@midnames/sdk 1.0.0 → 1.0.1

package/dist/provider.js

@@ -1,12 +1,30 @@
 import { setNetworkId, } from "@midnight-ntwrk/midnight-js-network-id";
 import { indexerPublicDataProvider } from "@midnight-ntwrk/midnight-js-indexer-public-data-provider";
+export const NETWORK_REGISTRY = {
+    preview: {
+        indexerUrl: "https://indexer.preview.midnight.network/api/v3/graphql",
+        indexerWsUrl: "wss://indexer.preview.midnight.network/api/v3/graphql/ws",
+        tldAddress: "daa9fc4dfbd42ac9227f8b4358928532da68337689ea3b21b351d607890d9192",
+    },
+    preprod: {
+        indexerUrl: "https://indexer.preprod.midnight.network/api/v3/graphql",
+        indexerWsUrl: "wss://indexer.preprod.midnight.network/api/v3/graphql/ws",
+        tldAddress: "b00a62ce58c108b86af4670e662fa240844e0206c54009a539c64155d62e6b6a",
+    },
+};
+export function getNetworkConfig(networkId) {
+    const config = NETWORK_REGISTRY[networkId];
+    if (!config) {
+        throw new Error(`Unknown network "${networkId}". Known networks: ${Object.keys(NETWORK_REGISTRY).join(", ")}. Use createDefaultProvider() with explicit URLs for custom networks.`);
+    }
+    return config;
+}
 let defaultProvider = null;
-export function getDefaultProvider() {
+export function getDefaultProvider(networkId = "preview") {
     if (!defaultProvider) {
-        const indexerUrl = "https://indexer.preprod.midnight.network/api/v3/graphql";
-        const indexerWsUrl = "wss://indexer.preprod.midnight.network/api/v3/graphql/ws";
-        setNetworkId("preprod");
-        defaultProvider = indexerPublicDataProvider(indexerUrl, indexerWsUrl);
+        const net = getNetworkConfig(networkId);
+        setNetworkId(networkId);
+        defaultProvider = indexerPublicDataProvider(net.indexerUrl, net.indexerWsUrl);
     }
     return defaultProvider;
 }
@@ -14,7 +32,14 @@ export function setDefaultProvider(provider) {
     defaultProvider = provider;
 }
 export function createDefaultProvider(config = {}) {
-    const { indexerUrl = "https://indexer.preprod.midnight.network/api/v3/graphql", indexerWsUrl = "wss://indexer.preprod.midnight.network/api/v3/graphql/ws", networkId = "preprod", } = config;
+    var _a, _b, _c;
+    const networkId = (_a = config.networkId) !== null && _a !== void 0 ? _a : "preview";
+    const knownConfig = NETWORK_REGISTRY[networkId];
+    const indexerUrl = (_b = config.indexerUrl) !== null && _b !== void 0 ? _b : knownConfig === null || knownConfig === void 0 ? void 0 : knownConfig.indexerUrl;
+    const indexerWsUrl = (_c = config.indexerWsUrl) !== null && _c !== void 0 ? _c : knownConfig === null || knownConfig === void 0 ? void 0 : knownConfig.indexerWsUrl;
+    if (!indexerUrl || !indexerWsUrl) {
+        throw new Error(`No indexer URLs for network "${networkId}". Provide indexerUrl and indexerWsUrl explicitly.`);
+    }
     setNetworkId(networkId);
     return indexerPublicDataProvider(indexerUrl, indexerWsUrl);
 }

package/dist/react/DomainProfileWidget.js

@@ -5,6 +5,7 @@ import { deriveShieldedAddress } from '../utils/address.js';
 import { Copy, Check } from 'lucide-react';
 import { getDomainProfile } from '../core.js';
 import { getDefaultProvider } from '../provider.js';
+import { sanitizeUrl } from '../utils/sanitize.js';
 function truncate(addr, head = 10, tail = 6) {
     if (!addr)
         return 'N/A';
@@ -91,7 +92,9 @@ onFieldClick, onCopySuccess, }) {
     }, [publicDataProvider, fullDomain, onError]);
     const fieldsMap = useMemo(() => {
         const m = {};
-        ((data === null || data === void 0 ? void 0 : data.fields) || []).forEach(([k, v]) => (m[k.toLowerCase()] = v));
+        if (data === null || data === void 0 ? void 0 : data.fields) {
+            data.fields.forEach((v, k) => (m[k.toLowerCase()] = v));
+        }
         return m;
     }, [data]);
     const displayName = fieldsMap['name'] || fieldsMap['displayname'] || fieldsMap['handle'] || '';
@@ -162,5 +165,5 @@ onFieldClick, onCopySuccess, }) {
     if (error && !loading) {
         return (_jsx("div", { className: cardClasses, children: _jsxs("div", { className: "midnames-error", children: [_jsx("div", { className: "midnames-error-title", children: "Error loading domain" }), _jsx("div", { className: "midnames-error-message", children: error.message }), _jsxs("div", { className: "midnames-error-code", children: ["Code: ", error.code] })] }) }));
     }
-    return (_jsxs("div", { className: cardClasses, children: [showBanner && bannerUrl && _jsx("img", { src: bannerUrl, alt: "", className: "midnames-banner" }), _jsxs("div", { className: "midnames-header", children: [showAvatar && (_jsx("div", { className: "midnames-avatar", children: avatarUrl ? (_jsx("img", { src: avatarUrl, alt: "", onError: (e) => (e.currentTarget.style.display = 'none') })) : (_jsx("span", { children: (_c = (_b = (_a = (displayName || (data === null || data === void 0 ? void 0 : data.fullDomain) || '?')[0]) === null || _a === void 0 ? void 0 : _a.toUpperCase) === null || _b === void 0 ? void 0 : _b.call(_a)) !== null && _c !== void 0 ? _c : '?' })) })), _jsxs("div", { className: "midnames-ident", children: [_jsx("div", { className: "midnames-name", children: displayName || (data === null || data === void 0 ? void 0 : data.fullDomain) || fullDomain }), variant !== 'minimal' && _jsx("div", { className: "midnames-domain", children: (data === null || data === void 0 ? void 0 : data.fullDomain) || fullDomain })] }), showStatus && (_jsx("div", { className: `midnames-status midnames-status-${status}`, children: loading ? 'Checking…' : status === 'registered' ? 'Registered' : status === 'available' ? 'Available' : status === 'error' ? 'Error' : 'Unknown' }))] }), showBio && bio && _jsx("p", { className: "midnames-bio", children: bio }), showDomainInfo && fieldsToShow.length > 0 && (_jsx("div", { className: "midnames-grid", children: fieldsToShow.map((field) => (_jsxs("div", { className: "midnames-box", children: [_jsx("div", { className: "midnames-box-label", children: field.label }), _jsx(CopyableValue, { value: field.value, className: "midnames-box-value", showCopy: showCopyButtons, onCopySuccess: onCopySuccess, onFieldClick: onFieldClick, fieldName: field.fieldName })] }, field.key))) })), showSocialLinks && (website || twitter || github || location) && (_jsxs("div", { className: "midnames-links", children: [website && (_jsx("a", { className: "midnames-chip", href: website.startsWith('http') ? website : `https://${website}`, target: "_blank", rel: "noreferrer", children: website.replace(/^https?:\/\//, '') })), twitter && (_jsxs("a", { className: "midnames-chip", href: `https://x.com/${twitter}`, target: "_blank", rel: "noreferrer", children: ["@", twitter] })), github && (_jsx("a", { className: "midnames-chip", href: `https://github.com/${github}`, target: "_blank", rel: "noreferrer", children: github })), location && _jsx("span", { className: "midnames-chip", children: location })] })), renderActions && (_jsx("div", { className: "midnames-actions", children: renderActions(data) }))] }));
+    return (_jsxs("div", { className: cardClasses, children: [showBanner && bannerUrl && _jsx("img", { src: sanitizeUrl(bannerUrl), alt: "", className: "midnames-banner" }), _jsxs("div", { className: "midnames-header", children: [showAvatar && (_jsx("div", { className: "midnames-avatar", children: avatarUrl ? (_jsx("img", { src: sanitizeUrl(avatarUrl), alt: "", onError: (e) => (e.currentTarget.style.display = 'none') })) : (_jsx("span", { children: (_c = (_b = (_a = (displayName || (data === null || data === void 0 ? void 0 : data.fullDomain) || '?')[0]) === null || _a === void 0 ? void 0 : _a.toUpperCase) === null || _b === void 0 ? void 0 : _b.call(_a)) !== null && _c !== void 0 ? _c : '?' })) })), _jsxs("div", { className: "midnames-ident", children: [_jsx("div", { className: "midnames-name", children: displayName || (data === null || data === void 0 ? void 0 : data.fullDomain) || fullDomain }), variant !== 'minimal' && _jsx("div", { className: "midnames-domain", children: (data === null || data === void 0 ? void 0 : data.fullDomain) || fullDomain })] }), showStatus && (_jsx("div", { className: `midnames-status midnames-status-${status}`, children: loading ? 'Checking…' : status === 'registered' ? 'Registered' : status === 'available' ? 'Available' : status === 'error' ? 'Error' : 'Unknown' }))] }), showBio && bio && _jsx("p", { className: "midnames-bio", children: bio }), showDomainInfo && fieldsToShow.length > 0 && (_jsx("div", { className: "midnames-grid", children: fieldsToShow.map((field) => (_jsxs("div", { className: "midnames-box", children: [_jsx("div", { className: "midnames-box-label", children: field.label }), _jsx(CopyableValue, { value: field.value, className: "midnames-box-value", showCopy: showCopyButtons, onCopySuccess: onCopySuccess, onFieldClick: onFieldClick, fieldName: field.fieldName })] }, field.key))) })), showSocialLinks && (website || twitter || github || location) && (_jsxs("div", { className: "midnames-links", children: [website && (_jsx("a", { className: "midnames-chip", href: sanitizeUrl(website.startsWith('http') ? website : `https://${website}`), target: "_blank", rel: "noreferrer", children: website.replace(/^https?:\/\//, '') })), twitter && (_jsxs("a", { className: "midnames-chip", href: `https://x.com/${twitter}`, target: "_blank", rel: "noreferrer", children: ["@", twitter] })), github && (_jsx("a", { className: "midnames-chip", href: `https://github.com/${github}`, target: "_blank", rel: "noreferrer", children: github })), location && _jsx("span", { className: "midnames-chip", children: location })] })), renderActions && (_jsx("div", { className: "midnames-actions", children: renderActions(data) }))] }));
 }

package/dist/react/HolographicCard.js

@@ -3,6 +3,7 @@ import React, { useEffect, useRef, useCallback, useMemo, useState } from 'react'
 import { MidnamesError } from '../errors.js';
 import { getDomainProfile } from '../core.js';
 import { getDefaultProvider } from '../provider.js';
+import { sanitizeUrl } from '../utils/sanitize.js';
 const DEFAULT_BEHIND_GRADIENT = 'radial-gradient(farthest-side circle at var(--midnames-holo-pointer-x) var(--midnames-holo-pointer-y),hsla(266,100%,90%,var(--midnames-holo-card-opacity)) 4%,hsla(266,50%,80%,calc(var(--midnames-holo-card-opacity)*0.75)) 10%,hsla(266,25%,70%,calc(var(--midnames-holo-card-opacity)*0.5)) 50%,hsla(266,0%,60%,0) 100%),radial-gradient(35% 52% at 55% 20%,#00ffaac4 0%,#073aff00 100%),radial-gradient(100% 100% at 50% 50%,#00c1ffff 1%,#073aff00 76%),conic-gradient(from 124deg at 50% 50%,#c137ffff 0%,#07c6ffff 40%,#07c6ffff 60%,#c137ffff 100%)';
 const DEFAULT_INNER_GRADIENT = 'linear-gradient(145deg,#60496e8c 0%,#71C4FF44 100%)';
 const ANIMATION_CONFIG = {
@@ -61,7 +62,9 @@ const HolographicCardComponent = ({ domain, publicDataProvider, behindGradient,
     // Extract fields from domain data
     const fieldsMap = useMemo(() => {
         const m = {};
-        ((data === null || data === void 0 ? void 0 : data.fields) || []).forEach(([k, v]) => (m[k.toLowerCase()] = v));
+        if (data === null || data === void 0 ? void 0 : data.fields) {
+            data.fields.forEach((v, k) => (m[k.toLowerCase()] = v));
+        }
         return m;
     }, [data]);
     const displayName = fieldsMap['name'] || fieldsMap['displayname'] || fieldsMap['handle'] || '';
@@ -186,7 +189,7 @@ const HolographicCardComponent = ({ domain, publicDataProvider, behindGradient,
         '--midnames-holo-behind-gradient': showBehindGradient ? (behindGradient !== null && behindGradient !== void 0 ? behindGradient : DEFAULT_BEHIND_GRADIENT) : 'none',
         '--midnames-holo-inner-gradient': innerGradient !== null && innerGradient !== void 0 ? innerGradient : DEFAULT_INNER_GRADIENT,
     }), [showBehindGradient, behindGradient, innerGradient]);
-    return (_jsx("div", { ref: wrapRef, className: `midnames-holo-card-wrapper ${className}`.trim(), style: cardStyle, children: _jsx("section", { ref: cardRef, className: "midnames-holo-card", children: _jsxs("div", { className: "midnames-holo-inside", children: [_jsx("div", { className: "midnames-holo-shine" }), _jsx("div", { className: "midnames-holo-glare" }), _jsxs("div", { className: "midnames-holo-content midnames-holo-avatar-content", children: [loading && (_jsx("div", { className: "midnames-holo-loading", children: "Loading domain..." })), error && !loading && (_jsxs("div", { className: "midnames-holo-error", children: [_jsx("div", { children: "Failed to load domain" }), _jsx("div", { style: { fontSize: '12px', opacity: 0.8, marginTop: '8px' }, children: error.message })] })), avatarUrl && !loading && !error && (_jsx("img", { className: "midnames-holo-avatar", src: avatarUrl, alt: `${displayName || domain} avatar`, loading: "lazy", onError: (e) => { e.target.style.display = 'none'; } })), showUserInfo && !loading && !error && (displayName || handle || contactText) && (_jsxs("div", { className: "midnames-holo-user-info", children: [_jsxs("div", { className: "midnames-holo-user-details", children: [_jsx("div", { className: "midnames-holo-mini-avatar", children: _jsx("img", { src: avatarUrl || '', alt: "mini", loading: "lazy", onError: (e) => { e.target.style.display = 'none'; } }) }), _jsxs("div", { className: "midnames-holo-user-text", children: [displayName && _jsx("div", { className: "midnames-holo-handle", children: displayName }), handle && _jsxs("div", { className: "midnames-holo-status", children: ["@", handle] }), _jsx("div", { className: "midnames-holo-status", children: domain })] })] }), _jsx("button", { className: "midnames-holo-contact-btn", onClick: onContactClick, type: "button", children: contactText })] }))] })] }) }) }));
+    return (_jsx("div", { ref: wrapRef, className: `midnames-holo-card-wrapper ${className}`.trim(), style: cardStyle, children: _jsx("section", { ref: cardRef, className: "midnames-holo-card", children: _jsxs("div", { className: "midnames-holo-inside", children: [_jsx("div", { className: "midnames-holo-shine" }), _jsx("div", { className: "midnames-holo-glare" }), _jsxs("div", { className: "midnames-holo-content midnames-holo-avatar-content", children: [loading && (_jsx("div", { className: "midnames-holo-loading", children: "Loading domain..." })), error && !loading && (_jsxs("div", { className: "midnames-holo-error", children: [_jsx("div", { children: "Failed to load domain" }), _jsx("div", { style: { fontSize: '12px', opacity: 0.8, marginTop: '8px' }, children: error.message })] })), avatarUrl && !loading && !error && (_jsx("img", { className: "midnames-holo-avatar", src: sanitizeUrl(avatarUrl), alt: `${displayName || domain} avatar`, loading: "lazy", onError: (e) => { e.target.style.display = 'none'; } })), showUserInfo && !loading && !error && (displayName || handle || contactText) && (_jsxs("div", { className: "midnames-holo-user-info", children: [_jsxs("div", { className: "midnames-holo-user-details", children: [_jsx("div", { className: "midnames-holo-mini-avatar", children: _jsx("img", { src: sanitizeUrl(avatarUrl), alt: "mini", loading: "lazy", onError: (e) => { e.target.style.display = 'none'; } }) }), _jsxs("div", { className: "midnames-holo-user-text", children: [displayName && _jsx("div", { className: "midnames-holo-handle", children: displayName }), handle && _jsxs("div", { className: "midnames-holo-status", children: ["@", handle] }), _jsx("div", { className: "midnames-holo-status", children: domain })] })] }), _jsx("button", { className: "midnames-holo-contact-btn", onClick: onContactClick, type: "button", children: contactText })] }))] })] }) }) }));
 };
 const HolographicCard = React.memo(HolographicCardComponent);
 export default HolographicCard;

package/dist/react/index.d.ts

@@ -1,3 +1,3 @@
-export * from './DomainProfileWidget.js';
+export { DomainProfileWidget } from './DomainProfileWidget.js';
+export type { DomainProfileWidgetProps } from './DomainProfileWidget.js';
 export { default as HolographicCard } from './HolographicCard.js';
-export { CopyableValue } from './DomainProfileWidget.js';

package/dist/react/index.js

@@ -1,3 +1,2 @@
-export * from './DomainProfileWidget.js';
+export { DomainProfileWidget } from './DomainProfileWidget.js';
 export { default as HolographicCard } from './HolographicCard.js';
-export { CopyableValue } from './DomainProfileWidget.js';

package/dist/types.d.ts

@@ -6,7 +6,11 @@ export interface DomainInfo {
 }
 export interface DomainSettings {
     coinColor: Uint8Array;
-    domainCost: bigint;
+    costs: {
+        short: bigint;
+        medium: bigint;
+        long: bigint;
+    };
 }
 export interface DomainProfileData {
     fullDomain: string;

package/dist/utils/domain.d.ts

@@ -14,3 +14,8 @@ export declare function getParentDomain(fullDomain: string): string | null;
 export declare function getSubdomain(fullDomain: string): string;
 export declare function isTLD(domain: string, tld?: string): boolean;
 export declare function buildFullDomain(subdomain: string, parent: string): string;
+export declare function domainToKey(name: string): {
+    key: Uint8Array;
+    len: bigint;
+};
+export declare function keyToDomain(key: Uint8Array): string;

package/dist/utils/domain.js

@@ -55,3 +55,21 @@ export function buildFullDomain(subdomain, parent) {
         return parent;
     return `${subdomain}.${parent}`;
 }
+export function domainToKey(name) {
+    const bytes = new TextEncoder().encode(name);
+    if (bytes.length === 0 || bytes.length > 32)
+        throw new Error(`Domain name must be 1-32 bytes, got ${bytes.length}`);
+    const key = new Uint8Array(32).fill(255);
+    key.set(bytes);
+    return { key, len: BigInt(bytes.length) };
+}
+export function keyToDomain(key) {
+    let len = 32;
+    for (let i = 0; i < 32; i++) {
+        if (key[i] === 255) {
+            len = i;
+            break;
+        }
+    }
+    return new TextDecoder().decode(key.subarray(0, len));
+}

package/dist/utils/imageResolver.js

@@ -27,37 +27,37 @@ function isValidIPFSCid(cid) {
  * @returns Promise resolving to gateway URL
  */
 async function resolveIPFS(cid) {
-    return new Promise(async (resolve) => {
-        let resolved = false;
-        let successCount = 0;
-        let totalGateways = DEFAULT_IPFS_GATEWAYS.length;
-        // Test each gateway concurrently
-        DEFAULT_IPFS_GATEWAYS.forEach(async (gateway) => {
+    const controllers = DEFAULT_IPFS_GATEWAYS.map(() => new AbortController());
+    // Race all gateways — first successful response wins
+    const racePromise = new Promise((resolve, reject) => {
+        let pending = DEFAULT_IPFS_GATEWAYS.length;
+        DEFAULT_IPFS_GATEWAYS.forEach(async (gateway, i) => {
+            const timeoutId = setTimeout(() => controllers[i].abort(), 3000);
             try {
-                const controller = new AbortController();
-                const timeoutId = setTimeout(() => controller.abort(), 3000);
                 const res = await fetch(`${gateway}/${cid}`, {
                     method: "HEAD",
-                    signal: controller.signal,
+                    signal: controllers[i].signal,
                 });
                 clearTimeout(timeoutId);
-                if (res.ok && !resolved) {
-                    resolved = true;
+                if (res.ok) {
+                    controllers.forEach((c) => c.abort());
                     resolve(`${gateway}/${cid}`);
                     return;
                 }
             }
-            catch (error) {
-                // Gateway failed, continue to next
-            }
-            successCount++;
-            // If all failed, use fallback
-            if (successCount === totalGateways && !resolved) {
-                resolved = true;
-                resolve(`${DEFAULT_IPFS_GATEWAYS[0]}/${cid}`);
+            catch {
+                clearTimeout(timeoutId);
             }
+            if (--pending === 0)
+                reject();
         });
     });
+    try {
+        return await racePromise;
+    }
+    catch {
+        return `${DEFAULT_IPFS_GATEWAYS[0]}/${cid}`;
+    }
 }
 /**
  * Resolves a URL to an accessible HTTP(S) URL

package/dist/utils/sanitize.d.ts

@@ -0,0 +1,6 @@
+/**
+ * Sanitizes a URL to prevent javascript: and other dangerous protocols.
+ * Returns empty string for disallowed protocols.
+ * Decodes URL-encoded characters before checking to prevent bypasses like java%73cript:
+ */
+export declare function sanitizeUrl(url: string | undefined | null): string;

package/dist/utils/sanitize.js

@@ -0,0 +1,28 @@
+const ALLOWED_PROTOCOLS = /^(https?:\/\/|ipfs:\/\/|data:image\/)/i;
+/**
+ * Sanitizes a URL to prevent javascript: and other dangerous protocols.
+ * Returns empty string for disallowed protocols.
+ * Decodes URL-encoded characters before checking to prevent bypasses like java%73cript:
+ */
+export function sanitizeUrl(url) {
+    if (!url)
+        return '';
+    const trimmed = url.trim();
+    if (!trimmed)
+        return '';
+    // Decode URL-encoded characters to catch bypasses like java%73cript:
+    let decoded;
+    try {
+        decoded = decodeURIComponent(trimmed);
+    }
+    catch {
+        decoded = trimmed;
+    }
+    // Relative URLs and protocol-relative are fine
+    if (decoded.startsWith('/') || decoded.startsWith('./'))
+        return trimmed;
+    // Allow only safe protocols (check decoded version)
+    if (ALLOWED_PROTOCOLS.test(decoded))
+        return trimmed;
+    return '';
+}

package/managed/index.js

@@ -1,16 +1,4 @@
-/* export * as Registry from "./managed/registry/contract/index.cjs";
-export * as Resolver from "./managed/resolver/contract/index.cjs";
-export * as UnifiedDomain from "./managed/unified-domain/contract/index.cjs";
-export * as NS from "./managed/ns/contract/index.cjs";
-export * from "./witnesses.js";
-export { type RegistryRecord } from "./managed/registry/contract/index.cjs";
-export { type ResolutionData } from "./managed/resolver/contract/index.cjs";
-export { type DomainData as UnifiedDomainData } from "./managed/unified-domain/contract/index.cjs";
-export {
-  type DomainData,
-  type DomainReference,
-} from "./managed/ns/contract/index.cjs";
- */
 export * as Leaf from "./managed/leaf/contract/index.js";
 export { ledger, Contract } from "./managed/leaf/contract/index.js";
+export { domainToKey, keyToDomain } from "./utils.js";
 //# sourceMappingURL=index.js.map

package/managed/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AACH,OAAO,KAAK,IAAI,MAAM,yBAAyB,CAAC;AAChD,OAAO,EAML,MAAM,EACN,QAAQ,EACT,MAAM,yBAAyB,CAAC"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,IAAI,MAAM,yBAAyB,CAAC;AAChD,OAAO,EAML,MAAM,EACN,QAAQ,EACT,MAAM,yBAAyB,CAAC;AACjC,OAAO,EAAE,WAAW,EAAE,WAAW,EAAE,MAAM,YAAY,CAAC"}

package/managed/leaf.compact

@@ -1,4 +1,4 @@
-pragma language_version 0.20;
+pragma language_version >= 0.20;
 /// # Unshielded Nameservice
 ///
 /// Example:
@@ -26,19 +26,19 @@ import CompactStandardLibrary;
 
 // This is sealed. If the domain is sold in the parent contract
 // The new owner should deploy a new resolver.
-export sealed ledger PARENT_DOMAIN: Maybe<Opaque<'string'>>;
+export sealed ledger PARENT_DOMAIN: Maybe<Bytes<32>>;
 export sealed ledger PARENT_RESOLVER: ContractAddress;
-export sealed ledger DOMAIN: Maybe<Opaque<'string'>>;
+export sealed ledger DOMAIN: Maybe<Bytes<32>>;
 
 export ledger DOMAIN_OWNER: ZswapCoinPublicKey;
 // This domain could target either a wallet or a contract
 export ledger DOMAIN_TARGET: Either<ZswapCoinPublicKey, ContractAddress>;
 
 // Map<domain, (owner, resolver)>.
-export ledger domains: Map<Opaque<'string'>, DomainData>;
+export ledger domains: Map<Bytes<32>, DomainData>;
 
 // Set of domains saved here owned by address.
-export ledger domains_owned: Map<ZswapCoinPublicKey, Set<Opaque<'string'>>>;
+export ledger domains_owned: Map<ZswapCoinPublicKey, Set<Bytes<32>>>;
 
 export ledger fields: Map<Opaque<'string'>, Opaque<'string'>>;
 
@@ -51,12 +51,14 @@ struct DomainData {
 
 
 constructor(
-    parent_domain: Maybe<Opaque<'string'>>,
+    parent_domain: Maybe<Bytes<32>>,
     parent_resolver: ContractAddress,
     target: Either<ZswapCoinPublicKey, ContractAddress>,
-    domain: Maybe<Opaque<'string'>>,
+    domain: Maybe<Bytes<32>>,
     coin_color: Bytes<32>,
-    domain_cost: Uint<128>,
+    cost_short: Uint<128>,
+    cost_med: Uint<128>,
+    cost_long: Uint<128>,
     kvs: Vector<10, Maybe<[Opaque<'string'>, Opaque<'string'>]>>
 ) {
     DOMAIN_OWNER = ownPublicKey();
@@ -65,7 +67,9 @@ constructor(
     DOMAIN_TARGET = disclose(target);
     DOMAIN = disclose(domain);
     COIN_COLOR = disclose(coin_color);
-    DOMAIN_COST = disclose(domain_cost);
+    COST_SHORT = disclose(cost_short);
+    COST_MED = disclose(cost_med);
+    COST_LONG = disclose(cost_long);
     for (const kv of kvs) {
         if (disclose(kv) != none<[Opaque<'string'>, Opaque<'string'>]>()) {
             fields.insert(disclose(kv.value[0]),disclose(kv.value[1]));
@@ -78,16 +82,20 @@ constructor(
 // ===========================================
 
 export ledger COIN_COLOR: Bytes<32>;
-export ledger DOMAIN_COST: Uint<128>;
+export ledger COST_SHORT: Uint<128>;   // ≤3 chars
+export ledger COST_MED: Uint<128>;     // 4 chars
+export ledger COST_LONG: Uint<128>;    // 5+ chars
 
-export circuit update_color(c: Bytes<32>) : [] {
+export circuit update_color(c: Bytes<32>): [] {
     assert(DOMAIN_OWNER == ownPublicKey(), "Not the owner");
     COIN_COLOR = disclose(c);
 }
 
-export circuit update_cost(c: Uint<64>) : [] {
+export circuit update_costs(cost_short: Uint<128>, cost_med: Uint<128>, cost_long: Uint<128>): [] {
     assert(DOMAIN_OWNER == ownPublicKey(), "Not the owner");
-    DOMAIN_COST = disclose(c);
+    COST_SHORT = disclose(cost_short);
+    COST_MED = disclose(cost_med);
+    COST_LONG = disclose(cost_long);
 }
 
 export circuit update_target_and_fields(
@@ -104,21 +112,43 @@ export circuit update_target_and_fields(
 
 }
 
-export circuit buy_domain_for(owner: ZswapCoinPublicKey, domain: Opaque<'string'>, resolver: ContractAddress): [] {
+export circuit buy_domain_for(owner: ZswapCoinPublicKey, domain: Bytes<32>, len: Uint<32>, resolver: ContractAddress): [] {
+    assert(len <= 32, "len must be <= 32");
+    assert(len >= 1, "domain name cannot be empty");
+
+    const valid = fold(
+      (acc: Boolean, byte: Uint<8>, i: Uint<8>): Boolean =>
+        acc && (((i as Uint<32>) < len) || (byte == 255)),
+      true, domain,
+      [0, 1, 2, 3, 4, 5, 6, 7, 8, 9, 10, 11, 12, 13, 14, 15, 16, 17, 18, 19, 20, 21, 22, 23, 24, 25, 26, 27, 28, 29, 30, 31]
+    );
+    assert(valid, "Invalid domain key padding");
+
     assert(!domains.member(disclose(domain)), "Domain already exists");
 
-    // receiveUnshielded(COIN_COLOR, DOMAIN_COST);
-    // sendUnshielded(COIN_COLOR, DOMAIN_COST, right<ContractAddress, UserAddress>(UserAddress { bytes: DOMAIN_OWNER.bytes }));
+    // pricing: shared color, per-tier cost
+    const d_len = disclose(len);
+    if (d_len <= 3) {
+        receiveUnshielded(COIN_COLOR, COST_SHORT);
+        sendUnshielded(COIN_COLOR, COST_SHORT, right<ContractAddress, UserAddress>(UserAddress { bytes: DOMAIN_OWNER.bytes }));
+    } else if (d_len == 4) {
+        receiveUnshielded(COIN_COLOR, COST_MED);
+        sendUnshielded(COIN_COLOR, COST_MED, right<ContractAddress, UserAddress>(UserAddress { bytes: DOMAIN_OWNER.bytes }));
+    } else {
+        receiveUnshielded(COIN_COLOR, COST_LONG);
+        sendUnshielded(COIN_COLOR, COST_LONG, right<ContractAddress, UserAddress>(UserAddress { bytes: DOMAIN_OWNER.bytes }));
+    }
 
     const d_owner = disclose(owner);
         const domain_data = DomainData {
         d_owner,
         disclose(resolver)
     };
-        domains.insert(disclose(domain), disclose(domain_data));
-        // Track domains owned by address
+    domains.insert(disclose(domain), disclose(domain_data));
+    
+    // Track domains owned by address
     if (!domains_owned.member(d_owner)) {
-        domains_owned.insert(d_owner, default<Set<Opaque<'string'>>>);
+        domains_owned.insert(d_owner, default<Set<Bytes<32>>>);
     }
     domains_owned.lookup(d_owner).insert(disclose(domain));
 }
@@ -142,12 +172,23 @@ export circuit clear_field(k: Opaque<'string'>): [] {
     fields.remove(disclose(k));
 }
 
-export circuit clear_all_fields(domain: Opaque<'string'>): [] {
+export circuit clear_all_fields(): [] {
     assert(DOMAIN_OWNER == ownPublicKey(), "Not the domain owner");
     fields.resetToDefault();
 }
 
-export circuit register_domain_for(owner: ZswapCoinPublicKey, domain: Opaque<'string'>, resolver: ContractAddress): [] {
+export circuit register_domain_for(owner: ZswapCoinPublicKey, domain: Bytes<32>, len: Uint<32>, resolver: ContractAddress): [] {
+    assert(len <= 32, "len must be <= 32");
+    assert(len >= 1, "domain name cannot be empty");
+
+    const valid = fold(
+      (acc: Boolean, byte: Uint<8>, i: Uint<8>): Boolean =>
+        acc && (((i as Uint<32>) < len) || (byte == 255)),
+      true, domain,
+      [0, 1, 2, 3, 4, 5, 6, 7, 8, 9, 10, 11, 12, 13, 14, 15, 16, 17, 18, 19, 20, 21, 22, 23, 24, 25, 26, 27, 28, 29, 30, 31]
+    );
+    assert(valid, "Invalid domain key padding");
+
     assert(!domains.member(disclose(domain)), "Domain already exists");
     assert(DOMAIN_OWNER == ownPublicKey(), "Not the domain owner");
 
@@ -161,12 +202,12 @@ export circuit register_domain_for(owner: ZswapCoinPublicKey, domain: Opaque<'st
 
     // Track domains owned by address
     if (!domains_owned.member(d_owner)) {
-        domains_owned.insert(d_owner, default<Set<Opaque<'string'>>>);
+        domains_owned.insert(d_owner, default<Set<Bytes<32>>>);
     }
     domains_owned.lookup(d_owner).insert(disclose(domain));
 }
 
-export circuit set_resolver(domain: Opaque<'string'>, resolver: ContractAddress): [] {
+export circuit set_resolver(domain: Bytes<32>, resolver: ContractAddress): [] {
     assert(domains.member(disclose(domain)), "Domain does not exist");
 
     const current_data = domains.lookup(disclose(domain));
@@ -186,7 +227,7 @@ export circuit update_domain_target(new_target: Either<ZswapCoinPublicKey, Contr
     DOMAIN_TARGET = disclose(new_target);
 }
 
-export circuit transfer_domain(domain: Opaque<'string'>, new_owner: ZswapCoinPublicKey): [] {
+export circuit transfer_domain(domain: Bytes<32>, new_owner: ZswapCoinPublicKey): [] {
     assert(domains.member(disclose(domain)), "Domain does not exist");
 
     const current_data = domains.lookup(disclose(domain));
@@ -202,7 +243,7 @@ export circuit transfer_domain(domain: Opaque<'string'>, new_owner: ZswapCoinPub
     // Update ownership tracking
     domains_owned.lookup(ownPublicKey()).remove(disclose(domain));
     if (!domains_owned.member(disclose(new_owner))) {
-        domains_owned.insert(disclose(new_owner), default<Set<Opaque<'string'>>>);
+        domains_owned.insert(disclose(new_owner), default<Set<Bytes<32>>>);
     }
     domains_owned.lookup(disclose(new_owner)).insert(disclose(domain));
 }
@@ -216,12 +257,12 @@ export circuit change_owner(new_owner: ZswapCoinPublicKey) : [] {
 
 /*
 Read only, but not pure, so let's not use those
-export circuit resolve(domain: Opaque<'string'>): DomainData {
+export circuit resolve(domain: Bytes<32>): DomainData {
     assert(domains.member(disclose(domain)), "Domain does not exist");
     return domains.lookup(disclose(domain));
 }
 
-export circuit get_parent_domain(): Maybe<Opaque<'string'>> {
+export circuit get_parent_domain(): Maybe<Bytes<32>> {
     return PARENT_DOMAIN;
 }
 
@@ -229,7 +270,7 @@ export circuit get_contract_owner(): ZswapCoinPublicKey {
     return DOMAIN_OWNER;
 }
 
-export circuit get_domain(): Maybe<Opaque<'string'>> {
+export circuit get_domain(): Maybe<Bytes<32>> {
     return DOMAIN;
 }
 
@@ -241,7 +282,7 @@ export circuit get_parent_resolver(): ContractAddress {
     return PARENT_RESOLVER;
 }
 
-export circuit addr_owns_domain(addr: ZswapCoinPublicKey, domain: Opaque<'string'>): Boolean {
+export circuit addr_owns_domain(addr: ZswapCoinPublicKey, domain: Bytes<32>): Boolean {
     assert(domains_owned.member(disclose(addr)), "Address does not own domains in this register");
     return domains_owned.lookup(disclose(addr)).member(disclose(domain));
 }