@totemsdk/core 1.3.0 → 1.4.0

package/dist/cjs/index.d.ts

@@ -28,6 +28,7 @@ export { makeMxAddress as encodeMx, parseMxAddress as decodeMx } from './wasm-sy
 export declare function mxToHex(address: string): string;
 export * from './mmr.js';
 export * from './scripts/index.js';
+export { toNodeScript } from './scripts/canonical.js';
 export { scriptToAddress, addressToRoot } from './derive.js';
 export { WORD_LIST, convertStringToSeed, convertWordListToSeed, generateSeedPhrase, } from './bip39.js';
 export { MiniNumber } from './MiniNumber.js';

package/dist/cjs/index.js

@@ -22,8 +22,8 @@ var __exportStar = (this && this.__exportStar) || function(m, exports) {
 };
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.createChallenge = exports.timingSafeEqual = exports.deserializeTransaction = exports.computeTransactionDigest = exports.serializeTransaction = exports.wotsAddressFromKeypair = exports.parseMxAddress = exports.makeMxAddress = exports.cleanSeedPhrase = exports.validatePhrase = exports.generateWordList = exports.phraseToSeed = exports.verifyMMRProof = exports.mmrRootFromPublicKeys = exports.verifyTreeSignature = exports.deriveUnifiedAddressPublicKey = exports.createUnifiedRootTreeKey = exports.createUnifiedChildTreeKey = exports.precomputeTransactionCoinID = exports.writeMiniString = exports.writeMiniData = exports.writeMiniNumber = exports.deriveRootPrivSeed = exports.derivePerAddressSeed = exports.deriveChainSeedJava = exports.wotsKeypairFromSeed = exports.wotsPublicKeyFromSeed = exports.wotsPkFromSig = exports.wotsVerifyDigest = exports.wotsVerify = exports.wotsSign = exports.deriveFullPublicKey = exports.derivePKdigest = exports.hashChain = exports.expandPrivateKey = exports.sha3_256 = exports.concatBytes = exports.hexToBytes = exports.bytesToHex = exports.TransactionReceiptStore = exports.WatermarkExhaustedError = exports.TransactionLifecycleError = exports.TransactionLifecycle = exports.TransactionService = exports.flatIndexFromLanes = exports.finalizeLease = exports.prepareLease = exports.LeaseMonitor = exports.WatermarkStore = exports.LeaseStore = void 0;
-exports.TreeKeyNode = exports.TreeKey = exports.serializeMMREntry = exports.serializeMMRData = exports.serializeMMREntryNumber = exports.createMMREntryNumber = exports.deriveUnifiedChildSeed = exports.indexToMiniDataBytes = exports.javaHashAllObjects = exports.writeHashToStream = exports.serializeMiniNumberONE = exports.serializeMiniNumberZERO = exports.hashObject = exports.deriveChildTreeSeedJava = exports.hashAllObjects = exports.serializeMiniData = exports.serializeMiniNumber = exports.bigIntToByteArray = exports.concat = exports.writeSignatureProof = exports.writeSignature = exports.writeMMREntryNumber = exports.writeMiniByte = exports.verifyDeterministicAddress = exports.deriveAddress = exports.deriveUnifiedAddress = exports.deriveDeterministicAddress = exports.normalizeHex = exports.deriveAddressFromPublicKey = exports.verifyTreeSignatureDetailed = exports.verifySignatureDetailed = exports.verifySignature = exports.buildMinimaCoin = exports.createDefaultTransaction = exports.serializeTokenDescriptor = exports.computeTokenId = exports.serializeTransactionObject = exports.serializeCoin = exports.parseDecimalToMiniNumber = exports.MiniNumber = exports.generateSeedPhrase = exports.convertWordListToSeed = exports.convertStringToSeed = exports.WORD_LIST = exports.addressToRoot = exports.scriptToAddress = exports.decodeMx = exports.encodeMx = exports.scriptFromWotsPk = exports.validateChallenge = void 0;
-exports.MINIMA_CONSTANTS = exports.bytesToUtf8 = exports.utf8ToBytes = exports.hashCanonical = exports.canonicalJson = exports.toHex = exports.wotsSignLegacy = exports.baseWWithChecksum = exports.toWinternitzDigits = exports.prfChainSeed = exports.h = exports.assert32 = exports.u32be = exports.u16be = exports.disableWotsLogger = exports.setWotsLogger = exports.fromHex = exports.hex = exports.F = exports.disableTreeKeyLogger = exports.setTreeKeyLogger = exports.createPerAddressTreeKeyAsync = exports.createPerAddressTreeKey = exports.createUnifiedChildTreeKeyAsync = exports.DEFAULT_LEVELS = exports.DEFAULT_KEYS_PER_LEVEL = exports.getRootPublicKey = exports.deserializeTreeSignature = exports.serializeTreeSignature = void 0;
+exports.TreeKey = exports.serializeMMREntry = exports.serializeMMRData = exports.serializeMMREntryNumber = exports.createMMREntryNumber = exports.deriveUnifiedChildSeed = exports.indexToMiniDataBytes = exports.javaHashAllObjects = exports.writeHashToStream = exports.serializeMiniNumberONE = exports.serializeMiniNumberZERO = exports.hashObject = exports.deriveChildTreeSeedJava = exports.hashAllObjects = exports.serializeMiniData = exports.serializeMiniNumber = exports.bigIntToByteArray = exports.concat = exports.writeSignatureProof = exports.writeSignature = exports.writeMMREntryNumber = exports.writeMiniByte = exports.verifyDeterministicAddress = exports.deriveAddress = exports.deriveUnifiedAddress = exports.deriveDeterministicAddress = exports.normalizeHex = exports.deriveAddressFromPublicKey = exports.verifyTreeSignatureDetailed = exports.verifySignatureDetailed = exports.verifySignature = exports.buildMinimaCoin = exports.createDefaultTransaction = exports.serializeTokenDescriptor = exports.computeTokenId = exports.serializeTransactionObject = exports.serializeCoin = exports.parseDecimalToMiniNumber = exports.MiniNumber = exports.generateSeedPhrase = exports.convertWordListToSeed = exports.convertStringToSeed = exports.WORD_LIST = exports.addressToRoot = exports.scriptToAddress = exports.toNodeScript = exports.decodeMx = exports.encodeMx = exports.scriptFromWotsPk = exports.validateChallenge = void 0;
+exports.MINIMA_CONSTANTS = exports.bytesToUtf8 = exports.utf8ToBytes = exports.hashCanonical = exports.canonicalJson = exports.toHex = exports.wotsSignLegacy = exports.baseWWithChecksum = exports.toWinternitzDigits = exports.prfChainSeed = exports.h = exports.assert32 = exports.u32be = exports.u16be = exports.disableWotsLogger = exports.setWotsLogger = exports.fromHex = exports.hex = exports.F = exports.disableTreeKeyLogger = exports.setTreeKeyLogger = exports.createPerAddressTreeKeyAsync = exports.createPerAddressTreeKey = exports.createUnifiedChildTreeKeyAsync = exports.DEFAULT_LEVELS = exports.DEFAULT_KEYS_PER_LEVEL = exports.getRootPublicKey = exports.deserializeTreeSignature = exports.serializeTreeSignature = exports.TreeKeyNode = void 0;
 exports.mxToHex = mxToHex;
 // Version information for bundle duplication detection
 __exportStar(require("./version.js"), exports);
@@ -142,6 +142,8 @@ function mxToHex(address) {
 __exportStar(require("./mmr.js"), exports);
 // Script Types, Witness Serializer, Contract Helpers
 __exportStar(require("./scripts/index.js"), exports);
+var canonical_js_1 = require("./scripts/canonical.js");
+Object.defineProperty(exports, "toNodeScript", { enumerable: true, get: function () { return canonical_js_1.toNodeScript; } });
 // Address Derivation (original)
 var derive_js_1 = require("./derive.js");
 Object.defineProperty(exports, "scriptToAddress", { enumerable: true, get: function () { return derive_js_1.scriptToAddress; } });
@@ -231,9 +233,9 @@ Object.defineProperty(exports, "toWinternitzDigits", { enumerable: true, get: fu
 Object.defineProperty(exports, "baseWWithChecksum", { enumerable: true, get: function () { return wots_js_1.baseWWithChecksum; } });
 Object.defineProperty(exports, "wotsSignLegacy", { enumerable: true, get: function () { return wots_js_1.wotsSignLegacy; } });
 // Canonical helpers (deterministic JSON + hashing)
-var canonical_js_1 = require("./canonical.js");
-Object.defineProperty(exports, "toHex", { enumerable: true, get: function () { return canonical_js_1.toHex; } });
-Object.defineProperty(exports, "canonicalJson", { enumerable: true, get: function () { return canonical_js_1.canonicalJson; } });
+var canonical_js_2 = require("./canonical.js");
+Object.defineProperty(exports, "toHex", { enumerable: true, get: function () { return canonical_js_2.toHex; } });
+Object.defineProperty(exports, "canonicalJson", { enumerable: true, get: function () { return canonical_js_2.canonicalJson; } });
 var canonical_hash_js_1 = require("./canonical-hash.js");
 Object.defineProperty(exports, "hashCanonical", { enumerable: true, get: function () { return canonical_hash_js_1.hashCanonical; } });
 // Byte/string utilities

package/dist/cjs/mmr.d.ts

@@ -16,6 +16,28 @@ export type Bytes = Uint8Array;
 export declare function mmrLeafExact(script: string): Bytes;
 /** In a single-leaf MMR the root equals the leaf commitment. */
 export declare function mmrRootFromSingleLeaf(script: string): Bytes;
+/**
+ * Build the serialized Minima `ScriptProof` bytes for a single-leaf MMR.
+ *
+ * Mirrors the node's `ScriptProof(const std::string& zScript)` constructor
+ * (org/minima/objects/script_proof.cpp): the script is added as the sole leaf
+ * of a fresh MMR with sum value ZERO, so the proof chain is empty and the
+ * resulting address is the leaf commitment itself:
+ *
+ *   address = sha3( MiniNumber.ZERO || MiniString(script) || MiniNumber.ZERO )
+ *           = mmrLeafExact(script)
+ *
+ * This is exactly how the node derives `Address(script)`, so a witness carrying
+ * this proof satisfies `Witness::getScript(input.getAddress())` for every input
+ * paying to that script. Without it the node rejects the TxPoW with
+ * "Script Missing from TxPoW for address <addr>".
+ *
+ * Wire format (`ScriptProof::writeDataStream`):
+ *   MiniString(script) || MMRProof(blockTime = 0, chunks = [])
+ *
+ * @param script - The Minima (KISSVM) script whose address the proof attests.
+ */
+export declare function buildScriptProof(script: string): Bytes;
 /**
  * MMRData structure matching Minima's MMRData.java
  * Contains hash and value (for sum tree functionality)

package/dist/cjs/mmr.js

@@ -4,6 +4,7 @@ exports.deserializeMMRProof = exports.MMRTree = exports.serializeRealMMRProof =
 exports.serializeMMRProof = serializeMMRProof;
 exports.mmrLeafExact = mmrLeafExact;
 exports.mmrRootFromSingleLeaf = mmrRootFromSingleLeaf;
+exports.buildScriptProof = buildScriptProof;
 exports.createMMRDataLeafNode = createMMRDataLeafNode;
 exports.createMMRDataParentNode = createMMRDataParentNode;
 exports.calculateProofRoot = calculateProofRoot;
@@ -15,6 +16,9 @@ const wasm_sync_js_1 = require("./wasm-sync.js");
 const javaStreamables_js_1 = require("./javaStreamables.js");
 // Import canonical wire serialization from Streamable.ts (single source of truth)
 const Streamable_js_1 = require("./Streamable.js");
+// Canonicalise to the exact script the node will receive, so the proof's
+// computed address matches `computeScriptAddress` (which canonicalises too).
+const canonical_js_1 = require("./scripts/canonical.js");
 // Re-export for API compatibility (existing code imports from mmr.ts)
 // Using a wrapper function for better compatibility with dynamic imports
 function serializeMMRProof(proof, blockTime = 0n) {
@@ -80,6 +84,35 @@ function mmrLeafExact(script) {
 function mmrRootFromSingleLeaf(script) {
     return mmrLeafExact(script);
 }
+/**
+ * Build the serialized Minima `ScriptProof` bytes for a single-leaf MMR.
+ *
+ * Mirrors the node's `ScriptProof(const std::string& zScript)` constructor
+ * (org/minima/objects/script_proof.cpp): the script is added as the sole leaf
+ * of a fresh MMR with sum value ZERO, so the proof chain is empty and the
+ * resulting address is the leaf commitment itself:
+ *
+ *   address = sha3( MiniNumber.ZERO || MiniString(script) || MiniNumber.ZERO )
+ *           = mmrLeafExact(script)
+ *
+ * This is exactly how the node derives `Address(script)`, so a witness carrying
+ * this proof satisfies `Witness::getScript(input.getAddress())` for every input
+ * paying to that script. Without it the node rejects the TxPoW with
+ * "Script Missing from TxPoW for address <addr>".
+ *
+ * Wire format (`ScriptProof::writeDataStream`):
+ *   MiniString(script) || MMRProof(blockTime = 0, chunks = [])
+ *
+ * @param script - The Minima (KISSVM) script whose address the proof attests.
+ */
+function buildScriptProof(script) {
+    // The node derives the proof's address as
+    //   sha3( MiniNumber.ZERO || MiniString(script) || MiniNumber.ZERO )
+    // so the script bytes here must be exactly the canonical script whose address
+    // was used for the coin (see computeScriptAddress).
+    const canonical = (0, canonical_js_1.toNodeScript)(script);
+    return concat((0, Streamable_js_1.writeMiniString)(canonical), serializeMMRProof({ chunks: [] }, 0n));
+}
 /**
  * Create MMRData leaf node matching Minima's MMRData.CreateMMRDataLeafNode
  *

package/dist/cjs/scripts/canonical.d.ts

@@ -0,0 +1,20 @@
+/**
+ * `toNodeScript` — canonicalize a KISSVM script to the syntax the Minima **node**
+ * tokenizer accepts (RFC-048 §3.1 L4 finding; audit
+ * `docs/audits/kissvm-node-validity-l4-2026-10.md`).
+ *
+ * The node tokenizer requires:
+ *   - user variable names `^[a-z]+$` (lowercase letters only — no digits/underscores/uppercase),
+ *   - hex literals `^0x[0-9a-fA-F]+$` (lowercase `0x` prefix),
+ *   - arithmetic via the `+` / `-` operators (`ADD`/`SUB` are not node functions).
+ *
+ * This is a token-level rewrite: commands, functions, operators, globals (`@…`), hex
+ * literals, numbers and `[…]` string literals are preserved; only **user identifiers**
+ * are rewritten to lowercase letters (with deterministic de-collision), `0X`→`0x`, and
+ * `ADD`/`SUB`→`+`/`-`. It is idempotent.
+ *
+ * Semantics are unchanged: the SDK evaluators normalize `+`→ADD and `-`→SUB (and vice
+ * versa), so a canonical script behaves identically to its source.
+ */
+/** Canonicalize a KISSVM script to node-accepted syntax. Idempotent. */
+export declare function toNodeScript(script: string): string;

package/dist/cjs/scripts/canonical.js

@@ -0,0 +1,99 @@
+"use strict";
+/**
+ * `toNodeScript` — canonicalize a KISSVM script to the syntax the Minima **node**
+ * tokenizer accepts (RFC-048 §3.1 L4 finding; audit
+ * `docs/audits/kissvm-node-validity-l4-2026-10.md`).
+ *
+ * The node tokenizer requires:
+ *   - user variable names `^[a-z]+$` (lowercase letters only — no digits/underscores/uppercase),
+ *   - hex literals `^0x[0-9a-fA-F]+$` (lowercase `0x` prefix),
+ *   - arithmetic via the `+` / `-` operators (`ADD`/`SUB` are not node functions).
+ *
+ * This is a token-level rewrite: commands, functions, operators, globals (`@…`), hex
+ * literals, numbers and `[…]` string literals are preserved; only **user identifiers**
+ * are rewritten to lowercase letters (with deterministic de-collision), `0X`→`0x`, and
+ * `ADD`/`SUB`→`+`/`-`. It is idempotent.
+ *
+ * Semantics are unchanged: the SDK evaluators normalize `+`→ADD and `-`→SUB (and vice
+ * versa), so a canonical script behaves identically to its source.
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.toNodeScript = toNodeScript;
+const KEYWORDS = new Set([
+    'LET', 'IF', 'THEN', 'ELSE', 'ELSEIF', 'ENDIF', 'RETURN', 'ASSERT', 'EXEC', 'MAST',
+    'WHILE', 'DO', 'ENDWHILE', 'FOR', 'TO', 'BY', 'ENDFOR', 'FOREACH', 'IN', 'SWITCH',
+    'CASE', 'DEFAULT', 'ENDSWITCH', 'FUNC', 'ENDFUNC', 'TRUE', 'FALSE', 'STORE', 'WITH', 'FUNCTION', 'RETURN',
+]);
+// Word operators kept as-is (ADD/SUB are handled separately → +/−).
+const OPS = new Set([
+    'GT', 'LT', 'EQ', 'GTE', 'LTE', 'NEQ', 'AND', 'OR', 'XOR', 'NAND', 'NOR', 'NXOR',
+    'NOT', 'NEG', 'MUL', 'DIV', 'MOD', 'LSHIFT', 'RSHIFT', 'BITAND', 'BITOR', 'BITXOR', 'BITNOT',
+]);
+const FUNCTIONS = new Set([
+    'SHA3', 'SHA2', 'HASH', 'PROOF', 'SIGNEDBY', 'MULTISIG', 'CHECKSIG', 'VERIFYOUT', 'VERIFYIN',
+    'GETOUTADDR', 'GETOUTAMT', 'GETOUTTOK', 'GETOUTKEEPSTATE', 'GETINADDR', 'GETINAMT', 'GETINID',
+    'GETINTOK', 'STATE', 'PREVSTATE', 'SAMESTATE', 'SAMECOINS', 'COINAGE', 'COINDATA', 'NUMBER',
+    'HEX', 'STRING', 'ASCII', 'UTF8', 'BOOL', 'CONCAT', 'LEN', 'REV', 'SUBSET', 'SETLEN',
+    'SUBSTR', 'REPLACE', 'REPLACEFIRST', 'OVERWRITE', 'ABS', 'CEIL', 'FLOOR', 'MAX', 'MIN',
+    'DEC', 'INC', 'SIGDIG', 'POW', 'SQRT', 'BITSET', 'BITGET', 'BITCOUNT', 'ADDRESS', 'EXISTS',
+    'GET', 'SUMINPUTS', 'SUMOUTPUTS', 'CHECKSIG',
+]);
+function classify(id) {
+    const up = id.toUpperCase();
+    if (up === 'ADD')
+        return { kind: 'keep', out: '+' };
+    if (up === 'SUB')
+        return { kind: 'keep', out: '-' };
+    if (KEYWORDS.has(up) || OPS.has(up) || FUNCTIONS.has(up))
+        return { kind: 'keep', out: up };
+    return { kind: 'var' };
+}
+/** a, b, …, z, aa, ab, … */
+function letters(n) {
+    let s = '';
+    n += 1;
+    while (n > 0) {
+        const r = (n - 1) % 26;
+        s = String.fromCharCode(97 + r) + s;
+        n = Math.floor((n - 1) / 26);
+    }
+    return s;
+}
+const TOKEN = /(\[[^\]]*\]|0[xX][0-9a-fA-F]+|@[A-Za-z][A-Za-z0-9]*|[A-Za-z_][A-Za-z0-9_]*)/g;
+/** Canonicalize a KISSVM script to node-accepted syntax. Idempotent. */
+function toNodeScript(script) {
+    // The node tokenizer has no comment syntax; strip `//` line comments.
+    script = script.replace(/\/\/[^\n]*/g, '');
+    const varMap = new Map();
+    const used = new Set();
+    // First pass: assign canonical names to user variables (in first-occurrence order).
+    let m;
+    const re1 = new RegExp(TOKEN.source, 'g');
+    while ((m = re1.exec(script))) {
+        const tok = m[0];
+        if (tok[0] === '[' || tok.startsWith('0x') || tok.startsWith('0X') || tok[0] === '@')
+            continue;
+        if (classify(tok).kind !== 'var' || varMap.has(tok))
+            continue;
+        const base = tok.toLowerCase().replace(/[^a-z]/g, '') || 'v';
+        let cand = base;
+        let i = 0;
+        while (used.has(cand))
+            cand = base + letters(i++);
+        used.add(cand);
+        varMap.set(tok, cand);
+    }
+    // Second pass: rewrite.
+    return script.replace(TOKEN, (tok) => {
+        if (tok[0] === '[')
+            return tok;
+        if (tok.startsWith('0x') || tok.startsWith('0X'))
+            return '0x' + tok.slice(2);
+        if (tok[0] === '@')
+            return '@' + tok.slice(1).toUpperCase();
+        const c = classify(tok);
+        if (c.kind === 'keep')
+            return c.out;
+        return varMap.get(tok) ?? tok;
+    });
+}

package/dist/cjs/scripts/index.d.ts

@@ -1,4 +1,5 @@
 export * from './types.js';
 export * from './dapp-types.js';
-export { encodeMiniNumber, encodeMiniData, encodeMiniString, serializeMMRProofChunk, serializeScriptProofWithProof, STATETYPE_HEX, STATETYPE_NUMBER, STATETYPE_STRING, STATETYPE_BOOL, encodeStateValue, serializeStateVariables, buildScriptProofFromDescriptor, deduplicateScriptDescriptors, serializeExtraScripts, aggregateSignatures, validateExternalSignature, computeScriptAddress, } from './witness-serializer.js';
+export { encodeMiniNumber, encodeMiniData, encodeMiniString, serializeMMRProofChunk, serializeScriptProofWithProof, STATETYPE_HEX, STATETYPE_NUMBER, STATETYPE_STRING, STATETYPE_BOOL, encodeStateValue, serializeStateVariables, buildScriptProofFromDescriptor, deduplicateScriptDescriptors, serializeExtraScripts, aggregateSignatures, validateExternalSignature, computeScriptAddress, wotsAddressData, } from './witness-serializer.js';
 export * from './contract-helpers.js';
+export { toNodeScript } from "./canonical.js";

package/dist/cjs/scripts/index.js

@@ -14,7 +14,7 @@ var __exportStar = (this && this.__exportStar) || function(m, exports) {
     for (var p in m) if (p !== "default" && !Object.prototype.hasOwnProperty.call(exports, p)) __createBinding(exports, m, p);
 };
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.computeScriptAddress = exports.validateExternalSignature = exports.aggregateSignatures = exports.serializeExtraScripts = exports.deduplicateScriptDescriptors = exports.buildScriptProofFromDescriptor = exports.serializeStateVariables = exports.encodeStateValue = exports.STATETYPE_BOOL = exports.STATETYPE_STRING = exports.STATETYPE_NUMBER = exports.STATETYPE_HEX = exports.serializeScriptProofWithProof = exports.serializeMMRProofChunk = exports.encodeMiniString = exports.encodeMiniData = exports.encodeMiniNumber = void 0;
+exports.toNodeScript = exports.wotsAddressData = exports.computeScriptAddress = exports.validateExternalSignature = exports.aggregateSignatures = exports.serializeExtraScripts = exports.deduplicateScriptDescriptors = exports.buildScriptProofFromDescriptor = exports.serializeStateVariables = exports.encodeStateValue = exports.STATETYPE_BOOL = exports.STATETYPE_STRING = exports.STATETYPE_NUMBER = exports.STATETYPE_HEX = exports.serializeScriptProofWithProof = exports.serializeMMRProofChunk = exports.encodeMiniString = exports.encodeMiniData = exports.encodeMiniNumber = void 0;
 __exportStar(require("./types.js"), exports);
 __exportStar(require("./dapp-types.js"), exports);
 var witness_serializer_js_1 = require("./witness-serializer.js");
@@ -35,4 +35,7 @@ Object.defineProperty(exports, "serializeExtraScripts", { enumerable: true, get:
 Object.defineProperty(exports, "aggregateSignatures", { enumerable: true, get: function () { return witness_serializer_js_1.aggregateSignatures; } });
 Object.defineProperty(exports, "validateExternalSignature", { enumerable: true, get: function () { return witness_serializer_js_1.validateExternalSignature; } });
 Object.defineProperty(exports, "computeScriptAddress", { enumerable: true, get: function () { return witness_serializer_js_1.computeScriptAddress; } });
+Object.defineProperty(exports, "wotsAddressData", { enumerable: true, get: function () { return witness_serializer_js_1.wotsAddressData; } });
 __exportStar(require("./contract-helpers.js"), exports);
+var canonical_js_1 = require("./canonical.js");
+Object.defineProperty(exports, "toNodeScript", { enumerable: true, get: function () { return canonical_js_1.toNodeScript; } });

package/dist/cjs/scripts/witness-serializer.d.ts

@@ -25,5 +25,24 @@ export declare function aggregateSignatures(totemSignature: {
     signature: Uint8Array;
 }, externalSignatures: ExternalSignature[], transactionDigest: Uint8Array): Uint8Array[];
 export declare function validateExternalSignature(signature: ExternalSignature, transactionDigest: Uint8Array): boolean;
+/**
+ * Derive a Minima script address exactly as the node does
+ * (`Address::Address(script)` / `ScriptProof::calculateAddress`):
+ *
+ *   address = sha3( MiniNumber.ZERO || MiniString(script) || MiniNumber.ZERO )
+ *
+ * The script is first canonicalised (`toNodeScript`) so the address is over the
+ * same bytes the node will execute and that `buildScriptProof` attests. The
+ * previous implementation hashed `sha3(upper(script))`, which is not a Minima
+ * script address — coins sent to it could never be spent by that script
+ * ("Script Missing from TxPoW for address …").
+ */
+/**
+ * Address data (hex) of a WOTS public-key digest's single-key script
+ * (`RETURN SIGNEDBY(0x<pk>)`). This is the value a `VERIFYOUT` compares against
+ * (the node compares the output coin's *address data*), distinct from the WOTS
+ * public key used by `SIGNEDBY`.
+ */
+export declare function wotsAddressData(publicKeyDigest: string): string;
 export declare function computeScriptAddress(script: string): string;
 export { concat };

package/dist/cjs/scripts/witness-serializer.js

@@ -15,9 +15,10 @@ exports.deduplicateScriptDescriptors = deduplicateScriptDescriptors;
 exports.serializeExtraScripts = serializeExtraScripts;
 exports.aggregateSignatures = aggregateSignatures;
 exports.validateExternalSignature = validateExternalSignature;
+exports.wotsAddressData = wotsAddressData;
 exports.computeScriptAddress = computeScriptAddress;
 exports.concat = concat;
-const wasm_sync_js_1 = require("../wasm-sync.js");
+const canonical_js_1 = require("./canonical.js");
 const wots_js_1 = require("../wots.js");
 const mmr_js_1 = require("../mmr.js");
 const minima32_js_1 = require("../minima32.js");
@@ -321,9 +322,28 @@ function validateExternalSignature(signature, transactionDigest) {
         return false;
     }
 }
+/**
+ * Derive a Minima script address exactly as the node does
+ * (`Address::Address(script)` / `ScriptProof::calculateAddress`):
+ *
+ *   address = sha3( MiniNumber.ZERO || MiniString(script) || MiniNumber.ZERO )
+ *
+ * The script is first canonicalised (`toNodeScript`) so the address is over the
+ * same bytes the node will execute and that `buildScriptProof` attests. The
+ * previous implementation hashed `sha3(upper(script))`, which is not a Minima
+ * script address — coins sent to it could never be spent by that script
+ * ("Script Missing from TxPoW for address …").
+ */
+/**
+ * Address data (hex) of a WOTS public-key digest's single-key script
+ * (`RETURN SIGNEDBY(0x<pk>)`). This is the value a `VERIFYOUT` compares against
+ * (the node compares the output coin's *address data*), distinct from the WOTS
+ * public key used by `SIGNEDBY`.
+ */
+function wotsAddressData(publicKeyDigest) {
+    const raw = publicKeyDigest.replace(/^0x/i, '').toUpperCase();
+    return computeScriptAddress(`RETURN SIGNEDBY(0x${raw})`);
+}
 function computeScriptAddress(script) {
-    const cleanScript = script.trim().toUpperCase();
-    const scriptBytes = new TextEncoder().encode(cleanScript);
-    const hashBytes = (0, wasm_sync_js_1.sha3_256)(scriptBytes);
-    return bytesToHex(hashBytes);
+    return bytesToHex((0, mmr_js_1.mmrRootFromSingleLeaf)((0, canonical_js_1.toNodeScript)(script)));
 }

package/dist/index.d.ts

@@ -28,6 +28,7 @@ export { makeMxAddress as encodeMx, parseMxAddress as decodeMx } from './wasm-sy
 export declare function mxToHex(address: string): string;
 export * from './mmr.js';
 export * from './scripts/index.js';
+export { toNodeScript } from './scripts/canonical.js';
 export { scriptToAddress, addressToRoot } from './derive.js';
 export { WORD_LIST, convertStringToSeed, convertWordListToSeed, generateSeedPhrase, } from './bip39.js';
 export { MiniNumber } from './MiniNumber.js';

package/dist/index.js

@@ -68,6 +68,7 @@ export function mxToHex(address) {
 export * from './mmr.js';
 // Script Types, Witness Serializer, Contract Helpers
 export * from './scripts/index.js';
+export { toNodeScript } from './scripts/canonical.js';
 // Address Derivation (original)
 export { scriptToAddress, addressToRoot } from './derive.js';
 // BIP39 — re-export word list and legacy helpers from JS

package/dist/mmr.d.ts

@@ -16,6 +16,28 @@ export type Bytes = Uint8Array;
 export declare function mmrLeafExact(script: string): Bytes;
 /** In a single-leaf MMR the root equals the leaf commitment. */
 export declare function mmrRootFromSingleLeaf(script: string): Bytes;
+/**
+ * Build the serialized Minima `ScriptProof` bytes for a single-leaf MMR.
+ *
+ * Mirrors the node's `ScriptProof(const std::string& zScript)` constructor
+ * (org/minima/objects/script_proof.cpp): the script is added as the sole leaf
+ * of a fresh MMR with sum value ZERO, so the proof chain is empty and the
+ * resulting address is the leaf commitment itself:
+ *
+ *   address = sha3( MiniNumber.ZERO || MiniString(script) || MiniNumber.ZERO )
+ *           = mmrLeafExact(script)
+ *
+ * This is exactly how the node derives `Address(script)`, so a witness carrying
+ * this proof satisfies `Witness::getScript(input.getAddress())` for every input
+ * paying to that script. Without it the node rejects the TxPoW with
+ * "Script Missing from TxPoW for address <addr>".
+ *
+ * Wire format (`ScriptProof::writeDataStream`):
+ *   MiniString(script) || MMRProof(blockTime = 0, chunks = [])
+ *
+ * @param script - The Minima (KISSVM) script whose address the proof attests.
+ */
+export declare function buildScriptProof(script: string): Bytes;
 /**
  * MMRData structure matching Minima's MMRData.java
  * Contains hash and value (for sum tree functionality)

package/dist/mmr.js

@@ -3,7 +3,10 @@
 import { sha3_256 as nobleSha3 } from './wasm-async.js';
 import { serializeMiniNumber, serializeMiniData, javaHashAllObjects } from "./javaStreamables.js";
 // Import canonical wire serialization from Streamable.ts (single source of truth)
-import { writeMMRProof } from "./Streamable.js";
+import { writeMMRProof, writeMiniString } from "./Streamable.js";
+// Canonicalise to the exact script the node will receive, so the proof's
+// computed address matches `computeScriptAddress` (which canonicalises too).
+import { toNodeScript } from "./scripts/canonical.js";
 // Re-export for API compatibility (existing code imports from mmr.ts)
 // Using a wrapper function for better compatibility with dynamic imports
 export function serializeMMRProof(proof, blockTime = 0n) {
@@ -69,6 +72,35 @@ export function mmrLeafExact(script) {
 export function mmrRootFromSingleLeaf(script) {
     return mmrLeafExact(script);
 }
+/**
+ * Build the serialized Minima `ScriptProof` bytes for a single-leaf MMR.
+ *
+ * Mirrors the node's `ScriptProof(const std::string& zScript)` constructor
+ * (org/minima/objects/script_proof.cpp): the script is added as the sole leaf
+ * of a fresh MMR with sum value ZERO, so the proof chain is empty and the
+ * resulting address is the leaf commitment itself:
+ *
+ *   address = sha3( MiniNumber.ZERO || MiniString(script) || MiniNumber.ZERO )
+ *           = mmrLeafExact(script)
+ *
+ * This is exactly how the node derives `Address(script)`, so a witness carrying
+ * this proof satisfies `Witness::getScript(input.getAddress())` for every input
+ * paying to that script. Without it the node rejects the TxPoW with
+ * "Script Missing from TxPoW for address <addr>".
+ *
+ * Wire format (`ScriptProof::writeDataStream`):
+ *   MiniString(script) || MMRProof(blockTime = 0, chunks = [])
+ *
+ * @param script - The Minima (KISSVM) script whose address the proof attests.
+ */
+export function buildScriptProof(script) {
+    // The node derives the proof's address as
+    //   sha3( MiniNumber.ZERO || MiniString(script) || MiniNumber.ZERO )
+    // so the script bytes here must be exactly the canonical script whose address
+    // was used for the coin (see computeScriptAddress).
+    const canonical = toNodeScript(script);
+    return concat(writeMiniString(canonical), serializeMMRProof({ chunks: [] }, 0n));
+}
 /**
  * Create MMRData leaf node matching Minima's MMRData.CreateMMRDataLeafNode
  *

package/dist/scripts/canonical.d.ts

@@ -0,0 +1,20 @@
+/**
+ * `toNodeScript` — canonicalize a KISSVM script to the syntax the Minima **node**
+ * tokenizer accepts (RFC-048 §3.1 L4 finding; audit
+ * `docs/audits/kissvm-node-validity-l4-2026-10.md`).
+ *
+ * The node tokenizer requires:
+ *   - user variable names `^[a-z]+$` (lowercase letters only — no digits/underscores/uppercase),
+ *   - hex literals `^0x[0-9a-fA-F]+$` (lowercase `0x` prefix),
+ *   - arithmetic via the `+` / `-` operators (`ADD`/`SUB` are not node functions).
+ *
+ * This is a token-level rewrite: commands, functions, operators, globals (`@…`), hex
+ * literals, numbers and `[…]` string literals are preserved; only **user identifiers**
+ * are rewritten to lowercase letters (with deterministic de-collision), `0X`→`0x`, and
+ * `ADD`/`SUB`→`+`/`-`. It is idempotent.
+ *
+ * Semantics are unchanged: the SDK evaluators normalize `+`→ADD and `-`→SUB (and vice
+ * versa), so a canonical script behaves identically to its source.
+ */
+/** Canonicalize a KISSVM script to node-accepted syntax. Idempotent. */
+export declare function toNodeScript(script: string): string;

package/dist/scripts/canonical.js

@@ -0,0 +1,96 @@
+/**
+ * `toNodeScript` — canonicalize a KISSVM script to the syntax the Minima **node**
+ * tokenizer accepts (RFC-048 §3.1 L4 finding; audit
+ * `docs/audits/kissvm-node-validity-l4-2026-10.md`).
+ *
+ * The node tokenizer requires:
+ *   - user variable names `^[a-z]+$` (lowercase letters only — no digits/underscores/uppercase),
+ *   - hex literals `^0x[0-9a-fA-F]+$` (lowercase `0x` prefix),
+ *   - arithmetic via the `+` / `-` operators (`ADD`/`SUB` are not node functions).
+ *
+ * This is a token-level rewrite: commands, functions, operators, globals (`@…`), hex
+ * literals, numbers and `[…]` string literals are preserved; only **user identifiers**
+ * are rewritten to lowercase letters (with deterministic de-collision), `0X`→`0x`, and
+ * `ADD`/`SUB`→`+`/`-`. It is idempotent.
+ *
+ * Semantics are unchanged: the SDK evaluators normalize `+`→ADD and `-`→SUB (and vice
+ * versa), so a canonical script behaves identically to its source.
+ */
+const KEYWORDS = new Set([
+    'LET', 'IF', 'THEN', 'ELSE', 'ELSEIF', 'ENDIF', 'RETURN', 'ASSERT', 'EXEC', 'MAST',
+    'WHILE', 'DO', 'ENDWHILE', 'FOR', 'TO', 'BY', 'ENDFOR', 'FOREACH', 'IN', 'SWITCH',
+    'CASE', 'DEFAULT', 'ENDSWITCH', 'FUNC', 'ENDFUNC', 'TRUE', 'FALSE', 'STORE', 'WITH', 'FUNCTION', 'RETURN',
+]);
+// Word operators kept as-is (ADD/SUB are handled separately → +/−).
+const OPS = new Set([
+    'GT', 'LT', 'EQ', 'GTE', 'LTE', 'NEQ', 'AND', 'OR', 'XOR', 'NAND', 'NOR', 'NXOR',
+    'NOT', 'NEG', 'MUL', 'DIV', 'MOD', 'LSHIFT', 'RSHIFT', 'BITAND', 'BITOR', 'BITXOR', 'BITNOT',
+]);
+const FUNCTIONS = new Set([
+    'SHA3', 'SHA2', 'HASH', 'PROOF', 'SIGNEDBY', 'MULTISIG', 'CHECKSIG', 'VERIFYOUT', 'VERIFYIN',
+    'GETOUTADDR', 'GETOUTAMT', 'GETOUTTOK', 'GETOUTKEEPSTATE', 'GETINADDR', 'GETINAMT', 'GETINID',
+    'GETINTOK', 'STATE', 'PREVSTATE', 'SAMESTATE', 'SAMECOINS', 'COINAGE', 'COINDATA', 'NUMBER',
+    'HEX', 'STRING', 'ASCII', 'UTF8', 'BOOL', 'CONCAT', 'LEN', 'REV', 'SUBSET', 'SETLEN',
+    'SUBSTR', 'REPLACE', 'REPLACEFIRST', 'OVERWRITE', 'ABS', 'CEIL', 'FLOOR', 'MAX', 'MIN',
+    'DEC', 'INC', 'SIGDIG', 'POW', 'SQRT', 'BITSET', 'BITGET', 'BITCOUNT', 'ADDRESS', 'EXISTS',
+    'GET', 'SUMINPUTS', 'SUMOUTPUTS', 'CHECKSIG',
+]);
+function classify(id) {
+    const up = id.toUpperCase();
+    if (up === 'ADD')
+        return { kind: 'keep', out: '+' };
+    if (up === 'SUB')
+        return { kind: 'keep', out: '-' };
+    if (KEYWORDS.has(up) || OPS.has(up) || FUNCTIONS.has(up))
+        return { kind: 'keep', out: up };
+    return { kind: 'var' };
+}
+/** a, b, …, z, aa, ab, … */
+function letters(n) {
+    let s = '';
+    n += 1;
+    while (n > 0) {
+        const r = (n - 1) % 26;
+        s = String.fromCharCode(97 + r) + s;
+        n = Math.floor((n - 1) / 26);
+    }
+    return s;
+}
+const TOKEN = /(\[[^\]]*\]|0[xX][0-9a-fA-F]+|@[A-Za-z][A-Za-z0-9]*|[A-Za-z_][A-Za-z0-9_]*)/g;
+/** Canonicalize a KISSVM script to node-accepted syntax. Idempotent. */
+export function toNodeScript(script) {
+    // The node tokenizer has no comment syntax; strip `//` line comments.
+    script = script.replace(/\/\/[^\n]*/g, '');
+    const varMap = new Map();
+    const used = new Set();
+    // First pass: assign canonical names to user variables (in first-occurrence order).
+    let m;
+    const re1 = new RegExp(TOKEN.source, 'g');
+    while ((m = re1.exec(script))) {
+        const tok = m[0];
+        if (tok[0] === '[' || tok.startsWith('0x') || tok.startsWith('0X') || tok[0] === '@')
+            continue;
+        if (classify(tok).kind !== 'var' || varMap.has(tok))
+            continue;
+        const base = tok.toLowerCase().replace(/[^a-z]/g, '') || 'v';
+        let cand = base;
+        let i = 0;
+        while (used.has(cand))
+            cand = base + letters(i++);
+        used.add(cand);
+        varMap.set(tok, cand);
+    }
+    // Second pass: rewrite.
+    return script.replace(TOKEN, (tok) => {
+        if (tok[0] === '[')
+            return tok;
+        if (tok.startsWith('0x') || tok.startsWith('0X'))
+            return '0x' + tok.slice(2);
+        if (tok[0] === '@')
+            return '@' + tok.slice(1).toUpperCase();
+        const c = classify(tok);
+        if (c.kind === 'keep')
+            return c.out;
+        return varMap.get(tok) ?? tok;
+    });
+}

package/dist/scripts/index.d.ts

@@ -1,4 +1,5 @@
 export * from './types.js';
 export * from './dapp-types.js';
-export { encodeMiniNumber, encodeMiniData, encodeMiniString, serializeMMRProofChunk, serializeScriptProofWithProof, STATETYPE_HEX, STATETYPE_NUMBER, STATETYPE_STRING, STATETYPE_BOOL, encodeStateValue, serializeStateVariables, buildScriptProofFromDescriptor, deduplicateScriptDescriptors, serializeExtraScripts, aggregateSignatures, validateExternalSignature, computeScriptAddress, } from './witness-serializer.js';
+export { encodeMiniNumber, encodeMiniData, encodeMiniString, serializeMMRProofChunk, serializeScriptProofWithProof, STATETYPE_HEX, STATETYPE_NUMBER, STATETYPE_STRING, STATETYPE_BOOL, encodeStateValue, serializeStateVariables, buildScriptProofFromDescriptor, deduplicateScriptDescriptors, serializeExtraScripts, aggregateSignatures, validateExternalSignature, computeScriptAddress, wotsAddressData, } from './witness-serializer.js';
 export * from './contract-helpers.js';
+export { toNodeScript } from "./canonical.js";

package/dist/scripts/index.js

@@ -1,4 +1,5 @@
 export * from './types.js';
 export * from './dapp-types.js';
-export { encodeMiniNumber, encodeMiniData, encodeMiniString, serializeMMRProofChunk, serializeScriptProofWithProof, STATETYPE_HEX, STATETYPE_NUMBER, STATETYPE_STRING, STATETYPE_BOOL, encodeStateValue, serializeStateVariables, buildScriptProofFromDescriptor, deduplicateScriptDescriptors, serializeExtraScripts, aggregateSignatures, validateExternalSignature, computeScriptAddress, } from './witness-serializer.js';
+export { encodeMiniNumber, encodeMiniData, encodeMiniString, serializeMMRProofChunk, serializeScriptProofWithProof, STATETYPE_HEX, STATETYPE_NUMBER, STATETYPE_STRING, STATETYPE_BOOL, encodeStateValue, serializeStateVariables, buildScriptProofFromDescriptor, deduplicateScriptDescriptors, serializeExtraScripts, aggregateSignatures, validateExternalSignature, computeScriptAddress, wotsAddressData, } from './witness-serializer.js';
 export * from './contract-helpers.js';
+export { toNodeScript } from "./canonical.js";

package/dist/scripts/witness-serializer.d.ts

@@ -25,5 +25,24 @@ export declare function aggregateSignatures(totemSignature: {
     signature: Uint8Array;
 }, externalSignatures: ExternalSignature[], transactionDigest: Uint8Array): Uint8Array[];
 export declare function validateExternalSignature(signature: ExternalSignature, transactionDigest: Uint8Array): boolean;
+/**
+ * Derive a Minima script address exactly as the node does
+ * (`Address::Address(script)` / `ScriptProof::calculateAddress`):
+ *
+ *   address = sha3( MiniNumber.ZERO || MiniString(script) || MiniNumber.ZERO )
+ *
+ * The script is first canonicalised (`toNodeScript`) so the address is over the
+ * same bytes the node will execute and that `buildScriptProof` attests. The
+ * previous implementation hashed `sha3(upper(script))`, which is not a Minima
+ * script address — coins sent to it could never be spent by that script
+ * ("Script Missing from TxPoW for address …").
+ */
+/**
+ * Address data (hex) of a WOTS public-key digest's single-key script
+ * (`RETURN SIGNEDBY(0x<pk>)`). This is the value a `VERIFYOUT` compares against
+ * (the node compares the output coin's *address data*), distinct from the WOTS
+ * public key used by `SIGNEDBY`.
+ */
+export declare function wotsAddressData(publicKeyDigest: string): string;
 export declare function computeScriptAddress(script: string): string;
 export { concat };

package/dist/scripts/witness-serializer.js

@@ -1,6 +1,6 @@
-import { sha3_256 } from '../wasm-async.js';
+import { toNodeScript } from './canonical.js';
 import { wotsVerifyDigest } from '../wots.js';
-import { serializeMMRProof } from '../mmr.js';
+import { serializeMMRProof, mmrRootFromSingleLeaf } from '../mmr.js';
 import { mxToHex } from '../minima32.js';
 function hexToBytes(hex) {
     const cleanHex = hex.startsWith('0x') ? hex.slice(2) : hex;
@@ -302,10 +302,29 @@ export function validateExternalSignature(signature, transactionDigest) {
         return false;
     }
 }
+/**
+ * Derive a Minima script address exactly as the node does
+ * (`Address::Address(script)` / `ScriptProof::calculateAddress`):
+ *
+ *   address = sha3( MiniNumber.ZERO || MiniString(script) || MiniNumber.ZERO )
+ *
+ * The script is first canonicalised (`toNodeScript`) so the address is over the
+ * same bytes the node will execute and that `buildScriptProof` attests. The
+ * previous implementation hashed `sha3(upper(script))`, which is not a Minima
+ * script address — coins sent to it could never be spent by that script
+ * ("Script Missing from TxPoW for address …").
+ */
+/**
+ * Address data (hex) of a WOTS public-key digest's single-key script
+ * (`RETURN SIGNEDBY(0x<pk>)`). This is the value a `VERIFYOUT` compares against
+ * (the node compares the output coin's *address data*), distinct from the WOTS
+ * public key used by `SIGNEDBY`.
+ */
+export function wotsAddressData(publicKeyDigest) {
+    const raw = publicKeyDigest.replace(/^0x/i, '').toUpperCase();
+    return computeScriptAddress(`RETURN SIGNEDBY(0x${raw})`);
+}
 export function computeScriptAddress(script) {
-    const cleanScript = script.trim().toUpperCase();
-    const scriptBytes = new TextEncoder().encode(cleanScript);
-    const hashBytes = sha3_256(scriptBytes);
-    return bytesToHex(hashBytes);
+    return bytesToHex(mmrRootFromSingleLeaf(toNodeScript(script)));
 }
 export { concat };

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@totemsdk/core",
-  "version": "1.3.0",
+  "version": "1.4.0",
   "description": "Core cryptographic primitives for Totem SDK — backed by Rust/WASM",
   "type": "module",
   "main": "dist/cjs/index.js",