@x1id/resolve 0.19.0 → 0.19.1

package/dist/adminMarket.d.ts

@@ -44,9 +44,20 @@ export declare const NAMESPACE_MAX_LEN = 16;
 export type NamespaceStatus = "Active" | "Paused" | "Retired";
 export interface CreateNamespaceParams {
     readonly programId: AddressLike;
-    /** admin — signs AND pays rent; writable. */
-    readonly admin: AddressLike;
+    /** The creator — signs AND pays rent + the creation fee; writable.
+     *  Permissionless: any wallet, not an admin. (Was mis-named `admin` and
+     *  built with too few accounts, so the ix failed AccountNotEnoughKeys 3005 —
+     *  W169.) */
+    readonly payer: AddressLike;
     readonly config: AddressLike;
+    /** `Config.treasury` — receives the creation fee; writable. */
+    readonly treasury: AddressLike;
+    /** The creator's chosen payout wallet, recorded on the namespace for future
+     *  75% primary/secondary cuts. An arbitrary pubkey; never signs. */
+    readonly creatorPayout: AddressLike;
+    /** `["reserved_namespace", label]` PDA — the denylist shadow the handler
+     *  refuses creation against if it exists; read-only, never written. */
+    readonly reserved: AddressLike;
     /** `["namespace", label]` PDA — init, writable. */
     readonly namespace: AddressLike;
     /** Canonical ASCII label (a-z 0-9 -), 1..=16 bytes — an instruction ARG. */

package/dist/adminMarket.js

@@ -111,9 +111,14 @@ export function buildCreateNamespaceIx(p) {
         throw new Error(`label must be 1..=${NAMESPACE_MAX_LEN} chars`);
     }
     const data = concat([CREATE_NAMESPACE_DISCRIMINATOR, borshString(p.label)]);
+    // Account order matches the program's `CreateNamespace` context exactly:
+    // payer, config, treasury, creator_payout, reserved, namespace, system.
     const keys = [
-        { pubkey: toBase58(p.admin, "admin"), isSigner: true, isWritable: true },
+        { pubkey: toBase58(p.payer, "payer"), isSigner: true, isWritable: true },
         { pubkey: toBase58(p.config, "config"), isSigner: false, isWritable: false },
+        { pubkey: toBase58(p.treasury, "treasury"), isSigner: false, isWritable: true },
+        { pubkey: toBase58(p.creatorPayout, "creatorPayout"), isSigner: false, isWritable: false },
+        { pubkey: toBase58(p.reserved, "reserved"), isSigner: false, isWritable: false },
         { pubkey: toBase58(p.namespace, "namespace"), isSigner: false, isWritable: true },
         { pubkey: toBase58(p.systemProgram ?? SYSTEM_PROGRAM_ID, "systemProgram"), isSigner: false, isWritable: false },
     ];

package/dist/base58.js

@@ -65,5 +65,13 @@ export function decodeBase58_32(s) {
         out[i] = Number(n & 255n);
         n >>= 8n;
     }
+    // W167: reject anything that isn't the canonical base58 of EXACTLY these 32
+    // bytes. Without this, a short valid-base58 string ("notakey") decodes to a
+    // small number and is silently LEFT-PADDED into a bogus 32-byte "address",
+    // so builders / sign-in / resolve / MCP prepare_register accept garbage as a
+    // pubkey. The round-trip also correctly accepts a real key with leading zero
+    // bytes (encodeBase58 re-emits its leading '1's).
+    if (encodeBase58(out) !== s)
+        return null;
     return out;
 }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@x1id/resolve",
-  "version": "0.19.0",
+  "version": "0.19.1",
   "description": "Resolve @handles and X1NS names on X1. Never silently picks between namespaces.",
   "type": "module",
   "main": "./dist/index.js",