// SPDX-License-Identifier: CC0-1.0 //! An unsigned bitcoin amount. #[cfg(feature = "alloc")] use alloc::string::{String, ToString}; use core::str::FromStr; use core::{default, fmt}; #[cfg(feature = "arbitrary")] use arbitrary::{Arbitrary, Unstructured}; use super::error::{ParseAmountErrorInner, ParseErrorInner}; use super::{ parse_signed_to_satoshi, split_amount_and_denomination, Denomination, Display, DisplayStyle, OutOfRangeError, ParseAmountError, ParseError, SignedAmount, }; mod encapsulate { use super::OutOfRangeError; /// An amount. /// /// The [`Amount`] type can be used to express Bitcoin amounts that support arithmetic and /// conversion to various denominations. The [`Amount`] type does not implement [`serde`] traits /// but we do provide modules for serializing as satoshis or bitcoin. /// /// Warning! /// /// This type implements several arithmetic operations from [`core::ops`]. /// To prevent errors due to an overflow when using these operations, /// it is advised to instead use the checked arithmetic methods whose names /// start with `checked_`. The operations from [`core::ops`] that [`Amount`] /// implements will panic when an overflow occurs. /// /// # Examples /// /// ``` /// # #[cfg(feature = "serde")] { /// use serde::{Serialize, Deserialize}; /// use bitcoin_units::Amount; /// /// #[derive(Serialize, Deserialize)] /// struct Foo { /// // If you are using `rust-bitcoin` then `bitcoin::amount::serde::as_sat` also works. /// #[serde(with = "bitcoin_units::amount::serde::as_sat")] // Also `serde::as_btc`. /// amount: Amount, /// } /// # } /// ``` #[derive(Copy, Clone, PartialEq, Eq, PartialOrd, Ord, Hash)] pub struct Amount(u64); impl Amount { /// The maximum value of an amount. pub const MAX: Self = Self(21_000_000 * 100_000_000); /// The minimum value of an amount. pub const MIN: Self = Self(0); /// Gets the number of satoshis in this [`Amount`]. /// /// # Examples /// /// ``` /// # use bitcoin_units::Amount; /// assert_eq!(Amount::ONE_BTC.to_sat(), 100_000_000); /// ``` pub const fn to_sat(self) -> u64 { self.0 } /// Constructs a new [`Amount`] from the given number of satoshis. /// /// # Errors /// /// If `satoshi` is outside of valid range (greater than [`Self::MAX_MONEY`]). /// /// # Examples /// /// ``` /// # use bitcoin_units::{amount, Amount}; /// # let sat = 100_000; /// let amount = Amount::from_sat(sat)?; /// assert_eq!(amount.to_sat(), sat); /// # Ok::<_, amount::OutOfRangeError>(()) /// ``` pub const fn from_sat(satoshi: u64) -> Result { if satoshi > Self::MAX_MONEY.to_sat() { Err(OutOfRangeError { is_signed: false, is_greater_than_max: true }) } else { Ok(Self(satoshi)) } } } } #[doc(inline)] pub use encapsulate::Amount; impl Amount { /// The zero amount. pub const ZERO: Self = Self::from_sat_u32(0); /// Exactly one satoshi. pub const ONE_SAT: Self = Self::from_sat_u32(1); /// Exactly one bitcoin. pub const ONE_BTC: Self = Self::from_btc_u16(1); /// Exactly fifty bitcoin. pub const FIFTY_BTC: Self = Self::from_btc_u16(50); /// The maximum value allowed as an amount. Useful for sanity checking. pub const MAX_MONEY: Self = Self::MAX; /// The number of bytes that an amount contributes to the size of a transaction. pub const SIZE: usize = 8; // Serialized length of a u64. /// Constructs a new [`Amount`] with satoshi precision and the given number of satoshis. /// /// Accepts an `u32` which is guaranteed to be in range for the type, but which can only /// represent roughly 0 to 42.95 BTC. pub const fn from_sat_u32(satoshi: u32) -> Self { let sats = satoshi as u64; // cannot use i64::from in a constfn match Self::from_sat(sats) { Ok(amount) => amount, Err(_) => panic!("unreachable - 65,536 BTC is within range"), } } /// Converts from a value expressing a decimal number of bitcoin to an [`Amount`]. /// /// # Errors /// /// If the amount is too precise, negative, or greater than 21,000,000. /// /// Please be aware of the risk of using floating-point numbers. /// /// # Examples /// /// ``` /// # use bitcoin_units::{amount, Amount}; /// let amount = Amount::from_btc(0.01)?; /// assert_eq!(amount.to_sat(), 1_000_000); /// # Ok::<_, amount::ParseAmountError>(()) /// ``` #[cfg(feature = "alloc")] pub fn from_btc(btc: f64) -> Result { Self::from_float_in(btc, Denomination::Bitcoin) } /// Converts from a value expressing a whole number of bitcoin to an [`Amount`]. #[allow(clippy::missing_panics_doc)] pub fn from_int_btc>(whole_bitcoin: T) -> Self { Self::from_btc_u16(whole_bitcoin.into()) } /// Converts from a value expressing a whole number of bitcoin to an [`Amount`] /// in const context. #[allow(clippy::missing_panics_doc)] pub const fn from_btc_u16(whole_bitcoin: u16) -> Self { let btc = whole_bitcoin as u64; // Can't call `into` in const context. let sats = btc * 100_000_000; match Self::from_sat(sats) { Ok(amount) => amount, Err(_) => panic!("unreachable - 65,535 BTC is within range"), } } /// Parses a decimal string as a value in the given [`Denomination`]. /// /// Note: This only parses the value string. If you want to parse a string /// containing the value with denomination, use [`FromStr`]. /// /// # Errors /// /// If the amount is too precise, negative, or greater than 21,000,000. pub fn from_str_in(s: &str, denom: Denomination) -> Result { let (is_neg, amount) = parse_signed_to_satoshi(s, denom).map_err(|error| error.convert(false))?; if is_neg { return Err(ParseAmountError(ParseAmountErrorInner::OutOfRange( OutOfRangeError::negative(), ))); } Self::try_from(amount).map_err(|e| ParseAmountError(ParseAmountErrorInner::OutOfRange(e))) } /// Parses amounts with denomination suffix as produced by [`Self::to_string_with_denomination`] /// or with [`fmt::Display`]. /// /// If you want to parse only the amount without the denomination, use [`Self::from_str_in`]. /// /// # Errors /// /// If the amount is too big, too precise or negative. /// /// # Examples /// /// ``` /// # use bitcoin_units::{amount, Amount}; /// let amount = Amount::from_str_with_denomination("0.1 BTC")?; /// assert_eq!(amount, Amount::from_sat(10_000_000)?); /// # Ok::<_, amount::ParseError>(()) /// ``` pub fn from_str_with_denomination(s: &str) -> Result { let (amt, denom) = split_amount_and_denomination(s)?; Self::from_str_in(amt, denom).map_err(Into::into) } /// Expresses this [`Amount`] as a floating-point value in the given [`Denomination`]. /// /// Please be aware of the risk of using floating-point numbers. /// /// # Examples /// /// ``` /// # use bitcoin_units::amount::{self, Amount, Denomination}; /// let amount = Amount::from_sat(100_000)?; /// assert_eq!(amount.to_float_in(Denomination::Bitcoin), 0.001); /// # Ok::<_, amount::ParseError>(()) /// ``` #[cfg(feature = "alloc")] #[allow(clippy::missing_panics_doc)] pub fn to_float_in(self, denom: Denomination) -> f64 { self.to_string_in(denom).parse::().unwrap() } /// Expresses this [`Amount`] as a floating-point value in Bitcoin. /// /// Please be aware of the risk of using floating-point numbers. /// /// # Examples /// /// ``` /// # use bitcoin_units::amount::{self, Amount, Denomination}; /// let amount = Amount::from_sat(100_000)?; /// assert_eq!(amount.to_btc(), amount.to_float_in(Denomination::Bitcoin)); /// # Ok::<_, amount::ParseError>(()) /// ``` #[cfg(feature = "alloc")] pub fn to_btc(self) -> f64 { self.to_float_in(Denomination::Bitcoin) } /// Converts this [`Amount`] in floating-point notation in the given [`Denomination`]. /// /// # Errors /// /// If the amount is too big, too precise or negative. /// /// Please be aware of the risk of using floating-point numbers. #[cfg(feature = "alloc")] pub fn from_float_in(value: f64, denom: Denomination) -> Result { if value < 0.0 { return Err(OutOfRangeError::negative().into()); } // This is inefficient, but the safest way to deal with this. The parsing logic is safe. // Any performance-critical application should not be dealing with floats. Self::from_str_in(&value.to_string(), denom) } /// Constructs a new object that implements [`fmt::Display`] in the given [`Denomination`]. /// /// This function is useful if you do not wish to allocate. See also [`Self::to_string_in`]. /// /// # Examples /// /// ``` /// # use bitcoin_units::amount::{self, Amount, Denomination}; /// # use std::fmt::Write; /// let amount = Amount::from_sat(10_000_000)?; /// let mut output = String::new(); /// let _ = write!(&mut output, "{}", amount.display_in(Denomination::Bitcoin)); /// assert_eq!(output, "0.1"); /// # Ok::<_, amount::OutOfRangeError>(()) /// ``` #[must_use] pub fn display_in(self, denomination: Denomination) -> Display { Display { sats_abs: self.to_sat(), is_negative: false, style: DisplayStyle::FixedDenomination { denomination, show_denomination: false }, } } /// Constructs a new object that implements [`fmt::Display`] dynamically selecting /// [`Denomination`]. /// /// This will use BTC for values greater than or equal to 1 BTC and satoshis otherwise. To /// avoid confusion the denomination is always shown. #[must_use] pub fn display_dynamic(self) -> Display { Display { sats_abs: self.to_sat(), is_negative: false, style: DisplayStyle::DynamicDenomination, } } /// Returns a formatted string representing this [`Amount`] in the given [`Denomination`]. /// /// Returned string does not include the denomination. /// /// # Examples /// /// ``` /// # use bitcoin_units::amount::{self, Amount, Denomination}; /// let amount = Amount::from_sat(10_000_000)?; /// assert_eq!(amount.to_string_in(Denomination::Bitcoin), "0.1"); /// # Ok::<_, amount::OutOfRangeError>(()) /// ``` #[cfg(feature = "alloc")] pub fn to_string_in(self, denom: Denomination) -> String { self.display_in(denom).to_string() } /// Returns a formatted string representing this [`Amount`] in the given [`Denomination`], /// suffixed with the abbreviation for the denomination. /// /// # Examples /// /// ``` /// # use bitcoin_units::amount::{self, Amount, Denomination}; /// let amount = Amount::from_sat(10_000_000)?; /// assert_eq!(amount.to_string_with_denomination(Denomination::Bitcoin), "0.1 BTC"); /// # Ok::<_, amount::OutOfRangeError>(()) /// ``` #[cfg(feature = "alloc")] pub fn to_string_with_denomination(self, denom: Denomination) -> String { self.display_in(denom).show_denomination().to_string() } /// Checked addition. /// /// Returns [`None`] if the sum is larger than [`Amount::MAX`]. #[must_use] pub const fn checked_add(self, rhs: Self) -> Option { // No `map()` in const context. // Unchecked add ok, adding two values less than `MAX_MONEY` cannot overflow an `i64`. match Self::from_sat(self.to_sat() + rhs.to_sat()) { Ok(amount) => Some(amount), Err(_) => None, } } /// Checked subtraction. /// /// Returns [`None`] if overflow occurred. #[must_use] pub const fn checked_sub(self, rhs: Self) -> Option { // No `map()` in const context. match self.to_sat().checked_sub(rhs.to_sat()) { Some(res) => match Self::from_sat(res) { Ok(amount) => Some(amount), Err(_) => None, // Unreachable because of checked_sub above. }, None => None, } } /// Checked multiplication. /// /// Returns [`None`] if the product is larger than [`Amount::MAX`]. #[must_use] pub const fn checked_mul(self, rhs: u64) -> Option { // No `map()` in const context. match self.to_sat().checked_mul(rhs) { Some(res) => match Self::from_sat(res) { Ok(amount) => Some(amount), Err(_) => None, }, None => None, } } /// Checked integer division. /// /// Be aware that integer division loses the remainder if no exact division can be made. /// /// Returns [`None`] if overflow occurred. #[must_use] pub const fn checked_div(self, rhs: u64) -> Option { // No `map()` in const context. match self.to_sat().checked_div(rhs) { Some(res) => match Self::from_sat(res) { Ok(amount) => Some(amount), Err(_) => None, // Unreachable because of checked_div above. }, None => None, } } /// Checked remainder. /// /// Returns [`None`] if overflow occurred. #[must_use] pub const fn checked_rem(self, rhs: u64) -> Option { // No `map()` in const context. match self.to_sat().checked_rem(rhs) { Some(res) => match Self::from_sat(res) { Ok(amount) => Some(amount), Err(_) => None, // Unreachable because of checked_div above. }, None => None, } } /// Converts to a signed amount. #[rustfmt::skip] // Moves code comments to the wrong line. #[allow(clippy::missing_panics_doc)] pub fn to_signed(self) -> SignedAmount { SignedAmount::from_sat(self.to_sat() as i64) // Cast ok, signed amount and amount share positive range. .expect("range of Amount is within range of SignedAmount") } } impl default::Default for Amount { fn default() -> Self { Self::ZERO } } impl fmt::Debug for Amount { fn fmt(&self, f: &mut fmt::Formatter) -> fmt::Result { write!(f, "Amount({} SAT)", self.to_sat()) } } // No one should depend on a binding contract for Display for this type. // Just using Bitcoin denominated string. impl fmt::Display for Amount { fn fmt(&self, f: &mut fmt::Formatter) -> fmt::Result { fmt::Display::fmt(&self.display_in(Denomination::Bitcoin).show_denomination(), f) } } impl FromStr for Amount { type Err = ParseError; /// Parses a string slice where the slice includes a denomination. /// /// If the returned value would be zero or negative zero, then no denomination is required. fn from_str(s: &str) -> Result { let result = Self::from_str_with_denomination(s); match result { Err(ParseError(ParseErrorInner::MissingDenomination(_))) => { let d = Self::from_str_in(s, Denomination::Satoshi); if d == Ok(Self::ZERO) { Ok(Self::ZERO) } else { result } } _ => result, } } } impl TryFrom for Amount { type Error = OutOfRangeError; fn try_from(value: SignedAmount) -> Result { value.to_unsigned() } } #[cfg(feature = "arbitrary")] impl<'a> Arbitrary<'a> for Amount { fn arbitrary(u: &mut Unstructured<'a>) -> arbitrary::Result { let sats = u.int_in_range(Self::MIN.to_sat()..=Self::MAX.to_sat())?; Ok(Self::from_sat(sats).expect("range is valid")) } }