@totemsdk/omnia-host 0.2.2 → 0.4.0

package/README.md

@@ -38,12 +38,13 @@ The daemon configuration is read from environment variables:
 
 ### Signing model
 
-`OMNIA_HOST_SEED` (or the keyfile) is the base seed. The host derives a
-per-address seed (`derivePerAddressSeed(baseSeed, localAddressIndex)`) and
-signs every channel state with the flat WOTS key at index 0 of that seed; the
-channel participant's `publicKeyDigest` is `derivePKdigest(perAddressSeed, 0)`.
-The WOTS lease journal and watermark persist in `<OMNIA_HOST_DB>.lease/` so
-they survive restarts together with the channel database.
+`OMNIA_HOST_SEED` (or the keyfile) is the base seed. The host derives the unified
+child TreeKey (`createUnifiedChildTreeKey(baseSeed, localAddressIndex)`) and signs
+every channel state (and the boot manifest) with serialized TreeSignatures; the
+channel participant's `publicKeyDigest` is that TreeKey's root public key, and the
+identity address is the matching Minima address. The WOTS lease journal and
+watermark persist in `<OMNIA_HOST_DB>.lease/` so they survive restarts together
+with the channel database.
 
 ### Read-only mode
 

package/dist/identity.js

@@ -92,7 +92,22 @@ async function createHostManifest(config, signing, identity) {
         capabilities: ['omnia:open-channel', 'omnia:update-channel', 'omnia:route', 'omnia:settle'],
         tags: ['omnia', 'payment-channel', 'daemon'],
     };
-    return (0, manifest_1.signManifest)(manifest, signing.perAddressSeed, 0);
+    // RFC-037: sign the manifest with the unified child TreeKey. Allocate a
+    // one-time leaf via the lease so restarts never reuse a WOTS leaf.
+    const reservation = await signing.leaseProvider.reserveKeyUse({
+        treeId: 'omnia-manifest',
+        purpose: 'manifest',
+    });
+    const useIndex = reservation.indices.l1 * 64 + reservation.indices.l2;
+    try {
+        const signed = await (0, manifest_1.signManifest)(manifest, signing.treeKey, useIndex);
+        await signing.leaseProvider.commitKeyUse(reservation.reservationId, 'manifest');
+        return signed;
+    }
+    catch (err) {
+        await signing.leaseProvider.burnReservation(reservation.reservationId, 'manifest-sign-failed').catch(() => { });
+        throw err;
+    }
 }
 /** Boot-time identity + manifest assembly. */
 async function createHostIdentityAndManifest(config, signing) {

package/dist/signing.d.ts

@@ -2,20 +2,21 @@
  * Host signing material — derives the channel signer, WOTS lease provider,
  * and Minima address from env-provisioned key material.
  *
- * Key model (matches @totemsdk/omnia's verification path):
+ * Key model (RFC-037 unified WOTS):
  *   - `baseSeed` comes from OMNIA_HOST_SEED (BIP39 mnemonic or 32-byte hex)
  *     or from an OMNIA_HOST_KEYFILE JSON.
- *   - `perAddressSeed = derivePerAddressSeed(baseSeed, localAddressIndex)`.
- *   - The channel participant's `publicKeyDigest` is the flat WOTS PK digest
- *     `derivePKdigest(perAddressSeed, 0)` — omnia verifies signatures with
- *     `wotsVerifyDigest(sig, digest, pkDigest)`, which is key-index agnostic,
- *     so the signer always signs with key index 0 of the per-address seed.
- *   - The lease indices {addressIndex, l1, l2} are slot bookkeeping for
- *     double-sign prevention (watermark monotonicity), not key derivation.
+ *   - The channel key is the unified child TreeKey
+ *     `createUnifiedChildTreeKey(baseSeed, localAddressIndex)`; the participant's
+ *     `publicKeyDigest` is its tree-root public key — the same key the on-chain
+ *     `MULTISIG` eltoo script embeds.
+ *   - Signatures are serialized hierarchical `TreeSignature`s (`serializeTreeSignature`)
+ *     over the reserved leaf `(l1*64 + l2)`, verified by `verifyChannelSignature`.
+ *   - The lease indices {addressIndex, l1, l2} select the one-time leaf.
  *
  * The lease journal/watermark persist in a directory next to the channel DB
  * (`<dbPath>.lease/`) so they survive restarts together with the channel store.
  */
+import { type TreeKey } from '@totemsdk/core';
 import type { StorageAdapter } from '@totemsdk/core';
 import type { ChannelSigner } from '@totemsdk/omnia';
 import type { WotsLeaseProvider } from '@totemsdk/wots-lease';
@@ -23,12 +24,14 @@ import type { OmniaHostConfig } from './config.js';
 export interface HostSigning {
     signer: ChannelSigner;
     leaseProvider: WotsLeaseProvider;
+    /** Minima address for the unified child TreeKey (identity + channels). */
     address: string;
+    /** Channel participant key: the unified child TreeKey root pubkey (RFC-037). */
     publicKeyDigest: string;
     /** 32-byte base seed (used by the identity/manifest layer). */
     baseSeed: Uint8Array;
-    /** Per-address seed used for channel signing (key index 0). */
-    perAddressSeed: Uint8Array;
+    /** Unified child TreeKey used for channel + manifest signing (RFC-037). */
+    treeKey: TreeKey;
     addressIndex: number;
     deviceId: string;
 }

package/dist/signing.js

@@ -3,16 +3,16 @@
  * Host signing material — derives the channel signer, WOTS lease provider,
  * and Minima address from env-provisioned key material.
  *
- * Key model (matches @totemsdk/omnia's verification path):
+ * Key model (RFC-037 unified WOTS):
  *   - `baseSeed` comes from OMNIA_HOST_SEED (BIP39 mnemonic or 32-byte hex)
  *     or from an OMNIA_HOST_KEYFILE JSON.
- *   - `perAddressSeed = derivePerAddressSeed(baseSeed, localAddressIndex)`.
- *   - The channel participant's `publicKeyDigest` is the flat WOTS PK digest
- *     `derivePKdigest(perAddressSeed, 0)` — omnia verifies signatures with
- *     `wotsVerifyDigest(sig, digest, pkDigest)`, which is key-index agnostic,
- *     so the signer always signs with key index 0 of the per-address seed.
- *   - The lease indices {addressIndex, l1, l2} are slot bookkeeping for
- *     double-sign prevention (watermark monotonicity), not key derivation.
+ *   - The channel key is the unified child TreeKey
+ *     `createUnifiedChildTreeKey(baseSeed, localAddressIndex)`; the participant's
+ *     `publicKeyDigest` is its tree-root public key — the same key the on-chain
+ *     `MULTISIG` eltoo script embeds.
+ *   - Signatures are serialized hierarchical `TreeSignature`s (`serializeTreeSignature`)
+ *     over the reserved leaf `(l1*64 + l2)`, verified by `verifyChannelSignature`.
+ *   - The lease indices {addressIndex, l1, l2} select the one-time leaf.
  *
  * The lease journal/watermark persist in a directory next to the channel DB
  * (`<dbPath>.lease/`) so they survive restarts together with the channel store.
@@ -173,10 +173,10 @@ function createHostSigning(config) {
         throw new Error(`localAddressIndex ${addressIndex} is outside device slot ${deviceSlot} range ` +
             `${range.startAddressIndex}–${range.endAddressIndex}`);
     }
-    const perAddressSeed = (0, core_1.derivePerAddressSeed)(baseSeed, addressIndex);
-    const kp = (0, core_1.wotsKeypairFromSeed)(perAddressSeed, 0);
-    const publicKeyDigest = `0x${(0, core_1.bytesToHex)(kp.pk)}`;
-    const address = (0, core_1.wotsAddressFromKeypair)(kp);
+    const treeKey = (0, core_1.createUnifiedChildTreeKey)(baseSeed, addressIndex);
+    const publicKey = treeKey.getPublicKey();
+    const publicKeyDigest = `0x${(0, core_1.bytesToHex)(publicKey)}`;
+    const address = (0, core_1.scriptToAddress)((0, core_1.scriptFromWotsPk)(publicKey));
     const storage = new JsonFileStorageAdapter(leaseStorageDir(config.dbPath));
     const leaseProvider = new wots_lease_1.LocalLeaseProvider(storage, undefined, deviceId);
     const signer = {
@@ -184,13 +184,14 @@ function createHostSigning(config) {
         async sign(payload, indices) {
             // RFC-020 C1: honor the reserved leaf instead of hardcoding index 0. The
             // reservation must belong to this signer's address; the leaf within the
-            // per-address seed is (l1*64 + l2). Callers must supply the pk digest for
-            // the leaf they reserved (the default reservation is leaf (0,0)).
+            // per-address tree is (l1*64 + l2). Signatures are serialized TreeSignatures
+            // (RFC-037), verified by verifyChannelSignature against the tree-root pubkey.
             if (indices.addressIndex !== addressIndex) {
                 throw new Error(`omnia-host signer address ${addressIndex} cannot sign reserved address ${indices.addressIndex}`);
             }
             const leafIndex = indices.l1 * 64 + indices.l2;
-            return (0, core_1.wotsSign)(perAddressSeed, leafIndex, payload);
+            treeKey.setUses(leafIndex);
+            return (0, core_1.serializeTreeSignature)(treeKey.sign(payload));
         },
     };
     return {
@@ -199,7 +200,7 @@ function createHostSigning(config) {
         address,
         publicKeyDigest,
         baseSeed,
-        perAddressSeed,
+        treeKey,
         addressIndex,
         deviceId,
     };

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@totemsdk/omnia-host",
-  "version": "0.2.2",
+  "version": "0.4.0",
   "description": "Durable Omnia node daemon for channel lifecycle, routing, and control APIs",
   "main": "dist/index.js",
   "types": "dist/index.d.ts",
@@ -24,16 +24,16 @@
     "ws": "^8.21.1",
     "@totemsdk/chain-provider": "^0.2.1",
     "@totemsdk/core": "^1.2.11",
-    "@totemsdk/identity": "^1.0.1",
+    "@totemsdk/omnia": "^2.0.1",
     "@totemsdk/manifest": "^1.0.0",
-    "@totemsdk/omnia": "^1.0.2",
-    "@totemsdk/omnia-factory": "^0.2.1",
-    "@totemsdk/omnia-splice": "^0.2.1",
-    "@totemsdk/omnia-vtxo": "^0.2.1",
-    "@totemsdk/minima-rpc": "^0.2.2",
+    "@totemsdk/identity": "^1.0.1",
+    "@totemsdk/omnia-factory": "^0.4.0",
+    "@totemsdk/omnia-splice": "^0.3.0",
+    "@totemsdk/omnia-router": "^0.3.0",
+    "@totemsdk/omnia-vtxo": "^0.5.0",
     "@totemsdk/storage": "^0.1.0",
-    "@totemsdk/wots-lease": "^1.0.1",
-    "@totemsdk/omnia-router": "^0.2.1"
+    "@totemsdk/minima-rpc": "^0.2.2",
+    "@totemsdk/wots-lease": "^1.0.1"
   },
   "devDependencies": {
     "@types/jest": "^30.0.0",