@totemsdk/root-identity 1.0.7 → 1.0.9

package/dist/UnifiedIdentityWallet.js

@@ -30,19 +30,19 @@
  */
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.UnifiedIdentityWallet = exports.MAX_CHILD_COUNT = void 0;
-const sha3_js_1 = require("@noble/hashes/sha3.js");
 const core_1 = require("@totemsdk/core");
+const core_2 = require("@totemsdk/core");
 exports.MAX_CHILD_COUNT = 64;
 const OWNERSHIP_OP = 'TOTEM_OWNERSHIP_PROOF_V1';
 // ─────────────────────────────────────────────────────────────────────────────
 // Helpers
 // ─────────────────────────────────────────────────────────────────────────────
 function hashMessage(message) {
-    return (0, sha3_js_1.sha3_256)(new TextEncoder().encode(message));
+    return (0, core_1.sha3_256)(new TextEncoder().encode(message));
 }
 function addressFromPublicKeyBytes(pkBytes) {
-    const script = (0, core_1.scriptFromWotsPk)(pkBytes);
-    return (0, core_1.scriptToAddress)(script);
+    const script = (0, core_2.scriptFromWotsPk)(pkBytes);
+    return (0, core_2.scriptToAddress)(script);
 }
 /**
  * Build the deterministic ownership-proof message that the root key signs.
@@ -87,15 +87,15 @@ class UnifiedIdentityWallet {
     }
     /** Create a wallet from a Minima-compatible BIP39 seed phrase. */
     static fromPhrase(phrase, childCount = exports.MAX_CHILD_COUNT) {
-        return new UnifiedIdentityWallet((0, core_1.phraseToSeed)(phrase), childCount);
+        return new UnifiedIdentityWallet((0, core_2.phraseToSeed)(phrase), childCount);
     }
     /** Generate a new random Minima-compatible 24-word seed phrase. */
     static generatePhrase() {
-        return (0, core_1.generateSeedPhrase)();
+        return (0, core_2.generateSeedPhrase)();
     }
     /** Validate a Minima-compatible seed phrase. */
     static validatePhrase(phrase) {
-        return (0, core_1.validatePhrase)(phrase);
+        return (0, core_2.validatePhrase)(phrase);
     }
     // ── Address accessors ────────────────────────────────────────────────────────
     /** Minima address for the root key. NEVER use this address for spending. */
@@ -158,7 +158,7 @@ class UnifiedIdentityWallet {
         return {
             address: this.getRootAddress(),
             publicKey: this.getRootPublicKey(),
-            signature: (0, core_1.bytesToHex)((0, core_1.serializeTreeSignature)(sig)),
+            signature: (0, core_2.bytesToHex)((0, core_2.serializeTreeSignature)(sig)),
             message,
         };
     }
@@ -177,7 +177,7 @@ class UnifiedIdentityWallet {
         return {
             address: this.getChildAddress(index),
             publicKey: this.getChildPublicKey(index),
-            signature: (0, core_1.bytesToHex)((0, core_1.serializeTreeSignature)(sig)),
+            signature: (0, core_2.bytesToHex)((0, core_2.serializeTreeSignature)(sig)),
             message,
         };
     }
@@ -240,11 +240,11 @@ class UnifiedIdentityWallet {
             const canonicalMessage = buildOwnershipMessage(rootAddress, childPublicKeys, timestamp);
             if (rootProof.message !== canonicalMessage)
                 return false;
-            const sigResult = (0, core_1.verifySignatureDetailed)(rootAddress, canonicalMessage, rootProof.signature, rootPublicKey);
+            const sigResult = (0, core_2.verifySignatureDetailed)(rootAddress, canonicalMessage, rootProof.signature, rootPublicKey);
             if (!sigResult.valid)
                 return false;
             for (let i = 0; i < childPublicKeys.length; i++) {
-                const pkBytes = (0, core_1.hexToBytes)(childPublicKeys[i]);
+                const pkBytes = (0, core_2.hexToBytes)(childPublicKeys[i]);
                 const derivedAddress = addressFromPublicKeyBytes(pkBytes);
                 if (derivedAddress.toLowerCase() !== childAddresses[i].toLowerCase())
                     return false;
@@ -273,7 +273,7 @@ class UnifiedIdentityWallet {
      */
     getRootTreeKey() {
         if (!this.cachedRootTreeKey) {
-            this.cachedRootTreeKey = (0, core_1.createUnifiedRootTreeKey)(this.baseSeed);
+            this.cachedRootTreeKey = (0, core_2.createUnifiedRootTreeKey)(this.baseSeed);
         }
         return this.cachedRootTreeKey;
     }
@@ -282,8 +282,13 @@ class UnifiedIdentityWallet {
     getRootUses() { return this.rootUses; }
     /** Restore root watermark from a previously persisted value. */
     setRootUses(uses) {
-        if (uses < 0)
-            throw new Error('uses must be non-negative');
+        if (!Number.isSafeInteger(uses) || uses < 0)
+            throw new Error('uses must be a non-negative safe integer');
+        // RFC-020 C1: the cursor may only advance — lowering it would re-expose
+        // already-spent WOTS leaves.
+        if (uses < this.rootUses) {
+            throw new Error(`Refusing to lower root uses from ${this.rootUses} to ${uses} (would reuse a WOTS leaf)`);
+        }
         this.rootUses = uses;
     }
     /** Number of times child `index` has signed (for persistence). */
@@ -294,8 +299,12 @@ class UnifiedIdentityWallet {
     /** Restore child watermark from a previously persisted value. */
     setChildUses(index, uses) {
         this.assertChildIndex(index);
-        if (uses < 0)
-            throw new Error('uses must be non-negative');
+        if (!Number.isSafeInteger(uses) || uses < 0)
+            throw new Error('uses must be a non-negative safe integer');
+        const current = this.childUsesMap.get(index) ?? 0;
+        if (uses < current) {
+            throw new Error(`Refusing to lower child ${index} uses from ${current} to ${uses} (would reuse a WOTS leaf)`);
+        }
         this.childUsesMap.set(index, uses);
     }
     /** Number of child addresses configured for this wallet. */
@@ -323,17 +332,34 @@ class UnifiedIdentityWallet {
      * across sessions. Out-of-range or invalid entries are silently skipped.
      */
     restoreWatermarkState(state) {
-        if (typeof state?.rootUses === 'number' && state.rootUses >= 0) {
-            this.rootUses = Math.floor(state.rootUses);
+        // RFC-020 C1: restore is forward-only. A stale or tampered snapshot that
+        // moves a cursor backwards would re-expose spent leaves, so it throws.
+        const nextRoot = typeof state?.rootUses === 'number'
+            && Number.isSafeInteger(state.rootUses)
+            && state.rootUses >= 0
+            ? state.rootUses
+            : undefined;
+        if (nextRoot !== undefined && nextRoot < this.rootUses) {
+            throw new Error(`Refusing to restore root uses below the current cursor (${nextRoot} < ${this.rootUses})`);
         }
+        const childNext = [];
         if (state?.childUses && typeof state.childUses === 'object') {
             for (const [key, uses] of Object.entries(state.childUses)) {
                 const index = Number(key);
-                if (Number.isInteger(index) && index >= 0 && index < this.childCount && typeof uses === 'number' && uses >= 0) {
-                    this.childUsesMap.set(index, Math.floor(uses));
+                if (Number.isInteger(index) && index >= 0 && index < this.childCount
+                    && typeof uses === 'number' && Number.isSafeInteger(uses) && uses >= 0) {
+                    const current = this.childUsesMap.get(index) ?? 0;
+                    if (uses < current) {
+                        throw new Error(`Refusing to restore child ${index} uses below the current cursor (${uses} < ${current})`);
+                    }
+                    childNext.push([index, uses]);
                 }
             }
         }
+        if (nextRoot !== undefined)
+            this.rootUses = nextRoot;
+        for (const [index, uses] of childNext)
+            this.childUsesMap.set(index, uses);
     }
     // ── Private helpers ──────────────────────────────────────────────────────────
     assertChildIndex(index) {
@@ -343,17 +369,17 @@ class UnifiedIdentityWallet {
     }
     populateRootCache() {
         const pkBytes = this.getRootTreeKey().getPublicKey();
-        this.cachedRootPublicKey = (0, core_1.bytesToHex)(pkBytes);
+        this.cachedRootPublicKey = (0, core_2.bytesToHex)(pkBytes);
         this.cachedRootAddress = addressFromPublicKeyBytes(pkBytes);
     }
     getOrCreateChildTreeKey(index) {
         const cached = this.childTreeKeyCache.get(index);
         if (cached)
             return cached;
-        const treeKey = (0, core_1.createUnifiedChildTreeKey)(this.baseSeed, index);
+        const treeKey = (0, core_2.createUnifiedChildTreeKey)(this.baseSeed, index);
         this.childTreeKeyCache.set(index, treeKey);
         const pkBytes = treeKey.getPublicKey();
-        this.childPubKeyCache.set(index, (0, core_1.bytesToHex)(pkBytes));
+        this.childPubKeyCache.set(index, (0, core_2.bytesToHex)(pkBytes));
         this.childAddressCache.set(index, addressFromPublicKeyBytes(pkBytes));
         return treeKey;
     }

package/dist/index.d.ts

@@ -17,4 +17,5 @@
  *  - NFT / token ownership linking
  */
 export { UnifiedIdentityWallet, MAX_CHILD_COUNT } from './UnifiedIdentityWallet.js';
+export { UnifiedIdentityWallet as RootIdentityWallet } from './UnifiedIdentityWallet.js';
 export type { WotsProof, OwnershipProof } from './types.js';

package/dist/index.js

@@ -18,7 +18,9 @@
  *  - NFT / token ownership linking
  */
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.MAX_CHILD_COUNT = exports.UnifiedIdentityWallet = void 0;
+exports.RootIdentityWallet = exports.MAX_CHILD_COUNT = exports.UnifiedIdentityWallet = void 0;
 var UnifiedIdentityWallet_js_1 = require("./UnifiedIdentityWallet.js");
 Object.defineProperty(exports, "UnifiedIdentityWallet", { enumerable: true, get: function () { return UnifiedIdentityWallet_js_1.UnifiedIdentityWallet; } });
 Object.defineProperty(exports, "MAX_CHILD_COUNT", { enumerable: true, get: function () { return UnifiedIdentityWallet_js_1.MAX_CHILD_COUNT; } });
+var UnifiedIdentityWallet_js_2 = require("./UnifiedIdentityWallet.js");
+Object.defineProperty(exports, "RootIdentityWallet", { enumerable: true, get: function () { return UnifiedIdentityWallet_js_2.UnifiedIdentityWallet; } });

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@totemsdk/root-identity",
-  "version": "1.0.7",
+  "version": "1.0.9",
   "description": "Single root identity controlling up to 64 on-chain addresses — all cryptographically linked via full independent 3-level TreeKeys",
   "main": "dist/index.js",
   "types": "dist/index.d.ts",
@@ -10,22 +10,20 @@
       "bare": "./dist/index.js",
       "browser": "./dist/index.js",
       "import": "./dist/index.js",
-      "require": "./dist/index.cjs"
+      "require": "./dist/index.js"
     }
   },
   "files": [
     "dist",
+    "rust/pkg/",
+    "rust/pkg-node/",
     "README.md",
     "LICENSE"
   ],
   "peerDependencies": {
-    "@noble/hashes": "^2.0.0",
-    "@totemsdk/core": ">=1.0.1"
+    "@totemsdk/core": "^1.2.11"
   },
   "peerDependenciesMeta": {
-    "@noble/hashes": {
-      "optional": false
-    },
     "@totemsdk/core": {
       "optional": false
     }
@@ -38,13 +36,12 @@
     "access": "public"
   },
   "devDependencies": {
-    "@noble/hashes": "^2.2.0",
-    "@totemsdk/core": "1.1.0",
-    "@types/jest": "^29.0.0",
+    "@types/jest": "^30.0.0",
     "@types/node": "^20.0.0",
-    "jest": "^29.0.0",
+    "jest": "^30.4.2",
     "ts-jest": "^29.0.0",
-    "typescript": "^5.0.0"
+    "typescript": "^7.0.2",
+    "@totemsdk/core": "^1.2.11"
   },
   "keywords": [
     "totem",
@@ -53,7 +50,6 @@
     "blockchain",
     "quantum-resistant",
     "wots",
-    "kissvm",
     "utxo",
     "identity",
     "did",
@@ -63,19 +59,20 @@
   ],
   "author": "Totem SDK",
   "license": "MIT",
-  "homepage": "https://totemsdk.com",
+  "homepage": "https://docs.totem.ing",
   "bugs": {
-    "url": "https://github.com/MrGheek/axia-totem/issues"
+    "url": "https://github.com/Totem-Edge/totem-sdk/issues"
   },
   "repository": {
     "type": "git",
-    "url": "git+https://github.com/MrGheek/axia-totem.git",
-    "directory": "packages/totem-sdk/packages/root-identity"
+    "url": "git+https://github.com/Totem-Edge/totem-sdk.git",
+    "directory": "packages/root-identity"
   },
   "scripts": {
-    "build": "tsc",
-    "clean": "rm -rf dist",
+    "build": "npm run build:wasm && tsc && node ../../scripts/clean-wasm-output-ignores.mjs",
+    "clean": "rm -rf dist rust/pkg rust/pkg-node rust/target",
     "pretest": "cd ../core && npm run build",
-    "test": "node --experimental-vm-modules node_modules/jest/bin/jest.js --passWithNoTests"
+    "test": "jest",
+    "build:wasm": "cd rust && wasm-pack build --target bundler --out-dir pkg && wasm-pack build --target nodejs --out-dir pkg-node"
   }
 }

package/rust/pkg/package.json

@@ -0,0 +1,27 @@
+{
+  "name": "root-identity-wasm",
+  "type": "module",
+  "collaborators": [
+    "Totem SDK Contributors"
+  ],
+  "description": "Root identity ownership proof verification — canonical message reconstruction, WOTS signature verification, address derivation (Rust/WASM)",
+  "version": "0.1.0",
+  "license": "MIT",
+  "repository": {
+    "type": "git",
+    "url": "https://github.com/Totem-Edge/totem-sdk"
+  },
+  "files": [
+    "root_identity_wasm_bg.wasm",
+    "root_identity_wasm.js",
+    "root_identity_wasm_bg.js",
+    "root_identity_wasm.d.ts"
+  ],
+  "main": "root_identity_wasm.js",
+  "homepage": "https://totem.ing",
+  "types": "root_identity_wasm.d.ts",
+  "sideEffects": [
+    "./root_identity_wasm.js",
+    "./snippets/*"
+  ]
+}

package/rust/pkg/root_identity_wasm.d.ts

@@ -0,0 +1,6 @@
+/* tslint:disable */
+/* eslint-disable */
+
+export function init(): void;
+
+export function verify_ownership_proof_wasm(proof_js: any, verify_sig_js: any): any;

package/rust/pkg/root_identity_wasm.js

@@ -0,0 +1,9 @@
+/* @ts-self-types="./root_identity_wasm.d.ts" */
+import * as wasm from "./root_identity_wasm_bg.wasm";
+import { __wbg_set_wasm } from "./root_identity_wasm_bg.js";
+
+__wbg_set_wasm(wasm);
+wasm.__wbindgen_start();
+export {
+    init, verify_ownership_proof_wasm
+} from "./root_identity_wasm_bg.js";

package/rust/pkg/root_identity_wasm_bg.js

@@ -0,0 +1,393 @@
+export function init() {
+    wasm.init();
+}
+
+/**
+ * @param {any} proof_js
+ * @param {any} verify_sig_js
+ * @returns {any}
+ */
+export function verify_ownership_proof_wasm(proof_js, verify_sig_js) {
+    const ret = wasm.verify_ownership_proof_wasm(proof_js, verify_sig_js);
+    if (ret[2]) {
+        throw takeFromExternrefTable0(ret[1]);
+    }
+    return takeFromExternrefTable0(ret[0]);
+}
+export function __wbg_Error_92b29b0548f8b746(arg0, arg1) {
+    const ret = Error(getStringFromWasm0(arg0, arg1));
+    return ret;
+}
+export function __wbg_String_8564e559799eccda(arg0, arg1) {
+    const ret = String(arg1);
+    const ptr1 = passStringToWasm0(ret, wasm.__wbindgen_malloc, wasm.__wbindgen_realloc);
+    const len1 = WASM_VECTOR_LEN;
+    getDataViewMemory0().setInt32(arg0 + 4 * 1, len1, true);
+    getDataViewMemory0().setInt32(arg0 + 4 * 0, ptr1, true);
+}
+export function __wbg___wbindgen_boolean_get_fa956cfa2d1bd751(arg0) {
+    const v = arg0;
+    const ret = typeof(v) === 'boolean' ? v : undefined;
+    return isLikeNone(ret) ? 0xFFFFFF : ret ? 1 : 0;
+}
+export function __wbg___wbindgen_debug_string_c25d447a39f5578f(arg0, arg1) {
+    const ret = debugString(arg1);
+    const ptr1 = passStringToWasm0(ret, wasm.__wbindgen_malloc, wasm.__wbindgen_realloc);
+    const len1 = WASM_VECTOR_LEN;
+    getDataViewMemory0().setInt32(arg0 + 4 * 1, len1, true);
+    getDataViewMemory0().setInt32(arg0 + 4 * 0, ptr1, true);
+}
+export function __wbg___wbindgen_in_aca499c5de7ff5e5(arg0, arg1) {
+    const ret = arg0 in arg1;
+    return ret;
+}
+export function __wbg___wbindgen_is_function_1ff95bcc5517c252(arg0) {
+    const ret = typeof(arg0) === 'function';
+    return ret;
+}
+export function __wbg___wbindgen_is_object_a27215656b807791(arg0) {
+    const val = arg0;
+    const ret = typeof(val) === 'object' && val !== null;
+    return ret;
+}
+export function __wbg___wbindgen_is_undefined_c05833b95a3cf397(arg0) {
+    const ret = arg0 === undefined;
+    return ret;
+}
+export function __wbg___wbindgen_jsval_loose_eq_db4c3b15f63fc170(arg0, arg1) {
+    const ret = arg0 == arg1;
+    return ret;
+}
+export function __wbg___wbindgen_number_get_394265ed1e1b84ee(arg0, arg1) {
+    const obj = arg1;
+    const ret = typeof(obj) === 'number' ? obj : undefined;
+    getDataViewMemory0().setFloat64(arg0 + 8 * 1, isLikeNone(ret) ? 0 : ret, true);
+    getDataViewMemory0().setInt32(arg0 + 4 * 0, !isLikeNone(ret), true);
+}
+export function __wbg___wbindgen_string_get_b0ca35b86a603356(arg0, arg1) {
+    const obj = arg1;
+    const ret = typeof(obj) === 'string' ? obj : undefined;
+    var ptr1 = isLikeNone(ret) ? 0 : passStringToWasm0(ret, wasm.__wbindgen_malloc, wasm.__wbindgen_realloc);
+    var len1 = WASM_VECTOR_LEN;
+    getDataViewMemory0().setInt32(arg0 + 4 * 1, len1, true);
+    getDataViewMemory0().setInt32(arg0 + 4 * 0, ptr1, true);
+}
+export function __wbg___wbindgen_throw_344f42d3211c4765(arg0, arg1) {
+    throw new Error(getStringFromWasm0(arg0, arg1));
+}
+export function __wbg_call_8a2dd23819f8a60a() { return handleError(function (arg0, arg1) {
+    const ret = arg0.call(arg1);
+    return ret;
+}, arguments); }
+export function __wbg_call_a6e5c5dce5018821() { return handleError(function (arg0, arg1, arg2) {
+    const ret = arg0.call(arg1, arg2);
+    return ret;
+}, arguments); }
+export function __wbg_done_89b2b13e91a60321(arg0) {
+    const ret = arg0.done;
+    return ret;
+}
+export function __wbg_error_a6fa202b58aa1cd3(arg0, arg1) {
+    let deferred0_0;
+    let deferred0_1;
+    try {
+        deferred0_0 = arg0;
+        deferred0_1 = arg1;
+        console.error(getStringFromWasm0(arg0, arg1));
+    } finally {
+        wasm.__wbindgen_free(deferred0_0, deferred0_1, 1);
+    }
+}
+export function __wbg_get_c7eb1f358a7654df() { return handleError(function (arg0, arg1) {
+    const ret = Reflect.get(arg0, arg1);
+    return ret;
+}, arguments); }
+export function __wbg_get_unchecked_6e0ad6d2a41b06f6(arg0, arg1) {
+    const ret = arg0[arg1 >>> 0];
+    return ret;
+}
+export function __wbg_get_with_ref_key_6412cf3094599694(arg0, arg1) {
+    const ret = arg0[arg1];
+    return ret;
+}
+export function __wbg_instanceof_ArrayBuffer_4480b9e0068a8adb(arg0) {
+    let result;
+    try {
+        result = arg0 instanceof ArrayBuffer;
+    } catch (_) {
+        result = false;
+    }
+    const ret = result;
+    return ret;
+}
+export function __wbg_instanceof_Uint8Array_309b927aaf7a3fc7(arg0) {
+    let result;
+    try {
+        result = arg0 instanceof Uint8Array;
+    } catch (_) {
+        result = false;
+    }
+    const ret = result;
+    return ret;
+}
+export function __wbg_isArray_0677c962b281d01a(arg0) {
+    const ret = Array.isArray(arg0);
+    return ret;
+}
+export function __wbg_iterator_6f722e4a93058b71() {
+    const ret = Symbol.iterator;
+    return ret;
+}
+export function __wbg_length_1f0964f4a5e2c6d8(arg0) {
+    const ret = arg0.length;
+    return ret;
+}
+export function __wbg_length_370319915dc99107(arg0) {
+    const ret = arg0.length;
+    return ret;
+}
+export function __wbg_new_227d7c05414eb861() {
+    const ret = new Error();
+    return ret;
+}
+export function __wbg_new_32b398fb48b6d94a() {
+    const ret = new Array();
+    return ret;
+}
+export function __wbg_new_cd45aabdf6073e84(arg0) {
+    const ret = new Uint8Array(arg0);
+    return ret;
+}
+export function __wbg_new_da52cf8fe3429cb2() {
+    const ret = new Object();
+    return ret;
+}
+export function __wbg_next_6dbf2c0ac8cde20f(arg0) {
+    const ret = arg0.next;
+    return ret;
+}
+export function __wbg_next_71f2aa1cb3d1e37e() { return handleError(function (arg0) {
+    const ret = arg0.next();
+    return ret;
+}, arguments); }
+export function __wbg_prototypesetcall_4770620bbe4688a0(arg0, arg1, arg2) {
+    Uint8Array.prototype.set.call(getArrayU8FromWasm0(arg0, arg1), arg2);
+}
+export function __wbg_push_d2ae3af0c1217ae6(arg0, arg1) {
+    const ret = arg0.push(arg1);
+    return ret;
+}
+export function __wbg_set_6be42768c690e380(arg0, arg1, arg2) {
+    arg0[arg1] = arg2;
+}
+export function __wbg_stack_3b0d974bbf31e44f(arg0, arg1) {
+    const ret = arg1.stack;
+    const ptr1 = passStringToWasm0(ret, wasm.__wbindgen_malloc, wasm.__wbindgen_realloc);
+    const len1 = WASM_VECTOR_LEN;
+    getDataViewMemory0().setInt32(arg0 + 4 * 1, len1, true);
+    getDataViewMemory0().setInt32(arg0 + 4 * 0, ptr1, true);
+}
+export function __wbg_value_a5d5488a9589444a(arg0) {
+    const ret = arg0.value;
+    return ret;
+}
+export function __wbindgen_cast_0000000000000001(arg0, arg1) {
+    // Cast intrinsic for `Ref(String) -> Externref`.
+    const ret = getStringFromWasm0(arg0, arg1);
+    return ret;
+}
+export function __wbindgen_init_externref_table() {
+    const table = wasm.__wbindgen_externrefs;
+    const offset = table.grow(4);
+    table.set(0, undefined);
+    table.set(offset + 0, undefined);
+    table.set(offset + 1, null);
+    table.set(offset + 2, true);
+    table.set(offset + 3, false);
+}
+function addToExternrefTable0(obj) {
+    const idx = wasm.__externref_table_alloc();
+    wasm.__wbindgen_externrefs.set(idx, obj);
+    return idx;
+}
+
+function debugString(val) {
+    // primitive types
+    const type = typeof val;
+    if (type == 'number' || type == 'boolean' || val == null) {
+        return  `${val}`;
+    }
+    if (type == 'string') {
+        return `"${val}"`;
+    }
+    if (type == 'symbol') {
+        const description = val.description;
+        if (description == null) {
+            return 'Symbol';
+        } else {
+            return `Symbol(${description})`;
+        }
+    }
+    if (type == 'function') {
+        const name = val.name;
+        if (typeof name == 'string' && name.length > 0) {
+            return `Function(${name})`;
+        } else {
+            return 'Function';
+        }
+    }
+    // objects
+    if (Array.isArray(val)) {
+        const length = val.length;
+        let debug = '[';
+        if (length > 0) {
+            debug += debugString(val[0]);
+        }
+        for(let i = 1; i < length; i++) {
+            debug += ', ' + debugString(val[i]);
+        }
+        debug += ']';
+        return debug;
+    }
+    // Test for built-in
+    const builtInMatches = /\[object ([^\]]+)\]/.exec(toString.call(val));
+    let className;
+    if (builtInMatches && builtInMatches.length > 1) {
+        className = builtInMatches[1];
+    } else {
+        // Failed to match the standard '[object ClassName]'
+        return toString.call(val);
+    }
+    if (className == 'Object') {
+        // we're a user defined class or Object
+        // JSON.stringify avoids problems with cycles, and is generally much
+        // easier than looping through ownProperties of `val`.
+        try {
+            return 'Object(' + JSON.stringify(val) + ')';
+        } catch (_) {
+            return 'Object';
+        }
+    }
+    // errors
+    if (val instanceof Error) {
+        return `${val.name}: ${val.message}\n${val.stack}`;
+    }
+    // TODO we could test for more things here, like `Set`s and `Map`s.
+    return className;
+}
+
+function getArrayU8FromWasm0(ptr, len) {
+    ptr = ptr >>> 0;
+    return getUint8ArrayMemory0().subarray(ptr / 1, ptr / 1 + len);
+}
+
+let cachedDataViewMemory0 = null;
+function getDataViewMemory0() {
+    if (cachedDataViewMemory0 === null || cachedDataViewMemory0.buffer.detached === true || (cachedDataViewMemory0.buffer.detached === undefined && cachedDataViewMemory0.buffer !== wasm.memory.buffer)) {
+        cachedDataViewMemory0 = new DataView(wasm.memory.buffer);
+    }
+    return cachedDataViewMemory0;
+}
+
+function getStringFromWasm0(ptr, len) {
+    return decodeText(ptr >>> 0, len);
+}
+
+let cachedUint8ArrayMemory0 = null;
+function getUint8ArrayMemory0() {
+    if (cachedUint8ArrayMemory0 === null || cachedUint8ArrayMemory0.byteLength === 0) {
+        cachedUint8ArrayMemory0 = new Uint8Array(wasm.memory.buffer);
+    }
+    return cachedUint8ArrayMemory0;
+}
+
+function handleError(f, args) {
+    try {
+        return f.apply(this, args);
+    } catch (e) {
+        const idx = addToExternrefTable0(e);
+        wasm.__wbindgen_exn_store(idx);
+    }
+}
+
+function isLikeNone(x) {
+    return x === undefined || x === null;
+}
+
+function passStringToWasm0(arg, malloc, realloc) {
+    if (realloc === undefined) {
+        const buf = cachedTextEncoder.encode(arg);
+        const ptr = malloc(buf.length, 1) >>> 0;
+        getUint8ArrayMemory0().subarray(ptr, ptr + buf.length).set(buf);
+        WASM_VECTOR_LEN = buf.length;
+        return ptr;
+    }
+
+    let len = arg.length;
+    let ptr = malloc(len, 1) >>> 0;
+
+    const mem = getUint8ArrayMemory0();
+
+    let offset = 0;
+
+    for (; offset < len; offset++) {
+        const code = arg.charCodeAt(offset);
+        if (code > 0x7F) break;
+        mem[ptr + offset] = code;
+    }
+    if (offset !== len) {
+        if (offset !== 0) {
+            arg = arg.slice(offset);
+        }
+        ptr = realloc(ptr, len, len = offset + arg.length * 3, 1) >>> 0;
+        const view = getUint8ArrayMemory0().subarray(ptr + offset, ptr + len);
+        const ret = cachedTextEncoder.encodeInto(arg, view);
+
+        offset += ret.written;
+        ptr = realloc(ptr, len, offset, 1) >>> 0;
+    }
+
+    WASM_VECTOR_LEN = offset;
+    return ptr;
+}
+
+function takeFromExternrefTable0(idx) {
+    const value = wasm.__wbindgen_externrefs.get(idx);
+    wasm.__externref_table_dealloc(idx);
+    return value;
+}
+
+let cachedTextDecoder = new TextDecoder('utf-8', { ignoreBOM: true, fatal: true });
+cachedTextDecoder.decode();
+const MAX_SAFARI_DECODE_BYTES = 2146435072;
+let numBytesDecoded = 0;
+function decodeText(ptr, len) {
+    numBytesDecoded += len;
+    if (numBytesDecoded >= MAX_SAFARI_DECODE_BYTES) {
+        cachedTextDecoder = new TextDecoder('utf-8', { ignoreBOM: true, fatal: true });
+        cachedTextDecoder.decode();
+        numBytesDecoded = len;
+    }
+    return cachedTextDecoder.decode(getUint8ArrayMemory0().subarray(ptr, ptr + len));
+}
+
+const cachedTextEncoder = new TextEncoder();
+
+if (!('encodeInto' in cachedTextEncoder)) {
+    cachedTextEncoder.encodeInto = function (arg, view) {
+        const buf = cachedTextEncoder.encode(arg);
+        view.set(buf);
+        return {
+            read: arg.length,
+            written: buf.length
+        };
+    };
+}
+
+let WASM_VECTOR_LEN = 0;
+
+
+let wasm;
+export function __wbg_set_wasm(val) {
+    wasm = val;
+}

package/rust/pkg/root_identity_wasm_bg.wasm.d.ts

@@ -0,0 +1,13 @@
+/* tslint:disable */
+/* eslint-disable */
+export const memory: WebAssembly.Memory;
+export const init: () => void;
+export const verify_ownership_proof_wasm: (a: any, b: any) => [number, number, number];
+export const __wbindgen_malloc: (a: number, b: number) => number;
+export const __wbindgen_realloc: (a: number, b: number, c: number, d: number) => number;
+export const __wbindgen_exn_store: (a: number) => void;
+export const __externref_table_alloc: () => number;
+export const __wbindgen_externrefs: WebAssembly.Table;
+export const __wbindgen_free: (a: number, b: number, c: number) => void;
+export const __externref_table_dealloc: (a: number) => void;
+export const __wbindgen_start: () => void;

package/rust/pkg-node/package.json

@@ -0,0 +1,21 @@
+{
+  "name": "root-identity-wasm",
+  "collaborators": [
+    "Totem SDK Contributors"
+  ],
+  "description": "Root identity ownership proof verification — canonical message reconstruction, WOTS signature verification, address derivation (Rust/WASM)",
+  "version": "0.1.0",
+  "license": "MIT",
+  "repository": {
+    "type": "git",
+    "url": "https://github.com/Totem-Edge/totem-sdk"
+  },
+  "files": [
+    "root_identity_wasm_bg.wasm",
+    "root_identity_wasm.js",
+    "root_identity_wasm.d.ts"
+  ],
+  "main": "root_identity_wasm.js",
+  "homepage": "https://totem.ing",
+  "types": "root_identity_wasm.d.ts"
+}

package/rust/pkg-node/root_identity_wasm.d.ts

@@ -0,0 +1,6 @@
+/* tslint:disable */
+/* eslint-disable */
+
+export function init(): void;
+
+export function verify_ownership_proof_wasm(proof_js: any, verify_sig_js: any): any;

package/rust/pkg-node/root_identity_wasm.js

@@ -0,0 +1,400 @@
+/* @ts-self-types="./root_identity_wasm.d.ts" */
+
+function init() {
+    wasm.init();
+}
+exports.init = init;
+
+/**
+ * @param {any} proof_js
+ * @param {any} verify_sig_js
+ * @returns {any}
+ */
+function verify_ownership_proof_wasm(proof_js, verify_sig_js) {
+    const ret = wasm.verify_ownership_proof_wasm(proof_js, verify_sig_js);
+    if (ret[2]) {
+        throw takeFromExternrefTable0(ret[1]);
+    }
+    return takeFromExternrefTable0(ret[0]);
+}
+exports.verify_ownership_proof_wasm = verify_ownership_proof_wasm;
+function __wbg_get_imports() {
+    const import0 = {
+        __proto__: null,
+        __wbg_Error_92b29b0548f8b746: function(arg0, arg1) {
+            const ret = Error(getStringFromWasm0(arg0, arg1));
+            return ret;
+        },
+        __wbg_String_8564e559799eccda: function(arg0, arg1) {
+            const ret = String(arg1);
+            const ptr1 = passStringToWasm0(ret, wasm.__wbindgen_malloc, wasm.__wbindgen_realloc);
+            const len1 = WASM_VECTOR_LEN;
+            getDataViewMemory0().setInt32(arg0 + 4 * 1, len1, true);
+            getDataViewMemory0().setInt32(arg0 + 4 * 0, ptr1, true);
+        },
+        __wbg___wbindgen_boolean_get_fa956cfa2d1bd751: function(arg0) {
+            const v = arg0;
+            const ret = typeof(v) === 'boolean' ? v : undefined;
+            return isLikeNone(ret) ? 0xFFFFFF : ret ? 1 : 0;
+        },
+        __wbg___wbindgen_debug_string_c25d447a39f5578f: function(arg0, arg1) {
+            const ret = debugString(arg1);
+            const ptr1 = passStringToWasm0(ret, wasm.__wbindgen_malloc, wasm.__wbindgen_realloc);
+            const len1 = WASM_VECTOR_LEN;
+            getDataViewMemory0().setInt32(arg0 + 4 * 1, len1, true);
+            getDataViewMemory0().setInt32(arg0 + 4 * 0, ptr1, true);
+        },
+        __wbg___wbindgen_in_aca499c5de7ff5e5: function(arg0, arg1) {
+            const ret = arg0 in arg1;
+            return ret;
+        },
+        __wbg___wbindgen_is_function_1ff95bcc5517c252: function(arg0) {
+            const ret = typeof(arg0) === 'function';
+            return ret;
+        },
+        __wbg___wbindgen_is_object_a27215656b807791: function(arg0) {
+            const val = arg0;
+            const ret = typeof(val) === 'object' && val !== null;
+            return ret;
+        },
+        __wbg___wbindgen_is_undefined_c05833b95a3cf397: function(arg0) {
+            const ret = arg0 === undefined;
+            return ret;
+        },
+        __wbg___wbindgen_jsval_loose_eq_db4c3b15f63fc170: function(arg0, arg1) {
+            const ret = arg0 == arg1;
+            return ret;
+        },
+        __wbg___wbindgen_number_get_394265ed1e1b84ee: function(arg0, arg1) {
+            const obj = arg1;
+            const ret = typeof(obj) === 'number' ? obj : undefined;
+            getDataViewMemory0().setFloat64(arg0 + 8 * 1, isLikeNone(ret) ? 0 : ret, true);
+            getDataViewMemory0().setInt32(arg0 + 4 * 0, !isLikeNone(ret), true);
+        },
+        __wbg___wbindgen_string_get_b0ca35b86a603356: function(arg0, arg1) {
+            const obj = arg1;
+            const ret = typeof(obj) === 'string' ? obj : undefined;
+            var ptr1 = isLikeNone(ret) ? 0 : passStringToWasm0(ret, wasm.__wbindgen_malloc, wasm.__wbindgen_realloc);
+            var len1 = WASM_VECTOR_LEN;
+            getDataViewMemory0().setInt32(arg0 + 4 * 1, len1, true);
+            getDataViewMemory0().setInt32(arg0 + 4 * 0, ptr1, true);
+        },
+        __wbg___wbindgen_throw_344f42d3211c4765: function(arg0, arg1) {
+            throw new Error(getStringFromWasm0(arg0, arg1));
+        },
+        __wbg_call_8a2dd23819f8a60a: function() { return handleError(function (arg0, arg1) {
+            const ret = arg0.call(arg1);
+            return ret;
+        }, arguments); },
+        __wbg_call_a6e5c5dce5018821: function() { return handleError(function (arg0, arg1, arg2) {
+            const ret = arg0.call(arg1, arg2);
+            return ret;
+        }, arguments); },
+        __wbg_done_89b2b13e91a60321: function(arg0) {
+            const ret = arg0.done;
+            return ret;
+        },
+        __wbg_error_a6fa202b58aa1cd3: function(arg0, arg1) {
+            let deferred0_0;
+            let deferred0_1;
+            try {
+                deferred0_0 = arg0;
+                deferred0_1 = arg1;
+                console.error(getStringFromWasm0(arg0, arg1));
+            } finally {
+                wasm.__wbindgen_free(deferred0_0, deferred0_1, 1);
+            }
+        },
+        __wbg_get_c7eb1f358a7654df: function() { return handleError(function (arg0, arg1) {
+            const ret = Reflect.get(arg0, arg1);
+            return ret;
+        }, arguments); },
+        __wbg_get_unchecked_6e0ad6d2a41b06f6: function(arg0, arg1) {
+            const ret = arg0[arg1 >>> 0];
+            return ret;
+        },
+        __wbg_get_with_ref_key_6412cf3094599694: function(arg0, arg1) {
+            const ret = arg0[arg1];
+            return ret;
+        },
+        __wbg_instanceof_ArrayBuffer_4480b9e0068a8adb: function(arg0) {
+            let result;
+            try {
+                result = arg0 instanceof ArrayBuffer;
+            } catch (_) {
+                result = false;
+            }
+            const ret = result;
+            return ret;
+        },
+        __wbg_instanceof_Uint8Array_309b927aaf7a3fc7: function(arg0) {
+            let result;
+            try {
+                result = arg0 instanceof Uint8Array;
+            } catch (_) {
+                result = false;
+            }
+            const ret = result;
+            return ret;
+        },
+        __wbg_isArray_0677c962b281d01a: function(arg0) {
+            const ret = Array.isArray(arg0);
+            return ret;
+        },
+        __wbg_iterator_6f722e4a93058b71: function() {
+            const ret = Symbol.iterator;
+            return ret;
+        },
+        __wbg_length_1f0964f4a5e2c6d8: function(arg0) {
+            const ret = arg0.length;
+            return ret;
+        },
+        __wbg_length_370319915dc99107: function(arg0) {
+            const ret = arg0.length;
+            return ret;
+        },
+        __wbg_new_227d7c05414eb861: function() {
+            const ret = new Error();
+            return ret;
+        },
+        __wbg_new_32b398fb48b6d94a: function() {
+            const ret = new Array();
+            return ret;
+        },
+        __wbg_new_cd45aabdf6073e84: function(arg0) {
+            const ret = new Uint8Array(arg0);
+            return ret;
+        },
+        __wbg_new_da52cf8fe3429cb2: function() {
+            const ret = new Object();
+            return ret;
+        },
+        __wbg_next_6dbf2c0ac8cde20f: function(arg0) {
+            const ret = arg0.next;
+            return ret;
+        },
+        __wbg_next_71f2aa1cb3d1e37e: function() { return handleError(function (arg0) {
+            const ret = arg0.next();
+            return ret;
+        }, arguments); },
+        __wbg_prototypesetcall_4770620bbe4688a0: function(arg0, arg1, arg2) {
+            Uint8Array.prototype.set.call(getArrayU8FromWasm0(arg0, arg1), arg2);
+        },
+        __wbg_push_d2ae3af0c1217ae6: function(arg0, arg1) {
+            const ret = arg0.push(arg1);
+            return ret;
+        },
+        __wbg_set_6be42768c690e380: function(arg0, arg1, arg2) {
+            arg0[arg1] = arg2;
+        },
+        __wbg_stack_3b0d974bbf31e44f: function(arg0, arg1) {
+            const ret = arg1.stack;
+            const ptr1 = passStringToWasm0(ret, wasm.__wbindgen_malloc, wasm.__wbindgen_realloc);
+            const len1 = WASM_VECTOR_LEN;
+            getDataViewMemory0().setInt32(arg0 + 4 * 1, len1, true);
+            getDataViewMemory0().setInt32(arg0 + 4 * 0, ptr1, true);
+        },
+        __wbg_value_a5d5488a9589444a: function(arg0) {
+            const ret = arg0.value;
+            return ret;
+        },
+        __wbindgen_cast_0000000000000001: function(arg0, arg1) {
+            // Cast intrinsic for `Ref(String) -> Externref`.
+            const ret = getStringFromWasm0(arg0, arg1);
+            return ret;
+        },
+        __wbindgen_init_externref_table: function() {
+            const table = wasm.__wbindgen_externrefs;
+            const offset = table.grow(4);
+            table.set(0, undefined);
+            table.set(offset + 0, undefined);
+            table.set(offset + 1, null);
+            table.set(offset + 2, true);
+            table.set(offset + 3, false);
+        },
+    };
+    return {
+        __proto__: null,
+        "./root_identity_wasm_bg.js": import0,
+    };
+}
+
+function addToExternrefTable0(obj) {
+    const idx = wasm.__externref_table_alloc();
+    wasm.__wbindgen_externrefs.set(idx, obj);
+    return idx;
+}
+
+function debugString(val) {
+    // primitive types
+    const type = typeof val;
+    if (type == 'number' || type == 'boolean' || val == null) {
+        return  `${val}`;
+    }
+    if (type == 'string') {
+        return `"${val}"`;
+    }
+    if (type == 'symbol') {
+        const description = val.description;
+        if (description == null) {
+            return 'Symbol';
+        } else {
+            return `Symbol(${description})`;
+        }
+    }
+    if (type == 'function') {
+        const name = val.name;
+        if (typeof name == 'string' && name.length > 0) {
+            return `Function(${name})`;
+        } else {
+            return 'Function';
+        }
+    }
+    // objects
+    if (Array.isArray(val)) {
+        const length = val.length;
+        let debug = '[';
+        if (length > 0) {
+            debug += debugString(val[0]);
+        }
+        for(let i = 1; i < length; i++) {
+            debug += ', ' + debugString(val[i]);
+        }
+        debug += ']';
+        return debug;
+    }
+    // Test for built-in
+    const builtInMatches = /\[object ([^\]]+)\]/.exec(toString.call(val));
+    let className;
+    if (builtInMatches && builtInMatches.length > 1) {
+        className = builtInMatches[1];
+    } else {
+        // Failed to match the standard '[object ClassName]'
+        return toString.call(val);
+    }
+    if (className == 'Object') {
+        // we're a user defined class or Object
+        // JSON.stringify avoids problems with cycles, and is generally much
+        // easier than looping through ownProperties of `val`.
+        try {
+            return 'Object(' + JSON.stringify(val) + ')';
+        } catch (_) {
+            return 'Object';
+        }
+    }
+    // errors
+    if (val instanceof Error) {
+        return `${val.name}: ${val.message}\n${val.stack}`;
+    }
+    // TODO we could test for more things here, like `Set`s and `Map`s.
+    return className;
+}
+
+function getArrayU8FromWasm0(ptr, len) {
+    ptr = ptr >>> 0;
+    return getUint8ArrayMemory0().subarray(ptr / 1, ptr / 1 + len);
+}
+
+let cachedDataViewMemory0 = null;
+function getDataViewMemory0() {
+    if (cachedDataViewMemory0 === null || cachedDataViewMemory0.buffer.detached === true || (cachedDataViewMemory0.buffer.detached === undefined && cachedDataViewMemory0.buffer !== wasm.memory.buffer)) {
+        cachedDataViewMemory0 = new DataView(wasm.memory.buffer);
+    }
+    return cachedDataViewMemory0;
+}
+
+function getStringFromWasm0(ptr, len) {
+    return decodeText(ptr >>> 0, len);
+}
+
+let cachedUint8ArrayMemory0 = null;
+function getUint8ArrayMemory0() {
+    if (cachedUint8ArrayMemory0 === null || cachedUint8ArrayMemory0.byteLength === 0) {
+        cachedUint8ArrayMemory0 = new Uint8Array(wasm.memory.buffer);
+    }
+    return cachedUint8ArrayMemory0;
+}
+
+function handleError(f, args) {
+    try {
+        return f.apply(this, args);
+    } catch (e) {
+        const idx = addToExternrefTable0(e);
+        wasm.__wbindgen_exn_store(idx);
+    }
+}
+
+function isLikeNone(x) {
+    return x === undefined || x === null;
+}
+
+function passStringToWasm0(arg, malloc, realloc) {
+    if (realloc === undefined) {
+        const buf = cachedTextEncoder.encode(arg);
+        const ptr = malloc(buf.length, 1) >>> 0;
+        getUint8ArrayMemory0().subarray(ptr, ptr + buf.length).set(buf);
+        WASM_VECTOR_LEN = buf.length;
+        return ptr;
+    }
+
+    let len = arg.length;
+    let ptr = malloc(len, 1) >>> 0;
+
+    const mem = getUint8ArrayMemory0();
+
+    let offset = 0;
+
+    for (; offset < len; offset++) {
+        const code = arg.charCodeAt(offset);
+        if (code > 0x7F) break;
+        mem[ptr + offset] = code;
+    }
+    if (offset !== len) {
+        if (offset !== 0) {
+            arg = arg.slice(offset);
+        }
+        ptr = realloc(ptr, len, len = offset + arg.length * 3, 1) >>> 0;
+        const view = getUint8ArrayMemory0().subarray(ptr + offset, ptr + len);
+        const ret = cachedTextEncoder.encodeInto(arg, view);
+
+        offset += ret.written;
+        ptr = realloc(ptr, len, offset, 1) >>> 0;
+    }
+
+    WASM_VECTOR_LEN = offset;
+    return ptr;
+}
+
+function takeFromExternrefTable0(idx) {
+    const value = wasm.__wbindgen_externrefs.get(idx);
+    wasm.__externref_table_dealloc(idx);
+    return value;
+}
+
+let cachedTextDecoder = new TextDecoder('utf-8', { ignoreBOM: true, fatal: true });
+cachedTextDecoder.decode();
+function decodeText(ptr, len) {
+    return cachedTextDecoder.decode(getUint8ArrayMemory0().subarray(ptr, ptr + len));
+}
+
+const cachedTextEncoder = new TextEncoder();
+
+if (!('encodeInto' in cachedTextEncoder)) {
+    cachedTextEncoder.encodeInto = function (arg, view) {
+        const buf = cachedTextEncoder.encode(arg);
+        view.set(buf);
+        return {
+            read: arg.length,
+            written: buf.length
+        };
+    };
+}
+
+let WASM_VECTOR_LEN = 0;
+
+const wasmPath = `${__dirname}/root_identity_wasm_bg.wasm`;
+const wasmBytes = require('fs').readFileSync(wasmPath);
+const wasmModule = new WebAssembly.Module(wasmBytes);
+let wasmInstance = new WebAssembly.Instance(wasmModule, __wbg_get_imports());
+let wasm = wasmInstance.exports;
+wasm.__wbindgen_start();

package/rust/pkg-node/root_identity_wasm_bg.wasm.d.ts

@@ -0,0 +1,13 @@
+/* tslint:disable */
+/* eslint-disable */
+export const memory: WebAssembly.Memory;
+export const init: () => void;
+export const verify_ownership_proof_wasm: (a: any, b: any) => [number, number, number];
+export const __wbindgen_malloc: (a: number, b: number) => number;
+export const __wbindgen_realloc: (a: number, b: number, c: number, d: number) => number;
+export const __wbindgen_exn_store: (a: number) => void;
+export const __externref_table_alloc: () => number;
+export const __wbindgen_externrefs: WebAssembly.Table;
+export const __wbindgen_free: (a: number, b: number, c: number) => void;
+export const __externref_table_dealloc: (a: number) => void;
+export const __wbindgen_start: () => void;