crypto-aio 0.0.2 → 0.1.0

package/dist/adapters/utxo/address.js

@@ -0,0 +1,341 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.compactSize = exports.hash160 = void 0;
+exports.outputScript = outputScript;
+exports.isXOnlyPoint = isXOnlyPoint;
+exports.decodeAddress = decodeAddress;
+exports.addressFromScript = addressFromScript;
+exports.taprootTweak = taprootTweak;
+exports.walletAddress = walletAddress;
+exports.walletTypeOf = walletTypeOf;
+exports.dustThreshold = dustThreshold;
+/**
+ * Bitcoin addresses and output scripts, SDK-free (`@scure/base`, `@noble/*`), so the codec
+ * is an implementation independent of bitcoinjs-lib, which the tests cross-check it
+ * against. Decoding is strict: at most 90 characters, refused before any decoding, one
+ * network's HRP and base58 version bytes,
+ * bech32 only for witness v0 and bech32m only for v1 (BIP350), exact program lengths, no
+ * mixed case, and a taproot output key must be a valid x coordinate. Every failure is
+ * `ValidationError('INVALID_ADDRESS')` with a message that names no address.
+ */
+const secp256k1_1 = require("@noble/curves/secp256k1");
+const ripemd160_1 = require("@noble/hashes/ripemd160");
+const sha256_1 = require("@noble/hashes/sha256");
+const base_1 = require("@scure/base");
+const error_1 = require("../../core/errors/error");
+const bytes_1 = require("../../core/util/bytes");
+const base58check = (0, base_1.createBase58check)(sha256_1.sha256);
+/**
+ * BIP173's bech32 limit, and more than any base58 address needs. `@scure/base`'s base58
+ * decoding is quadratic, so an untrusted string is capped before any decoding: a
+ * 10,000-character recipient once blocked the event loop for over a minute.
+ */
+const ADDRESS_MAX = 90;
+const BECH32_CHARS = /^[qpzry9x8gf2tvdw0s3jn54khce6mua7l]+$/;
+/** The program length each output script's push byte encodes. */
+const PROGRAM_LENGTH = Object.freeze({
+    p2pkh: 20,
+    p2sh: 20,
+    p2wpkh: 20,
+    p2wsh: 32,
+    p2tr: 32,
+});
+const invalid = (reason) => {
+    throw new error_1.ValidationError('INVALID_ADDRESS', `invalid Bitcoin address: ${reason}`);
+};
+const hash160 = (data) => (0, ripemd160_1.ripemd160)((0, sha256_1.sha256)(data));
+exports.hash160 = hash160;
+/** The standard output script of each type; the program must have that type's length. */
+function outputScript(type, program) {
+    if (program.length !== PROGRAM_LENGTH[type]) {
+        invalid('the output program has the wrong length');
+    }
+    switch (type) {
+        case 'p2pkh':
+            return (0, bytes_1.concatBytes)(Uint8Array.of(0x76, 0xa9, 0x14), program, Uint8Array.of(0x88, 0xac));
+        case 'p2sh':
+            return (0, bytes_1.concatBytes)(Uint8Array.of(0xa9, 0x14), program, Uint8Array.of(0x87));
+        case 'p2wpkh':
+            return (0, bytes_1.concatBytes)(Uint8Array.of(0x00, 0x14), program);
+        case 'p2wsh':
+            return (0, bytes_1.concatBytes)(Uint8Array.of(0x00, 0x20), program);
+        case 'p2tr':
+            return (0, bytes_1.concatBytes)(Uint8Array.of(0x51, 0x20), program);
+    }
+}
+/** Whether 32 bytes are the x coordinate of a curve point (BIP340 `lift_x`). */
+function isXOnlyPoint(bytes) {
+    if (bytes.length !== 32)
+        return false;
+    try {
+        secp256k1_1.schnorr.utils.lift_x(secp256k1_1.schnorr.utils.bytesToNumberBE(bytes));
+        return true;
+    }
+    catch {
+        return false;
+    }
+}
+/**
+ * Whether an address starting with this network's `<hrp>1` has the shape of bech32: one case,
+ * and only bech32 characters after the separator. A custom network's base58 address can
+ * start with `<hrp>1` too; it is not bech32-shaped, so it takes the base58 path.
+ */
+function isBech32Shaped(address, hrp) {
+    const lower = address.toLowerCase();
+    if (!lower.startsWith(`${hrp}1`))
+        return false;
+    if (address !== lower && address !== address.toUpperCase())
+        return false;
+    return BECH32_CHARS.test(lower.slice(hrp.length + 1));
+}
+/** Decodes a bech32-shaped address, already lowercased (BIP173 allows either case). */
+function decodeSegwit(lower, params) {
+    let decoded;
+    let variant;
+    try {
+        decoded = base_1.bech32.decode(lower, ADDRESS_MAX);
+        variant = 'bech32';
+    }
+    catch {
+        try {
+            decoded = base_1.bech32m.decode(lower, ADDRESS_MAX);
+            variant = 'bech32m';
+        }
+        catch {
+            invalid('bad checksum or encoding');
+        }
+    }
+    const { prefix, words } = decoded;
+    if (prefix !== params.bech32)
+        invalid('it belongs to another network');
+    const version = words[0];
+    if (version === undefined || version > 16)
+        invalid('bad witness version');
+    let program = new Uint8Array();
+    try {
+        program = base_1.bech32.fromWords(words.slice(1));
+    }
+    catch {
+        invalid('bad witness program padding');
+    }
+    if (version === 0) {
+        if (variant !== 'bech32')
+            invalid('witness v0 must use bech32');
+        if (program.length === 20)
+            return {
+                type: 'p2wpkh',
+                canonical: lower,
+                script: outputScript('p2wpkh', program),
+            };
+        if (program.length === 32)
+            return { type: 'p2wsh', canonical: lower, script: outputScript('p2wsh', program) };
+        return invalid('bad witness v0 program length');
+    }
+    if (variant !== 'bech32m')
+        invalid('witness v1+ must use bech32m');
+    if (version === 1 && program.length === 32) {
+        if (!isXOnlyPoint(program))
+            invalid('taproot output key is not on the curve');
+        return { type: 'p2tr', canonical: lower, script: outputScript('p2tr', program) };
+    }
+    return invalid('unsupported witness version or program');
+}
+/** Decodes an address of this network; throws `INVALID_ADDRESS`. */
+function decodeAddress(address, params) {
+    if (typeof address !== 'string' || address.length === 0)
+        invalid('empty');
+    if (address.length > ADDRESS_MAX)
+        invalid('too long');
+    if (!/^[0-9A-Za-z]+$/.test(address))
+        invalid('unexpected characters');
+    if (isBech32Shaped(address, params.bech32)) {
+        return decodeSegwit(address.toLowerCase(), params);
+    }
+    let payload = new Uint8Array();
+    try {
+        payload = base58check.decode(address);
+    }
+    catch {
+        // A segwit address of another network, or a mixed-case one, lands here too.
+        invalid('bad checksum or encoding');
+    }
+    if (payload.length !== 21)
+        invalid('bad payload length');
+    const version = payload[0];
+    const hash = payload.slice(1);
+    if (version === params.pubKeyHash)
+        return { type: 'p2pkh', canonical: address, script: outputScript('p2pkh', hash) };
+    if (version === params.scriptHash)
+        return { type: 'p2sh', canonical: address, script: outputScript('p2sh', hash) };
+    return invalid('it belongs to another network');
+}
+/**
+ * The address an output script pays on this network: the inverse of `outputScript` for the
+ * five standard types, as `decodeAddress` returns it. Any other script (a bare key or
+ * multisig, a data carrier, a future witness version or program length) has no address, and
+ * neither has a taproot key off the curve, which `decodeAddress` refuses.
+ */
+function addressFromScript(script, params) {
+    const [b0, b1, b2] = script;
+    const n = script.length;
+    let type;
+    let program;
+    if (n === 25 &&
+        b0 === 0x76 &&
+        b1 === 0xa9 &&
+        b2 === 0x14 &&
+        script[23] === 0x88 &&
+        script[24] === 0xac) {
+        type = 'p2pkh';
+        program = script.slice(3, 23);
+    }
+    else if (n === 23 && b0 === 0xa9 && b1 === 0x14 && script[22] === 0x87) {
+        type = 'p2sh';
+        program = script.slice(2, 22);
+    }
+    else if (n === 22 && b0 === 0x00 && b1 === 0x14) {
+        type = 'p2wpkh';
+        program = script.slice(2);
+    }
+    else if (n === 34 && b0 === 0x00 && b1 === 0x20) {
+        type = 'p2wsh';
+        program = script.slice(2);
+    }
+    else if (n === 34 && b0 === 0x51 && b1 === 0x20 && isXOnlyPoint(script.slice(2))) {
+        type = 'p2tr';
+        program = script.slice(2);
+    }
+    else {
+        return undefined;
+    }
+    const canonical = type === 'p2pkh' || type === 'p2sh'
+        ? base58check.encode((0, bytes_1.concatBytes)(Uint8Array.of(type === 'p2pkh' ? params.pubKeyHash : params.scriptHash), program))
+        : type === 'p2tr'
+            ? base_1.bech32m.encode(params.bech32, [1, ...base_1.bech32m.toWords(program)])
+            : base_1.bech32.encode(params.bech32, [0, ...base_1.bech32.toWords(program)]);
+    return { type, canonical, script: outputScript(type, program) };
+}
+/**
+ * Accepts only a 33-byte compressed key on the curve; a 32-byte x-only key only for
+ * `p2tr` (a Schnorr-only signer's key). Never a private key, never an uncompressed key.
+ */
+function compressedKey(publicKey, type) {
+    if (publicKey.length === 32 && type === 'p2tr') {
+        if (!isXOnlyPoint(publicKey))
+            invalid('the x-only public key is not on the curve');
+        return (0, bytes_1.concatBytes)(Uint8Array.of(0x02), publicKey);
+    }
+    if (publicKey.length !== 33 || (publicKey[0] !== 0x02 && publicKey[0] !== 0x03)) {
+        invalid('a public key must be 33-byte compressed');
+    }
+    try {
+        secp256k1_1.secp256k1.ProjectivePoint.fromHex(publicKey).assertValidity();
+    }
+    catch {
+        invalid('the public key is not on the curve');
+    }
+    return publicKey;
+}
+/** BIP341/BIP86 key-path tweak of an internal key with no script tree. */
+function taprootTweak(internalKey) {
+    if (!isXOnlyPoint(internalKey))
+        invalid('the taproot internal key is not an x-only point');
+    const point = secp256k1_1.schnorr.utils.lift_x(secp256k1_1.schnorr.utils.bytesToNumberBE(internalKey));
+    const tweak = secp256k1_1.schnorr.utils.taggedHash('TapTweak', internalKey);
+    const t = secp256k1_1.schnorr.utils.bytesToNumberBE(tweak);
+    if (t >= secp256k1_1.secp256k1.CURVE.n)
+        invalid('the taproot tweak is out of range');
+    const output = point.add(secp256k1_1.secp256k1.ProjectivePoint.BASE.multiply(t));
+    if (output.equals(secp256k1_1.secp256k1.ProjectivePoint.ZERO))
+        invalid('the taproot output key is infinity');
+    return { tweak, outputKey: output.toRawBytes(true).slice(1) };
+}
+/** The wallet address of `type` for this public key. */
+function walletAddress(publicKey, type, params) {
+    const key = compressedKey(publicKey, type);
+    switch (type) {
+        case 'p2wpkh': {
+            const program = (0, exports.hash160)(key);
+            return {
+                address: base_1.bech32.encode(params.bech32, [0, ...base_1.bech32.toWords(program)]),
+                type,
+                script: outputScript('p2wpkh', program),
+                publicKey: key,
+            };
+        }
+        case 'p2sh-p2wpkh': {
+            const redeemScript = outputScript('p2wpkh', (0, exports.hash160)(key));
+            const hash = (0, exports.hash160)(redeemScript);
+            return {
+                address: base58check.encode((0, bytes_1.concatBytes)(Uint8Array.of(params.scriptHash), hash)),
+                type,
+                script: outputScript('p2sh', hash),
+                publicKey: key,
+                redeemScript,
+            };
+        }
+        case 'p2pkh': {
+            const hash = (0, exports.hash160)(key);
+            return {
+                address: base58check.encode((0, bytes_1.concatBytes)(Uint8Array.of(params.pubKeyHash), hash)),
+                type,
+                script: outputScript('p2pkh', hash),
+                publicKey: key,
+            };
+        }
+        case 'p2tr': {
+            const internalKey = key.slice(1);
+            const { tweak, outputKey } = taprootTweak(internalKey);
+            return {
+                address: base_1.bech32m.encode(params.bech32, [1, ...base_1.bech32m.toWords(outputKey)]),
+                type,
+                script: outputScript('p2tr', outputKey),
+                publicKey: internalKey,
+                tweak,
+                outputKey,
+            };
+        }
+    }
+}
+/** The wallet address type a sending address implies (a p2sh wallet is p2sh-p2wpkh). */
+function walletTypeOf(decoded) {
+    switch (decoded.type) {
+        case 'p2wpkh':
+            return 'p2wpkh';
+        case 'p2sh':
+            return 'p2sh-p2wpkh';
+        case 'p2pkh':
+            return 'p2pkh';
+        case 'p2tr':
+            return 'p2tr';
+        case 'p2wsh':
+            throw new error_1.ValidationError('INVALID_INTENT', 'p2wsh (script) wallets cannot send; use p2wpkh, p2sh-p2wpkh, p2pkh or p2tr');
+    }
+}
+const OP_RETURN = 0x6a;
+/** Bitcoin Core's `MAX_SCRIPT_SIZE`: a longer script can never be spent. */
+const MAX_SCRIPT_SIZE = 10_000;
+/** The byte length of Bitcoin's CompactSize encoding of `n` (a count or a length). */
+const compactSize = (n) => n < 0xfd ? 1 : n <= 0xffff ? 3 : n <= 0xffffffff ? 5 : 9;
+exports.compactSize = compactSize;
+/**
+ * Bitcoin Core's `GetDustThreshold` (policy.cpp) at `dustRelayFee` sat/kvB, rounded up.
+ * An unspendable script (`IsUnspendable`: OP_RETURN first, or over `MAX_SCRIPT_SIZE`) has
+ * no dust threshold.
+ */
+function dustThreshold(script, dustRelayFee) {
+    if (script[0] === OP_RETURN || script.length > MAX_SCRIPT_SIZE)
+        return 0n;
+    const size = BigInt(8 + (0, exports.compactSize)(script.length) + script.length);
+    return ((size + (isWitnessProgram(script) ? 67n : 148n)) * dustRelayFee + 999n) / 1000n;
+}
+/** Bitcoin Core's `IsWitnessProgram`: a version opcode, then one push of 2 to 40 bytes. */
+function isWitnessProgram(script) {
+    const version = script[0];
+    if (script.length < 4 || script.length > 42 || version === undefined)
+        return false;
+    if (version !== 0x00 && (version < 0x51 || version > 0x60))
+        return false;
+    return script[1] === script.length - 2;
+}
+//# sourceMappingURL=address.js.map

package/dist/adapters/utxo/address.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"address.js","sourceRoot":"","sources":["../../../src/adapters/utxo/address.ts"],"names":[],"mappings":";;;AAkDA,oCAoBC;AAGD,oCAQC;AA4DD,sCAsBC;AAQD,8CA6CC;AAuBD,oCAcC;AAgBD,sCAiDC;AAGD,oCAgBC;AAeD,sCAIC;AApWD;;;;;;;;GAQG;AACH,uDAA6D;AAC7D,uDAAoD;AACpD,iDAA8C;AAC9C,sCAAiE;AACjE,mDAA0D;AAC1D,iDAAoD;AAYpD,MAAM,WAAW,GAAG,IAAA,wBAAiB,EAAC,eAAM,CAAC,CAAC;AAC9C;;;;GAIG;AACH,MAAM,WAAW,GAAG,EAAE,CAAC;AACvB,MAAM,YAAY,GAAG,uCAAuC,CAAC;AAC7D,iEAAiE;AACjE,MAAM,cAAc,GAA6C,MAAM,CAAC,MAAM,CAAC;IAC7E,KAAK,EAAE,EAAE;IACT,IAAI,EAAE,EAAE;IACR,MAAM,EAAE,EAAE;IACV,KAAK,EAAE,EAAE;IACT,IAAI,EAAE,EAAE;CACT,CAAC,CAAC;AAEH,MAAM,OAAO,GAAG,CAAC,MAAc,EAAS,EAAE;IACxC,MAAM,IAAI,uBAAe,CAAC,iBAAiB,EAAE,4BAA4B,MAAM,EAAE,CAAC,CAAC;AACrF,CAAC,CAAC;AAEK,MAAM,OAAO,GAAG,CAAC,IAAgB,EAAc,EAAE,CAAC,IAAA,qBAAS,EAAC,IAAA,eAAM,EAAC,IAAI,CAAC,CAAC,CAAC;AAApE,QAAA,OAAO,WAA6D;AAEjF,yFAAyF;AACzF,SAAgB,YAAY,CAAC,IAAoB,EAAE,OAAmB;IACpE,IAAI,OAAO,CAAC,MAAM,KAAK,cAAc,CAAC,IAAI,CAAC,EAAE,CAAC;QAC5C,OAAO,CAAC,yCAAyC,CAAC,CAAC;IACrD,CAAC;IACD,QAAQ,IAAI,EAAE,CAAC;QACb,KAAK,OAAO;YACV,OAAO,IAAA,mBAAW,EAChB,UAAU,CAAC,EAAE,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI,CAAC,EAC/B,OAAO,EACP,UAAU,CAAC,EAAE,CAAC,IAAI,EAAE,IAAI,CAAC,CAC1B,CAAC;QACJ,KAAK,MAAM;YACT,OAAO,IAAA,mBAAW,EAAC,UAAU,CAAC,EAAE,CAAC,IAAI,EAAE,IAAI,CAAC,EAAE,OAAO,EAAE,UAAU,CAAC,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC;QAC9E,KAAK,QAAQ;YACX,OAAO,IAAA,mBAAW,EAAC,UAAU,CAAC,EAAE,CAAC,IAAI,EAAE,IAAI,CAAC,EAAE,OAAO,CAAC,CAAC;QACzD,KAAK,OAAO;YACV,OAAO,IAAA,mBAAW,EAAC,UAAU,CAAC,EAAE,CAAC,IAAI,EAAE,IAAI,CAAC,EAAE,OAAO,CAAC,CAAC;QACzD,KAAK,MAAM;YACT,OAAO,IAAA,mBAAW,EAAC,UAAU,CAAC,EAAE,CAAC,IAAI,EAAE,IAAI,CAAC,EAAE,OAAO,CAAC,CAAC;IAC3D,CAAC;AACH,CAAC;AAED,gFAAgF;AAChF,SAAgB,YAAY,CAAC,KAAiB;IAC5C,IAAI,KAAK,CAAC,MAAM,KAAK,EAAE;QAAE,OAAO,KAAK,CAAC;IACtC,IAAI,CAAC;QACH,mBAAO,CAAC,KAAK,CAAC,MAAM,CAAC,mBAAO,CAAC,KAAK,CAAC,eAAe,CAAC,KAAK,CAAC,CAAC,CAAC;QAC3D,OAAO,IAAI,CAAC;IACd,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC;AAED;;;;GAIG;AACH,SAAS,cAAc,CAAC,OAAe,EAAE,GAAW;IAClD,MAAM,KAAK,GAAG,OAAO,CAAC,WAAW,EAAE,CAAC;IACpC,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,GAAG,GAAG,GAAG,CAAC;QAAE,OAAO,KAAK,CAAC;IAC/C,IAAI,OAAO,KAAK,KAAK,IAAI,OAAO,KAAK,OAAO,CAAC,WAAW,EAAE;QAAE,OAAO,KAAK,CAAC;IACzE,OAAO,YAAY,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC;AACxD,CAAC;AAED,uFAAuF;AACvF,SAAS,YAAY,CAAC,KAAa,EAAE,MAAqB;IACxD,IAAI,OAAwD,CAAC;IAC7D,IAAI,OAAyC,CAAC;IAC9C,IAAI,CAAC;QACH,OAAO,GAAG,aAAM,CAAC,MAAM,CAAC,KAA8B,EAAE,WAAW,CAAC,CAAC;QACrE,OAAO,GAAG,QAAQ,CAAC;IACrB,CAAC;IAAC,MAAM,CAAC;QACP,IAAI,CAAC;YACH,OAAO,GAAG,cAAO,CAAC,MAAM,CAAC,KAA8B,EAAE,WAAW,CAAC,CAAC;YACtE,OAAO,GAAG,SAAS,CAAC;QACtB,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,CAAC,0BAA0B,CAAC,CAAC;QACtC,CAAC;IACH,CAAC;IACD,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,GAAG,OAA8C,CAAC;IACzE,IAAI,MAAM,KAAK,MAAM,CAAC,MAAM;QAAE,OAAO,CAAC,+BAA+B,CAAC,CAAC;IACvE,MAAM,OAAO,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC;IACzB,IAAI,OAAO,KAAK,SAAS,IAAI,OAAO,GAAG,EAAE;QAAE,OAAO,CAAC,qBAAqB,CAAC,CAAC;IAC1E,IAAI,OAAO,GAAe,IAAI,UAAU,EAAE,CAAC;IAC3C,IAAI,CAAC;QACH,OAAO,GAAG,aAAM,CAAC,SAAS,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;IAC7C,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,CAAC,6BAA6B,CAAC,CAAC;IACzC,CAAC;IACD,IAAI,OAAO,KAAK,CAAC,EAAE,CAAC;QAClB,IAAI,OAAO,KAAK,QAAQ;YAAE,OAAO,CAAC,4BAA4B,CAAC,CAAC;QAChE,IAAI,OAAO,CAAC,MAAM,KAAK,EAAE;YACvB,OAAO;gBACL,IAAI,EAAE,QAAQ;gBACd,SAAS,EAAE,KAAK;gBAChB,MAAM,EAAE,YAAY,CAAC,QAAQ,EAAE,OAAO,CAAC;aACxC,CAAC;QACJ,IAAI,OAAO,CAAC,MAAM,KAAK,EAAE;YACvB,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,SAAS,EAAE,KAAK,EAAE,MAAM,EAAE,YAAY,CAAC,OAAO,EAAE,OAAO,CAAC,EAAE,CAAC;QACrF,OAAO,OAAO,CAAC,+BAA+B,CAAC,CAAC;IAClD,CAAC;IACD,IAAI,OAAO,KAAK,SAAS;QAAE,OAAO,CAAC,8BAA8B,CAAC,CAAC;IACnE,IAAI,OAAO,KAAK,CAAC,IAAI,OAAO,CAAC,MAAM,KAAK,EAAE,EAAE,CAAC;QAC3C,IAAI,CAAC,YAAY,CAAC,OAAO,CAAC;YAAE,OAAO,CAAC,wCAAwC,CAAC,CAAC;QAC9E,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,SAAS,EAAE,KAAK,EAAE,MAAM,EAAE,YAAY,CAAC,MAAM,EAAE,OAAO,CAAC,EAAE,CAAC;IACnF,CAAC;IACD,OAAO,OAAO,CAAC,wCAAwC,CAAC,CAAC;AAC3D,CAAC;AAED,oEAAoE;AACpE,SAAgB,aAAa,CAAC,OAAe,EAAE,MAAqB;IAClE,IAAI,OAAO,OAAO,KAAK,QAAQ,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,CAAC,OAAO,CAAC,CAAC;IAC1E,IAAI,OAAO,CAAC,MAAM,GAAG,WAAW;QAAE,OAAO,CAAC,UAAU,CAAC,CAAC;IACtD,IAAI,CAAC,gBAAgB,CAAC,IAAI,CAAC,OAAO,CAAC;QAAE,OAAO,CAAC,uBAAuB,CAAC,CAAC;IACtE,IAAI,cAAc,CAAC,OAAO,EAAE,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC;QAC3C,OAAO,YAAY,CAAC,OAAO,CAAC,WAAW,EAAE,EAAE,MAAM,CAAC,CAAC;IACrD,CAAC;IACD,IAAI,OAAO,GAAe,IAAI,UAAU,EAAE,CAAC;IAC3C,IAAI,CAAC;QACH,OAAO,GAAG,WAAW,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;IACxC,CAAC;IAAC,MAAM,CAAC;QACP,4EAA4E;QAC5E,OAAO,CAAC,0BAA0B,CAAC,CAAC;IACtC,CAAC;IACD,IAAI,OAAO,CAAC,MAAM,KAAK,EAAE;QAAE,OAAO,CAAC,oBAAoB,CAAC,CAAC;IACzD,MAAM,OAAO,GAAG,OAAO,CAAC,CAAC,CAAC,CAAC;IAC3B,MAAM,IAAI,GAAG,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;IAC9B,IAAI,OAAO,KAAK,MAAM,CAAC,UAAU;QAC/B,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,SAAS,EAAE,OAAO,EAAE,MAAM,EAAE,YAAY,CAAC,OAAO,EAAE,IAAI,CAAC,EAAE,CAAC;IACpF,IAAI,OAAO,KAAK,MAAM,CAAC,UAAU;QAC/B,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,SAAS,EAAE,OAAO,EAAE,MAAM,EAAE,YAAY,CAAC,MAAM,EAAE,IAAI,CAAC,EAAE,CAAC;IAClF,OAAO,OAAO,CAAC,+BAA+B,CAAC,CAAC;AAClD,CAAC;AAED;;;;;GAKG;AACH,SAAgB,iBAAiB,CAC/B,MAAkB,EAClB,MAAqB;IAErB,MAAM,CAAC,EAAE,EAAE,EAAE,EAAE,EAAE,CAAC,GAAG,MAAM,CAAC;IAC5B,MAAM,CAAC,GAAG,MAAM,CAAC,MAAM,CAAC;IACxB,IAAI,IAAoB,CAAC;IACzB,IAAI,OAAmB,CAAC;IACxB,IACE,CAAC,KAAK,EAAE;QACR,EAAE,KAAK,IAAI;QACX,EAAE,KAAK,IAAI;QACX,EAAE,KAAK,IAAI;QACX,MAAM,CAAC,EAAE,CAAC,KAAK,IAAI;QACnB,MAAM,CAAC,EAAE,CAAC,KAAK,IAAI,EACnB,CAAC;QACD,IAAI,GAAG,OAAO,CAAC;QACf,OAAO,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;IAChC,CAAC;SAAM,IAAI,CAAC,KAAK,EAAE,IAAI,EAAE,KAAK,IAAI,IAAI,EAAE,KAAK,IAAI,IAAI,MAAM,CAAC,EAAE,CAAC,KAAK,IAAI,EAAE,CAAC;QACzE,IAAI,GAAG,MAAM,CAAC;QACd,OAAO,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;IAChC,CAAC;SAAM,IAAI,CAAC,KAAK,EAAE,IAAI,EAAE,KAAK,IAAI,IAAI,EAAE,KAAK,IAAI,EAAE,CAAC;QAClD,IAAI,GAAG,QAAQ,CAAC;QAChB,OAAO,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;IAC5B,CAAC;SAAM,IAAI,CAAC,KAAK,EAAE,IAAI,EAAE,KAAK,IAAI,IAAI,EAAE,KAAK,IAAI,EAAE,CAAC;QAClD,IAAI,GAAG,OAAO,CAAC;QACf,OAAO,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;IAC5B,CAAC;SAAM,IAAI,CAAC,KAAK,EAAE,IAAI,EAAE,KAAK,IAAI,IAAI,EAAE,KAAK,IAAI,IAAI,YAAY,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;QACnF,IAAI,GAAG,MAAM,CAAC;QACd,OAAO,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;IAC5B,CAAC;SAAM,CAAC;QACN,OAAO,SAAS,CAAC;IACnB,CAAC;IACD,MAAM,SAAS,GACb,IAAI,KAAK,OAAO,IAAI,IAAI,KAAK,MAAM;QACjC,CAAC,CAAC,WAAW,CAAC,MAAM,CAChB,IAAA,mBAAW,EACT,UAAU,CAAC,EAAE,CAAC,IAAI,KAAK,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC,CAAC,MAAM,CAAC,UAAU,CAAC,EACvE,OAAO,CACR,CACF;QACH,CAAC,CAAC,IAAI,KAAK,MAAM;YACf,CAAC,CAAC,cAAO,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC,EAAE,GAAG,cAAO,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC;YACjE,CAAC,CAAC,aAAM,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC,EAAE,GAAG,aAAM,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC;IACtE,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,MAAM,EAAE,YAAY,CAAC,IAAI,EAAE,OAAO,CAAC,EAAE,CAAC;AAClE,CAAC;AAED;;;GAGG;AACH,SAAS,aAAa,CAAC,SAAqB,EAAE,IAAqB;IACjE,IAAI,SAAS,CAAC,MAAM,KAAK,EAAE,IAAI,IAAI,KAAK,MAAM,EAAE,CAAC;QAC/C,IAAI,CAAC,YAAY,CAAC,SAAS,CAAC;YAAE,OAAO,CAAC,2CAA2C,CAAC,CAAC;QACnF,OAAO,IAAA,mBAAW,EAAC,UAAU,CAAC,EAAE,CAAC,IAAI,CAAC,EAAE,SAAS,CAAC,CAAC;IACrD,CAAC;IACD,IAAI,SAAS,CAAC,MAAM,KAAK,EAAE,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,KAAK,IAAI,IAAI,SAAS,CAAC,CAAC,CAAC,KAAK,IAAI,CAAC,EAAE,CAAC;QAChF,OAAO,CAAC,yCAAyC,CAAC,CAAC;IACrD,CAAC;IACD,IAAI,CAAC;QACH,qBAAS,CAAC,eAAe,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC,cAAc,EAAE,CAAC;IAChE,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,CAAC,oCAAoC,CAAC,CAAC;IAChD,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,0EAA0E;AAC1E,SAAgB,YAAY,CAAC,WAAuB;IAIlD,IAAI,CAAC,YAAY,CAAC,WAAW,CAAC;QAC5B,OAAO,CAAC,iDAAiD,CAAC,CAAC;IAC7D,MAAM,KAAK,GAAG,mBAAO,CAAC,KAAK,CAAC,MAAM,CAAC,mBAAO,CAAC,KAAK,CAAC,eAAe,CAAC,WAAW,CAAC,CAAC,CAAC;IAC/E,MAAM,KAAK,GAAG,mBAAO,CAAC,KAAK,CAAC,UAAU,CAAC,UAAU,EAAE,WAAW,CAAC,CAAC;IAChE,MAAM,CAAC,GAAG,mBAAO,CAAC,KAAK,CAAC,eAAe,CAAC,KAAK,CAAC,CAAC;IAC/C,IAAI,CAAC,IAAI,qBAAS,CAAC,KAAK,CAAC,CAAC;QAAE,OAAO,CAAC,mCAAmC,CAAC,CAAC;IACzE,MAAM,MAAM,GAAG,KAAK,CAAC,GAAG,CAAC,qBAAS,CAAC,eAAe,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC;IACrE,IAAI,MAAM,CAAC,MAAM,CAAC,qBAAS,CAAC,eAAe,CAAC,IAAI,CAAC;QAC/C,OAAO,CAAC,oCAAoC,CAAC,CAAC;IAChD,OAAO,EAAE,KAAK,EAAE,SAAS,EAAE,MAAM,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC;AAChE,CAAC;AAeD,wDAAwD;AACxD,SAAgB,aAAa,CAC3B,SAAqB,EACrB,IAAqB,EACrB,MAAqB;IAErB,MAAM,GAAG,GAAG,aAAa,CAAC,SAAS,EAAE,IAAI,CAAC,CAAC;IAC3C,QAAQ,IAAI,EAAE,CAAC;QACb,KAAK,QAAQ,CAAC,CAAC,CAAC;YACd,MAAM,OAAO,GAAG,IAAA,eAAO,EAAC,GAAG,CAAC,CAAC;YAC7B,OAAO;gBACL,OAAO,EAAE,aAAM,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC,EAAE,GAAG,aAAM,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC;gBACtE,IAAI;gBACJ,MAAM,EAAE,YAAY,CAAC,QAAQ,EAAE,OAAO,CAAC;gBACvC,SAAS,EAAE,GAAG;aACf,CAAC;QACJ,CAAC;QACD,KAAK,aAAa,CAAC,CAAC,CAAC;YACnB,MAAM,YAAY,GAAG,YAAY,CAAC,QAAQ,EAAE,IAAA,eAAO,EAAC,GAAG,CAAC,CAAC,CAAC;YAC1D,MAAM,IAAI,GAAG,IAAA,eAAO,EAAC,YAAY,CAAC,CAAC;YACnC,OAAO;gBACL,OAAO,EAAE,WAAW,CAAC,MAAM,CAAC,IAAA,mBAAW,EAAC,UAAU,CAAC,EAAE,CAAC,MAAM,CAAC,UAAU,CAAC,EAAE,IAAI,CAAC,CAAC;gBAChF,IAAI;gBACJ,MAAM,EAAE,YAAY,CAAC,MAAM,EAAE,IAAI,CAAC;gBAClC,SAAS,EAAE,GAAG;gBACd,YAAY;aACb,CAAC;QACJ,CAAC;QACD,KAAK,OAAO,CAAC,CAAC,CAAC;YACb,MAAM,IAAI,GAAG,IAAA,eAAO,EAAC,GAAG,CAAC,CAAC;YAC1B,OAAO;gBACL,OAAO,EAAE,WAAW,CAAC,MAAM,CAAC,IAAA,mBAAW,EAAC,UAAU,CAAC,EAAE,CAAC,MAAM,CAAC,UAAU,CAAC,EAAE,IAAI,CAAC,CAAC;gBAChF,IAAI;gBACJ,MAAM,EAAE,YAAY,CAAC,OAAO,EAAE,IAAI,CAAC;gBACnC,SAAS,EAAE,GAAG;aACf,CAAC;QACJ,CAAC;QACD,KAAK,MAAM,CAAC,CAAC,CAAC;YACZ,MAAM,WAAW,GAAG,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;YACjC,MAAM,EAAE,KAAK,EAAE,SAAS,EAAE,GAAG,YAAY,CAAC,WAAW,CAAC,CAAC;YACvD,OAAO;gBACL,OAAO,EAAE,cAAO,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC,EAAE,GAAG,cAAO,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC,CAAC;gBAC1E,IAAI;gBACJ,MAAM,EAAE,YAAY,CAAC,MAAM,EAAE,SAAS,CAAC;gBACvC,SAAS,EAAE,WAAW;gBACtB,KAAK;gBACL,SAAS;aACV,CAAC;QACJ,CAAC;IACH,CAAC;AACH,CAAC;AAED,wFAAwF;AACxF,SAAgB,YAAY,CAAC,OAAuB;IAClD,QAAQ,OAAO,CAAC,IAAI,EAAE,CAAC;QACrB,KAAK,QAAQ;YACX,OAAO,QAAQ,CAAC;QAClB,KAAK,MAAM;YACT,OAAO,aAAa,CAAC;QACvB,KAAK,OAAO;YACV,OAAO,OAAO,CAAC;QACjB,KAAK,MAAM;YACT,OAAO,MAAM,CAAC;QAChB,KAAK,OAAO;YACV,MAAM,IAAI,uBAAe,CACvB,gBAAgB,EAChB,4EAA4E,CAC7E,CAAC;IACN,CAAC;AACH,CAAC;AAED,MAAM,SAAS,GAAG,IAAI,CAAC;AACvB,4EAA4E;AAC5E,MAAM,eAAe,GAAG,MAAM,CAAC;AAE/B,sFAAsF;AAC/E,MAAM,WAAW,GAAG,CAAC,CAAS,EAAU,EAAE,CAC/C,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,UAAU,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;AAD9C,QAAA,WAAW,eACmC;AAE3D;;;;GAIG;AACH,SAAgB,aAAa,CAAC,MAAkB,EAAE,YAAoB;IACpE,IAAI,MAAM,CAAC,CAAC,CAAC,KAAK,SAAS,IAAI,MAAM,CAAC,MAAM,GAAG,eAAe;QAAE,OAAO,EAAE,CAAC;IAC1E,MAAM,IAAI,GAAG,MAAM,CAAC,CAAC,GAAG,IAAA,mBAAW,EAAC,MAAM,CAAC,MAAM,CAAC,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC;IACpE,OAAO,CAAC,CAAC,IAAI,GAAG,CAAC,gBAAgB,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,GAAG,YAAY,GAAG,IAAI,CAAC,GAAG,KAAK,CAAC;AAC1F,CAAC;AAED,2FAA2F;AAC3F,SAAS,gBAAgB,CAAC,MAAkB;IAC1C,MAAM,OAAO,GAAG,MAAM,CAAC,CAAC,CAAC,CAAC;IAC1B,IAAI,MAAM,CAAC,MAAM,GAAG,CAAC,IAAI,MAAM,CAAC,MAAM,GAAG,EAAE,IAAI,OAAO,KAAK,SAAS;QAAE,OAAO,KAAK,CAAC;IACnF,IAAI,OAAO,KAAK,IAAI,IAAI,CAAC,OAAO,GAAG,IAAI,IAAI,OAAO,GAAG,IAAI,CAAC;QAAE,OAAO,KAAK,CAAC;IACzE,OAAO,MAAM,CAAC,CAAC,CAAC,KAAK,MAAM,CAAC,MAAM,GAAG,CAAC,CAAC;AACzC,CAAC","sourcesContent":["/**\n * Bitcoin addresses and output scripts, SDK-free (`@scure/base`, `@noble/*`), so the codec\n * is an implementation independent of bitcoinjs-lib, which the tests cross-check it\n * against. Decoding is strict: at most 90 characters, refused before any decoding, one\n * network's HRP and base58 version bytes,\n * bech32 only for witness v0 and bech32m only for v1 (BIP350), exact program lengths, no\n * mixed case, and a taproot output key must be a valid x coordinate. Every failure is\n * `ValidationError('INVALID_ADDRESS')` with a message that names no address.\n */\nimport { schnorr, secp256k1 } from '@noble/curves/secp256k1';\nimport { ripemd160 } from '@noble/hashes/ripemd160';\nimport { sha256 } from '@noble/hashes/sha256';\nimport { bech32, bech32m, createBase58check } from '@scure/base';\nimport { ValidationError } from '../../core/errors/error';\nimport { concatBytes } from '../../core/util/bytes';\nimport type { AddressParams, UtxoAddressType, UtxoOutputType } from './types';\n\nexport type { AddressParams } from './types';\n\nexport interface DecodedAddress {\n  readonly type: UtxoOutputType;\n  /** Lowercase bech32, or the base58 string as given. */\n  readonly canonical: string;\n  readonly script: Uint8Array;\n}\n\nconst base58check = createBase58check(sha256);\n/**\n * BIP173's bech32 limit, and more than any base58 address needs. `@scure/base`'s base58\n * decoding is quadratic, so an untrusted string is capped before any decoding: a\n * 10,000-character recipient once blocked the event loop for over a minute.\n */\nconst ADDRESS_MAX = 90;\nconst BECH32_CHARS = /^[qpzry9x8gf2tvdw0s3jn54khce6mua7l]+$/;\n/** The program length each output script's push byte encodes. */\nconst PROGRAM_LENGTH: Readonly<Record<UtxoOutputType, number>> = Object.freeze({\n  p2pkh: 20,\n  p2sh: 20,\n  p2wpkh: 20,\n  p2wsh: 32,\n  p2tr: 32,\n});\n\nconst invalid = (reason: string): never => {\n  throw new ValidationError('INVALID_ADDRESS', `invalid Bitcoin address: ${reason}`);\n};\n\nexport const hash160 = (data: Uint8Array): Uint8Array => ripemd160(sha256(data));\n\n/** The standard output script of each type; the program must have that type's length. */\nexport function outputScript(type: UtxoOutputType, program: Uint8Array): Uint8Array {\n  if (program.length !== PROGRAM_LENGTH[type]) {\n    invalid('the output program has the wrong length');\n  }\n  switch (type) {\n    case 'p2pkh':\n      return concatBytes(\n        Uint8Array.of(0x76, 0xa9, 0x14),\n        program,\n        Uint8Array.of(0x88, 0xac),\n      );\n    case 'p2sh':\n      return concatBytes(Uint8Array.of(0xa9, 0x14), program, Uint8Array.of(0x87));\n    case 'p2wpkh':\n      return concatBytes(Uint8Array.of(0x00, 0x14), program);\n    case 'p2wsh':\n      return concatBytes(Uint8Array.of(0x00, 0x20), program);\n    case 'p2tr':\n      return concatBytes(Uint8Array.of(0x51, 0x20), program);\n  }\n}\n\n/** Whether 32 bytes are the x coordinate of a curve point (BIP340 `lift_x`). */\nexport function isXOnlyPoint(bytes: Uint8Array): boolean {\n  if (bytes.length !== 32) return false;\n  try {\n    schnorr.utils.lift_x(schnorr.utils.bytesToNumberBE(bytes));\n    return true;\n  } catch {\n    return false;\n  }\n}\n\n/**\n * Whether an address starting with this network's `<hrp>1` has the shape of bech32: one case,\n * and only bech32 characters after the separator. A custom network's base58 address can\n * start with `<hrp>1` too; it is not bech32-shaped, so it takes the base58 path.\n */\nfunction isBech32Shaped(address: string, hrp: string): boolean {\n  const lower = address.toLowerCase();\n  if (!lower.startsWith(`${hrp}1`)) return false;\n  if (address !== lower && address !== address.toUpperCase()) return false;\n  return BECH32_CHARS.test(lower.slice(hrp.length + 1));\n}\n\n/** Decodes a bech32-shaped address, already lowercased (BIP173 allows either case). */\nfunction decodeSegwit(lower: string, params: AddressParams): DecodedAddress {\n  let decoded: { prefix: string; words: number[] } | undefined;\n  let variant: 'bech32' | 'bech32m' | undefined;\n  try {\n    decoded = bech32.decode(lower as `${string}1${string}`, ADDRESS_MAX);\n    variant = 'bech32';\n  } catch {\n    try {\n      decoded = bech32m.decode(lower as `${string}1${string}`, ADDRESS_MAX);\n      variant = 'bech32m';\n    } catch {\n      invalid('bad checksum or encoding');\n    }\n  }\n  const { prefix, words } = decoded as { prefix: string; words: number[] };\n  if (prefix !== params.bech32) invalid('it belongs to another network');\n  const version = words[0];\n  if (version === undefined || version > 16) invalid('bad witness version');\n  let program: Uint8Array = new Uint8Array();\n  try {\n    program = bech32.fromWords(words.slice(1));\n  } catch {\n    invalid('bad witness program padding');\n  }\n  if (version === 0) {\n    if (variant !== 'bech32') invalid('witness v0 must use bech32');\n    if (program.length === 20)\n      return {\n        type: 'p2wpkh',\n        canonical: lower,\n        script: outputScript('p2wpkh', program),\n      };\n    if (program.length === 32)\n      return { type: 'p2wsh', canonical: lower, script: outputScript('p2wsh', program) };\n    return invalid('bad witness v0 program length');\n  }\n  if (variant !== 'bech32m') invalid('witness v1+ must use bech32m');\n  if (version === 1 && program.length === 32) {\n    if (!isXOnlyPoint(program)) invalid('taproot output key is not on the curve');\n    return { type: 'p2tr', canonical: lower, script: outputScript('p2tr', program) };\n  }\n  return invalid('unsupported witness version or program');\n}\n\n/** Decodes an address of this network; throws `INVALID_ADDRESS`. */\nexport function decodeAddress(address: string, params: AddressParams): DecodedAddress {\n  if (typeof address !== 'string' || address.length === 0) invalid('empty');\n  if (address.length > ADDRESS_MAX) invalid('too long');\n  if (!/^[0-9A-Za-z]+$/.test(address)) invalid('unexpected characters');\n  if (isBech32Shaped(address, params.bech32)) {\n    return decodeSegwit(address.toLowerCase(), params);\n  }\n  let payload: Uint8Array = new Uint8Array();\n  try {\n    payload = base58check.decode(address);\n  } catch {\n    // A segwit address of another network, or a mixed-case one, lands here too.\n    invalid('bad checksum or encoding');\n  }\n  if (payload.length !== 21) invalid('bad payload length');\n  const version = payload[0];\n  const hash = payload.slice(1);\n  if (version === params.pubKeyHash)\n    return { type: 'p2pkh', canonical: address, script: outputScript('p2pkh', hash) };\n  if (version === params.scriptHash)\n    return { type: 'p2sh', canonical: address, script: outputScript('p2sh', hash) };\n  return invalid('it belongs to another network');\n}\n\n/**\n * The address an output script pays on this network: the inverse of `outputScript` for the\n * five standard types, as `decodeAddress` returns it. Any other script (a bare key or\n * multisig, a data carrier, a future witness version or program length) has no address, and\n * neither has a taproot key off the curve, which `decodeAddress` refuses.\n */\nexport function addressFromScript(\n  script: Uint8Array,\n  params: AddressParams,\n): DecodedAddress | undefined {\n  const [b0, b1, b2] = script;\n  const n = script.length;\n  let type: UtxoOutputType;\n  let program: Uint8Array;\n  if (\n    n === 25 &&\n    b0 === 0x76 &&\n    b1 === 0xa9 &&\n    b2 === 0x14 &&\n    script[23] === 0x88 &&\n    script[24] === 0xac\n  ) {\n    type = 'p2pkh';\n    program = script.slice(3, 23);\n  } else if (n === 23 && b0 === 0xa9 && b1 === 0x14 && script[22] === 0x87) {\n    type = 'p2sh';\n    program = script.slice(2, 22);\n  } else if (n === 22 && b0 === 0x00 && b1 === 0x14) {\n    type = 'p2wpkh';\n    program = script.slice(2);\n  } else if (n === 34 && b0 === 0x00 && b1 === 0x20) {\n    type = 'p2wsh';\n    program = script.slice(2);\n  } else if (n === 34 && b0 === 0x51 && b1 === 0x20 && isXOnlyPoint(script.slice(2))) {\n    type = 'p2tr';\n    program = script.slice(2);\n  } else {\n    return undefined;\n  }\n  const canonical =\n    type === 'p2pkh' || type === 'p2sh'\n      ? base58check.encode(\n          concatBytes(\n            Uint8Array.of(type === 'p2pkh' ? params.pubKeyHash : params.scriptHash),\n            program,\n          ),\n        )\n      : type === 'p2tr'\n        ? bech32m.encode(params.bech32, [1, ...bech32m.toWords(program)])\n        : bech32.encode(params.bech32, [0, ...bech32.toWords(program)]);\n  return { type, canonical, script: outputScript(type, program) };\n}\n\n/**\n * Accepts only a 33-byte compressed key on the curve; a 32-byte x-only key only for\n * `p2tr` (a Schnorr-only signer's key). Never a private key, never an uncompressed key.\n */\nfunction compressedKey(publicKey: Uint8Array, type: UtxoAddressType): Uint8Array {\n  if (publicKey.length === 32 && type === 'p2tr') {\n    if (!isXOnlyPoint(publicKey)) invalid('the x-only public key is not on the curve');\n    return concatBytes(Uint8Array.of(0x02), publicKey);\n  }\n  if (publicKey.length !== 33 || (publicKey[0] !== 0x02 && publicKey[0] !== 0x03)) {\n    invalid('a public key must be 33-byte compressed');\n  }\n  try {\n    secp256k1.ProjectivePoint.fromHex(publicKey).assertValidity();\n  } catch {\n    invalid('the public key is not on the curve');\n  }\n  return publicKey;\n}\n\n/** BIP341/BIP86 key-path tweak of an internal key with no script tree. */\nexport function taprootTweak(internalKey: Uint8Array): {\n  readonly tweak: Uint8Array;\n  readonly outputKey: Uint8Array;\n} {\n  if (!isXOnlyPoint(internalKey))\n    invalid('the taproot internal key is not an x-only point');\n  const point = schnorr.utils.lift_x(schnorr.utils.bytesToNumberBE(internalKey));\n  const tweak = schnorr.utils.taggedHash('TapTweak', internalKey);\n  const t = schnorr.utils.bytesToNumberBE(tweak);\n  if (t >= secp256k1.CURVE.n) invalid('the taproot tweak is out of range');\n  const output = point.add(secp256k1.ProjectivePoint.BASE.multiply(t));\n  if (output.equals(secp256k1.ProjectivePoint.ZERO))\n    invalid('the taproot output key is infinity');\n  return { tweak, outputKey: output.toRawBytes(true).slice(1) };\n}\n\nexport interface WalletAddress {\n  readonly address: string;\n  readonly type: UtxoAddressType;\n  readonly script: Uint8Array;\n  /** The key the wallet signs with: compressed (ECDSA) or x-only internal key (p2tr). */\n  readonly publicKey: Uint8Array;\n  /** p2sh-p2wpkh: the redeem script pushed in the scriptSig. */\n  readonly redeemScript?: Uint8Array;\n  /** p2tr: the BIP341 tweak and the tweaked output key the signature verifies against. */\n  readonly tweak?: Uint8Array;\n  readonly outputKey?: Uint8Array;\n}\n\n/** The wallet address of `type` for this public key. */\nexport function walletAddress(\n  publicKey: Uint8Array,\n  type: UtxoAddressType,\n  params: AddressParams,\n): WalletAddress {\n  const key = compressedKey(publicKey, type);\n  switch (type) {\n    case 'p2wpkh': {\n      const program = hash160(key);\n      return {\n        address: bech32.encode(params.bech32, [0, ...bech32.toWords(program)]),\n        type,\n        script: outputScript('p2wpkh', program),\n        publicKey: key,\n      };\n    }\n    case 'p2sh-p2wpkh': {\n      const redeemScript = outputScript('p2wpkh', hash160(key));\n      const hash = hash160(redeemScript);\n      return {\n        address: base58check.encode(concatBytes(Uint8Array.of(params.scriptHash), hash)),\n        type,\n        script: outputScript('p2sh', hash),\n        publicKey: key,\n        redeemScript,\n      };\n    }\n    case 'p2pkh': {\n      const hash = hash160(key);\n      return {\n        address: base58check.encode(concatBytes(Uint8Array.of(params.pubKeyHash), hash)),\n        type,\n        script: outputScript('p2pkh', hash),\n        publicKey: key,\n      };\n    }\n    case 'p2tr': {\n      const internalKey = key.slice(1);\n      const { tweak, outputKey } = taprootTweak(internalKey);\n      return {\n        address: bech32m.encode(params.bech32, [1, ...bech32m.toWords(outputKey)]),\n        type,\n        script: outputScript('p2tr', outputKey),\n        publicKey: internalKey,\n        tweak,\n        outputKey,\n      };\n    }\n  }\n}\n\n/** The wallet address type a sending address implies (a p2sh wallet is p2sh-p2wpkh). */\nexport function walletTypeOf(decoded: DecodedAddress): UtxoAddressType {\n  switch (decoded.type) {\n    case 'p2wpkh':\n      return 'p2wpkh';\n    case 'p2sh':\n      return 'p2sh-p2wpkh';\n    case 'p2pkh':\n      return 'p2pkh';\n    case 'p2tr':\n      return 'p2tr';\n    case 'p2wsh':\n      throw new ValidationError(\n        'INVALID_INTENT',\n        'p2wsh (script) wallets cannot send; use p2wpkh, p2sh-p2wpkh, p2pkh or p2tr',\n      );\n  }\n}\n\nconst OP_RETURN = 0x6a;\n/** Bitcoin Core's `MAX_SCRIPT_SIZE`: a longer script can never be spent. */\nconst MAX_SCRIPT_SIZE = 10_000;\n\n/** The byte length of Bitcoin's CompactSize encoding of `n` (a count or a length). */\nexport const compactSize = (n: number): number =>\n  n < 0xfd ? 1 : n <= 0xffff ? 3 : n <= 0xffffffff ? 5 : 9;\n\n/**\n * Bitcoin Core's `GetDustThreshold` (policy.cpp) at `dustRelayFee` sat/kvB, rounded up.\n * An unspendable script (`IsUnspendable`: OP_RETURN first, or over `MAX_SCRIPT_SIZE`) has\n * no dust threshold.\n */\nexport function dustThreshold(script: Uint8Array, dustRelayFee: bigint): bigint {\n  if (script[0] === OP_RETURN || script.length > MAX_SCRIPT_SIZE) return 0n;\n  const size = BigInt(8 + compactSize(script.length) + script.length);\n  return ((size + (isWitnessProgram(script) ? 67n : 148n)) * dustRelayFee + 999n) / 1000n;\n}\n\n/** Bitcoin Core's `IsWitnessProgram`: a version opcode, then one push of 2 to 40 bytes. */\nfunction isWitnessProgram(script: Uint8Array): boolean {\n  const version = script[0];\n  if (script.length < 4 || script.length > 42 || version === undefined) return false;\n  if (version !== 0x00 && (version < 0x51 || version > 0x60)) return false;\n  return script[1] === script.length - 2;\n}\n"]}

package/dist/adapters/utxo/builder.d.ts

@@ -0,0 +1,35 @@
+/**
+ * The UTXO builder, broadcaster and RBF replacement policy.
+ *
+ * - `build` spends only outputs not held by another live Operation (`ctx.excludeInputs`),
+ *   pays change to the wallet's change address, and records the spent outpoints as the
+ *   `inputs` ordering. The fee is `exact` once built; the absurd-fee guard runs first.
+ * - Every input a build, a replacement or a cancel spends is authenticated against its
+ *   previous transaction first: the indexer's value and script count only when the
+ *   bytes that hash to the outpoint's txid say the same. A lied value could burn the
+ *   difference as fee, or make our own signed bytes invalid for good and stall the
+ *   Operation with its inputs held.
+ * - Replacements and cancels keep EVERY input of the Attempt they replace (and may add
+ *   confirmed ones), so each new Attempt conflicts with every earlier one (exclusion is
+ *   not transitive). Neither ever raises a fee on its own: a fee below the
+ *   replacement floor is `FEE_TOO_LOW`.
+ * - A cancel pays everything back to the sending address itself.
+ * - Broadcast answers are classified by `errors.ts`; an ambiguous transport failure is
+ *   rethrown unclassified. A node's rejection is a claim: it stands only when its reason
+ *   holds for the bytes that were sent, checked here; else `refused`. A terminal
+ *   `rejected` frees the inputs, so a lying endpoint that relayed our valid bytes would
+ *   let the caller's retry spend other coins, and both transactions could confirm.
+ */
+import type { Broadcaster, ReplacementPolicy, TxBuilder } from '../../core/driver/types';
+import type { RawTx, UnsignedTx } from '../../core/model/transaction';
+import type { SignatureBundle } from '../../core/signing/types';
+import { type UtxoContext } from './context';
+import type { Network } from './sdk';
+/** At most this many previous transactions are read at once for one build. */
+export declare const PREVIOUS_TX_READS = 4;
+export interface UtxoBuilder extends TxBuilder {
+    signaturesFrom(unsigned: UnsignedTx, signed: RawTx): readonly SignatureBundle[];
+}
+export declare function utxoBuilder(ctx: UtxoContext, network: Network): UtxoBuilder;
+export declare function utxoBroadcaster(ctx: UtxoContext): Broadcaster;
+export declare function utxoReplacement(ctx: UtxoContext, network: Network): ReplacementPolicy;