@totemsdk/core 1.2.6 → 1.2.8

package/dist/minimaWireSerializer.js

@@ -46,9 +46,9 @@ function serializeSignatureProofFromBytes(publicKey, signature, mmrProofBytes) {
 export function serializeHierarchicalWitness(bundle) {
     const parts = [];
     // Witness.signatureCount (MiniNumber) - 1 Signature object containing N proofs
-    parts.push(writeMiniNumber(1n));
+    parts.push(writeMiniNumber(1n, 0));
     // Signature.proofCount (MiniNumber) - N SignatureProofs inside the Signature
-    parts.push(writeMiniNumber(BigInt(bundle.proofs.length)));
+    parts.push(writeMiniNumber(BigInt(bundle.proofs.length), 0));
     for (const proofHex of bundle.proofs) {
         const publicKey = hexToBytes(proofHex.leafPubkey);
         const signature = hexToBytes(proofHex.signature);

package/dist/mmr.js

@@ -1,4 +1,4 @@
-// packages/totem-sdk/packages/core/src/mmr.ts
+// packages/core/src/mmr.ts
 // Full MMR implementation matching Minima's MMR.java, MMRData.java, and TreeKeyNode.java
 import { sha3_256 as nobleSha3 } from './wasm-sync.js';
 import { serializeMiniNumber, serializeMiniData, javaHashAllObjects } from "./javaStreamables.js";

package/dist/transaction.js

@@ -91,10 +91,10 @@ function serializeStateVariable(sv) {
         case 'number':
             typeByte = new Uint8Array([STATETYPE_NUMBER]);
             if (typeof sv.value === 'bigint') {
-                dataBytes = writeMiniNumber(sv.value);
+                dataBytes = writeMiniNumber(sv.value, 0);
             }
             else if (typeof sv.value === 'string') {
-                dataBytes = writeMiniNumber(BigInt(sv.value));
+                dataBytes = writeMiniNumber(BigInt(sv.value), 0);
             }
             else {
                 throw new Error(`Invalid number StateVariable value: ${sv.value}`);
@@ -137,10 +137,10 @@ function serializeToken(token) {
     const parts = [];
     parts.push(writeHashToStream(token.coinId));
     parts.push(writeMiniData(token.script));
-    parts.push(writeMiniNumber(BigInt(token.scale)));
+    parts.push(writeMiniNumber(BigInt(token.scale), 0));
     parts.push(writeMiniNumber(token.totalAmount, 0));
     parts.push(writeMiniData(token.name));
-    parts.push(writeMiniNumber(token.created ?? 0n));
+    parts.push(writeMiniNumber(token.created ?? 0n, 0));
     return concat(...parts);
 }
 export function serializeCoin(coin) {
@@ -172,10 +172,10 @@ export function serializeCoin(coin) {
         createdBytes = coin.rawBlockCreatedBytes;
     }
     else {
-        createdBytes = writeMiniNumber(coin.created);
+        createdBytes = writeMiniNumber(coin.created, 0);
     }
     parts.push(createdBytes);
-    const stateCountBytes = writeMiniNumber(BigInt(coin.state.length));
+    const stateCountBytes = writeMiniNumber(BigInt(coin.state.length), 0);
     parts.push(stateCountBytes);
     for (const sv of coin.state) {
         let svBytes;
@@ -205,15 +205,15 @@ export function serializeCoin(coin) {
 }
 export function serializeTransaction(tx) {
     const parts = [];
-    parts.push(writeMiniNumber(BigInt(tx.inputs.length)));
+    parts.push(writeMiniNumber(BigInt(tx.inputs.length), 0));
     for (const input of tx.inputs) {
         parts.push(serializeCoin(input));
     }
-    parts.push(writeMiniNumber(BigInt(tx.outputs.length)));
+    parts.push(writeMiniNumber(BigInt(tx.outputs.length), 0));
     for (const output of tx.outputs) {
         parts.push(serializeCoin(output));
     }
-    parts.push(writeMiniNumber(BigInt(tx.state.length)));
+    parts.push(writeMiniNumber(BigInt(tx.state.length), 0));
     for (const sv of tx.state) {
         parts.push(serializeStateVariable(sv));
     }
@@ -234,7 +234,7 @@ export function precomputeTransactionCoinID(tx) {
     }
     for (let i = 0; i < tx.outputs.length; i++) {
         const baseCoinIdStream = writeMiniData(baseCoinId);
-        const outputIndexStream = writeMiniNumber(BigInt(i));
+        const outputIndexStream = writeMiniNumber(BigInt(i), 0);
         const combined = concat(baseCoinIdStream, outputIndexStream);
         tx.outputs[i].coinId = sha3_256(combined);
     }

package/dist/treekey.js

@@ -674,22 +674,36 @@ export function deserializeTreeSignature(data) {
     const scale = data[offset];
     const numBytesLen = data[offset + 1];
     offset += 2;
+    if (!Number.isInteger(numBytesLen) || numBytesLen < 0 || numBytesLen > 4) {
+        throw new Error('Malformed signature: invalid proof-count length');
+    }
     // Read the number bytes (big-endian)
     let numProofs = 0;
     for (let i = 0; i < numBytesLen; i++) {
         numProofs = (numProofs << 8) | data[offset + i];
     }
     offset += numBytesLen;
+    if (!Number.isInteger(numProofs) || numProofs < 1 || numProofs > 8) {
+        throw new Error(`Malformed signature: impossible proof count (${numProofs})`);
+    }
     const proofs = [];
     for (let i = 0; i < numProofs; i++) {
         // Leaf pubkey - MiniData format (4-byte length prefix + data)
+        if (offset + 4 > data.length)
+            throw new Error('Malformed signature: truncated leaf pubkey length');
         const pubkeyLen = (data[offset] << 24) | (data[offset + 1] << 16) | (data[offset + 2] << 8) | data[offset + 3];
         offset += 4;
+        if (pubkeyLen < 0 || offset + pubkeyLen > data.length)
+            throw new Error('Malformed signature: leaf pubkey out of bounds');
         const leafPubkey = data.slice(offset, offset + pubkeyLen);
         offset += pubkeyLen;
         // Signature - MiniData format (4-byte length prefix + data)
+        if (offset + 4 > data.length)
+            throw new Error('Malformed signature: truncated signature length');
         const sigLen = (data[offset] << 24) | (data[offset + 1] << 16) | (data[offset + 2] << 8) | data[offset + 3];
         offset += 4;
+        if (sigLen < 0 || offset + sigLen > data.length)
+            throw new Error('Malformed signature: signature out of bounds');
         const signature = data.slice(offset, offset + sigLen);
         offset += sigLen;
         // MMR proof - returns { proof, blockTime, bytesRead }

package/dist/wasm-sync.d.ts

@@ -8,7 +8,7 @@
  *   import { wotsSign, sha3_256 } from '@totemsdk/core/wasm';
  *   const sig = wotsSign(seed, 0, message); // synchronous!
  */
-import { bytes_to_hex_wasm, clean_seed_phrase_wasm, compute_transaction_digest_wasm, concat_bytes_wasm, create_challenge_wasm, create_unified_child_tree_key_wasm, create_unified_root_tree_key_wasm, derive_chain_seed_wasm, derive_full_public_key_batch_wasm, derive_full_public_key_wasm, derive_per_address_seed_wasm, derive_pk_digest_batch_wasm, derive_pk_digest_wasm, derive_root_priv_seed_wasm, derive_unified_address_public_key_wasm, expand_private_key_wasm, generate_mnemonic_wasm, get_params, hash_chain_wasm, hex_to_bytes_wasm, make_mx_address_wasm, mine_txpow_chunk_wasm, mine_txpow_wasm, mmr_root_from_public_keys_wasm, parse_mx_address_wasm, phrase_to_seed_wasm, precompute_transaction_coin_id_wasm, serialize_transaction_wasm, sha3_256_wasm, timing_safe_equal_wasm, validate_challenge_wasm, validate_phrase_wasm, verify_mmr_proof_wasm, verify_tree_signature_wasm, wasm_tree_key_free, wasm_tree_key_get_max_uses, wasm_tree_key_get_public_key, wasm_tree_key_get_uses, wasm_tree_key_new, wasm_tree_key_set_uses, wasm_tree_key_sign, wots_pk_from_sig_wasm, wots_sign_batch_wasm, wots_sign_wasm, wots_verify_digest_wasm, wots_verify_wasm, write_mini_data_wasm, write_mini_number_wasm, write_mini_string_wasm } from '@totemsdk/core-wasm';
+import { bytes_to_hex_wasm, clean_seed_phrase_wasm, compute_transaction_digest_wasm, concat_bytes_wasm, create_challenge_wasm, create_unified_child_tree_key_wasm, create_unified_root_tree_key_wasm, derive_chain_seed_wasm, derive_full_public_key_batch_wasm, derive_full_public_key_wasm, derive_per_address_seed_wasm, derive_pk_digest_batch_wasm, derive_pk_digest_wasm, derive_root_priv_seed_wasm, derive_unified_address_public_key_wasm, expand_private_key_wasm, generate_mnemonic_wasm, get_params, hash_chain_wasm, hex_to_bytes_wasm, make_mx_address_wasm, mine_txpow_chunk_wasm, mine_txpow_wasm, mmr_root_from_public_keys_wasm, parse_mx_address_wasm, phrase_to_seed_wasm, precompute_transaction_coin_id_wasm, serialize_transaction_wasm, sha3_256_wasm, timing_safe_equal_wasm, validate_challenge_wasm, validate_phrase_wasm, verify_mmr_proof_wasm, verify_tree_signature_wasm, wasm_tree_key_free, wasm_tree_key_get_max_uses, wasm_tree_key_get_public_key, wasm_tree_key_get_uses, wasm_tree_key_new, wasm_tree_key_set_uses, wasm_tree_key_sign, wots_pk_from_sig_wasm, wots_sign_batch_wasm, wots_sign_wasm, wots_verify_digest_wasm, wots_verify_wasm, write_mini_data_wasm, write_mini_string_wasm } from '@totemsdk/core-wasm';
 export declare const bytesToHex: typeof bytes_to_hex_wasm;
 export declare const hexToBytes: typeof hex_to_bytes_wasm;
 export declare const concatBytes: typeof concat_bytes_wasm;
@@ -43,7 +43,7 @@ export declare const verifyTreeSignature: typeof verify_tree_signature_wasm;
 export declare const timingSafeEqual: typeof timing_safe_equal_wasm;
 export declare const createChallenge: typeof create_challenge_wasm;
 export declare const validateChallenge: typeof validate_challenge_wasm;
-export declare const writeMiniNumber: typeof write_mini_number_wasm;
+export declare function writeMiniNumber(value: bigint, scale?: number): Uint8Array;
 export declare const writeMiniData: typeof write_mini_data_wasm;
 export declare const writeMiniString: typeof write_mini_string_wasm;
 export declare const createUnifiedChildTreeKey: typeof create_unified_child_tree_key_wasm;

package/dist/wasm-sync.js

@@ -50,7 +50,9 @@ export const verifyTreeSignature = verify_tree_signature_wasm;
 export const timingSafeEqual = timing_safe_equal_wasm;
 export const createChallenge = create_challenge_wasm;
 export const validateChallenge = validate_challenge_wasm;
-export const writeMiniNumber = write_mini_number_wasm;
+export function writeMiniNumber(value, scale = 0) {
+    return write_mini_number_wasm(value.toString(), scale);
+}
 export const writeMiniData = write_mini_data_wasm;
 export const writeMiniString = write_mini_string_wasm;
 export const createUnifiedChildTreeKey = create_unified_child_tree_key_wasm;

package/dist/wots.d.ts

@@ -38,7 +38,7 @@ export declare const concatBytes: (...arrs: Uint8Array[]) => Uint8Array<ArrayBuf
 export declare const u16be: (n: number) => Uint8Array<ArrayBuffer>;
 export declare const u32be: (n: number) => Uint8Array<ArrayBuffer>;
 export declare function assert32(u: Uint8Array, label?: string): void;
-export declare const h: typeof F;
+export declare const h: (x: Uint8Array) => Uint8Array<ArrayBufferLike>;
 /**
  * GMSSRandom - BouncyCastle's stateful PRNG for WOTS chain seed derivation
  *

package/package.json

@@ -1,84 +1,118 @@
 {
   "name": "@totemsdk/core",
-  "version": "1.2.6",
+  "version": "1.2.8",
   "description": "Core cryptographic primitives for Totem SDK — backed by Rust/WASM",
-  "main": "dist/index.js",
-  "types": "dist/index.d.ts",
+  "type": "module",
+  "main": "dist/cjs/index.js",
+  "types": "dist/cjs/index.d.ts",
   "exports": {
     ".": {
-      "types": "./dist/index.d.ts",
-      "require": "./dist/index.js",
-      "import": "./dist/index.js"
+      "import": {
+        "types": "./dist/index.d.ts",
+        "default": "./dist/index.js"
+      },
+      "require": {
+        "types": "./dist/cjs/index.d.ts",
+        "default": "./dist/cjs/index.js"
+      }
     },
     "./wasm": {
-      "types": "./dist/wasm-sync.d.ts",
-      "require": "./dist/wasm-sync.js",
-      "import": "./dist/wasm-sync.js"
+      "import": {
+        "types": "./dist/wasm-sync.d.ts",
+        "default": "./dist/wasm-sync.js"
+      },
+      "require": {
+        "types": "./dist/cjs/wasm-sync.d.ts",
+        "default": "./dist/cjs/wasm-sync.js"
+      }
     },
     "./legacy": {
-      "types": "./dist/legacy.d.ts",
-      "require": "./dist/legacy.js",
-      "import": "./dist/legacy.js"
+      "import": {
+        "types": "./dist/legacy.d.ts",
+        "default": "./dist/legacy.js"
+      },
+      "require": {
+        "types": "./dist/cjs/legacy.d.ts",
+        "default": "./dist/cjs/legacy.js"
+      }
     },
     "./adapters": {
-      "types": "./dist/adapters/index.d.ts",
-      "require": "./dist/adapters/index.js",
-      "import": "./dist/adapters/index.js"
+      "import": {
+        "types": "./dist/adapters/index.d.ts",
+        "default": "./dist/adapters/index.js"
+      },
+      "require": {
+        "types": "./dist/cjs/adapters/index.d.ts",
+        "default": "./dist/cjs/adapters/index.js"
+      }
     },
     "./adapters/types": {
-      "types": "./dist/adapters/types.d.ts",
-      "require": "./dist/adapters/types.js",
-      "import": "./dist/adapters/types.js"
+      "import": {
+        "types": "./dist/adapters/types.d.ts",
+        "default": "./dist/adapters/types.js"
+      },
+      "require": {
+        "types": "./dist/cjs/adapters/types.d.ts",
+        "default": "./dist/cjs/adapters/types.js"
+      }
     },
     "./lease": {
-      "types": "./dist/lease/index.d.ts",
-      "require": "./dist/lease/index.js",
-      "import": "./dist/lease/index.js"
+      "import": {
+        "types": "./dist/lease/index.d.ts",
+        "default": "./dist/lease/index.js"
+      },
+      "require": {
+        "types": "./dist/cjs/lease/index.d.ts",
+        "default": "./dist/cjs/lease/index.js"
+      }
     },
     "./tx": {
-      "types": "./dist/tx/index.d.ts",
-      "require": "./dist/tx/index.js",
-      "import": "./dist/tx/index.js"
+      "import": {
+        "types": "./dist/tx/index.d.ts",
+        "default": "./dist/tx/index.js"
+      },
+      "require": {
+        "types": "./dist/cjs/tx/index.d.ts",
+        "default": "./dist/cjs/tx/index.js"
+      }
     },
     "./scripts": {
-      "types": "./dist/scripts/index.d.ts",
-      "require": "./dist/scripts/index.js",
-      "import": "./dist/scripts/index.js"
+      "import": {
+        "types": "./dist/scripts/index.d.ts",
+        "default": "./dist/scripts/index.js"
+      },
+      "require": {
+        "types": "./dist/cjs/scripts/index.d.ts",
+        "default": "./dist/cjs/scripts/index.js"
+      }
     },
     "./test-vectors.json": "./test-vectors.json"
   },
   "typesVersions": {
     "*": {
       "wasm": [
-        "./dist/wasm-sync.d.ts"
+        "./dist/cjs/wasm-sync.d.ts"
       ],
       "legacy": [
-        "./dist/legacy.d.ts"
+        "./dist/cjs/legacy.d.ts"
       ],
       "adapters": [
-        "./dist/adapters/index.d.ts"
+        "./dist/cjs/adapters/index.d.ts"
       ],
       "adapters/types": [
-        "./dist/adapters/types.d.ts"
+        "./dist/cjs/adapters/types.d.ts"
       ],
       "lease": [
-        "./dist/lease/index.d.ts"
+        "./dist/cjs/lease/index.d.ts"
       ],
       "tx": [
-        "./dist/tx/index.d.ts"
+        "./dist/cjs/tx/index.d.ts"
       ],
       "scripts": [
-        "./dist/scripts/index.d.ts"
+        "./dist/cjs/scripts/index.d.ts"
       ]
     }
   },
-  "scripts": {
-    "build": "tsc",
-    "prepare": "tsc",
-    "clean": "rm -rf dist",
-    "test": "jest --passWithNoTests",
-    "gen:pkdigest": "node scripts/gen_wots_pkdigest_vectors.cjs"
-  },
   "files": [
     "dist",
     "README.md",
@@ -109,7 +143,7 @@
   "repository": {
     "type": "git",
     "url": "git+https://github.com/totem-sdk/totem-sdk.git",
-    "directory": "packages/totem-sdk/packages/core"
+    "directory": "packages/core"
   },
   "keywords": [
     "totem",
@@ -118,7 +152,12 @@
     "blockchain",
     "quantum-resistant",
     "wots",
-    "kissvm",
     "utxo"
-  ]
-}
+  ],
+  "scripts": {
+    "build": "tsc && tsc -p tsconfig.cjs.json && node -e \"require('fs').writeFileSync('dist/cjs/package.json', JSON.stringify({type:'commonjs'})+'\\n')\"",
+    "clean": "rm -rf dist",
+    "test": "jest",
+    "gen:pkdigest": "node scripts/gen_wots_pkdigest_vectors.cjs"
+  }
+}

package/dist/wasm-bridge.d.ts

@@ -1,54 +0,0 @@
-/**
- * WASM Bridge — thin TypeScript wrappers around @totemsdk/core-wasm.
- *
- * This module provides the same public API as the legacy JS implementations
- * but delegates to Rust/WASM for all cryptographic operations.
- *
- * The legacy JS implementations remain available via:
- *   import { ... } from '@totemsdk/core/legacy';
- */
-import type { WotsKeypair } from '../types.js';
-export declare function getParams(): Promise<{
-    w: number;
-    n: number;
-    L: number;
-    maxDigit: number;
-    maxSignatures: number;
-    signatureLevels: number;
-    addressPrefix: string;
-}>;
-export declare function sha3_256(data: Uint8Array): Promise<Uint8Array>;
-export declare function expandPrivateKey(seed: Uint8Array): Promise<Uint8Array[]>;
-export declare function hashChain(x: Uint8Array, rounds: number): Promise<Uint8Array>;
-export declare function derivePKdigest(seed: Uint8Array, keyIndex: number): Promise<Uint8Array>;
-export declare function deriveFullPublicKey(seed: Uint8Array, keyIndex: number): Promise<Uint8Array>;
-export declare function wotsSign(seed: Uint8Array, keyIndex: number, message: Uint8Array): Promise<Uint8Array>;
-export declare function wotsVerify(sig: Uint8Array, message: Uint8Array, pkFull: Uint8Array): Promise<boolean>;
-export declare function wotsVerifyDigest(sig: Uint8Array, message: Uint8Array, pkDigest: Uint8Array): Promise<boolean>;
-export declare function wotsPkFromSig(message: Uint8Array, signature: Uint8Array): Promise<Uint8Array>;
-export declare function wotsPublicKeyFromSeed(seed: Uint8Array, keyIndex?: number): Promise<Uint8Array>;
-export declare function wotsKeypairFromSeed(seed: Uint8Array, index: number): Promise<WotsKeypair>;
-export declare function deriveChainSeedJava(seed: Uint8Array, keyIndex: number): Promise<Uint8Array>;
-export declare function derivePerAddressSeed(rootSeed: Uint8Array, addressIndex: number): Promise<Uint8Array>;
-export declare function deriveRootPrivSeed(bip39Seed: Uint8Array): Promise<Uint8Array>;
-export declare function phraseToSeed(phrase: string): Promise<Uint8Array>;
-export declare function generateWordList(): Promise<string>;
-export declare function validatePhrase(phrase: string): Promise<boolean>;
-export declare function cleanSeedPhrase(phrase: string): Promise<string>;
-export declare function makeMxAddress(root32: Uint8Array): Promise<string>;
-export declare function parseMxAddress(address: string): Promise<Uint8Array>;
-export declare function wotsAddressFromKeypair(seed: Uint8Array, keyIndex: number): Promise<string>;
-export declare function serializeTransaction(tx: any): Promise<Uint8Array>;
-export declare function computeTransactionDigest(serializedTx: Uint8Array): Promise<Uint8Array>;
-export declare function precomputeTransactionCoinID(txid: Uint8Array, outputIndex: number): Promise<Uint8Array>;
-export declare function verifyTreeSignature(rootPublicKey: Uint8Array, message: Uint8Array, signature: any): Promise<boolean>;
-export declare function timingSafeEqual(a: Uint8Array, b: Uint8Array): Promise<boolean>;
-export declare function createChallenge(domain: string, statement: string): Promise<string>;
-export declare function validateChallenge(challengeJson: string, domain: string): Promise<boolean>;
-export declare function writeMiniNumber(value: number, scale?: number): Promise<Uint8Array>;
-export declare function writeMiniData(data: Uint8Array): Promise<Uint8Array>;
-export declare function writeMiniString(s: string): Promise<Uint8Array>;
-export declare function bytesToHex(bytes: Uint8Array): Promise<string>;
-export declare function hexToBytes(hexStr: string): Promise<Uint8Array>;
-export declare function concatBytes(...arrays: Uint8Array[]): Promise<Uint8Array>;
-export { getParams as getParamSet } from './wasm-bridge.js';