@totemsdk/core 1.2.11 → 1.4.0

package/dist/cjs/index.js

@@ -22,8 +22,8 @@ var __exportStar = (this && this.__exportStar) || function(m, exports) {
 };
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.createChallenge = exports.timingSafeEqual = exports.deserializeTransaction = exports.computeTransactionDigest = exports.serializeTransaction = exports.wotsAddressFromKeypair = exports.parseMxAddress = exports.makeMxAddress = exports.cleanSeedPhrase = exports.validatePhrase = exports.generateWordList = exports.phraseToSeed = exports.verifyMMRProof = exports.mmrRootFromPublicKeys = exports.verifyTreeSignature = exports.deriveUnifiedAddressPublicKey = exports.createUnifiedRootTreeKey = exports.createUnifiedChildTreeKey = exports.precomputeTransactionCoinID = exports.writeMiniString = exports.writeMiniData = exports.writeMiniNumber = exports.deriveRootPrivSeed = exports.derivePerAddressSeed = exports.deriveChainSeedJava = exports.wotsKeypairFromSeed = exports.wotsPublicKeyFromSeed = exports.wotsPkFromSig = exports.wotsVerifyDigest = exports.wotsVerify = exports.wotsSign = exports.deriveFullPublicKey = exports.derivePKdigest = exports.hashChain = exports.expandPrivateKey = exports.sha3_256 = exports.concatBytes = exports.hexToBytes = exports.bytesToHex = exports.TransactionReceiptStore = exports.WatermarkExhaustedError = exports.TransactionLifecycleError = exports.TransactionLifecycle = exports.TransactionService = exports.flatIndexFromLanes = exports.finalizeLease = exports.prepareLease = exports.LeaseMonitor = exports.WatermarkStore = exports.LeaseStore = void 0;
-exports.DEFAULT_KEYS_PER_LEVEL = exports.getRootPublicKey = exports.deserializeTreeSignature = exports.serializeTreeSignature = exports.TreeKeyNode = exports.TreeKey = exports.serializeMMREntry = exports.serializeMMRData = exports.serializeMMREntryNumber = exports.createMMREntryNumber = exports.deriveUnifiedChildSeed = exports.indexToMiniDataBytes = exports.javaHashAllObjects = exports.writeHashToStream = exports.serializeMiniNumberONE = exports.serializeMiniNumberZERO = exports.hashObject = exports.deriveChildTreeSeedJava = exports.hashAllObjects = exports.serializeMiniData = exports.serializeMiniNumber = exports.bigIntToByteArray = exports.concat = exports.writeSignatureProof = exports.writeSignature = exports.writeMMREntryNumber = exports.writeMiniByte = exports.normalizeHex = exports.deriveAddressFromPublicKey = exports.verifyTreeSignatureDetailed = exports.verifySignatureDetailed = exports.verifySignature = exports.buildMinimaCoin = exports.createDefaultTransaction = exports.serializeTokenDescriptor = exports.computeTokenId = exports.serializeTransactionObject = exports.serializeCoin = exports.parseDecimalToMiniNumber = exports.MiniNumber = exports.generateSeedPhrase = exports.convertWordListToSeed = exports.convertStringToSeed = exports.WORD_LIST = exports.addressToRoot = exports.scriptToAddress = exports.decodeMx = exports.encodeMx = exports.scriptFromWotsPk = exports.validateChallenge = void 0;
-exports.MINIMA_CONSTANTS = exports.bytesToUtf8 = exports.utf8ToBytes = exports.hashCanonical = exports.canonicalJson = exports.toHex = exports.wotsSignLegacy = exports.baseWWithChecksum = exports.toWinternitzDigits = exports.prfChainSeed = exports.h = exports.assert32 = exports.u32be = exports.u16be = exports.disableWotsLogger = exports.setWotsLogger = exports.fromHex = exports.hex = exports.F = exports.disableTreeKeyLogger = exports.setTreeKeyLogger = exports.createPerAddressTreeKeyAsync = exports.createPerAddressTreeKey = exports.createUnifiedChildTreeKeyAsync = exports.DEFAULT_LEVELS = void 0;
+exports.TreeKey = exports.serializeMMREntry = exports.serializeMMRData = exports.serializeMMREntryNumber = exports.createMMREntryNumber = exports.deriveUnifiedChildSeed = exports.indexToMiniDataBytes = exports.javaHashAllObjects = exports.writeHashToStream = exports.serializeMiniNumberONE = exports.serializeMiniNumberZERO = exports.hashObject = exports.deriveChildTreeSeedJava = exports.hashAllObjects = exports.serializeMiniData = exports.serializeMiniNumber = exports.bigIntToByteArray = exports.concat = exports.writeSignatureProof = exports.writeSignature = exports.writeMMREntryNumber = exports.writeMiniByte = exports.verifyDeterministicAddress = exports.deriveAddress = exports.deriveUnifiedAddress = exports.deriveDeterministicAddress = exports.normalizeHex = exports.deriveAddressFromPublicKey = exports.verifyTreeSignatureDetailed = exports.verifySignatureDetailed = exports.verifySignature = exports.buildMinimaCoin = exports.createDefaultTransaction = exports.serializeTokenDescriptor = exports.computeTokenId = exports.serializeTransactionObject = exports.serializeCoin = exports.parseDecimalToMiniNumber = exports.MiniNumber = exports.generateSeedPhrase = exports.convertWordListToSeed = exports.convertStringToSeed = exports.WORD_LIST = exports.addressToRoot = exports.scriptToAddress = exports.toNodeScript = exports.decodeMx = exports.encodeMx = exports.scriptFromWotsPk = exports.validateChallenge = void 0;
+exports.MINIMA_CONSTANTS = exports.bytesToUtf8 = exports.utf8ToBytes = exports.hashCanonical = exports.canonicalJson = exports.toHex = exports.wotsSignLegacy = exports.baseWWithChecksum = exports.toWinternitzDigits = exports.prfChainSeed = exports.h = exports.assert32 = exports.u32be = exports.u16be = exports.disableWotsLogger = exports.setWotsLogger = exports.fromHex = exports.hex = exports.F = exports.disableTreeKeyLogger = exports.setTreeKeyLogger = exports.createPerAddressTreeKeyAsync = exports.createPerAddressTreeKey = exports.createUnifiedChildTreeKeyAsync = exports.DEFAULT_LEVELS = exports.DEFAULT_KEYS_PER_LEVEL = exports.getRootPublicKey = exports.deserializeTreeSignature = exports.serializeTreeSignature = exports.TreeKeyNode = void 0;
 exports.mxToHex = mxToHex;
 // Version information for bundle duplication detection
 __exportStar(require("./version.js"), exports);
@@ -48,37 +48,38 @@ Object.defineProperty(exports, "TransactionReceiptStore", { enumerable: true, ge
 // Cryptographic primitives — backed by Rust/WASM (@totemsdk/core-wasm)
 // ---------------------------------------------------------------------------
 // Utilities
-var wasm_sync_js_1 = require("./wasm-sync.js");
-Object.defineProperty(exports, "bytesToHex", { enumerable: true, get: function () { return wasm_sync_js_1.bytesToHex; } });
-Object.defineProperty(exports, "hexToBytes", { enumerable: true, get: function () { return wasm_sync_js_1.hexToBytes; } });
-Object.defineProperty(exports, "concatBytes", { enumerable: true, get: function () { return wasm_sync_js_1.concatBytes; } });
-const wasm_sync_js_2 = require("./wasm-sync.js");
+var bytes_js_1 = require("./bytes.js");
+Object.defineProperty(exports, "bytesToHex", { enumerable: true, get: function () { return bytes_js_1.bytesToHex; } });
+Object.defineProperty(exports, "hexToBytes", { enumerable: true, get: function () { return bytes_js_1.hexToBytes; } });
+Object.defineProperty(exports, "concatBytes", { enumerable: true, get: function () { return bytes_js_1.concatBytes; } });
+const bytes_js_2 = require("./bytes.js");
+const wasm_sync_js_1 = require("./wasm-sync.js");
 // SHA3-256
-var wasm_sync_js_3 = require("./wasm-sync.js");
-Object.defineProperty(exports, "sha3_256", { enumerable: true, get: function () { return wasm_sync_js_3.sha3_256; } });
+var wasm_sync_js_2 = require("./wasm-sync.js");
+Object.defineProperty(exports, "sha3_256", { enumerable: true, get: function () { return wasm_sync_js_2.sha3_256; } });
 // WOTS Signatures
-var wasm_sync_js_4 = require("./wasm-sync.js");
-Object.defineProperty(exports, "expandPrivateKey", { enumerable: true, get: function () { return wasm_sync_js_4.expandPrivateKey; } });
-Object.defineProperty(exports, "hashChain", { enumerable: true, get: function () { return wasm_sync_js_4.hashChain; } });
-Object.defineProperty(exports, "derivePKdigest", { enumerable: true, get: function () { return wasm_sync_js_4.derivePKdigest; } });
-Object.defineProperty(exports, "deriveFullPublicKey", { enumerable: true, get: function () { return wasm_sync_js_4.deriveFullPublicKey; } });
-Object.defineProperty(exports, "wotsSign", { enumerable: true, get: function () { return wasm_sync_js_4.wotsSign; } });
-Object.defineProperty(exports, "wotsVerify", { enumerable: true, get: function () { return wasm_sync_js_4.wotsVerify; } });
-Object.defineProperty(exports, "wotsVerifyDigest", { enumerable: true, get: function () { return wasm_sync_js_4.wotsVerifyDigest; } });
-Object.defineProperty(exports, "wotsPkFromSig", { enumerable: true, get: function () { return wasm_sync_js_4.wotsPkFromSig; } });
-Object.defineProperty(exports, "wotsPublicKeyFromSeed", { enumerable: true, get: function () { return wasm_sync_js_4.wotsPublicKeyFromSeed; } });
-Object.defineProperty(exports, "wotsKeypairFromSeed", { enumerable: true, get: function () { return wasm_sync_js_4.wotsKeypairFromSeed; } });
+var wasm_sync_js_3 = require("./wasm-sync.js");
+Object.defineProperty(exports, "expandPrivateKey", { enumerable: true, get: function () { return wasm_sync_js_3.expandPrivateKey; } });
+Object.defineProperty(exports, "hashChain", { enumerable: true, get: function () { return wasm_sync_js_3.hashChain; } });
+Object.defineProperty(exports, "derivePKdigest", { enumerable: true, get: function () { return wasm_sync_js_3.derivePKdigest; } });
+Object.defineProperty(exports, "deriveFullPublicKey", { enumerable: true, get: function () { return wasm_sync_js_3.deriveFullPublicKey; } });
+Object.defineProperty(exports, "wotsSign", { enumerable: true, get: function () { return wasm_sync_js_3.wotsSign; } });
+Object.defineProperty(exports, "wotsVerify", { enumerable: true, get: function () { return wasm_sync_js_3.wotsVerify; } });
+Object.defineProperty(exports, "wotsVerifyDigest", { enumerable: true, get: function () { return wasm_sync_js_3.wotsVerifyDigest; } });
+Object.defineProperty(exports, "wotsPkFromSig", { enumerable: true, get: function () { return wasm_sync_js_3.wotsPkFromSig; } });
+Object.defineProperty(exports, "wotsPublicKeyFromSeed", { enumerable: true, get: function () { return wasm_sync_js_3.wotsPublicKeyFromSeed; } });
+Object.defineProperty(exports, "wotsKeypairFromSeed", { enumerable: true, get: function () { return wasm_sync_js_3.wotsKeypairFromSeed; } });
 // WOTS Params (from params.ts — constants, no crypto)
 __exportStar(require("./params.js"), exports);
 // Java-Compatible Serialization
-var wasm_sync_js_5 = require("./wasm-sync.js");
-Object.defineProperty(exports, "deriveChainSeedJava", { enumerable: true, get: function () { return wasm_sync_js_5.deriveChainSeedJava; } });
-Object.defineProperty(exports, "derivePerAddressSeed", { enumerable: true, get: function () { return wasm_sync_js_5.derivePerAddressSeed; } });
-Object.defineProperty(exports, "deriveRootPrivSeed", { enumerable: true, get: function () { return wasm_sync_js_5.deriveRootPrivSeed; } });
-Object.defineProperty(exports, "writeMiniNumber", { enumerable: true, get: function () { return wasm_sync_js_5.writeMiniNumber; } });
-Object.defineProperty(exports, "writeMiniData", { enumerable: true, get: function () { return wasm_sync_js_5.writeMiniData; } });
-Object.defineProperty(exports, "writeMiniString", { enumerable: true, get: function () { return wasm_sync_js_5.writeMiniString; } });
-Object.defineProperty(exports, "precomputeTransactionCoinID", { enumerable: true, get: function () { return wasm_sync_js_5.precomputeTransactionCoinID; } });
+var wasm_sync_js_4 = require("./wasm-sync.js");
+Object.defineProperty(exports, "deriveChainSeedJava", { enumerable: true, get: function () { return wasm_sync_js_4.deriveChainSeedJava; } });
+Object.defineProperty(exports, "derivePerAddressSeed", { enumerable: true, get: function () { return wasm_sync_js_4.derivePerAddressSeed; } });
+Object.defineProperty(exports, "deriveRootPrivSeed", { enumerable: true, get: function () { return wasm_sync_js_4.deriveRootPrivSeed; } });
+Object.defineProperty(exports, "writeMiniNumber", { enumerable: true, get: function () { return wasm_sync_js_4.writeMiniNumber; } });
+Object.defineProperty(exports, "writeMiniData", { enumerable: true, get: function () { return wasm_sync_js_4.writeMiniData; } });
+Object.defineProperty(exports, "writeMiniString", { enumerable: true, get: function () { return wasm_sync_js_4.writeMiniString; } });
+Object.defineProperty(exports, "precomputeTransactionCoinID", { enumerable: true, get: function () { return wasm_sync_js_4.precomputeTransactionCoinID; } });
 // TreeKey/TreeKeyNode — WASM-backed
 // createUnifiedChildTreeKey / createUnifiedRootTreeKey come from the TS
 // implementation (returning a full TreeKey object with setUses/sign/getPublicKey)
@@ -89,9 +90,9 @@ Object.defineProperty(exports, "createUnifiedChildTreeKey", { enumerable: true,
 Object.defineProperty(exports, "createUnifiedRootTreeKey", { enumerable: true, get: function () { return treekey_js_1.createUnifiedRootTreeKey; } });
 Object.defineProperty(exports, "deriveUnifiedAddressPublicKey", { enumerable: true, get: function () { return treekey_js_1.deriveUnifiedAddressPublicKey; } });
 Object.defineProperty(exports, "verifyTreeSignature", { enumerable: true, get: function () { return treekey_js_1.verifyTreeSignature; } });
-var wasm_sync_js_6 = require("./wasm-sync.js");
-Object.defineProperty(exports, "mmrRootFromPublicKeys", { enumerable: true, get: function () { return wasm_sync_js_6.mmrRootFromPublicKeys; } });
-Object.defineProperty(exports, "verifyMMRProof", { enumerable: true, get: function () { return wasm_sync_js_6.verifyMMRProof; } });
+var wasm_sync_js_5 = require("./wasm-sync.js");
+Object.defineProperty(exports, "mmrRootFromPublicKeys", { enumerable: true, get: function () { return wasm_sync_js_5.mmrRootFromPublicKeys; } });
+Object.defineProperty(exports, "verifyMMRProof", { enumerable: true, get: function () { return wasm_sync_js_5.verifyMMRProof; } });
 // BIP39 Seed Phrase Handling
 // The WASM binding (wasm-sync.ts) shares the canonical 2048-word BIP39 list
 // and Minima-compatible uppercase canonicalization with the TS implementation
@@ -104,22 +105,22 @@ Object.defineProperty(exports, "generateWordList", { enumerable: true, get: func
 Object.defineProperty(exports, "validatePhrase", { enumerable: true, get: function () { return bip39_js_1.validatePhrase; } });
 Object.defineProperty(exports, "cleanSeedPhrase", { enumerable: true, get: function () { return bip39_js_1.cleanSeedPhrase; } });
 // Address Derivation
-var wasm_sync_js_7 = require("./wasm-sync.js");
-Object.defineProperty(exports, "makeMxAddress", { enumerable: true, get: function () { return wasm_sync_js_7.makeMxAddress; } });
-Object.defineProperty(exports, "parseMxAddress", { enumerable: true, get: function () { return wasm_sync_js_7.parseMxAddress; } });
-Object.defineProperty(exports, "wotsAddressFromKeypair", { enumerable: true, get: function () { return wasm_sync_js_7.wotsAddressFromKeypair; } });
+var wasm_sync_js_6 = require("./wasm-sync.js");
+Object.defineProperty(exports, "makeMxAddress", { enumerable: true, get: function () { return wasm_sync_js_6.makeMxAddress; } });
+Object.defineProperty(exports, "parseMxAddress", { enumerable: true, get: function () { return wasm_sync_js_6.parseMxAddress; } });
+Object.defineProperty(exports, "wotsAddressFromKeypair", { enumerable: true, get: function () { return wasm_sync_js_6.wotsAddressFromKeypair; } });
 // Transaction Serialization & Digest
-var wasm_sync_js_8 = require("./wasm-sync.js");
-Object.defineProperty(exports, "serializeTransaction", { enumerable: true, get: function () { return wasm_sync_js_8.serializeTransaction; } });
-Object.defineProperty(exports, "computeTransactionDigest", { enumerable: true, get: function () { return wasm_sync_js_8.computeTransactionDigest; } });
+var wasm_sync_js_7 = require("./wasm-sync.js");
+Object.defineProperty(exports, "serializeTransaction", { enumerable: true, get: function () { return wasm_sync_js_7.serializeTransaction; } });
+Object.defineProperty(exports, "computeTransactionDigest", { enumerable: true, get: function () { return wasm_sync_js_7.computeTransactionDigest; } });
 // Transaction deserialization (byte-exact inverse of the TS serializer)
 var transaction_js_1 = require("./transaction.js");
 Object.defineProperty(exports, "deserializeTransaction", { enumerable: true, get: function () { return transaction_js_1.deserializeTransaction; } });
 // Verification
-var wasm_sync_js_9 = require("./wasm-sync.js");
-Object.defineProperty(exports, "timingSafeEqual", { enumerable: true, get: function () { return wasm_sync_js_9.timingSafeEqual; } });
-Object.defineProperty(exports, "createChallenge", { enumerable: true, get: function () { return wasm_sync_js_9.createChallenge; } });
-Object.defineProperty(exports, "validateChallenge", { enumerable: true, get: function () { return wasm_sync_js_9.validateChallenge; } });
+var wasm_sync_js_8 = require("./wasm-sync.js");
+Object.defineProperty(exports, "timingSafeEqual", { enumerable: true, get: function () { return wasm_sync_js_8.timingSafeEqual; } });
+Object.defineProperty(exports, "createChallenge", { enumerable: true, get: function () { return wasm_sync_js_8.createChallenge; } });
+Object.defineProperty(exports, "validateChallenge", { enumerable: true, get: function () { return wasm_sync_js_8.validateChallenge; } });
 // ---------------------------------------------------------------------------
 // TypeScript-only modules (no crypto — keep as-is)
 // ---------------------------------------------------------------------------
@@ -127,20 +128,22 @@ Object.defineProperty(exports, "validateChallenge", { enumerable: true, get: fun
 var script_js_1 = require("./script.js");
 Object.defineProperty(exports, "scriptFromWotsPk", { enumerable: true, get: function () { return script_js_1.scriptFromWotsPk; } });
 // Base32 Encoding (Minima-compatible) — re-export from WASM
-var wasm_sync_js_10 = require("./wasm-sync.js");
-Object.defineProperty(exports, "encodeMx", { enumerable: true, get: function () { return wasm_sync_js_10.makeMxAddress; } });
-Object.defineProperty(exports, "decodeMx", { enumerable: true, get: function () { return wasm_sync_js_10.parseMxAddress; } });
+var wasm_sync_js_9 = require("./wasm-sync.js");
+Object.defineProperty(exports, "encodeMx", { enumerable: true, get: function () { return wasm_sync_js_9.makeMxAddress; } });
+Object.defineProperty(exports, "decodeMx", { enumerable: true, get: function () { return wasm_sync_js_9.parseMxAddress; } });
 /** Convert an Mx (radix-32) or hex Minima address to lowercase hex. */
 function mxToHex(address) {
     const upper = address.startsWith('0x') || address.startsWith('0X') ? address.slice(2) : address;
     return upper.toUpperCase().startsWith('MX')
-        ? (0, wasm_sync_js_2.bytesToHex)((0, wasm_sync_js_2.parseMxAddress)(address))
+        ? (0, bytes_js_2.bytesToHex)((0, wasm_sync_js_1.parseMxAddress)(address))
         : upper.replace(/^0x/i, '');
 }
 // Merkle Mountain Range (original JS — types and helpers)
 __exportStar(require("./mmr.js"), exports);
 // Script Types, Witness Serializer, Contract Helpers
 __exportStar(require("./scripts/index.js"), exports);
+var canonical_js_1 = require("./scripts/canonical.js");
+Object.defineProperty(exports, "toNodeScript", { enumerable: true, get: function () { return canonical_js_1.toNodeScript; } });
 // Address Derivation (original)
 var derive_js_1 = require("./derive.js");
 Object.defineProperty(exports, "scriptToAddress", { enumerable: true, get: function () { return derive_js_1.scriptToAddress; } });
@@ -170,6 +173,12 @@ Object.defineProperty(exports, "verifySignatureDetailed", { enumerable: true, ge
 Object.defineProperty(exports, "verifyTreeSignatureDetailed", { enumerable: true, get: function () { return verify_js_1.verifyTreeSignatureDetailed; } });
 Object.defineProperty(exports, "deriveAddressFromPublicKey", { enumerable: true, get: function () { return verify_js_1.deriveAddressFromPublicKey; } });
 Object.defineProperty(exports, "normalizeHex", { enumerable: true, get: function () { return verify_js_1.normalizeHex; } });
+// Deterministic address derivation (CAN-005)
+var address_derivation_js_1 = require("./address-derivation.js");
+Object.defineProperty(exports, "deriveDeterministicAddress", { enumerable: true, get: function () { return address_derivation_js_1.deriveDeterministicAddress; } });
+Object.defineProperty(exports, "deriveUnifiedAddress", { enumerable: true, get: function () { return address_derivation_js_1.deriveUnifiedAddress; } });
+Object.defineProperty(exports, "deriveAddress", { enumerable: true, get: function () { return address_derivation_js_1.deriveAddress; } });
+Object.defineProperty(exports, "verifyDeterministicAddress", { enumerable: true, get: function () { return address_derivation_js_1.verifyDeterministicAddress; } });
 // Streamable primitives (low-level serialization building blocks)
 var Streamable_js_1 = require("./Streamable.js");
 Object.defineProperty(exports, "writeMiniByte", { enumerable: true, get: function () { return Streamable_js_1.writeMiniByte; } });
@@ -224,10 +233,11 @@ Object.defineProperty(exports, "toWinternitzDigits", { enumerable: true, get: fu
 Object.defineProperty(exports, "baseWWithChecksum", { enumerable: true, get: function () { return wots_js_1.baseWWithChecksum; } });
 Object.defineProperty(exports, "wotsSignLegacy", { enumerable: true, get: function () { return wots_js_1.wotsSignLegacy; } });
 // Canonical helpers (deterministic JSON + hashing)
-var canonical_js_1 = require("./canonical.js");
-Object.defineProperty(exports, "toHex", { enumerable: true, get: function () { return canonical_js_1.toHex; } });
-Object.defineProperty(exports, "canonicalJson", { enumerable: true, get: function () { return canonical_js_1.canonicalJson; } });
-Object.defineProperty(exports, "hashCanonical", { enumerable: true, get: function () { return canonical_js_1.hashCanonical; } });
+var canonical_js_2 = require("./canonical.js");
+Object.defineProperty(exports, "toHex", { enumerable: true, get: function () { return canonical_js_2.toHex; } });
+Object.defineProperty(exports, "canonicalJson", { enumerable: true, get: function () { return canonical_js_2.canonicalJson; } });
+var canonical_hash_js_1 = require("./canonical-hash.js");
+Object.defineProperty(exports, "hashCanonical", { enumerable: true, get: function () { return canonical_hash_js_1.hashCanonical; } });
 // Byte/string utilities
 var utils_js_1 = require("./utils.js");
 Object.defineProperty(exports, "utf8ToBytes", { enumerable: true, get: function () { return utils_js_1.utf8ToBytes; } });

package/dist/cjs/legacy.d.ts

@@ -1,12 +1,21 @@
 /**
- * Legacy JS implementations — backward compatibility.
+ * Legacy JS crypto kernels — **deprecated (RFC-031 P4), frozen**.
  *
- * These are the original TypeScript implementations preserved for
- * environments where WASM is not available. The main entry point
- * (`@totemsdk/core`) now delegates to WASM by default.
+ * @deprecated The pure-JS kernels are scheduled for removal (RFC-031 P5). Use
+ * the WASM surface instead:
+ *   - `@totemsdk/core` / `@totemsdk/core/wasm` — synchronous WASM (bundler loader required)
+ *   - `@totemsdk/core/wasm-async` — async-init WASM (portable to edge/Workers)
  *
- * Import legacy implementations directly:
- *   import { wotsSign } from '@totemsdk/core/legacy';
+ * This entry stays only as a migration bridge for environments that cannot run
+ * WASM yet; it is **frozen** (no new kernels are added here) and will be deleted
+ * in a major release. Exports are `legacy`-prefixed where they collide with the
+ * WASM names (`legacyWotsSign`, …).
+ *
+ *   // before
+ *   import { legacyWotsSign } from '@totemsdk/core/legacy';
+ *   // after
+ *   import { init, wotsSign } from '@totemsdk/core/wasm-async';
+ *   await init();
  */
 export { F, hex, fromHex, u16be, u32be, assert32, h, prfChainSeed, toWinternitzDigits, baseWWithChecksum, derivePKdigest as legacyDerivePKdigest, wotsKeypairFromSeed as legacyWotsKeypairFromSeed, wotsSign as legacyWotsSign, wotsSignLegacy, wotsPkFromSig as legacyWotsPkFromSig, wotsVerify as legacyWotsVerify, wotsVerifyDigest as legacyWotsVerifyDigest, wotsPublicKeyFromSeed as legacyWotsPublicKeyFromSeed, type WotsKeypair, type WotsSignature, } from './wots.js';
 export { TreeKey, TreeKeyNode, verifyTreeSignature as legacyVerifyTreeSignature, serializeTreeSignature, deserializeTreeSignature, getRootPublicKey, DEFAULT_KEYS_PER_LEVEL, DEFAULT_LEVELS, createUnifiedChildTreeKey as legacyCreateUnifiedChildTreeKey, createUnifiedChildTreeKeyAsync, createUnifiedRootTreeKey as legacyCreateUnifiedRootTreeKey, deriveUnifiedAddressPublicKey as legacyDeriveUnifiedAddressPublicKey, createPerAddressTreeKey, createPerAddressTreeKeyAsync, type KeyGenProgress, type ProgressCallback, type SignatureProof, type TreeSignature, } from './treekey.js';

package/dist/cjs/legacy.js

@@ -1,13 +1,22 @@
 "use strict";
 /**
- * Legacy JS implementations — backward compatibility.
+ * Legacy JS crypto kernels — **deprecated (RFC-031 P4), frozen**.
  *
- * These are the original TypeScript implementations preserved for
- * environments where WASM is not available. The main entry point
- * (`@totemsdk/core`) now delegates to WASM by default.
+ * @deprecated The pure-JS kernels are scheduled for removal (RFC-031 P5). Use
+ * the WASM surface instead:
+ *   - `@totemsdk/core` / `@totemsdk/core/wasm` — synchronous WASM (bundler loader required)
+ *   - `@totemsdk/core/wasm-async` — async-init WASM (portable to edge/Workers)
  *
- * Import legacy implementations directly:
- *   import { wotsSign } from '@totemsdk/core/legacy';
+ * This entry stays only as a migration bridge for environments that cannot run
+ * WASM yet; it is **frozen** (no new kernels are added here) and will be deleted
+ * in a major release. Exports are `legacy`-prefixed where they collide with the
+ * WASM names (`legacyWotsSign`, …).
+ *
+ *   // before
+ *   import { legacyWotsSign } from '@totemsdk/core/legacy';
+ *   // after
+ *   import { init, wotsSign } from '@totemsdk/core/wasm-async';
+ *   await init();
  */
 var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
     if (k2 === undefined) k2 = k;

package/dist/cjs/mmr.d.ts

@@ -16,6 +16,28 @@ export type Bytes = Uint8Array;
 export declare function mmrLeafExact(script: string): Bytes;
 /** In a single-leaf MMR the root equals the leaf commitment. */
 export declare function mmrRootFromSingleLeaf(script: string): Bytes;
+/**
+ * Build the serialized Minima `ScriptProof` bytes for a single-leaf MMR.
+ *
+ * Mirrors the node's `ScriptProof(const std::string& zScript)` constructor
+ * (org/minima/objects/script_proof.cpp): the script is added as the sole leaf
+ * of a fresh MMR with sum value ZERO, so the proof chain is empty and the
+ * resulting address is the leaf commitment itself:
+ *
+ *   address = sha3( MiniNumber.ZERO || MiniString(script) || MiniNumber.ZERO )
+ *           = mmrLeafExact(script)
+ *
+ * This is exactly how the node derives `Address(script)`, so a witness carrying
+ * this proof satisfies `Witness::getScript(input.getAddress())` for every input
+ * paying to that script. Without it the node rejects the TxPoW with
+ * "Script Missing from TxPoW for address <addr>".
+ *
+ * Wire format (`ScriptProof::writeDataStream`):
+ *   MiniString(script) || MMRProof(blockTime = 0, chunks = [])
+ *
+ * @param script - The Minima (KISSVM) script whose address the proof attests.
+ */
+export declare function buildScriptProof(script: string): Bytes;
 /**
  * MMRData structure matching Minima's MMRData.java
  * Contains hash and value (for sum tree functionality)

package/dist/cjs/mmr.js

@@ -4,6 +4,7 @@ exports.deserializeMMRProof = exports.MMRTree = exports.serializeRealMMRProof =
 exports.serializeMMRProof = serializeMMRProof;
 exports.mmrLeafExact = mmrLeafExact;
 exports.mmrRootFromSingleLeaf = mmrRootFromSingleLeaf;
+exports.buildScriptProof = buildScriptProof;
 exports.createMMRDataLeafNode = createMMRDataLeafNode;
 exports.createMMRDataParentNode = createMMRDataParentNode;
 exports.calculateProofRoot = calculateProofRoot;
@@ -15,6 +16,9 @@ const wasm_sync_js_1 = require("./wasm-sync.js");
 const javaStreamables_js_1 = require("./javaStreamables.js");
 // Import canonical wire serialization from Streamable.ts (single source of truth)
 const Streamable_js_1 = require("./Streamable.js");
+// Canonicalise to the exact script the node will receive, so the proof's
+// computed address matches `computeScriptAddress` (which canonicalises too).
+const canonical_js_1 = require("./scripts/canonical.js");
 // Re-export for API compatibility (existing code imports from mmr.ts)
 // Using a wrapper function for better compatibility with dynamic imports
 function serializeMMRProof(proof, blockTime = 0n) {
@@ -80,6 +84,35 @@ function mmrLeafExact(script) {
 function mmrRootFromSingleLeaf(script) {
     return mmrLeafExact(script);
 }
+/**
+ * Build the serialized Minima `ScriptProof` bytes for a single-leaf MMR.
+ *
+ * Mirrors the node's `ScriptProof(const std::string& zScript)` constructor
+ * (org/minima/objects/script_proof.cpp): the script is added as the sole leaf
+ * of a fresh MMR with sum value ZERO, so the proof chain is empty and the
+ * resulting address is the leaf commitment itself:
+ *
+ *   address = sha3( MiniNumber.ZERO || MiniString(script) || MiniNumber.ZERO )
+ *           = mmrLeafExact(script)
+ *
+ * This is exactly how the node derives `Address(script)`, so a witness carrying
+ * this proof satisfies `Witness::getScript(input.getAddress())` for every input
+ * paying to that script. Without it the node rejects the TxPoW with
+ * "Script Missing from TxPoW for address <addr>".
+ *
+ * Wire format (`ScriptProof::writeDataStream`):
+ *   MiniString(script) || MMRProof(blockTime = 0, chunks = [])
+ *
+ * @param script - The Minima (KISSVM) script whose address the proof attests.
+ */
+function buildScriptProof(script) {
+    // The node derives the proof's address as
+    //   sha3( MiniNumber.ZERO || MiniString(script) || MiniNumber.ZERO )
+    // so the script bytes here must be exactly the canonical script whose address
+    // was used for the coin (see computeScriptAddress).
+    const canonical = (0, canonical_js_1.toNodeScript)(script);
+    return concat((0, Streamable_js_1.writeMiniString)(canonical), serializeMMRProof({ chunks: [] }, 0n));
+}
 /**
  * Create MMRData leaf node matching Minima's MMRData.CreateMMRDataLeafNode
  *

package/dist/cjs/scripts/canonical.d.ts

@@ -0,0 +1,20 @@
+/**
+ * `toNodeScript` — canonicalize a KISSVM script to the syntax the Minima **node**
+ * tokenizer accepts (RFC-048 §3.1 L4 finding; audit
+ * `docs/audits/kissvm-node-validity-l4-2026-10.md`).
+ *
+ * The node tokenizer requires:
+ *   - user variable names `^[a-z]+$` (lowercase letters only — no digits/underscores/uppercase),
+ *   - hex literals `^0x[0-9a-fA-F]+$` (lowercase `0x` prefix),
+ *   - arithmetic via the `+` / `-` operators (`ADD`/`SUB` are not node functions).
+ *
+ * This is a token-level rewrite: commands, functions, operators, globals (`@…`), hex
+ * literals, numbers and `[…]` string literals are preserved; only **user identifiers**
+ * are rewritten to lowercase letters (with deterministic de-collision), `0X`→`0x`, and
+ * `ADD`/`SUB`→`+`/`-`. It is idempotent.
+ *
+ * Semantics are unchanged: the SDK evaluators normalize `+`→ADD and `-`→SUB (and vice
+ * versa), so a canonical script behaves identically to its source.
+ */
+/** Canonicalize a KISSVM script to node-accepted syntax. Idempotent. */
+export declare function toNodeScript(script: string): string;

package/dist/cjs/scripts/canonical.js

@@ -0,0 +1,99 @@
+"use strict";
+/**
+ * `toNodeScript` — canonicalize a KISSVM script to the syntax the Minima **node**
+ * tokenizer accepts (RFC-048 §3.1 L4 finding; audit
+ * `docs/audits/kissvm-node-validity-l4-2026-10.md`).
+ *
+ * The node tokenizer requires:
+ *   - user variable names `^[a-z]+$` (lowercase letters only — no digits/underscores/uppercase),
+ *   - hex literals `^0x[0-9a-fA-F]+$` (lowercase `0x` prefix),
+ *   - arithmetic via the `+` / `-` operators (`ADD`/`SUB` are not node functions).
+ *
+ * This is a token-level rewrite: commands, functions, operators, globals (`@…`), hex
+ * literals, numbers and `[…]` string literals are preserved; only **user identifiers**
+ * are rewritten to lowercase letters (with deterministic de-collision), `0X`→`0x`, and
+ * `ADD`/`SUB`→`+`/`-`. It is idempotent.
+ *
+ * Semantics are unchanged: the SDK evaluators normalize `+`→ADD and `-`→SUB (and vice
+ * versa), so a canonical script behaves identically to its source.
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.toNodeScript = toNodeScript;
+const KEYWORDS = new Set([
+    'LET', 'IF', 'THEN', 'ELSE', 'ELSEIF', 'ENDIF', 'RETURN', 'ASSERT', 'EXEC', 'MAST',
+    'WHILE', 'DO', 'ENDWHILE', 'FOR', 'TO', 'BY', 'ENDFOR', 'FOREACH', 'IN', 'SWITCH',
+    'CASE', 'DEFAULT', 'ENDSWITCH', 'FUNC', 'ENDFUNC', 'TRUE', 'FALSE', 'STORE', 'WITH', 'FUNCTION', 'RETURN',
+]);
+// Word operators kept as-is (ADD/SUB are handled separately → +/−).
+const OPS = new Set([
+    'GT', 'LT', 'EQ', 'GTE', 'LTE', 'NEQ', 'AND', 'OR', 'XOR', 'NAND', 'NOR', 'NXOR',
+    'NOT', 'NEG', 'MUL', 'DIV', 'MOD', 'LSHIFT', 'RSHIFT', 'BITAND', 'BITOR', 'BITXOR', 'BITNOT',
+]);
+const FUNCTIONS = new Set([
+    'SHA3', 'SHA2', 'HASH', 'PROOF', 'SIGNEDBY', 'MULTISIG', 'CHECKSIG', 'VERIFYOUT', 'VERIFYIN',
+    'GETOUTADDR', 'GETOUTAMT', 'GETOUTTOK', 'GETOUTKEEPSTATE', 'GETINADDR', 'GETINAMT', 'GETINID',
+    'GETINTOK', 'STATE', 'PREVSTATE', 'SAMESTATE', 'SAMECOINS', 'COINAGE', 'COINDATA', 'NUMBER',
+    'HEX', 'STRING', 'ASCII', 'UTF8', 'BOOL', 'CONCAT', 'LEN', 'REV', 'SUBSET', 'SETLEN',
+    'SUBSTR', 'REPLACE', 'REPLACEFIRST', 'OVERWRITE', 'ABS', 'CEIL', 'FLOOR', 'MAX', 'MIN',
+    'DEC', 'INC', 'SIGDIG', 'POW', 'SQRT', 'BITSET', 'BITGET', 'BITCOUNT', 'ADDRESS', 'EXISTS',
+    'GET', 'SUMINPUTS', 'SUMOUTPUTS', 'CHECKSIG',
+]);
+function classify(id) {
+    const up = id.toUpperCase();
+    if (up === 'ADD')
+        return { kind: 'keep', out: '+' };
+    if (up === 'SUB')
+        return { kind: 'keep', out: '-' };
+    if (KEYWORDS.has(up) || OPS.has(up) || FUNCTIONS.has(up))
+        return { kind: 'keep', out: up };
+    return { kind: 'var' };
+}
+/** a, b, …, z, aa, ab, … */
+function letters(n) {
+    let s = '';
+    n += 1;
+    while (n > 0) {
+        const r = (n - 1) % 26;
+        s = String.fromCharCode(97 + r) + s;
+        n = Math.floor((n - 1) / 26);
+    }
+    return s;
+}
+const TOKEN = /(\[[^\]]*\]|0[xX][0-9a-fA-F]+|@[A-Za-z][A-Za-z0-9]*|[A-Za-z_][A-Za-z0-9_]*)/g;
+/** Canonicalize a KISSVM script to node-accepted syntax. Idempotent. */
+function toNodeScript(script) {
+    // The node tokenizer has no comment syntax; strip `//` line comments.
+    script = script.replace(/\/\/[^\n]*/g, '');
+    const varMap = new Map();
+    const used = new Set();
+    // First pass: assign canonical names to user variables (in first-occurrence order).
+    let m;
+    const re1 = new RegExp(TOKEN.source, 'g');
+    while ((m = re1.exec(script))) {
+        const tok = m[0];
+        if (tok[0] === '[' || tok.startsWith('0x') || tok.startsWith('0X') || tok[0] === '@')
+            continue;
+        if (classify(tok).kind !== 'var' || varMap.has(tok))
+            continue;
+        const base = tok.toLowerCase().replace(/[^a-z]/g, '') || 'v';
+        let cand = base;
+        let i = 0;
+        while (used.has(cand))
+            cand = base + letters(i++);
+        used.add(cand);
+        varMap.set(tok, cand);
+    }
+    // Second pass: rewrite.
+    return script.replace(TOKEN, (tok) => {
+        if (tok[0] === '[')
+            return tok;
+        if (tok.startsWith('0x') || tok.startsWith('0X'))
+            return '0x' + tok.slice(2);
+        if (tok[0] === '@')
+            return '@' + tok.slice(1).toUpperCase();
+        const c = classify(tok);
+        if (c.kind === 'keep')
+            return c.out;
+        return varMap.get(tok) ?? tok;
+    });
+}

package/dist/cjs/scripts/contract-helpers.js

@@ -17,9 +17,9 @@
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.StatefulGameHelper = exports.SlowCashHelper = exports.FlashCashHelper = exports.VaultHelper = exports.ExchangeHelper = exports.MASTHelper = exports.HTLCHelper = exports.TimelockHelper = void 0;
 const wasm_sync_js_1 = require("../wasm-sync.js");
-const node_crypto_1 = require("node:crypto");
+const sha256_js_1 = require("@noble/hashes/sha256.js");
 function sha256(data) {
-    return new Uint8Array((0, node_crypto_1.createHash)('sha256').update(data).digest());
+    return (0, sha256_js_1.sha256)(data);
 }
 const types_js_1 = require("./types.js");
 function kissHex(hex) {
@@ -83,7 +83,7 @@ class HTLCHelper {
      * Generate a random preimage and its hash.
      */
     static generateSecret() {
-        const preimageBytes = (0, node_crypto_1.randomBytes)(32);
+        const preimageBytes = globalThis.crypto.getRandomValues(new Uint8Array(32));
         const preimage = bytesToHex(preimageBytes);
         const hashBytes = (0, wasm_sync_js_1.sha3_256)(preimageBytes);
         const hash = bytesToHex(hashBytes);

package/dist/cjs/scripts/index.d.ts

@@ -1,4 +1,5 @@
 export * from './types.js';
 export * from './dapp-types.js';
-export { encodeMiniNumber, encodeMiniData, encodeMiniString, serializeMMRProofChunk, serializeScriptProofWithProof, STATETYPE_HEX, STATETYPE_NUMBER, STATETYPE_STRING, STATETYPE_BOOL, encodeStateValue, serializeStateVariables, buildScriptProofFromDescriptor, deduplicateScriptDescriptors, serializeExtraScripts, aggregateSignatures, validateExternalSignature, computeScriptAddress, } from './witness-serializer.js';
+export { encodeMiniNumber, encodeMiniData, encodeMiniString, serializeMMRProofChunk, serializeScriptProofWithProof, STATETYPE_HEX, STATETYPE_NUMBER, STATETYPE_STRING, STATETYPE_BOOL, encodeStateValue, serializeStateVariables, buildScriptProofFromDescriptor, deduplicateScriptDescriptors, serializeExtraScripts, aggregateSignatures, validateExternalSignature, computeScriptAddress, wotsAddressData, } from './witness-serializer.js';
 export * from './contract-helpers.js';
+export { toNodeScript } from "./canonical.js";

package/dist/cjs/scripts/index.js

@@ -14,7 +14,7 @@ var __exportStar = (this && this.__exportStar) || function(m, exports) {
     for (var p in m) if (p !== "default" && !Object.prototype.hasOwnProperty.call(exports, p)) __createBinding(exports, m, p);
 };
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.computeScriptAddress = exports.validateExternalSignature = exports.aggregateSignatures = exports.serializeExtraScripts = exports.deduplicateScriptDescriptors = exports.buildScriptProofFromDescriptor = exports.serializeStateVariables = exports.encodeStateValue = exports.STATETYPE_BOOL = exports.STATETYPE_STRING = exports.STATETYPE_NUMBER = exports.STATETYPE_HEX = exports.serializeScriptProofWithProof = exports.serializeMMRProofChunk = exports.encodeMiniString = exports.encodeMiniData = exports.encodeMiniNumber = void 0;
+exports.toNodeScript = exports.wotsAddressData = exports.computeScriptAddress = exports.validateExternalSignature = exports.aggregateSignatures = exports.serializeExtraScripts = exports.deduplicateScriptDescriptors = exports.buildScriptProofFromDescriptor = exports.serializeStateVariables = exports.encodeStateValue = exports.STATETYPE_BOOL = exports.STATETYPE_STRING = exports.STATETYPE_NUMBER = exports.STATETYPE_HEX = exports.serializeScriptProofWithProof = exports.serializeMMRProofChunk = exports.encodeMiniString = exports.encodeMiniData = exports.encodeMiniNumber = void 0;
 __exportStar(require("./types.js"), exports);
 __exportStar(require("./dapp-types.js"), exports);
 var witness_serializer_js_1 = require("./witness-serializer.js");
@@ -35,4 +35,7 @@ Object.defineProperty(exports, "serializeExtraScripts", { enumerable: true, get:
 Object.defineProperty(exports, "aggregateSignatures", { enumerable: true, get: function () { return witness_serializer_js_1.aggregateSignatures; } });
 Object.defineProperty(exports, "validateExternalSignature", { enumerable: true, get: function () { return witness_serializer_js_1.validateExternalSignature; } });
 Object.defineProperty(exports, "computeScriptAddress", { enumerable: true, get: function () { return witness_serializer_js_1.computeScriptAddress; } });
+Object.defineProperty(exports, "wotsAddressData", { enumerable: true, get: function () { return witness_serializer_js_1.wotsAddressData; } });
 __exportStar(require("./contract-helpers.js"), exports);
+var canonical_js_1 = require("./canonical.js");
+Object.defineProperty(exports, "toNodeScript", { enumerable: true, get: function () { return canonical_js_1.toNodeScript; } });

package/dist/cjs/scripts/witness-serializer.d.ts

@@ -25,5 +25,24 @@ export declare function aggregateSignatures(totemSignature: {
     signature: Uint8Array;
 }, externalSignatures: ExternalSignature[], transactionDigest: Uint8Array): Uint8Array[];
 export declare function validateExternalSignature(signature: ExternalSignature, transactionDigest: Uint8Array): boolean;
+/**
+ * Derive a Minima script address exactly as the node does
+ * (`Address::Address(script)` / `ScriptProof::calculateAddress`):
+ *
+ *   address = sha3( MiniNumber.ZERO || MiniString(script) || MiniNumber.ZERO )
+ *
+ * The script is first canonicalised (`toNodeScript`) so the address is over the
+ * same bytes the node will execute and that `buildScriptProof` attests. The
+ * previous implementation hashed `sha3(upper(script))`, which is not a Minima
+ * script address — coins sent to it could never be spent by that script
+ * ("Script Missing from TxPoW for address …").
+ */
+/**
+ * Address data (hex) of a WOTS public-key digest's single-key script
+ * (`RETURN SIGNEDBY(0x<pk>)`). This is the value a `VERIFYOUT` compares against
+ * (the node compares the output coin's *address data*), distinct from the WOTS
+ * public key used by `SIGNEDBY`.
+ */
+export declare function wotsAddressData(publicKeyDigest: string): string;
 export declare function computeScriptAddress(script: string): string;
 export { concat };

package/dist/cjs/scripts/witness-serializer.js

@@ -15,9 +15,10 @@ exports.deduplicateScriptDescriptors = deduplicateScriptDescriptors;
 exports.serializeExtraScripts = serializeExtraScripts;
 exports.aggregateSignatures = aggregateSignatures;
 exports.validateExternalSignature = validateExternalSignature;
+exports.wotsAddressData = wotsAddressData;
 exports.computeScriptAddress = computeScriptAddress;
 exports.concat = concat;
-const wasm_sync_js_1 = require("../wasm-sync.js");
+const canonical_js_1 = require("./canonical.js");
 const wots_js_1 = require("../wots.js");
 const mmr_js_1 = require("../mmr.js");
 const minima32_js_1 = require("../minima32.js");
@@ -321,9 +322,28 @@ function validateExternalSignature(signature, transactionDigest) {
         return false;
     }
 }
+/**
+ * Derive a Minima script address exactly as the node does
+ * (`Address::Address(script)` / `ScriptProof::calculateAddress`):
+ *
+ *   address = sha3( MiniNumber.ZERO || MiniString(script) || MiniNumber.ZERO )
+ *
+ * The script is first canonicalised (`toNodeScript`) so the address is over the
+ * same bytes the node will execute and that `buildScriptProof` attests. The
+ * previous implementation hashed `sha3(upper(script))`, which is not a Minima
+ * script address — coins sent to it could never be spent by that script
+ * ("Script Missing from TxPoW for address …").
+ */
+/**
+ * Address data (hex) of a WOTS public-key digest's single-key script
+ * (`RETURN SIGNEDBY(0x<pk>)`). This is the value a `VERIFYOUT` compares against
+ * (the node compares the output coin's *address data*), distinct from the WOTS
+ * public key used by `SIGNEDBY`.
+ */
+function wotsAddressData(publicKeyDigest) {
+    const raw = publicKeyDigest.replace(/^0x/i, '').toUpperCase();
+    return computeScriptAddress(`RETURN SIGNEDBY(0x${raw})`);
+}
 function computeScriptAddress(script) {
-    const cleanScript = script.trim().toUpperCase();
-    const scriptBytes = new TextEncoder().encode(cleanScript);
-    const hashBytes = (0, wasm_sync_js_1.sha3_256)(scriptBytes);
-    return bytesToHex(hashBytes);
+    return bytesToHex((0, mmr_js_1.mmrRootFromSingleLeaf)((0, canonical_js_1.toNodeScript)(script)));
 }

package/dist/cjs/wasm-sync.d.ts

@@ -8,7 +8,7 @@
  *   import { wotsSign, sha3_256 } from '@totemsdk/core/wasm';
  *   const sig = wotsSign(seed, 0, message); // synchronous!
  */
-import { bytes_to_hex_wasm, clean_seed_phrase_wasm, compute_transaction_digest_wasm, concat_bytes_wasm, create_challenge_wasm, create_unified_child_tree_key_wasm, create_unified_root_tree_key_wasm, derive_chain_seed_wasm, derive_full_public_key_batch_wasm, derive_full_public_key_wasm, derive_per_address_seed_wasm, derive_pk_digest_batch_wasm, derive_pk_digest_wasm, derive_root_priv_seed_wasm, derive_unified_address_public_key_wasm, expand_private_key_wasm, generate_mnemonic_wasm, get_params, hash_chain_wasm, hex_to_bytes_wasm, make_mx_address_wasm, mine_txpow_chunk_wasm, mine_txpow_wasm, mmr_root_from_public_keys_wasm, parse_mx_address_wasm, phrase_to_seed_wasm, precompute_transaction_coin_id_wasm, serialize_transaction_wasm, sha3_256_wasm, timing_safe_equal_wasm, validate_challenge_wasm, validate_phrase_wasm, verify_mmr_proof_wasm, verify_tree_signature_wasm, wasm_tree_key_free, wasm_tree_key_get_max_uses, wasm_tree_key_get_public_key, wasm_tree_key_get_uses, wasm_tree_key_new, wasm_tree_key_set_uses, wasm_tree_key_sign, wots_pk_from_sig_wasm, wots_sign_batch_wasm, wots_sign_wasm, wots_verify_digest_wasm, wots_verify_wasm, write_mini_data_wasm, write_mini_string_wasm } from '@totemsdk/core-wasm';
+import { bytes_to_hex_wasm, clean_seed_phrase_wasm, compute_transaction_digest_wasm, concat_bytes_wasm, create_unified_child_tree_key_wasm, create_unified_root_tree_key_wasm, derive_chain_seed_wasm, derive_full_public_key_batch_wasm, derive_full_public_key_wasm, derive_per_address_seed_wasm, derive_pk_digest_batch_wasm, derive_pk_digest_wasm, derive_root_priv_seed_wasm, derive_unified_address_public_key_wasm, expand_private_key_wasm, generate_mnemonic_wasm, get_params, hash_chain_wasm, hex_to_bytes_wasm, make_mx_address_wasm, mine_txpow_chunk_wasm, mine_txpow_wasm, mmr_root_from_public_keys_wasm, parse_mx_address_wasm, phrase_to_seed_wasm, precompute_transaction_coin_id_wasm, serialize_transaction_wasm, sha3_256_wasm, timing_safe_equal_wasm, validate_phrase_wasm, verify_mmr_proof_wasm, verify_tree_signature_wasm, wasm_tree_key_free, wasm_tree_key_get_max_uses, wasm_tree_key_get_public_key, wasm_tree_key_get_uses, wasm_tree_key_new, wasm_tree_key_set_uses, wasm_tree_key_sign, wots_pk_from_sig_wasm, wots_sign_batch_wasm, wots_sign_wasm, wots_verify_digest_wasm, wots_verify_wasm, write_mini_data_wasm, write_mini_string_wasm } from '@totemsdk/core-wasm';
 export declare const bytesToHex: typeof bytes_to_hex_wasm;
 export declare const hexToBytes: typeof hex_to_bytes_wasm;
 export declare const concatBytes: typeof concat_bytes_wasm;
@@ -41,8 +41,8 @@ export declare const computeTransactionDigest: typeof compute_transaction_digest
 export declare const precomputeTransactionCoinID: typeof precompute_transaction_coin_id_wasm;
 export declare const verifyTreeSignature: typeof verify_tree_signature_wasm;
 export declare const timingSafeEqual: typeof timing_safe_equal_wasm;
-export declare const createChallenge: typeof create_challenge_wasm;
-export declare const validateChallenge: typeof validate_challenge_wasm;
+export declare function createChallenge(domain: string, statement: string): string;
+export declare function validateChallenge(challengeJson: string, domain: string): boolean;
 export declare function writeMiniNumber(value: bigint, scale?: number): Uint8Array;
 export declare const writeMiniData: typeof write_mini_data_wasm;
 export declare const writeMiniString: typeof write_mini_string_wasm;