@sorandomains/owner 0.3.1 → 0.5.0

package/README.md

@@ -1,5 +1,10 @@
 # @sorandomains/owner
 
+Version 0.5.0 targets Stellar SDK17 (`>=17 <18`). ASCII names
+and labels are validated before lowercase normalization; Unicode lookalikes are
+rejected. Writes continue to target the owning Registry/Registrar/Resolver. Universal
+Lookup is the read entry point in `@sorandomains/lookup` 0.5.0.
+
 Run your Soran namespace on Stellar, programmatically. Issue names to your
 users, manage their lifecycle, transfer the namespace, and — when you are
 ready — walk the one-way permanence door. Every operation is a transaction
@@ -68,3 +73,15 @@ trustless resolve, reverse lookup, and ownership assurance, with no signing
 code at all.
 
 Docs: <https://github.com/SoranDomains/docs> · License: MIT
+
+## Verified testnet deployment
+
+Verified on 2026-09-05 at ledger 4515471. Network passphrase: `Test SDF Network ; September 2015`.
+
+| Contract | Address |
+|---|---|
+| Registry | `CBSORANXTUFKBZK74AAM2ZM5OX2V7PIXUADM3HGP6WU3IDN7M3YEEDLU` |
+
+Mainnet has no deployment preset. Custom networks must supply their own verified
+addresses. Universal Lookup upgrades remain immediately executable; an address
+and ABI version do not pin the code that will execute after a governance upgrade.

package/dist/index.d.ts

@@ -40,7 +40,7 @@ export declare const DEPLOYMENTS: {
     readonly testnet: {
         readonly rpcUrl: "https://soroban-testnet.stellar.org";
         readonly passphrase: string;
-        readonly registryId: "CAUEHYVLLNNDZ4H5QWCPBDWEONRI44SI3XYSEACB4U3HYILIVQGQAMNI";
+        readonly registryId: "CBSORANXTUFKBZK74AAM2ZM5OX2V7PIXUADM3HGP6WU3IDN7M3YEEDLU";
     };
 };
 /**
@@ -75,6 +75,8 @@ export declare class OwnerError extends Error {
     readonly txHash: string | null;
     constructor(message: string, contractId?: string | null, fn?: string | null, code?: number | null, codeName?: string | null, txHash?: string | null);
 }
+/** Contract label rules: 1–63 bytes of a-z 0-9, `-` neither first nor last. */
+export declare function normalizeLabel(value: string): string;
 /** One transaction issues at most this many names (contract MAX_BATCH). */
 export declare const MAX_BATCH = 23;
 export type Submitted = {

package/dist/index.js

@@ -42,13 +42,15 @@ function extractContractEvents(meta) {
     try {
         if (!meta)
             return [];
-        if (meta.switch() === 3)
-            return meta.v3().sorobanMeta()?.events() ?? [];
-        if (meta.switch() === 4) {
-            const v4 = meta.v4();
+        // (SDK17/js-xdr v5) TransactionMeta discriminates on `.type`; the arm value
+        // is `.value`; struct fields (sorobanMeta, operations, events) are properties.
+        if (meta.type === "v3")
+            return meta.value.sorobanMeta?.events ?? [];
+        if (meta.type === "v4") {
+            const v4 = meta.value;
             return [
-                ...v4.operations().flatMap((op) => op.events()),
-                ...v4.events().map((te) => te.event()),
+                ...v4.operations.flatMap((op) => op.events),
+                ...v4.events.map((te) => te.event),
             ];
         }
         return [];
@@ -62,16 +64,16 @@ function decodeIssuedEvents(events, registrarId) {
     const out = [];
     for (const ev of events) {
         try {
-            const cid = ev.contractId();
+            const cid = ev.contractId; // (SDK17) property, ContractId | null
             if (!cid)
                 continue;
-            if (Address.contract(cid).toString() !== registrarId)
+            if (Address.contract(cid.toBytes()).toString() !== registrarId)
                 continue;
-            const body = ev.body().v0();
-            const topics = body.topics();
+            const body = ev.body.value; // ContractEventBody → ContractEventV0
+            const topics = body.topics;
             if (topics.length < 1 || scValToNative(topics[0]) !== "issued")
                 continue;
-            const data = scValToNative(body.data());
+            const data = scValToNative(body.data);
             if (!(data?.[0] instanceof Uint8Array) || typeof data?.[1] !== "string")
                 continue;
             out.push({ label: new TextDecoder().decode(data[0]), holder: data[1] });
@@ -92,7 +94,7 @@ export const DEPLOYMENTS = {
         passphrase: Networks.TESTNET,
         // The immutable Registry. The Registrar for a namespace is discovered on
         // chain via `registrar_of(node)` — never configured by hand.
-        registryId: "CAUEHYVLLNNDZ4H5QWCPBDWEONRI44SI3XYSEACB4U3HYILIVQGQAMNI",
+        registryId: "CBSORANXTUFKBZK74AAM2ZM5OX2V7PIXUADM3HGP6WU3IDN7M3YEEDLU",
     },
 };
 /** A TxSigner over a raw secret key — for backends and scripts. */
@@ -203,6 +205,13 @@ function typedError(contractId, fn, raw, names, txHash = null) {
 // ---------------------------------------------------------------------------
 const LABEL_RE = /^[a-z0-9]([a-z0-9-]*[a-z0-9])?$/;
 /** Contract label rules: 1–63 bytes of a-z 0-9, `-` neither first nor last. */
+export function normalizeLabel(value) {
+    if (typeof value !== "string" || /[^\x00-\x7f]/.test(value))
+        throw new OwnerError("label must contain ASCII characters only");
+    const normalized = value.toLowerCase();
+    assertLabel(normalized);
+    return normalized;
+}
 function assertLabel(label) {
     if (label.length < 1 || label.length > 63 || !LABEL_RE.test(label)) {
         throw new OwnerError(`invalid label "${label}" — 1-63 chars of a-z, 0-9, and non-edge hyphens`);
@@ -278,7 +287,7 @@ export class SoranOwner {
     // ---- discovery -----------------------------------------------------------
     /** The namespace's on-chain attested Registrar id. Cached per instance. */
     async registrarOf(namespace) {
-        assertLabel(namespace);
+        namespace = normalizeLabel(namespace);
         const hit = this.registrars.get(namespace);
         if (hit && Date.now() - hit.at < SoranOwner.REGISTRAR_TTL_MS)
             return hit.value;
@@ -293,7 +302,7 @@ export class SoranOwner {
     }
     /** The namespace's current owner on the Registry, or null if unallocated. */
     async namespaceOwner(namespace) {
-        assertLabel(namespace);
+        namespace = normalizeLabel(namespace);
         return (await this.read(this.registryId, "owner_of", [
             nodeArg(namehash(namespace)),
         ]));
@@ -317,7 +326,7 @@ export class SoranOwner {
     // ---- registrar: issuance -------------------------------------------------
     /** Issue `label.namespace` to `holder`. Owner-signed; term set by policy. */
     async issue(namespace, label, holder) {
-        assertLabel(label);
+        label = normalizeLabel(label);
         const registrarId = await this.registrarOf(namespace);
         const r = await this.invoke(registrarId, "issue", [labelArg(label), addrArg(holder)], REGISTRAR_ERRORS);
         return { hash: r.hash, ledger: r.ledger, node: toHex(r.returnValue) };
@@ -336,8 +345,7 @@ export class SoranOwner {
         if (entries.length > MAX_BATCH) {
             throw new OwnerError(`issueBatch: ${entries.length} entries exceeds the contract cap of ${MAX_BATCH} per transaction — split the batch`);
         }
-        for (const e of entries)
-            assertLabel(e.label);
+        entries = entries.map(e => ({ ...e, label: normalizeLabel(e.label) }));
         const registrarId = await this.registrarOf(namespace);
         const r = await this.invoke(registrarId, "issue_batch", [
             xdr.ScVal.scvVec(entries.map((e) => labelArg(e.label))),
@@ -422,14 +430,14 @@ export class SoranOwner {
      * policy never allowed it and after `make_permanent` removed it forever.
      */
     async reclaim(namespace, label) {
-        assertLabel(label);
+        label = normalizeLabel(label);
         const registrarId = await this.registrarOf(namespace);
         const r = await this.invoke(registrarId, "reclaim", [labelArg(label)], REGISTRAR_ERRORS);
         return { hash: r.hash, ledger: r.ledger };
     }
     /** Extend a finite-term name. Returns the new expiry (unix seconds). */
     async renew(namespace, label, extendSecs) {
-        assertLabel(label);
+        label = normalizeLabel(label);
         const registrarId = await this.registrarOf(namespace);
         const r = await this.invoke(registrarId, "renew", [labelArg(label), nativeToScVal(extendSecs, { type: "u64" })], REGISTRAR_ERRORS);
         return { hash: r.hash, ledger: r.ledger, expiresAt: BigInt(r.returnValue) };
@@ -461,19 +469,19 @@ export class SoranOwner {
      * accepts; re-proposing replaces the pending offer, cancel withdraws it.
      */
     async proposeNamespaceTransfer(namespace, to) {
-        assertLabel(namespace);
+        namespace = normalizeLabel(namespace);
         const r = await this.invoke(this.registryId, "propose_transfer", [nodeArg(namehash(namespace)), addrArg(to)], REGISTRY_ERRORS);
         return { hash: r.hash, ledger: r.ledger };
     }
     /** Accept a namespace offered to you. Signer must be the PROPOSED owner. */
     async acceptNamespaceTransfer(namespace) {
-        assertLabel(namespace);
+        namespace = normalizeLabel(namespace);
         const r = await this.invoke(this.registryId, "accept_transfer", [nodeArg(namehash(namespace))], REGISTRY_ERRORS);
         return { hash: r.hash, ledger: r.ledger };
     }
     /** Withdraw a pending namespace transfer. Current owner only. */
     async cancelNamespaceTransfer(namespace) {
-        assertLabel(namespace);
+        namespace = normalizeLabel(namespace);
         const r = await this.invoke(this.registryId, "cancel_transfer", [nodeArg(namehash(namespace))], REGISTRY_ERRORS);
         return { hash: r.hash, ledger: r.ledger };
     }
@@ -482,7 +490,7 @@ export class SoranOwner {
      * Refused (ResolverFrozen) once the namespace is permanent.
      */
     async setResolver(namespace, resolver) {
-        assertLabel(namespace);
+        namespace = normalizeLabel(namespace);
         const r = await this.invoke(this.registryId, "set_resolver", [nodeArg(namehash(namespace)), resolver === null ? xdr.ScVal.scvVoid() : addrArg(resolver)], REGISTRY_ERRORS);
         return { hash: r.hash, ledger: r.ledger };
     }
@@ -506,13 +514,13 @@ export class SoranOwner {
     }
     /** Current state of `label.namespace`, or null if never issued. */
     async nameState(namespace, label) {
-        assertLabel(label);
+        label = normalizeLabel(label);
         const registrarId = await this.registrarOf(namespace);
         return this.readRecord(registrarId, label);
     }
     /** The pending namespace transfer on the Registry, or null. */
     async pendingNamespaceTransfer(namespace) {
-        assertLabel(namespace);
+        namespace = normalizeLabel(namespace);
         return this.read(this.registryId, "pending_transfer", [nodeArg(namehash(namespace))]);
     }
     // ---- internals -----------------------------------------------------------
@@ -598,12 +606,12 @@ export class SoranOwner {
     assertSatisfiableAuth(prepared, pub, contractId, fn) {
         const op = prepared.operations[0];
         for (const entry of op?.auth ?? []) {
-            const cred = entry.credentials();
-            if (cred.switch() !== xdr.SorobanCredentialsType.sorobanCredentialsAddress())
+            const cred = entry.credentials;
+            if (cred.type !== "sorobanCredentialsAddress")
                 continue;
             let required;
             try {
-                required = Address.fromScAddress(cred.address().address()).toString();
+                required = Address.fromScAddress(cred.address.address).toString();
             }
             catch {
                 continue; // unreadable credential — let the chain be the judge
@@ -621,7 +629,10 @@ export class SoranOwner {
             .setTimeout(this.timeoutSecs)
             .build();
         let tx = build(await this.sourceAccount(pub, fn));
-        let sim = await this.server.simulateTransaction(tx);
+        // (SDK17/P28) useUpgradedAuth=false keeps legacy V1 SorobanCredentials rather
+        // than CAP-71 address-bound V2 — valid against P27 (pre-vote) and P28 (post),
+        // and keeps assertSatisfiableAuth's `sorobanCredentialsAddress` check exact.
+        let sim = await this.server.simulateTransaction(tx, undefined, undefined, false);
         // Archived entries (e.g. a dormant Registrar's instance) need restoring
         // before the call can run. Each restore is its own owner-signed
         // transaction; two rounds cover an entry archiving mid-flow, and beyond
@@ -632,7 +643,7 @@ export class SoranOwner {
             }
             await this.restore(sim, pub);
             tx = build(await this.sourceAccount(pub, fn));
-            sim = await this.server.simulateTransaction(tx);
+            sim = await this.server.simulateTransaction(tx, undefined, undefined, false);
         }
         if (rpc.Api.isSimulationError(sim)) {
             throw typedError(contractId, fn, sim.error, errNames);
@@ -641,7 +652,7 @@ export class SoranOwner {
         this.assertSatisfiableAuth(prepared, pub, contractId, fn);
         // The hash is fixed before signatures — compute it now so every failure
         // past this point can carry it (the "re-check before retrying" contract).
-        const txHash = prepared.hash().toString("hex");
+        const txHash = toHex(prepared.hash()); // (SDK17) hash() is Uint8Array
         const signed = await this.signEnvelope(prepared.toXDR());
         const envelope = TransactionBuilder.fromXDR(signed, this.passphrase);
         let sent;
@@ -722,18 +733,18 @@ export class SoranOwner {
         let code = null;
         try {
             const meta = got.resultMetaXdr;
-            const diags = got.diagnosticEventsXdr ?? (meta && meta.switch() === 3
-                ? (meta.v3().sorobanMeta()?.diagnosticEvents() ?? [])
-                : meta && meta.switch() === 4
-                    ? meta.v4().diagnosticEvents()
+            const diags = got.diagnosticEventsXdr ?? (meta && meta.type === "v3"
+                ? (meta.value.sorobanMeta?.diagnosticEvents ?? [])
+                : meta && meta.type === "v4"
+                    ? meta.value.diagnosticEvents
                     : []);
             outer: for (const d of diags) {
-                const body = d.event().body().v0();
-                for (const v of [...body.topics(), body.data()]) {
-                    if (v.switch() === xdr.ScValType.scvError()) {
-                        const err = v.error();
-                        if (err.switch() === xdr.ScErrorType.sceContract()) {
-                            code = err.contractCode();
+                const body = d.event.body.value;
+                for (const v of [...body.topics, body.data]) {
+                    if (v.type === "scvError") {
+                        const err = v.error;
+                        if (err.type === "sceContract") {
+                            code = err.contractCode;
                             break outer;
                         }
                     }
@@ -745,7 +756,7 @@ export class SoranOwner {
         }
         let resultCode = `tx status ${got.status}`;
         try {
-            resultCode = got.resultXdr?.result().switch().name ?? resultCode;
+            resultCode = got.resultXdr?.result.type ?? resultCode;
         }
         catch {
             /* keep the plain status */

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@sorandomains/owner",
-  "version": "0.3.1",
+  "version": "0.5.0",
   "description": "Run your Soran namespace on Stellar \u2014 issue names, manage lifecycle, transfer, and walk the one-way permanence door.",
   "type": "module",
   "main": "./dist/index.js",
@@ -12,7 +12,8 @@
     "build": "tsc",
     "typecheck": "tsc --noEmit",
     "prepublishOnly": "tsc",
-    "check:browser": "esbuild dist/index.js --bundle --platform=browser --external:@stellar/stellar-sdk --outfile=browser-check.js --legal-comments=none --log-level=error && node -e \"const fs=require('fs');const s=fs.readFileSync('browser-check.js','utf8');fs.unlinkSync('browser-check.js');if(/\\bBuffer\\b/.test(s)){console.error('FAIL: bare Buffer reference in browser bundle');process.exit(1)}console.log('browser bundle clean')\""
+    "check:browser": "esbuild dist/index.js --bundle --platform=browser --external:@stellar/stellar-sdk --outfile=browser-check.js --legal-comments=none --log-level=error && node -e \"const fs=require('fs');const s=fs.readFileSync('browser-check.js','utf8');fs.unlinkSync('browser-check.js');if(/\\bBuffer\\b/.test(s)){console.error('FAIL: bare Buffer reference in browser bundle');process.exit(1)}console.log('browser bundle clean')\"",
+    "test": "node --import tsx test/decode-failure.test.mts && node --import tsx --test test/integration.test.mts"
   },
   "license": "MIT",
   "repository": {
@@ -33,14 +34,14 @@
     "issuance"
   ],
   "peerDependencies": {
-    "@stellar/stellar-sdk": ">=13 <17"
+    "@stellar/stellar-sdk": ">=17 <18"
   },
   "devDependencies": {
-    "@stellar/stellar-sdk": "^16.2.0",
+    "@stellar/stellar-sdk": "^17.0.1",
     "@types/node": "^22.20.1",
+    "esbuild": "^0.25.0",
     "tsx": "^4.19.2",
-    "typescript": "^5.7.3",
-    "esbuild": "^0.25.0"
+    "typescript": "^5.7.3"
   },
   "exports": {
     ".": {