@crewhaus/target-onchain-game 0.1.3 → 0.1.5

package/dist/index.d.ts

@@ -0,0 +1,40 @@
+/**
+ * Catalog F2 `target-onchain-game` — §47.
+ *
+ * Codegen for the `onchain-game` perceive-act-perceive loop. The
+ * emitted bundle is a single `agent.ts` file that:
+ *
+ *   1. Constructs the chain adapter from `chain` (slice-0
+ *      `@crewhaus/chain-adapter-evm` is the only adapter shipped
+ *      today).
+ *   2. Constructs a wallet engine bound to the single player wallet.
+ *   3. Defines a `playOneTurn()` function that:
+ *        a. Reads game state via `game.stateReader` (a view function).
+ *        b. Classifies the raw state payload via
+ *           `classifyBoundary({origin: "chain"})`.
+ *        c. Calls the agent with the state + objective in the user
+ *           message (one `runChatLoop({singleTurn: true})` call).
+ *        d. Parses the agent's terminal output for a move action and
+ *           dispatches via the wallet-engine
+ *           `requestSignAndBroadcast()` flow.
+ *        e. Waits for confirmation up to `moveTimeoutMs` (real-time)
+ *           or indefinitely (turn-based / async).
+ *   4. For `turn-based`: loops `playOneTurn()` until the agent
+ *      reports the objective met or the move count hits a configured
+ *      ceiling. For `real-time`: drives the loop on a fixed cadence.
+ *      For `async`: subscribes to a state-change event and runs one
+ *      turn per inbound state mutation.
+ *   5. Emits JSON events for turn-start / turn-end / move-broadcast /
+ *      move-confirmed / game-over.
+ *
+ * Slice 2 ships the codegen surface — the emitted file references
+ * runtime packages by name. A follow-up slice wires the agent run
+ * loop end-to-end against an anvil fork.
+ */
+import { CrewhausError } from "@crewhaus/errors";
+import type { Bundle, IrChainGameV0 } from "@crewhaus/ir";
+export declare class TargetEmitError extends CrewhausError {
+    readonly name = "TargetEmitError";
+    constructor(message: string, cause?: unknown);
+}
+export declare function emitOnchainGame(ir: IrChainGameV0): Bundle;

package/{src/index.ts → dist/index.js}

@@ -33,22 +33,17 @@
  */
 import { CrewhausError } from "@crewhaus/errors";
 import { escapeJsonString } from "@crewhaus/infra-utils";
-import type { Bundle, IrChainGameV0, IrSecretRef } from "@crewhaus/ir";
-
 export class TargetEmitError extends CrewhausError {
-  override readonly name = "TargetEmitError";
-  constructor(message: string, cause?: unknown) {
-    super("compiler", message, cause);
-  }
+    name = "TargetEmitError";
+    constructor(message, cause) {
+        super("compiler", message, cause);
+    }
 }
-
-function renderSecretRef(ref: IrSecretRef): string {
-  if (ref.kind === "literal") return JSON.stringify(ref.value);
-  return `process.env[${JSON.stringify(ref.name)}] ?? (() => { throw new Error(${JSON.stringify(
-    `missing required env var ${ref.name}`,
-  )}); })()`;
+function renderSecretRef(ref) {
+    if (ref.kind === "literal")
+        return JSON.stringify(ref.value);
+    return `process.env[${JSON.stringify(ref.name)}] ?? (() => { throw new Error(${JSON.stringify(`missing required env var ${ref.name}`)}); })()`;
 }
-
 /**
  * #159 (CWE-798) — a wallet signing key must never be a bare literal in
  * the emitted DO-NOT-EDIT artifact. The compiler's `lowerWalletKeyRef`
@@ -58,76 +53,56 @@ function renderSecretRef(ref: IrSecretRef): string {
  * key handles are permitted as literals.
  */
 const KEY_HANDLE_RE = /^(kms|hsm):\/\/.+/;
-function renderWalletKeyRef(walletId: string, ref: IrSecretRef): string {
-  if (ref.kind === "literal" && !KEY_HANDLE_RE.test(ref.value)) {
-    throw new TargetEmitError(
-      `wallet "${walletId}" keyRef is a literal signing key; refusing to embed it in the generated bundle. Use an environment reference or a kms:// / hsm:// handle.`,
-    );
-  }
-  return renderSecretRef(ref);
+function renderWalletKeyRef(walletId, ref) {
+    if (ref.kind === "literal" && !KEY_HANDLE_RE.test(ref.value)) {
+        throw new TargetEmitError(`wallet "${walletId}" keyRef is a literal signing key; refusing to embed it in the generated bundle. Use an environment reference or a kms:// / hsm:// handle.`);
+    }
+    return renderSecretRef(ref);
 }
-
-export function emitOnchainGame(ir: IrChainGameV0): Bundle {
-  if (ir.chain.id !== ir.wallet.chainId) {
-    throw new TargetEmitError(
-      `wallet.chainId "${ir.wallet.chainId}" does not match chain.id "${ir.chain.id}"`,
-    );
-  }
-  if (ir.chain.id !== ir.game.contract.chainId) {
-    throw new TargetEmitError(
-      `game.contract.chainId "${ir.game.contract.chainId}" does not match chain.id "${ir.chain.id}"`,
-    );
-  }
-  if (ir.game.turnSemantics === "real-time" && ir.game.moveTimeoutMs === undefined) {
-    throw new TargetEmitError(
-      "real-time games require game.moveTimeoutMs so the loop can bound per-move spend",
-    );
-  }
-
-  const rpcs = ir.chain.rpcUrls.map(renderSecretRef).join(", ");
-  const finality =
-    ir.chain.finality.kind === "confirmations"
-      ? `{ kind: "confirmations", count: ${ir.chain.finality.count} }`
-      : `{ kind: ${JSON.stringify(ir.chain.finality.kind)} }`;
-
-  const policy = ir.transactionPolicy;
-  // #151 — resolve the declared game contract (id -> address) into the policy
-  // so the wallet-engine can bind `tx.to` to the address registered for the
-  // claimed contractId. A game is single-contract, so the map carries exactly
-  // the one entry the move-broadcast flow can target.
-  const contractAddresses: Record<string, string> = {
-    [ir.game.contract.id]: ir.game.contract.address,
-  };
-  const policyLiteral = JSON.stringify({
-    defaultWriteApproval: policy.defaultWriteApproval,
-    allowedContracts: policy.allowedContracts,
-    simulationRequired: policy.simulationRequired,
-    ...(policy.maxValueUsd !== undefined ? { maxValueUsd: policy.maxValueUsd } : {}),
-    ...(policy.maxValueWei !== undefined ? { maxValueWei: policy.maxValueWei } : {}),
-    contractAddresses,
-  });
-
-  const walletKeyRef =
-    ir.wallet.keyRef !== undefined
-      ? `, keyRef: ${renderWalletKeyRef(ir.wallet.id, ir.wallet.keyRef)}`
-      : "";
-
-  const objectiveField =
-    ir.game.objective !== undefined ? `\n  objective: ${escapeJsonString(ir.game.objective)},` : "";
-  const moveTimeoutField =
-    ir.game.moveTimeoutMs !== undefined ? `\n  moveTimeoutMs: ${ir.game.moveTimeoutMs},` : "";
-  const actionsContractField =
-    ir.game.actionsContract !== undefined
-      ? `\n  actionsContract: ${JSON.stringify(ir.game.actionsContract)},`
-      : "";
-
-  const instructions = escapeJsonString(ir.agent.instructions);
-  const name = escapeJsonString(ir.name);
-
-  // Header is a `//` line comment using the JSON-escaped name: a raw ir.name in
-  // a block comment lets a crafted spec.name containing `*/` (or a newline) break
-  // out of the comment and inject top-level code — RCE on build/run (#147).
-  const content = `// Generated by @crewhaus/target-onchain-game (§47 onchain-game).
+export function emitOnchainGame(ir) {
+    if (ir.chain.id !== ir.wallet.chainId) {
+        throw new TargetEmitError(`wallet.chainId "${ir.wallet.chainId}" does not match chain.id "${ir.chain.id}"`);
+    }
+    if (ir.chain.id !== ir.game.contract.chainId) {
+        throw new TargetEmitError(`game.contract.chainId "${ir.game.contract.chainId}" does not match chain.id "${ir.chain.id}"`);
+    }
+    if (ir.game.turnSemantics === "real-time" && ir.game.moveTimeoutMs === undefined) {
+        throw new TargetEmitError("real-time games require game.moveTimeoutMs so the loop can bound per-move spend");
+    }
+    const rpcs = ir.chain.rpcUrls.map(renderSecretRef).join(", ");
+    const finality = ir.chain.finality.kind === "confirmations"
+        ? `{ kind: "confirmations", count: ${ir.chain.finality.count} }`
+        : `{ kind: ${JSON.stringify(ir.chain.finality.kind)} }`;
+    const policy = ir.transactionPolicy;
+    // #151 — resolve the declared game contract (id -> address) into the policy
+    // so the wallet-engine can bind `tx.to` to the address registered for the
+    // claimed contractId. A game is single-contract, so the map carries exactly
+    // the one entry the move-broadcast flow can target.
+    const contractAddresses = {
+        [ir.game.contract.id]: ir.game.contract.address,
+    };
+    const policyLiteral = JSON.stringify({
+        defaultWriteApproval: policy.defaultWriteApproval,
+        allowedContracts: policy.allowedContracts,
+        simulationRequired: policy.simulationRequired,
+        ...(policy.maxValueUsd !== undefined ? { maxValueUsd: policy.maxValueUsd } : {}),
+        ...(policy.maxValueWei !== undefined ? { maxValueWei: policy.maxValueWei } : {}),
+        contractAddresses,
+    });
+    const walletKeyRef = ir.wallet.keyRef !== undefined
+        ? `, keyRef: ${renderWalletKeyRef(ir.wallet.id, ir.wallet.keyRef)}`
+        : "";
+    const objectiveField = ir.game.objective !== undefined ? `\n  objective: ${escapeJsonString(ir.game.objective)},` : "";
+    const moveTimeoutField = ir.game.moveTimeoutMs !== undefined ? `\n  moveTimeoutMs: ${ir.game.moveTimeoutMs},` : "";
+    const actionsContractField = ir.game.actionsContract !== undefined
+        ? `\n  actionsContract: ${JSON.stringify(ir.game.actionsContract)},`
+        : "";
+    const instructions = escapeJsonString(ir.agent.instructions);
+    const name = escapeJsonString(ir.name);
+    // Header is a `//` line comment using the JSON-escaped name: a raw ir.name in
+    // a block comment lets a crafted spec.name containing `*/` (or a newline) break
+    // out of the comment and inject top-level code — RCE on build/run (#147).
+    const content = `// Generated by @crewhaus/target-onchain-game (§47 onchain-game).
 // Compiled from spec: ${name}
 // DO NOT EDIT — re-run \`crewhaus compile\` to regenerate.
 import { classifyBoundary } from "@crewhaus/boundary-classifier";
@@ -209,6 +184,5 @@ function selectorOf(method: string): string {
   );
 }
 `;
-
-  return { files: [{ path: "agent.ts", content }] };
+    return { files: [{ path: "agent.ts", content }] };
 }

package/package.json

@@ -1,20 +1,23 @@
 {
   "name": "@crewhaus/target-onchain-game",
-  "version": "0.1.3",
+  "version": "0.1.5",
   "type": "module",
   "description": "Codegen for the §47 `onchain-game` perceive-act-perceive loop. Emits a daemon that reads game state, asks the model for a move, broadcasts the move, awaits confirmation, and repeats.",
-  "main": "src/index.ts",
-  "types": "src/index.ts",
+  "main": "dist/index.js",
+  "types": "dist/index.d.ts",
   "exports": {
-    ".": "./src/index.ts"
+    ".": {
+      "types": "./dist/index.d.ts",
+      "import": "./dist/index.js"
+    }
   },
   "scripts": {
     "test": "bun test src"
   },
   "dependencies": {
-    "@crewhaus/errors": "0.1.3",
-    "@crewhaus/infra-utils": "0.1.3",
-    "@crewhaus/ir": "0.1.3"
+    "@crewhaus/errors": "0.1.5",
+    "@crewhaus/infra-utils": "0.1.5",
+    "@crewhaus/ir": "0.1.5"
   },
   "license": "Apache-2.0",
   "author": {
@@ -34,5 +37,5 @@
   "publishConfig": {
     "access": "public"
   },
-  "files": ["src", "README.md", "LICENSE", "NOTICE"]
+  "files": ["dist", "README.md", "LICENSE", "NOTICE"]
 }

package/src/index.test.ts

@@ -1,179 +0,0 @@
-import { describe, expect, test } from "bun:test";
-import type { IrChainGameV0 } from "@crewhaus/ir";
-import { TargetEmitError, emitOnchainGame } from "./index";
-
-function baseIr(overrides: Partial<IrChainGameV0> = {}): IrChainGameV0 {
-  return {
-    version: 0,
-    name: "tic-tac-toe-agent",
-    target: "onchain-game",
-    agent: { model: "claude-opus-4-7", instructions: "Play optimal moves." },
-    chain: {
-      id: "base-sepolia",
-      kind: "evm",
-      rpcUrls: [{ kind: "env", name: "BASE_SEPOLIA_RPC" }],
-      rpcPolicy: "single",
-      finality: { kind: "confirmations", count: 1 },
-      reorgTolerant: true,
-    },
-    wallet: {
-      id: "player",
-      chainId: "base-sepolia",
-      custody: "local",
-      signingPolicy: "automated",
-      keyRef: { kind: "env", name: "PLAYER_KEY" },
-    },
-    game: {
-      contract: {
-        id: "tictactoe",
-        chainId: "base-sepolia",
-        address: "0xgame",
-        abiRef: "abi://tictactoe",
-      },
-      stateReader: "9af14a16",
-      turnSemantics: "turn-based",
-      objective: "Win or draw — never lose.",
-    },
-    transactionPolicy: {
-      defaultWriteApproval: "policy",
-      allowedContracts: ["tictactoe"],
-      simulationRequired: true,
-    },
-    tools: [],
-    toolConfigs: {},
-    mcp_servers: {},
-    permissions: { rules: [] },
-    compaction: {},
-    ...overrides,
-  };
-}
-
-describe("emitOnchainGame — happy path", () => {
-  test("emits a single agent.ts with game metadata", () => {
-    const bundle = emitOnchainGame(baseIr());
-    expect(bundle.files).toHaveLength(1);
-    const file = bundle.files[0];
-    expect(file?.path).toBe("agent.ts");
-    expect(file?.content).toContain('SPEC_NAME = "tic-tac-toe-agent"');
-    expect(file?.content).toContain('AGENT_MODEL = "claude-opus-4-7"');
-    expect(file?.content).toContain('AGENT_INSTRUCTIONS = "Play optimal moves."');
-    expect(file?.content).toContain('chainId: "base-sepolia"');
-    expect(file?.content).toContain('id: "tictactoe"');
-    expect(file?.content).toContain('stateReader: "9af14a16"');
-    expect(file?.content).toContain('turnSemantics: "turn-based"');
-    expect(file?.content).toContain('objective: "Win or draw');
-    expect(file?.content).toContain("createEvmAdapter");
-    expect(file?.content).toContain("classifyBoundary");
-    expect(file?.content).toContain('origin: "chain"');
-  });
-
-  test("wallet keyRef env-secret renders as process.env lookup", () => {
-    const bundle = emitOnchainGame(baseIr());
-    const c = bundle.files[0]?.content ?? "";
-    expect(c).toContain('process.env["PLAYER_KEY"]');
-  });
-
-  test("renders the transaction_policy literal", () => {
-    const bundle = emitOnchainGame(baseIr());
-    const c = bundle.files[0]?.content ?? "";
-    expect(c).toContain('"allowedContracts":["tictactoe"]');
-    expect(c).toContain('"simulationRequired":true');
-  });
-
-  // #151 activation — the single game contract is resolved into the policy's
-  // contractId -> address map so the wallet-engine binds tx.to.
-  test("populates transaction_policy.contractAddresses from the game contract", () => {
-    const bundle = emitOnchainGame(baseIr());
-    const c = bundle.files[0]?.content ?? "";
-    expect(c).toContain('"contractAddresses":{"tictactoe":"0xgame"}');
-  });
-
-  // #159 (CWE-798) — a kms:// / hsm:// key handle is a permitted literal.
-  test("renders a kms:// keyRef handle verbatim", () => {
-    const bundle = emitOnchainGame(
-      baseIr({
-        wallet: {
-          id: "player",
-          chainId: "base-sepolia",
-          custody: "kms",
-          signingPolicy: "automated",
-          keyRef: { kind: "literal", value: "kms://aws/player-key" },
-        },
-      }),
-    );
-    const c = bundle.files[0]?.content ?? "";
-    expect(c).toContain('"kms://aws/player-key"');
-  });
-});
-
-describe("emitOnchainGame — validation", () => {
-  test("rejects when wallet.chainId differs from chain.id", () => {
-    expect(() =>
-      emitOnchainGame(
-        baseIr({
-          wallet: {
-            id: "player",
-            chainId: "polygon-mainnet",
-            custody: "local",
-            signingPolicy: "automated",
-            keyRef: { kind: "env", name: "PLAYER_KEY" },
-          },
-        }),
-      ),
-    ).toThrow(TargetEmitError);
-  });
-
-  test("rejects when game.contract.chainId differs from chain.id", () => {
-    const ir = baseIr();
-    expect(() =>
-      emitOnchainGame({
-        ...ir,
-        game: {
-          ...ir.game,
-          contract: { ...ir.game.contract, chainId: "polygon-mainnet" },
-        },
-      }),
-    ).toThrow(TargetEmitError);
-  });
-
-  test("rejects real-time games without moveTimeoutMs", () => {
-    const ir = baseIr();
-    expect(() =>
-      emitOnchainGame({
-        ...ir,
-        game: { ...ir.game, turnSemantics: "real-time" },
-      }),
-    ).toThrow(/moveTimeoutMs/);
-  });
-
-  // #159 (CWE-798) — a literal (raw hex private key) wallet keyRef must not be
-  // baked into the emitted artifact.
-  test("rejects a literal (hex private key) wallet keyRef", () => {
-    expect(() =>
-      emitOnchainGame(
-        baseIr({
-          wallet: {
-            id: "player",
-            chainId: "base-sepolia",
-            custody: "local",
-            signingPolicy: "automated",
-            keyRef: {
-              kind: "literal",
-              value: "0x59c6995e998f97a5a0044966f0945389dc9e86dae88c7a8412f4603b6b78690d",
-            },
-          },
-        }),
-      ),
-    ).toThrow(TargetEmitError);
-  });
-});
-
-describe("emitOnchainGame — spec-name codegen injection (#147)", () => {
-  test("a crafted name cannot break out of the header comment", () => {
-    const evil = "safe */ globalThis.__PWNED_GAME__ = 1; /*\nmore";
-    const content = emitOnchainGame(baseIr({ name: evil })).files[0]?.content ?? "";
-    expect(content).toMatch(/^\/\/ Compiled from spec:/m);
-    expect(content).not.toMatch(/^globalThis\.__PWNED_GAME__/m);
-    expect(content).not.toContain("*/\nglobalThis");
-  });
-});