@dust-dice/verifier 0.4.0 → 0.4.2

package/dist/config.d.ts

@@ -0,0 +1,5 @@
+import { type NetworkConfig } from '@dust-dice/api/node';
+/** UNDEPLOYED (the local devnet) unless the MIDNIGHT_* environment variables say otherwise. */
+export declare const NETWORK: NetworkConfig;
+export declare const MANAGED_TABLE: string;
+export declare const MANAGED_LOBBY: string;

package/dist/config.js

@@ -0,0 +1,29 @@
+// Copyright (C) Shielded Technologies
+// SPDX-License-Identifier: Apache-2.0
+/**
+ * The verifier's configuration: which network to read, and where the compiled contract lives.
+ * Nothing here is a secret or a game parameter — the verifier only READS the chain.
+ */
+import * as fs from 'node:fs';
+import * as path from 'node:path';
+import { createRequire } from 'node:module';
+import { resolveNetwork } from '@dust-dice/api/node';
+const require = createRequire(import.meta.url);
+/** UNDEPLOYED (the local devnet) unless the MIDNIGHT_* environment variables say otherwise. */
+export const NETWORK = resolveNetwork();
+const CONTRACT_ROOT = path.dirname(require.resolve('@dust-dice/contract/package.json'));
+/**
+ * Where `@dust-dice/contract` keeps compactc's output for the two deployables. The PUBLISHED
+ * package ships them under `dist/managed` (keys and ZKIR for table and lobby only); a source
+ * checkout that has compiled but not built has them under `src/managed`. Prefer the built copy,
+ * which is what a consumer installs, and fall back to the source tree for development.
+ */
+const managedRoot = (() => {
+    const built = path.join(CONTRACT_ROOT, 'dist', 'managed');
+    return fs.existsSync(path.join(built, 'table', 'keys'))
+        ? built
+        : path.join(CONTRACT_ROOT, 'src', 'managed');
+})();
+export const MANAGED_TABLE = path.join(managedRoot, 'table');
+export const MANAGED_LOBBY = path.join(managedRoot, 'lobby');
+//# sourceMappingURL=config.js.map

package/dist/config.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"config.js","sourceRoot":"","sources":["../src/config.ts"],"names":[],"mappings":"AAAA,sCAAsC;AACtC,sCAAsC;AACtC;;;GAGG;AACH,OAAO,KAAK,EAAE,MAAM,SAAS,CAAC;AAC9B,OAAO,KAAK,IAAI,MAAM,WAAW,CAAC;AAClC,OAAO,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC;AAC5C,OAAO,EAAE,cAAc,EAAsB,MAAM,qBAAqB,CAAC;AAEzE,MAAM,OAAO,GAAG,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;AAE/C,+FAA+F;AAC/F,MAAM,CAAC,MAAM,OAAO,GAAkB,cAAc,EAAE,CAAC;AAEvD,MAAM,aAAa,GAAG,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,OAAO,CAAC,kCAAkC,CAAC,CAAC,CAAC;AACxF;;;;;GAKG;AACH,MAAM,WAAW,GAAG,CAAC,GAAW,EAAE;IAChC,MAAM,KAAK,GAAG,IAAI,CAAC,IAAI,CAAC,aAAa,EAAE,MAAM,EAAE,SAAS,CAAC,CAAC;IAC1D,OAAO,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,EAAE,OAAO,EAAE,MAAM,CAAC,CAAC;QACrD,CAAC,CAAC,KAAK;QACP,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,aAAa,EAAE,KAAK,EAAE,SAAS,CAAC,CAAC;AACjD,CAAC,CAAC,EAAE,CAAC;AACL,MAAM,CAAC,MAAM,aAAa,GAAG,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,OAAO,CAAC,CAAC;AAC7D,MAAM,CAAC,MAAM,aAAa,GAAG,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,OAAO,CAAC,CAAC"}

package/dist/contracts.d.ts

@@ -0,0 +1,105 @@
+/**
+ * The `compiledContract` values `deployContract`/`findDeployedContract` take, and one-shot
+ * reads of a table's public ledger.
+ *
+ * On midnight-js 5.x a `compiledContract` is NOT a bare `new Contract(witnesses)`:
+ * `deployContract` calls compact-js's `createContract`, which reads a hidden `CompactContext`
+ * off the value and needs `.ctor` and `.witnesses` on it. Passing a Contract instance fails
+ * deep inside proving with `TypeError: Cannot read properties of undefined (reading 'ctor')`,
+ * which names neither the argument nor the missing wrapper. The wrapper is
+ * `CompiledContract.make(tag, Ctor).pipe(...)`; both contracts here declare witnesses, so the
+ * combinator is `withWitnesses` (`withVacantWitnesses` is for contracts that declare none).
+ */
+import { CompiledContract } from '@midnight-ntwrk/midnight-js-protocol/compact-js';
+import { Table, Lobby, type TablePrivateState, type LobbyPrivateState } from '@dust-dice/contract';
+export { Table, Lobby };
+/**
+ * The exported circuit names, spelled out.
+ *
+ * `createProviders` is generic in this and it MUST be instantiated with the concrete union, not
+ * left to infer `string`: midnight-js ties a provider's circuit-id type to the contract's own
+ * `ProvableCircuitId`, so a `string` here fails every `deployContract`/`findDeployedContract`
+ * overload with "Type 'string' is not assignable to type 'ProvableCircuitId<...>'" -- an error
+ * that points at the providers argument and says nothing about the type parameter that caused
+ * it.
+ */
+export type TableCircuitId = 'join' | 'playerMove' | 'resolveRoll1' | 'resolveReroll' | 'closeRound' | 'eliminate' | 'settle' | 'redeem' | 'abortTable';
+export type LobbyCircuitId = 'openTableAt' | 'tableFilled';
+export declare const CompiledTableContract: CompiledContract.CompiledContract<Table.Contract<TablePrivateState, Table.Witnesses<TablePrivateState>>, TablePrivateState, never>;
+export declare const CompiledLobbyContract: CompiledContract.CompiledContract<Lobby.Contract<LobbyPrivateState, Lobby.Witnesses<LobbyPrivateState>>, LobbyPrivateState, never>;
+export type TableLedger = Table.Ledger;
+export type LobbyLedger = Lobby.Ledger;
+/**
+ * Read a table's ledger with a ONE-SHOT query.
+ *
+ * Deliberately not `contractStateObservable`: that observable misses rapid successive updates
+ * and its first emission may predate the write being checked, so every read-after-write in this
+ * driver -- and there is one after almost every transaction -- has to use `queryContractState`.
+ * (bugs-found.md §0 #10; the same reason probes/gate0/src/step.ts reads this way.)
+ *
+ * `blockHeight` pins the read to a past block, which is what the chain-only verifier walks the
+ * game with.
+ */
+export declare function readTableLedger(address: string, blockHeight?: number): Promise<TableLedger>;
+export declare function readLobbyLedger(address: string): Promise<LobbyLedger>;
+/** `Dice` as the plain five-element array everything else in this repo speaks. */
+export declare function diceToArray(d: Table.Dice): number[];
+/** Rounds per seat: 0..12, thirteen of them, one category each. `roundCount()`. */
+export declare const ROUND_COUNT = 13;
+/** The last round a seat plays. Completing it completes the scorecard. */
+export declare const FINAL_ROUND = 12;
+/** `playerMove` kinds. */
+export declare const MOVE_OPEN = 0;
+export declare const MOVE_HOLD = 1;
+export declare const MOVE_SCORE = 2;
+/**
+ * `seatTurn.stage`.
+ *
+ * EVEN STAGES ARE OWED BY THE PLAYER, ODD ONES BY THE OPERATOR. That split is what the driver
+ * dispatches on and what `eliminate` and `abortTable` divide on in the contract.
+ */
+export declare const STAGE: {
+    readonly idle: 0;
+    readonly awaitRoll1: 1;
+    readonly rolled1: 2;
+    readonly awaitRoll2: 3;
+    readonly rolled2: 4;
+    readonly awaitRoll3: 5;
+    readonly rolled3: 6;
+};
+/** Is this seat's next move the player's? */
+export declare const playerOwes: (stage: number) => boolean;
+/** The canonical "no mask" sentinel every `playerMove` kind but `hold` must carry. */
+export declare const NO_MASK: boolean[];
+/** The canonical "no entropy" sentinel every kind but `open` must carry. */
+export declare const ZERO_BYTES32: () => Uint8Array;
+/** One seat's position, as the driver reads it off the ledger. */
+export interface SeatView {
+    seat: number;
+    /** The next round this seat owes; `ROUND_COUNT` means finished or eliminated. */
+    round: number;
+    stage: number;
+    eliminated: boolean;
+    /** The dice as of the most recent resolved roll of the current turn. */
+    roll: number[];
+}
+export declare function seatView(led: TableLedger, seat: number): SeatView;
+/** Every seated slot's view, in seat order. */
+export declare function seatViews(led: TableLedger): SeatView[];
+/**
+ * The penalty split `eliminate` requires: `q * 13 + rem == tier * (round + 1)`, `rem < 13`.
+ *
+ * Compact has no division, so the caller supplies the quotient and remainder and the circuit
+ * checks the Euclidean identity -- which has exactly one solution, so supplying them grants no
+ * discretion. `round + 1` reconciles the contract's 0-based rounds with the design note's
+ * 1..13 numbering: a seat that never played at all forfeits a thirteenth, not nothing.
+ */
+export declare function penaltySplit(tier: bigint, round: number): {
+    q: bigint;
+    rem: bigint;
+};
+/** The per-seat 1% rake on `tier` that `abortTable` requires, on every path. */
+export declare function perSeatRake(tier: bigint): {
+    q: bigint;
+    rem: bigint;
+};

package/dist/contracts.js

@@ -0,0 +1,121 @@
+// Copyright (C) Shielded Technologies
+// SPDX-License-Identifier: Apache-2.0
+/**
+ * The `compiledContract` values `deployContract`/`findDeployedContract` take, and one-shot
+ * reads of a table's public ledger.
+ *
+ * On midnight-js 5.x a `compiledContract` is NOT a bare `new Contract(witnesses)`:
+ * `deployContract` calls compact-js's `createContract`, which reads a hidden `CompactContext`
+ * off the value and needs `.ctor` and `.witnesses` on it. Passing a Contract instance fails
+ * deep inside proving with `TypeError: Cannot read properties of undefined (reading 'ctor')`,
+ * which names neither the argument nor the missing wrapper. The wrapper is
+ * `CompiledContract.make(tag, Ctor).pipe(...)`; both contracts here declare witnesses, so the
+ * combinator is `withWitnesses` (`withVacantWitnesses` is for contracts that declare none).
+ */
+import { CompiledContract } from '@midnight-ntwrk/midnight-js-protocol/compact-js';
+import { indexerPublicDataProvider } from '@midnight-ntwrk/midnight-js-indexer-public-data-provider';
+import { Table, Lobby, tableWitnesses, lobbyWitnesses, } from '@dust-dice/contract';
+import { NETWORK } from "./config.js";
+export { Table, Lobby };
+export const CompiledTableContract = CompiledContract.make('Table', (Table.Contract)).pipe(CompiledContract.withWitnesses(tableWitnesses), CompiledContract.withCompiledFileAssets('./table'));
+export const CompiledLobbyContract = CompiledContract.make('Lobby', (Lobby.Contract)).pipe(CompiledContract.withWitnesses(lobbyWitnesses), CompiledContract.withCompiledFileAssets('./lobby'));
+/**
+ * Read a table's ledger with a ONE-SHOT query.
+ *
+ * Deliberately not `contractStateObservable`: that observable misses rapid successive updates
+ * and its first emission may predate the write being checked, so every read-after-write in this
+ * driver -- and there is one after almost every transaction -- has to use `queryContractState`.
+ * (bugs-found.md §0 #10; the same reason probes/gate0/src/step.ts reads this way.)
+ *
+ * `blockHeight` pins the read to a past block, which is what the chain-only verifier walks the
+ * game with.
+ */
+export async function readTableLedger(address, blockHeight) {
+    const pdp = indexerPublicDataProvider(NETWORK.indexer, NETWORK.indexerWS);
+    const state = blockHeight === undefined
+        ? await pdp.queryContractState(address)
+        : await pdp.queryContractState(address, { type: 'blockHeight', blockHeight });
+    if (!state) {
+        throw new Error(`no contract state at ${address}${blockHeight === undefined ? '' : ` @ block ${blockHeight}`}`);
+    }
+    return Table.ledger(state.data);
+}
+export async function readLobbyLedger(address) {
+    const pdp = indexerPublicDataProvider(NETWORK.indexer, NETWORK.indexerWS);
+    const state = await pdp.queryContractState(address);
+    if (!state)
+        throw new Error(`no contract state at ${address}`);
+    return Lobby.ledger(state.data);
+}
+/** `Dice` as the plain five-element array everything else in this repo speaks. */
+export function diceToArray(d) {
+    return [d.d0, d.d1, d.d2, d.d3, d.d4].map(Number);
+}
+// ---------------------------------------------------------------------------------------
+// The shape of a game, restated for the driver and the verifier
+// ---------------------------------------------------------------------------------------
+//
+// These mirror `table.compact` and are restated here rather than imported because the generated
+// bindings spell them as plain `Uint<8>` values (they are not Compact `enum`s) and because both
+// the driver and the chain-only verifier need them. See docs/table-interface.md.
+/** Rounds per seat: 0..12, thirteen of them, one category each. `roundCount()`. */
+export const ROUND_COUNT = 13;
+/** The last round a seat plays. Completing it completes the scorecard. */
+export const FINAL_ROUND = 12;
+/** `playerMove` kinds. */
+export const MOVE_OPEN = 0;
+export const MOVE_HOLD = 1;
+export const MOVE_SCORE = 2;
+/**
+ * `seatTurn.stage`.
+ *
+ * EVEN STAGES ARE OWED BY THE PLAYER, ODD ONES BY THE OPERATOR. That split is what the driver
+ * dispatches on and what `eliminate` and `abortTable` divide on in the contract.
+ */
+export const STAGE = {
+    idle: 0,
+    awaitRoll1: 1,
+    rolled1: 2,
+    awaitRoll2: 3,
+    rolled2: 4,
+    awaitRoll3: 5,
+    rolled3: 6,
+};
+/** Is this seat's next move the player's? */
+export const playerOwes = (stage) => stage % 2 === 0;
+/** The canonical "no mask" sentinel every `playerMove` kind but `hold` must carry. */
+export const NO_MASK = [false, false, false, false, false];
+/** The canonical "no entropy" sentinel every kind but `open` must carry. */
+export const ZERO_BYTES32 = () => new Uint8Array(32);
+export function seatView(led, seat) {
+    const prog = led.seatProgress.lookup(BigInt(seat));
+    const turn = led.seatTurn.lookup(BigInt(seat));
+    return {
+        seat,
+        round: Number(prog.round),
+        stage: Number(turn.stage),
+        eliminated: prog.eliminated,
+        roll: diceToArray(turn.roll),
+    };
+}
+/** Every seated slot's view, in seat order. */
+export function seatViews(led) {
+    return Array.from({ length: Number(led.seatCount) }, (_, s) => seatView(led, s));
+}
+/**
+ * The penalty split `eliminate` requires: `q * 13 + rem == tier * (round + 1)`, `rem < 13`.
+ *
+ * Compact has no division, so the caller supplies the quotient and remainder and the circuit
+ * checks the Euclidean identity -- which has exactly one solution, so supplying them grants no
+ * discretion. `round + 1` reconciles the contract's 0-based rounds with the design note's
+ * 1..13 numbering: a seat that never played at all forfeits a thirteenth, not nothing.
+ */
+export function penaltySplit(tier, round) {
+    const numer = tier * BigInt(round + 1);
+    return { q: numer / 13n, rem: numer % 13n };
+}
+/** The per-seat 1% rake on `tier` that `abortTable` requires, on every path. */
+export function perSeatRake(tier) {
+    return { q: tier / 100n, rem: tier % 100n };
+}
+//# sourceMappingURL=contracts.js.map

package/dist/contracts.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"contracts.js","sourceRoot":"","sources":["../src/contracts.ts"],"names":[],"mappings":"AAAA,sCAAsC;AACtC,sCAAsC;AAEtC;;;;;;;;;;;GAWG;AAEH,OAAO,EAAE,gBAAgB,EAAE,MAAM,iDAAiD,CAAC;AACnF,OAAO,EAAE,yBAAyB,EAAE,MAAM,0DAA0D,CAAC;AACrG,OAAO,EACL,KAAK,EACL,KAAK,EACL,cAAc,EACd,cAAc,GAGf,MAAM,qBAAqB,CAAC;AAE7B,OAAO,EAAE,OAAO,EAAE,MAAM,aAAa,CAAC;AAEtC,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC;AAyBxB,MAAM,CAAC,MAAM,qBAAqB,GAAG,gBAAgB,CAAC,IAAI,CACxD,OAAO,EACP,CAAA,KAAK,CAAC,QAA2B,CAAA,CAClC,CAAC,IAAI,CACJ,gBAAgB,CAAC,aAAa,CAAC,cAAc,CAAC,EAC9C,gBAAgB,CAAC,sBAAsB,CAAC,SAAS,CAAC,CACnD,CAAC;AAEF,MAAM,CAAC,MAAM,qBAAqB,GAAG,gBAAgB,CAAC,IAAI,CACxD,OAAO,EACP,CAAA,KAAK,CAAC,QAA2B,CAAA,CAClC,CAAC,IAAI,CACJ,gBAAgB,CAAC,aAAa,CAAC,cAAc,CAAC,EAC9C,gBAAgB,CAAC,sBAAsB,CAAC,SAAS,CAAC,CACnD,CAAC;AAKF;;;;;;;;;;GAUG;AACH,MAAM,CAAC,KAAK,UAAU,eAAe,CAAC,OAAe,EAAE,WAAoB;IACzE,MAAM,GAAG,GAAG,yBAAyB,CAAC,OAAO,CAAC,OAAO,EAAE,OAAO,CAAC,SAAS,CAAC,CAAC;IAC1E,MAAM,KAAK,GACT,WAAW,KAAK,SAAS;QACvB,CAAC,CAAC,MAAM,GAAG,CAAC,kBAAkB,CAAC,OAAO,CAAC;QACvC,CAAC,CAAC,MAAM,GAAG,CAAC,kBAAkB,CAAC,OAAO,EAAE,EAAE,IAAI,EAAE,aAAa,EAAE,WAAW,EAAE,CAAC,CAAC;IAClF,IAAI,CAAC,KAAK,EAAE,CAAC;QACX,MAAM,IAAI,KAAK,CACb,wBAAwB,OAAO,GAAG,WAAW,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,YAAY,WAAW,EAAE,EAAE,CAC/F,CAAC;IACJ,CAAC;IACD,OAAO,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;AAClC,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,eAAe,CAAC,OAAe;IACnD,MAAM,GAAG,GAAG,yBAAyB,CAAC,OAAO,CAAC,OAAO,EAAE,OAAO,CAAC,SAAS,CAAC,CAAC;IAC1E,MAAM,KAAK,GAAG,MAAM,GAAG,CAAC,kBAAkB,CAAC,OAAO,CAAC,CAAC;IACpD,IAAI,CAAC,KAAK;QAAE,MAAM,IAAI,KAAK,CAAC,wBAAwB,OAAO,EAAE,CAAC,CAAC;IAC/D,OAAO,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;AAClC,CAAC;AAED,kFAAkF;AAClF,MAAM,UAAU,WAAW,CAAC,CAAa;IACvC,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;AACpD,CAAC;AAED,0FAA0F;AAC1F,gEAAgE;AAChE,0FAA0F;AAC1F,EAAE;AACF,gGAAgG;AAChG,gGAAgG;AAChG,iFAAiF;AAEjF,mFAAmF;AACnF,MAAM,CAAC,MAAM,WAAW,GAAG,EAAE,CAAC;AAE9B,0EAA0E;AAC1E,MAAM,CAAC,MAAM,WAAW,GAAG,EAAE,CAAC;AAE9B,0BAA0B;AAC1B,MAAM,CAAC,MAAM,SAAS,GAAG,CAAC,CAAC;AAC3B,MAAM,CAAC,MAAM,SAAS,GAAG,CAAC,CAAC;AAC3B,MAAM,CAAC,MAAM,UAAU,GAAG,CAAC,CAAC;AAE5B;;;;;GAKG;AACH,MAAM,CAAC,MAAM,KAAK,GAAG;IACnB,IAAI,EAAE,CAAC;IACP,UAAU,EAAE,CAAC;IACb,OAAO,EAAE,CAAC;IACV,UAAU,EAAE,CAAC;IACb,OAAO,EAAE,CAAC;IACV,UAAU,EAAE,CAAC;IACb,OAAO,EAAE,CAAC;CACF,CAAC;AAEX,6CAA6C;AAC7C,MAAM,CAAC,MAAM,UAAU,GAAG,CAAC,KAAa,EAAW,EAAE,CAAC,KAAK,GAAG,CAAC,KAAK,CAAC,CAAC;AAEtE,sFAAsF;AACtF,MAAM,CAAC,MAAM,OAAO,GAAc,CAAC,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,CAAC,CAAC;AAEtE,4EAA4E;AAC5E,MAAM,CAAC,MAAM,YAAY,GAAG,GAAe,EAAE,CAAC,IAAI,UAAU,CAAC,EAAE,CAAC,CAAC;AAajE,MAAM,UAAU,QAAQ,CAAC,GAAgB,EAAE,IAAY;IACrD,MAAM,IAAI,GAAG,GAAG,CAAC,YAAY,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC;IACnD,MAAM,IAAI,GAAG,GAAG,CAAC,QAAQ,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC;IAC/C,OAAO;QACL,IAAI;QACJ,KAAK,EAAE,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC;QACzB,KAAK,EAAE,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC;QACzB,UAAU,EAAE,IAAI,CAAC,UAAU;QAC3B,IAAI,EAAE,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC;KAC7B,CAAC;AACJ,CAAC;AAED,+CAA+C;AAC/C,MAAM,UAAU,SAAS,CAAC,GAAgB;IACxC,OAAO,KAAK,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,MAAM,CAAC,GAAG,CAAC,SAAS,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,QAAQ,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,CAAC;AACnF,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,YAAY,CAAC,IAAY,EAAE,KAAa;IACtD,MAAM,KAAK,GAAG,IAAI,GAAG,MAAM,CAAC,KAAK,GAAG,CAAC,CAAC,CAAC;IACvC,OAAO,EAAE,CAAC,EAAE,KAAK,GAAG,GAAG,EAAE,GAAG,EAAE,KAAK,GAAG,GAAG,EAAE,CAAC;AAC9C,CAAC;AAED,gFAAgF;AAChF,MAAM,UAAU,WAAW,CAAC,IAAY;IACtC,OAAO,EAAE,CAAC,EAAE,IAAI,GAAG,IAAI,EAAE,GAAG,EAAE,IAAI,GAAG,IAAI,EAAE,CAAC;AAC9C,CAAC"}

package/dist/index.d.ts

@@ -0,0 +1,8 @@
+/**
+ * The read side of Dust Dice, for anyone: compiled-contract handles, indexer queries, and the
+ * network/artifact configuration. The verifier itself is the package's `bin` (`dust-dice-verify`)
+ * and is deliberately not re-exported here — importing it runs it.
+ */
+export * from './config.ts';
+export * from './contracts.ts';
+export * from './indexer.ts';

package/dist/index.js

@@ -0,0 +1,11 @@
+// Copyright (C) Shielded Technologies
+// SPDX-License-Identifier: Apache-2.0
+/**
+ * The read side of Dust Dice, for anyone: compiled-contract handles, indexer queries, and the
+ * network/artifact configuration. The verifier itself is the package's `bin` (`dust-dice-verify`)
+ * and is deliberately not re-exported here — importing it runs it.
+ */
+export * from "./config.js";
+export * from "./contracts.js";
+export * from "./indexer.js";
+//# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,sCAAsC;AACtC,sCAAsC;AACtC;;;;GAIG;AACH,cAAc,aAAa,CAAC;AAC5B,cAAc,gBAAgB,CAAC;AAC/B,cAAc,cAAc,CAAC"}

package/dist/indexer.d.ts

@@ -0,0 +1,89 @@
+export interface GqlUnshieldedUtxo {
+    owner: string;
+    tokenType: string;
+    value: string;
+    intentHash: string;
+    outputIndex: number;
+    registeredForDustGeneration: boolean;
+}
+export interface GqlTransaction {
+    hash: string;
+    /** Hex of the whole transaction as the node saw it. `length / 2` is the size it checked. */
+    raw: string;
+    block: {
+        height: number;
+        timestamp: string;
+    };
+    unshieldedCreatedOutputs: GqlUnshieldedUtxo[];
+    unshieldedSpentOutputs: GqlUnshieldedUtxo[];
+}
+/** One entry in a contract's public history. `entryPoint` is absent on the deploy. */
+export interface ContractAction {
+    kind: 'ContractDeploy' | 'ContractCall' | 'ContractUpdate';
+    entryPoint?: string;
+    txHash: string;
+    blockHeight: number;
+    blockTimestamp: number;
+}
+/** The native (NIGHT) token type is 32 zero bytes. Matches Compact's `nativeToken()`. */
+export declare const NATIVE_TOKEN_HEX: string;
+export declare function sumNative(utxos: GqlUnshieldedUtxo[]): bigint;
+export declare function sumNativeFor(utxos: GqlUnshieldedUtxo[], owner: string): bigint;
+/**
+ * The contract's own unshielded balances as the LEDGER sees them, keyed by token-type hex.
+ *
+ * `unshieldedBalances` hangs off `ContractAction`, NOT off `Contract` -- `contract(address)`
+ * returns a `Contract` whose only fields are address/state/maintenanceAuthority/actions.
+ * `contractAction(address)` returns the latest action, which is what carries the running
+ * balances, and all three action variants declare the field so it selects on the interface.
+ */
+export declare function contractUnshieldedBalances(address: string): Promise<Record<string, bigint>>;
+export declare function nativeBalance(balances: Record<string, bigint>): bigint;
+/**
+ * One transaction by hash, with its UTXO deltas and its raw bytes.
+ *
+ * Polls: the indexer trails the node slightly, so a hash returned by `submitTransaction` is not
+ * necessarily queryable the same instant.
+ */
+export declare function transactionByHash(hash: string, { attempts, delayMs }?: {
+    attempts?: number | undefined;
+    delayMs?: number | undefined;
+}): Promise<GqlTransaction>;
+/** Byte size of a transaction as the node measured it, from the indexer's `raw` hex. */
+export declare function transactionBytes(tx: GqlTransaction): number;
+/**
+ * The node's dismiss-time allowance for a transaction of `bytes`, in milliseconds.
+ *
+ * `max(min_time_to_dismiss, time_to_dismiss_per_byte x size)` with ledger-9.1.0.0-rc.3's
+ * `INITIAL_LIMITS`: 15.000 ms and 0.002 ms/byte. A transaction is admissible only if this
+ * exceeds its dismiss cost, which is ~15.97 ms of fixed cryptographic constants -- hence the
+ * ~7,984-byte floor (docs/gate0-report.md).
+ */
+export declare const allowanceMs: (bytes: number) => number;
+/** The floor a contract call must clear to be admitted at all, in bytes. */
+export declare const ADMISSION_FLOOR_BYTES = 7984;
+/**
+ * A contract's whole public history, oldest first.
+ *
+ * This is the ONLY thing `verify.ts` is given beyond the table's address: every join, every
+ * turn and the settlement are recovered from these actions and the contract states they point
+ * at. The indexer returns them newest-first, so they are reversed here.
+ */
+export declare function contractActions(address: string, limit?: number): Promise<ContractAction[]>;
+/** Current chain tip, for sanity-checking that blocks are being produced. */
+export declare function tip(): Promise<{
+    height: number;
+    timestamp: number;
+}>;
+/**
+ * The `now` a state-advancing circuit should declare, in seconds since the epoch.
+ *
+ * Read off the CHAIN's latest block rather than from the local wall clock, and that choice is
+ * deliberate. `stampTime` traps the declared value in `(blockTime - 600, blockTime]`
+ * (table.compact, decision 5), so `now` must not exceed the block time of the block the
+ * transaction lands in. The tip's timestamp is by construction less than or equal to that of
+ * any later block, so it always satisfies the upper bound, and the transaction lands a few
+ * blocks later -- far inside the 600 s slack. A local clock a second fast would fail
+ * `blockTimeGte` instead, with an assertion message about time that says nothing about clocks.
+ */
+export declare function chainNowSecs(): Promise<bigint>;

package/dist/indexer.js

@@ -0,0 +1,173 @@
+// Copyright (C) Shielded Technologies
+// SPDX-License-Identifier: Apache-2.0
+/**
+ * Direct indexer GraphQL access, for evidence the wallet cannot be asked to provide.
+ *
+ * The wallet facade's own `state().unshielded.balances` is the natural place to read a balance,
+ * but it is the same component that built the transactions -- so on its own it is a weak witness
+ * that custody really happened, and during Gate 0 it misreported a pre-stake balance by
+ * 4,900,000 in exactly this situation (docs/bugs-found.md §9). PER-TRANSACTION UTXO MOVEMENT IS
+ * THE ONLY TRUSTWORTHY MEASURE, and it is what these queries read:
+ *
+ *   - `contractAction(address){ unshieldedBalances }`  what the LEDGER says the contract holds
+ *   - `transactions(offset:{hash}){ unshieldedCreatedOutputs / unshieldedSpentOutputs }`
+ *                                                     who actually received or spent what, with
+ *                                                     `registeredForDustGeneration` per created
+ *                                                     UTXO (the designation question)
+ *   - `transactions(offset:{hash}){ raw }`            the transaction's byte size, which is what
+ *                                                     the `OutsideTimeToDismiss` admission check
+ *                                                     measures
+ *   - `contract(address){ actions }`                  the table's whole public history, which is
+ *                                                     all the chain-only verifier is given
+ *
+ * There is no user-address balance query in this indexer's schema (checked by introspecting
+ * `__schema.queryType.fields`: only `bridgeBalance(address)` takes an address, and that is the
+ * Cardano bridge, not NIGHT), so per-address totals are derived from the UTXO sets above.
+ */
+import { NETWORK } from "./config.js";
+async function gql(query, variables = {}) {
+    const res = await fetch(NETWORK.indexer, {
+        method: 'POST',
+        headers: { 'Content-Type': 'application/json' },
+        body: JSON.stringify({ query, variables }),
+    });
+    if (!res.ok)
+        throw new Error(`indexer HTTP ${res.status}: ${await res.text()}`);
+    const body = (await res.json());
+    if (body.errors?.length) {
+        throw new Error(`indexer GraphQL: ${body.errors.map((e) => e.message).join('; ')}`);
+    }
+    if (!body.data)
+        throw new Error('indexer returned no data');
+    return body.data;
+}
+/** The native (NIGHT) token type is 32 zero bytes. Matches Compact's `nativeToken()`. */
+export const NATIVE_TOKEN_HEX = '00'.repeat(32);
+const isNative = (u) => u.tokenType.replace(/^0x/, '').toLowerCase() === NATIVE_TOKEN_HEX;
+export function sumNative(utxos) {
+    return utxos.filter(isNative).reduce((acc, u) => acc + BigInt(u.value), 0n);
+}
+export function sumNativeFor(utxos, owner) {
+    return sumNative(utxos.filter((u) => u.owner === owner));
+}
+/**
+ * The contract's own unshielded balances as the LEDGER sees them, keyed by token-type hex.
+ *
+ * `unshieldedBalances` hangs off `ContractAction`, NOT off `Contract` -- `contract(address)`
+ * returns a `Contract` whose only fields are address/state/maintenanceAuthority/actions.
+ * `contractAction(address)` returns the latest action, which is what carries the running
+ * balances, and all three action variants declare the field so it selects on the interface.
+ */
+export async function contractUnshieldedBalances(address) {
+    const data = await gql(`query ($address: HexEncoded!) {
+       contractAction(address: $address) { unshieldedBalances { tokenType amount } }
+     }`, { address });
+    const out = {};
+    for (const b of data.contractAction?.unshieldedBalances ?? [])
+        out[b.tokenType] = BigInt(b.amount);
+    return out;
+}
+export function nativeBalance(balances) {
+    for (const [k, v] of Object.entries(balances)) {
+        if (k.replace(/^0x/, '').toLowerCase() === NATIVE_TOKEN_HEX)
+            return v;
+    }
+    return 0n;
+}
+/**
+ * One transaction by hash, with its UTXO deltas and its raw bytes.
+ *
+ * Polls: the indexer trails the node slightly, so a hash returned by `submitTransaction` is not
+ * necessarily queryable the same instant.
+ */
+export async function transactionByHash(hash, { attempts = 40, delayMs = 1000 } = {}) {
+    const q = `query ($hash: HexEncoded!) {
+       transactions(offset: { hash: $hash }) {
+         hash
+         raw
+         block { height timestamp }
+         unshieldedCreatedOutputs {
+           owner tokenType value intentHash outputIndex registeredForDustGeneration
+         }
+         unshieldedSpentOutputs {
+           owner tokenType value intentHash outputIndex registeredForDustGeneration
+         }
+       }
+     }`;
+    for (let i = 0; i < attempts; i++) {
+        const data = await gql(q, { hash });
+        if (data.transactions.length > 0)
+            return data.transactions[0];
+        await new Promise((r) => setTimeout(r, delayMs));
+    }
+    throw new Error(`transaction ${hash} not indexed after ${attempts} attempts`);
+}
+/** Byte size of a transaction as the node measured it, from the indexer's `raw` hex. */
+export function transactionBytes(tx) {
+    const raw = tx.raw.startsWith('0x') ? tx.raw.slice(2) : tx.raw;
+    return raw.length / 2;
+}
+/**
+ * The node's dismiss-time allowance for a transaction of `bytes`, in milliseconds.
+ *
+ * `max(min_time_to_dismiss, time_to_dismiss_per_byte x size)` with ledger-9.1.0.0-rc.3's
+ * `INITIAL_LIMITS`: 15.000 ms and 0.002 ms/byte. A transaction is admissible only if this
+ * exceeds its dismiss cost, which is ~15.97 ms of fixed cryptographic constants -- hence the
+ * ~7,984-byte floor (docs/gate0-report.md).
+ */
+export const allowanceMs = (bytes) => Math.max(15.0, 0.002 * bytes);
+/** The floor a contract call must clear to be admitted at all, in bytes. */
+export const ADMISSION_FLOOR_BYTES = 7984;
+/**
+ * A contract's whole public history, oldest first.
+ *
+ * This is the ONLY thing `verify.ts` is given beyond the table's address: every join, every
+ * turn and the settlement are recovered from these actions and the contract states they point
+ * at. The indexer returns them newest-first, so they are reversed here.
+ */
+export async function contractActions(address, limit = 1000) {
+    const data = await gql(`query ($address: HexEncoded!, $limit: Int!) {
+       contract(address: $address) {
+         actions(limit: $limit) {
+           __typename
+           ... on ContractCall { entryPoint transaction { hash block { height timestamp } } }
+           ... on ContractDeploy { transaction { hash block { height timestamp } } }
+           ... on ContractUpdate { transaction { hash block { height timestamp } } }
+         }
+       }
+     }`, { address, limit });
+    if (!data.contract)
+        throw new Error(`no contract at ${address}`);
+    return data.contract.actions
+        .map((a) => ({
+        kind: a.__typename,
+        entryPoint: a.entryPoint,
+        txHash: a.transaction.hash,
+        blockHeight: a.transaction.block.height,
+        blockTimestamp: Number(a.transaction.block.timestamp),
+    }))
+        .reverse();
+}
+/** Current chain tip, for sanity-checking that blocks are being produced. */
+export async function tip() {
+    const data = await gql(`{ block { height timestamp } }`);
+    if (!data.block)
+        throw new Error('chain has no tip block');
+    return { height: data.block.height, timestamp: Number(data.block.timestamp) };
+}
+/**
+ * The `now` a state-advancing circuit should declare, in seconds since the epoch.
+ *
+ * Read off the CHAIN's latest block rather than from the local wall clock, and that choice is
+ * deliberate. `stampTime` traps the declared value in `(blockTime - 600, blockTime]`
+ * (table.compact, decision 5), so `now` must not exceed the block time of the block the
+ * transaction lands in. The tip's timestamp is by construction less than or equal to that of
+ * any later block, so it always satisfies the upper bound, and the transaction lands a few
+ * blocks later -- far inside the 600 s slack. A local clock a second fast would fail
+ * `blockTimeGte` instead, with an assertion message about time that says nothing about clocks.
+ */
+export async function chainNowSecs() {
+    const { timestamp } = await tip();
+    return BigInt(Math.floor(timestamp / 1000));
+}
+//# sourceMappingURL=indexer.js.map

package/dist/indexer.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"indexer.js","sourceRoot":"","sources":["../src/indexer.ts"],"names":[],"mappings":"AAAA,sCAAsC;AACtC,sCAAsC;AAEtC;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AAEH,OAAO,EAAE,OAAO,EAAE,MAAM,aAAa,CAAC;AA6BtC,KAAK,UAAU,GAAG,CAAI,KAAa,EAAE,YAAqC,EAAE;IAC1E,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,OAAO,CAAC,OAAO,EAAE;QACvC,MAAM,EAAE,MAAM;QACd,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE;QAC/C,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,SAAS,EAAE,CAAC;KAC3C,CAAC,CAAC;IACH,IAAI,CAAC,GAAG,CAAC,EAAE;QAAE,MAAM,IAAI,KAAK,CAAC,gBAAgB,GAAG,CAAC,MAAM,KAAK,MAAM,GAAG,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;IAChF,MAAM,IAAI,GAAG,CAAC,MAAM,GAAG,CAAC,IAAI,EAAE,CAAiD,CAAC;IAChF,IAAI,IAAI,CAAC,MAAM,EAAE,MAAM,EAAE,CAAC;QACxB,MAAM,IAAI,KAAK,CAAC,oBAAoB,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACtF,CAAC;IACD,IAAI,CAAC,IAAI,CAAC,IAAI;QAAE,MAAM,IAAI,KAAK,CAAC,0BAA0B,CAAC,CAAC;IAC5D,OAAO,IAAI,CAAC,IAAI,CAAC;AACnB,CAAC;AAED,yFAAyF;AACzF,MAAM,CAAC,MAAM,gBAAgB,GAAG,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;AAEhD,MAAM,QAAQ,GAAG,CAAC,CAAwB,EAAW,EAAE,CACrD,CAAC,CAAC,SAAS,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,WAAW,EAAE,KAAK,gBAAgB,CAAC;AAEpE,MAAM,UAAU,SAAS,CAAC,KAA0B;IAClD,OAAO,KAAK,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,CAAC,EAAE,EAAE,CAAC,GAAG,GAAG,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC,EAAE,EAAE,CAAC,CAAC;AAC9E,CAAC;AAED,MAAM,UAAU,YAAY,CAAC,KAA0B,EAAE,KAAa;IACpE,OAAO,SAAS,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,KAAK,KAAK,CAAC,CAAC,CAAC;AAC3D,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,CAAC,KAAK,UAAU,0BAA0B,CAAC,OAAe;IAC9D,MAAM,IAAI,GAAG,MAAM,GAAG,CAGpB;;OAEG,EACH,EAAE,OAAO,EAAE,CACZ,CAAC;IACF,MAAM,GAAG,GAA2B,EAAE,CAAC;IACvC,KAAK,MAAM,CAAC,IAAI,IAAI,CAAC,cAAc,EAAE,kBAAkB,IAAI,EAAE;QAC3D,GAAG,CAAC,CAAC,CAAC,SAAS,CAAC,GAAG,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC;IACtC,OAAO,GAAG,CAAC;AACb,CAAC;AAED,MAAM,UAAU,aAAa,CAAC,QAAgC;IAC5D,KAAK,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,CAAC;QAC9C,IAAI,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,WAAW,EAAE,KAAK,gBAAgB;YAAE,OAAO,CAAC,CAAC;IACxE,CAAC;IACD,OAAO,EAAE,CAAC;AACZ,CAAC;AAED;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,iBAAiB,CACrC,IAAY,EACZ,EAAE,QAAQ,GAAG,EAAE,EAAE,OAAO,GAAG,IAAI,EAAE,GAAG,EAAE;IAEtC,MAAM,CAAC,GAAG;;;;;;;;;;;;OAYL,CAAC;IACN,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,QAAQ,EAAE,CAAC,EAAE,EAAE,CAAC;QAClC,MAAM,IAAI,GAAG,MAAM,GAAG,CAAqC,CAAC,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC;QACxE,IAAI,IAAI,CAAC,YAAY,CAAC,MAAM,GAAG,CAAC;YAAE,OAAO,IAAI,CAAC,YAAY,CAAC,CAAC,CAAE,CAAC;QAC/D,MAAM,IAAI,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,UAAU,CAAC,CAAC,EAAE,OAAO,CAAC,CAAC,CAAC;IACnD,CAAC;IACD,MAAM,IAAI,KAAK,CAAC,eAAe,IAAI,sBAAsB,QAAQ,WAAW,CAAC,CAAC;AAChF,CAAC;AAED,wFAAwF;AACxF,MAAM,UAAU,gBAAgB,CAAC,EAAkB;IACjD,MAAM,GAAG,GAAG,EAAE,CAAC,GAAG,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,GAAG,CAAC;IAC/D,OAAO,GAAG,CAAC,MAAM,GAAG,CAAC,CAAC;AACxB,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,CAAC,MAAM,WAAW,GAAG,CAAC,KAAa,EAAU,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,EAAE,KAAK,GAAG,KAAK,CAAC,CAAC;AAEpF,4EAA4E;AAC5E,MAAM,CAAC,MAAM,qBAAqB,GAAG,IAAI,CAAC;AAE1C;;;;;;GAMG;AACH,MAAM,CAAC,KAAK,UAAU,eAAe,CAAC,OAAe,EAAE,KAAK,GAAG,IAAI;IAMjE,MAAM,IAAI,GAAG,MAAM,GAAG,CACpB;;;;;;;;;OASG,EACH,EAAE,OAAO,EAAE,KAAK,EAAE,CACnB,CAAC;IACF,IAAI,CAAC,IAAI,CAAC,QAAQ;QAAE,MAAM,IAAI,KAAK,CAAC,kBAAkB,OAAO,EAAE,CAAC,CAAC;IACjE,OAAO,IAAI,CAAC,QAAQ,CAAC,OAAO;SACzB,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;QACX,IAAI,EAAE,CAAC,CAAC,UAAU;QAClB,UAAU,EAAE,CAAC,CAAC,UAAU;QACxB,MAAM,EAAE,CAAC,CAAC,WAAW,CAAC,IAAI;QAC1B,WAAW,EAAE,CAAC,CAAC,WAAW,CAAC,KAAK,CAAC,MAAM;QACvC,cAAc,EAAE,MAAM,CAAC,CAAC,CAAC,WAAW,CAAC,KAAK,CAAC,SAAS,CAAC;KACtD,CAAC,CAAC;SACF,OAAO,EAAE,CAAC;AACf,CAAC;AAED,6EAA6E;AAC7E,MAAM,CAAC,KAAK,UAAU,GAAG;IACvB,MAAM,IAAI,GAAG,MAAM,GAAG,CACpB,gCAAgC,CACjC,CAAC;IACF,IAAI,CAAC,IAAI,CAAC,KAAK;QAAE,MAAM,IAAI,KAAK,CAAC,wBAAwB,CAAC,CAAC;IAC3D,OAAO,EAAE,MAAM,EAAE,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,SAAS,EAAE,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,EAAE,CAAC;AAChF,CAAC;AAED;;;;;;;;;;GAUG;AACH,MAAM,CAAC,KAAK,UAAU,YAAY;IAChC,MAAM,EAAE,SAAS,EAAE,GAAG,MAAM,GAAG,EAAE,CAAC;IAClC,OAAO,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,SAAS,GAAG,IAAI,CAAC,CAAC,CAAC;AAC9C,CAAC"}

package/dist/verify.d.ts

@@ -0,0 +1,2 @@
+#!/usr/bin/env node
+export {};