@totemsdk/core 1.0.11 → 1.1.0

package/dist/index.d.ts

@@ -10,8 +10,8 @@ export type { WotsIndices } from './tx/index.js';
 export * from './utils.js';
 export { F, hex, fromHex, u16be, u32be, assert32, h, prfChainSeed, toWinternitzDigits, baseWWithChecksum, derivePKdigest, wotsKeypairFromSeed, wotsSign, wotsSignLegacy, wotsPkFromSig, wotsVerify, wotsVerifyDigest, wotsPublicKeyFromSeed, type WotsKeypair, type WotsSignature, } from './wots.js';
 export * from './params.js';
-export { serializeMiniNumber, serializeMiniData, hashAllObjects, deriveChainSeedJava, deriveChildTreeSeedJava, hashObject, serializeMiniNumberZERO, serializeMiniNumberONE, writeHashToStream, javaHashAllObjects, indexToMiniDataBytes, derivePerAddressSeed, createMMREntryNumber, serializeMMREntryNumber, serializeMMRData, serializeMMREntry, precomputeTransactionCoinID, type MMREntryNumber as JavaMMREntryNumber, type MMRData as JavaMMRData, type MMREntry as JavaMMREntry, } from './javaStreamables.js';
-export { TreeKey, type KeyGenProgress, type ProgressCallback, TreeKeyNode, verifyTreeSignature, serializeTreeSignature, deserializeTreeSignature, getRootPublicKey, DEFAULT_KEYS_PER_LEVEL, DEFAULT_LEVELS, type SignatureProof, type TreeSignature, createPerAddressTreeKey, createPerAddressTreeKeyAsync, deriveAddressPublicKey, getPerAddressPublicKey, } from './treekey.js';
+export { serializeMiniNumber, serializeMiniData, hashAllObjects, deriveChainSeedJava, deriveChildTreeSeedJava, hashObject, serializeMiniNumberZERO, serializeMiniNumberONE, writeHashToStream, javaHashAllObjects, indexToMiniDataBytes, derivePerAddressSeed, deriveRootPrivSeed, deriveUnifiedChildSeed, createMMREntryNumber, serializeMMREntryNumber, serializeMMRData, serializeMMREntry, precomputeTransactionCoinID, type MMREntryNumber as JavaMMREntryNumber, type MMRData as JavaMMRData, type MMREntry as JavaMMREntry, } from './javaStreamables.js';
+export { TreeKey, type KeyGenProgress, type ProgressCallback, TreeKeyNode, verifyTreeSignature, serializeTreeSignature, deserializeTreeSignature, getRootPublicKey, DEFAULT_KEYS_PER_LEVEL, DEFAULT_LEVELS, type SignatureProof, type TreeSignature, createUnifiedChildTreeKey, createUnifiedChildTreeKeyAsync, createUnifiedRootTreeKey, deriveUnifiedAddressPublicKey, createPerAddressTreeKey, createPerAddressTreeKeyAsync, } from './treekey.js';
 export { scriptFromWotsPk, wotsAddressFromKeypair } from './script.js';
 export * from './minima32.js';
 export * from './mmr.js';

package/dist/index.js

@@ -18,8 +18,8 @@ var __exportStar = (this && this.__exportStar) || function(m, exports) {
     for (var p in m) if (p !== "default" && !Object.prototype.hasOwnProperty.call(exports, p)) __createBinding(exports, m, p);
 };
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.serializeTreeSignature = exports.verifyTreeSignature = exports.TreeKeyNode = exports.TreeKey = exports.precomputeTransactionCoinID = exports.serializeMMREntry = exports.serializeMMRData = exports.serializeMMREntryNumber = exports.createMMREntryNumber = exports.derivePerAddressSeed = exports.indexToMiniDataBytes = exports.javaHashAllObjects = exports.writeHashToStream = exports.serializeMiniNumberONE = exports.serializeMiniNumberZERO = exports.hashObject = exports.deriveChildTreeSeedJava = exports.deriveChainSeedJava = exports.hashAllObjects = exports.serializeMiniData = exports.serializeMiniNumber = exports.wotsPublicKeyFromSeed = exports.wotsVerifyDigest = exports.wotsVerify = exports.wotsPkFromSig = exports.wotsSignLegacy = exports.wotsSign = exports.wotsKeypairFromSeed = exports.derivePKdigest = exports.baseWWithChecksum = exports.toWinternitzDigits = exports.prfChainSeed = exports.h = exports.assert32 = exports.u32be = exports.u16be = exports.fromHex = exports.hex = exports.F = exports.TransactionReceiptStore = exports.WatermarkExhaustedError = exports.TransactionLifecycleError = exports.TransactionLifecycle = exports.TransactionService = exports.flatIndexFromLanes = exports.finalizeLease = exports.prepareLease = exports.LeaseMonitor = exports.WatermarkStore = exports.LeaseStore = void 0;
-exports.writeMiniString = exports.bigIntToByteArray = exports.bytesToHex = exports.hexToBytes = exports.concat = exports.writeMMREntryNumber = exports.writeMiniByte = exports.writeMiniData = exports.writeMiniNumber = exports.MINIMA_CONSTANTS = exports.validateChallenge = exports.createChallenge = exports.normalizeHex = exports.deriveAddressFromPublicKey = exports.verifyTreeSignatureDetailed = exports.verifySignatureDetailed = exports.verifySignature = exports.buildMinimaCoin = exports.createDefaultTransaction = exports.precomputeTransactionCoinIDTx = exports.computeTransactionDigest = exports.serializeTransaction = exports.serializeCoin = exports.parseDecimalToMiniNumber = exports.generateSeedPhrase = exports.generateWordList = exports.phraseToSeed = exports.convertWordListToSeed = exports.convertStringToSeed = exports.validatePhrase = exports.cleanSeedPhrase = exports.WORD_LIST = exports.addressToRoot = exports.scriptToAddress = exports.wotsAddressFromKeypair = exports.scriptFromWotsPk = exports.getPerAddressPublicKey = exports.deriveAddressPublicKey = exports.createPerAddressTreeKeyAsync = exports.createPerAddressTreeKey = exports.DEFAULT_LEVELS = exports.DEFAULT_KEYS_PER_LEVEL = exports.getRootPublicKey = exports.deserializeTreeSignature = void 0;
+exports.TreeKeyNode = exports.TreeKey = exports.precomputeTransactionCoinID = exports.serializeMMREntry = exports.serializeMMRData = exports.serializeMMREntryNumber = exports.createMMREntryNumber = exports.deriveUnifiedChildSeed = exports.deriveRootPrivSeed = exports.derivePerAddressSeed = exports.indexToMiniDataBytes = exports.javaHashAllObjects = exports.writeHashToStream = exports.serializeMiniNumberONE = exports.serializeMiniNumberZERO = exports.hashObject = exports.deriveChildTreeSeedJava = exports.deriveChainSeedJava = exports.hashAllObjects = exports.serializeMiniData = exports.serializeMiniNumber = exports.wotsPublicKeyFromSeed = exports.wotsVerifyDigest = exports.wotsVerify = exports.wotsPkFromSig = exports.wotsSignLegacy = exports.wotsSign = exports.wotsKeypairFromSeed = exports.derivePKdigest = exports.baseWWithChecksum = exports.toWinternitzDigits = exports.prfChainSeed = exports.h = exports.assert32 = exports.u32be = exports.u16be = exports.fromHex = exports.hex = exports.F = exports.TransactionReceiptStore = exports.WatermarkExhaustedError = exports.TransactionLifecycleError = exports.TransactionLifecycle = exports.TransactionService = exports.flatIndexFromLanes = exports.finalizeLease = exports.prepareLease = exports.LeaseMonitor = exports.WatermarkStore = exports.LeaseStore = void 0;
+exports.writeMiniString = exports.bigIntToByteArray = exports.bytesToHex = exports.hexToBytes = exports.concat = exports.writeMMREntryNumber = exports.writeMiniByte = exports.writeMiniData = exports.writeMiniNumber = exports.MINIMA_CONSTANTS = exports.validateChallenge = exports.createChallenge = exports.normalizeHex = exports.deriveAddressFromPublicKey = exports.verifyTreeSignatureDetailed = exports.verifySignatureDetailed = exports.verifySignature = exports.buildMinimaCoin = exports.createDefaultTransaction = exports.precomputeTransactionCoinIDTx = exports.computeTransactionDigest = exports.serializeTransaction = exports.serializeCoin = exports.parseDecimalToMiniNumber = exports.generateSeedPhrase = exports.generateWordList = exports.phraseToSeed = exports.convertWordListToSeed = exports.convertStringToSeed = exports.validatePhrase = exports.cleanSeedPhrase = exports.WORD_LIST = exports.addressToRoot = exports.scriptToAddress = exports.wotsAddressFromKeypair = exports.scriptFromWotsPk = exports.createPerAddressTreeKeyAsync = exports.createPerAddressTreeKey = exports.deriveUnifiedAddressPublicKey = exports.createUnifiedRootTreeKey = exports.createUnifiedChildTreeKeyAsync = exports.createUnifiedChildTreeKey = exports.DEFAULT_LEVELS = exports.DEFAULT_KEYS_PER_LEVEL = exports.getRootPublicKey = exports.deserializeTreeSignature = exports.serializeTreeSignature = exports.verifyTreeSignature = void 0;
 // Version information for bundle duplication detection
 __exportStar(require("./version.js"), exports);
 // Platform-agnostic Adapters (SDK Upgrade)
@@ -75,9 +75,12 @@ Object.defineProperty(exports, "serializeMiniNumberZERO", { enumerable: true, ge
 Object.defineProperty(exports, "serializeMiniNumberONE", { enumerable: true, get: function () { return javaStreamables_js_1.serializeMiniNumberONE; } });
 Object.defineProperty(exports, "writeHashToStream", { enumerable: true, get: function () { return javaStreamables_js_1.writeHashToStream; } });
 Object.defineProperty(exports, "javaHashAllObjects", { enumerable: true, get: function () { return javaStreamables_js_1.javaHashAllObjects; } });
-// Per-address key derivation (Minima Wallet.java compatible) - 2026-02
+// Per-address key derivation (Minima Wallet.java compatible) - kept for migration detection
 Object.defineProperty(exports, "indexToMiniDataBytes", { enumerable: true, get: function () { return javaStreamables_js_1.indexToMiniDataBytes; } });
 Object.defineProperty(exports, "derivePerAddressSeed", { enumerable: true, get: function () { return javaStreamables_js_1.derivePerAddressSeed; } });
+// Unified hierarchical key derivation (2026-06)
+Object.defineProperty(exports, "deriveRootPrivSeed", { enumerable: true, get: function () { return javaStreamables_js_1.deriveRootPrivSeed; } });
+Object.defineProperty(exports, "deriveUnifiedChildSeed", { enumerable: true, get: function () { return javaStreamables_js_1.deriveUnifiedChildSeed; } });
 // MMREntryNumber and MMREntry serialization (2026-01-18)
 Object.defineProperty(exports, "createMMREntryNumber", { enumerable: true, get: function () { return javaStreamables_js_1.createMMREntryNumber; } });
 Object.defineProperty(exports, "serializeMMREntryNumber", { enumerable: true, get: function () { return javaStreamables_js_1.serializeMMREntryNumber; } });
@@ -94,11 +97,14 @@ Object.defineProperty(exports, "deserializeTreeSignature", { enumerable: true, g
 Object.defineProperty(exports, "getRootPublicKey", { enumerable: true, get: function () { return treekey_js_1.getRootPublicKey; } });
 Object.defineProperty(exports, "DEFAULT_KEYS_PER_LEVEL", { enumerable: true, get: function () { return treekey_js_1.DEFAULT_KEYS_PER_LEVEL; } });
 Object.defineProperty(exports, "DEFAULT_LEVELS", { enumerable: true, get: function () { return treekey_js_1.DEFAULT_LEVELS; } });
-// Per-address TreeKey helpers (Minima Wallet.java compatible) - 2026-02
+// Unified hierarchical TreeKey factories (2026-06)
+Object.defineProperty(exports, "createUnifiedChildTreeKey", { enumerable: true, get: function () { return treekey_js_1.createUnifiedChildTreeKey; } });
+Object.defineProperty(exports, "createUnifiedChildTreeKeyAsync", { enumerable: true, get: function () { return treekey_js_1.createUnifiedChildTreeKeyAsync; } });
+Object.defineProperty(exports, "createUnifiedRootTreeKey", { enumerable: true, get: function () { return treekey_js_1.createUnifiedRootTreeKey; } });
+Object.defineProperty(exports, "deriveUnifiedAddressPublicKey", { enumerable: true, get: function () { return treekey_js_1.deriveUnifiedAddressPublicKey; } });
+// @deprecated — migrate to createUnifiedChildTreeKey
 Object.defineProperty(exports, "createPerAddressTreeKey", { enumerable: true, get: function () { return treekey_js_1.createPerAddressTreeKey; } });
 Object.defineProperty(exports, "createPerAddressTreeKeyAsync", { enumerable: true, get: function () { return treekey_js_1.createPerAddressTreeKeyAsync; } });
-Object.defineProperty(exports, "deriveAddressPublicKey", { enumerable: true, get: function () { return treekey_js_1.deriveAddressPublicKey; } });
-Object.defineProperty(exports, "getPerAddressPublicKey", { enumerable: true, get: function () { return treekey_js_1.getPerAddressPublicKey; } });
 // Script helpers (for address derivation)
 var script_js_1 = require("./script.js");
 Object.defineProperty(exports, "scriptFromWotsPk", { enumerable: true, get: function () { return script_js_1.scriptFromWotsPk; } });

package/dist/javaStreamables.d.ts

@@ -210,6 +210,27 @@ export interface MMREntry {
  * @returns Serialized bytes: MiniNumber(row) + MMREntryNumber + MMRData
  */
 export declare function serializeMMREntry(entry: MMREntry): Uint8Array;
+/**
+ * Derive the unified root private seed from a base wallet seed.
+ *
+ * Architecture:
+ *   root_priv_seed = SHA3-256( serializeMiniData(baseSeed) ‖ serializeMiniData("ROOT_IDENTITY" bytes) )
+ *
+ * @param baseSeed - 32-byte wallet base seed (from mnemonic)
+ * @returns 32-byte root private seed
+ */
+export declare function deriveRootPrivSeed(baseSeed: Uint8Array): Uint8Array;
+/**
+ * Derive a unified child seed for the address at `index`.
+ *
+ * Architecture:
+ *   child_seed_i = SHA3-256( serializeMiniData(root_priv_seed) ‖ serializeMiniData(indexBytes(i)) )
+ *
+ * @param baseSeed - 32-byte wallet base seed (from mnemonic)
+ * @param index - Address index (0-63)
+ * @returns 32-byte child seed for the TreeKey at this address
+ */
+export declare function deriveUnifiedChildSeed(baseSeed: Uint8Array, index: number): Uint8Array;
 /**
  * Precompute output coin IDs before computing the transaction digest.
  *

package/dist/javaStreamables.js

@@ -30,6 +30,8 @@ exports.createMMREntryNumber = createMMREntryNumber;
 exports.serializeMMREntryNumber = serializeMMREntryNumber;
 exports.serializeMMRData = serializeMMRData;
 exports.serializeMMREntry = serializeMMREntry;
+exports.deriveRootPrivSeed = deriveRootPrivSeed;
+exports.deriveUnifiedChildSeed = deriveUnifiedChildSeed;
 exports.precomputeTransactionCoinID = precomputeTransactionCoinID;
 const sha3_js_1 = require("@noble/hashes/sha3.js");
 const Streamable_js_1 = require("./Streamable.js");
@@ -316,6 +318,44 @@ function serializeMMREntry(entry) {
     result.set(mmrDataSerialized, offset);
     return result;
 }
+/**
+ * Derive the unified root private seed from a base wallet seed.
+ *
+ * Architecture:
+ *   root_priv_seed = SHA3-256( serializeMiniData(baseSeed) ‖ serializeMiniData("ROOT_IDENTITY" bytes) )
+ *
+ * @param baseSeed - 32-byte wallet base seed (from mnemonic)
+ * @returns 32-byte root private seed
+ */
+function deriveRootPrivSeed(baseSeed) {
+    const baseSeedSerialized = serializeMiniData(baseSeed);
+    const rootIdentityBytes = new TextEncoder().encode('ROOT_IDENTITY');
+    const rootIdentitySerialized = serializeMiniData(rootIdentityBytes);
+    const combined = new Uint8Array(baseSeedSerialized.length + rootIdentitySerialized.length);
+    combined.set(baseSeedSerialized, 0);
+    combined.set(rootIdentitySerialized, baseSeedSerialized.length);
+    return (0, sha3_js_1.sha3_256)(combined);
+}
+/**
+ * Derive a unified child seed for the address at `index`.
+ *
+ * Architecture:
+ *   child_seed_i = SHA3-256( serializeMiniData(root_priv_seed) ‖ serializeMiniData(indexBytes(i)) )
+ *
+ * @param baseSeed - 32-byte wallet base seed (from mnemonic)
+ * @param index - Address index (0-63)
+ * @returns 32-byte child seed for the TreeKey at this address
+ */
+function deriveUnifiedChildSeed(baseSeed, index) {
+    const rootPrivSeed = deriveRootPrivSeed(baseSeed);
+    const modifierBytes = indexToMiniDataBytes(index);
+    const rootSeedSerialized = serializeMiniData(rootPrivSeed);
+    const modifierSerialized = serializeMiniData(modifierBytes);
+    const combined = new Uint8Array(rootSeedSerialized.length + modifierSerialized.length);
+    combined.set(rootSeedSerialized, 0);
+    combined.set(modifierSerialized, rootSeedSerialized.length);
+    return (0, sha3_js_1.sha3_256)(combined);
+}
 /**
  * Precompute output coin IDs before computing the transaction digest.
  *

package/dist/treekey.d.ts

@@ -326,58 +326,74 @@ export declare function serializeTreeSignature(sig: TreeSignature): Bytes;
 export declare function deserializeTreeSignature(data: Bytes): TreeSignature;
 /**
  * ============================================================================
- * PER-ADDRESS TREEKEY FACTORY
+ * UNIFIED TREEKEY FACTORY
  * ============================================================================
  *
- * Minima Wallet.createNewKey() creates independent TreeKeys per address:
- *   MiniData modifier = new MiniData(new BigInteger(Integer.toString(numkeys)));
- *   MiniData privseed = Crypto.getInstance().hashObjects(baseSeed, modifier);
- *   TreeKey treekey = TreeKey.createDefault(privseed);
+ * Single hierarchical derivation scheme:
  *
- * Each address gets its own TreeKey with:
- * - Unique seed derived from baseSeed + addressIndex
- * - Size=64, depth=3 (matching TreeKey.createDefault)
- * - 4096 one-time signatures per address (64×64)
+ *   root_priv_seed  = deriveRootPrivSeed(baseSeed)
+ *   child_seed_i    = deriveUnifiedChildSeed(baseSeed, i)
+ *   child_treekey_i = new TreeKey(child_seed_i, 64, 3)   ← spend address i
+ *   root_treekey    = new TreeKey(root_priv_seed, 64, 3)  ← identity anchor
  *
- * Total wallet capacity: 64 addresses × 4096 signatures = 262,144 signatures
+ * Child seeds are cryptographically descended from root_priv_seed, not siblings.
+ * Addresses are Minima-compatible (RETURN SIGNEDBY(pubkey) scripts, WOTS sigs).
+ * The root TreeKey is NEVER used as a spend address.
+ *
+ * Signature capacity: 64 addresses × 4 096 signatures each = 262 144 total.
+ * Root identity capacity: 4 096 attestation signatures.
  * ============================================================================
  */
 /**
- * Create a per-address TreeKey matching Minima Wallet.createNewKey()
+ * Create the unified child TreeKey for spend address at `index`.
+ *
+ * Derivation: child_seed_i = deriveUnifiedChildSeed(baseSeed, i)
+ *             treeKey = new TreeKey(child_seed_i, 64, 3)
  *
  * @param baseSeed - 32-byte wallet base seed (from mnemonic)
- * @param addressIndex - Address index (0-63)
- * @returns TreeKey for this address with size=64, depth=3
+ * @param index - Address index (0-63)
+ * @returns TreeKey for this spend address with size=64, depth=3
  */
-export declare function createPerAddressTreeKey(baseSeed: Bytes, addressIndex: number): TreeKey;
+export declare function createUnifiedChildTreeKey(baseSeed: Bytes, index: number): TreeKey;
 /**
- * Async version with progress reporting for UI
+ * Async version with progress reporting for UI.
  *
  * @param baseSeed - 32-byte wallet base seed
- * @param addressIndex - Address index (0-63)
+ * @param index - Address index (0-63)
  * @param onProgress - Optional progress callback
- * @returns Promise resolving to TreeKey for this address
+ * @returns Promise resolving to the child TreeKey
  */
-export declare function createPerAddressTreeKeyAsync(baseSeed: Bytes, addressIndex: number, onProgress?: ProgressCallback): Promise<TreeKey>;
+export declare function createUnifiedChildTreeKeyAsync(baseSeed: Bytes, index: number, onProgress?: ProgressCallback): Promise<TreeKey>;
 /**
- * Derive address public key from base seed and address index
+ * Create the unified root identity TreeKey (identity anchor, never a spend address).
  *
- * This is the fast path for getting an address public key without
- * needing to construct the full TreeKey. Useful for address derivation
- * during wallet initialization.
+ * Derivation: root_priv_seed = deriveRootPrivSeed(baseSeed)
+ *             treeKey = new TreeKey(root_priv_seed, 64, 3)
  *
- * @param baseSeed - 32-byte wallet base seed
- * @param addressIndex - Address index (0-63)
- * @returns 32-byte address public key (MMR root of per-address TreeKey)
+ * @param baseSeed - 32-byte wallet base seed (from mnemonic)
+ * @returns Root identity TreeKey with size=64, depth=3
  */
-export declare function deriveAddressPublicKey(baseSeed: Bytes, addressIndex: number): Bytes;
+export declare function createUnifiedRootTreeKey(baseSeed: Bytes): TreeKey;
 /**
- * Get the address public key from a per-address TreeKey
- *
- * In the per-address architecture, each address has its own TreeKey,
- * and the address public key is simply the TreeKey's root public key.
+ * Fast path for deriving a child address public key without constructing
+ * the full TreeKey. Useful during wallet initialisation.
  *
- * @param treeKey - Per-address TreeKey
- * @returns 32-byte address public key (TreeKey root)
+ * @param baseSeed - 32-byte wallet base seed
+ * @param index - Address index (0-63)
+ * @returns 32-byte address public key (MMR root of child TreeKey)
+ */
+export declare function deriveUnifiedAddressPublicKey(baseSeed: Bytes, index: number): Bytes;
+/**
+ * @deprecated Use {@link createUnifiedChildTreeKey} instead.
+ * This wrapper preserves the LEGACY per-address seed derivation
+ * (`SHA3-256(baseSeed ‖ indexBytes(i))`) so that existing callers
+ * that import this symbol by name continue to derive the same keys.
+ * New code must use createUnifiedChildTreeKey which applies the unified
+ * two-step derivation (root_priv_seed → child_seed_i).
  */
-export declare function getPerAddressPublicKey(treeKey: TreeKey): Bytes;
+export declare function createPerAddressTreeKey(baseSeed: Bytes, addressIndex: number): TreeKey;
+/**
+ * @deprecated Use {@link createUnifiedChildTreeKeyAsync} instead.
+ * Preserves legacy per-address seed derivation for backward compatibility.
+ */
+export declare function createPerAddressTreeKeyAsync(baseSeed: Bytes, addressIndex: number, onProgress?: ProgressCallback): Promise<TreeKey>;

package/dist/treekey.js

@@ -18,10 +18,12 @@ exports.getRootPublicKey = getRootPublicKey;
 exports.verifyTreeSignature = verifyTreeSignature;
 exports.serializeTreeSignature = serializeTreeSignature;
 exports.deserializeTreeSignature = deserializeTreeSignature;
+exports.createUnifiedChildTreeKey = createUnifiedChildTreeKey;
+exports.createUnifiedChildTreeKeyAsync = createUnifiedChildTreeKeyAsync;
+exports.createUnifiedRootTreeKey = createUnifiedRootTreeKey;
+exports.deriveUnifiedAddressPublicKey = deriveUnifiedAddressPublicKey;
 exports.createPerAddressTreeKey = createPerAddressTreeKey;
 exports.createPerAddressTreeKeyAsync = createPerAddressTreeKeyAsync;
-exports.deriveAddressPublicKey = deriveAddressPublicKey;
-exports.getPerAddressPublicKey = getPerAddressPublicKey;
 const javaStreamables_js_1 = require("./javaStreamables.js");
 const wots_js_1 = require("./wots.js");
 const params_js_1 = require("./params.js");
@@ -706,69 +708,95 @@ function deserializeTreeSignature(data) {
 }
 /**
  * ============================================================================
- * PER-ADDRESS TREEKEY FACTORY
+ * UNIFIED TREEKEY FACTORY
  * ============================================================================
  *
- * Minima Wallet.createNewKey() creates independent TreeKeys per address:
- *   MiniData modifier = new MiniData(new BigInteger(Integer.toString(numkeys)));
- *   MiniData privseed = Crypto.getInstance().hashObjects(baseSeed, modifier);
- *   TreeKey treekey = TreeKey.createDefault(privseed);
+ * Single hierarchical derivation scheme:
  *
- * Each address gets its own TreeKey with:
- * - Unique seed derived from baseSeed + addressIndex
- * - Size=64, depth=3 (matching TreeKey.createDefault)
- * - 4096 one-time signatures per address (64×64)
+ *   root_priv_seed  = deriveRootPrivSeed(baseSeed)
+ *   child_seed_i    = deriveUnifiedChildSeed(baseSeed, i)
+ *   child_treekey_i = new TreeKey(child_seed_i, 64, 3)   ← spend address i
+ *   root_treekey    = new TreeKey(root_priv_seed, 64, 3)  ← identity anchor
  *
- * Total wallet capacity: 64 addresses × 4096 signatures = 262,144 signatures
+ * Child seeds are cryptographically descended from root_priv_seed, not siblings.
+ * Addresses are Minima-compatible (RETURN SIGNEDBY(pubkey) scripts, WOTS sigs).
+ * The root TreeKey is NEVER used as a spend address.
+ *
+ * Signature capacity: 64 addresses × 4 096 signatures each = 262 144 total.
+ * Root identity capacity: 4 096 attestation signatures.
  * ============================================================================
  */
 /**
- * Create a per-address TreeKey matching Minima Wallet.createNewKey()
+ * Create the unified child TreeKey for spend address at `index`.
+ *
+ * Derivation: child_seed_i = deriveUnifiedChildSeed(baseSeed, i)
+ *             treeKey = new TreeKey(child_seed_i, 64, 3)
  *
  * @param baseSeed - 32-byte wallet base seed (from mnemonic)
- * @param addressIndex - Address index (0-63)
- * @returns TreeKey for this address with size=64, depth=3
+ * @param index - Address index (0-63)
+ * @returns TreeKey for this spend address with size=64, depth=3
  */
-function createPerAddressTreeKey(baseSeed, addressIndex) {
-    const addressSeed = (0, javaStreamables_js_1.derivePerAddressSeed)(baseSeed, addressIndex);
-    return new TreeKey(addressSeed, 64, 3);
+function createUnifiedChildTreeKey(baseSeed, index) {
+    const childSeed = (0, javaStreamables_js_1.deriveUnifiedChildSeed)(baseSeed, index);
+    return new TreeKey(childSeed, 64, 3);
 }
 /**
- * Async version with progress reporting for UI
+ * Async version with progress reporting for UI.
  *
  * @param baseSeed - 32-byte wallet base seed
- * @param addressIndex - Address index (0-63)
+ * @param index - Address index (0-63)
  * @param onProgress - Optional progress callback
- * @returns Promise resolving to TreeKey for this address
+ * @returns Promise resolving to the child TreeKey
  */
-async function createPerAddressTreeKeyAsync(baseSeed, addressIndex, onProgress) {
-    const addressSeed = (0, javaStreamables_js_1.derivePerAddressSeed)(baseSeed, addressIndex);
-    return TreeKey.createWithProgress(addressSeed, 64, 3, onProgress);
+async function createUnifiedChildTreeKeyAsync(baseSeed, index, onProgress) {
+    const childSeed = (0, javaStreamables_js_1.deriveUnifiedChildSeed)(baseSeed, index);
+    return TreeKey.createWithProgress(childSeed, 64, 3, onProgress);
 }
 /**
- * Derive address public key from base seed and address index
+ * Create the unified root identity TreeKey (identity anchor, never a spend address).
  *
- * This is the fast path for getting an address public key without
- * needing to construct the full TreeKey. Useful for address derivation
- * during wallet initialization.
+ * Derivation: root_priv_seed = deriveRootPrivSeed(baseSeed)
+ *             treeKey = new TreeKey(root_priv_seed, 64, 3)
  *
- * @param baseSeed - 32-byte wallet base seed
- * @param addressIndex - Address index (0-63)
- * @returns 32-byte address public key (MMR root of per-address TreeKey)
+ * @param baseSeed - 32-byte wallet base seed (from mnemonic)
+ * @returns Root identity TreeKey with size=64, depth=3
  */
-function deriveAddressPublicKey(baseSeed, addressIndex) {
-    const treeKey = createPerAddressTreeKey(baseSeed, addressIndex);
-    return treeKey.getPublicKey();
+function createUnifiedRootTreeKey(baseSeed) {
+    const rootPrivSeed = (0, javaStreamables_js_1.deriveRootPrivSeed)(baseSeed);
+    return new TreeKey(rootPrivSeed, 64, 3);
 }
 /**
- * Get the address public key from a per-address TreeKey
+ * Fast path for deriving a child address public key without constructing
+ * the full TreeKey. Useful during wallet initialisation.
  *
- * In the per-address architecture, each address has its own TreeKey,
- * and the address public key is simply the TreeKey's root public key.
- *
- * @param treeKey - Per-address TreeKey
- * @returns 32-byte address public key (TreeKey root)
+ * @param baseSeed - 32-byte wallet base seed
+ * @param index - Address index (0-63)
+ * @returns 32-byte address public key (MMR root of child TreeKey)
  */
-function getPerAddressPublicKey(treeKey) {
-    return treeKey.getPublicKey();
+function deriveUnifiedAddressPublicKey(baseSeed, index) {
+    return createUnifiedChildTreeKey(baseSeed, index).getPublicKey();
+}
+// ---------------------------------------------------------------------------
+// Deprecated aliases — kept for migration compatibility only.
+// Downstream consumers should migrate to createUnifiedChildTreeKey.
+// ---------------------------------------------------------------------------
+/**
+ * @deprecated Use {@link createUnifiedChildTreeKey} instead.
+ * This wrapper preserves the LEGACY per-address seed derivation
+ * (`SHA3-256(baseSeed ‖ indexBytes(i))`) so that existing callers
+ * that import this symbol by name continue to derive the same keys.
+ * New code must use createUnifiedChildTreeKey which applies the unified
+ * two-step derivation (root_priv_seed → child_seed_i).
+ */
+function createPerAddressTreeKey(baseSeed, addressIndex) {
+    const perAddressSeed = (0, javaStreamables_js_1.derivePerAddressSeed)(baseSeed instanceof Uint8Array ? baseSeed : new Uint8Array(baseSeed), addressIndex);
+    return new TreeKey(perAddressSeed, 64, 3);
+}
+/**
+ * @deprecated Use {@link createUnifiedChildTreeKeyAsync} instead.
+ * Preserves legacy per-address seed derivation for backward compatibility.
+ */
+async function createPerAddressTreeKeyAsync(baseSeed, addressIndex, onProgress) {
+    const perAddressSeed = (0, javaStreamables_js_1.derivePerAddressSeed)(baseSeed instanceof Uint8Array ? baseSeed : new Uint8Array(baseSeed), addressIndex);
+    return TreeKey.createWithProgress(perAddressSeed, 64, 3, onProgress);
 }

package/dist/tx/TransactionService.js

@@ -41,8 +41,6 @@ class TransactionService {
                 burn: params.burn || null,
                 paramSet: this.config.paramSet || 'v2-spec',
                 addressIndex: params.addressIndex,
-                walletMode: params.walletMode || 'AnonTree',
-                perAddressPublicKey: params.perAddressPublicKey ?? null,
             }, {
                 headers: {
                     'Content-Type': 'application/json',
@@ -106,9 +104,9 @@ class TransactionService {
         if (digestBytes.length !== 32) {
             throw new Error(`Invalid digest length: ${digestBytes.length}, expected 32 bytes`);
         }
-        // Derive per-address TreeKey matching Minima Wallet.java
-        this.logger.debug(`  Deriving per-address TreeKey for index ${addressIndex}...`);
-        const treeKey = (0, treekey_js_1.createPerAddressTreeKey)(seed, addressIndex);
+        // Derive unified child TreeKey for this address index
+        this.logger.debug(`  Deriving unified child TreeKey for index ${addressIndex}...`);
+        const treeKey = (0, treekey_js_1.createUnifiedChildTreeKey)(seed, addressIndex);
         // Convert (l1, l2) to Java-compatible 'uses' counter
         // Java's TreeKey.sign() uses baseConversion(uses) to compute path
         const KEYS_PER_LEVEL = 64;

package/dist/tx/types.d.ts

@@ -14,8 +14,6 @@ export interface PrepareRequest {
     burn?: string;
     txId?: string;
     addressIndex?: number;
-    walletMode?: 'AnonTree' | 'RootTree';
-    perAddressPublicKey?: string;
 }
 export interface PrepareResponse {
     addressIndex: number;

package/dist/wots.d.ts

@@ -31,14 +31,14 @@ export declare function disableWotsLogger(): void;
  * Check if WOTS debug logging is enabled
  */
 export declare function isWotsDebugEnabled(): boolean;
-export declare const F: (x: Uint8Array) => Uint8Array<ArrayBufferLike> & Uint8Array<ArrayBuffer>;
+export declare const F: (x: Uint8Array) => Uint8Array<ArrayBufferLike>;
 export declare const hex: (u: Uint8Array) => string;
 export declare const fromHex: (h: string) => Uint8Array;
 export declare const concatBytes: (...arrs: Uint8Array[]) => Uint8Array<ArrayBuffer>;
 export declare const u16be: (n: number) => Uint8Array<ArrayBuffer>;
 export declare const u32be: (n: number) => Uint8Array<ArrayBuffer>;
 export declare function assert32(u: Uint8Array, label?: string): void;
-export declare const h: (x: Uint8Array) => Uint8Array<ArrayBufferLike> & Uint8Array<ArrayBuffer>;
+export declare const h: (x: Uint8Array) => Uint8Array<ArrayBufferLike>;
 /**
  * GMSSRandom - BouncyCastle's stateful PRNG for WOTS chain seed derivation
  *

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@totemsdk/core",
-  "version": "1.0.11",
+  "version": "1.1.0",
   "description": "Core cryptographic primitives for Totem SDK",
   "main": "dist/index.js",
   "types": "dist/index.d.ts",