@hazbase/simplicity 0.1.1 → 0.2.0

package/dist/domain/fundValidation.d.ts

@@ -47,13 +47,43 @@ export declare function validateFundCrossChecks(definition: FundDefinition, capi
 export declare function verifyLPPositionReceiptEnvelope(input: {
     envelope: LPPositionReceiptEnvelope;
     expectedManagerXonly?: string;
-}): {
+    previousEnvelope?: LPPositionReceiptEnvelope;
+}): Promise<{
     positionReceiptHashMatch: boolean;
     sequenceMatch: boolean;
     sequenceMonotonic: boolean;
     attestingSignerMatch: boolean;
     attestationVerified: boolean;
-};
+    previousEnvelopeProvided: boolean;
+    previousReceiptHashMatch: boolean;
+    previousSequenceMatch: boolean;
+    continuityVerified: boolean;
+}>;
+export declare function verifyLPPositionReceiptEnvelopeChain(input: {
+    envelopes: LPPositionReceiptEnvelope[];
+    expectedManagerXonly?: string;
+}): Promise<{
+    chainLength: number;
+    latestSequence?: number;
+    startsAtGenesis: boolean;
+    latestSequenceCovered: boolean;
+    sequenceContiguous: boolean;
+    fundConsistent: boolean;
+    positionConsistent: boolean;
+    lpConsistent: boolean;
+    callConsistent: boolean;
+    currencyConsistent: boolean;
+    lpXonlyConsistent: boolean;
+    attestingSignerConsistent: boolean;
+    allPositionReceiptHashMatch: boolean;
+    allSequenceMatch: boolean;
+    allSequenceMonotonic: boolean;
+    allAttestingSignerMatch: boolean;
+    allAttestationVerified: boolean;
+    allContinuityVerified: boolean;
+    fullChainVerified: boolean;
+    stepChecks: Awaited<ReturnType<typeof verifyLPPositionReceiptEnvelope>>[];
+}>;
 export declare function signLPPositionReceipt(input: {
     receipt: LPPositionReceipt;
     managerXonly: string;
@@ -62,7 +92,7 @@ export declare function signLPPositionReceipt(input: {
         privkeyHex: string;
     };
     signedAt?: string;
-}): LPPositionReceiptEnvelope;
+}): Promise<LPPositionReceiptEnvelope>;
 export declare function validateDistributionAgainstReceipt(receipt: LPPositionReceipt, distribution: DistributionDescriptor): {
     fundIdMatch: boolean;
     lpIdMatch: boolean;

package/dist/domain/fundValidation.js

@@ -16,6 +16,7 @@ exports.validateDistributionDescriptor = validateDistributionDescriptor;
 exports.validateFundClosingDescriptor = validateFundClosingDescriptor;
 exports.validateFundCrossChecks = validateFundCrossChecks;
 exports.verifyLPPositionReceiptEnvelope = verifyLPPositionReceiptEnvelope;
+exports.verifyLPPositionReceiptEnvelopeChain = verifyLPPositionReceiptEnvelopeChain;
 exports.signLPPositionReceipt = signLPPositionReceipt;
 exports.validateDistributionAgainstReceipt = validateDistributionAgainstReceipt;
 exports.validateClosingAgainstReceipt = validateClosingAgainstReceipt;
@@ -29,6 +30,7 @@ exports.reconcileLPPositionReceipt = reconcileLPPositionReceipt;
 exports.buildDistributionDescriptor = buildDistributionDescriptor;
 exports.buildFundClosingDescriptor = buildFundClosingDescriptor;
 const errors_1 = require("../core/errors");
+const lineage_1 = require("../core/lineage");
 const summary_1 = require("../core/summary");
 const schnorr_1 = require("../core/schnorr");
 function assertNonEmptyString(value, code, message) {
@@ -355,7 +357,7 @@ function validateFundCrossChecks(definition, capitalCall) {
     }
     return result;
 }
-function verifyLPPositionReceiptEnvelope(input) {
+async function verifyLPPositionReceiptEnvelope(input) {
     const envelope = validateLPPositionReceiptEnvelope(input.envelope);
     const receiptSummary = summarizeLPPositionReceipt(envelope.receipt);
     const digestHex = buildPositionReceiptAttestationMessageHash({
@@ -374,23 +376,153 @@ function verifyLPPositionReceiptEnvelope(input) {
         : true;
     const attestationVerified = positionReceiptHashMatch
         && sequenceMatch
-        && (0, schnorr_1.schnorrVerifyHex)(envelope.attestation.signature, digestHex, envelope.attestation.managerXonly);
+        && await (0, schnorr_1.schnorrVerifyHex)(envelope.attestation.signature, digestHex, envelope.attestation.managerXonly);
+    const previousEnvelopeProvided = Boolean(input.previousEnvelope);
+    const previousEnvelope = input.previousEnvelope ? validateLPPositionReceiptEnvelope(input.previousEnvelope) : undefined;
+    const previousSummary = previousEnvelope ? summarizeLPPositionReceipt(previousEnvelope.receipt) : undefined;
+    const previousReceiptHashMatch = envelope.receipt.sequence === 0
+        ? !previousEnvelope
+        : previousSummary
+            ? envelope.receipt.previousReceiptHash === previousSummary.hash
+            : false;
+    const previousSequenceMatch = envelope.receipt.sequence === 0
+        ? !previousEnvelope
+        : previousEnvelope
+            ? previousEnvelope.receipt.sequence + 1 === envelope.receipt.sequence
+            : false;
+    const previousAttestingSignerMatch = previousEnvelope && input.expectedManagerXonly
+        ? previousEnvelope.attestation.managerXonly.toLowerCase() === input.expectedManagerXonly.toLowerCase()
+        : true;
+    const previousAttestationVerified = previousEnvelope
+        ? previousEnvelope.attestation.positionReceiptHash === previousSummary?.hash
+            && previousEnvelope.attestation.sequence === previousEnvelope.receipt.sequence
+            && await (0, schnorr_1.schnorrVerifyHex)(previousEnvelope.attestation.signature, buildPositionReceiptAttestationMessageHash({
+                fundId: previousEnvelope.receipt.fundId,
+                positionId: previousEnvelope.receipt.positionId,
+                positionReceiptHash: previousSummary.hash,
+                sequence: previousEnvelope.receipt.sequence,
+            }), previousEnvelope.attestation.managerXonly)
+        : envelope.receipt.sequence === 0;
+    const previousSequenceMonotonic = previousEnvelope
+        ? previousEnvelope.receipt.sequence === 0
+            ? !previousEnvelope.receipt.previousReceiptHash
+            : Boolean(previousEnvelope.receipt.previousReceiptHash)
+        : envelope.receipt.sequence === 0;
+    const continuityVerified = envelope.receipt.sequence === 0
+        ? !previousEnvelope
+        : previousEnvelopeProvided
+            && previousReceiptHashMatch
+            && previousSequenceMatch
+            && previousAttestingSignerMatch
+            && previousAttestationVerified
+            && previousSequenceMonotonic;
     return {
         positionReceiptHashMatch,
         sequenceMatch,
         sequenceMonotonic,
         attestingSignerMatch,
         attestationVerified,
+        previousEnvelopeProvided,
+        previousReceiptHashMatch,
+        previousSequenceMatch,
+        continuityVerified,
+    };
+}
+async function verifyLPPositionReceiptEnvelopeChain(input) {
+    if (input.envelopes.length === 0) {
+        throw new errors_1.ValidationError("position receipt chain must include at least one envelope", {
+            code: "FUND_POSITION_CHAIN_REQUIRED",
+        });
+    }
+    const envelopes = input.envelopes.map((envelope) => validateLPPositionReceiptEnvelope(envelope));
+    const first = envelopes[0];
+    const firstSigner = first.attestation.managerXonly.toLowerCase();
+    const stepChecks = [];
+    for (let index = 0; index < envelopes.length; index += 1) {
+        stepChecks.push(await verifyLPPositionReceiptEnvelope({
+            envelope: envelopes[index],
+            expectedManagerXonly: input.expectedManagerXonly,
+            previousEnvelope: index > 0 ? envelopes[index - 1] : undefined,
+        }));
+    }
+    const lineage = (0, lineage_1.verifyHashLinkedLineage)({
+        entries: envelopes,
+        summarize: (envelope) => summarizeLPPositionReceipt(envelope.receipt),
+        getPreviousHash: (envelope) => envelope.receipt.previousReceiptHash,
+        isGenesis: (envelope) => envelope.receipt.sequence === 0 && !envelope.receipt.previousReceiptHash,
+        consistencyChecks: {
+            fundConsistent: (envelope, base) => envelope.receipt.fundId === base.receipt.fundId,
+            positionConsistent: (envelope, base) => envelope.receipt.positionId === base.receipt.positionId,
+            lpConsistent: (envelope, base) => envelope.receipt.lpId === base.receipt.lpId,
+            callConsistent: (envelope, base) => envelope.receipt.callId === base.receipt.callId,
+            currencyConsistent: (envelope, base) => envelope.receipt.currencyAssetId === base.receipt.currencyAssetId,
+            lpXonlyConsistent: (envelope, base) => envelope.receipt.lpXonly === base.receipt.lpXonly,
+        },
+    });
+    const startsAtGenesis = lineage.startsAtGenesis;
+    const latestSequence = envelopes.at(-1)?.receipt.sequence;
+    const latestSequenceCovered = latestSequence === envelopes.length - 1;
+    const sequenceContiguous = envelopes.every((envelope, index) => envelope.receipt.sequence === first.receipt.sequence + index);
+    const fundConsistent = lineage.consistency.fundConsistent;
+    const positionConsistent = lineage.consistency.positionConsistent;
+    const lpConsistent = lineage.consistency.lpConsistent;
+    const callConsistent = lineage.consistency.callConsistent;
+    const currencyConsistent = lineage.consistency.currencyConsistent;
+    const lpXonlyConsistent = lineage.consistency.lpXonlyConsistent;
+    const attestingSignerConsistent = envelopes.every((envelope) => envelope.attestation.managerXonly.toLowerCase() === firstSigner);
+    const allPositionReceiptHashMatch = stepChecks.every((check) => check.positionReceiptHashMatch);
+    const allSequenceMatch = stepChecks.every((check) => check.sequenceMatch);
+    const allSequenceMonotonic = stepChecks.every((check) => check.sequenceMonotonic);
+    const allAttestingSignerMatch = stepChecks.every((check) => check.attestingSignerMatch);
+    const allAttestationVerified = stepChecks.every((check) => check.attestationVerified);
+    const allContinuityVerified = stepChecks.every((check, index) => (index === 0 ? true : check.continuityVerified));
+    const fullChainVerified = startsAtGenesis
+        && latestSequenceCovered
+        && sequenceContiguous
+        && fundConsistent
+        && positionConsistent
+        && lpConsistent
+        && callConsistent
+        && currencyConsistent
+        && lpXonlyConsistent
+        && attestingSignerConsistent
+        && allPositionReceiptHashMatch
+        && allSequenceMatch
+        && allSequenceMonotonic
+        && allAttestingSignerMatch
+        && allAttestationVerified
+        && allContinuityVerified;
+    return {
+        chainLength: envelopes.length,
+        latestSequence,
+        startsAtGenesis,
+        latestSequenceCovered,
+        sequenceContiguous,
+        fundConsistent,
+        positionConsistent,
+        lpConsistent,
+        callConsistent,
+        currencyConsistent,
+        lpXonlyConsistent,
+        attestingSignerConsistent,
+        allPositionReceiptHashMatch,
+        allSequenceMatch,
+        allSequenceMonotonic,
+        allAttestingSignerMatch,
+        allAttestationVerified,
+        allContinuityVerified,
+        fullChainVerified,
+        stepChecks,
     };
 }
-function signLPPositionReceipt(input) {
+async function signLPPositionReceipt(input) {
     const receipt = validateLPPositionReceipt(input.receipt);
     if (input.signer.type !== "schnorrPrivkeyHex") {
         throw new errors_1.ValidationError("position receipt attestation signer must be schnorrPrivkeyHex", {
             code: "FUND_POSITION_ATTESTATION_SIGNER_TYPE_INVALID",
         });
     }
-    const derivedManagerXonly = (0, schnorr_1.schnorrPublicKeyFromPrivkeyHex)(input.signer.privkeyHex);
+    const derivedManagerXonly = await (0, schnorr_1.schnorrPublicKeyFromPrivkeyHex)(input.signer.privkeyHex);
     if (derivedManagerXonly !== input.managerXonly.toLowerCase()) {
         throw new errors_1.ValidationError("position receipt attestation signer does not match managerXonly", {
             code: "FUND_POSITION_ATTESTATION_SIGNER_MISMATCH",
@@ -414,7 +546,7 @@ function signLPPositionReceipt(input) {
             sequence: receipt.sequence,
             managerXonly: derivedManagerXonly,
             signedAt,
-            signature: (0, schnorr_1.schnorrSignHex)(digestHex, input.signer.privkeyHex),
+            signature: await (0, schnorr_1.schnorrSignHex)(digestHex, input.signer.privkeyHex),
             scheme: "bip340-sha256",
         },
     });

package/dist/domain/policies.d.ts

@@ -91,6 +91,7 @@ export declare function verifyState(sdk: SimplicityClient, input: {
         plainExitAllowed: boolean;
         enforcement: "sdk-path" | "conditional-hop" | "direct-hop";
     };
+    trustSummary: import("../core/types").VerificationTrustSummary;
 }>;
 export declare function buildPolicyOutputDescriptor(sdk: SimplicityClient, input: {
     nextCompiledContractAddress: string;
@@ -184,6 +185,7 @@ export declare function prepareTransfer(sdk: SimplicityClient, input: {
             plainExitAllowed: boolean;
             enforcement: "sdk-path" | "conditional-hop" | "direct-hop";
         };
+        trustSummary: import("../core/types").VerificationTrustSummary;
     };
     nextState: null;
     nextCompiled: null;
@@ -242,6 +244,7 @@ export declare function prepareTransfer(sdk: SimplicityClient, input: {
             plainExitAllowed: boolean;
             enforcement: "sdk-path" | "conditional-hop" | "direct-hop";
         };
+        trustSummary: import("../core/types").VerificationTrustSummary;
     };
     nextState: PolicyState;
     nextCompiled: import("..").CompiledContract;
@@ -336,6 +339,7 @@ export declare function prepareDirectTransfer(sdk: SimplicityClient, input: {
             plainExitAllowed: boolean;
             enforcement: "sdk-path" | "conditional-hop" | "direct-hop";
         };
+        trustSummary: import("../core/types").VerificationTrustSummary;
     };
     nextState: PolicyState;
     nextCompiled: import("..").CompiledContract;
@@ -421,6 +425,7 @@ export declare function verifyDirectTransfer(sdk: SimplicityClient, input: {
             plainExitAllowed: boolean;
             enforcement: "sdk-path" | "conditional-hop" | "direct-hop";
         };
+        trustSummary: import("../core/types").VerificationTrustSummary;
     };
     transfer: PolicyTransferDescriptor | undefined;
     transferSummary: {
@@ -495,6 +500,7 @@ export declare function inspectDirectTransfer(sdk: SimplicityClient, input: Para
                 plainExitAllowed: boolean;
                 enforcement: "sdk-path" | "conditional-hop" | "direct-hop";
             };
+            trustSummary: import("../core/types").VerificationTrustSummary;
         };
         nextState: PolicyState;
         nextCompiled: import("..").CompiledContract;
@@ -601,6 +607,7 @@ export declare function executeDirectTransfer(sdk: SimplicityClient, input: {
                 plainExitAllowed: boolean;
                 enforcement: "sdk-path" | "conditional-hop" | "direct-hop";
             };
+            trustSummary: import("../core/types").VerificationTrustSummary;
         };
         nextState: PolicyState;
         nextCompiled: import("..").CompiledContract;
@@ -688,6 +695,7 @@ export declare function verifyTransfer(sdk: SimplicityClient, input: {
             plainExitAllowed: boolean;
             enforcement: "sdk-path" | "conditional-hop" | "direct-hop";
         };
+        trustSummary: import("../core/types").VerificationTrustSummary;
     };
     transfer: PolicyTransferDescriptor | undefined;
     transferSummary: {
@@ -730,6 +738,7 @@ export declare function verifyTransfer(sdk: SimplicityClient, input: {
         propagationMode: PropagationMode;
         nextPolicyRequired: boolean;
     };
+    trustSummary: import("../core/types").VerificationTrustSummary;
 }>;
 export declare function inspectTransfer(sdk: SimplicityClient, input: Parameters<typeof executeTransfer>[1] & {
     utxoPolicy?: "smallest_over" | "largest" | "newest";
@@ -764,6 +773,7 @@ export declare function inspectTransfer(sdk: SimplicityClient, input: Parameters
                 plainExitAllowed: boolean;
                 enforcement: "sdk-path" | "conditional-hop" | "direct-hop";
             };
+            trustSummary: import("../core/types").VerificationTrustSummary;
         };
         nextState: null;
         nextCompiled: null;
@@ -826,6 +836,7 @@ export declare function inspectTransfer(sdk: SimplicityClient, input: Parameters
                 plainExitAllowed: boolean;
                 enforcement: "sdk-path" | "conditional-hop" | "direct-hop";
             };
+            trustSummary: import("../core/types").VerificationTrustSummary;
         };
         nextState: PolicyState;
         nextCompiled: import("..").CompiledContract;
@@ -932,6 +943,7 @@ export declare function executeTransfer(sdk: SimplicityClient, input: {
                 plainExitAllowed: boolean;
                 enforcement: "sdk-path" | "conditional-hop" | "direct-hop";
             };
+            trustSummary: import("../core/types").VerificationTrustSummary;
         };
         nextState: null;
         nextCompiled: null;
@@ -994,6 +1006,7 @@ export declare function executeTransfer(sdk: SimplicityClient, input: {
                 plainExitAllowed: boolean;
                 enforcement: "sdk-path" | "conditional-hop" | "direct-hop";
             };
+            trustSummary: import("../core/types").VerificationTrustSummary;
         };
         nextState: PolicyState;
         nextCompiled: import("..").CompiledContract;

package/dist/domain/policies.js

@@ -34,6 +34,7 @@ const node_path_1 = __importDefault(require("node:path"));
 const summary_1 = require("../core/summary");
 const errors_1 = require("../core/errors");
 const outputBinding_1 = require("../core/outputBinding");
+const reporting_1 = require("../core/reporting");
 function resolvePolicyDocsAsset(filename) {
     const cwdCandidate = node_path_1.default.resolve(process.cwd(), "docs/definitions", filename);
     if ((0, node_fs_1.existsSync)(cwdCandidate)) {
@@ -869,6 +870,19 @@ async function verifyState(sdk, input) {
         propagationMode: state.propagationMode,
     }).hash;
     const policyHashMatches = expectedPolicyHash === state.policyHash;
+    const report = {
+        schemaVersion: exports.POLICY_VERIFICATION_REPORT_SCHEMA_VERSION,
+        templateTrust: definitionVerification.trust,
+        stateTrust: stateVerification.trust,
+        propagationMode: state.propagationMode,
+        nextPolicyRequired: state.propagationMode === "required",
+        nextPolicyPresent: false,
+        plainExitAllowed: state.propagationMode !== "required",
+        enforcement: resolvePolicyEnforcementMode({
+            currentPropagationMode: state.propagationMode,
+            nextReceiverMode: state.propagationMode === "required" ? "policy" : undefined,
+        }),
+    };
     return {
         ok: definitionVerification.ok && stateVerification.ok && policyHashMatches,
         reason: policyHashMatches ? undefined : "Policy hash does not match template + params + recipient",
@@ -877,19 +891,12 @@ async function verifyState(sdk, input) {
         state: stateVerification,
         stateValue: state,
         policyHashMatches,
-        report: {
-            schemaVersion: exports.POLICY_VERIFICATION_REPORT_SCHEMA_VERSION,
-            templateTrust: definitionVerification.trust,
+        report,
+        trustSummary: (0, reporting_1.buildVerificationTrustSummary)({
+            definitionTrust: definitionVerification.trust,
             stateTrust: stateVerification.trust,
-            propagationMode: state.propagationMode,
-            nextPolicyRequired: state.propagationMode === "required",
-            nextPolicyPresent: false,
-            plainExitAllowed: state.propagationMode !== "required",
-            enforcement: resolvePolicyEnforcementMode({
-                currentPropagationMode: state.propagationMode,
-                nextReceiverMode: state.propagationMode === "required" ? "policy" : undefined,
-            }),
-        },
+            bindingMode: "none",
+        }),
     };
 }
 async function buildPolicyOutputDescriptor(sdk, input) {
@@ -1450,6 +1457,24 @@ async function verifyTransfer(sdk, input) {
         && transfer.previousStateHash === summarizePolicyState(currentState).hash
         && (!nextState || transfer.nextPolicyHash === nextState.policyHash)
         && (!nextStateSummary || transfer.nextStateHash === nextStateSummary.hash));
+    const verificationReport = {
+        ...prepared.report,
+        nextPolicyPresent: Boolean(nextState),
+        plainExitAllowed: currentState.propagationMode !== "required",
+        outputBinding: buildPolicyOutputBindingReport({
+            descriptor: transfer?.outputDescriptor,
+            sdkVerified: ok,
+            supportedForm: outputBindingContext.supportedForm,
+            reasonCode: outputBindingContext.reasonCode,
+            autoDerived: outputBindingContext.autoDerived,
+            fallbackReason: outputBindingContext.fallbackReason,
+            bindingInputs: outputBindingContext.bindingInputs,
+        }),
+        enforcement: resolvePolicyEnforcementMode({
+            currentPropagationMode: currentState.propagationMode,
+            nextReceiverMode: nextState ? "policy" : "plain",
+        }),
+    };
     return {
         ok,
         reason: ok ? undefined : "Policy transfer descriptor does not match current/next policy state",
@@ -1457,24 +1482,12 @@ async function verifyTransfer(sdk, input) {
         transfer,
         transferSummary: summary,
         nextState,
-        verificationReport: {
-            ...prepared.report,
-            nextPolicyPresent: Boolean(nextState),
-            plainExitAllowed: currentState.propagationMode !== "required",
-            outputBinding: buildPolicyOutputBindingReport({
-                descriptor: transfer?.outputDescriptor,
-                sdkVerified: ok,
-                supportedForm: outputBindingContext.supportedForm,
-                reasonCode: outputBindingContext.reasonCode,
-                autoDerived: outputBindingContext.autoDerived,
-                fallbackReason: outputBindingContext.fallbackReason,
-                bindingInputs: outputBindingContext.bindingInputs,
-            }),
-            enforcement: resolvePolicyEnforcementMode({
-                currentPropagationMode: currentState.propagationMode,
-                nextReceiverMode: nextState ? "policy" : "plain",
-            }),
-        },
+        verificationReport,
+        trustSummary: (0, reporting_1.buildVerificationTrustSummary)({
+            definitionTrust: verificationReport.templateTrust,
+            stateTrust: verificationReport.stateTrust,
+            bindingMode: verificationReport.outputBinding?.mode ?? "none",
+        }),
     };
 }
 async function inspectTransfer(sdk, input) {
@@ -1594,6 +1607,13 @@ async function exportEvidence(sdk, input) {
         state: stateSummary,
         ...(input.transferDescriptorValue ? { transfer: summarizePolicyTransferDescriptor(input.transferDescriptorValue) } : {}),
         report: transferVerification?.verificationReport ?? verified.report,
+        trustSummary: transferVerification?.trustSummary
+            ?? verified.trustSummary
+            ?? (0, reporting_1.buildVerificationTrustSummary)({
+                definitionTrust: verified.report.templateTrust,
+                stateTrust: verified.report.stateTrust,
+                bindingMode: "none",
+            }),
         renderedSourceHash,
         sourceVerificationMode: renderedSourceHash ? "source-reloaded" : "artifact-only",
         compiled: {