@ottochain/sdk 2.2.5 → 2.4.0

package/dist/esm/ottochain/genesis-manifest.js

@@ -0,0 +1,189 @@
+/**
+ * Genesis Manifest Exporter
+ *
+ * The ottochain metagraph can boot from a NON-EMPTY genesis: a set of standard
+ * packages pre-registered in the registry before any user transaction. This SDK
+ * is the source of truth for those std apps (their proto schemas + JSON-Logic
+ * state-machine definitions), so it is also the source of truth for the
+ * *genesis manifest* — the per-app CONTENT the chain needs to pre-register each
+ * package at genesis.
+ *
+ * DESIGN — content, not consensus hashes:
+ * The manifest ships CONTENT only: the `machineShape` (the typed, proto-faithful
+ * projection of the app's state message) and the `definition` (the JSON-Logic
+ * `StateMachineDefinition`, verbatim — the same object the chain decodes for any
+ * fiber). The CHAIN computes the consensus values itself from this content:
+ *   - `logicHash` = `StateMachineDefinition.computeDigest(definition)`
+ *   - `schemaHash` = commitment over the FileDescriptorSet (off-chain/Bridge)
+ * We deliberately do NOT replicate the chain's canonical hashing here, so there
+ * is ZERO hash-parity risk. No advisory hashes are emitted (see HONESTY notes in
+ * the PR description); add them later only if an off-chain consumer needs them,
+ * clearly marked advisory.
+ *
+ * NAMING — the reserved `std` label:
+ * Each package is named `std.<app>.package`. `RegistryName` reserves the `std`
+ * label in-protocol (`RegistryName.isReserved`), so ordinary user registrations
+ * of `std.*` are rejected — only the privileged genesis path may claim them.
+ * That is exactly the point: users cannot squat the standard names.
+ *
+ * SCHEMA SHAPES — chain-verified ground truth:
+ * The three `stateMessage` shapes are reproduced verbatim from the chain's own
+ * conformance suite (`StandardAppsConformanceSuite`, the `identity` / `proposal`
+ * / `market` `MessageShape` vals), which proves the on-chain shape validator and
+ * the conformance gate accept them. `commands` is left EMPTY for this first cut —
+ * the conformance suite itself models all three apps with `SortedMap.empty`
+ * commands, and the proto `*Request` messages are transaction-layer DTOs that do
+ * not map cleanly onto the universal state machines' free-form JSON-Logic event
+ * payloads. Deriving per-event command shapes is a flagged follow-up.
+ *
+ * The JSON shape emitted here is built to deserialize against the chain's circe
+ * codecs (`MachineShape` / `FieldShape` / `MessageShape` and
+ * `StateMachineDefinition`), whose magnolia config is camelCase with defaults.
+ *
+ * @packageDocumentation
+ */
+import { identityUniversalDef } from '../apps/identity/state-machines/identity-universal.js';
+import { govUniversalDef } from '../apps/governance/state-machines/governance-universal.js';
+import { marketUniversalDef } from '../apps/markets/state-machines/market-universal.js';
+import { toProtoDefinition } from '../schema/fiber-app.js';
+/** Manifest schema version. Bump on any breaking change to the shape. */
+export const GENESIS_MANIFEST_VERSION = 1;
+// ─── Chain-verified state-message shapes ──────────────────────────────────────
+// Reproduced VERBATIM from ottochain
+// modules/shared-data/.../StandardAppsConformanceSuite.scala — the `identity`,
+// `proposal`, and `market` MessageShape vals. Keep these byte-for-byte in step
+// with that suite; it is what guarantees the chain accepts them.
+/** Helper: a FieldShape with the two boolean defaults made explicit. */
+function field(name, number, typeName, repeated = false, optional = false) {
+    return { name, number, typeName, repeated, optional };
+}
+/** ottochain.apps.identity.v1.Identity */
+const identityStateMessage = {
+    typeName: 'ottochain.apps.identity.v1.Identity',
+    fields: [
+        field('id', 1, 'string'),
+        field('address', 2, 'string'),
+        field('public_key', 3, 'string'),
+        field('display_name', 4, 'string'),
+        field('identity_type', 5, 'ottochain.apps.identity.v1.Type'),
+        field('state', 6, 'ottochain.apps.identity.v1.State'),
+        field('reputation', 7, 'ottochain.apps.identity.v1.Reputation'),
+        field('stake', 8, 'int64'),
+        field('domains', 9, 'string', true),
+        field('platform_links', 10, 'ottochain.apps.identity.v1.PlatformLink', true),
+        field('penalty_history', 11, 'ottochain.apps.identity.v1.PenaltyEvent', true),
+        field('created_at', 12, 'google.protobuf.Timestamp'),
+        field('updated_at', 13, 'google.protobuf.Timestamp'),
+    ],
+};
+/** ottochain.apps.governance.v1.Proposal */
+const governanceStateMessage = {
+    typeName: 'ottochain.apps.governance.v1.Proposal',
+    fields: [
+        field('id', 1, 'string'),
+        field('title', 2, 'string'),
+        field('description', 3, 'string'),
+        field('action_type', 4, 'string'),
+        field('payload', 5, 'google.protobuf.Struct'),
+        field('proposer', 6, 'string'),
+        field('proposed_at', 7, 'google.protobuf.Timestamp'),
+        field('deadline', 8, 'google.protobuf.Timestamp'),
+        field('queued_at', 9, 'google.protobuf.Timestamp'),
+        field('executable_at', 10, 'google.protobuf.Timestamp'),
+    ],
+};
+/** ottochain.apps.markets.v1.Market */
+const marketStateMessage = {
+    typeName: 'ottochain.apps.markets.v1.Market',
+    fields: [
+        field('id', 1, 'string'),
+        field('market_type', 2, 'ottochain.apps.markets.v1.Type'),
+        field('creator', 3, 'string'),
+        field('title', 4, 'string'),
+        field('terms', 5, 'google.protobuf.Struct'),
+        field('deadline', 6, 'google.protobuf.Timestamp'),
+        field('threshold', 7, 'int64'),
+        field('commitments', 8, 'ottochain.apps.markets.v1.Commitment', true),
+        field('oracles', 9, 'string', true),
+        field('quorum', 10, 'int32'),
+        field('resolutions', 11, 'ottochain.apps.markets.v1.Resolution', true),
+        field('status', 12, 'ottochain.apps.markets.v1.State'),
+        field('created_at', 13, 'google.protobuf.Timestamp'),
+        field('updated_at', 14, 'google.protobuf.Timestamp'),
+    ],
+};
+// ─── Definition projection (single source of truth = the exported defs) ───────
+/**
+ * Project a `FiberAppDefinition` into the chain's wire `StateMachineDefinition`,
+ * matching the `json-archive/*.json` convention exactly:
+ *   - states carry explicit `metadata: null`,
+ *   - transitions carry explicit `dependencies: []`,
+ *   - the TypeScript-only `FiberAppMetadata` is stripped (`metadata: null`).
+ *
+ * Built on the shared `toProtoDefinition` projector so the manifest never drifts
+ * from the SDK's own exported app definitions. The chain decodes `dependencies:
+ * []` / `metadata: null` identically to their absent forms (its codecs use
+ * defaults), so this is consensus-equivalent to the archives while staying
+ * byte-identical to the checked-in `json-archive/*.json` files.
+ */
+function toWireDefinition(def) {
+    const proto = toProtoDefinition(def);
+    const states = {};
+    for (const [key, st] of Object.entries(proto.states)) {
+        states[key] = { id: st.id, isFinal: st.isFinal, metadata: null };
+    }
+    return {
+        states,
+        initialState: proto.initialState,
+        transitions: proto.transitions.map((t) => ({
+            from: t.from,
+            to: t.to,
+            eventName: t.eventName,
+            guard: t.guard,
+            effect: t.effect,
+            dependencies: t.dependencies ?? [],
+        })),
+        // Strip FiberAppMetadata — the chain's `metadata` is `Option[JsonLogicValue]`.
+        metadata: null,
+    };
+}
+// ─── Builder ──────────────────────────────────────────────────────────────────
+/**
+ * Assemble the genesis manifest for the standard apps.
+ *
+ * Covers THREE apps in this first cut — identity, governance, markets (all the
+ * `universal` variant). The other std apps (contracts, oracles, corporate) and
+ * non-universal variants are a flagged follow-up.
+ *
+ * @returns a `GenesisManifest` whose JSON deserializes against the chain's circe
+ *   codecs. Hashes are intentionally absent — the chain derives them.
+ */
+export function buildGenesisManifest() {
+    const packages = [
+        {
+            name: 'std.identity.package',
+            semver: '1.0.0',
+            strict: false,
+            metadata: {},
+            machineShape: { stateMessage: identityStateMessage, commands: {} },
+            definition: toWireDefinition(identityUniversalDef),
+        },
+        {
+            name: 'std.governance.package',
+            semver: '1.0.0',
+            strict: false,
+            metadata: {},
+            machineShape: { stateMessage: governanceStateMessage, commands: {} },
+            definition: toWireDefinition(govUniversalDef),
+        },
+        {
+            name: 'std.markets.package',
+            semver: '1.0.0',
+            strict: false,
+            metadata: {},
+            machineShape: { stateMessage: marketStateMessage, commands: {} },
+            definition: toWireDefinition(marketUniversalDef),
+        },
+    ];
+    return { version: GENESIS_MANIFEST_VERSION, packages };
+}

package/dist/esm/ottochain/index.js

@@ -8,13 +8,14 @@
 // Re-export generated protobuf types (for binary encoding)
 export * as proto from '../generated/index.js';
 // Runtime message type validation
-export { OTTOCHAIN_MESSAGE_TYPES } from './types.js';
+export { OTTOCHAIN_MESSAGE_TYPES, TOKEN_BEHAVIOR_BITS } from './types.js';
 export { decodeOnChainState, getSnapshotOnChainState, getLatestOnChainState, getLogsForFiber, getEventReceipts, getScriptInvocations, extractOnChainState, } from './snapshot.js';
 export { MetagraphClient } from './metagraph-client.js';
 // Transaction helpers (state machine payloads, signing)
-export { createTransitionPayload, createArchivePayload, createInvokeScriptPayload, signTransaction, addTransactionSignature, getPublicKeyForRegistration, createStateMachinePayload, createScriptPayload, createDataTransactionRequest, } from './transaction.js';
+export { createTransitionPayload, createArchivePayload, createInvokeScriptPayload, signTransaction, addTransactionSignature, getPublicKeyForRegistration, createStateMachinePayload, createScriptPayload, createDataTransactionRequest, createAssetPolicyPayload, createMintAssetPayload, createApplyMorphismPayload, createAuthorizeComposePayload, } from './transaction.js';
 // Data utilities
-export { normalizeCreateStateMachine, normalizeTransitionStateMachine, normalizeArchiveStateMachine, normalizeMessage, } from './normalize.js';
 export { dropNulls } from './drop-nulls.js';
+// Genesis manifest exporter (std-app pre-registration content)
+export { buildGenesisManifest, GENESIS_MANIFEST_VERSION } from './genesis-manifest.js';
 // Note: Governance and Corporate types are now in src/apps/
 // Import from '@ottochain/sdk/apps' instead

package/dist/esm/ottochain/metagraph-client.js

@@ -4,7 +4,7 @@
  * Client for interacting with ottochain ML0 custom routes (/v1 prefix)
  * and framework snapshot endpoints.
  *
- * @see modules/l0/src/main/scala/xyz/kd5ujc/metagraph_l0/ML0CustomRoutes.scala
+ * @see modules/l0/src/main/scala/xyz/kd5ujc/metagraph_l0/ML0Routes.scala
  * @see modules/data_l1/src/main/scala/xyz/kd5ujc/data_l1/DataL1CustomRoutes.scala
  * @packageDocumentation
  */
@@ -28,7 +28,7 @@ import { extractOnChainState } from './snapshot.js';
  * const onChain = await client.getOnChain();
  *
  * // Get all active state machines
- * const machines = await client.getStateMachines('Active');
+ * const machines = await client.getStateMachines('ACTIVE');
  *
  * // Get event receipts for a fiber
  * const events = await client.getStateMachineEvents(fiberId);
@@ -87,18 +87,18 @@ export class MetagraphClient {
         return this.ml0.get(`/data-application/v1/state-machines/${fiberId}/events`);
     }
     /**
-     * Get all script oracles, optionally filtered by status.
+     * Get all scripts, optionally filtered by status.
      */
     async getScripts(status) {
         const query = status ? `?status=${status}` : '';
-        return this.ml0.get(`/data-application/v1/oracles${query}`);
+        return this.ml0.get(`/data-application/v1/scripts${query}`);
     }
     /**
-     * Get a single script oracle by fiber ID.
+     * Get a single script by fiber ID.
      */
     async getScript(scriptId) {
         try {
-            return await this.ml0.get(`/data-application/v1/oracles/${scriptId}`);
+            return await this.ml0.get(`/data-application/v1/scripts/${scriptId}`);
         }
         catch (error) {
             if (error instanceof NetworkError && error.statusCode === 404) {
@@ -108,10 +108,67 @@ export class MetagraphClient {
         }
     }
     /**
-     * Get oracle invocations from the current ordinal's logs.
+     * Get script invocations from the current ordinal's logs.
      */
     async getScriptInvocations(scriptId) {
-        return this.ml0.get(`/data-application/v1/oracles/${scriptId}/invocations`);
+        return this.ml0.get(`/data-application/v1/scripts/${scriptId}/invocations`);
+    }
+    // -------------------------------------------------------------------------
+    // Registry, audit, state-proofs, fee estimates (ML0 /data-application/v1/*)
+    // -------------------------------------------------------------------------
+    /** Get the metagraph version string. */
+    async getVersion() {
+        return this.ml0.get('/data-application/v1/version');
+    }
+    /** Get the full registry namespace, keyed by full registry name `labels.tld`. */
+    async getRegistry() {
+        return this.ml0.get('/data-application/v1/registry');
+    }
+    /** Resolve a single registry entry by full name (`labels.tld`), or null if unregistered. */
+    async getRegistryEntry(name) {
+        try {
+            return await this.ml0.get(`/data-application/v1/registry/${encodeURIComponent(name)}`);
+        }
+        catch (error) {
+            if (error instanceof NetworkError && error.statusCode === 404)
+                return null;
+            throw error;
+        }
+    }
+    /** Reverse-resolve a fiber UUID to its canonical registered name (#29), or null. */
+    async getReverseName(fiberId) {
+        try {
+            return await this.ml0.get(`/data-application/v1/registry/reverse/${fiberId}`);
+        }
+        catch (error) {
+            if (error instanceof NetworkError && error.statusCode === 404)
+                return null;
+            throw error;
+        }
+    }
+    /** Get the rendered audit-trail lines for a state-machine fiber. */
+    async getStateMachineAudit(fiberId) {
+        return this.ml0.get(`/data-application/v1/state-machines/${fiberId}/audit`);
+    }
+    /** Light-client state proof for a field of a state-machine fiber, against the committed root. */
+    async getStateMachineStateProof(fiberId, field) {
+        return this.ml0.get(`/data-application/v1/state-machines/${fiberId}/state-proof?field=${encodeURIComponent(field)}`);
+    }
+    /** Light-client state proof for a field of a script fiber. */
+    async getScriptStateProof(fiberId, field) {
+        return this.ml0.get(`/data-application/v1/scripts/${fiberId}/state-proof?field=${encodeURIComponent(field)}`);
+    }
+    /** Light-client state proof for a field of an asset instance. */
+    async getAssetStateProof(assetId, field) {
+        return this.ml0.get(`/data-application/v1/assets/${assetId}/state-proof?field=${encodeURIComponent(field)}`);
+    }
+    /** Estimate the fee/gas for a transition event on a state-machine fiber. */
+    async estimateTransitionFee(fiberId, eventName) {
+        return this.ml0.get(`/data-application/v1/state-machines/${fiberId}/estimate-fee?event=${encodeURIComponent(eventName)}`);
+    }
+    /** Estimate the fee/gas for invoking a script fiber. */
+    async estimateScriptFee(fiberId) {
+        return this.ml0.get(`/data-application/v1/scripts/${fiberId}/estimate-fee`);
     }
     // -------------------------------------------------------------------------
     // Framework snapshot endpoints (ML0 /snapshots/*)

package/dist/esm/ottochain/snapshot.js

@@ -73,7 +73,7 @@ export function getLogsForFiber(onChain, fiberId) {
 /**
  * Get EventReceipt log entries for a specific fiber.
  *
- * EventReceipts are distinguished from OracleInvocations by the presence
+ * EventReceipts are distinguished from ScriptInvocations by the presence
  * of the `eventName` field.
  *
  * @param onChain - Decoded on-chain state
@@ -85,14 +85,14 @@ export function getEventReceipts(onChain, fiberId) {
         .filter((entry) => 'eventName' in entry && 'success' in entry);
 }
 /**
- * Get OracleInvocation log entries for a specific fiber.
+ * Get ScriptInvocation log entries for a specific fiber.
  *
- * OracleInvocations are distinguished from EventReceipts by the presence
+ * ScriptInvocations are distinguished from EventReceipts by the presence
  * of the `method` field.
  *
  * @param onChain - Decoded on-chain state
  * @param fiberId - Fiber UUID to filter by
- * @returns Array of OracleInvocation entries
+ * @returns Array of ScriptInvocation entries
  */
 export function getScriptInvocations(onChain, fiberId) {
     return getLogsForFiber(onChain, fiberId)

package/dist/esm/ottochain/transaction.js

@@ -4,10 +4,18 @@
  * These helpers create properly formatted payloads for the bridge's
  * self-signed mode, where clients sign their own transactions.
  */
-import { signDataUpdate, getPublicKeyId } from '@constellation-network/metagraph-sdk';
+import { getPublicKeyId } from '@constellation-network/metagraph-sdk';
+import { signDataUpdate } from '../signing.js';
 /**
  * Create a new state machine fiber payload.
  *
+ * @remarks
+ * `params.definition` is signed VERBATIM. Pass the output of `toProtoDefinition(def)` (the
+ * allowlisted wire shape) — NOT a raw `FiberAppDefinition`: extra authoring fields
+ * (`createSchema` / `stateSchema` / `eventSchemas` / per-transition `emits`) would be signed
+ * but re-encoded away by the chain, diverging the canonical → opaque `InvalidSignature`.
+ * See `tests/ottochain/signing-parity.test.ts`.
+ *
  * @param params - State machine creation parameters
  * @returns A CreateStateMachine message ready for signing
  *
@@ -94,7 +102,7 @@ export function createArchivePayload(params) {
  *     },
  *   },
  *   initialState: { value: 0 },
- *   accessControl: { type: 'open' },
+ *   accessControl: { Public: {} },
  * });
  * const signed = await signTransaction(script, privateKey);
  * ```
@@ -105,7 +113,7 @@ export function createScriptPayload(params) {
             fiberId: params.fiberId,
             scriptProgram: params.scriptProgram,
             initialState: params.initialState ?? null,
-            accessControl: params.accessControl ?? { type: 'open' },
+            accessControl: params.accessControl ?? { Public: {} },
         },
     };
 }
@@ -125,12 +133,41 @@ export function createInvokeScriptPayload(params) {
         },
     };
 }
+// ============================================================================
+// Asset Operations (asset-model.md §7)
+// ============================================================================
+//
+// Thin typed wrappers: the chain message types ({@link CreateAssetPolicy}, etc.) already model
+// every field (required vs `Option`), so these builders just apply the `{ MessageName: ... }`
+// envelope, for API parity with the state-machine/script `create*Payload` helpers. Sign the result
+// with {@link signTransaction} (the canonical `JCS(dropNulls)` path drops any omitted optionals).
+/** Wrap a {@link CreateAssetPolicy} (publish an asset-policy package version). */
+export function createAssetPolicyPayload(params) {
+    return { CreateAssetPolicy: params };
+}
+/** Wrap a {@link MintAsset} (mint a new asset instance against a resolved policy version). */
+export function createMintAssetPayload(params) {
+    return { MintAsset: params };
+}
+/** Wrap an {@link ApplyMorphism} (apply a typed morphism to an asset instance). */
+export function createApplyMorphismPayload(params) {
+    return { ApplyMorphism: params };
+}
+/** Wrap an {@link AuthorizeCompose} (commit half of the symmetric-compose handshake). */
+export function createAuthorizeComposePayload(params) {
+    return { AuthorizeCompose: params };
+}
 /**
  * Sign a transaction payload for self-signed mode.
  *
  * This creates a Signed<T> object with the exact format expected by the bridge's
  * `/agent/transition` endpoint when using self-signed mode.
  *
+ * The signature is computed over the null-dropped canonical bytes (null
+ * object fields removed recursively, array nulls preserved, then RFC 8785),
+ * matching metakit's content-hash rule. Explicit-null and absent optional
+ * fields therefore produce identical signatures.
+ *
  * @param message - The message to sign (e.g., from createTransitionPayload)
  * @param privateKey - The private key in hex format (64 characters)
  * @returns A signed object ready for submission to the bridge
@@ -199,6 +236,9 @@ export function createDataTransactionRequest(signed) {
  * Use this for multi-signature scenarios where multiple parties
  * need to sign the same transaction.
  *
+ * The new signature is computed over the null-dropped canonical bytes,
+ * matching metakit's content-hash rule (see {@link signTransaction}).
+ *
  * @param signed - The already-signed transaction
  * @param privateKey - Additional signer's private key
  * @returns Transaction with additional signature

package/dist/esm/ottochain/types.js

@@ -7,6 +7,14 @@
  * @see modules/models/src/main/scala/xyz/kd5ujc/schema/
  * @packageDocumentation
  */
+/** Bit weights for {@link TokenBehavior} (T=16, S=8, C=4, E=2, G=1). */
+export const TOKEN_BEHAVIOR_BITS = {
+    transferable: 16,
+    splittable: 8,
+    combinable: 4,
+    expirable: 2,
+    governable: 1,
+};
 /**
  * Names of all valid OttochainMessage types.
  * Use this for runtime validation (e.g., in API routes).
@@ -15,6 +23,16 @@ export const OTTOCHAIN_MESSAGE_TYPES = [
     'CreateStateMachine',
     'TransitionStateMachine',
     'ArchiveStateMachine',
+    'UpgradeFiber',
     'CreateScript',
     'InvokeScript',
+    'UpgradeScript',
+    'PublishMachineVersion',
+    'PublishScriptVersion',
+    'SetVersionStatus',
+    'RegisterAlias',
+    'CreateAssetPolicy',
+    'MintAsset',
+    'ApplyMorphism',
+    'AuthorizeCompose',
 ];

package/dist/esm/privacy/index.js

@@ -0,0 +1,6 @@
+/**
+ * Privacy: shield any fiber app into a zk-jlvm-shielded private-state pool.
+ * See docs/design/zk-private-contract-state-rfc.md.
+ */
+export { shieldApp, SHIELDED_POOL_STATE } from "./shield-app.js";
+export { sealedBidAccountDef, shieldedSealedBidDef, vickreyAuctionDef } from "./sealed-bid.js";