;QAED,gFAAgF;QAChF,gFAAgF;QAChF,mFAAmF;QACnF,+EAA+E;QAC/E,qEAAqE;QACrE,OAAO,MAAM,CAAC,mBAAmB,EAAE;YACjC,MAAM,EAAE,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC;YAC9B,OAAO,EAAE,aAAa;YACtB,YAAY,EAAE,QAAQ,CAAC,CAAC,CAAC,cAAc,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,SAAS;YAC3D,YAAY,EAAE,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC;YACpC,QAAQ,EAAE,aAAa,KAAK,EAAE,IAAI,aAAa,KAAK,aAAa;SAClE,CAAC,CAAA;IACJ,CAAC,CAAC,CAAA;IAEF,OAAO,MAAM,CAAC,iBAAiB,EAAE;QAC/B,OAAO,EAAE,IAAI,CAAC,OAAO;QACrB,QAAQ,EAAE,IAAI,CAAC,QAAQ;QACvB,MAAM;QACN,OAAO;KACR,CAAC,CAAA;AACJ,CAAC,CAAA"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@vultisig/core-chain",
-  "version": "1.1.0",
+  "version": "1.2.0",
   "description": "Blockchain chain logic shared across Vultisig clients",
   "license": "MIT",
   "repository": {
@@ -159,6 +159,51 @@
       "import": "./dist/chains/cosmos/gas.js",
       "default": "./dist/chains/cosmos/gas.js"
     },
+    "./chains/cosmos/qbtc/claim/broadcastClaimTx": {
+      "types": "./dist/chains/cosmos/qbtc/claim/broadcastClaimTx.d.ts",
+      "import": "./dist/chains/cosmos/qbtc/claim/broadcastClaimTx.js",
+      "default": "./dist/chains/cosmos/qbtc/claim/broadcastClaimTx.js"
+    },
+    "./chains/cosmos/qbtc/claim/BtcAddressType": {
+      "types": "./dist/chains/cosmos/qbtc/claim/BtcAddressType.d.ts",
+      "import": "./dist/chains/cosmos/qbtc/claim/BtcAddressType.js",
+      "default": "./dist/chains/cosmos/qbtc/claim/BtcAddressType.js"
+    },
+    "./chains/cosmos/qbtc/claim/buildClaimTx": {
+      "types": "./dist/chains/cosmos/qbtc/claim/buildClaimTx.d.ts",
+      "import": "./dist/chains/cosmos/qbtc/claim/buildClaimTx.js",
+      "default": "./dist/chains/cosmos/qbtc/claim/buildClaimTx.js"
+    },
+    "./chains/cosmos/qbtc/claim/ClaimableUtxo": {
+      "types": "./dist/chains/cosmos/qbtc/claim/ClaimableUtxo.d.ts",
+      "import": "./dist/chains/cosmos/qbtc/claim/ClaimableUtxo.js",
+      "default": "./dist/chains/cosmos/qbtc/claim/ClaimableUtxo.js"
+    },
+    "./chains/cosmos/qbtc/claim/computeClaimHashes": {
+      "types": "./dist/chains/cosmos/qbtc/claim/computeClaimHashes.d.ts",
+      "import": "./dist/chains/cosmos/qbtc/claim/computeClaimHashes.js",
+      "default": "./dist/chains/cosmos/qbtc/claim/computeClaimHashes.js"
+    },
+    "./chains/cosmos/qbtc/claim/detectBtcAddressType": {
+      "types": "./dist/chains/cosmos/qbtc/claim/detectBtcAddressType.d.ts",
+      "import": "./dist/chains/cosmos/qbtc/claim/detectBtcAddressType.js",
+      "default": "./dist/chains/cosmos/qbtc/claim/detectBtcAddressType.js"
+    },
+    "./chains/cosmos/qbtc/claim/getClaimableUtxos": {
+      "types": "./dist/chains/cosmos/qbtc/claim/getClaimableUtxos.d.ts",
+      "import": "./dist/chains/cosmos/qbtc/claim/getClaimableUtxos.js",
+      "default": "./dist/chains/cosmos/qbtc/claim/getClaimableUtxos.js"
+    },
+    "./chains/cosmos/qbtc/claim/getClaimWithProofDisabled": {
+      "types": "./dist/chains/cosmos/qbtc/claim/getClaimWithProofDisabled.d.ts",
+      "import": "./dist/chains/cosmos/qbtc/claim/getClaimWithProofDisabled.js",
+      "default": "./dist/chains/cosmos/qbtc/claim/getClaimWithProofDisabled.js"
+    },
+    "./chains/cosmos/qbtc/claim/proofService": {
+      "types": "./dist/chains/cosmos/qbtc/claim/proofService.d.ts",
+      "import": "./dist/chains/cosmos/qbtc/claim/proofService.js",
+      "default": "./dist/chains/cosmos/qbtc/claim/proofService.js"
+    },
     "./chains/cosmos/qbtc/getQbtcAccountInfo": {
       "types": "./dist/chains/cosmos/qbtc/getQbtcAccountInfo.d.ts",
       "import": "./dist/chains/cosmos/qbtc/getQbtcAccountInfo.js",
@@ -209,16 +254,41 @@
       "import": "./dist/chains/cosmos/thor/lp/index.js",
       "default": "./dist/chains/cosmos/thor/lp/index.js"
     },
-    "./chains/cosmos/thor/lp/affiliate": {
-      "types": "./dist/chains/cosmos/thor/lp/affiliate.d.ts",
-      "import": "./dist/chains/cosmos/thor/lp/affiliate.js",
-      "default": "./dist/chains/cosmos/thor/lp/affiliate.js"
+    "./chains/cosmos/thor/lp/halts": {
+      "types": "./dist/chains/cosmos/thor/lp/halts.d.ts",
+      "import": "./dist/chains/cosmos/thor/lp/halts.js",
+      "default": "./dist/chains/cosmos/thor/lp/halts.js"
+    },
+    "./chains/cosmos/thor/lp/lockup": {
+      "types": "./dist/chains/cosmos/thor/lp/lockup.d.ts",
+      "import": "./dist/chains/cosmos/thor/lp/lockup.js",
+      "default": "./dist/chains/cosmos/thor/lp/lockup.js"
+    },
+    "./chains/cosmos/thor/lp/lpChainMap": {
+      "types": "./dist/chains/cosmos/thor/lp/lpChainMap.d.ts",
+      "import": "./dist/chains/cosmos/thor/lp/lpChainMap.js",
+      "default": "./dist/chains/cosmos/thor/lp/lpChainMap.js"
+    },
+    "./chains/cosmos/thor/lp/math": {
+      "types": "./dist/chains/cosmos/thor/lp/math.d.ts",
+      "import": "./dist/chains/cosmos/thor/lp/math.js",
+      "default": "./dist/chains/cosmos/thor/lp/math.js"
+    },
+    "./chains/cosmos/thor/lp/memberPool": {
+      "types": "./dist/chains/cosmos/thor/lp/memberPool.d.ts",
+      "import": "./dist/chains/cosmos/thor/lp/memberPool.js",
+      "default": "./dist/chains/cosmos/thor/lp/memberPool.js"
     },
     "./chains/cosmos/thor/lp/memo": {
       "types": "./dist/chains/cosmos/thor/lp/memo.d.ts",
       "import": "./dist/chains/cosmos/thor/lp/memo.js",
       "default": "./dist/chains/cosmos/thor/lp/memo.js"
     },
+    "./chains/cosmos/thor/lp/pairing": {
+      "types": "./dist/chains/cosmos/thor/lp/pairing.d.ts",
+      "import": "./dist/chains/cosmos/thor/lp/pairing.js",
+      "default": "./dist/chains/cosmos/thor/lp/pairing.js"
+    },
     "./chains/cosmos/thor/lp/payload": {
       "types": "./dist/chains/cosmos/thor/lp/payload.d.ts",
       "import": "./dist/chains/cosmos/thor/lp/payload.js",
@@ -234,6 +304,16 @@
       "import": "./dist/chains/cosmos/thor/lp/position.js",
       "default": "./dist/chains/cosmos/thor/lp/position.js"
     },
+    "./chains/cosmos/thor/lp/positions": {
+      "types": "./dist/chains/cosmos/thor/lp/positions.d.ts",
+      "import": "./dist/chains/cosmos/thor/lp/positions.js",
+      "default": "./dist/chains/cosmos/thor/lp/positions.js"
+    },
+    "./chains/cosmos/thor/lp/types": {
+      "types": "./dist/chains/cosmos/thor/lp/types.d.ts",
+      "import": "./dist/chains/cosmos/thor/lp/types.js",
+      "default": "./dist/chains/cosmos/thor/lp/types.js"
+    },
     "./chains/cosmos/thor/lp/validation": {
       "types": "./dist/chains/cosmos/thor/lp/validation.d.ts",
       "import": "./dist/chains/cosmos/thor/lp/validation.js",
@@ -544,6 +624,11 @@
       "import": "./dist/chains/utxo/send/validateUtxoRequirements.js",
       "default": "./dist/chains/utxo/send/validateUtxoRequirements.js"
     },
+    "./chains/utxo/tx/buildSignBitcoinFromPsbt": {
+      "types": "./dist/chains/utxo/tx/buildSignBitcoinFromPsbt.d.ts",
+      "import": "./dist/chains/utxo/tx/buildSignBitcoinFromPsbt.js",
+      "default": "./dist/chains/utxo/tx/buildSignBitcoinFromPsbt.js"
+    },
     "./chains/utxo/tx/ChainPlainUtxo": {
       "types": "./dist/chains/utxo/tx/ChainPlainUtxo.d.ts",
       "import": "./dist/chains/utxo/tx/ChainPlainUtxo.js",

package/dist/chains/cosmos/thor/lp/affiliate.d.ts

@@ -1,16 +0,0 @@
-/**
- * Vultisig affiliate identifier on THORChain.
- *
- * THORName "vi" is the Vultisig affiliate, used across iOS, Windows, and now
- * the agent stack to attribute swaps and LP actions on Midgard.
- *
- * Source of truth: VultisigApp/.../THORChainSwaps.swift uses
- * `affiliateFeeAddress = "vi"` and the production memo fixtures
- * (vultisig-ios/.../TestData/thorchainswap.json) carry `:vi:0`.
- *
- * v1 LP ships at 0 bps so we get Midgard affiliate-stats tracking without
- * taking a fee. Bump the bps constant when product agrees.
- */
-export declare const VULTISIG_AFFILIATE_NAME = "vi";
-export declare const VULTISIG_AFFILIATE_LP_BPS = 0;
-//# sourceMappingURL=affiliate.d.ts.map

package/dist/chains/cosmos/thor/lp/affiliate.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"affiliate.d.ts","sourceRoot":"","sources":["../../../../../../../../packages/core/chain/chains/cosmos/thor/lp/affiliate.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AACH,eAAO,MAAM,uBAAuB,OAAO,CAAA;AAC3C,eAAO,MAAM,yBAAyB,IAAI,CAAA"}

package/dist/chains/cosmos/thor/lp/affiliate.js

@@ -1,16 +0,0 @@
-/**
- * Vultisig affiliate identifier on THORChain.
- *
- * THORName "vi" is the Vultisig affiliate, used across iOS, Windows, and now
- * the agent stack to attribute swaps and LP actions on Midgard.
- *
- * Source of truth: VultisigApp/.../THORChainSwaps.swift uses
- * `affiliateFeeAddress = "vi"` and the production memo fixtures
- * (vultisig-ios/.../TestData/thorchainswap.json) carry `:vi:0`.
- *
- * v1 LP ships at 0 bps so we get Midgard affiliate-stats tracking without
- * taking a fee. Bump the bps constant when product agrees.
- */
-export const VULTISIG_AFFILIATE_NAME = 'vi';
-export const VULTISIG_AFFILIATE_LP_BPS = 0;
-//# sourceMappingURL=affiliate.js.map

package/dist/chains/cosmos/thor/lp/affiliate.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"affiliate.js","sourceRoot":"","sources":["../../../../../../../../packages/core/chain/chains/cosmos/thor/lp/affiliate.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AACH,MAAM,CAAC,MAAM,uBAAuB,GAAG,IAAI,CAAA;AAC3C,MAAM,CAAC,MAAM,yBAAyB,GAAG,CAAC,CAAA"}