import hashlib

def taproot_tweak_audit(internal_pubkey_hex, script_root_hex=None):
 print(f"--- Taproot Tweak Audit ---")
 print(f"[*] Internal Key: {internal_pubkey_hex}")

 # 1. Define the Tagged Hash (BIP340 requirement)
 # Taproot uses the 'TapTweak' tag
 tag = b"TapTweak"
 tag_hash = hashlib.sha256(tag).digest()

 # 2. Prepare the data to be hashed
 # Internal Key (32 bytes) + Merkle Root (if any)
 internal_bytes = bytes.fromhex(internal_pubkey_hex)

 if script_root_hex:
 print(f"[*] Script Root: {script_root_hex}")
 root_bytes = bytes.fromhex(script_root_hex)
 payload = internal_bytes + root_bytes
 else:
 print("[*] No Script Path (Key-Path Only)")
 payload = internal_bytes

 # 3. Calculate the Tweak Value (t)
 # t = Hash_TapTweak(P || Root)
 h = hashlib.sha256()
 h.update(tag_hash + tag_hash + payload)
 tweak_int = int(h.hexdigest(), 16)

 print(f"[*] Tweak Value (t): {tweak_int}")

 # 4. The Output Key Logic (Conceptual)
 # P_output = P_internal + t*G
 print("\n--- Final Logic ---")
 print(f"[!] Result: The Internal Key is moved by '{tweak_int}' steps along the curve.")
 print(f"[!] This hidden 'Tweak' is what binds the MAST tree to the address.")

# --- Simulation ---

# A 32-byte Internal Public Key (X-only)
my_pubkey = "f1e2d3c4b5a69788776655443322110000112233445566778899aabbccddeeff"

# A Merkle Root of a script tree
my_root = "000102030405060708090a0b0c0d0e0f101112131415161718191a1b1c1d1e1f"

taproot_tweak_audit(my_pubkey, my_root)