@starknetfoundation/krusty-kms-wasm 0.12.0 → 0.13.0

package/README.md

@@ -25,6 +25,21 @@ console.log(getVersion());
 console.log(poseidonHash("0x1", "0x2"));
 ```
 
+Run `init()` once and share its promise. Once `init()` has resolved, calling
+it again returns the same instance, but two calls that overlap (the second
+starting while the first is still loading) each instantiate the module. The
+one that finishes last replaces the instance under every object created on
+the other: their getters fail with `RuntimeError: Out of bounds memory
+access`, and their frees can release objects the new instance has since
+created.
+
+```ts
+// krusty.ts: the one place that initializes the module
+import init from "@starknetfoundation/krusty-kms-wasm";
+
+export const krustyReady = init();
+```
+
 This package is generated with `wasm-pack --target web` and is intended for
 browser-oriented ESM toolchains that support loading WebAssembly modules.
 

package/krusty_kms_wasm.d.ts

@@ -265,8 +265,11 @@ export class WasmFundProofResult {
  *
  * This type intentionally exposes `private_key` as a plain hex string for
  * JS interop (signing, export, wallet recovery). That string lives in the
- * JS heap and **cannot** be reliably wiped. Prefer companion public-only
- * APIs (`derivePublicKey`, etc.) when private material is not required.
+ * JS heap and **cannot** be reliably wiped. The copy this object owns in
+ * WASM memory is zeroized when the object is freed (`free()` or garbage
+ * collection); each getter read makes a temporary copy that is freed
+ * without being wiped. Prefer companion public-only APIs
+ * (`derivePublicKey`, etc.) when private material is not required.
  * Never `console.log` this value; `Debug` redacts the private key.
  */
 export class WasmKeypair {
@@ -305,8 +308,10 @@ export class WasmKeypair {
  * # Security / threat model
  *
  * `private_key` is a plain hex string in the JS heap and cannot be reliably
- * wiped. Prefer [`WasmNostrPublicKey`] / `deriveNostrPublicKey` when private
- * material is not required. `Debug` redacts the private key.
+ * wiped. The copy this object owns in WASM memory is zeroized when the
+ * object is freed, as for [`WasmKeypair`]. Prefer [`WasmNostrPublicKey`] /
+ * `deriveNostrPublicKey` when private material is not required. `Debug`
+ * redacts the private key.
  */
 export class WasmNostrKeypair {
     free(): void;
@@ -558,8 +563,10 @@ export class WasmStarkSignature {
  * # Security / threat model
  *
  * `private_key` is a plain hex string in the JS heap and cannot be reliably
- * wiped. Prefer [`WasmStarkXOnlyPublicKey`] when private material is not
- * required. `Debug` redacts the private key; default `Serialize` omits it.
+ * wiped. The copy this object owns in WASM memory is zeroized when the
+ * object is freed, as for [`WasmKeypair`]. Prefer [`WasmStarkXOnlyPublicKey`]
+ * when private material is not required. `Debug` redacts the private key;
+ * default `Serialize` omits it.
  */
 export class WasmStarkXOnlyKeypair {
     free(): void;
@@ -1975,86 +1982,12 @@ export interface InitOutput {
     readonly wasmtransferparams_new: (a: number, b: number, c: number, d: number, e: number, f: number, g: number, h: number, i: number, j: number, k: number, l: number, m: number, n: number, o: number, p: number, q: number, r: number, s: number, t: number) => number;
     readonly wasmtransferparams_withAuditor: (a: number, b: number, c: number) => number;
     readonly wasmtransferparams_withBitSize: (a: number, b: number) => number;
-    readonly __wbg_get_wasmfundproofresult_amount: (a: number) => [number, number];
-    readonly __wbg_get_wasmfundproofresult_proof_json: (a: number) => [number, number];
-    readonly __wbg_get_wasmfundproofresult_y_x: (a: number) => [number, number];
-    readonly __wbg_get_wasmfundproofresult_y_y: (a: number) => [number, number];
-    readonly __wbg_get_wasmragequitparams_chain_id: (a: number) => [number, number];
-    readonly __wbg_get_wasmragequitparams_current_cipher_l_x: (a: number) => [number, number];
-    readonly __wbg_get_wasmragequitparams_current_cipher_l_y: (a: number) => [number, number];
-    readonly __wbg_get_wasmragequitparams_current_cipher_r_x: (a: number) => [number, number];
-    readonly __wbg_get_wasmragequitparams_current_cipher_r_y: (a: number) => [number, number];
-    readonly __wbg_get_wasmragequitparams_nonce: (a: number) => [number, number];
-    readonly __wbg_get_wasmragequitparams_recipient_address: (a: number) => [number, number];
-    readonly __wbg_get_wasmragequitparams_sender_address: (a: number) => [number, number];
-    readonly __wbg_get_wasmragequitparams_tongo_address: (a: number) => [number, number];
-    readonly __wbg_get_wasmragequitproofresult_a_r_x: (a: number) => [number, number];
-    readonly __wbg_get_wasmragequitproofresult_a_r_y: (a: number) => [number, number];
-    readonly __wbg_get_wasmragequitproofresult_a_x_x: (a: number) => [number, number];
-    readonly __wbg_get_wasmragequitproofresult_a_x_y: (a: number) => [number, number];
-    readonly __wbg_get_wasmragequitproofresult_amount: (a: number) => [number, number];
-    readonly __wbg_get_wasmragequitproofresult_recipient: (a: number) => [number, number];
-    readonly __wbg_get_wasmragequitproofresult_sx: (a: number) => [number, number];
-    readonly __wbg_get_wasmragequitproofresult_y_x: (a: number) => [number, number];
-    readonly __wbg_get_wasmragequitproofresult_y_y: (a: number) => [number, number];
-    readonly __wbg_get_wasmrolloverparams_chain_id: (a: number) => [number, number];
-    readonly __wbg_get_wasmrolloverparams_nonce: (a: number) => [number, number];
-    readonly __wbg_get_wasmrolloverparams_sender_address: (a: number) => [number, number];
-    readonly __wbg_get_wasmrolloverparams_tongo_address: (a: number) => [number, number];
-    readonly __wbg_get_wasmrolloverproofresult_pending_amount: (a: number) => [number, number];
-    readonly __wbg_get_wasmrolloverproofresult_proof_json: (a: number) => [number, number];
-    readonly __wbg_get_wasmrolloverproofresult_y_x: (a: number) => [number, number];
-    readonly __wbg_get_wasmrolloverproofresult_y_y: (a: number) => [number, number];
-    readonly __wbg_get_wasmtransferparams_amount: (a: number) => [number, number];
-    readonly __wbg_get_wasmtransferparams_chain_id: (a: number) => [number, number];
-    readonly __wbg_get_wasmtransferparams_current_cipher_l_x: (a: number) => [number, number];
-    readonly __wbg_get_wasmtransferparams_current_cipher_l_y: (a: number) => [number, number];
-    readonly __wbg_get_wasmtransferparams_current_cipher_r_x: (a: number) => [number, number];
-    readonly __wbg_get_wasmtransferparams_nonce: (a: number) => [number, number];
-    readonly __wbg_get_wasmtransferparams_recipient_public_key: (a: number) => [number, number];
-    readonly __wbg_get_wasmtransferparams_sender_address: (a: number) => [number, number];
-    readonly __wbg_get_wasmtransferparams_tongo_address: (a: number) => [number, number];
-    readonly __wbg_get_wasmtransferproofresult_aux_v_x: (a: number) => [number, number];
-    readonly __wbg_get_wasmtransferproofresult_aux_v_y: (a: number) => [number, number];
-    readonly __wbg_get_wasmtransferproofresult_self_l_x: (a: number) => [number, number];
-    readonly __wbg_get_wasmtransferproofresult_self_l_y: (a: number) => [number, number];
-    readonly __wbg_get_wasmtransferproofresult_self_r_x: (a: number) => [number, number];
-    readonly __wbg_get_wasmtransferproofresult_self_r_y: (a: number) => [number, number];
-    readonly __wbg_get_wasmtransferproofresult_transfer_l_x: (a: number) => [number, number];
-    readonly __wbg_get_wasmtransferproofresult_transfer_l_y: (a: number) => [number, number];
-    readonly __wbg_get_wasmtransferproofresult_transfer_r_x: (a: number) => [number, number];
-    readonly __wbg_get_wasmtransferproofresult_transfer_r_y: (a: number) => [number, number];
-    readonly __wbg_get_wasmwithdrawparams_amount: (a: number) => [number, number];
-    readonly __wbg_get_wasmwithdrawparams_chain_id: (a: number) => [number, number];
-    readonly __wbg_get_wasmwithdrawparams_current_cipher_l_x: (a: number) => [number, number];
-    readonly __wbg_get_wasmwithdrawparams_current_cipher_l_y: (a: number) => [number, number];
-    readonly __wbg_get_wasmwithdrawparams_current_cipher_r_x: (a: number) => [number, number];
-    readonly __wbg_get_wasmwithdrawparams_current_cipher_r_y: (a: number) => [number, number];
-    readonly __wbg_get_wasmwithdrawparams_nonce: (a: number) => [number, number];
-    readonly __wbg_get_wasmwithdrawparams_recipient_address: (a: number) => [number, number];
-    readonly __wbg_get_wasmwithdrawparams_sender_address: (a: number) => [number, number];
-    readonly __wbg_get_wasmwithdrawparams_tongo_address: (a: number) => [number, number];
-    readonly __wbg_get_wasmwithdrawproofresult_a_r_x: (a: number) => [number, number];
-    readonly __wbg_get_wasmwithdrawproofresult_a_r_y: (a: number) => [number, number];
-    readonly __wbg_get_wasmwithdrawproofresult_a_v_x: (a: number) => [number, number];
-    readonly __wbg_get_wasmwithdrawproofresult_a_v_y: (a: number) => [number, number];
-    readonly __wbg_get_wasmwithdrawproofresult_a_x2: (a: number) => [number, number];
-    readonly __wbg_get_wasmwithdrawproofresult_a_x_x: (a: number) => [number, number];
-    readonly __wbg_get_wasmwithdrawproofresult_a_x_y: (a: number) => [number, number];
-    readonly __wbg_get_wasmwithdrawproofresult_a_y2: (a: number) => [number, number];
-    readonly __wbg_get_wasmwithdrawproofresult_amount: (a: number) => [number, number];
-    readonly __wbg_get_wasmwithdrawproofresult_aux_r_x: (a: number) => [number, number];
-    readonly __wbg_get_wasmwithdrawproofresult_aux_r_y: (a: number) => [number, number];
-    readonly __wbg_get_wasmwithdrawproofresult_aux_v_x: (a: number) => [number, number];
-    readonly __wbg_get_wasmwithdrawproofresult_aux_v_y: (a: number) => [number, number];
-    readonly __wbg_get_wasmwithdrawproofresult_range_json: (a: number) => [number, number];
-    readonly __wbg_get_wasmwithdrawproofresult_recipient: (a: number) => [number, number];
-    readonly __wbg_get_wasmwithdrawproofresult_sb: (a: number) => [number, number];
-    readonly __wbg_get_wasmwithdrawproofresult_sr: (a: number) => [number, number];
-    readonly __wbg_get_wasmwithdrawproofresult_sx: (a: number) => [number, number];
-    readonly __wbg_get_wasmwithdrawproofresult_y_x: (a: number) => [number, number];
-    readonly __wbg_get_wasmwithdrawproofresult_y_y: (a: number) => [number, number];
     readonly wasmragequitparams_withAuditor: (a: number, b: number, c: number) => number;
+    readonly wasmwithdrawparams_withAuditor: (a: number, b: number, c: number) => number;
+    readonly __wbg_get_wasmwithdrawparams_bit_size: (a: number) => number;
+    readonly __wbg_set_wasmragequitparams_auditor_public_key: (a: number, b: number, c: number) => void;
+    readonly __wbg_set_wasmragequitproofresult_audit_json: (a: number, b: number, c: number) => void;
+    readonly __wbg_set_wasmwithdrawparams_auditor_public_key: (a: number, b: number, c: number) => void;
     readonly __wbg_set_wasmfundproofresult_amount: (a: number, b: number, c: number) => void;
     readonly __wbg_set_wasmfundproofresult_proof_json: (a: number, b: number, c: number) => void;
     readonly __wbg_set_wasmfundproofresult_y_x: (a: number, b: number, c: number) => void;
@@ -2134,17 +2067,91 @@ export interface InitOutput {
     readonly __wbg_set_wasmwithdrawproofresult_sx: (a: number, b: number, c: number) => void;
     readonly __wbg_set_wasmwithdrawproofresult_y_x: (a: number, b: number, c: number) => void;
     readonly __wbg_set_wasmwithdrawproofresult_y_y: (a: number, b: number, c: number) => void;
-    readonly wasmwithdrawparams_new: (a: number, b: number, c: number, d: number, e: number, f: number, g: number, h: number, i: number, j: number, k: number, l: number, m: number, n: number, o: number, p: number, q: number, r: number, s: number, t: number) => number;
-    readonly __wbg_get_wasmwithdrawparams_bit_size: (a: number) => number;
-    readonly __wbg_set_wasmragequitparams_auditor_public_key: (a: number, b: number, c: number) => void;
-    readonly __wbg_set_wasmragequitproofresult_audit_json: (a: number, b: number, c: number) => void;
-    readonly __wbg_set_wasmwithdrawparams_auditor_public_key: (a: number, b: number, c: number) => void;
-    readonly __wbg_set_wasmwithdrawparams_bit_size: (a: number, b: number) => void;
-    readonly wasmwithdrawparams_withAuditor: (a: number, b: number, c: number) => number;
-    readonly wasmragequitparams_new: (a: number, b: number, c: number, d: number, e: number, f: number, g: number, h: number, i: number, j: number, k: number, l: number, m: number, n: number, o: number, p: number, q: number, r: number) => number;
     readonly __wbg_get_wasmragequitparams_auditor_public_key: (a: number) => [number, number];
     readonly __wbg_get_wasmragequitproofresult_audit_json: (a: number) => [number, number];
     readonly __wbg_get_wasmwithdrawparams_auditor_public_key: (a: number) => [number, number];
+    readonly wasmwithdrawparams_new: (a: number, b: number, c: number, d: number, e: number, f: number, g: number, h: number, i: number, j: number, k: number, l: number, m: number, n: number, o: number, p: number, q: number, r: number, s: number, t: number) => number;
+    readonly wasmragequitparams_new: (a: number, b: number, c: number, d: number, e: number, f: number, g: number, h: number, i: number, j: number, k: number, l: number, m: number, n: number, o: number, p: number, q: number, r: number) => number;
+    readonly __wbg_get_wasmfundproofresult_amount: (a: number) => [number, number];
+    readonly __wbg_get_wasmfundproofresult_proof_json: (a: number) => [number, number];
+    readonly __wbg_get_wasmfundproofresult_y_x: (a: number) => [number, number];
+    readonly __wbg_get_wasmfundproofresult_y_y: (a: number) => [number, number];
+    readonly __wbg_get_wasmragequitparams_chain_id: (a: number) => [number, number];
+    readonly __wbg_get_wasmragequitparams_current_cipher_l_x: (a: number) => [number, number];
+    readonly __wbg_get_wasmragequitparams_current_cipher_l_y: (a: number) => [number, number];
+    readonly __wbg_get_wasmragequitparams_current_cipher_r_x: (a: number) => [number, number];
+    readonly __wbg_get_wasmragequitparams_current_cipher_r_y: (a: number) => [number, number];
+    readonly __wbg_get_wasmragequitparams_nonce: (a: number) => [number, number];
+    readonly __wbg_get_wasmragequitparams_recipient_address: (a: number) => [number, number];
+    readonly __wbg_get_wasmragequitparams_sender_address: (a: number) => [number, number];
+    readonly __wbg_get_wasmragequitparams_tongo_address: (a: number) => [number, number];
+    readonly __wbg_get_wasmragequitproofresult_a_r_x: (a: number) => [number, number];
+    readonly __wbg_get_wasmragequitproofresult_a_r_y: (a: number) => [number, number];
+    readonly __wbg_get_wasmragequitproofresult_a_x_x: (a: number) => [number, number];
+    readonly __wbg_get_wasmragequitproofresult_a_x_y: (a: number) => [number, number];
+    readonly __wbg_get_wasmragequitproofresult_amount: (a: number) => [number, number];
+    readonly __wbg_get_wasmragequitproofresult_recipient: (a: number) => [number, number];
+    readonly __wbg_get_wasmragequitproofresult_sx: (a: number) => [number, number];
+    readonly __wbg_get_wasmragequitproofresult_y_x: (a: number) => [number, number];
+    readonly __wbg_get_wasmragequitproofresult_y_y: (a: number) => [number, number];
+    readonly __wbg_get_wasmrolloverparams_chain_id: (a: number) => [number, number];
+    readonly __wbg_get_wasmrolloverparams_nonce: (a: number) => [number, number];
+    readonly __wbg_get_wasmrolloverparams_sender_address: (a: number) => [number, number];
+    readonly __wbg_get_wasmrolloverparams_tongo_address: (a: number) => [number, number];
+    readonly __wbg_get_wasmrolloverproofresult_pending_amount: (a: number) => [number, number];
+    readonly __wbg_get_wasmrolloverproofresult_proof_json: (a: number) => [number, number];
+    readonly __wbg_get_wasmrolloverproofresult_y_x: (a: number) => [number, number];
+    readonly __wbg_get_wasmrolloverproofresult_y_y: (a: number) => [number, number];
+    readonly __wbg_get_wasmtransferparams_amount: (a: number) => [number, number];
+    readonly __wbg_get_wasmtransferparams_chain_id: (a: number) => [number, number];
+    readonly __wbg_get_wasmtransferparams_current_cipher_l_x: (a: number) => [number, number];
+    readonly __wbg_get_wasmtransferparams_current_cipher_l_y: (a: number) => [number, number];
+    readonly __wbg_get_wasmtransferparams_current_cipher_r_x: (a: number) => [number, number];
+    readonly __wbg_get_wasmtransferparams_nonce: (a: number) => [number, number];
+    readonly __wbg_get_wasmtransferparams_recipient_public_key: (a: number) => [number, number];
+    readonly __wbg_get_wasmtransferparams_sender_address: (a: number) => [number, number];
+    readonly __wbg_get_wasmtransferparams_tongo_address: (a: number) => [number, number];
+    readonly __wbg_get_wasmtransferproofresult_aux_v_x: (a: number) => [number, number];
+    readonly __wbg_get_wasmtransferproofresult_aux_v_y: (a: number) => [number, number];
+    readonly __wbg_get_wasmtransferproofresult_self_l_x: (a: number) => [number, number];
+    readonly __wbg_get_wasmtransferproofresult_self_l_y: (a: number) => [number, number];
+    readonly __wbg_get_wasmtransferproofresult_self_r_x: (a: number) => [number, number];
+    readonly __wbg_get_wasmtransferproofresult_self_r_y: (a: number) => [number, number];
+    readonly __wbg_get_wasmtransferproofresult_transfer_l_x: (a: number) => [number, number];
+    readonly __wbg_get_wasmtransferproofresult_transfer_l_y: (a: number) => [number, number];
+    readonly __wbg_get_wasmtransferproofresult_transfer_r_x: (a: number) => [number, number];
+    readonly __wbg_get_wasmtransferproofresult_transfer_r_y: (a: number) => [number, number];
+    readonly __wbg_get_wasmwithdrawparams_amount: (a: number) => [number, number];
+    readonly __wbg_get_wasmwithdrawparams_chain_id: (a: number) => [number, number];
+    readonly __wbg_get_wasmwithdrawparams_current_cipher_l_x: (a: number) => [number, number];
+    readonly __wbg_get_wasmwithdrawparams_current_cipher_l_y: (a: number) => [number, number];
+    readonly __wbg_get_wasmwithdrawparams_current_cipher_r_x: (a: number) => [number, number];
+    readonly __wbg_get_wasmwithdrawparams_current_cipher_r_y: (a: number) => [number, number];
+    readonly __wbg_get_wasmwithdrawparams_nonce: (a: number) => [number, number];
+    readonly __wbg_get_wasmwithdrawparams_recipient_address: (a: number) => [number, number];
+    readonly __wbg_get_wasmwithdrawparams_sender_address: (a: number) => [number, number];
+    readonly __wbg_get_wasmwithdrawparams_tongo_address: (a: number) => [number, number];
+    readonly __wbg_get_wasmwithdrawproofresult_a_r_x: (a: number) => [number, number];
+    readonly __wbg_get_wasmwithdrawproofresult_a_r_y: (a: number) => [number, number];
+    readonly __wbg_get_wasmwithdrawproofresult_a_v_x: (a: number) => [number, number];
+    readonly __wbg_get_wasmwithdrawproofresult_a_v_y: (a: number) => [number, number];
+    readonly __wbg_get_wasmwithdrawproofresult_a_x2: (a: number) => [number, number];
+    readonly __wbg_get_wasmwithdrawproofresult_a_x_x: (a: number) => [number, number];
+    readonly __wbg_get_wasmwithdrawproofresult_a_x_y: (a: number) => [number, number];
+    readonly __wbg_get_wasmwithdrawproofresult_a_y2: (a: number) => [number, number];
+    readonly __wbg_get_wasmwithdrawproofresult_amount: (a: number) => [number, number];
+    readonly __wbg_get_wasmwithdrawproofresult_aux_r_x: (a: number) => [number, number];
+    readonly __wbg_get_wasmwithdrawproofresult_aux_r_y: (a: number) => [number, number];
+    readonly __wbg_get_wasmwithdrawproofresult_aux_v_x: (a: number) => [number, number];
+    readonly __wbg_get_wasmwithdrawproofresult_aux_v_y: (a: number) => [number, number];
+    readonly __wbg_get_wasmwithdrawproofresult_range_json: (a: number) => [number, number];
+    readonly __wbg_get_wasmwithdrawproofresult_recipient: (a: number) => [number, number];
+    readonly __wbg_get_wasmwithdrawproofresult_sb: (a: number) => [number, number];
+    readonly __wbg_get_wasmwithdrawproofresult_sr: (a: number) => [number, number];
+    readonly __wbg_get_wasmwithdrawproofresult_sx: (a: number) => [number, number];
+    readonly __wbg_get_wasmwithdrawproofresult_y_x: (a: number) => [number, number];
+    readonly __wbg_get_wasmwithdrawproofresult_y_y: (a: number) => [number, number];
+    readonly __wbg_set_wasmwithdrawparams_bit_size: (a: number, b: number) => void;
     readonly wasmwithdrawparams_withBitSize: (a: number, b: number) => number;
     readonly __wbg_get_wasmaccountstate_balance: (a: number) => [number, number];
     readonly __wbg_get_wasmaccountstate_nonce: (a: number) => bigint;
@@ -2190,6 +2197,25 @@ export interface InitOutput {
     readonly wasmstarkxonlykeypair_publicKeyHex: (a: number) => [number, number, number, number];
     readonly wasmstarkxonlypublickey_new: (a: number, b: number) => [number, number, number];
     readonly wasmstarkxonlypublickey_publicKeyHex: (a: number) => [number, number, number, number];
+    readonly __wbg_set_wasmciphertext_r_x: (a: number, b: number, c: number) => void;
+    readonly __wbg_set_wasmkeypair_private_key: (a: number, b: number, c: number) => void;
+    readonly __wbg_set_wasmkeypair_public_key_x: (a: number, b: number, c: number) => void;
+    readonly __wbg_set_wasmkeypair_public_key_y: (a: number, b: number, c: number) => void;
+    readonly __wbg_set_wasmnostrkeypair_private_key: (a: number, b: number, c: number) => void;
+    readonly __wbg_set_wasmnostrkeypair_public_key: (a: number, b: number, c: number) => void;
+    readonly __wbg_set_wasmnostrpublickey_public_key: (a: number, b: number, c: number) => void;
+    readonly __wbg_set_wasmnostrsignature_publicKey: (a: number, b: number, c: number) => void;
+    readonly __wbg_set_wasmnostrsignature_signature: (a: number, b: number, c: number) => void;
+    readonly __wbg_set_wasmpoint_x: (a: number, b: number, c: number) => void;
+    readonly __wbg_set_wasmpoint_y: (a: number, b: number, c: number) => void;
+    readonly __wbg_set_wasmpublickey_public_key_x: (a: number, b: number, c: number) => void;
+    readonly __wbg_set_wasmpublickey_public_key_y: (a: number, b: number, c: number) => void;
+    readonly __wbg_set_wasmstarksignature_publicKey: (a: number, b: number, c: number) => void;
+    readonly __wbg_set_wasmstarksignature_r: (a: number, b: number, c: number) => void;
+    readonly __wbg_set_wasmstarksignature_s: (a: number, b: number, c: number) => void;
+    readonly __wbg_set_wasmstarkxonlykeypair_private_key: (a: number, b: number, c: number) => void;
+    readonly __wbg_set_wasmstarkxonlykeypair_public_key_x: (a: number, b: number, c: number) => void;
+    readonly __wbg_set_wasmstarkxonlypublickey_public_key_x: (a: number, b: number, c: number) => void;
     readonly __wbg_get_wasmciphertext_l_y: (a: number) => [number, number];
     readonly __wbg_get_wasmciphertext_r_x: (a: number) => [number, number];
     readonly __wbg_get_wasmkeypair_private_key: (a: number) => [number, number];
@@ -2210,57 +2236,6 @@ export interface InitOutput {
     readonly __wbg_get_wasmstarkxonlykeypair_private_key: (a: number) => [number, number];
     readonly __wbg_get_wasmstarkxonlykeypair_public_key_x: (a: number) => [number, number];
     readonly __wbg_get_wasmstarkxonlypublickey_public_key_x: (a: number) => [number, number];
-    readonly __wbg_set_wasmciphertext_r_x: (a: number, b: number, c: number) => void;
-    readonly __wbg_set_wasmkeypair_private_key: (a: number, b: number, c: number) => void;
-    readonly __wbg_set_wasmkeypair_public_key_x: (a: number, b: number, c: number) => void;
-    readonly __wbg_set_wasmkeypair_public_key_y: (a: number, b: number, c: number) => void;
-    readonly __wbg_set_wasmnostrkeypair_private_key: (a: number, b: number, c: number) => void;
-    readonly __wbg_set_wasmnostrkeypair_public_key: (a: number, b: number, c: number) => void;
-    readonly __wbg_set_wasmnostrpublickey_public_key: (a: number, b: number, c: number) => void;
-    readonly __wbg_set_wasmnostrsignature_publicKey: (a: number, b: number, c: number) => void;
-    readonly __wbg_set_wasmnostrsignature_signature: (a: number, b: number, c: number) => void;
-    readonly __wbg_set_wasmpoint_x: (a: number, b: number, c: number) => void;
-    readonly __wbg_set_wasmpoint_y: (a: number, b: number, c: number) => void;
-    readonly __wbg_set_wasmpublickey_public_key_x: (a: number, b: number, c: number) => void;
-    readonly __wbg_set_wasmpublickey_public_key_y: (a: number, b: number, c: number) => void;
-    readonly __wbg_set_wasmstarksignature_publicKey: (a: number, b: number, c: number) => void;
-    readonly __wbg_set_wasmstarksignature_r: (a: number, b: number, c: number) => void;
-    readonly __wbg_set_wasmstarksignature_s: (a: number, b: number, c: number) => void;
-    readonly __wbg_set_wasmstarkxonlykeypair_private_key: (a: number, b: number, c: number) => void;
-    readonly __wbg_set_wasmstarkxonlykeypair_public_key_x: (a: number, b: number, c: number) => void;
-    readonly __wbg_set_wasmstarkxonlypublickey_public_key_x: (a: number, b: number, c: number) => void;
-    readonly __wbg_get_wasmencryptedkey_encryptedKey: (a: number) => [number, number];
-    readonly __wbg_get_wasmencryptedkey_nonce: (a: number) => [number, number];
-    readonly __wbg_get_wasmencryptedkey_salt: (a: number) => [number, number];
-    readonly __wbg_set_wasmencryptedkey_encryptedKey: (a: number, b: number, c: number) => void;
-    readonly __wbg_set_wasmencryptedkey_nonce: (a: number, b: number, c: number) => void;
-    readonly __wbg_set_wasmencryptedkey_salt: (a: number, b: number, c: number) => void;
-    readonly __wbg_wasmaccount_free: (a: number, b: number) => void;
-    readonly __wbg_wasmencryptedkey_free: (a: number, b: number) => void;
-    readonly __wbg_wasmencryptedpayload_free: (a: number, b: number) => void;
-    readonly decryptEthersKeystore: (a: number, b: number, c: number, d: number) => [number, number, number, number];
-    readonly decryptKeystore: (a: number, b: number, c: number, d: number) => [number, number, number, number];
-    readonly decryptPrivateKey: (a: number, b: number, c: number, d: number, e: number, f: number, g: number, h: number, i: number) => [number, number, number, number];
-    readonly decryptWithKey: (a: number, b: number, c: number, d: number, e: number, f: number) => [number, number, number, number];
-    readonly deriveNostrKeypair: (a: number, b: number, c: number, d: number, e: number, f: number) => [number, number, number];
-    readonly deriveNostrPublicKey: (a: number, b: number, c: number, d: number, e: number, f: number) => [number, number, number];
-    readonly encryptKeystore: (a: number, b: number, c: number, d: number, e: number) => [number, number, number, number];
-    readonly encryptPrivateKey: (a: number, b: number, c: number, d: number, e: number) => [number, number, number];
-    readonly encryptWithKey: (a: number, b: number, c: number, d: number) => [number, number, number];
-    readonly wasmaccount_contractAddress: (a: number) => [number, number];
-    readonly wasmaccount_decryptBalance: (a: number, b: number, c: number, d: bigint) => [number, number, number, number];
-    readonly wasmaccount_decryptToPoint: (a: number, b: number) => [number, number, number];
-    readonly wasmaccount_fromMnemonic: (a: number, b: number, c: number, d: number, e: number, f: number, g: number, h: number) => [number, number, number];
-    readonly wasmaccount_fromPrivateKey: (a: number, b: number, c: number, d: number) => [number, number, number];
-    readonly wasmaccount_getState: (a: number) => number;
-    readonly wasmaccount_hasSufficientBalance: (a: number, b: number, c: number) => [number, number, number];
-    readonly wasmaccount_ownerPublicKeyHex: (a: number) => [number, number, number, number];
-    readonly wasmaccount_totalBalance: (a: number) => [number, number, number, number];
-    readonly wasmaccount_updateState: (a: number, b: number) => [number, number];
-    readonly __wbg_get_wasmencryptedpayload_ciphertext: (a: number) => [number, number];
-    readonly __wbg_get_wasmencryptedpayload_nonce: (a: number) => [number, number];
-    readonly __wbg_set_wasmencryptedpayload_ciphertext: (a: number, b: number, c: number) => void;
-    readonly __wbg_set_wasmencryptedpayload_nonce: (a: number, b: number, c: number) => void;
     readonly deserializePublicKey: (a: number, b: number) => [number, number, number];
     readonly getBuildInfo: () => any;
     readonly getGenerator: () => number;
@@ -2274,7 +2249,7 @@ export interface InitOutput {
     readonly poseidonHash: (a: number, b: number, c: number, d: number) => [number, number, number, number];
     readonly poseidonHashMany: (a: number, b: number) => [number, number, number, number];
     readonly randomBytesHex: (a: number) => [number, number, number, number];
-    readonly randomFelt: () => [number, number];
+    readonly randomFelt: () => [number, number, number, number];
     readonly scalarMul: (a: number, b: number, c: number, d: number, e: number, f: number) => [number, number, number];
     readonly scalarMulGenerator: (a: number, b: number) => [number, number, number];
     readonly serializePublicKey: (a: number, b: number, c: number, d: number) => [number, number, number, number];
@@ -2282,6 +2257,31 @@ export interface InitOutput {
     readonly signNostrMessage: (a: number, b: number, c: number, d: number) => [number, number, number];
     readonly signStarkHash: (a: number, b: number, c: number, d: number) => [number, number, number];
     readonly starkPublicKey: (a: number, b: number) => [number, number, number, number];
+    readonly openNostrApplicationData: (a: number, b: number, c: number, d: number, e: number, f: number, g: number, h: number) => [number, number, number, number];
+    readonly wrapNostrApplicationData: (a: number, b: number, c: number, d: number, e: number, f: number, g: number, h: number, i: number, j: number, k: number, l: number) => [number, number, number, number];
+    readonly calculateContractAddress: (a: number, b: number, c: number, d: number, e: number, f: number, g: number, h: number) => [number, number, number, number];
+    readonly deriveArgentAccountAddress: (a: number, b: number, c: number, d: number) => [number, number, number, number];
+    readonly deriveArgentAccountAddressWithGuardian: (a: number, b: number, c: number, d: number, e: number, f: number) => [number, number, number, number];
+    readonly deriveBraavosAccountAddress: (a: number, b: number, c: number, d: number) => [number, number, number, number];
+    readonly deriveOzAccountAddress: (a: number, b: number, c: number, d: number, e: number, f: number) => [number, number, number, number];
+    readonly deriveScopedStrk20ViewingKey: (a: number, b: number, c: number, d: number, e: number, f: number) => [number, number, number, number];
+    readonly deriveStrk20ViewingKey: (a: number, b: number) => [number, number, number, number];
+    readonly foldStrk20ViewingKey: (a: number, b: number, c: number, d: number, e: number, f: number, g: number, h: number) => [number, number, number, number];
+    readonly getAccountClassHashes: () => [number, number];
+    readonly getAccountClassRegistry: () => [number, number, number, number];
+    readonly inspectAccountDeployment: (a: number, b: number, c: number, d: number, e: number, f: number) => [number, number, number, number];
+    readonly strk20ViewingKeyMessageHash: (a: number, b: number, c: number, d: number) => [number, number, number, number];
+    readonly computeDeclareTransactionHashV2: (a: number, b: number, c: number, d: number, e: number, f: number, g: number, h: number, i: number, j: number, k: number, l: number) => [number, number, number, number];
+    readonly computeDeclareTransactionHashV3: (a: number, b: number, c: number, d: number, e: number, f: number, g: number, h: number, i: number, j: number, k: number, l: number, m: any, n: number, o: number, p: number, q: number, r: number, s: number) => [number, number, number, number];
+    readonly computeDeployAccountTransactionHashV1: (a: number, b: number, c: number, d: number, e: number, f: number, g: number, h: number, i: number, j: number, k: number, l: number, m: number, n: number) => [number, number, number, number];
+    readonly computeDeployAccountTransactionHashV3: (a: number, b: number, c: number, d: number, e: number, f: number, g: number, h: number, i: number, j: number, k: number, l: number, m: number, n: number, o: any, p: number, q: number, r: number, s: number) => [number, number, number, number];
+    readonly computeInvokeTransactionHashV1: (a: number, b: number, c: number, d: number, e: number, f: number, g: number, h: number, i: number, j: number) => [number, number, number, number];
+    readonly computeInvokeTransactionHashV3: (a: number, b: number, c: number, d: number, e: number, f: number, g: number, h: number, i: number, j: number, k: any, l: number, m: number, n: number, o: number, p: number, q: number, r: number, s: number) => [number, number, number, number];
+    readonly computeTypedDataMessageHash: (a: number, b: number, c: number, d: number) => [number, number, number, number];
+    readonly getSelectorFromName: (a: number, b: number) => [number, number, number, number];
+    readonly pedersenHash: (a: number, b: number, c: number, d: number) => [number, number, number, number];
+    readonly pedersenHashMany: (a: number, b: number) => [number, number, number, number];
+    readonly starknetKeccak: (a: number, b: number, c: number, d: number) => [number, number, number, number];
     readonly compileCalls: (a: number, b: number) => [number, number, number, number];
     readonly decodeShortString: (a: number, b: number) => [number, number, number, number];
     readonly encodeFelt: (a: number, b: number) => [number, number, number, number];
@@ -2304,31 +2304,38 @@ export interface InitOutput {
     readonly getStarknetCoinType: () => number;
     readonly getTongoCoinType: () => number;
     readonly validateMnemonic: (a: number, b: number) => number;
-    readonly calculateContractAddress: (a: number, b: number, c: number, d: number, e: number, f: number, g: number, h: number) => [number, number, number, number];
-    readonly deriveArgentAccountAddress: (a: number, b: number, c: number, d: number) => [number, number, number, number];
-    readonly deriveArgentAccountAddressWithGuardian: (a: number, b: number, c: number, d: number, e: number, f: number) => [number, number, number, number];
-    readonly deriveBraavosAccountAddress: (a: number, b: number, c: number, d: number) => [number, number, number, number];
-    readonly deriveOzAccountAddress: (a: number, b: number, c: number, d: number, e: number, f: number) => [number, number, number, number];
-    readonly deriveScopedStrk20ViewingKey: (a: number, b: number, c: number, d: number, e: number, f: number) => [number, number, number, number];
-    readonly deriveStrk20ViewingKey: (a: number, b: number) => [number, number, number, number];
-    readonly foldStrk20ViewingKey: (a: number, b: number, c: number, d: number, e: number, f: number, g: number, h: number) => [number, number, number, number];
-    readonly getAccountClassHashes: () => [number, number];
-    readonly openNostrApplicationData: (a: number, b: number, c: number, d: number, e: number, f: number, g: number, h: number) => [number, number, number, number];
-    readonly strk20ViewingKeyMessageHash: (a: number, b: number, c: number, d: number) => [number, number, number, number];
-    readonly wrapNostrApplicationData: (a: number, b: number, c: number, d: number, e: number, f: number, g: number, h: number, i: number, j: number, k: number, l: number) => [number, number, number, number];
-    readonly computeDeclareTransactionHashV2: (a: number, b: number, c: number, d: number, e: number, f: number, g: number, h: number, i: number, j: number, k: number, l: number) => [number, number, number, number];
-    readonly computeDeclareTransactionHashV3: (a: number, b: number, c: number, d: number, e: number, f: number, g: number, h: number, i: number, j: number, k: number, l: number, m: any, n: number, o: number, p: number, q: number, r: number, s: number) => [number, number, number, number];
-    readonly computeDeployAccountTransactionHashV1: (a: number, b: number, c: number, d: number, e: number, f: number, g: number, h: number, i: number, j: number, k: number, l: number, m: number, n: number) => [number, number, number, number];
-    readonly computeDeployAccountTransactionHashV3: (a: number, b: number, c: number, d: number, e: number, f: number, g: number, h: number, i: number, j: number, k: number, l: number, m: number, n: number, o: any, p: number, q: number, r: number, s: number) => [number, number, number, number];
-    readonly computeInvokeTransactionHashV1: (a: number, b: number, c: number, d: number, e: number, f: number, g: number, h: number, i: number, j: number) => [number, number, number, number];
-    readonly computeInvokeTransactionHashV3: (a: number, b: number, c: number, d: number, e: number, f: number, g: number, h: number, i: number, j: number, k: any, l: number, m: number, n: number, o: number, p: number, q: number, r: number, s: number) => [number, number, number, number];
-    readonly computeTypedDataMessageHash: (a: number, b: number, c: number, d: number) => [number, number, number, number];
-    readonly getSelectorFromName: (a: number, b: number) => [number, number, number, number];
-    readonly pedersenHash: (a: number, b: number, c: number, d: number) => [number, number, number, number];
-    readonly pedersenHashMany: (a: number, b: number) => [number, number, number, number];
-    readonly starknetKeccak: (a: number, b: number, c: number, d: number) => [number, number, number, number];
-    readonly getAccountClassRegistry: () => [number, number, number, number];
-    readonly inspectAccountDeployment: (a: number, b: number, c: number, d: number, e: number, f: number) => [number, number, number, number];
+    readonly __wbg_get_wasmencryptedkey_encryptedKey: (a: number) => [number, number];
+    readonly __wbg_get_wasmencryptedkey_nonce: (a: number) => [number, number];
+    readonly __wbg_get_wasmencryptedkey_salt: (a: number) => [number, number];
+    readonly __wbg_set_wasmencryptedkey_encryptedKey: (a: number, b: number, c: number) => void;
+    readonly __wbg_set_wasmencryptedkey_nonce: (a: number, b: number, c: number) => void;
+    readonly __wbg_set_wasmencryptedkey_salt: (a: number, b: number, c: number) => void;
+    readonly __wbg_wasmaccount_free: (a: number, b: number) => void;
+    readonly __wbg_wasmencryptedkey_free: (a: number, b: number) => void;
+    readonly __wbg_wasmencryptedpayload_free: (a: number, b: number) => void;
+    readonly decryptEthersKeystore: (a: number, b: number, c: number, d: number) => [number, number, number, number];
+    readonly decryptKeystore: (a: number, b: number, c: number, d: number) => [number, number, number, number];
+    readonly decryptPrivateKey: (a: number, b: number, c: number, d: number, e: number, f: number, g: number, h: number, i: number) => [number, number, number, number];
+    readonly decryptWithKey: (a: number, b: number, c: number, d: number, e: number, f: number) => [number, number, number, number];
+    readonly deriveNostrKeypair: (a: number, b: number, c: number, d: number, e: number, f: number) => [number, number, number];
+    readonly deriveNostrPublicKey: (a: number, b: number, c: number, d: number, e: number, f: number) => [number, number, number];
+    readonly encryptKeystore: (a: number, b: number, c: number, d: number, e: number) => [number, number, number, number];
+    readonly encryptPrivateKey: (a: number, b: number, c: number, d: number, e: number) => [number, number, number];
+    readonly encryptWithKey: (a: number, b: number, c: number, d: number) => [number, number, number];
+    readonly wasmaccount_contractAddress: (a: number) => [number, number];
+    readonly wasmaccount_decryptBalance: (a: number, b: number, c: number, d: bigint) => [number, number, number, number];
+    readonly wasmaccount_decryptToPoint: (a: number, b: number) => [number, number, number];
+    readonly wasmaccount_fromMnemonic: (a: number, b: number, c: number, d: number, e: number, f: number, g: number, h: number) => [number, number, number];
+    readonly wasmaccount_fromPrivateKey: (a: number, b: number, c: number, d: number) => [number, number, number];
+    readonly wasmaccount_getState: (a: number) => number;
+    readonly wasmaccount_hasSufficientBalance: (a: number, b: number, c: number) => [number, number, number];
+    readonly wasmaccount_ownerPublicKeyHex: (a: number) => [number, number, number, number];
+    readonly wasmaccount_totalBalance: (a: number) => [number, number, number, number];
+    readonly wasmaccount_updateState: (a: number, b: number) => [number, number];
+    readonly __wbg_set_wasmencryptedpayload_ciphertext: (a: number, b: number, c: number) => void;
+    readonly __wbg_set_wasmencryptedpayload_nonce: (a: number, b: number, c: number) => void;
+    readonly __wbg_get_wasmencryptedpayload_ciphertext: (a: number) => [number, number];
+    readonly __wbg_get_wasmencryptedpayload_nonce: (a: number) => [number, number];
     readonly __wbindgen_malloc: (a: number, b: number) => number;
     readonly __wbindgen_realloc: (a: number, b: number, c: number, d: number) => number;
     readonly __wbindgen_exn_store: (a: number) => void;

package/krusty_kms_wasm.js

@@ -1213,8 +1213,11 @@ if (Symbol.dispose) WasmFundProofResult.prototype[Symbol.dispose] = WasmFundProo
  *
  * This type intentionally exposes `private_key` as a plain hex string for
  * JS interop (signing, export, wallet recovery). That string lives in the
- * JS heap and **cannot** be reliably wiped. Prefer companion public-only
- * APIs (`derivePublicKey`, etc.) when private material is not required.
+ * JS heap and **cannot** be reliably wiped. The copy this object owns in
+ * WASM memory is zeroized when the object is freed (`free()` or garbage
+ * collection); each getter read makes a temporary copy that is freed
+ * without being wiped. Prefer companion public-only APIs
+ * (`derivePublicKey`, etc.) when private material is not required.
  * Never `console.log` this value; `Debug` redacts the private key.
  */
 export class WasmKeypair {
@@ -1371,8 +1374,10 @@ if (Symbol.dispose) WasmKeypair.prototype[Symbol.dispose] = WasmKeypair.prototyp
  * # Security / threat model
  *
  * `private_key` is a plain hex string in the JS heap and cannot be reliably
- * wiped. Prefer [`WasmNostrPublicKey`] / `deriveNostrPublicKey` when private
- * material is not required. `Debug` redacts the private key.
+ * wiped. The copy this object owns in WASM memory is zeroized when the
+ * object is freed, as for [`WasmKeypair`]. Prefer [`WasmNostrPublicKey`] /
+ * `deriveNostrPublicKey` when private material is not required. `Debug`
+ * redacts the private key.
  */
 export class WasmNostrKeypair {
     static __wrap(ptr) {
@@ -2738,8 +2743,10 @@ if (Symbol.dispose) WasmStarkSignature.prototype[Symbol.dispose] = WasmStarkSign
  * # Security / threat model
  *
  * `private_key` is a plain hex string in the JS heap and cannot be reliably
- * wiped. Prefer [`WasmStarkXOnlyPublicKey`] when private material is not
- * required. `Debug` redacts the private key; default `Serialize` omits it.
+ * wiped. The copy this object owns in WASM memory is zeroized when the
+ * object is freed, as for [`WasmKeypair`]. Prefer [`WasmStarkXOnlyPublicKey`]
+ * when private material is not required. `Debug` redacts the private key;
+ * default `Serialize` omits it.
  */
 export class WasmStarkXOnlyKeypair {
     static __wrap(ptr) {
@@ -7069,15 +7076,21 @@ export function randomBytesHex(length) {
  * @returns {string}
  */
 export function randomFelt() {
-    let deferred1_0;
-    let deferred1_1;
+    let deferred2_0;
+    let deferred2_1;
     try {
         const ret = wasm.randomFelt();
-        deferred1_0 = ret[0];
-        deferred1_1 = ret[1];
-        return getStringFromWasm0(ret[0], ret[1]);
+        var ptr1 = ret[0];
+        var len1 = ret[1];
+        if (ret[3]) {
+            ptr1 = 0; len1 = 0;
+            throw takeFromExternrefTable0(ret[2]);
+        }
+        deferred2_0 = ptr1;
+        deferred2_1 = len1;
+        return getStringFromWasm0(ptr1, len1);
     } finally {
-        wasm.__wbindgen_free(deferred1_0, deferred1_1, 1);
+        wasm.__wbindgen_free(deferred2_0, deferred2_1, 1);
     }
 }
 

package/package.json

@@ -5,7 +5,7 @@
     "Krusty KMS Contributors"
   ],
   "description": "WASM bindings for krusty-kms account and protocol utilities",
-  "version": "0.12.0",
+  "version": "0.13.0",
   "license": "MIT OR Apache-2.0",
   "repository": {
     "type": "git",