@totemsdk/core 1.2.10 → 1.3.0

package/dist/cjs/index.js

@@ -21,9 +21,9 @@ var __exportStar = (this && this.__exportStar) || function(m, exports) {
     for (var p in m) if (p !== "default" && !Object.prototype.hasOwnProperty.call(exports, p)) __createBinding(exports, m, p);
 };
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.validateChallenge = exports.createChallenge = exports.timingSafeEqual = exports.computeTransactionDigest = exports.serializeTransaction = exports.wotsAddressFromKeypair = exports.parseMxAddress = exports.makeMxAddress = exports.cleanSeedPhrase = exports.validatePhrase = exports.generateWordList = exports.phraseToSeed = exports.verifyMMRProof = exports.mmrRootFromPublicKeys = exports.verifyTreeSignature = exports.deriveUnifiedAddressPublicKey = exports.createUnifiedRootTreeKey = exports.createUnifiedChildTreeKey = exports.precomputeTransactionCoinID = exports.writeMiniString = exports.writeMiniData = exports.writeMiniNumber = exports.deriveRootPrivSeed = exports.derivePerAddressSeed = exports.deriveChainSeedJava = exports.wotsKeypairFromSeed = exports.wotsPublicKeyFromSeed = exports.wotsPkFromSig = exports.wotsVerifyDigest = exports.wotsVerify = exports.wotsSign = exports.deriveFullPublicKey = exports.derivePKdigest = exports.hashChain = exports.expandPrivateKey = exports.sha3_256 = exports.concatBytes = exports.hexToBytes = exports.bytesToHex = exports.TransactionReceiptStore = exports.WatermarkExhaustedError = exports.TransactionLifecycleError = exports.TransactionLifecycle = exports.TransactionService = exports.flatIndexFromLanes = exports.finalizeLease = exports.prepareLease = exports.LeaseMonitor = exports.WatermarkStore = exports.LeaseStore = void 0;
-exports.hex = exports.F = exports.createPerAddressTreeKeyAsync = exports.createPerAddressTreeKey = exports.createUnifiedChildTreeKeyAsync = exports.DEFAULT_LEVELS = exports.DEFAULT_KEYS_PER_LEVEL = exports.getRootPublicKey = exports.deserializeTreeSignature = exports.serializeTreeSignature = exports.TreeKeyNode = exports.TreeKey = exports.serializeMMREntry = exports.serializeMMRData = exports.serializeMMREntryNumber = exports.createMMREntryNumber = exports.deriveUnifiedChildSeed = exports.indexToMiniDataBytes = exports.javaHashAllObjects = exports.writeHashToStream = exports.serializeMiniNumberONE = exports.serializeMiniNumberZERO = exports.hashObject = exports.deriveChildTreeSeedJava = exports.hashAllObjects = exports.serializeMiniData = exports.serializeMiniNumber = exports.bigIntToByteArray = exports.concat = exports.writeMMREntryNumber = exports.writeMiniByte = exports.normalizeHex = exports.deriveAddressFromPublicKey = exports.verifyTreeSignatureDetailed = exports.verifySignatureDetailed = exports.verifySignature = exports.buildMinimaCoin = exports.createDefaultTransaction = exports.serializeCoin = exports.parseDecimalToMiniNumber = exports.MiniNumber = exports.generateSeedPhrase = exports.convertWordListToSeed = exports.convertStringToSeed = exports.WORD_LIST = exports.addressToRoot = exports.scriptToAddress = exports.decodeMx = exports.encodeMx = exports.scriptFromWotsPk = void 0;
-exports.MINIMA_CONSTANTS = exports.bytesToUtf8 = exports.utf8ToBytes = exports.hashCanonical = exports.canonicalJson = exports.toHex = exports.wotsSignLegacy = exports.baseWWithChecksum = exports.toWinternitzDigits = exports.prfChainSeed = exports.h = exports.assert32 = exports.u32be = exports.u16be = exports.fromHex = void 0;
+exports.createChallenge = exports.timingSafeEqual = exports.deserializeTransaction = exports.computeTransactionDigest = exports.serializeTransaction = exports.wotsAddressFromKeypair = exports.parseMxAddress = exports.makeMxAddress = exports.cleanSeedPhrase = exports.validatePhrase = exports.generateWordList = exports.phraseToSeed = exports.verifyMMRProof = exports.mmrRootFromPublicKeys = exports.verifyTreeSignature = exports.deriveUnifiedAddressPublicKey = exports.createUnifiedRootTreeKey = exports.createUnifiedChildTreeKey = exports.precomputeTransactionCoinID = exports.writeMiniString = exports.writeMiniData = exports.writeMiniNumber = exports.deriveRootPrivSeed = exports.derivePerAddressSeed = exports.deriveChainSeedJava = exports.wotsKeypairFromSeed = exports.wotsPublicKeyFromSeed = exports.wotsPkFromSig = exports.wotsVerifyDigest = exports.wotsVerify = exports.wotsSign = exports.deriveFullPublicKey = exports.derivePKdigest = exports.hashChain = exports.expandPrivateKey = exports.sha3_256 = exports.concatBytes = exports.hexToBytes = exports.bytesToHex = exports.TransactionReceiptStore = exports.WatermarkExhaustedError = exports.TransactionLifecycleError = exports.TransactionLifecycle = exports.TransactionService = exports.flatIndexFromLanes = exports.finalizeLease = exports.prepareLease = exports.LeaseMonitor = exports.WatermarkStore = exports.LeaseStore = void 0;
+exports.TreeKeyNode = exports.TreeKey = exports.serializeMMREntry = exports.serializeMMRData = exports.serializeMMREntryNumber = exports.createMMREntryNumber = exports.deriveUnifiedChildSeed = exports.indexToMiniDataBytes = exports.javaHashAllObjects = exports.writeHashToStream = exports.serializeMiniNumberONE = exports.serializeMiniNumberZERO = exports.hashObject = exports.deriveChildTreeSeedJava = exports.hashAllObjects = exports.serializeMiniData = exports.serializeMiniNumber = exports.bigIntToByteArray = exports.concat = exports.writeSignatureProof = exports.writeSignature = exports.writeMMREntryNumber = exports.writeMiniByte = exports.verifyDeterministicAddress = exports.deriveAddress = exports.deriveUnifiedAddress = exports.deriveDeterministicAddress = exports.normalizeHex = exports.deriveAddressFromPublicKey = exports.verifyTreeSignatureDetailed = exports.verifySignatureDetailed = exports.verifySignature = exports.buildMinimaCoin = exports.createDefaultTransaction = exports.serializeTokenDescriptor = exports.computeTokenId = exports.serializeTransactionObject = exports.serializeCoin = exports.parseDecimalToMiniNumber = exports.MiniNumber = exports.generateSeedPhrase = exports.convertWordListToSeed = exports.convertStringToSeed = exports.WORD_LIST = exports.addressToRoot = exports.scriptToAddress = exports.decodeMx = exports.encodeMx = exports.scriptFromWotsPk = exports.validateChallenge = void 0;
+exports.MINIMA_CONSTANTS = exports.bytesToUtf8 = exports.utf8ToBytes = exports.hashCanonical = exports.canonicalJson = exports.toHex = exports.wotsSignLegacy = exports.baseWWithChecksum = exports.toWinternitzDigits = exports.prfChainSeed = exports.h = exports.assert32 = exports.u32be = exports.u16be = exports.disableWotsLogger = exports.setWotsLogger = exports.fromHex = exports.hex = exports.F = exports.disableTreeKeyLogger = exports.setTreeKeyLogger = exports.createPerAddressTreeKeyAsync = exports.createPerAddressTreeKey = exports.createUnifiedChildTreeKeyAsync = exports.DEFAULT_LEVELS = exports.DEFAULT_KEYS_PER_LEVEL = exports.getRootPublicKey = exports.deserializeTreeSignature = exports.serializeTreeSignature = void 0;
 exports.mxToHex = mxToHex;
 // Version information for bundle duplication detection
 __exportStar(require("./version.js"), exports);
@@ -48,37 +48,38 @@ Object.defineProperty(exports, "TransactionReceiptStore", { enumerable: true, ge
 // Cryptographic primitives — backed by Rust/WASM (@totemsdk/core-wasm)
 // ---------------------------------------------------------------------------
 // Utilities
-var wasm_sync_js_1 = require("./wasm-sync.js");
-Object.defineProperty(exports, "bytesToHex", { enumerable: true, get: function () { return wasm_sync_js_1.bytesToHex; } });
-Object.defineProperty(exports, "hexToBytes", { enumerable: true, get: function () { return wasm_sync_js_1.hexToBytes; } });
-Object.defineProperty(exports, "concatBytes", { enumerable: true, get: function () { return wasm_sync_js_1.concatBytes; } });
-const wasm_sync_js_2 = require("./wasm-sync.js");
+var bytes_js_1 = require("./bytes.js");
+Object.defineProperty(exports, "bytesToHex", { enumerable: true, get: function () { return bytes_js_1.bytesToHex; } });
+Object.defineProperty(exports, "hexToBytes", { enumerable: true, get: function () { return bytes_js_1.hexToBytes; } });
+Object.defineProperty(exports, "concatBytes", { enumerable: true, get: function () { return bytes_js_1.concatBytes; } });
+const bytes_js_2 = require("./bytes.js");
+const wasm_sync_js_1 = require("./wasm-sync.js");
 // SHA3-256
-var wasm_sync_js_3 = require("./wasm-sync.js");
-Object.defineProperty(exports, "sha3_256", { enumerable: true, get: function () { return wasm_sync_js_3.sha3_256; } });
+var wasm_sync_js_2 = require("./wasm-sync.js");
+Object.defineProperty(exports, "sha3_256", { enumerable: true, get: function () { return wasm_sync_js_2.sha3_256; } });
 // WOTS Signatures
-var wasm_sync_js_4 = require("./wasm-sync.js");
-Object.defineProperty(exports, "expandPrivateKey", { enumerable: true, get: function () { return wasm_sync_js_4.expandPrivateKey; } });
-Object.defineProperty(exports, "hashChain", { enumerable: true, get: function () { return wasm_sync_js_4.hashChain; } });
-Object.defineProperty(exports, "derivePKdigest", { enumerable: true, get: function () { return wasm_sync_js_4.derivePKdigest; } });
-Object.defineProperty(exports, "deriveFullPublicKey", { enumerable: true, get: function () { return wasm_sync_js_4.deriveFullPublicKey; } });
-Object.defineProperty(exports, "wotsSign", { enumerable: true, get: function () { return wasm_sync_js_4.wotsSign; } });
-Object.defineProperty(exports, "wotsVerify", { enumerable: true, get: function () { return wasm_sync_js_4.wotsVerify; } });
-Object.defineProperty(exports, "wotsVerifyDigest", { enumerable: true, get: function () { return wasm_sync_js_4.wotsVerifyDigest; } });
-Object.defineProperty(exports, "wotsPkFromSig", { enumerable: true, get: function () { return wasm_sync_js_4.wotsPkFromSig; } });
-Object.defineProperty(exports, "wotsPublicKeyFromSeed", { enumerable: true, get: function () { return wasm_sync_js_4.wotsPublicKeyFromSeed; } });
-Object.defineProperty(exports, "wotsKeypairFromSeed", { enumerable: true, get: function () { return wasm_sync_js_4.wotsKeypairFromSeed; } });
+var wasm_sync_js_3 = require("./wasm-sync.js");
+Object.defineProperty(exports, "expandPrivateKey", { enumerable: true, get: function () { return wasm_sync_js_3.expandPrivateKey; } });
+Object.defineProperty(exports, "hashChain", { enumerable: true, get: function () { return wasm_sync_js_3.hashChain; } });
+Object.defineProperty(exports, "derivePKdigest", { enumerable: true, get: function () { return wasm_sync_js_3.derivePKdigest; } });
+Object.defineProperty(exports, "deriveFullPublicKey", { enumerable: true, get: function () { return wasm_sync_js_3.deriveFullPublicKey; } });
+Object.defineProperty(exports, "wotsSign", { enumerable: true, get: function () { return wasm_sync_js_3.wotsSign; } });
+Object.defineProperty(exports, "wotsVerify", { enumerable: true, get: function () { return wasm_sync_js_3.wotsVerify; } });
+Object.defineProperty(exports, "wotsVerifyDigest", { enumerable: true, get: function () { return wasm_sync_js_3.wotsVerifyDigest; } });
+Object.defineProperty(exports, "wotsPkFromSig", { enumerable: true, get: function () { return wasm_sync_js_3.wotsPkFromSig; } });
+Object.defineProperty(exports, "wotsPublicKeyFromSeed", { enumerable: true, get: function () { return wasm_sync_js_3.wotsPublicKeyFromSeed; } });
+Object.defineProperty(exports, "wotsKeypairFromSeed", { enumerable: true, get: function () { return wasm_sync_js_3.wotsKeypairFromSeed; } });
 // WOTS Params (from params.ts — constants, no crypto)
 __exportStar(require("./params.js"), exports);
 // Java-Compatible Serialization
-var wasm_sync_js_5 = require("./wasm-sync.js");
-Object.defineProperty(exports, "deriveChainSeedJava", { enumerable: true, get: function () { return wasm_sync_js_5.deriveChainSeedJava; } });
-Object.defineProperty(exports, "derivePerAddressSeed", { enumerable: true, get: function () { return wasm_sync_js_5.derivePerAddressSeed; } });
-Object.defineProperty(exports, "deriveRootPrivSeed", { enumerable: true, get: function () { return wasm_sync_js_5.deriveRootPrivSeed; } });
-Object.defineProperty(exports, "writeMiniNumber", { enumerable: true, get: function () { return wasm_sync_js_5.writeMiniNumber; } });
-Object.defineProperty(exports, "writeMiniData", { enumerable: true, get: function () { return wasm_sync_js_5.writeMiniData; } });
-Object.defineProperty(exports, "writeMiniString", { enumerable: true, get: function () { return wasm_sync_js_5.writeMiniString; } });
-Object.defineProperty(exports, "precomputeTransactionCoinID", { enumerable: true, get: function () { return wasm_sync_js_5.precomputeTransactionCoinID; } });
+var wasm_sync_js_4 = require("./wasm-sync.js");
+Object.defineProperty(exports, "deriveChainSeedJava", { enumerable: true, get: function () { return wasm_sync_js_4.deriveChainSeedJava; } });
+Object.defineProperty(exports, "derivePerAddressSeed", { enumerable: true, get: function () { return wasm_sync_js_4.derivePerAddressSeed; } });
+Object.defineProperty(exports, "deriveRootPrivSeed", { enumerable: true, get: function () { return wasm_sync_js_4.deriveRootPrivSeed; } });
+Object.defineProperty(exports, "writeMiniNumber", { enumerable: true, get: function () { return wasm_sync_js_4.writeMiniNumber; } });
+Object.defineProperty(exports, "writeMiniData", { enumerable: true, get: function () { return wasm_sync_js_4.writeMiniData; } });
+Object.defineProperty(exports, "writeMiniString", { enumerable: true, get: function () { return wasm_sync_js_4.writeMiniString; } });
+Object.defineProperty(exports, "precomputeTransactionCoinID", { enumerable: true, get: function () { return wasm_sync_js_4.precomputeTransactionCoinID; } });
 // TreeKey/TreeKeyNode — WASM-backed
 // createUnifiedChildTreeKey / createUnifiedRootTreeKey come from the TS
 // implementation (returning a full TreeKey object with setUses/sign/getPublicKey)
@@ -89,9 +90,9 @@ Object.defineProperty(exports, "createUnifiedChildTreeKey", { enumerable: true,
 Object.defineProperty(exports, "createUnifiedRootTreeKey", { enumerable: true, get: function () { return treekey_js_1.createUnifiedRootTreeKey; } });
 Object.defineProperty(exports, "deriveUnifiedAddressPublicKey", { enumerable: true, get: function () { return treekey_js_1.deriveUnifiedAddressPublicKey; } });
 Object.defineProperty(exports, "verifyTreeSignature", { enumerable: true, get: function () { return treekey_js_1.verifyTreeSignature; } });
-var wasm_sync_js_6 = require("./wasm-sync.js");
-Object.defineProperty(exports, "mmrRootFromPublicKeys", { enumerable: true, get: function () { return wasm_sync_js_6.mmrRootFromPublicKeys; } });
-Object.defineProperty(exports, "verifyMMRProof", { enumerable: true, get: function () { return wasm_sync_js_6.verifyMMRProof; } });
+var wasm_sync_js_5 = require("./wasm-sync.js");
+Object.defineProperty(exports, "mmrRootFromPublicKeys", { enumerable: true, get: function () { return wasm_sync_js_5.mmrRootFromPublicKeys; } });
+Object.defineProperty(exports, "verifyMMRProof", { enumerable: true, get: function () { return wasm_sync_js_5.verifyMMRProof; } });
 // BIP39 Seed Phrase Handling
 // The WASM binding (wasm-sync.ts) shares the canonical 2048-word BIP39 list
 // and Minima-compatible uppercase canonicalization with the TS implementation
@@ -104,19 +105,22 @@ Object.defineProperty(exports, "generateWordList", { enumerable: true, get: func
 Object.defineProperty(exports, "validatePhrase", { enumerable: true, get: function () { return bip39_js_1.validatePhrase; } });
 Object.defineProperty(exports, "cleanSeedPhrase", { enumerable: true, get: function () { return bip39_js_1.cleanSeedPhrase; } });
 // Address Derivation
-var wasm_sync_js_7 = require("./wasm-sync.js");
-Object.defineProperty(exports, "makeMxAddress", { enumerable: true, get: function () { return wasm_sync_js_7.makeMxAddress; } });
-Object.defineProperty(exports, "parseMxAddress", { enumerable: true, get: function () { return wasm_sync_js_7.parseMxAddress; } });
-Object.defineProperty(exports, "wotsAddressFromKeypair", { enumerable: true, get: function () { return wasm_sync_js_7.wotsAddressFromKeypair; } });
+var wasm_sync_js_6 = require("./wasm-sync.js");
+Object.defineProperty(exports, "makeMxAddress", { enumerable: true, get: function () { return wasm_sync_js_6.makeMxAddress; } });
+Object.defineProperty(exports, "parseMxAddress", { enumerable: true, get: function () { return wasm_sync_js_6.parseMxAddress; } });
+Object.defineProperty(exports, "wotsAddressFromKeypair", { enumerable: true, get: function () { return wasm_sync_js_6.wotsAddressFromKeypair; } });
 // Transaction Serialization & Digest
-var wasm_sync_js_8 = require("./wasm-sync.js");
-Object.defineProperty(exports, "serializeTransaction", { enumerable: true, get: function () { return wasm_sync_js_8.serializeTransaction; } });
-Object.defineProperty(exports, "computeTransactionDigest", { enumerable: true, get: function () { return wasm_sync_js_8.computeTransactionDigest; } });
+var wasm_sync_js_7 = require("./wasm-sync.js");
+Object.defineProperty(exports, "serializeTransaction", { enumerable: true, get: function () { return wasm_sync_js_7.serializeTransaction; } });
+Object.defineProperty(exports, "computeTransactionDigest", { enumerable: true, get: function () { return wasm_sync_js_7.computeTransactionDigest; } });
+// Transaction deserialization (byte-exact inverse of the TS serializer)
+var transaction_js_1 = require("./transaction.js");
+Object.defineProperty(exports, "deserializeTransaction", { enumerable: true, get: function () { return transaction_js_1.deserializeTransaction; } });
 // Verification
-var wasm_sync_js_9 = require("./wasm-sync.js");
-Object.defineProperty(exports, "timingSafeEqual", { enumerable: true, get: function () { return wasm_sync_js_9.timingSafeEqual; } });
-Object.defineProperty(exports, "createChallenge", { enumerable: true, get: function () { return wasm_sync_js_9.createChallenge; } });
-Object.defineProperty(exports, "validateChallenge", { enumerable: true, get: function () { return wasm_sync_js_9.validateChallenge; } });
+var wasm_sync_js_8 = require("./wasm-sync.js");
+Object.defineProperty(exports, "timingSafeEqual", { enumerable: true, get: function () { return wasm_sync_js_8.timingSafeEqual; } });
+Object.defineProperty(exports, "createChallenge", { enumerable: true, get: function () { return wasm_sync_js_8.createChallenge; } });
+Object.defineProperty(exports, "validateChallenge", { enumerable: true, get: function () { return wasm_sync_js_8.validateChallenge; } });
 // ---------------------------------------------------------------------------
 // TypeScript-only modules (no crypto — keep as-is)
 // ---------------------------------------------------------------------------
@@ -124,14 +128,14 @@ Object.defineProperty(exports, "validateChallenge", { enumerable: true, get: fun
 var script_js_1 = require("./script.js");
 Object.defineProperty(exports, "scriptFromWotsPk", { enumerable: true, get: function () { return script_js_1.scriptFromWotsPk; } });
 // Base32 Encoding (Minima-compatible) — re-export from WASM
-var wasm_sync_js_10 = require("./wasm-sync.js");
-Object.defineProperty(exports, "encodeMx", { enumerable: true, get: function () { return wasm_sync_js_10.makeMxAddress; } });
-Object.defineProperty(exports, "decodeMx", { enumerable: true, get: function () { return wasm_sync_js_10.parseMxAddress; } });
+var wasm_sync_js_9 = require("./wasm-sync.js");
+Object.defineProperty(exports, "encodeMx", { enumerable: true, get: function () { return wasm_sync_js_9.makeMxAddress; } });
+Object.defineProperty(exports, "decodeMx", { enumerable: true, get: function () { return wasm_sync_js_9.parseMxAddress; } });
 /** Convert an Mx (radix-32) or hex Minima address to lowercase hex. */
 function mxToHex(address) {
     const upper = address.startsWith('0x') || address.startsWith('0X') ? address.slice(2) : address;
     return upper.toUpperCase().startsWith('MX')
-        ? (0, wasm_sync_js_2.bytesToHex)((0, wasm_sync_js_2.parseMxAddress)(address))
+        ? (0, bytes_js_2.bytesToHex)((0, wasm_sync_js_1.parseMxAddress)(address))
         : upper.replace(/^0x/i, '');
 }
 // Merkle Mountain Range (original JS — types and helpers)
@@ -152,11 +156,14 @@ Object.defineProperty(exports, "generateSeedPhrase", { enumerable: true, get: fu
 var MiniNumber_js_1 = require("./MiniNumber.js");
 Object.defineProperty(exports, "MiniNumber", { enumerable: true, get: function () { return MiniNumber_js_1.MiniNumber; } });
 // Transaction types (from JS)
-var transaction_js_1 = require("./transaction.js");
-Object.defineProperty(exports, "parseDecimalToMiniNumber", { enumerable: true, get: function () { return transaction_js_1.parseDecimalToMiniNumber; } });
-Object.defineProperty(exports, "serializeCoin", { enumerable: true, get: function () { return transaction_js_1.serializeCoin; } });
-Object.defineProperty(exports, "createDefaultTransaction", { enumerable: true, get: function () { return transaction_js_1.createDefaultTransaction; } });
-Object.defineProperty(exports, "buildMinimaCoin", { enumerable: true, get: function () { return transaction_js_1.buildMinimaCoin; } });
+var transaction_js_2 = require("./transaction.js");
+Object.defineProperty(exports, "parseDecimalToMiniNumber", { enumerable: true, get: function () { return transaction_js_2.parseDecimalToMiniNumber; } });
+Object.defineProperty(exports, "serializeCoin", { enumerable: true, get: function () { return transaction_js_2.serializeCoin; } });
+Object.defineProperty(exports, "serializeTransactionObject", { enumerable: true, get: function () { return transaction_js_2.serializeTransaction; } });
+Object.defineProperty(exports, "computeTokenId", { enumerable: true, get: function () { return transaction_js_2.computeTokenId; } });
+Object.defineProperty(exports, "serializeTokenDescriptor", { enumerable: true, get: function () { return transaction_js_2.serializeTokenDescriptor; } });
+Object.defineProperty(exports, "createDefaultTransaction", { enumerable: true, get: function () { return transaction_js_2.createDefaultTransaction; } });
+Object.defineProperty(exports, "buildMinimaCoin", { enumerable: true, get: function () { return transaction_js_2.buildMinimaCoin; } });
 // High-level Verification API (convenience functions for integrators)
 var verify_js_1 = require("./verify.js");
 Object.defineProperty(exports, "verifySignature", { enumerable: true, get: function () { return verify_js_1.verifySignature; } });
@@ -164,10 +171,18 @@ Object.defineProperty(exports, "verifySignatureDetailed", { enumerable: true, ge
 Object.defineProperty(exports, "verifyTreeSignatureDetailed", { enumerable: true, get: function () { return verify_js_1.verifyTreeSignatureDetailed; } });
 Object.defineProperty(exports, "deriveAddressFromPublicKey", { enumerable: true, get: function () { return verify_js_1.deriveAddressFromPublicKey; } });
 Object.defineProperty(exports, "normalizeHex", { enumerable: true, get: function () { return verify_js_1.normalizeHex; } });
+// Deterministic address derivation (CAN-005)
+var address_derivation_js_1 = require("./address-derivation.js");
+Object.defineProperty(exports, "deriveDeterministicAddress", { enumerable: true, get: function () { return address_derivation_js_1.deriveDeterministicAddress; } });
+Object.defineProperty(exports, "deriveUnifiedAddress", { enumerable: true, get: function () { return address_derivation_js_1.deriveUnifiedAddress; } });
+Object.defineProperty(exports, "deriveAddress", { enumerable: true, get: function () { return address_derivation_js_1.deriveAddress; } });
+Object.defineProperty(exports, "verifyDeterministicAddress", { enumerable: true, get: function () { return address_derivation_js_1.verifyDeterministicAddress; } });
 // Streamable primitives (low-level serialization building blocks)
 var Streamable_js_1 = require("./Streamable.js");
 Object.defineProperty(exports, "writeMiniByte", { enumerable: true, get: function () { return Streamable_js_1.writeMiniByte; } });
 Object.defineProperty(exports, "writeMMREntryNumber", { enumerable: true, get: function () { return Streamable_js_1.writeMMREntryNumber; } });
+Object.defineProperty(exports, "writeSignature", { enumerable: true, get: function () { return Streamable_js_1.writeSignature; } });
+Object.defineProperty(exports, "writeSignatureProof", { enumerable: true, get: function () { return Streamable_js_1.writeSignatureProof; } });
 Object.defineProperty(exports, "concat", { enumerable: true, get: function () { return Streamable_js_1.concat; } });
 Object.defineProperty(exports, "bigIntToByteArray", { enumerable: true, get: function () { return Streamable_js_1.bigIntToByteArray; } });
 // Java-Compatible Serialization Helpers (non-crypto)
@@ -199,10 +214,14 @@ Object.defineProperty(exports, "DEFAULT_LEVELS", { enumerable: true, get: functi
 Object.defineProperty(exports, "createUnifiedChildTreeKeyAsync", { enumerable: true, get: function () { return treekey_js_2.createUnifiedChildTreeKeyAsync; } });
 Object.defineProperty(exports, "createPerAddressTreeKey", { enumerable: true, get: function () { return treekey_js_2.createPerAddressTreeKey; } });
 Object.defineProperty(exports, "createPerAddressTreeKeyAsync", { enumerable: true, get: function () { return treekey_js_2.createPerAddressTreeKeyAsync; } });
+Object.defineProperty(exports, "setTreeKeyLogger", { enumerable: true, get: function () { return treekey_js_2.setTreeKeyLogger; } });
+Object.defineProperty(exports, "disableTreeKeyLogger", { enumerable: true, get: function () { return treekey_js_2.disableTreeKeyLogger; } });
 var wots_js_1 = require("./wots.js");
 Object.defineProperty(exports, "F", { enumerable: true, get: function () { return wots_js_1.F; } });
 Object.defineProperty(exports, "hex", { enumerable: true, get: function () { return wots_js_1.hex; } });
 Object.defineProperty(exports, "fromHex", { enumerable: true, get: function () { return wots_js_1.fromHex; } });
+Object.defineProperty(exports, "setWotsLogger", { enumerable: true, get: function () { return wots_js_1.setWotsLogger; } });
+Object.defineProperty(exports, "disableWotsLogger", { enumerable: true, get: function () { return wots_js_1.disableWotsLogger; } });
 Object.defineProperty(exports, "u16be", { enumerable: true, get: function () { return wots_js_1.u16be; } });
 Object.defineProperty(exports, "u32be", { enumerable: true, get: function () { return wots_js_1.u32be; } });
 Object.defineProperty(exports, "assert32", { enumerable: true, get: function () { return wots_js_1.assert32; } });
@@ -215,7 +234,8 @@ Object.defineProperty(exports, "wotsSignLegacy", { enumerable: true, get: functi
 var canonical_js_1 = require("./canonical.js");
 Object.defineProperty(exports, "toHex", { enumerable: true, get: function () { return canonical_js_1.toHex; } });
 Object.defineProperty(exports, "canonicalJson", { enumerable: true, get: function () { return canonical_js_1.canonicalJson; } });
-Object.defineProperty(exports, "hashCanonical", { enumerable: true, get: function () { return canonical_js_1.hashCanonical; } });
+var canonical_hash_js_1 = require("./canonical-hash.js");
+Object.defineProperty(exports, "hashCanonical", { enumerable: true, get: function () { return canonical_hash_js_1.hashCanonical; } });
 // Byte/string utilities
 var utils_js_1 = require("./utils.js");
 Object.defineProperty(exports, "utf8ToBytes", { enumerable: true, get: function () { return utils_js_1.utf8ToBytes; } });

package/dist/cjs/lease/LeaseStore.d.ts

@@ -33,6 +33,7 @@ export interface LeaseStoreConfig {
 export declare class LeaseStore {
     private leases;
     private _initialized;
+    private mutationTail;
     private readonly storageKey;
     private readonly storage;
     private readonly logger;
@@ -42,16 +43,22 @@ export declare class LeaseStore {
     private load;
     private persist;
     save(lease: StoredLease): Promise<void>;
+    private saveUnlocked;
+    delete(leaseId: string): Promise<boolean>;
+    private deleteUnlocked;
     get(leaseId: string): StoredLease | undefined;
     getByToken(leaseToken: string): StoredLease | undefined;
     getAll(): StoredLease[];
     getActive(): StoredLease[];
     getExpiringSoon(thresholdMs?: number): StoredLease[];
-    delete(leaseId: string): Promise<boolean>;
     deleteByToken(leaseToken: string): Promise<boolean>;
     updateStatus(leaseId: string, status: LeaseStatus): Promise<void>;
+    private updateStatusUnlocked;
     cleanupExpired(): Promise<number>;
+    private cleanupExpiredUnlocked;
     clear(): Promise<void>;
+    private clearUnlocked;
+    private mutate;
     getMinimumTTL(): number | null;
     calculateMonitoringInterval(): number;
     private flattenIndex;

package/dist/cjs/lease/LeaseStore.js

@@ -14,9 +14,19 @@ Object.defineProperty(exports, "__esModule", { value: true });
 exports.LeaseStore = void 0;
 const index_js_1 = require("../adapters/index.js");
 const DEFAULT_STORAGE_KEY = 'totem_wots_leases';
+/** Drop fields whose value is `undefined` (strict adapters reject `undefined`). */
+function stripUndefined(value) {
+    const out = {};
+    for (const [k, v] of Object.entries(value)) {
+        if (v !== undefined)
+            out[k] = v;
+    }
+    return out;
+}
 class LeaseStore {
     leases = new Map();
     _initialized = false;
+    mutationTail = Promise.resolve();
     storageKey;
     storage;
     logger;
@@ -45,11 +55,12 @@ class LeaseStore {
         }
         catch (error) {
             this.logger.error('Failed to load leases:', error);
+            throw error;
         }
     }
     async persist() {
         try {
-            const leasesArray = Array.from(this.leases.values());
+            const leasesArray = Array.from(this.leases.values()).map((lease) => stripUndefined(lease));
             await this.storage.set(this.storageKey, leasesArray);
         }
         catch (error) {
@@ -58,12 +69,45 @@ class LeaseStore {
         }
     }
     async save(lease) {
+        return this.mutate(() => this.saveUnlocked(lease));
+    }
+    async saveUnlocked(lease) {
         const flatIndex = this.flattenIndex(lease.indices);
         this.logger.debug(`Storing lease: ${lease.leaseId}`);
         this.logger.debug(`  indices: (addressIndex=${lease.indices.addressIndex}, l1=${lease.indices.l1}, l2=${lease.indices.l2}) [${flatIndex}/262,144]`);
         this.logger.debug(`  status: ${lease.status}, TTL: ${lease.leaseTTL}ms`);
+        const previous = this.leases.get(lease.leaseId);
         this.leases.set(lease.leaseId, lease);
-        await this.persist();
+        try {
+            await this.persist();
+        }
+        catch (error) {
+            if (previous)
+                this.leases.set(lease.leaseId, previous);
+            else
+                this.leases.delete(lease.leaseId);
+            throw error;
+        }
+    }
+    async delete(leaseId) {
+        return this.mutate(() => this.deleteUnlocked(leaseId));
+    }
+    async deleteUnlocked(leaseId) {
+        const lease = this.leases.get(leaseId);
+        if (lease) {
+            this.logger.debug(`Deleting lease: ${leaseId}, final status: ${lease.status}`);
+        }
+        const existed = this.leases.delete(leaseId);
+        if (existed) {
+            try {
+                await this.persist();
+            }
+            catch (error) {
+                this.leases.set(leaseId, lease);
+                throw error;
+            }
+        }
+        return existed;
     }
     get(leaseId) {
         return this.leases.get(leaseId);
@@ -84,17 +128,6 @@ class LeaseStore {
             lease.expiresAt > now &&
             lease.expiresAt <= now + thresholdMs);
     }
-    async delete(leaseId) {
-        const lease = this.leases.get(leaseId);
-        if (lease) {
-            this.logger.debug(`Deleting lease: ${leaseId}, final status: ${lease.status}`);
-        }
-        const existed = this.leases.delete(leaseId);
-        if (existed) {
-            await this.persist();
-        }
-        return existed;
-    }
     async deleteByToken(leaseToken) {
         const lease = this.getByToken(leaseToken);
         if (lease) {
@@ -103,34 +136,71 @@ class LeaseStore {
         return false;
     }
     async updateStatus(leaseId, status) {
+        return this.mutate(() => this.updateStatusUnlocked(leaseId, status));
+    }
+    async updateStatusUnlocked(leaseId, status) {
         const lease = this.leases.get(leaseId);
         if (lease) {
             const oldStatus = lease.status;
             this.logger.debug(`Lease status change: ${leaseId} ${oldStatus} → ${status}`);
             lease.status = status;
-            await this.persist();
+            try {
+                await this.persist();
+            }
+            catch (error) {
+                lease.status = oldStatus;
+                throw error;
+            }
         }
     }
     async cleanupExpired() {
+        return this.mutate(() => this.cleanupExpiredUnlocked());
+    }
+    async cleanupExpiredUnlocked() {
         const now = Date.now();
-        const expiredLeaseIds = [];
+        const expiredLeases = [];
         for (const [leaseId, lease] of this.leases.entries()) {
-            if (lease.expiresAt <= now && lease.status !== 'finalized') {
+            if (lease.expiresAt <= now && (lease.status === 'active' || lease.status === 'pending')) {
+                expiredLeases.push({ leaseId, status: lease.status });
                 lease.status = 'expired';
-                expiredLeaseIds.push(leaseId);
             }
         }
-        if (expiredLeaseIds.length > 0) {
-            this.logger.debug(`Marked ${expiredLeaseIds.length} leases as expired`);
-            await this.persist();
+        if (expiredLeases.length > 0) {
+            this.logger.debug(`Marked ${expiredLeases.length} leases as expired`);
+            try {
+                await this.persist();
+            }
+            catch (error) {
+                for (const { leaseId, status } of expiredLeases)
+                    this.leases.get(leaseId).status = status;
+                throw error;
+            }
         }
-        return expiredLeaseIds.length;
+        return expiredLeases.length;
     }
     async clear() {
+        await this.mutate(() => this.clearUnlocked());
+    }
+    async clearUnlocked() {
+        const previous = new Map(this.leases);
         this.leases.clear();
-        await this.storage.remove(this.storageKey);
+        try {
+            await this.storage.remove(this.storageKey);
+        }
+        catch (error) {
+            this.leases = previous;
+            throw error;
+        }
         this.logger.debug('Cleared all leases');
     }
+    mutate(operation) {
+        const prior = this.mutationTail;
+        let release;
+        const gate = new Promise((resolve) => { release = resolve; });
+        const run = prior.then(() => operation()).finally(() => release());
+        this.mutationTail = run.then(() => undefined, () => undefined);
+        return run;
+    }
     getMinimumTTL() {
         const activeLeases = this.getActive();
         if (activeLeases.length === 0)

package/dist/cjs/lease/WatermarkStore.js

@@ -50,19 +50,13 @@ class WatermarkStore {
         return this._initialized;
     }
     async load() {
-        try {
-            const watermark = await this.storage.get(this.storageKey);
-            if (watermark) {
-                this.state = watermark;
-                this.logger.debug('Loaded watermark from storage');
-                return this.state;
-            }
-            return null;
-        }
-        catch (error) {
-            this.logger.error('Failed to load watermark:', error);
-            return null;
+        const watermark = await this.storage.get(this.storageKey);
+        if (watermark) {
+            this.state = watermark;
+            this.logger.debug('Loaded watermark from storage');
+            return this.state;
         }
+        return null;
     }
     async save(watermark) {
         try {

package/dist/cjs/legacy.d.ts

@@ -1,12 +1,21 @@
 /**
- * Legacy JS implementations — backward compatibility.
+ * Legacy JS crypto kernels — **deprecated (RFC-031 P4), frozen**.
  *
- * These are the original TypeScript implementations preserved for
- * environments where WASM is not available. The main entry point
- * (`@totemsdk/core`) now delegates to WASM by default.
+ * @deprecated The pure-JS kernels are scheduled for removal (RFC-031 P5). Use
+ * the WASM surface instead:
+ *   - `@totemsdk/core` / `@totemsdk/core/wasm` — synchronous WASM (bundler loader required)
+ *   - `@totemsdk/core/wasm-async` — async-init WASM (portable to edge/Workers)
  *
- * Import legacy implementations directly:
- *   import { wotsSign } from '@totemsdk/core/legacy';
+ * This entry stays only as a migration bridge for environments that cannot run
+ * WASM yet; it is **frozen** (no new kernels are added here) and will be deleted
+ * in a major release. Exports are `legacy`-prefixed where they collide with the
+ * WASM names (`legacyWotsSign`, …).
+ *
+ *   // before
+ *   import { legacyWotsSign } from '@totemsdk/core/legacy';
+ *   // after
+ *   import { init, wotsSign } from '@totemsdk/core/wasm-async';
+ *   await init();
  */
 export { F, hex, fromHex, u16be, u32be, assert32, h, prfChainSeed, toWinternitzDigits, baseWWithChecksum, derivePKdigest as legacyDerivePKdigest, wotsKeypairFromSeed as legacyWotsKeypairFromSeed, wotsSign as legacyWotsSign, wotsSignLegacy, wotsPkFromSig as legacyWotsPkFromSig, wotsVerify as legacyWotsVerify, wotsVerifyDigest as legacyWotsVerifyDigest, wotsPublicKeyFromSeed as legacyWotsPublicKeyFromSeed, type WotsKeypair, type WotsSignature, } from './wots.js';
 export { TreeKey, TreeKeyNode, verifyTreeSignature as legacyVerifyTreeSignature, serializeTreeSignature, deserializeTreeSignature, getRootPublicKey, DEFAULT_KEYS_PER_LEVEL, DEFAULT_LEVELS, createUnifiedChildTreeKey as legacyCreateUnifiedChildTreeKey, createUnifiedChildTreeKeyAsync, createUnifiedRootTreeKey as legacyCreateUnifiedRootTreeKey, deriveUnifiedAddressPublicKey as legacyDeriveUnifiedAddressPublicKey, createPerAddressTreeKey, createPerAddressTreeKeyAsync, type KeyGenProgress, type ProgressCallback, type SignatureProof, type TreeSignature, } from './treekey.js';

package/dist/cjs/legacy.js

@@ -1,13 +1,22 @@
 "use strict";
 /**
- * Legacy JS implementations — backward compatibility.
+ * Legacy JS crypto kernels — **deprecated (RFC-031 P4), frozen**.
  *
- * These are the original TypeScript implementations preserved for
- * environments where WASM is not available. The main entry point
- * (`@totemsdk/core`) now delegates to WASM by default.
+ * @deprecated The pure-JS kernels are scheduled for removal (RFC-031 P5). Use
+ * the WASM surface instead:
+ *   - `@totemsdk/core` / `@totemsdk/core/wasm` — synchronous WASM (bundler loader required)
+ *   - `@totemsdk/core/wasm-async` — async-init WASM (portable to edge/Workers)
  *
- * Import legacy implementations directly:
- *   import { wotsSign } from '@totemsdk/core/legacy';
+ * This entry stays only as a migration bridge for environments that cannot run
+ * WASM yet; it is **frozen** (no new kernels are added here) and will be deleted
+ * in a major release. Exports are `legacy`-prefixed where they collide with the
+ * WASM names (`legacyWotsSign`, …).
+ *
+ *   // before
+ *   import { legacyWotsSign } from '@totemsdk/core/legacy';
+ *   // after
+ *   import { init, wotsSign } from '@totemsdk/core/wasm-async';
+ *   await init();
  */
 var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
     if (k2 === undefined) k2 = k;

package/dist/cjs/scripts/contract-helpers.js

@@ -17,9 +17,9 @@
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.StatefulGameHelper = exports.SlowCashHelper = exports.FlashCashHelper = exports.VaultHelper = exports.ExchangeHelper = exports.MASTHelper = exports.HTLCHelper = exports.TimelockHelper = void 0;
 const wasm_sync_js_1 = require("../wasm-sync.js");
-const node_crypto_1 = require("node:crypto");
+const sha256_js_1 = require("@noble/hashes/sha256.js");
 function sha256(data) {
-    return new Uint8Array((0, node_crypto_1.createHash)('sha256').update(data).digest());
+    return (0, sha256_js_1.sha256)(data);
 }
 const types_js_1 = require("./types.js");
 function kissHex(hex) {
@@ -83,7 +83,7 @@ class HTLCHelper {
      * Generate a random preimage and its hash.
      */
     static generateSecret() {
-        const preimageBytes = (0, node_crypto_1.randomBytes)(32);
+        const preimageBytes = globalThis.crypto.getRandomValues(new Uint8Array(32));
         const preimage = bytesToHex(preimageBytes);
         const hashBytes = (0, wasm_sync_js_1.sha3_256)(preimageBytes);
         const hash = bytesToHex(hashBytes);

package/dist/cjs/scripts/witness-serializer.d.ts

@@ -23,7 +23,7 @@ export declare function serializeExtraScripts(extraScripts: Map<string, string>)
 export declare function aggregateSignatures(totemSignature: {
     publicKey: Uint8Array;
     signature: Uint8Array;
-}, externalSignatures: ExternalSignature[]): Uint8Array[];
+}, externalSignatures: ExternalSignature[], transactionDigest: Uint8Array): Uint8Array[];
 export declare function validateExternalSignature(signature: ExternalSignature, transactionDigest: Uint8Array): boolean;
 export declare function computeScriptAddress(script: string): string;
 export { concat };

package/dist/cjs/scripts/witness-serializer.js

@@ -18,6 +18,7 @@ exports.validateExternalSignature = validateExternalSignature;
 exports.computeScriptAddress = computeScriptAddress;
 exports.concat = concat;
 const wasm_sync_js_1 = require("../wasm-sync.js");
+const wots_js_1 = require("../wots.js");
 const mmr_js_1 = require("../mmr.js");
 const minima32_js_1 = require("../minima32.js");
 function hexToBytes(hex) {
@@ -271,12 +272,26 @@ function serializeExtraScripts(extraScripts) {
     }
     return concat(...parts);
 }
-function aggregateSignatures(totemSignature, externalSignatures) {
+function aggregateSignatures(totemSignature, externalSignatures, transactionDigest) {
+    // RFC-020 C5: the aggregate must never include an unverified signature.
+    // The totem signature is verified against the transaction digest; external
+    // signatures are verified here as well as gated on their `validated` flag.
+    const totemValid = (() => {
+        try {
+            return (0, wots_js_1.wotsVerifyDigest)(totemSignature.signature, transactionDigest, totemSignature.publicKey);
+        }
+        catch {
+            return false;
+        }
+    })();
+    if (!totemValid) {
+        throw new Error('aggregateSignatures: the totem signature is invalid over the transaction digest');
+    }
     const allSigProofs = [];
     allSigProofs.push(serializeSignatureProof(totemSignature.publicKey, totemSignature.signature, { chunks: [] }));
     for (const extSig of externalSignatures) {
-        if (!extSig.validated) {
-            console.warn(`[AggregateSignatures] Skipping unvalidated signature from ${extSig.publicKey}`);
+        if (!extSig.validated || !validateExternalSignature(extSig, transactionDigest)) {
+            console.warn(`[AggregateSignatures] Skipping unverified signature from ${extSig.publicKey}`);
             continue;
         }
         const proof = extSig.proof || { chunks: [] };
@@ -295,8 +310,16 @@ function validateExternalSignature(signature, transactionDigest) {
     if (!signature.publicKey || !signature.signature) {
         return false;
     }
-    console.log(`[ValidateSignature] Validating signature from ${signature.publicKey.substring(0, 16)}...`);
-    return true;
+    // RFC-020 C5: real WOTS verification (was an unconditional `true` stub).
+    if (signature.signatureType && signature.signatureType !== 'wots') {
+        return false;
+    }
+    try {
+        return (0, wots_js_1.wotsVerifyDigest)(hexToBytes(signature.signature), transactionDigest, hexToBytes(signature.publicKey));
+    }
+    catch {
+        return false;
+    }
 }
 function computeScriptAddress(script) {
     const cleanScript = script.trim().toUpperCase();