@starknetfoundation/krusty-kms-wasm 0.14.0 → 0.15.0

package/README.md

@@ -40,6 +40,15 @@ import init from "@starknetfoundation/krusty-kms-wasm";
 export const krustyReady = init();
 ```
 
+## Secrets
+
+Exports that take a secret (mnemonic, passphrase, password, private key,
+seed, symmetric key, plaintext) wipe their WASM copy of it when the call
+returns. They cannot wipe your JavaScript string, and a non-ASCII string can
+leave a partial copy in freed WASM memory. Secrets an export returns (derived
+or decrypted keys, mnemonics, plaintexts, viewing keys) are plain JavaScript
+strings: keep them out of logs and persistent storage.
+
 This package is generated with `wasm-pack --target web` and is intended for
 browser-oriented ESM toolchains that support loading WebAssembly modules.
 

package/krusty_kms_wasm.d.ts

@@ -115,6 +115,38 @@ export class WasmAccountState {
     pending_balance: string;
 }
 
+/**
+ * BIP-84 mainnet P2WPKH keypair.
+ *
+ * # Security / threat model
+ *
+ * `private_key` is a plain hex string in the JS heap and cannot be reliably
+ * wiped. The copy this object owns in WASM memory is zeroized when the
+ * object is freed, as for [`crate::WasmKeypair`]. `Debug` redacts the
+ * private key; default `Serialize` omits it.
+ */
+export class WasmBitcoinP2wpkhKeypair {
+    private constructor();
+    free(): void;
+    [Symbol.dispose](): void;
+    /**
+     * Lowercase `bc1q…` P2WPKH address.
+     */
+    address: string;
+    /**
+     * Derivation path, e.g. `m/84'/0'/0'/0/0`.
+     */
+    path: string;
+    /**
+     * Private key as 64 hex chars (no 0x prefix). Treat as secret.
+     */
+    private_key: string;
+    /**
+     * Compressed SEC1 public key as 66 hex chars (no 0x prefix).
+     */
+    public_key: string;
+}
+
 /**
  * ElGamal ciphertext (L, R points).
  */
@@ -398,6 +430,44 @@ export class WasmPublicKey {
     public_key_y: string;
 }
 
+/**
+ * The public commitments of one vault and their root.
+ */
+export class WasmQsbCommitments {
+    private constructor();
+    free(): void;
+    [Symbol.dispose](): void;
+    /**
+     * The commitment root `R[v]` (64 lowercase hex chars).
+     */
+    root: string;
+    /**
+     * The 150 round-0 commitments `c[v][0][i]`, in index order (40 lowercase hex chars each).
+     */
+    round0: string[];
+    /**
+     * The 150 round-1 commitments `c[v][1][i]`, in index order (40 lowercase hex chars each).
+     */
+    round1: string[];
+}
+
+/**
+ * The transaction binding of a disclosure request.
+ */
+export class WasmQsbRevealDigest {
+    private constructor();
+    free(): void;
+    [Symbol.dispose](): void;
+    /**
+     * `B = SHA256(T)` (64 lowercase hex chars).
+     */
+    binding: string;
+    /**
+     * `D = SHA256("QSB-HORS-v1/reveal" || I || B)` (64 lowercase hex chars).
+     */
+    digest: string;
+}
+
 /**
  * Parameters for generating a ragequit proof.
  */
@@ -1102,6 +1172,23 @@ export function deriveArgentLegacyKeypair(mnemonic: string, address_index: numbe
  */
 export function deriveArgentLegacyPublicKey(mnemonic: string, address_index: number, account_index: number): WasmStarkXOnlyPublicKey;
 
+/**
+ * Derive the BIP-84 mainnet P2WPKH keypair at
+ * `m/84'/0'/{account_index}'/{change}/{address_index}`.
+ *
+ * # Security / threat model
+ *
+ * Returns the private key as a hex string in the JS heap.
+ *
+ * # Arguments
+ * * `mnemonic` - BIP-39 mnemonic
+ * * `account_index` - hardened account index, an integer below 2^31
+ * * `change` - 0 for receiving, 1 for change
+ * * `address_index` - address index, an integer below 2^31
+ * * `passphrase` - Optional BIP-39 passphrase
+ */
+export function deriveBitcoinP2wpkhKeypair(mnemonic: string, account_index: number, change: number, address_index: number, passphrase?: string | null): WasmBitcoinP2wpkhKeypair;
+
 /**
  * Derive a Braavos account contract address from a public key.
  *
@@ -1235,6 +1322,21 @@ export function deriveOzAccountAddress(public_key_x: string, class_hash: string,
  */
 export function derivePublicKey(mnemonic: string, address_index: number, account_index: number, passphrase?: string | null): WasmPublicKey;
 
+/**
+ * Derive the 2 × 150 commitments and the root of a QSB vault.
+ *
+ * `net` is `0` (Bitcoin mainnet) or `1` (shared test namespace) and
+ * `vault_index` is below `2^31`; both are validated before the mnemonic is
+ * read. Deriving commitments does not allocate the vault.
+ *
+ * # Arguments
+ * * `mnemonic` - BIP-39 mnemonic of the dedicated QSB phrase
+ * * `net` - Derivation namespace
+ * * `vault_index` - Vault index `v`
+ * * `passphrase` - Optional BIP-39 passphrase
+ */
+export function deriveQsbCommitments(mnemonic: string, net: number, vault_index: number, passphrase?: string | null): WasmQsbCommitments;
+
 /**
  * Derive a chain- and pool-scoped STRK20 viewing key.
  */
@@ -1769,6 +1871,17 @@ export function poseidonHash(a: string, b: string): string;
  */
 export function poseidonHashMany(inputs: string[]): string;
 
+/**
+ * Compute `B` and `D` for a disclosure request.
+ *
+ * `transaction_hex` is the BIP's `T` as lowercase hex: the full legacy
+ * serialization with every scriptSig empty and no witness. Krusty parses it
+ * and refuses anything else; it never accepts a caller-supplied hash.
+ * `round0` must hold 8 and `round1` 7 distinct indices below 150, in the
+ * order the spend reveals them.
+ */
+export function qsbRevealDigest(transaction_hex: string, round0: number[], round1: number[]): WasmQsbRevealDigest;
+
 /**
  * Generate random bytes and return them as a hex string.
  *
@@ -1789,6 +1902,20 @@ export function randomBytesHex(length: number): string;
  */
 export function randomFelt(): string;
 
+/**
+ * Reveal the 15 preimages a disclosure request names.
+ *
+ * Returns 15 lowercase hex strings: round 0's then round 1's, in the given
+ * order. Every parameter is validated before the mnemonic is read.
+ *
+ * # Security / threat model
+ *
+ * Call only after durably recording this request as `exposed`. The returned
+ * preimages are spending secrets. The Rust-side preimages and their hex
+ * encoding are wiped before returning; the JS strings cannot be wiped.
+ */
+export function revealQsbPreimages(mnemonic: string, net: number, vault_index: number, round0: number[], round1: number[], passphrase?: string | null): string[];
+
 /**
  * Multiply a point by a scalar.
  *
@@ -1825,6 +1952,42 @@ export function scalarMulGenerator(scalar: string): WasmPoint;
  */
 export function serializePublicKey(x: string, y: string): string;
 
+/**
+ * Sign a UTF-8 message with a BIP-322 "simple" signature for this key's
+ * P2WPKH address.
+ *
+ * Returns the `smp`-prefixed base64 witness that BIP-322 requires of
+ * signers. Pass `legacy_unprefixed = true` only for a verifier that predates
+ * the prefix (for example `bip322-js` 4.0.0); strict verifiers may reject the
+ * unprefixed form.
+ *
+ * # Arguments
+ * * `private_key` - 64 hex chars (no 0x prefix), secp256k1 private key
+ * * `address` - must be this key's mainnet P2WPKH address
+ * * `message` - the message; signed as its UTF-8 bytes
+ * * `legacy_unprefixed` - optional boolean, `false` when omitted
+ */
+export function signBip322Simple(private_key: string, address: string, message: string, legacy_unprefixed?: boolean): string;
+
+/**
+ * Add this key's SIGHASH_ALL partial signature to the listed inputs of a
+ * base64 PSBT (version 0) and return the PSBT as base64. Signatures are
+ * low-R and low-S, as Bitcoin Core signs: at most 71 bytes each.
+ *
+ * Each listed input must be this key's P2WPKH coin, proven by a
+ * `witness_utxo` that matches the spent output of its full
+ * `non_witness_utxo`, and must not request a sighash type other than
+ * SIGHASH_ALL. Every other input and field is returned byte-identical. The
+ * PSBT is not finalized or broadcast.
+ *
+ * # Arguments
+ * * `private_key` - 64 hex chars (no 0x prefix), secp256k1 private key
+ * * `psbt_base64` - the PSBT, standard base64 with padding
+ * * `input_indices` - a plain array of input numbers to sign; non-empty,
+ *   distinct and in range (typed arrays are refused)
+ */
+export function signBitcoinPsbtInputs(private_key: string, psbt_base64: string, input_indices: number[]): string;
+
 /**
  * Sign a 32-byte Nostr event id using BIP-340 Schnorr.
  *
@@ -2236,41 +2399,16 @@ export interface InitOutput {
     readonly __wbg_get_wasmstarkxonlykeypair_private_key: (a: number) => [number, number];
     readonly __wbg_get_wasmstarkxonlykeypair_public_key_x: (a: number) => [number, number];
     readonly __wbg_get_wasmstarkxonlypublickey_public_key_x: (a: number) => [number, number];
-    readonly deserializePublicKey: (a: number, b: number) => [number, number, number];
-    readonly getBuildInfo: () => any;
-    readonly getGenerator: () => number;
-    readonly getVersion: () => [number, number];
-    readonly grindKey: (a: number, b: number) => [number, number, number, number];
-    readonly init: () => void;
-    readonly isValidFelt: (a: number, b: number) => number;
-    readonly isValidStarkPrivateKey: (a: number, b: number) => number;
-    readonly nostrPublicKey: (a: number, b: number) => [number, number, number, number];
-    readonly pointAdd: (a: number, b: number, c: number, d: number, e: number, f: number, g: number, h: number) => [number, number, number];
-    readonly poseidonHash: (a: number, b: number, c: number, d: number) => [number, number, number, number];
-    readonly poseidonHashMany: (a: number, b: number) => [number, number, number, number];
-    readonly randomBytesHex: (a: number) => [number, number, number, number];
-    readonly randomFelt: () => [number, number, number, number];
-    readonly scalarMul: (a: number, b: number, c: number, d: number, e: number, f: number) => [number, number, number];
-    readonly scalarMulGenerator: (a: number, b: number) => [number, number, number];
-    readonly serializePublicKey: (a: number, b: number, c: number, d: number) => [number, number, number, number];
-    readonly signNostrEventId: (a: number, b: number, c: number, d: number) => [number, number, number];
-    readonly signNostrMessage: (a: number, b: number, c: number, d: number) => [number, number, number];
-    readonly signStarkHash: (a: number, b: number, c: number, d: number) => [number, number, number];
-    readonly starkPublicKey: (a: number, b: number) => [number, number, number, number];
-    readonly openNostrApplicationData: (a: number, b: number, c: number, d: number, e: number, f: number, g: number, h: number) => [number, number, number, number];
-    readonly wrapNostrApplicationData: (a: number, b: number, c: number, d: number, e: number, f: number, g: number, h: number, i: number, j: number, k: number, l: number) => [number, number, number, number];
     readonly calculateContractAddress: (a: number, b: number, c: number, d: number, e: number, f: number, g: number, h: number) => [number, number, number, number];
     readonly deriveArgentAccountAddress: (a: number, b: number, c: number, d: number) => [number, number, number, number];
     readonly deriveArgentAccountAddressWithGuardian: (a: number, b: number, c: number, d: number, e: number, f: number) => [number, number, number, number];
     readonly deriveBraavosAccountAddress: (a: number, b: number, c: number, d: number) => [number, number, number, number];
     readonly deriveOzAccountAddress: (a: number, b: number, c: number, d: number, e: number, f: number) => [number, number, number, number];
-    readonly deriveScopedStrk20ViewingKey: (a: number, b: number, c: number, d: number, e: number, f: number) => [number, number, number, number];
-    readonly deriveStrk20ViewingKey: (a: number, b: number) => [number, number, number, number];
-    readonly foldStrk20ViewingKey: (a: number, b: number, c: number, d: number, e: number, f: number, g: number, h: number) => [number, number, number, number];
     readonly getAccountClassHashes: () => [number, number];
     readonly getAccountClassRegistry: () => [number, number, number, number];
     readonly inspectAccountDeployment: (a: number, b: number, c: number, d: number, e: number, f: number) => [number, number, number, number];
-    readonly strk20ViewingKeyMessageHash: (a: number, b: number, c: number, d: number) => [number, number, number, number];
+    readonly openNostrApplicationData: (a: number, b: number, c: number, d: number, e: number, f: number, g: number, h: number) => [number, number, number, number];
+    readonly wrapNostrApplicationData: (a: number, b: number, c: number, d: number, e: number, f: number, g: number, h: number, i: number, j: number, k: number, l: number) => [number, number, number, number];
     readonly computeDeclareTransactionHashV2: (a: number, b: number, c: number, d: number, e: number, f: number, g: number, h: number, i: number, j: number, k: number, l: number) => [number, number, number, number];
     readonly computeDeclareTransactionHashV3: (a: number, b: number, c: number, d: number, e: number, f: number, g: number, h: number, i: number, j: number, k: number, l: number, m: any, n: number, o: number, p: number, q: number, r: number, s: number) => [number, number, number, number];
     readonly computeDeployAccountTransactionHashV1: (a: number, b: number, c: number, d: number, e: number, f: number, g: number, h: number, i: number, j: number, k: number, l: number, m: number, n: number) => [number, number, number, number];
@@ -2278,50 +2416,66 @@ export interface InitOutput {
     readonly computeInvokeTransactionHashV1: (a: number, b: number, c: number, d: number, e: number, f: number, g: number, h: number, i: number, j: number) => [number, number, number, number];
     readonly computeInvokeTransactionHashV3: (a: number, b: number, c: number, d: number, e: number, f: number, g: number, h: number, i: number, j: number, k: any, l: number, m: number, n: number, o: number, p: number, q: number, r: number, s: number) => [number, number, number, number];
     readonly computeTypedDataMessageHash: (a: number, b: number, c: number, d: number) => [number, number, number, number];
-    readonly getSelectorFromName: (a: number, b: number) => [number, number, number, number];
-    readonly pedersenHash: (a: number, b: number, c: number, d: number) => [number, number, number, number];
-    readonly pedersenHashMany: (a: number, b: number) => [number, number, number, number];
-    readonly starknetKeccak: (a: number, b: number, c: number, d: number) => [number, number, number, number];
-    readonly compileCalls: (a: number, b: number) => [number, number, number, number];
-    readonly decodeShortString: (a: number, b: number) => [number, number, number, number];
-    readonly encodeFelt: (a: number, b: number) => [number, number, number, number];
-    readonly encodeShortString: (a: number, b: number) => [number, number, number, number];
+    readonly __wbg_get_wasmbitcoinp2wpkhkeypair_address: (a: number) => [number, number];
+    readonly __wbg_get_wasmbitcoinp2wpkhkeypair_path: (a: number) => [number, number];
+    readonly __wbg_get_wasmbitcoinp2wpkhkeypair_private_key: (a: number) => [number, number];
+    readonly __wbg_get_wasmbitcoinp2wpkhkeypair_public_key: (a: number) => [number, number];
+    readonly __wbg_set_wasmbitcoinp2wpkhkeypair_address: (a: number, b: number, c: number) => void;
+    readonly __wbg_set_wasmbitcoinp2wpkhkeypair_path: (a: number, b: number, c: number) => void;
+    readonly __wbg_set_wasmbitcoinp2wpkhkeypair_private_key: (a: number, b: number, c: number) => void;
+    readonly __wbg_set_wasmbitcoinp2wpkhkeypair_public_key: (a: number, b: number, c: number) => void;
+    readonly __wbg_wasmbitcoinp2wpkhkeypair_free: (a: number, b: number) => void;
+    readonly __wbg_wasmencryptedkey_free: (a: number, b: number) => void;
+    readonly __wbg_wasmencryptedpayload_free: (a: number, b: number) => void;
+    readonly decryptEthersKeystore: (a: number, b: number, c: number, d: number) => [number, number, number, number];
+    readonly decryptKeystore: (a: number, b: number, c: number, d: number) => [number, number, number, number];
+    readonly decryptPrivateKey: (a: number, b: number, c: number, d: number, e: number, f: number, g: number, h: number, i: number) => [number, number, number, number];
+    readonly decryptWithKey: (a: number, b: number, c: number, d: number, e: number, f: number) => [number, number, number, number];
     readonly deriveArgentLegacyKeypair: (a: number, b: number, c: number, d: number) => [number, number, number];
     readonly deriveArgentLegacyPublicKey: (a: number, b: number, c: number, d: number) => [number, number, number];
-    readonly deriveDiscoveryKeypairs: (a: number, b: number, c: number) => [number, number, number, number];
-    readonly deriveDiscoveryKeypairsWithSecrets: (a: number, b: number, c: number) => [number, number, number, number];
+    readonly deriveBitcoinP2wpkhKeypair: (a: number, b: number, c: any, d: any, e: any, f: number, g: number) => [number, number, number];
     readonly deriveKeypair: (a: number, b: number, c: number, d: number, e: number, f: number) => [number, number, number];
     readonly derivePublicKey: (a: number, b: number, c: number, d: number, e: number, f: number) => [number, number, number];
     readonly deriveStarknetKeypair: (a: number, b: number, c: number, d: number, e: number, f: number) => [number, number, number];
     readonly deriveStarknetPublicKey: (a: number, b: number, c: number, d: number, e: number, f: number) => [number, number, number];
-    readonly discoverAccountsFromMnemonic: (a: number, b: number, c: number) => [number, number, number, number];
-    readonly discoverAccountsFromMnemonicWithSecrets: (a: number, b: number, c: number) => [number, number, number, number];
-    readonly generateAccountAddresses: (a: number, b: number, c: number) => [number, number, number, number];
-    readonly generateAccountCandidates: (a: number, b: number, c: number) => [number, number, number, number];
-    readonly generateAccountCandidatesWithSecrets: (a: number, b: number, c: number) => [number, number, number, number];
+    readonly encryptKeystore: (a: number, b: number, c: number, d: number, e: number) => [number, number, number, number];
+    readonly encryptPrivateKey: (a: number, b: number, c: number, d: number, e: number) => [number, number, number];
+    readonly encryptWithKey: (a: number, b: number, c: number, d: number) => [number, number, number];
     readonly generateMnemonic: (a: number) => [number, number, number, number];
     readonly getNostrCoinType: () => number;
     readonly getStarknetCoinType: () => number;
     readonly getTongoCoinType: () => number;
+    readonly signBip322Simple: (a: number, b: number, c: number, d: number, e: number, f: number, g: any) => [number, number, number, number];
+    readonly signBitcoinPsbtInputs: (a: number, b: number, c: number, d: number, e: any) => [number, number, number, number];
     readonly validateMnemonic: (a: number, b: number) => number;
-    readonly __wbg_get_wasmencryptedkey_encryptedKey: (a: number) => [number, number];
-    readonly __wbg_get_wasmencryptedkey_nonce: (a: number) => [number, number];
-    readonly __wbg_get_wasmencryptedkey_salt: (a: number) => [number, number];
     readonly __wbg_set_wasmencryptedkey_encryptedKey: (a: number, b: number, c: number) => void;
     readonly __wbg_set_wasmencryptedkey_nonce: (a: number, b: number, c: number) => void;
     readonly __wbg_set_wasmencryptedkey_salt: (a: number, b: number, c: number) => void;
-    readonly __wbg_wasmaccount_free: (a: number, b: number) => void;
-    readonly __wbg_wasmencryptedkey_free: (a: number, b: number) => void;
-    readonly __wbg_wasmencryptedpayload_free: (a: number, b: number) => void;
-    readonly decryptEthersKeystore: (a: number, b: number, c: number, d: number) => [number, number, number, number];
-    readonly decryptKeystore: (a: number, b: number, c: number, d: number) => [number, number, number, number];
-    readonly decryptPrivateKey: (a: number, b: number, c: number, d: number, e: number, f: number, g: number, h: number, i: number) => [number, number, number, number];
-    readonly decryptWithKey: (a: number, b: number, c: number, d: number, e: number, f: number) => [number, number, number, number];
+    readonly __wbg_set_wasmencryptedpayload_ciphertext: (a: number, b: number, c: number) => void;
+    readonly __wbg_set_wasmencryptedpayload_nonce: (a: number, b: number, c: number) => void;
+    readonly __wbg_get_wasmencryptedkey_encryptedKey: (a: number) => [number, number];
+    readonly __wbg_get_wasmencryptedkey_nonce: (a: number) => [number, number];
+    readonly __wbg_get_wasmencryptedkey_salt: (a: number) => [number, number];
+    readonly __wbg_get_wasmencryptedpayload_ciphertext: (a: number) => [number, number];
+    readonly __wbg_get_wasmencryptedpayload_nonce: (a: number) => [number, number];
+    readonly compileCalls: (a: number, b: number) => [number, number, number, number];
+    readonly decodeShortString: (a: number, b: number) => [number, number, number, number];
+    readonly encodeFelt: (a: number, b: number) => [number, number, number, number];
+    readonly encodeShortString: (a: number, b: number) => [number, number, number, number];
     readonly deriveNostrKeypair: (a: number, b: number, c: number, d: number, e: number, f: number) => [number, number, number];
     readonly deriveNostrPublicKey: (a: number, b: number, c: number, d: number, e: number, f: number) => [number, number, number];
-    readonly encryptKeystore: (a: number, b: number, c: number, d: number, e: number) => [number, number, number, number];
-    readonly encryptPrivateKey: (a: number, b: number, c: number, d: number, e: number) => [number, number, number];
-    readonly encryptWithKey: (a: number, b: number, c: number, d: number) => [number, number, number];
+    readonly getSelectorFromName: (a: number, b: number) => [number, number, number, number];
+    readonly pedersenHash: (a: number, b: number, c: number, d: number) => [number, number, number, number];
+    readonly pedersenHashMany: (a: number, b: number) => [number, number, number, number];
+    readonly starknetKeccak: (a: number, b: number, c: number, d: number) => [number, number, number, number];
+    readonly __wbg_wasmaccount_free: (a: number, b: number) => void;
+    readonly deriveDiscoveryKeypairs: (a: number, b: number, c: number) => [number, number, number, number];
+    readonly deriveDiscoveryKeypairsWithSecrets: (a: number, b: number, c: number) => [number, number, number, number];
+    readonly discoverAccountsFromMnemonic: (a: number, b: number, c: number) => [number, number, number, number];
+    readonly discoverAccountsFromMnemonicWithSecrets: (a: number, b: number, c: number) => [number, number, number, number];
+    readonly generateAccountAddresses: (a: number, b: number, c: number) => [number, number, number, number];
+    readonly generateAccountCandidates: (a: number, b: number, c: number) => [number, number, number, number];
+    readonly generateAccountCandidatesWithSecrets: (a: number, b: number, c: number) => [number, number, number, number];
     readonly wasmaccount_contractAddress: (a: number) => [number, number];
     readonly wasmaccount_decryptBalance: (a: number, b: number, c: number, d: bigint) => [number, number, number, number];
     readonly wasmaccount_decryptToPoint: (a: number, b: number) => [number, number, number];
@@ -2332,10 +2486,46 @@ export interface InitOutput {
     readonly wasmaccount_ownerPublicKeyHex: (a: number) => [number, number, number, number];
     readonly wasmaccount_totalBalance: (a: number) => [number, number, number, number];
     readonly wasmaccount_updateState: (a: number, b: number) => [number, number];
-    readonly __wbg_set_wasmencryptedpayload_ciphertext: (a: number, b: number, c: number) => void;
-    readonly __wbg_set_wasmencryptedpayload_nonce: (a: number, b: number, c: number) => void;
-    readonly __wbg_get_wasmencryptedpayload_ciphertext: (a: number) => [number, number];
-    readonly __wbg_get_wasmencryptedpayload_nonce: (a: number) => [number, number];
+    readonly __wbg_get_wasmqsbcommitments_root: (a: number) => [number, number];
+    readonly __wbg_get_wasmqsbcommitments_round0: (a: number) => [number, number];
+    readonly __wbg_get_wasmqsbcommitments_round1: (a: number) => [number, number];
+    readonly __wbg_get_wasmqsbrevealdigest_binding: (a: number) => [number, number];
+    readonly __wbg_get_wasmqsbrevealdigest_digest: (a: number) => [number, number];
+    readonly __wbg_set_wasmqsbcommitments_root: (a: number, b: number, c: number) => void;
+    readonly __wbg_set_wasmqsbcommitments_round0: (a: number, b: number, c: number) => void;
+    readonly __wbg_set_wasmqsbcommitments_round1: (a: number, b: number, c: number) => void;
+    readonly __wbg_set_wasmqsbrevealdigest_binding: (a: number, b: number, c: number) => void;
+    readonly __wbg_set_wasmqsbrevealdigest_digest: (a: number, b: number, c: number) => void;
+    readonly __wbg_wasmqsbcommitments_free: (a: number, b: number) => void;
+    readonly __wbg_wasmqsbrevealdigest_free: (a: number, b: number) => void;
+    readonly deriveQsbCommitments: (a: number, b: number, c: any, d: any, e: number, f: number) => [number, number, number];
+    readonly deriveScopedStrk20ViewingKey: (a: number, b: number, c: number, d: number, e: number, f: number) => [number, number, number, number];
+    readonly deriveStrk20ViewingKey: (a: number, b: number) => [number, number, number, number];
+    readonly foldStrk20ViewingKey: (a: number, b: number, c: number, d: number, e: number, f: number, g: number, h: number) => [number, number, number, number];
+    readonly qsbRevealDigest: (a: any, b: any, c: any) => [number, number, number];
+    readonly revealQsbPreimages: (a: number, b: number, c: any, d: any, e: any, f: any, g: number, h: number) => [number, number, number];
+    readonly strk20ViewingKeyMessageHash: (a: number, b: number, c: number, d: number) => [number, number, number, number];
+    readonly deserializePublicKey: (a: number, b: number) => [number, number, number];
+    readonly getBuildInfo: () => any;
+    readonly getGenerator: () => number;
+    readonly getVersion: () => [number, number];
+    readonly grindKey: (a: number, b: number) => [number, number, number, number];
+    readonly init: () => void;
+    readonly isValidFelt: (a: number, b: number) => number;
+    readonly isValidStarkPrivateKey: (a: number, b: number) => number;
+    readonly nostrPublicKey: (a: number, b: number) => [number, number, number, number];
+    readonly pointAdd: (a: number, b: number, c: number, d: number, e: number, f: number, g: number, h: number) => [number, number, number];
+    readonly poseidonHash: (a: number, b: number, c: number, d: number) => [number, number, number, number];
+    readonly poseidonHashMany: (a: number, b: number) => [number, number, number, number];
+    readonly randomBytesHex: (a: number) => [number, number, number, number];
+    readonly randomFelt: () => [number, number, number, number];
+    readonly scalarMul: (a: number, b: number, c: number, d: number, e: number, f: number) => [number, number, number];
+    readonly scalarMulGenerator: (a: number, b: number) => [number, number, number];
+    readonly serializePublicKey: (a: number, b: number, c: number, d: number) => [number, number, number, number];
+    readonly signNostrEventId: (a: number, b: number, c: number, d: number) => [number, number, number];
+    readonly signNostrMessage: (a: number, b: number, c: number, d: number) => [number, number, number];
+    readonly signStarkHash: (a: number, b: number, c: number, d: number) => [number, number, number];
+    readonly starkPublicKey: (a: number, b: number) => [number, number, number, number];
     readonly __wbindgen_malloc: (a: number, b: number) => number;
     readonly __wbindgen_realloc: (a: number, b: number, c: number, d: number) => number;
     readonly __wbindgen_exn_store: (a: number) => void;

package/krusty_kms_wasm.js

@@ -360,6 +360,136 @@ export class WasmAccountState {
 }
 if (Symbol.dispose) WasmAccountState.prototype[Symbol.dispose] = WasmAccountState.prototype.free;
 
+/**
+ * BIP-84 mainnet P2WPKH keypair.
+ *
+ * # Security / threat model
+ *
+ * `private_key` is a plain hex string in the JS heap and cannot be reliably
+ * wiped. The copy this object owns in WASM memory is zeroized when the
+ * object is freed, as for [`crate::WasmKeypair`]. `Debug` redacts the
+ * private key; default `Serialize` omits it.
+ */
+export class WasmBitcoinP2wpkhKeypair {
+    static __wrap(ptr) {
+        const obj = Object.create(WasmBitcoinP2wpkhKeypair.prototype);
+        obj.__wbg_ptr = ptr;
+        WasmBitcoinP2wpkhKeypairFinalization.register(obj, obj.__wbg_ptr, obj);
+        return obj;
+    }
+    __destroy_into_raw() {
+        const ptr = this.__wbg_ptr;
+        this.__wbg_ptr = 0;
+        WasmBitcoinP2wpkhKeypairFinalization.unregister(this);
+        return ptr;
+    }
+    free() {
+        const ptr = this.__destroy_into_raw();
+        wasm.__wbg_wasmbitcoinp2wpkhkeypair_free(ptr, 0);
+    }
+    /**
+     * Lowercase `bc1q…` P2WPKH address.
+     * @returns {string}
+     */
+    get address() {
+        let deferred1_0;
+        let deferred1_1;
+        try {
+            const ret = wasm.__wbg_get_wasmbitcoinp2wpkhkeypair_address(this.__wbg_ptr);
+            deferred1_0 = ret[0];
+            deferred1_1 = ret[1];
+            return getStringFromWasm0(ret[0], ret[1]);
+        } finally {
+            wasm.__wbindgen_free(deferred1_0, deferred1_1, 1);
+        }
+    }
+    /**
+     * Derivation path, e.g. `m/84'/0'/0'/0/0`.
+     * @returns {string}
+     */
+    get path() {
+        let deferred1_0;
+        let deferred1_1;
+        try {
+            const ret = wasm.__wbg_get_wasmbitcoinp2wpkhkeypair_path(this.__wbg_ptr);
+            deferred1_0 = ret[0];
+            deferred1_1 = ret[1];
+            return getStringFromWasm0(ret[0], ret[1]);
+        } finally {
+            wasm.__wbindgen_free(deferred1_0, deferred1_1, 1);
+        }
+    }
+    /**
+     * Private key as 64 hex chars (no 0x prefix). Treat as secret.
+     * @returns {string}
+     */
+    get private_key() {
+        let deferred1_0;
+        let deferred1_1;
+        try {
+            const ret = wasm.__wbg_get_wasmbitcoinp2wpkhkeypair_private_key(this.__wbg_ptr);
+            deferred1_0 = ret[0];
+            deferred1_1 = ret[1];
+            return getStringFromWasm0(ret[0], ret[1]);
+        } finally {
+            wasm.__wbindgen_free(deferred1_0, deferred1_1, 1);
+        }
+    }
+    /**
+     * Compressed SEC1 public key as 66 hex chars (no 0x prefix).
+     * @returns {string}
+     */
+    get public_key() {
+        let deferred1_0;
+        let deferred1_1;
+        try {
+            const ret = wasm.__wbg_get_wasmbitcoinp2wpkhkeypair_public_key(this.__wbg_ptr);
+            deferred1_0 = ret[0];
+            deferred1_1 = ret[1];
+            return getStringFromWasm0(ret[0], ret[1]);
+        } finally {
+            wasm.__wbindgen_free(deferred1_0, deferred1_1, 1);
+        }
+    }
+    /**
+     * Lowercase `bc1q…` P2WPKH address.
+     * @param {string} arg0
+     */
+    set address(arg0) {
+        const ptr0 = passStringToWasm0(arg0, wasm.__wbindgen_malloc, wasm.__wbindgen_realloc);
+        const len0 = WASM_VECTOR_LEN;
+        wasm.__wbg_set_wasmbitcoinp2wpkhkeypair_address(this.__wbg_ptr, ptr0, len0);
+    }
+    /**
+     * Derivation path, e.g. `m/84'/0'/0'/0/0`.
+     * @param {string} arg0
+     */
+    set path(arg0) {
+        const ptr0 = passStringToWasm0(arg0, wasm.__wbindgen_malloc, wasm.__wbindgen_realloc);
+        const len0 = WASM_VECTOR_LEN;
+        wasm.__wbg_set_wasmbitcoinp2wpkhkeypair_path(this.__wbg_ptr, ptr0, len0);
+    }
+    /**
+     * Private key as 64 hex chars (no 0x prefix). Treat as secret.
+     * @param {string} arg0
+     */
+    set private_key(arg0) {
+        const ptr0 = passStringToWasm0(arg0, wasm.__wbindgen_malloc, wasm.__wbindgen_realloc);
+        const len0 = WASM_VECTOR_LEN;
+        wasm.__wbg_set_wasmbitcoinp2wpkhkeypair_private_key(this.__wbg_ptr, ptr0, len0);
+    }
+    /**
+     * Compressed SEC1 public key as 66 hex chars (no 0x prefix).
+     * @param {string} arg0
+     */
+    set public_key(arg0) {
+        const ptr0 = passStringToWasm0(arg0, wasm.__wbindgen_malloc, wasm.__wbindgen_realloc);
+        const len0 = WASM_VECTOR_LEN;
+        wasm.__wbg_set_wasmbitcoinp2wpkhkeypair_public_key(this.__wbg_ptr, ptr0, len0);
+    }
+}
+if (Symbol.dispose) WasmBitcoinP2wpkhKeypair.prototype[Symbol.dispose] = WasmBitcoinP2wpkhKeypair.prototype.free;
+
 /**
  * ElGamal ciphertext (L, R points).
  */
@@ -1805,6 +1935,165 @@ export class WasmPublicKey {
 }
 if (Symbol.dispose) WasmPublicKey.prototype[Symbol.dispose] = WasmPublicKey.prototype.free;
 
+/**
+ * The public commitments of one vault and their root.
+ */
+export class WasmQsbCommitments {
+    static __wrap(ptr) {
+        const obj = Object.create(WasmQsbCommitments.prototype);
+        obj.__wbg_ptr = ptr;
+        WasmQsbCommitmentsFinalization.register(obj, obj.__wbg_ptr, obj);
+        return obj;
+    }
+    __destroy_into_raw() {
+        const ptr = this.__wbg_ptr;
+        this.__wbg_ptr = 0;
+        WasmQsbCommitmentsFinalization.unregister(this);
+        return ptr;
+    }
+    free() {
+        const ptr = this.__destroy_into_raw();
+        wasm.__wbg_wasmqsbcommitments_free(ptr, 0);
+    }
+    /**
+     * The commitment root `R[v]` (64 lowercase hex chars).
+     * @returns {string}
+     */
+    get root() {
+        let deferred1_0;
+        let deferred1_1;
+        try {
+            const ret = wasm.__wbg_get_wasmqsbcommitments_root(this.__wbg_ptr);
+            deferred1_0 = ret[0];
+            deferred1_1 = ret[1];
+            return getStringFromWasm0(ret[0], ret[1]);
+        } finally {
+            wasm.__wbindgen_free(deferred1_0, deferred1_1, 1);
+        }
+    }
+    /**
+     * The 150 round-0 commitments `c[v][0][i]`, in index order (40 lowercase hex chars each).
+     * @returns {string[]}
+     */
+    get round0() {
+        const ret = wasm.__wbg_get_wasmqsbcommitments_round0(this.__wbg_ptr);
+        var v1 = getArrayJsValueFromWasm0(ret[0], ret[1]);
+        wasm.__wbindgen_free(ret[0], ret[1] * 4, 4);
+        return v1;
+    }
+    /**
+     * The 150 round-1 commitments `c[v][1][i]`, in index order (40 lowercase hex chars each).
+     * @returns {string[]}
+     */
+    get round1() {
+        const ret = wasm.__wbg_get_wasmqsbcommitments_round1(this.__wbg_ptr);
+        var v1 = getArrayJsValueFromWasm0(ret[0], ret[1]);
+        wasm.__wbindgen_free(ret[0], ret[1] * 4, 4);
+        return v1;
+    }
+    /**
+     * The commitment root `R[v]` (64 lowercase hex chars).
+     * @param {string} arg0
+     */
+    set root(arg0) {
+        const ptr0 = passStringToWasm0(arg0, wasm.__wbindgen_malloc, wasm.__wbindgen_realloc);
+        const len0 = WASM_VECTOR_LEN;
+        wasm.__wbg_set_wasmqsbcommitments_root(this.__wbg_ptr, ptr0, len0);
+    }
+    /**
+     * The 150 round-0 commitments `c[v][0][i]`, in index order (40 lowercase hex chars each).
+     * @param {string[]} arg0
+     */
+    set round0(arg0) {
+        const ptr0 = passArrayJsValueToWasm0(arg0, wasm.__wbindgen_malloc);
+        const len0 = WASM_VECTOR_LEN;
+        wasm.__wbg_set_wasmqsbcommitments_round0(this.__wbg_ptr, ptr0, len0);
+    }
+    /**
+     * The 150 round-1 commitments `c[v][1][i]`, in index order (40 lowercase hex chars each).
+     * @param {string[]} arg0
+     */
+    set round1(arg0) {
+        const ptr0 = passArrayJsValueToWasm0(arg0, wasm.__wbindgen_malloc);
+        const len0 = WASM_VECTOR_LEN;
+        wasm.__wbg_set_wasmqsbcommitments_round1(this.__wbg_ptr, ptr0, len0);
+    }
+}
+if (Symbol.dispose) WasmQsbCommitments.prototype[Symbol.dispose] = WasmQsbCommitments.prototype.free;
+
+/**
+ * The transaction binding of a disclosure request.
+ */
+export class WasmQsbRevealDigest {
+    static __wrap(ptr) {
+        const obj = Object.create(WasmQsbRevealDigest.prototype);
+        obj.__wbg_ptr = ptr;
+        WasmQsbRevealDigestFinalization.register(obj, obj.__wbg_ptr, obj);
+        return obj;
+    }
+    __destroy_into_raw() {
+        const ptr = this.__wbg_ptr;
+        this.__wbg_ptr = 0;
+        WasmQsbRevealDigestFinalization.unregister(this);
+        return ptr;
+    }
+    free() {
+        const ptr = this.__destroy_into_raw();
+        wasm.__wbg_wasmqsbrevealdigest_free(ptr, 0);
+    }
+    /**
+     * `B = SHA256(T)` (64 lowercase hex chars).
+     * @returns {string}
+     */
+    get binding() {
+        let deferred1_0;
+        let deferred1_1;
+        try {
+            const ret = wasm.__wbg_get_wasmqsbrevealdigest_binding(this.__wbg_ptr);
+            deferred1_0 = ret[0];
+            deferred1_1 = ret[1];
+            return getStringFromWasm0(ret[0], ret[1]);
+        } finally {
+            wasm.__wbindgen_free(deferred1_0, deferred1_1, 1);
+        }
+    }
+    /**
+     * `D = SHA256("QSB-HORS-v1/reveal" || I || B)` (64 lowercase hex chars).
+     * @returns {string}
+     */
+    get digest() {
+        let deferred1_0;
+        let deferred1_1;
+        try {
+            const ret = wasm.__wbg_get_wasmqsbrevealdigest_digest(this.__wbg_ptr);
+            deferred1_0 = ret[0];
+            deferred1_1 = ret[1];
+            return getStringFromWasm0(ret[0], ret[1]);
+        } finally {
+            wasm.__wbindgen_free(deferred1_0, deferred1_1, 1);
+        }
+    }
+    /**
+     * `B = SHA256(T)` (64 lowercase hex chars).
+     * @param {string} arg0
+     */
+    set binding(arg0) {
+        const ptr0 = passStringToWasm0(arg0, wasm.__wbindgen_malloc, wasm.__wbindgen_realloc);
+        const len0 = WASM_VECTOR_LEN;
+        wasm.__wbg_set_wasmqsbrevealdigest_binding(this.__wbg_ptr, ptr0, len0);
+    }
+    /**
+     * `D = SHA256("QSB-HORS-v1/reveal" || I || B)` (64 lowercase hex chars).
+     * @param {string} arg0
+     */
+    set digest(arg0) {
+        const ptr0 = passStringToWasm0(arg0, wasm.__wbindgen_malloc, wasm.__wbindgen_realloc);
+        const len0 = WASM_VECTOR_LEN;
+        wasm.__wbg_set_wasmqsbrevealdigest_digest(this.__wbg_ptr, ptr0, len0);
+    }
+}
+if (Symbol.dispose) WasmQsbRevealDigest.prototype[Symbol.dispose] = WasmQsbRevealDigest.prototype.free;
+
 /**
  * Parameters for generating a ragequit proof.
  */
@@ -5513,6 +5802,39 @@ export function deriveArgentLegacyPublicKey(mnemonic, address_index, account_ind
     return WasmStarkXOnlyPublicKey.__wrap(ret[0]);
 }
 
+/**
+ * Derive the BIP-84 mainnet P2WPKH keypair at
+ * `m/84'/0'/{account_index}'/{change}/{address_index}`.
+ *
+ * # Security / threat model
+ *
+ * Returns the private key as a hex string in the JS heap.
+ *
+ * # Arguments
+ * * `mnemonic` - BIP-39 mnemonic
+ * * `account_index` - hardened account index, an integer below 2^31
+ * * `change` - 0 for receiving, 1 for change
+ * * `address_index` - address index, an integer below 2^31
+ * * `passphrase` - Optional BIP-39 passphrase
+ * @param {string} mnemonic
+ * @param {number} account_index
+ * @param {number} change
+ * @param {number} address_index
+ * @param {string | null} [passphrase]
+ * @returns {WasmBitcoinP2wpkhKeypair}
+ */
+export function deriveBitcoinP2wpkhKeypair(mnemonic, account_index, change, address_index, passphrase) {
+    const ptr0 = passStringToWasm0(mnemonic, wasm.__wbindgen_malloc, wasm.__wbindgen_realloc);
+    const len0 = WASM_VECTOR_LEN;
+    var ptr1 = isLikeNone(passphrase) ? 0 : passStringToWasm0(passphrase, wasm.__wbindgen_malloc, wasm.__wbindgen_realloc);
+    var len1 = WASM_VECTOR_LEN;
+    const ret = wasm.deriveBitcoinP2wpkhKeypair(ptr0, len0, account_index, change, address_index, ptr1, len1);
+    if (ret[2]) {
+        throw takeFromExternrefTable0(ret[1]);
+    }
+    return WasmBitcoinP2wpkhKeypair.__wrap(ret[0]);
+}
+
 /**
  * Derive a Braavos account contract address from a public key.
  *
@@ -5801,6 +6123,36 @@ export function derivePublicKey(mnemonic, address_index, account_index, passphra
     return WasmPublicKey.__wrap(ret[0]);
 }
 
+/**
+ * Derive the 2 × 150 commitments and the root of a QSB vault.
+ *
+ * `net` is `0` (Bitcoin mainnet) or `1` (shared test namespace) and
+ * `vault_index` is below `2^31`; both are validated before the mnemonic is
+ * read. Deriving commitments does not allocate the vault.
+ *
+ * # Arguments
+ * * `mnemonic` - BIP-39 mnemonic of the dedicated QSB phrase
+ * * `net` - Derivation namespace
+ * * `vault_index` - Vault index `v`
+ * * `passphrase` - Optional BIP-39 passphrase
+ * @param {string} mnemonic
+ * @param {number} net
+ * @param {number} vault_index
+ * @param {string | null} [passphrase]
+ * @returns {WasmQsbCommitments}
+ */
+export function deriveQsbCommitments(mnemonic, net, vault_index, passphrase) {
+    const ptr0 = passStringToWasm0(mnemonic, wasm.__wbindgen_malloc, wasm.__wbindgen_realloc);
+    const len0 = WASM_VECTOR_LEN;
+    var ptr1 = isLikeNone(passphrase) ? 0 : passStringToWasm0(passphrase, wasm.__wbindgen_malloc, wasm.__wbindgen_realloc);
+    var len1 = WASM_VECTOR_LEN;
+    const ret = wasm.deriveQsbCommitments(ptr0, len0, net, vault_index, ptr1, len1);
+    if (ret[2]) {
+        throw takeFromExternrefTable0(ret[1]);
+    }
+    return WasmQsbCommitments.__wrap(ret[0]);
+}
+
 /**
  * Derive a chain- and pool-scoped STRK20 viewing key.
  * @param {string} private_key
@@ -7037,6 +7389,27 @@ export function poseidonHashMany(inputs) {
     }
 }
 
+/**
+ * Compute `B` and `D` for a disclosure request.
+ *
+ * `transaction_hex` is the BIP's `T` as lowercase hex: the full legacy
+ * serialization with every scriptSig empty and no witness. Krusty parses it
+ * and refuses anything else; it never accepts a caller-supplied hash.
+ * `round0` must hold 8 and `round1` 7 distinct indices below 150, in the
+ * order the spend reveals them.
+ * @param {string} transaction_hex
+ * @param {number[]} round0
+ * @param {number[]} round1
+ * @returns {WasmQsbRevealDigest}
+ */
+export function qsbRevealDigest(transaction_hex, round0, round1) {
+    const ret = wasm.qsbRevealDigest(transaction_hex, round0, round1);
+    if (ret[2]) {
+        throw takeFromExternrefTable0(ret[1]);
+    }
+    return WasmQsbRevealDigest.__wrap(ret[0]);
+}
+
 /**
  * Generate random bytes and return them as a hex string.
  *
@@ -7094,6 +7467,37 @@ export function randomFelt() {
     }
 }
 
+/**
+ * Reveal the 15 preimages a disclosure request names.
+ *
+ * Returns 15 lowercase hex strings: round 0's then round 1's, in the given
+ * order. Every parameter is validated before the mnemonic is read.
+ *
+ * # Security / threat model
+ *
+ * Call only after durably recording this request as `exposed`. The returned
+ * preimages are spending secrets. The Rust-side preimages and their hex
+ * encoding are wiped before returning; the JS strings cannot be wiped.
+ * @param {string} mnemonic
+ * @param {number} net
+ * @param {number} vault_index
+ * @param {number[]} round0
+ * @param {number[]} round1
+ * @param {string | null} [passphrase]
+ * @returns {string[]}
+ */
+export function revealQsbPreimages(mnemonic, net, vault_index, round0, round1, passphrase) {
+    const ptr0 = passStringToWasm0(mnemonic, wasm.__wbindgen_malloc, wasm.__wbindgen_realloc);
+    const len0 = WASM_VECTOR_LEN;
+    var ptr1 = isLikeNone(passphrase) ? 0 : passStringToWasm0(passphrase, wasm.__wbindgen_malloc, wasm.__wbindgen_realloc);
+    var len1 = WASM_VECTOR_LEN;
+    const ret = wasm.revealQsbPreimages(ptr0, len0, net, vault_index, round0, round1, ptr1, len1);
+    if (ret[2]) {
+        throw takeFromExternrefTable0(ret[1]);
+    }
+    return takeFromExternrefTable0(ret[0]);
+}
+
 /**
  * Multiply a point by a scalar.
  *
@@ -7180,6 +7584,95 @@ export function serializePublicKey(x, y) {
     }
 }
 
+/**
+ * Sign a UTF-8 message with a BIP-322 "simple" signature for this key's
+ * P2WPKH address.
+ *
+ * Returns the `smp`-prefixed base64 witness that BIP-322 requires of
+ * signers. Pass `legacy_unprefixed = true` only for a verifier that predates
+ * the prefix (for example `bip322-js` 4.0.0); strict verifiers may reject the
+ * unprefixed form.
+ *
+ * # Arguments
+ * * `private_key` - 64 hex chars (no 0x prefix), secp256k1 private key
+ * * `address` - must be this key's mainnet P2WPKH address
+ * * `message` - the message; signed as its UTF-8 bytes
+ * * `legacy_unprefixed` - optional boolean, `false` when omitted
+ * @param {string} private_key
+ * @param {string} address
+ * @param {string} message
+ * @param {boolean} [legacy_unprefixed]
+ * @returns {string}
+ */
+export function signBip322Simple(private_key, address, message, legacy_unprefixed) {
+    let deferred5_0;
+    let deferred5_1;
+    try {
+        const ptr0 = passStringToWasm0(private_key, wasm.__wbindgen_malloc, wasm.__wbindgen_realloc);
+        const len0 = WASM_VECTOR_LEN;
+        const ptr1 = passStringToWasm0(address, wasm.__wbindgen_malloc, wasm.__wbindgen_realloc);
+        const len1 = WASM_VECTOR_LEN;
+        const ptr2 = passStringToWasm0(message, wasm.__wbindgen_malloc, wasm.__wbindgen_realloc);
+        const len2 = WASM_VECTOR_LEN;
+        const ret = wasm.signBip322Simple(ptr0, len0, ptr1, len1, ptr2, len2, legacy_unprefixed);
+        var ptr4 = ret[0];
+        var len4 = ret[1];
+        if (ret[3]) {
+            ptr4 = 0; len4 = 0;
+            throw takeFromExternrefTable0(ret[2]);
+        }
+        deferred5_0 = ptr4;
+        deferred5_1 = len4;
+        return getStringFromWasm0(ptr4, len4);
+    } finally {
+        wasm.__wbindgen_free(deferred5_0, deferred5_1, 1);
+    }
+}
+
+/**
+ * Add this key's SIGHASH_ALL partial signature to the listed inputs of a
+ * base64 PSBT (version 0) and return the PSBT as base64. Signatures are
+ * low-R and low-S, as Bitcoin Core signs: at most 71 bytes each.
+ *
+ * Each listed input must be this key's P2WPKH coin, proven by a
+ * `witness_utxo` that matches the spent output of its full
+ * `non_witness_utxo`, and must not request a sighash type other than
+ * SIGHASH_ALL. Every other input and field is returned byte-identical. The
+ * PSBT is not finalized or broadcast.
+ *
+ * # Arguments
+ * * `private_key` - 64 hex chars (no 0x prefix), secp256k1 private key
+ * * `psbt_base64` - the PSBT, standard base64 with padding
+ * * `input_indices` - a plain array of input numbers to sign; non-empty,
+ *   distinct and in range (typed arrays are refused)
+ * @param {string} private_key
+ * @param {string} psbt_base64
+ * @param {number[]} input_indices
+ * @returns {string}
+ */
+export function signBitcoinPsbtInputs(private_key, psbt_base64, input_indices) {
+    let deferred4_0;
+    let deferred4_1;
+    try {
+        const ptr0 = passStringToWasm0(private_key, wasm.__wbindgen_malloc, wasm.__wbindgen_realloc);
+        const len0 = WASM_VECTOR_LEN;
+        const ptr1 = passStringToWasm0(psbt_base64, wasm.__wbindgen_malloc, wasm.__wbindgen_realloc);
+        const len1 = WASM_VECTOR_LEN;
+        const ret = wasm.signBitcoinPsbtInputs(ptr0, len0, ptr1, len1, input_indices);
+        var ptr3 = ret[0];
+        var len3 = ret[1];
+        if (ret[3]) {
+            ptr3 = 0; len3 = 0;
+            throw takeFromExternrefTable0(ret[2]);
+        }
+        deferred4_0 = ptr3;
+        deferred4_1 = len3;
+        return getStringFromWasm0(ptr3, len3);
+    } finally {
+        wasm.__wbindgen_free(deferred4_0, deferred4_1, 1);
+    }
+}
+
 /**
  * Sign a 32-byte Nostr event id using BIP-340 Schnorr.
  *
@@ -7412,6 +7905,10 @@ function __wbg_get_imports() {
             const ret = Error(getStringFromWasm0(arg0, arg1));
             return ret;
         },
+        __wbg_Number_3890faa6d3ff057d: function(arg0) {
+            const ret = Number(arg0);
+            return ret;
+        },
         __wbg_String_8564e559799eccda: function(arg0, arg1) {
             const ret = String(arg1);
             const ptr1 = passStringToWasm0(ret, wasm.__wbindgen_malloc, wasm.__wbindgen_realloc);
@@ -7435,6 +7932,14 @@ function __wbg_get_imports() {
             const ret = arg0 in arg1;
             return ret;
         },
+        __wbg___wbindgen_is_function_5e4570eb24ffa122: function(arg0) {
+            const ret = typeof(arg0) === 'function';
+            return ret;
+        },
+        __wbg___wbindgen_is_null_7d13f41e1a2d5140: function(arg0) {
+            const ret = arg0 === null;
+            return ret;
+        },
         __wbg___wbindgen_is_object_a2790eb24c211ea0: function(arg0) {
             const val = arg0;
             const ret = typeof(val) === 'object' && val !== null;
@@ -7469,9 +7974,29 @@ function __wbg_get_imports() {
         __wbg___wbindgen_throw_bb96b2010945f0bc: function(arg0, arg1) {
             throw new Error(getStringFromWasm0(arg0, arg1));
         },
+        __wbg_call_1c5886ab9c57d1c7: function() { return handleError(function (arg0, arg1) {
+            const ret = arg0.call(arg1);
+            return ret;
+        }, arguments); },
+        __wbg_done_669171204c3dcae2: function(arg0) {
+            const ret = arg0.done;
+            return ret;
+        },
         __wbg_getRandomValues_436a51d0629d84e1: function() { return handleError(function (arg0, arg1) {
             globalThis.crypto.getRandomValues(getArrayU8FromWasm0(arg0, arg1));
         }, arguments); },
+        __wbg_get_c0c8f8d7da0c03dd: function(arg0, arg1) {
+            const ret = arg0[arg1 >>> 0];
+            return ret;
+        },
+        __wbg_get_d173c0308df22d37: function() { return handleError(function (arg0, arg1) {
+            const ret = Reflect.get(arg0, arg1);
+            return ret;
+        }, arguments); },
+        __wbg_get_unchecked_e20b893aeafc3fca: function(arg0, arg1) {
+            const ret = arg0[arg1 >>> 0];
+            return ret;
+        },
         __wbg_get_with_ref_key_6412cf3094599694: function(arg0, arg1) {
             const ret = arg0[arg1];
             return ret;
@@ -7496,10 +8021,30 @@ function __wbg_get_imports() {
             const ret = result;
             return ret;
         },
+        __wbg_isArray_6339f732981044bf: function(arg0) {
+            const ret = Array.isArray(arg0);
+            return ret;
+        },
+        __wbg_isSafeInteger_f3d6cd19ccfe4512: function(arg0) {
+            const ret = Number.isSafeInteger(arg0);
+            return ret;
+        },
+        __wbg_iterator_5cebbb86e33c6dd6: function() {
+            const ret = Symbol.iterator;
+            return ret;
+        },
         __wbg_length_36bd29c6848c2144: function(arg0) {
             const ret = arg0.length;
             return ret;
         },
+        __wbg_length_7afd83ae4ddf324f: function(arg0) {
+            const ret = arg0.length;
+            return ret;
+        },
+        __wbg_length_ecfa2c63d3d0d82c: function(arg0) {
+            const ret = arg0.length;
+            return ret;
+        },
         __wbg_new_116be93542d39019: function() {
             const ret = new Array();
             return ret;
@@ -7520,6 +8065,14 @@ function __wbg_get_imports() {
             const ret = new Object();
             return ret;
         },
+        __wbg_next_42cf16ee0dafc9e2: function() { return handleError(function (arg0) {
+            const ret = arg0.next();
+            return ret;
+        }, arguments); },
+        __wbg_next_8f26b64fa5e9f64b: function(arg0) {
+            const ret = arg0.next;
+            return ret;
+        },
         __wbg_now_8b265300afd5f2b9: function() {
             const ret = Date.now();
             return ret;
@@ -7527,6 +8080,10 @@ function __wbg_get_imports() {
         __wbg_prototypesetcall_de8e0d9553586985: function(arg0, arg1, arg2) {
             Uint8Array.prototype.set.call(getArrayU8FromWasm0(arg0, arg1), arg2);
         },
+        __wbg_push_adb0107829f02d75: function(arg0, arg1) {
+            const ret = arg0.push(arg1);
+            return ret;
+        },
         __wbg_set_014226dfeca53178: function(arg0, arg1, arg2) {
             const ret = arg0.set(arg1, arg2);
             return ret;
@@ -7537,6 +8094,10 @@ function __wbg_get_imports() {
         __wbg_set_a80955eb93b145c6: function(arg0, arg1, arg2) {
             arg0[arg1 >>> 0] = arg2;
         },
+        __wbg_value_1e2369fab29b420e: function(arg0) {
+            const ret = arg0.value;
+            return ret;
+        },
         __wbindgen_cast_0000000000000001: function(arg0) {
             // Cast intrinsic for `F64 -> Externref`.
             const ret = arg0;
@@ -7579,6 +8140,9 @@ const WasmAccountFinalization = (typeof FinalizationRegistry === 'undefined')
 const WasmAccountStateFinalization = (typeof FinalizationRegistry === 'undefined')
     ? { register: () => {}, unregister: () => {} }
     : new FinalizationRegistry(ptr => wasm.__wbg_wasmaccountstate_free(ptr, 1));
+const WasmBitcoinP2wpkhKeypairFinalization = (typeof FinalizationRegistry === 'undefined')
+    ? { register: () => {}, unregister: () => {} }
+    : new FinalizationRegistry(ptr => wasm.__wbg_wasmbitcoinp2wpkhkeypair_free(ptr, 1));
 const WasmCiphertextFinalization = (typeof FinalizationRegistry === 'undefined')
     ? { register: () => {}, unregister: () => {} }
     : new FinalizationRegistry(ptr => wasm.__wbg_wasmciphertext_free(ptr, 1));
@@ -7615,6 +8179,12 @@ const WasmPointFinalization = (typeof FinalizationRegistry === 'undefined')
 const WasmPublicKeyFinalization = (typeof FinalizationRegistry === 'undefined')
     ? { register: () => {}, unregister: () => {} }
     : new FinalizationRegistry(ptr => wasm.__wbg_wasmpublickey_free(ptr, 1));
+const WasmQsbCommitmentsFinalization = (typeof FinalizationRegistry === 'undefined')
+    ? { register: () => {}, unregister: () => {} }
+    : new FinalizationRegistry(ptr => wasm.__wbg_wasmqsbcommitments_free(ptr, 1));
+const WasmQsbRevealDigestFinalization = (typeof FinalizationRegistry === 'undefined')
+    ? { register: () => {}, unregister: () => {} }
+    : new FinalizationRegistry(ptr => wasm.__wbg_wasmqsbrevealdigest_free(ptr, 1));
 const WasmRagequitParamsFinalization = (typeof FinalizationRegistry === 'undefined')
     ? { register: () => {}, unregister: () => {} }
     : new FinalizationRegistry(ptr => wasm.__wbg_wasmragequitparams_free(ptr, 1));

package/package.json

@@ -5,7 +5,7 @@
     "Krusty KMS Contributors"
   ],
   "description": "WASM bindings for krusty-kms account and protocol utilities",
-  "version": "0.14.0",
+  "version": "0.15.0",
   "license": "MIT OR Apache-2.0",
   "repository": {
     "type": "git",