manager.go

package account

import (
	"context"
	"errors"
	"fmt"
	"math"
	"strings"
	"sync"
	"time"

	"github.com/btcsuite/btcd/blockchain"
	"github.com/btcsuite/btcd/btcec"
	"github.com/btcsuite/btcd/chaincfg/chainhash"
	"github.com/btcsuite/btcd/txscript"
	"github.com/btcsuite/btcd/wire"
	"github.com/btcsuite/btcutil"
	"github.com/btcsuite/btcutil/txsort"
	"github.com/btcsuite/btcwallet/wallet"
	"github.com/btcsuite/btcwallet/wallet/txrules"
	"github.com/btcsuite/btcwallet/wtxmgr"
	"github.com/getvoltage/pool/account/watcher"
	"github.com/getvoltage/pool/poolscript"
	"github.com/lightninglabs/lndclient"
	"github.com/lightningnetwork/lnd/chainntnfs"
	"github.com/lightningnetwork/lnd/input"
	"github.com/lightningnetwork/lnd/lnwallet"
	"github.com/lightningnetwork/lnd/lnwallet/chainfee"
	"github.com/lightningnetwork/lnd/lnwallet/chanfunding"
)

const (
	// minConfs and maxConfs represent the thresholds at both extremes for
	// valid number of confirmations on an account before it is considered
	// open.
	minConfs = 3
	maxConfs = 6

	// MinAccountValue is the minimum value for an account output in
	// satoshis.
	MinAccountValue btcutil.Amount = 100000

	// minAccountExpiry and maxAccountExpiry represent the thresholds at
	// both extremes for valid account expirations.
	minAccountExpiry = 144       // One day worth of blocks.
	maxAccountExpiry = 144 * 365 // A year worth of blocks.
)

var (
	// errTxNotFound is an error returned when we attempt to locate a
	// transaction but we are unable to find it.
	errTxNotFound = errors.New("transaction not found")
)

// witnessType denotes the possible witness types of an account.
type witnessType uint8

const (
	// expiryWitness is the type used for a witness taking the expiration
	// path of an account.
	expiryWitness witnessType = iota

	// multiSigWitness is the type used for a witness taking the multi-sig
	// path of an account.
	multiSigWitness
)

// spendPackage tracks useful information regarding an account spend.
type spendPackage struct {
	// tx is the spending transaction of the account.
	tx *wire.MsgTx

	// accountInputIdx is the index of the account input in the spending
	// transaction.
	accountInputIdx int

	// witnessScript is the witness script of the account input being spent.
	witnessScript []byte

	// ourSig is our signature of the spending transaction above. If the
	// spend is taking the multi-sig path, then the auctioneer's signature
	// will be required as well for a valid spend.
	ourSig []byte
}

// ManagerConfig contains all of the required dependencies for the Manager to
// carry out its duties.
type ManagerConfig struct {
	// Store is responsible for storing and retrieving account information
	// reliably.
	Store Store

	// Auctioneer provides us with the different ways we are able to
	// communicate with our auctioneer during the process of
	// opening/closing/modifying accounts.
	Auctioneer Auctioneer

	// Wallet handles all of our on-chain transaction interaction, whether
	// that is deriving keys, creating transactions, etc.
	Wallet lndclient.WalletKitClient

	// Signer is responsible for deriving shared secrets for accounts
	// between the trader and auctioneer and signing account-related
	// transactions.
	Signer lndclient.SignerClient

	// ChainNotifier is responsible for requesting confirmation and spend
	// notifications for accounts.
	ChainNotifier lndclient.ChainNotifierClient

	// TxSource is a source that provides us with transactions previously
	// broadcast by us.
	TxSource TxSource

	// TxFeeEstimator is an estimator that can calculate the total on-chain
	// fees to send to an account output.
	TxFeeEstimator TxFeeEstimator

	// TxLabelPrefix is set, then all transactions the account manager
	// makes will use this string as a prefix for added transaction labels.
	TxLabelPrefix string
}

// Manager is responsible for the management of accounts on-chain.
type Manager struct {
	started sync.Once
	stopped sync.Once

	cfg     ManagerConfig
	watcher *watcher.Watcher

	// pendingBatchMtx guards access to any database calls involving pending
	// batches. This is mostly used to prevent race conditions when handling
	// multiple accounts spends as part of a batch that we didn't receive a
	// Finalize message for.
	pendingBatchMtx sync.Mutex

	// reservationMtx prevents a trader from attempting to have more than
	// once active reservation at a time when creating new accounts. This is
	// done to ensure an account picks up the correct reservation once its
	// time to fund it.
	reservationMtx sync.Mutex

	wg   sync.WaitGroup
	quit chan struct{}
}

// NewManager instantiates a new Manager backed by the given config.
func NewManager(cfg *ManagerConfig) *Manager {
	m := &Manager{
		cfg:  *cfg,
		quit: make(chan struct{}),
	}

	m.watcher = watcher.New(&watcher.Config{
		ChainNotifier:       cfg.ChainNotifier,
		HandleAccountConf:   m.handleAccountConf,
		HandleAccountSpend:  m.handleAccountSpend,
		HandleAccountExpiry: m.handleAccountExpiry,
	})

	return m
}

// Start resumes all account on-chain operation after a restart.
func (m *Manager) Start() error {
	var err error
	m.started.Do(func() {
		err = m.start()
	})
	return err
}

// start resumes all account on-chain operation after a restart.
func (m *Manager) start() error {
	ctx := context.Background()

	// We'll start by resuming all of our accounts. This requires the
	// watcher to be started first.
	if err := m.watcher.Start(); err != nil {
		return err
	}

	// Then, we'll resume all complete accounts, followed by partial
	// accounts. If we were to do it the other way around, we'd resume
	// partial accounts twice.
	accounts, err := m.cfg.Store.Accounts()
	if err != nil {
		return fmt.Errorf("unable to retrieve accounts: %v", err)
	}
	for _, account := range accounts {
		// Try to resume the account now.
		//
		// TODO(guggero): Refactor this to extract the init/funding
		// part so we properly abandon the account if it fails before
		// publishing the TX instead of trying to re-fund on startup.
		err := m.resumeAccount(
			ctx, account, true, false, DefaultFundingConfTarget,
		)
		if err != nil {
			return fmt.Errorf("unable to resume account %x: %v",
				account.TraderKey.PubKey.SerializeCompressed(),
				err)
		}
	}

	return nil
}

// Stop safely stops any ongoing operations within the Manager.
func (m *Manager) Stop() {
	m.stopped.Do(func() {
		m.watcher.Stop()

		close(m.quit)
		m.wg.Wait()
	})
}

// QuoteAccount returns the expected fee rate and total miner fee to send to an
// account funding output with the given confTarget.
func (m *Manager) QuoteAccount(ctx context.Context, value btcutil.Amount,
	confTarget uint32) (chainfee.SatPerKWeight, btcutil.Amount, error) {

	// First, make sure we have a valid amount to create the account. We
	// need to ask the auctioneer for the maximum as it dynamically defines
	// that value.
	terms, err := m.cfg.Auctioneer.Terms(ctx)
	if err != nil {
		return 0, 0, fmt.Errorf("could not query auctioneer terms: %v",
			err)
	}
	err = validateAccountValue(value, terms.MaxAccountValue)
	if err != nil {
		return 0, 0, err
	}

	// Now calculate the estimated fee rate from the confTarget.
	feeRate, err := m.cfg.Wallet.EstimateFee(ctx, int32(confTarget))
	if err != nil {
		return 0, 0, fmt.Errorf("error estimating fee rate: %v", err)
	}

	// Then calculate the total fee to pay. This asks lnd to create a full
	// transaction to spend to a P2WSH output. If not enough confirmed funds
	// are available in the wallet, this will return an error.
	totalMinerFee, err := m.cfg.TxFeeEstimator.EstimateFeeToP2WSH(
		ctx, value, int32(confTarget),
	)
	if err != nil {
		return 0, 0, fmt.Errorf("error estimating total on-chain fee: "+
			"%v", err)
	}

	return feeRate, totalMinerFee, nil
}

// InitAccount handles a request to create a new account with the provided
// parameters.
func (m *Manager) InitAccount(ctx context.Context, value btcutil.Amount,
	expiry, bestHeight, confTarget uint32) (*Account, error) {

	// We'll make sure to acquire the reservation lock throughout the
	// account funding process to ensure we use the same reservation, as
	// only one can be active per trader LSAT.
	m.reservationMtx.Lock()
	defer m.reservationMtx.Unlock()

	// First, make sure we have a valid amount to create the account. We
	// need to ask the auctioneer for the maximum as it dynamically defines
	// that value.
	terms, err := m.cfg.Auctioneer.Terms(ctx)
	if err != nil {
		return nil, fmt.Errorf("could not query auctioneer terms: %v",
			err)
	}
	err = validateAccountParams(
		value, terms.MaxAccountValue, expiry, bestHeight,
	)
	if err != nil {
		return nil, err
	}

	// Let's make sure our wallet contains enough coins to fund the account
	// before we reserve any resources. We ask lnd to create a transaction
	// to send the given account value in dry-run mode. This makes sure we
	// actually have some UTXOs to fund the account as this method returns
	// an error on insufficient balance. Unfortunately it currently only
	// supports estimating the total fee for a transaction using a
	// confirmation target. We'll want to add sats/vByte as well as soon as
	// the API allows it.
	totalMinerFee, err := m.cfg.TxFeeEstimator.EstimateFeeToP2WSH(
		ctx, value, int32(confTarget),
	)
	if err != nil {
		return nil, fmt.Errorf("error estimating on-chain fee: %v", err)
	}

	// A by-product of the balance check is the total fee we'd need to pay
	// so we might as well log it here.
	log.Infof("Estimated total chain fee of %v for new account with "+
		"value=%v, conf_target=%v", totalMinerFee, value, confTarget)

	// We'll start by deriving a key for ourselves that we'll use in our
	// 2-of-2 multi-sig construction.
	keyDesc, err := m.cfg.Wallet.DeriveNextKey(
		ctx, int32(poolscript.AccountKeyFamily),
	)
	if err != nil {
		return nil, err
	}

	// With our key obtained, we'll reserve an account with our auctioneer,
	// who will provide us with their base key and our initial per-batch
	// key.
	reservation, err := m.cfg.Auctioneer.ReserveAccount(
		ctx, value, expiry, keyDesc.PubKey,
	)
	if err != nil {
		return nil, err
	}

	// We'll also need to compute a shared secret based on both base keys
	// (the trader and auctioneer's) to ensure only they are able to
	// successfully identify every past/future output of the account.
	secret, err := m.cfg.Signer.DeriveSharedKey(
		ctx, reservation.AuctioneerKey, &keyDesc.KeyLocator,
	)
	if err != nil {
		return nil, err
	}

	// With all of the details gathered, we'll persist our intent to create
	// an account to disk and proceed to fund it and wait for its
	// confirmation.
	account := &Account{
		Value:         value,
		Expiry:        expiry,
		TraderKey:     keyDesc,
		AuctioneerKey: reservation.AuctioneerKey,
		BatchKey:      reservation.InitialBatchKey,
		Secret:        secret,
		State:         StateInitiated,
		HeightHint:    bestHeight,
	}
	if err := m.cfg.Store.AddAccount(account); err != nil {
		return nil, err
	}

	log.Infof("Creating new account %x of %v that expires at height %v",
		keyDesc.PubKey.SerializeCompressed(), value, expiry)

	err = m.resumeAccount(ctx, account, false, false, confTarget)
	if err != nil {
		return nil, err
	}

	return account, nil
}

// WatchMatchedAccounts resumes accounts that were just matched in a batch and
// are expecting the batch transaction to confirm as their next account output.
// This will cancel all previous spend and conf watchers of all accounts
// involved in the batch.
func (m *Manager) WatchMatchedAccounts(ctx context.Context,
	matchedAccounts []*btcec.PublicKey) error {

	for _, matchedAccount := range matchedAccounts {
		acct, err := m.cfg.Store.Account(matchedAccount)
		if err != nil {
			return fmt.Errorf("error reading account %x: %v",
				matchedAccount.SerializeCompressed(), err)
		}

		// The account was just involved in a batch. That means our
		// account output was spent by a batch transaction. Since we
		// know that a batch transaction cannot simply be rolled back or
		// replaced without us being involved, we know that the batch TX
		// will eventually confirm. To handle the case where an account
		// is involved in multiple consecutive batches that are all
		// unconfirmed, we make sure we only track the latest state by
		// canceling all previous spend and confirmation watchers. We
		// then only watch the latest batch and once it confirms, create
		// a new spend watcher on that.
		m.watcher.CancelAccountSpend(matchedAccount)
		m.watcher.CancelAccountConf(matchedAccount)

		// After taking part in a batch, the account is either pending
		// closed because it was used up or pending batch update because
		// it was recreated. Either way, let's resume it now by creating
		// the appropriate watchers again.
		err = m.resumeAccount(ctx, acct, false, false, 0)
		if err != nil {
			return fmt.Errorf("error resuming account %x: %v",
				matchedAccount.SerializeCompressed(), err)
		}
	}

	return nil
}

// maybeBroadcastTx attempts to broadcast the transaction only if all of its
// inputs have been signed for.
func (m *Manager) maybeBroadcastTx(ctx context.Context, tx *wire.MsgTx,
	label string) error {

	// If any of the transaction inputs aren't signed, don't broadcast.
	for _, txIn := range tx.TxIn {
		if len(txIn.Witness) == 0 && len(txIn.SignatureScript) == 0 {
			return nil
		}
	}

	return m.cfg.Wallet.PublishTransaction(ctx, tx, label)
}

// resumeAccount performs different operations based on the account's state.
// This method serves as a way to consolidate the logic of resuming accounts on
// startup and during normal operation.
func (m *Manager) resumeAccount(ctx context.Context, account *Account, // nolint
	onRestart bool, onRecovery bool, fundingConfTarget uint32) error {

	accountOutput, err := account.Output()
	if err != nil {
		return fmt.Errorf("unable to construct account output: %v", err)
	}

	switch account.State {
	// In StateInitiated, we'll attempt to fund our account.
	case StateInitiated:
		// If we're resuming the account from a restart, we'll want to
		// make sure we haven't created and broadcast a transaction for
		// this account already, so we'll inspect our TxSource to do so.
		var (
			accountTx *wire.MsgTx
			createTx  = true
		)
		if onRestart || onRecovery {
			tx, err := m.locateTxByOutput(
				ctx, accountOutput, account.LatestTx,
			)
			switch err {
			// If we do find one, we can rebroadcast it.
			case nil:
				accountTx = tx
				createTx = false

			// If we don't, we'll need to create one.
			case errTxNotFound:
				// If lnd doesn't know a transaction that sends
				// to the account output, it could be that it
				// was never published or it never confirmed.
				// In that case the funds should be SAFU and can
				// be double spent. We don't need to try a
				// recovery in that case. And we certainly don't
				// want to send funds again, so we exit here.
				if onRecovery {
					state := StateCanceledAfterRecovery
					err := m.cfg.Store.UpdateAccount(
						account, StateModifier(state),
					)
					if err != nil {
						return fmt.Errorf("account "+
							"funding TX not found "+
							"but was unable to "+
							"update account to "+
							"state recovery "+
							"failed: %v", err)
					}

					return fmt.Errorf("account funding "+
						"TX with output %x not found",
						accountOutput.PkScript)
				}

			default:
				return fmt.Errorf("unable to locate output "+
					"%x: %v", accountOutput.PkScript, err)
			}
		}

		if createTx {
			// We need a static sat/vByte value for the fee in
			// SendOutputs, so we use the stored targetConf of the
			// account to estimate it.
			feeSatPerKw, err := m.cfg.Wallet.EstimateFee(
				ctx, int32(fundingConfTarget),
			)
			if err != nil {
				return err
			}

			// If we have a label prefix, then we'll apply that now
			// and also attach some additional meta data.
			acctKey := account.TraderKey.PubKey.SerializeCompressed()
			contextLabel := fmt.Sprintf(" poold -- "+
				"AccountCreation(acct_key=%x)", acctKey)
			label := makeTxnLabel(m.cfg.TxLabelPrefix, contextLabel)

			// TODO(wilmer): Expose manual controls to bump fees.
			tx, err := m.cfg.Wallet.SendOutputs(
				ctx, []*wire.TxOut{accountOutput}, feeSatPerKw,
				label,
			)
			if err != nil {
				return err
			}
			accountTx = tx

			log.Infof("Funded new account %x with transaction %v",
				account.TraderKey.PubKey.SerializeCompressed(),
				tx.TxHash())
		}

		// With the transaction obtained, we'll locate the index of our
		// account output in the transaction to obtain our account
		// outpoint and store it to disk. This will be the main way we
		// identify our accounts, and is also required to watch for its
		// spend.
		outputIndex, ok := poolscript.LocateOutputScript(
			accountTx, accountOutput.PkScript,
		)
		if !ok {
			return fmt.Errorf("transaction %v does not include "+
				"expected script %x", accountTx.TxHash(),
				accountOutput.PkScript)
		}
		op := wire.OutPoint{Hash: accountTx.TxHash(), Index: outputIndex}

		err := m.cfg.Store.UpdateAccount(
			account, StateModifier(StatePendingOpen),
			OutPointModifier(op), LatestTxModifier(accountTx),
		)
		if err != nil {
			return err
		}

		fallthrough

	// In StatePendingOpen, we should already have broadcast a funding
	// transaction for the account, so the most we can do is attempt to
	// rebroadcast it and wait for its confirmation.
	case StatePendingOpen:
		// If we're resuming from a restart, we'll have to locate the
		// transaction in our TxSource by its hash. We should definitely
		// find one in this state, so if we don't, that would indicate
		// something has gone wrong.
		if onRestart {
			accountTx := account.LatestTx

			// Since we store the latest account modification TX in
			// the account itself, we don't need to rely on lnd
			// keeping track of all our TXns anymore. If what we
			// have in the DB is correct, we can just re-broadcast
			// that TX.
			if accountTx == nil ||
				accountTx.TxHash() != account.OutPoint.Hash {

				var err error
				accountTx, err = m.locateTxByHash(
					ctx, account.OutPoint.Hash,
				)
				if err != nil {
					return fmt.Errorf("unable to locate "+
						"transaction %v: %v",
						account.OutPoint.Hash, err)
				}
			}

			acctKey := account.TraderKey.PubKey.SerializeCompressed()
			contextLabel := fmt.Sprintf(" poold -- "+
				"AccountCreation(acct_key=%x)", acctKey)
			label := makeTxnLabel(m.cfg.TxLabelPrefix, contextLabel)

			err = m.maybeBroadcastTx(ctx, accountTx, label)
			if err != nil {
				return err
			}
		}

		// Send the account parameters over to the auctioneer so that
		// they're also aware of the account.
		err := m.cfg.Auctioneer.InitAccount(ctx, account)
		if err != nil {
			return err
		}
		terms, err := m.cfg.Auctioneer.Terms(ctx)
		if err != nil {
			return fmt.Errorf("could not query auctioneer terms: "+
				"%v", err)
		}

		// Proceed to watch for the account on-chain.
		numConfs := NumConfsForValue(
			account.Value, terms.MaxAccountValue,
		)
		log.Infof("Waiting for %v confirmation(s) of account %x",
			numConfs, account.TraderKey.PubKey.SerializeCompressed())
		err = m.watcher.WatchAccountConf(
			account.TraderKey.PubKey, account.OutPoint.Hash,
			accountOutput.PkScript, numConfs, account.HeightHint,
		)
		if err != nil {
			return fmt.Errorf("unable to watch for confirmation: "+
				"%v", err)
		}

	// In StatePendingUpdate or StatePendingBatch, we've processed an
	// account update due to either a matched order or trader modification,
	// so we'll need to wait for its confirmation. Once it confirms,
	// handleAccountConf will take care of the rest of the flow.
	//
	// TODO(wilmer): Handle restart case where the client shuts down after
	// the modification has been reflected on-disk, but the auctioneer's
	// signature hasn't been received.
	//
	// TODO(guggero): Handle the case of a malicious auctioneer that
	// replaces batch A with a batch A' that contains none of our accounts
	// and would therefore not be noticed by us. The account would stay
	// pending forever in that case.
	case StatePendingUpdate, StatePendingBatch:
		// We need to know the maximum account value to scale the number
		// of confirmations the same way the auctioneer does to avoid
		// getting the state out of sync.
		terms, err := m.cfg.Auctioneer.Terms(ctx)
		if err != nil {
			return fmt.Errorf("could not query auctioneer terms: "+
				"%v", err)
		}

		numConfs := NumConfsForValue(
			account.Value, terms.MaxAccountValue,
		)
		log.Infof("Waiting for %v confirmation(s) of account %x",
			numConfs, account.TraderKey.PubKey.SerializeCompressed())
		err = m.watcher.WatchAccountConf(
			account.TraderKey.PubKey, account.OutPoint.Hash,
			accountOutput.PkScript, numConfs, account.HeightHint,
		)
		if err != nil {
			return fmt.Errorf("unable to watch for confirmation: "+
				"%v", err)
		}

		// Only subscribe to auction updates for this account if it's in
		// the pending batch state, to allow traders to participate in
		// consecutive batches. This isn't necessary for the pending
		// update state, as that state is ineligible for batch
		// execution.
		if account.State == StatePendingBatch {
			err = m.cfg.Auctioneer.StartAccountSubscription(
				ctx, account.TraderKey,
			)
			if err != nil {
				return fmt.Errorf("unable to subscribe for "+
					"account updates: %v", err)
			}
		}

	// In StateOpen, the funding transaction for the account has already
	// confirmed, so we only need to watch for its spend and expiration and
	// register for account updates.
	case StateOpen:
		if err := m.handleStateOpen(ctx, account); err != nil {
			return err
		}

	// In StateExpiredPendingUpdate, the account expired while having a
	// pending update. To make sure the account can be renewed, we'll wait
	// for the pending update to confirm and transition the account to
	// StateExpired then.
	case StateExpiredPendingUpdate:
		terms, err := m.cfg.Auctioneer.Terms(ctx)
		if err != nil {
			return fmt.Errorf("could not query auctioneer terms: "+
				"%v", err)
		}
		numConfs := NumConfsForValue(
			account.Value, terms.MaxAccountValue,
		)

		log.Infof("Waiting for %v confirmation(s) of expired account %x",
			numConfs, account.TraderKey.PubKey.SerializeCompressed())

		err = m.watcher.WatchAccountConf(
			account.TraderKey.PubKey, account.OutPoint.Hash,
			accountOutput.PkScript, numConfs, account.HeightHint,
		)
		if err != nil {
			return fmt.Errorf("unable to watch for confirmation: "+
				"%v", err)
		}

	// In StateExpired, we'll wait for the account to be spent so that we
	// can detect whether its been closed or renewed.
	case StateExpired:
		log.Infof("Watching expired account %x for spend",
			account.TraderKey.PubKey.SerializeCompressed())

		err = m.watcher.WatchAccountSpend(
			account.TraderKey.PubKey, account.OutPoint,
			accountOutput.PkScript, account.HeightHint,
		)
		if err != nil {
			return fmt.Errorf("unable to watch for spend: %v", err)
		}

	// In StatePendingClosed, we'll wait for the account's closing
	// transaction to confirm so that we can transition the account to its
	// final state.
	case StatePendingClosed:
		acctKey := account.TraderKey.PubKey.SerializeCompressed()
		contextLabel := fmt.Sprintf(" poold -- "+
			"AccountClosure(acct_key=%x)", acctKey)
		label := makeTxnLabel(m.cfg.TxLabelPrefix, contextLabel)

		err := m.maybeBroadcastTx(ctx, account.LatestTx, label)
		if err != nil {
			return err
		}

		log.Infof("Watching account %x for spend",
			account.TraderKey.PubKey.SerializeCompressed())
		err = m.watcher.WatchAccountSpend(
			account.TraderKey.PubKey, account.OutPoint,
			accountOutput.PkScript, account.HeightHint,
		)
		if err != nil {
			return fmt.Errorf("unable to watch for spend: %v", err)
		}

	// If the account has already been closed or canceled, there's nothing
	// to be done.
	case StateClosed, StateCanceledAfterRecovery:
		break

	default:
		return fmt.Errorf("unhandled account state %v", account.State)
	}

	return nil
}

// locateTxByOutput locates a transaction from the Manager's TxSource by one of
// its outputs. If a transaction is not found containing the output, then
// errTxNotFound is returned.
func (m *Manager) locateTxByOutput(ctx context.Context,
	output *wire.TxOut, fullTx *wire.MsgTx) (*wire.MsgTx, error) {

	// We now store the full raw transaction of the last modification. We
	// can just use that if available. If for some reason that TX doesn't
	// contain our current outpoint, we fall back to the previous behavior.
	if fullTx != nil {
		idx, ok := poolscript.LocateOutputScript(fullTx, output.PkScript)
		if ok && fullTx.TxOut[idx].Value == output.Value {
			return fullTx, nil
		}
	}

	// Get all transactions, starting from block 0 and including unconfirmed
	// TXes (end block = -1).
	txs, err := m.cfg.TxSource.ListTransactions(ctx, 0, -1)
	if err != nil {
		return nil, err
	}

	for _, tx := range txs {
		idx, ok := poolscript.LocateOutputScript(tx.Tx, output.PkScript)
		if !ok {
			continue
		}
		if tx.Tx.TxOut[idx].Value == output.Value {
			return tx.Tx, nil
		}
	}

	return nil, errTxNotFound
}

// locateTxByHash locates a transaction from the Manager's TxSource by its hash.
// If the transaction is not found, then errTxNotFound is returned.
func (m *Manager) locateTxByHash(ctx context.Context,
	hash chainhash.Hash) (*wire.MsgTx, error) {

	// Get all transactions, starting from block 0 and including unconfirmed
	// TXes (end block = -1).
	txs, err := m.cfg.TxSource.ListTransactions(ctx, 0, -1)
	if err != nil {
		return nil, err
	}

	for _, tx := range txs {
		if tx.Tx.TxHash() == hash {
			return tx.Tx, nil
		}
	}

	return nil, errTxNotFound
}

// handleStateOpen performs the necessary operations for accounts found in
// StateOpen.
func (m *Manager) handleStateOpen(ctx context.Context, account *Account) error {
	var traderKey [33]byte
	copy(traderKey[:], account.TraderKey.PubKey.SerializeCompressed())

	log.Infof("Watching spend of %v for account %x", account.OutPoint,
		traderKey)

	accountOutput, err := account.Output()
	if err != nil {
		return err
	}

	err = m.watcher.WatchAccountSpend(
		account.TraderKey.PubKey, account.OutPoint,
		accountOutput.PkScript, account.HeightHint,
	)
	if err != nil {
		return fmt.Errorf("unable to watch for spend: %v", err)
	}

	err = m.watcher.WatchAccountExpiration(
		account.TraderKey.PubKey, account.Expiry,
	)
	if err != nil {
		return fmt.Errorf("unable to watch for expiration: %v", err)
	}

	// Now that we have an open account, subscribe for updates to it to the
	// server. We subscribe for the account instead of the individual orders
	// because all signing operations will need to be executed on an account
	// level anyway. And we might end up executing multiple orders for the
	// same account in one batch. The messages from the server are received
	// and dispatched to the correct manager by the rpcServer.
	err = m.cfg.Auctioneer.StartAccountSubscription(ctx, account.TraderKey)
	if err != nil {
		return fmt.Errorf("unable to subscribe for account updates: %v",
			err)
	}

	return nil
}

// handleAccountConf takes the necessary steps after detecting the confirmation
// of an account on-chain.
func (m *Manager) handleAccountConf(traderKey *btcec.PublicKey,
	confDetails *chainntnfs.TxConfirmation) error {

	account, err := m.cfg.Store.Account(traderKey)
	if err != nil {
		return err
	}

	log.Infof("Account %x is now confirmed at height %v!",
		traderKey.SerializeCompressed(), confDetails.BlockHeight)

	// The new state we'll transition to depends on the account's current
	// state.
	var newState State
	switch account.State {
	// Any pending states will transition to their confirmed state.
	case StatePendingOpen, StatePendingUpdate, StatePendingBatch:
		newState = StateOpen

	// An expired account with a pending update that has now confirmed will
	// transition to the confirmed expired case, allowing a trader to renew
	// their account.
	case StateExpiredPendingUpdate:
		newState = StateExpired

	default:
		return fmt.Errorf("unhandled state %v after confirmation",
			account.State)
	}

	// Update the account's state and proceed with the rest of the flow.
	mods := []Modifier{
		StateModifier(newState),
		HeightHintModifier(confDetails.BlockHeight),
	}
	if err := m.cfg.Store.UpdateAccount(account, mods...); err != nil {
		return err
	}

	return m.handleStateOpen(context.Background(), account)
}

// handleAccountSpend handles the different spend paths of an account. If an
// account is spent by the expiration path, it'll always be marked as closed
// thereafter. If it is spent by the cooperative path with the auctioneer, then
// the account will only remain open if the spending transaction recreates the
// account with the expected next account script. Otherwise, it is also marked
// as closed. In case of multiple consecutive batches with the same account, we
// only track the spend of the latest batch, after it confirmed. So the account
// output in the spend transaction should always match our database state if
// it was a cooperative spend.
func (m *Manager) handleAccountSpend(traderKey *btcec.PublicKey,
	spendDetails *chainntnfs.SpendDetail) error {

	account, err := m.cfg.Store.Account(traderKey)
	if err != nil {
		return err
	}

	// We'll need to perform different operations based on the witness of
	// the spending input of the account.
	spendTx := spendDetails.SpendingTx
	spendWitness := spendTx.TxIn[spendDetails.SpenderInputIndex].Witness

	switch {
	// If the witness is for a spend of the account expiration path, then
	// we'll mark the account as closed as the account has expired and all
	// the funds have been withdrawn.
	case poolscript.IsExpirySpend(spendWitness):
		break

	// If the witness is for a multi-sig spend, then either an order by the
	// trader was matched, or the account was closed. If it was closed, then
	// the account output shouldn't have been recreated.
	case poolscript.IsMultiSigSpend(spendWitness):
		// If there's a pending batch which has yet to be completed,
		// we'll mark it as so now. This can happen if the trader is not
		// connected to the auctioneer when the auctioneer sends them
		// the finalize message.
		//
		// We'll acquire the pending batch lock to ensure that there
		// aren't multiple handleAccountSpend threads (in the case of
		// multiple accounts participating in a batch) attempting to
		// mark the same batch as complete and prevent entering into an
		// erroneous state.
		m.pendingBatchMtx.Lock()
		err := m.cfg.Store.PendingBatch()
		switch err {
		// If there's no pending batch, we can proceed as normal.
		case ErrNoPendingBatch:
			break

		// If there is, we'll commit it and refresh the account state.
		case nil:
			if err := m.cfg.Store.MarkBatchComplete(); err != nil {
				m.pendingBatchMtx.Unlock()
				return err
			}
			account, err = m.cfg.Store.Account(traderKey)
			if err != nil {
				m.pendingBatchMtx.Unlock()
				return err
			}

		default:
			m.pendingBatchMtx.Unlock()
			return err
		}
		m.pendingBatchMtx.Unlock()

		// An account cannot be spent without our knowledge, so we'll
		// assume we always persist account updates before a broadcast
		// of the spending transaction. Therefore, since we should
		// already have the updates applied, we can just look for our
		// current output in the transaction.
		accountOutput, err := account.Output()
		if err != nil {
			return err
		}
		_, ok := poolscript.LocateOutputScript(
			spendTx, accountOutput.PkScript,
		)
		if ok {
			// Proceed with the rest of the flow. We won't send to
			// the account output again, so we don't need to set
			// a valid conf target.
			return m.resumeAccount(
				context.Background(), account, false, false, 0,
			)
		}

	default:
		return fmt.Errorf("unknown spend witness %x", spendWitness)
	}

	log.Infof("Account %x has been closed on-chain with transaction %v",
		account.TraderKey.PubKey.SerializeCompressed(), spendTx.TxHash())

	// Write the spending transaction once again in case the one we
	// previously broadcast was replaced with a higher fee one.
	return m.cfg.Store.UpdateAccount(
		account, StateModifier(StateClosed),
		HeightHintModifier(uint32(spendDetails.SpendingHeight)),
		LatestTxModifier(spendTx),
	)
}

// handleAccountExpiry marks an account as expired within the database.
func (m *Manager) handleAccountExpiry(traderKey *btcec.PublicKey,
	height uint32) error {

	account, err := m.cfg.Store.Account(traderKey)
	if err != nil {
		return err
	}

	var expiredState State
	switch account.State {
	// If the account has already been closed or is in the process of doing
	// so, there's no need to mark it as expired.
	case StatePendingClosed, StateClosed:
		return nil

	// If the account is waiting for a confirmation, use the expired state
	// indicating so.
	case StatePendingUpdate, StatePendingBatch:
		expiredState = StateExpiredPendingUpdate

	// If the account is confirmed, use the default expired state.
	case StateOpen:
		expiredState = StateExpired

	default:
		return fmt.Errorf("unhandled state %v after expiration",
			account.State)
	}

	log.Infof("Account %x has expired as of height %v",
		traderKey.SerializeCompressed(), account.Expiry)

	return m.cfg.Store.UpdateAccount(account, StateModifier(expiredState))
}

// DepositAccount attempts to deposit funds into the account associated with the
// given trader key such that the new account value is met using inputs sourced
// from the backing lnd node's wallet. If needed, a change output that does back
// to lnd may be added to the deposit transaction.
func (m *Manager) DepositAccount(ctx context.Context,
	traderKey *btcec.PublicKey, depositAmount btcutil.Amount,
	feeRate chainfee.SatPerKWeight, bestHeight uint32) (*Account,
	*wire.MsgTx, error) {

	// The account can only be modified in `StateOpen` and its new value
	// should not exceed the maximum allowed.
	account, err := m.cfg.Store.Account(traderKey)
	if err != nil {
		return nil, nil, err
	}
	if account.State != StateOpen {
		return nil, nil, fmt.Errorf("account must be in %v to be "+
			"modified", StateOpen)
	}

	// The auctioneer defines the maximum account size.
	terms, err := m.cfg.Auctioneer.Terms(ctx)
	if err != nil {
		return nil, nil, fmt.Errorf("could not query auctioneer "+
			"terms: %v", err)
	}

	newAccountValue := account.Value + depositAmount
	if newAccountValue > terms.MaxAccountValue {
		return nil, nil, fmt.Errorf("new account value is above "+
			"accepted maximum of %v", terms.MaxAccountValue)
	}

	// TODO(wilmer): Reject if account has pending orders.

	// To start, we'll need to perform coin selection in order to meet the
	// required new value of the account as part of the deposit. The
	// selected inputs, along with a change output if needed, will then be
	// included in the deposit transaction we'll broadcast.
	inputs, releaseInputs, changeOutput, err := m.inputsForDeposit(
		ctx, depositAmount, multiSigWitness, feeRate,
	)
	if err != nil {
		return nil, nil, err
	}
	newAccountOutput, modifiers, err := createNewAccountOutput(
		account, newAccountValue, nil,
	)
	if err != nil {
		releaseInputs()
		return nil, nil, err
	}

	// We'll tack on the change output if it was needed and an additional
	// `StatePendingUpdate` modifier to our account and proceed with the
	// rest of the flow. This should request a signature from the auctioneer
	// and assuming it's valid, broadcast the deposit transaction.
	outputs := []*wire.TxOut{newAccountOutput}
	if changeOutput != nil {
		outputs = append(outputs, changeOutput)
	}
	modifiers = append(modifiers, StateModifier(StatePendingUpdate))
	modifiedAccount, spendPkg, err := m.spendAccount(
		ctx, account, inputs, outputs, multiSigWitness, modifiers, false,
		bestHeight,
	)
	if err != nil {
		releaseInputs()
		return nil, nil, err
	}

	return modifiedAccount, spendPkg.tx, nil
}

// WithdrawAccount attempts to withdraw funds from the account associated with
// the given trader key into the provided outputs.
func (m *Manager) WithdrawAccount(ctx context.Context,
	traderKey *btcec.PublicKey, outputs []*wire.TxOut,
	feeRate chainfee.SatPerKWeight,
	bestHeight uint32) (*Account, *wire.MsgTx, error) {

	// The account can only be modified in `StateOpen`.
	account, err := m.cfg.Store.Account(traderKey)
	if err != nil {
		return nil, nil, err
	}
	if account.State != StateOpen {
		return nil, nil, fmt.Errorf("account must be in %v to be "+
			"modified", StateOpen)
	}

	// TODO(wilmer): Reject if account has pending orders.

	// To start, we'll need to determine the new value of the account after
	// creating the outputs specified as part of the withdrawal, which we'll
	// then use to create the new account output.
	newAccountValue, err := valueAfterAccountUpdate(
		account, outputs, multiSigWitness, feeRate,
	)
	if err != nil {
		return nil, nil, err
	}
	newAccountOutput, modifiers, err := createNewAccountOutput(
		account, newAccountValue, nil,
	)
	if err != nil {
		return nil, nil, err
	}

	// With the output created, we'll tack on an additional
	// `StatePendingUpdate` modifier to our account and proceed with the
	// rest of the flow. This should request a signature from the auctioneer
	// and assuming it's valid, broadcast the withdrawal transaction.
	outputs = append(outputs, newAccountOutput)
	modifiers = append(modifiers, StateModifier(StatePendingUpdate))
	modifiedAccount, spendPkg, err := m.spendAccount(
		ctx, account, nil, outputs, multiSigWitness, modifiers, false,
		bestHeight,
	)
	if err != nil {
		return nil, nil, err
	}

	return modifiedAccount, spendPkg.tx, nil
}

// RenewAccount updates the expiration of an open/expired account. This will
// always require a signature from the auctioneer, even after the account has
// expired, to ensure the auctioneer is aware the account is being renewed.
func (m *Manager) RenewAccount(ctx context.Context,
	traderKey *btcec.PublicKey, newExpiry uint32,
	feeRate chainfee.SatPerKWeight, bestHeight uint32) (*Account,
	*wire.MsgTx, error) {

	// The account can only have its expiry updated if it has confirmed
	// and/or has expired.
	account, err := m.cfg.Store.Account(traderKey)
	if err != nil {
		return nil, nil, err
	}
	switch account.State {
	case StateOpen, StatePendingBatch, StateExpired:
	default:
		return nil, nil, fmt.Errorf("account must be in either of %v "+
			"to be renewed",
			[]State{StateOpen, StatePendingBatch, StateExpired})
	}

	// Validate the new expiry.
	if err := validateAccountExpiry(newExpiry, bestHeight); err != nil {
		return nil, nil, err
	}

	// Determine the new account output after attempting the expiry update.
	newAccountValue, err := valueAfterAccountUpdate(
		account, nil, multiSigWitness, feeRate,
	)
	if err != nil {
		return nil, nil, err
	}
	newAccountOutput, modifiers, err := createNewAccountOutput(
		account, newAccountValue, &newExpiry,
	)
	if err != nil {
		return nil, nil, err
	}

	// With the output created, we'll tack on an additional
	// `StatePendingUpdate` modifier to our account and proceed with the
	// rest of the flow. This should request a signature from the auctioneer
	// and assuming it's valid, broadcast the update transaction.
	modifiers = append(modifiers, StateModifier(StatePendingUpdate))
	modifiedAccount, spendPkg, err := m.spendAccount(
		ctx, account, nil, []*wire.TxOut{newAccountOutput},
		multiSigWitness, modifiers, false, bestHeight,
	)
	if err != nil {
		return nil, nil, err
	}

	// Begin to track the new account expiration, which will overwrite the
	// existing expiration request.
	err = m.watcher.WatchAccountExpiration(traderKey, modifiedAccount.Expiry)
	if err != nil {
		return nil, nil, err
	}

	return modifiedAccount, spendPkg.tx, nil
}

// BumpAccountFee attempts to bump the fee of an account's most recent
// transaction. This is done by locating an eligible output for lnd to CPFP,
// otherwise the fee bump will not succeed. Further invocations of this call for
// the same account will result in the child being replaced by the higher fee
// transaction (RBF).
func (m *Manager) BumpAccountFee(ctx context.Context,
	traderKey *btcec.PublicKey, newFeeRate chainfee.SatPerKWeight) error {

	account, err := m.cfg.Store.Account(traderKey)
	if err != nil {
		return err
	}

	// Only accounts in pending states can have their transaction fees
	// bumped.
	switch account.State {
	case StatePendingOpen, StatePendingUpdate, StatePendingClosed:
	default:
		return fmt.Errorf("cannot bump fee for account in state %v",
			account.State)
	}

	// Since we're using lnd's sweeper for fee bumps, we'll need to find an
	// output in the transaction under its control to perform the CPFP/RBF.
	op := wire.OutPoint{Hash: account.LatestTx.TxHash()}
	for i := range account.LatestTx.TxOut {
		op.Index = uint32(i)

		log.Debugf("Attempting CPFP with %v for account %x", op,
			traderKey.SerializeCompressed())

		err := m.cfg.Wallet.BumpFee(ctx, op, newFeeRate)
		if err != nil {
			// Output isn't known to lnd, continue to the next one.
			// Unfortunately there are two slightly different error
			// messages that can be returned, depending on what code
			// path is taken.
			if strings.Contains(err.Error(), lnwallet.ErrNotMine.Error()) {
				continue
			}
			if strings.Contains(err.Error(), wallet.ErrNotMine.Error()) {
				continue
			}

			// A fatal error occurred, return it.
			return err
		}

		// Once we've found an eligible output, we can return.
		log.Infof("Found eligible output %v for CPFP of account %x",
			op, traderKey.SerializeCompressed())
		return nil
	}

	// If we didn't find an eligible output, report it as an error.
	return fmt.Errorf("transaction %v did not contain any eligible "+
		"outputs to CPFP", op.Hash)
}

// CloseAccount attempts to close the account associated with the given trader
// key. Closing the account requires a signature of the auctioneer if the
// account has not yet expired. The account funds are swept according to the
// provided fee expression.
func (m *Manager) CloseAccount(ctx context.Context, traderKey *btcec.PublicKey,
	feeExpr FeeExpr, bestHeight uint32) (*wire.MsgTx, error) {

	account, err := m.cfg.Store.Account(traderKey)
	if err != nil {
		return nil, err
	}

	// Make sure the account hasn't already been closed, or is in the
	// process of doing so.
	if account.State == StatePendingClosed || account.State == StateClosed {
		return nil, errors.New("account has already been closed")
	}

	// Determine the appropriate witness type for the account input based on
	// whether it's expired or not.
	witnessType := determineWitnessType(account, bestHeight)

	// We'll then use the fee expression to determine the closing
	// transaction of the account.
	//
	// If a single output along with a fee rate was provided and the output
	// script was not populated, we'll generate one from the backing lnd
	// node's wallet.
	if feeExpr, ok := feeExpr.(*OutputWithFee); ok && feeExpr.PkScript == nil {
		addr, err := m.cfg.Wallet.NextAddr(ctx)
		if err != nil {
			return nil, err
		}
		feeExpr.PkScript, err = txscript.PayToAddrScript(addr)
		if err != nil {
			return nil, err
		}
	}
	closeOutputs, err := feeExpr.CloseOutputs(account.Value, witnessType)
	if err != nil {
		return nil, err
	}

	// Proceed to create the closing transaction and perform any operations
	// thereby required.
	modifiers := []Modifier{
		ValueModifier(0), StateModifier(StatePendingClosed),
	}
	_, spendPkg, err := m.spendAccount(
		ctx, account, nil, closeOutputs, witnessType, modifiers, true,
		bestHeight,
	)
	if err != nil {
		return nil, err
	}

	return spendPkg.tx, nil
}

// spendAccount houses most of the logic required to properly spend an account
// by creating the spending transaction, updating persisted account states,
// requesting a signature from the auctioneer if necessary, broadcasting the
// spending transaction, and finally watching for the new account state
// on-chain. These operations are performed in this order to ensure trader are
// able to resume the spend of an account upon restarts if they happen to
// shutdown mid-process.
func (m *Manager) spendAccount(ctx context.Context, account *Account,
	inputs []chanfunding.Coin, outputs []*wire.TxOut, witnessType witnessType,
	modifiers []Modifier, isClose bool, bestHeight uint32) (*Account,
	*spendPackage, error) {

	// Create the spending transaction of an account based on the provided
	// witness type.
	var (
		spendPkg *spendPackage
		err      error
	)
	switch witnessType {
	case expiryWitness:
		if !isClose {
			return nil, nil, errors.New("modifications for expired " +
				"accounts are not currently supported")
		}

		spendPkg, err = m.spendAccountExpiry(
			ctx, account, outputs, bestHeight,
		)

	case multiSigWitness:
		spendPkg, err = m.createSpendTx(ctx, account, inputs, outputs, 0)

	default:
		err = fmt.Errorf("unhandled witness type: %v", witnessType)
	}
	if err != nil {
		return nil, nil, err
	}

	// Update the account's height hint and latest transaction.
	modifiers = append(modifiers, HeightHintModifier(bestHeight))
	modifiers = append(modifiers, LatestTxModifier(spendPkg.tx))

	// With the transaction crafted, update our on-disk state and broadcast
	// the transaction. We'll need some additional modifiers if the account
	// is being modified.
	if !isClose {
		// The account output should be recreated, so we need to locate
		// the new account outpoint.
		newAccountOutput, err := account.Copy(modifiers...).Output()
		if err != nil {
			return nil, nil, err
		}
		idx, ok := poolscript.LocateOutputScript(
			spendPkg.tx, newAccountOutput.PkScript,
		)
		if !ok {
			return nil, nil, fmt.Errorf("new account output "+
				"script %x not found in spending transaction",
				newAccountOutput.PkScript)
		}
		modifiers = append(modifiers, OutPointModifier(wire.OutPoint{
			Hash:  spendPkg.tx.TxHash(),
			Index: idx,
		}))
	}

	// If we require the auctioneer's signature, request it now before
	// updating the account on disk.
	if witnessType == multiSigWitness {
		witness, err := m.constructMultiSigWitness(
			ctx, account, spendPkg, modifiers, isClose,
		)
		if err != nil {
			return nil, nil, err
		}
		spendPkg.tx.TxIn[spendPkg.accountInputIdx].Witness = witness
	}

	prevAccountState := account.Copy()
	if err := m.cfg.Store.UpdateAccount(account, modifiers...); err != nil {
		return nil, nil, err
	}

	// As this is a generic account modification, we'll add some additional
	// information to make accounting for this transaction a bit easier.
	deposit := prevAccountState.Value < account.Value
	acctKey := account.TraderKey.PubKey.SerializeCompressed()
	contextLabel := fmt.Sprintf(" poold -- AccountModification(acct_key=%x, "+
		"expiry=%v, deposit=%v, is_close=%v)", acctKey,
		witnessType == expiryWitness, deposit, isClose)

	label := makeTxnLabel(m.cfg.TxLabelPrefix, contextLabel)

	if err := m.maybeBroadcastTx(ctx, spendPkg.tx, label); err != nil {
		return nil, nil, err
	}

	return account, spendPkg, nil
}

// RecoverAccount re-introduces a recovered account into the database and starts
// all watchers necessary depending on the account's state.
func (m *Manager) RecoverAccount(ctx context.Context, account *Account) error {
	if account.TraderKey == nil || account.TraderKey.PubKey == nil {
		return fmt.Errorf("account is missing trader key")
	}

	// The full trader key descriptor was restored previously and we can now
	// derive the shared secret.
	secret, err := m.cfg.Signer.DeriveSharedKey(
		ctx, account.AuctioneerKey, &account.TraderKey.KeyLocator,
	)
	if err != nil {
		return err
	}
	account.Secret = secret

	// Now store it to the database and start our watchers according to the
	// account's state.
	err = m.cfg.Store.AddAccount(account)
	if err != nil {
		return err
	}

	// Now let's try to resume the account based on the state of it. We set
	// the `onRestart` flag to false because that would try to re-publish
	// the opening transaction in some cases which we don't want. Instead we
	// set the `onRecovery` flag to true. We won't send to the account
	// output again, so we don't need to set a valid funding conf target.
	return m.resumeAccount(ctx, account, false, true, 0)
}

// determineWitnessType determines the appropriate witness type to use for the
// spending transaction for an account based on whether it has expired or not.
func determineWitnessType(account *Account, bestHeight uint32) witnessType {
	if account.State == StateExpired || bestHeight >= account.Expiry {
		return expiryWitness
	}
	return multiSigWitness
}

// spendAccountExpiry creates the closing transaction of an account based on the
// expiration script path and signs it. bestHeight is used as the lock time of
// the transaction in order to satisfy the output's CHECKLOCKTIMEVERIFY.
func (m *Manager) spendAccountExpiry(ctx context.Context, account *Account,
	outputs []*wire.TxOut, bestHeight uint32) (*spendPackage, error) {

	spendPkg, err := m.createSpendTx(ctx, account, nil, outputs, bestHeight)
	if err != nil {
		return nil, err
	}

	spendPkg.tx.TxIn[0].Witness = poolscript.SpendExpiry(
		spendPkg.witnessScript, spendPkg.ourSig,
	)

	return spendPkg, nil
}

// constructMultiSigWitness requests a signature from the auctioneer for the
// given spending transaction of an account and returns the fully constructed
// witness to spend the account input.
func (m *Manager) constructMultiSigWitness(ctx context.Context,
	account *Account, spendPkg *spendPackage, modifiers []Modifier,
	isClose bool) (wire.TxWitness, error) {

	var (
		auctioneerSig []byte
		err           error
	)

	if isClose {
		// If the account is being closed, we shouldn't provide any
		// modifiers.
		auctioneerSig, err = m.cfg.Auctioneer.ModifyAccount(
			ctx, account, nil, spendPkg.tx.TxOut, nil,
		)
	} else {
		// Otherwise, the account output is being re-created due to a
		// modification, so we need to filter out its spent input and
		// re-created output from the spending transaction as the
		// auctioneer can reconstruct those themselves.
		inputIdx := spendPkg.accountInputIdx
		inputs := make([]*wire.TxIn, 0, len(spendPkg.tx.TxIn)-1)
		inputs = append(inputs, spendPkg.tx.TxIn[:inputIdx]...)
		inputs = append(inputs, spendPkg.tx.TxIn[inputIdx+1:]...)

		outputIdx := account.Copy(modifiers...).OutPoint.Index
		outputs := make([]*wire.TxOut, 0, len(spendPkg.tx.TxOut)-1)
		outputs = append(outputs, spendPkg.tx.TxOut[:outputIdx]...)
		outputs = append(outputs, spendPkg.tx.TxOut[outputIdx+1:]...)

		auctioneerSig, err = m.cfg.Auctioneer.ModifyAccount(
			ctx, account, inputs, outputs, modifiers,
		)
	}
	if err != nil {
		return nil, err
	}

	return poolscript.SpendMultiSig(
		spendPkg.witnessScript, spendPkg.ourSig, auctioneerSig,
	), nil
}

// createSpendTx creates the spending transaction of an account and signs it.
// If the spending transaction takes the expiration path, bestHeight is used as
// the lock time of the transaction, otherwise it is 0. The transaction has its
// inputs and outputs sorted according to BIP-69.
func (m *Manager) createSpendTx(ctx context.Context, account *Account,
	inputs []chanfunding.Coin, outputs []*wire.TxOut,
	bestHeight uint32) (*spendPackage, error) {

	// Construct the transaction that we'll sign.
	tx := wire.NewMsgTx(2)
	tx.LockTime = bestHeight
	tx.AddTxIn(&wire.TxIn{PreviousOutPoint: account.OutPoint})

	// We'll need a way to reference inputs to their corresponding UTXO.
	inputMap := make(map[wire.OutPoint]chanfunding.Coin, len(inputs))
	for _, input := range inputs {
		tx.AddTxIn(&wire.TxIn{
			PreviousOutPoint: input.OutPoint,
		})
		inputMap[input.OutPoint] = input
	}

	for _, output := range outputs {
		tx.AddTxOut(output)
	}

	// The transaction should have its inputs and outputs sorted according
	// to BIP-69.
	txsort.InPlaceSort(tx)

	// Ensure the transaction crafted passes some basic sanity checks before
	// we attempt to sign it.
	if err := sanityCheckAccountSpendTx(tx, account, inputMap); err != nil {
		return nil, err
	}

	// Determine the new index of the account input now that the transaction
	// has been sorted.
	accountInputIdx, err := locateAccountInput(tx, account)
	if err != nil {
		return nil, err
	}

	// Gather the remaining components required to sign the transaction
	// fully. This includes signing the account input and any additional
	// ones.
	sigHashType := txscript.SigHashAll
	for i, txIn := range tx.TxIn {
		if i == accountInputIdx {
			continue
		}

		inputScript, err := m.signInput(
			ctx, tx, inputMap[txIn.PreviousOutPoint], i,
			sigHashType,
		)
		if err != nil {
			return nil, err
		}

		txIn.SignatureScript = inputScript.SigScript
		txIn.Witness = inputScript.Witness
	}

	// Our account input signature isn't always all that's required to spend
	// it, so we'll take care of forming a proper signature later.
	witnessScript, ourSig, err := m.signAccountInput(
		ctx, tx, account, accountInputIdx, sigHashType,
	)
	if err != nil {
		return nil, err
	}

	return &spendPackage{
		tx:              tx,
		accountInputIdx: accountInputIdx,
		witnessScript:   witnessScript,
		ourSig:          ourSig,
	}, nil
}

// addBaseAccountModificationWeight adds the estimated weight units for a
// transaction that modifies an account by spending the current account input
// and creating the new account output according to the provided `witnessType`.
func addBaseAccountModificationWeight(weightEstimator *input.TxWeightEstimator,
	witnessType witnessType) error {

	var accountInputWitnessSize int
	switch witnessType {
	case expiryWitness:
		accountInputWitnessSize = poolscript.ExpiryWitnessSize
	case multiSigWitness:
		accountInputWitnessSize = poolscript.MultiSigWitnessSize
	default:
		return fmt.Errorf("unknown witness type %v", witnessType)
	}

	weightEstimator.AddWitnessInput(accountInputWitnessSize)
	weightEstimator.AddP2WSHOutput()

	return nil
}

// valueAfterAccountUpdate determines the new value of an account after
// processing a withdrawal to the specified outputs at the provided fee rate.
func valueAfterAccountUpdate(account *Account, outputs []*wire.TxOut,
	witnessType witnessType, feeRate chainfee.SatPerKWeight) (
	btcutil.Amount, error) {

	// To determine the new value of the account, we'll need to subtract the
	// values of all additional outputs and the resulting fee of the
	// transaction, which we'll need to compute based on its weight.
	//
	// Right off the bat, we'll add weight estimates for the existing
	// account output that we're spending, and the new account output being
	// created.
	var weightEstimator input.TxWeightEstimator
	err := addBaseAccountModificationWeight(&weightEstimator, witnessType)
	if err != nil {
		return 0, err
	}

	// We'll then add the weight estimates for any additional outputs
	// provided, keeping track of the total output value sum as we go.
	var outputTotal btcutil.Amount
	for _, out := range outputs {
		// To determine the proper weight of the output, we'll need to
		// know its type.
		pkScript, err := txscript.ParsePkScript(out.PkScript)
		if err != nil {
			return 0, fmt.Errorf("unable to parse output script "+
				"%x: %v", out.PkScript, err)
		}

		switch pkScript.Class() {
		case txscript.ScriptHashTy:
			weightEstimator.AddP2SHOutput()
		case txscript.WitnessV0PubKeyHashTy:
			weightEstimator.AddP2WKHOutput()
		case txscript.WitnessV0ScriptHashTy:
			weightEstimator.AddP2WSHOutput()
		default:
			return 0, fmt.Errorf("unsupported output script %x",
				out.PkScript)
		}

		outputTotal += btcutil.Amount(out.Value)
	}

	// With the weight estimated, compute the fee, which we'll then subtract
	// from our input total and ensure our new account value isn't below our
	// required minimum.
	fee := feeRate.FeeForWeight(int64(weightEstimator.Weight()))
	newAccountValue := account.Value - outputTotal - fee
	if newAccountValue < MinAccountValue {
		return 0, fmt.Errorf("new account value is below accepted "+
			"minimum of %v", MinAccountValue)
	}

	return newAccountValue, nil
}

// inputsForDeposit returns a list of inputs sources from the backing lnd node's
// wallet which we can use to satisfy an account deposit. A closure to release
// the inputs is also provided to use when coming across an unexpected failure.
// If needed, a change output from the backing lnd node's wallet may be returned
// as well.
func (m *Manager) inputsForDeposit(ctx context.Context,
	depositAmount btcutil.Amount, witnessType witnessType,
	feeRate chainfee.SatPerKWeight) ([]chanfunding.Coin, func(),
	*wire.TxOut, error) {

	// We'll start by obtaining our global lock ID.
	lockID, err := m.cfg.Store.LockID()
	if err != nil {
		return nil, nil, nil, err
	}

	// Then, we'll perform a series of coin selection attempts until we can
	// lease every output needed.
	var (
		inputs    []chanfunding.Coin
		changeAmt btcutil.Amount
	)

	// Before doing so, we'll define a helper closure to release the inputs
	// in case we come across an unexpected failure.
	releaseInputs := func() {
		for _, input := range inputs {
			_ = m.cfg.Wallet.ReleaseOutput(
				ctx, lockID, input.OutPoint,
			)
		}
	}

coinSelection:
	for {
		utxos, err := m.cfg.Wallet.ListUnspent(ctx, 1, math.MaxInt32)
		if err != nil {
			return nil, nil, nil, err
		}
		coins := make([]chanfunding.Coin, 0, len(utxos))
		for _, utxo := range utxos {
			coins = append(coins, chanfunding.Coin{
				TxOut: wire.TxOut{
					Value:    int64(utxo.Value),
					PkScript: utxo.PkScript,
				},
				OutPoint: utxo.OutPoint,
			})
		}

		inputs, changeAmt, err = coinSelection(
			coins, depositAmount, witnessType, feeRate,
		)
		if err != nil {
			return nil, nil, nil, err
		}

		// Leasing outputs can fail if they were leased by another
		// process, so we'll need to handle this carefully. Keep track
		// of any inputs we've leased, so that we can release them if we
		// fail at any point.
		for i, input := range inputs {
			_, err := m.cfg.Wallet.LeaseOutput(
				ctx, lockID, input.OutPoint, time.Minute*10,
			)
			if err != nil {
				log.Debugf("Unable to lease output %v: %v",
					input.OutPoint, err)

				// Only release those which we've leased.
				inputs = inputs[:i]
				releaseInputs()
				continue coinSelection
			}
		}

		break
	}

	// A change output will only exist as long as the remaining amount is
	// above the network's dust limit.
	var changeOutput *wire.TxOut
	dustLimit := txrules.GetDustThreshold(
		input.P2WPKHSize, txrules.DefaultRelayFeePerKb,
	)
	if changeAmt >= dustLimit {
		addr, err := m.cfg.Wallet.NextAddr(context.Background())
		if err != nil {
			releaseInputs()
			return nil, nil, nil, err
		}
		script, err := txscript.PayToAddrScript(addr)
		if err != nil {
			releaseInputs()
			return nil, nil, nil, err
		}
		changeOutput = &wire.TxOut{
			Value:    int64(changeAmt),
			PkScript: script,
		}
	}

	return inputs, releaseInputs, changeOutput, nil
}

// createNewAccountOutput creates the next account output in the sequence using
// the new account value and optional new account expiry.
func createNewAccountOutput(account *Account, newAccountValue btcutil.Amount,
	newAccountExpiry *uint32) (*wire.TxOut, []Modifier, error) {

	modifiers := []Modifier{
		ValueModifier(newAccountValue),
		IncrementBatchKey(),
	}
	if newAccountExpiry != nil {
		modifiers = append(modifiers, ExpiryModifier(*newAccountExpiry))
	}

	newAccountOutput, err := account.Copy(modifiers...).Output()
	if err != nil {
		return nil, nil, err
	}

	return newAccountOutput, modifiers, nil
}

// sanityCheckAccountSpendTx ensures that the spending transaction of an account
// is well-formed by performing various sanity checks on its inputs and outputs.
func sanityCheckAccountSpendTx(tx *wire.MsgTx, account *Account,
	inputs map[wire.OutPoint]chanfunding.Coin) error {

	err := blockchain.CheckTransactionSanity(btcutil.NewTx(tx))
	if err != nil {
		return err
	}

	// None of the outputs should be dust.
	for _, output := range tx.TxOut {
		if txrules.IsDustOutput(output, txrules.DefaultRelayFeePerKb) {
			return fmt.Errorf("dust output %x", output.PkScript)
		}
	}

	// CheckTransactionSanity doesn't have enough context to attempt fee
	// calculation, but we do.
	//
	// TODO(wilmer): Calculate the fee for this transaction and assert that
	// it is greater than the lowest possible fee for it?
	var inputTotal, outputTotal btcutil.Amount
	for _, input := range tx.TxIn {
		if input.PreviousOutPoint == account.OutPoint {
			inputTotal += account.Value
		} else {
			inputTotal += btcutil.Amount(
				inputs[input.PreviousOutPoint].Value,
			)
		}
	}
	for _, output := range tx.TxOut {
		outputTotal += btcutil.Amount(output.Value)
	}

	if inputTotal < outputTotal {
		return fmt.Errorf("output value of %v exceeds input value of %v",
			outputTotal, inputTotal)
	}

	return nil
}

// locateAccountInput locates the index of the account input in the provided
// transaction or returns an error.
func locateAccountInput(tx *wire.MsgTx, account *Account) (int, error) {
	for i, txIn := range tx.TxIn {
		if txIn.PreviousOutPoint == account.OutPoint {
			return i, nil
		}
	}
	return 0, errors.New("account input not found")
}

// signInput signs a P2WKH or NP2WKH input of a transaction.
func (m *Manager) signInput(ctx context.Context, tx *wire.MsgTx,
	in chanfunding.Coin, idx int,
	sigHashType txscript.SigHashType) (*input.Script, error) {

	signDesc := &lndclient.SignDescriptor{
		Output: &wire.TxOut{
			Value:    in.Value,
			PkScript: in.PkScript,
		},
		HashType:   sigHashType,
		InputIndex: idx,
	}
	inputScripts, err := m.cfg.Signer.ComputeInputScript(
		ctx, tx, []*lndclient.SignDescriptor{signDesc},
	)
	if err != nil {
		return nil, err
	}

	return inputScripts[0], nil
}

// signAccountInput signs the account input in the spending transaction of an
// account. If the account is being spent with cooperation of the auctioneer,
// their signature will be required as well.
func (m *Manager) signAccountInput(ctx context.Context, tx *wire.MsgTx,
	account *Account, idx int, sigHashType txscript.SigHashType) ([]byte,
	[]byte, error) {

	traderKeyTweak := poolscript.TraderKeyTweak(
		account.BatchKey, account.Secret, account.TraderKey.PubKey,
	)
	witnessScript, err := poolscript.AccountWitnessScript(
		account.Expiry, account.TraderKey.PubKey, account.AuctioneerKey,
		account.BatchKey, account.Secret,
	)
	if err != nil {
		return nil, nil, err
	}

	accountOutput, err := account.Output()
	if err != nil {
		return nil, nil, err
	}

	signDesc := &lndclient.SignDescriptor{
		KeyDesc:       *account.TraderKey,
		SingleTweak:   traderKeyTweak,
		WitnessScript: witnessScript,
		Output:        accountOutput,
		HashType:      sigHashType,
		InputIndex:    idx,
	}
	sigs, err := m.cfg.Signer.SignOutputRaw(
		ctx, tx, []*lndclient.SignDescriptor{signDesc},
	)
	if err != nil {
		return nil, nil, err
	}

	// We'll need to re-append the sighash flag since SignOutputRaw strips
	// it.
	ourSig := append(sigs[0], byte(signDesc.HashType))

	return witnessScript, ourSig, nil
}

// validateAccountValue ensures that a trader has provided a sane account value
// for the creation of a new account.
func validateAccountValue(value, maxValue btcutil.Amount) error {
	if value < MinAccountValue {
		return fmt.Errorf("minimum account value allowed is %v",
			MinAccountValue)
	}
	if value > maxValue {
		return fmt.Errorf("maximum account value allowed is %v",
			maxValue)
	}

	return nil
}

// validateAccountExpiry ensures that a trader has provided a sane account expiry
// for the creation/modification of an account.
func validateAccountExpiry(expiry, bestHeight uint32) error {
	if expiry < bestHeight+minAccountExpiry {
		return fmt.Errorf("current minimum account expiry allowed is "+
			"height %v", bestHeight+minAccountExpiry)
	}
	if expiry > bestHeight+maxAccountExpiry {
		return fmt.Errorf("current maximum account expiry allowed is "+
			"height %v", bestHeight+maxAccountExpiry)
	}

	return nil
}

// validateAccountParams ensures that a trader has provided sane parameters for
// the creation of a new account.
func validateAccountParams(value, maxValue btcutil.Amount, expiry,
	bestHeight uint32) error {

	err := validateAccountValue(value, maxValue)
	if err != nil {
		return err
	}
	return validateAccountExpiry(expiry, bestHeight)
}

// numConfsForValue chooses an appropriate number of confirmations to wait for
// an account based on its initial value.
//
// TODO(wilmer): Determine the recommend number of blocks to wait for a
// particular output size given the current block reward and a user's "risk
// threshold" (basically a multiplier for the amount of work/fiat-burnt that
// would need to be done to undo N blocks).
func NumConfsForValue(value, maxAccountValue btcutil.Amount) uint32 {
	confs := maxConfs * value / maxAccountValue
	if confs < minConfs {
		confs = minConfs
	}
	if confs > maxConfs {
		confs = maxConfs
	}
	return uint32(confs)
}

// makeTxnLabel makes a transaction label for a given account given a static
// label prefix and a context-specific label.
func makeTxnLabel(labelPrefix, contextLabel string) string {
	var label string

	// If we have a label prefix, then we'll apply that now and leave a space
	// at the end as well to separate it from the contextLabel.
	if labelPrefix != "" {
		label += labelPrefix + " "
	}

	label += contextLabel

	// If after applying our context label, the label is too long (exceeds
	// the 500 char limit), we'll truncate the label to ensure we continue
	// operation, and send a warning message to the user.
	if len(label) > wtxmgr.TxLabelLimit {
		log.Warnf("label=%v is too long (size=%v, max_size=%v)",
			label, len(label), wtxmgr.TxLabelLimit)

		label = label[:wtxmgr.TxLabelLimit]
	}

	return label
}