@odatano/contract-m402-vault 0.0.0-stage → 0.2.0

package/managed/m402-vault/zkir/withdraw.zkir

@@ -0,0 +1,86 @@
+{
+  "version": { "major": 3, "minor": 1 },
+  "do_communications_commitment": true,
+  "inputs": [
+    { "name": "%serviceId.0", "type": "Scalar<BLS12-381>" },
+    { "name": "%serviceId.1", "type": "Scalar<BLS12-381>" },
+    { "name": "%amount.2", "type": "Scalar<BLS12-381>" }
+  ],
+  "outputs": [
+  ],
+  "instructions": [
+    { "op": "constrain_bits", "val": "%serviceId.0", "bits": 8 },
+    { "op": "constrain_bits", "val": "%serviceId.1", "bits": 248 },
+    { "op": "constrain_bits", "val": "%amount.2", "bits": 64 },
+    { "op": "less_than", "output": "%t.3", "a": "0x00", "b": "%amount.2", "bits": 64 },
+    { "op": "assert", "cond": "%t.3" },
+    { "op": "public_input", "type": "Scalar<BLS12-381>", "output": "%t.4", "guard": null },
+    { "op": "impact", "guard": "0x01", "inputs": ["0x30"] },
+    { "op": "impact", "guard": "0x01", "inputs": ["0x50", "0x01", "0x01", "0x01"] },
+    { "op": "impact", "guard": "0x01", "inputs": ["0x10", "0x01", "0x01", "0x20", "%serviceId.0", "%serviceId.1"] },
+    { "op": "impact", "guard": "0x01", "inputs": ["0x18"] },
+    { "op": "impact", "guard": "0x01", "inputs": ["0x0d", "0x01", "0x01", "%t.4"] },
+    { "op": "assert", "cond": "%t.4" },
+    { "op": "public_input", "type": "Scalar<BLS12-381>", "output": "%owner.5", "guard": null },
+    { "op": "public_input", "type": "Scalar<BLS12-381>", "output": "%owner.6", "guard": null },
+    { "op": "impact", "guard": "0x01", "inputs": ["0x30"] },
+    { "op": "impact", "guard": "0x01", "inputs": ["0x50", "0x01", "0x01", "0x01"] },
+    { "op": "impact", "guard": "0x01", "inputs": ["0x50", "0x01", "0x20", "%serviceId.0", "%serviceId.1"] },
+    { "op": "impact", "guard": "0x01", "inputs": ["0x0c", "0x01", "0x20", "%owner.5", "%owner.6"] },
+    { "op": "public_input", "type": "Scalar<BLS12-381>", "output": "%t.7", "guard": null },
+    { "op": "impact", "guard": "0x01", "inputs": ["0x30"] },
+    { "op": "impact", "guard": "0x01", "inputs": ["0x50", "0x01", "0x01", "0x03"] },
+    { "op": "impact", "guard": "0x01", "inputs": ["0x10", "0x01", "0x01", "0x20", "%owner.5", "%owner.6"] },
+    { "op": "impact", "guard": "0x01", "inputs": ["0x18"] },
+    { "op": "impact", "guard": "0x01", "inputs": ["0x0d", "0x01", "0x01", "%t.7"] },
+    { "op": "assert", "cond": "%t.7" },
+    { "op": "public_input", "type": "Scalar<BLS12-381>", "output": "%balance.8", "guard": null },
+    { "op": "impact", "guard": "0x01", "inputs": ["0x30"] },
+    { "op": "impact", "guard": "0x01", "inputs": ["0x50", "0x01", "0x01", "0x03"] },
+    { "op": "impact", "guard": "0x01", "inputs": ["0x50", "0x01", "0x20", "%owner.5", "%owner.6"] },
+    { "op": "impact", "guard": "0x01", "inputs": ["0x0c", "0x01", "0x08", "%balance.8"] },
+    { "op": "less_than", "output": "%t.9", "a": "%balance.8", "b": "%amount.2", "bits": 64 },
+    { "op": "cond_select", "output": "%t.10", "bit": "%t.9", "a": "0x00", "b": "0x01" },
+    { "op": "assert", "cond": "%t.10" },
+    { "op": "impact", "guard": "0x01", "inputs": ["0x40"] },
+    { "op": "impact", "guard": "0x01", "inputs": ["0x80", "0x01", "0x01", "0x07"] },
+    { "op": "impact", "guard": "0x01", "inputs": ["0x10", "0x01", "0x03", "0x01", "0x20", "0x20", "0x01", "0x00", "0x00", "0x00", "0x00"] },
+    { "op": "impact", "guard": "0x01", "inputs": ["0x31"] },
+    { "op": "impact", "guard": "0x01", "inputs": ["0x31"] },
+    { "op": "impact", "guard": "0x01", "inputs": ["0x18"] },
+    { "op": "impact", "guard": "0x01", "inputs": ["0x10", "0x01", "0x01", "0x10", "%amount.2"] },
+    { "op": "impact", "guard": "0x01", "inputs": ["0x40"] },
+    { "op": "impact", "guard": "0x01", "inputs": ["0x08"] },
+    { "op": "impact", "guard": "0x01", "inputs": ["0x12", "0x04"] },
+    { "op": "impact", "guard": "0x01", "inputs": ["0x32"] },
+    { "op": "impact", "guard": "0x01", "inputs": ["0x32"] },
+    { "op": "impact", "guard": "0x01", "inputs": ["0x60", "-0x01"] },
+    { "op": "impact", "guard": "0x01", "inputs": ["0x14"] },
+    { "op": "impact", "guard": "0x01", "inputs": ["0xa2"] },
+    { "op": "impact", "guard": "0x01", "inputs": ["0x40"] },
+    { "op": "impact", "guard": "0x01", "inputs": ["0x40"] },
+    { "op": "impact", "guard": "0x01", "inputs": ["0x80", "0x01", "0x01", "0x08"] },
+    { "op": "impact", "guard": "0x01", "inputs": ["0x10", "0x01", "0x06", "0x01", "0x20", "0x20", "0x01", "0x20", "0x20", "0x01", "0x00", "0x00", "0x00", "0x00", "0x00", "0x00", "0x00", "%owner.5", "%owner.6"] },
+    { "op": "impact", "guard": "0x01", "inputs": ["0x31"] },
+    { "op": "impact", "guard": "0x01", "inputs": ["0x31"] },
+    { "op": "impact", "guard": "0x01", "inputs": ["0x18"] },
+    { "op": "impact", "guard": "0x01", "inputs": ["0x10", "0x01", "0x01", "0x10", "%amount.2"] },
+    { "op": "impact", "guard": "0x01", "inputs": ["0x40"] },
+    { "op": "impact", "guard": "0x01", "inputs": ["0x08"] },
+    { "op": "impact", "guard": "0x01", "inputs": ["0x12", "0x04"] },
+    { "op": "impact", "guard": "0x01", "inputs": ["0x32"] },
+    { "op": "impact", "guard": "0x01", "inputs": ["0x32"] },
+    { "op": "impact", "guard": "0x01", "inputs": ["0x60", "-0x01"] },
+    { "op": "impact", "guard": "0x01", "inputs": ["0x14"] },
+    { "op": "impact", "guard": "0x01", "inputs": ["0xa2"] },
+    { "op": "impact", "guard": "0x01", "inputs": ["0x40"] },
+    { "op": "assert", "cond": "%t.10" },
+    { "op": "neg", "output": "%neg.11", "a": "%amount.2" },
+    { "op": "add", "output": "%tmp.12", "a": "%balance.8", "b": "%neg.11" },
+    { "op": "impact", "guard": "0x01", "inputs": ["0x70", "0x01", "0x01", "0x03"] },
+    { "op": "impact", "guard": "0x01", "inputs": ["0x10", "0x01", "0x01", "0x20", "%owner.5", "%owner.6"] },
+    { "op": "impact", "guard": "0x01", "inputs": ["0x11", "0x01", "0x01", "0x08", "%tmp.12"] },
+    { "op": "impact", "guard": "0x01", "inputs": ["0x91"] },
+    { "op": "impact", "guard": "0x01", "inputs": ["0xa1"] }
+  ]
+}

package/package.json

@@ -1,6 +1,49 @@
 {
-  "name": "@odatano/contract-m402-vault",
-  "version": "0.0.0-stage",
-  "stub": true,
-  "description": "Temporary package placeholder for staged publishing"
-}
+    "name": "@odatano/contract-m402-vault",
+    "version": "0.2.0",
+    "description": "m402 payment vault Compact contract: NIGHT pooled against a shielded credit, services paid in private, receipts checked in the public ledger.",
+    "license": "Apache-2.0",
+    "author": "ODATANO",
+    "homepage": "https://github.com/ODATANO/NIGHTGATE-CONTRACTS#readme",
+    "repository": {
+        "type": "git",
+        "url": "git+https://github.com/ODATANO/NIGHTGATE-CONTRACTS.git",
+        "directory": "packages/m402-vault"
+    },
+    "keywords": [
+        "midnight",
+        "compact",
+        "nightgate",
+        "payment",
+        "m402"
+    ],
+    "type": "module",
+    "main": "./managed/m402-vault/contract/index.js",
+    "types": "./managed/m402-vault/contract/index.d.ts",
+    "exports": {
+        ".": {
+            "types": "./managed/m402-vault/contract/index.d.ts",
+            "default": "./managed/m402-vault/contract/index.js"
+        },
+        "./contract.json": "./contract.json",
+        "./package.json": "./package.json"
+    },
+    "files": [
+        "contract.json",
+        "src/*.compact",
+        "managed/**/*",
+        "!managed/**/*.prover",
+        "README.md",
+        "LICENSE",
+        "NOTICE"
+    ],
+    "peerDependencies": {
+        "@midnight-ntwrk/compact-runtime": "0.21.0"
+    },
+    "publishConfig": {
+        "access": "public"
+    },
+    "scripts": {
+        "prepublishOnly": "npm --prefix ../.. run check"
+    }
+}

package/src/m402-vault.compact

@@ -0,0 +1,137 @@
+// m402 payment vault: NIGHT pooled in the contract, a shielded credit minted 1:1.
+// Coins and secrets are circuit parameters, so a caller needs no witness of its own.
+
+// Modified from m402 (https://github.com/julianariel/m402), Apache-2.0.
+// Copyright 2026 The m402 contributors. Changed: witnesses became circuit parameters.
+pragma language_version >= 0.23;
+
+import CompactStandardLibrary;
+
+export ledger servicePrice:    Map<Bytes<32>, Uint<64>>;
+export ledger serviceOwner:    Map<Bytes<32>, Bytes<32>>;
+export ledger receipts:        Set<Bytes<32>>;
+export ledger merchantBalance: Map<Bytes<32>, Uint<64>>;
+export ledger mintCounter:     Counter;
+
+pure circuit creditDomain(): Bytes<32> { return pad(32, "m402:credit:v1"); }
+
+// The colour of this vault's credit, derivable off-chain with no proof; `self` is the
+// vault's address (a pure circuit has no ledger access).
+export pure circuit creditColor(self: ContractAddress): Bytes<32> {
+  return tokenType(creditDomain(), self);
+}
+
+// The redemption credential and the selective-disclosure opening: the payer keeps
+// the secret, the chain sees only this hash.
+export pure circuit deriveReceipt(secret: Bytes<32>, serviceId: Bytes<32>): Bytes<32> {
+  return persistentHash<Vector<3, Bytes<32>>>(
+    [pad(32, "m402:receipt:v1"), secret, serviceId]
+  );
+}
+
+// The service id binds owner, salt and price: a front-runner can copy none of them
+// without landing on another id.
+export pure circuit deriveServiceId(
+  owner: Bytes<32>,
+  salt: Bytes<32>,
+  price: Uint<64>
+): Bytes<32> {
+  return persistentHash<Vector<4, Bytes<32>>>(
+    [pad(32, "m402:sid:v1"), owner, salt, price as Bytes<32>]
+  );
+}
+
+export circuit registerService(salt: Bytes<32>, price: Uint<64>, owner: Bytes<32>): [] {
+  assert(price > 0, "price must be positive");
+  assert(owner != pad(32, ""), "owner must be set");
+
+  const serviceId = deriveServiceId(disclose(owner), disclose(salt), disclose(price));
+  // first come, immutable: neither map may be overwritten
+  assert(!servicePrice.member(serviceId), "already registered");
+  assert(!serviceOwner.member(serviceId), "already registered");
+
+  servicePrice.insert(serviceId, disclose(price));
+  serviceOwner.insert(serviceId, disclose(owner));
+}
+
+// Unshielded NIGHT in, shielded credit out to the caller's own key. `nonceSeed` is
+// fresh random bytes from the caller: it hides which deposit funded which payment.
+export circuit deposit(amount: Uint<64>, nonceSeed: Bytes<32>): [] {
+  assert(amount > 0, "amount must be positive");
+  receiveUnshielded(nativeToken(), disclose(amount) as Uint<128>);
+
+  const nonce = disclose(evolveNonce(mintCounter as Field as Uint<64>, nonceSeed));
+  const coin = mintShieldedToken(
+    creditDomain(),
+    disclose(amount),
+    nonce,
+    right<ZswapCoinPublicKey, ContractAddress>(kernel.self())
+  );
+  // the caller's key as the destination is sound: a lie misdirects only its own deposit
+  sendImmediateShielded(
+    coin,
+    left<ZswapCoinPublicKey, ContractAddress>(ownPublicKey()),
+    coin.value
+  );
+  mintCounter.increment(1);
+}
+
+// Pays a service with one credit coin of exactly its price; `receiptSecret` is the
+// payer's fresh random credential, only its hash goes on chain.
+export circuit pay(serviceId: Bytes<32>, credit: ShieldedCoinInfo, receiptSecret: Bytes<32>): [] {
+  const sid = disclose(serviceId);
+  assert(servicePrice.member(sid), "unknown service");
+  const price = servicePrice.lookup(sid);
+
+  // receiveShielded does not constrain the colour: a self-minted token must not pay
+  assert(credit.color == tokenType(creditDomain(), kernel.self()), "not an m402 credit");
+  // the whole coin is consumed and only the price credited: an overpaying coin burns the rest
+  assert(credit.value == price as Uint<128>, "wrong amount");
+
+  const receipt = deriveReceipt(receiptSecret, sid);
+  assert(!receipts.member(disclose(receipt)), "receipt reused");
+
+  receiveShielded(disclose(credit));
+  receipts.insert(disclose(receipt));
+
+  const owner = serviceOwner.lookup(sid);
+  const prior = merchantBalance.member(owner) ? merchantBalance.lookup(owner) : 0 as Uint<64>;
+  merchantBalance.insert(owner, (prior + price) as Uint<64>);
+}
+
+// Cashes a credit coin back to NIGHT. Holding the coin is the authorisation (Zswap
+// validates the spend), so the caller names any recipient for its own funds.
+export circuit redeem(recipient: Bytes<32>, credit: ShieldedCoinInfo): [] {
+  assert(recipient != pad(32, ""), "recipient must be set");
+
+  assert(credit.color == tokenType(creditDomain(), kernel.self()), "not an m402 credit");
+  assert(credit.value > 0, "nothing to redeem");
+
+  receiveShielded(disclose(credit));
+  sendUnshielded(
+    nativeToken(),
+    disclose(credit.value),
+    right<ContractAddress, UserAddress>(UserAddress { bytes: disclose(recipient) })
+  );
+}
+
+export circuit withdraw(serviceId: Bytes<32>, amount: Uint<64>): [] {
+  const sid = disclose(serviceId);
+  // a zero amount would be a free way to contend on merchantBalance
+  assert(amount > 0, "amount must be positive");
+  assert(serviceOwner.member(sid), "unknown service");
+  const owner = serviceOwner.lookup(sid);
+
+  assert(merchantBalance.member(owner), "no balance");
+  const balance = merchantBalance.lookup(owner);
+  assert(balance >= disclose(amount), "insufficient balance");
+
+  // no caller check: the destination comes from the ledger, whoever submits
+  sendUnshielded(
+    nativeToken(),
+    disclose(amount) as Uint<128>,
+    right<ContractAddress, UserAddress>(UserAddress { bytes: owner })
+  );
+
+  merchantBalance.insert(owner, (balance - disclose(amount)) as Uint<64>);
+}