node-tkms 0.14.1-1 → 0.15.0-0

package/kms_lib.d.ts

@@ -127,6 +127,27 @@ export class TypedPlaintext {
     fhe_type: number;
 }
 
+/**
+ * A single signature together with the scheme that produced it.
+ *
+ * Used to carry a chain-native signature for one signing scheme when a response
+ * may be signed under several schemes at once (e.g. ECDSA/secp256k1 EIP-712 for
+ * an EVM, ed25519 for Solana, ML-DSA for post-quantum).
+ */
+export class TypedSignature {
+    private constructor();
+    free(): void;
+    [Symbol.dispose](): void;
+    /**
+     * The signature scheme that produced `signature`.
+     */
+    scheme: number;
+    /**
+     * The raw, scheme-specific signature bytes.
+     */
+    signature: Uint8Array;
+}
+
 export class TypedSigncryptedCiphertext {
     private constructor();
     free(): void;
@@ -162,16 +183,12 @@ export class UserDecryptionRequest {
     client_address: string;
     /**
      * MPC context ID which is used to identify the context to use for this request.
-     *
-     * NOTE: at the moment this can be None since we do not fully support multiple contexts.
-     * See <https://github.com/zama-ai/kms-internal/issues/2530>
+     * If unset, the server's default context is used.
      */
     get context_id(): RequestId | undefined;
     /**
      * MPC context ID which is used to identify the context to use for this request.
-     *
-     * NOTE: at the moment this can be None since we do not fully support multiple contexts.
-     * See <https://github.com/zama-ai/kms-internal/issues/2530>
+     * If unset, the server's default context is used.
      */
     set context_id(value: RequestId | null | undefined);
     /**
@@ -188,11 +205,13 @@ export class UserDecryptionRequest {
      */
     enc_key: Uint8Array;
     /**
-     * The epoch number placeholder (zama-ai/kms-internal#2743).
+     * The MPC epoch ID identifying which epoch's key material and session to
+     * use for this request.
      */
     get epoch_id(): RequestId | undefined;
     /**
-     * The epoch number placeholder (zama-ai/kms-internal#2743).
+     * The MPC epoch ID identifying which epoch's key material and session to
+     * use for this request.
      */
     set epoch_id(value: RequestId | null | undefined);
     /**
@@ -219,6 +238,12 @@ export class UserDecryptionRequest {
      * prefix. Future queries for the result must use this request ID.
      */
     set request_id(value: RequestId | null | undefined);
+    /**
+     * The signature schemes to include in the response `signatures` field.
+     * If empty, it defaults to ECDSA256K1, so the response carries a single ECDSA
+     * entry.
+     */
+    signing_schemes: Int32Array;
     /**
      * The list of ciphertexts to decrypt for the user.
      */
@@ -230,7 +255,7 @@ export class UserDecryptionResponse {
     free(): void;
     [Symbol.dispose](): void;
     /**
-     * This is the external signature created from the Eip712 domain
+     * This is the external ECDSA signature created from the Eip712 domain
      * on the structure, where userDecryptedShare is bc2wrap::serialize(&payload)
      * struct UserDecryptResponseVerification {
      * bytes publicKey;
@@ -238,6 +263,7 @@ export class UserDecryptionResponse {
      * bytes userDecryptedShare; // serialization of payload
      * bytes extraData;
      * }
+     * DEPRECATED: To be removed in 0.16 TODO(0.16)
      */
     external_signature: Uint8Array;
     /**
@@ -252,7 +278,19 @@ export class UserDecryptionResponse {
      * The actual \[UserDecryptionResponsePayload\].
      */
     set payload(value: UserDecryptionResponsePayload | null | undefined);
+    /**
+     * DEPRECATED to be removed in 0.16.0 TODO(0.16)
+     * The KMS-internal ECDSA/secp256k1 authenticity signature over
+     * the serialization of \[UserDecryptionResponsePayload\]. Kept at field 1 (and
+     * kept populated) for wire backward-compatibility with clients that predate
+     * the multi-scheme `signatures` list.
+     */
     signature: Uint8Array;
+    /**
+     * Per-scheme KMS signatures, one per scheme requested in the request's
+     * `signing_schemes`.
+     */
+    signatures: TypedSignature[];
 }
 
 export class UserDecryptionResponsePayload {

package/kms_lib.js

@@ -509,6 +509,74 @@ class TypedPlaintext {
 if (Symbol.dispose) TypedPlaintext.prototype[Symbol.dispose] = TypedPlaintext.prototype.free;
 exports.TypedPlaintext = TypedPlaintext;
 
+/**
+ * A single signature together with the scheme that produced it.
+ *
+ * Used to carry a chain-native signature for one signing scheme when a response
+ * may be signed under several schemes at once (e.g. ECDSA/secp256k1 EIP-712 for
+ * an EVM, ed25519 for Solana, ML-DSA for post-quantum).
+ */
+class TypedSignature {
+    static __wrap(ptr) {
+        const obj = Object.create(TypedSignature.prototype);
+        obj.__wbg_ptr = ptr;
+        TypedSignatureFinalization.register(obj, obj.__wbg_ptr, obj);
+        return obj;
+    }
+    static __unwrap(jsValue) {
+        if (!(jsValue instanceof TypedSignature)) {
+            return 0;
+        }
+        return jsValue.__destroy_into_raw();
+    }
+    __destroy_into_raw() {
+        const ptr = this.__wbg_ptr;
+        this.__wbg_ptr = 0;
+        TypedSignatureFinalization.unregister(this);
+        return ptr;
+    }
+    free() {
+        const ptr = this.__destroy_into_raw();
+        wasm.__wbg_typedsignature_free(ptr, 0);
+    }
+    /**
+     * The signature scheme that produced `signature`.
+     * @returns {number}
+     */
+    get scheme() {
+        const ret = wasm.__wbg_get_typedsignature_scheme(this.__wbg_ptr);
+        return ret;
+    }
+    /**
+     * The raw, scheme-specific signature bytes.
+     * @returns {Uint8Array}
+     */
+    get signature() {
+        const ret = wasm.__wbg_get_typedsignature_signature(this.__wbg_ptr);
+        var v1 = getArrayU8FromWasm0(ret[0], ret[1]).slice();
+        wasm.__wbindgen_free(ret[0], ret[1] * 1, 1);
+        return v1;
+    }
+    /**
+     * The signature scheme that produced `signature`.
+     * @param {number} arg0
+     */
+    set scheme(arg0) {
+        wasm.__wbg_set_typedsignature_scheme(this.__wbg_ptr, arg0);
+    }
+    /**
+     * The raw, scheme-specific signature bytes.
+     * @param {Uint8Array} arg0
+     */
+    set signature(arg0) {
+        const ptr0 = passArray8ToWasm0(arg0, wasm.__wbindgen_malloc);
+        const len0 = WASM_VECTOR_LEN;
+        wasm.__wbg_set_typedsignature_signature(this.__wbg_ptr, ptr0, len0);
+    }
+}
+if (Symbol.dispose) TypedSignature.prototype[Symbol.dispose] = TypedSignature.prototype.free;
+exports.TypedSignature = TypedSignature;
+
 class TypedSigncryptedCiphertext {
     static __wrap(ptr) {
         const obj = Object.create(TypedSigncryptedCiphertext.prototype);
@@ -639,9 +707,7 @@ class UserDecryptionRequest {
     }
     /**
      * MPC context ID which is used to identify the context to use for this request.
-     *
-     * NOTE: at the moment this can be None since we do not fully support multiple contexts.
-     * See <https://github.com/zama-ai/kms-internal/issues/2530>
+     * If unset, the server's default context is used.
      * @returns {RequestId | undefined}
      */
     get context_id() {
@@ -668,7 +734,8 @@ class UserDecryptionRequest {
         return v1;
     }
     /**
-     * The epoch number placeholder (zama-ai/kms-internal#2743).
+     * The MPC epoch ID identifying which epoch's key material and session to
+     * use for this request.
      * @returns {RequestId | undefined}
      */
     get epoch_id() {
@@ -703,6 +770,18 @@ class UserDecryptionRequest {
         const ret = wasm.__wbg_get_userdecryptionrequest_request_id(this.__wbg_ptr);
         return ret === 0 ? undefined : RequestId.__wrap(ret);
     }
+    /**
+     * The signature schemes to include in the response `signatures` field.
+     * If empty, it defaults to ECDSA256K1, so the response carries a single ECDSA
+     * entry.
+     * @returns {Int32Array}
+     */
+    get signing_schemes() {
+        const ret = wasm.__wbg_get_userdecryptionrequest_signing_schemes(this.__wbg_ptr);
+        var v1 = getArrayI32FromWasm0(ret[0], ret[1]).slice();
+        wasm.__wbindgen_free(ret[0], ret[1] * 4, 4);
+        return v1;
+    }
     /**
      * The list of ciphertexts to decrypt for the user.
      * @returns {TypedCiphertext[]}
@@ -724,9 +803,7 @@ class UserDecryptionRequest {
     }
     /**
      * MPC context ID which is used to identify the context to use for this request.
-     *
-     * NOTE: at the moment this can be None since we do not fully support multiple contexts.
-     * See <https://github.com/zama-ai/kms-internal/issues/2530>
+     * If unset, the server's default context is used.
      * @param {RequestId | null} [arg0]
      */
     set context_id(arg0) {
@@ -760,7 +837,8 @@ class UserDecryptionRequest {
         wasm.__wbg_set_userdecryptionrequest_enc_key(this.__wbg_ptr, ptr0, len0);
     }
     /**
-     * The epoch number placeholder (zama-ai/kms-internal#2743).
+     * The MPC epoch ID identifying which epoch's key material and session to
+     * use for this request.
      * @param {RequestId | null} [arg0]
      */
     set epoch_id(arg0) {
@@ -806,6 +884,17 @@ class UserDecryptionRequest {
         }
         wasm.__wbg_set_userdecryptionrequest_request_id(this.__wbg_ptr, ptr0);
     }
+    /**
+     * The signature schemes to include in the response `signatures` field.
+     * If empty, it defaults to ECDSA256K1, so the response carries a single ECDSA
+     * entry.
+     * @param {Int32Array} arg0
+     */
+    set signing_schemes(arg0) {
+        const ptr0 = passArray32ToWasm0(arg0, wasm.__wbindgen_malloc);
+        const len0 = WASM_VECTOR_LEN;
+        wasm.__wbg_set_userdecryptionrequest_signing_schemes(this.__wbg_ptr, ptr0, len0);
+    }
     /**
      * The list of ciphertexts to decrypt for the user.
      * @param {TypedCiphertext[]} arg0
@@ -831,7 +920,7 @@ class UserDecryptionResponse {
         wasm.__wbg_userdecryptionresponse_free(ptr, 0);
     }
     /**
-     * This is the external signature created from the Eip712 domain
+     * This is the external ECDSA signature created from the Eip712 domain
      * on the structure, where userDecryptedShare is bc2wrap::serialize(&payload)
      * struct UserDecryptResponseVerification {
      * bytes publicKey;
@@ -839,6 +928,7 @@ class UserDecryptionResponse {
      * bytes userDecryptedShare; // serialization of payload
      * bytes extraData;
      * }
+     * DEPRECATED: To be removed in 0.16 TODO(0.16)
      * @returns {Uint8Array}
      */
     get external_signature() {
@@ -866,6 +956,11 @@ class UserDecryptionResponse {
         return ret === 0 ? undefined : UserDecryptionResponsePayload.__wrap(ret);
     }
     /**
+     * DEPRECATED to be removed in 0.16.0 TODO(0.16)
+     * The KMS-internal ECDSA/secp256k1 authenticity signature over
+     * the serialization of \[UserDecryptionResponsePayload\]. Kept at field 1 (and
+     * kept populated) for wire backward-compatibility with clients that predate
+     * the multi-scheme `signatures` list.
      * @returns {Uint8Array}
      */
     get signature() {
@@ -875,7 +970,18 @@ class UserDecryptionResponse {
         return v1;
     }
     /**
-     * This is the external signature created from the Eip712 domain
+     * Per-scheme KMS signatures, one per scheme requested in the request's
+     * `signing_schemes`.
+     * @returns {TypedSignature[]}
+     */
+    get signatures() {
+        const ret = wasm.__wbg_get_userdecryptionresponse_signatures(this.__wbg_ptr);
+        var v1 = getArrayJsValueFromWasm0(ret[0], ret[1]).slice();
+        wasm.__wbindgen_free(ret[0], ret[1] * 4, 4);
+        return v1;
+    }
+    /**
+     * This is the external ECDSA signature created from the Eip712 domain
      * on the structure, where userDecryptedShare is bc2wrap::serialize(&payload)
      * struct UserDecryptResponseVerification {
      * bytes publicKey;
@@ -883,6 +989,7 @@ class UserDecryptionResponse {
      * bytes userDecryptedShare; // serialization of payload
      * bytes extraData;
      * }
+     * DEPRECATED: To be removed in 0.16 TODO(0.16)
      * @param {Uint8Array} arg0
      */
     set external_signature(arg0) {
@@ -912,6 +1019,11 @@ class UserDecryptionResponse {
         wasm.__wbg_set_userdecryptionresponse_payload(this.__wbg_ptr, ptr0);
     }
     /**
+     * DEPRECATED to be removed in 0.16.0 TODO(0.16)
+     * The KMS-internal ECDSA/secp256k1 authenticity signature over
+     * the serialization of \[UserDecryptionResponsePayload\]. Kept at field 1 (and
+     * kept populated) for wire backward-compatibility with clients that predate
+     * the multi-scheme `signatures` list.
      * @param {Uint8Array} arg0
      */
     set signature(arg0) {
@@ -919,6 +1031,16 @@ class UserDecryptionResponse {
         const len0 = WASM_VECTOR_LEN;
         wasm.__wbg_set_userdecryptionresponse_signature(this.__wbg_ptr, ptr0, len0);
     }
+    /**
+     * Per-scheme KMS signatures, one per scheme requested in the request's
+     * `signing_schemes`.
+     * @param {TypedSignature[]} arg0
+     */
+    set signatures(arg0) {
+        const ptr0 = passArrayJsValueToWasm0(arg0, wasm.__wbindgen_malloc);
+        const len0 = WASM_VECTOR_LEN;
+        wasm.__wbg_set_userdecryptionresponse_signatures(this.__wbg_ptr, ptr0, len0);
+    }
 }
 if (Symbol.dispose) UserDecryptionResponse.prototype[Symbol.dispose] = UserDecryptionResponse.prototype.free;
 exports.UserDecryptionResponse = UserDecryptionResponse;
@@ -1668,6 +1790,14 @@ function __wbg_get_imports() {
             const ret = TypedPlaintext.__wrap(arg0);
             return ret;
         },
+        __wbg_typedsignature_new: function(arg0) {
+            const ret = TypedSignature.__wrap(arg0);
+            return ret;
+        },
+        __wbg_typedsignature_unwrap: function(arg0) {
+            const ret = TypedSignature.__unwrap(arg0);
+            return ret;
+        },
         __wbg_typedsigncryptedciphertext_new: function(arg0) {
             const ret = TypedSigncryptedCiphertext.__wrap(arg0);
             return ret;
@@ -1746,6 +1876,9 @@ const TypedCiphertextFinalization = (typeof FinalizationRegistry === 'undefined'
 const TypedPlaintextFinalization = (typeof FinalizationRegistry === 'undefined')
     ? { register: () => {}, unregister: () => {} }
     : new FinalizationRegistry(ptr => wasm.__wbg_typedplaintext_free(ptr, 1));
+const TypedSignatureFinalization = (typeof FinalizationRegistry === 'undefined')
+    ? { register: () => {}, unregister: () => {} }
+    : new FinalizationRegistry(ptr => wasm.__wbg_typedsignature_free(ptr, 1));
 const TypedSigncryptedCiphertextFinalization = (typeof FinalizationRegistry === 'undefined')
     ? { register: () => {}, unregister: () => {} }
     : new FinalizationRegistry(ptr => wasm.__wbg_typedsigncryptedciphertext_free(ptr, 1));
@@ -1836,6 +1969,11 @@ function debugString(val) {
     return className;
 }
 
+function getArrayI32FromWasm0(ptr, len) {
+    ptr = ptr >>> 0;
+    return getInt32ArrayMemory0().subarray(ptr / 4, ptr / 4 + len);
+}
+
 function getArrayJsValueFromWasm0(ptr, len) {
     ptr = ptr >>> 0;
     const mem = getDataViewMemory0();
@@ -1860,10 +1998,26 @@ function getDataViewMemory0() {
     return cachedDataViewMemory0;
 }
 
+let cachedInt32ArrayMemory0 = null;
+function getInt32ArrayMemory0() {
+    if (cachedInt32ArrayMemory0 === null || cachedInt32ArrayMemory0.byteLength === 0) {
+        cachedInt32ArrayMemory0 = new Int32Array(wasm.memory.buffer);
+    }
+    return cachedInt32ArrayMemory0;
+}
+
 function getStringFromWasm0(ptr, len) {
     return decodeText(ptr >>> 0, len);
 }
 
+let cachedUint32ArrayMemory0 = null;
+function getUint32ArrayMemory0() {
+    if (cachedUint32ArrayMemory0 === null || cachedUint32ArrayMemory0.byteLength === 0) {
+        cachedUint32ArrayMemory0 = new Uint32Array(wasm.memory.buffer);
+    }
+    return cachedUint32ArrayMemory0;
+}
+
 let cachedUint8ArrayMemory0 = null;
 function getUint8ArrayMemory0() {
     if (cachedUint8ArrayMemory0 === null || cachedUint8ArrayMemory0.byteLength === 0) {
@@ -1885,6 +2039,13 @@ function isLikeNone(x) {
     return x === undefined || x === null;
 }
 
+function passArray32ToWasm0(arg, malloc) {
+    const ptr = malloc(arg.length * 4, 4) >>> 0;
+    getUint32ArrayMemory0().set(arg, ptr / 4);
+    WASM_VECTOR_LEN = arg.length;
+    return ptr;
+}
+
 function passArray8ToWasm0(arg, malloc) {
     const ptr = malloc(arg.length * 1, 1) >>> 0;
     getUint8ArrayMemory0().set(arg, ptr / 1);

package/package.json

@@ -4,7 +4,7 @@
     "Zama"
   ],
   "description": "Key Management System for the Zama Protocol.",
-  "version": "v0.14.1-1",
+  "version": "v0.15.0-0",
   "license": "BSD-3-Clause-Clear",
   "repository": {
     "type": "git",
@@ -17,4 +17,4 @@
   ],
   "main": "kms_lib.js",
   "types": "kms_lib.d.ts"
-}
+}