@reallyme/crypto 0.3.9 → 0.3.11

package/dist/wasmProvider.js

@@ -1,8 +1,19 @@
-// SPDX-FileCopyrightText: Copyright © 2026 ReallyMe LLC. All rights reserved
+// SPDX-FileCopyrightText: 2026 ReallyMe LLC
 //
 // SPDX-License-Identifier: MIT OR Apache-2.0
 import { ReallyMeCryptoError } from "./errors.js";
+import { bundledWasmFunctions, verifyBundledWasmModule } from "./verifyBundledWasmModule.js";
 let installedProvider;
+const poisonedModules = new WeakSet();
+const trustedProviders = new WeakSet();
+const isWasmRuntimeError = (error) => {
+    const wasm = Reflect.get(globalThis, "WebAssembly");
+    if (typeof wasm !== "object" || wasm === null) {
+        return false;
+    }
+    const runtimeError = Reflect.get(wasm, "RuntimeError");
+    return typeof runtimeError === "function" && error instanceof runtimeError;
+};
 const requireObject = (module) => {
     if (typeof module !== "object" || module === null) {
         throw new ReallyMeCryptoError("provider-failure");
@@ -10,15 +21,30 @@ const requireObject = (module) => {
     return module;
 };
 const requireFunction = (module, name) => {
-    const candidate = Reflect.get(module, name);
+    let candidate;
+    try {
+        const descriptor = Object.getOwnPropertyDescriptor(module, name);
+        candidate = descriptor?.get === undefined ? descriptor?.value : Reflect.get(module, name);
+    }
+    catch {
+        throw new ReallyMeCryptoError("provider-failure");
+    }
     if (typeof candidate !== "function") {
         throw new ReallyMeCryptoError("provider-failure");
     }
     return (...args) => {
+        if (poisonedModules.has(module)) {
+            throw new ReallyMeCryptoError("provider-failure");
+        }
         try {
             return candidate(...args);
         }
         catch (error) {
+            if (isWasmRuntimeError(error)) {
+                // A trap can leave WASM state inconsistent. All wrappers built from
+                // that module fail closed for the remainder of the process.
+                poisonedModules.add(module);
+            }
             throw new ReallyMeCryptoError(wasmErrorCode(error));
         }
     };
@@ -86,7 +112,8 @@ const rsaPssVerifyFunction = (module, name) => {
     const callable = requireFunction(module, name);
     return (publicKeyDer, publicKeyEncoding, messageHashSuite, mgf1HashSuite, saltLength, message, signature) => callable(publicKeyDer, publicKeyEncoding, messageHashSuite, mgf1HashSuite, saltLength, message, signature);
 };
-export const createReallyMeWasmProvider = (module) => {
+/** Bind callables after the caller establishes module ownership; tests exercise this boundary directly. */
+export const createWasmProviderFromModule = (module) => {
     const providerModule = requireObject(module);
     return {
         processOperationResponse: function1(providerModule, "processOperationResponse"),
@@ -149,6 +176,37 @@ export const createReallyMeWasmProvider = (module) => {
         xWing768Decapsulate: function2(providerModule, "xWing768Decapsulate"),
     };
 };
+/** Build a provider only from the package-owned and initialized WASM module. */
+export const createReallyMeWasmProvider = (module) => {
+    const providerModule = requireObject(module);
+    // Static named imports keep the package-owned glue in the bundler graph.
+    // Compare every callable before global installation so a structural copy
+    // cannot replace a verification hook with a no-op.
+    if (!verifyBundledWasmModule(providerModule)) {
+        throw new ReallyMeCryptoError("provider-failure");
+    }
+    try {
+        // A data-independent call rejects an uninitialized WASM instance before
+        // the install-once slot becomes visible to package-global facades.
+        requireFunction(bundledWasmFunctions, "aes128GcmOpen")(new Uint8Array(0), new Uint8Array(0), new Uint8Array(0), new Uint8Array(0));
+    }
+    catch (error) {
+        if (error instanceof ReallyMeCryptoError && error.code === "invalid-input") {
+            const provider = Object.freeze(createWasmProviderFromModule(bundledWasmFunctions));
+            trustedProviders.add(provider);
+            return provider;
+        }
+        throw new ReallyMeCryptoError("provider-failure");
+    }
+    throw new ReallyMeCryptoError("provider-failure");
+};
+/** A structural copy cannot be used as an explicit facade provider. */
+export const requireTrustedReallyMeWasmProvider = (provider) => {
+    if (!trustedProviders.has(provider)) {
+        throw new ReallyMeCryptoError("provider-failure");
+    }
+    return provider;
+};
 export const installReallyMeWasmProvider = (module) => {
     if (installedProvider !== undefined) {
         throw new ReallyMeCryptoError("provider-failure");

package/dist/x25519.js

@@ -1,4 +1,4 @@
-// SPDX-FileCopyrightText: Copyright © 2026 ReallyMe LLC. All rights reserved
+// SPDX-FileCopyrightText: 2026 ReallyMe LLC
 //
 // SPDX-License-Identifier: MIT OR Apache-2.0
 import { x25519 } from "@noble/curves/ed25519.js";

package/dist/xWing.js

@@ -1,4 +1,4 @@
-// SPDX-FileCopyrightText: Copyright © 2026 ReallyMe LLC. All rights reserved
+// SPDX-FileCopyrightText: 2026 ReallyMe LLC
 //
 // SPDX-License-Identifier: MIT OR Apache-2.0
 import { ReallyMeCryptoError } from "./errors.js";

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@reallyme/crypto",
-  "version": "0.3.9",
+  "version": "0.3.11",
   "description": "ReallyMe crypto SDK for TypeScript/JavaScript with an explicit, pinned provider set.",
   "license": "MIT OR Apache-2.0",
   "repository": {
@@ -48,14 +48,15 @@
     "pack:check": "node scripts/check-pack.mjs",
     "prepack": "npm run build",
     "prepublishOnly": "npm test && npm run pack:check",
-    "typecheck": "tsc --noEmit",
-    "test": "npm run build && node --test \"test/*.test.mjs\""
+    "typecheck": "npm run build:wasm && tsc --noEmit",
+    "test": "npm run build && node --test \"test/*.test.mjs\"",
+    "test:browser": "npm run build && node scripts/browser-wasm-test.mjs"
   },
   "dependencies": {
-    "@bufbuild/protobuf": "2.14.1",
+    "@bufbuild/protobuf": "2.16.0",
     "@noble/curves": "2.4.0",
     "@noble/hashes": "2.4.0",
-    "@reallyme/codec": "0.2.3"
+    "@reallyme/codec": "0.3.0"
   },
   "devDependencies": {
     "typescript": "7.0.2"