@chainvue/verus-sdk 0.7.0 → 0.8.0

package/dist/core/brands.d.ts

@@ -0,0 +1,31 @@
+declare const brand: unique symbol;
+type Brand<T, B extends string> = T & {
+    readonly [brand]: B;
+};
+/** Transparent R-address (version 0x3c, pubkey-hash). */
+export type RAddress = Brand<string, 'RAddress'>;
+/** Identity i-address (version 0x66) — identities AND currency ids (offline-indistinguishable). */
+export type IAddress = Brand<string, 'IAddress'>;
+/** P2SH address (version 0x55). */
+export type P2shAddress = Brand<string, 'P2shAddress'>;
+/** Any parsed base58check address of a known kind. */
+export type Address = RAddress | IAddress | P2shAddress;
+/**
+ * Documentation alias: a currency id IS an i-address. There is deliberately no
+ * separate `CurrencyId` brand — an offline SDK cannot tell an i-address naming a
+ * currency from one naming an identity, so a distinct brand would be a lie the
+ * type system can't check and would force unsafe casts.
+ */
+export type CurrencyId = IAddress;
+/** Parse a transparent R-address; throws InvalidAddressError otherwise. */
+export declare function parseRAddress(s: string, label?: string): RAddress;
+/** Parse an identity/currency i-address; throws InvalidAddressError otherwise. */
+export declare function parseIAddress(s: string, label?: string): IAddress;
+/** Parse any supported address into the discriminated union; throws otherwise. */
+export declare function parseAddress(s: string, label?: string): Address;
+/** Narrow an Address to an i-address by its version byte (replaces startsWith('i')). */
+export declare function isIAddress(a: Address): a is IAddress;
+/** Narrow an Address to an R-address by its version byte. */
+export declare function isRAddress(a: Address): a is RAddress;
+export {};
+//# sourceMappingURL=brands.d.ts.map

package/dist/core/brands.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"brands.d.ts","sourceRoot":"","sources":["../../src/core/brands.ts"],"names":[],"mappings":"AAmBA,OAAO,CAAC,MAAM,KAAK,EAAE,OAAO,MAAM,CAAC;AACnC,KAAK,KAAK,CAAC,CAAC,EAAE,CAAC,SAAS,MAAM,IAAI,CAAC,GAAG;IAAE,QAAQ,CAAC,CAAC,KAAK,CAAC,EAAE,CAAC,CAAA;CAAE,CAAC;AAE9D,yDAAyD;AACzD,MAAM,MAAM,QAAQ,GAAG,KAAK,CAAC,MAAM,EAAE,UAAU,CAAC,CAAC;AACjD,mGAAmG;AACnG,MAAM,MAAM,QAAQ,GAAG,KAAK,CAAC,MAAM,EAAE,UAAU,CAAC,CAAC;AACjD,mCAAmC;AACnC,MAAM,MAAM,WAAW,GAAG,KAAK,CAAC,MAAM,EAAE,aAAa,CAAC,CAAC;AACvD,sDAAsD;AACtD,MAAM,MAAM,OAAO,GAAG,QAAQ,GAAG,QAAQ,GAAG,WAAW,CAAC;AAExD;;;;;GAKG;AACH,MAAM,MAAM,UAAU,GAAG,QAAQ,CAAC;AAkBlC,2EAA2E;AAC3E,wBAAgB,aAAa,CAAC,CAAC,EAAE,MAAM,EAAE,KAAK,SAAY,GAAG,QAAQ,CAMpE;AAED,kFAAkF;AAClF,wBAAgB,aAAa,CAAC,CAAC,EAAE,MAAM,EAAE,KAAK,SAAY,GAAG,QAAQ,CAMpE;AAED,kFAAkF;AAClF,wBAAgB,YAAY,CAAC,CAAC,EAAE,MAAM,EAAE,KAAK,SAAY,GAAG,OAAO,CAYlE;AAED,wFAAwF;AACxF,wBAAgB,UAAU,CAAC,CAAC,EAAE,OAAO,GAAG,CAAC,IAAI,QAAQ,CAEpD;AAED,6DAA6D;AAC7D,wBAAgB,UAAU,CAAC,CAAC,EAAE,OAAO,GAAG,CAAC,IAAI,QAAQ,CAEpD"}

package/dist/core/brands.js

@@ -0,0 +1,82 @@
+"use strict";
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.parseRAddress = parseRAddress;
+exports.parseIAddress = parseIAddress;
+exports.parseAddress = parseAddress;
+exports.isIAddress = isIAddress;
+exports.isRAddress = isRAddress;
+/**
+ * Branded domain types + parse-don't-validate constructors.
+ *
+ * The address-version-laundering bug class (KeyID/IdentityID.fromAddress and
+ * fromBase58Check discard the version byte) was defended by scattering
+ * assertAddressVersion at each call site. Brands move that guarantee into the
+ * type system: once an internal function's signature demands an `IAddress`, a
+ * raw `string` (or an `RAddress`) cannot be passed — the compiler rejects it,
+ * and a forgotten check is a build error instead of a live-testnet discovery.
+ *
+ * Brands are structural subtypes of `string`, so a value already flows into the
+ * fork's constructors with zero casts; the only way to MINT one is through a
+ * parser here, which validates the version byte. No fork imports (uses bs58check
+ * directly), so this stays at the dependency-free core.
+ */
+const bs58check_1 = __importDefault(require("bs58check"));
+const index_js_1 = require("../constants/index.js");
+const errors_js_1 = require("../errors.js");
+const P2SH_VERSION = 0x55;
+/** Decode a base58check string to its version byte + 20-byte hash, or throw typed. */
+function decode(s, label) {
+    let decoded;
+    try {
+        decoded = bs58check_1.default.decode(s);
+    }
+    catch (err) {
+        throw new errors_js_1.InvalidAddressError(String(s), `${label} is not valid base58check: ${err.message}`);
+    }
+    if (decoded.length !== 21) {
+        throw new errors_js_1.InvalidAddressError(String(s), `${label} must decode to a 1-byte version + 20-byte hash, got ${decoded.length} bytes`);
+    }
+    return { version: decoded[0] };
+}
+/** Parse a transparent R-address; throws InvalidAddressError otherwise. */
+function parseRAddress(s, label = 'address') {
+    const { version } = decode(s, label);
+    if (version !== index_js_1.PUBKEY_HASH_PREFIX) {
+        throw new errors_js_1.InvalidAddressError(s, `${label} must be an R-address (version ${index_js_1.PUBKEY_HASH_PREFIX}), got version ${version}`);
+    }
+    return s;
+}
+/** Parse an identity/currency i-address; throws InvalidAddressError otherwise. */
+function parseIAddress(s, label = 'address') {
+    const { version } = decode(s, label);
+    if (version !== index_js_1.I_ADDR_VERSION) {
+        throw new errors_js_1.InvalidAddressError(s, `${label} must be an identity i-address (version ${index_js_1.I_ADDR_VERSION}), got version ${version}`);
+    }
+    return s;
+}
+/** Parse any supported address into the discriminated union; throws otherwise. */
+function parseAddress(s, label = 'address') {
+    const { version } = decode(s, label);
+    switch (version) {
+        case index_js_1.PUBKEY_HASH_PREFIX:
+            return s;
+        case index_js_1.I_ADDR_VERSION:
+            return s;
+        case P2SH_VERSION:
+            return s;
+        default:
+            throw new errors_js_1.InvalidAddressError(s, `${label} has unsupported version byte ${version}`);
+    }
+}
+/** Narrow an Address to an i-address by its version byte (replaces startsWith('i')). */
+function isIAddress(a) {
+    return decode(a, 'address').version === index_js_1.I_ADDR_VERSION;
+}
+/** Narrow an Address to an R-address by its version byte. */
+function isRAddress(a) {
+    return decode(a, 'address').version === index_js_1.PUBKEY_HASH_PREFIX;
+}
+//# sourceMappingURL=brands.js.map

package/dist/core/brands.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"brands.js","sourceRoot":"","sources":["../../src/core/brands.ts"],"names":[],"mappings":";;;;;AAwDA,sCAMC;AAGD,sCAMC;AAGD,oCAYC;AAGD,gCAEC;AAGD,gCAEC;AAhGD;;;;;;;;;;;;;;GAcG;AACH,0DAAkC;AAClC,oDAA2E;AAC3E,4CAAmD;AAsBnD,MAAM,YAAY,GAAG,IAAI,CAAC;AAE1B,sFAAsF;AACtF,SAAS,MAAM,CAAC,CAAS,EAAE,KAAa;IACtC,IAAI,OAAmB,CAAC;IACxB,IAAI,CAAC;QACH,OAAO,GAAG,mBAAS,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;IAChC,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,IAAI,+BAAmB,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,GAAG,KAAK,8BAA+B,GAAa,CAAC,OAAO,EAAE,CAAC,CAAC;IAC3G,CAAC;IACD,IAAI,OAAO,CAAC,MAAM,KAAK,EAAE,EAAE,CAAC;QAC1B,MAAM,IAAI,+BAAmB,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,GAAG,KAAK,wDAAwD,OAAO,CAAC,MAAM,QAAQ,CAAC,CAAC;IACnI,CAAC;IACD,OAAO,EAAE,OAAO,EAAE,OAAO,CAAC,CAAC,CAAW,EAAE,CAAC;AAC3C,CAAC;AAED,2EAA2E;AAC3E,SAAgB,aAAa,CAAC,CAAS,EAAE,KAAK,GAAG,SAAS;IACxD,MAAM,EAAE,OAAO,EAAE,GAAG,MAAM,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC;IACrC,IAAI,OAAO,KAAK,6BAAkB,EAAE,CAAC;QACnC,MAAM,IAAI,+BAAmB,CAAC,CAAC,EAAE,GAAG,KAAK,kCAAkC,6BAAkB,kBAAkB,OAAO,EAAE,CAAC,CAAC;IAC5H,CAAC;IACD,OAAO,CAAa,CAAC;AACvB,CAAC;AAED,kFAAkF;AAClF,SAAgB,aAAa,CAAC,CAAS,EAAE,KAAK,GAAG,SAAS;IACxD,MAAM,EAAE,OAAO,EAAE,GAAG,MAAM,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC;IACrC,IAAI,OAAO,KAAK,yBAAc,EAAE,CAAC;QAC/B,MAAM,IAAI,+BAAmB,CAAC,CAAC,EAAE,GAAG,KAAK,2CAA2C,yBAAc,kBAAkB,OAAO,EAAE,CAAC,CAAC;IACjI,CAAC;IACD,OAAO,CAAa,CAAC;AACvB,CAAC;AAED,kFAAkF;AAClF,SAAgB,YAAY,CAAC,CAAS,EAAE,KAAK,GAAG,SAAS;IACvD,MAAM,EAAE,OAAO,EAAE,GAAG,MAAM,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC;IACrC,QAAQ,OAAO,EAAE,CAAC;QAChB,KAAK,6BAAkB;YACrB,OAAO,CAAa,CAAC;QACvB,KAAK,yBAAc;YACjB,OAAO,CAAa,CAAC;QACvB,KAAK,YAAY;YACf,OAAO,CAAgB,CAAC;QAC1B;YACE,MAAM,IAAI,+BAAmB,CAAC,CAAC,EAAE,GAAG,KAAK,iCAAiC,OAAO,EAAE,CAAC,CAAC;IACzF,CAAC;AACH,CAAC;AAED,wFAAwF;AACxF,SAAgB,UAAU,CAAC,CAAU;IACnC,OAAO,MAAM,CAAC,CAAC,EAAE,SAAS,CAAC,CAAC,OAAO,KAAK,yBAAc,CAAC;AACzD,CAAC;AAED,6DAA6D;AAC7D,SAAgB,UAAU,CAAC,CAAU;IACnC,OAAO,MAAM,CAAC,CAAC,EAAE,SAAS,CAAC,CAAC,OAAO,KAAK,6BAAkB,CAAC;AAC7D,CAAC"}

package/dist/currency/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/currency/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAGH,OAAO,EAAE,gBAAgB,EAAE,mBAAmB,EAAE,MAAM,eAAe,CAAC;AACtE,YAAY,EAAE,YAAY,EAAE,MAAM,eAAe,CAAC;AAMlD,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,uBAAuB,CAAC;AAOrD,OAAO,KAAK,EAAQ,oBAAoB,EAAE,oBAAoB,EAAE,MAAM,mBAAmB,CAAC;AAI1F;;;;GAIG;AACH,wBAAgB,cAAc,CAC5B,MAAM,EAAE,oBAAoB,EAC5B,OAAO,EAAE,OAAO,GACf,oBAAoB,CAkItB"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/currency/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAGH,OAAO,EAAE,gBAAgB,EAAE,mBAAmB,EAAE,MAAM,eAAe,CAAC;AACtE,YAAY,EAAE,YAAY,EAAE,MAAM,eAAe,CAAC;AAMlD,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,uBAAuB,CAAC;AAQrD,OAAO,KAAK,EAAQ,oBAAoB,EAAE,oBAAoB,EAAE,MAAM,mBAAmB,CAAC;AAI1F;;;;GAIG;AACH,wBAAgB,cAAc,CAC5B,MAAM,EAAE,oBAAoB,EAC5B,OAAO,EAAE,OAAO,GACf,oBAAoB,CA6ItB"}

package/dist/currency/index.js

@@ -28,6 +28,7 @@ const index_js_2 = require("../signing/index.js");
 const index_js_3 = require("../utxo/index.js");
 const index_js_4 = require("../utils/index.js");
 const index_js_5 = require("../identity/index.js");
+const brands_js_1 = require("../core/brands.js");
 const index_js_6 = require("../keys/index.js");
 const errors_js_1 = require("../errors.js");
 const { completeFundedIdentityUpdate } = utxo_lib_1.smarttxs;
@@ -74,6 +75,10 @@ function defineCurrency(params, network) {
     // large; size the fee from their real byte length so the tx isn't estimated
     // below the relay minimum.
     const selection = (0, index_js_3.selectUtxos)(params.utxos, currencyDefValue, new Map(), 2, systemId, undefined, true, identityOutputScript.length + currencyDefScript.length);
+    // Currency definition pays only native and emits no token-change output, so a
+    // token-bearing funding UTXO would be silently dropped. Fail closed if one
+    // was selected (both maps empty ⇒ assert no token enters).
+    (0, index_js_3.assertTokenConservation)(selection.selected, new Map(), new Map(), systemId, 'currency definition');
     // Build transaction
     const txb = new utxo_lib_1.TransactionBuilder(verusNetwork);
     txb.setVersion(4);
@@ -86,7 +91,7 @@ function defineCurrency(params, network) {
     txb.addOutput(currencyDefScript, (0, index_js_4.toSafeNumber)(currencyDefValue));
     if (selection.nativeChange > 0n) {
         if (params.changeAddress.startsWith('i')) {
-            txb.addOutput((0, index_js_5.identityPaymentScript)(params.changeAddress), (0, index_js_4.toSafeNumber)(selection.nativeChange));
+            txb.addOutput((0, index_js_5.identityPaymentScript)((0, brands_js_1.parseIAddress)(params.changeAddress, 'changeAddress')), (0, index_js_4.toSafeNumber)(selection.nativeChange));
         }
         else {
             txb.addOutput(params.changeAddress, (0, index_js_4.toSafeNumber)(selection.nativeChange));

package/dist/currency/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/currency/index.ts"],"names":[],"mappings":";AAAA;;;;;;;;;;GAUG;;;;;;AA0BH,wCAqIC;AA7JD,qCAAqC;AACrC,6CAAsE;AAA7D,+GAAA,gBAAgB,OAAA;AAAE,kHAAA,mBAAmB,OAAA;AAG9C,8CAA4E;AAC5E,6EAAuE;AACvE,kDAAuB;AACvB,oDAAuG;AAEvG,kDAAsH;AACtH,+CAA+C;AAC/C,gDAAiD;AACjD,mDAAiF;AACjF,+CAA+C;AAC/C,4CAAsE;AAGtE,MAAM,EAAE,4BAA4B,EAAE,GAAG,mBAAQ,CAAC;AAElD;;;;GAIG;AACH,SAAgB,cAAc,CAC5B,MAA4B,EAC5B,OAAgB;IAEhB,8EAA8E;IAC9E,mDAAmD;IACnD,MAAM,QAAQ,GAAG,IAAA,sBAAW,EAAC,MAAM,CAAC,GAAG,CAAC,CAAC;IACzC,IAAI,CAAC,QAAQ,CAAC,KAAK,EAAE,CAAC;QACpB,MAAM,IAAI,2BAAe,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;IAC5C,CAAC;IACD,IAAI,CAAC,MAAM,CAAC,WAAW,EAAE,CAAC;QACxB,MAAM,IAAI,iCAAqB,CAAC,yBAAyB,CAAC,CAAC;IAC7D,CAAC;IACD,IAAI,CAAC,MAAM,CAAC,KAAK,IAAI,MAAM,CAAC,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC/C,MAAM,IAAI,iCAAqB,CAAC,uCAAuC,CAAC,CAAC;IAC3E,CAAC;IACD,IAAI,CAAC,MAAM,CAAC,iBAAiB,EAAE,CAAC;QAC9B,MAAM,IAAI,iCAAqB,CAAC,+BAA+B,CAAC,CAAC;IACnE,CAAC;IAED,MAAM,YAAY,GAAG,IAAA,qBAAU,EAAC,OAAO,KAAK,SAAS,CAAC,CAAC;IACvD,MAAM,aAAa,GAAG,yBAAc,CAAC,OAAO,CAAC,CAAC;IAC9C,MAAM,QAAQ,GAAG,aAAa,CAAC,OAAO,CAAC;IACvC,MAAM,gBAAgB,GAAG,MAAM,CAAC,gBAAgB,IAAI,EAAE,CAAC;IAEvD,6CAA6C;IAC7C,MAAM,QAAQ,GAAG,IAAI,sCAAQ,EAAE,CAAC;IAChC,QAAQ,CAAC,UAAU,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,WAAW,EAAE,KAAK,CAAC,CAAC,CAAC;IAE5D,2EAA2E;IAC3E,yEAAyE;IACzE,yEAAyE;IACzE,IAAA,6BAAkB,EAAC,MAAM,CAAC,GAAG,EAAE,QAAQ,EAAE,YAAY,CAAC,CAAC;IAEvD,IAAI,CAAC,QAAQ,CAAC,iBAAiB,EAAE,EAAE,CAAC;QAClC,MAAM,YAAY,GAAG,QAAQ,CAAC,KAAK,CAAC,QAAQ,EAAE,CAAC;QAC/C,QAAQ,CAAC,KAAK,GAAG,IAAI,eAAE,CAAC,YAAY,GAAG,uCAA4B,CAAC,CAAC;IACvE,CAAC;IAED,MAAM,cAAc,GAAG,4CAAc,CAAC,YAAY,CAAC,QAAQ,CAAC,CAAC;IAC7D,MAAM,oBAAoB,GAAG,cAAc,CAAC,QAAQ,EAAE,CAAC;IACvD,MAAM,iBAAiB,GAAG,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,iBAAiB,EAAE,KAAK,CAAC,CAAC;IAEvE,0EAA0E;IAC1E,4EAA4E;IAC5E,2BAA2B;IAC3B,MAAM,SAAS,GAAG,IAAA,sBAAW,EAC3B,MAAM,CAAC,KAAK,EACZ,gBAAgB,EAChB,IAAI,GAAG,EAAE,EACT,CAAC,EACD,QAAQ,EACR,SAAS,EACT,IAAI,EACJ,oBAAoB,CAAC,MAAM,GAAG,iBAAiB,CAAC,MAAM,CACvD,CAAC;IAEF,oBAAoB;IACpB,MAAM,GAAG,GAAG,IAAI,6BAAkB,CAAC,YAAY,CAAC,CAAC;IACjD,GAAG,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC;IAClB,GAAG,CAAC,eAAe,CAAC,IAAA,8BAAmB,EAAC,MAAM,CAAC,YAAY,CAAC,CAAC,CAAC;IAC9D,GAAG,CAAC,iBAAiB,CAAC,2BAAgB,CAAC,CAAC;IAExC,KAAK,MAAM,IAAI,IAAI,SAAS,CAAC,QAAQ,EAAE,CAAC;QACtC,GAAG,CAAC,QAAQ,CACV,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC,OAAO,EAAE,EACvC,IAAI,CAAC,WAAW,EAChB,UAAU,EACV,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,KAAK,CAAC,CAChC,CAAC;IACJ,CAAC;IAED,GAAG,CAAC,SAAS,CAAC,oBAAoB,EAAE,CAAC,CAAC,CAAC;IACvC,GAAG,CAAC,SAAS,CAAC,iBAAiB,EAAE,IAAA,uBAAY,EAAC,gBAAgB,CAAC,CAAC,CAAC;IAEjE,IAAI,SAAS,CAAC,YAAY,GAAG,EAAE,EAAE,CAAC;QAChC,IAAI,MAAM,CAAC,aAAa,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;YACzC,GAAG,CAAC,SAAS,CAAC,IAAA,gCAAqB,EAAC,MAAM,CAAC,aAAa,CAAC,EAAE,IAAA,uBAAY,EAAC,SAAS,CAAC,YAAY,CAAC,CAAC,CAAC;QACnG,CAAC;aAAM,CAAC;YACN,GAAG,CAAC,SAAS,CAAC,MAAM,CAAC,aAAa,EAAE,IAAA,uBAAY,EAAC,SAAS,CAAC,YAAY,CAAC,CAAC,CAAC;QAC5E,CAAC;IACH,CAAC;IAED,MAAM,QAAQ,GAAG,GAAG,CAAC,eAAe,EAAE,CAAC;IACvC,MAAM,SAAS,GAAG,QAAQ,CAAC,KAAK,EAAE,CAAC;IAEnC,+CAA+C;IAC/C,MAAM,cAAc,GAAG,SAAS,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC,CAAC;IACjF,MAAM,MAAM,GAAG,MAAM,CAAC,YAAY,CAAC;IACnC,2EAA2E;IAC3E,4EAA4E;IAC5E,IAAI,MAAM,CAAC,QAAQ,KAAK,EAAE,EAAE,CAAC;QAC3B,MAAM,IAAI,iCAAqB,CAC7B,wBAAwB,MAAM,CAAC,QAAQ,uDAAuD;YAC5F,gFAAgF,CACnF,CAAC;IACJ,CAAC;IACD,MAAM,YAAY,GAAG,4BAA4B,CAC/C,SAAS,EACT,YAAY,EACZ,cAAc,EACd;QACE,IAAI,EAAE,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC,OAAO,EAAE;QAC/C,KAAK,EAAE,MAAM,CAAC,WAAW;QACzB,QAAQ,EAAE,UAAU;QACpB,MAAM,EAAE,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE,KAAK,CAAC;KAC1C,CACF,CAAC;IAEF,MAAM,QAAQ,GAAW,CAAC,GAAG,SAAS,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;IACzD,6EAA6E;IAC7E,qEAAqE;IACrE,IAAA,mCAAwB,EACtB,QAAQ,EACR,sBAAW,CAAC,OAAO,CAAC,YAAY,EAAE,YAAY,CAAC,CAAC,IAAI,EACpD,SAAS,CAAC,GAAG,EACb,qBAAqB,CACtB,CAAC;IACF,MAAM,EAAE,QAAQ,EAAE,IAAI,EAAE,GAAG,IAAA,+BAAoB,EAC7C,YAAY,EACZ,MAAM,CAAC,GAAG,EACV,QAAQ,EACR,YAAY,CACb,CAAC;IAEF,OAAO;QACL,QAAQ;QACR,IAAI;QACJ,GAAG,EAAE,SAAS,CAAC,GAAG;QAClB,eAAe,EAAE,QAAQ,CAAC,kBAAkB,EAAE;QAC9C,UAAU,EAAE,QAAQ,CAAC,MAAM;QAC3B,YAAY,EAAE,SAAS,CAAC,YAAY;KACrC,CAAC;AACJ,CAAC"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/currency/index.ts"],"names":[],"mappings":";AAAA;;;;;;;;;;GAUG;;;;;;AA2BH,wCAgJC;AAzKD,qCAAqC;AACrC,6CAAsE;AAA7D,+GAAA,gBAAgB,OAAA;AAAE,kHAAA,mBAAmB,OAAA;AAG9C,8CAA4E;AAC5E,6EAAuE;AACvE,kDAAuB;AACvB,oDAAuG;AAEvG,kDAAsH;AACtH,+CAAwE;AACxE,gDAAiD;AACjD,mDAAiF;AACjF,iDAAkD;AAClD,+CAA+C;AAC/C,4CAAsE;AAGtE,MAAM,EAAE,4BAA4B,EAAE,GAAG,mBAAQ,CAAC;AAElD;;;;GAIG;AACH,SAAgB,cAAc,CAC5B,MAA4B,EAC5B,OAAgB;IAEhB,8EAA8E;IAC9E,mDAAmD;IACnD,MAAM,QAAQ,GAAG,IAAA,sBAAW,EAAC,MAAM,CAAC,GAAG,CAAC,CAAC;IACzC,IAAI,CAAC,QAAQ,CAAC,KAAK,EAAE,CAAC;QACpB,MAAM,IAAI,2BAAe,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;IAC5C,CAAC;IACD,IAAI,CAAC,MAAM,CAAC,WAAW,EAAE,CAAC;QACxB,MAAM,IAAI,iCAAqB,CAAC,yBAAyB,CAAC,CAAC;IAC7D,CAAC;IACD,IAAI,CAAC,MAAM,CAAC,KAAK,IAAI,MAAM,CAAC,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC/C,MAAM,IAAI,iCAAqB,CAAC,uCAAuC,CAAC,CAAC;IAC3E,CAAC;IACD,IAAI,CAAC,MAAM,CAAC,iBAAiB,EAAE,CAAC;QAC9B,MAAM,IAAI,iCAAqB,CAAC,+BAA+B,CAAC,CAAC;IACnE,CAAC;IAED,MAAM,YAAY,GAAG,IAAA,qBAAU,EAAC,OAAO,KAAK,SAAS,CAAC,CAAC;IACvD,MAAM,aAAa,GAAG,yBAAc,CAAC,OAAO,CAAC,CAAC;IAC9C,MAAM,QAAQ,GAAG,aAAa,CAAC,OAAO,CAAC;IACvC,MAAM,gBAAgB,GAAG,MAAM,CAAC,gBAAgB,IAAI,EAAE,CAAC;IAEvD,6CAA6C;IAC7C,MAAM,QAAQ,GAAG,IAAI,sCAAQ,EAAE,CAAC;IAChC,QAAQ,CAAC,UAAU,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,WAAW,EAAE,KAAK,CAAC,CAAC,CAAC;IAE5D,2EAA2E;IAC3E,yEAAyE;IACzE,yEAAyE;IACzE,IAAA,6BAAkB,EAAC,MAAM,CAAC,GAAG,EAAE,QAAQ,EAAE,YAAY,CAAC,CAAC;IAEvD,IAAI,CAAC,QAAQ,CAAC,iBAAiB,EAAE,EAAE,CAAC;QAClC,MAAM,YAAY,GAAG,QAAQ,CAAC,KAAK,CAAC,QAAQ,EAAE,CAAC;QAC/C,QAAQ,CAAC,KAAK,GAAG,IAAI,eAAE,CAAC,YAAY,GAAG,uCAA4B,CAAC,CAAC;IACvE,CAAC;IAED,MAAM,cAAc,GAAG,4CAAc,CAAC,YAAY,CAAC,QAAQ,CAAC,CAAC;IAC7D,MAAM,oBAAoB,GAAG,cAAc,CAAC,QAAQ,EAAE,CAAC;IACvD,MAAM,iBAAiB,GAAG,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,iBAAiB,EAAE,KAAK,CAAC,CAAC;IAEvE,0EAA0E;IAC1E,4EAA4E;IAC5E,2BAA2B;IAC3B,MAAM,SAAS,GAAG,IAAA,sBAAW,EAC3B,MAAM,CAAC,KAAK,EACZ,gBAAgB,EAChB,IAAI,GAAG,EAAE,EACT,CAAC,EACD,QAAQ,EACR,SAAS,EACT,IAAI,EACJ,oBAAoB,CAAC,MAAM,GAAG,iBAAiB,CAAC,MAAM,CACvD,CAAC;IAEF,8EAA8E;IAC9E,2EAA2E;IAC3E,2DAA2D;IAC3D,IAAA,kCAAuB,EACrB,SAAS,CAAC,QAAQ,EAClB,IAAI,GAAG,EAAE,EACT,IAAI,GAAG,EAAE,EACT,QAAQ,EACR,qBAAqB,CACtB,CAAC;IAEF,oBAAoB;IACpB,MAAM,GAAG,GAAG,IAAI,6BAAkB,CAAC,YAAY,CAAC,CAAC;IACjD,GAAG,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC;IAClB,GAAG,CAAC,eAAe,CAAC,IAAA,8BAAmB,EAAC,MAAM,CAAC,YAAY,CAAC,CAAC,CAAC;IAC9D,GAAG,CAAC,iBAAiB,CAAC,2BAAgB,CAAC,CAAC;IAExC,KAAK,MAAM,IAAI,IAAI,SAAS,CAAC,QAAQ,EAAE,CAAC;QACtC,GAAG,CAAC,QAAQ,CACV,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC,OAAO,EAAE,EACvC,IAAI,CAAC,WAAW,EAChB,UAAU,EACV,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,KAAK,CAAC,CAChC,CAAC;IACJ,CAAC;IAED,GAAG,CAAC,SAAS,CAAC,oBAAoB,EAAE,CAAC,CAAC,CAAC;IACvC,GAAG,CAAC,SAAS,CAAC,iBAAiB,EAAE,IAAA,uBAAY,EAAC,gBAAgB,CAAC,CAAC,CAAC;IAEjE,IAAI,SAAS,CAAC,YAAY,GAAG,EAAE,EAAE,CAAC;QAChC,IAAI,MAAM,CAAC,aAAa,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;YACzC,GAAG,CAAC,SAAS,CAAC,IAAA,gCAAqB,EAAC,IAAA,yBAAa,EAAC,MAAM,CAAC,aAAa,EAAE,eAAe,CAAC,CAAC,EAAE,IAAA,uBAAY,EAAC,SAAS,CAAC,YAAY,CAAC,CAAC,CAAC;QACnI,CAAC;aAAM,CAAC;YACN,GAAG,CAAC,SAAS,CAAC,MAAM,CAAC,aAAa,EAAE,IAAA,uBAAY,EAAC,SAAS,CAAC,YAAY,CAAC,CAAC,CAAC;QAC5E,CAAC;IACH,CAAC;IAED,MAAM,QAAQ,GAAG,GAAG,CAAC,eAAe,EAAE,CAAC;IACvC,MAAM,SAAS,GAAG,QAAQ,CAAC,KAAK,EAAE,CAAC;IAEnC,+CAA+C;IAC/C,MAAM,cAAc,GAAG,SAAS,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC,CAAC;IACjF,MAAM,MAAM,GAAG,MAAM,CAAC,YAAY,CAAC;IACnC,2EAA2E;IAC3E,4EAA4E;IAC5E,IAAI,MAAM,CAAC,QAAQ,KAAK,EAAE,EAAE,CAAC;QAC3B,MAAM,IAAI,iCAAqB,CAC7B,wBAAwB,MAAM,CAAC,QAAQ,uDAAuD;YAC5F,gFAAgF,CACnF,CAAC;IACJ,CAAC;IACD,MAAM,YAAY,GAAG,4BAA4B,CAC/C,SAAS,EACT,YAAY,EACZ,cAAc,EACd;QACE,IAAI,EAAE,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC,OAAO,EAAE;QAC/C,KAAK,EAAE,MAAM,CAAC,WAAW;QACzB,QAAQ,EAAE,UAAU;QACpB,MAAM,EAAE,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE,KAAK,CAAC;KAC1C,CACF,CAAC;IAEF,MAAM,QAAQ,GAAW,CAAC,GAAG,SAAS,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;IACzD,6EAA6E;IAC7E,qEAAqE;IACrE,IAAA,mCAAwB,EACtB,QAAQ,EACR,sBAAW,CAAC,OAAO,CAAC,YAAY,EAAE,YAAY,CAAC,CAAC,IAAI,EACpD,SAAS,CAAC,GAAG,EACb,qBAAqB,CACtB,CAAC;IACF,MAAM,EAAE,QAAQ,EAAE,IAAI,EAAE,GAAG,IAAA,+BAAoB,EAC7C,YAAY,EACZ,MAAM,CAAC,GAAG,EACV,QAAQ,EACR,YAAY,CACb,CAAC;IAEF,OAAO;QACL,QAAQ;QACR,IAAI;QACJ,GAAG,EAAE,SAAS,CAAC,GAAG;QAClB,eAAe,EAAE,QAAQ,CAAC,kBAAkB,EAAE;QAC9C,UAAU,EAAE,QAAQ,CAAC,MAAM;QAC3B,YAAY,EAAE,SAAS,CAAC,YAAY;KACrC,CAAC;AACJ,CAAC"}

package/dist/identity/index.d.ts

@@ -11,6 +11,7 @@ import { Identity } from 'verus-typescript-primitives';
 import { nameAndParentAddrToIAddr } from 'verus-typescript-primitives';
 import type { Network } from '../constants/index.js';
 import { type VerusNetwork } from '../signing/index.js';
+import { type IAddress, type RAddress, type Address } from '../core/brands.js';
 import type { CreateCommitmentParams, CreateCommitmentResult, RegisterIdentityParams, RegisterIdentityResult, UpdateIdentityParams, UpdateIdentityResult } from '../types/index.js';
 export { nameAndParentAddrToIAddr };
 /**
@@ -55,11 +56,11 @@ export declare function serializeCommitmentHash(hash: Buffer): Buffer;
 /**
  * Build the commitment output script
  */
-export declare function buildCommitmentScript(commitmentHashBuf: Buffer, controlAddress: string): Buffer;
+export declare function buildCommitmentScript(commitmentHashBuf: Buffer, controlAddress: RAddress): Buffer;
 /**
  * Build the name reservation output script
  */
-export declare function buildReservationScript(newIdentityIAddress: string, serializedReservation: Buffer, isAdvanced?: boolean): Buffer;
+export declare function buildReservationScript(newIdentityIAddress: IAddress, serializedReservation: Buffer, isAdvanced?: boolean): Buffer;
 /**
  * Build an identity definition output script from an Identity object
  */
@@ -75,7 +76,14 @@ export declare function isVRSCParent(parentIAddress: string | undefined, network
 /**
  * Build the full commitment data needed for Step 1 of identity creation
  */
-export declare function prepareNameCommitment(name: string, controlAddress: string, referralIAddress?: string, parentIAddress?: string, network?: Network): {
+export declare function prepareNameCommitment(name: string, controlAddress: string, referralIAddress?: string, parentIAddress?: string, network?: Network, 
+/**
+ * Explicit 32-byte salt. Omit for a fresh random salt (the normal path); pass
+ * a fixed value only to make the commitment deterministic for golden/diff
+ * tests. A reused salt on a real registration is a privacy leak, so callers
+ * outside tests must not set it.
+ */
+salt?: Buffer): {
     salt: Buffer;
     serializedReservation: Buffer;
     commitmentHash: Buffer;
@@ -84,7 +92,14 @@ export declare function prepareNameCommitment(name: string, controlAddress: stri
     identityAddress: string;
 };
 /**
- * Build a P2ID output script (pay to identity)
+ * Build a pay-to-identity output script for an i-address.
+ *
+ * Alias of {@link identityPaymentScript}. This previously emitted the bare
+ * 26-byte template `OP_DUP OP_HASH160 <idhash> OP_EQUALVERIFY OP_CHECKSIG
+ * OP_CHECKCRYPTOCONDITION`, which is NOT a valid Verus scriptPubKey — a Verus
+ * P2ID is a CryptoCondition (OptCCParams) output. Funds sent to the old
+ * template would have gone to a non-standard script the daemon does not treat
+ * as identity-spendable. It now delegates to the chain-verified CC builder.
  */
 export declare function buildP2IDScript(iAddress: string): Buffer;
 /**
@@ -93,11 +108,13 @@ export declare function buildP2IDScript(iAddress: string): Buffer;
  * an identity (verified against on-chain P2ID outputs). Use this for change
  * or payment outputs to an i-address.
  */
-export declare function identityPaymentScript(iAddress: string): Buffer;
+export declare function identityPaymentScript(iAddress: IAddress): Buffer;
 /**
- * Build a CC referral payment output script
+ * Build a CC referral payment output script. Requires an already-parsed
+ * i-address: IdentityID.fromAddress launders the version byte, so accepting a
+ * raw string here is exactly the hole that let a wrong-kind address through.
  */
-export declare function buildReferralPaymentScript(iAddress: string): Buffer;
+export declare function buildReferralPaymentScript(iAddress: IAddress): Buffer;
 /**
  * Calculate registration fee breakdown
  */
@@ -111,12 +128,12 @@ export declare function calculateRegistrationFees(hasReferral: boolean, totalFee
  */
 export declare function createIdentityObject(params: {
     name: string;
-    primaryAddresses: string[];
+    primaryAddresses: RAddress[];
     minSigs?: number;
-    revocationAuthority: string;
-    recoveryAuthority: string;
-    parentIAddress: string;
-    systemId: string;
+    revocationAuthority: IAddress;
+    recoveryAuthority: IAddress;
+    parentIAddress: IAddress;
+    systemId: IAddress;
 }): Identity;
 /**
  * Build the parent-currency registration-fee output for a sub-ID.
@@ -144,7 +161,7 @@ export declare function buildRegistrationFeeOutput(parentCurrencyId: string, fee
 /**
  * Build a token change output (EVAL_RESERVE_OUTPUT)
  */
-export declare function buildTokenChangeOutput(changeAddress: string, currencyChanges: Map<string, bigint>): {
+export declare function buildTokenChangeOutput(changeAddress: Address, currencyChanges: Map<string, bigint>): {
     script: Buffer;
     nativeValue: bigint;
 };

package/dist/identity/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/identity/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAIH,OAAO,EAQL,QAAQ,EAGT,MAAM,6BAA6B,CAAC;AAErC,OAAO,EACL,wBAAwB,EAEzB,MAAM,6BAA6B,CAAC;AAUrC,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,uBAAuB,CAAC;AAErD,OAAO,EAAmF,KAAK,YAAY,EAAE,MAAM,qBAAqB,CAAC;AAIzI,OAAO,KAAK,EAEV,sBAAsB,EACtB,sBAAsB,EACtB,sBAAsB,EACtB,sBAAsB,EACtB,oBAAoB,EACpB,oBAAoB,EACrB,MAAM,mBAAmB,CAAC;AAK3B,OAAO,EAAE,wBAAwB,EAAE,CAAC;AAapC;;;;;;;;;GASG;AACH,wBAAgB,oBAAoB,CAAC,OAAO,EAAE,MAAM,EAAE,eAAe,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,IAAI,CAalG;AAED;;;;;;GAMG;AACH,wBAAgB,kBAAkB,CAAC,GAAG,EAAE,MAAM,EAAE,QAAQ,EAAE,QAAQ,EAAE,OAAO,EAAE,YAAY,GAAG,IAAI,CAS/F;AA4BD;;GAEG;AACH,wBAAgB,YAAY,IAAI,MAAM,CAErC;AAED;;GAEG;AACH,wBAAgB,wBAAwB,CACtC,IAAI,EAAE,MAAM,EACZ,YAAY,EAAE,MAAM,EACpB,IAAI,EAAE,MAAM,GACX,MAAM,CAIR;AAED;;GAEG;AACH,wBAAgB,gCAAgC,CAC9C,OAAO,EAAE,MAAM,EACf,IAAI,EAAE,MAAM,EACZ,UAAU,EAAE,MAAM,EAClB,YAAY,EAAE,MAAM,EACpB,IAAI,EAAE,MAAM,GACX,MAAM,CAMR;AAED;;GAEG;AACH,wBAAgB,uBAAuB,CAAC,qBAAqB,EAAE,MAAM,GAAG,MAAM,CAE7E;AAED;;GAEG;AACH,wBAAgB,uBAAuB,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAO5D;AAED;;GAEG;AACH,wBAAgB,qBAAqB,CACnC,iBAAiB,EAAE,MAAM,EACzB,cAAc,EAAE,MAAM,GACrB,MAAM,CAuBR;AAED;;GAEG;AACH,wBAAgB,sBAAsB,CACpC,mBAAmB,EAAE,MAAM,EAC3B,qBAAqB,EAAE,MAAM,EAC7B,UAAU,GAAE,OAAe,GAC1B,MAAM,CA2BR;AAED;;GAEG;AACH,wBAAgB,mBAAmB,CAAC,QAAQ,EAAE,QAAQ,GAAG,MAAM,CAG9D;AAED;;GAEG;AACH,wBAAgB,qBAAqB,CACnC,IAAI,EAAE,MAAM,EACZ,cAAc,CAAC,EAAE,MAAM,GACtB,MAAM,CAER;AAED;;GAEG;AACH,wBAAgB,YAAY,CAC1B,cAAc,EAAE,MAAM,GAAG,SAAS,EAClC,OAAO,GAAE,OAAmB,GAC3B,OAAO,CAIT;AAED;;GAEG;AACH,wBAAgB,qBAAqB,CACnC,IAAI,EAAE,MAAM,EACZ,cAAc,EAAE,MAAM,EACtB,gBAAgB,CAAC,EAAE,MAAM,EACzB,cAAc,CAAC,EAAE,MAAM,EACvB,OAAO,GAAE,OAAmB,GAC3B;IACD,IAAI,EAAE,MAAM,CAAC;IACb,qBAAqB,EAAE,MAAM,CAAC;IAC9B,cAAc,EAAE,MAAM,CAAC;IACvB,wBAAwB,EAAE,MAAM,CAAC;IACjC,gBAAgB,EAAE,MAAM,CAAC;IACzB,eAAe,EAAE,MAAM,CAAC;CACzB,CAgDA;AAED;;GAEG;AACH,wBAAgB,eAAe,CAAC,QAAQ,EAAE,MAAM,GAAG,MAAM,CAUxD;AAED;;;;;GAKG;AACH,wBAAgB,qBAAqB,CAAC,QAAQ,EAAE,MAAM,GAAG,MAAM,CAE9D;AAED;;GAEG;AACH,wBAAgB,0BAA0B,CAAC,QAAQ,EAAE,MAAM,GAAG,MAAM,CAyBnE;AAED;;GAEG;AACH,wBAAgB,yBAAyB,CACvC,WAAW,EAAE,OAAO,EACpB,QAAQ,GAAE,MAAiC,EAC3C,cAAc,GAAE,MAAgC,GAC/C;IACD,SAAS,EAAE,MAAM,CAAC;IAClB,cAAc,EAAE,MAAM,CAAC;IACvB,aAAa,EAAE,MAAM,CAAC;CACvB,CAUA;AAED;;GAEG;AACH,wBAAgB,oBAAoB,CAAC,MAAM,EAAE;IAC3C,IAAI,EAAE,MAAM,CAAC;IACb,gBAAgB,EAAE,MAAM,EAAE,CAAC;IAC3B,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,mBAAmB,EAAE,MAAM,CAAC;IAC5B,iBAAiB,EAAE,MAAM,CAAC;IAC1B,cAAc,EAAE,MAAM,CAAC;IACvB,QAAQ,EAAE,MAAM,CAAC;CAClB,GAAG,QAAQ,CAwBX;AAED;;;;;;;;;;;;;;;;;;GAkBG;AACH,wBAAgB,0BAA0B,CACxC,gBAAgB,EAAE,MAAM,EACxB,SAAS,EAAE,MAAM,EACjB,QAAQ,EAAE,MAAM,EAChB,eAAe,EAAE,MAAM,GACtB;IAAE,MAAM,EAAE,MAAM,CAAC;IAAC,WAAW,EAAE,MAAM,CAAA;CAAE,CAGzC;AAED;;GAEG;AACH,wBAAgB,sBAAsB,CACpC,aAAa,EAAE,MAAM,EACrB,eAAe,EAAE,GAAG,CAAC,MAAM,EAAE,MAAM,CAAC,GACnC;IAAE,MAAM,EAAE,MAAM,CAAC;IAAC,WAAW,EAAE,MAAM,CAAA;CAAE,CAoDzC;AA2BD;;GAEG;AACH,wBAAgB,sBAAsB,CACpC,MAAM,EAAE,sBAAsB,EAC9B,OAAO,EAAE,OAAO,GACf,sBAAsB,CAoFxB;AAED;;GAEG;AACH,wBAAgB,wBAAwB,CACtC,MAAM,EAAE,sBAAsB,EAC9B,OAAO,EAAE,OAAO,GACf,sBAAsB,CAyCxB;AA4RD;;GAEG;AACH,wBAAgB,0BAA0B,CACxC,MAAM,EAAE,oBAAoB,EAC5B,OAAO,EAAE,OAAO,EAChB,SAAS,GAAE,QAAQ,GAAG,QAAQ,GAAG,SAAS,GAAG,MAAM,GAAG,QAAmB,EACzE,gBAAgB,CAAC,EAAE;IAAE,WAAW,CAAC,EAAE,MAAM,CAAA;CAAE,GAC1C,oBAAoB,CAsPtB"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/identity/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAIH,OAAO,EAQL,QAAQ,EAGT,MAAM,6BAA6B,CAAC;AAErC,OAAO,EACL,wBAAwB,EAEzB,MAAM,6BAA6B,CAAC;AAUrC,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,uBAAuB,CAAC;AAErD,OAAO,EAAmF,KAAK,YAAY,EAAE,MAAM,qBAAqB,CAAC;AAEzI,OAAO,EAAsE,KAAK,QAAQ,EAAE,KAAK,QAAQ,EAAE,KAAK,OAAO,EAAE,MAAM,mBAAmB,CAAC;AAGnJ,OAAO,KAAK,EAEV,sBAAsB,EACtB,sBAAsB,EACtB,sBAAsB,EACtB,sBAAsB,EACtB,oBAAoB,EACpB,oBAAoB,EACrB,MAAM,mBAAmB,CAAC;AAK3B,OAAO,EAAE,wBAAwB,EAAE,CAAC;AAapC;;;;;;;;;GASG;AACH,wBAAgB,oBAAoB,CAAC,OAAO,EAAE,MAAM,EAAE,eAAe,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,IAAI,CAalG;AAED;;;;;;GAMG;AACH,wBAAgB,kBAAkB,CAAC,GAAG,EAAE,MAAM,EAAE,QAAQ,EAAE,QAAQ,EAAE,OAAO,EAAE,YAAY,GAAG,IAAI,CAS/F;AA4BD;;GAEG;AACH,wBAAgB,YAAY,IAAI,MAAM,CAErC;AAED;;GAEG;AACH,wBAAgB,wBAAwB,CACtC,IAAI,EAAE,MAAM,EACZ,YAAY,EAAE,MAAM,EACpB,IAAI,EAAE,MAAM,GACX,MAAM,CAIR;AAED;;GAEG;AACH,wBAAgB,gCAAgC,CAC9C,OAAO,EAAE,MAAM,EACf,IAAI,EAAE,MAAM,EACZ,UAAU,EAAE,MAAM,EAClB,YAAY,EAAE,MAAM,EACpB,IAAI,EAAE,MAAM,GACX,MAAM,CAMR;AAED;;GAEG;AACH,wBAAgB,uBAAuB,CAAC,qBAAqB,EAAE,MAAM,GAAG,MAAM,CAE7E;AAED;;GAEG;AACH,wBAAgB,uBAAuB,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAO5D;AAED;;GAEG;AACH,wBAAgB,qBAAqB,CACnC,iBAAiB,EAAE,MAAM,EACzB,cAAc,EAAE,QAAQ,GACvB,MAAM,CAuBR;AAED;;GAEG;AACH,wBAAgB,sBAAsB,CACpC,mBAAmB,EAAE,QAAQ,EAC7B,qBAAqB,EAAE,MAAM,EAC7B,UAAU,GAAE,OAAe,GAC1B,MAAM,CA2BR;AAED;;GAEG;AACH,wBAAgB,mBAAmB,CAAC,QAAQ,EAAE,QAAQ,GAAG,MAAM,CAG9D;AAED;;GAEG;AACH,wBAAgB,qBAAqB,CACnC,IAAI,EAAE,MAAM,EACZ,cAAc,CAAC,EAAE,MAAM,GACtB,MAAM,CAUR;AAED;;GAEG;AACH,wBAAgB,YAAY,CAC1B,cAAc,EAAE,MAAM,GAAG,SAAS,EAClC,OAAO,GAAE,OAAmB,GAC3B,OAAO,CAIT;AAED;;GAEG;AACH,wBAAgB,qBAAqB,CACnC,IAAI,EAAE,MAAM,EACZ,cAAc,EAAE,MAAM,EACtB,gBAAgB,CAAC,EAAE,MAAM,EACzB,cAAc,CAAC,EAAE,MAAM,EACvB,OAAO,GAAE,OAAmB;AAC5B;;;;;GAKG;AACH,IAAI,GAAE,MAAuB,GAC5B;IACD,IAAI,EAAE,MAAM,CAAC;IACb,qBAAqB,EAAE,MAAM,CAAC;IAC9B,cAAc,EAAE,MAAM,CAAC;IACvB,wBAAwB,EAAE,MAAM,CAAC;IACjC,gBAAgB,EAAE,MAAM,CAAC;IACzB,eAAe,EAAE,MAAM,CAAC;CACzB,CA+CA;AAED;;;;;;;;;GASG;AACH,wBAAgB,eAAe,CAAC,QAAQ,EAAE,MAAM,GAAG,MAAM,CAExD;AAED;;;;;GAKG;AACH,wBAAgB,qBAAqB,CAAC,QAAQ,EAAE,QAAQ,GAAG,MAAM,CAEhE;AAED;;;;GAIG;AACH,wBAAgB,0BAA0B,CAAC,QAAQ,EAAE,QAAQ,GAAG,MAAM,CAyBrE;AAED;;GAEG;AACH,wBAAgB,yBAAyB,CACvC,WAAW,EAAE,OAAO,EACpB,QAAQ,GAAE,MAAiC,EAC3C,cAAc,GAAE,MAAgC,GAC/C;IACD,SAAS,EAAE,MAAM,CAAC;IAClB,cAAc,EAAE,MAAM,CAAC;IACvB,aAAa,EAAE,MAAM,CAAC;CACvB,CAUA;AAED;;GAEG;AACH,wBAAgB,oBAAoB,CAAC,MAAM,EAAE;IAC3C,IAAI,EAAE,MAAM,CAAC;IACb,gBAAgB,EAAE,QAAQ,EAAE,CAAC;IAC7B,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,mBAAmB,EAAE,QAAQ,CAAC;IAC9B,iBAAiB,EAAE,QAAQ,CAAC;IAC5B,cAAc,EAAE,QAAQ,CAAC;IACzB,QAAQ,EAAE,QAAQ,CAAC;CACpB,GAAG,QAAQ,CAsBX;AAED;;;;;;;;;;;;;;;;;;GAkBG;AACH,wBAAgB,0BAA0B,CACxC,gBAAgB,EAAE,MAAM,EACxB,SAAS,EAAE,MAAM,EACjB,QAAQ,EAAE,MAAM,EAChB,eAAe,EAAE,MAAM,GACtB;IAAE,MAAM,EAAE,MAAM,CAAC;IAAC,WAAW,EAAE,MAAM,CAAA;CAAE,CAGzC;AAED;;GAEG;AACH,wBAAgB,sBAAsB,CACpC,aAAa,EAAE,OAAO,EACtB,eAAe,EAAE,GAAG,CAAC,MAAM,EAAE,MAAM,CAAC,GACnC;IAAE,MAAM,EAAE,MAAM,CAAC;IAAC,WAAW,EAAE,MAAM,CAAA;CAAE,CAkDzC;AA2BD;;GAEG;AACH,wBAAgB,sBAAsB,CACpC,MAAM,EAAE,sBAAsB,EAC9B,OAAO,EAAE,OAAO,GACf,sBAAsB,CAuGxB;AAED;;GAEG;AACH,wBAAgB,wBAAwB,CACtC,MAAM,EAAE,sBAAsB,EAC9B,OAAO,EAAE,OAAO,GACf,sBAAsB,CAyCxB;AA8TD;;GAEG;AACH,wBAAgB,0BAA0B,CACxC,MAAM,EAAE,oBAAoB,EAC5B,OAAO,EAAE,OAAO,EAChB,SAAS,GAAE,QAAQ,GAAG,QAAQ,GAAG,SAAS,GAAG,MAAM,GAAG,QAAmB,EACzE,gBAAgB,CAAC,EAAE;IAAE,WAAW,CAAC,EAAE,MAAM,CAAA;CAAE,GAC1C,oBAAoB,CAiQtB"}

package/dist/identity/index.js

@@ -47,6 +47,7 @@ const index_js_1 = require("../constants/index.js");
 const index_js_2 = require("../utils/index.js");
 const index_js_3 = require("../signing/index.js");
 const index_js_4 = require("../utxo/index.js");
+const brands_js_1 = require("../core/brands.js");
 const errors_js_1 = require("../errors.js");
 const index_js_5 = require("../keys/index.js");
 const { createUnfundedIdentityUpdate, completeFundedIdentityUpdate } = utxo_lib_1.smarttxs;
@@ -214,6 +215,14 @@ function buildIdentityScript(identity) {
  * Derive the identity i-address from a name and optional parent
  */
 function deriveIdentityAddress(name, parentIAddress) {
+    // nameAndParentAddrToIAddr hashes fromBase58Check(parent).hash regardless of
+    // version, so an R-address parent is laundered into an identity-versioned hash
+    // that names no real currency. The derived i-address then looks valid but can
+    // never be registered — funds paid to it (pay-to-unregistered-identity) burn,
+    // and a name commitment built with it wastes its fee. Require an i-address.
+    if (parentIAddress) {
+        assertAddressVersion(parentIAddress, index_js_1.I_ADDR_VERSION, 'parent');
+    }
     return (0, verus_typescript_primitives_3.nameAndParentAddrToIAddr)(name, parentIAddress || undefined);
 }
 /**
@@ -228,8 +237,14 @@ function isVRSCParent(parentIAddress, network = 'mainnet') {
 /**
  * Build the full commitment data needed for Step 1 of identity creation
  */
-function prepareNameCommitment(name, controlAddress, referralIAddress, parentIAddress, network = 'mainnet') {
-    const salt = generateSalt();
+function prepareNameCommitment(name, controlAddress, referralIAddress, parentIAddress, network = 'mainnet', 
+/**
+ * Explicit 32-byte salt. Omit for a fresh random salt (the normal path); pass
+ * a fixed value only to make the commitment deterministic for golden/diff
+ * tests. A reused salt on a real registration is a privacy leak, so callers
+ * outside tests must not set it.
+ */
+salt = generateSalt()) {
     const systemId = index_js_1.NETWORK_CONFIG[network].chainId;
     // iAddressToHash discards the version byte, so an R-address referral would be
     // laundered into a hash that names no identity (the daemon rejects the
@@ -256,7 +271,7 @@ function prepareNameCommitment(name, controlAddress, referralIAddress, parentIAd
     }
     const commitmentHash = calculateCommitmentHash(serializedReservation);
     const serializedCommitmentHash = serializeCommitmentHash(commitmentHash);
-    const commitmentScript = buildCommitmentScript(commitmentHash, controlAddress);
+    const commitmentScript = buildCommitmentScript(commitmentHash, (0, brands_js_1.parseRAddress)(controlAddress, 'controlAddress'));
     return {
         salt,
         serializedReservation,
@@ -267,18 +282,17 @@ function prepareNameCommitment(name, controlAddress, referralIAddress, parentIAd
     };
 }
 /**
- * Build a P2ID output script (pay to identity)
+ * Build a pay-to-identity output script for an i-address.
+ *
+ * Alias of {@link identityPaymentScript}. This previously emitted the bare
+ * 26-byte template `OP_DUP OP_HASH160 <idhash> OP_EQUALVERIFY OP_CHECKSIG
+ * OP_CHECKCRYPTOCONDITION`, which is NOT a valid Verus scriptPubKey — a Verus
+ * P2ID is a CryptoCondition (OptCCParams) output. Funds sent to the old
+ * template would have gone to a non-standard script the daemon does not treat
+ * as identity-spendable. It now delegates to the chain-verified CC builder.
  */
 function buildP2IDScript(iAddress) {
-    const idHash = (0, index_js_2.iAddressToHash)(iAddress);
-    return utxo_lib_1.script.compile([
-        utxo_lib_1.opcodes.OP_DUP,
-        utxo_lib_1.opcodes.OP_HASH160,
-        idHash,
-        utxo_lib_1.opcodes.OP_EQUALVERIFY,
-        utxo_lib_1.opcodes.OP_CHECKSIG,
-        utxo_lib_1.opcodes.OP_CHECKCRYPTOCONDITION,
-    ]);
+    return identityPaymentScript((0, brands_js_1.parseIAddress)(iAddress, 'iAddress'));
 }
 /**
  * The standard pay-to-identity output script (CC EVAL_NONE 1-of-1 to an
@@ -290,7 +304,9 @@ function identityPaymentScript(iAddress) {
     return buildReferralPaymentScript(iAddress);
 }
 /**
- * Build a CC referral payment output script
+ * Build a CC referral payment output script. Requires an already-parsed
+ * i-address: IdentityID.fromAddress launders the version byte, so accepting a
+ * raw string here is exactly the hole that let a wrong-kind address through.
  */
 function buildReferralPaymentScript(iAddress) {
     const identityDest = new verus_typescript_primitives_1.TxDestination(verus_typescript_primitives_1.IdentityID.fromAddress(iAddress));
@@ -331,9 +347,9 @@ function calculateRegistrationFees(hasReferral, totalFee = index_js_1.DEFAULT_RE
  * Build a new Identity object for registration
  */
 function createIdentityObject(params) {
-    params.primaryAddresses.forEach((addr, i) => assertAddressVersion(addr, index_js_1.PUBKEY_HASH_PREFIX, `primaryAddresses[${i}]`));
-    assertAddressVersion(params.revocationAuthority, index_js_1.I_ADDR_VERSION, 'revocationAuthority');
-    assertAddressVersion(params.recoveryAuthority, index_js_1.I_ADDR_VERSION, 'recoveryAuthority');
+    // No assertAddressVersion here: the brands guarantee the version bytes. An
+    // R-address primary or an i-address authority is now a compile error at the
+    // call site, where the raw string is parsed.
     validateMinSigs(params.minSigs ?? 1, params.primaryAddresses.length);
     const primaryKeys = params.primaryAddresses.map(addr => verus_typescript_primitives_1.KeyID.fromAddress(addr));
     const identity = new verus_typescript_primitives_1.Identity({
@@ -372,27 +388,25 @@ function createIdentityObject(params) {
  */
 function buildRegistrationFeeOutput(parentCurrencyId, feeAmount, systemId, _controlAddress) {
     void systemId;
-    return buildTokenChangeOutput(parentCurrencyId, new Map([[parentCurrencyId, feeAmount]]));
+    return buildTokenChangeOutput((0, brands_js_1.parseIAddress)(parentCurrencyId, 'parentCurrencyId'), new Map([[parentCurrencyId, feeAmount]]));
 }
 /**
  * Build a token change output (EVAL_RESERVE_OUTPUT)
  */
 function buildTokenChangeOutput(changeAddress, currencyChanges) {
-    // KeyID.fromAddress launders any address to the R-address form, so token
-    // change to an i-address changeAddress was paid to a transparent script
-    // nobody controls (burned on paths with no funded-transfer validator). Build
-    // a pay-to-identity destination for i-addresses, and reject anything that is
-    // neither an R- nor an i-address rather than silently mis-routing it.
-    const version = (0, verus_typescript_primitives_3.fromBase58Check)(changeAddress).version;
+    // The brand guarantees the version; narrow it to pick the destination form.
+    // A pay-to-identity destination for i-addresses (KeyID.fromAddress would
+    // launder an i-address to a transparent script nobody controls), a KeyID for
+    // R-addresses, and reject a P2SH address (not a valid reserve destination).
     let destination;
-    if (version === index_js_1.I_ADDR_VERSION) {
+    if ((0, brands_js_1.isIAddress)(changeAddress)) {
         destination = new verus_typescript_primitives_1.TxDestination(verus_typescript_primitives_1.IdentityID.fromAddress(changeAddress));
     }
-    else if (version === index_js_1.PUBKEY_HASH_PREFIX) {
+    else if ((0, brands_js_1.isRAddress)(changeAddress)) {
         destination = new verus_typescript_primitives_1.TxDestination(verus_typescript_primitives_1.KeyID.fromAddress(changeAddress));
     }
     else {
-        throw new errors_js_1.TransactionBuildError(`token change address must be an R-address or identity i-address, got version ${version}: ${changeAddress}`);
+        throw new errors_js_1.TransactionBuildError(`token change address must be an R-address or identity i-address, got: ${changeAddress}`);
     }
     const valueMap = new Map();
     for (const [currency, amount] of currencyChanges) {
@@ -462,7 +476,7 @@ function buildAndSignCommitment(params, network) {
     // (KeyID.fromAddress laundered it to an uncontrollable key — permanently
     // unspendable, wasting the commitment fee). Derive it from the WIF instead.
     const controlAddress = utxo_lib_1.ECPair.fromWIF(params.wif, verusNetwork).getAddress();
-    const commitment = prepareNameCommitment(params.name, controlAddress, params.referral, params.parent, network);
+    const commitment = prepareNameCommitment(params.name, controlAddress, params.referral, params.parent, network, params.salt);
     const utxos = params.utxos;
     const selection = (0, index_js_4.selectUtxos)(utxos, 0n, new Map(), 1, networkConfig.chainId, undefined, true);
     const txb = new utxo_lib_1.TransactionBuilder(verusNetwork);
@@ -473,17 +487,29 @@ function buildAndSignCommitment(params, network) {
         txb.addInput(Buffer.from(utxo.txid, 'hex').reverse(), utxo.outputIndex, 0xffffffff, Buffer.from(utxo.script, 'hex'));
     }
     txb.addOutput(commitment.commitmentScript, 0);
-    if (selection.nativeChange > 0n) {
-        // utxo-lib's addOutput only resolves base58 R-addresses; an i-address
-        // changeAddress needs the explicit P2ID script (matching sendCurrency), or
-        // it throws an untyped "no matching Script".
-        if (params.changeAddress.startsWith('i')) {
-            txb.addOutput(identityPaymentScript(params.changeAddress), (0, index_js_2.toSafeNumber)(selection.nativeChange));
+    // If native-only UTXOs can't cover the fee, selectUtxos falls back to a
+    // token-bearing UTXO and returns its token value as currencyChanges. Emit it
+    // as a reserve-output change (bundled with the native change) — otherwise
+    // that token value is silently forfeited to the miner.
+    const hasTokenChange = selection.currencyChanges.size > 0;
+    if (hasTokenChange || selection.nativeChange > 0n) {
+        if (hasTokenChange) {
+            const tokenChangeScript = buildTokenChangeOutput((0, brands_js_1.parseAddress)(params.changeAddress, 'changeAddress'), selection.currencyChanges);
+            txb.addOutput(tokenChangeScript.script, (0, index_js_2.toSafeNumber)(selection.nativeChange));
+        }
+        else if (params.changeAddress.startsWith('i')) {
+            // utxo-lib's addOutput only resolves base58 R-addresses; an i-address
+            // changeAddress needs the explicit P2ID script (matching sendCurrency), or
+            // it throws an untyped "no matching Script".
+            txb.addOutput(identityPaymentScript((0, brands_js_1.parseIAddress)(params.changeAddress, 'changeAddress')), (0, index_js_2.toSafeNumber)(selection.nativeChange));
         }
         else {
             txb.addOutput(params.changeAddress, (0, index_js_2.toSafeNumber)(selection.nativeChange));
         }
     }
+    // No token is paid out here (the commitment output carries none), so every
+    // token in the selected inputs must return as change.
+    (0, index_js_4.assertTokenConservation)(selection.selected, new Map(), selection.currencyChanges, networkConfig.chainId, 'name commitment');
     const unsignedTx = txb.buildIncomplete();
     const { signedTx, txid } = (0, index_js_3.signTransactionSmart)(unsignedTx.toHex(), params.wif, selection.selected, verusNetwork);
     return {
@@ -522,15 +548,15 @@ function buildAndSignRegistration(params, network) {
     const identityAddress = deriveIdentityAddress(commitData.name, effectiveParent);
     const identity = createIdentityObject({
         name: commitData.name,
-        primaryAddresses: params.primaryAddresses,
+        primaryAddresses: params.primaryAddresses.map((a, i) => (0, brands_js_1.parseRAddress)(a, `primaryAddresses[${i}]`)),
         ...(params.minSigs !== undefined ? { minSigs: params.minSigs } : {}),
-        revocationAuthority: params.revocationAuthority || identityAddress,
-        recoveryAuthority: params.recoveryAuthority || identityAddress,
-        parentIAddress,
-        systemId,
+        revocationAuthority: (0, brands_js_1.parseIAddress)(params.revocationAuthority || identityAddress, 'revocationAuthority'),
+        recoveryAuthority: (0, brands_js_1.parseIAddress)(params.recoveryAuthority || identityAddress, 'recoveryAuthority'),
+        parentIAddress: (0, brands_js_1.parseIAddress)(parentIAddress, 'parentIAddress'),
+        systemId: (0, brands_js_1.parseIAddress)(systemId, 'systemId'),
     });
     const identityScript = buildIdentityScript(identity);
-    const reservationScript = buildReservationScript(identityAddress, Buffer.from(commitData.namereservationHex, 'hex'), isSubId);
+    const reservationScript = buildReservationScript((0, brands_js_1.parseIAddress)(identityAddress, 'identityAddress'), Buffer.from(commitData.namereservationHex, 'hex'), isSubId);
     if (isSubId) {
         return _buildSubIdRegistration(params, identity, identityScript, reservationScript, identityAddress, parentIAddress, systemId, verusNetwork);
     }
@@ -557,7 +583,7 @@ function _buildVrscRegistration(params, identityScript, reservationScript, ident
         }
         for (const referrerAddr of chain) {
             referralOutputs.push({
-                script: buildReferralPaymentScript(referrerAddr),
+                script: buildReferralPaymentScript((0, brands_js_1.parseIAddress)(referrerAddr, 'referralChain entry')),
                 value: fees.referralAmount,
             });
         }
@@ -587,17 +613,29 @@ function _buildVrscRegistration(params, identityScript, reservationScript, ident
         txb.addOutput(referralOut.script, (0, index_js_2.toSafeNumber)(referralOut.value));
     }
     txb.addOutput(reservationScript, 0);
-    if (selection.nativeChange > 0n) {
-        // utxo-lib's addOutput only resolves base58 R-addresses; an i-address
-        // changeAddress needs the explicit P2ID script (matching sendCurrency), or
-        // it throws an untyped "no matching Script".
-        if (params.changeAddress.startsWith('i')) {
-            txb.addOutput(identityPaymentScript(params.changeAddress), (0, index_js_2.toSafeNumber)(selection.nativeChange));
+    // Registration needs ~80-100 native, so Phase-2 selection is especially
+    // likely to exhaust pure-native UTXOs and pull a token-bearing one; return
+    // its token value as reserve-output change instead of forfeiting it to the
+    // miner. (The commitment input carries no currency.)
+    const hasTokenChange = selection.currencyChanges.size > 0;
+    if (hasTokenChange || selection.nativeChange > 0n) {
+        if (hasTokenChange) {
+            const tokenChangeScript = buildTokenChangeOutput((0, brands_js_1.parseAddress)(params.changeAddress, 'changeAddress'), selection.currencyChanges);
+            txb.addOutput(tokenChangeScript.script, (0, index_js_2.toSafeNumber)(selection.nativeChange));
+        }
+        else if (params.changeAddress.startsWith('i')) {
+            // utxo-lib's addOutput only resolves base58 R-addresses; an i-address
+            // changeAddress needs the explicit P2ID script (matching sendCurrency), or
+            // it throws an untyped "no matching Script".
+            txb.addOutput(identityPaymentScript((0, brands_js_1.parseIAddress)(params.changeAddress, 'changeAddress')), (0, index_js_2.toSafeNumber)(selection.nativeChange));
         }
         else {
             txb.addOutput(params.changeAddress, (0, index_js_2.toSafeNumber)(selection.nativeChange));
         }
     }
+    // Referral payouts are native; no token is paid out, so all token value in the
+    // selected inputs must return as change.
+    (0, index_js_4.assertTokenConservation)(selection.selected, new Map(), selection.currencyChanges, systemId, 'identity registration');
     const unsignedTx = txb.buildIncomplete();
     const allUtxos = [commitUtxo, ...selection.selected];
     // The registration fee is burned as an IMPLICIT miner fee (identity and
@@ -648,7 +686,16 @@ function _buildSubIdRegistration(params, identity, identityScript, reservationSc
     const nativeImportFee = params.nativeImportFee || 0n;
     const nativeTarget = feeOutput.nativeValue + nativeImportFee;
     const numOutputs = 4;
-    const selection = (0, index_js_4.selectUtxos)(params.utxos, nativeTarget, requiredCurrencies, numOutputs, systemId, undefined, true);
+    const selection = (0, index_js_4.selectUtxos)(params.utxos, nativeTarget, requiredCurrencies, numOutputs, systemId, undefined, true, 
+    // The identity and reservation outputs embed the full serialized identity /
+    // advanced name reservation (a large contentMultimap can make them
+    // multi-KB); size the fee from their real bytes, matching the VRSC
+    // registration / update / define paths, so a big sub-ID isn't fee-estimated
+    // below the relay minimum and rejected.
+    identityScript.length + reservationScript.length + feeOutput.script.length);
+    // The parent-currency fee (requiredCurrencies) is paid to the fee output and
+    // any excess returns as token change; guard that no token value is dropped.
+    (0, index_js_4.assertTokenConservation)(selection.selected, requiredCurrencies, selection.currencyChanges, systemId, 'sub-ID registration');
     const txb = new utxo_lib_1.TransactionBuilder(network);
     txb.setVersion(4);
     txb.setExpiryHeight((0, index_js_3.resolveExpiryHeight)(params.expiryHeight));
@@ -664,7 +711,7 @@ function _buildSubIdRegistration(params, identity, identityScript, reservationSc
     const hasTokenChange = selection.currencyChanges.size > 0;
     if (hasTokenChange || selection.nativeChange > 0n) {
         if (hasTokenChange) {
-            const tokenChangeScript = buildTokenChangeOutput(params.changeAddress, selection.currencyChanges);
+            const tokenChangeScript = buildTokenChangeOutput((0, brands_js_1.parseAddress)(params.changeAddress, 'changeAddress'), selection.currencyChanges);
             txb.addOutput(tokenChangeScript.script, (0, index_js_2.toSafeNumber)(selection.nativeChange));
         }
         else {
@@ -672,7 +719,7 @@ function _buildSubIdRegistration(params, identity, identityScript, reservationSc
             // changeAddress needs the explicit P2ID script (matching sendCurrency), or
             // it throws an untyped "no matching Script".
             if (params.changeAddress.startsWith('i')) {
-                txb.addOutput(identityPaymentScript(params.changeAddress), (0, index_js_2.toSafeNumber)(selection.nativeChange));
+                txb.addOutput(identityPaymentScript((0, brands_js_1.parseIAddress)(params.changeAddress, 'changeAddress')), (0, index_js_2.toSafeNumber)(selection.nativeChange));
             }
             else {
                 txb.addOutput(params.changeAddress, (0, index_js_2.toSafeNumber)(selection.nativeChange));
@@ -841,6 +888,10 @@ function buildAndSignIdentityUpdate(params, network, operation = 'update', lockU
     // contentMultimap can make it multi-KB); size the fee from its real bytes
     // so a big update isn't fee-estimated below the relay minimum.
     unfundedHex.length / 2);
+    // Update spends only native fees and emits no token-change output, so a
+    // token-bearing funding UTXO would be silently dropped. Fail closed if one
+    // was selected (both maps empty ⇒ assert no token enters).
+    (0, index_js_4.assertTokenConservation)(selection.selected, new Map(), new Map(), systemId, 'identity update');
     const txb = new utxo_lib_1.TransactionBuilder(verusNetwork);
     txb.setVersion(4);
     txb.setExpiryHeight((0, index_js_3.resolveExpiryHeight)(params.expiryHeight));
@@ -857,7 +908,7 @@ function buildAndSignIdentityUpdate(params, network, operation = 'update', lockU
         // changeAddress needs the explicit P2ID script (matching sendCurrency), or
         // it throws an untyped "no matching Script".
         if (params.changeAddress.startsWith('i')) {
-            txb.addOutput(identityPaymentScript(params.changeAddress), (0, index_js_2.toSafeNumber)(selection.nativeChange));
+            txb.addOutput(identityPaymentScript((0, brands_js_1.parseIAddress)(params.changeAddress, 'changeAddress')), (0, index_js_2.toSafeNumber)(selection.nativeChange));
         }
         else {
             txb.addOutput(params.changeAddress, (0, index_js_2.toSafeNumber)(selection.nativeChange));