crypto-aio 0.0.2 → 0.1.0

package/dist/adapters/utxo/sdk.js

@@ -0,0 +1,17 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.bitcoin = void 0;
+exports.useNobleEcc = useNobleEcc;
+const ecc_1 = require("./ecc");
+// eslint-disable-next-line @typescript-eslint/no-require-imports
+exports.bitcoin = require('bitcoinjs-lib');
+/**
+ * Installs the `@noble/curves` backend (no WASM, no tiny-secp256k1). bitcoinjs
+ * verifies it against its own test vectors the first time, and skips a repeat install of
+ * the same object, so calling this before every taproot use is cheap and undoes a
+ * `native()` caller who swapped the library-global backend.
+ */
+function useNobleEcc() {
+    exports.bitcoin.initEccLib(ecc_1.nobleEcc);
+}
+//# sourceMappingURL=sdk.js.map

package/dist/adapters/utxo/sdk.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sdk.js","sourceRoot":"","sources":["../../../src/adapters/utxo/sdk.ts"],"names":[],"mappings":";;;AAsBA,kCAEC;AAjBD,+BAAiC;AAEjC,iEAAiE;AACpD,QAAA,OAAO,GAAG,OAAO,CAAC,eAAe,CAAmB,CAAC;AAMlE;;;;;GAKG;AACH,SAAgB,WAAW;IACzB,eAAO,CAAC,UAAU,CAAC,cAAQ,CAAC,CAAC;AAC/B,CAAC","sourcesContent":["/**\n * The one place that loads bitcoinjs-lib. Its 7.x package is an ES module with a CommonJS\n * build (`require` condition), so this CommonJS library `require()`s it at run time and\n * takes its types with `resolution-mode: 'import'` (TypeScript refuses a plain CommonJS\n * import of an ES module's types, TS1479). Loaded only through the manifest's `load()`.\n */\nimport type * as Bitcoin from 'bitcoinjs-lib' with { 'resolution-mode': 'import' };\nimport { nobleEcc } from './ecc';\n\n// eslint-disable-next-line @typescript-eslint/no-require-imports\nexport const bitcoin = require('bitcoinjs-lib') as typeof Bitcoin;\n\nexport type Network = Bitcoin.Network;\nexport type Psbt = Bitcoin.Psbt;\nexport type Transaction = Bitcoin.Transaction;\n\n/**\n * Installs the `@noble/curves` backend (no WASM, no tiny-secp256k1). bitcoinjs\n * verifies it against its own test vectors the first time, and skips a repeat install of\n * the same object, so calling this before every taproot use is cheap and undoes a\n * `native()` caller who swapped the library-global backend.\n */\nexport function useNobleEcc(): void {\n  bitcoin.initEccLib(nobleEcc);\n}\n"]}

package/dist/adapters/utxo/signed-psbt.d.ts

@@ -0,0 +1,36 @@
+/**
+ * The reader of a PSBT signed elsewhere: a cold signer's or a coordinator's copy of our
+ * PSBT is untrusted input. It is capped before decoding and parsed strictly. What could
+ * change the spend is refused: another unsigned transaction, a changed previous output,
+ * redeem script or internal key, an input script path, or a foreign, cross-scheme or
+ * other-sighash signature. What cannot change it is ignored: key origins, the output
+ * scripts a coordinator adds for change detection, proprietary keys and PSBT version 0.
+ * Only signature bytes are taken, and the core verifies them against the stored requests.
+ * Every refusal is `ValidationError('INVALID_INTENT')` with a fixed text. Synchronous and
+ * I/O-free.
+ */
+import { ValidationError } from '../../core/errors/error';
+import { type Network, type Psbt } from './sdk';
+export declare const SIGHASH_ALL = 1;
+export declare const SIGHASH_DEFAULT = 0;
+export type PsbtInput = Psbt['data']['inputs'][number];
+export declare const signedPsbtError: (reason: string) => ValidationError;
+/**
+ * A PSBT signed elsewhere, parsed strictly: capped before decoding, ASCII
+ * whitespace trimmed at the ends, canonical base64 (the SDK's decoder skips junk), and no
+ * bytes after its maps.
+ */
+export declare function parseSigned(text: string, stored: Psbt, storedBase64: string, network: Network): Psbt;
+/**
+ * Every field of a signed copy whose unsigned transaction is already ours: the global map,
+ * each output and each input (see the allowlists and `assertUnchanged`).
+ */
+export declare function assertSignedFields(signed: Psbt, stored: Psbt): void;
+/** p2tr: the key-path signature (BIP341, SIGHASH_DEFAULT, 64 bytes), partial or final. */
+export declare function schnorrSignatureOf(input: PsbtInput): Uint8Array | undefined;
+/**
+ * ECDSA: the signature of `publicKey` (strict DER, SIGHASH_ALL, returned as 64-byte r‖s),
+ * partial or final: `<sig> <key>` in the scriptSig for p2pkh; in the witness for segwit v0,
+ * whose scriptSig is empty or, for p2sh-p2wpkh, the push of our redeem script.
+ */
+export declare function ecdsaSignatureOf(publicKey: Uint8Array, input: PsbtInput, stored: PsbtInput): Uint8Array | undefined;

package/dist/adapters/utxo/signed-psbt.js

@@ -0,0 +1,428 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.signedPsbtError = exports.SIGHASH_DEFAULT = exports.SIGHASH_ALL = void 0;
+exports.parseSigned = parseSigned;
+exports.assertSignedFields = assertSignedFields;
+exports.schnorrSignatureOf = schnorrSignatureOf;
+exports.ecdsaSignatureOf = ecdsaSignatureOf;
+/**
+ * The reader of a PSBT signed elsewhere: a cold signer's or a coordinator's copy of our
+ * PSBT is untrusted input. It is capped before decoding and parsed strictly. What could
+ * change the spend is refused: another unsigned transaction, a changed previous output,
+ * redeem script or internal key, an input script path, or a foreign, cross-scheme or
+ * other-sighash signature. What cannot change it is ignored: key origins, the output
+ * scripts a coordinator adds for change detection, proprietary keys and PSBT version 0.
+ * Only signature bytes are taken, and the core verifies them against the stored requests.
+ * Every refusal is `ValidationError('INVALID_INTENT')` with a fixed text. Synchronous and
+ * I/O-free.
+ */
+const error_1 = require("../../core/errors/error");
+const bytes_1 = require("../../core/util/bytes");
+const rawtx_1 = require("./rawtx");
+const sdk_1 = require("./sdk");
+exports.SIGHASH_ALL = 0x01;
+exports.SIGHASH_DEFAULT = 0x00;
+const signedPsbtError = (reason) => new error_1.ValidationError('INVALID_INTENT', `the signed PSBT ${reason}`);
+exports.signedPsbtError = signedPsbtError;
+const sighashError = (expected) => (0, exports.signedPsbtError)(`uses a sighash type other than ${expected}`);
+const shapeError = () => (0, exports.signedPsbtError)('carries a final script of another shape');
+const fieldError = () => (0, exports.signedPsbtError)('carries a field a signer does not add');
+const changedError = () => (0, exports.signedPsbtError)('changes the prepared transaction');
+/**
+ * What a signer may add to each map of our PSBT (signatures, final scripts, a sighash type,
+ * key origins, change-output scripts, proprietary keys): well under 1 KiB per input for one
+ * key. A larger PSBT is not a signed copy of ours, and is refused before it is decoded.
+ */
+const SIGNED_GROWTH_PER_MAP = 4_096;
+/**
+ * Room for the previous transaction a coordinator may add to a non-taproot input of ours
+ * that lacks one (`nonWitnessUtxo` off): a standard transaction's largest stripped size
+ * (`MAX_STANDARD_TX_WEIGHT` / 4).
+ */
+const ADDED_PREVIOUS_TX = 100_000;
+/**
+ * What coordinators may add in all, whatever the number of inputs: one block (Bitcoin
+ * Core's `MAX_BLOCK_SERIALIZED_SIZE`), so the decoding it costs stays bounded. Unbounded,
+ * 160 inputs with `nonWitnessUtxo` off took 8 s of synchronous decoding.
+ */
+const ADDED_PREVIOUS_TXS = 4_000_000;
+/** BIP174 key types a signed copy may carry but we never read. */
+const PROPRIETARY = 0xfc;
+const GLOBAL_VERSION = 0xfb;
+/** Key origins (BIP32 derivations), which a signer or a coordinator may add. */
+const KEY_ORIGINS = ['bip32Derivation', 'tapBip32Derivation'];
+/**
+ * The fields a signed copy of our PSBT may carry. `unknownKeyVals` holds every key bip174
+ * does not know, and only proprietary keys (and, globally, version 0) may be among them.
+ */
+const SIGNED_GLOBAL_FIELDS = new Set([
+    'unsignedTx',
+    'globalXpub',
+    'unknownKeyVals',
+]);
+/**
+ * Per input: signatures, final scripts, a sighash type, key origins, and our own fields
+ * unchanged (or a verified previous transaction). The script-path fields (`witnessScript`,
+ * `tapLeafScript`, `tapScriptSig`, `tapMerkleRoot`) and `porCommitment` are refused.
+ */
+const SIGNED_INPUT_FIELDS = new Set([
+    ...KEY_ORIGINS,
+    'partialSig',
+    'tapKeySig',
+    'finalScriptSig',
+    'finalScriptWitness',
+    'sighashType',
+    'witnessUtxo',
+    'nonWitnessUtxo',
+    'redeemScript',
+    'tapInternalKey',
+    'unknownKeyVals',
+]);
+/**
+ * Per output: key origins and the scripts Core's `UpdatePSBTOutput` adds so a hardware
+ * wallet recognizes change. None is read: the outputs are fixed by the unsigned transaction.
+ */
+const SIGNED_OUTPUT_FIELDS = new Set([
+    ...KEY_ORIGINS,
+    'redeemScript',
+    'witnessScript',
+    'tapInternalKey',
+    'tapTree',
+    'unknownKeyVals',
+]);
+/** Our taproot inputs carry their internal key (`buildTx`). */
+const isTaproot = (stored) => stored.tapInternalKey !== undefined;
+/** ASCII whitespace (C `isspace`), trimmed at both ends of a pasted or file-read PSBT. */
+const ASCII_SPACE = new Set([0x09, 0x0a, 0x0b, 0x0c, 0x0d, 0x20]);
+function trimAsciiSpace(text) {
+    let start = 0;
+    let end = text.length;
+    while (start < end && ASCII_SPACE.has(text.charCodeAt(start)))
+        start++;
+    while (end > start && ASCII_SPACE.has(text.charCodeAt(end - 1)))
+        end--;
+    return text.slice(start, end);
+}
+/**
+ * Whether PSBT bytes end right after their maps (BIP174: the global map, then one per input
+ * and one per output), with every key and value length a minimal CompactSize inside the
+ * bytes. bip174 ignores whatever follows the last map.
+ */
+function endsAfterMaps(bytes, maps) {
+    let offset = 5; // the magic `psbt` and 0xff, which the parser has checked
+    const length = () => {
+        const first = bytes[offset];
+        if (first === undefined)
+            return undefined;
+        const width = first < 0xfd ? 0 : first === 0xfd ? 2 : first === 0xfe ? 4 : 8;
+        if (offset + 1 + width > bytes.length)
+            return undefined;
+        let value = width === 0 ? first : 0;
+        for (let i = width; i >= 1; i--)
+            value = value * 256 + bytes[offset + i];
+        offset += 1 + width;
+        const least = width === 0 ? 0 : width === 2 ? 0xfd : width === 4 ? 0x1_0000 : 2 ** 32;
+        return value < least ? undefined : value;
+    };
+    for (let map = 0; map < maps; map++) {
+        for (;;) {
+            const keyLength = length();
+            if (keyLength === undefined)
+                return false;
+            if (keyLength === 0)
+                break;
+            offset += keyLength;
+            const valueLength = length();
+            if (valueLength === undefined)
+                return false;
+            offset += valueLength;
+        }
+    }
+    return offset === bytes.length;
+}
+/**
+ * The value of the global map's `PSBT_GLOBAL_UNSIGNED_TX` (key `0x00`) of PSBT bytes, read
+ * without decoding it; `undefined` when the magic or the global map is malformed, or it has
+ * no such key.
+ */
+function globalUnsignedTx(bytes) {
+    const magic = [0x70, 0x73, 0x62, 0x74, 0xff];
+    if (!magic.every((byte, index) => bytes[index] === byte))
+        return undefined;
+    let offset = 5;
+    const length = () => {
+        const first = bytes[offset];
+        if (first === undefined)
+            return undefined;
+        const width = first < 0xfd ? 0 : first === 0xfd ? 2 : first === 0xfe ? 4 : 8;
+        if (offset + 1 + width > bytes.length)
+            return undefined;
+        let value = width === 0 ? first : 0;
+        for (let i = width; i >= 1; i--)
+            value = value * 256 + bytes[offset + i];
+        offset += 1 + width;
+        return value;
+    };
+    for (;;) {
+        const keyLength = length();
+        if (keyLength === undefined || offset + keyLength > bytes.length)
+            return undefined;
+        if (keyLength === 0)
+            return undefined; // the end of the global map: no unsigned tx
+        const unsignedKey = keyLength === 1 && bytes[offset] === 0x00;
+        offset += keyLength;
+        const valueLength = length();
+        if (valueLength === undefined || offset + valueLength > bytes.length)
+            return undefined;
+        if (unsignedKey)
+            return bytes.subarray(offset, offset + valueLength);
+        offset += valueLength;
+    }
+}
+/**
+ * Canonical base64 (the standard alphabet, padded), or `undefined`. Node's decoder is
+ * linear and far faster than a pure-JS one (a few milliseconds for 4 million characters,
+ * against about 300), but it skips what it cannot read, so the bytes count only when they
+ * encode back to exactly `text`.
+ */
+function canonicalBase64(text) {
+    if (text.length % 4 !== 0)
+        return undefined;
+    const bytes = Buffer.from(text, 'base64');
+    if (bytes.toString('base64') !== text)
+        return undefined;
+    return new Uint8Array(bytes.buffer, bytes.byteOffset, bytes.length);
+}
+/**
+ * A PSBT signed elsewhere, parsed strictly: capped before decoding, ASCII
+ * whitespace trimmed at the ends, canonical base64 (the SDK's decoder skips junk), and no
+ * bytes after its maps.
+ */
+function parseSigned(text, stored, storedBase64, network) {
+    if (typeof text !== 'string')
+        throw (0, exports.signedPsbtError)('does not decode');
+    const maps = 1 + stored.inputCount + stored.txOutputs.length;
+    const added = stored.data.inputs.filter((input) => input.nonWitnessUtxo === undefined && !isTaproot(input)).length;
+    const room = maps * SIGNED_GROWTH_PER_MAP +
+        Math.min(added * ADDED_PREVIOUS_TX, ADDED_PREVIOUS_TXS);
+    if (text.length > storedBase64.length + Math.ceil(room / 3) * 4) {
+        throw (0, exports.signedPsbtError)('is too large');
+    }
+    const bytes = canonicalBase64(trimAsciiSpace(text));
+    if (!bytes)
+        throw (0, exports.signedPsbtError)('does not decode');
+    // The unsigned transaction it carries must be ours byte for byte before bitcoinjs
+    // decodes it (its decoder is quadratic in the inputs and outputs).
+    const unsigned = globalUnsignedTx(bytes);
+    if (!unsigned)
+        throw (0, exports.signedPsbtError)('does not decode');
+    if (!(0, bytes_1.equalBytes)(unsigned, stored.data.globalMap.unsignedTx.toBuffer())) {
+        throw (0, exports.signedPsbtError)('is not the prepared transaction');
+    }
+    let signed;
+    try {
+        signed = sdk_1.bitcoin.Psbt.fromBuffer(bytes, { network });
+    }
+    catch {
+        throw (0, exports.signedPsbtError)('does not decode');
+    }
+    if (!endsAfterMaps(bytes, 1 + signed.inputCount + signed.txOutputs.length)) {
+        throw (0, exports.signedPsbtError)('does not decode');
+    }
+    return signed;
+}
+/** Refuses any field outside `allowed`, and any unknown key but those we ignore. */
+function assertOnly(fields, allowed, global) {
+    for (const name of Object.keys(fields)) {
+        if (!allowed.has(name))
+            throw fieldError();
+    }
+    for (const { key, value } of fields.unknownKeyVals ?? []) {
+        const versionZero = global &&
+            key.length === 1 &&
+            key[0] === GLOBAL_VERSION &&
+            value.length === 4 &&
+            value.every((byte) => byte === 0);
+        if (key[0] !== PROPRIETARY && !versionZero)
+            throw fieldError();
+    }
+}
+/**
+ * A previous transaction on a signed input (BIP174 `non_witness_utxo`): it must decode
+ * strictly and hash to the outpoint's txid, which fixes every byte but the witness (Core
+ * writes it without one), and pay the output our PSBT spends. A coordinator may add one to a
+ * non-taproot input of ours that lacks it; taproot never carries one (BIP341 commits to
+ * every amount). It is never read.
+ */
+function assertPreviousTx(bytes, stored, outpoint) {
+    if (isTaproot(stored))
+        throw changedError();
+    // Our own previous transaction, byte for byte, which `buildTx` checked: no decode.
+    if (stored.nonWitnessUtxo !== undefined && (0, bytes_1.equalBytes)(bytes, stored.nonWitnessUtxo)) {
+        return;
+    }
+    // Read in one linear pass, its txid hashed from the bytes (bitcoinjs' decoder is
+    // quadratic), and capped at the million bytes without witness a chain can hold.
+    const prev = (0, rawtx_1.readTx)(bytes);
+    if (!prev)
+        throw (0, exports.signedPsbtError)('does not decode');
+    const output = prev.outputs[outpoint.vout];
+    const ours = stored.witnessUtxo;
+    if (prev.txid !== outpoint.txid ||
+        !output ||
+        (ours !== undefined &&
+            (output.value !== ours.value || !(0, bytes_1.equalBytes)(output.script, ours.script)))) {
+        throw changedError();
+    }
+}
+/**
+ * Our fields a signed input carries unchanged, or not at all (a finalizer drops some): its
+ * previous output, redeem script and taproot internal key; a previous transaction is checked
+ * by its txid. A signed PSBT never decides an amount or a script.
+ */
+function assertUnchanged(signed, stored, outpoint) {
+    const same = (a, b) => a === undefined || (b !== undefined && (0, bytes_1.equalBytes)(a, b));
+    const utxo = signed.witnessUtxo;
+    if (!same(signed.redeemScript, stored.redeemScript) ||
+        !same(signed.tapInternalKey, stored.tapInternalKey) ||
+        (utxo !== undefined &&
+            (stored.witnessUtxo === undefined ||
+                utxo.value !== stored.witnessUtxo.value ||
+                !(0, bytes_1.equalBytes)(utxo.script, stored.witnessUtxo.script)))) {
+        throw changedError();
+    }
+    if (signed.nonWitnessUtxo !== undefined) {
+        assertPreviousTx(signed.nonWitnessUtxo, stored, outpoint);
+    }
+}
+/**
+ * Every field of a signed copy whose unsigned transaction is already ours: the global map,
+ * each output and each input (see the allowlists and `assertUnchanged`).
+ */
+function assertSignedFields(signed, stored) {
+    assertOnly(signed.data.globalMap, SIGNED_GLOBAL_FIELDS, true);
+    for (const output of signed.data.outputs)
+        assertOnly(output, SIGNED_OUTPUT_FIELDS, false);
+    const outpoints = stored.txInputs.map((input) => ({
+        txid: (0, bytes_1.toHex)(Uint8Array.from(input.hash).reverse()),
+        vout: input.index,
+    }));
+    signed.data.inputs.forEach((input, index) => {
+        assertOnly(input, SIGNED_INPUT_FIELDS, false);
+        assertUnchanged(input, stored.data.inputs[index], outpoints[index]);
+    });
+}
+/** Pushes of a script, or `undefined` when it is not push-only. */
+function pushes(script) {
+    const chunks = sdk_1.bitcoin.script.decompile(script);
+    if (!chunks || chunks.some((c) => typeof c === 'number'))
+        return undefined;
+    return chunks;
+}
+/** A serialized witness stack (BIP144): a count, then length-prefixed items. */
+function witnessItems(witness) {
+    let offset = 0;
+    const varint = () => {
+        const first = witness[offset];
+        if (first === undefined || first >= 0xfd)
+            return undefined; // no item this long here
+        offset += 1;
+        return first;
+    };
+    const count = varint();
+    if (count === undefined)
+        return undefined;
+    const items = [];
+    for (let i = 0; i < count; i++) {
+        const length = varint();
+        if (length === undefined || offset + length > witness.length)
+            return undefined;
+        items.push(witness.slice(offset, offset + length));
+        offset += length;
+    }
+    return offset === witness.length ? items : undefined;
+}
+/** p2tr: the key-path signature (BIP341, SIGHASH_DEFAULT, 64 bytes), partial or final. */
+function schnorrSignatureOf(input) {
+    if (input.partialSig)
+        throw (0, exports.signedPsbtError)('carries a signature of another scheme');
+    if (input.sighashType !== undefined && input.sighashType !== exports.SIGHASH_DEFAULT) {
+        throw sighashError('SIGHASH_DEFAULT');
+    }
+    if (input.finalScriptSig !== undefined && input.finalScriptSig.length > 0) {
+        throw shapeError();
+    }
+    const found = [];
+    if (input.tapKeySig)
+        found.push(input.tapKeySig);
+    if (input.finalScriptWitness) {
+        const items = witnessItems(input.finalScriptWitness);
+        if (items?.length !== 1)
+            throw shapeError();
+        found.push(items[0]);
+    }
+    for (const signature of found) {
+        if (signature.length === 65)
+            throw sighashError('SIGHASH_DEFAULT');
+        if (signature.length !== 64)
+            throw (0, exports.signedPsbtError)('carries a malformed signature');
+    }
+    return found[0];
+}
+/**
+ * ECDSA: the signature of `publicKey` (strict DER, SIGHASH_ALL, returned as 64-byte r‖s),
+ * partial or final: `<sig> <key>` in the scriptSig for p2pkh; in the witness for segwit v0,
+ * whose scriptSig is empty or, for p2sh-p2wpkh, the push of our redeem script.
+ */
+function ecdsaSignatureOf(publicKey, input, stored) {
+    if (input.tapKeySig)
+        throw (0, exports.signedPsbtError)('carries a signature of another scheme');
+    if (input.sighashType !== undefined && input.sighashType !== exports.SIGHASH_ALL) {
+        throw sighashError('SIGHASH_ALL');
+    }
+    const found = [];
+    for (const partial of input.partialSig ?? []) {
+        if (!(0, bytes_1.equalBytes)(partial.pubkey, publicKey)) {
+            throw (0, exports.signedPsbtError)('carries a signature for another key');
+        }
+        found.push(partial.signature);
+    }
+    const ours = (stack) => {
+        if (stack?.length !== 2 || !(0, bytes_1.equalBytes)(stack[1], publicKey)) {
+            throw shapeError();
+        }
+        return stack[0];
+    };
+    if (stored.witnessUtxo === undefined) {
+        if (input.finalScriptWitness !== undefined)
+            throw shapeError();
+        if (input.finalScriptSig !== undefined)
+            found.push(ours(pushes(input.finalScriptSig)));
+    }
+    else {
+        const scriptSig = stored.redeemScript
+            ? sdk_1.bitcoin.script.compile([stored.redeemScript])
+            : new Uint8Array();
+        if (input.finalScriptSig !== undefined &&
+            !(0, bytes_1.equalBytes)(input.finalScriptSig, scriptSig)) {
+            throw shapeError();
+        }
+        if (input.finalScriptWitness !== undefined) {
+            found.push(ours(witnessItems(input.finalScriptWitness)));
+        }
+    }
+    const signatures = found.map((der) => {
+        let decoded;
+        try {
+            decoded = sdk_1.bitcoin.script.signature.decode(der);
+        }
+        catch {
+            throw (0, exports.signedPsbtError)('carries a malformed signature');
+        }
+        if (decoded.hashType !== exports.SIGHASH_ALL)
+            throw sighashError('SIGHASH_ALL');
+        return decoded.signature;
+    });
+    return signatures[0];
+}
+//# sourceMappingURL=signed-psbt.js.map

package/dist/adapters/utxo/signed-psbt.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"signed-psbt.js","sourceRoot":"","sources":["../../../src/adapters/utxo/signed-psbt.ts"],"names":[],"mappings":";;;AAuMA,kCAoCC;AAuFD,gDAgBC;AA+BD,gDAoBC;AAOD,4CAmDC;AA/bD;;;;;;;;;;GAUG;AACH,mDAA0D;AAC1D,iDAA0D;AAC1D,mCAAiC;AACjC,+BAAyD;AAE5C,QAAA,WAAW,GAAG,IAAI,CAAC;AACnB,QAAA,eAAe,GAAG,IAAI,CAAC;AAS7B,MAAM,eAAe,GAAG,CAAC,MAAc,EAAmB,EAAE,CACjE,IAAI,uBAAe,CAAC,gBAAgB,EAAE,mBAAmB,MAAM,EAAE,CAAC,CAAC;AADxD,QAAA,eAAe,mBACyC;AACrE,MAAM,YAAY,GAAG,CAAC,QAA2C,EAAmB,EAAE,CACpF,IAAA,uBAAe,EAAC,kCAAkC,QAAQ,EAAE,CAAC,CAAC;AAChE,MAAM,UAAU,GAAG,GAAoB,EAAE,CACvC,IAAA,uBAAe,EAAC,yCAAyC,CAAC,CAAC;AAC7D,MAAM,UAAU,GAAG,GAAoB,EAAE,CACvC,IAAA,uBAAe,EAAC,uCAAuC,CAAC,CAAC;AAC3D,MAAM,YAAY,GAAG,GAAoB,EAAE,CACzC,IAAA,uBAAe,EAAC,kCAAkC,CAAC,CAAC;AAEtD;;;;GAIG;AACH,MAAM,qBAAqB,GAAG,KAAK,CAAC;AACpC;;;;GAIG;AACH,MAAM,iBAAiB,GAAG,OAAO,CAAC;AAClC;;;;GAIG;AACH,MAAM,kBAAkB,GAAG,SAAS,CAAC;AAErC,kEAAkE;AAClE,MAAM,WAAW,GAAG,IAAI,CAAC;AACzB,MAAM,cAAc,GAAG,IAAI,CAAC;AAE5B,gFAAgF;AAChF,MAAM,WAAW,GAAG,CAAC,iBAAiB,EAAE,oBAAoB,CAAC,CAAC;AAC9D;;;GAGG;AACH,MAAM,oBAAoB,GAAwB,IAAI,GAAG,CAAC;IACxD,YAAY;IACZ,YAAY;IACZ,gBAAgB;CACjB,CAAC,CAAC;AACH;;;;GAIG;AACH,MAAM,mBAAmB,GAAwB,IAAI,GAAG,CAAC;IACvD,GAAG,WAAW;IACd,YAAY;IACZ,WAAW;IACX,gBAAgB;IAChB,oBAAoB;IACpB,aAAa;IACb,aAAa;IACb,gBAAgB;IAChB,cAAc;IACd,gBAAgB;IAChB,gBAAgB;CACjB,CAAC,CAAC;AACH;;;GAGG;AACH,MAAM,oBAAoB,GAAwB,IAAI,GAAG,CAAC;IACxD,GAAG,WAAW;IACd,cAAc;IACd,eAAe;IACf,gBAAgB;IAChB,SAAS;IACT,gBAAgB;CACjB,CAAC,CAAC;AAEH,+DAA+D;AAC/D,MAAM,SAAS,GAAG,CAAC,MAAiB,EAAW,EAAE,CAAC,MAAM,CAAC,cAAc,KAAK,SAAS,CAAC;AAEtF,0FAA0F;AAC1F,MAAM,WAAW,GAAwB,IAAI,GAAG,CAAC,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC,CAAC;AAEvF,SAAS,cAAc,CAAC,IAAY;IAClC,IAAI,KAAK,GAAG,CAAC,CAAC;IACd,IAAI,GAAG,GAAG,IAAI,CAAC,MAAM,CAAC;IACtB,OAAO,KAAK,GAAG,GAAG,IAAI,WAAW,CAAC,GAAG,CAAC,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC;QAAE,KAAK,EAAE,CAAC;IACvE,OAAO,GAAG,GAAG,KAAK,IAAI,WAAW,CAAC,GAAG,CAAC,IAAI,CAAC,UAAU,CAAC,GAAG,GAAG,CAAC,CAAC,CAAC;QAAE,GAAG,EAAE,CAAC;IACvE,OAAO,IAAI,CAAC,KAAK,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;AAChC,CAAC;AAED;;;;GAIG;AACH,SAAS,aAAa,CAAC,KAAiB,EAAE,IAAY;IACpD,IAAI,MAAM,GAAG,CAAC,CAAC,CAAC,0DAA0D;IAC1E,MAAM,MAAM,GAAG,GAAuB,EAAE;QACtC,MAAM,KAAK,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC;QAC5B,IAAI,KAAK,KAAK,SAAS;YAAE,OAAO,SAAS,CAAC;QAC1C,MAAM,KAAK,GAAG,KAAK,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,KAAK,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,KAAK,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QAC7E,IAAI,MAAM,GAAG,CAAC,GAAG,KAAK,GAAG,KAAK,CAAC,MAAM;YAAE,OAAO,SAAS,CAAC;QACxD,IAAI,KAAK,GAAG,KAAK,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;QACpC,KAAK,IAAI,CAAC,GAAG,KAAK,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE;YAAE,KAAK,GAAG,KAAK,GAAG,GAAG,GAAI,KAAK,CAAC,MAAM,GAAG,CAAC,CAAY,CAAC;QACrF,MAAM,IAAI,CAAC,GAAG,KAAK,CAAC;QACpB,MAAM,KAAK,GAAG,KAAK,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,KAAK,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;QACtF,OAAO,KAAK,GAAG,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,KAAK,CAAC;IAC3C,CAAC,CAAC;IACF,KAAK,IAAI,GAAG,GAAG,CAAC,EAAE,GAAG,GAAG,IAAI,EAAE,GAAG,EAAE,EAAE,CAAC;QACpC,SAAS,CAAC;YACR,MAAM,SAAS,GAAG,MAAM,EAAE,CAAC;YAC3B,IAAI,SAAS,KAAK,SAAS;gBAAE,OAAO,KAAK,CAAC;YAC1C,IAAI,SAAS,KAAK,CAAC;gBAAE,MAAM;YAC3B,MAAM,IAAI,SAAS,CAAC;YACpB,MAAM,WAAW,GAAG,MAAM,EAAE,CAAC;YAC7B,IAAI,WAAW,KAAK,SAAS;gBAAE,OAAO,KAAK,CAAC;YAC5C,MAAM,IAAI,WAAW,CAAC;QACxB,CAAC;IACH,CAAC;IACD,OAAO,MAAM,KAAK,KAAK,CAAC,MAAM,CAAC;AACjC,CAAC;AAED;;;;GAIG;AACH,SAAS,gBAAgB,CAAC,KAAiB;IACzC,MAAM,KAAK,GAAG,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC;IAC7C,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,KAAK,CAAC,KAAK,IAAI,CAAC;QAAE,OAAO,SAAS,CAAC;IAC3E,IAAI,MAAM,GAAG,CAAC,CAAC;IACf,MAAM,MAAM,GAAG,GAAuB,EAAE;QACtC,MAAM,KAAK,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC;QAC5B,IAAI,KAAK,KAAK,SAAS;YAAE,OAAO,SAAS,CAAC;QAC1C,MAAM,KAAK,GAAG,KAAK,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,KAAK,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,KAAK,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QAC7E,IAAI,MAAM,GAAG,CAAC,GAAG,KAAK,GAAG,KAAK,CAAC,MAAM;YAAE,OAAO,SAAS,CAAC;QACxD,IAAI,KAAK,GAAG,KAAK,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;QACpC,KAAK,IAAI,CAAC,GAAG,KAAK,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE;YAAE,KAAK,GAAG,KAAK,GAAG,GAAG,GAAI,KAAK,CAAC,MAAM,GAAG,CAAC,CAAY,CAAC;QACrF,MAAM,IAAI,CAAC,GAAG,KAAK,CAAC;QACpB,OAAO,KAAK,CAAC;IACf,CAAC,CAAC;IACF,SAAS,CAAC;QACR,MAAM,SAAS,GAAG,MAAM,EAAE,CAAC;QAC3B,IAAI,SAAS,KAAK,SAAS,IAAI,MAAM,GAAG,SAAS,GAAG,KAAK,CAAC,MAAM;YAAE,OAAO,SAAS,CAAC;QACnF,IAAI,SAAS,KAAK,CAAC;YAAE,OAAO,SAAS,CAAC,CAAC,4CAA4C;QACnF,MAAM,WAAW,GAAG,SAAS,KAAK,CAAC,IAAI,KAAK,CAAC,MAAM,CAAC,KAAK,IAAI,CAAC;QAC9D,MAAM,IAAI,SAAS,CAAC;QACpB,MAAM,WAAW,GAAG,MAAM,EAAE,CAAC;QAC7B,IAAI,WAAW,KAAK,SAAS,IAAI,MAAM,GAAG,WAAW,GAAG,KAAK,CAAC,MAAM;YAClE,OAAO,SAAS,CAAC;QACnB,IAAI,WAAW;YAAE,OAAO,KAAK,CAAC,QAAQ,CAAC,MAAM,EAAE,MAAM,GAAG,WAAW,CAAC,CAAC;QACrE,MAAM,IAAI,WAAW,CAAC;IACxB,CAAC;AACH,CAAC;AAED;;;;;GAKG;AACH,SAAS,eAAe,CAAC,IAAY;IACnC,IAAI,IAAI,CAAC,MAAM,GAAG,CAAC,KAAK,CAAC;QAAE,OAAO,SAAS,CAAC;IAC5C,MAAM,KAAK,GAAG,MAAM,CAAC,IAAI,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC;IAC1C,IAAI,KAAK,CAAC,QAAQ,CAAC,QAAQ,CAAC,KAAK,IAAI;QAAE,OAAO,SAAS,CAAC;IACxD,OAAO,IAAI,UAAU,CAAC,KAAK,CAAC,MAAM,EAAE,KAAK,CAAC,UAAU,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC;AACtE,CAAC;AAED;;;;GAIG;AACH,SAAgB,WAAW,CACzB,IAAY,EACZ,MAAY,EACZ,YAAoB,EACpB,OAAgB;IAEhB,IAAI,OAAO,IAAI,KAAK,QAAQ;QAAE,MAAM,IAAA,uBAAe,EAAC,iBAAiB,CAAC,CAAC;IACvE,MAAM,IAAI,GAAG,CAAC,GAAG,MAAM,CAAC,UAAU,GAAG,MAAM,CAAC,SAAS,CAAC,MAAM,CAAC;IAC7D,MAAM,KAAK,GAAG,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,CACrC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,cAAc,KAAK,SAAS,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CACnE,CAAC,MAAM,CAAC;IACT,MAAM,IAAI,GACR,IAAI,GAAG,qBAAqB;QAC5B,IAAI,CAAC,GAAG,CAAC,KAAK,GAAG,iBAAiB,EAAE,kBAAkB,CAAC,CAAC;IAC1D,IAAI,IAAI,CAAC,MAAM,GAAG,YAAY,CAAC,MAAM,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,GAAG,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC;QAChE,MAAM,IAAA,uBAAe,EAAC,cAAc,CAAC,CAAC;IACxC,CAAC;IACD,MAAM,KAAK,GAAG,eAAe,CAAC,cAAc,CAAC,IAAI,CAAC,CAAC,CAAC;IACpD,IAAI,CAAC,KAAK;QAAE,MAAM,IAAA,uBAAe,EAAC,iBAAiB,CAAC,CAAC;IACrD,kFAAkF;IAClF,mEAAmE;IACnE,MAAM,QAAQ,GAAG,gBAAgB,CAAC,KAAK,CAAC,CAAC;IACzC,IAAI,CAAC,QAAQ;QAAE,MAAM,IAAA,uBAAe,EAAC,iBAAiB,CAAC,CAAC;IACxD,IAAI,CAAC,IAAA,kBAAU,EAAC,QAAQ,EAAE,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,UAAU,CAAC,QAAQ,EAAE,CAAC,EAAE,CAAC;QACvE,MAAM,IAAA,uBAAe,EAAC,iCAAiC,CAAC,CAAC;IAC3D,CAAC;IACD,IAAI,MAAY,CAAC;IACjB,IAAI,CAAC;QACH,MAAM,GAAG,aAAO,CAAC,IAAI,CAAC,UAAU,CAAC,KAAK,EAAE,EAAE,OAAO,EAAE,CAAC,CAAC;IACvD,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,IAAA,uBAAe,EAAC,iBAAiB,CAAC,CAAC;IAC3C,CAAC;IACD,IAAI,CAAC,aAAa,CAAC,KAAK,EAAE,CAAC,GAAG,MAAM,CAAC,UAAU,GAAG,MAAM,CAAC,SAAS,CAAC,MAAM,CAAC,EAAE,CAAC;QAC3E,MAAM,IAAA,uBAAe,EAAC,iBAAiB,CAAC,CAAC;IAC3C,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,oFAAoF;AACpF,SAAS,UAAU,CACjB,MAAyD,EACzD,OAA4B,EAC5B,MAAe;IAEf,KAAK,MAAM,IAAI,IAAI,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC;QACvC,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC;YAAE,MAAM,UAAU,EAAE,CAAC;IAC7C,CAAC;IACD,KAAK,MAAM,EAAE,GAAG,EAAE,KAAK,EAAE,IAAI,MAAM,CAAC,cAAc,IAAI,EAAE,EAAE,CAAC;QACzD,MAAM,WAAW,GACf,MAAM;YACN,GAAG,CAAC,MAAM,KAAK,CAAC;YAChB,GAAG,CAAC,CAAC,CAAC,KAAK,cAAc;YACzB,KAAK,CAAC,MAAM,KAAK,CAAC;YAClB,KAAK,CAAC,KAAK,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,KAAK,CAAC,CAAC,CAAC;QACpC,IAAI,GAAG,CAAC,CAAC,CAAC,KAAK,WAAW,IAAI,CAAC,WAAW;YAAE,MAAM,UAAU,EAAE,CAAC;IACjE,CAAC;AACH,CAAC;AAED;;;;;;GAMG;AACH,SAAS,gBAAgB,CACvB,KAAiB,EACjB,MAAiB,EACjB,QAA0D;IAE1D,IAAI,SAAS,CAAC,MAAM,CAAC;QAAE,MAAM,YAAY,EAAE,CAAC;IAC5C,mFAAmF;IACnF,IAAI,MAAM,CAAC,cAAc,KAAK,SAAS,IAAI,IAAA,kBAAU,EAAC,KAAK,EAAE,MAAM,CAAC,cAAc,CAAC,EAAE,CAAC;QACpF,OAAO;IACT,CAAC;IACD,iFAAiF;IACjF,gFAAgF;IAChF,MAAM,IAAI,GAAG,IAAA,cAAM,EAAC,KAAK,CAAC,CAAC;IAC3B,IAAI,CAAC,IAAI;QAAE,MAAM,IAAA,uBAAe,EAAC,iBAAiB,CAAC,CAAC;IACpD,MAAM,MAAM,GAAG,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;IAC3C,MAAM,IAAI,GAAG,MAAM,CAAC,WAAW,CAAC;IAChC,IACE,IAAI,CAAC,IAAI,KAAK,QAAQ,CAAC,IAAI;QAC3B,CAAC,MAAM;QACP,CAAC,IAAI,KAAK,SAAS;YACjB,CAAC,MAAM,CAAC,KAAK,KAAK,IAAI,CAAC,KAAK,IAAI,CAAC,IAAA,kBAAU,EAAC,MAAM,CAAC,MAAM,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,EAC3E,CAAC;QACD,MAAM,YAAY,EAAE,CAAC;IACvB,CAAC;AACH,CAAC;AAED;;;;GAIG;AACH,SAAS,eAAe,CACtB,MAAiB,EACjB,MAAiB,EACjB,QAA0D;IAE1D,MAAM,IAAI,GAAG,CAAC,CAAyB,EAAE,CAAyB,EAAW,EAAE,CAC7E,CAAC,KAAK,SAAS,IAAI,CAAC,CAAC,KAAK,SAAS,IAAI,IAAA,kBAAU,EAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;IAC3D,MAAM,IAAI,GAAG,MAAM,CAAC,WAAW,CAAC;IAChC,IACE,CAAC,IAAI,CAAC,MAAM,CAAC,YAAY,EAAE,MAAM,CAAC,YAAY,CAAC;QAC/C,CAAC,IAAI,CAAC,MAAM,CAAC,cAAc,EAAE,MAAM,CAAC,cAAc,CAAC;QACnD,CAAC,IAAI,KAAK,SAAS;YACjB,CAAC,MAAM,CAAC,WAAW,KAAK,SAAS;gBAC/B,IAAI,CAAC,KAAK,KAAK,MAAM,CAAC,WAAW,CAAC,KAAK;gBACvC,CAAC,IAAA,kBAAU,EAAC,IAAI,CAAC,MAAM,EAAE,MAAM,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC,CAAC,EACzD,CAAC;QACD,MAAM,YAAY,EAAE,CAAC;IACvB,CAAC;IACD,IAAI,MAAM,CAAC,cAAc,KAAK,SAAS,EAAE,CAAC;QACxC,gBAAgB,CAAC,MAAM,CAAC,cAAc,EAAE,MAAM,EAAE,QAAQ,CAAC,CAAC;IAC5D,CAAC;AACH,CAAC;AAED;;;GAGG;AACH,SAAgB,kBAAkB,CAAC,MAAY,EAAE,MAAY;IAC3D,UAAU,CAAC,MAAM,CAAC,IAAI,CAAC,SAAS,EAAE,oBAAoB,EAAE,IAAI,CAAC,CAAC;IAC9D,KAAK,MAAM,MAAM,IAAI,MAAM,CAAC,IAAI,CAAC,OAAO;QACtC,UAAU,CAAC,MAAM,EAAE,oBAAoB,EAAE,KAAK,CAAC,CAAC;IAClD,MAAM,SAAS,GAAG,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;QAChD,IAAI,EAAE,IAAA,aAAK,EAAC,UAAU,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,CAAC;QAClD,IAAI,EAAE,KAAK,CAAC,KAAK;KAClB,CAAC,CAAC,CAAC;IACJ,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,KAAK,EAAE,KAAK,EAAE,EAAE;QAC1C,UAAU,CAAC,KAAK,EAAE,mBAAmB,EAAE,KAAK,CAAC,CAAC;QAC9C,eAAe,CACb,KAAK,EACL,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAc,EACtC,SAAS,CAAC,KAAK,CAAmC,CACnD,CAAC;IACJ,CAAC,CAAC,CAAC;AACL,CAAC;AAED,mEAAmE;AACnE,SAAS,MAAM,CAAC,MAAkB;IAChC,MAAM,MAAM,GAAG,aAAO,CAAC,MAAM,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC;IAChD,IAAI,CAAC,MAAM,IAAI,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,KAAK,QAAQ,CAAC;QAAE,OAAO,SAAS,CAAC;IAC3E,OAAO,MAAsB,CAAC;AAChC,CAAC;AAED,gFAAgF;AAChF,SAAS,YAAY,CAAC,OAAmB;IACvC,IAAI,MAAM,GAAG,CAAC,CAAC;IACf,MAAM,MAAM,GAAG,GAAuB,EAAE;QACtC,MAAM,KAAK,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC;QAC9B,IAAI,KAAK,KAAK,SAAS,IAAI,KAAK,IAAI,IAAI;YAAE,OAAO,SAAS,CAAC,CAAC,yBAAyB;QACrF,MAAM,IAAI,CAAC,CAAC;QACZ,OAAO,KAAK,CAAC;IACf,CAAC,CAAC;IACF,MAAM,KAAK,GAAG,MAAM,EAAE,CAAC;IACvB,IAAI,KAAK,KAAK,SAAS;QAAE,OAAO,SAAS,CAAC;IAC1C,MAAM,KAAK,GAAiB,EAAE,CAAC;IAC/B,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,KAAK,EAAE,CAAC,EAAE,EAAE,CAAC;QAC/B,MAAM,MAAM,GAAG,MAAM,EAAE,CAAC;QACxB,IAAI,MAAM,KAAK,SAAS,IAAI,MAAM,GAAG,MAAM,GAAG,OAAO,CAAC,MAAM;YAAE,OAAO,SAAS,CAAC;QAC/E,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,CAAC,CAAC,CAAC;QACnD,MAAM,IAAI,MAAM,CAAC;IACnB,CAAC;IACD,OAAO,MAAM,KAAK,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC;AACvD,CAAC;AAED,0FAA0F;AAC1F,SAAgB,kBAAkB,CAAC,KAAgB;IACjD,IAAI,KAAK,CAAC,UAAU;QAAE,MAAM,IAAA,uBAAe,EAAC,uCAAuC,CAAC,CAAC;IACrF,IAAI,KAAK,CAAC,WAAW,KAAK,SAAS,IAAI,KAAK,CAAC,WAAW,KAAK,uBAAe,EAAE,CAAC;QAC7E,MAAM,YAAY,CAAC,iBAAiB,CAAC,CAAC;IACxC,CAAC;IACD,IAAI,KAAK,CAAC,cAAc,KAAK,SAAS,IAAI,KAAK,CAAC,cAAc,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC1E,MAAM,UAAU,EAAE,CAAC;IACrB,CAAC;IACD,MAAM,KAAK,GAAiB,EAAE,CAAC;IAC/B,IAAI,KAAK,CAAC,SAAS;QAAE,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;IACjD,IAAI,KAAK,CAAC,kBAAkB,EAAE,CAAC;QAC7B,MAAM,KAAK,GAAG,YAAY,CAAC,KAAK,CAAC,kBAAkB,CAAC,CAAC;QACrD,IAAI,KAAK,EAAE,MAAM,KAAK,CAAC;YAAE,MAAM,UAAU,EAAE,CAAC;QAC5C,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAe,CAAC,CAAC;IACrC,CAAC;IACD,KAAK,MAAM,SAAS,IAAI,KAAK,EAAE,CAAC;QAC9B,IAAI,SAAS,CAAC,MAAM,KAAK,EAAE;YAAE,MAAM,YAAY,CAAC,iBAAiB,CAAC,CAAC;QACnE,IAAI,SAAS,CAAC,MAAM,KAAK,EAAE;YAAE,MAAM,IAAA,uBAAe,EAAC,+BAA+B,CAAC,CAAC;IACtF,CAAC;IACD,OAAO,KAAK,CAAC,CAAC,CAAC,CAAC;AAClB,CAAC;AAED;;;;GAIG;AACH,SAAgB,gBAAgB,CAC9B,SAAqB,EACrB,KAAgB,EAChB,MAAiB;IAEjB,IAAI,KAAK,CAAC,SAAS;QAAE,MAAM,IAAA,uBAAe,EAAC,uCAAuC,CAAC,CAAC;IACpF,IAAI,KAAK,CAAC,WAAW,KAAK,SAAS,IAAI,KAAK,CAAC,WAAW,KAAK,mBAAW,EAAE,CAAC;QACzE,MAAM,YAAY,CAAC,aAAa,CAAC,CAAC;IACpC,CAAC;IACD,MAAM,KAAK,GAAiB,EAAE,CAAC;IAC/B,KAAK,MAAM,OAAO,IAAI,KAAK,CAAC,UAAU,IAAI,EAAE,EAAE,CAAC;QAC7C,IAAI,CAAC,IAAA,kBAAU,EAAC,OAAO,CAAC,MAAM,EAAE,SAAS,CAAC,EAAE,CAAC;YAC3C,MAAM,IAAA,uBAAe,EAAC,qCAAqC,CAAC,CAAC;QAC/D,CAAC;QACD,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;IAChC,CAAC;IACD,MAAM,IAAI,GAAG,CAAC,KAA+B,EAAc,EAAE;QAC3D,IAAI,KAAK,EAAE,MAAM,KAAK,CAAC,IAAI,CAAC,IAAA,kBAAU,EAAC,KAAK,CAAC,CAAC,CAAe,EAAE,SAAS,CAAC,EAAE,CAAC;YAC1E,MAAM,UAAU,EAAE,CAAC;QACrB,CAAC;QACD,OAAO,KAAK,CAAC,CAAC,CAAe,CAAC;IAChC,CAAC,CAAC;IACF,IAAI,MAAM,CAAC,WAAW,KAAK,SAAS,EAAE,CAAC;QACrC,IAAI,KAAK,CAAC,kBAAkB,KAAK,SAAS;YAAE,MAAM,UAAU,EAAE,CAAC;QAC/D,IAAI,KAAK,CAAC,cAAc,KAAK,SAAS;YACpC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,cAAc,CAAC,CAAC,CAAC,CAAC;IACnD,CAAC;SAAM,CAAC;QACN,MAAM,SAAS,GAAG,MAAM,CAAC,YAAY;YACnC,CAAC,CAAC,aAAO,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC;YAC/C,CAAC,CAAC,IAAI,UAAU,EAAE,CAAC;QACrB,IACE,KAAK,CAAC,cAAc,KAAK,SAAS;YAClC,CAAC,IAAA,kBAAU,EAAC,KAAK,CAAC,cAAc,EAAE,SAAS,CAAC,EAC5C,CAAC;YACD,MAAM,UAAU,EAAE,CAAC;QACrB,CAAC;QACD,IAAI,KAAK,CAAC,kBAAkB,KAAK,SAAS,EAAE,CAAC;YAC3C,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,YAAY,CAAC,KAAK,CAAC,kBAAkB,CAAC,CAAC,CAAC,CAAC;QAC3D,CAAC;IACH,CAAC;IACD,MAAM,UAAU,GAAG,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE;QACnC,IAAI,OAAoD,CAAC;QACzD,IAAI,CAAC;YACH,OAAO,GAAG,aAAO,CAAC,MAAM,CAAC,SAAS,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QACjD,CAAC;QAAC,MAAM,CAAC;YACP,MAAM,IAAA,uBAAe,EAAC,+BAA+B,CAAC,CAAC;QACzD,CAAC;QACD,IAAI,OAAO,CAAC,QAAQ,KAAK,mBAAW;YAAE,MAAM,YAAY,CAAC,aAAa,CAAC,CAAC;QACxE,OAAO,OAAO,CAAC,SAAS,CAAC;IAC3B,CAAC,CAAC,CAAC;IACH,OAAO,UAAU,CAAC,CAAC,CAAC,CAAC;AACvB,CAAC","sourcesContent":["/**\n * The reader of a PSBT signed elsewhere: a cold signer's or a coordinator's copy of our\n * PSBT is untrusted input. It is capped before decoding and parsed strictly. What could\n * change the spend is refused: another unsigned transaction, a changed previous output,\n * redeem script or internal key, an input script path, or a foreign, cross-scheme or\n * other-sighash signature. What cannot change it is ignored: key origins, the output\n * scripts a coordinator adds for change detection, proprietary keys and PSBT version 0.\n * Only signature bytes are taken, and the core verifies them against the stored requests.\n * Every refusal is `ValidationError('INVALID_INTENT')` with a fixed text. Synchronous and\n * I/O-free.\n */\nimport { ValidationError } from '../../core/errors/error';\nimport { equalBytes, toHex } from '../../core/util/bytes';\nimport { readTx } from './rawtx';\nimport { bitcoin, type Network, type Psbt } from './sdk';\n\nexport const SIGHASH_ALL = 0x01;\nexport const SIGHASH_DEFAULT = 0x00;\n\nexport type PsbtInput = Psbt['data']['inputs'][number];\n\ninterface KeyValue {\n  readonly key: Uint8Array;\n  readonly value: Uint8Array;\n}\n\nexport const signedPsbtError = (reason: string): ValidationError =>\n  new ValidationError('INVALID_INTENT', `the signed PSBT ${reason}`);\nconst sighashError = (expected: 'SIGHASH_ALL' | 'SIGHASH_DEFAULT'): ValidationError =>\n  signedPsbtError(`uses a sighash type other than ${expected}`);\nconst shapeError = (): ValidationError =>\n  signedPsbtError('carries a final script of another shape');\nconst fieldError = (): ValidationError =>\n  signedPsbtError('carries a field a signer does not add');\nconst changedError = (): ValidationError =>\n  signedPsbtError('changes the prepared transaction');\n\n/**\n * What a signer may add to each map of our PSBT (signatures, final scripts, a sighash type,\n * key origins, change-output scripts, proprietary keys): well under 1 KiB per input for one\n * key. A larger PSBT is not a signed copy of ours, and is refused before it is decoded.\n */\nconst SIGNED_GROWTH_PER_MAP = 4_096;\n/**\n * Room for the previous transaction a coordinator may add to a non-taproot input of ours\n * that lacks one (`nonWitnessUtxo` off): a standard transaction's largest stripped size\n * (`MAX_STANDARD_TX_WEIGHT` / 4).\n */\nconst ADDED_PREVIOUS_TX = 100_000;\n/**\n * What coordinators may add in all, whatever the number of inputs: one block (Bitcoin\n * Core's `MAX_BLOCK_SERIALIZED_SIZE`), so the decoding it costs stays bounded. Unbounded,\n * 160 inputs with `nonWitnessUtxo` off took 8 s of synchronous decoding.\n */\nconst ADDED_PREVIOUS_TXS = 4_000_000;\n\n/** BIP174 key types a signed copy may carry but we never read. */\nconst PROPRIETARY = 0xfc;\nconst GLOBAL_VERSION = 0xfb;\n\n/** Key origins (BIP32 derivations), which a signer or a coordinator may add. */\nconst KEY_ORIGINS = ['bip32Derivation', 'tapBip32Derivation'];\n/**\n * The fields a signed copy of our PSBT may carry. `unknownKeyVals` holds every key bip174\n * does not know, and only proprietary keys (and, globally, version 0) may be among them.\n */\nconst SIGNED_GLOBAL_FIELDS: ReadonlySet<string> = new Set([\n  'unsignedTx',\n  'globalXpub',\n  'unknownKeyVals',\n]);\n/**\n * Per input: signatures, final scripts, a sighash type, key origins, and our own fields\n * unchanged (or a verified previous transaction). The script-path fields (`witnessScript`,\n * `tapLeafScript`, `tapScriptSig`, `tapMerkleRoot`) and `porCommitment` are refused.\n */\nconst SIGNED_INPUT_FIELDS: ReadonlySet<string> = new Set([\n  ...KEY_ORIGINS,\n  'partialSig',\n  'tapKeySig',\n  'finalScriptSig',\n  'finalScriptWitness',\n  'sighashType',\n  'witnessUtxo',\n  'nonWitnessUtxo',\n  'redeemScript',\n  'tapInternalKey',\n  'unknownKeyVals',\n]);\n/**\n * Per output: key origins and the scripts Core's `UpdatePSBTOutput` adds so a hardware\n * wallet recognizes change. None is read: the outputs are fixed by the unsigned transaction.\n */\nconst SIGNED_OUTPUT_FIELDS: ReadonlySet<string> = new Set([\n  ...KEY_ORIGINS,\n  'redeemScript',\n  'witnessScript',\n  'tapInternalKey',\n  'tapTree',\n  'unknownKeyVals',\n]);\n\n/** Our taproot inputs carry their internal key (`buildTx`). */\nconst isTaproot = (stored: PsbtInput): boolean => stored.tapInternalKey !== undefined;\n\n/** ASCII whitespace (C `isspace`), trimmed at both ends of a pasted or file-read PSBT. */\nconst ASCII_SPACE: ReadonlySet<number> = new Set([0x09, 0x0a, 0x0b, 0x0c, 0x0d, 0x20]);\n\nfunction trimAsciiSpace(text: string): string {\n  let start = 0;\n  let end = text.length;\n  while (start < end && ASCII_SPACE.has(text.charCodeAt(start))) start++;\n  while (end > start && ASCII_SPACE.has(text.charCodeAt(end - 1))) end--;\n  return text.slice(start, end);\n}\n\n/**\n * Whether PSBT bytes end right after their maps (BIP174: the global map, then one per input\n * and one per output), with every key and value length a minimal CompactSize inside the\n * bytes. bip174 ignores whatever follows the last map.\n */\nfunction endsAfterMaps(bytes: Uint8Array, maps: number): boolean {\n  let offset = 5; // the magic `psbt` and 0xff, which the parser has checked\n  const length = (): number | undefined => {\n    const first = bytes[offset];\n    if (first === undefined) return undefined;\n    const width = first < 0xfd ? 0 : first === 0xfd ? 2 : first === 0xfe ? 4 : 8;\n    if (offset + 1 + width > bytes.length) return undefined;\n    let value = width === 0 ? first : 0;\n    for (let i = width; i >= 1; i--) value = value * 256 + (bytes[offset + i] as number);\n    offset += 1 + width;\n    const least = width === 0 ? 0 : width === 2 ? 0xfd : width === 4 ? 0x1_0000 : 2 ** 32;\n    return value < least ? undefined : value;\n  };\n  for (let map = 0; map < maps; map++) {\n    for (;;) {\n      const keyLength = length();\n      if (keyLength === undefined) return false;\n      if (keyLength === 0) break;\n      offset += keyLength;\n      const valueLength = length();\n      if (valueLength === undefined) return false;\n      offset += valueLength;\n    }\n  }\n  return offset === bytes.length;\n}\n\n/**\n * The value of the global map's `PSBT_GLOBAL_UNSIGNED_TX` (key `0x00`) of PSBT bytes, read\n * without decoding it; `undefined` when the magic or the global map is malformed, or it has\n * no such key.\n */\nfunction globalUnsignedTx(bytes: Uint8Array): Uint8Array | undefined {\n  const magic = [0x70, 0x73, 0x62, 0x74, 0xff];\n  if (!magic.every((byte, index) => bytes[index] === byte)) return undefined;\n  let offset = 5;\n  const length = (): number | undefined => {\n    const first = bytes[offset];\n    if (first === undefined) return undefined;\n    const width = first < 0xfd ? 0 : first === 0xfd ? 2 : first === 0xfe ? 4 : 8;\n    if (offset + 1 + width > bytes.length) return undefined;\n    let value = width === 0 ? first : 0;\n    for (let i = width; i >= 1; i--) value = value * 256 + (bytes[offset + i] as number);\n    offset += 1 + width;\n    return value;\n  };\n  for (;;) {\n    const keyLength = length();\n    if (keyLength === undefined || offset + keyLength > bytes.length) return undefined;\n    if (keyLength === 0) return undefined; // the end of the global map: no unsigned tx\n    const unsignedKey = keyLength === 1 && bytes[offset] === 0x00;\n    offset += keyLength;\n    const valueLength = length();\n    if (valueLength === undefined || offset + valueLength > bytes.length)\n      return undefined;\n    if (unsignedKey) return bytes.subarray(offset, offset + valueLength);\n    offset += valueLength;\n  }\n}\n\n/**\n * Canonical base64 (the standard alphabet, padded), or `undefined`. Node's decoder is\n * linear and far faster than a pure-JS one (a few milliseconds for 4 million characters,\n * against about 300), but it skips what it cannot read, so the bytes count only when they\n * encode back to exactly `text`.\n */\nfunction canonicalBase64(text: string): Uint8Array | undefined {\n  if (text.length % 4 !== 0) return undefined;\n  const bytes = Buffer.from(text, 'base64');\n  if (bytes.toString('base64') !== text) return undefined;\n  return new Uint8Array(bytes.buffer, bytes.byteOffset, bytes.length);\n}\n\n/**\n * A PSBT signed elsewhere, parsed strictly: capped before decoding, ASCII\n * whitespace trimmed at the ends, canonical base64 (the SDK's decoder skips junk), and no\n * bytes after its maps.\n */\nexport function parseSigned(\n  text: string,\n  stored: Psbt,\n  storedBase64: string,\n  network: Network,\n): Psbt {\n  if (typeof text !== 'string') throw signedPsbtError('does not decode');\n  const maps = 1 + stored.inputCount + stored.txOutputs.length;\n  const added = stored.data.inputs.filter(\n    (input) => input.nonWitnessUtxo === undefined && !isTaproot(input),\n  ).length;\n  const room =\n    maps * SIGNED_GROWTH_PER_MAP +\n    Math.min(added * ADDED_PREVIOUS_TX, ADDED_PREVIOUS_TXS);\n  if (text.length > storedBase64.length + Math.ceil(room / 3) * 4) {\n    throw signedPsbtError('is too large');\n  }\n  const bytes = canonicalBase64(trimAsciiSpace(text));\n  if (!bytes) throw signedPsbtError('does not decode');\n  // The unsigned transaction it carries must be ours byte for byte before bitcoinjs\n  // decodes it (its decoder is quadratic in the inputs and outputs).\n  const unsigned = globalUnsignedTx(bytes);\n  if (!unsigned) throw signedPsbtError('does not decode');\n  if (!equalBytes(unsigned, stored.data.globalMap.unsignedTx.toBuffer())) {\n    throw signedPsbtError('is not the prepared transaction');\n  }\n  let signed: Psbt;\n  try {\n    signed = bitcoin.Psbt.fromBuffer(bytes, { network });\n  } catch {\n    throw signedPsbtError('does not decode');\n  }\n  if (!endsAfterMaps(bytes, 1 + signed.inputCount + signed.txOutputs.length)) {\n    throw signedPsbtError('does not decode');\n  }\n  return signed;\n}\n\n/** Refuses any field outside `allowed`, and any unknown key but those we ignore. */\nfunction assertOnly(\n  fields: { readonly unknownKeyVals?: readonly KeyValue[] },\n  allowed: ReadonlySet<string>,\n  global: boolean,\n): void {\n  for (const name of Object.keys(fields)) {\n    if (!allowed.has(name)) throw fieldError();\n  }\n  for (const { key, value } of fields.unknownKeyVals ?? []) {\n    const versionZero =\n      global &&\n      key.length === 1 &&\n      key[0] === GLOBAL_VERSION &&\n      value.length === 4 &&\n      value.every((byte) => byte === 0);\n    if (key[0] !== PROPRIETARY && !versionZero) throw fieldError();\n  }\n}\n\n/**\n * A previous transaction on a signed input (BIP174 `non_witness_utxo`): it must decode\n * strictly and hash to the outpoint's txid, which fixes every byte but the witness (Core\n * writes it without one), and pay the output our PSBT spends. A coordinator may add one to a\n * non-taproot input of ours that lacks it; taproot never carries one (BIP341 commits to\n * every amount). It is never read.\n */\nfunction assertPreviousTx(\n  bytes: Uint8Array,\n  stored: PsbtInput,\n  outpoint: { readonly txid: string; readonly vout: number },\n): void {\n  if (isTaproot(stored)) throw changedError();\n  // Our own previous transaction, byte for byte, which `buildTx` checked: no decode.\n  if (stored.nonWitnessUtxo !== undefined && equalBytes(bytes, stored.nonWitnessUtxo)) {\n    return;\n  }\n  // Read in one linear pass, its txid hashed from the bytes (bitcoinjs' decoder is\n  // quadratic), and capped at the million bytes without witness a chain can hold.\n  const prev = readTx(bytes);\n  if (!prev) throw signedPsbtError('does not decode');\n  const output = prev.outputs[outpoint.vout];\n  const ours = stored.witnessUtxo;\n  if (\n    prev.txid !== outpoint.txid ||\n    !output ||\n    (ours !== undefined &&\n      (output.value !== ours.value || !equalBytes(output.script, ours.script)))\n  ) {\n    throw changedError();\n  }\n}\n\n/**\n * Our fields a signed input carries unchanged, or not at all (a finalizer drops some): its\n * previous output, redeem script and taproot internal key; a previous transaction is checked\n * by its txid. A signed PSBT never decides an amount or a script.\n */\nfunction assertUnchanged(\n  signed: PsbtInput,\n  stored: PsbtInput,\n  outpoint: { readonly txid: string; readonly vout: number },\n): void {\n  const same = (a: Uint8Array | undefined, b: Uint8Array | undefined): boolean =>\n    a === undefined || (b !== undefined && equalBytes(a, b));\n  const utxo = signed.witnessUtxo;\n  if (\n    !same(signed.redeemScript, stored.redeemScript) ||\n    !same(signed.tapInternalKey, stored.tapInternalKey) ||\n    (utxo !== undefined &&\n      (stored.witnessUtxo === undefined ||\n        utxo.value !== stored.witnessUtxo.value ||\n        !equalBytes(utxo.script, stored.witnessUtxo.script)))\n  ) {\n    throw changedError();\n  }\n  if (signed.nonWitnessUtxo !== undefined) {\n    assertPreviousTx(signed.nonWitnessUtxo, stored, outpoint);\n  }\n}\n\n/**\n * Every field of a signed copy whose unsigned transaction is already ours: the global map,\n * each output and each input (see the allowlists and `assertUnchanged`).\n */\nexport function assertSignedFields(signed: Psbt, stored: Psbt): void {\n  assertOnly(signed.data.globalMap, SIGNED_GLOBAL_FIELDS, true);\n  for (const output of signed.data.outputs)\n    assertOnly(output, SIGNED_OUTPUT_FIELDS, false);\n  const outpoints = stored.txInputs.map((input) => ({\n    txid: toHex(Uint8Array.from(input.hash).reverse()),\n    vout: input.index,\n  }));\n  signed.data.inputs.forEach((input, index) => {\n    assertOnly(input, SIGNED_INPUT_FIELDS, false);\n    assertUnchanged(\n      input,\n      stored.data.inputs[index] as PsbtInput,\n      outpoints[index] as { txid: string; vout: number },\n    );\n  });\n}\n\n/** Pushes of a script, or `undefined` when it is not push-only. */\nfunction pushes(script: Uint8Array): Uint8Array[] | undefined {\n  const chunks = bitcoin.script.decompile(script);\n  if (!chunks || chunks.some((c) => typeof c === 'number')) return undefined;\n  return chunks as Uint8Array[];\n}\n\n/** A serialized witness stack (BIP144): a count, then length-prefixed items. */\nfunction witnessItems(witness: Uint8Array): Uint8Array[] | undefined {\n  let offset = 0;\n  const varint = (): number | undefined => {\n    const first = witness[offset];\n    if (first === undefined || first >= 0xfd) return undefined; // no item this long here\n    offset += 1;\n    return first;\n  };\n  const count = varint();\n  if (count === undefined) return undefined;\n  const items: Uint8Array[] = [];\n  for (let i = 0; i < count; i++) {\n    const length = varint();\n    if (length === undefined || offset + length > witness.length) return undefined;\n    items.push(witness.slice(offset, offset + length));\n    offset += length;\n  }\n  return offset === witness.length ? items : undefined;\n}\n\n/** p2tr: the key-path signature (BIP341, SIGHASH_DEFAULT, 64 bytes), partial or final. */\nexport function schnorrSignatureOf(input: PsbtInput): Uint8Array | undefined {\n  if (input.partialSig) throw signedPsbtError('carries a signature of another scheme');\n  if (input.sighashType !== undefined && input.sighashType !== SIGHASH_DEFAULT) {\n    throw sighashError('SIGHASH_DEFAULT');\n  }\n  if (input.finalScriptSig !== undefined && input.finalScriptSig.length > 0) {\n    throw shapeError();\n  }\n  const found: Uint8Array[] = [];\n  if (input.tapKeySig) found.push(input.tapKeySig);\n  if (input.finalScriptWitness) {\n    const items = witnessItems(input.finalScriptWitness);\n    if (items?.length !== 1) throw shapeError();\n    found.push(items[0] as Uint8Array);\n  }\n  for (const signature of found) {\n    if (signature.length === 65) throw sighashError('SIGHASH_DEFAULT');\n    if (signature.length !== 64) throw signedPsbtError('carries a malformed signature');\n  }\n  return found[0];\n}\n\n/**\n * ECDSA: the signature of `publicKey` (strict DER, SIGHASH_ALL, returned as 64-byte r‖s),\n * partial or final: `<sig> <key>` in the scriptSig for p2pkh; in the witness for segwit v0,\n * whose scriptSig is empty or, for p2sh-p2wpkh, the push of our redeem script.\n */\nexport function ecdsaSignatureOf(\n  publicKey: Uint8Array,\n  input: PsbtInput,\n  stored: PsbtInput,\n): Uint8Array | undefined {\n  if (input.tapKeySig) throw signedPsbtError('carries a signature of another scheme');\n  if (input.sighashType !== undefined && input.sighashType !== SIGHASH_ALL) {\n    throw sighashError('SIGHASH_ALL');\n  }\n  const found: Uint8Array[] = [];\n  for (const partial of input.partialSig ?? []) {\n    if (!equalBytes(partial.pubkey, publicKey)) {\n      throw signedPsbtError('carries a signature for another key');\n    }\n    found.push(partial.signature);\n  }\n  const ours = (stack: Uint8Array[] | undefined): Uint8Array => {\n    if (stack?.length !== 2 || !equalBytes(stack[1] as Uint8Array, publicKey)) {\n      throw shapeError();\n    }\n    return stack[0] as Uint8Array;\n  };\n  if (stored.witnessUtxo === undefined) {\n    if (input.finalScriptWitness !== undefined) throw shapeError();\n    if (input.finalScriptSig !== undefined)\n      found.push(ours(pushes(input.finalScriptSig)));\n  } else {\n    const scriptSig = stored.redeemScript\n      ? bitcoin.script.compile([stored.redeemScript])\n      : new Uint8Array();\n    if (\n      input.finalScriptSig !== undefined &&\n      !equalBytes(input.finalScriptSig, scriptSig)\n    ) {\n      throw shapeError();\n    }\n    if (input.finalScriptWitness !== undefined) {\n      found.push(ours(witnessItems(input.finalScriptWitness)));\n    }\n  }\n  const signatures = found.map((der) => {\n    let decoded: { signature: Uint8Array; hashType: number };\n    try {\n      decoded = bitcoin.script.signature.decode(der);\n    } catch {\n      throw signedPsbtError('carries a malformed signature');\n    }\n    if (decoded.hashType !== SIGHASH_ALL) throw sighashError('SIGHASH_ALL');\n    return decoded.signature;\n  });\n  return signatures[0];\n}\n"]}

package/dist/adapters/utxo/spend.d.ts

@@ -0,0 +1,59 @@
+/**
+ * What coin selection spends and pays: the planned outputs of an intent (strict addresses,
+ * no dust), the wallet's eligible outputs (not reserved by another live Operation, and
+ * confirmed as deeply as `minInputConfirmations` asks), and the fee rate of a fee spec.
+ *
+ * This module loads bitcoinjs-lib (`spendable` reads through `reader.ts`, which imports the
+ * codec and `sdk.ts`), so only modules behind the manifest's `load()` may import it; an
+ * SDK-free module (the plugin, an entry's types) must not.
+ */
+import type { WalletKey, WalletOptions } from '../../core/driver/types';
+import { type FeeOverride, type FeeSpeed } from '../../core/model/fee';
+import { type DecodedAddress, type WalletAddress } from './address';
+import type { PlannedOutput, Spendable } from './coinselect';
+import { type UtxoContext } from './context';
+export { assertNative } from './context';
+import type { UtxoAddressType } from './types';
+/**
+ * The most outputs one transfer may pay (`limits().maxOutputs`), enforced here because
+ * the core only reports it. Library policy: 1,000 taproot outputs are about 43 kvB, far
+ * below the 100 kvB standard size.
+ */
+export declare const MAX_OUTPUTS = 1000;
+/** The intent's outputs as scripts; each must be a standard address and above dust. */
+export declare function plannedOutputs(ctx: UtxoContext, outputs: readonly {
+    readonly to: string;
+    readonly amount: bigint;
+}[]): PlannedOutput[];
+/** The sending wallet: its type (from the address; p2sh is p2sh-p2wpkh) and, with a key, its scripts. */
+export interface Sender {
+    readonly from: DecodedAddress;
+    readonly type: UtxoAddressType;
+}
+export declare function senderOf(ctx: UtxoContext, from: string): Sender;
+/**
+ * The wallet's scripts from its key, which must own the sending address: nothing is ever
+ * built for inputs the wallet's key cannot sign (`INVALID_INTENT`).
+ */
+export declare function walletOf(ctx: UtxoContext, sender: Sender, keys: readonly WalletKey[]): {
+    readonly wallet: WalletAddress;
+    readonly key: WalletKey;
+};
+/** How many indexes `changeAddressOf` searches on each chain of the wallet's xpub. */
+export declare const XPUB_CHANGE_SEARCH = 20;
+/**
+ * Where change goes. A configured `changeAddress` must be derivable from the wallet: the
+ * sending address, or any of the four wallet types of one of the wallet's keys (a bounded
+ * search, at most 4 per key). Otherwise it is refused with `CONFIG_INVALID`, naming no
+ * address, because a valid but mistyped address would lose every change output. The
+ * wallet opts out with `allowExternalChangeAddress: true`.
+ */
+export declare function changeAddressOf(ctx: UtxoContext, wallet: WalletOptions, sender: Sender, keys: readonly WalletKey[]): DecodedAddress;
+/**
+ * The wallet's outputs coin selection may spend. They are read as `listUnspent` reads them:
+ * an output the indexer lists twice alike counts once (the funds check sums them), and two
+ * listings that disagree decide nothing (retryable).
+ */
+export declare function spendable(ctx: UtxoContext, from: string, exclude: readonly string[] | undefined, minConfirmations: number, signal?: AbortSignal): Promise<Spendable[]>;
+/** The fee rate (sat/kvB) of a speed or a `{ satPerVByte }` override. */
+export declare function rateOf(ctx: UtxoContext, fee: FeeSpeed | FeeOverride, signal?: AbortSignal): Promise<bigint>;