@vultisig/core-chain 1.1.0 → 1.2.1

package/dist/chains/cosmos/thor/lp/validation.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"validation.d.ts","sourceRoot":"","sources":["../../../../../../../../packages/core/chain/chains/cosmos/thor/lp/validation.ts"],"names":[],"mappings":"AAcA;;;;;;;;;;GAUG;AACH,eAAO,MAAM,qBAAqB,GAAU,MAAM,MAAM,KAAG,OAAO,CAAC,IAAI,CAetE,CAAA"}
+{"version":3,"file":"validation.d.ts","sourceRoot":"","sources":["../../../../../../../../packages/core/chain/chains/cosmos/thor/lp/validation.ts"],"names":[],"mappings":"AAcA;;;;;;;;;;;;GAYG;AACH,eAAO,MAAM,iBAAiB,GAAI,MAAM,MAAM,KAAG,MAQhD,CAAA;AAED;;;;GAIG;AACH,eAAO,MAAM,iBAAiB,QAAa,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAsBxE,CAAA;AAED;;;;;;;;;;;;;;;GAeG;AACH,eAAO,MAAM,qBAAqB,GAAU,MAAM,MAAM,KAAG,OAAO,CAAC,IAAI,CAiCtE,CAAA"}

package/dist/chains/cosmos/thor/lp/validation.js

@@ -10,26 +10,91 @@ const extractPoolStatus = (raw) => {
     return undefined;
 };
 /**
- * Verify a THORChain pool is currently depositable.
+ * Build the mimir flag key THORChain uses to pause LP deposits for a
+ * single pool. Format: `PAUSELPDEPOSIT-{CHAIN}-{ASSET_PLUS_CONTRACT}`.
  *
- * Hits the thornode `/thorchain/pool/{asset}` endpoint and asserts the
- * `status` field is `Available`. Throws on `Staged`, `Suspended`, or any
- * other non-Available state, and on network failures or unexpected payloads.
+ * Examples:
+ *   BTC.BTC                     → PAUSELPDEPOSIT-BTC-BTC
+ *   DOGE.DOGE                   → PAUSELPDEPOSIT-DOGE-DOGE
+ *   ETH.USDC-0XA0B...           → PAUSELPDEPOSIT-ETH-USDC-0XA0B...
  *
- * Use this as the fail-fast gate before building an LP add payload — it is
- * cheaper than building the payload first and discovering at broadcast time
- * that the pool is paused.
+ * Note: `CHAIN.ASSET` splits on the FIRST `.`; the rest (including any
+ * `-CONTRACT` suffix) is the asset portion, which is appended with a
+ * single `-` separator.
+ */
+export const poolPauseMimirKey = (pool) => {
+    const dotIdx = pool.indexOf('.');
+    if (dotIdx <= 0 || dotIdx >= pool.length - 1) {
+        throw new Error(`poolPauseMimirKey: invalid pool id ${pool}`);
+    }
+    const chain = pool.slice(0, dotIdx);
+    const asset = pool.slice(dotIdx + 1);
+    return `PAUSELPDEPOSIT-${chain}-${asset}`;
+};
+/**
+ * Fetch the raw thornode mimir map. Returns an object with flag keys as
+ * numbers. Used to check per-pool LP deposit pauses (PAUSELPDEPOSIT-*),
+ * liquidity lockup (LIQUIDITYLOCKUPBLOCKS), etc.
+ */
+export const getThorchainMimir = async () => {
+    const url = `${cosmosRpcUrl[Chain.THORChain]}/thorchain/mimir`;
+    const raw = await queryUrl(url);
+    if (!raw || typeof raw !== 'object') {
+        throw new Error(`getThorchainMimir: unexpected response shape from ${url}`);
+    }
+    // thornode /thorchain/mimir returns numeric values, but the JSON could
+    // deserialize as number or numeric string depending on the upstream
+    // proxy. Normalize to number, drop entries we can't coerce — downstream
+    // callers do `typeof v === 'number' && v > 0` checks anyway, and a NaN
+    // would silently defeat those.
+    const out = {};
+    for (const [k, v] of Object.entries(raw)) {
+        if (typeof v === 'number' && Number.isFinite(v)) {
+            out[k] = v;
+        }
+        else if (typeof v === 'string' && /^-?\d+$/.test(v)) {
+            out[k] = Number(v);
+        }
+    }
+    return out;
+};
+/**
+ * Verify a THORChain pool is currently depositable. Checks TWO layers:
+ *
+ * 1. **Thornode pool status** — `/thorchain/pool/{asset}.status` must be
+ *    `Available`. Catches staged / suspended pools.
+ * 2. **Mimir per-pool pause flag** — `PAUSELPDEPOSIT-{chain}-{asset}`
+ *    must not be set. Catches the case where the pool is listed as
+ *    available BUT the THORChain handler rejects LP adds for it via
+ *    mimir (what happened to BTC.BTC on 2026-04-10: pool.status was
+ *    `Available`, deposits silently accepted into mempool, handler
+ *    rejected at execution with "deposits are paused for asset
+ *    (btc.btc): internal error"). Without the mimir check, the user
+ *    signs a tx that is guaranteed to fail on-chain.
+ *
+ * Use this as the fail-fast gate before building an LP add payload.
  */
 export const assertPoolDepositable = async (pool) => {
     assertValidPoolId(pool);
-    const url = `${cosmosRpcUrl[Chain.THORChain]}/thorchain/pool/${encodeURIComponent(pool)}`;
-    const raw = await queryUrl(url);
-    const status = extractPoolStatus(raw);
+    // Run both checks in parallel — they hit different endpoints so there
+    // is no reason to serialize them.
+    const [poolRaw, mimir] = await Promise.all([
+        queryUrl(`${cosmosRpcUrl[Chain.THORChain]}/thorchain/pool/${encodeURIComponent(pool)}`),
+        getThorchainMimir(),
+    ]);
+    // Check 1: thornode pool.status
+    const status = extractPoolStatus(poolRaw);
     if (status === undefined) {
-        throw new Error(`assertPoolDepositable: pool ${pool} response from ${url} did not include a string \`status\` field`);
+        throw new Error(`assertPoolDepositable: pool ${pool} response from thornode did not include a string \`status\` field`);
     }
     if (status !== 'Available') {
         throw new Error(`assertPoolDepositable: pool ${pool} status is ${status}, must be Available for LP add`);
     }
+    // Check 2: mimir per-pool PAUSELPDEPOSIT flag
+    const pauseKey = poolPauseMimirKey(pool);
+    const pauseValue = mimir[pauseKey];
+    if (typeof pauseValue === 'number' && pauseValue > 0) {
+        throw new Error(`assertPoolDepositable: pool ${pool} has LP deposits paused on-chain via mimir ${pauseKey}=${pauseValue}. THORChain validators have disabled new adds for this pool; any tx would be rejected at handler execution time.`);
+    }
 };
 //# sourceMappingURL=validation.js.map

package/dist/chains/cosmos/thor/lp/validation.js.map

@@ -1 +1 @@
-{"version":3,"file":"validation.js","sourceRoot":"","sources":["../../../../../../../../packages/core/chain/chains/cosmos/thor/lp/validation.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,EAAE,MAAM,4BAA4B,CAAA;AAClD,OAAO,EAAE,YAAY,EAAE,MAAM,iDAAiD,CAAA;AAC9E,OAAO,EAAE,QAAQ,EAAE,MAAM,oCAAoC,CAAA;AAE7D,OAAO,EAAE,iBAAiB,EAAE,MAAM,SAAS,CAAA;AAE3C,MAAM,iBAAiB,GAAG,CAAC,GAAY,EAAsB,EAAE;IAC7D,IAAI,GAAG,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,QAAQ,IAAI,GAAG,EAAE,CAAC;QACtD,MAAM,MAAM,GAAI,GAA2B,CAAC,MAAM,CAAA;QAClD,OAAO,OAAO,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,CAAA;IACxD,CAAC;IACD,OAAO,SAAS,CAAA;AAClB,CAAC,CAAA;AAED;;;;;;;;;;GAUG;AACH,MAAM,CAAC,MAAM,qBAAqB,GAAG,KAAK,EAAE,IAAY,EAAiB,EAAE;IACzE,iBAAiB,CAAC,IAAI,CAAC,CAAA;IACvB,MAAM,GAAG,GAAG,GAAG,YAAY,CAAC,KAAK,CAAC,SAAS,CAAC,mBAAmB,kBAAkB,CAAC,IAAI,CAAC,EAAE,CAAA;IACzF,MAAM,GAAG,GAAG,MAAM,QAAQ,CAAU,GAAG,CAAC,CAAA;IACxC,MAAM,MAAM,GAAG,iBAAiB,CAAC,GAAG,CAAC,CAAA;IACrC,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;QACzB,MAAM,IAAI,KAAK,CACb,+BAA+B,IAAI,kBAAkB,GAAG,4CAA4C,CACrG,CAAA;IACH,CAAC;IACD,IAAI,MAAM,KAAK,WAAW,EAAE,CAAC;QAC3B,MAAM,IAAI,KAAK,CACb,+BAA+B,IAAI,cAAc,MAAM,gCAAgC,CACxF,CAAA;IACH,CAAC;AACH,CAAC,CAAA"}
+{"version":3,"file":"validation.js","sourceRoot":"","sources":["../../../../../../../../packages/core/chain/chains/cosmos/thor/lp/validation.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,EAAE,MAAM,4BAA4B,CAAA;AAClD,OAAO,EAAE,YAAY,EAAE,MAAM,iDAAiD,CAAA;AAC9E,OAAO,EAAE,QAAQ,EAAE,MAAM,oCAAoC,CAAA;AAE7D,OAAO,EAAE,iBAAiB,EAAE,MAAM,SAAS,CAAA;AAE3C,MAAM,iBAAiB,GAAG,CAAC,GAAY,EAAsB,EAAE;IAC7D,IAAI,GAAG,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,QAAQ,IAAI,GAAG,EAAE,CAAC;QACtD,MAAM,MAAM,GAAI,GAA2B,CAAC,MAAM,CAAA;QAClD,OAAO,OAAO,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,CAAA;IACxD,CAAC;IACD,OAAO,SAAS,CAAA;AAClB,CAAC,CAAA;AAED;;;;;;;;;;;;GAYG;AACH,MAAM,CAAC,MAAM,iBAAiB,GAAG,CAAC,IAAY,EAAU,EAAE;IACxD,MAAM,MAAM,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAA;IAChC,IAAI,MAAM,IAAI,CAAC,IAAI,MAAM,IAAI,IAAI,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC7C,MAAM,IAAI,KAAK,CAAC,sCAAsC,IAAI,EAAE,CAAC,CAAA;IAC/D,CAAC;IACD,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,MAAM,CAAC,CAAA;IACnC,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,CAAA;IACpC,OAAO,kBAAkB,KAAK,IAAI,KAAK,EAAE,CAAA;AAC3C,CAAC,CAAA;AAED;;;;GAIG;AACH,MAAM,CAAC,MAAM,iBAAiB,GAAG,KAAK,IAAqC,EAAE;IAC3E,MAAM,GAAG,GAAG,GAAG,YAAY,CAAC,KAAK,CAAC,SAAS,CAAC,kBAAkB,CAAA;IAC9D,MAAM,GAAG,GAAG,MAAM,QAAQ,CAAU,GAAG,CAAC,CAAA;IACxC,IAAI,CAAC,GAAG,IAAI,OAAO,GAAG,KAAK,QAAQ,EAAE,CAAC;QACpC,MAAM,IAAI,KAAK,CACb,qDAAqD,GAAG,EAAE,CAC3D,CAAA;IACH,CAAC;IACD,uEAAuE;IACvE,oEAAoE;IACpE,wEAAwE;IACxE,uEAAuE;IACvE,+BAA+B;IAC/B,MAAM,GAAG,GAA2B,EAAE,CAAA;IACtC,KAAK,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,GAA8B,CAAC,EAAE,CAAC;QACpE,IAAI,OAAO,CAAC,KAAK,QAAQ,IAAI,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,CAAC;YAChD,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,CAAA;QACZ,CAAC;aAAM,IAAI,OAAO,CAAC,KAAK,QAAQ,IAAI,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC;YACtD,GAAG,CAAC,CAAC,CAAC,GAAG,MAAM,CAAC,CAAC,CAAC,CAAA;QACpB,CAAC;IACH,CAAC;IACD,OAAO,GAAG,CAAA;AACZ,CAAC,CAAA;AAED;;;;;;;;;;;;;;;GAeG;AACH,MAAM,CAAC,MAAM,qBAAqB,GAAG,KAAK,EAAE,IAAY,EAAiB,EAAE;IACzE,iBAAiB,CAAC,IAAI,CAAC,CAAA;IAEvB,sEAAsE;IACtE,kCAAkC;IAClC,MAAM,CAAC,OAAO,EAAE,KAAK,CAAC,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC;QACzC,QAAQ,CACN,GAAG,YAAY,CAAC,KAAK,CAAC,SAAS,CAAC,mBAAmB,kBAAkB,CAAC,IAAI,CAAC,EAAE,CAC9E;QACD,iBAAiB,EAAE;KACpB,CAAC,CAAA;IAEF,gCAAgC;IAChC,MAAM,MAAM,GAAG,iBAAiB,CAAC,OAAO,CAAC,CAAA;IACzC,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;QACzB,MAAM,IAAI,KAAK,CACb,+BAA+B,IAAI,mEAAmE,CACvG,CAAA;IACH,CAAC;IACD,IAAI,MAAM,KAAK,WAAW,EAAE,CAAC;QAC3B,MAAM,IAAI,KAAK,CACb,+BAA+B,IAAI,cAAc,MAAM,gCAAgC,CACxF,CAAA;IACH,CAAC;IAED,8CAA8C;IAC9C,MAAM,QAAQ,GAAG,iBAAiB,CAAC,IAAI,CAAC,CAAA;IACxC,MAAM,UAAU,GAAG,KAAK,CAAC,QAAQ,CAAC,CAAA;IAClC,IAAI,OAAO,UAAU,KAAK,QAAQ,IAAI,UAAU,GAAG,CAAC,EAAE,CAAC;QACrD,MAAM,IAAI,KAAK,CACb,+BAA+B,IAAI,8CAA8C,QAAQ,IAAI,UAAU,kHAAkH,CAC1N,CAAA;IACH,CAAC;AACH,CAAC,CAAA"}

package/dist/chains/evm/tx/fee/tw/getEvmTwFeeFields.js

@@ -1,7 +1,7 @@
 import { match } from '@vultisig/lib-utils/match';
 import { TW } from '@trustwallet/wallet-core';
 import { toEvmTwAmount } from '../../tw/toEvmTwAmount.js';
-import { evmChainTxFeeFormat } from '..';
+import { evmChainTxFeeFormat } from '../index.js';
 export const getEvmTwFeeFields = ({ chain, maxFeePerGasWei, priorityFee, gasLimit, }) => {
     const feeFormat = evmChainTxFeeFormat[chain];
     return match(feeFormat, {

package/dist/chains/utxo/tx/buildSignBitcoinFromPsbt.d.ts

@@ -0,0 +1,21 @@
+import { SignBitcoin } from '@vultisig/core-mpc/types/vultisig/keysign/v1/wasm_execute_contract_payload_pb';
+import { Network, Psbt } from 'bitcoinjs-lib';
+type BuildSignBitcoinFromPsbtInput = {
+    psbt: Psbt;
+    senderAddress: string;
+    /** Bitcoin network for address decoding. Defaults to mainnet. */
+    network?: Network;
+};
+/**
+ * Decompose a BIP-174 PSBT into a structured SignBitcoin proto message.
+ * Co-signing devices can verify every input/output and compute exact sighashes
+ * from these fields without receiving an opaque blob.
+ *
+ * Currently supports P2WPKH and P2SH-P2WPKH inputs only.
+ * P2TR (Taproot/BIP-341) requires a different sighash algorithm and is planned for follow-up.
+ * P2PKH (legacy) requires legacy sighash (not BIP-143).
+ * See https://github.com/bitcoin/bips/blob/master/bip-0174.mediawiki
+ */
+export declare const buildSignBitcoinFromPsbt: ({ psbt, senderAddress, network, }: BuildSignBitcoinFromPsbtInput) => SignBitcoin;
+export {};
+//# sourceMappingURL=buildSignBitcoinFromPsbt.d.ts.map

package/dist/chains/utxo/tx/buildSignBitcoinFromPsbt.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"buildSignBitcoinFromPsbt.d.ts","sourceRoot":"","sources":["../../../../../../../packages/core/chain/chains/utxo/tx/buildSignBitcoinFromPsbt.ts"],"names":[],"mappings":"AACA,OAAO,EAGL,WAAW,EAEZ,MAAM,+EAA+E,CAAA;AACtF,OAAO,EAEL,OAAO,EAGP,IAAI,EAGL,MAAM,eAAe,CAAA;AAsEtB,KAAK,6BAA6B,GAAG;IACnC,IAAI,EAAE,IAAI,CAAA;IACV,aAAa,EAAE,MAAM,CAAA;IACrB,iEAAiE;IACjE,OAAO,CAAC,EAAE,OAAO,CAAA;CAClB,CAAA;AAED;;;;;;;;;GASG;AACH,eAAO,MAAM,wBAAwB,GAAI,mCAItC,6BAA6B,KAAG,WA4IlC,CAAA"}

package/dist/chains/utxo/tx/buildSignBitcoinFromPsbt.js

@@ -0,0 +1,182 @@
+import { create } from '@bufbuild/protobuf';
+import { BitcoinInputSchema, BitcoinOutputSchema, SignBitcoinSchema, } from '@vultisig/core-mpc/types/vultisig/keysign/v1/wasm_execute_contract_payload_pb';
+import { address as btcAddress, networks, opcodes, script as bscript, Transaction, } from 'bitcoinjs-lib';
+/**
+ * Detect the script type from a scriptPubKey buffer.
+ * See https://github.com/bitcoin/bips/blob/master/bip-0141.mediawiki
+ */
+const detectScriptType = (scriptPubKey, redeemScript) => {
+    // P2WPKH: OP_0 PUSH_20 <20-byte-hash> (22 bytes)
+    if (scriptPubKey.length === 22 && scriptPubKey[0] === 0x00 && scriptPubKey[1] === 0x14) {
+        return 'p2wpkh';
+    }
+    // P2PKH: OP_DUP OP_HASH160 PUSH_20 <20-byte-hash> OP_EQUALVERIFY OP_CHECKSIG (25 bytes)
+    if (scriptPubKey.length === 25 &&
+        scriptPubKey[0] === 0x76 &&
+        scriptPubKey[1] === 0xa9 &&
+        scriptPubKey[2] === 0x14 &&
+        scriptPubKey[23] === 0x88 &&
+        scriptPubKey[24] === 0xac) {
+        return 'p2pkh';
+    }
+    // P2TR: OP_1 PUSH_32 <32-byte-key> (34 bytes)
+    if (scriptPubKey.length === 34 && scriptPubKey[0] === 0x51 && scriptPubKey[1] === 0x20) {
+        return 'p2tr';
+    }
+    // P2WSH: OP_0 PUSH_32 <32-byte-hash> (34 bytes)
+    if (scriptPubKey.length === 34 && scriptPubKey[0] === 0x00 && scriptPubKey[1] === 0x20) {
+        return 'p2wsh';
+    }
+    // P2SH-P2WPKH: only when redeemScript is a valid P2WPKH witness program
+    const redeem = redeemScript ? Buffer.from(redeemScript) : undefined;
+    if (scriptPubKey.length === 23 &&
+        scriptPubKey[0] === 0xa9 &&
+        scriptPubKey[1] === 0x14 &&
+        scriptPubKey[22] === 0x87 &&
+        redeem?.length === 22 &&
+        redeem[0] === 0x00 &&
+        redeem[1] === 0x14) {
+        return 'p2sh-p2wpkh';
+    }
+    return 'unknown';
+};
+/** Script types that computePreSigningHashes can produce sighashes for. */
+const SUPPORTED_SCRIPT_TYPES = new Set(['p2wpkh', 'p2sh-p2wpkh']);
+const isOpReturn = (script) => {
+    const chunks = bscript.decompile(script);
+    return chunks !== null && chunks[0] === opcodes.OP_RETURN;
+};
+const getOpReturnHex = (script) => {
+    const chunks = bscript.decompile(script);
+    if (!chunks || chunks[0] !== opcodes.OP_RETURN)
+        return undefined;
+    const dataChunks = chunks
+        .slice(1)
+        .filter((chunk) => Buffer.isBuffer(chunk));
+    if (dataChunks.length === 0)
+        return undefined;
+    return Buffer.concat(dataChunks).toString('hex');
+};
+/**
+ * Decompose a BIP-174 PSBT into a structured SignBitcoin proto message.
+ * Co-signing devices can verify every input/output and compute exact sighashes
+ * from these fields without receiving an opaque blob.
+ *
+ * Currently supports P2WPKH and P2SH-P2WPKH inputs only.
+ * P2TR (Taproot/BIP-341) requires a different sighash algorithm and is planned for follow-up.
+ * P2PKH (legacy) requires legacy sighash (not BIP-143).
+ * See https://github.com/bitcoin/bips/blob/master/bip-0174.mediawiki
+ */
+export const buildSignBitcoinFromPsbt = ({ psbt, senderAddress, network = networks.bitcoin, }) => {
+    // Compute anyInputHasBip32 once (not per-input) for O(n) ownership detection
+    const anyInputHasBip32 = psbt.data.inputs.some(inp => (inp.bip32Derivation && inp.bip32Derivation.length > 0) ||
+        (inp.tapBip32Derivation &&
+            inp.tapBip32Derivation.length > 0));
+    const inputs = psbt.txInputs.map((txInput, i) => {
+        const inputData = psbt.data.inputs[i];
+        // Prefer witnessUtxo; fall back to nonWitnessUtxo (full prev tx)
+        let scriptPubKey;
+        let inputValue;
+        if (inputData.witnessUtxo) {
+            scriptPubKey = Buffer.from(inputData.witnessUtxo.script);
+            inputValue = BigInt(inputData.witnessUtxo.value);
+            // Fee snipe mitigation: cross-validate against nonWitnessUtxo if present.
+            // A malicious PSBT can lie about witnessUtxo.value; BIP-143 commits to it
+            // in the sighash, causing excess fees if the actual UTXO is worth more.
+            // See https://blog.trezor.io/details-of-the-multisig-change-address-issue-and-its-mitigation-6370ad73ed2a
+            if (inputData.nonWitnessUtxo) {
+                const prevTx = Transaction.fromBuffer(Buffer.from(inputData.nonWitnessUtxo));
+                // BIP-174: verify nonWitnessUtxo txid matches the input's prevout hash
+                const prevTxId = prevTx.getId();
+                const expectedTxId = Buffer.from(txInput.hash).reverse().toString('hex');
+                if (prevTxId !== expectedTxId) {
+                    throw new Error(`Input #${i}: nonWitnessUtxo txid (${prevTxId.slice(0, 16)}...) does not match ` +
+                        `input prevout (${expectedTxId.slice(0, 16)}...)`);
+                }
+                const prevOutput = prevTx.outs[txInput.index];
+                if (prevOutput && BigInt(prevOutput.value) !== inputValue) {
+                    throw new Error(`Input #${i}: witnessUtxo value (${inputValue}) does not match ` +
+                        `nonWitnessUtxo value (${prevOutput.value}) - possible fee snipe`);
+                }
+            }
+        }
+        else if (inputData.nonWitnessUtxo) {
+            const prevTx = Transaction.fromBuffer(Buffer.from(inputData.nonWitnessUtxo));
+            const prevOutput = prevTx.outs[txInput.index];
+            if (!prevOutput) {
+                throw new Error(`Input #${i}: nonWitnessUtxo has no output at index ${txInput.index}`);
+            }
+            scriptPubKey = Buffer.from(prevOutput.script);
+            inputValue = BigInt(prevOutput.value);
+        }
+        else {
+            throw new Error(`Input #${i} missing both witnessUtxo and nonWitnessUtxo`);
+        }
+        if (inputValue < 0n) {
+            throw new Error(`Input #${i}: negative amount (${inputValue})`);
+        }
+        const scriptType = detectScriptType(scriptPubKey, inputData.redeemScript);
+        // Fail early for unsupported script types rather than at sighash time.
+        // This gives a clearer error at decomposition time.
+        const hasBip32 = (inputData.bip32Derivation && inputData.bip32Derivation.length > 0) ||
+            (inputData.tapBip32Derivation &&
+                inputData.tapBip32Derivation.length > 0);
+        const isOurs = anyInputHasBip32 ? !!hasBip32 : true;
+        if (isOurs && !SUPPORTED_SCRIPT_TYPES.has(scriptType)) {
+            const hints = {
+                p2tr: 'P2TR (Taproot) requires BIP-341 sighash. See https://github.com/bitcoin/bips/blob/master/bip-0341.mediawiki',
+                p2pkh: 'P2PKH (legacy) requires legacy sighash, not BIP-143.',
+                p2wsh: 'P2WSH requires BIP-143 with the full witnessScript as scriptCode.',
+                unknown: `Unrecognized scriptPubKey: ${scriptPubKey.toString('hex')}`,
+            };
+            throw new Error(`Input #${i}: unsupported script type '${scriptType}' for signing. ${hints[scriptType] ?? ''}`);
+        }
+        const sighashType = inputData.sighashType ?? 1; // SIGHASH_ALL
+        const redeemScript = inputData.redeemScript
+            ? Buffer.from(inputData.redeemScript).toString('hex')
+            : undefined;
+        return create(BitcoinInputSchema, {
+            hash: Buffer.from(txInput.hash).reverse().toString('hex'),
+            index: txInput.index,
+            amount: inputValue,
+            scriptPubKey: scriptPubKey.toString('hex'),
+            scriptType,
+            sighashType,
+            isOurs,
+            redeemScript,
+            sequence: txInput.sequence,
+        });
+    });
+    const outputs = psbt.txOutputs.map((txOutput, outputIndex) => {
+        const script = Buffer.from(txOutput.script);
+        const opReturn = isOpReturn(script);
+        let outputAddress = '';
+        if (!opReturn) {
+            try {
+                outputAddress = btcAddress.fromOutputScript(txOutput.script, network);
+            }
+            catch {
+                // Non-standard output - address stays empty
+            }
+        }
+        // Change detection: Vultisig uses a single address per UTXO chain (no HD change
+        // derivation), so address comparison is the primary signal. BIP32 derivation on
+        // outputs is NOT used alone because a malicious dApp could inject derivation paths
+        // on attacker outputs to disguise them as change. Address match is unforgeable
+        // since only the vault owner knows the private key for that address.
+        return create(BitcoinOutputSchema, {
+            amount: BigInt(txOutput.value),
+            address: outputAddress,
+            opReturnData: opReturn ? getOpReturnHex(script) : undefined,
+            scriptPubKey: script.toString('hex'),
+            isChange: outputAddress !== '' && outputAddress === senderAddress,
+        });
+    });
+    return create(SignBitcoinSchema, {
+        version: psbt.version,
+        locktime: psbt.locktime,
+        inputs,
+        outputs,
+    });
+};
+//# sourceMappingURL=buildSignBitcoinFromPsbt.js.map

package/dist/chains/utxo/tx/buildSignBitcoinFromPsbt.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"buildSignBitcoinFromPsbt.js","sourceRoot":"","sources":["../../../../../../../packages/core/chain/chains/utxo/tx/buildSignBitcoinFromPsbt.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,EAAE,MAAM,oBAAoB,CAAA;AAC3C,OAAO,EACL,kBAAkB,EAClB,mBAAmB,EAEnB,iBAAiB,GAClB,MAAM,+EAA+E,CAAA;AACtF,OAAO,EACL,OAAO,IAAI,UAAU,EAErB,QAAQ,EACR,OAAO,EAEP,MAAM,IAAI,OAAO,EACjB,WAAW,GACZ,MAAM,eAAe,CAAA;AAKtB;;;GAGG;AACH,MAAM,gBAAgB,GAAG,CACvB,YAAoB,EACpB,YAAyB,EACb,EAAE;IACd,iDAAiD;IACjD,IAAI,YAAY,CAAC,MAAM,KAAK,EAAE,IAAI,YAAY,CAAC,CAAC,CAAC,KAAK,IAAI,IAAI,YAAY,CAAC,CAAC,CAAC,KAAK,IAAI,EAAE,CAAC;QACvF,OAAO,QAAQ,CAAA;IACjB,CAAC;IACD,wFAAwF;IACxF,IACE,YAAY,CAAC,MAAM,KAAK,EAAE;QAC1B,YAAY,CAAC,CAAC,CAAC,KAAK,IAAI;QACxB,YAAY,CAAC,CAAC,CAAC,KAAK,IAAI;QACxB,YAAY,CAAC,CAAC,CAAC,KAAK,IAAI;QACxB,YAAY,CAAC,EAAE,CAAC,KAAK,IAAI;QACzB,YAAY,CAAC,EAAE,CAAC,KAAK,IAAI,EACzB,CAAC;QACD,OAAO,OAAO,CAAA;IAChB,CAAC;IACD,8CAA8C;IAC9C,IAAI,YAAY,CAAC,MAAM,KAAK,EAAE,IAAI,YAAY,CAAC,CAAC,CAAC,KAAK,IAAI,IAAI,YAAY,CAAC,CAAC,CAAC,KAAK,IAAI,EAAE,CAAC;QACvF,OAAO,MAAM,CAAA;IACf,CAAC;IACD,gDAAgD;IAChD,IAAI,YAAY,CAAC,MAAM,KAAK,EAAE,IAAI,YAAY,CAAC,CAAC,CAAC,KAAK,IAAI,IAAI,YAAY,CAAC,CAAC,CAAC,KAAK,IAAI,EAAE,CAAC;QACvF,OAAO,OAAO,CAAA;IAChB,CAAC;IACD,wEAAwE;IACxE,MAAM,MAAM,GAAG,YAAY,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,SAAS,CAAA;IACnE,IACE,YAAY,CAAC,MAAM,KAAK,EAAE;QAC1B,YAAY,CAAC,CAAC,CAAC,KAAK,IAAI;QACxB,YAAY,CAAC,CAAC,CAAC,KAAK,IAAI;QACxB,YAAY,CAAC,EAAE,CAAC,KAAK,IAAI;QACzB,MAAM,EAAE,MAAM,KAAK,EAAE;QACrB,MAAM,CAAC,CAAC,CAAC,KAAK,IAAI;QAClB,MAAM,CAAC,CAAC,CAAC,KAAK,IAAI,EAClB,CAAC;QACD,OAAO,aAAa,CAAA;IACtB,CAAC;IACD,OAAO,SAAS,CAAA;AAClB,CAAC,CAAA;AAED,2EAA2E;AAC3E,MAAM,sBAAsB,GAA4B,IAAI,GAAG,CAAC,CAAC,QAAQ,EAAE,aAAa,CAAC,CAAC,CAAA;AAE1F,MAAM,UAAU,GAAG,CAAC,MAAc,EAAW,EAAE;IAC7C,MAAM,MAAM,GAAG,OAAO,CAAC,SAAS,CAAC,MAAM,CAAC,CAAA;IACxC,OAAO,MAAM,KAAK,IAAI,IAAI,MAAM,CAAC,CAAC,CAAC,KAAK,OAAO,CAAC,SAAS,CAAA;AAC3D,CAAC,CAAA;AAED,MAAM,cAAc,GAAG,CAAC,MAAc,EAAsB,EAAE;IAC5D,MAAM,MAAM,GAAG,OAAO,CAAC,SAAS,CAAC,MAAM,CAAC,CAAA;IACxC,IAAI,CAAC,MAAM,IAAI,MAAM,CAAC,CAAC,CAAC,KAAK,OAAO,CAAC,SAAS;QAAE,OAAO,SAAS,CAAA;IAChE,MAAM,UAAU,GAAG,MAAM;SACtB,KAAK,CAAC,CAAC,CAAC;SACR,MAAM,CAAC,CAAC,KAAK,EAAmB,EAAE,CAAC,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAA;IAC7D,IAAI,UAAU,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,SAAS,CAAA;IAC7C,OAAO,MAAM,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAA;AAClD,CAAC,CAAA;AASD;;;;;;;;;GASG;AACH,MAAM,CAAC,MAAM,wBAAwB,GAAG,CAAC,EACvC,IAAI,EACJ,aAAa,EACb,OAAO,GAAG,QAAQ,CAAC,OAAO,GACI,EAAe,EAAE;IAC/C,6EAA6E;IAC7E,MAAM,gBAAgB,GAAG,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAC5C,GAAG,CAAC,EAAE,CACJ,CAAC,GAAG,CAAC,eAAe,IAAI,GAAG,CAAC,eAAe,CAAC,MAAM,GAAG,CAAC,CAAC;QACvD,CAAC,GAAG,CAAC,kBAAkB;YACrB,GAAG,CAAC,kBAAkB,CAAC,MAAM,GAAG,CAAC,CAAC,CACvC,CAAA;IAED,MAAM,MAAM,GAAG,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,OAAO,EAAE,CAAC,EAAE,EAAE;QAC9C,MAAM,SAAS,GAAG,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,CAAA;QAErC,iEAAiE;QACjE,IAAI,YAAoB,CAAA;QACxB,IAAI,UAAkB,CAAA;QACtB,IAAI,SAAS,CAAC,WAAW,EAAE,CAAC;YAC1B,YAAY,GAAG,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,WAAW,CAAC,MAAM,CAAC,CAAA;YACxD,UAAU,GAAG,MAAM,CAAC,SAAS,CAAC,WAAW,CAAC,KAAK,CAAC,CAAA;YAEhD,0EAA0E;YAC1E,0EAA0E;YAC1E,wEAAwE;YACxE,0GAA0G;YAC1G,IAAI,SAAS,CAAC,cAAc,EAAE,CAAC;gBAC7B,MAAM,MAAM,GAAG,WAAW,CAAC,UAAU,CACnC,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,cAAc,CAAC,CACtC,CAAA;gBACD,uEAAuE;gBACvE,MAAM,QAAQ,GAAG,MAAM,CAAC,KAAK,EAAE,CAAA;gBAC/B,MAAM,YAAY,GAAG,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAA;gBACxE,IAAI,QAAQ,KAAK,YAAY,EAAE,CAAC;oBAC9B,MAAM,IAAI,KAAK,CACb,UAAU,CAAC,0BAA0B,QAAQ,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,sBAAsB;wBAC9E,kBAAkB,YAAY,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,MAAM,CACpD,CAAA;gBACH,CAAC;gBACD,MAAM,UAAU,GAAG,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,CAAA;gBAC7C,IAAI,UAAU,IAAI,MAAM,CAAC,UAAU,CAAC,KAAK,CAAC,KAAK,UAAU,EAAE,CAAC;oBAC1D,MAAM,IAAI,KAAK,CACb,UAAU,CAAC,wBAAwB,UAAU,mBAAmB;wBAC9D,yBAAyB,UAAU,CAAC,KAAK,wBAAwB,CACpE,CAAA;gBACH,CAAC;YACH,CAAC;QACH,CAAC;aAAM,IAAI,SAAS,CAAC,cAAc,EAAE,CAAC;YACpC,MAAM,MAAM,GAAG,WAAW,CAAC,UAAU,CACnC,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,cAAc,CAAC,CACtC,CAAA;YACD,MAAM,UAAU,GAAG,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,CAAA;YAC7C,IAAI,CAAC,UAAU,EAAE,CAAC;gBAChB,MAAM,IAAI,KAAK,CACb,UAAU,CAAC,2CAA2C,OAAO,CAAC,KAAK,EAAE,CACtE,CAAA;YACH,CAAC;YACD,YAAY,GAAG,MAAM,CAAC,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,CAAA;YAC7C,UAAU,GAAG,MAAM,CAAC,UAAU,CAAC,KAAK,CAAC,CAAA;QACvC,CAAC;aAAM,CAAC;YACN,MAAM,IAAI,KAAK,CACb,UAAU,CAAC,8CAA8C,CAC1D,CAAA;QACH,CAAC;QAED,IAAI,UAAU,GAAG,EAAE,EAAE,CAAC;YACpB,MAAM,IAAI,KAAK,CAAC,UAAU,CAAC,sBAAsB,UAAU,GAAG,CAAC,CAAA;QACjE,CAAC;QAED,MAAM,UAAU,GAAG,gBAAgB,CAAC,YAAY,EAAE,SAAS,CAAC,YAAY,CAAC,CAAA;QAEzE,uEAAuE;QACvE,oDAAoD;QACpD,MAAM,QAAQ,GACZ,CAAC,SAAS,CAAC,eAAe,IAAI,SAAS,CAAC,eAAe,CAAC,MAAM,GAAG,CAAC,CAAC;YACnE,CAAC,SAAS,CAAC,kBAAkB;gBAC3B,SAAS,CAAC,kBAAkB,CAAC,MAAM,GAAG,CAAC,CAAC,CAAA;QAC5C,MAAM,MAAM,GAAG,gBAAgB,CAAC,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAA;QAEnD,IAAI,MAAM,IAAI,CAAC,sBAAsB,CAAC,GAAG,CAAC,UAAU,CAAC,EAAE,CAAC;YACtD,MAAM,KAAK,GAA2B;gBACpC,IAAI,EAAE,6GAA6G;gBACnH,KAAK,EAAE,sDAAsD;gBAC7D,KAAK,EAAE,mEAAmE;gBAC1E,OAAO,EAAE,8BAA8B,YAAY,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE;aACtE,CAAA;YACD,MAAM,IAAI,KAAK,CACb,UAAU,CAAC,8BAA8B,UAAU,kBAAkB,KAAK,CAAC,UAAU,CAAC,IAAI,EAAE,EAAE,CAC/F,CAAA;QACH,CAAC;QAED,MAAM,WAAW,GAAG,SAAS,CAAC,WAAW,IAAI,CAAC,CAAA,CAAC,cAAc;QAE7D,MAAM,YAAY,GAAG,SAAS,CAAC,YAAY;YACzC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,YAAY,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC;YACrD,CAAC,CAAC,SAAS,CAAA;QAEb,OAAO,MAAM,CAAC,kBAAkB,EAAE;YAChC,IAAI,EAAE,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,CAAC,KAAK,CAAC;YACzD,KAAK,EAAE,OAAO,CAAC,KAAK;YACpB,MAAM,EAAE,UAAU;YAClB,YAAY,EAAE,YAAY,CAAC,QAAQ,CAAC,KAAK,CAAC;YAC1C,UAAU;YACV,WAAW;YACX,MAAM;YACN,YAAY;YACZ,QAAQ,EAAE,OAAO,CAAC,QAAQ;SAC3B,CAAC,CAAA;IACJ,CAAC,CAAC,CAAA;IAEF,MAAM,OAAO,GAAG,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE,WAAW,EAAE,EAAE;QAC3D,MAAM,MAAM,GAAG,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAA;QAC3C,MAAM,QAAQ,GAAG,UAAU,CAAC,MAAM,CAAC,CAAA;QAEnC,IAAI,aAAa,GAAG,EAAE,CAAA;QACtB,IAAI,CAAC,QAAQ,EAAE,CAAC;YACd,IAAI,CAAC;gBACH,aAAa,GAAG,UAAU,CAAC,gBAAgB,CAAC,QAAQ,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;YACvE,CAAC;YAAC,MAAM,CAAC;gBACP,4CAA4C;YAC9C,CAAC;QACH,CAAC;QAED,gFAAgF;QAChF,gFAAgF;QAChF,mFAAmF;QACnF,+EAA+E;QAC/E,qEAAqE;QACrE,OAAO,MAAM,CAAC,mBAAmB,EAAE;YACjC,MAAM,EAAE,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC;YAC9B,OAAO,EAAE,aAAa;YACtB,YAAY,EAAE,QAAQ,CAAC,CAAC,CAAC,cAAc,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,SAAS;YAC3D,YAAY,EAAE,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC;YACpC,QAAQ,EAAE,aAAa,KAAK,EAAE,IAAI,aAAa,KAAK,aAAa;SAClE,CAAC,CAAA;IACJ,CAAC,CAAC,CAAA;IAEF,OAAO,MAAM,CAAC,iBAAiB,EAAE;QAC/B,OAAO,EAAE,IAAI,CAAC,OAAO;QACrB,QAAQ,EAAE,IAAI,CAAC,QAAQ;QACvB,MAAM;QACN,OAAO;KACR,CAAC,CAAA;AACJ,CAAC,CAAA"}

package/dist/coin/chainFeeCoin.js

@@ -1,6 +1,6 @@
 import { Chain, EthereumL2Chain } from '@vultisig/core-chain/Chain';
 import { recordMap } from '@vultisig/lib-utils/record/recordMap';
-import { kujiraCoinsMigratedToThorChainMetadata } from '../chains/cosmos/thor/kujira-merge.js';
+import { kujiraCoinsMigratedToThorChainMetadata } from '../chains/cosmos/thor/kujira-merge/index.js';
 const ether = {
     ticker: 'ETH',
     logo: 'eth',

package/dist/coin/coins.js

@@ -1,5 +1,5 @@
 import { chainFeeCoin } from './chainFeeCoin.js';
-import { knownTokens } from './knownTokens.js';
+import { knownTokens } from './knownTokens/index.js';
 export const coins = [
     ...Object.values(chainFeeCoin),
     ...Object.values(knownTokens).flat(),

package/dist/coin/find/index.js

@@ -3,8 +3,8 @@ import { isOneOf } from '@vultisig/lib-utils/array/isOneOf';
 import { coinFinderChainKinds, } from './CoinFinderChainKind.js';
 import { findCardanoCoins } from './resolvers/cardano.js';
 import { findCosmosCoins } from './resolvers/cosmos.js';
-import { findEvmCoins } from './resolvers/evm.js';
-import { findSolanaCoins } from './resolvers/solana.js';
+import { findEvmCoins } from './resolvers/evm/index.js';
+import { findSolanaCoins } from './resolvers/solana/index.js';
 const resolvers = {
     cosmos: findCosmosCoins,
     evm: findEvmCoins,

package/dist/coin/knownTokens/cosmos.js

@@ -1,5 +1,5 @@
 import { Chain } from '../../Chain.js';
-import { kujiraCoinsMigratedToThorChainMetadata } from '../../chains/cosmos/thor/kujira-merge.js';
+import { kujiraCoinsMigratedToThorChainMetadata } from '../../chains/cosmos/thor/kujira-merge/index.js';
 import { kujiraCoinsOnThorChain } from '../../chains/cosmos/thor/kujira-merge/kujiraCoinsOnThorChain.js';
 import { yieldBearingThorChainTokens } from '../../chains/cosmos/thor/yield-bearing-tokens/yAssetsOnThorChain.js';
 export const knownCosmosTokens = {

package/dist/coin/knownTokens/utils.js

@@ -1,5 +1,5 @@
 import { shouldBePresent } from '@vultisig/lib-utils/assert/shouldBePresent';
-import { knownTokensIndex } from '.';
+import { knownTokensIndex } from './index.js';
 const getKnownToken = (key) => {
     return knownTokensIndex[key.chain]?.[key.id.toLowerCase()];
 };

package/dist/publicKey/address/cardano.js

@@ -1,4 +1,4 @@
-import { blake2b } from '@noble/hashes/blake2.js';
+import { blake2b } from '@noble/hashes/blake2b';
 export const deriveCardanoAddress = ({ publicKey, walletCore }) => {
     const extendedKeyData = publicKey.data();
     const spendingKeyData = extendedKeyData.slice(0, 32);

package/dist/publicKey/address/cardano.js.map

@@ -1 +1 @@
-{"version":3,"file":"cardano.js","sourceRoot":"","sources":["../../../../../../packages/core/chain/publicKey/address/cardano.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,MAAM,yBAAyB,CAAA;AAWjD,MAAM,CAAC,MAAM,oBAAoB,GAAG,CAAC,EAAE,SAAS,EAAE,UAAU,EAAS,EAAE,EAAE;IACvE,MAAM,eAAe,GAAG,SAAS,CAAC,IAAI,EAAE,CAAA;IACxC,MAAM,eAAe,GAAG,eAAe,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAA;IAEpD,MAAM,IAAI,GAAG,OAAO,CAAC,eAAe,EAAE,EAAE,KAAK,EAAE,EAAE,EAAE,CAAC,CAAA;IAEpD,MAAM,WAAW,GAAG,IAAI,UAAU,CAAC,EAAE,CAAC,CAAA;IACtC,WAAW,CAAC,CAAC,CAAC,GAAG,IAAI,CAAA;IACrB,WAAW,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC,CAAC,CAAA;IAExB,OAAO,UAAU,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,EAAE,WAAW,CAAC,CAAA;AACtD,CAAC,CAAA"}
+{"version":3,"file":"cardano.js","sourceRoot":"","sources":["../../../../../../packages/core/chain/publicKey/address/cardano.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,MAAM,uBAAuB,CAAA;AAW/C,MAAM,CAAC,MAAM,oBAAoB,GAAG,CAAC,EAAE,SAAS,EAAE,UAAU,EAAS,EAAE,EAAE;IACvE,MAAM,eAAe,GAAG,SAAS,CAAC,IAAI,EAAE,CAAA;IACxC,MAAM,eAAe,GAAG,eAAe,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAA;IAEpD,MAAM,IAAI,GAAG,OAAO,CAAC,eAAe,EAAE,EAAE,KAAK,EAAE,EAAE,EAAE,CAAC,CAAA;IAEpD,MAAM,WAAW,GAAG,IAAI,UAAU,CAAC,EAAE,CAAC,CAAA;IACtC,WAAW,CAAC,CAAC,CAAC,GAAG,IAAI,CAAA;IACrB,WAAW,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC,CAAC,CAAA;IAExB,OAAO,UAAU,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,EAAE,WAAW,CAAC,CAAA;AACtD,CAAC,CAAA"}

package/dist/publicKey/address/deriveQbtcAddress.js

@@ -1,6 +1,6 @@
 import { toBech32 } from '@cosmjs/encoding';
-import { ripemd160 } from '@noble/hashes/legacy.js';
-import { sha256 } from '@noble/hashes/sha2.js';
+import { ripemd160 } from '@noble/hashes/ripemd160';
+import { sha256 } from '@noble/hashes/sha256';
 const qbtcBech32Prefix = 'qbtc';
 /** Derives a QBTC address from an MLDSA public key using Bech32(RIPEMD160(SHA256(pubkey))). */
 export const deriveQbtcAddress = (mldsaPublicKeyHex) => {

package/dist/publicKey/address/deriveQbtcAddress.js.map

@@ -1 +1 @@
-{"version":3,"file":"deriveQbtcAddress.js","sourceRoot":"","sources":["../../../../../../packages/core/chain/publicKey/address/deriveQbtcAddress.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAA;AAC3C,OAAO,EAAE,SAAS,EAAE,MAAM,yBAAyB,CAAA;AACnD,OAAO,EAAE,MAAM,EAAE,MAAM,uBAAuB,CAAA;AAE9C,MAAM,gBAAgB,GAAG,MAAM,CAAA;AAE/B,+FAA+F;AAC/F,MAAM,CAAC,MAAM,iBAAiB,GAAG,CAAC,iBAAyB,EAAU,EAAE;IACrE,MAAM,WAAW,GAAG,MAAM,CAAC,IAAI,CAAC,iBAAiB,EAAE,KAAK,CAAC,CAAA;IACzD,MAAM,IAAI,GAAG,SAAS,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC,CAAA;IAC3C,OAAO,QAAQ,CAAC,gBAAgB,EAAE,IAAI,CAAC,CAAA;AACzC,CAAC,CAAA"}
+{"version":3,"file":"deriveQbtcAddress.js","sourceRoot":"","sources":["../../../../../../packages/core/chain/publicKey/address/deriveQbtcAddress.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAA;AAC3C,OAAO,EAAE,SAAS,EAAE,MAAM,yBAAyB,CAAA;AACnD,OAAO,EAAE,MAAM,EAAE,MAAM,sBAAsB,CAAA;AAE7C,MAAM,gBAAgB,GAAG,MAAM,CAAA;AAE/B,+FAA+F;AAC/F,MAAM,CAAC,MAAM,iBAAiB,GAAG,CAAC,iBAAyB,EAAU,EAAE;IACrE,MAAM,WAAW,GAAG,MAAM,CAAC,IAAI,CAAC,iBAAiB,EAAE,KAAK,CAAC,CAAA;IACzD,MAAM,IAAI,GAAG,SAAS,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC,CAAA;IAC3C,OAAO,QAAQ,CAAC,gBAAgB,EAAE,IAAI,CAAC,CAAA;AACzC,CAAC,CAAA"}

package/dist/scripts/printKnownTokens.js

@@ -1,7 +1,7 @@
 import { recordMap } from '@vultisig/lib-utils/record/recordMap';
 import { sortRecordKeysAlphabetically } from '@vultisig/lib-utils/record/sortRecordKeysAlphabetically';
 import { execSync } from 'child_process';
-import { knownTokens } from '../coin/knownTokens.js';
+import { knownTokens } from '../coin/knownTokens/index.js';
 const main = () => {
     const sorted = sortRecordKeysAlphabetically(recordMap(knownTokens, tokens => [...tokens].sort((a, b) => a.ticker.localeCompare(b.ticker))));
     const output = JSON.stringify(sorted, null, 2);

package/dist/swap/quote/findSwapQuote.d.ts

@@ -1,6 +1,6 @@
 import { AccountCoin } from '@vultisig/core-chain/coin/AccountCoin';
 import { TransferDirection } from '@vultisig/lib-utils/TransferDirection';
-import { VultDiscountTier } from '../affiliate.js';
+import { VultDiscountTier } from '../affiliate/index.js';
 import { SwapQuote } from './SwapQuote.js';
 export type FindSwapQuoteInput = Record<TransferDirection, AccountCoin> & {
     amount: bigint;

package/dist/swap/quote/findSwapQuote.js

@@ -12,7 +12,7 @@ import { asyncFallbackChain } from '@vultisig/lib-utils/promise/asyncFallbackCha
 import { pick } from '@vultisig/lib-utils/record/pick';
 import { Chain } from '../../Chain.js';
 import { isChainOfKind } from '../../ChainKind.js';
-import { getSwapAffiliateBps } from '../affiliate.js';
+import { getSwapAffiliateBps } from '../affiliate/index.js';
 import { getKyberSwapQuote } from '../general/kyber/api/quote.js';
 import { kyberSwapEnabledChains } from '../general/kyber/chains.js';
 import { getNativeSwapQuote } from '../native/api/getNativeSwapQuote.js';

package/dist/tx/broadcast/resolvers/evm.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"evm.d.ts","sourceRoot":"","sources":["../../../../../../../packages/core/chain/tx/broadcast/resolvers/evm.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,4BAA4B,CAAA;AAMrD,OAAO,EAAE,mBAAmB,EAAE,MAAM,aAAa,CAAA;AAEjD,eAAO,MAAM,cAAc,EAAE,mBAAmB,CAAC,QAAQ,CA6BxD,CAAA"}
+{"version":3,"file":"evm.d.ts","sourceRoot":"","sources":["../../../../../../../packages/core/chain/tx/broadcast/resolvers/evm.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,4BAA4B,CAAA;AAMrD,OAAO,EAAE,mBAAmB,EAAE,MAAM,aAAa,CAAA;AAEjD,eAAO,MAAM,cAAc,EAAE,mBAAmB,CAAC,QAAQ,CAyBxD,CAAA"}

package/dist/tx/broadcast/resolvers/evm.js

@@ -8,7 +8,7 @@ export const broadcastEvmTx = async ({ chain, tx, }) => {
         serializedTransaction: ensureHexPrefix(Buffer.from(tx.encoded).toString('hex')),
     }));
     if (error &&
-        !isInError(error, 'already known', 'transaction is temporarily banned', 'nonce too low', 'transaction already exists', 'future transaction tries to replace pending', 'could not replace existing tx', 'tx already in mempool')) {
+        !isInError(error, 'already known', 'transaction already exists', 'tx already in mempool')) {
         throw error;
     }
 };

package/dist/tx/broadcast/resolvers/evm.js.map

@@ -1 +1 @@
-{"version":3,"file":"evm.js","sourceRoot":"","sources":["../../../../../../../packages/core/chain/tx/broadcast/resolvers/evm.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,YAAY,EAAE,MAAM,wCAAwC,CAAA;AACrE,OAAO,EAAE,OAAO,EAAE,MAAM,6BAA6B,CAAA;AACrD,OAAO,EAAE,SAAS,EAAE,MAAM,qCAAqC,CAAA;AAC/D,OAAO,EAAE,eAAe,EAAE,MAAM,yCAAyC,CAAA;AAIzE,MAAM,CAAC,MAAM,cAAc,GAAkC,KAAK,EAAE,EAClE,KAAK,EACL,EAAE,GACH,EAAE,EAAE;IACH,MAAM,MAAM,GAAG,YAAY,CAAC,KAAK,CAAC,CAAA;IAElC,MAAM,EAAE,KAAK,EAAE,GAAG,MAAM,OAAO,CAC7B,MAAM,CAAC,kBAAkB,CAAC;QACxB,qBAAqB,EAAE,eAAe,CACpC,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,OAAO,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CACxC;KACF,CAAC,CACH,CAAA;IAED,IACE,KAAK;QACL,CAAC,SAAS,CACR,KAAK,EACL,eAAe,EACf,mCAAmC,EACnC,eAAe,EACf,4BAA4B,EAC5B,6CAA6C,EAC7C,+BAA+B,EAC/B,uBAAuB,CACxB,EACD,CAAC;QACD,MAAM,KAAK,CAAA;IACb,CAAC;AACH,CAAC,CAAA"}
+{"version":3,"file":"evm.js","sourceRoot":"","sources":["../../../../../../../packages/core/chain/tx/broadcast/resolvers/evm.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,YAAY,EAAE,MAAM,wCAAwC,CAAA;AACrE,OAAO,EAAE,OAAO,EAAE,MAAM,6BAA6B,CAAA;AACrD,OAAO,EAAE,SAAS,EAAE,MAAM,qCAAqC,CAAA;AAC/D,OAAO,EAAE,eAAe,EAAE,MAAM,yCAAyC,CAAA;AAIzE,MAAM,CAAC,MAAM,cAAc,GAAkC,KAAK,EAAE,EAClE,KAAK,EACL,EAAE,GACH,EAAE,EAAE;IACH,MAAM,MAAM,GAAG,YAAY,CAAC,KAAK,CAAC,CAAA;IAElC,MAAM,EAAE,KAAK,EAAE,GAAG,MAAM,OAAO,CAC7B,MAAM,CAAC,kBAAkB,CAAC;QACxB,qBAAqB,EAAE,eAAe,CACpC,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,OAAO,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CACxC;KACF,CAAC,CACH,CAAA;IAED,IACE,KAAK;QACL,CAAC,SAAS,CACR,KAAK,EACL,eAAe,EACf,4BAA4B,EAC5B,uBAAuB,CACxB,EACD,CAAC;QACD,MAAM,KAAK,CAAA;IACb,CAAC;AACH,CAAC,CAAA"}

package/dist/tx/broadcast/resolvers/ton.js

@@ -7,7 +7,7 @@ export const broadcastTonTx = async ({ tx, }) => {
     const { error } = await attempt(queryUrl(url, {
         body: { boc: tx.encoded },
     }));
-    if (error && !isInError(error, 'duplicate message')) {
+    if (error && !isInError(error, 'duplicate message', 'duplicate msg_seqno')) {
         throw error;
     }
 };

package/dist/tx/broadcast/resolvers/ton.js.map

@@ -1 +1 @@
-{"version":3,"file":"ton.js","sourceRoot":"","sources":["../../../../../../../packages/core/chain/tx/broadcast/resolvers/ton.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,UAAU,EAAE,MAAM,uBAAuB,CAAA;AAClD,OAAO,EAAE,OAAO,EAAE,MAAM,6BAA6B,CAAA;AACrD,OAAO,EAAE,SAAS,EAAE,MAAM,qCAAqC,CAAA;AAC/D,OAAO,EAAE,QAAQ,EAAE,MAAM,oCAAoC,CAAA;AAI7D,MAAM,CAAC,MAAM,cAAc,GAAwC,KAAK,EAAE,EACxE,EAAE,GACH,EAAE,EAAE;IACH,MAAM,GAAG,GAAG,GAAG,UAAU,2BAA2B,CAAA;IAEpD,MAAM,EAAE,KAAK,EAAE,GAAG,MAAM,OAAO,CAC7B,QAAQ,CAA+B,GAAG,EAAE;QAC1C,IAAI,EAAE,EAAE,GAAG,EAAE,EAAE,CAAC,OAAO,EAAE;KAC1B,CAAC,CACH,CAAA;IAED,IAAI,KAAK,IAAI,CAAC,SAAS,CAAC,KAAK,EAAE,mBAAmB,CAAC,EAAE,CAAC;QACpD,MAAM,KAAK,CAAA;IACb,CAAC;AACH,CAAC,CAAA"}
+{"version":3,"file":"ton.js","sourceRoot":"","sources":["../../../../../../../packages/core/chain/tx/broadcast/resolvers/ton.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,UAAU,EAAE,MAAM,uBAAuB,CAAA;AAClD,OAAO,EAAE,OAAO,EAAE,MAAM,6BAA6B,CAAA;AACrD,OAAO,EAAE,SAAS,EAAE,MAAM,qCAAqC,CAAA;AAC/D,OAAO,EAAE,QAAQ,EAAE,MAAM,oCAAoC,CAAA;AAI7D,MAAM,CAAC,MAAM,cAAc,GAAwC,KAAK,EAAE,EACxE,EAAE,GACH,EAAE,EAAE;IACH,MAAM,GAAG,GAAG,GAAG,UAAU,2BAA2B,CAAA;IAEpD,MAAM,EAAE,KAAK,EAAE,GAAG,MAAM,OAAO,CAC7B,QAAQ,CAA+B,GAAG,EAAE;QAC1C,IAAI,EAAE,EAAE,GAAG,EAAE,EAAE,CAAC,OAAO,EAAE;KAC1B,CAAC,CACH,CAAA;IAED,IAAI,KAAK,IAAI,CAAC,SAAS,CAAC,KAAK,EAAE,mBAAmB,EAAE,qBAAqB,CAAC,EAAE,CAAC;QAC3E,MAAM,KAAK,CAAA;IACb,CAAC;AACH,CAAC,CAAA"}

package/dist/tx/hash/resolvers/cardano.js

@@ -1,4 +1,4 @@
-import { blake2b } from '@noble/hashes/blake2.js';
+import { blake2b } from '@noble/hashes/blake2b';
 import { decode, encode } from 'cbor-x';
 export const getCardanoTxHash = tx => {
     // Prefer pre-computed txId (set by compileTx to avoid cbor-x

package/dist/tx/hash/resolvers/cardano.js.map

@@ -1 +1 @@
-{"version":3,"file":"cardano.js","sourceRoot":"","sources":["../../../../../../../packages/core/chain/tx/hash/resolvers/cardano.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,OAAO,EAAE,MAAM,yBAAyB,CAAA;AACjD,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,QAAQ,CAAA;AAIvC,MAAM,CAAC,MAAM,gBAAgB,GAAuC,EAAE,CAAC,EAAE;IACvE,6DAA6D;IAC7D,oDAAoD;IACpD,IAAI,EAAE,CAAC,IAAI,IAAI,EAAE,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAClC,OAAO,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAA;IAC7C,CAAC;IAED,MAAM,OAAO,GAAG,MAAM,CAAC,EAAE,CAAC,OAAO,CAAC,CAAA;IAClC,MAAM,QAAQ,GAAG,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAA;IACnC,MAAM,MAAM,GAAG,OAAO,CAAC,QAAQ,EAAE,EAAE,KAAK,EAAE,EAAE,EAAE,CAAC,CAAA;IAE/C,OAAO,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAA;AAC5C,CAAC,CAAA"}
+{"version":3,"file":"cardano.js","sourceRoot":"","sources":["../../../../../../../packages/core/chain/tx/hash/resolvers/cardano.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,OAAO,EAAE,MAAM,uBAAuB,CAAA;AAC/C,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,QAAQ,CAAA;AAIvC,MAAM,CAAC,MAAM,gBAAgB,GAAuC,EAAE,CAAC,EAAE;IACvE,6DAA6D;IAC7D,oDAAoD;IACpD,IAAI,EAAE,CAAC,IAAI,IAAI,EAAE,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAClC,OAAO,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAA;IAC7C,CAAC;IAED,MAAM,OAAO,GAAG,MAAM,CAAC,EAAE,CAAC,OAAO,CAAC,CAAA;IAClC,MAAM,QAAQ,GAAG,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAA;IACnC,MAAM,MAAM,GAAG,OAAO,CAAC,QAAQ,EAAE,EAAE,KAAK,EAAE,EAAE,EAAE,CAAC,CAAA;IAE/C,OAAO,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAA;AAC5C,CAAC,CAAA"}