quantumcoin 7.0.15 → 8.0.1

package/src/constants.d.ts

@@ -1,61 +1,61 @@
-/**
- * The current version of the QuantumCoin.js library.
- * @type {string}
- */
-export const version: string;
-/**
- * The zero address (32 bytes).
- * @type {string}
- */
-export const ZeroAddress: string;
-/**
- * The zero hash (32 bytes).
- * @type {string}
- */
-export const ZeroHash: string;
-/**
- * The maximum value for a uint256.
- * @type {bigint}
- */
-export const MaxUint256: bigint;
-/**
- * The maximum value for a uint160.
- * @type {bigint}
- */
-export const MaxUint160: bigint;
-/**
- * The minimum value for an int256.
- * @type {bigint}
- */
-export const MinInt256: bigint;
-/**
- * The maximum value for an int256.
- * @type {bigint}
- */
-export const MaxInt256: bigint;
-/**
- * Error code for numeric faults.
- * @type {string}
- */
-export const NumericFault: string;
-/**
- * Error code for numeric faults (alias).
- * @type {string}
- */
-export const NumericFaultCode: string;
-/**
- * Wei per coin (1e18).
- * @type {bigint}
- */
-export const WeiPerEther: bigint;
-/**
- * Currency symbol (compat with ethers.js v6).
- * @type {string}
- */
-export const EtherSymbol: string;
-/**
- * BigNumber constant (exported as `N` in ethers.js v6).
- * In QuantumCoin.js, this is a bigint constant.
- * @type {bigint}
- */
-export const N: bigint;
+/**
+ * The current version of the QuantumCoin.js library.
+ * @type {string}
+ */
+export const version: string;
+/**
+ * The zero address (32 bytes).
+ * @type {string}
+ */
+export const ZeroAddress: string;
+/**
+ * The zero hash (32 bytes).
+ * @type {string}
+ */
+export const ZeroHash: string;
+/**
+ * The maximum value for a uint256.
+ * @type {bigint}
+ */
+export const MaxUint256: bigint;
+/**
+ * The maximum value for a uint160.
+ * @type {bigint}
+ */
+export const MaxUint160: bigint;
+/**
+ * The minimum value for an int256.
+ * @type {bigint}
+ */
+export const MinInt256: bigint;
+/**
+ * The maximum value for an int256.
+ * @type {bigint}
+ */
+export const MaxInt256: bigint;
+/**
+ * Error code for numeric faults.
+ * @type {string}
+ */
+export const NumericFault: string;
+/**
+ * Error code for numeric faults (alias).
+ * @type {string}
+ */
+export const NumericFaultCode: string;
+/**
+ * Wei per coin (1e18).
+ * @type {bigint}
+ */
+export const WeiPerEther: bigint;
+/**
+ * Currency symbol (compat with ethers.js v6).
+ * @type {string}
+ */
+export const EtherSymbol: string;
+/**
+ * BigNumber constant (exported as `N` in ethers.js v6).
+ * In QuantumCoin.js, this is a bigint constant.
+ * @type {bigint}
+ */
+export const N: bigint;

package/src/contract/contract-factory.d.ts

@@ -1,28 +1,28 @@
-export class ContractFactory {
-    /**
-     * @param {any[]|Interface} abi
-     * @param {string} bytecode
-     * @param {any} signer
-     */
-    constructor(abi: any[] | Interface, bytecode: string, signer: any);
-    abi: any;
-    interface: Interface;
-    bytecode: string;
-    signer: any;
-    /**
-     * Compute deploy transaction request.
-     * @param  {...any} args
-     * @returns {import("../providers/provider").TransactionRequest}
-     */
-    getDeployTransaction(...args: any[]): import("../providers/provider").TransactionRequest;
-    /**
-     * Deploy contract.
-     * @param  {...any} args
-     * @returns {Promise<Contract>}
-     */
-    deploy(...args: any[]): Promise<Contract>;
-    attach(address: any): Contract;
-    connect(signer: any): ContractFactory;
-}
-import { Interface } from "../abi/interface";
-import { Contract } from "./contract";
+export class ContractFactory {
+    /**
+     * @param {any[]|Interface} abi
+     * @param {string} bytecode
+     * @param {any} signer
+     */
+    constructor(abi: any[] | Interface, bytecode: string, signer: any);
+    abi: any;
+    interface: Interface;
+    bytecode: string;
+    signer: any;
+    /**
+     * Compute deploy transaction request.
+     * @param  {...any} args
+     * @returns {import("../providers/provider").TransactionRequest}
+     */
+    getDeployTransaction(...args: any[]): import("../providers/provider").TransactionRequest;
+    /**
+     * Deploy contract.
+     * @param  {...any} args
+     * @returns {Promise<Contract>}
+     */
+    deploy(...args: any[]): Promise<Contract>;
+    attach(address: any): Contract;
+    connect(signer: any): ContractFactory;
+}
+import { Interface } from "../abi/interface";
+import { Contract } from "./contract";

package/src/contract/contract.d.ts

@@ -1,113 +1,121 @@
-/**
- * BaseContract placeholder (ethers-like).
- */
-export class BaseContract {
-}
-export class Contract extends BaseContract {
-    static from(target: any, abi: any, runner: any): Contract;
-    /**
-     * @param {string} address
-     * @param {any[]|Interface} abi
-     * @param {any=} providerOrSigner
-     * @param {string=} bytecode
-     */
-    constructor(address: string, abi: any[] | Interface, providerOrSigner?: any | undefined, bytecode?: string | undefined);
-    address: string;
-    target: string;
-    bytecode: string;
-    interface: Interface;
-    provider: any;
-    signer: any;
-    runner: any;
-    _listeners: Map<any, any>;
-    populateTransaction: {};
-    getAddress(): string;
-    /**
-     * Invoke a contract function, dispatching to call() or send().
-     * @param {string} methodName
-     * @param {any[]} args
-     * @returns {Promise<any>}
-     */
-    _invoke(methodName: string, args: any[]): Promise<any>;
-    /**
-     * Build an unsigned transaction request for a contract method call.
-     * @param {string} methodName
-     * @param {any[]} args
-     * @returns {Promise<import("../providers/provider").TransactionRequest>}
-     */
-    _populate(methodName: string, args: any[]): Promise<import("../providers/provider").TransactionRequest>;
-    /**
-     * Perform a read-only call.
-     * @param {string} methodName
-     * @param {any[]} args
-     * @param {import("../providers/provider").TransactionRequest=} overrides
-     * @returns {Promise<any>}
-     */
-    call(methodName: string, args: any[], overrides?: import("../providers/provider").TransactionRequest | undefined): Promise<any>;
-    /**
-     * Send a state-changing transaction.
-     * @param {string} methodName
-     * @param {any[]} args
-     * @param {import("../providers/provider").TransactionRequest=} overrides
-     * @returns {Promise<ContractTransactionResponse>}
-     */
-    send(methodName: string, args: any[], overrides?: import("../providers/provider").TransactionRequest | undefined): Promise<ContractTransactionResponse>;
-    /**
-     * Query logs for an event.
-     * @param {any} event
-     * @param {number|string=} fromBlock
-     * @param {number|string=} toBlock
-     * @returns {Promise<EventLog[]>}
-     */
-    queryFilter(event: any, fromBlock?: (number | string) | undefined, toBlock?: (number | string) | undefined): Promise<EventLog[]>;
-    on(event: any, callback: any): this;
-    once(event: any, callback: any): this;
-    removeListener(event: any, callback: any): this;
-    removeAllListeners(event: any): this;
-    connect(signerOrProvider: any): Contract;
-    attach(address: any): Contract;
-    deployTransaction(): any;
-    getTransactionReceipt(hash: any): Promise<ContractTransactionReceipt>;
-    waitForDeployment(): Promise<this>;
-    getDeployedCode(): Promise<any>;
-}
-/**
- * ContractTransactionResponse (aliasing provider TransactionResponse).
- */
-export class ContractTransactionResponse {
-    /**
-     * @param {any} tx
-     */
-    constructor(tx: any);
-    _tx: any;
-    /**
-     * Wait for confirmations (delegated to underlying TransactionResponse).
-     * @param {number=} confirmations
-     * @param {number=} timeoutMs
-     * @returns {Promise<any>}
-     */
-    wait(confirmations?: number | undefined, timeoutMs?: number | undefined): Promise<any>;
-    /**
-     * Return the underlying transaction response object.
-     * @returns {any}
-     */
-    getTransaction(): any;
-}
-/**
- * ContractTransactionReceipt (aliasing provider TransactionReceipt).
- */
-export class ContractTransactionReceipt {
-    /**
-     * @param {any} receipt
-     */
-    constructor(receipt: any);
-    getEvent(eventName: any): any;
-    getEvents(eventName: any): any;
-}
-/**
- * EventLog placeholder.
- */
-export class EventLog {
-    constructor(log: any);
-}
-import { Interface } from "../abi/interface";
+/**
+ * BaseContract placeholder (ethers-like).
+ */
+export class BaseContract {
+}
+export class Contract extends BaseContract {
+    static from(target: any, abi: any, runner: any): Contract;
+    /**
+     * @param {string} address
+     * @param {any[]|Interface} abi
+     * @param {any=} providerOrSigner
+     * @param {string=} bytecode
+     */
+    constructor(address: string, abi: any[] | Interface, providerOrSigner?: any | undefined, bytecode?: string | undefined);
+    address: string;
+    target: string;
+    bytecode: string | null;
+    interface: Interface;
+    provider: any;
+    signer: any;
+    runner: any;
+    _listeners: Map<any, any>;
+    populateTransaction: {};
+    getAddress(): string;
+    /**
+     * Invoke a contract function, dispatching to call() or send().
+     * @param {string} methodName
+     * @param {any[]} args
+     * @returns {Promise<any>}
+     */
+    _invoke(methodName: string, args: any[]): Promise<any>;
+    /**
+     * Build an unsigned transaction request for a contract method call.
+     * @param {string} methodName
+     * @param {any[]} args
+     * @returns {Promise<import("../providers/provider").TransactionRequest>}
+     */
+    _populate(methodName: string, args: any[]): Promise<import("../providers/provider").TransactionRequest>;
+    /**
+     * Perform a read-only call.
+     * @param {string} methodName
+     * @param {any[]} args
+     * @param {import("../providers/provider").TransactionRequest=} overrides
+     * @returns {Promise<any>}
+     */
+    call(methodName: string, args: any[], overrides?: import("../providers/provider").TransactionRequest | undefined): Promise<any>;
+    /**
+     * Send a state-changing transaction.
+     * @param {string} methodName
+     * @param {any[]} args
+     * @param {import("../providers/provider").TransactionRequest=} overrides
+     * @returns {Promise<ContractTransactionResponse>}
+     */
+    send(methodName: string, args: any[], overrides?: import("../providers/provider").TransactionRequest | undefined): Promise<ContractTransactionResponse>;
+    /**
+     * Query logs for an event.
+     * @param {any} event
+     * @param {number|string=} fromBlock
+     * @param {number|string=} toBlock
+     * @returns {Promise<EventLog[]>}
+     */
+    queryFilter(event: any, fromBlock?: (number | string) | undefined, toBlock?: (number | string) | undefined): Promise<EventLog[]>;
+    on(event: any, callback: any): this;
+    once(event: any, callback: any): this;
+    removeListener(event: any, callback: any): this;
+    removeAllListeners(event: any): this;
+    connect(signerOrProvider: any): Contract;
+    attach(address: any): Contract;
+    deployTransaction(): any;
+    getTransactionReceipt(hash: any): Promise<ContractTransactionReceipt | null>;
+    waitForDeployment(): Promise<this>;
+    getDeployedCode(): Promise<any>;
+}
+/**
+ * ContractTransactionResponse (aliasing provider TransactionResponse).
+ */
+export class ContractTransactionResponse {
+    /**
+     * @param {any} tx
+     */
+    constructor(tx: any);
+    _tx: any;
+    /**
+     * Wait for confirmations (delegated to underlying TransactionResponse).
+     * @param {number=} confirmations
+     * @param {number=} timeoutMs
+     * @returns {Promise<any>}
+     */
+    wait(confirmations?: number | undefined, timeoutMs?: number | undefined): Promise<any>;
+    /**
+     * Return the underlying transaction response object.
+     * @returns {any}
+     */
+    getTransaction(): any;
+}
+/**
+ * ContractTransactionReceipt (aliasing provider TransactionReceipt).
+ */
+export class ContractTransactionReceipt {
+    /**
+     * @param {any} receipt
+     */
+    constructor(receipt: any);
+    getEvent(eventName: any): any;
+    getEvents(eventName: any): any;
+}
+/**
+ * EventLog placeholder.
+ */
+export class EventLog {
+    constructor(log: any);
+}
+/**
+ * Return a copy of `overrides` containing only the allow-listed fields.
+ * Drops `to`, `data`, `from`, and any unknown/prototype keys so the protected
+ * fields computed by the contract layer always win.
+ * @param {any} overrides
+ * @returns {Record<string, any>}
+ */
+export function _sanitizeOverrides(overrides: any): Record<string, any>;
+import { Interface } from "../abi/interface";

package/src/contract/index.d.ts

@@ -1,5 +1,6 @@
 declare const _exports: {
     ContractFactory: typeof import("./contract-factory").ContractFactory;
+    _sanitizeOverrides(overrides: any): Record<string, any>;
     BaseContract: typeof import("./contract").BaseContract;
     Contract: typeof import("./contract").Contract;
     ContractTransactionResponse: typeof import("./contract").ContractTransactionResponse;

package/src/errors/index.d.ts

@@ -1,4 +1,4 @@
-export type ErrorCode = "INVALID_ARGUMENT" | "NUMERIC_FAULT" | "BUFFER_OVERRUN" | "CALL_EXCEPTION" | "UNKNOWN_ERROR" | "NOT_IMPLEMENTED";
+export type ErrorCode = "INVALID_ARGUMENT" | "NUMERIC_FAULT" | "BUFFER_OVERRUN" | "CALL_EXCEPTION" | "UNKNOWN_ERROR" | "NOT_IMPLEMENTED" | "NOT_INITIALIZED";
 /**
  * @fileoverview Error helpers and error classes.
  *
@@ -8,7 +8,7 @@ export type ErrorCode = "INVALID_ARGUMENT" | "NUMERIC_FAULT" | "BUFFER_OVERRUN"
  * - errors may include extra fields depending on the failure
  */
 /**
- * @typedef {"INVALID_ARGUMENT"|"NUMERIC_FAULT"|"BUFFER_OVERRUN"|"CALL_EXCEPTION"|"UNKNOWN_ERROR"|"NOT_IMPLEMENTED"} ErrorCode
+ * @typedef {"INVALID_ARGUMENT"|"NUMERIC_FAULT"|"BUFFER_OVERRUN"|"CALL_EXCEPTION"|"UNKNOWN_ERROR"|"NOT_IMPLEMENTED"|"NOT_INITIALIZED"} ErrorCode
  */
 /**
  * Returns true if the error matches the given code.
@@ -51,6 +51,14 @@ export function assert(check: any, message: string, code: ErrorCode, info?: Reco
  * @param {any} value
  */
 export function assertArgument(check: any, message: string, name: string, value: any): void;
+/**
+ * Assert an argument constraint for sensitive material (keys, seeds, passwords).
+ * Uses "[REDACTED]" instead of the actual value to prevent leaking secrets in logs.
+ * @param {any} check
+ * @param {string} message
+ * @param {string} name
+ */
+export function assertSecretArgument(check: any, message: string, name: string): void;
 /**
  * Provider error.
  */

package/src/errors/index.js

@@ -8,7 +8,7 @@
  */
 
 /**
- * @typedef {"INVALID_ARGUMENT"|"NUMERIC_FAULT"|"BUFFER_OVERRUN"|"CALL_EXCEPTION"|"UNKNOWN_ERROR"|"NOT_IMPLEMENTED"} ErrorCode
+ * @typedef {"INVALID_ARGUMENT"|"NUMERIC_FAULT"|"BUFFER_OVERRUN"|"CALL_EXCEPTION"|"UNKNOWN_ERROR"|"NOT_IMPLEMENTED"|"NOT_INITIALIZED"} ErrorCode
  */
 
 /**

package/src/generator/index.d.ts

@@ -1,81 +1,109 @@
-export type GenerateOptions = {
-    abiPath: string;
-    binPath: string;
-    outDir: string;
-    contractName: string;
-    packageName?: string | undefined;
-    createPackage?: boolean | undefined;
-    dependencies?: Record<string, string> | undefined;
-};
-/**
- * Generate typed contract files.
- * @param {GenerateOptions} opts
- * @returns {{ contractFile: string, factoryFile: string, typesFile: string, indexFile: string }}
- */
-export function generate(opts: GenerateOptions): {
-    contractFile: string;
-    factoryFile: string;
-    typesFile: string;
-    indexFile: string;
-};
-/**
- * @typedef {Object} GenerateOptions
- * @property {string} abiPath
- * @property {string} binPath
- * @property {string} outDir
- * @property {string} contractName
- * @property {string=} packageName
- * @property {boolean=} createPackage
- * @property {Record<string,string>=} dependencies
- */
-/**
- * Generate multiple typed contract files.
- * @param {{ outDir: string, artifacts: Array<{ contractName: string, abi: any[], bytecode: string }> }} opts
- * @returns {{ contracts: Array<{ contractFile: string, factoryFile: string }>, typesFile: string, indexFile: string }}
- */
-export function generateFromArtifacts(opts: {
-    outDir: string;
-    artifacts: Array<{
-        contractName: string;
-        abi: any[];
-        bytecode: string;
-    }>;
-}): {
-    contracts: Array<{
-        contractFile: string;
-        factoryFile: string;
-    }>;
-    typesFile: string;
-    indexFile: string;
-};
-/**
- * Generate a transactional e2e test file (JavaScript) for the typed contract package.
- * The test deploys the contract with constructor args (if any) and invokes one write method.
- *
- * When `bytecode` is omitted, empty, or `"0x"` the contract is treated as an interface
- * and the post-deploy `provider.getCode(...)` bytecode assertion is omitted from the
- * generated test (interfaces deploy with no runtime code by design).
- *
- * @param opts
- */
-export function generateTransactionalTestJs(opts: {
-    contractName: string;
-    abi: any[];
-    bytecode?: string;
-}): string;
-/**
- * Generate a single transactional e2e test that deploys and invokes methods on ALL contracts.
- * Used when the package has multiple contracts so one test exercises every contract.
- *
- * Accepts `bytecode` per artifact for forward-compatibility; the multi-contract template
- * currently emits no `getCode` assertion (so the value is not yet consumed).
- *
- * @param opts
- */
-export function generateAllContractsTransactionalTestJs(opts: {
-    artifacts: Array<{
-        contractName: string;
-        abi: any[];
-        bytecode?: string;
-    }>;
-}): string;
+declare namespace _exports {
+    export { GenerateOptions };
+}
+declare namespace _exports {
+    export { generate };
+    export { generateFromArtifacts };
+    export { generateTransactionalTestJs };
+    export { generateAllContractsTransactionalTestJs };
+    export { _assertSafeIdentifier as assertSafeIdentifier };
+}
+export = _exports;
+type GenerateOptions = {
+    abiPath: string;
+    binPath: string;
+    outDir: string;
+    contractName: string;
+    packageName?: string | undefined;
+    createPackage?: boolean | undefined;
+    dependencies?: Record<string, string> | undefined;
+};
+/**
+ * Generate typed contract files.
+ * @param {GenerateOptions} opts
+ * @returns {{ contractFile: string, factoryFile: string, typesFile: string, indexFile: string }}
+ */
+declare function generate(opts: GenerateOptions): {
+    contractFile: string;
+    factoryFile: string;
+    typesFile: string;
+    indexFile: string;
+};
+/**
+ * @typedef {Object} GenerateOptions
+ * @property {string} abiPath
+ * @property {string} binPath
+ * @property {string} outDir
+ * @property {string} contractName
+ * @property {string=} packageName
+ * @property {boolean=} createPackage
+ * @property {Record<string,string>=} dependencies
+ */
+/**
+ * Generate multiple typed contract files.
+ * @param {{ outDir: string, artifacts: Array<{ contractName: string, abi: any[], bytecode: string }> }} opts
+ * @returns {{ contracts: Array<{ contractFile: string, factoryFile: string }>, typesFile: string, indexFile: string }}
+ */
+declare function generateFromArtifacts(opts: {
+    outDir: string;
+    artifacts: Array<{
+        contractName: string;
+        abi: any[];
+        bytecode: string;
+    }>;
+}): {
+    contracts: Array<{
+        contractFile: string;
+        factoryFile: string;
+    }>;
+    typesFile: string;
+    indexFile: string;
+};
+/**
+ * Generate a transactional e2e test file (JavaScript) for the typed contract package.
+ * The test deploys the contract with constructor args (if any) and invokes one write method.
+ *
+ * When `bytecode` is omitted, empty, or `"0x"` the contract is treated as an interface:
+ * the generated test still attempts the deploy (the receipt-status assertion still validates
+ * SDK wrapper wiring) but the post-deploy `provider.getCode(...)` bytecode assertion is
+ * skipped, since interfaces deploy with no runtime code by design.
+ *
+ * @param {{ contractName: string, abi: any[], bytecode?: string }} opts
+ * @returns {string}
+ */
+declare function generateTransactionalTestJs(opts: {
+    contractName: string;
+    abi: any[];
+    bytecode?: string;
+}): string;
+/**
+ * Generate a single transactional e2e test that deploys and invokes methods on ALL contracts.
+ * Used when the package has multiple contracts so one test exercises every contract.
+ *
+ * Accepts `bytecode` per artifact for forward-compatibility, although the multi-contract
+ * template currently emits no `getCode` assertion (so the value is not yet consumed).
+ *
+ * @param {{ artifacts: Array<{ contractName: string, abi: any[], bytecode?: string }> }} opts
+ * @returns {string}
+ */
+declare function generateAllContractsTransactionalTestJs(opts: {
+    artifacts: Array<{
+        contractName: string;
+        abi: any[];
+        bytecode?: string;
+    }>;
+}): string;
+/**
+ * Assert that `name` is safe to interpolate verbatim into generated source code
+ * (class names, function names, type names, require/import specifiers, file names).
+ *
+ * This is the primary defense against code-injection and path-traversal
+ * via attacker-controlled ABI / artifact `name` fields: only strict JS/TS
+ * identifiers are allowed, which by construction cannot contain quotes, newlines,
+ * path separators, `..`, or other breakout characters.
+ *
+ * @param {any} name
+ * @param {string=} kind  Human-readable description for error messages.
+ * @returns {string} the validated name
+ */
+declare function _assertSafeIdentifier(name: any, kind?: string | undefined): string;