@aztec/pxe 0.0.0-test.1 → 0.0.1-commit.03f7ef2

package/dest/kernel_prover/hints/build_private_kernel_reset_private_inputs.js

@@ -1,270 +0,0 @@
-import { MAX_KEY_VALIDATION_REQUESTS_PER_TX, MAX_NOTE_HASHES_PER_TX, MAX_NOTE_HASH_READ_REQUESTS_PER_TX, MAX_NULLIFIERS_PER_TX, MAX_NULLIFIER_READ_REQUESTS_PER_TX, NULLIFIER_TREE_HEIGHT, VK_TREE_HEIGHT } from '@aztec/constants';
-import { makeTuple } from '@aztec/foundation/array';
-import { padArrayEnd } from '@aztec/foundation/collection';
-import { assertLength } from '@aztec/foundation/serialize';
-import { MembershipWitness } from '@aztec/foundation/trees';
-import { privateKernelResetDimensionsConfig } from '@aztec/noir-protocol-circuits-types/client';
-import { KeyValidationHint, PrivateKernelData, PrivateKernelResetCircuitPrivateInputs, PrivateKernelResetDimensions, PrivateKernelResetHints, ReadRequestResetStates, ReadRequestState, ScopedNoteHash, ScopedNullifier, ScopedReadRequest, TransientDataIndexHint, buildNoteHashReadRequestHintsFromResetStates, buildNullifierReadRequestHintsFromResetStates, buildTransientDataHints, countAccumulatedItems, findPrivateKernelResetDimensions, getNonEmptyItems, getNoteHashReadRequestResetStates, getNullifierReadRequestResetStates, privateKernelResetDimensionNames } from '@aztec/stdlib/kernel';
-import { collectNested } from '@aztec/stdlib/tx';
-function collectNestedReadRequests(executionStack, extractReadRequests) {
-    return collectNested(executionStack, (executionResult)=>{
-        const nonEmptyReadRequests = getNonEmptyItems(extractReadRequests(executionResult));
-        return nonEmptyReadRequests.map((readRequest)=>new ScopedReadRequest(readRequest, executionResult.publicInputs.callContext.contractAddress));
-    });
-}
-function getNullifierMembershipWitnessResolver(oracle) {
-    return async (nullifier)=>{
-        const res = await oracle.getNullifierMembershipWitness(nullifier);
-        if (!res) {
-            throw new Error(`Cannot find the leaf for nullifier ${nullifier}.`);
-        }
-        const { index, siblingPath, leafPreimage } = res;
-        return {
-            membershipWitness: new MembershipWitness(NULLIFIER_TREE_HEIGHT, index, siblingPath.toTuple()),
-            leafPreimage
-        };
-    };
-}
-async function getMasterSecretKeysAndAppKeyGenerators(keyValidationRequests, oracle) {
-    const keysHints = [];
-    for(let i = 0; i < keyValidationRequests.length; ++i){
-        const request = keyValidationRequests[i].request;
-        if (request.isEmpty()) {
-            break;
-        }
-        const secretKeys = await oracle.getMasterSecretKey(request.request.pkM);
-        keysHints.push(new KeyValidationHint(secretKeys, i));
-    }
-    return padArrayEnd(keysHints, KeyValidationHint.nada(MAX_KEY_VALIDATION_REQUESTS_PER_TX), MAX_KEY_VALIDATION_REQUESTS_PER_TX);
-}
-export class PrivateKernelResetPrivateInputsBuilder {
-    previousKernelOutput;
-    executionStack;
-    noteHashNullifierCounterMap;
-    validationRequestsSplitCounter;
-    previousKernel;
-    // If there's no next iteration, it's the final reset.
-    nextIteration;
-    noteHashResetStates;
-    nullifierResetStates;
-    numTransientData;
-    transientDataIndexHints;
-    requestedDimensions;
-    constructor(previousKernelOutput, executionStack, noteHashNullifierCounterMap, validationRequestsSplitCounter){
-        this.previousKernelOutput = previousKernelOutput;
-        this.executionStack = executionStack;
-        this.noteHashNullifierCounterMap = noteHashNullifierCounterMap;
-        this.validationRequestsSplitCounter = validationRequestsSplitCounter;
-        this.previousKernel = previousKernelOutput.publicInputs;
-        this.requestedDimensions = PrivateKernelResetDimensions.empty();
-        this.noteHashResetStates = ReadRequestResetStates.empty(MAX_NOTE_HASH_READ_REQUESTS_PER_TX);
-        this.nullifierResetStates = ReadRequestResetStates.empty(MAX_NULLIFIER_READ_REQUESTS_PER_TX);
-        this.transientDataIndexHints = makeTuple(MAX_NULLIFIERS_PER_TX, ()=>new TransientDataIndexHint(MAX_NULLIFIERS_PER_TX, MAX_NOTE_HASHES_PER_TX));
-        this.nextIteration = executionStack[this.executionStack.length - 1]?.publicInputs;
-    }
-    needsReset() {
-        const fns = [
-            ()=>this.needsResetNoteHashReadRequests(),
-            ()=>this.needsResetNullifierReadRequests(),
-            ()=>this.needsResetNullifierKeys(),
-            ()=>this.needsResetTransientData()
-        ];
-        if (this.nextIteration) {
-            // If there's a next iteration, reset is needed only when data of a dimension is about to overflow.
-            // fns are executed until a dimension that needs reset is found.
-            return fns.some((fn)=>fn());
-        } else {
-            // Siloing is only needed after processing all iterations.
-            fns.push(...[
-                ()=>this.needsSiloNoteHashes(),
-                ()=>this.needsSiloNullifiers(),
-                ()=>this.needsSiloPrivateLogs()
-            ]);
-            // If there's no next iteration, reset is needed when any of the dimension has non empty data.
-            // All the fns should to be executed so that data in all dimensions will be reset.
-            const result = fns.map((fn)=>fn());
-            return result.some((r)=>r);
-        }
-    }
-    async build(oracle, noteHashLeafIndexMap) {
-        if (privateKernelResetDimensionNames.every((name)=>!this.requestedDimensions[name])) {
-            throw new Error('Reset is not required.');
-        }
-        const isInner = !!this.nextIteration;
-        // "final" reset must be done at most once.
-        // Because the code that silo note hashes can't be run repeatedly.
-        // The dimensions found must be big enough to reset all values, i.e. empty remainder.
-        const allowRemainder = isInner;
-        const dimensions = findPrivateKernelResetDimensions(this.requestedDimensions, privateKernelResetDimensionsConfig, isInner, allowRemainder);
-        const previousVkMembershipWitness = await oracle.getVkMembershipWitness(this.previousKernelOutput.verificationKey);
-        const previousKernelData = new PrivateKernelData(this.previousKernelOutput.publicInputs, this.previousKernelOutput.verificationKey, Number(previousVkMembershipWitness.leafIndex), assertLength(previousVkMembershipWitness.siblingPath, VK_TREE_HEIGHT));
-        this.reduceReadRequestStates(this.noteHashResetStates, dimensions.NOTE_HASH_PENDING_AMOUNT, dimensions.NOTE_HASH_SETTLED_AMOUNT);
-        this.reduceReadRequestStates(this.nullifierResetStates, dimensions.NULLIFIER_PENDING_AMOUNT, dimensions.NULLIFIER_SETTLED_AMOUNT);
-        return new PrivateKernelResetCircuitPrivateInputs(previousKernelData, new PrivateKernelResetHints(await buildNoteHashReadRequestHintsFromResetStates(oracle, this.previousKernel.validationRequests.noteHashReadRequests, this.previousKernel.end.noteHashes, this.noteHashResetStates, noteHashLeafIndexMap), await buildNullifierReadRequestHintsFromResetStates({
-            getNullifierMembershipWitness: getNullifierMembershipWitnessResolver(oracle)
-        }, this.previousKernel.validationRequests.nullifierReadRequests, this.nullifierResetStates), await getMasterSecretKeysAndAppKeyGenerators(this.previousKernel.validationRequests.scopedKeyValidationRequestsAndGenerators, oracle), this.transientDataIndexHints, this.validationRequestsSplitCounter), dimensions);
-    }
-    reduceReadRequestStates(resetStates, maxPending, maxSettled) {
-        let numPending = 0;
-        let numSettled = 0;
-        for(let i = 0; i < resetStates.states.length; i++){
-            const state = resetStates.states[i];
-            if (state === ReadRequestState.PENDING) {
-                if (numPending < maxPending) {
-                    numPending++;
-                } else {
-                    resetStates.states[i] = ReadRequestState.NADA;
-                }
-            } else if (state === ReadRequestState.SETTLED) {
-                if (numSettled < maxSettled) {
-                    numSettled++;
-                } else {
-                    resetStates.states[i] = ReadRequestState.NADA;
-                }
-            }
-        }
-        resetStates.pendingReadHints = resetStates.pendingReadHints.slice(0, maxPending);
-    }
-    needsResetNoteHashReadRequests(forceResetAll = false) {
-        const numCurr = countAccumulatedItems(this.previousKernel.validationRequests.noteHashReadRequests);
-        const numNext = this.nextIteration ? countAccumulatedItems(this.nextIteration.noteHashReadRequests) : 0;
-        const maxAmountToKeep = !this.nextIteration || forceResetAll ? 0 : MAX_NOTE_HASH_READ_REQUESTS_PER_TX;
-        if (numCurr + numNext <= maxAmountToKeep) {
-            return false;
-        }
-        const futureNoteHashes = collectNested(this.executionStack, (executionResult)=>{
-            const nonEmptyNoteHashes = getNonEmptyItems(executionResult.publicInputs.noteHashes);
-            return nonEmptyNoteHashes.map((noteHash)=>new ScopedNoteHash(noteHash, executionResult.publicInputs.callContext.contractAddress));
-        });
-        const resetStates = getNoteHashReadRequestResetStates(this.previousKernel.validationRequests.noteHashReadRequests, this.previousKernel.end.noteHashes, futureNoteHashes);
-        const numPendingReads = resetStates.pendingReadHints.length;
-        const numSettledReads = resetStates.states.reduce((accum, state)=>accum + (state === ReadRequestState.SETTLED ? 1 : 0), 0);
-        if (!this.nextIteration) {
-            this.noteHashResetStates = resetStates;
-            this.requestedDimensions.NOTE_HASH_PENDING_AMOUNT = numPendingReads;
-            this.requestedDimensions.NOTE_HASH_SETTLED_AMOUNT = numSettledReads;
-        } else {
-            // Pick only one dimension to reset if next iteration is not empty.
-            if (numPendingReads > numSettledReads) {
-                this.requestedDimensions.NOTE_HASH_PENDING_AMOUNT = numPendingReads;
-                this.noteHashResetStates.states = assertLength(resetStates.states.map((state)=>state === ReadRequestState.PENDING ? state : ReadRequestState.NADA), MAX_NOTE_HASH_READ_REQUESTS_PER_TX);
-                this.noteHashResetStates.pendingReadHints = resetStates.pendingReadHints;
-            } else {
-                this.requestedDimensions.NOTE_HASH_SETTLED_AMOUNT = numSettledReads;
-                this.noteHashResetStates.states = assertLength(resetStates.states.map((state)=>state === ReadRequestState.SETTLED ? state : ReadRequestState.NADA), MAX_NOTE_HASH_READ_REQUESTS_PER_TX);
-            }
-        }
-        return true;
-    }
-    needsResetNullifierReadRequests(forceResetAll = false) {
-        const numCurr = countAccumulatedItems(this.previousKernel.validationRequests.nullifierReadRequests);
-        const numNext = this.nextIteration ? countAccumulatedItems(this.nextIteration.nullifierReadRequests) : 0;
-        const maxAmountToKeep = !this.nextIteration || forceResetAll ? 0 : MAX_NULLIFIER_READ_REQUESTS_PER_TX;
-        if (numCurr + numNext <= maxAmountToKeep) {
-            return false;
-        }
-        const futureNullifiers = collectNested(this.executionStack, (executionResult)=>{
-            const nonEmptyNullifiers = getNonEmptyItems(executionResult.publicInputs.nullifiers);
-            return nonEmptyNullifiers.map((nullifier)=>new ScopedNullifier(nullifier, executionResult.publicInputs.callContext.contractAddress));
-        });
-        const resetStates = getNullifierReadRequestResetStates(this.previousKernel.validationRequests.nullifierReadRequests, this.previousKernel.end.nullifiers, futureNullifiers);
-        const numPendingReads = resetStates.pendingReadHints.length;
-        const numSettledReads = resetStates.states.reduce((accum, state)=>accum + (state === ReadRequestState.SETTLED ? 1 : 0), 0);
-        if (!this.nextIteration) {
-            this.nullifierResetStates = resetStates;
-            this.requestedDimensions.NULLIFIER_PENDING_AMOUNT = numPendingReads;
-            this.requestedDimensions.NULLIFIER_SETTLED_AMOUNT = numSettledReads;
-        } else {
-            // Pick only one dimension to reset if next iteration is not empty.
-            if (numPendingReads > numSettledReads) {
-                this.requestedDimensions.NULLIFIER_PENDING_AMOUNT = numPendingReads;
-                this.nullifierResetStates.states = assertLength(resetStates.states.map((state)=>state === ReadRequestState.PENDING ? state : ReadRequestState.NADA), MAX_NULLIFIER_READ_REQUESTS_PER_TX);
-                this.nullifierResetStates.pendingReadHints = resetStates.pendingReadHints;
-            } else {
-                this.requestedDimensions.NULLIFIER_SETTLED_AMOUNT = numSettledReads;
-                this.nullifierResetStates.states = assertLength(resetStates.states.map((state)=>state === ReadRequestState.SETTLED ? state : ReadRequestState.NADA), MAX_NULLIFIER_READ_REQUESTS_PER_TX);
-            }
-        }
-        return true;
-    }
-    needsResetNullifierKeys() {
-        const numCurr = countAccumulatedItems(this.previousKernel.validationRequests.scopedKeyValidationRequestsAndGenerators);
-        const numNext = this.nextIteration ? countAccumulatedItems(this.nextIteration.keyValidationRequestsAndGenerators) : 0;
-        const maxAmountToKeep = !this.nextIteration ? 0 : MAX_KEY_VALIDATION_REQUESTS_PER_TX;
-        if (numCurr + numNext <= maxAmountToKeep) {
-            return false;
-        }
-        this.requestedDimensions.NULLIFIER_KEYS = numCurr;
-        return true;
-    }
-    needsResetTransientData() {
-        // Initialize this to 0 so that needsSilo can be run.
-        this.numTransientData = 0;
-        const nextAccumNoteHashes = countAccumulatedItems(this.previousKernel.end.noteHashes) + countAccumulatedItems(this.nextIteration?.noteHashes ?? []);
-        const noteHashWillOverflow = nextAccumNoteHashes > MAX_NOTE_HASHES_PER_TX;
-        const nextAccumNullifiers = countAccumulatedItems(this.previousKernel.end.nullifiers) + countAccumulatedItems(this.nextIteration?.nullifiers ?? []);
-        const nullifierWillOverflow = nextAccumNullifiers > MAX_NULLIFIERS_PER_TX;
-        if (this.nextIteration && !noteHashWillOverflow && !nullifierWillOverflow) {
-            return false;
-        }
-        const futureNoteHashReads = collectNestedReadRequests(this.executionStack, (executionResult)=>executionResult.publicInputs.noteHashReadRequests);
-        const futureNullifierReads = collectNestedReadRequests(this.executionStack, (executionResult)=>executionResult.publicInputs.nullifierReadRequests);
-        if (this.nextIteration) {
-            // If it's not the final reset, only one dimension will be reset at a time.
-            // The note hashes and nullifiers for the remaining read requests can't be squashed.
-            futureNoteHashReads.push(...this.previousKernel.validationRequests.noteHashReadRequests.filter((r)=>!r.isEmpty()));
-            futureNullifierReads.push(...this.previousKernel.validationRequests.nullifierReadRequests.filter((r)=>!r.isEmpty()));
-        }
-        const { numTransientData, hints: transientDataIndexHints } = buildTransientDataHints(this.previousKernel.end.noteHashes, this.previousKernel.end.nullifiers, futureNoteHashReads, futureNullifierReads, this.noteHashNullifierCounterMap, this.validationRequestsSplitCounter, MAX_NOTE_HASHES_PER_TX, MAX_NULLIFIERS_PER_TX);
-        if (this.nextIteration && !numTransientData) {
-            const forceResetAll = true;
-            const canClearReadRequests = noteHashWillOverflow && this.needsResetNoteHashReadRequests(forceResetAll) || nullifierWillOverflow && this.needsResetNullifierReadRequests(forceResetAll);
-            if (!canClearReadRequests) {
-                const overflownData = noteHashWillOverflow ? 'note hashes' : 'nullifiers';
-                throw new Error(`Number of ${overflownData} exceeds the limit.`);
-            }
-            // Clearing the read requests might not be enough to squash the overflown data.
-            // In this case, the next iteration will fail at the above check.
-            return true;
-        }
-        this.numTransientData = numTransientData;
-        this.transientDataIndexHints = transientDataIndexHints;
-        this.requestedDimensions.TRANSIENT_DATA_AMOUNT = numTransientData;
-        return numTransientData > 0;
-    }
-    needsSiloNoteHashes() {
-        if (this.numTransientData === undefined) {
-            throw new Error('`needsResetTransientData` must be run before `needsSiloNoteHashes`.');
-        }
-        const numNoteHashes = this.previousKernel.end.noteHashes.filter((n)=>!n.contractAddress.isZero()).length;
-        const numToSilo = Math.max(0, numNoteHashes - this.numTransientData);
-        this.requestedDimensions.NOTE_HASH_SILOING_AMOUNT = numToSilo;
-        return numToSilo > 0;
-    }
-    needsSiloNullifiers() {
-        if (this.numTransientData === undefined) {
-            throw new Error('`needsResetTransientData` must be run before `needsSiloNullifiers`.');
-        }
-        const numNullifiers = this.previousKernel.end.nullifiers.filter((n)=>!n.contractAddress.isZero()).length;
-        const numToSilo = Math.max(0, numNullifiers - this.numTransientData);
-        // Include the first nullifier if there's something to silo.
-        // The reset circuit checks that capped_size must be greater than or equal to all non-empty nullifiers.
-        // Which includes the first nullifier, even though its contract address is always zero and doesn't need siloing.
-        const cappedSize = numToSilo ? numToSilo + 1 : 0;
-        this.requestedDimensions.NULLIFIER_SILOING_AMOUNT = cappedSize;
-        return numToSilo > 0;
-    }
-    needsSiloPrivateLogs() {
-        if (this.numTransientData === undefined) {
-            throw new Error('`needsResetTransientData` must be run before `needsSiloPrivateLogs`.');
-        }
-        const privateLogs = this.previousKernel.end.privateLogs;
-        const numLogs = privateLogs.filter((l)=>!l.contractAddress.isZero()).length;
-        const noteHashes = this.previousKernel.end.noteHashes;
-        const squashedNoteHashCounters = this.transientDataIndexHints.filter((h)=>h.noteHashIndex < noteHashes.length).map((h)=>noteHashes[h.noteHashIndex].counter);
-        const numSquashedLogs = privateLogs.filter((l)=>squashedNoteHashCounters.includes(l.inner.noteHashCounter)).length;
-        const numToSilo = numLogs - numSquashedLogs;
-        this.requestedDimensions.PRIVATE_LOG_SILOING_AMOUNT = numToSilo;
-        return numToSilo > 0;
-    }
-}

package/dest/kernel_prover/hints/index.d.ts

@@ -1,2 +0,0 @@
-export * from './build_private_kernel_reset_private_inputs.js';
-//# sourceMappingURL=index.d.ts.map

package/dest/kernel_prover/hints/index.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/kernel_prover/hints/index.ts"],"names":[],"mappings":"AAAA,cAAc,gDAAgD,CAAC"}

package/dest/kernel_prover/index.d.ts

@@ -1,3 +0,0 @@
-export * from './kernel_prover.js';
-export * from './proving_data_oracle.js';
-//# sourceMappingURL=index.d.ts.map

package/dest/kernel_prover/index.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/kernel_prover/index.ts"],"names":[],"mappings":"AAAA,cAAc,oBAAoB,CAAC;AACnC,cAAc,0BAA0B,CAAC"}

package/dest/kernel_prover/index.js

@@ -1,2 +0,0 @@
-export * from './kernel_prover.js';
-export * from './proving_data_oracle.js';

package/dest/kernel_prover/kernel_prover.d.ts

@@ -1,38 +0,0 @@
-import type { PrivateKernelProver } from '@aztec/stdlib/interfaces/client';
-import { type PrivateKernelSimulateOutput, type PrivateKernelTailCircuitPublicInputs } from '@aztec/stdlib/kernel';
-import { type PrivateExecutionResult, TxRequest } from '@aztec/stdlib/tx';
-import type { ProvingDataOracle } from './proving_data_oracle.js';
-export type ProvingConfig = {
-    simulate: boolean;
-    skipFeeEnforcement: boolean;
-    profile: boolean;
-};
-/**
- * The KernelProver class is responsible for generating kernel proofs.
- * It takes a transaction request, its signature, and the simulation result as inputs, and outputs a proof
- * along with output notes. The class interacts with a ProvingDataOracle to fetch membership witnesses and
- * constructs private call data based on the execution results.
- */
-export declare class KernelProver {
-    private oracle;
-    private proofCreator;
-    private fakeProofs;
-    private log;
-    constructor(oracle: ProvingDataOracle, proofCreator: PrivateKernelProver, fakeProofs?: boolean);
-    /**
-     * Generate a proof for a given transaction request and execution result.
-     * The function iterates through the nested executions in the execution result, creates private call data,
-     * and generates a proof using the provided ProofCreator instance. It also maintains an index of new notes
-     * created during the execution and returns them as a part of the KernelProverOutput.
-     *
-     * @param txRequest - The authenticated transaction request object.
-     * @param executionResult - The execution result object containing nested executions and preimages.
-     * @param profile - Set true to profile the gate count for each circuit
-     * @returns A Promise that resolves to a KernelProverOutput object containing proof, public inputs, and output notes.
-     * TODO(#7368) this should be refactored to not recreate the ACIR bytecode now that it operates on a program stack
-     */
-    prove(txRequest: TxRequest, executionResult: PrivateExecutionResult, { simulate, skipFeeEnforcement, profile }?: ProvingConfig): Promise<PrivateKernelSimulateOutput<PrivateKernelTailCircuitPublicInputs>>;
-    private createPrivateCallData;
-    private isPrivateOnly;
-}
-//# sourceMappingURL=kernel_prover.d.ts.map

package/dest/kernel_prover/kernel_prover.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"kernel_prover.d.ts","sourceRoot":"","sources":["../../src/kernel_prover/kernel_prover.ts"],"names":[],"mappings":"AAYA,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,iCAAiC,CAAC;AAC3E,OAAO,EAML,KAAK,2BAA2B,EAEhC,KAAK,oCAAoC,EAE1C,MAAM,sBAAsB,CAAC;AAE9B,OAAO,EAEL,KAAK,sBAAsB,EAC3B,SAAS,EAMV,MAAM,kBAAkB,CAAC;AAM1B,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,0BAA0B,CAAC;AASlE,MAAM,MAAM,aAAa,GAAG;IAC1B,QAAQ,EAAE,OAAO,CAAC;IAClB,kBAAkB,EAAE,OAAO,CAAC;IAC5B,OAAO,EAAE,OAAO,CAAC;CAClB,CAAC;AAEF;;;;;GAKG;AACH,qBAAa,YAAY;IAIrB,OAAO,CAAC,MAAM;IACd,OAAO,CAAC,YAAY;IACpB,OAAO,CAAC,UAAU;IALpB,OAAO,CAAC,GAAG,CAAqC;gBAGtC,MAAM,EAAE,iBAAiB,EACzB,YAAY,EAAE,mBAAmB,EACjC,UAAU,UAAQ;IAG5B;;;;;;;;;;;OAWG;IACG,KAAK,CACT,SAAS,EAAE,SAAS,EACpB,eAAe,EAAE,sBAAsB,EACvC,EAAE,QAAQ,EAAE,kBAAkB,EAAE,OAAO,EAAE,GAAE,aAI1C,GACA,OAAO,CAAC,2BAA2B,CAAC,oCAAoC,CAAC,CAAC;YA4M/D,qBAAqB;IA4CnC,OAAO,CAAC,aAAa;CAYtB"}

package/dest/kernel_prover/kernel_prover.js

@@ -1,217 +0,0 @@
-import { CLIENT_IVC_VERIFICATION_KEY_LENGTH_IN_FIELDS, VK_TREE_HEIGHT } from '@aztec/constants';
-import { vkAsFieldsMegaHonk } from '@aztec/foundation/crypto';
-import { Fr } from '@aztec/foundation/fields';
-import { createLogger } from '@aztec/foundation/log';
-import { assertLength } from '@aztec/foundation/serialize';
-import { pushTestData } from '@aztec/foundation/testing';
-import { Timer } from '@aztec/foundation/timer';
-import { getVKTreeRoot } from '@aztec/noir-protocol-circuits-types/vk-tree';
-import { getProtocolContractLeafAndMembershipWitness, protocolContractTreeRoot } from '@aztec/protocol-contracts';
-import { AztecAddress } from '@aztec/stdlib/aztec-address';
-import { computeContractAddressFromInstance } from '@aztec/stdlib/contract';
-import { hashVK } from '@aztec/stdlib/hash';
-import { PrivateCallData, PrivateKernelCircuitPublicInputs, PrivateKernelData, PrivateKernelInitCircuitPrivateInputs, PrivateKernelInnerCircuitPrivateInputs, PrivateKernelTailCircuitPrivateInputs, PrivateVerificationKeyHints } from '@aztec/stdlib/kernel';
-import { ClientIvcProof } from '@aztec/stdlib/proofs';
-import { collectEnqueuedPublicFunctionCalls, collectNoteHashLeafIndexMap, collectNoteHashNullifierCounterMap, collectPublicTeardownFunctionCall, getFinalMinRevertibleSideEffectCounter } from '@aztec/stdlib/tx';
-import { VerificationKeyAsFields } from '@aztec/stdlib/vks';
-import { PrivateKernelResetPrivateInputsBuilder } from './hints/build_private_kernel_reset_private_inputs.js';
-const NULL_PROVE_OUTPUT = {
-    publicInputs: PrivateKernelCircuitPublicInputs.empty(),
-    verificationKey: VerificationKeyAsFields.makeEmpty(CLIENT_IVC_VERIFICATION_KEY_LENGTH_IN_FIELDS),
-    outputWitness: new Map(),
-    bytecode: Buffer.from([])
-};
-/**
- * The KernelProver class is responsible for generating kernel proofs.
- * It takes a transaction request, its signature, and the simulation result as inputs, and outputs a proof
- * along with output notes. The class interacts with a ProvingDataOracle to fetch membership witnesses and
- * constructs private call data based on the execution results.
- */ export class KernelProver {
-    oracle;
-    proofCreator;
-    fakeProofs;
-    log;
-    constructor(oracle, proofCreator, fakeProofs = false){
-        this.oracle = oracle;
-        this.proofCreator = proofCreator;
-        this.fakeProofs = fakeProofs;
-        this.log = createLogger('pxe:kernel-prover');
-    }
-    /**
-   * Generate a proof for a given transaction request and execution result.
-   * The function iterates through the nested executions in the execution result, creates private call data,
-   * and generates a proof using the provided ProofCreator instance. It also maintains an index of new notes
-   * created during the execution and returns them as a part of the KernelProverOutput.
-   *
-   * @param txRequest - The authenticated transaction request object.
-   * @param executionResult - The execution result object containing nested executions and preimages.
-   * @param profile - Set true to profile the gate count for each circuit
-   * @returns A Promise that resolves to a KernelProverOutput object containing proof, public inputs, and output notes.
-   * TODO(#7368) this should be refactored to not recreate the ACIR bytecode now that it operates on a program stack
-   */ async prove(txRequest, executionResult, { simulate, skipFeeEnforcement, profile } = {
-        simulate: false,
-        skipFeeEnforcement: false,
-        profile: false
-    }) {
-        const skipProofGeneration = this.fakeProofs || simulate;
-        const generateWitnesses = !skipProofGeneration || profile;
-        const timer = new Timer();
-        const isPrivateOnlyTx = this.isPrivateOnly(executionResult);
-        const executionStack = [
-            executionResult.entrypoint
-        ];
-        let firstIteration = true;
-        let output = NULL_PROVE_OUTPUT;
-        const gateCounts = [];
-        const addGateCount = async (circuitName, bytecode)=>{
-            const gateCount = await this.proofCreator.computeGateCountForCircuit(bytecode, circuitName);
-            gateCounts.push({
-                circuitName,
-                gateCount
-            });
-            this.log.debug(`Gate count for ${circuitName} - ${gateCount}`);
-        };
-        const noteHashLeafIndexMap = collectNoteHashLeafIndexMap(executionResult);
-        const noteHashNullifierCounterMap = collectNoteHashNullifierCounterMap(executionResult);
-        const enqueuedPublicFunctions = collectEnqueuedPublicFunctionCalls(executionResult);
-        const hasPublicCalls = enqueuedPublicFunctions.length > 0 || !collectPublicTeardownFunctionCall(executionResult).isEmpty();
-        const validationRequestsSplitCounter = hasPublicCalls ? getFinalMinRevertibleSideEffectCounter(executionResult) : 0;
-        // vector of gzipped bincode acirs
-        const acirs = [];
-        const witnessStack = [];
-        while(executionStack.length){
-            if (!firstIteration) {
-                let resetBuilder = new PrivateKernelResetPrivateInputsBuilder(output, executionStack, noteHashNullifierCounterMap, validationRequestsSplitCounter);
-                while(resetBuilder.needsReset()){
-                    const privateInputs = await resetBuilder.build(this.oracle, noteHashLeafIndexMap);
-                    output = generateWitnesses ? await this.proofCreator.generateResetOutput(privateInputs) : await this.proofCreator.simulateReset(privateInputs);
-                    // TODO(#7368) consider refactoring this redundant bytecode pushing
-                    acirs.push(output.bytecode);
-                    witnessStack.push(output.outputWitness);
-                    if (profile) {
-                        await addGateCount('private_kernel_reset', output.bytecode);
-                    }
-                    resetBuilder = new PrivateKernelResetPrivateInputsBuilder(output, executionStack, noteHashNullifierCounterMap, validationRequestsSplitCounter);
-                }
-            }
-            const currentExecution = executionStack.pop();
-            executionStack.push(...[
-                ...currentExecution.nestedExecutions
-            ].reverse());
-            const functionName = await this.oracle.getDebugFunctionName(currentExecution.publicInputs.callContext.contractAddress, currentExecution.publicInputs.callContext.functionSelector);
-            // TODO(#7368): This used to be associated with getDebugFunctionName
-            // TODO(#7368): Is there any way to use this with client IVC proving?
-            acirs.push(currentExecution.acir);
-            witnessStack.push(currentExecution.partialWitness);
-            if (profile) {
-                await addGateCount(functionName, currentExecution.acir);
-            }
-            const privateCallData = await this.createPrivateCallData(currentExecution);
-            if (firstIteration) {
-                const proofInput = new PrivateKernelInitCircuitPrivateInputs(txRequest, getVKTreeRoot(), protocolContractTreeRoot, privateCallData, isPrivateOnlyTx, executionResult.firstNullifier);
-                this.log.debug(`Calling private kernel init with isPrivateOnly ${isPrivateOnlyTx} and firstNullifierHint ${proofInput.firstNullifierHint}`);
-                pushTestData('private-kernel-inputs-init', proofInput);
-                output = generateWitnesses ? await this.proofCreator.generateInitOutput(proofInput) : await this.proofCreator.simulateInit(proofInput);
-                acirs.push(output.bytecode);
-                witnessStack.push(output.outputWitness);
-                if (profile) {
-                    await addGateCount('private_kernel_init', output.bytecode);
-                }
-            } else {
-                const previousVkMembershipWitness = await this.oracle.getVkMembershipWitness(output.verificationKey);
-                const previousKernelData = new PrivateKernelData(output.publicInputs, output.verificationKey, Number(previousVkMembershipWitness.leafIndex), assertLength(previousVkMembershipWitness.siblingPath, VK_TREE_HEIGHT));
-                const proofInput = new PrivateKernelInnerCircuitPrivateInputs(previousKernelData, privateCallData);
-                pushTestData('private-kernel-inputs-inner', proofInput);
-                output = generateWitnesses ? await this.proofCreator.generateInnerOutput(proofInput) : await this.proofCreator.simulateInner(proofInput);
-                acirs.push(output.bytecode);
-                witnessStack.push(output.outputWitness);
-                if (profile) {
-                    await addGateCount('private_kernel_inner', output.bytecode);
-                }
-            }
-            firstIteration = false;
-        }
-        // Reset.
-        let resetBuilder = new PrivateKernelResetPrivateInputsBuilder(output, [], noteHashNullifierCounterMap, validationRequestsSplitCounter);
-        while(resetBuilder.needsReset()){
-            const privateInputs = await resetBuilder.build(this.oracle, noteHashLeafIndexMap);
-            output = generateWitnesses ? await this.proofCreator.generateResetOutput(privateInputs) : await this.proofCreator.simulateReset(privateInputs);
-            acirs.push(output.bytecode);
-            witnessStack.push(output.outputWitness);
-            if (profile) {
-                await addGateCount('private_kernel_reset', output.bytecode);
-            }
-            resetBuilder = new PrivateKernelResetPrivateInputsBuilder(output, [], noteHashNullifierCounterMap, validationRequestsSplitCounter);
-        }
-        if (output.publicInputs.feePayer.isZero() && skipFeeEnforcement) {
-            if (!skipProofGeneration) {
-                throw new Error('Fee payment must be enforced when creating real proof.');
-            }
-            output.publicInputs.feePayer = new AztecAddress(Fr.MAX_FIELD_VALUE);
-        }
-        // Private tail.
-        const previousVkMembershipWitness = await this.oracle.getVkMembershipWitness(output.verificationKey);
-        const previousKernelData = new PrivateKernelData(output.publicInputs, output.verificationKey, Number(previousVkMembershipWitness.leafIndex), assertLength(previousVkMembershipWitness.siblingPath, VK_TREE_HEIGHT));
-        this.log.debug(`Calling private kernel tail with hwm ${previousKernelData.publicInputs.minRevertibleSideEffectCounter}`);
-        const privateInputs = new PrivateKernelTailCircuitPrivateInputs(previousKernelData);
-        pushTestData('private-kernel-inputs-ordering', privateInputs);
-        const tailOutput = generateWitnesses ? await this.proofCreator.generateTailOutput(privateInputs) : await this.proofCreator.simulateTail(privateInputs);
-        acirs.push(tailOutput.bytecode);
-        witnessStack.push(tailOutput.outputWitness);
-        if (profile) {
-            await addGateCount('private_kernel_tail', tailOutput.bytecode);
-            tailOutput.profileResult = {
-                gateCounts
-            };
-        }
-        if (generateWitnesses) {
-            this.log.info(`Private kernel witness generation took ${timer.ms()}ms`);
-        }
-        // TODO(#7368) how do we 'bincode' encode these inputs?
-        if (!skipProofGeneration) {
-            const ivcProof = await this.proofCreator.createClientIvcProof(acirs, witnessStack);
-            tailOutput.clientIvcProof = ivcProof;
-        } else {
-            tailOutput.clientIvcProof = ClientIvcProof.random();
-        }
-        return tailOutput;
-    }
-    async createPrivateCallData({ publicInputs, vk: vkAsBuffer }) {
-        const { contractAddress, functionSelector } = publicInputs.callContext;
-        const vkAsFields = await vkAsFieldsMegaHonk(vkAsBuffer);
-        const vk = new VerificationKeyAsFields(vkAsFields, await hashVK(vkAsFields));
-        const { currentContractClassId, publicKeys, saltedInitializationHash } = await this.oracle.getContractAddressPreimage(contractAddress);
-        const functionLeafMembershipWitness = await this.oracle.getFunctionMembershipWitness(currentContractClassId, functionSelector);
-        const { artifactHash: contractClassArtifactHash, publicBytecodeCommitment: contractClassPublicBytecodeCommitment } = await this.oracle.getContractClassIdPreimage(currentContractClassId);
-        // This will be the address computed in the kernel by the executed class. We need to provide non membership of it in the protocol contract tree.
-        // This would only be equal to contractAddress if the currentClassId is equal to the original class id (no update happened).
-        const computedAddress = await computeContractAddressFromInstance({
-            originalContractClassId: currentContractClassId,
-            saltedInitializationHash,
-            publicKeys
-        });
-        const { lowLeaf: protocolContractLeaf, witness: protocolContractMembershipWitness } = await getProtocolContractLeafAndMembershipWitness(contractAddress, computedAddress);
-        const updatedClassIdHints = await this.oracle.getUpdatedClassIdHints(contractAddress);
-        return PrivateCallData.from({
-            publicInputs,
-            vk,
-            verificationKeyHints: PrivateVerificationKeyHints.from({
-                publicKeys,
-                contractClassArtifactHash,
-                contractClassPublicBytecodeCommitment,
-                saltedInitializationHash,
-                functionLeafMembershipWitness,
-                protocolContractMembershipWitness,
-                protocolContractLeaf,
-                updatedClassIdHints
-            })
-        });
-    }
-    isPrivateOnly(executionResult) {
-        const isPrivateOnlyRecursive = (callResult)=>{
-            const makesPublicCalls = callResult.enqueuedPublicFunctionCalls.some((enqueuedCall)=>!enqueuedCall.isEmpty()) || !callResult.publicTeardownFunctionCall.isEmpty();
-            return !makesPublicCalls && callResult.nestedExecutions.every((nestedExecution)=>isPrivateOnlyRecursive(nestedExecution));
-        };
-        return isPrivateOnlyRecursive(executionResult.entrypoint);
-    }
-}

package/dest/kernel_prover/proving_data_oracle.d.ts

@@ -1,73 +0,0 @@
-import type { FUNCTION_TREE_HEIGHT, NOTE_HASH_TREE_HEIGHT, VK_TREE_HEIGHT } from '@aztec/constants';
-import type { Fr, GrumpkinScalar, Point } from '@aztec/foundation/fields';
-import type { MembershipWitness } from '@aztec/foundation/trees';
-import type { FunctionSelector } from '@aztec/stdlib/abi';
-import type { AztecAddress } from '@aztec/stdlib/aztec-address';
-import { UpdatedClassIdHints } from '@aztec/stdlib/kernel';
-import type { PublicKeys } from '@aztec/stdlib/keys';
-import type { NullifierMembershipWitness } from '@aztec/stdlib/trees';
-import type { VerificationKeyAsFields } from '@aztec/stdlib/vks';
-/**
- * Provides functionality to fetch membership witnesses for verification keys,
- * contract addresses, and function selectors in their respective merkle trees.
- */
-export interface ProvingDataOracle {
-    /** Retrieves the preimage of a contract address from the registered contract instances db. */
-    getContractAddressPreimage(address: AztecAddress): Promise<{
-        saltedInitializationHash: Fr;
-        publicKeys: PublicKeys;
-        currentContractClassId: Fr;
-        originalContractClassId: Fr;
-    }>;
-    /** Retrieves the preimage of a contract class id from the contract classes db. */
-    getContractClassIdPreimage(contractClassId: Fr): Promise<{
-        artifactHash: Fr;
-        publicBytecodeCommitment: Fr;
-        privateFunctionsRoot: Fr;
-    }>;
-    /**
-     * Retrieve the function membership witness for the given contract class and function selector.
-     * The function membership witness represents a proof that the function belongs to the specified contract.
-     * Throws an error if the contract address or function selector is unknown.
-     *
-     * @param contractClassId - The id of the class.
-     * @param selector - The function selector.
-     * @returns A promise that resolves with the MembershipWitness instance for the specified contract's function.
-     */
-    getFunctionMembershipWitness(contractClassId: Fr, selector: FunctionSelector): Promise<MembershipWitness<typeof FUNCTION_TREE_HEIGHT>>;
-    /**
-     * Retrieve the membership witness corresponding to a verification key.
-     * This function currently returns a random membership witness of the specified height,
-     * which is a placeholder implementation until a concrete membership witness calculation
-     * is implemented.
-     *
-     * @param vk - The VerificationKey for which the membership witness is needed.
-     * @returns A Promise that resolves to the MembershipWitness instance.
-     */
-    getVkMembershipWitness(vk: VerificationKeyAsFields): Promise<MembershipWitness<typeof VK_TREE_HEIGHT>>;
-    /**
-     * Get the note membership witness for a note in the note hash tree at the given leaf index.
-     *
-     * @param leafIndex - The leaf index of the note in the note hash tree.
-     * @returns the MembershipWitness for the note.
-     */
-    getNoteHashMembershipWitness(leafIndex: bigint): Promise<MembershipWitness<typeof NOTE_HASH_TREE_HEIGHT>>;
-    getNullifierMembershipWitness(nullifier: Fr): Promise<NullifierMembershipWitness | undefined>;
-    /**
-     * Get the root of the note hash tree.
-     *
-     * @returns the root of the note hash tree.
-     */
-    getNoteHashTreeRoot(): Promise<Fr>;
-    /**
-     * Retrieves the sk_m corresponding to the pk_m.
-     * @throws If the provided public key is not associated with any of the registered accounts.
-     * @param pkM - The master public key to get secret key for.
-     * @returns A Promise that resolves to sk_m.
-     * @dev Used when feeding the sk_m to the kernel circuit for keys verification.
-     */
-    getMasterSecretKey(masterPublicKey: Point): Promise<GrumpkinScalar>;
-    getDebugFunctionName(contractAddress: AztecAddress, selector: FunctionSelector): Promise<string | undefined>;
-    getUpdatedClassIdHints(contractAddress: AztecAddress): Promise<UpdatedClassIdHints>;
-}
-//# sourceMappingURL=proving_data_oracle.d.ts.map

package/dest/kernel_prover/proving_data_oracle.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"proving_data_oracle.d.ts","sourceRoot":"","sources":["../../src/kernel_prover/proving_data_oracle.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,oBAAoB,EAAE,qBAAqB,EAAE,cAAc,EAAE,MAAM,kBAAkB,CAAC;AACpG,OAAO,KAAK,EAAE,EAAE,EAAE,cAAc,EAAE,KAAK,EAAE,MAAM,0BAA0B,CAAC;AAC1E,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,yBAAyB,CAAC;AACjE,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,mBAAmB,CAAC;AAC1D,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,6BAA6B,CAAC;AAChE,OAAO,EAAE,mBAAmB,EAAE,MAAM,sBAAsB,CAAC;AAC3D,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,oBAAoB,CAAC;AACrD,OAAO,KAAK,EAAE,0BAA0B,EAAE,MAAM,qBAAqB,CAAC;AACtE,OAAO,KAAK,EAAE,uBAAuB,EAAE,MAAM,mBAAmB,CAAC;AAEjE;;;GAGG;AACH,MAAM,WAAW,iBAAiB;IAChC,8FAA8F;IAC9F,0BAA0B,CAAC,OAAO,EAAE,YAAY,GAAG,OAAO,CAAC;QACzD,wBAAwB,EAAE,EAAE,CAAC;QAC7B,UAAU,EAAE,UAAU,CAAC;QACvB,sBAAsB,EAAE,EAAE,CAAC;QAC3B,uBAAuB,EAAE,EAAE,CAAC;KAC7B,CAAC,CAAC;IAEH,kFAAkF;IAClF,0BAA0B,CACxB,eAAe,EAAE,EAAE,GAClB,OAAO,CAAC;QAAE,YAAY,EAAE,EAAE,CAAC;QAAC,wBAAwB,EAAE,EAAE,CAAC;QAAC,oBAAoB,EAAE,EAAE,CAAA;KAAE,CAAC,CAAC;IAEzF;;;;;;;;OAQG;IACH,4BAA4B,CAC1B,eAAe,EAAE,EAAE,EACnB,QAAQ,EAAE,gBAAgB,GACzB,OAAO,CAAC,iBAAiB,CAAC,OAAO,oBAAoB,CAAC,CAAC,CAAC;IAE3D;;;;;;;;OAQG;IACH,sBAAsB,CAAC,EAAE,EAAE,uBAAuB,GAAG,OAAO,CAAC,iBAAiB,CAAC,OAAO,cAAc,CAAC,CAAC,CAAC;IAEvG;;;;;OAKG;IACH,4BAA4B,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,iBAAiB,CAAC,OAAO,qBAAqB,CAAC,CAAC,CAAC;IAE1G,6BAA6B,CAAC,SAAS,EAAE,EAAE,GAAG,OAAO,CAAC,0BAA0B,GAAG,SAAS,CAAC,CAAC;IAE9F;;;;OAIG;IACH,mBAAmB,IAAI,OAAO,CAAC,EAAE,CAAC,CAAC;IAEnC;;;;;;OAMG;IACH,kBAAkB,CAAC,eAAe,EAAE,KAAK,GAAG,OAAO,CAAC,cAAc,CAAC,CAAC;IAEpE,oBAAoB,CAAC,eAAe,EAAE,YAAY,EAAE,QAAQ,EAAE,gBAAgB,GAAG,OAAO,CAAC,MAAM,GAAG,SAAS,CAAC,CAAC;IAE7G,sBAAsB,CAAC,eAAe,EAAE,YAAY,GAAG,OAAO,CAAC,mBAAmB,CAAC,CAAC;CACrF"}

package/dest/kernel_prover/proving_data_oracle.js

@@ -1,4 +0,0 @@
-/**
- * Provides functionality to fetch membership witnesses for verification keys,
- * contract addresses, and function selectors in their respective merkle trees.
- */ export { };