@starknetfoundation/krusty-kms-wasm 0.10.0 → 0.12.0

package/krusty_kms_wasm.d.ts

@@ -1007,18 +1007,60 @@ export function decryptWithKey(nonce: string, ciphertext: string, key_hex: strin
 /**
  * Derive an Argent account contract address from a public key.
  *
- * Uses the standard Argent constructor calldata format `(0, public_key, 0)`.
+ * Uses the standard Argent deployment (salt = public key, Starknet-key owner,
+ * no guardian). The constructor calldata follows the class version:
+ * `[0, public_key, 1]` for v0.4.0 and v0.5.0, `[public_key, 0]` for v0.3.x;
+ * `getAccountClassRegistry()` publishes the convention next to each class.
+ *
+ * This is the only Argent deployment a seed phrase reproduces on its own. An
+ * account deployed with a guardian has a different address that discovery
+ * cannot enumerate; once its address is known, feed its `DEPLOY_ACCOUNT`
+ * fields to `inspectAccountDeployment`, or take the guardian from that
+ * calldata and use `deriveArgentAccountAddressWithGuardian`.
  *
  * # Arguments
  * * `public_key` - The Stark public key (hex string)
- * * `class_hash` - Optional custom class hash (hex string). Defaults to the
- *   standard Argent v0.4.0 class hash.
+ * * `class_hash` - Optional class hash (hex string). Defaults to the Argent
+ *   v0.4.0 class hash. The accepted set is the Argent Cairo 1 classes:
+ *   v0.5.0, v0.4.0, v0.3.1 and v0.3.0, which are the `getAccountClassRegistry()`
+ *   entries whose constructor shape is `argent_signer_with_optional_guardian`
+ *   or `argent_owner_guardian_felts`. The Cairo 0 proxy is not accepted: its
+ *   address also depends on the implementation hash, which this export takes
+ *   no argument for, so derive it with `calculateContractAddress` and the
+ *   proxy's own calldata. Any other class hash is rejected, because its
+ *   constructor layout is unknown and an address derived for it could be
+ *   undeployable.
  *
  * # Returns
  * The derived account contract address as hex string
  */
 export function deriveArgentAccountAddress(public_key: string, class_hash?: string | null): string;
 
+/**
+ * Derive an Argent account contract address for an owner **with** a
+ * Starknet-key guardian.
+ *
+ * Salt = public key; constructor calldata `[public_key, guardian]` for
+ * v0.3.x and `[0, public_key, 0, 0, guardian]` for v0.4.0 and v0.5.0. The
+ * guardian is per-account and not derived from the seed, so this cannot find
+ * accounts from a phrase. It verifies an account whose address is already
+ * known: take the guardian from that account's `DEPLOY_ACCOUNT` calldata and
+ * compare the result with the address. Only the deploy-time guardian fixes
+ * the address; an account's current guardian (`get_guardian`) can have been
+ * changed or removed since and reproduces nothing.
+ *
+ * # Arguments
+ * * `public_key` - The owner's Stark public key (hex string)
+ * * `guardian_public_key` - The guardian's Stark public key at deployment
+ *   (hex string). `"0x0"` means no guardian and gives the same address as
+ *   `deriveArgentAccountAddress`
+ * * `class_hash` - Optional class hash, as for `deriveArgentAccountAddress`
+ *
+ * # Returns
+ * The derived account contract address as hex string
+ */
+export function deriveArgentAccountAddressWithGuardian(public_key: string, guardian_public_key: string, class_hash?: string | null): string;
+
 /**
  * Derive a Starknet keypair using old Argent's "double derivation" scheme.
  *
@@ -1056,12 +1098,19 @@ export function deriveArgentLegacyPublicKey(mnemonic: string, address_index: num
 /**
  * Derive a Braavos account contract address from a public key.
  *
- * Uses the standard Braavos constructor calldata format `(public_key)`.
+ * Uses the Braavos base-account deployment: salt = public key, constructor
+ * calldata `[public_key]`. Braavos accounts are deployed with a **base**
+ * class and upgrade themselves to an **implementation** class in the same
+ * transaction, so the address is fixed by the base class alone and the class
+ * an account runs today (`starknet_getClassHashAt`) never reproduces it.
  *
  * # Arguments
  * * `public_key` - The Stark public key (hex string)
- * * `class_hash` - Optional custom class hash (hex string). Defaults to the
- *   standard Braavos v1.0.0 class hash.
+ * * `class_hash` - Optional base class hash (hex string). Defaults to the
+ *   current base class (v1.1.0 and later); the v1.0.0 base class is the other
+ *   accepted value, see `getAccountClassRegistry()` (family `braavos`, role
+ *   `deployment`). A known implementation class or an unrecognised class hash
+ *   is rejected rather than deriving an address no deployment produces.
  *
  * # Returns
  * The derived account contract address as hex string
@@ -1098,7 +1147,7 @@ export function deriveBraavosAccountAddress(public_key: string, class_hash?: str
  * // Use public keys to query Argent's smart account API
  * for (const kp of keypairs) {
  *   const smartAccounts = await argentApi.findAccountsByPublicKey(kp.publicKey);
- *   // smartAccounts contains addresses with server-provided salts
+ *   // smartAccounts contains accounts whose salt was assigned server-side
  * }
  * ```
  */
@@ -1332,12 +1381,10 @@ export function foldStrk20ViewingKey(public_key: string, message_hash: string, r
  *
  * # Why every address, not just the first
  *
- * A wallet type can have several address variants at one index: OpenZeppelin
- * has two salt policies (`salt = public_key` and the legacy `salt = 0`),
- * Argent legacy spans three Cairo 1 class hashes, and Argent Cairo 0 spans
- * four proxy implementations. This is a funds-recovery path, so collapsing to
- * one address per wallet type silently hides deployed accounts — every
- * omitted variant is an account the caller cannot find.
+ * A wallet type has several address variants at one index: two OpenZeppelin
+ * salt policies, two Braavos base classes, four Argent Cairo 1 classes under
+ * each key scheme, four Argent Cairo 0 implementations. This is a
+ * funds-recovery path: collapsing to one address per type hides accounts.
  *
  * # Returns
  * JSON string: `{ "0": { "Braavos": ["0x..."], "OpenZeppelin": ["0x...", "0x..."], ... } }`
@@ -1353,7 +1400,9 @@ export function generateAccountAddresses(mnemonic: string, max_index?: number |
  * This is a pure cryptographic operation — no network calls are made.
  * Each candidate is a possible on-chain account address. To find which
  * ones are actually deployed, check each address via an RPC provider
- * (e.g., `provider.getClassHashAt(address)` in starknet.js).
+ * (e.g., `provider.getClassHashAt(address)` in starknet.js). That call returns
+ * the class the account *runs*, for Braavos always an implementation class,
+ * never the `classHash` derived from; `getAccountClassRegistry()` labels both.
  *
  * # Security
  *
@@ -1373,7 +1422,7 @@ export function generateAccountAddresses(mnemonic: string, max_index?: number |
  * - `publicKey`: hex string
  * - `derivationIndex`: number
  * - `derivationPath`: string (e.g., "m/44'/9004'/0'/0/0")
- * - `classVersion`: string (e.g., "v0.4.0", "braavos-base")
+ * - `classVersion`: string (e.g., "v0.4.0", "base v1.1.0")
  *
  * # Example (JavaScript)
  * ```javascript
@@ -1439,14 +1488,80 @@ export function generateWithdrawProof(account: WasmAccount, params: WasmWithdraw
 /**
  * Get known account class hashes for common Starknet account implementations.
  *
- * Returns a JSON string containing class hashes organized by account type
- * and version, covering OpenZeppelin, Argent, and Braavos accounts.
+ * A flat map of class hashes by family and version label. It does not say
+ * which role a class plays, and that distinction matters: an address is fixed
+ * by the class an account was **deployed** with, while the class it **runs**
+ * today (what a signer must accept) is a different one for every Braavos
+ * account. Prefer `getAccountClassRegistry()`, which labels every entry by
+ * role; this export is kept for callers that rely on its shape.
+ *
+ * Braavos keys: `"1.0.0"` is the historical name of the base (deployment)
+ * class introduced in v1.1.0 and still current; `"base-1.0.0"` is the v1.0.0
+ * base class; `"legacy"` is the v1.0.0 account implementation and
+ * `"account-1.1.0"` / `"account-1.2.0"` the later ones. Only the two base
+ * classes derive addresses.
  *
  * # Returns
- * JSON string with nested object: `{ oz: { ... }, argent: { ... }, braavos: { ... } }`
+ * JSON string with nested object:
+ * `{ oz: { ... }, argent: { ... }, argent_legacy: { ... }, braavos: { ... } }`
  */
 export function getAccountClassHashes(): string;
 
+/**
+ * Every account class this crate knows, labelled by the role it plays.
+ *
+ * A class hash plays one of two roles, and a wallet needs both lists:
+ *
+ * - `deployment`: the class an account is deployed with. It fixes the
+ *   address, so it is the class to **derive from** when looking for an
+ *   account from a seed.
+ * - `implementation`: a class an account's address can report on chain
+ *   (`starknet_getClassHashAt`) and what to **accept when signing**. An entry
+ *   may also have the `deployment` role; only implementation-only entries
+ *   must not be used for address derivation.
+ * - `proxy_target`: the class a proxy delegates to, named in the proxy's
+ *   constructor calldata. It is code the account runs, but no address ever
+ *   reports it, so a signing allowlist must not expect it. These are the
+ *   values the Argent Cairo 0 proxy's `implementation` input takes.
+ *
+ * Braavos accounts are deployed with a base class and upgraded to an
+ * implementation class in the same transaction, so every Braavos account
+ * runs a different class than it was deployed with. Argent and OpenZeppelin
+ * classes play both roles, including the Argent Cairo 0 proxy: an unupgraded
+ * Cairo 0 account reports the proxy's class hash, not its target's.
+ *
+ * # Returns
+ * JSON string: array of objects with fields:
+ * - `family`: "open_zeppelin" | "argent" | "braavos"
+ * - `classHash`: hex string
+ * - `version`: vendor release label (e.g. "1.2.0", "0.4.0", "proxy")
+ * - `label`: human-readable name
+ * - `roles`: array of "deployment" | "implementation" | "proxy_target"
+ * - `constructor`: the class's calldata convention, or `null` for a class
+ *   that is never deployed with. An object with `shape` ("public_key" |
+ *   "argent_owner_guardian_felts" | "argent_signer_with_optional_guardian" |
+ *   "argent_cairo0_proxy"), `fromSeed` (the calldata a seed reproduces, e.g.
+ *   `"[0, owner, 1]"`), `withGuardian` (the calldata once a guardian is set,
+ *   e.g. `"[0, owner, 0, 0, guardian]"`, or `null`) and `inputsOutsideSeed`
+ *   (constructor inputs a phrase cannot supply, e.g. `["guardian"]`). The
+ *   convention varies by version and by guardian presence and cannot be
+ *   inferred from the class hash, which is why it travels with the class.
+ *   An `implementation` placeholder takes its values from this registry's
+ *   `proxy_target` entries for the same family, so a template can be
+ *   rendered from the registry alone.
+ * - `source`: URL of the public listing the entry was checked against
+ *
+ * # Example (JavaScript)
+ * ```javascript
+ * const registry = JSON.parse(getAccountClassRegistry());
+ * const deriveFrom = registry.filter(c => c.family === "braavos" && c.roles.includes("deployment"));
+ * const acceptWhenSigning = registry.filter(c => c.family === "braavos" && c.roles.includes("implementation"));
+ * // Values the Argent Cairo 0 proxy's `implementation` input takes:
+ * const proxyTargets = registry.filter(c => c.family === "argent" && c.roles.includes("proxy_target"));
+ * ```
+ */
+export function getAccountClassRegistry(): string;
+
 /**
  * Get build information.
  */
@@ -1509,6 +1624,47 @@ export function grindKey(seed_hex: string): string;
  */
 export function init(): void;
 
+/**
+ * State whether an account deployment can be found from a seed phrase.
+ *
+ * Takes the three `DEPLOY_ACCOUNT` fields that fix an address. An account
+ * that exists but whose address depends on inputs outside the seed (an
+ * Argent guardian, a non-Starknet owner, a server-assigned salt) is
+ * reported as `not_from_seed` with the reason, so a recovery flow can tell
+ * "not discoverable from a phrase" apart from "no such account". Such an
+ * account is still verifiable: check that `address` is the account's and
+ * that `ownerPublicKey` is one of the seed's derived keys. `guardianPublicKey`
+ * is the deploy-time guardian, which is the one that fixes the address; an
+ * account's current guardian can have changed since.
+ *
+ * Pass the class hash from the deploy transaction, not the class the account
+ * runs today: for an upgraded account the current class is an implementation
+ * class and the answer is `not_from_seed` / `implementation_class`.
+ *
+ * # Arguments
+ * * `class_hash` - `DEPLOY_ACCOUNT.class_hash` (hex string)
+ * * `salt` - `DEPLOY_ACCOUNT.contract_address_salt` (hex string)
+ * * `constructor_calldata` - `DEPLOY_ACCOUNT.constructor_calldata` (hex strings)
+ *
+ * # Returns
+ * JSON string with fields:
+ * - `address`: the address these fields fix (deployer zero). Compare it with
+ *   the account being checked before trusting anything else in the result:
+ *   the fields are usually an RPC response, and fields that do not hash to
+ *   the account say nothing about it
+ * - `known`: whether the class hash is in the registry
+ * - `class`: the registry entry (see `getAccountClassRegistry`), or `null`
+ * - `ownerPublicKey`: the Stark key the constructor binds as owner, or `null`
+ * - `guardianPublicKey`: the guardian's Stark key when a Starknet-key
+ *   guardian is set, or `null`
+ * - `derivability`: "from_seed" | "not_from_seed" | "unknown_class"
+ * - `reason`: for `not_from_seed`, one of "guardian" | "non_starknet_owner" |
+ *   "salt_not_public_key" | "implementation_class" | "proxy_target_class" |
+ *   "unknown_proxy_implementation" | "unexpected_constructor_calldata";
+ *   otherwise `null`
+ */
+export function inspectAccountDeployment(class_hash: string, salt: string, constructor_calldata: string[]): string;
+
 /**
  * Check whether a hex string is a valid Stark field element.
  *
@@ -2073,17 +2229,24 @@ export interface InitOutput {
     readonly __wbg_set_wasmstarkxonlykeypair_private_key: (a: number, b: number, c: number) => void;
     readonly __wbg_set_wasmstarkxonlykeypair_public_key_x: (a: number, b: number, c: number) => void;
     readonly __wbg_set_wasmstarkxonlypublickey_public_key_x: (a: number, b: number, c: number) => void;
+    readonly __wbg_get_wasmencryptedkey_encryptedKey: (a: number) => [number, number];
+    readonly __wbg_get_wasmencryptedkey_nonce: (a: number) => [number, number];
+    readonly __wbg_get_wasmencryptedkey_salt: (a: number) => [number, number];
+    readonly __wbg_set_wasmencryptedkey_encryptedKey: (a: number, b: number, c: number) => void;
+    readonly __wbg_set_wasmencryptedkey_nonce: (a: number, b: number, c: number) => void;
+    readonly __wbg_set_wasmencryptedkey_salt: (a: number, b: number, c: number) => void;
+    readonly __wbg_wasmaccount_free: (a: number, b: number) => void;
+    readonly __wbg_wasmencryptedkey_free: (a: number, b: number) => void;
+    readonly __wbg_wasmencryptedpayload_free: (a: number, b: number) => void;
+    readonly decryptEthersKeystore: (a: number, b: number, c: number, d: number) => [number, number, number, number];
+    readonly decryptKeystore: (a: number, b: number, c: number, d: number) => [number, number, number, number];
+    readonly decryptPrivateKey: (a: number, b: number, c: number, d: number, e: number, f: number, g: number, h: number, i: number) => [number, number, number, number];
+    readonly decryptWithKey: (a: number, b: number, c: number, d: number, e: number, f: number) => [number, number, number, number];
     readonly deriveNostrKeypair: (a: number, b: number, c: number, d: number, e: number, f: number) => [number, number, number];
     readonly deriveNostrPublicKey: (a: number, b: number, c: number, d: number, e: number, f: number) => [number, number, number];
-    readonly __wbg_wasmaccount_free: (a: number, b: number) => void;
-    readonly deriveScopedStrk20ViewingKey: (a: number, b: number, c: number, d: number, e: number, f: number) => [number, number, number, number];
-    readonly deriveStrk20ViewingKey: (a: number, b: number) => [number, number, number, number];
-    readonly foldStrk20ViewingKey: (a: number, b: number, c: number, d: number, e: number, f: number, g: number, h: number) => [number, number, number, number];
-    readonly getSelectorFromName: (a: number, b: number) => [number, number, number, number];
-    readonly pedersenHash: (a: number, b: number, c: number, d: number) => [number, number, number, number];
-    readonly pedersenHashMany: (a: number, b: number) => [number, number, number, number];
-    readonly starknetKeccak: (a: number, b: number, c: number, d: number) => [number, number, number, number];
-    readonly strk20ViewingKeyMessageHash: (a: number, b: number, c: number, d: number) => [number, number, number, number];
+    readonly encryptKeystore: (a: number, b: number, c: number, d: number, e: number) => [number, number, number, number];
+    readonly encryptPrivateKey: (a: number, b: number, c: number, d: number, e: number) => [number, number, number];
+    readonly encryptWithKey: (a: number, b: number, c: number, d: number) => [number, number, number];
     readonly wasmaccount_contractAddress: (a: number) => [number, number];
     readonly wasmaccount_decryptBalance: (a: number, b: number, c: number, d: bigint) => [number, number, number, number];
     readonly wasmaccount_decryptToPoint: (a: number, b: number) => [number, number, number];
@@ -2094,15 +2257,23 @@ export interface InitOutput {
     readonly wasmaccount_ownerPublicKeyHex: (a: number) => [number, number, number, number];
     readonly wasmaccount_totalBalance: (a: number) => [number, number, number, number];
     readonly wasmaccount_updateState: (a: number, b: number) => [number, number];
+    readonly __wbg_get_wasmencryptedpayload_ciphertext: (a: number) => [number, number];
+    readonly __wbg_get_wasmencryptedpayload_nonce: (a: number) => [number, number];
+    readonly __wbg_set_wasmencryptedpayload_ciphertext: (a: number, b: number, c: number) => void;
+    readonly __wbg_set_wasmencryptedpayload_nonce: (a: number, b: number, c: number) => void;
     readonly deserializePublicKey: (a: number, b: number) => [number, number, number];
     readonly getBuildInfo: () => any;
     readonly getGenerator: () => number;
     readonly getVersion: () => [number, number];
+    readonly grindKey: (a: number, b: number) => [number, number, number, number];
     readonly init: () => void;
+    readonly isValidFelt: (a: number, b: number) => number;
+    readonly isValidStarkPrivateKey: (a: number, b: number) => number;
     readonly nostrPublicKey: (a: number, b: number) => [number, number, number, number];
     readonly pointAdd: (a: number, b: number, c: number, d: number, e: number, f: number, g: number, h: number) => [number, number, number];
     readonly poseidonHash: (a: number, b: number, c: number, d: number) => [number, number, number, number];
     readonly poseidonHashMany: (a: number, b: number) => [number, number, number, number];
+    readonly randomBytesHex: (a: number) => [number, number, number, number];
     readonly randomFelt: () => [number, number];
     readonly scalarMul: (a: number, b: number, c: number, d: number, e: number, f: number) => [number, number, number];
     readonly scalarMulGenerator: (a: number, b: number) => [number, number, number];
@@ -2111,13 +2282,10 @@ export interface InitOutput {
     readonly signNostrMessage: (a: number, b: number, c: number, d: number) => [number, number, number];
     readonly signStarkHash: (a: number, b: number, c: number, d: number) => [number, number, number];
     readonly starkPublicKey: (a: number, b: number) => [number, number, number, number];
-    readonly calculateContractAddress: (a: number, b: number, c: number, d: number, e: number, f: number, g: number, h: number) => [number, number, number, number];
-    readonly deriveArgentAccountAddress: (a: number, b: number, c: number, d: number) => [number, number, number, number];
-    readonly deriveBraavosAccountAddress: (a: number, b: number, c: number, d: number) => [number, number, number, number];
-    readonly deriveOzAccountAddress: (a: number, b: number, c: number, d: number, e: number, f: number) => [number, number, number, number];
-    readonly getAccountClassHashes: () => [number, number];
-    readonly openNostrApplicationData: (a: number, b: number, c: number, d: number, e: number, f: number, g: number, h: number) => [number, number, number, number];
-    readonly wrapNostrApplicationData: (a: number, b: number, c: number, d: number, e: number, f: number, g: number, h: number, i: number, j: number, k: number, l: number) => [number, number, number, number];
+    readonly compileCalls: (a: number, b: number) => [number, number, number, number];
+    readonly decodeShortString: (a: number, b: number) => [number, number, number, number];
+    readonly encodeFelt: (a: number, b: number) => [number, number, number, number];
+    readonly encodeShortString: (a: number, b: number) => [number, number, number, number];
     readonly deriveArgentLegacyKeypair: (a: number, b: number, c: number, d: number) => [number, number, number];
     readonly deriveArgentLegacyPublicKey: (a: number, b: number, c: number, d: number) => [number, number, number];
     readonly deriveDiscoveryKeypairs: (a: number, b: number, c: number) => [number, number, number, number];
@@ -2136,33 +2304,18 @@ export interface InitOutput {
     readonly getStarknetCoinType: () => number;
     readonly getTongoCoinType: () => number;
     readonly validateMnemonic: (a: number, b: number) => number;
-    readonly __wbg_get_wasmencryptedkey_encryptedKey: (a: number) => [number, number];
-    readonly __wbg_get_wasmencryptedkey_nonce: (a: number) => [number, number];
-    readonly __wbg_get_wasmencryptedkey_salt: (a: number) => [number, number];
-    readonly __wbg_set_wasmencryptedkey_encryptedKey: (a: number, b: number, c: number) => void;
-    readonly __wbg_set_wasmencryptedkey_nonce: (a: number, b: number, c: number) => void;
-    readonly __wbg_set_wasmencryptedkey_salt: (a: number, b: number, c: number) => void;
-    readonly __wbg_wasmencryptedkey_free: (a: number, b: number) => void;
-    readonly __wbg_wasmencryptedpayload_free: (a: number, b: number) => void;
-    readonly decryptEthersKeystore: (a: number, b: number, c: number, d: number) => [number, number, number, number];
-    readonly decryptKeystore: (a: number, b: number, c: number, d: number) => [number, number, number, number];
-    readonly decryptPrivateKey: (a: number, b: number, c: number, d: number, e: number, f: number, g: number, h: number, i: number) => [number, number, number, number];
-    readonly decryptWithKey: (a: number, b: number, c: number, d: number, e: number, f: number) => [number, number, number, number];
-    readonly encryptKeystore: (a: number, b: number, c: number, d: number, e: number) => [number, number, number, number];
-    readonly encryptPrivateKey: (a: number, b: number, c: number, d: number, e: number) => [number, number, number];
-    readonly encryptWithKey: (a: number, b: number, c: number, d: number) => [number, number, number];
-    readonly grindKey: (a: number, b: number) => [number, number, number, number];
-    readonly isValidFelt: (a: number, b: number) => number;
-    readonly isValidStarkPrivateKey: (a: number, b: number) => number;
-    readonly randomBytesHex: (a: number) => [number, number, number, number];
-    readonly __wbg_get_wasmencryptedpayload_ciphertext: (a: number) => [number, number];
-    readonly __wbg_get_wasmencryptedpayload_nonce: (a: number) => [number, number];
-    readonly __wbg_set_wasmencryptedpayload_ciphertext: (a: number, b: number, c: number) => void;
-    readonly __wbg_set_wasmencryptedpayload_nonce: (a: number, b: number, c: number) => void;
-    readonly compileCalls: (a: number, b: number) => [number, number, number, number];
-    readonly decodeShortString: (a: number, b: number) => [number, number, number, number];
-    readonly encodeFelt: (a: number, b: number) => [number, number, number, number];
-    readonly encodeShortString: (a: number, b: number) => [number, number, number, number];
+    readonly calculateContractAddress: (a: number, b: number, c: number, d: number, e: number, f: number, g: number, h: number) => [number, number, number, number];
+    readonly deriveArgentAccountAddress: (a: number, b: number, c: number, d: number) => [number, number, number, number];
+    readonly deriveArgentAccountAddressWithGuardian: (a: number, b: number, c: number, d: number, e: number, f: number) => [number, number, number, number];
+    readonly deriveBraavosAccountAddress: (a: number, b: number, c: number, d: number) => [number, number, number, number];
+    readonly deriveOzAccountAddress: (a: number, b: number, c: number, d: number, e: number, f: number) => [number, number, number, number];
+    readonly deriveScopedStrk20ViewingKey: (a: number, b: number, c: number, d: number, e: number, f: number) => [number, number, number, number];
+    readonly deriveStrk20ViewingKey: (a: number, b: number) => [number, number, number, number];
+    readonly foldStrk20ViewingKey: (a: number, b: number, c: number, d: number, e: number, f: number, g: number, h: number) => [number, number, number, number];
+    readonly getAccountClassHashes: () => [number, number];
+    readonly openNostrApplicationData: (a: number, b: number, c: number, d: number, e: number, f: number, g: number, h: number) => [number, number, number, number];
+    readonly strk20ViewingKeyMessageHash: (a: number, b: number, c: number, d: number) => [number, number, number, number];
+    readonly wrapNostrApplicationData: (a: number, b: number, c: number, d: number, e: number, f: number, g: number, h: number, i: number, j: number, k: number, l: number) => [number, number, number, number];
     readonly computeDeclareTransactionHashV2: (a: number, b: number, c: number, d: number, e: number, f: number, g: number, h: number, i: number, j: number, k: number, l: number) => [number, number, number, number];
     readonly computeDeclareTransactionHashV3: (a: number, b: number, c: number, d: number, e: number, f: number, g: number, h: number, i: number, j: number, k: number, l: number, m: any, n: number, o: number, p: number, q: number, r: number, s: number) => [number, number, number, number];
     readonly computeDeployAccountTransactionHashV1: (a: number, b: number, c: number, d: number, e: number, f: number, g: number, h: number, i: number, j: number, k: number, l: number, m: number, n: number) => [number, number, number, number];
@@ -2170,6 +2323,12 @@ export interface InitOutput {
     readonly computeInvokeTransactionHashV1: (a: number, b: number, c: number, d: number, e: number, f: number, g: number, h: number, i: number, j: number) => [number, number, number, number];
     readonly computeInvokeTransactionHashV3: (a: number, b: number, c: number, d: number, e: number, f: number, g: number, h: number, i: number, j: number, k: any, l: number, m: number, n: number, o: number, p: number, q: number, r: number, s: number) => [number, number, number, number];
     readonly computeTypedDataMessageHash: (a: number, b: number, c: number, d: number) => [number, number, number, number];
+    readonly getSelectorFromName: (a: number, b: number) => [number, number, number, number];
+    readonly pedersenHash: (a: number, b: number, c: number, d: number) => [number, number, number, number];
+    readonly pedersenHashMany: (a: number, b: number) => [number, number, number, number];
+    readonly starknetKeccak: (a: number, b: number, c: number, d: number) => [number, number, number, number];
+    readonly getAccountClassRegistry: () => [number, number, number, number];
+    readonly inspectAccountDeployment: (a: number, b: number, c: number, d: number, e: number, f: number) => [number, number, number, number];
     readonly __wbindgen_malloc: (a: number, b: number) => number;
     readonly __wbindgen_realloc: (a: number, b: number, c: number, d: number) => number;
     readonly __wbindgen_exn_store: (a: number) => void;

package/krusty_kms_wasm.js

@@ -5343,12 +5343,29 @@ export function decryptWithKey(nonce, ciphertext, key_hex) {
 /**
  * Derive an Argent account contract address from a public key.
  *
- * Uses the standard Argent constructor calldata format `(0, public_key, 0)`.
+ * Uses the standard Argent deployment (salt = public key, Starknet-key owner,
+ * no guardian). The constructor calldata follows the class version:
+ * `[0, public_key, 1]` for v0.4.0 and v0.5.0, `[public_key, 0]` for v0.3.x;
+ * `getAccountClassRegistry()` publishes the convention next to each class.
+ *
+ * This is the only Argent deployment a seed phrase reproduces on its own. An
+ * account deployed with a guardian has a different address that discovery
+ * cannot enumerate; once its address is known, feed its `DEPLOY_ACCOUNT`
+ * fields to `inspectAccountDeployment`, or take the guardian from that
+ * calldata and use `deriveArgentAccountAddressWithGuardian`.
  *
  * # Arguments
  * * `public_key` - The Stark public key (hex string)
- * * `class_hash` - Optional custom class hash (hex string). Defaults to the
- *   standard Argent v0.4.0 class hash.
+ * * `class_hash` - Optional class hash (hex string). Defaults to the Argent
+ *   v0.4.0 class hash. The accepted set is the Argent Cairo 1 classes:
+ *   v0.5.0, v0.4.0, v0.3.1 and v0.3.0, which are the `getAccountClassRegistry()`
+ *   entries whose constructor shape is `argent_signer_with_optional_guardian`
+ *   or `argent_owner_guardian_felts`. The Cairo 0 proxy is not accepted: its
+ *   address also depends on the implementation hash, which this export takes
+ *   no argument for, so derive it with `calculateContractAddress` and the
+ *   proxy's own calldata. Any other class hash is rejected, because its
+ *   constructor layout is unknown and an address derived for it could be
+ *   undeployable.
  *
  * # Returns
  * The derived account contract address as hex string
@@ -5379,6 +5396,58 @@ export function deriveArgentAccountAddress(public_key, class_hash) {
     }
 }
 
+/**
+ * Derive an Argent account contract address for an owner **with** a
+ * Starknet-key guardian.
+ *
+ * Salt = public key; constructor calldata `[public_key, guardian]` for
+ * v0.3.x and `[0, public_key, 0, 0, guardian]` for v0.4.0 and v0.5.0. The
+ * guardian is per-account and not derived from the seed, so this cannot find
+ * accounts from a phrase. It verifies an account whose address is already
+ * known: take the guardian from that account's `DEPLOY_ACCOUNT` calldata and
+ * compare the result with the address. Only the deploy-time guardian fixes
+ * the address; an account's current guardian (`get_guardian`) can have been
+ * changed or removed since and reproduces nothing.
+ *
+ * # Arguments
+ * * `public_key` - The owner's Stark public key (hex string)
+ * * `guardian_public_key` - The guardian's Stark public key at deployment
+ *   (hex string). `"0x0"` means no guardian and gives the same address as
+ *   `deriveArgentAccountAddress`
+ * * `class_hash` - Optional class hash, as for `deriveArgentAccountAddress`
+ *
+ * # Returns
+ * The derived account contract address as hex string
+ * @param {string} public_key
+ * @param {string} guardian_public_key
+ * @param {string | null} [class_hash]
+ * @returns {string}
+ */
+export function deriveArgentAccountAddressWithGuardian(public_key, guardian_public_key, class_hash) {
+    let deferred5_0;
+    let deferred5_1;
+    try {
+        const ptr0 = passStringToWasm0(public_key, wasm.__wbindgen_malloc, wasm.__wbindgen_realloc);
+        const len0 = WASM_VECTOR_LEN;
+        const ptr1 = passStringToWasm0(guardian_public_key, wasm.__wbindgen_malloc, wasm.__wbindgen_realloc);
+        const len1 = WASM_VECTOR_LEN;
+        var ptr2 = isLikeNone(class_hash) ? 0 : passStringToWasm0(class_hash, wasm.__wbindgen_malloc, wasm.__wbindgen_realloc);
+        var len2 = WASM_VECTOR_LEN;
+        const ret = wasm.deriveArgentAccountAddressWithGuardian(ptr0, len0, ptr1, len1, ptr2, len2);
+        var ptr4 = ret[0];
+        var len4 = ret[1];
+        if (ret[3]) {
+            ptr4 = 0; len4 = 0;
+            throw takeFromExternrefTable0(ret[2]);
+        }
+        deferred5_0 = ptr4;
+        deferred5_1 = len4;
+        return getStringFromWasm0(ptr4, len4);
+    } finally {
+        wasm.__wbindgen_free(deferred5_0, deferred5_1, 1);
+    }
+}
+
 /**
  * Derive a Starknet keypair using old Argent's "double derivation" scheme.
  *
@@ -5440,12 +5509,19 @@ export function deriveArgentLegacyPublicKey(mnemonic, address_index, account_ind
 /**
  * Derive a Braavos account contract address from a public key.
  *
- * Uses the standard Braavos constructor calldata format `(public_key)`.
+ * Uses the Braavos base-account deployment: salt = public key, constructor
+ * calldata `[public_key]`. Braavos accounts are deployed with a **base**
+ * class and upgrade themselves to an **implementation** class in the same
+ * transaction, so the address is fixed by the base class alone and the class
+ * an account runs today (`starknet_getClassHashAt`) never reproduces it.
  *
  * # Arguments
  * * `public_key` - The Stark public key (hex string)
- * * `class_hash` - Optional custom class hash (hex string). Defaults to the
- *   standard Braavos v1.0.0 class hash.
+ * * `class_hash` - Optional base class hash (hex string). Defaults to the
+ *   current base class (v1.1.0 and later); the v1.0.0 base class is the other
+ *   accepted value, see `getAccountClassRegistry()` (family `braavos`, role
+ *   `deployment`). A known implementation class or an unrecognised class hash
+ *   is rejected rather than deriving an address no deployment produces.
  *
  * # Returns
  * The derived account contract address as hex string
@@ -5506,7 +5582,7 @@ export function deriveBraavosAccountAddress(public_key, class_hash) {
  * // Use public keys to query Argent's smart account API
  * for (const kp of keypairs) {
  *   const smartAccounts = await argentApi.findAccountsByPublicKey(kp.publicKey);
- *   // smartAccounts contains addresses with server-provided salts
+ *   // smartAccounts contains accounts whose salt was assigned server-side
  * }
  * ```
  * @param {string} mnemonic
@@ -6127,12 +6203,10 @@ export function foldStrk20ViewingKey(public_key, message_hash, r, s) {
  *
  * # Why every address, not just the first
  *
- * A wallet type can have several address variants at one index: OpenZeppelin
- * has two salt policies (`salt = public_key` and the legacy `salt = 0`),
- * Argent legacy spans three Cairo 1 class hashes, and Argent Cairo 0 spans
- * four proxy implementations. This is a funds-recovery path, so collapsing to
- * one address per wallet type silently hides deployed accounts — every
- * omitted variant is an account the caller cannot find.
+ * A wallet type has several address variants at one index: two OpenZeppelin
+ * salt policies, two Braavos base classes, four Argent Cairo 1 classes under
+ * each key scheme, four Argent Cairo 0 implementations. This is a
+ * funds-recovery path: collapsing to one address per type hides accounts.
  *
  * # Returns
  * JSON string: `{ "0": { "Braavos": ["0x..."], "OpenZeppelin": ["0x...", "0x..."], ... } }`
@@ -6170,7 +6244,9 @@ export function generateAccountAddresses(mnemonic, max_index) {
  * This is a pure cryptographic operation — no network calls are made.
  * Each candidate is a possible on-chain account address. To find which
  * ones are actually deployed, check each address via an RPC provider
- * (e.g., `provider.getClassHashAt(address)` in starknet.js).
+ * (e.g., `provider.getClassHashAt(address)` in starknet.js). That call returns
+ * the class the account *runs*, for Braavos always an implementation class,
+ * never the `classHash` derived from; `getAccountClassRegistry()` labels both.
  *
  * # Security
  *
@@ -6190,7 +6266,7 @@ export function generateAccountAddresses(mnemonic, max_index) {
  * - `publicKey`: hex string
  * - `derivationIndex`: number
  * - `derivationPath`: string (e.g., "m/44'/9004'/0'/0/0")
- * - `classVersion`: string (e.g., "v0.4.0", "braavos-base")
+ * - `classVersion`: string (e.g., "v0.4.0", "base v1.1.0")
  *
  * # Example (JavaScript)
  * ```javascript
@@ -6374,11 +6450,22 @@ export function generateWithdrawProof(account, params) {
 /**
  * Get known account class hashes for common Starknet account implementations.
  *
- * Returns a JSON string containing class hashes organized by account type
- * and version, covering OpenZeppelin, Argent, and Braavos accounts.
+ * A flat map of class hashes by family and version label. It does not say
+ * which role a class plays, and that distinction matters: an address is fixed
+ * by the class an account was **deployed** with, while the class it **runs**
+ * today (what a signer must accept) is a different one for every Braavos
+ * account. Prefer `getAccountClassRegistry()`, which labels every entry by
+ * role; this export is kept for callers that rely on its shape.
+ *
+ * Braavos keys: `"1.0.0"` is the historical name of the base (deployment)
+ * class introduced in v1.1.0 and still current; `"base-1.0.0"` is the v1.0.0
+ * base class; `"legacy"` is the v1.0.0 account implementation and
+ * `"account-1.1.0"` / `"account-1.2.0"` the later ones. Only the two base
+ * classes derive addresses.
  *
  * # Returns
- * JSON string with nested object: `{ oz: { ... }, argent: { ... }, braavos: { ... } }`
+ * JSON string with nested object:
+ * `{ oz: { ... }, argent: { ... }, argent_legacy: { ... }, braavos: { ... } }`
  * @returns {string}
  */
 export function getAccountClassHashes() {
@@ -6394,6 +6481,79 @@ export function getAccountClassHashes() {
     }
 }
 
+/**
+ * Every account class this crate knows, labelled by the role it plays.
+ *
+ * A class hash plays one of two roles, and a wallet needs both lists:
+ *
+ * - `deployment`: the class an account is deployed with. It fixes the
+ *   address, so it is the class to **derive from** when looking for an
+ *   account from a seed.
+ * - `implementation`: a class an account's address can report on chain
+ *   (`starknet_getClassHashAt`) and what to **accept when signing**. An entry
+ *   may also have the `deployment` role; only implementation-only entries
+ *   must not be used for address derivation.
+ * - `proxy_target`: the class a proxy delegates to, named in the proxy's
+ *   constructor calldata. It is code the account runs, but no address ever
+ *   reports it, so a signing allowlist must not expect it. These are the
+ *   values the Argent Cairo 0 proxy's `implementation` input takes.
+ *
+ * Braavos accounts are deployed with a base class and upgraded to an
+ * implementation class in the same transaction, so every Braavos account
+ * runs a different class than it was deployed with. Argent and OpenZeppelin
+ * classes play both roles, including the Argent Cairo 0 proxy: an unupgraded
+ * Cairo 0 account reports the proxy's class hash, not its target's.
+ *
+ * # Returns
+ * JSON string: array of objects with fields:
+ * - `family`: "open_zeppelin" | "argent" | "braavos"
+ * - `classHash`: hex string
+ * - `version`: vendor release label (e.g. "1.2.0", "0.4.0", "proxy")
+ * - `label`: human-readable name
+ * - `roles`: array of "deployment" | "implementation" | "proxy_target"
+ * - `constructor`: the class's calldata convention, or `null` for a class
+ *   that is never deployed with. An object with `shape` ("public_key" |
+ *   "argent_owner_guardian_felts" | "argent_signer_with_optional_guardian" |
+ *   "argent_cairo0_proxy"), `fromSeed` (the calldata a seed reproduces, e.g.
+ *   `"[0, owner, 1]"`), `withGuardian` (the calldata once a guardian is set,
+ *   e.g. `"[0, owner, 0, 0, guardian]"`, or `null`) and `inputsOutsideSeed`
+ *   (constructor inputs a phrase cannot supply, e.g. `["guardian"]`). The
+ *   convention varies by version and by guardian presence and cannot be
+ *   inferred from the class hash, which is why it travels with the class.
+ *   An `implementation` placeholder takes its values from this registry's
+ *   `proxy_target` entries for the same family, so a template can be
+ *   rendered from the registry alone.
+ * - `source`: URL of the public listing the entry was checked against
+ *
+ * # Example (JavaScript)
+ * ```javascript
+ * const registry = JSON.parse(getAccountClassRegistry());
+ * const deriveFrom = registry.filter(c => c.family === "braavos" && c.roles.includes("deployment"));
+ * const acceptWhenSigning = registry.filter(c => c.family === "braavos" && c.roles.includes("implementation"));
+ * // Values the Argent Cairo 0 proxy's `implementation` input takes:
+ * const proxyTargets = registry.filter(c => c.family === "argent" && c.roles.includes("proxy_target"));
+ * ```
+ * @returns {string}
+ */
+export function getAccountClassRegistry() {
+    let deferred2_0;
+    let deferred2_1;
+    try {
+        const ret = wasm.getAccountClassRegistry();
+        var ptr1 = ret[0];
+        var len1 = ret[1];
+        if (ret[3]) {
+            ptr1 = 0; len1 = 0;
+            throw takeFromExternrefTable0(ret[2]);
+        }
+        deferred2_0 = ptr1;
+        deferred2_1 = len1;
+        return getStringFromWasm0(ptr1, len1);
+    } finally {
+        wasm.__wbindgen_free(deferred2_0, deferred2_1, 1);
+    }
+}
+
 /**
  * Get build information.
  * @returns {any}
@@ -6532,6 +6692,74 @@ export function init() {
     wasm.init();
 }
 
+/**
+ * State whether an account deployment can be found from a seed phrase.
+ *
+ * Takes the three `DEPLOY_ACCOUNT` fields that fix an address. An account
+ * that exists but whose address depends on inputs outside the seed (an
+ * Argent guardian, a non-Starknet owner, a server-assigned salt) is
+ * reported as `not_from_seed` with the reason, so a recovery flow can tell
+ * "not discoverable from a phrase" apart from "no such account". Such an
+ * account is still verifiable: check that `address` is the account's and
+ * that `ownerPublicKey` is one of the seed's derived keys. `guardianPublicKey`
+ * is the deploy-time guardian, which is the one that fixes the address; an
+ * account's current guardian can have changed since.
+ *
+ * Pass the class hash from the deploy transaction, not the class the account
+ * runs today: for an upgraded account the current class is an implementation
+ * class and the answer is `not_from_seed` / `implementation_class`.
+ *
+ * # Arguments
+ * * `class_hash` - `DEPLOY_ACCOUNT.class_hash` (hex string)
+ * * `salt` - `DEPLOY_ACCOUNT.contract_address_salt` (hex string)
+ * * `constructor_calldata` - `DEPLOY_ACCOUNT.constructor_calldata` (hex strings)
+ *
+ * # Returns
+ * JSON string with fields:
+ * - `address`: the address these fields fix (deployer zero). Compare it with
+ *   the account being checked before trusting anything else in the result:
+ *   the fields are usually an RPC response, and fields that do not hash to
+ *   the account say nothing about it
+ * - `known`: whether the class hash is in the registry
+ * - `class`: the registry entry (see `getAccountClassRegistry`), or `null`
+ * - `ownerPublicKey`: the Stark key the constructor binds as owner, or `null`
+ * - `guardianPublicKey`: the guardian's Stark key when a Starknet-key
+ *   guardian is set, or `null`
+ * - `derivability`: "from_seed" | "not_from_seed" | "unknown_class"
+ * - `reason`: for `not_from_seed`, one of "guardian" | "non_starknet_owner" |
+ *   "salt_not_public_key" | "implementation_class" | "proxy_target_class" |
+ *   "unknown_proxy_implementation" | "unexpected_constructor_calldata";
+ *   otherwise `null`
+ * @param {string} class_hash
+ * @param {string} salt
+ * @param {string[]} constructor_calldata
+ * @returns {string}
+ */
+export function inspectAccountDeployment(class_hash, salt, constructor_calldata) {
+    let deferred5_0;
+    let deferred5_1;
+    try {
+        const ptr0 = passStringToWasm0(class_hash, wasm.__wbindgen_malloc, wasm.__wbindgen_realloc);
+        const len0 = WASM_VECTOR_LEN;
+        const ptr1 = passStringToWasm0(salt, wasm.__wbindgen_malloc, wasm.__wbindgen_realloc);
+        const len1 = WASM_VECTOR_LEN;
+        const ptr2 = passArrayJsValueToWasm0(constructor_calldata, wasm.__wbindgen_malloc);
+        const len2 = WASM_VECTOR_LEN;
+        const ret = wasm.inspectAccountDeployment(ptr0, len0, ptr1, len1, ptr2, len2);
+        var ptr4 = ret[0];
+        var len4 = ret[1];
+        if (ret[3]) {
+            ptr4 = 0; len4 = 0;
+            throw takeFromExternrefTable0(ret[2]);
+        }
+        deferred5_0 = ptr4;
+        deferred5_1 = len4;
+        return getStringFromWasm0(ptr4, len4);
+    } finally {
+        wasm.__wbindgen_free(deferred5_0, deferred5_1, 1);
+    }
+}
+
 /**
  * Check whether a hex string is a valid Stark field element.
  *

package/package.json

@@ -5,7 +5,7 @@
     "Krusty KMS Contributors"
   ],
   "description": "WASM bindings for krusty-kms account and protocol utilities",
-  "version": "0.10.0",
+  "version": "0.12.0",
   "license": "MIT OR Apache-2.0",
   "repository": {
     "type": "git",