@quantovainc/qcore 0.5.0 → 0.5.2

package/README.md

@@ -231,7 +231,9 @@ the fee cap and the amount guard and never the bare signing functions.
 The raw builds are still reachable on their own subpaths, `@quantovainc/qcore/pkg` for the bundler build
 and `@quantovainc/qcore/pkg-node` for the nodejs build. Those export only the core.* functions, with no
 Client, no fee cap, and no amount guard, and are for an advanced caller who assembles the fee comparison
-alone. The default browser, import, node, and require resolutions never reach them.
+alone. A whole number argument above the u64 range wraps modulo 2^64 in a raw build, so such a caller
+must range check every amount, fee, nonce, and expiry before the call. The default browser, import,
+node, and require resolutions never reach them.
 
 To build both from source, run `npm run build`, which produces the bundler build in `pkg` and the node
 build in `pkg-node`.

package/index.d.ts

@@ -18,6 +18,7 @@ export interface SignedOrder {
 }
 
 export interface OrderLayout {
+  layoutHash: string;
   schemeOff: number | bigint;
   ptrOff: number | bigint;
   expiryOff: number | bigint;
@@ -32,7 +33,14 @@ export interface SignedOrderField {
   value: string;
 }
 
+export interface OrderLayoutField {
+  name: string;
+  type: string;
+  width: number;
+}
+
 export interface SignedOrderSpec {
+  layoutHash: string;
   schemeOff: number | bigint;
   ptrOff: number | bigint;
   expiryOff: number | bigint;
@@ -62,6 +70,7 @@ export interface QCore {
     chain_id: WholeNumber,
     contract: string,
     selector_hex: string,
+    layout_hash_hex: string,
     scheme_off: WholeNumber,
     ptr_off: WholeNumber,
     expiry_off: WholeNumber,
@@ -77,6 +86,7 @@ export interface QCore {
     chain_id: WholeNumber,
     contract: string,
     selector_hex: string,
+    layout_hash_hex: string,
     scheme_off: WholeNumber,
     ptr_off: WholeNumber,
     expiry_off: WholeNumber,
@@ -98,6 +108,11 @@ export interface QCore {
   mnemonicFromSeed(seed: Uint8Array): Uint8Array;
   mnemonicFromSeedText(seed: Uint8Array): string;
   nonceSlotKey(signer_hex: string): string;
+  orderLayoutHash(selector_hex: string, fields_json: string): string;
+  checkOrderExpiry(expiry: WholeNumber, now_secs: WholeNumber): void;
+  verifyFinality(chain_id: WholeNumber, header_hex: string, certificate_hex: string, roster_json: string): string;
+  verifyEvent(event_root_hex: string, leaf_hex: string, steps_json: string): boolean;
+  decodeEvent(leaf_hex: string): string;
   orderSigner(seed: Uint8Array, index: WholeNumber): string;
   parseEvents(response: string): string;
   scalarSlotKey(slot: WholeNumber): string;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@quantovainc/qcore",
-  "version": "0.5.0",
+  "version": "0.5.2",
   "description": "Quantova's post quantum client core for JavaScript. Signs with ML-DSA-65 and builds Q1 addresses.",
   "scripts": {
     "build": "bash scripts/build.sh",

package/pkg/README.md

@@ -231,7 +231,9 @@ the fee cap and the amount guard and never the bare signing functions.
 The raw builds are still reachable on their own subpaths, `@quantovainc/qcore/pkg` for the bundler build
 and `@quantovainc/qcore/pkg-node` for the nodejs build. Those export only the core.* functions, with no
 Client, no fee cap, and no amount guard, and are for an advanced caller who assembles the fee comparison
-alone. The default browser, import, node, and require resolutions never reach them.
+alone. A whole number argument above the u64 range wraps modulo 2^64 in a raw build, so such a caller
+must range check every amount, fee, nonce, and expiry before the call. The default browser, import,
+node, and require resolutions never reach them.
 
 To build both from source, run `npm run build`, which produces the bundler build in `pkg` and the node
 build in `pkg-node`.

package/pkg/package.json

@@ -2,7 +2,7 @@
   "name": "qcore-js",
   "type": "module",
   "description": "The JavaScript binding for the Quantova client core, generated over QCore with wasm-bindgen. The core does the key derivation, the post quantum signing, and the wire, the page does the fetch.",
-  "version": "0.5.0",
+  "version": "0.5.2",
   "license": "Apache-2.0 OR MIT",
   "repository": {
     "type": "git",

package/pkg/qcore_js.d.ts

@@ -26,18 +26,22 @@ export function block_by_height_body(height: bigint): string;
 
 export function boundedValidUntil(chain_name: string, head: bigint, wall_secs: bigint, floor: bigint | null | undefined, floor_age_secs: bigint): bigint;
 
-export function buildSignedOrderCall(chain_id: bigint, contract: string, selector_hex: string, scheme_off: bigint, ptr_off: bigint, expiry_off: bigint, field_offs_csv: string, fields_csv: string, region_off: bigint, owner_seed_bytes: Uint8Array, owner_index: bigint, nonce: bigint, expiry: bigint): string;
+export function buildSignedOrderCall(chain_id: bigint, contract: string, selector_hex: string, layout_hash_hex: string, scheme_off: bigint, ptr_off: bigint, expiry_off: bigint, field_offs_csv: string, fields_csv: string, region_off: bigint, owner_seed_bytes: Uint8Array, owner_index: bigint, nonce: bigint, expiry: bigint): string;
 
-export function buildTypedOrderCall(chain_id: bigint, contract: string, selector_hex: string, scheme_off: bigint, ptr_off: bigint, expiry_off: bigint, region_off: bigint, fields_json: string, owner_seed_bytes: Uint8Array, owner_index: bigint, nonce: bigint, expiry: bigint): string;
+export function buildTypedOrderCall(chain_id: bigint, contract: string, selector_hex: string, layout_hash_hex: string, scheme_off: bigint, ptr_off: bigint, expiry_off: bigint, region_off: bigint, fields_json: string, owner_seed_bytes: Uint8Array, owner_index: bigint, nonce: bigint, expiry: bigint): string;
 
 export function chainIdFromName(name: string): bigint;
 
 export function checkGatewayJson(response: string): void;
 
+export function checkOrderExpiry(expiry: bigint, now_secs: bigint): void;
+
 export function checkValidUntil(valid_until: bigint, head: bigint): void;
 
 export function contractAddress(deployer: string, nonce: bigint): string | undefined;
 
+export function decodeEvent(leaf_hex: string): string;
+
 export function eventsBody(height: bigint): string;
 
 export function genesisSecs(chain_name: string): bigint;
@@ -62,6 +66,8 @@ export function nameKey(label: string): string;
 
 export function nonceSlotKey(signer_hex: string): string;
 
+export function orderLayoutHash(selector_hex: string, fields_json: string): string;
+
 export function orderSigner(seed_bytes: Uint8Array, index: bigint): string;
 
 export function packSymbol(symbol: string): bigint;
@@ -110,6 +116,10 @@ export function valid_address(address: string): boolean;
 
 export function validityBlocks(): bigint;
 
+export function verifyEvent(event_root_hex: string, leaf_hex: string, steps_json: string): boolean;
+
+export function verifyFinality(chain_id: bigint, header_hex: string, certificate_hex: string, roster_json: string): string;
+
 export function vmCallFee(transfer_fee: string, meter_limit: bigint): string;
 
 export function vmDeployAddress(): string;

package/pkg/qcore_js.js

@@ -5,5 +5,5 @@ import { __wbg_set_wasm } from "./qcore_js_bg.js";
 __wbg_set_wasm(wasm);
 wasm.__wbindgen_start();
 export {
-    SigningSession, account_body, address, assetBalanceBody, assetSupplyBody, block_by_height_body, boundedValidUntil, buildSignedOrderCall, buildTypedOrderCall, chainIdFromName, checkGatewayJson, checkValidUntil, contractAddress, eventsBody, genesisSecs, headCeiling, localChainId, lookalikeOf, mainnetChainId, mapAddrWordKey, mapSlotKey, mnemonicFromSeed, mnemonicFromSeedText, nameKey, nonceSlotKey, orderSigner, packSymbol, parseEvents, sameAddress, scalarSlotKey, seedFromMnemonic, seedFromMnemonicBytes, signAssetCall, signPayableCall, signRegister, sign_call, sign_transfer, storageBody, storageValue, submit_body, testnetChainId, testnetChainName, testnetRpcUrl, tokenDecimalsSlot, tokenSymbolSlot, transaction_body, unpackSymbol, valid_address, validityBlocks, vmCallFee, vmDeployAddress
+    SigningSession, account_body, address, assetBalanceBody, assetSupplyBody, block_by_height_body, boundedValidUntil, buildSignedOrderCall, buildTypedOrderCall, chainIdFromName, checkGatewayJson, checkOrderExpiry, checkValidUntil, contractAddress, decodeEvent, eventsBody, genesisSecs, headCeiling, localChainId, lookalikeOf, mainnetChainId, mapAddrWordKey, mapSlotKey, mnemonicFromSeed, mnemonicFromSeedText, nameKey, nonceSlotKey, orderLayoutHash, orderSigner, packSymbol, parseEvents, sameAddress, scalarSlotKey, seedFromMnemonic, seedFromMnemonicBytes, signAssetCall, signPayableCall, signRegister, sign_call, sign_transfer, storageBody, storageValue, submit_body, testnetChainId, testnetChainName, testnetRpcUrl, tokenDecimalsSlot, tokenSymbolSlot, transaction_body, unpackSymbol, valid_address, validityBlocks, verifyEvent, verifyFinality, vmCallFee, vmDeployAddress
 } from "./qcore_js_bg.js";

package/pkg/qcore_js_bg.js

@@ -226,6 +226,7 @@ export function boundedValidUntil(chain_name, head, wall_secs, floor, floor_age_
  * @param {bigint} chain_id
  * @param {string} contract
  * @param {string} selector_hex
+ * @param {string} layout_hash_hex
  * @param {bigint} scheme_off
  * @param {bigint} ptr_off
  * @param {bigint} expiry_off
@@ -238,32 +239,34 @@ export function boundedValidUntil(chain_name, head, wall_secs, floor, floor_age_
  * @param {bigint} expiry
  * @returns {string}
  */
-export function buildSignedOrderCall(chain_id, contract, selector_hex, scheme_off, ptr_off, expiry_off, field_offs_csv, fields_csv, region_off, owner_seed_bytes, owner_index, nonce, expiry) {
-    let deferred7_0;
-    let deferred7_1;
+export function buildSignedOrderCall(chain_id, contract, selector_hex, layout_hash_hex, scheme_off, ptr_off, expiry_off, field_offs_csv, fields_csv, region_off, owner_seed_bytes, owner_index, nonce, expiry) {
+    let deferred8_0;
+    let deferred8_1;
     try {
         const ptr0 = passStringToWasm0(contract, wasm.__wbindgen_malloc, wasm.__wbindgen_realloc);
         const len0 = WASM_VECTOR_LEN;
         const ptr1 = passStringToWasm0(selector_hex, wasm.__wbindgen_malloc, wasm.__wbindgen_realloc);
         const len1 = WASM_VECTOR_LEN;
-        const ptr2 = passStringToWasm0(field_offs_csv, wasm.__wbindgen_malloc, wasm.__wbindgen_realloc);
+        const ptr2 = passStringToWasm0(layout_hash_hex, wasm.__wbindgen_malloc, wasm.__wbindgen_realloc);
         const len2 = WASM_VECTOR_LEN;
-        const ptr3 = passStringToWasm0(fields_csv, wasm.__wbindgen_malloc, wasm.__wbindgen_realloc);
+        const ptr3 = passStringToWasm0(field_offs_csv, wasm.__wbindgen_malloc, wasm.__wbindgen_realloc);
         const len3 = WASM_VECTOR_LEN;
-        const ptr4 = passArray8ToWasm0(owner_seed_bytes, wasm.__wbindgen_malloc);
+        const ptr4 = passStringToWasm0(fields_csv, wasm.__wbindgen_malloc, wasm.__wbindgen_realloc);
         const len4 = WASM_VECTOR_LEN;
-        const ret = wasm.buildSignedOrderCall(chain_id, ptr0, len0, ptr1, len1, scheme_off, ptr_off, expiry_off, ptr2, len2, ptr3, len3, region_off, ptr4, len4, owner_index, nonce, expiry);
-        var ptr6 = ret[0];
-        var len6 = ret[1];
+        const ptr5 = passArray8ToWasm0(owner_seed_bytes, wasm.__wbindgen_malloc);
+        const len5 = WASM_VECTOR_LEN;
+        const ret = wasm.buildSignedOrderCall(chain_id, ptr0, len0, ptr1, len1, ptr2, len2, scheme_off, ptr_off, expiry_off, ptr3, len3, ptr4, len4, region_off, ptr5, len5, owner_index, nonce, expiry);
+        var ptr7 = ret[0];
+        var len7 = ret[1];
         if (ret[3]) {
-            ptr6 = 0; len6 = 0;
+            ptr7 = 0; len7 = 0;
             throw takeFromExternrefTable0(ret[2]);
         }
-        deferred7_0 = ptr6;
-        deferred7_1 = len6;
-        return getStringFromWasm0(ptr6, len6);
+        deferred8_0 = ptr7;
+        deferred8_1 = len7;
+        return getStringFromWasm0(ptr7, len7);
     } finally {
-        wasm.__wbindgen_free(deferred7_0, deferred7_1, 1);
+        wasm.__wbindgen_free(deferred8_0, deferred8_1, 1);
     }
 }
 
@@ -271,6 +274,7 @@ export function buildSignedOrderCall(chain_id, contract, selector_hex, scheme_of
  * @param {bigint} chain_id
  * @param {string} contract
  * @param {string} selector_hex
+ * @param {string} layout_hash_hex
  * @param {bigint} scheme_off
  * @param {bigint} ptr_off
  * @param {bigint} expiry_off
@@ -282,30 +286,32 @@ export function buildSignedOrderCall(chain_id, contract, selector_hex, scheme_of
  * @param {bigint} expiry
  * @returns {string}
  */
-export function buildTypedOrderCall(chain_id, contract, selector_hex, scheme_off, ptr_off, expiry_off, region_off, fields_json, owner_seed_bytes, owner_index, nonce, expiry) {
-    let deferred6_0;
-    let deferred6_1;
+export function buildTypedOrderCall(chain_id, contract, selector_hex, layout_hash_hex, scheme_off, ptr_off, expiry_off, region_off, fields_json, owner_seed_bytes, owner_index, nonce, expiry) {
+    let deferred7_0;
+    let deferred7_1;
     try {
         const ptr0 = passStringToWasm0(contract, wasm.__wbindgen_malloc, wasm.__wbindgen_realloc);
         const len0 = WASM_VECTOR_LEN;
         const ptr1 = passStringToWasm0(selector_hex, wasm.__wbindgen_malloc, wasm.__wbindgen_realloc);
         const len1 = WASM_VECTOR_LEN;
-        const ptr2 = passStringToWasm0(fields_json, wasm.__wbindgen_malloc, wasm.__wbindgen_realloc);
+        const ptr2 = passStringToWasm0(layout_hash_hex, wasm.__wbindgen_malloc, wasm.__wbindgen_realloc);
         const len2 = WASM_VECTOR_LEN;
-        const ptr3 = passArray8ToWasm0(owner_seed_bytes, wasm.__wbindgen_malloc);
+        const ptr3 = passStringToWasm0(fields_json, wasm.__wbindgen_malloc, wasm.__wbindgen_realloc);
         const len3 = WASM_VECTOR_LEN;
-        const ret = wasm.buildTypedOrderCall(chain_id, ptr0, len0, ptr1, len1, scheme_off, ptr_off, expiry_off, region_off, ptr2, len2, ptr3, len3, owner_index, nonce, expiry);
-        var ptr5 = ret[0];
-        var len5 = ret[1];
+        const ptr4 = passArray8ToWasm0(owner_seed_bytes, wasm.__wbindgen_malloc);
+        const len4 = WASM_VECTOR_LEN;
+        const ret = wasm.buildTypedOrderCall(chain_id, ptr0, len0, ptr1, len1, ptr2, len2, scheme_off, ptr_off, expiry_off, region_off, ptr3, len3, ptr4, len4, owner_index, nonce, expiry);
+        var ptr6 = ret[0];
+        var len6 = ret[1];
         if (ret[3]) {
-            ptr5 = 0; len5 = 0;
+            ptr6 = 0; len6 = 0;
             throw takeFromExternrefTable0(ret[2]);
         }
-        deferred6_0 = ptr5;
-        deferred6_1 = len5;
-        return getStringFromWasm0(ptr5, len5);
+        deferred7_0 = ptr6;
+        deferred7_1 = len6;
+        return getStringFromWasm0(ptr6, len6);
     } finally {
-        wasm.__wbindgen_free(deferred6_0, deferred6_1, 1);
+        wasm.__wbindgen_free(deferred7_0, deferred7_1, 1);
     }
 }
 
@@ -332,6 +338,17 @@ export function checkGatewayJson(response) {
     }
 }
 
+/**
+ * @param {bigint} expiry
+ * @param {bigint} now_secs
+ */
+export function checkOrderExpiry(expiry, now_secs) {
+    const ret = wasm.checkOrderExpiry(expiry, now_secs);
+    if (ret[1]) {
+        throw takeFromExternrefTable0(ret[0]);
+    }
+}
+
 /**
  * @param {bigint} valid_until
  * @param {bigint} head
@@ -360,6 +377,31 @@ export function contractAddress(deployer, nonce) {
     return v2;
 }
 
+/**
+ * @param {string} leaf_hex
+ * @returns {string}
+ */
+export function decodeEvent(leaf_hex) {
+    let deferred3_0;
+    let deferred3_1;
+    try {
+        const ptr0 = passStringToWasm0(leaf_hex, wasm.__wbindgen_malloc, wasm.__wbindgen_realloc);
+        const len0 = WASM_VECTOR_LEN;
+        const ret = wasm.decodeEvent(ptr0, len0);
+        var ptr2 = ret[0];
+        var len2 = ret[1];
+        if (ret[3]) {
+            ptr2 = 0; len2 = 0;
+            throw takeFromExternrefTable0(ret[2]);
+        }
+        deferred3_0 = ptr2;
+        deferred3_1 = len2;
+        return getStringFromWasm0(ptr2, len2);
+    } finally {
+        wasm.__wbindgen_free(deferred3_0, deferred3_1, 1);
+    }
+}
+
 /**
  * @param {bigint} height
  * @returns {string}
@@ -562,6 +604,34 @@ export function nonceSlotKey(signer_hex) {
     }
 }
 
+/**
+ * @param {string} selector_hex
+ * @param {string} fields_json
+ * @returns {string}
+ */
+export function orderLayoutHash(selector_hex, fields_json) {
+    let deferred4_0;
+    let deferred4_1;
+    try {
+        const ptr0 = passStringToWasm0(selector_hex, wasm.__wbindgen_malloc, wasm.__wbindgen_realloc);
+        const len0 = WASM_VECTOR_LEN;
+        const ptr1 = passStringToWasm0(fields_json, wasm.__wbindgen_malloc, wasm.__wbindgen_realloc);
+        const len1 = WASM_VECTOR_LEN;
+        const ret = wasm.orderLayoutHash(ptr0, len0, ptr1, len1);
+        var ptr3 = ret[0];
+        var len3 = ret[1];
+        if (ret[3]) {
+            ptr3 = 0; len3 = 0;
+            throw takeFromExternrefTable0(ret[2]);
+        }
+        deferred4_0 = ptr3;
+        deferred4_1 = len3;
+        return getStringFromWasm0(ptr3, len3);
+    } finally {
+        wasm.__wbindgen_free(deferred4_0, deferred4_1, 1);
+    }
+}
+
 /**
  * @param {Uint8Array} seed_bytes
  * @param {bigint} index
@@ -1075,6 +1145,58 @@ export function validityBlocks() {
     return BigInt.asUintN(64, ret);
 }
 
+/**
+ * @param {string} event_root_hex
+ * @param {string} leaf_hex
+ * @param {string} steps_json
+ * @returns {boolean}
+ */
+export function verifyEvent(event_root_hex, leaf_hex, steps_json) {
+    const ptr0 = passStringToWasm0(event_root_hex, wasm.__wbindgen_malloc, wasm.__wbindgen_realloc);
+    const len0 = WASM_VECTOR_LEN;
+    const ptr1 = passStringToWasm0(leaf_hex, wasm.__wbindgen_malloc, wasm.__wbindgen_realloc);
+    const len1 = WASM_VECTOR_LEN;
+    const ptr2 = passStringToWasm0(steps_json, wasm.__wbindgen_malloc, wasm.__wbindgen_realloc);
+    const len2 = WASM_VECTOR_LEN;
+    const ret = wasm.verifyEvent(ptr0, len0, ptr1, len1, ptr2, len2);
+    if (ret[2]) {
+        throw takeFromExternrefTable0(ret[1]);
+    }
+    return ret[0] !== 0;
+}
+
+/**
+ * @param {bigint} chain_id
+ * @param {string} header_hex
+ * @param {string} certificate_hex
+ * @param {string} roster_json
+ * @returns {string}
+ */
+export function verifyFinality(chain_id, header_hex, certificate_hex, roster_json) {
+    let deferred5_0;
+    let deferred5_1;
+    try {
+        const ptr0 = passStringToWasm0(header_hex, wasm.__wbindgen_malloc, wasm.__wbindgen_realloc);
+        const len0 = WASM_VECTOR_LEN;
+        const ptr1 = passStringToWasm0(certificate_hex, wasm.__wbindgen_malloc, wasm.__wbindgen_realloc);
+        const len1 = WASM_VECTOR_LEN;
+        const ptr2 = passStringToWasm0(roster_json, wasm.__wbindgen_malloc, wasm.__wbindgen_realloc);
+        const len2 = WASM_VECTOR_LEN;
+        const ret = wasm.verifyFinality(chain_id, ptr0, len0, ptr1, len1, ptr2, len2);
+        var ptr4 = ret[0];
+        var len4 = ret[1];
+        if (ret[3]) {
+            ptr4 = 0; len4 = 0;
+            throw takeFromExternrefTable0(ret[2]);
+        }
+        deferred5_0 = ptr4;
+        deferred5_1 = len4;
+        return getStringFromWasm0(ptr4, len4);
+    } finally {
+        wasm.__wbindgen_free(deferred5_0, deferred5_1, 1);
+    }
+}
+
 /**
  * @param {string} transfer_fee
  * @param {bigint} meter_limit

package/pkg/qcore_js_bg.wasm.d.ts

@@ -8,12 +8,14 @@ export const assetBalanceBody: (a: number, b: number, c: number, d: number) => [
 export const assetSupplyBody: (a: number, b: number) => [number, number];
 export const block_by_height_body: (a: bigint) => [number, number];
 export const boundedValidUntil: (a: number, b: number, c: bigint, d: bigint, e: number, f: bigint, g: bigint) => [bigint, number, number];
-export const buildSignedOrderCall: (a: bigint, b: number, c: number, d: number, e: number, f: bigint, g: bigint, h: bigint, i: number, j: number, k: number, l: number, m: bigint, n: number, o: number, p: bigint, q: bigint, r: bigint) => [number, number, number, number];
-export const buildTypedOrderCall: (a: bigint, b: number, c: number, d: number, e: number, f: bigint, g: bigint, h: bigint, i: bigint, j: number, k: number, l: number, m: number, n: bigint, o: bigint, p: bigint) => [number, number, number, number];
+export const buildSignedOrderCall: (a: bigint, b: number, c: number, d: number, e: number, f: number, g: number, h: bigint, i: bigint, j: bigint, k: number, l: number, m: number, n: number, o: bigint, p: number, q: number, r: bigint, s: bigint, t: bigint) => [number, number, number, number];
+export const buildTypedOrderCall: (a: bigint, b: number, c: number, d: number, e: number, f: number, g: number, h: bigint, i: bigint, j: bigint, k: bigint, l: number, m: number, n: number, o: number, p: bigint, q: bigint, r: bigint) => [number, number, number, number];
 export const chainIdFromName: (a: number, b: number) => bigint;
 export const checkGatewayJson: (a: number, b: number) => [number, number];
+export const checkOrderExpiry: (a: bigint, b: bigint) => [number, number];
 export const checkValidUntil: (a: bigint, b: bigint) => [number, number];
 export const contractAddress: (a: number, b: number, c: bigint) => [number, number];
+export const decodeEvent: (a: number, b: number) => [number, number, number, number];
 export const eventsBody: (a: bigint) => [number, number];
 export const genesisSecs: (a: number, b: number) => bigint;
 export const headCeiling: (a: number, b: number, c: bigint) => bigint;
@@ -26,6 +28,7 @@ export const mnemonicFromSeed: (a: number, b: number) => [number, number, number
 export const mnemonicFromSeedText: (a: number, b: number) => [number, number, number];
 export const nameKey: (a: number, b: number) => [number, number];
 export const nonceSlotKey: (a: number, b: number) => [number, number, number, number];
+export const orderLayoutHash: (a: number, b: number, c: number, d: number) => [number, number, number, number];
 export const orderSigner: (a: number, b: number, c: bigint) => [number, number, number, number];
 export const packSymbol: (a: number, b: number) => bigint;
 export const parseEvents: (a: number, b: number) => [number, number, number, number];
@@ -58,6 +61,8 @@ export const transaction_body: (a: number, b: number) => [number, number];
 export const unpackSymbol: (a: bigint) => [number, number];
 export const valid_address: (a: number, b: number) => number;
 export const validityBlocks: () => bigint;
+export const verifyEvent: (a: number, b: number, c: number, d: number, e: number, f: number) => [number, number, number];
+export const verifyFinality: (a: bigint, b: number, c: number, d: number, e: number, f: number, g: number) => [number, number, number, number];
 export const vmCallFee: (a: number, b: number, c: bigint) => [number, number, number, number];
 export const vmDeployAddress: () => [number, number];
 export const __wbindgen_malloc: (a: number, b: number) => number;

package/pkg-node/README.md

@@ -231,7 +231,9 @@ the fee cap and the amount guard and never the bare signing functions.
 The raw builds are still reachable on their own subpaths, `@quantovainc/qcore/pkg` for the bundler build
 and `@quantovainc/qcore/pkg-node` for the nodejs build. Those export only the core.* functions, with no
 Client, no fee cap, and no amount guard, and are for an advanced caller who assembles the fee comparison
-alone. The default browser, import, node, and require resolutions never reach them.
+alone. A whole number argument above the u64 range wraps modulo 2^64 in a raw build, so such a caller
+must range check every amount, fee, nonce, and expiry before the call. The default browser, import,
+node, and require resolutions never reach them.
 
 To build both from source, run `npm run build`, which produces the bundler build in `pkg` and the node
 build in `pkg-node`.

package/pkg-node/package.json

@@ -1,7 +1,7 @@
 {
   "name": "qcore-js",
   "description": "The JavaScript binding for the Quantova client core, generated over QCore with wasm-bindgen. The core does the key derivation, the post quantum signing, and the wire, the page does the fetch.",
-  "version": "0.5.0",
+  "version": "0.5.2",
   "license": "Apache-2.0 OR MIT",
   "repository": {
     "type": "git",

package/pkg-node/qcore_js.d.ts

@@ -26,18 +26,22 @@ export function block_by_height_body(height: bigint): string;
 
 export function boundedValidUntil(chain_name: string, head: bigint, wall_secs: bigint, floor: bigint | null | undefined, floor_age_secs: bigint): bigint;
 
-export function buildSignedOrderCall(chain_id: bigint, contract: string, selector_hex: string, scheme_off: bigint, ptr_off: bigint, expiry_off: bigint, field_offs_csv: string, fields_csv: string, region_off: bigint, owner_seed_bytes: Uint8Array, owner_index: bigint, nonce: bigint, expiry: bigint): string;
+export function buildSignedOrderCall(chain_id: bigint, contract: string, selector_hex: string, layout_hash_hex: string, scheme_off: bigint, ptr_off: bigint, expiry_off: bigint, field_offs_csv: string, fields_csv: string, region_off: bigint, owner_seed_bytes: Uint8Array, owner_index: bigint, nonce: bigint, expiry: bigint): string;
 
-export function buildTypedOrderCall(chain_id: bigint, contract: string, selector_hex: string, scheme_off: bigint, ptr_off: bigint, expiry_off: bigint, region_off: bigint, fields_json: string, owner_seed_bytes: Uint8Array, owner_index: bigint, nonce: bigint, expiry: bigint): string;
+export function buildTypedOrderCall(chain_id: bigint, contract: string, selector_hex: string, layout_hash_hex: string, scheme_off: bigint, ptr_off: bigint, expiry_off: bigint, region_off: bigint, fields_json: string, owner_seed_bytes: Uint8Array, owner_index: bigint, nonce: bigint, expiry: bigint): string;
 
 export function chainIdFromName(name: string): bigint;
 
 export function checkGatewayJson(response: string): void;
 
+export function checkOrderExpiry(expiry: bigint, now_secs: bigint): void;
+
 export function checkValidUntil(valid_until: bigint, head: bigint): void;
 
 export function contractAddress(deployer: string, nonce: bigint): string | undefined;
 
+export function decodeEvent(leaf_hex: string): string;
+
 export function eventsBody(height: bigint): string;
 
 export function genesisSecs(chain_name: string): bigint;
@@ -62,6 +66,8 @@ export function nameKey(label: string): string;
 
 export function nonceSlotKey(signer_hex: string): string;
 
+export function orderLayoutHash(selector_hex: string, fields_json: string): string;
+
 export function orderSigner(seed_bytes: Uint8Array, index: bigint): string;
 
 export function packSymbol(symbol: string): bigint;
@@ -110,6 +116,10 @@ export function valid_address(address: string): boolean;
 
 export function validityBlocks(): bigint;
 
+export function verifyEvent(event_root_hex: string, leaf_hex: string, steps_json: string): boolean;
+
+export function verifyFinality(chain_id: bigint, header_hex: string, certificate_hex: string, roster_json: string): string;
+
 export function vmCallFee(transfer_fee: string, meter_limit: bigint): string;
 
 export function vmDeployAddress(): string;

package/pkg-node/qcore_js.js

@@ -235,6 +235,7 @@ exports.boundedValidUntil = boundedValidUntil;
  * @param {bigint} chain_id
  * @param {string} contract
  * @param {string} selector_hex
+ * @param {string} layout_hash_hex
  * @param {bigint} scheme_off
  * @param {bigint} ptr_off
  * @param {bigint} expiry_off
@@ -247,32 +248,34 @@ exports.boundedValidUntil = boundedValidUntil;
  * @param {bigint} expiry
  * @returns {string}
  */
-function buildSignedOrderCall(chain_id, contract, selector_hex, scheme_off, ptr_off, expiry_off, field_offs_csv, fields_csv, region_off, owner_seed_bytes, owner_index, nonce, expiry) {
-    let deferred7_0;
-    let deferred7_1;
+function buildSignedOrderCall(chain_id, contract, selector_hex, layout_hash_hex, scheme_off, ptr_off, expiry_off, field_offs_csv, fields_csv, region_off, owner_seed_bytes, owner_index, nonce, expiry) {
+    let deferred8_0;
+    let deferred8_1;
     try {
         const ptr0 = passStringToWasm0(contract, wasm.__wbindgen_malloc, wasm.__wbindgen_realloc);
         const len0 = WASM_VECTOR_LEN;
         const ptr1 = passStringToWasm0(selector_hex, wasm.__wbindgen_malloc, wasm.__wbindgen_realloc);
         const len1 = WASM_VECTOR_LEN;
-        const ptr2 = passStringToWasm0(field_offs_csv, wasm.__wbindgen_malloc, wasm.__wbindgen_realloc);
+        const ptr2 = passStringToWasm0(layout_hash_hex, wasm.__wbindgen_malloc, wasm.__wbindgen_realloc);
         const len2 = WASM_VECTOR_LEN;
-        const ptr3 = passStringToWasm0(fields_csv, wasm.__wbindgen_malloc, wasm.__wbindgen_realloc);
+        const ptr3 = passStringToWasm0(field_offs_csv, wasm.__wbindgen_malloc, wasm.__wbindgen_realloc);
         const len3 = WASM_VECTOR_LEN;
-        const ptr4 = passArray8ToWasm0(owner_seed_bytes, wasm.__wbindgen_malloc);
+        const ptr4 = passStringToWasm0(fields_csv, wasm.__wbindgen_malloc, wasm.__wbindgen_realloc);
         const len4 = WASM_VECTOR_LEN;
-        const ret = wasm.buildSignedOrderCall(chain_id, ptr0, len0, ptr1, len1, scheme_off, ptr_off, expiry_off, ptr2, len2, ptr3, len3, region_off, ptr4, len4, owner_index, nonce, expiry);
-        var ptr6 = ret[0];
-        var len6 = ret[1];
+        const ptr5 = passArray8ToWasm0(owner_seed_bytes, wasm.__wbindgen_malloc);
+        const len5 = WASM_VECTOR_LEN;
+        const ret = wasm.buildSignedOrderCall(chain_id, ptr0, len0, ptr1, len1, ptr2, len2, scheme_off, ptr_off, expiry_off, ptr3, len3, ptr4, len4, region_off, ptr5, len5, owner_index, nonce, expiry);
+        var ptr7 = ret[0];
+        var len7 = ret[1];
         if (ret[3]) {
-            ptr6 = 0; len6 = 0;
+            ptr7 = 0; len7 = 0;
             throw takeFromExternrefTable0(ret[2]);
         }
-        deferred7_0 = ptr6;
-        deferred7_1 = len6;
-        return getStringFromWasm0(ptr6, len6);
+        deferred8_0 = ptr7;
+        deferred8_1 = len7;
+        return getStringFromWasm0(ptr7, len7);
     } finally {
-        wasm.__wbindgen_free(deferred7_0, deferred7_1, 1);
+        wasm.__wbindgen_free(deferred8_0, deferred8_1, 1);
     }
 }
 exports.buildSignedOrderCall = buildSignedOrderCall;
@@ -281,6 +284,7 @@ exports.buildSignedOrderCall = buildSignedOrderCall;
  * @param {bigint} chain_id
  * @param {string} contract
  * @param {string} selector_hex
+ * @param {string} layout_hash_hex
  * @param {bigint} scheme_off
  * @param {bigint} ptr_off
  * @param {bigint} expiry_off
@@ -292,30 +296,32 @@ exports.buildSignedOrderCall = buildSignedOrderCall;
  * @param {bigint} expiry
  * @returns {string}
  */
-function buildTypedOrderCall(chain_id, contract, selector_hex, scheme_off, ptr_off, expiry_off, region_off, fields_json, owner_seed_bytes, owner_index, nonce, expiry) {
-    let deferred6_0;
-    let deferred6_1;
+function buildTypedOrderCall(chain_id, contract, selector_hex, layout_hash_hex, scheme_off, ptr_off, expiry_off, region_off, fields_json, owner_seed_bytes, owner_index, nonce, expiry) {
+    let deferred7_0;
+    let deferred7_1;
     try {
         const ptr0 = passStringToWasm0(contract, wasm.__wbindgen_malloc, wasm.__wbindgen_realloc);
         const len0 = WASM_VECTOR_LEN;
         const ptr1 = passStringToWasm0(selector_hex, wasm.__wbindgen_malloc, wasm.__wbindgen_realloc);
         const len1 = WASM_VECTOR_LEN;
-        const ptr2 = passStringToWasm0(fields_json, wasm.__wbindgen_malloc, wasm.__wbindgen_realloc);
+        const ptr2 = passStringToWasm0(layout_hash_hex, wasm.__wbindgen_malloc, wasm.__wbindgen_realloc);
         const len2 = WASM_VECTOR_LEN;
-        const ptr3 = passArray8ToWasm0(owner_seed_bytes, wasm.__wbindgen_malloc);
+        const ptr3 = passStringToWasm0(fields_json, wasm.__wbindgen_malloc, wasm.__wbindgen_realloc);
         const len3 = WASM_VECTOR_LEN;
-        const ret = wasm.buildTypedOrderCall(chain_id, ptr0, len0, ptr1, len1, scheme_off, ptr_off, expiry_off, region_off, ptr2, len2, ptr3, len3, owner_index, nonce, expiry);
-        var ptr5 = ret[0];
-        var len5 = ret[1];
+        const ptr4 = passArray8ToWasm0(owner_seed_bytes, wasm.__wbindgen_malloc);
+        const len4 = WASM_VECTOR_LEN;
+        const ret = wasm.buildTypedOrderCall(chain_id, ptr0, len0, ptr1, len1, ptr2, len2, scheme_off, ptr_off, expiry_off, region_off, ptr3, len3, ptr4, len4, owner_index, nonce, expiry);
+        var ptr6 = ret[0];
+        var len6 = ret[1];
         if (ret[3]) {
-            ptr5 = 0; len5 = 0;
+            ptr6 = 0; len6 = 0;
             throw takeFromExternrefTable0(ret[2]);
         }
-        deferred6_0 = ptr5;
-        deferred6_1 = len5;
-        return getStringFromWasm0(ptr5, len5);
+        deferred7_0 = ptr6;
+        deferred7_1 = len6;
+        return getStringFromWasm0(ptr6, len6);
     } finally {
-        wasm.__wbindgen_free(deferred6_0, deferred6_1, 1);
+        wasm.__wbindgen_free(deferred7_0, deferred7_1, 1);
     }
 }
 exports.buildTypedOrderCall = buildTypedOrderCall;
@@ -345,6 +351,18 @@ function checkGatewayJson(response) {
 }
 exports.checkGatewayJson = checkGatewayJson;
 
+/**
+ * @param {bigint} expiry
+ * @param {bigint} now_secs
+ */
+function checkOrderExpiry(expiry, now_secs) {
+    const ret = wasm.checkOrderExpiry(expiry, now_secs);
+    if (ret[1]) {
+        throw takeFromExternrefTable0(ret[0]);
+    }
+}
+exports.checkOrderExpiry = checkOrderExpiry;
+
 /**
  * @param {bigint} valid_until
  * @param {bigint} head
@@ -375,6 +393,32 @@ function contractAddress(deployer, nonce) {
 }
 exports.contractAddress = contractAddress;
 
+/**
+ * @param {string} leaf_hex
+ * @returns {string}
+ */
+function decodeEvent(leaf_hex) {
+    let deferred3_0;
+    let deferred3_1;
+    try {
+        const ptr0 = passStringToWasm0(leaf_hex, wasm.__wbindgen_malloc, wasm.__wbindgen_realloc);
+        const len0 = WASM_VECTOR_LEN;
+        const ret = wasm.decodeEvent(ptr0, len0);
+        var ptr2 = ret[0];
+        var len2 = ret[1];
+        if (ret[3]) {
+            ptr2 = 0; len2 = 0;
+            throw takeFromExternrefTable0(ret[2]);
+        }
+        deferred3_0 = ptr2;
+        deferred3_1 = len2;
+        return getStringFromWasm0(ptr2, len2);
+    } finally {
+        wasm.__wbindgen_free(deferred3_0, deferred3_1, 1);
+    }
+}
+exports.decodeEvent = decodeEvent;
+
 /**
  * @param {bigint} height
  * @returns {string}
@@ -589,6 +633,35 @@ function nonceSlotKey(signer_hex) {
 }
 exports.nonceSlotKey = nonceSlotKey;
 
+/**
+ * @param {string} selector_hex
+ * @param {string} fields_json
+ * @returns {string}
+ */
+function orderLayoutHash(selector_hex, fields_json) {
+    let deferred4_0;
+    let deferred4_1;
+    try {
+        const ptr0 = passStringToWasm0(selector_hex, wasm.__wbindgen_malloc, wasm.__wbindgen_realloc);
+        const len0 = WASM_VECTOR_LEN;
+        const ptr1 = passStringToWasm0(fields_json, wasm.__wbindgen_malloc, wasm.__wbindgen_realloc);
+        const len1 = WASM_VECTOR_LEN;
+        const ret = wasm.orderLayoutHash(ptr0, len0, ptr1, len1);
+        var ptr3 = ret[0];
+        var len3 = ret[1];
+        if (ret[3]) {
+            ptr3 = 0; len3 = 0;
+            throw takeFromExternrefTable0(ret[2]);
+        }
+        deferred4_0 = ptr3;
+        deferred4_1 = len3;
+        return getStringFromWasm0(ptr3, len3);
+    } finally {
+        wasm.__wbindgen_free(deferred4_0, deferred4_1, 1);
+    }
+}
+exports.orderLayoutHash = orderLayoutHash;
+
 /**
  * @param {Uint8Array} seed_bytes
  * @param {bigint} index
@@ -1126,6 +1199,60 @@ function validityBlocks() {
 }
 exports.validityBlocks = validityBlocks;
 
+/**
+ * @param {string} event_root_hex
+ * @param {string} leaf_hex
+ * @param {string} steps_json
+ * @returns {boolean}
+ */
+function verifyEvent(event_root_hex, leaf_hex, steps_json) {
+    const ptr0 = passStringToWasm0(event_root_hex, wasm.__wbindgen_malloc, wasm.__wbindgen_realloc);
+    const len0 = WASM_VECTOR_LEN;
+    const ptr1 = passStringToWasm0(leaf_hex, wasm.__wbindgen_malloc, wasm.__wbindgen_realloc);
+    const len1 = WASM_VECTOR_LEN;
+    const ptr2 = passStringToWasm0(steps_json, wasm.__wbindgen_malloc, wasm.__wbindgen_realloc);
+    const len2 = WASM_VECTOR_LEN;
+    const ret = wasm.verifyEvent(ptr0, len0, ptr1, len1, ptr2, len2);
+    if (ret[2]) {
+        throw takeFromExternrefTable0(ret[1]);
+    }
+    return ret[0] !== 0;
+}
+exports.verifyEvent = verifyEvent;
+
+/**
+ * @param {bigint} chain_id
+ * @param {string} header_hex
+ * @param {string} certificate_hex
+ * @param {string} roster_json
+ * @returns {string}
+ */
+function verifyFinality(chain_id, header_hex, certificate_hex, roster_json) {
+    let deferred5_0;
+    let deferred5_1;
+    try {
+        const ptr0 = passStringToWasm0(header_hex, wasm.__wbindgen_malloc, wasm.__wbindgen_realloc);
+        const len0 = WASM_VECTOR_LEN;
+        const ptr1 = passStringToWasm0(certificate_hex, wasm.__wbindgen_malloc, wasm.__wbindgen_realloc);
+        const len1 = WASM_VECTOR_LEN;
+        const ptr2 = passStringToWasm0(roster_json, wasm.__wbindgen_malloc, wasm.__wbindgen_realloc);
+        const len2 = WASM_VECTOR_LEN;
+        const ret = wasm.verifyFinality(chain_id, ptr0, len0, ptr1, len1, ptr2, len2);
+        var ptr4 = ret[0];
+        var len4 = ret[1];
+        if (ret[3]) {
+            ptr4 = 0; len4 = 0;
+            throw takeFromExternrefTable0(ret[2]);
+        }
+        deferred5_0 = ptr4;
+        deferred5_1 = len4;
+        return getStringFromWasm0(ptr4, len4);
+    } finally {
+        wasm.__wbindgen_free(deferred5_0, deferred5_1, 1);
+    }
+}
+exports.verifyFinality = verifyFinality;
+
 /**
  * @param {string} transfer_fee
  * @param {bigint} meter_limit

package/shared.js

@@ -96,8 +96,13 @@ const CORE_ARGS = {
   sign_call: [['seed', 'seed'], ['u64', 'account index'], ['text', 'target'], ['text', 'call arguments'], ['u64', 'nonce'], ['u64', 'meter limit'], ['u128s', 'fee'], ['u64', 'chain id'], ['u64', 'validity deadline'], ['u128s', 'transfer fee']],
   signPayableCall: [['seed', 'seed'], ['u64', 'account index'], ['text', 'target'], ['text', 'call arguments'], ['u64', 'nonce'], ['u64', 'meter limit'], ['u128s', 'fee'], ['u64s', 'value'], ['u64', 'chain id'], ['u64', 'validity deadline'], ['u128s', 'transfer fee']],
   signAssetCall: [['seed', 'seed'], ['u64', 'account index'], ['text', 'target'], ['text', 'call arguments'], ['text', 'asset issuer'], ['u64s', 'amount'], ['u64', 'nonce'], ['u64', 'meter limit'], ['u128s', 'fee'], ['u64', 'chain id'], ['u64', 'validity deadline'], ['u128s', 'transfer fee']],
-  buildSignedOrderCall: [['u64', 'chain id'], ['text', 'contract'], ['text', 'selector'], ['u64', 'scheme offset'], ['u64', 'pointer offset'], ['u64', 'expiry offset'], ['text', 'field offsets'], ['text', 'fields'], ['u64', 'region offset'], ['seed', 'owner seed'], ['u64', 'owner index'], ['u64', 'order nonce'], ['u64', 'order expiry']],
-  buildTypedOrderCall: [['u64', 'chain id'], ['text', 'contract'], ['text', 'selector'], ['u64', 'scheme offset'], ['u64', 'pointer offset'], ['u64', 'expiry offset'], ['u64', 'region offset'], ['text', 'fields'], ['seed', 'owner seed'], ['u64', 'owner index'], ['u64', 'order nonce'], ['u64', 'order expiry']],
+  buildSignedOrderCall: [['u64', 'chain id'], ['text', 'contract'], ['text', 'selector'], ['text', 'layout hash'], ['u64', 'scheme offset'], ['u64', 'pointer offset'], ['u64', 'expiry offset'], ['text', 'field offsets'], ['text', 'fields'], ['u64', 'region offset'], ['seed', 'owner seed'], ['u64', 'owner index'], ['u64', 'order nonce'], ['u64', 'order expiry']],
+  buildTypedOrderCall: [['u64', 'chain id'], ['text', 'contract'], ['text', 'selector'], ['text', 'layout hash'], ['u64', 'scheme offset'], ['u64', 'pointer offset'], ['u64', 'expiry offset'], ['u64', 'region offset'], ['text', 'fields'], ['seed', 'owner seed'], ['u64', 'owner index'], ['u64', 'order nonce'], ['u64', 'order expiry']],
+  orderLayoutHash: [['text', 'selector'], ['text', 'order layout']],
+  checkOrderExpiry: [['u64', 'order expiry'], ['u64', 'wall clock seconds']],
+  verifyFinality: [['u64', 'chain id'], ['text', 'header'], ['text', 'certificate'], ['text', 'validator roster']],
+  verifyEvent: [['text', 'event root'], ['text', 'event leaf'], ['text', 'proof steps']],
+  decodeEvent: [['text', 'event leaf']],
   contractAddress: [['text', 'deployer'], ['u64', 'nonce']],
   scalarSlotKey: [['u64', 'slot']],
   mapSlotKey: [['u64', 'map domain tag'], ['text', 'key address']],
@@ -337,6 +342,37 @@ function makeClient(core) {
       this._session = new core.SigningSession(book);
       this._pinnedChainName = null;
       this._headFloor = null;
+      this._locks = new Map();
+      for (const name of ['transfer', 'register', 'call', 'assetCall', 'payableCall']) {
+        const inner = this[name].bind(this);
+        this[name] = (seed, index, ...rest) => {
+          let key;
+          try { key = core.address(seed, index); } catch (e) { return inner(seed, index, ...rest); }
+          return this._exclusive([key], () => inner(seed, index, ...rest));
+        };
+      }
+      const order = this.callSignedOrder.bind(this);
+      this.callSignedOrder = (callerSeed, callerIndex, contract, selectorHex, orderSpec, ownerSeed, ownerIndex, ...rest) => {
+        const run = () => order(callerSeed, callerIndex, contract, selectorHex, orderSpec, ownerSeed, ownerIndex, ...rest);
+        let keys;
+        try {
+          keys = [core.address(callerSeed, callerIndex), String(contract) + '/' + core.orderSigner(ownerSeed, ownerIndex)];
+        } catch (e) {
+          return run();
+        }
+        return this._exclusive(keys, run);
+      };
+    }
+
+    _exclusive(keys, fn) {
+      const prior = keys.map((key) => this._locks.get(key) || Promise.resolve());
+      let release;
+      const gate = new Promise((resolve) => { release = resolve; });
+      for (const key of keys) this._locks.set(key, gate);
+      return Promise.all(prior).then(fn).finally(() => {
+        release();
+        for (const key of keys) if (this._locks.get(key) === gate) this._locks.delete(key);
+      });
     }
 
     _guardMainnet() {
@@ -574,6 +610,10 @@ function makeClient(core) {
 
     async _slotValue(contract, key) {
       const resp = await this._call('get_storage_at', JSON.stringify({ address: contract, keys: [key] }), true);
+      const slots = resp && Array.isArray(resp.slots) ? resp.slots : [];
+      if (!slots.some((s) => s && typeof s.slot === 'string' && s.slot.toLowerCase() === String(key).toLowerCase())) {
+        throw new Error('the gateway did not report the requested storage slot');
+      }
       return BigInt(core.storageValue(JSON.stringify(resp), key));
     }
 
@@ -611,10 +651,15 @@ function makeClient(core) {
       const orderKey = contract + '/' + signer;
       const reportedOrder = await this.contractNonce(contract, signer);
       const nonce = BigInt(this._session.slot(orderKey, reportedOrder, this._expected(expectedOrderNonce, 'expected order nonce'), true));
+      if (typeof orderSpec.layoutHash !== 'string') throw new Error('the order spec needs the layout hash the compiler emits for this entry');
+      const orderExpiry = wholeNumber(orderSpec.expiry, 'order expiry', U64_MAX);
+      const nowSecs = BigInt(Math.floor(Date.now() / 1000));
+      core.checkOrderExpiry(orderExpiry, nowSecs);
       const order = JSON.parse(core.buildTypedOrderCall(
         chainId,
         contract,
         selectorHex,
+        orderSpec.layoutHash,
         wholeNumber(orderSpec.schemeOff, 'scheme offset', U64_MAX),
         wholeNumber(orderSpec.ptrOff, 'pointer offset', U64_MAX),
         wholeNumber(orderSpec.expiryOff, 'expiry offset', U64_MAX),

package/shared.mjs

@@ -96,8 +96,13 @@ const CORE_ARGS = {
   sign_call: [['seed', 'seed'], ['u64', 'account index'], ['text', 'target'], ['text', 'call arguments'], ['u64', 'nonce'], ['u64', 'meter limit'], ['u128s', 'fee'], ['u64', 'chain id'], ['u64', 'validity deadline'], ['u128s', 'transfer fee']],
   signPayableCall: [['seed', 'seed'], ['u64', 'account index'], ['text', 'target'], ['text', 'call arguments'], ['u64', 'nonce'], ['u64', 'meter limit'], ['u128s', 'fee'], ['u64s', 'value'], ['u64', 'chain id'], ['u64', 'validity deadline'], ['u128s', 'transfer fee']],
   signAssetCall: [['seed', 'seed'], ['u64', 'account index'], ['text', 'target'], ['text', 'call arguments'], ['text', 'asset issuer'], ['u64s', 'amount'], ['u64', 'nonce'], ['u64', 'meter limit'], ['u128s', 'fee'], ['u64', 'chain id'], ['u64', 'validity deadline'], ['u128s', 'transfer fee']],
-  buildSignedOrderCall: [['u64', 'chain id'], ['text', 'contract'], ['text', 'selector'], ['u64', 'scheme offset'], ['u64', 'pointer offset'], ['u64', 'expiry offset'], ['text', 'field offsets'], ['text', 'fields'], ['u64', 'region offset'], ['seed', 'owner seed'], ['u64', 'owner index'], ['u64', 'order nonce'], ['u64', 'order expiry']],
-  buildTypedOrderCall: [['u64', 'chain id'], ['text', 'contract'], ['text', 'selector'], ['u64', 'scheme offset'], ['u64', 'pointer offset'], ['u64', 'expiry offset'], ['u64', 'region offset'], ['text', 'fields'], ['seed', 'owner seed'], ['u64', 'owner index'], ['u64', 'order nonce'], ['u64', 'order expiry']],
+  buildSignedOrderCall: [['u64', 'chain id'], ['text', 'contract'], ['text', 'selector'], ['text', 'layout hash'], ['u64', 'scheme offset'], ['u64', 'pointer offset'], ['u64', 'expiry offset'], ['text', 'field offsets'], ['text', 'fields'], ['u64', 'region offset'], ['seed', 'owner seed'], ['u64', 'owner index'], ['u64', 'order nonce'], ['u64', 'order expiry']],
+  buildTypedOrderCall: [['u64', 'chain id'], ['text', 'contract'], ['text', 'selector'], ['text', 'layout hash'], ['u64', 'scheme offset'], ['u64', 'pointer offset'], ['u64', 'expiry offset'], ['u64', 'region offset'], ['text', 'fields'], ['seed', 'owner seed'], ['u64', 'owner index'], ['u64', 'order nonce'], ['u64', 'order expiry']],
+  orderLayoutHash: [['text', 'selector'], ['text', 'order layout']],
+  checkOrderExpiry: [['u64', 'order expiry'], ['u64', 'wall clock seconds']],
+  verifyFinality: [['u64', 'chain id'], ['text', 'header'], ['text', 'certificate'], ['text', 'validator roster']],
+  verifyEvent: [['text', 'event root'], ['text', 'event leaf'], ['text', 'proof steps']],
+  decodeEvent: [['text', 'event leaf']],
   contractAddress: [['text', 'deployer'], ['u64', 'nonce']],
   scalarSlotKey: [['u64', 'slot']],
   mapSlotKey: [['u64', 'map domain tag'], ['text', 'key address']],
@@ -337,6 +342,37 @@ function makeClient(core) {
       this._session = new core.SigningSession(book);
       this._pinnedChainName = null;
       this._headFloor = null;
+      this._locks = new Map();
+      for (const name of ['transfer', 'register', 'call', 'assetCall', 'payableCall']) {
+        const inner = this[name].bind(this);
+        this[name] = (seed, index, ...rest) => {
+          let key;
+          try { key = core.address(seed, index); } catch (e) { return inner(seed, index, ...rest); }
+          return this._exclusive([key], () => inner(seed, index, ...rest));
+        };
+      }
+      const order = this.callSignedOrder.bind(this);
+      this.callSignedOrder = (callerSeed, callerIndex, contract, selectorHex, orderSpec, ownerSeed, ownerIndex, ...rest) => {
+        const run = () => order(callerSeed, callerIndex, contract, selectorHex, orderSpec, ownerSeed, ownerIndex, ...rest);
+        let keys;
+        try {
+          keys = [core.address(callerSeed, callerIndex), String(contract) + '/' + core.orderSigner(ownerSeed, ownerIndex)];
+        } catch (e) {
+          return run();
+        }
+        return this._exclusive(keys, run);
+      };
+    }
+
+    _exclusive(keys, fn) {
+      const prior = keys.map((key) => this._locks.get(key) || Promise.resolve());
+      let release;
+      const gate = new Promise((resolve) => { release = resolve; });
+      for (const key of keys) this._locks.set(key, gate);
+      return Promise.all(prior).then(fn).finally(() => {
+        release();
+        for (const key of keys) if (this._locks.get(key) === gate) this._locks.delete(key);
+      });
     }
 
     _guardMainnet() {
@@ -574,6 +610,10 @@ function makeClient(core) {
 
     async _slotValue(contract, key) {
       const resp = await this._call('get_storage_at', JSON.stringify({ address: contract, keys: [key] }), true);
+      const slots = resp && Array.isArray(resp.slots) ? resp.slots : [];
+      if (!slots.some((s) => s && typeof s.slot === 'string' && s.slot.toLowerCase() === String(key).toLowerCase())) {
+        throw new Error('the gateway did not report the requested storage slot');
+      }
       return BigInt(core.storageValue(JSON.stringify(resp), key));
     }
 
@@ -611,10 +651,15 @@ function makeClient(core) {
       const orderKey = contract + '/' + signer;
       const reportedOrder = await this.contractNonce(contract, signer);
       const nonce = BigInt(this._session.slot(orderKey, reportedOrder, this._expected(expectedOrderNonce, 'expected order nonce'), true));
+      if (typeof orderSpec.layoutHash !== 'string') throw new Error('the order spec needs the layout hash the compiler emits for this entry');
+      const orderExpiry = wholeNumber(orderSpec.expiry, 'order expiry', U64_MAX);
+      const nowSecs = BigInt(Math.floor(Date.now() / 1000));
+      core.checkOrderExpiry(orderExpiry, nowSecs);
       const order = JSON.parse(core.buildTypedOrderCall(
         chainId,
         contract,
         selectorHex,
+        orderSpec.layoutHash,
         wholeNumber(orderSpec.schemeOff, 'scheme offset', U64_MAX),
         wholeNumber(orderSpec.ptrOff, 'pointer offset', U64_MAX),
         wholeNumber(orderSpec.expiryOff, 'expiry offset', U64_MAX),