@quantovainc/qcore 0.1.24 → 0.1.26

package/index.d.ts

@@ -197,6 +197,25 @@ export class Client {
     meterLimit: number | bigint,
     maxFeeQuon: string | bigint,
   ): Promise<TransferResult>;
+  assetCall(
+    seedHex: string,
+    index: number,
+    target: string,
+    argsHex: string,
+    assetIssuer: string,
+    amount: string | bigint,
+    meterLimit: number | bigint,
+    maxFeeQuon: string | bigint,
+  ): Promise<TransferResult>;
+  payableCall(
+    seedHex: string,
+    index: number,
+    target: string,
+    argsHex: string,
+    value: string | bigint,
+    meterLimit: number | bigint,
+    maxFeeQuon: string | bigint,
+  ): Promise<TransferResult>;
   contractNonce(contract: string, signerHex: string): Promise<bigint>;
   contractScalar(contract: string, slot: number | bigint): Promise<bigint>;
   callSignedOrder(

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@quantovainc/qcore",
-  "version": "0.1.24",
+  "version": "0.1.26",
   "description": "Quantova's post quantum client core for JavaScript. Signs with ML-DSA-65 and builds Q1 addresses.",
   "scripts": {
     "build": "bash scripts/build.sh",

package/shared.js

@@ -35,6 +35,39 @@ function accountIndex(index) {
   return i;
 }
 
+// The nonce is the one signing input that comes from the gateway. A number above 2^53 has already
+// lost precision when read, and a negative or oversized value would wrap into a different unsigned
+// 64 bit nonce at the signer, so each is refused before it is bound into a signature.
+function accountNonce(nonce) {
+  if (typeof nonce === 'number' && !Number.isSafeInteger(nonce)) {
+    throw new Error('the gateway reported a nonce outside the safe integer range, a number that large silently rounds and would sign a different nonce');
+  }
+  let n;
+  try {
+    n = BigInt(nonce);
+  } catch {
+    throw new Error('the gateway reported a nonce that is not a whole number');
+  }
+  if (n < 0n || n > 0xffffffffffffffffn) {
+    throw new Error('the gateway reported a nonce outside the unsigned 64 bit range');
+  }
+  return n;
+}
+
+function gatewayFee(fee) {
+  if (typeof fee === 'number' && !Number.isSafeInteger(fee)) {
+    throw new Error('the gateway reported a fee outside the safe integer range, a number that large silently rounds and would sign a different fee');
+  }
+  let f;
+  try {
+    f = BigInt(fee);
+  } catch {
+    throw new Error('the gateway reported a fee that is not a whole number');
+  }
+  if (f < 0n) throw new Error('the gateway reported a negative fee');
+  return f;
+}
+
 async function readBounded(res) {
   if (!res.body || typeof res.body.getReader !== 'function') {
     const header = res.headers.get('content-length');
@@ -188,6 +221,7 @@ function makeClient(core) {
     _signingChainId(info) {
       const name = info && info.chain_id;
       if (!name) throw new Error('the gateway did not report a chain id to bind the signature to');
+      if (typeof name !== 'string') throw new Error('the gateway reported a chain id that is not a string, refusing to bind a signature to it');
       const id = BigInt(core.chainIdFromName(name));
       const configured = this.network && this.network.chainId;
       if (configured && name !== configured) {
@@ -252,14 +286,14 @@ function makeClient(core) {
       const chainId = this._signingChainId(info);
       const fee = info && info.fee && info.fee.transfer_quon;
       if (fee == null) throw new Error('the gateway did not report a transfer fee');
-      if (BigInt(fee) > ceiling) {
+      if (gatewayFee(fee) > ceiling) {
         throw new Error(`the gateway fee ${fee} is above the maximum you allowed ${maxFeeQuon}, refusing to sign`);
       }
       const from = core.address(seedHex, accountIndex(index));
       const acct = await this.account(from);
       if (!acct || acct.nonce == null) throw new Error('the gateway did not report a nonce');
       const signed = JSON.parse(
-        core.sign_transfer(seedHex, accountIndex(index), to, String(amount), BigInt(acct.nonce), String(fee), chainId)
+        core.sign_transfer(seedHex, accountIndex(index), to, String(amount), accountNonce(acct.nonce), String(fee), chainId)
       );
       const outcome = await this.submit(signed.tx_hex);
       return { signed, outcome };
@@ -272,13 +306,13 @@ function makeClient(core) {
       const chainId = this._signingChainId(info);
       const fee = info && info.fee && info.fee.transfer_quon;
       if (fee == null) throw new Error('the gateway did not report a transfer fee');
-      if (BigInt(fee) > ceiling) {
+      if (gatewayFee(fee) > ceiling) {
         throw new Error(`the gateway fee ${fee} is above the maximum you allowed ${maxFeeQuon}, refusing to sign`);
       }
       const from = core.address(seedHex, accountIndex(index));
       const acct = await this.account(from);
       if (!acct || acct.nonce == null) throw new Error('the gateway did not report a nonce');
-      const signed = JSON.parse(core.signRegister(seedHex, accountIndex(index), BigInt(acct.nonce), String(fee), chainId));
+      const signed = JSON.parse(core.signRegister(seedHex, accountIndex(index), accountNonce(acct.nonce), String(fee), chainId));
       const outcome = await this.submit(signed.tx_hex);
       return { signed, outcome };
     }
@@ -291,14 +325,59 @@ function makeClient(core) {
       const chainId = this._signingChainId(info);
       const fee = info && info.fee && info.fee.transfer_quon;
       if (fee == null) throw new Error('the gateway did not report a transfer fee');
-      if (BigInt(fee) > ceiling) {
+      if (gatewayFee(fee) > ceiling) {
+        throw new Error(`the gateway fee ${fee} is above the maximum you allowed ${maxFeeQuon}, refusing to sign`);
+      }
+      const from = core.address(seedHex, accountIndex(index));
+      const acct = await this.account(from);
+      if (!acct || acct.nonce == null) throw new Error('the gateway did not report a nonce');
+      const signed = JSON.parse(
+        core.sign_call(seedHex, accountIndex(index), target, argsHex, accountNonce(acct.nonce), BigInt(meterLimit), String(fee), chainId)
+      );
+      const outcome = await this.submit(signed.tx_hex);
+      return { signed, outcome };
+    }
+
+    async assetCall(seedHex, index, target, argsHex, assetIssuer, amount, meterLimit, maxFeeQuon) {
+      if (!core.valid_address(target)) throw new Error('the target is not a q1 address');
+      if (!core.valid_address(assetIssuer)) throw new Error('the asset issuer is not a q1 address');
+      checkAmount(amount);
+      const ceiling = feeCeiling(maxFeeQuon);
+      const info = await this.nodeInfo();
+      this._guardMainnet();
+      const chainId = this._signingChainId(info);
+      const fee = info && info.fee && info.fee.transfer_quon;
+      if (fee == null) throw new Error('the gateway did not report a transfer fee');
+      if (gatewayFee(fee) > ceiling) {
+        throw new Error(`the gateway fee ${fee} is above the maximum you allowed ${maxFeeQuon}, refusing to sign`);
+      }
+      const from = core.address(seedHex, accountIndex(index));
+      const acct = await this.account(from);
+      if (!acct || acct.nonce == null) throw new Error('the gateway did not report a nonce');
+      const signed = JSON.parse(
+        core.signAssetCall(seedHex, accountIndex(index), target, argsHex, assetIssuer, String(amount), accountNonce(acct.nonce), BigInt(meterLimit), String(fee), chainId)
+      );
+      const outcome = await this.submit(signed.tx_hex);
+      return { signed, outcome };
+    }
+
+    async payableCall(seedHex, index, target, argsHex, value, meterLimit, maxFeeQuon) {
+      if (!core.valid_address(target)) throw new Error('the target is not a q1 address');
+      checkAmount(value);
+      const ceiling = feeCeiling(maxFeeQuon);
+      const info = await this.nodeInfo();
+      this._guardMainnet();
+      const chainId = this._signingChainId(info);
+      const fee = info && info.fee && info.fee.transfer_quon;
+      if (fee == null) throw new Error('the gateway did not report a transfer fee');
+      if (gatewayFee(fee) > ceiling) {
         throw new Error(`the gateway fee ${fee} is above the maximum you allowed ${maxFeeQuon}, refusing to sign`);
       }
       const from = core.address(seedHex, accountIndex(index));
       const acct = await this.account(from);
       if (!acct || acct.nonce == null) throw new Error('the gateway did not report a nonce');
       const signed = JSON.parse(
-        core.sign_call(seedHex, accountIndex(index), target, argsHex, BigInt(acct.nonce), BigInt(meterLimit), String(fee), chainId)
+        core.signPayableCall(seedHex, accountIndex(index), target, argsHex, accountNonce(acct.nonce), BigInt(meterLimit), String(fee), String(value), chainId)
       );
       const outcome = await this.submit(signed.tx_hex);
       return { signed, outcome };
@@ -322,7 +401,7 @@ function makeClient(core) {
       const chainId = this._signingChainId(info);
       const fee = info && info.fee && info.fee.transfer_quon;
       if (fee == null) throw new Error('the gateway did not report a transfer fee');
-      if (BigInt(fee) > ceiling) {
+      if (gatewayFee(fee) > ceiling) {
         throw new Error(`the gateway fee ${fee} is above the maximum you allowed ${maxFeeQuon}, refusing to sign`);
       }
       const signer = core.orderSigner(ownerSeedHex, accountIndex(ownerIndex));
@@ -343,7 +422,7 @@ function makeClient(core) {
       const acct = await this.account(from);
       if (!acct || acct.nonce == null) throw new Error('the gateway did not report a nonce');
       const signed = JSON.parse(
-        core.sign_call(callerSeedHex, accountIndex(callerIndex), contract, order.call_args, BigInt(acct.nonce), BigInt(meterLimit), String(fee), chainId)
+        core.sign_call(callerSeedHex, accountIndex(callerIndex), contract, order.call_args, accountNonce(acct.nonce), BigInt(meterLimit), String(fee), chainId)
       );
       const outcome = await this.submit(signed.tx_hex);
       return { order, signed, outcome };