@quantovainc/qcore 0.5.6 → 0.5.7

package/README.md

@@ -155,7 +155,10 @@ than you intended.
 This comparison lives in the Client and only in the Client. The raw core.* signing functions, such as
 core.sign_transfer, take the actual fee that goes on the wire, not a ceiling, and do no gateway
 comparison at all. A developer who calls core.* directly has no fee cap, so reach for the Client whenever
-a gateway you do not control reports the fee.
+a gateway you do not control reports the fee. The raw signing functions also take the validity deadline
+ready made and do not compare it with the chain head, so call core.checkValidUntil with a head you trust
+first. A SigningSession reserves each nonce it hands out until it is signed, and a flow that stops early
+frees its nonce with release.
 
 A contract call pays one transfer fee for every started 1210 units of its meter limit, and the chain
 refuses a call that pays less. The raw call signers, core.sign_call, core.signPayableCall, and

package/index.d.ts

@@ -212,6 +212,8 @@ export interface SigningSession {
   rememberAddress(address: string): void;
   checkTarget(address: string): void;
   slot(key: string, reported: bigint, expected: bigint | undefined, order: boolean): bigint;
+  release(key: string, slot: bigint): void;
+  releasePending(key: string): void;
   signed(key: string, slot: bigint): void;
   outcome(key: string, slot: bigint, accepted: boolean): void;
   nextNonce(key: string): bigint | undefined;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@quantovainc/qcore",
-  "version": "0.5.6",
+  "version": "0.5.7",
   "description": "Quantova's post quantum client core for JavaScript. Signs with ML-DSA-65 and builds Q1 addresses.",
   "scripts": {
     "build": "bash scripts/build.sh",

package/pkg/README.md

@@ -155,7 +155,10 @@ than you intended.
 This comparison lives in the Client and only in the Client. The raw core.* signing functions, such as
 core.sign_transfer, take the actual fee that goes on the wire, not a ceiling, and do no gateway
 comparison at all. A developer who calls core.* directly has no fee cap, so reach for the Client whenever
-a gateway you do not control reports the fee.
+a gateway you do not control reports the fee. The raw signing functions also take the validity deadline
+ready made and do not compare it with the chain head, so call core.checkValidUntil with a head you trust
+first. A SigningSession reserves each nonce it hands out until it is signed, and a flow that stops early
+frees its nonce with release.
 
 A contract call pays one transfer fee for every started 1210 units of its meter limit, and the chain
 refuses a call that pays less. The raw call signers, core.sign_call, core.signPayableCall, and

package/pkg/package.json

@@ -2,7 +2,7 @@
   "name": "qcore-js",
   "type": "module",
   "description": "The JavaScript binding for the Quantova client core, generated over QCore with wasm-bindgen. The core does the key derivation, the post quantum signing, and the wire, the page does the fetch.",
-  "version": "0.5.6",
+  "version": "0.5.7",
   "license": "Apache-2.0 OR MIT",
   "repository": {
     "type": "git",

package/pkg/qcore_js.d.ts

@@ -9,6 +9,8 @@ export class SigningSession {
     constructor(book: string[]);
     nextNonce(key: string): bigint | undefined;
     outcome(key: string, slot: bigint, accepted: boolean): void;
+    release(key: string, slot: bigint): void;
+    releasePending(key: string): void;
     rememberAddress(address: string): void;
     signed(key: string, slot: bigint): void;
     slot(key: string, reported: bigint, expected: bigint | null | undefined, order: boolean): bigint;

package/pkg/qcore_js_bg.js

@@ -65,6 +65,23 @@ export class SigningSession {
         const len0 = WASM_VECTOR_LEN;
         wasm.signingsession_outcome(this.__wbg_ptr, ptr0, len0, slot, accepted);
     }
+    /**
+     * @param {string} key
+     * @param {bigint} slot
+     */
+    release(key, slot) {
+        const ptr0 = passStringToWasm0(key, wasm.__wbindgen_malloc, wasm.__wbindgen_realloc);
+        const len0 = WASM_VECTOR_LEN;
+        wasm.signingsession_release(this.__wbg_ptr, ptr0, len0, slot);
+    }
+    /**
+     * @param {string} key
+     */
+    releasePending(key) {
+        const ptr0 = passStringToWasm0(key, wasm.__wbindgen_malloc, wasm.__wbindgen_realloc);
+        const len0 = WASM_VECTOR_LEN;
+        wasm.signingsession_releasePending(this.__wbg_ptr, ptr0, len0);
+    }
     /**
      * @param {string} address
      */

package/pkg/qcore_js_bg.wasm.d.ts

@@ -46,6 +46,8 @@ export const signingsession_isHeld: (a: number, b: number, c: number, d: bigint)
 export const signingsession_new: (a: number, b: number) => [number, number, number];
 export const signingsession_nextNonce: (a: number, b: number, c: number) => [number, bigint];
 export const signingsession_outcome: (a: number, b: number, c: number, d: bigint, e: number) => void;
+export const signingsession_release: (a: number, b: number, c: number, d: bigint) => void;
+export const signingsession_releasePending: (a: number, b: number, c: number) => void;
 export const signingsession_rememberAddress: (a: number, b: number, c: number) => void;
 export const signingsession_signed: (a: number, b: number, c: number, d: bigint) => void;
 export const signingsession_slot: (a: number, b: number, c: number, d: bigint, e: number, f: bigint, g: number) => [bigint, number, number];

package/pkg-node/README.md

@@ -155,7 +155,10 @@ than you intended.
 This comparison lives in the Client and only in the Client. The raw core.* signing functions, such as
 core.sign_transfer, take the actual fee that goes on the wire, not a ceiling, and do no gateway
 comparison at all. A developer who calls core.* directly has no fee cap, so reach for the Client whenever
-a gateway you do not control reports the fee.
+a gateway you do not control reports the fee. The raw signing functions also take the validity deadline
+ready made and do not compare it with the chain head, so call core.checkValidUntil with a head you trust
+first. A SigningSession reserves each nonce it hands out until it is signed, and a flow that stops early
+frees its nonce with release.
 
 A contract call pays one transfer fee for every started 1210 units of its meter limit, and the chain
 refuses a call that pays less. The raw call signers, core.sign_call, core.signPayableCall, and

package/pkg-node/package.json

@@ -1,7 +1,7 @@
 {
   "name": "qcore-js",
   "description": "The JavaScript binding for the Quantova client core, generated over QCore with wasm-bindgen. The core does the key derivation, the post quantum signing, and the wire, the page does the fetch.",
-  "version": "0.5.6",
+  "version": "0.5.7",
   "license": "Apache-2.0 OR MIT",
   "repository": {
     "type": "git",

package/pkg-node/qcore_js.d.ts

@@ -9,6 +9,8 @@ export class SigningSession {
     constructor(book: string[]);
     nextNonce(key: string): bigint | undefined;
     outcome(key: string, slot: bigint, accepted: boolean): void;
+    release(key: string, slot: bigint): void;
+    releasePending(key: string): void;
     rememberAddress(address: string): void;
     signed(key: string, slot: bigint): void;
     slot(key: string, reported: bigint, expected: bigint | null | undefined, order: boolean): bigint;

package/pkg-node/qcore_js.js

@@ -67,6 +67,23 @@ class SigningSession {
         const len0 = WASM_VECTOR_LEN;
         wasm.signingsession_outcome(this.__wbg_ptr, ptr0, len0, slot, accepted);
     }
+    /**
+     * @param {string} key
+     * @param {bigint} slot
+     */
+    release(key, slot) {
+        const ptr0 = passStringToWasm0(key, wasm.__wbindgen_malloc, wasm.__wbindgen_realloc);
+        const len0 = WASM_VECTOR_LEN;
+        wasm.signingsession_release(this.__wbg_ptr, ptr0, len0, slot);
+    }
+    /**
+     * @param {string} key
+     */
+    releasePending(key) {
+        const ptr0 = passStringToWasm0(key, wasm.__wbindgen_malloc, wasm.__wbindgen_realloc);
+        const len0 = WASM_VECTOR_LEN;
+        wasm.signingsession_releasePending(this.__wbg_ptr, ptr0, len0);
+    }
     /**
      * @param {string} address
      */

package/shared.js

@@ -479,6 +479,7 @@ function makeClient(core) {
     async _accountSlot(from, expectedNonce) {
       const acct = await this.account(from);
       const reported = gatewayInteger(acct.nonce, 'nonce');
+      this._session.releasePending(from);
       return BigInt(this._session.slot(from, reported, this._expected(expectedNonce, 'expected nonce'), false));
     }
 
@@ -666,6 +667,7 @@ function makeClient(core) {
       const signer = core.orderSigner(ownerSeed, accountIndex(ownerIndex));
       const orderKey = contract + '/' + signer;
       const reportedOrder = await this.contractNonce(contract, signer);
+      this._session.releasePending(orderKey);
       const nonce = BigInt(this._session.slot(orderKey, reportedOrder, this._expected(expectedOrderNonce, 'expected order nonce'), true));
       if (typeof orderSpec.layoutHash !== 'string') throw new Error('the order spec needs the layout hash the compiler emits for this entry');
       const orderExpiry = wholeNumber(orderSpec.expiry, 'order expiry', U64_MAX);

package/shared.mjs

@@ -479,6 +479,7 @@ function makeClient(core) {
     async _accountSlot(from, expectedNonce) {
       const acct = await this.account(from);
       const reported = gatewayInteger(acct.nonce, 'nonce');
+      this._session.releasePending(from);
       return BigInt(this._session.slot(from, reported, this._expected(expectedNonce, 'expected nonce'), false));
     }
 
@@ -666,6 +667,7 @@ function makeClient(core) {
       const signer = core.orderSigner(ownerSeed, accountIndex(ownerIndex));
       const orderKey = contract + '/' + signer;
       const reportedOrder = await this.contractNonce(contract, signer);
+      this._session.releasePending(orderKey);
       const nonce = BigInt(this._session.slot(orderKey, reportedOrder, this._expected(expectedOrderNonce, 'expected order nonce'), true));
       if (typeof orderSpec.layoutHash !== 'string') throw new Error('the order spec needs the layout hash the compiler emits for this entry');
       const orderExpiry = wholeNumber(orderSpec.expiry, 'order expiry', U64_MAX);