@totemsdk/core 1.0.9 → 1.0.11

package/src/tx/types.d.ts

@@ -1,80 +0,0 @@
-/**
- * @module Transaction Types
- * Type definitions for transaction service
- */
-export interface WotsIndices {
-    addressIndex: number;
-    l1: number;
-    l2: number;
-}
-export interface PrepareRequest {
-    to: string;
-    amount: string;
-    tokenId?: string;
-    burn?: string;
-    txId?: string;
-}
-export interface PrepareResponse {
-    addressIndex: number;
-    l1: number;
-    l2: number;
-    leaseToken: string;
-    digestTx: string;
-    digestL2: string | null;
-    digestL3: string | null;
-    txId: string;
-    rootPublicKey: string;
-    paramSet: string;
-    leaseId: string;
-    leaseTTL: number;
-}
-export interface SignRequest {
-    addressIndex: number;
-    l1: number;
-    l2: number;
-    digestTx: string;
-}
-export interface WitnessBundle {
-    addressIndex: number;
-    l1: number;
-    l2: number;
-    signatures: {
-        l1Proof: string[];
-        l2Proof: string[];
-        l3Proof: string[];
-    };
-}
-export interface SignResult {
-    witnessBundle: WitnessBundle;
-    signedHex: string;
-}
-export interface FinalizeRequest {
-    leaseToken: string;
-    signedHex: string;
-}
-export interface FinalizeResponse {
-    ok: boolean;
-    leaseId: string;
-    txpowid: string;
-}
-export interface TransactionMetadata {
-    to: string;
-    amount: string;
-    tokenId: string;
-}
-export interface TransactionReceipt {
-    txpowid: string;
-    timestamp: number;
-    to: string;
-    amount: string;
-    tokenId: string;
-    indices: WotsIndices;
-    status: 'confirmed' | 'pending' | 'failed';
-    txId?: string;
-    leaseId?: string;
-}
-export interface TransactionError {
-    code: number;
-    message: string;
-    userMessage: string;
-}

package/src/tx/types.js

@@ -1,6 +0,0 @@
-"use strict";
-/**
- * @module Transaction Types
- * Type definitions for transaction service
- */
-Object.defineProperty(exports, "__esModule", { value: true });

package/src/tx/types.ts

@@ -1,130 +0,0 @@
-/**
- * @module Transaction Types
- * Type definitions for transaction service
- */
-
-export interface WotsIndices {
-  addressIndex: number;
-  l1: number;
-  l2: number;
-}
-
-export interface PrepareRequest {
-  to: string;
-  amount: string;
-  tokenId?: string;
-  burn?: string;
-  txId?: string;
-  addressIndex?: number;          // Required by v2-spec backend (0-63, must match the coin's address)
-  walletMode?: 'AnonTree' | 'RootTree'; // Key derivation scheme — omit for legacy/AnonTree
-  perAddressPublicKey?: string;   // Hex pubkey of per-address TreeKey root (required for RootTree validation)
-}
-
-export interface PrepareResponse {
-  addressIndex: number;
-  l1: number;
-  l2: number;
-  leaseToken: string;
-  digestTx: string;
-  digestL2: string | null;
-  digestL3: string | null;
-  txId: string;
-  rootPublicKey: string;
-  paramSet: string;
-  leaseId: string;
-  leaseTTL: number;
-  perAddressScript?: string | null; // RETURN SIGNEDBY(<perAddressPublicKey>) — present in RootTree mode
-}
-
-export interface SignRequest {
-  addressIndex: number;
-  l1: number;
-  l2: number;
-  digestTx: string;
-}
-
-/**
- * Per-proof entry in a hierarchical TreeKey signature chain.
- * Each proof represents one parent→child signing step.
- */
-export interface SignatureProofHex {
-  leafPubkey: string;   // 32-byte WOTS public key DIGEST as hex (SHA3-256 of full key)
-  signature: string;    // 1088-byte WOTS signature as hex
-  mmrProof: string;     // Serialized MMR proof as hex
-}
-
-/**
- * Hierarchical witness bundle produced by per-address TreeKey signing.
- *
- * Index mapping:
- *   addressIndex — which HD address (0-63)
- *   l1           — L1 index within per-address TreeKey (0-63)
- *   l2           — L2 index within per-address TreeKey (0-63)
- *
- * proofs contains 3 entries for depth-3 TreeKeys (Root→L1→L2→DATA),
- * matching Minima's TreeKey.sign() exactly.
- */
-export interface HierarchicalWitnessBundle {
-  addressIndex: number;
-  l1: number;
-  l2: number;
-  rootPublicKey: string;
-  proofs: SignatureProofHex[];
-}
-
-/**
- * @deprecated Use HierarchicalWitnessBundle. Kept for backward compatibility.
- */
-export interface WitnessBundle {
-  addressIndex: number;
-  l1: number;
-  l2: number;
-  signatures: {
-    l1Proof: string[];
-    l2Proof: string[];
-    l3Proof: string[];
-  };
-}
-
-export interface SignResult {
-  witnessBundle: HierarchicalWitnessBundle;
-  signedHex: string;
-}
-
-export interface FinalizeRequest {
-  leaseToken: string;
-  signedHex?: string;        // Hex-encoded signed transaction
-  signedBase64?: string;     // Base64-encoded signed transaction (preferred, bypasses WAF)
-  transactionHex?: string;   // Optional: the unsigned transaction body
-  importId?: string;         // Optional: client-provided import ID for txnimport
-}
-
-export interface FinalizeResponse {
-  ok: boolean;
-  leaseId: string;
-  txpowid: string;
-}
-
-export interface TransactionMetadata {
-  to: string;
-  amount: string;
-  tokenId: string;
-}
-
-export interface TransactionReceipt {
-  txpowid: string;
-  timestamp: number;
-  to: string;
-  amount: string;
-  tokenId: string;
-  indices: WotsIndices;
-  status: 'confirmed' | 'pending' | 'failed';
-  txId?: string;
-  leaseId?: string;
-}
-
-export interface TransactionError {
-  code: number;
-  message: string;
-  userMessage: string;
-}

package/src/util.d.ts

@@ -1 +0,0 @@
-export declare const bytesToHex: (b: Uint8Array) => string;

package/src/util.js

@@ -1,5 +0,0 @@
-"use strict";
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.bytesToHex = void 0;
-const bytesToHex = (b) => "0x" + [...b].map(x => x.toString(16).padStart(2, "0")).join("").toUpperCase();
-exports.bytesToHex = bytesToHex;

package/src/util.ts

@@ -1 +0,0 @@
-export const bytesToHex = (b: Uint8Array) => Array.from(b).map(x => x.toString(16).padStart(2, "0")).join("").toUpperCase();

package/src/utils.d.ts

@@ -1,8 +0,0 @@
-/**
- * Utility functions for byte array manipulation
- */
-export declare function bytesToHex(bytes: Uint8Array): string;
-export declare function hexToBytes(hex: string): Uint8Array;
-export declare function concatBytes(...arrays: Uint8Array[]): Uint8Array;
-export declare function utf8ToBytes(str: string): Uint8Array;
-export declare function bytesToUtf8(bytes: Uint8Array): string;

package/src/utils.js

@@ -1,42 +0,0 @@
-"use strict";
-/**
- * Utility functions for byte array manipulation
- */
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.bytesToHex = bytesToHex;
-exports.hexToBytes = hexToBytes;
-exports.concatBytes = concatBytes;
-exports.utf8ToBytes = utf8ToBytes;
-exports.bytesToUtf8 = bytesToUtf8;
-function bytesToHex(bytes) {
-    return Array.from(bytes)
-        .map(b => b.toString(16).padStart(2, '0'))
-        .join('');
-}
-function hexToBytes(hex) {
-    if (hex.startsWith('0x'))
-        hex = hex.slice(2);
-    if (hex.length % 2 !== 0)
-        throw new Error('Invalid hex string');
-    const bytes = new Uint8Array(hex.length / 2);
-    for (let i = 0; i < bytes.length; i++) {
-        bytes[i] = parseInt(hex.slice(i * 2, i * 2 + 2), 16);
-    }
-    return bytes;
-}
-function concatBytes(...arrays) {
-    const totalLength = arrays.reduce((sum, arr) => sum + arr.length, 0);
-    const result = new Uint8Array(totalLength);
-    let offset = 0;
-    for (const arr of arrays) {
-        result.set(arr, offset);
-        offset += arr.length;
-    }
-    return result;
-}
-function utf8ToBytes(str) {
-    return new TextEncoder().encode(str);
-}
-function bytesToUtf8(bytes) {
-    return new TextDecoder().decode(bytes);
-}

package/src/utils.ts

@@ -1,38 +0,0 @@
-/**
- * Utility functions for byte array manipulation
- */
-
-export function bytesToHex(bytes: Uint8Array): string {
-  return Array.from(bytes)
-    .map(b => b.toString(16).padStart(2, '0'))
-    .join('');
-}
-
-export function hexToBytes(hex: string): Uint8Array {
-  if (hex.startsWith('0x')) hex = hex.slice(2);
-  if (hex.length % 2 !== 0) throw new Error('Invalid hex string');
-  const bytes = new Uint8Array(hex.length / 2);
-  for (let i = 0; i < bytes.length; i++) {
-    bytes[i] = parseInt(hex.slice(i * 2, i * 2 + 2), 16);
-  }
-  return bytes;
-}
-
-export function concatBytes(...arrays: Uint8Array[]): Uint8Array {
-  const totalLength = arrays.reduce((sum, arr) => sum + arr.length, 0);
-  const result = new Uint8Array(totalLength);
-  let offset = 0;
-  for (const arr of arrays) {
-    result.set(arr, offset);
-    offset += arr.length;
-  }
-  return result;
-}
-
-export function utf8ToBytes(str: string): Uint8Array {
-  return new TextEncoder().encode(str);
-}
-
-export function bytesToUtf8(bytes: Uint8Array): string {
-  return new TextDecoder().decode(bytes);
-}

package/src/verify.ts

@@ -1,210 +0,0 @@
-import { sha3_256 } from '@noble/hashes/sha3.js';
-import { verifyTreeSignature, deserializeTreeSignature } from './treekey.js';
-import { scriptToAddress, addressToRoot } from './derive.js';
-import { scriptFromWotsPk } from './script.js';
-import { getRootPublicKey } from './treekey.js';
-import { wotsVerifyDigest } from './wots.js';
-import { getParamSet } from './params.js';
-import type { TreeSignature, SignatureProof } from './treekey.js';
-import type { Bytes } from './mmr.js';
-
-export interface VerificationResult {
-  valid: boolean;
-  error?: string;
-}
-
-export function normalizeHex(hex: string): string {
-  const stripped = hex.startsWith('0x') ? hex.slice(2) : hex;
-  return stripped.toLowerCase();
-}
-
-export function hexToBytes(hex: string): Uint8Array {
-  const h = normalizeHex(hex);
-  if (h.length % 2 !== 0) throw new Error('Invalid hex string: odd length');
-  const bytes = new Uint8Array(h.length / 2);
-  for (let i = 0; i < bytes.length; i++) {
-    bytes[i] = parseInt(h.slice(i * 2, i * 2 + 2), 16);
-  }
-  return bytes;
-}
-
-export function bytesToHex(bytes: Uint8Array): string {
-  return Array.from(bytes)
-    .map(b => b.toString(16).padStart(2, '0'))
-    .join('');
-}
-
-export function deriveAddressFromPublicKey(publicKeyHex: string): string {
-  const pkBytes = hexToBytes(publicKeyHex);
-  if (pkBytes.length !== 32) {
-    throw new Error(
-      `Public key must be 32 bytes (64 hex chars), got ${pkBytes.length} bytes`
-    );
-  }
-  const script = scriptFromWotsPk(pkBytes);
-  return scriptToAddress(script);
-}
-
-export function verifyTreeSignatureDetailed(
-  expectedPubkey: Bytes,
-  data: Bytes,
-  signature: TreeSignature
-): VerificationResult {
-  const { proofs } = signature;
-
-  if (proofs.length === 0) {
-    return { valid: false, error: 'Signature contains no proofs' };
-  }
-
-  const paramSet = getParamSet();
-
-  for (let depth = 0; depth < proofs.length; depth++) {
-    const proof = proofs[depth];
-
-    const rootPubkey = getRootPublicKey(proof);
-
-    if (depth === 0) {
-      if (!timingSafeEqual(expectedPubkey, rootPubkey)) {
-        return {
-          valid: false,
-          error: 'Root public key does not match expected public key (wrong key or address)',
-        };
-      }
-    }
-
-    let signedData: Bytes;
-    if (depth === proofs.length - 1) {
-      signedData = data;
-    } else {
-      signedData = getRootPublicKey(proofs[depth + 1]);
-    }
-
-    if (!wotsVerifyDigest(proof.signature, signedData, proof.leafPubkey, paramSet)) {
-      return {
-        valid: false,
-        error: `WOTS signature verification failed at depth ${depth} (digest mismatch or corrupted signature)`,
-      };
-    }
-  }
-
-  return { valid: true };
-}
-
-export function verifySignature(
-  address: string,
-  message: string,
-  signatureHex: string,
-  publicKeyHex: string
-): boolean {
-  const result = verifySignatureDetailed(address, message, signatureHex, publicKeyHex);
-  return result.valid;
-}
-
-export function verifySignatureDetailed(
-  address: string,
-  message: string,
-  signatureHex: string,
-  publicKeyHex: string
-): VerificationResult {
-  try {
-    const pkBytes = hexToBytes(publicKeyHex);
-    if (pkBytes.length !== 32) {
-      return {
-        valid: false,
-        error: `Public key must be 32 bytes (64 hex chars), got ${pkBytes.length} bytes`,
-      };
-    }
-
-    const derivedAddress = deriveAddressFromPublicKey(publicKeyHex);
-    if (derivedAddress.toLowerCase() !== address.toLowerCase()) {
-      return {
-        valid: false,
-        error: `Public key does not match claimed address. Expected ${address}, derived ${derivedAddress}`,
-      };
-    }
-
-    const sigBytes = hexToBytes(signatureHex);
-    let treeSignature: TreeSignature;
-    try {
-      treeSignature = deserializeTreeSignature(sigBytes);
-    } catch (e: any) {
-      return {
-        valid: false,
-        error: `Malformed signature: ${e.message}`,
-      };
-    }
-
-    const digest = sha3_256(new TextEncoder().encode(message));
-
-    return verifyTreeSignatureDetailed(pkBytes, digest, treeSignature);
-  } catch (e: any) {
-    return {
-      valid: false,
-      error: `Verification error: ${e.message}`,
-    };
-  }
-}
-
-function timingSafeEqual(a: Uint8Array, b: Uint8Array): boolean {
-  if (a.length !== b.length) return false;
-  let result = 0;
-  for (let i = 0; i < a.length; i++) {
-    result |= a[i] ^ b[i];
-  }
-  return result === 0;
-}
-
-function cryptoRandomBytes(length: number): Uint8Array {
-  const buf = new Uint8Array(length);
-  if (typeof globalThis.crypto !== 'undefined' && globalThis.crypto.getRandomValues) {
-    // Web Crypto API — available in browsers, Bare/Pear, and Node.js ≥ 19
-    globalThis.crypto.getRandomValues(buf);
-  } else if (typeof process !== 'undefined' && process.versions?.node) {
-    // Node.js < 19 fallback — dynamic import avoids static resolution in Bare/bundlers
-    // eslint-disable-next-line @typescript-eslint/no-var-requires
-    const nodeCrypto = Function('return require')()('crypto') as { randomFillSync: (buf: Uint8Array) => void };
-    nodeCrypto.randomFillSync(buf);
-  } else {
-    throw new Error('No cryptographically secure RNG available in this runtime');
-  }
-  return buf;
-}
-
-export function createChallenge(domain: string, nonce?: string): string {
-  const ts = Date.now();
-  const n = nonce || bytesToHex(
-    sha3_256(new Uint8Array([...new TextEncoder().encode(`${domain}:${ts}:`), ...cryptoRandomBytes(16)]))
-  ).slice(0, 16);
-  return JSON.stringify({ domain, nonce: n, issuedAt: ts });
-}
-
-export function validateChallenge(
-  challenge: string,
-  options?: { maxAgeMs?: number; expectedDomain?: string }
-): VerificationResult {
-  try {
-    const parsed = JSON.parse(challenge);
-    const { domain, nonce, issuedAt } = parsed;
-
-    if (!domain || !nonce || !issuedAt) {
-      return { valid: false, error: 'Challenge missing required fields (domain, nonce, issuedAt)' };
-    }
-
-    if (options?.expectedDomain && domain !== options.expectedDomain) {
-      return { valid: false, error: `Domain mismatch: expected ${options.expectedDomain}, got ${domain}` };
-    }
-
-    const maxAge = options?.maxAgeMs ?? 5 * 60 * 1000;
-    const age = Date.now() - issuedAt;
-    if (age > maxAge) {
-      return { valid: false, error: `Challenge expired: ${Math.round(age / 1000)}s old (max ${Math.round(maxAge / 1000)}s)` };
-    }
-    if (age < 0) {
-      return { valid: false, error: 'Challenge issued in the future' };
-    }
-
-    return { valid: true };
-  } catch {
-    return { valid: false, error: 'Invalid challenge format (not valid JSON)' };
-  }
-}

package/src/version.ts

@@ -1,13 +0,0 @@
-/**
- * SDK Core Version Information
- * 
- * CORE_BUILD_ID is used to detect bundle duplication issues where
- * the extension might bundle two different copies of sdk-core,
- * computing addresses with one copy and signing with another.
- * 
- * If you see different CORE_BUILD_IDs logged from wallet creation
- * vs signing modules, there's a bundling issue.
- */
-
-export const CORE_BUILD_ID = '2026.02.05-v1';
-export const CORE_VERSION = '1.0.0';