@x1id/resolve 0.18.0 → 0.19.1

package/README.md

@@ -564,6 +564,11 @@ const createIx = buildCreateRecordIx({
   programId, payer, owner, handle, record,
   coinType: 60, // ETH, per SLIP-44
   value: ethAddressBytes,
+  // TOKENIZED handle (the default)? pass the holder's NFT associated token
+  // account too, or create_record fails NotCurrentAuthority (6018). The verify
+  // builders below take the same `holderTokenAccount`. Omit for an untokenized
+  // handle. (A delegated writer passes `recordDelegate` instead.)
+  holderTokenAccount, // = getAssociatedTokenAddressSync(nftMint, owner)
 });
 
 // 2. build the challenge and have the wallet sign it (personal_sign)

package/dist/adminMarket.d.ts

@@ -44,9 +44,20 @@ export declare const NAMESPACE_MAX_LEN = 16;
 export type NamespaceStatus = "Active" | "Paused" | "Retired";
 export interface CreateNamespaceParams {
     readonly programId: AddressLike;
-    /** admin — signs AND pays rent; writable. */
-    readonly admin: AddressLike;
+    /** The creator — signs AND pays rent + the creation fee; writable.
+     *  Permissionless: any wallet, not an admin. (Was mis-named `admin` and
+     *  built with too few accounts, so the ix failed AccountNotEnoughKeys 3005 —
+     *  W169.) */
+    readonly payer: AddressLike;
     readonly config: AddressLike;
+    /** `Config.treasury` — receives the creation fee; writable. */
+    readonly treasury: AddressLike;
+    /** The creator's chosen payout wallet, recorded on the namespace for future
+     *  75% primary/secondary cuts. An arbitrary pubkey; never signs. */
+    readonly creatorPayout: AddressLike;
+    /** `["reserved_namespace", label]` PDA — the denylist shadow the handler
+     *  refuses creation against if it exists; read-only, never written. */
+    readonly reserved: AddressLike;
     /** `["namespace", label]` PDA — init, writable. */
     readonly namespace: AddressLike;
     /** Canonical ASCII label (a-z 0-9 -), 1..=16 bytes — an instruction ARG. */

package/dist/adminMarket.js

@@ -111,9 +111,14 @@ export function buildCreateNamespaceIx(p) {
         throw new Error(`label must be 1..=${NAMESPACE_MAX_LEN} chars`);
     }
     const data = concat([CREATE_NAMESPACE_DISCRIMINATOR, borshString(p.label)]);
+    // Account order matches the program's `CreateNamespace` context exactly:
+    // payer, config, treasury, creator_payout, reserved, namespace, system.
     const keys = [
-        { pubkey: toBase58(p.admin, "admin"), isSigner: true, isWritable: true },
+        { pubkey: toBase58(p.payer, "payer"), isSigner: true, isWritable: true },
         { pubkey: toBase58(p.config, "config"), isSigner: false, isWritable: false },
+        { pubkey: toBase58(p.treasury, "treasury"), isSigner: false, isWritable: true },
+        { pubkey: toBase58(p.creatorPayout, "creatorPayout"), isSigner: false, isWritable: false },
+        { pubkey: toBase58(p.reserved, "reserved"), isSigner: false, isWritable: false },
         { pubkey: toBase58(p.namespace, "namespace"), isSigner: false, isWritable: true },
         { pubkey: toBase58(p.systemProgram ?? SYSTEM_PROGRAM_ID, "systemProgram"), isSigner: false, isWritable: false },
     ];

package/dist/base58.js

@@ -65,5 +65,13 @@ export function decodeBase58_32(s) {
         out[i] = Number(n & 255n);
         n >>= 8n;
     }
+    // W167: reject anything that isn't the canonical base58 of EXACTLY these 32
+    // bytes. Without this, a short valid-base58 string ("notakey") decodes to a
+    // small number and is silently LEFT-PADDED into a bogus 32-byte "address",
+    // so builders / sign-in / resolve / MCP prepare_register accept garbage as a
+    // pubkey. The round-trip also correctly accepts a real key with leading zero
+    // bytes (encodeBase58 re-emits its leading '1's).
+    if (encodeBase58(out) !== s)
+        return null;
     return out;
 }

package/dist/recordWrite.d.ts

@@ -83,7 +83,7 @@ export declare function splitBtcSignature(sig65: Uint8Array): {
     header: number;
     signature: Uint8Array;
 };
-export interface CreateRecordParams {
+export interface CreateRecordParams extends RecordEditAuthorityParams {
     readonly programId: AddressLike;
     readonly payer: AddressLike;
     readonly owner: AddressLike;

package/dist/recordWrite.js

@@ -171,6 +171,12 @@ export function buildCreateRecordIx(p) {
         { pubkey: toBase58(p.record, "record"), isSigner: false, isWritable: true },
         { pubkey: SYSTEM_PROGRAM, isSigner: false, isWritable: false },
     ];
+    // W165: create_record uses the same `require_current_authority` check as the
+    // verify builders, so a TOKENIZED handle (the default) needs the holder's NFT
+    // token account (and/or the record-delegate PDA) in the trailing accounts —
+    // without it create_record fails NotCurrentAuthority (6018). This was the one
+    // record builder missing the tail; now it matches buildVerifyRecord*Ix.
+    pushAuthorityTail(keys, p.programId, p);
     return { programId: toBase58(p.programId, "programId"), keys, data };
 }
 export function buildVerifyRecordEthIx(p) {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@x1id/resolve",
-  "version": "0.18.0",
+  "version": "0.19.1",
   "description": "Resolve @handles and X1NS names on X1. Never silently picks between namespaces.",
   "type": "module",
   "main": "./dist/index.js",