crypto-aio 0.0.3 → 0.1.0

package/dist/adapters/utxo/codec.d.ts

@@ -0,0 +1,120 @@
+import type { SignatureBundle, SigningRequest } from '../../core/signing/types';
+import { type WalletAddress } from './address';
+import type { PlannedOutput, Spendable } from './coinselect';
+import { type Network, type Psbt } from './sdk';
+/** The sighash types each input signs with (ALL; DEFAULT for p2tr), defined with the reader. */
+export { SIGHASH_ALL, SIGHASH_DEFAULT } from './signed-psbt';
+/** BIP125 opt-in (and relative lock time disabled); `0xfffffffe` when RBF is off. */
+export declare const SEQUENCE_RBF = 4294967293;
+export declare const SEQUENCE_FINAL_LOCKTIME = 4294967294;
+/**
+ * A previous transaction, decoded strictly once: its txid, its outputs, and
+ * its bytes without the witness (Bitcoin Core's `TX_NO_WITNESS` form, which BIP174
+ * `non_witness_utxo` carries). Only `previousTxOf` makes one, so its txid is the hash of its
+ * bytes: they authenticate themselves.
+ */
+export interface PreviousTx {
+    readonly txid: string;
+    readonly outputs: readonly {
+        readonly value: bigint;
+        readonly script: Uint8Array;
+    }[];
+    readonly bytes: Uint8Array;
+}
+export interface PlannedInput extends Spendable {
+    /**
+     * The previous transaction to carry in the PSBT (BIP174 `non_witness_utxo`), checked
+     * against the input's outpoint, value and script: required for p2pkh, and added for segwit
+     * v0 so hardware wallets can check the input amounts. Never on p2tr.
+     */
+    readonly prevTx?: PreviousTx;
+}
+export interface BuiltTx {
+    /** The PSBT, base64 (the signing payload a cold signer receives). */
+    readonly psbt: string;
+    /** One signature hash per input, in input order. */
+    readonly digests: readonly Uint8Array[];
+    /** The txid, when every input is witness-type (it is then fixed before signing). */
+    readonly txid?: string;
+}
+/**
+ * Untrusted transaction hex (a node's answer) as a previous transaction, read in one linear
+ * pass by `rawtx.ts` (bitcoinjs' decoder is quadratic), capped before decoding
+ * and at the million bytes without witness a chain can hold; `undefined` when it
+ * does not decode.
+ */
+export declare function previousTxOf(hex: string): PreviousTx | undefined;
+/**
+ * Whether `error` is `assertPrevious`'s refusal: a previous transaction whose output
+ * disagrees with the input's txid, value or script, or that has no such output. A caller
+ * that read those from a provider maps it to the provider.
+ */
+export declare function isPreviousTxRefusal(error: unknown): boolean;
+/**
+ * An input is what its previous transaction says: `prev` is the outpoint's
+ * transaction (its txid, which the bytes hash to), and it has the output, with the input's
+ * value and the wallet's script. Otherwise `INVALID_INTENT` (`isPreviousTxRefusal`).
+ */
+export declare function assertPrevious(prev: PreviousTx, input: Spendable, script: Uint8Array): void;
+/**
+ * The unsigned transaction (version 2, lock time 0) and its PSBT, spending `inputs` of the
+ * wallet to `outputs` in the given order.
+ */
+export declare function buildTx(network: Network, wallet: WalletAddress, inputs: readonly PlannedInput[], outputs: readonly PlannedOutput[], sequence: number): BuiltTx;
+/** The unsigned transaction a PSBT carries (BIP174 `PSBT_GLOBAL_UNSIGNED_TX`). */
+export declare function unsignedTxOf(psbt: Psbt): Uint8Array;
+export declare function parsePsbt(base64: string, network: Network): Psbt;
+export interface PsbtTxView {
+    readonly inputs: readonly {
+        readonly outpoint: string;
+        readonly txid: string;
+        readonly vout: number;
+        readonly value: bigint;
+        readonly sequence: number;
+    }[];
+    readonly outputs: readonly {
+        readonly script: Uint8Array;
+        readonly value: bigint;
+    }[];
+}
+/** Inputs (with the values the PSBT commits to) and outputs of our own stored PSBT. */
+export declare function viewPsbt(base64: string, network: Network): PsbtTxView;
+/**
+ * The signed transaction from our stored PSBT and one signature per request (`in:<i>`):
+ * ECDSA as a DER signature with SIGHASH_ALL (partial signature), Schnorr as a 64-byte
+ * key-path signature. Nothing but the signature bytes comes from outside.
+ */
+export declare function assembleTx(base64: string, network: Network, requests: readonly SigningRequest[], signatures: readonly SignatureBundle[]): {
+    readonly hex: string;
+    readonly txid: string;
+};
+/**
+ * The signatures of a PSBT signed elsewhere, synchronous and I/O-free. The
+ * signed PSBT is untrusted (`signed-psbt.ts`): parsed strictly, it must carry exactly our
+ * unsigned transaction (anti-tamper) and nothing that could change the spend. From each
+ * input only the signature for the request's key is taken (partial or final), and the core
+ * then verifies it against the stored digest and key. An input without one is left out (a
+ * partial set). Every refusal is `INVALID_INTENT` with a fixed text.
+ */
+export declare function signaturesFromPsbt(storedBase64: string, signedBase64: string, network: Network, requests: readonly SigningRequest[]): SignatureBundle[];
+/** bitcoinjs network parameters for a network's address parameters. */
+export declare function networkOf(params: {
+    bech32: string;
+    pubKeyHash: number;
+    scriptHash: number;
+}): Network;
+/**
+ * The txid of untrusted transaction hex, read linearly (`rawtx.ts`);
+ * `INVALID_INTENT` when it does not decode or holds more than a chain can.
+ */
+export declare function txidOfHex(hex: string): string;
+/**
+ * The txid `hex` would have with canonical p2pkh scriptSigs: per input, the last push
+ * that is a strict-DER SIGHASH_ALL signature (normalized to low-s) and the last push that
+ * is a 33-byte key hashing to `pubkeyHash`, re-pushed minimally as `<sig> <key>`. A third
+ * party without the key can change only that encoding (BIP66 strict DER is consensus; the
+ * sighash byte is signed), so this equals our Attempt's txid exactly when `hex` is a
+ * malleated copy of it: same version, lock time, outpoints, sequences and outputs.
+ * `undefined` when an input has a witness or no such pushes.
+ */
+export declare function canonicalTwinTxid(hex: string, pubkeyHash: Uint8Array): string | undefined;

package/dist/adapters/utxo/codec.js

@@ -0,0 +1,408 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.SEQUENCE_FINAL_LOCKTIME = exports.SEQUENCE_RBF = exports.SIGHASH_DEFAULT = exports.SIGHASH_ALL = void 0;
+exports.previousTxOf = previousTxOf;
+exports.isPreviousTxRefusal = isPreviousTxRefusal;
+exports.assertPrevious = assertPrevious;
+exports.buildTx = buildTx;
+exports.unsignedTxOf = unsignedTxOf;
+exports.parsePsbt = parsePsbt;
+exports.viewPsbt = viewPsbt;
+exports.assembleTx = assembleTx;
+exports.signaturesFromPsbt = signaturesFromPsbt;
+exports.networkOf = networkOf;
+exports.txidOfHex = txidOfHex;
+exports.canonicalTwinTxid = canonicalTwinTxid;
+/**
+ * The bitcoinjs-lib codec: the unsigned transaction and its PSBT (BIP174), the
+ * per-input signature hashes (legacy, BIP143 for segwit v0, BIP341 key path for taproot),
+ * assembly of the signed transaction, and the signatures of a PSBT signed elsewhere. The
+ * driver persists only the PSBT (base64) and plain data, never an SDK object, and
+ * re-parses it here.
+ */
+const utils_1 = require("@noble/curves/abstract/utils");
+const secp256k1_1 = require("@noble/curves/secp256k1");
+const error_1 = require("../../core/errors/error");
+const bytes_1 = require("../../core/util/bytes");
+const address_1 = require("./address");
+const rawtx_1 = require("./rawtx");
+const sdk_1 = require("./sdk");
+const signed_psbt_1 = require("./signed-psbt");
+/** The sighash types each input signs with (ALL; DEFAULT for p2tr), defined with the reader. */
+var signed_psbt_2 = require("./signed-psbt");
+Object.defineProperty(exports, "SIGHASH_ALL", { enumerable: true, get: function () { return signed_psbt_2.SIGHASH_ALL; } });
+Object.defineProperty(exports, "SIGHASH_DEFAULT", { enumerable: true, get: function () { return signed_psbt_2.SIGHASH_DEFAULT; } });
+/** BIP125 opt-in (and relative lock time disabled); `0xfffffffe` when RBF is off. */
+exports.SEQUENCE_RBF = 0xfffffffd;
+exports.SEQUENCE_FINAL_LOCKTIME = 0xfffffffe;
+/** Bitcoin Core's `MAX_MONEY` (21 million bitcoin): no amount is larger. */
+const MAX_MONEY = 2100000000000000n;
+const TXID = /^[0-9a-f]{64}$/;
+const isU32 = (n) => Number.isInteger(n) && n >= 0 && n <= 0xffffffff;
+const isMoney = (value) => typeof value === 'bigint' && value >= 0n && value <= MAX_MONEY;
+/** Internal byte order of a txid (bitcoinjs `addInput` takes the reversed display hex). */
+const txidBytes = (txid) => (0, bytes_1.fromHex)(txid).reverse();
+/**
+ * Untrusted transaction hex (a node's answer) as a previous transaction, read in one linear
+ * pass by `rawtx.ts` (bitcoinjs' decoder is quadratic), capped before decoding
+ * and at the million bytes without witness a chain can hold; `undefined` when it
+ * does not decode.
+ */
+function previousTxOf(hex) {
+    const tx = (0, rawtx_1.readTxHex)(hex);
+    if (!tx)
+        return undefined;
+    return {
+        txid: tx.txid,
+        // Copies: a cached previous transaction keeps no view of the bytes with the witness.
+        outputs: tx.outputs.map((output) => ({
+            value: output.value,
+            script: Uint8Array.from(output.script),
+        })),
+        bytes: tx.hasWitness ? tx.stripped() : Uint8Array.from(tx.stripped()),
+    };
+}
+/**
+ * Every integer `buildTx` encodes fits its field, never wrapped; anything else is refused
+ * with a fixed text that names no value (bitcoinjs' own check quotes it).
+ */
+function assertEncodable(inputs, outputs, sequence) {
+    if (!isU32(sequence)) {
+        throw new error_1.ValidationError('INVALID_INTENT', 'the input sequence is out of range');
+    }
+    const outpoints = new Set();
+    for (const input of inputs) {
+        if (!TXID.test(input.txid) || !isU32(input.vout)) {
+            throw new error_1.ValidationError('INVALID_INTENT', 'an input outpoint is out of range');
+        }
+        const outpoint = `${input.txid}:${input.vout}`;
+        if (outpoints.has(outpoint)) {
+            throw new error_1.ValidationError('INVALID_INTENT', 'an input outpoint is listed twice');
+        }
+        outpoints.add(outpoint);
+        if (!isMoney(input.value)) {
+            throw new error_1.ValidationError('INVALID_AMOUNT', 'an input value is out of range');
+        }
+    }
+    for (const output of outputs) {
+        if (!isMoney(output.value)) {
+            throw new error_1.ValidationError('INVALID_AMOUNT', 'an output value is out of range');
+        }
+    }
+}
+const PREVIOUS_MISMATCH = 'a previous transaction does not match its outpoint';
+/**
+ * Whether `error` is `assertPrevious`'s refusal: a previous transaction whose output
+ * disagrees with the input's txid, value or script, or that has no such output. A caller
+ * that read those from a provider maps it to the provider.
+ */
+function isPreviousTxRefusal(error) {
+    return (0, error_1.isCryptoAioError)(error, 'INVALID_INTENT') && error.message === PREVIOUS_MISMATCH;
+}
+/**
+ * An input is what its previous transaction says: `prev` is the outpoint's
+ * transaction (its txid, which the bytes hash to), and it has the output, with the input's
+ * value and the wallet's script. Otherwise `INVALID_INTENT` (`isPreviousTxRefusal`).
+ */
+function assertPrevious(prev, input, script) {
+    const output = prev.outputs[input.vout];
+    if (prev.txid !== input.txid ||
+        !output ||
+        output.value !== input.value ||
+        !(0, bytes_1.equalBytes)(output.script, script)) {
+        throw new error_1.ValidationError('INVALID_INTENT', PREVIOUS_MISMATCH);
+    }
+}
+/**
+ * The unsigned transaction (version 2, lock time 0) and its PSBT, spending `inputs` of the
+ * wallet to `outputs` in the given order.
+ */
+function buildTx(network, wallet, inputs, outputs, sequence) {
+    assertEncodable(inputs, outputs, sequence);
+    (0, sdk_1.useNobleEcc)();
+    const tx = new sdk_1.bitcoin.Transaction();
+    tx.version = 2;
+    tx.locktime = 0;
+    for (const input of inputs)
+        tx.addInput(txidBytes(input.txid), input.vout, sequence);
+    for (const output of outputs)
+        tx.addOutput(output.script, output.value);
+    const psbt = new sdk_1.bitcoin.Psbt({ network });
+    psbt.setVersion(2);
+    psbt.setLocktime(0);
+    for (const input of inputs) {
+        if (wallet.type === 'p2pkh' && input.prevTx === undefined) {
+            throw new error_1.ValidationError('INVALID_INTENT', 'a p2pkh input needs its verified previous transaction');
+        }
+        if (input.prevTx !== undefined)
+            assertPrevious(input.prevTx, input, wallet.script);
+        const prevTx = input.prevTx?.bytes;
+        psbt.addInput({
+            hash: input.txid,
+            index: input.vout,
+            sequence,
+            ...(wallet.type === 'p2pkh'
+                ? {}
+                : { witnessUtxo: { script: wallet.script, value: input.value } }),
+            ...(prevTx !== undefined && wallet.type !== 'p2tr'
+                ? { nonWitnessUtxo: prevTx }
+                : {}),
+            ...(wallet.redeemScript ? { redeemScript: wallet.redeemScript } : {}),
+            ...(wallet.type === 'p2tr' ? { tapInternalKey: wallet.publicKey } : {}),
+        });
+    }
+    for (const output of outputs)
+        psbt.addOutput({ script: output.script, value: output.value });
+    if (!(0, bytes_1.equalBytes)(unsignedTxOf(psbt), tx.toBuffer())) {
+        throw new error_1.SigningError('SIGNING_FAILED', 'the PSBT does not encode the built transaction');
+    }
+    const digests = inputs.map((input, index) => {
+        switch (wallet.type) {
+            case 'p2pkh':
+                return tx.hashForSignature(index, wallet.script, signed_psbt_1.SIGHASH_ALL);
+            case 'p2wpkh':
+            case 'p2sh-p2wpkh':
+                // BIP143: the script code of a p2wpkh program is the p2pkh script of its key hash.
+                return tx.hashForWitnessV0(index, (0, address_1.outputScript)('p2pkh', (0, address_1.hash160)(wallet.publicKey)), input.value, signed_psbt_1.SIGHASH_ALL);
+            case 'p2tr':
+                return tx.hashForWitnessV1(index, inputs.map(() => wallet.script), inputs.map((i) => i.value), signed_psbt_1.SIGHASH_DEFAULT);
+        }
+    });
+    let txid;
+    if (wallet.type !== 'p2pkh') {
+        const final = tx.clone();
+        if (wallet.redeemScript) {
+            const scriptSig = sdk_1.bitcoin.script.compile([wallet.redeemScript]);
+            for (let i = 0; i < inputs.length; i++)
+                final.setInputScript(i, scriptSig);
+        }
+        txid = final.getId();
+    }
+    return { psbt: psbt.toBase64(), digests, ...(txid !== undefined ? { txid } : {}) };
+}
+/** The unsigned transaction a PSBT carries (BIP174 `PSBT_GLOBAL_UNSIGNED_TX`). */
+function unsignedTxOf(psbt) {
+    return psbt.data.globalMap.unsignedTx.toBuffer();
+}
+function parsePsbt(base64, network) {
+    // Parsing reads taproot fields and output addresses, which need the ECC backend.
+    (0, sdk_1.useNobleEcc)();
+    try {
+        return sdk_1.bitcoin.Psbt.fromBase64(base64, { network });
+    }
+    catch {
+        throw new error_1.ValidationError('INVALID_INTENT', 'the payload is not a valid PSBT');
+    }
+}
+/** Inputs (with the values the PSBT commits to) and outputs of our own stored PSBT. */
+function viewPsbt(base64, network) {
+    const psbt = parsePsbt(base64, network);
+    const inputs = psbt.txInputs.map((input, index) => {
+        const data = psbt.data.inputs[index];
+        const txid = (0, bytes_1.toHex)(Uint8Array.from(input.hash).reverse());
+        let value;
+        if (data?.witnessUtxo)
+            value = data.witnessUtxo.value;
+        else if (data?.nonWitnessUtxo) {
+            // Read linearly, though `buildTx` checked it: a real one can be large, and
+            // bitcoinjs' decoder is quadratic.
+            const prev = (0, rawtx_1.readTx)(data.nonWitnessUtxo);
+            const output = prev?.txid === txid ? prev.outputs[input.index] : undefined;
+            if (!output) {
+                throw new error_1.ValidationError('INVALID_INTENT', 'a PSBT input does not match its previous transaction');
+            }
+            value = output.value;
+        }
+        else
+            throw new error_1.ValidationError('INVALID_INTENT', 'a PSBT input has no UTXO');
+        return {
+            outpoint: `${txid}:${input.index}`,
+            txid,
+            vout: input.index,
+            value,
+            sequence: input.sequence ?? 0xffffffff,
+        };
+    });
+    const outputs = psbt.txOutputs.map((output) => ({
+        script: output.script,
+        value: output.value,
+    }));
+    return { inputs, outputs };
+}
+/**
+ * The signed transaction from our stored PSBT and one signature per request (`in:<i>`):
+ * ECDSA as a DER signature with SIGHASH_ALL (partial signature), Schnorr as a 64-byte
+ * key-path signature. Nothing but the signature bytes comes from outside.
+ */
+function assembleTx(base64, network, requests, signatures) {
+    const psbt = parsePsbt(base64, network);
+    if (requests.length !== psbt.inputCount) {
+        throw new error_1.SigningError('SIGNING_FAILED', 'one signing request per input is required');
+    }
+    requests.forEach((request, index) => {
+        const signature = signatures.find((s) => s.requestId === request.id);
+        if (!signature || signature.bytes.length !== 64) {
+            throw new error_1.SigningError('SIGNING_FAILED', `missing signature for request ${request.id}`);
+        }
+        if (request.scheme === 'secp256k1-schnorr') {
+            psbt.updateInput(index, { tapKeySig: signature.bytes });
+        }
+        else {
+            psbt.updateInput(index, {
+                partialSig: [
+                    {
+                        pubkey: request.publicKey,
+                        signature: sdk_1.bitcoin.script.signature.encode(signature.bytes, signed_psbt_1.SIGHASH_ALL),
+                    },
+                ],
+            });
+        }
+    });
+    try {
+        psbt.finalizeAllInputs();
+    }
+    catch {
+        throw new error_1.SigningError('SIGNING_FAILED', 'the PSBT could not be finalized');
+    }
+    // The absurd-fee guard ran when the transaction was built; bitcoinjs' own check is off.
+    const tx = psbt.extractTransaction(true);
+    return { hex: tx.toHex(), txid: tx.getId() };
+}
+/**
+ * The signatures of a PSBT signed elsewhere, synchronous and I/O-free. The
+ * signed PSBT is untrusted (`signed-psbt.ts`): parsed strictly, it must carry exactly our
+ * unsigned transaction (anti-tamper) and nothing that could change the spend. From each
+ * input only the signature for the request's key is taken (partial or final), and the core
+ * then verifies it against the stored digest and key. An input without one is left out (a
+ * partial set). Every refusal is `INVALID_INTENT` with a fixed text.
+ */
+function signaturesFromPsbt(storedBase64, signedBase64, network, requests) {
+    const stored = parsePsbt(storedBase64, network);
+    if (requests.length !== stored.inputCount) {
+        throw new error_1.SigningError('SIGNING_FAILED', 'one signing request per input is required');
+    }
+    const signed = (0, signed_psbt_1.parseSigned)(signedBase64, stored, storedBase64, network);
+    if (!(0, bytes_1.equalBytes)(unsignedTxOf(signed), unsignedTxOf(stored))) {
+        throw (0, signed_psbt_1.signedPsbtError)('is not the prepared transaction');
+    }
+    (0, signed_psbt_1.assertSignedFields)(signed, stored);
+    const bundles = [];
+    requests.forEach((request, index) => {
+        const input = signed.data.inputs[index];
+        if (request.scheme === 'secp256k1-schnorr') {
+            const signature = (0, signed_psbt_1.schnorrSignatureOf)(input);
+            if (signature)
+                bundles.push({ requestId: request.id, bytes: Uint8Array.from(signature) });
+            return;
+        }
+        const ours = stored.data.inputs[index];
+        const signature = (0, signed_psbt_1.ecdsaSignatureOf)(request.publicKey, input, ours);
+        if (signature) {
+            bundles.push({
+                requestId: request.id,
+                bytes: Uint8Array.from(signature),
+                recovery: recoveryOf(signature, request),
+            });
+        }
+    });
+    return bundles;
+}
+/** The recovery bit that recovers the request's key (0 when neither does: it then fails verification). */
+function recoveryOf(signature, request) {
+    for (const bit of [0, 1]) {
+        try {
+            const key = secp256k1_1.secp256k1.Signature.fromCompact(signature)
+                .addRecoveryBit(bit)
+                .recoverPublicKey(request.payload)
+                .toRawBytes(true);
+            if ((0, bytes_1.equalBytes)(key, request.publicKey))
+                return bit;
+        }
+        catch {
+            // Try the other bit.
+        }
+    }
+    return 0;
+}
+/** bitcoinjs network parameters for a network's address parameters. */
+function networkOf(params) {
+    const base = params.bech32 === 'bc'
+        ? sdk_1.bitcoin.networks.bitcoin
+        : params.bech32 === 'bcrt'
+            ? sdk_1.bitcoin.networks.regtest
+            : sdk_1.bitcoin.networks.testnet;
+    return {
+        ...base,
+        bech32: params.bech32,
+        pubKeyHash: params.pubKeyHash,
+        scriptHash: params.scriptHash,
+    };
+}
+/**
+ * The txid of untrusted transaction hex, read linearly (`rawtx.ts`);
+ * `INVALID_INTENT` when it does not decode or holds more than a chain can.
+ */
+function txidOfHex(hex) {
+    const tx = (0, rawtx_1.readTxHex)(hex);
+    if (!tx) {
+        throw new error_1.ValidationError('INVALID_INTENT', 'a transaction does not decode');
+    }
+    return tx.txid;
+}
+/**
+ * The txid `hex` would have with canonical p2pkh scriptSigs: per input, the last push
+ * that is a strict-DER SIGHASH_ALL signature (normalized to low-s) and the last push that
+ * is a 33-byte key hashing to `pubkeyHash`, re-pushed minimally as `<sig> <key>`. A third
+ * party without the key can change only that encoding (BIP66 strict DER is consensus; the
+ * sighash byte is signed), so this equals our Attempt's txid exactly when `hex` is a
+ * malleated copy of it: same version, lock time, outpoints, sequences and outputs.
+ * `undefined` when an input has a witness or no such pushes.
+ */
+function canonicalTwinTxid(hex, pubkeyHash) {
+    // Read linearly; only each input's short script goes through bitcoinjs.
+    const tx = (0, rawtx_1.readTxHex)(hex);
+    if (!tx || tx.hasWitness)
+        return undefined;
+    if (tx.inputs.length === 0)
+        return tx.txid;
+    const half = secp256k1_1.secp256k1.CURVE.n >> 1n;
+    const scripts = [];
+    for (const input of tx.inputs) {
+        const chunks = sdk_1.bitcoin.script.decompile(input.script);
+        if (!chunks)
+            return undefined;
+        let signature;
+        let key;
+        for (const chunk of chunks) {
+            if (typeof chunk === 'number')
+                continue;
+            if (chunk.length === 33 && (0, bytes_1.equalBytes)((0, address_1.hash160)(chunk), pubkeyHash))
+                key = chunk;
+            try {
+                const decoded = sdk_1.bitcoin.script.signature.decode(chunk);
+                if (decoded.hashType === signed_psbt_1.SIGHASH_ALL)
+                    signature = decoded.signature;
+            }
+            catch {
+                // Not a signature push.
+            }
+        }
+        if (!signature || !key)
+            return undefined;
+        const r = signature.slice(0, 32);
+        let s = (0, utils_1.bytesToNumberBE)(signature.slice(32));
+        if (s > half)
+            s = secp256k1_1.secp256k1.CURVE.n - s;
+        const low = (0, bytes_1.concatBytes)(r, (0, utils_1.numberToBytesBE)(s, 32));
+        scripts.push(sdk_1.bitcoin.script.compile([sdk_1.bitcoin.script.signature.encode(low, signed_psbt_1.SIGHASH_ALL), key]));
+    }
+    // The serialization without witness data, with the canonical scripts in place.
+    const parts = [(0, rawtx_1.writeU32)(tx.version), (0, rawtx_1.writeSize)(tx.inputs.length)];
+    tx.inputs.forEach((input, index) => {
+        const script = scripts[index];
+        parts.push(input.hash, (0, rawtx_1.writeU32)(input.vout), (0, rawtx_1.writeSize)(script.length), script, (0, rawtx_1.writeU32)(input.sequence));
+    });
+    parts.push(tx.outputBytes, (0, rawtx_1.writeU32)(tx.locktime));
+    return (0, rawtx_1.txidOfParts)(parts);
+}
+//# sourceMappingURL=codec.js.map

package/dist/adapters/utxo/codec.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"codec.js","sourceRoot":"","sources":["../../../src/adapters/utxo/codec.ts"],"names":[],"mappings":";;;AAiFA,oCAYC;AA0CD,kDAEC;AAOD,wCAcC;AAMD,0BAmFC;AAGD,oCAEC;AAED,8BAQC;AAcD,4BAiCC;AAOD,gCAuCC;AAUD,gDAmCC;AAmBD,8BAiBC;AAMD,8BAMC;AAWD,8CAgDC;AA3fD;;;;;;GAMG;AACH,wDAAgF;AAChF,uDAAoD;AACpD,mDAA0F;AAE1F,iDAAgF;AAChF,uCAAsE;AAEtE,mCAA8E;AAC9E,+BAAsE;AACtE,+CASuB;AAEvB,gGAAgG;AAChG,6CAA6D;AAApD,0GAAA,WAAW,OAAA;AAAE,8GAAA,eAAe,OAAA;AAErC,qFAAqF;AACxE,QAAA,YAAY,GAAG,UAAU,CAAC;AAC1B,QAAA,uBAAuB,GAAG,UAAU,CAAC;AAgClD,4EAA4E;AAC5E,MAAM,SAAS,GAAG,iBAAsB,CAAC;AACzC,MAAM,IAAI,GAAG,gBAAgB,CAAC;AAE9B,MAAM,KAAK,GAAG,CAAC,CAAS,EAAW,EAAE,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,UAAU,CAAC;AACvF,MAAM,OAAO,GAAG,CAAC,KAAa,EAAW,EAAE,CACzC,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,IAAI,EAAE,IAAI,KAAK,IAAI,SAAS,CAAC;AAEjE,2FAA2F;AAC3F,MAAM,SAAS,GAAG,CAAC,IAAY,EAAc,EAAE,CAAC,IAAA,eAAO,EAAC,IAAI,CAAC,CAAC,OAAO,EAAE,CAAC;AAExE;;;;;GAKG;AACH,SAAgB,YAAY,CAAC,GAAW;IACtC,MAAM,EAAE,GAAG,IAAA,iBAAS,EAAC,GAAG,CAAC,CAAC;IAC1B,IAAI,CAAC,EAAE;QAAE,OAAO,SAAS,CAAC;IAC1B,OAAO;QACL,IAAI,EAAE,EAAE,CAAC,IAAI;QACb,qFAAqF;QACrF,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;YACnC,KAAK,EAAE,MAAM,CAAC,KAAK;YACnB,MAAM,EAAE,UAAU,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC;SACvC,CAAC,CAAC;QACH,KAAK,EAAE,EAAE,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC,QAAQ,EAAE,CAAC;KACtE,CAAC;AACJ,CAAC;AAED;;;GAGG;AACH,SAAS,eAAe,CACtB,MAA+B,EAC/B,OAAiC,EACjC,QAAgB;IAEhB,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,EAAE,CAAC;QACrB,MAAM,IAAI,uBAAe,CAAC,gBAAgB,EAAE,oCAAoC,CAAC,CAAC;IACpF,CAAC;IACD,MAAM,SAAS,GAAG,IAAI,GAAG,EAAU,CAAC;IACpC,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;QAC3B,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC;YACjD,MAAM,IAAI,uBAAe,CAAC,gBAAgB,EAAE,mCAAmC,CAAC,CAAC;QACnF,CAAC;QACD,MAAM,QAAQ,GAAG,GAAG,KAAK,CAAC,IAAI,IAAI,KAAK,CAAC,IAAI,EAAE,CAAC;QAC/C,IAAI,SAAS,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,CAAC;YAC5B,MAAM,IAAI,uBAAe,CAAC,gBAAgB,EAAE,mCAAmC,CAAC,CAAC;QACnF,CAAC;QACD,SAAS,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;QACxB,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,EAAE,CAAC;YAC1B,MAAM,IAAI,uBAAe,CAAC,gBAAgB,EAAE,gCAAgC,CAAC,CAAC;QAChF,CAAC;IACH,CAAC;IACD,KAAK,MAAM,MAAM,IAAI,OAAO,EAAE,CAAC;QAC7B,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC;YAC3B,MAAM,IAAI,uBAAe,CAAC,gBAAgB,EAAE,iCAAiC,CAAC,CAAC;QACjF,CAAC;IACH,CAAC;AACH,CAAC;AAED,MAAM,iBAAiB,GAAG,oDAAoD,CAAC;AAE/E;;;;GAIG;AACH,SAAgB,mBAAmB,CAAC,KAAc;IAChD,OAAO,IAAA,wBAAgB,EAAC,KAAK,EAAE,gBAAgB,CAAC,IAAI,KAAK,CAAC,OAAO,KAAK,iBAAiB,CAAC;AAC1F,CAAC;AAED;;;;GAIG;AACH,SAAgB,cAAc,CAC5B,IAAgB,EAChB,KAAgB,EAChB,MAAkB;IAElB,MAAM,MAAM,GAAG,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IACxC,IACE,IAAI,CAAC,IAAI,KAAK,KAAK,CAAC,IAAI;QACxB,CAAC,MAAM;QACP,MAAM,CAAC,KAAK,KAAK,KAAK,CAAC,KAAK;QAC5B,CAAC,IAAA,kBAAU,EAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,EAClC,CAAC;QACD,MAAM,IAAI,uBAAe,CAAC,gBAAgB,EAAE,iBAAiB,CAAC,CAAC;IACjE,CAAC;AACH,CAAC;AAED;;;GAGG;AACH,SAAgB,OAAO,CACrB,OAAgB,EAChB,MAAqB,EACrB,MAA+B,EAC/B,OAAiC,EACjC,QAAgB;IAEhB,eAAe,CAAC,MAAM,EAAE,OAAO,EAAE,QAAQ,CAAC,CAAC;IAC3C,IAAA,iBAAW,GAAE,CAAC;IACd,MAAM,EAAE,GAAG,IAAI,aAAO,CAAC,WAAW,EAAE,CAAC;IACrC,EAAE,CAAC,OAAO,GAAG,CAAC,CAAC;IACf,EAAE,CAAC,QAAQ,GAAG,CAAC,CAAC;IAChB,KAAK,MAAM,KAAK,IAAI,MAAM;QAAE,EAAE,CAAC,QAAQ,CAAC,SAAS,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,KAAK,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC;IACrF,KAAK,MAAM,MAAM,IAAI,OAAO;QAAE,EAAE,CAAC,SAAS,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,KAAK,CAAC,CAAC;IAExE,MAAM,IAAI,GAAG,IAAI,aAAO,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC;IAC3C,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC;IACnB,IAAI,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC;IACpB,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;QAC3B,IAAI,MAAM,CAAC,IAAI,KAAK,OAAO,IAAI,KAAK,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;YAC1D,MAAM,IAAI,uBAAe,CACvB,gBAAgB,EAChB,uDAAuD,CACxD,CAAC;QACJ,CAAC;QACD,IAAI,KAAK,CAAC,MAAM,KAAK,SAAS;YAAE,cAAc,CAAC,KAAK,CAAC,MAAM,EAAE,KAAK,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC;QACnF,MAAM,MAAM,GAAG,KAAK,CAAC,MAAM,EAAE,KAAK,CAAC;QACnC,IAAI,CAAC,QAAQ,CAAC;YACZ,IAAI,EAAE,KAAK,CAAC,IAAI;YAChB,KAAK,EAAE,KAAK,CAAC,IAAI;YACjB,QAAQ;YACR,GAAG,CAAC,MAAM,CAAC,IAAI,KAAK,OAAO;gBACzB,CAAC,CAAC,EAAE;gBACJ,CAAC,CAAC,EAAE,WAAW,EAAE,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,KAAK,EAAE,KAAK,CAAC,KAAK,EAAE,EAAE,CAAC;YACnE,GAAG,CAAC,MAAM,KAAK,SAAS,IAAI,MAAM,CAAC,IAAI,KAAK,MAAM;gBAChD,CAAC,CAAC,EAAE,cAAc,EAAE,MAAM,EAAE;gBAC5B,CAAC,CAAC,EAAE,CAAC;YACP,GAAG,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC,CAAC,EAAE,YAAY,EAAE,MAAM,CAAC,YAAY,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACrE,GAAG,CAAC,MAAM,CAAC,IAAI,KAAK,MAAM,CAAC,CAAC,CAAC,EAAE,cAAc,EAAE,MAAM,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SACxE,CAAC,CAAC;IACL,CAAC;IACD,KAAK,MAAM,MAAM,IAAI,OAAO;QAC1B,IAAI,CAAC,SAAS,CAAC,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,EAAE,CAAC,CAAC;IACjE,IAAI,CAAC,IAAA,kBAAU,EAAC,YAAY,CAAC,IAAI,CAAC,EAAE,EAAE,CAAC,QAAQ,EAAE,CAAC,EAAE,CAAC;QACnD,MAAM,IAAI,oBAAY,CACpB,gBAAgB,EAChB,gDAAgD,CACjD,CAAC;IACJ,CAAC;IAED,MAAM,OAAO,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,KAAK,EAAE,EAAE;QAC1C,QAAQ,MAAM,CAAC,IAAI,EAAE,CAAC;YACpB,KAAK,OAAO;gBACV,OAAO,EAAE,CAAC,gBAAgB,CAAC,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,yBAAW,CAAC,CAAC;YAChE,KAAK,QAAQ,CAAC;YACd,KAAK,aAAa;gBAChB,mFAAmF;gBACnF,OAAO,EAAE,CAAC,gBAAgB,CACxB,KAAK,EACL,IAAA,sBAAY,EAAC,OAAO,EAAE,IAAA,iBAAO,EAAC,MAAM,CAAC,SAAS,CAAC,CAAC,EAChD,KAAK,CAAC,KAAK,EACX,yBAAW,CACZ,CAAC;YACJ,KAAK,MAAM;gBACT,OAAO,EAAE,CAAC,gBAAgB,CACxB,KAAK,EACL,MAAM,CAAC,GAAG,CAAC,GAAG,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC,EAC/B,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,EAC1B,6BAAe,CAChB,CAAC;QACN,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,IAAI,IAAwB,CAAC;IAC7B,IAAI,MAAM,CAAC,IAAI,KAAK,OAAO,EAAE,CAAC;QAC5B,MAAM,KAAK,GAAG,EAAE,CAAC,KAAK,EAAE,CAAC;QACzB,IAAI,MAAM,CAAC,YAAY,EAAE,CAAC;YACxB,MAAM,SAAS,GAAG,aAAO,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC,CAAC;YAChE,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,MAAM,CAAC,MAAM,EAAE,CAAC,EAAE;gBAAE,KAAK,CAAC,cAAc,CAAC,CAAC,EAAE,SAAS,CAAC,CAAC;QAC7E,CAAC;QACD,IAAI,GAAG,KAAK,CAAC,KAAK,EAAE,CAAC;IACvB,CAAC;IACD,OAAO,EAAE,IAAI,EAAE,IAAI,CAAC,QAAQ,EAAE,EAAE,OAAO,EAAE,GAAG,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC;AACrF,CAAC;AAED,kFAAkF;AAClF,SAAgB,YAAY,CAAC,IAAU;IACrC,OAAO,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,UAAU,CAAC,QAAQ,EAAE,CAAC;AACnD,CAAC;AAED,SAAgB,SAAS,CAAC,MAAc,EAAE,OAAgB;IACxD,iFAAiF;IACjF,IAAA,iBAAW,GAAE,CAAC;IACd,IAAI,CAAC;QACH,OAAO,aAAO,CAAC,IAAI,CAAC,UAAU,CAAC,MAAM,EAAE,EAAE,OAAO,EAAE,CAAC,CAAC;IACtD,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,IAAI,uBAAe,CAAC,gBAAgB,EAAE,iCAAiC,CAAC,CAAC;IACjF,CAAC;AACH,CAAC;AAaD,uFAAuF;AACvF,SAAgB,QAAQ,CAAC,MAAc,EAAE,OAAgB;IACvD,MAAM,IAAI,GAAG,SAAS,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACxC,MAAM,MAAM,GAAG,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,KAAK,EAAE,EAAE;QAChD,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QACrC,MAAM,IAAI,GAAG,IAAA,aAAK,EAAC,UAAU,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC;QAC1D,IAAI,KAAa,CAAC;QAClB,IAAI,IAAI,EAAE,WAAW;YAAE,KAAK,GAAG,IAAI,CAAC,WAAW,CAAC,KAAK,CAAC;aACjD,IAAI,IAAI,EAAE,cAAc,EAAE,CAAC;YAC9B,2EAA2E;YAC3E,mCAAmC;YACnC,MAAM,IAAI,GAAG,IAAA,cAAM,EAAC,IAAI,CAAC,cAAc,CAAC,CAAC;YACzC,MAAM,MAAM,GAAG,IAAI,EAAE,IAAI,KAAK,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;YAC3E,IAAI,CAAC,MAAM,EAAE,CAAC;gBACZ,MAAM,IAAI,uBAAe,CACvB,gBAAgB,EAChB,sDAAsD,CACvD,CAAC;YACJ,CAAC;YACD,KAAK,GAAG,MAAM,CAAC,KAAK,CAAC;QACvB,CAAC;;YAAM,MAAM,IAAI,uBAAe,CAAC,gBAAgB,EAAE,0BAA0B,CAAC,CAAC;QAC/E,OAAO;YACL,QAAQ,EAAE,GAAG,IAAI,IAAI,KAAK,CAAC,KAAK,EAAE;YAClC,IAAI;YACJ,IAAI,EAAE,KAAK,CAAC,KAAK;YACjB,KAAK;YACL,QAAQ,EAAE,KAAK,CAAC,QAAQ,IAAI,UAAU;SACvC,CAAC;IACJ,CAAC,CAAC,CAAC;IACH,MAAM,OAAO,GAAG,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;QAC9C,MAAM,EAAE,MAAM,CAAC,MAAM;QACrB,KAAK,EAAE,MAAM,CAAC,KAAK;KACpB,CAAC,CAAC,CAAC;IACJ,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC;AAC7B,CAAC;AAED;;;;GAIG;AACH,SAAgB,UAAU,CACxB,MAAc,EACd,OAAgB,EAChB,QAAmC,EACnC,UAAsC;IAEtC,MAAM,IAAI,GAAG,SAAS,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACxC,IAAI,QAAQ,CAAC,MAAM,KAAK,IAAI,CAAC,UAAU,EAAE,CAAC;QACxC,MAAM,IAAI,oBAAY,CAAC,gBAAgB,EAAE,2CAA2C,CAAC,CAAC;IACxF,CAAC;IACD,QAAQ,CAAC,OAAO,CAAC,CAAC,OAAO,EAAE,KAAK,EAAE,EAAE;QAClC,MAAM,SAAS,GAAG,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,SAAS,KAAK,OAAO,CAAC,EAAE,CAAC,CAAC;QACrE,IAAI,CAAC,SAAS,IAAI,SAAS,CAAC,KAAK,CAAC,MAAM,KAAK,EAAE,EAAE,CAAC;YAChD,MAAM,IAAI,oBAAY,CACpB,gBAAgB,EAChB,iCAAiC,OAAO,CAAC,EAAE,EAAE,CAC9C,CAAC;QACJ,CAAC;QACD,IAAI,OAAO,CAAC,MAAM,KAAK,mBAAmB,EAAE,CAAC;YAC3C,IAAI,CAAC,WAAW,CAAC,KAAK,EAAE,EAAE,SAAS,EAAE,SAAS,CAAC,KAAK,EAAE,CAAC,CAAC;QAC1D,CAAC;aAAM,CAAC;YACN,IAAI,CAAC,WAAW,CAAC,KAAK,EAAE;gBACtB,UAAU,EAAE;oBACV;wBACE,MAAM,EAAE,OAAO,CAAC,SAAS;wBACzB,SAAS,EAAE,aAAO,CAAC,MAAM,CAAC,SAAS,CAAC,MAAM,CAAC,SAAS,CAAC,KAAK,EAAE,yBAAW,CAAC;qBACzE;iBACF;aACF,CAAC,CAAC;QACL,CAAC;IACH,CAAC,CAAC,CAAC;IACH,IAAI,CAAC;QACH,IAAI,CAAC,iBAAiB,EAAE,CAAC;IAC3B,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,IAAI,oBAAY,CAAC,gBAAgB,EAAE,iCAAiC,CAAC,CAAC;IAC9E,CAAC;IACD,wFAAwF;IACxF,MAAM,EAAE,GAAG,IAAI,CAAC,kBAAkB,CAAC,IAAI,CAAC,CAAC;IACzC,OAAO,EAAE,GAAG,EAAE,EAAE,CAAC,KAAK,EAAE,EAAE,IAAI,EAAE,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC;AAC/C,CAAC;AAED;;;;;;;GAOG;AACH,SAAgB,kBAAkB,CAChC,YAAoB,EACpB,YAAoB,EACpB,OAAgB,EAChB,QAAmC;IAEnC,MAAM,MAAM,GAAG,SAAS,CAAC,YAAY,EAAE,OAAO,CAAC,CAAC;IAChD,IAAI,QAAQ,CAAC,MAAM,KAAK,MAAM,CAAC,UAAU,EAAE,CAAC;QAC1C,MAAM,IAAI,oBAAY,CAAC,gBAAgB,EAAE,2CAA2C,CAAC,CAAC;IACxF,CAAC;IACD,MAAM,MAAM,GAAG,IAAA,yBAAW,EAAC,YAAY,EAAE,MAAM,EAAE,YAAY,EAAE,OAAO,CAAC,CAAC;IACxE,IAAI,CAAC,IAAA,kBAAU,EAAC,YAAY,CAAC,MAAM,CAAC,EAAE,YAAY,CAAC,MAAM,CAAC,CAAC,EAAE,CAAC;QAC5D,MAAM,IAAA,6BAAe,EAAC,iCAAiC,CAAC,CAAC;IAC3D,CAAC;IACD,IAAA,gCAAkB,EAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACnC,MAAM,OAAO,GAAsB,EAAE,CAAC;IACtC,QAAQ,CAAC,OAAO,CAAC,CAAC,OAAO,EAAE,KAAK,EAAE,EAAE;QAClC,MAAM,KAAK,GAAG,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAc,CAAC;QACrD,IAAI,OAAO,CAAC,MAAM,KAAK,mBAAmB,EAAE,CAAC;YAC3C,MAAM,SAAS,GAAG,IAAA,gCAAkB,EAAC,KAAK,CAAC,CAAC;YAC5C,IAAI,SAAS;gBACX,OAAO,CAAC,IAAI,CAAC,EAAE,SAAS,EAAE,OAAO,CAAC,EAAE,EAAE,KAAK,EAAE,UAAU,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC;YAC7E,OAAO;QACT,CAAC;QACD,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAc,CAAC;QACpD,MAAM,SAAS,GAAG,IAAA,8BAAgB,EAAC,OAAO,CAAC,SAAS,EAAE,KAAK,EAAE,IAAI,CAAC,CAAC;QACnE,IAAI,SAAS,EAAE,CAAC;YACd,OAAO,CAAC,IAAI,CAAC;gBACX,SAAS,EAAE,OAAO,CAAC,EAAE;gBACrB,KAAK,EAAE,UAAU,CAAC,IAAI,CAAC,SAAS,CAAC;gBACjC,QAAQ,EAAE,UAAU,CAAC,SAAS,EAAE,OAAO,CAAC;aACzC,CAAC,CAAC;QACL,CAAC;IACH,CAAC,CAAC,CAAC;IACH,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,0GAA0G;AAC1G,SAAS,UAAU,CAAC,SAAqB,EAAE,OAAuB;IAChE,KAAK,MAAM,GAAG,IAAI,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,CAAC;QACzB,IAAI,CAAC;YACH,MAAM,GAAG,GAAG,qBAAS,CAAC,SAAS,CAAC,WAAW,CAAC,SAAS,CAAC;iBACnD,cAAc,CAAC,GAAG,CAAC;iBACnB,gBAAgB,CAAC,OAAO,CAAC,OAAO,CAAC;iBACjC,UAAU,CAAC,IAAI,CAAC,CAAC;YACpB,IAAI,IAAA,kBAAU,EAAC,GAAG,EAAE,OAAO,CAAC,SAAS,CAAC;gBAAE,OAAO,GAAG,CAAC;QACrD,CAAC;QAAC,MAAM,CAAC;YACP,qBAAqB;QACvB,CAAC;IACH,CAAC;IACD,OAAO,CAAC,CAAC;AACX,CAAC;AAED,uEAAuE;AACvE,SAAgB,SAAS,CAAC,MAIzB;IACC,MAAM,IAAI,GACR,MAAM,CAAC,MAAM,KAAK,IAAI;QACpB,CAAC,CAAC,aAAO,CAAC,QAAQ,CAAC,OAAO;QAC1B,CAAC,CAAC,MAAM,CAAC,MAAM,KAAK,MAAM;YACxB,CAAC,CAAC,aAAO,CAAC,QAAQ,CAAC,OAAO;YAC1B,CAAC,CAAC,aAAO,CAAC,QAAQ,CAAC,OAAO,CAAC;IACjC,OAAO;QACL,GAAG,IAAI;QACP,MAAM,EAAE,MAAM,CAAC,MAAM;QACrB,UAAU,EAAE,MAAM,CAAC,UAAU;QAC7B,UAAU,EAAE,MAAM,CAAC,UAAU;KAC9B,CAAC;AACJ,CAAC;AAED;;;GAGG;AACH,SAAgB,SAAS,CAAC,GAAW;IACnC,MAAM,EAAE,GAAG,IAAA,iBAAS,EAAC,GAAG,CAAC,CAAC;IAC1B,IAAI,CAAC,EAAE,EAAE,CAAC;QACR,MAAM,IAAI,uBAAe,CAAC,gBAAgB,EAAE,+BAA+B,CAAC,CAAC;IAC/E,CAAC;IACD,OAAO,EAAE,CAAC,IAAI,CAAC;AACjB,CAAC;AAED;;;;;;;;GAQG;AACH,SAAgB,iBAAiB,CAC/B,GAAW,EACX,UAAsB;IAEtB,wEAAwE;IACxE,MAAM,EAAE,GAAG,IAAA,iBAAS,EAAC,GAAG,CAAC,CAAC;IAC1B,IAAI,CAAC,EAAE,IAAI,EAAE,CAAC,UAAU;QAAE,OAAO,SAAS,CAAC;IAC3C,IAAI,EAAE,CAAC,MAAM,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,EAAE,CAAC,IAAI,CAAC;IAC3C,MAAM,IAAI,GAAG,qBAAS,CAAC,KAAK,CAAC,CAAC,IAAI,EAAE,CAAC;IACrC,MAAM,OAAO,GAAiB,EAAE,CAAC;IACjC,KAAK,MAAM,KAAK,IAAI,EAAE,CAAC,MAAM,EAAE,CAAC;QAC9B,MAAM,MAAM,GAAG,aAAO,CAAC,MAAM,CAAC,SAAS,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;QACtD,IAAI,CAAC,MAAM;YAAE,OAAO,SAAS,CAAC;QAC9B,IAAI,SAAiC,CAAC;QACtC,IAAI,GAA2B,CAAC;QAChC,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;YAC3B,IAAI,OAAO,KAAK,KAAK,QAAQ;gBAAE,SAAS;YACxC,IAAI,KAAK,CAAC,MAAM,KAAK,EAAE,IAAI,IAAA,kBAAU,EAAC,IAAA,iBAAO,EAAC,KAAK,CAAC,EAAE,UAAU,CAAC;gBAAE,GAAG,GAAG,KAAK,CAAC;YAC/E,IAAI,CAAC;gBACH,MAAM,OAAO,GAAG,aAAO,CAAC,MAAM,CAAC,SAAS,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;gBACvD,IAAI,OAAO,CAAC,QAAQ,KAAK,yBAAW;oBAAE,SAAS,GAAG,OAAO,CAAC,SAAS,CAAC;YACtE,CAAC;YAAC,MAAM,CAAC;gBACP,wBAAwB;YAC1B,CAAC;QACH,CAAC;QACD,IAAI,CAAC,SAAS,IAAI,CAAC,GAAG;YAAE,OAAO,SAAS,CAAC;QACzC,MAAM,CAAC,GAAG,SAAS,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;QACjC,IAAI,CAAC,GAAG,IAAA,uBAAe,EAAC,SAAS,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,CAAC;QAC7C,IAAI,CAAC,GAAG,IAAI;YAAE,CAAC,GAAG,qBAAS,CAAC,KAAK,CAAC,CAAC,GAAG,CAAC,CAAC;QACxC,MAAM,GAAG,GAAG,IAAA,mBAAW,EAAC,CAAC,EAAE,IAAA,uBAAe,EAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC;QACnD,OAAO,CAAC,IAAI,CACV,aAAO,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,aAAO,CAAC,MAAM,CAAC,SAAS,CAAC,MAAM,CAAC,GAAG,EAAE,yBAAW,CAAC,EAAE,GAAG,CAAC,CAAC,CACjF,CAAC;IACJ,CAAC;IACD,+EAA+E;IAC/E,MAAM,KAAK,GAAiB,CAAC,IAAA,gBAAQ,EAAC,EAAE,CAAC,OAAO,CAAC,EAAE,IAAA,iBAAS,EAAC,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC;IAChF,EAAE,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,KAAK,EAAE,KAAK,EAAE,EAAE;QACjC,MAAM,MAAM,GAAG,OAAO,CAAC,KAAK,CAAe,CAAC;QAC5C,KAAK,CAAC,IAAI,CACR,KAAK,CAAC,IAAI,EACV,IAAA,gBAAQ,EAAC,KAAK,CAAC,IAAI,CAAC,EACpB,IAAA,iBAAS,EAAC,MAAM,CAAC,MAAM,CAAC,EACxB,MAAM,EACN,IAAA,gBAAQ,EAAC,KAAK,CAAC,QAAQ,CAAC,CACzB,CAAC;IACJ,CAAC,CAAC,CAAC;IACH,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,WAAW,EAAE,IAAA,gBAAQ,EAAC,EAAE,CAAC,QAAQ,CAAC,CAAC,CAAC;IAClD,OAAO,IAAA,mBAAW,EAAC,KAAK,CAAC,CAAC;AAC5B,CAAC","sourcesContent":["/**\n * The bitcoinjs-lib codec: the unsigned transaction and its PSBT (BIP174), the\n * per-input signature hashes (legacy, BIP143 for segwit v0, BIP341 key path for taproot),\n * assembly of the signed transaction, and the signatures of a PSBT signed elsewhere. The\n * driver persists only the PSBT (base64) and plain data, never an SDK object, and\n * re-parses it here.\n */\nimport { bytesToNumberBE, numberToBytesBE } from '@noble/curves/abstract/utils';\nimport { secp256k1 } from '@noble/curves/secp256k1';\nimport { SigningError, ValidationError, isCryptoAioError } from '../../core/errors/error';\nimport type { SignatureBundle, SigningRequest } from '../../core/signing/types';\nimport { concatBytes, equalBytes, fromHex, toHex } from '../../core/util/bytes';\nimport { hash160, outputScript, type WalletAddress } from './address';\nimport type { PlannedOutput, Spendable } from './coinselect';\nimport { readTx, readTxHex, txidOfParts, writeSize, writeU32 } from './rawtx';\nimport { bitcoin, useNobleEcc, type Network, type Psbt } from './sdk';\nimport {\n  SIGHASH_ALL,\n  SIGHASH_DEFAULT,\n  assertSignedFields,\n  ecdsaSignatureOf,\n  parseSigned,\n  schnorrSignatureOf,\n  signedPsbtError,\n  type PsbtInput,\n} from './signed-psbt';\n\n/** The sighash types each input signs with (ALL; DEFAULT for p2tr), defined with the reader. */\nexport { SIGHASH_ALL, SIGHASH_DEFAULT } from './signed-psbt';\n\n/** BIP125 opt-in (and relative lock time disabled); `0xfffffffe` when RBF is off. */\nexport const SEQUENCE_RBF = 0xfffffffd;\nexport const SEQUENCE_FINAL_LOCKTIME = 0xfffffffe;\n\n/**\n * A previous transaction, decoded strictly once: its txid, its outputs, and\n * its bytes without the witness (Bitcoin Core's `TX_NO_WITNESS` form, which BIP174\n * `non_witness_utxo` carries). Only `previousTxOf` makes one, so its txid is the hash of its\n * bytes: they authenticate themselves.\n */\nexport interface PreviousTx {\n  readonly txid: string;\n  readonly outputs: readonly { readonly value: bigint; readonly script: Uint8Array }[];\n  readonly bytes: Uint8Array;\n}\n\nexport interface PlannedInput extends Spendable {\n  /**\n   * The previous transaction to carry in the PSBT (BIP174 `non_witness_utxo`), checked\n   * against the input's outpoint, value and script: required for p2pkh, and added for segwit\n   * v0 so hardware wallets can check the input amounts. Never on p2tr.\n   */\n  readonly prevTx?: PreviousTx;\n}\n\nexport interface BuiltTx {\n  /** The PSBT, base64 (the signing payload a cold signer receives). */\n  readonly psbt: string;\n  /** One signature hash per input, in input order. */\n  readonly digests: readonly Uint8Array[];\n  /** The txid, when every input is witness-type (it is then fixed before signing). */\n  readonly txid?: string;\n}\n\n/** Bitcoin Core's `MAX_MONEY` (21 million bitcoin): no amount is larger. */\nconst MAX_MONEY = 2_100_000_000_000_000n;\nconst TXID = /^[0-9a-f]{64}$/;\n\nconst isU32 = (n: number): boolean => Number.isInteger(n) && n >= 0 && n <= 0xffffffff;\nconst isMoney = (value: bigint): boolean =>\n  typeof value === 'bigint' && value >= 0n && value <= MAX_MONEY;\n\n/** Internal byte order of a txid (bitcoinjs `addInput` takes the reversed display hex). */\nconst txidBytes = (txid: string): Uint8Array => fromHex(txid).reverse();\n\n/**\n * Untrusted transaction hex (a node's answer) as a previous transaction, read in one linear\n * pass by `rawtx.ts` (bitcoinjs' decoder is quadratic), capped before decoding\n * and at the million bytes without witness a chain can hold; `undefined` when it\n * does not decode.\n */\nexport function previousTxOf(hex: string): PreviousTx | undefined {\n  const tx = readTxHex(hex);\n  if (!tx) return undefined;\n  return {\n    txid: tx.txid,\n    // Copies: a cached previous transaction keeps no view of the bytes with the witness.\n    outputs: tx.outputs.map((output) => ({\n      value: output.value,\n      script: Uint8Array.from(output.script),\n    })),\n    bytes: tx.hasWitness ? tx.stripped() : Uint8Array.from(tx.stripped()),\n  };\n}\n\n/**\n * Every integer `buildTx` encodes fits its field, never wrapped; anything else is refused\n * with a fixed text that names no value (bitcoinjs' own check quotes it).\n */\nfunction assertEncodable(\n  inputs: readonly PlannedInput[],\n  outputs: readonly PlannedOutput[],\n  sequence: number,\n): void {\n  if (!isU32(sequence)) {\n    throw new ValidationError('INVALID_INTENT', 'the input sequence is out of range');\n  }\n  const outpoints = new Set<string>();\n  for (const input of inputs) {\n    if (!TXID.test(input.txid) || !isU32(input.vout)) {\n      throw new ValidationError('INVALID_INTENT', 'an input outpoint is out of range');\n    }\n    const outpoint = `${input.txid}:${input.vout}`;\n    if (outpoints.has(outpoint)) {\n      throw new ValidationError('INVALID_INTENT', 'an input outpoint is listed twice');\n    }\n    outpoints.add(outpoint);\n    if (!isMoney(input.value)) {\n      throw new ValidationError('INVALID_AMOUNT', 'an input value is out of range');\n    }\n  }\n  for (const output of outputs) {\n    if (!isMoney(output.value)) {\n      throw new ValidationError('INVALID_AMOUNT', 'an output value is out of range');\n    }\n  }\n}\n\nconst PREVIOUS_MISMATCH = 'a previous transaction does not match its outpoint';\n\n/**\n * Whether `error` is `assertPrevious`'s refusal: a previous transaction whose output\n * disagrees with the input's txid, value or script, or that has no such output. A caller\n * that read those from a provider maps it to the provider.\n */\nexport function isPreviousTxRefusal(error: unknown): boolean {\n  return isCryptoAioError(error, 'INVALID_INTENT') && error.message === PREVIOUS_MISMATCH;\n}\n\n/**\n * An input is what its previous transaction says: `prev` is the outpoint's\n * transaction (its txid, which the bytes hash to), and it has the output, with the input's\n * value and the wallet's script. Otherwise `INVALID_INTENT` (`isPreviousTxRefusal`).\n */\nexport function assertPrevious(\n  prev: PreviousTx,\n  input: Spendable,\n  script: Uint8Array,\n): void {\n  const output = prev.outputs[input.vout];\n  if (\n    prev.txid !== input.txid ||\n    !output ||\n    output.value !== input.value ||\n    !equalBytes(output.script, script)\n  ) {\n    throw new ValidationError('INVALID_INTENT', PREVIOUS_MISMATCH);\n  }\n}\n\n/**\n * The unsigned transaction (version 2, lock time 0) and its PSBT, spending `inputs` of the\n * wallet to `outputs` in the given order.\n */\nexport function buildTx(\n  network: Network,\n  wallet: WalletAddress,\n  inputs: readonly PlannedInput[],\n  outputs: readonly PlannedOutput[],\n  sequence: number,\n): BuiltTx {\n  assertEncodable(inputs, outputs, sequence);\n  useNobleEcc();\n  const tx = new bitcoin.Transaction();\n  tx.version = 2;\n  tx.locktime = 0;\n  for (const input of inputs) tx.addInput(txidBytes(input.txid), input.vout, sequence);\n  for (const output of outputs) tx.addOutput(output.script, output.value);\n\n  const psbt = new bitcoin.Psbt({ network });\n  psbt.setVersion(2);\n  psbt.setLocktime(0);\n  for (const input of inputs) {\n    if (wallet.type === 'p2pkh' && input.prevTx === undefined) {\n      throw new ValidationError(\n        'INVALID_INTENT',\n        'a p2pkh input needs its verified previous transaction',\n      );\n    }\n    if (input.prevTx !== undefined) assertPrevious(input.prevTx, input, wallet.script);\n    const prevTx = input.prevTx?.bytes;\n    psbt.addInput({\n      hash: input.txid,\n      index: input.vout,\n      sequence,\n      ...(wallet.type === 'p2pkh'\n        ? {}\n        : { witnessUtxo: { script: wallet.script, value: input.value } }),\n      ...(prevTx !== undefined && wallet.type !== 'p2tr'\n        ? { nonWitnessUtxo: prevTx }\n        : {}),\n      ...(wallet.redeemScript ? { redeemScript: wallet.redeemScript } : {}),\n      ...(wallet.type === 'p2tr' ? { tapInternalKey: wallet.publicKey } : {}),\n    });\n  }\n  for (const output of outputs)\n    psbt.addOutput({ script: output.script, value: output.value });\n  if (!equalBytes(unsignedTxOf(psbt), tx.toBuffer())) {\n    throw new SigningError(\n      'SIGNING_FAILED',\n      'the PSBT does not encode the built transaction',\n    );\n  }\n\n  const digests = inputs.map((input, index) => {\n    switch (wallet.type) {\n      case 'p2pkh':\n        return tx.hashForSignature(index, wallet.script, SIGHASH_ALL);\n      case 'p2wpkh':\n      case 'p2sh-p2wpkh':\n        // BIP143: the script code of a p2wpkh program is the p2pkh script of its key hash.\n        return tx.hashForWitnessV0(\n          index,\n          outputScript('p2pkh', hash160(wallet.publicKey)),\n          input.value,\n          SIGHASH_ALL,\n        );\n      case 'p2tr':\n        return tx.hashForWitnessV1(\n          index,\n          inputs.map(() => wallet.script),\n          inputs.map((i) => i.value),\n          SIGHASH_DEFAULT,\n        );\n    }\n  });\n\n  let txid: string | undefined;\n  if (wallet.type !== 'p2pkh') {\n    const final = tx.clone();\n    if (wallet.redeemScript) {\n      const scriptSig = bitcoin.script.compile([wallet.redeemScript]);\n      for (let i = 0; i < inputs.length; i++) final.setInputScript(i, scriptSig);\n    }\n    txid = final.getId();\n  }\n  return { psbt: psbt.toBase64(), digests, ...(txid !== undefined ? { txid } : {}) };\n}\n\n/** The unsigned transaction a PSBT carries (BIP174 `PSBT_GLOBAL_UNSIGNED_TX`). */\nexport function unsignedTxOf(psbt: Psbt): Uint8Array {\n  return psbt.data.globalMap.unsignedTx.toBuffer();\n}\n\nexport function parsePsbt(base64: string, network: Network): Psbt {\n  // Parsing reads taproot fields and output addresses, which need the ECC backend.\n  useNobleEcc();\n  try {\n    return bitcoin.Psbt.fromBase64(base64, { network });\n  } catch {\n    throw new ValidationError('INVALID_INTENT', 'the payload is not a valid PSBT');\n  }\n}\n\nexport interface PsbtTxView {\n  readonly inputs: readonly {\n    readonly outpoint: string;\n    readonly txid: string;\n    readonly vout: number;\n    readonly value: bigint;\n    readonly sequence: number;\n  }[];\n  readonly outputs: readonly { readonly script: Uint8Array; readonly value: bigint }[];\n}\n\n/** Inputs (with the values the PSBT commits to) and outputs of our own stored PSBT. */\nexport function viewPsbt(base64: string, network: Network): PsbtTxView {\n  const psbt = parsePsbt(base64, network);\n  const inputs = psbt.txInputs.map((input, index) => {\n    const data = psbt.data.inputs[index];\n    const txid = toHex(Uint8Array.from(input.hash).reverse());\n    let value: bigint;\n    if (data?.witnessUtxo) value = data.witnessUtxo.value;\n    else if (data?.nonWitnessUtxo) {\n      // Read linearly, though `buildTx` checked it: a real one can be large, and\n      // bitcoinjs' decoder is quadratic.\n      const prev = readTx(data.nonWitnessUtxo);\n      const output = prev?.txid === txid ? prev.outputs[input.index] : undefined;\n      if (!output) {\n        throw new ValidationError(\n          'INVALID_INTENT',\n          'a PSBT input does not match its previous transaction',\n        );\n      }\n      value = output.value;\n    } else throw new ValidationError('INVALID_INTENT', 'a PSBT input has no UTXO');\n    return {\n      outpoint: `${txid}:${input.index}`,\n      txid,\n      vout: input.index,\n      value,\n      sequence: input.sequence ?? 0xffffffff,\n    };\n  });\n  const outputs = psbt.txOutputs.map((output) => ({\n    script: output.script,\n    value: output.value,\n  }));\n  return { inputs, outputs };\n}\n\n/**\n * The signed transaction from our stored PSBT and one signature per request (`in:<i>`):\n * ECDSA as a DER signature with SIGHASH_ALL (partial signature), Schnorr as a 64-byte\n * key-path signature. Nothing but the signature bytes comes from outside.\n */\nexport function assembleTx(\n  base64: string,\n  network: Network,\n  requests: readonly SigningRequest[],\n  signatures: readonly SignatureBundle[],\n): { readonly hex: string; readonly txid: string } {\n  const psbt = parsePsbt(base64, network);\n  if (requests.length !== psbt.inputCount) {\n    throw new SigningError('SIGNING_FAILED', 'one signing request per input is required');\n  }\n  requests.forEach((request, index) => {\n    const signature = signatures.find((s) => s.requestId === request.id);\n    if (!signature || signature.bytes.length !== 64) {\n      throw new SigningError(\n        'SIGNING_FAILED',\n        `missing signature for request ${request.id}`,\n      );\n    }\n    if (request.scheme === 'secp256k1-schnorr') {\n      psbt.updateInput(index, { tapKeySig: signature.bytes });\n    } else {\n      psbt.updateInput(index, {\n        partialSig: [\n          {\n            pubkey: request.publicKey,\n            signature: bitcoin.script.signature.encode(signature.bytes, SIGHASH_ALL),\n          },\n        ],\n      });\n    }\n  });\n  try {\n    psbt.finalizeAllInputs();\n  } catch {\n    throw new SigningError('SIGNING_FAILED', 'the PSBT could not be finalized');\n  }\n  // The absurd-fee guard ran when the transaction was built; bitcoinjs' own check is off.\n  const tx = psbt.extractTransaction(true);\n  return { hex: tx.toHex(), txid: tx.getId() };\n}\n\n/**\n * The signatures of a PSBT signed elsewhere, synchronous and I/O-free. The\n * signed PSBT is untrusted (`signed-psbt.ts`): parsed strictly, it must carry exactly our\n * unsigned transaction (anti-tamper) and nothing that could change the spend. From each\n * input only the signature for the request's key is taken (partial or final), and the core\n * then verifies it against the stored digest and key. An input without one is left out (a\n * partial set). Every refusal is `INVALID_INTENT` with a fixed text.\n */\nexport function signaturesFromPsbt(\n  storedBase64: string,\n  signedBase64: string,\n  network: Network,\n  requests: readonly SigningRequest[],\n): SignatureBundle[] {\n  const stored = parsePsbt(storedBase64, network);\n  if (requests.length !== stored.inputCount) {\n    throw new SigningError('SIGNING_FAILED', 'one signing request per input is required');\n  }\n  const signed = parseSigned(signedBase64, stored, storedBase64, network);\n  if (!equalBytes(unsignedTxOf(signed), unsignedTxOf(stored))) {\n    throw signedPsbtError('is not the prepared transaction');\n  }\n  assertSignedFields(signed, stored);\n  const bundles: SignatureBundle[] = [];\n  requests.forEach((request, index) => {\n    const input = signed.data.inputs[index] as PsbtInput;\n    if (request.scheme === 'secp256k1-schnorr') {\n      const signature = schnorrSignatureOf(input);\n      if (signature)\n        bundles.push({ requestId: request.id, bytes: Uint8Array.from(signature) });\n      return;\n    }\n    const ours = stored.data.inputs[index] as PsbtInput;\n    const signature = ecdsaSignatureOf(request.publicKey, input, ours);\n    if (signature) {\n      bundles.push({\n        requestId: request.id,\n        bytes: Uint8Array.from(signature),\n        recovery: recoveryOf(signature, request),\n      });\n    }\n  });\n  return bundles;\n}\n\n/** The recovery bit that recovers the request's key (0 when neither does: it then fails verification). */\nfunction recoveryOf(signature: Uint8Array, request: SigningRequest): number {\n  for (const bit of [0, 1]) {\n    try {\n      const key = secp256k1.Signature.fromCompact(signature)\n        .addRecoveryBit(bit)\n        .recoverPublicKey(request.payload)\n        .toRawBytes(true);\n      if (equalBytes(key, request.publicKey)) return bit;\n    } catch {\n      // Try the other bit.\n    }\n  }\n  return 0;\n}\n\n/** bitcoinjs network parameters for a network's address parameters. */\nexport function networkOf(params: {\n  bech32: string;\n  pubKeyHash: number;\n  scriptHash: number;\n}): Network {\n  const base =\n    params.bech32 === 'bc'\n      ? bitcoin.networks.bitcoin\n      : params.bech32 === 'bcrt'\n        ? bitcoin.networks.regtest\n        : bitcoin.networks.testnet;\n  return {\n    ...base,\n    bech32: params.bech32,\n    pubKeyHash: params.pubKeyHash,\n    scriptHash: params.scriptHash,\n  };\n}\n\n/**\n * The txid of untrusted transaction hex, read linearly (`rawtx.ts`);\n * `INVALID_INTENT` when it does not decode or holds more than a chain can.\n */\nexport function txidOfHex(hex: string): string {\n  const tx = readTxHex(hex);\n  if (!tx) {\n    throw new ValidationError('INVALID_INTENT', 'a transaction does not decode');\n  }\n  return tx.txid;\n}\n\n/**\n * The txid `hex` would have with canonical p2pkh scriptSigs: per input, the last push\n * that is a strict-DER SIGHASH_ALL signature (normalized to low-s) and the last push that\n * is a 33-byte key hashing to `pubkeyHash`, re-pushed minimally as `<sig> <key>`. A third\n * party without the key can change only that encoding (BIP66 strict DER is consensus; the\n * sighash byte is signed), so this equals our Attempt's txid exactly when `hex` is a\n * malleated copy of it: same version, lock time, outpoints, sequences and outputs.\n * `undefined` when an input has a witness or no such pushes.\n */\nexport function canonicalTwinTxid(\n  hex: string,\n  pubkeyHash: Uint8Array,\n): string | undefined {\n  // Read linearly; only each input's short script goes through bitcoinjs.\n  const tx = readTxHex(hex);\n  if (!tx || tx.hasWitness) return undefined;\n  if (tx.inputs.length === 0) return tx.txid;\n  const half = secp256k1.CURVE.n >> 1n;\n  const scripts: Uint8Array[] = [];\n  for (const input of tx.inputs) {\n    const chunks = bitcoin.script.decompile(input.script);\n    if (!chunks) return undefined;\n    let signature: Uint8Array | undefined;\n    let key: Uint8Array | undefined;\n    for (const chunk of chunks) {\n      if (typeof chunk === 'number') continue;\n      if (chunk.length === 33 && equalBytes(hash160(chunk), pubkeyHash)) key = chunk;\n      try {\n        const decoded = bitcoin.script.signature.decode(chunk);\n        if (decoded.hashType === SIGHASH_ALL) signature = decoded.signature;\n      } catch {\n        // Not a signature push.\n      }\n    }\n    if (!signature || !key) return undefined;\n    const r = signature.slice(0, 32);\n    let s = bytesToNumberBE(signature.slice(32));\n    if (s > half) s = secp256k1.CURVE.n - s;\n    const low = concatBytes(r, numberToBytesBE(s, 32));\n    scripts.push(\n      bitcoin.script.compile([bitcoin.script.signature.encode(low, SIGHASH_ALL), key]),\n    );\n  }\n  // The serialization without witness data, with the canonical scripts in place.\n  const parts: Uint8Array[] = [writeU32(tx.version), writeSize(tx.inputs.length)];\n  tx.inputs.forEach((input, index) => {\n    const script = scripts[index] as Uint8Array;\n    parts.push(\n      input.hash,\n      writeU32(input.vout),\n      writeSize(script.length),\n      script,\n      writeU32(input.sequence),\n    );\n  });\n  parts.push(tx.outputBytes, writeU32(tx.locktime));\n  return txidOfParts(parts);\n}\n"]}

package/dist/adapters/utxo/coinselect.d.ts

@@ -0,0 +1,48 @@
+import type { CoinSelectionStrategy } from './network';
+import type { UtxoAddressType } from './types';
+/** Bitcoin Core's `MAX_STANDARD_TX_WEIGHT` (policy.h). */
+export declare const MAX_STANDARD_WEIGHT = 400000;
+/** The weight of a transaction spending `inputs` inputs of one type to these outputs. */
+export declare function txWeight(inputType: UtxoAddressType, inputs: number, outputScriptLengths: readonly number[]): number;
+export declare const vsizeOf: (weight: number) => number;
+export interface Spendable {
+    /** `txid:vout`. */
+    readonly outpoint: string;
+    readonly txid: string;
+    readonly vout: number;
+    readonly value: bigint;
+}
+export interface PlannedOutput {
+    readonly script: Uint8Array;
+    readonly value: bigint;
+}
+export interface SelectionRequest {
+    /** Eligible outputs of the wallet (already filtered for reservations and confirmations). */
+    readonly candidates: readonly Spendable[];
+    /** Inputs that must be spent (an RBF replacement keeps every earlier input). */
+    readonly required?: readonly Spendable[];
+    readonly outputs: readonly PlannedOutput[];
+    readonly changeScript: Uint8Array;
+    readonly inputType: UtxoAddressType;
+    /** sat/kvB. */
+    readonly rate: bigint;
+    readonly dustRelayFee: bigint;
+    readonly strategy: CoinSelectionStrategy;
+}
+export interface Selection {
+    readonly ok: true;
+    readonly inputs: readonly Spendable[];
+    readonly change: bigint;
+    readonly fee: bigint;
+    readonly vsize: number;
+}
+export interface Shortfall {
+    readonly ok: false;
+    readonly required: bigint;
+    readonly available: bigint;
+    /** The fee of spending every eligible output (for an estimate that cannot be met). */
+    readonly fee: bigint;
+    readonly vsize: number;
+}
+/** Picks inputs for the outputs at `rate`; deterministic for the same candidates. */
+export declare function selectCoins(request: SelectionRequest): Selection | Shortfall;