@starknetfoundation/krusty-kms-wasm 0.12.0 → 0.12.1

package/README.md

@@ -25,6 +25,21 @@ console.log(getVersion());
 console.log(poseidonHash("0x1", "0x2"));
 ```
 
+Run `init()` once and share its promise. Once `init()` has resolved, calling
+it again returns the same instance, but two calls that overlap (the second
+starting while the first is still loading) each instantiate the module. The
+one that finishes last replaces the instance under every object created on
+the other: their getters fail with `RuntimeError: Out of bounds memory
+access`, and their frees can release objects the new instance has since
+created.
+
+```ts
+// krusty.ts: the one place that initializes the module
+import init from "@starknetfoundation/krusty-kms-wasm";
+
+export const krustyReady = init();
+```
+
 This package is generated with `wasm-pack --target web` and is intended for
 browser-oriented ESM toolchains that support loading WebAssembly modules.
 

package/krusty_kms_wasm.d.ts

@@ -265,8 +265,11 @@ export class WasmFundProofResult {
  *
  * This type intentionally exposes `private_key` as a plain hex string for
  * JS interop (signing, export, wallet recovery). That string lives in the
- * JS heap and **cannot** be reliably wiped. Prefer companion public-only
- * APIs (`derivePublicKey`, etc.) when private material is not required.
+ * JS heap and **cannot** be reliably wiped. The copy this object owns in
+ * WASM memory is zeroized when the object is freed (`free()` or garbage
+ * collection); each getter read makes a temporary copy that is freed
+ * without being wiped. Prefer companion public-only APIs
+ * (`derivePublicKey`, etc.) when private material is not required.
  * Never `console.log` this value; `Debug` redacts the private key.
  */
 export class WasmKeypair {
@@ -305,8 +308,10 @@ export class WasmKeypair {
  * # Security / threat model
  *
  * `private_key` is a plain hex string in the JS heap and cannot be reliably
- * wiped. Prefer [`WasmNostrPublicKey`] / `deriveNostrPublicKey` when private
- * material is not required. `Debug` redacts the private key.
+ * wiped. The copy this object owns in WASM memory is zeroized when the
+ * object is freed, as for [`WasmKeypair`]. Prefer [`WasmNostrPublicKey`] /
+ * `deriveNostrPublicKey` when private material is not required. `Debug`
+ * redacts the private key.
  */
 export class WasmNostrKeypair {
     free(): void;
@@ -558,8 +563,10 @@ export class WasmStarkSignature {
  * # Security / threat model
  *
  * `private_key` is a plain hex string in the JS heap and cannot be reliably
- * wiped. Prefer [`WasmStarkXOnlyPublicKey`] when private material is not
- * required. `Debug` redacts the private key; default `Serialize` omits it.
+ * wiped. The copy this object owns in WASM memory is zeroized when the
+ * object is freed, as for [`WasmKeypair`]. Prefer [`WasmStarkXOnlyPublicKey`]
+ * when private material is not required. `Debug` redacts the private key;
+ * default `Serialize` omits it.
  */
 export class WasmStarkXOnlyKeypair {
     free(): void;

package/krusty_kms_wasm.js

@@ -1213,8 +1213,11 @@ if (Symbol.dispose) WasmFundProofResult.prototype[Symbol.dispose] = WasmFundProo
  *
  * This type intentionally exposes `private_key` as a plain hex string for
  * JS interop (signing, export, wallet recovery). That string lives in the
- * JS heap and **cannot** be reliably wiped. Prefer companion public-only
- * APIs (`derivePublicKey`, etc.) when private material is not required.
+ * JS heap and **cannot** be reliably wiped. The copy this object owns in
+ * WASM memory is zeroized when the object is freed (`free()` or garbage
+ * collection); each getter read makes a temporary copy that is freed
+ * without being wiped. Prefer companion public-only APIs
+ * (`derivePublicKey`, etc.) when private material is not required.
  * Never `console.log` this value; `Debug` redacts the private key.
  */
 export class WasmKeypair {
@@ -1371,8 +1374,10 @@ if (Symbol.dispose) WasmKeypair.prototype[Symbol.dispose] = WasmKeypair.prototyp
  * # Security / threat model
  *
  * `private_key` is a plain hex string in the JS heap and cannot be reliably
- * wiped. Prefer [`WasmNostrPublicKey`] / `deriveNostrPublicKey` when private
- * material is not required. `Debug` redacts the private key.
+ * wiped. The copy this object owns in WASM memory is zeroized when the
+ * object is freed, as for [`WasmKeypair`]. Prefer [`WasmNostrPublicKey`] /
+ * `deriveNostrPublicKey` when private material is not required. `Debug`
+ * redacts the private key.
  */
 export class WasmNostrKeypair {
     static __wrap(ptr) {
@@ -2738,8 +2743,10 @@ if (Symbol.dispose) WasmStarkSignature.prototype[Symbol.dispose] = WasmStarkSign
  * # Security / threat model
  *
  * `private_key` is a plain hex string in the JS heap and cannot be reliably
- * wiped. Prefer [`WasmStarkXOnlyPublicKey`] when private material is not
- * required. `Debug` redacts the private key; default `Serialize` omits it.
+ * wiped. The copy this object owns in WASM memory is zeroized when the
+ * object is freed, as for [`WasmKeypair`]. Prefer [`WasmStarkXOnlyPublicKey`]
+ * when private material is not required. `Debug` redacts the private key;
+ * default `Serialize` omits it.
  */
 export class WasmStarkXOnlyKeypair {
     static __wrap(ptr) {

package/package.json

@@ -5,7 +5,7 @@
     "Krusty KMS Contributors"
   ],
   "description": "WASM bindings for krusty-kms account and protocol utilities",
-  "version": "0.12.0",
+  "version": "0.12.1",
   "license": "MIT OR Apache-2.0",
   "repository": {
     "type": "git",