crypto-aio 0.0.3 → 0.1.0

package/dist/adapters/utxo/rawtx.js

@@ -0,0 +1,234 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.txidOfParts = exports.MAX_STRIPPED_BYTES = exports.MAX_TX_BYTES = void 0;
+exports.writeU32 = writeU32;
+exports.writeSize = writeSize;
+exports.readTx = readTx;
+exports.readTxHex = readTxHex;
+/**
+ * A linear, SDK-free reader of untrusted transaction bytes.
+ *
+ * bitcoinjs-lib 7's `Transaction.fromBuffer` is quadratic in the number of inputs and
+ * outputs: a 3.98 MB transaction with 92,500 outputs took 53 s. So bytes from a node, an
+ * indexer or a coordinator are read here instead, in one pass. Every count is checked
+ * against the bytes left before anything is kept, scripts and witness items are views into
+ * the input (never copies), and the txid is hashed from the three stretches of the
+ * serialization it covers, without copying them.
+ *
+ * The format is exactly bitcoind's `UnserializeTransaction` with witness support (as
+ * `sendrawtransaction` decodes): an empty input list is followed by a flags byte; flags 1
+ * marks the witness (BIP144), and a witness record whose stacks are all empty, or any other
+ * flag, does not decode. Sizes are canonical CompactSize values of at most `MAX_SIZE`, and
+ * nothing may follow the lock time. So when this reader refuses bytes, bitcoind refuses them
+ * too, which lets the broadcaster check a node's `TX decode failed` itself: a node's
+ * rejection is a claim, kept only when it holds for our own bytes.
+ */
+const sha256_1 = require("@noble/hashes/sha256");
+const bytes_1 = require("../../core/util/bytes");
+/** Bitcoin Core's `MAX_BLOCK_SERIALIZED_SIZE`: no transaction's bytes are more. */
+exports.MAX_TX_BYTES = 4_000_000;
+/**
+ * Consensus: a transaction's weight (4 × its size without witness data, at least) is at most
+ * `MAX_BLOCK_WEIGHT` (4,000,000), so a transaction a chain holds has at most 1,000,000 bytes
+ * without its witness.
+ */
+exports.MAX_STRIPPED_BYTES = 1_000_000;
+/** bitcoind's `MAX_SIZE`: the largest CompactSize a deserializer accepts. */
+const MAX_SIZE = 0x02000000;
+/** The fewest bytes an input (outpoint, empty script, sequence) and an output can take. */
+const MIN_INPUT = 41;
+const MIN_OUTPUT = 9;
+class Malformed extends Error {
+}
+/** Double SHA-256 of the given stretches, as one message. */
+function hash256(parts) {
+    const inner = sha256_1.sha256.create();
+    for (const part of parts)
+        inner.update(part);
+    return (0, sha256_1.sha256)(inner.digest());
+}
+/** A txid (or block hash) in display order. */
+const displayHex = (hash) => (0, bytes_1.toHex)(Uint8Array.from(hash).reverse());
+/** The txid of a serialization without witness data, given as consecutive stretches. */
+const txidOfParts = (parts) => displayHex(hash256(parts));
+exports.txidOfParts = txidOfParts;
+/** A little-endian 32-bit field, as bitcoind writes it. */
+function writeU32(n) {
+    const out = new Uint8Array(4);
+    new DataView(out.buffer).setUint32(0, n >>> 0, true);
+    return out;
+}
+/** A CompactSize, as bitcoind writes it (at most `MAX_SIZE` here). */
+function writeSize(n) {
+    if (n < 0xfd)
+        return Uint8Array.of(n);
+    if (n <= 0xffff)
+        return Uint8Array.of(0xfd, n & 0xff, n >>> 8);
+    return (0, bytes_1.concatBytes)(Uint8Array.of(0xfe), writeU32(n));
+}
+/** Transaction bytes, read in one pass; `undefined` when bitcoind would not decode them. */
+function readTx(bytes, options = {}) {
+    const maxStripped = options.maxStripped ?? exports.MAX_STRIPPED_BYTES;
+    if (!(bytes instanceof Uint8Array) || bytes.length > exports.MAX_TX_BYTES)
+        return undefined;
+    try {
+        return parse(bytes, maxStripped);
+    }
+    catch (error) {
+        if (error instanceof Malformed)
+            return undefined;
+        throw error;
+    }
+}
+/**
+ * Transaction hex (either case, no prefix), capped at `MAX_TX_BYTES` before it is
+ * decoded, then read by `readTx`. Node's hex decoder is native and linear, and stops at
+ * the first pair that is not hex, so a short result means the text was not plain hex.
+ */
+function readTxHex(hex, options = {}) {
+    if (typeof hex !== 'string' || hex.length > 2 * exports.MAX_TX_BYTES)
+        return undefined;
+    if (hex.length % 2 !== 0)
+        return undefined;
+    const decoded = Buffer.from(hex, 'hex');
+    if (decoded.length * 2 !== hex.length)
+        return undefined;
+    return readTx(new Uint8Array(decoded.buffer, decoded.byteOffset, decoded.length), options);
+}
+function parse(bytes, maxStripped) {
+    const view = new DataView(bytes.buffer, bytes.byteOffset, bytes.byteLength);
+    let pos = 0;
+    const need = (n) => {
+        if (n < 0 || pos + n > bytes.length)
+            throw new Malformed();
+    };
+    const u8 = () => {
+        need(1);
+        return bytes[pos++];
+    };
+    const u32 = () => {
+        need(4);
+        const value = view.getUint32(pos, true);
+        pos += 4;
+        return value;
+    };
+    const slice = (n) => {
+        need(n);
+        const part = bytes.subarray(pos, pos + n);
+        pos += n;
+        return part;
+    };
+    /** A canonical CompactSize of at most `MAX_SIZE` (bitcoind's `ReadCompactSize`). */
+    const size = () => {
+        const first = u8();
+        let value;
+        if (first < 0xfd)
+            return first;
+        if (first === 0xfd) {
+            need(2);
+            value = view.getUint16(pos, true);
+            pos += 2;
+            if (value < 0xfd)
+                throw new Malformed();
+        }
+        else if (first === 0xfe) {
+            value = u32();
+            if (value < 0x1_0000)
+                throw new Malformed();
+        }
+        else {
+            throw new Malformed(); // 8 bytes: at least 2^32, beyond MAX_SIZE
+        }
+        if (value > MAX_SIZE)
+            throw new Malformed();
+        return value;
+    };
+    /** Bounds a count by the bytes left, before anything is kept for it. */
+    const count = (least) => {
+        const n = size();
+        if (n * least > bytes.length - pos)
+            throw new Malformed();
+        return n;
+    };
+    // `skipped`: the marker and flag bytes, which the stripped serialization leaves out.
+    let skipped = 0;
+    const strippedSoFar = () => pos - skipped + 4; // with the lock time still to come
+    const version = u32() | 0;
+    let vinStart = pos;
+    let inputCount = count(MIN_INPUT);
+    let extended = false;
+    let outputsKnown = true;
+    if (inputCount === 0) {
+        const flags = u8();
+        if (flags === 0) {
+            outputsKnown = false; // bitcoind reads no output list after an empty one and no flags
+        }
+        else {
+            if (flags !== 1)
+                throw new Malformed(); // unknown optional data
+            extended = true;
+            skipped = 2;
+            vinStart = pos;
+            inputCount = count(MIN_INPUT);
+        }
+    }
+    const inputs = [];
+    for (let i = 0; i < inputCount; i++) {
+        const hash = slice(32);
+        const vout = u32();
+        const script = slice(size());
+        const sequence = u32();
+        inputs.push({ txid: displayHex(hash), hash, vout, script, sequence, witness: [] });
+        if (strippedSoFar() > maxStripped)
+            throw new Malformed();
+    }
+    const outputStart = pos;
+    const outputs = [];
+    if (outputsKnown) {
+        const outputCount = count(MIN_OUTPUT);
+        for (let i = 0; i < outputCount; i++) {
+            need(8);
+            const value = view.getBigInt64(pos, true);
+            pos += 8;
+            outputs.push({ value, script: slice(size()) });
+            if (strippedSoFar() > maxStripped)
+                throw new Malformed();
+        }
+    }
+    const outputEnd = pos;
+    let hasWitness = false;
+    if (extended) {
+        for (const input of inputs) {
+            const items = count(1);
+            const stack = [];
+            for (let i = 0; i < items; i++)
+                stack.push(slice(size()));
+            input.witness = stack;
+            if (items > 0)
+                hasWitness = true;
+        }
+        if (!hasWitness)
+            throw new Malformed(); // a superfluous witness record
+    }
+    const locktime = u32();
+    if (pos !== bytes.length)
+        throw new Malformed();
+    const parts = extended
+        ? [bytes.subarray(0, 4), bytes.subarray(vinStart, outputEnd), bytes.subarray(pos - 4)]
+        : [bytes];
+    const stripped = parts.reduce((sum, part) => sum + part.length, 0);
+    if (stripped > maxStripped)
+        throw new Malformed();
+    return {
+        txid: (0, exports.txidOfParts)(parts),
+        version,
+        locktime,
+        inputs,
+        outputs,
+        hasWitness,
+        strippedSize: stripped,
+        outputBytes: bytes.subarray(outputStart, outputEnd),
+        stripped: () => (parts.length === 1 ? bytes : (0, bytes_1.concatBytes)(...parts)),
+    };
+}
+//# sourceMappingURL=rawtx.js.map

package/dist/adapters/utxo/rawtx.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"rawtx.js","sourceRoot":"","sources":["../../../src/adapters/utxo/rawtx.ts"],"names":[],"mappings":";;;AA6FA,4BAIC;AAGD,8BAIC;AAGD,wBAYC;AAOD,8BASC;AAvID;;;;;;;;;;;;;;;;;GAiBG;AACH,iDAA8C;AAC9C,iDAA2D;AAE3D,mFAAmF;AACtE,QAAA,YAAY,GAAG,SAAS,CAAC;AACtC;;;;GAIG;AACU,QAAA,kBAAkB,GAAG,SAAS,CAAC;AAC5C,6EAA6E;AAC7E,MAAM,QAAQ,GAAG,UAAU,CAAC;AAC5B,2FAA2F;AAC3F,MAAM,SAAS,GAAG,EAAE,CAAC;AACrB,MAAM,UAAU,GAAG,CAAC,CAAC;AA2CrB,MAAM,SAAU,SAAQ,KAAK;CAAG;AAEhC,6DAA6D;AAC7D,SAAS,OAAO,CAAC,KAA4B;IAC3C,MAAM,KAAK,GAAG,eAAM,CAAC,MAAM,EAAE,CAAC;IAC9B,KAAK,MAAM,IAAI,IAAI,KAAK;QAAE,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;IAC7C,OAAO,IAAA,eAAM,EAAC,KAAK,CAAC,MAAM,EAAE,CAAC,CAAC;AAChC,CAAC;AAED,+CAA+C;AAC/C,MAAM,UAAU,GAAG,CAAC,IAAgB,EAAU,EAAE,CAAC,IAAA,aAAK,EAAC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC;AAExF,wFAAwF;AACjF,MAAM,WAAW,GAAG,CAAC,KAA4B,EAAU,EAAE,CAClE,UAAU,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC;AADhB,QAAA,WAAW,eACK;AAE7B,2DAA2D;AAC3D,SAAgB,QAAQ,CAAC,CAAS;IAChC,MAAM,GAAG,GAAG,IAAI,UAAU,CAAC,CAAC,CAAC,CAAC;IAC9B,IAAI,QAAQ,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,SAAS,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,EAAE,IAAI,CAAC,CAAC;IACrD,OAAO,GAAG,CAAC;AACb,CAAC;AAED,sEAAsE;AACtE,SAAgB,SAAS,CAAC,CAAS;IACjC,IAAI,CAAC,GAAG,IAAI;QAAE,OAAO,UAAU,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;IACtC,IAAI,CAAC,IAAI,MAAM;QAAE,OAAO,UAAU,CAAC,EAAE,CAAC,IAAI,EAAE,CAAC,GAAG,IAAI,EAAE,CAAC,KAAK,CAAC,CAAC,CAAC;IAC/D,OAAO,IAAA,mBAAW,EAAC,UAAU,CAAC,EAAE,CAAC,IAAI,CAAC,EAAE,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC;AACvD,CAAC;AAED,4FAA4F;AAC5F,SAAgB,MAAM,CACpB,KAAiB,EACjB,UAAuB,EAAE;IAEzB,MAAM,WAAW,GAAG,OAAO,CAAC,WAAW,IAAI,0BAAkB,CAAC;IAC9D,IAAI,CAAC,CAAC,KAAK,YAAY,UAAU,CAAC,IAAI,KAAK,CAAC,MAAM,GAAG,oBAAY;QAAE,OAAO,SAAS,CAAC;IACpF,IAAI,CAAC;QACH,OAAO,KAAK,CAAC,KAAK,EAAE,WAAW,CAAC,CAAC;IACnC,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAI,KAAK,YAAY,SAAS;YAAE,OAAO,SAAS,CAAC;QACjD,MAAM,KAAK,CAAC;IACd,CAAC;AACH,CAAC;AAED;;;;GAIG;AACH,SAAgB,SAAS,CAAC,GAAW,EAAE,UAAuB,EAAE;IAC9D,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,GAAG,CAAC,MAAM,GAAG,CAAC,GAAG,oBAAY;QAAE,OAAO,SAAS,CAAC;IAC/E,IAAI,GAAG,CAAC,MAAM,GAAG,CAAC,KAAK,CAAC;QAAE,OAAO,SAAS,CAAC;IAC3C,MAAM,OAAO,GAAG,MAAM,CAAC,IAAI,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;IACxC,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,KAAK,GAAG,CAAC,MAAM;QAAE,OAAO,SAAS,CAAC;IACxD,OAAO,MAAM,CACX,IAAI,UAAU,CAAC,OAAO,CAAC,MAAM,EAAE,OAAO,CAAC,UAAU,EAAE,OAAO,CAAC,MAAM,CAAC,EAClE,OAAO,CACR,CAAC;AACJ,CAAC;AAED,SAAS,KAAK,CAAC,KAAiB,EAAE,WAAmB;IACnD,MAAM,IAAI,GAAG,IAAI,QAAQ,CAAC,KAAK,CAAC,MAAM,EAAE,KAAK,CAAC,UAAU,EAAE,KAAK,CAAC,UAAU,CAAC,CAAC;IAC5E,IAAI,GAAG,GAAG,CAAC,CAAC;IACZ,MAAM,IAAI,GAAG,CAAC,CAAS,EAAQ,EAAE;QAC/B,IAAI,CAAC,GAAG,CAAC,IAAI,GAAG,GAAG,CAAC,GAAG,KAAK,CAAC,MAAM;YAAE,MAAM,IAAI,SAAS,EAAE,CAAC;IAC7D,CAAC,CAAC;IACF,MAAM,EAAE,GAAG,GAAW,EAAE;QACtB,IAAI,CAAC,CAAC,CAAC,CAAC;QACR,OAAO,KAAK,CAAC,GAAG,EAAE,CAAW,CAAC;IAChC,CAAC,CAAC;IACF,MAAM,GAAG,GAAG,GAAW,EAAE;QACvB,IAAI,CAAC,CAAC,CAAC,CAAC;QACR,MAAM,KAAK,GAAG,IAAI,CAAC,SAAS,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;QACxC,GAAG,IAAI,CAAC,CAAC;QACT,OAAO,KAAK,CAAC;IACf,CAAC,CAAC;IACF,MAAM,KAAK,GAAG,CAAC,CAAS,EAAc,EAAE;QACtC,IAAI,CAAC,CAAC,CAAC,CAAC;QACR,MAAM,IAAI,GAAG,KAAK,CAAC,QAAQ,CAAC,GAAG,EAAE,GAAG,GAAG,CAAC,CAAC,CAAC;QAC1C,GAAG,IAAI,CAAC,CAAC;QACT,OAAO,IAAI,CAAC;IACd,CAAC,CAAC;IACF,oFAAoF;IACpF,MAAM,IAAI,GAAG,GAAW,EAAE;QACxB,MAAM,KAAK,GAAG,EAAE,EAAE,CAAC;QACnB,IAAI,KAAa,CAAC;QAClB,IAAI,KAAK,GAAG,IAAI;YAAE,OAAO,KAAK,CAAC;QAC/B,IAAI,KAAK,KAAK,IAAI,EAAE,CAAC;YACnB,IAAI,CAAC,CAAC,CAAC,CAAC;YACR,KAAK,GAAG,IAAI,CAAC,SAAS,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;YAClC,GAAG,IAAI,CAAC,CAAC;YACT,IAAI,KAAK,GAAG,IAAI;gBAAE,MAAM,IAAI,SAAS,EAAE,CAAC;QAC1C,CAAC;aAAM,IAAI,KAAK,KAAK,IAAI,EAAE,CAAC;YAC1B,KAAK,GAAG,GAAG,EAAE,CAAC;YACd,IAAI,KAAK,GAAG,QAAQ;gBAAE,MAAM,IAAI,SAAS,EAAE,CAAC;QAC9C,CAAC;aAAM,CAAC;YACN,MAAM,IAAI,SAAS,EAAE,CAAC,CAAC,0CAA0C;QACnE,CAAC;QACD,IAAI,KAAK,GAAG,QAAQ;YAAE,MAAM,IAAI,SAAS,EAAE,CAAC;QAC5C,OAAO,KAAK,CAAC;IACf,CAAC,CAAC;IACF,wEAAwE;IACxE,MAAM,KAAK,GAAG,CAAC,KAAa,EAAU,EAAE;QACtC,MAAM,CAAC,GAAG,IAAI,EAAE,CAAC;QACjB,IAAI,CAAC,GAAG,KAAK,GAAG,KAAK,CAAC,MAAM,GAAG,GAAG;YAAE,MAAM,IAAI,SAAS,EAAE,CAAC;QAC1D,OAAO,CAAC,CAAC;IACX,CAAC,CAAC;IAEF,qFAAqF;IACrF,IAAI,OAAO,GAAG,CAAC,CAAC;IAChB,MAAM,aAAa,GAAG,GAAW,EAAE,CAAC,GAAG,GAAG,OAAO,GAAG,CAAC,CAAC,CAAC,mCAAmC;IAC1F,MAAM,OAAO,GAAG,GAAG,EAAE,GAAG,CAAC,CAAC;IAC1B,IAAI,QAAQ,GAAG,GAAG,CAAC;IACnB,IAAI,UAAU,GAAG,KAAK,CAAC,SAAS,CAAC,CAAC;IAClC,IAAI,QAAQ,GAAG,KAAK,CAAC;IACrB,IAAI,YAAY,GAAG,IAAI,CAAC;IACxB,IAAI,UAAU,KAAK,CAAC,EAAE,CAAC;QACrB,MAAM,KAAK,GAAG,EAAE,EAAE,CAAC;QACnB,IAAI,KAAK,KAAK,CAAC,EAAE,CAAC;YAChB,YAAY,GAAG,KAAK,CAAC,CAAC,gEAAgE;QACxF,CAAC;aAAM,CAAC;YACN,IAAI,KAAK,KAAK,CAAC;gBAAE,MAAM,IAAI,SAAS,EAAE,CAAC,CAAC,wBAAwB;YAChE,QAAQ,GAAG,IAAI,CAAC;YAChB,OAAO,GAAG,CAAC,CAAC;YACZ,QAAQ,GAAG,GAAG,CAAC;YACf,UAAU,GAAG,KAAK,CAAC,SAAS,CAAC,CAAC;QAChC,CAAC;IACH,CAAC;IACD,MAAM,MAAM,GAON,EAAE,CAAC;IACT,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,UAAU,EAAE,CAAC,EAAE,EAAE,CAAC;QACpC,MAAM,IAAI,GAAG,KAAK,CAAC,EAAE,CAAC,CAAC;QACvB,MAAM,IAAI,GAAG,GAAG,EAAE,CAAC;QACnB,MAAM,MAAM,GAAG,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC;QAC7B,MAAM,QAAQ,GAAG,GAAG,EAAE,CAAC;QACvB,MAAM,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,UAAU,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,OAAO,EAAE,EAAE,EAAE,CAAC,CAAC;QACnF,IAAI,aAAa,EAAE,GAAG,WAAW;YAAE,MAAM,IAAI,SAAS,EAAE,CAAC;IAC3D,CAAC;IACD,MAAM,WAAW,GAAG,GAAG,CAAC;IACxB,MAAM,OAAO,GAAmB,EAAE,CAAC;IACnC,IAAI,YAAY,EAAE,CAAC;QACjB,MAAM,WAAW,GAAG,KAAK,CAAC,UAAU,CAAC,CAAC;QACtC,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,WAAW,EAAE,CAAC,EAAE,EAAE,CAAC;YACrC,IAAI,CAAC,CAAC,CAAC,CAAC;YACR,MAAM,KAAK,GAAG,IAAI,CAAC,WAAW,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;YAC1C,GAAG,IAAI,CAAC,CAAC;YACT,OAAO,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,MAAM,EAAE,KAAK,CAAC,IAAI,EAAE,CAAC,EAAE,CAAC,CAAC;YAC/C,IAAI,aAAa,EAAE,GAAG,WAAW;gBAAE,MAAM,IAAI,SAAS,EAAE,CAAC;QAC3D,CAAC;IACH,CAAC;IACD,MAAM,SAAS,GAAG,GAAG,CAAC;IACtB,IAAI,UAAU,GAAG,KAAK,CAAC;IACvB,IAAI,QAAQ,EAAE,CAAC;QACb,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;YAC3B,MAAM,KAAK,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC;YACvB,MAAM,KAAK,GAAiB,EAAE,CAAC;YAC/B,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,KAAK,EAAE,CAAC,EAAE;gBAAE,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC;YAC1D,KAAK,CAAC,OAAO,GAAG,KAAK,CAAC;YACtB,IAAI,KAAK,GAAG,CAAC;gBAAE,UAAU,GAAG,IAAI,CAAC;QACnC,CAAC;QACD,IAAI,CAAC,UAAU;YAAE,MAAM,IAAI,SAAS,EAAE,CAAC,CAAC,+BAA+B;IACzE,CAAC;IACD,MAAM,QAAQ,GAAG,GAAG,EAAE,CAAC;IACvB,IAAI,GAAG,KAAK,KAAK,CAAC,MAAM;QAAE,MAAM,IAAI,SAAS,EAAE,CAAC;IAChD,MAAM,KAAK,GAAG,QAAQ;QACpB,CAAC,CAAC,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,KAAK,CAAC,QAAQ,CAAC,QAAQ,EAAE,SAAS,CAAC,EAAE,KAAK,CAAC,QAAQ,CAAC,GAAG,GAAG,CAAC,CAAC,CAAC;QACtF,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC;IACZ,MAAM,QAAQ,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,IAAI,EAAE,EAAE,CAAC,GAAG,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC;IACnE,IAAI,QAAQ,GAAG,WAAW;QAAE,MAAM,IAAI,SAAS,EAAE,CAAC;IAClD,OAAO;QACL,IAAI,EAAE,IAAA,mBAAW,EAAC,KAAK,CAAC;QACxB,OAAO;QACP,QAAQ;QACR,MAAM;QACN,OAAO;QACP,UAAU;QACV,YAAY,EAAE,QAAQ;QACtB,WAAW,EAAE,KAAK,CAAC,QAAQ,CAAC,WAAW,EAAE,SAAS,CAAC;QACnD,QAAQ,EAAE,GAAG,EAAE,CAAC,CAAC,KAAK,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAA,mBAAW,EAAC,GAAG,KAAK,CAAC,CAAC;KACrE,CAAC;AACJ,CAAC","sourcesContent":["/**\n * A linear, SDK-free reader of untrusted transaction bytes.\n *\n * bitcoinjs-lib 7's `Transaction.fromBuffer` is quadratic in the number of inputs and\n * outputs: a 3.98 MB transaction with 92,500 outputs took 53 s. So bytes from a node, an\n * indexer or a coordinator are read here instead, in one pass. Every count is checked\n * against the bytes left before anything is kept, scripts and witness items are views into\n * the input (never copies), and the txid is hashed from the three stretches of the\n * serialization it covers, without copying them.\n *\n * The format is exactly bitcoind's `UnserializeTransaction` with witness support (as\n * `sendrawtransaction` decodes): an empty input list is followed by a flags byte; flags 1\n * marks the witness (BIP144), and a witness record whose stacks are all empty, or any other\n * flag, does not decode. Sizes are canonical CompactSize values of at most `MAX_SIZE`, and\n * nothing may follow the lock time. So when this reader refuses bytes, bitcoind refuses them\n * too, which lets the broadcaster check a node's `TX decode failed` itself: a node's\n * rejection is a claim, kept only when it holds for our own bytes.\n */\nimport { sha256 } from '@noble/hashes/sha256';\nimport { concatBytes, toHex } from '../../core/util/bytes';\n\n/** Bitcoin Core's `MAX_BLOCK_SERIALIZED_SIZE`: no transaction's bytes are more. */\nexport const MAX_TX_BYTES = 4_000_000;\n/**\n * Consensus: a transaction's weight (4 × its size without witness data, at least) is at most\n * `MAX_BLOCK_WEIGHT` (4,000,000), so a transaction a chain holds has at most 1,000,000 bytes\n * without its witness.\n */\nexport const MAX_STRIPPED_BYTES = 1_000_000;\n/** bitcoind's `MAX_SIZE`: the largest CompactSize a deserializer accepts. */\nconst MAX_SIZE = 0x02000000;\n/** The fewest bytes an input (outpoint, empty script, sequence) and an output can take. */\nconst MIN_INPUT = 41;\nconst MIN_OUTPUT = 9;\n\nexport interface ParsedInput {\n  /** The previous txid, in display order (the reverse of the serialized hash). */\n  readonly txid: string;\n  /** The previous transaction's hash as serialized (internal byte order): a view. */\n  readonly hash: Uint8Array;\n  readonly vout: number;\n  readonly script: Uint8Array;\n  readonly sequence: number;\n  readonly witness: readonly Uint8Array[];\n}\n\nexport interface ParsedOutput {\n  /** As bitcoind reads it: a signed 64-bit integer. */\n  readonly value: bigint;\n  readonly script: Uint8Array;\n}\n\nexport interface ParsedTx {\n  readonly txid: string;\n  readonly version: number;\n  readonly locktime: number;\n  readonly inputs: readonly ParsedInput[];\n  readonly outputs: readonly ParsedOutput[];\n  readonly hasWitness: boolean;\n  /** The size without witness data (bitcoind's `TX_NO_WITNESS` serialization). */\n  readonly strippedSize: number;\n  /** The output list as serialized (its count, then each output): a view. */\n  readonly outputBytes: Uint8Array;\n  /** The serialization without witness data (BIP174 `non_witness_utxo`). */\n  stripped(): Uint8Array;\n}\n\nexport interface ReadOptions {\n  /**\n   * The most bytes without witness data: `MAX_STRIPPED_BYTES` (the default) for data a chain\n   * holds; the broadcaster reads what it sent with `MAX_TX_BYTES`, so every size bitcoind\n   * decodes is read (bitcoind refuses a larger one later, as `bad-txns-oversize`).\n   */\n  readonly maxStripped?: number;\n}\n\nclass Malformed extends Error {}\n\n/** Double SHA-256 of the given stretches, as one message. */\nfunction hash256(parts: readonly Uint8Array[]): Uint8Array {\n  const inner = sha256.create();\n  for (const part of parts) inner.update(part);\n  return sha256(inner.digest());\n}\n\n/** A txid (or block hash) in display order. */\nconst displayHex = (hash: Uint8Array): string => toHex(Uint8Array.from(hash).reverse());\n\n/** The txid of a serialization without witness data, given as consecutive stretches. */\nexport const txidOfParts = (parts: readonly Uint8Array[]): string =>\n  displayHex(hash256(parts));\n\n/** A little-endian 32-bit field, as bitcoind writes it. */\nexport function writeU32(n: number): Uint8Array {\n  const out = new Uint8Array(4);\n  new DataView(out.buffer).setUint32(0, n >>> 0, true);\n  return out;\n}\n\n/** A CompactSize, as bitcoind writes it (at most `MAX_SIZE` here). */\nexport function writeSize(n: number): Uint8Array {\n  if (n < 0xfd) return Uint8Array.of(n);\n  if (n <= 0xffff) return Uint8Array.of(0xfd, n & 0xff, n >>> 8);\n  return concatBytes(Uint8Array.of(0xfe), writeU32(n));\n}\n\n/** Transaction bytes, read in one pass; `undefined` when bitcoind would not decode them. */\nexport function readTx(\n  bytes: Uint8Array,\n  options: ReadOptions = {},\n): ParsedTx | undefined {\n  const maxStripped = options.maxStripped ?? MAX_STRIPPED_BYTES;\n  if (!(bytes instanceof Uint8Array) || bytes.length > MAX_TX_BYTES) return undefined;\n  try {\n    return parse(bytes, maxStripped);\n  } catch (error) {\n    if (error instanceof Malformed) return undefined;\n    throw error;\n  }\n}\n\n/**\n * Transaction hex (either case, no prefix), capped at `MAX_TX_BYTES` before it is\n * decoded, then read by `readTx`. Node's hex decoder is native and linear, and stops at\n * the first pair that is not hex, so a short result means the text was not plain hex.\n */\nexport function readTxHex(hex: string, options: ReadOptions = {}): ParsedTx | undefined {\n  if (typeof hex !== 'string' || hex.length > 2 * MAX_TX_BYTES) return undefined;\n  if (hex.length % 2 !== 0) return undefined;\n  const decoded = Buffer.from(hex, 'hex');\n  if (decoded.length * 2 !== hex.length) return undefined;\n  return readTx(\n    new Uint8Array(decoded.buffer, decoded.byteOffset, decoded.length),\n    options,\n  );\n}\n\nfunction parse(bytes: Uint8Array, maxStripped: number): ParsedTx {\n  const view = new DataView(bytes.buffer, bytes.byteOffset, bytes.byteLength);\n  let pos = 0;\n  const need = (n: number): void => {\n    if (n < 0 || pos + n > bytes.length) throw new Malformed();\n  };\n  const u8 = (): number => {\n    need(1);\n    return bytes[pos++] as number;\n  };\n  const u32 = (): number => {\n    need(4);\n    const value = view.getUint32(pos, true);\n    pos += 4;\n    return value;\n  };\n  const slice = (n: number): Uint8Array => {\n    need(n);\n    const part = bytes.subarray(pos, pos + n);\n    pos += n;\n    return part;\n  };\n  /** A canonical CompactSize of at most `MAX_SIZE` (bitcoind's `ReadCompactSize`). */\n  const size = (): number => {\n    const first = u8();\n    let value: number;\n    if (first < 0xfd) return first;\n    if (first === 0xfd) {\n      need(2);\n      value = view.getUint16(pos, true);\n      pos += 2;\n      if (value < 0xfd) throw new Malformed();\n    } else if (first === 0xfe) {\n      value = u32();\n      if (value < 0x1_0000) throw new Malformed();\n    } else {\n      throw new Malformed(); // 8 bytes: at least 2^32, beyond MAX_SIZE\n    }\n    if (value > MAX_SIZE) throw new Malformed();\n    return value;\n  };\n  /** Bounds a count by the bytes left, before anything is kept for it. */\n  const count = (least: number): number => {\n    const n = size();\n    if (n * least > bytes.length - pos) throw new Malformed();\n    return n;\n  };\n\n  // `skipped`: the marker and flag bytes, which the stripped serialization leaves out.\n  let skipped = 0;\n  const strippedSoFar = (): number => pos - skipped + 4; // with the lock time still to come\n  const version = u32() | 0;\n  let vinStart = pos;\n  let inputCount = count(MIN_INPUT);\n  let extended = false;\n  let outputsKnown = true;\n  if (inputCount === 0) {\n    const flags = u8();\n    if (flags === 0) {\n      outputsKnown = false; // bitcoind reads no output list after an empty one and no flags\n    } else {\n      if (flags !== 1) throw new Malformed(); // unknown optional data\n      extended = true;\n      skipped = 2;\n      vinStart = pos;\n      inputCount = count(MIN_INPUT);\n    }\n  }\n  const inputs: {\n    txid: string;\n    hash: Uint8Array;\n    vout: number;\n    script: Uint8Array;\n    sequence: number;\n    witness: readonly Uint8Array[];\n  }[] = [];\n  for (let i = 0; i < inputCount; i++) {\n    const hash = slice(32);\n    const vout = u32();\n    const script = slice(size());\n    const sequence = u32();\n    inputs.push({ txid: displayHex(hash), hash, vout, script, sequence, witness: [] });\n    if (strippedSoFar() > maxStripped) throw new Malformed();\n  }\n  const outputStart = pos;\n  const outputs: ParsedOutput[] = [];\n  if (outputsKnown) {\n    const outputCount = count(MIN_OUTPUT);\n    for (let i = 0; i < outputCount; i++) {\n      need(8);\n      const value = view.getBigInt64(pos, true);\n      pos += 8;\n      outputs.push({ value, script: slice(size()) });\n      if (strippedSoFar() > maxStripped) throw new Malformed();\n    }\n  }\n  const outputEnd = pos;\n  let hasWitness = false;\n  if (extended) {\n    for (const input of inputs) {\n      const items = count(1);\n      const stack: Uint8Array[] = [];\n      for (let i = 0; i < items; i++) stack.push(slice(size()));\n      input.witness = stack;\n      if (items > 0) hasWitness = true;\n    }\n    if (!hasWitness) throw new Malformed(); // a superfluous witness record\n  }\n  const locktime = u32();\n  if (pos !== bytes.length) throw new Malformed();\n  const parts = extended\n    ? [bytes.subarray(0, 4), bytes.subarray(vinStart, outputEnd), bytes.subarray(pos - 4)]\n    : [bytes];\n  const stripped = parts.reduce((sum, part) => sum + part.length, 0);\n  if (stripped > maxStripped) throw new Malformed();\n  return {\n    txid: txidOfParts(parts),\n    version,\n    locktime,\n    inputs,\n    outputs,\n    hasWitness,\n    strippedSize: stripped,\n    outputBytes: bytes.subarray(outputStart, outputEnd),\n    stripped: () => (parts.length === 1 ? bytes : concatBytes(...parts)),\n  };\n}\n"]}

package/dist/adapters/utxo/reader.d.ts

@@ -0,0 +1,36 @@
+/**
+ * Bitcoin addresses, point reads, observation, address history and `ext.utxo.listUnspent`.
+ * Every call carries the tags of the `ChainDriver` contract table: `read` for point
+ * queries, `monitor` for heights and observations; address reads go to the indexer.
+ */
+import type { AddressCodec, AddressHistorySource, ChainReader } from '../../core/driver/types';
+import { type UtxoContext } from './context';
+import type { UtxoCallTags, UtxoUnspent } from './types';
+export declare function addressCodec(ctx: UtxoContext): AddressCodec;
+/**
+ * Whether `spender` is a miner-malleated copy of our p2pkh Attempt `refId`. Its raw
+ * bytes are read under `tags` and authenticate themselves: under a quorum the client keys
+ * the answers on the txid they hash to, and it refuses bytes that do not hash to `spender`
+ * (a retryable `PROVIDER_INCONSISTENT`). They are then canonicalized: equality with `refId`
+ * proves the same version, lock time, outpoints, sequences and outputs. Segwit and taproot
+ * txids exclude the witness and cannot be malleated, so nothing is read for them.
+ */
+export declare function isOwnCopy(ctx: UtxoContext, refId: string, from: string, spender: string, tags: UtxoCallTags): Promise<boolean>;
+/** The highest block with the network's confirmations, from one `monitor` read. */
+export declare function finalizedFromHead(ctx: UtxoContext, head: bigint): bigint;
+export declare function chainReader(ctx: UtxoContext): ChainReader;
+/**
+ * Confirmed history, newest first (Esplora pages of 25; the cursor is the last txid). A full
+ * page, of any size a server chooses, may have a next one. The answer is filtered to the
+ * address asked for: a server that dropped its filter never lists another
+ * address's transaction, and every transaction served counts toward `limit`, so paging stays
+ * bounded.
+ */
+export declare function addressHistory(ctx: UtxoContext): AddressHistorySource;
+/**
+ * `ext.utxo.listUnspent`: confirmed first (oldest first), then unconfirmed. An output the
+ * indexer names twice alike is listed once; named twice differently (another value or
+ * status), the answer is malformed, and so is a list worth more than every bitcoin. Coin
+ * selection reads the wallet's outputs through it (`spendable`, with the build's signal).
+ */
+export declare function listUnspent(ctx: UtxoContext, address: string, signal?: AbortSignal): Promise<UtxoUnspent[]>;

package/dist/adapters/utxo/reader.js

@@ -0,0 +1,265 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.addressCodec = addressCodec;
+exports.isOwnCopy = isOwnCopy;
+exports.finalizedFromHead = finalizedFromHead;
+exports.chainReader = chainReader;
+exports.addressHistory = addressHistory;
+exports.listUnspent = listUnspent;
+const error_1 = require("../../core/errors/error");
+const bytes_1 = require("../../core/util/bytes");
+const address_1 = require("./address");
+const context_1 = require("./context");
+const codec_1 = require("./codec");
+const decode_1 = require("./decode");
+const esplora_1 = require("./esplora");
+/** Esplora's page of address history (electrs' `CHAIN_TXS_PER_PAGE`). */
+const HISTORY_PAGE = 25;
+const MAX_HEIGHT = BigInt(Number.MAX_SAFE_INTEGER);
+/** Two reads of one index that contradict each other decide nothing (retryable). */
+const contradiction = (reason) => new error_1.ProviderError('PROVIDER_INCONSISTENT', reason, { retryable: true });
+const normalized = (canonical, type) => ({
+    canonical,
+    display: canonical,
+    variant: { type },
+});
+function addressCodec(ctx) {
+    const params = ctx.config.address;
+    return {
+        validate: (address) => {
+            try {
+                (0, address_1.decodeAddress)(address, params);
+                return true;
+            }
+            catch {
+                return false;
+            }
+        },
+        normalize: (address) => {
+            const decoded = (0, address_1.decodeAddress)(address, params);
+            return normalized(decoded.canonical, decoded.type);
+        },
+        fromPublicKey: (publicKey, wallet) => {
+            const { addressType } = (0, context_1.parseWalletOptions)(wallet, ctx.config);
+            const derived = (0, address_1.walletAddress)(publicKey, addressType, params);
+            return normalized(derived.address, derived.type === 'p2sh-p2wpkh' ? 'p2sh' : derived.type);
+        },
+    };
+}
+/** The key hash of a p2pkh sending address, or `undefined` for every other type. */
+function p2pkhKeyHash(ctx, from) {
+    try {
+        const decoded = (0, address_1.decodeAddress)(from, ctx.config.address);
+        return decoded.type === 'p2pkh' ? decoded.script.slice(3, 23) : undefined;
+    }
+    catch {
+        return undefined;
+    }
+}
+/**
+ * Whether `spender` is a miner-malleated copy of our p2pkh Attempt `refId`. Its raw
+ * bytes are read under `tags` and authenticate themselves: under a quorum the client keys
+ * the answers on the txid they hash to, and it refuses bytes that do not hash to `spender`
+ * (a retryable `PROVIDER_INCONSISTENT`). They are then canonicalized: equality with `refId`
+ * proves the same version, lock time, outpoints, sequences and outputs. Segwit and taproot
+ * txids exclude the witness and cannot be malleated, so nothing is read for them.
+ */
+async function isOwnCopy(ctx, refId, from, spender, tags) {
+    const keyHash = p2pkhKeyHash(ctx, from);
+    if (!keyHash)
+        return false;
+    const hex = await ctx.esplora.txHex(spender, tags);
+    if (hex === null) {
+        throw new error_1.ProviderError('PROVIDER_UNAVAILABLE', 'the spending transaction is not available');
+    }
+    return (0, codec_1.canonicalTwinTxid)(hex, keyHash) === refId;
+}
+/** The highest block with the network's confirmations, from one `monitor` read. */
+function finalizedFromHead(ctx, head) {
+    const height = head - BigInt(ctx.config.confirmations) + 1n;
+    return height < 0n ? 0n : height;
+}
+function chainReader(ctx) {
+    const { esplora, config } = ctx;
+    const block = async (hash, height) => {
+        const found = await esplora.block(hash, context_1.READ);
+        if (!found)
+            return null;
+        // The block at a height must say it is at that height. A block's height never
+        // changes, so only a lie or a server bug trips this; it decides nothing (retryable).
+        if (height !== undefined && found.height !== height) {
+            throw contradiction('the block at the height asked for is at another height');
+        }
+        const transactionIds = await esplora.blockTxids(found.hash, context_1.READ);
+        if (transactionIds.length !== found.txCount)
+            throw (0, esplora_1.malformed)('block txids');
+        return {
+            height: found.height,
+            hash: found.hash,
+            parentHash: found.parentHash,
+            timestamp: found.timestamp,
+            transactionIds,
+        };
+    };
+    return {
+        getBalance: async (address, asset) => {
+            (0, context_1.assertNative)(asset);
+            const stats = await esplora.addressStats((0, address_1.decodeAddress)(address, config.address).canonical, context_1.READ);
+            return stats.funded - stats.spent;
+        },
+        getBlockHeight: () => esplora.tipHeight(context_1.MONITOR),
+        getFinalizedHeight: async () => finalizedFromHead(ctx, await esplora.tipHeight(context_1.MONITOR)),
+        getBlock: async (ref) => {
+            if (typeof ref === 'string') {
+                const id = ref.toLowerCase();
+                return (0, esplora_1.isHash)(id) ? block(id) : null; // a malformed id never reaches a path
+            }
+            // No block is below 0 or beyond what a server can parse: never sent.
+            if (ref < 0n || ref > MAX_HEIGHT)
+                return null;
+            const hash = await esplora.blockHashAt(ref, context_1.READ);
+            return hash ? block(hash, ref) : null;
+        },
+        getTransaction: async (raw) => {
+            const id = raw.toLowerCase();
+            if (!(0, esplora_1.isHash)(id))
+                return null; // a malformed id never reaches a path
+            const tx = await esplora.tx(id, context_1.READ);
+            return tx ? (0, decode_1.decodeTransaction)(tx, config.address) : null;
+        },
+        observe: async (ref, ordering, from) => {
+            const id = ref.id.toLowerCase();
+            if (!(0, esplora_1.isHash)(id))
+                return { seen: 'none' }; // a malformed id never reaches a path
+            // A refusal on any of these reads decides nothing (retryable).
+            return (0, context_1.proofRead)(async () => {
+                // `/tx/:txid/status` answers `confirmed: false` for a transaction it does not know,
+                // so visibility is read from `/tx/:txid`, which is a 404 then.
+                const tx = await esplora.tx(id, context_1.MONITOR);
+                if (tx?.status.confirmed)
+                    return (0, decode_1.observationOf)(tx.txid, tx.status);
+                const first = ordering?.kind === 'inputs' ? ordering.inputs[0] : undefined;
+                // A status lookup by id (no ordering) reports the index as it is.
+                if (first === undefined)
+                    return tx ? (0, decode_1.observationOf)(tx.txid, tx.status) : { seen: 'none' };
+                const legacy = from !== undefined && p2pkhKeyHash(ctx, from) ? from : undefined;
+                // Unknown, and a segwit or taproot txid cannot be malleated: nothing more to learn.
+                if (!tx && legacy === undefined)
+                    return { seen: 'none' };
+                const input = (0, context_1.parseOutpoint)(first);
+                // Full-mode electrs keeps serving a reorg-dropped transaction as unconfirmed,
+                // and `/status` cannot tell a mempool transaction from one only in its txstore. The
+                // first input's spender can: chain spends of a disconnected block are gone, then the
+                // mempool's are read. Ours: in a mempool. None: in no mempool of this index (the core
+                // rebroadcasts a dropped Attempt). Another: conflicted, or our malleated copy.
+                // Observed evidence only: an index still syncing can briefly say otherwise.
+                const spend = await esplora.outspend(input.txid, input.vout, context_1.MONITOR);
+                if (!spend.spent || spend.txid === undefined)
+                    return { seen: 'none' };
+                if (spend.txid === id) {
+                    if (tx)
+                        return (0, decode_1.observationOf)(tx.txid, tx.status);
+                    throw contradiction('the index spends with a transaction it does not know');
+                }
+                // Our own p2pkh Attempt, mined as a malleated copy (observed evidence only; only
+                // `includedFinal`'s quorum path can make it terminal).
+                if (legacy === undefined ||
+                    !(await isOwnCopy(ctx, id, legacy, spend.txid, context_1.MONITOR)))
+                    return { seen: 'none' };
+                const copy = await esplora.tx(spend.txid, context_1.MONITOR);
+                if (!copy)
+                    throw contradiction('the index spends with a transaction it does not know');
+                return (0, decode_1.observationOf)(copy.txid, copy.status);
+            });
+        },
+    };
+}
+/**
+ * Confirmed history, newest first (Esplora pages of 25; the cursor is the last txid). A full
+ * page, of any size a server chooses, may have a next one. The answer is filtered to the
+ * address asked for: a server that dropped its filter never lists another
+ * address's transaction, and every transaction served counts toward `limit`, so paging stays
+ * bounded.
+ */
+function addressHistory(ctx) {
+    return {
+        async list(address, { cursor, limit }) {
+            if (!Number.isSafeInteger(limit) || limit < 1) {
+                throw new error_1.ValidationError('INVALID_INTENT', 'limit must be a positive integer');
+            }
+            if (cursor !== undefined && !/^[0-9a-f]{64}$/.test(cursor)) {
+                throw new error_1.ValidationError('INVALID_INTENT', 'malformed history cursor');
+            }
+            const decoded = (0, address_1.decodeAddress)(address, ctx.config.address);
+            const script = (0, bytes_1.toHex)(decoded.script);
+            const touches = (tx) => tx.vout.some((output) => output.script === script) ||
+                tx.vin.some((input) => input.prevout?.script === script);
+            const items = [];
+            let served = 0;
+            let last = cursor;
+            let more = true;
+            while (served < limit && more) {
+                const page = await ctx.esplora.addressTxs(decoded.canonical, last, context_1.READ);
+                const taken = page.slice(0, limit - served);
+                for (const tx of taken) {
+                    if (touches(tx))
+                        items.push((0, decode_1.decodeTransaction)(tx, ctx.config.address));
+                    last = tx.txid;
+                    served++;
+                }
+                more = taken.length < page.length || page.length >= HISTORY_PAGE;
+            }
+            return { items, ...(more && last !== undefined ? { next: last } : {}) };
+        },
+    };
+}
+/**
+ * `ext.utxo.listUnspent`: confirmed first (oldest first), then unconfirmed. An output the
+ * indexer names twice alike is listed once; named twice differently (another value or
+ * status), the answer is malformed, and so is a list worth more than every bitcoin. Coin
+ * selection reads the wallet's outputs through it (`spendable`, with the build's signal).
+ */
+async function listUnspent(ctx, address, signal) {
+    const canonical = (0, address_1.decodeAddress)(address, ctx.config.address).canonical;
+    const listed = await ctx.esplora.addressUtxos(canonical, (0, context_1.withSignal)(context_1.READ, signal));
+    const seen = new Map();
+    const utxos = listed.filter((u) => {
+        const key = `${u.txid}:${u.vout}`;
+        const { confirmed, blockHeight, blockHash, blockTime } = u.status;
+        const facts = `${u.value}|${confirmed}|${blockHeight}|${blockHash}|${blockTime}`;
+        const known = seen.get(key);
+        if (known === undefined) {
+            seen.set(key, facts);
+            return true;
+        }
+        if (known !== facts)
+            throw (0, esplora_1.malformed)('an unspent output listed twice, differently');
+        return false;
+    });
+    // Each value is in range (the parser), but no address holds more than every bitcoin: under
+    // coinSelection `all`, such a listing would build change above MAX_MONEY.
+    if (utxos.reduce((sum, u) => sum + u.value, 0n) > esplora_1.MAX_MONEY) {
+        throw (0, esplora_1.malformed)('unspent outputs worth more than every bitcoin');
+    }
+    const height = (u) => u.status.confirmed
+        ? u.status.blockHeight
+        : BigInt(Number.MAX_SAFE_INTEGER);
+    return utxos
+        .map((u) => ({ u, key: `${u.txid}:${u.vout}` }))
+        .sort((a, b) => height(a.u) === height(b.u)
+        ? a.key < b.key
+            ? -1
+            : 1
+        : height(a.u) < height(b.u)
+            ? -1
+            : 1)
+        .map(({ u, key }) => ({
+        outpoint: key,
+        txid: u.txid,
+        vout: u.vout,
+        value: u.value,
+        confirmed: u.status.confirmed,
+        ...(u.status.confirmed ? { blockHeight: u.status.blockHeight } : {}),
+    }));
+}
+//# sourceMappingURL=reader.js.map

package/dist/adapters/utxo/reader.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"reader.js","sourceRoot":"","sources":["../../../src/adapters/utxo/reader.ts"],"names":[],"mappings":";;AA6CA,oCAwBC;AAoBD,8BAiBC;AAGD,8CAGC;AAED,kCA2FC;AASD,wCA+BC;AAQD,kCAgDC;AAjSD,mDAAyE;AAEzE,iDAA8C;AAC9C,uCAAyD;AACzD,uCASmB;AACnB,mCAA4C;AAC5C,qCAA4D;AAC5D,uCAAyD;AAGzD,yEAAyE;AACzE,MAAM,YAAY,GAAG,EAAE,CAAC;AACxB,MAAM,UAAU,GAAG,MAAM,CAAC,MAAM,CAAC,gBAAgB,CAAC,CAAC;AAEnD,oFAAoF;AACpF,MAAM,aAAa,GAAG,CAAC,MAAc,EAAiB,EAAE,CACtD,IAAI,qBAAa,CAAC,uBAAuB,EAAE,MAAM,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;AAE1E,MAAM,UAAU,GAAG,CAAC,SAAiB,EAAE,IAAoB,EAAqB,EAAE,CAAC,CAAC;IAClF,SAAS;IACT,OAAO,EAAE,SAAS;IAClB,OAAO,EAAE,EAAE,IAAI,EAAE;CAClB,CAAC,CAAC;AAEH,SAAgB,YAAY,CAAC,GAAgB;IAC3C,MAAM,MAAM,GAAG,GAAG,CAAC,MAAM,CAAC,OAAO,CAAC;IAClC,OAAO;QACL,QAAQ,EAAE,CAAC,OAAO,EAAE,EAAE;YACpB,IAAI,CAAC;gBACH,IAAA,uBAAa,EAAC,OAAO,EAAE,MAAM,CAAC,CAAC;gBAC/B,OAAO,IAAI,CAAC;YACd,CAAC;YAAC,MAAM,CAAC;gBACP,OAAO,KAAK,CAAC;YACf,CAAC;QACH,CAAC;QACD,SAAS,EAAE,CAAC,OAAO,EAAE,EAAE;YACrB,MAAM,OAAO,GAAG,IAAA,uBAAa,EAAC,OAAO,EAAE,MAAM,CAAC,CAAC;YAC/C,OAAO,UAAU,CAAC,OAAO,CAAC,SAAS,EAAE,OAAO,CAAC,IAAI,CAAC,CAAC;QACrD,CAAC;QACD,aAAa,EAAE,CAAC,SAAS,EAAE,MAAM,EAAE,EAAE;YACnC,MAAM,EAAE,WAAW,EAAE,GAAG,IAAA,4BAAkB,EAAC,MAAM,EAAE,GAAG,CAAC,MAAM,CAAC,CAAC;YAC/D,MAAM,OAAO,GAAG,IAAA,uBAAa,EAAC,SAAS,EAAE,WAAW,EAAE,MAAM,CAAC,CAAC;YAC9D,OAAO,UAAU,CACf,OAAO,CAAC,OAAO,EACf,OAAO,CAAC,IAAI,KAAK,aAAa,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC,IAAI,CACvD,CAAC;QACJ,CAAC;KACF,CAAC;AACJ,CAAC;AAED,oFAAoF;AACpF,SAAS,YAAY,CAAC,GAAgB,EAAE,IAAY;IAClD,IAAI,CAAC;QACH,MAAM,OAAO,GAAG,IAAA,uBAAa,EAAC,IAAI,EAAE,GAAG,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;QACxD,OAAO,OAAO,CAAC,IAAI,KAAK,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;IAC5E,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,SAAS,CAAC;IACnB,CAAC;AACH,CAAC;AAED;;;;;;;GAOG;AACI,KAAK,UAAU,SAAS,CAC7B,GAAgB,EAChB,KAAa,EACb,IAAY,EACZ,OAAe,EACf,IAAkB;IAElB,MAAM,OAAO,GAAG,YAAY,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;IACxC,IAAI,CAAC,OAAO;QAAE,OAAO,KAAK,CAAC;IAC3B,MAAM,GAAG,GAAG,MAAM,GAAG,CAAC,OAAO,CAAC,KAAK,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;IACnD,IAAI,GAAG,KAAK,IAAI,EAAE,CAAC;QACjB,MAAM,IAAI,qBAAa,CACrB,sBAAsB,EACtB,2CAA2C,CAC5C,CAAC;IACJ,CAAC;IACD,OAAO,IAAA,yBAAiB,EAAC,GAAG,EAAE,OAAO,CAAC,KAAK,KAAK,CAAC;AACnD,CAAC;AAED,mFAAmF;AACnF,SAAgB,iBAAiB,CAAC,GAAgB,EAAE,IAAY;IAC9D,MAAM,MAAM,GAAG,IAAI,GAAG,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,aAAa,CAAC,GAAG,EAAE,CAAC;IAC5D,OAAO,MAAM,GAAG,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC;AACnC,CAAC;AAED,SAAgB,WAAW,CAAC,GAAgB;IAC1C,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,GAAG,GAAG,CAAC;IAChC,MAAM,KAAK,GAAG,KAAK,EAAE,IAAY,EAAE,MAAe,EAA+B,EAAE;QACjF,MAAM,KAAK,GAAG,MAAM,OAAO,CAAC,KAAK,CAAC,IAAI,EAAE,cAAI,CAAC,CAAC;QAC9C,IAAI,CAAC,KAAK;YAAE,OAAO,IAAI,CAAC;QACxB,8EAA8E;QAC9E,qFAAqF;QACrF,IAAI,MAAM,KAAK,SAAS,IAAI,KAAK,CAAC,MAAM,KAAK,MAAM,EAAE,CAAC;YACpD,MAAM,aAAa,CAAC,wDAAwD,CAAC,CAAC;QAChF,CAAC;QACD,MAAM,cAAc,GAAG,MAAM,OAAO,CAAC,UAAU,CAAC,KAAK,CAAC,IAAI,EAAE,cAAI,CAAC,CAAC;QAClE,IAAI,cAAc,CAAC,MAAM,KAAK,KAAK,CAAC,OAAO;YAAE,MAAM,IAAA,mBAAS,EAAC,aAAa,CAAC,CAAC;QAC5E,OAAO;YACL,MAAM,EAAE,KAAK,CAAC,MAAM;YACpB,IAAI,EAAE,KAAK,CAAC,IAAI;YAChB,UAAU,EAAE,KAAK,CAAC,UAAU;YAC5B,SAAS,EAAE,KAAK,CAAC,SAAS;YAC1B,cAAc;SACf,CAAC;IACJ,CAAC,CAAC;IACF,OAAO;QACL,UAAU,EAAE,KAAK,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE;YACnC,IAAA,sBAAY,EAAC,KAAK,CAAC,CAAC;YACpB,MAAM,KAAK,GAAG,MAAM,OAAO,CAAC,YAAY,CACtC,IAAA,uBAAa,EAAC,OAAO,EAAE,MAAM,CAAC,OAAO,CAAC,CAAC,SAAS,EAChD,cAAI,CACL,CAAC;YACF,OAAO,KAAK,CAAC,MAAM,GAAG,KAAK,CAAC,KAAK,CAAC;QACpC,CAAC;QACD,cAAc,EAAE,GAAG,EAAE,CAAC,OAAO,CAAC,SAAS,CAAC,iBAAO,CAAC;QAChD,kBAAkB,EAAE,KAAK,IAAI,EAAE,CAC7B,iBAAiB,CAAC,GAAG,EAAE,MAAM,OAAO,CAAC,SAAS,CAAC,iBAAO,CAAC,CAAC;QAC1D,QAAQ,EAAE,KAAK,EAAE,GAAG,EAAE,EAAE;YACtB,IAAI,OAAO,GAAG,KAAK,QAAQ,EAAE,CAAC;gBAC5B,MAAM,EAAE,GAAG,GAAG,CAAC,WAAW,EAAE,CAAC;gBAC7B,OAAO,IAAA,gBAAM,EAAC,EAAE,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,sCAAsC;YAC9E,CAAC;YACD,qEAAqE;YACrE,IAAI,GAAG,GAAG,EAAE,IAAI,GAAG,GAAG,UAAU;gBAAE,OAAO,IAAI,CAAC;YAC9C,MAAM,IAAI,GAAG,MAAM,OAAO,CAAC,WAAW,CAAC,GAAG,EAAE,cAAI,CAAC,CAAC;YAClD,OAAO,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;QACxC,CAAC;QACD,cAAc,EAAE,KAAK,EAAE,GAAG,EAAE,EAAE;YAC5B,MAAM,EAAE,GAAG,GAAG,CAAC,WAAW,EAAE,CAAC;YAC7B,IAAI,CAAC,IAAA,gBAAM,EAAC,EAAE,CAAC;gBAAE,OAAO,IAAI,CAAC,CAAC,sCAAsC;YACpE,MAAM,EAAE,GAAG,MAAM,OAAO,CAAC,EAAE,CAAC,EAAE,EAAE,cAAI,CAAC,CAAC;YACtC,OAAO,EAAE,CAAC,CAAC,CAAC,IAAA,0BAAiB,EAAC,EAAE,EAAE,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;QAC3D,CAAC;QACD,OAAO,EAAE,KAAK,EAAE,GAAG,EAAE,QAAQ,EAAE,IAAI,EAAE,EAAE;YACrC,MAAM,EAAE,GAAG,GAAG,CAAC,EAAE,CAAC,WAAW,EAAE,CAAC;YAChC,IAAI,CAAC,IAAA,gBAAM,EAAC,EAAE,CAAC;gBAAE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC,CAAC,sCAAsC;YAChF,+DAA+D;YAC/D,OAAO,IAAA,mBAAS,EAAC,KAAK,IAAI,EAAE;gBAC1B,oFAAoF;gBACpF,+DAA+D;gBAC/D,MAAM,EAAE,GAAG,MAAM,OAAO,CAAC,EAAE,CAAC,EAAE,EAAE,iBAAO,CAAC,CAAC;gBACzC,IAAI,EAAE,EAAE,MAAM,CAAC,SAAS;oBAAE,OAAO,IAAA,sBAAa,EAAC,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,MAAM,CAAC,CAAC;gBACnE,MAAM,KAAK,GAAG,QAAQ,EAAE,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;gBAC3E,kEAAkE;gBAClE,IAAI,KAAK,KAAK,SAAS;oBACrB,OAAO,EAAE,CAAC,CAAC,CAAC,IAAA,sBAAa,EAAC,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC;gBACnE,MAAM,MAAM,GAAG,IAAI,KAAK,SAAS,IAAI,YAAY,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC;gBAChF,oFAAoF;gBACpF,IAAI,CAAC,EAAE,IAAI,MAAM,KAAK,SAAS;oBAAE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC;gBACzD,MAAM,KAAK,GAAG,IAAA,uBAAa,EAAC,KAAK,CAAC,CAAC;gBACnC,8EAA8E;gBAC9E,oFAAoF;gBACpF,qFAAqF;gBACrF,sFAAsF;gBACtF,+EAA+E;gBAC/E,4EAA4E;gBAC5E,MAAM,KAAK,GAAG,MAAM,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,iBAAO,CAAC,CAAC;gBACtE,IAAI,CAAC,KAAK,CAAC,KAAK,IAAI,KAAK,CAAC,IAAI,KAAK,SAAS;oBAAE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC;gBACtE,IAAI,KAAK,CAAC,IAAI,KAAK,EAAE,EAAE,CAAC;oBACtB,IAAI,EAAE;wBAAE,OAAO,IAAA,sBAAa,EAAC,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,MAAM,CAAC,CAAC;oBACjD,MAAM,aAAa,CAAC,sDAAsD,CAAC,CAAC;gBAC9E,CAAC;gBACD,iFAAiF;gBACjF,uDAAuD;gBACvD,IACE,MAAM,KAAK,SAAS;oBACpB,CAAC,CAAC,MAAM,SAAS,CAAC,GAAG,EAAE,EAAE,EAAE,MAAM,EAAE,KAAK,CAAC,IAAI,EAAE,iBAAO,CAAC,CAAC;oBAExD,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC;gBAC1B,MAAM,IAAI,GAAG,MAAM,OAAO,CAAC,EAAE,CAAC,KAAK,CAAC,IAAI,EAAE,iBAAO,CAAC,CAAC;gBACnD,IAAI,CAAC,IAAI;oBACP,MAAM,aAAa,CAAC,sDAAsD,CAAC,CAAC;gBAC9E,OAAO,IAAA,sBAAa,EAAC,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC;YAC/C,CAAC,CAAC,CAAC;QACL,CAAC;KACF,CAAC;AACJ,CAAC;AAED;;;;;;GAMG;AACH,SAAgB,cAAc,CAAC,GAAgB;IAC7C,OAAO;QACL,KAAK,CAAC,IAAI,CAAC,OAAO,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE;YACnC,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,KAAK,CAAC,IAAI,KAAK,GAAG,CAAC,EAAE,CAAC;gBAC9C,MAAM,IAAI,uBAAe,CAAC,gBAAgB,EAAE,kCAAkC,CAAC,CAAC;YAClF,CAAC;YACD,IAAI,MAAM,KAAK,SAAS,IAAI,CAAC,gBAAgB,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC;gBAC3D,MAAM,IAAI,uBAAe,CAAC,gBAAgB,EAAE,0BAA0B,CAAC,CAAC;YAC1E,CAAC;YACD,MAAM,OAAO,GAAG,IAAA,uBAAa,EAAC,OAAO,EAAE,GAAG,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;YAC3D,MAAM,MAAM,GAAG,IAAA,aAAK,EAAC,OAAO,CAAC,MAAM,CAAC,CAAC;YACrC,MAAM,OAAO,GAAG,CAAC,EAAa,EAAE,EAAE,CAChC,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,MAAM,KAAK,MAAM,CAAC;gBAClD,EAAE,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,OAAO,EAAE,MAAM,KAAK,MAAM,CAAC,CAAC;YAC3D,MAAM,KAAK,GAAwB,EAAE,CAAC;YACtC,IAAI,MAAM,GAAG,CAAC,CAAC;YACf,IAAI,IAAI,GAAG,MAAM,CAAC;YAClB,IAAI,IAAI,GAAG,IAAI,CAAC;YAChB,OAAO,MAAM,GAAG,KAAK,IAAI,IAAI,EAAE,CAAC;gBAC9B,MAAM,IAAI,GAAG,MAAM,GAAG,CAAC,OAAO,CAAC,UAAU,CAAC,OAAO,CAAC,SAAS,EAAE,IAAI,EAAE,cAAI,CAAC,CAAC;gBACzE,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,KAAK,GAAG,MAAM,CAAC,CAAC;gBAC5C,KAAK,MAAM,EAAE,IAAI,KAAK,EAAE,CAAC;oBACvB,IAAI,OAAO,CAAC,EAAE,CAAC;wBAAE,KAAK,CAAC,IAAI,CAAC,IAAA,0BAAiB,EAAC,EAAE,EAAE,GAAG,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC;oBACvE,IAAI,GAAG,EAAE,CAAC,IAAI,CAAC;oBACf,MAAM,EAAE,CAAC;gBACX,CAAC;gBACD,IAAI,GAAG,KAAK,CAAC,MAAM,GAAG,IAAI,CAAC,MAAM,IAAI,IAAI,CAAC,MAAM,IAAI,YAAY,CAAC;YACnE,CAAC;YACD,OAAO,EAAE,KAAK,EAAE,GAAG,CAAC,IAAI,IAAI,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC;QAC1E,CAAC;KACF,CAAC;AACJ,CAAC;AAED;;;;;GAKG;AACI,KAAK,UAAU,WAAW,CAC/B,GAAgB,EAChB,OAAe,EACf,MAAoB;IAEpB,MAAM,SAAS,GAAG,IAAA,uBAAa,EAAC,OAAO,EAAE,GAAG,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,SAAS,CAAC;IACvE,MAAM,MAAM,GAAG,MAAM,GAAG,CAAC,OAAO,CAAC,YAAY,CAAC,SAAS,EAAE,IAAA,oBAAU,EAAC,cAAI,EAAE,MAAM,CAAC,CAAC,CAAC;IACnF,MAAM,IAAI,GAAG,IAAI,GAAG,EAAkB,CAAC;IACvC,MAAM,KAAK,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE;QAChC,MAAM,GAAG,GAAG,GAAG,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC,IAAI,EAAE,CAAC;QAClC,MAAM,EAAE,SAAS,EAAE,WAAW,EAAE,SAAS,EAAE,SAAS,EAAE,GAAG,CAAC,CAAC,MAAM,CAAC;QAClE,MAAM,KAAK,GAAG,GAAG,CAAC,CAAC,KAAK,IAAI,SAAS,IAAI,WAAW,IAAI,SAAS,IAAI,SAAS,EAAE,CAAC;QACjF,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QAC5B,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;YACxB,IAAI,CAAC,GAAG,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;YACrB,OAAO,IAAI,CAAC;QACd,CAAC;QACD,IAAI,KAAK,KAAK,KAAK;YAAE,MAAM,IAAA,mBAAS,EAAC,6CAA6C,CAAC,CAAC;QACpF,OAAO,KAAK,CAAC;IACf,CAAC,CAAC,CAAC;IACH,2FAA2F;IAC3F,0EAA0E;IAC1E,IAAI,KAAK,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,CAAC,EAAE,EAAE,CAAC,GAAG,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,GAAG,mBAAS,EAAE,CAAC;QAC5D,MAAM,IAAA,mBAAS,EAAC,+CAA+C,CAAC,CAAC;IACnE,CAAC;IACD,MAAM,MAAM,GAAG,CAAC,CAAyB,EAAE,EAAE,CAC3C,CAAC,CAAC,MAAM,CAAC,SAAS;QAChB,CAAC,CAAE,CAAC,CAAC,MAAM,CAAC,WAAsB;QAClC,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,gBAAgB,CAAC,CAAC;IACtC,OAAO,KAAK;SACT,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,CAAC,EAAE,GAAG,EAAE,GAAG,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;SAC/C,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CACb,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC;QACzB,CAAC,CAAC,CAAC,CAAC,GAAG,GAAG,CAAC,CAAC,GAAG;YACb,CAAC,CAAC,CAAC,CAAC;YACJ,CAAC,CAAC,CAAC;QACL,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC;YACzB,CAAC,CAAC,CAAC,CAAC;YACJ,CAAC,CAAC,CAAC,CACR;SACA,GAAG,CAAC,CAAC,EAAE,CAAC,EAAE,GAAG,EAAE,EAAE,EAAE,CAAC,CAAC;QACpB,QAAQ,EAAE,GAAG;QACb,IAAI,EAAE,CAAC,CAAC,IAAI;QACZ,IAAI,EAAE,CAAC,CAAC,IAAI;QACZ,KAAK,EAAE,CAAC,CAAC,KAAK;QACd,SAAS,EAAE,CAAC,CAAC,MAAM,CAAC,SAAS;QAC7B,GAAG,CAAC,CAAC,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,CAAC,CAAC,MAAM,CAAC,WAAqB,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KAC/E,CAAC,CAAC,CAAC;AACR,CAAC","sourcesContent":["/**\n * Bitcoin addresses, point reads, observation, address history and `ext.utxo.listUnspent`.\n * Every call carries the tags of the `ChainDriver` contract table: `read` for point\n * queries, `monitor` for heights and observations; address reads go to the indexer.\n */\nimport type {\n  AddressCodec,\n  AddressHistorySource,\n  ChainReader,\n  DriverBlock,\n  DriverTransaction,\n} from '../../core/driver/types';\nimport { ProviderError, ValidationError } from '../../core/errors/error';\nimport type { NormalizedAddress } from '../../core/model/address';\nimport { toHex } from '../../core/util/bytes';\nimport { decodeAddress, walletAddress } from './address';\nimport {\n  MONITOR,\n  READ,\n  assertNative,\n  parseOutpoint,\n  proofRead,\n  parseWalletOptions,\n  withSignal,\n  type UtxoContext,\n} from './context';\nimport { canonicalTwinTxid } from './codec';\nimport { decodeTransaction, observationOf } from './decode';\nimport { MAX_MONEY, isHash, malformed } from './esplora';\nimport type { EsploraTx, UtxoCallTags, UtxoOutputType, UtxoUnspent } from './types';\n\n/** Esplora's page of address history (electrs' `CHAIN_TXS_PER_PAGE`). */\nconst HISTORY_PAGE = 25;\nconst MAX_HEIGHT = BigInt(Number.MAX_SAFE_INTEGER);\n\n/** Two reads of one index that contradict each other decide nothing (retryable). */\nconst contradiction = (reason: string): ProviderError =>\n  new ProviderError('PROVIDER_INCONSISTENT', reason, { retryable: true });\n\nconst normalized = (canonical: string, type: UtxoOutputType): NormalizedAddress => ({\n  canonical,\n  display: canonical,\n  variant: { type },\n});\n\nexport function addressCodec(ctx: UtxoContext): AddressCodec {\n  const params = ctx.config.address;\n  return {\n    validate: (address) => {\n      try {\n        decodeAddress(address, params);\n        return true;\n      } catch {\n        return false;\n      }\n    },\n    normalize: (address) => {\n      const decoded = decodeAddress(address, params);\n      return normalized(decoded.canonical, decoded.type);\n    },\n    fromPublicKey: (publicKey, wallet) => {\n      const { addressType } = parseWalletOptions(wallet, ctx.config);\n      const derived = walletAddress(publicKey, addressType, params);\n      return normalized(\n        derived.address,\n        derived.type === 'p2sh-p2wpkh' ? 'p2sh' : derived.type,\n      );\n    },\n  };\n}\n\n/** The key hash of a p2pkh sending address, or `undefined` for every other type. */\nfunction p2pkhKeyHash(ctx: UtxoContext, from: string): Uint8Array | undefined {\n  try {\n    const decoded = decodeAddress(from, ctx.config.address);\n    return decoded.type === 'p2pkh' ? decoded.script.slice(3, 23) : undefined;\n  } catch {\n    return undefined;\n  }\n}\n\n/**\n * Whether `spender` is a miner-malleated copy of our p2pkh Attempt `refId`. Its raw\n * bytes are read under `tags` and authenticate themselves: under a quorum the client keys\n * the answers on the txid they hash to, and it refuses bytes that do not hash to `spender`\n * (a retryable `PROVIDER_INCONSISTENT`). They are then canonicalized: equality with `refId`\n * proves the same version, lock time, outpoints, sequences and outputs. Segwit and taproot\n * txids exclude the witness and cannot be malleated, so nothing is read for them.\n */\nexport async function isOwnCopy(\n  ctx: UtxoContext,\n  refId: string,\n  from: string,\n  spender: string,\n  tags: UtxoCallTags,\n): Promise<boolean> {\n  const keyHash = p2pkhKeyHash(ctx, from);\n  if (!keyHash) return false;\n  const hex = await ctx.esplora.txHex(spender, tags);\n  if (hex === null) {\n    throw new ProviderError(\n      'PROVIDER_UNAVAILABLE',\n      'the spending transaction is not available',\n    );\n  }\n  return canonicalTwinTxid(hex, keyHash) === refId;\n}\n\n/** The highest block with the network's confirmations, from one `monitor` read. */\nexport function finalizedFromHead(ctx: UtxoContext, head: bigint): bigint {\n  const height = head - BigInt(ctx.config.confirmations) + 1n;\n  return height < 0n ? 0n : height;\n}\n\nexport function chainReader(ctx: UtxoContext): ChainReader {\n  const { esplora, config } = ctx;\n  const block = async (hash: string, height?: bigint): Promise<DriverBlock | null> => {\n    const found = await esplora.block(hash, READ);\n    if (!found) return null;\n    // The block at a height must say it is at that height. A block's height never\n    // changes, so only a lie or a server bug trips this; it decides nothing (retryable).\n    if (height !== undefined && found.height !== height) {\n      throw contradiction('the block at the height asked for is at another height');\n    }\n    const transactionIds = await esplora.blockTxids(found.hash, READ);\n    if (transactionIds.length !== found.txCount) throw malformed('block txids');\n    return {\n      height: found.height,\n      hash: found.hash,\n      parentHash: found.parentHash,\n      timestamp: found.timestamp,\n      transactionIds,\n    };\n  };\n  return {\n    getBalance: async (address, asset) => {\n      assertNative(asset);\n      const stats = await esplora.addressStats(\n        decodeAddress(address, config.address).canonical,\n        READ,\n      );\n      return stats.funded - stats.spent;\n    },\n    getBlockHeight: () => esplora.tipHeight(MONITOR),\n    getFinalizedHeight: async () =>\n      finalizedFromHead(ctx, await esplora.tipHeight(MONITOR)),\n    getBlock: async (ref) => {\n      if (typeof ref === 'string') {\n        const id = ref.toLowerCase();\n        return isHash(id) ? block(id) : null; // a malformed id never reaches a path\n      }\n      // No block is below 0 or beyond what a server can parse: never sent.\n      if (ref < 0n || ref > MAX_HEIGHT) return null;\n      const hash = await esplora.blockHashAt(ref, READ);\n      return hash ? block(hash, ref) : null;\n    },\n    getTransaction: async (raw) => {\n      const id = raw.toLowerCase();\n      if (!isHash(id)) return null; // a malformed id never reaches a path\n      const tx = await esplora.tx(id, READ);\n      return tx ? decodeTransaction(tx, config.address) : null;\n    },\n    observe: async (ref, ordering, from) => {\n      const id = ref.id.toLowerCase();\n      if (!isHash(id)) return { seen: 'none' }; // a malformed id never reaches a path\n      // A refusal on any of these reads decides nothing (retryable).\n      return proofRead(async () => {\n        // `/tx/:txid/status` answers `confirmed: false` for a transaction it does not know,\n        // so visibility is read from `/tx/:txid`, which is a 404 then.\n        const tx = await esplora.tx(id, MONITOR);\n        if (tx?.status.confirmed) return observationOf(tx.txid, tx.status);\n        const first = ordering?.kind === 'inputs' ? ordering.inputs[0] : undefined;\n        // A status lookup by id (no ordering) reports the index as it is.\n        if (first === undefined)\n          return tx ? observationOf(tx.txid, tx.status) : { seen: 'none' };\n        const legacy = from !== undefined && p2pkhKeyHash(ctx, from) ? from : undefined;\n        // Unknown, and a segwit or taproot txid cannot be malleated: nothing more to learn.\n        if (!tx && legacy === undefined) return { seen: 'none' };\n        const input = parseOutpoint(first);\n        // Full-mode electrs keeps serving a reorg-dropped transaction as unconfirmed,\n        // and `/status` cannot tell a mempool transaction from one only in its txstore. The\n        // first input's spender can: chain spends of a disconnected block are gone, then the\n        // mempool's are read. Ours: in a mempool. None: in no mempool of this index (the core\n        // rebroadcasts a dropped Attempt). Another: conflicted, or our malleated copy.\n        // Observed evidence only: an index still syncing can briefly say otherwise.\n        const spend = await esplora.outspend(input.txid, input.vout, MONITOR);\n        if (!spend.spent || spend.txid === undefined) return { seen: 'none' };\n        if (spend.txid === id) {\n          if (tx) return observationOf(tx.txid, tx.status);\n          throw contradiction('the index spends with a transaction it does not know');\n        }\n        // Our own p2pkh Attempt, mined as a malleated copy (observed evidence only; only\n        // `includedFinal`'s quorum path can make it terminal).\n        if (\n          legacy === undefined ||\n          !(await isOwnCopy(ctx, id, legacy, spend.txid, MONITOR))\n        )\n          return { seen: 'none' };\n        const copy = await esplora.tx(spend.txid, MONITOR);\n        if (!copy)\n          throw contradiction('the index spends with a transaction it does not know');\n        return observationOf(copy.txid, copy.status);\n      });\n    },\n  };\n}\n\n/**\n * Confirmed history, newest first (Esplora pages of 25; the cursor is the last txid). A full\n * page, of any size a server chooses, may have a next one. The answer is filtered to the\n * address asked for: a server that dropped its filter never lists another\n * address's transaction, and every transaction served counts toward `limit`, so paging stays\n * bounded.\n */\nexport function addressHistory(ctx: UtxoContext): AddressHistorySource {\n  return {\n    async list(address, { cursor, limit }) {\n      if (!Number.isSafeInteger(limit) || limit < 1) {\n        throw new ValidationError('INVALID_INTENT', 'limit must be a positive integer');\n      }\n      if (cursor !== undefined && !/^[0-9a-f]{64}$/.test(cursor)) {\n        throw new ValidationError('INVALID_INTENT', 'malformed history cursor');\n      }\n      const decoded = decodeAddress(address, ctx.config.address);\n      const script = toHex(decoded.script);\n      const touches = (tx: EsploraTx) =>\n        tx.vout.some((output) => output.script === script) ||\n        tx.vin.some((input) => input.prevout?.script === script);\n      const items: DriverTransaction[] = [];\n      let served = 0;\n      let last = cursor;\n      let more = true;\n      while (served < limit && more) {\n        const page = await ctx.esplora.addressTxs(decoded.canonical, last, READ);\n        const taken = page.slice(0, limit - served);\n        for (const tx of taken) {\n          if (touches(tx)) items.push(decodeTransaction(tx, ctx.config.address));\n          last = tx.txid;\n          served++;\n        }\n        more = taken.length < page.length || page.length >= HISTORY_PAGE;\n      }\n      return { items, ...(more && last !== undefined ? { next: last } : {}) };\n    },\n  };\n}\n\n/**\n * `ext.utxo.listUnspent`: confirmed first (oldest first), then unconfirmed. An output the\n * indexer names twice alike is listed once; named twice differently (another value or\n * status), the answer is malformed, and so is a list worth more than every bitcoin. Coin\n * selection reads the wallet's outputs through it (`spendable`, with the build's signal).\n */\nexport async function listUnspent(\n  ctx: UtxoContext,\n  address: string,\n  signal?: AbortSignal,\n): Promise<UtxoUnspent[]> {\n  const canonical = decodeAddress(address, ctx.config.address).canonical;\n  const listed = await ctx.esplora.addressUtxos(canonical, withSignal(READ, signal));\n  const seen = new Map<string, string>();\n  const utxos = listed.filter((u) => {\n    const key = `${u.txid}:${u.vout}`;\n    const { confirmed, blockHeight, blockHash, blockTime } = u.status;\n    const facts = `${u.value}|${confirmed}|${blockHeight}|${blockHash}|${blockTime}`;\n    const known = seen.get(key);\n    if (known === undefined) {\n      seen.set(key, facts);\n      return true;\n    }\n    if (known !== facts) throw malformed('an unspent output listed twice, differently');\n    return false;\n  });\n  // Each value is in range (the parser), but no address holds more than every bitcoin: under\n  // coinSelection `all`, such a listing would build change above MAX_MONEY.\n  if (utxos.reduce((sum, u) => sum + u.value, 0n) > MAX_MONEY) {\n    throw malformed('unspent outputs worth more than every bitcoin');\n  }\n  const height = (u: (typeof utxos)[number]) =>\n    u.status.confirmed\n      ? (u.status.blockHeight as bigint)\n      : BigInt(Number.MAX_SAFE_INTEGER);\n  return utxos\n    .map((u) => ({ u, key: `${u.txid}:${u.vout}` }))\n    .sort((a, b) =>\n      height(a.u) === height(b.u)\n        ? a.key < b.key\n          ? -1\n          : 1\n        : height(a.u) < height(b.u)\n          ? -1\n          : 1,\n    )\n    .map(({ u, key }) => ({\n      outpoint: key,\n      txid: u.txid,\n      vout: u.vout,\n      value: u.value,\n      confirmed: u.status.confirmed,\n      ...(u.status.confirmed ? { blockHeight: u.status.blockHeight as bigint } : {}),\n    }));\n}\n"]}

package/dist/adapters/utxo/sdk.d.ts

@@ -0,0 +1,18 @@
+/**
+ * The one place that loads bitcoinjs-lib. Its 7.x package is an ES module with a CommonJS
+ * build (`require` condition), so this CommonJS library `require()`s it at run time and
+ * takes its types with `resolution-mode: 'import'` (TypeScript refuses a plain CommonJS
+ * import of an ES module's types, TS1479). Loaded only through the manifest's `load()`.
+ */
+import type * as Bitcoin from 'bitcoinjs-lib' with { 'resolution-mode': 'import' };
+export declare const bitcoin: typeof Bitcoin;
+export type Network = Bitcoin.Network;
+export type Psbt = Bitcoin.Psbt;
+export type Transaction = Bitcoin.Transaction;
+/**
+ * Installs the `@noble/curves` backend (no WASM, no tiny-secp256k1). bitcoinjs
+ * verifies it against its own test vectors the first time, and skips a repeat install of
+ * the same object, so calling this before every taproot use is cheap and undoes a
+ * `native()` caller who swapped the library-global backend.
+ */
+export declare function useNobleEcc(): void;