@quantovainc/qcore 0.2.1 → 0.2.3

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@quantovainc/qcore",
-  "version": "0.2.1",
+  "version": "0.2.3",
   "description": "Quantova's post quantum client core for JavaScript. Signs with ML-DSA-65 and builds Q1 addresses.",
   "scripts": {
     "build": "bash scripts/build.sh",

package/pkg/package.json

@@ -2,7 +2,7 @@
   "name": "qcore-js",
   "type": "module",
   "description": "The JavaScript binding for the Quantova client core, generated over QCore with wasm-bindgen. The core does the key derivation, the post quantum signing, and the wire, the page does the fetch.",
-  "version": "0.2.1",
+  "version": "0.2.3",
   "license": "Apache-2.0 OR MIT",
   "repository": {
     "type": "git",

package/pkg-node/package.json

@@ -1,7 +1,7 @@
 {
   "name": "qcore-js",
   "description": "The JavaScript binding for the Quantova client core, generated over QCore with wasm-bindgen. The core does the key derivation, the post quantum signing, and the wire, the page does the fetch.",
-  "version": "0.2.1",
+  "version": "0.2.3",
   "license": "Apache-2.0 OR MIT",
   "repository": {
     "type": "git",

package/shared.js

@@ -63,6 +63,7 @@ const VALIDITY_BLOCKS = 300n;
 const MAX_PLAUSIBLE_HEAD = 1n << 40n;
 const HEAD_BLOCKS_PER_SEC = 4n;
 const HEAD_SLACK_SECS = 60n;
+const GENESIS_FLOOR_SECS = 1735689600n;
 const U64_MAX = 0xffffffffffffffffn;
 const U128_MAX = (1n << 128n) - 1n;
 
@@ -435,9 +436,6 @@ function makeClient(core) {
         const next = BigInt(used) + 1n;
         const local = this._nextNonces.get(key);
         if (local == null || local < next) this._nextNonces.set(key, next);
-      } else if (verdict === 'rejected') {
-        const held = this._signedNonces && this._signedNonces.get(key);
-        if (held) held.delete(String(used));
       }
     }
 
@@ -445,6 +443,10 @@ function makeClient(core) {
       const until = validUntil(info);
       const head = until - VALIDITY_BLOCKS;
       const now = BigInt(Math.floor(Date.now() / 1000));
+      if (now > GENESIS_FLOOR_SECS) {
+        const maxHead = (now - GENESIS_FLOOR_SECS + HEAD_SLACK_SECS) * HEAD_BLOCKS_PER_SEC;
+        if (head > maxHead) throw new Error(`the gateway reports head ${head} further ahead than wall-clock time allows, refusing to sign`);
+      }
       if (this._headFloor) {
         const { height, at } = this._headFloor;
         if (head < height) throw new Error(`the gateway reports head ${head} below the ${height} it reported earlier, refusing to sign`);

package/shared.mjs

@@ -63,6 +63,7 @@ const VALIDITY_BLOCKS = 300n;
 const MAX_PLAUSIBLE_HEAD = 1n << 40n;
 const HEAD_BLOCKS_PER_SEC = 4n;
 const HEAD_SLACK_SECS = 60n;
+const GENESIS_FLOOR_SECS = 1735689600n;
 const U64_MAX = 0xffffffffffffffffn;
 const U128_MAX = (1n << 128n) - 1n;
 
@@ -435,9 +436,6 @@ function makeClient(core) {
         const next = BigInt(used) + 1n;
         const local = this._nextNonces.get(key);
         if (local == null || local < next) this._nextNonces.set(key, next);
-      } else if (verdict === 'rejected') {
-        const held = this._signedNonces && this._signedNonces.get(key);
-        if (held) held.delete(String(used));
       }
     }
 
@@ -445,6 +443,10 @@ function makeClient(core) {
       const until = validUntil(info);
       const head = until - VALIDITY_BLOCKS;
       const now = BigInt(Math.floor(Date.now() / 1000));
+      if (now > GENESIS_FLOOR_SECS) {
+        const maxHead = (now - GENESIS_FLOOR_SECS + HEAD_SLACK_SECS) * HEAD_BLOCKS_PER_SEC;
+        if (head > maxHead) throw new Error(`the gateway reports head ${head} further ahead than wall-clock time allows, refusing to sign`);
+      }
       if (this._headFloor) {
         const { height, at } = this._headFloor;
         if (head < height) throw new Error(`the gateway reports head ${head} below the ${height} it reported earlier, refusing to sign`);