@quantovainc/qcore 0.5.4 → 0.5.6

package/README.md

@@ -134,6 +134,13 @@ Pass `addressBook`, a list of Q1 addresses you trust, in the Client options, and
 a target that shares two or more leading and trailing characters with a known address, eight in all, but is a
 different address. The sending accounts and every target signed for in the session are known as well.
 
+Pass `fetch`, a function with the fetch signature, in the Client options to route every gateway request
+through your own transport, for example one that enforces an address allow list. Without it the Client
+uses the platform fetch, which on Node follows HTTPS_PROXY only when NODE_USE_ENV_PROXY is set. The
+Client refuses to start when NODE_TLS_REJECT_UNAUTHORIZED is 0. Signing calls for one account run one at a
+time across every Client in the process, and each Client keeps its own record of signed nonces, so keep
+one Client per account to have every nonce tracked in one place.
+
 The last argument to a Client signing call, transfer, register, call, or callSignedOrder, is a fee
 ceiling, the most you are ever willing to pay in fees for one transaction. You choose it yourself, as a
 fixed number your app decides on its own, before you sign. The Client reads the gateway's reported fee,

package/index.d.ts

@@ -237,6 +237,7 @@ export interface ClientOptions {
   network?: Network;
   expectedChainId?: string;
   addressBook?: ReadonlyArray<string>;
+  fetch?: (url: string, init: { method: string; headers: Record<string, string>; body: string; signal: AbortSignal; redirect: 'error' }) => Promise<Response>;
 }
 
 export class Client {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@quantovainc/qcore",
-  "version": "0.5.4",
+  "version": "0.5.6",
   "description": "Quantova's post quantum client core for JavaScript. Signs with ML-DSA-65 and builds Q1 addresses.",
   "scripts": {
     "build": "bash scripts/build.sh",

package/pkg/README.md

@@ -134,6 +134,13 @@ Pass `addressBook`, a list of Q1 addresses you trust, in the Client options, and
 a target that shares two or more leading and trailing characters with a known address, eight in all, but is a
 different address. The sending accounts and every target signed for in the session are known as well.
 
+Pass `fetch`, a function with the fetch signature, in the Client options to route every gateway request
+through your own transport, for example one that enforces an address allow list. Without it the Client
+uses the platform fetch, which on Node follows HTTPS_PROXY only when NODE_USE_ENV_PROXY is set. The
+Client refuses to start when NODE_TLS_REJECT_UNAUTHORIZED is 0. Signing calls for one account run one at a
+time across every Client in the process, and each Client keeps its own record of signed nonces, so keep
+one Client per account to have every nonce tracked in one place.
+
 The last argument to a Client signing call, transfer, register, call, or callSignedOrder, is a fee
 ceiling, the most you are ever willing to pay in fees for one transaction. You choose it yourself, as a
 fixed number your app decides on its own, before you sign. The Client reads the gateway's reported fee,

package/pkg/package.json

@@ -2,7 +2,7 @@
   "name": "qcore-js",
   "type": "module",
   "description": "The JavaScript binding for the Quantova client core, generated over QCore with wasm-bindgen. The core does the key derivation, the post quantum signing, and the wire, the page does the fetch.",
-  "version": "0.5.4",
+  "version": "0.5.6",
   "license": "Apache-2.0 OR MIT",
   "repository": {
     "type": "git",

package/pkg/qcore_js_bg.js

@@ -323,7 +323,10 @@ export function chainIdFromName(name) {
     const ptr0 = passStringToWasm0(name, wasm.__wbindgen_malloc, wasm.__wbindgen_realloc);
     const len0 = WASM_VECTOR_LEN;
     const ret = wasm.chainIdFromName(ptr0, len0);
-    return BigInt.asUintN(64, ret);
+    if (ret[2]) {
+        throw takeFromExternrefTable0(ret[1]);
+    }
+    return BigInt.asUintN(64, ret[0]);
 }
 
 /**

package/pkg/qcore_js_bg.wasm.d.ts

@@ -10,7 +10,7 @@ export const block_by_height_body: (a: bigint) => [number, number];
 export const boundedValidUntil: (a: number, b: number, c: bigint, d: bigint, e: number, f: bigint, g: bigint) => [bigint, number, number];
 export const buildSignedOrderCall: (a: bigint, b: number, c: number, d: number, e: number, f: number, g: number, h: bigint, i: bigint, j: bigint, k: number, l: number, m: number, n: number, o: bigint, p: number, q: number, r: bigint, s: bigint, t: bigint) => [number, number, number, number];
 export const buildTypedOrderCall: (a: bigint, b: number, c: number, d: number, e: number, f: number, g: number, h: bigint, i: bigint, j: bigint, k: bigint, l: number, m: number, n: number, o: number, p: bigint, q: bigint, r: bigint) => [number, number, number, number];
-export const chainIdFromName: (a: number, b: number) => bigint;
+export const chainIdFromName: (a: number, b: number) => [bigint, number, number];
 export const checkGatewayJson: (a: number, b: number) => [number, number];
 export const checkOrderExpiry: (a: bigint, b: bigint) => [number, number];
 export const checkValidUntil: (a: bigint, b: bigint) => [number, number];

package/pkg-node/README.md

@@ -134,6 +134,13 @@ Pass `addressBook`, a list of Q1 addresses you trust, in the Client options, and
 a target that shares two or more leading and trailing characters with a known address, eight in all, but is a
 different address. The sending accounts and every target signed for in the session are known as well.
 
+Pass `fetch`, a function with the fetch signature, in the Client options to route every gateway request
+through your own transport, for example one that enforces an address allow list. Without it the Client
+uses the platform fetch, which on Node follows HTTPS_PROXY only when NODE_USE_ENV_PROXY is set. The
+Client refuses to start when NODE_TLS_REJECT_UNAUTHORIZED is 0. Signing calls for one account run one at a
+time across every Client in the process, and each Client keeps its own record of signed nonces, so keep
+one Client per account to have every nonce tracked in one place.
+
 The last argument to a Client signing call, transfer, register, call, or callSignedOrder, is a fee
 ceiling, the most you are ever willing to pay in fees for one transaction. You choose it yourself, as a
 fixed number your app decides on its own, before you sign. The Client reads the gateway's reported fee,

package/pkg-node/package.json

@@ -1,7 +1,7 @@
 {
   "name": "qcore-js",
   "description": "The JavaScript binding for the Quantova client core, generated over QCore with wasm-bindgen. The core does the key derivation, the post quantum signing, and the wire, the page does the fetch.",
-  "version": "0.5.4",
+  "version": "0.5.6",
   "license": "Apache-2.0 OR MIT",
   "repository": {
     "type": "git",

package/pkg-node/qcore_js.js

@@ -334,7 +334,10 @@ function chainIdFromName(name) {
     const ptr0 = passStringToWasm0(name, wasm.__wbindgen_malloc, wasm.__wbindgen_realloc);
     const len0 = WASM_VECTOR_LEN;
     const ret = wasm.chainIdFromName(ptr0, len0);
-    return BigInt.asUintN(64, ret);
+    if (ret[2]) {
+        throw takeFromExternrefTable0(ret[1]);
+    }
+    return BigInt.asUintN(64, ret[0]);
 }
 exports.chainIdFromName = chainIdFromName;
 

package/shared.js

@@ -59,6 +59,20 @@ function wholeNumber(value, label, max) {
   return n;
 }
 
+const ACCOUNT_LOCKS = new Map();
+
+function requireVerifiedTls() {
+  const env = typeof process !== 'undefined' && process && process.env ? process.env : null;
+  if (env && env.NODE_TLS_REJECT_UNAUTHORIZED === '0') {
+    throw new Error('this process has TLS certificate checks turned off with NODE_TLS_REJECT_UNAUTHORIZED=0, refusing to talk to a gateway');
+  }
+}
+
+function shown(value) {
+  const text = String(value).replace(/[\u0000-\u001f\u007f-\u009f\u200b-\u200f\u2028-\u202e\u2066-\u2069\ufeff]/g, '');
+  return text.length > 96 ? text.slice(0, 96) + '...' : text;
+}
+
 function coreArg(kind, label, value) {
   if (kind === 'text') {
     if (typeof value !== 'string') throw new Error(`the ${label} must be a string`);
@@ -343,7 +357,10 @@ function makeClient(core) {
       this._session = new core.SigningSession(book);
       this._pinnedChainName = null;
       this._headFloor = null;
-      this._locks = new Map();
+      if (opts.fetch != null && typeof opts.fetch !== 'function') throw new Error('the fetch option must be a function with the fetch signature');
+      this._fetch = opts.fetch || ((url, init) => fetch(url, init));
+      requireVerifiedTls();
+      this._locks = ACCOUNT_LOCKS;
       for (const name of ['transfer', 'register', 'call', 'assetCall', 'payableCall']) {
         const inner = this[name].bind(this);
         this[name] = (seed, index, ...rest) => {
@@ -392,18 +409,18 @@ function makeClient(core) {
       const mainnet = isMainnetChain(name);
       if (configured) {
         if (name !== configured) {
-          throw new Error(`the gateway reports chain ${name} but this client is configured for ${configured}; refusing to sign a transaction that would be valid on a network you did not choose`);
+          throw new Error(`the gateway reports chain ${shown(name)} but this client is configured for ${configured}; refusing to sign a transaction that would be valid on a network you did not choose`);
         }
       } else if (isPublicChain(name) && !(mainnet && this.acknowledgeMainnet)) {
-        throw new Error(`the gateway reports the public chain ${name} but this client was opened for an unnamed network; configure the testnet or mainnet network before signing for it`);
+        throw new Error(`the gateway reports the public chain ${shown(name)} but this client was opened for an unnamed network; configure the testnet or mainnet network before signing for it`);
       }
       if (mainnet && !this.acknowledgeMainnet) {
-        throw new Error(`the gateway reports the mainnet chain ${name}; refusing to sign a mainnet transaction without acknowledgeMainnet`);
+        throw new Error(`the gateway reports the mainnet chain ${shown(name)}; refusing to sign a mainnet transaction without acknowledgeMainnet`);
       }
       if (this._pinnedChainName === null) {
         this._pinnedChainName = name;
       } else if (this._pinnedChainName !== name) {
-        throw new Error(`the gateway reported chain ${this._pinnedChainName} earlier and now reports ${name}; refusing to sign, the endpoint is not naming one network`);
+        throw new Error(`the gateway reported chain ${shown(this._pinnedChainName)} earlier and now reports ${shown(name)}; refusing to sign, the endpoint is not naming one network`);
       }
       return BigInt(core.chainIdFromName(name));
     }
@@ -412,7 +429,7 @@ function makeClient(core) {
       const controller = new AbortController();
       const timer = setTimeout(() => controller.abort(), TIMEOUT_MS);
       try {
-        const res = await fetch(this.base + '/v1/' + method, {
+        const res = await this._fetch(this.base + '/v1/' + method, {
           method: 'POST',
           headers: { 'Content-Type': 'application/json' },
           body: body || '{}',
@@ -425,7 +442,7 @@ function makeClient(core) {
         try { data = JSON.parse(text); } catch { throw new Error('the node returned a non JSON response'); }
         if (res.status !== 200) {
           const detail = data && typeof data === 'object' ? (data.message || data.error) : null;
-          throw new Error(detail || ('status ' + res.status));
+          throw new Error(detail ? shown(detail) : ('status ' + res.status));
         }
         return data;
       } finally {
@@ -441,7 +458,7 @@ function makeClient(core) {
         throw new Error(`the gateway answered about ${address} without naming the account, refusing to trust it`);
       }
       if (acct.address !== address) {
-        throw new Error(`the gateway answered for ${acct.address} when asked about ${address}, refusing to trust it`);
+        throw new Error(`the gateway answered for ${shown(acct.address)} when asked about ${address}, refusing to trust it`);
       }
       return acct;
     }
@@ -469,7 +486,7 @@ function makeClient(core) {
       for (const [key, slot] of slots) this._session.signed(key, slot);
       const outcome = await this.submit(txHex);
       const verdict = outcome && outcome.verdict;
-      if (verdict !== 'accepted' && verdict !== 'rejected') throw new Error(`unknown verdict ${verdict}`);
+      if (verdict !== 'accepted' && verdict !== 'rejected') throw new Error(`unknown verdict ${shown(verdict)}`);
       for (const [key, slot] of slots) this._session.outcome(key, slot, verdict === 'accepted');
       return outcome;
     }

package/shared.mjs

@@ -59,6 +59,20 @@ function wholeNumber(value, label, max) {
   return n;
 }
 
+const ACCOUNT_LOCKS = new Map();
+
+function requireVerifiedTls() {
+  const env = typeof process !== 'undefined' && process && process.env ? process.env : null;
+  if (env && env.NODE_TLS_REJECT_UNAUTHORIZED === '0') {
+    throw new Error('this process has TLS certificate checks turned off with NODE_TLS_REJECT_UNAUTHORIZED=0, refusing to talk to a gateway');
+  }
+}
+
+function shown(value) {
+  const text = String(value).replace(/[\u0000-\u001f\u007f-\u009f\u200b-\u200f\u2028-\u202e\u2066-\u2069\ufeff]/g, '');
+  return text.length > 96 ? text.slice(0, 96) + '...' : text;
+}
+
 function coreArg(kind, label, value) {
   if (kind === 'text') {
     if (typeof value !== 'string') throw new Error(`the ${label} must be a string`);
@@ -343,7 +357,10 @@ function makeClient(core) {
       this._session = new core.SigningSession(book);
       this._pinnedChainName = null;
       this._headFloor = null;
-      this._locks = new Map();
+      if (opts.fetch != null && typeof opts.fetch !== 'function') throw new Error('the fetch option must be a function with the fetch signature');
+      this._fetch = opts.fetch || ((url, init) => fetch(url, init));
+      requireVerifiedTls();
+      this._locks = ACCOUNT_LOCKS;
       for (const name of ['transfer', 'register', 'call', 'assetCall', 'payableCall']) {
         const inner = this[name].bind(this);
         this[name] = (seed, index, ...rest) => {
@@ -392,18 +409,18 @@ function makeClient(core) {
       const mainnet = isMainnetChain(name);
       if (configured) {
         if (name !== configured) {
-          throw new Error(`the gateway reports chain ${name} but this client is configured for ${configured}; refusing to sign a transaction that would be valid on a network you did not choose`);
+          throw new Error(`the gateway reports chain ${shown(name)} but this client is configured for ${configured}; refusing to sign a transaction that would be valid on a network you did not choose`);
         }
       } else if (isPublicChain(name) && !(mainnet && this.acknowledgeMainnet)) {
-        throw new Error(`the gateway reports the public chain ${name} but this client was opened for an unnamed network; configure the testnet or mainnet network before signing for it`);
+        throw new Error(`the gateway reports the public chain ${shown(name)} but this client was opened for an unnamed network; configure the testnet or mainnet network before signing for it`);
       }
       if (mainnet && !this.acknowledgeMainnet) {
-        throw new Error(`the gateway reports the mainnet chain ${name}; refusing to sign a mainnet transaction without acknowledgeMainnet`);
+        throw new Error(`the gateway reports the mainnet chain ${shown(name)}; refusing to sign a mainnet transaction without acknowledgeMainnet`);
       }
       if (this._pinnedChainName === null) {
         this._pinnedChainName = name;
       } else if (this._pinnedChainName !== name) {
-        throw new Error(`the gateway reported chain ${this._pinnedChainName} earlier and now reports ${name}; refusing to sign, the endpoint is not naming one network`);
+        throw new Error(`the gateway reported chain ${shown(this._pinnedChainName)} earlier and now reports ${shown(name)}; refusing to sign, the endpoint is not naming one network`);
       }
       return BigInt(core.chainIdFromName(name));
     }
@@ -412,7 +429,7 @@ function makeClient(core) {
       const controller = new AbortController();
       const timer = setTimeout(() => controller.abort(), TIMEOUT_MS);
       try {
-        const res = await fetch(this.base + '/v1/' + method, {
+        const res = await this._fetch(this.base + '/v1/' + method, {
           method: 'POST',
           headers: { 'Content-Type': 'application/json' },
           body: body || '{}',
@@ -425,7 +442,7 @@ function makeClient(core) {
         try { data = JSON.parse(text); } catch { throw new Error('the node returned a non JSON response'); }
         if (res.status !== 200) {
           const detail = data && typeof data === 'object' ? (data.message || data.error) : null;
-          throw new Error(detail || ('status ' + res.status));
+          throw new Error(detail ? shown(detail) : ('status ' + res.status));
         }
         return data;
       } finally {
@@ -441,7 +458,7 @@ function makeClient(core) {
         throw new Error(`the gateway answered about ${address} without naming the account, refusing to trust it`);
       }
       if (acct.address !== address) {
-        throw new Error(`the gateway answered for ${acct.address} when asked about ${address}, refusing to trust it`);
+        throw new Error(`the gateway answered for ${shown(acct.address)} when asked about ${address}, refusing to trust it`);
       }
       return acct;
     }
@@ -469,7 +486,7 @@ function makeClient(core) {
       for (const [key, slot] of slots) this._session.signed(key, slot);
       const outcome = await this.submit(txHex);
       const verdict = outcome && outcome.verdict;
-      if (verdict !== 'accepted' && verdict !== 'rejected') throw new Error(`unknown verdict ${verdict}`);
+      if (verdict !== 'accepted' && verdict !== 'rejected') throw new Error(`unknown verdict ${shown(verdict)}`);
       for (const [key, slot] of slots) this._session.outcome(key, slot, verdict === 'accepted');
       return outcome;
     }