@ottochain/sdk 2.3.0 → 2.4.0

package/dist/esm/ottochain/metagraph-client.js

@@ -4,7 +4,7 @@
  * Client for interacting with ottochain ML0 custom routes (/v1 prefix)
  * and framework snapshot endpoints.
  *
- * @see modules/l0/src/main/scala/xyz/kd5ujc/metagraph_l0/ML0CustomRoutes.scala
+ * @see modules/l0/src/main/scala/xyz/kd5ujc/metagraph_l0/ML0Routes.scala
  * @see modules/data_l1/src/main/scala/xyz/kd5ujc/data_l1/DataL1CustomRoutes.scala
  * @packageDocumentation
  */
@@ -28,7 +28,7 @@ import { extractOnChainState } from './snapshot.js';
  * const onChain = await client.getOnChain();
  *
  * // Get all active state machines
- * const machines = await client.getStateMachines('Active');
+ * const machines = await client.getStateMachines('ACTIVE');
  *
  * // Get event receipts for a fiber
  * const events = await client.getStateMachineEvents(fiberId);
@@ -87,18 +87,18 @@ export class MetagraphClient {
         return this.ml0.get(`/data-application/v1/state-machines/${fiberId}/events`);
     }
     /**
-     * Get all script oracles, optionally filtered by status.
+     * Get all scripts, optionally filtered by status.
      */
     async getScripts(status) {
         const query = status ? `?status=${status}` : '';
-        return this.ml0.get(`/data-application/v1/oracles${query}`);
+        return this.ml0.get(`/data-application/v1/scripts${query}`);
     }
     /**
-     * Get a single script oracle by fiber ID.
+     * Get a single script by fiber ID.
      */
     async getScript(scriptId) {
         try {
-            return await this.ml0.get(`/data-application/v1/oracles/${scriptId}`);
+            return await this.ml0.get(`/data-application/v1/scripts/${scriptId}`);
         }
         catch (error) {
             if (error instanceof NetworkError && error.statusCode === 404) {
@@ -108,10 +108,67 @@ export class MetagraphClient {
         }
     }
     /**
-     * Get oracle invocations from the current ordinal's logs.
+     * Get script invocations from the current ordinal's logs.
      */
     async getScriptInvocations(scriptId) {
-        return this.ml0.get(`/data-application/v1/oracles/${scriptId}/invocations`);
+        return this.ml0.get(`/data-application/v1/scripts/${scriptId}/invocations`);
+    }
+    // -------------------------------------------------------------------------
+    // Registry, audit, state-proofs, fee estimates (ML0 /data-application/v1/*)
+    // -------------------------------------------------------------------------
+    /** Get the metagraph version string. */
+    async getVersion() {
+        return this.ml0.get('/data-application/v1/version');
+    }
+    /** Get the full registry namespace, keyed by full registry name `labels.tld`. */
+    async getRegistry() {
+        return this.ml0.get('/data-application/v1/registry');
+    }
+    /** Resolve a single registry entry by full name (`labels.tld`), or null if unregistered. */
+    async getRegistryEntry(name) {
+        try {
+            return await this.ml0.get(`/data-application/v1/registry/${encodeURIComponent(name)}`);
+        }
+        catch (error) {
+            if (error instanceof NetworkError && error.statusCode === 404)
+                return null;
+            throw error;
+        }
+    }
+    /** Reverse-resolve a fiber UUID to its canonical registered name (#29), or null. */
+    async getReverseName(fiberId) {
+        try {
+            return await this.ml0.get(`/data-application/v1/registry/reverse/${fiberId}`);
+        }
+        catch (error) {
+            if (error instanceof NetworkError && error.statusCode === 404)
+                return null;
+            throw error;
+        }
+    }
+    /** Get the rendered audit-trail lines for a state-machine fiber. */
+    async getStateMachineAudit(fiberId) {
+        return this.ml0.get(`/data-application/v1/state-machines/${fiberId}/audit`);
+    }
+    /** Light-client state proof for a field of a state-machine fiber, against the committed root. */
+    async getStateMachineStateProof(fiberId, field) {
+        return this.ml0.get(`/data-application/v1/state-machines/${fiberId}/state-proof?field=${encodeURIComponent(field)}`);
+    }
+    /** Light-client state proof for a field of a script fiber. */
+    async getScriptStateProof(fiberId, field) {
+        return this.ml0.get(`/data-application/v1/scripts/${fiberId}/state-proof?field=${encodeURIComponent(field)}`);
+    }
+    /** Light-client state proof for a field of an asset instance. */
+    async getAssetStateProof(assetId, field) {
+        return this.ml0.get(`/data-application/v1/assets/${assetId}/state-proof?field=${encodeURIComponent(field)}`);
+    }
+    /** Estimate the fee/gas for a transition event on a state-machine fiber. */
+    async estimateTransitionFee(fiberId, eventName) {
+        return this.ml0.get(`/data-application/v1/state-machines/${fiberId}/estimate-fee?event=${encodeURIComponent(eventName)}`);
+    }
+    /** Estimate the fee/gas for invoking a script fiber. */
+    async estimateScriptFee(fiberId) {
+        return this.ml0.get(`/data-application/v1/scripts/${fiberId}/estimate-fee`);
     }
     // -------------------------------------------------------------------------
     // Framework snapshot endpoints (ML0 /snapshots/*)

package/dist/esm/ottochain/snapshot.js

@@ -73,7 +73,7 @@ export function getLogsForFiber(onChain, fiberId) {
 /**
  * Get EventReceipt log entries for a specific fiber.
  *
- * EventReceipts are distinguished from OracleInvocations by the presence
+ * EventReceipts are distinguished from ScriptInvocations by the presence
  * of the `eventName` field.
  *
  * @param onChain - Decoded on-chain state
@@ -85,14 +85,14 @@ export function getEventReceipts(onChain, fiberId) {
         .filter((entry) => 'eventName' in entry && 'success' in entry);
 }
 /**
- * Get OracleInvocation log entries for a specific fiber.
+ * Get ScriptInvocation log entries for a specific fiber.
  *
- * OracleInvocations are distinguished from EventReceipts by the presence
+ * ScriptInvocations are distinguished from EventReceipts by the presence
  * of the `method` field.
  *
  * @param onChain - Decoded on-chain state
  * @param fiberId - Fiber UUID to filter by
- * @returns Array of OracleInvocation entries
+ * @returns Array of ScriptInvocation entries
  */
 export function getScriptInvocations(onChain, fiberId) {
     return getLogsForFiber(onChain, fiberId)

package/dist/esm/ottochain/transaction.js

@@ -4,10 +4,18 @@
  * These helpers create properly formatted payloads for the bridge's
  * self-signed mode, where clients sign their own transactions.
  */
-import { signDataUpdate, getPublicKeyId } from '@constellation-network/metagraph-sdk';
+import { getPublicKeyId } from '@constellation-network/metagraph-sdk';
+import { signDataUpdate } from '../signing.js';
 /**
  * Create a new state machine fiber payload.
  *
+ * @remarks
+ * `params.definition` is signed VERBATIM. Pass the output of `toProtoDefinition(def)` (the
+ * allowlisted wire shape) — NOT a raw `FiberAppDefinition`: extra authoring fields
+ * (`createSchema` / `stateSchema` / `eventSchemas` / per-transition `emits`) would be signed
+ * but re-encoded away by the chain, diverging the canonical → opaque `InvalidSignature`.
+ * See `tests/ottochain/signing-parity.test.ts`.
+ *
  * @param params - State machine creation parameters
  * @returns A CreateStateMachine message ready for signing
  *
@@ -94,7 +102,7 @@ export function createArchivePayload(params) {
  *     },
  *   },
  *   initialState: { value: 0 },
- *   accessControl: { type: 'open' },
+ *   accessControl: { Public: {} },
  * });
  * const signed = await signTransaction(script, privateKey);
  * ```
@@ -105,7 +113,7 @@ export function createScriptPayload(params) {
             fiberId: params.fiberId,
             scriptProgram: params.scriptProgram,
             initialState: params.initialState ?? null,
-            accessControl: params.accessControl ?? { type: 'open' },
+            accessControl: params.accessControl ?? { Public: {} },
         },
     };
 }
@@ -125,12 +133,41 @@ export function createInvokeScriptPayload(params) {
         },
     };
 }
+// ============================================================================
+// Asset Operations (asset-model.md §7)
+// ============================================================================
+//
+// Thin typed wrappers: the chain message types ({@link CreateAssetPolicy}, etc.) already model
+// every field (required vs `Option`), so these builders just apply the `{ MessageName: ... }`
+// envelope, for API parity with the state-machine/script `create*Payload` helpers. Sign the result
+// with {@link signTransaction} (the canonical `JCS(dropNulls)` path drops any omitted optionals).
+/** Wrap a {@link CreateAssetPolicy} (publish an asset-policy package version). */
+export function createAssetPolicyPayload(params) {
+    return { CreateAssetPolicy: params };
+}
+/** Wrap a {@link MintAsset} (mint a new asset instance against a resolved policy version). */
+export function createMintAssetPayload(params) {
+    return { MintAsset: params };
+}
+/** Wrap an {@link ApplyMorphism} (apply a typed morphism to an asset instance). */
+export function createApplyMorphismPayload(params) {
+    return { ApplyMorphism: params };
+}
+/** Wrap an {@link AuthorizeCompose} (commit half of the symmetric-compose handshake). */
+export function createAuthorizeComposePayload(params) {
+    return { AuthorizeCompose: params };
+}
 /**
  * Sign a transaction payload for self-signed mode.
  *
  * This creates a Signed<T> object with the exact format expected by the bridge's
  * `/agent/transition` endpoint when using self-signed mode.
  *
+ * The signature is computed over the null-dropped canonical bytes (null
+ * object fields removed recursively, array nulls preserved, then RFC 8785),
+ * matching metakit's content-hash rule. Explicit-null and absent optional
+ * fields therefore produce identical signatures.
+ *
  * @param message - The message to sign (e.g., from createTransitionPayload)
  * @param privateKey - The private key in hex format (64 characters)
  * @returns A signed object ready for submission to the bridge
@@ -199,6 +236,9 @@ export function createDataTransactionRequest(signed) {
  * Use this for multi-signature scenarios where multiple parties
  * need to sign the same transaction.
  *
+ * The new signature is computed over the null-dropped canonical bytes,
+ * matching metakit's content-hash rule (see {@link signTransaction}).
+ *
  * @param signed - The already-signed transaction
  * @param privateKey - Additional signer's private key
  * @returns Transaction with additional signature

package/dist/esm/ottochain/types.js

@@ -7,6 +7,14 @@
  * @see modules/models/src/main/scala/xyz/kd5ujc/schema/
  * @packageDocumentation
  */
+/** Bit weights for {@link TokenBehavior} (T=16, S=8, C=4, E=2, G=1). */
+export const TOKEN_BEHAVIOR_BITS = {
+    transferable: 16,
+    splittable: 8,
+    combinable: 4,
+    expirable: 2,
+    governable: 1,
+};
 /**
  * Names of all valid OttochainMessage types.
  * Use this for runtime validation (e.g., in API routes).
@@ -18,7 +26,13 @@ export const OTTOCHAIN_MESSAGE_TYPES = [
     'UpgradeFiber',
     'CreateScript',
     'InvokeScript',
-    'PublishVersion',
+    'UpgradeScript',
+    'PublishMachineVersion',
+    'PublishScriptVersion',
     'SetVersionStatus',
     'RegisterAlias',
+    'CreateAssetPolicy',
+    'MintAsset',
+    'ApplyMorphism',
+    'AuthorizeCompose',
 ];

package/dist/esm/privacy/index.js

@@ -0,0 +1,6 @@
+/**
+ * Privacy: shield any fiber app into a zk-jlvm-shielded private-state pool.
+ * See docs/design/zk-private-contract-state-rfc.md.
+ */
+export { shieldApp, SHIELDED_POOL_STATE } from "./shield-app.js";
+export { sealedBidAccountDef, shieldedSealedBidDef, vickreyAuctionDef } from "./sealed-bid.js";

package/dist/esm/privacy/sealed-bid.js

@@ -0,0 +1,206 @@
+/**
+ * Sealed-bid (Vickrey) auction — the worked example for the privacy stack.
+ *
+ * Two pieces (RFC §4):
+ *  1. `sealedBidAccountDef` — the PRIVATE per-bidder bid. `shieldApp` turns it into a shielded
+ *     pool (`shieldedSealedBidDef`): a bidder commits a bid note and proves it well-formed with a
+ *     zk-jlvm-shielded Groth16 proof, so the amount stays sealed *until the deadline*. This is the
+ *     mechanical per-instance / single-owner case.
+ *  2. `vickreyAuctionDef` — the PUBLIC settlement (reveal-then-tally). After the deadline bidders
+ *     open their notes; the combine computes winner = argmax and clearingPrice = second-highest
+ *     (the Vickrey price). This is the one shared-state step, kept simple for v1; a zk settlement
+ *     proof that seals losers' amounts forever is the deferred upgrade (RFC §10).
+ */
+import { defineFiberApp } from "../schema/fiber-app.js";
+import { shieldApp } from "./shield-app.js";
+// ── 1. The private bid (base app, shielded by shieldApp) ──────────────────────
+/** The per-bidder PRIVATE state: a bid note `{ amount, bidder, nonce }`. */
+export const sealedBidAccountDef = defineFiberApp({
+    metadata: {
+        name: "SealedBidAccount",
+        app: "markets",
+        type: "sealed-bid-account",
+        version: "1.0.0",
+        description: "A single bidder's sealed bid (private amount). Shielded via shieldApp.",
+    },
+    stateSchema: {
+        properties: {
+            amount: { type: "number", description: "the (private) bid amount" },
+            bidder: { type: "address" },
+            nonce: { type: "number", description: "per-note randomness; keeps the commitment hiding" },
+        },
+    },
+    eventSchemas: {
+        place_bid: {
+            description: "Set the sealed bid amount",
+            required: ["amount"],
+            properties: { amount: { type: "number", minimum: 1 } },
+        },
+    },
+    states: {
+        OPEN: { id: "OPEN", isFinal: false, metadata: { label: "Open", description: "No bid yet", category: "initial" } },
+        BID: { id: "BID", isFinal: false, metadata: { label: "Bid", description: "Bid committed", category: "active" } },
+    },
+    initialState: "OPEN",
+    transitions: [
+        {
+            // This effect is what the zk-jlvm-shielded circuit runs in-zkVM; `exprHash` pins it.
+            from: "OPEN",
+            to: "BID",
+            eventName: "place_bid",
+            guard: { ">": [{ var: "event.amount" }, 0] },
+            effect: { merge: [{ var: "state" }, { amount: { var: "event.amount" } }] },
+            dependencies: [],
+        },
+    ],
+});
+/**
+ * The shielded sealed-bid pool. `vkey`/`exprHash` come from the built zk-jlvm-shielded circuit
+ * (these are placeholders until the circuit's program vkey + the keccak of the `place_bid` effect
+ * are wired in by the genesis/build step).
+ */
+export function shieldedSealedBidDef(opts) {
+    return shieldApp(sealedBidAccountDef, opts);
+}
+// ── 2. The public Vickrey settlement ──────────────────────────────────────────
+/**
+ * Public reveal-then-tally settlement. `reveal` appends an opened bid (in a full build the opening
+ * is checked against the recorded commitment in the shielded pool); `settle` computes the winner
+ * and the Vickrey (second-price) clearing price over the revealed bids in one reduce.
+ */
+export const vickreyAuctionDef = defineFiberApp({
+    metadata: {
+        name: "VickreyAuction",
+        app: "markets",
+        type: "vickrey-auction",
+        version: "1.0.0",
+        description: "Sealed-bid second-price auction: public reveal-then-tally over shielded bids.",
+        crossReferences: { bidPool: "the ShieldedSealedBidAccount pool holding the sealed bids" },
+    },
+    createSchema: {
+        required: ["seller", "deadline"],
+        properties: {
+            seller: { type: "address", immutable: true },
+            deadline: { type: "timestamp", immutable: true },
+        },
+    },
+    stateSchema: {
+        properties: {
+            seller: { type: "address", immutable: true },
+            deadline: { type: "timestamp", immutable: true },
+            status: { type: "string", computed: true },
+            revealed: { type: "array", computed: true, description: "opened bids [{bidder, amount}]" },
+            winner: { type: "address", computed: true },
+            clearingPrice: { type: "number", computed: true, description: "second-highest bid (Vickrey)" },
+        },
+    },
+    eventSchemas: {
+        reveal: {
+            description: "Open a sealed bid after the deadline",
+            required: ["bidder", "amount"],
+            properties: { bidder: { type: "address" }, amount: { type: "number", minimum: 1 } },
+        },
+        settle: { description: "Tally the revealed bids (winner + second price)" },
+    },
+    states: {
+        OPEN: { id: "OPEN", isFinal: false, metadata: { label: "Open", description: "Bidding (sealed)", category: "initial" } },
+        REVEAL: { id: "REVEAL", isFinal: false, metadata: { label: "Reveal", description: "Opening bids", category: "active" } },
+        SETTLED: { id: "SETTLED", isFinal: true, metadata: { label: "Settled", description: "Winner + price set", category: "terminal" } },
+    },
+    initialState: "OPEN",
+    transitions: [
+        {
+            from: "OPEN",
+            to: "REVEAL",
+            eventName: "reveal",
+            guard: { ">=": [{ var: "$timestamp" }, { var: "state.deadline" }] },
+            effect: {
+                merge: [
+                    { var: "state" },
+                    {
+                        status: "REVEAL",
+                        revealed: {
+                            cat: [
+                                { var: "state.revealed" },
+                                [{ bidder: { var: "event.bidder" }, amount: { var: "event.amount" } }],
+                            ],
+                        },
+                    },
+                ],
+            },
+            dependencies: [],
+        },
+        {
+            from: "REVEAL",
+            to: "REVEAL",
+            eventName: "reveal",
+            guard: { ">=": [{ var: "$timestamp" }, { var: "state.deadline" }] },
+            effect: {
+                merge: [
+                    { var: "state" },
+                    {
+                        revealed: {
+                            cat: [
+                                { var: "state.revealed" },
+                                [{ bidder: { var: "event.bidder" }, amount: { var: "event.amount" } }],
+                            ],
+                        },
+                    },
+                ],
+            },
+            dependencies: [],
+        },
+        {
+            // Vickrey tally: fold the revealed bids tracking (max, second, winner).
+            from: "REVEAL",
+            to: "SETTLED",
+            eventName: "settle",
+            guard: { ">": [{ reduce: [{ var: "state.revealed" }, { "+": [{ var: "accumulator" }, 1] }, 0] }, 0] },
+            effect: {
+                merge: [
+                    { var: "state" },
+                    {
+                        status: "SETTLED",
+                        settledAt: { var: "$timestamp" },
+                        winner: {
+                            var: [
+                                "tally.winner",
+                                null,
+                            ],
+                        },
+                        clearingPrice: { var: ["tally.second", 0] },
+                        // compute the tally once and expose it for the two fields above
+                        tally: {
+                            reduce: [
+                                { var: "state.revealed" },
+                                {
+                                    if: [
+                                        { ">": [{ var: "current.amount" }, { var: "accumulator.max" }] },
+                                        {
+                                            max: { var: "current.amount" },
+                                            second: { var: "accumulator.max" },
+                                            winner: { var: "current.bidder" },
+                                        },
+                                        {
+                                            if: [
+                                                { ">": [{ var: "current.amount" }, { var: "accumulator.second" }] },
+                                                {
+                                                    max: { var: "accumulator.max" },
+                                                    second: { var: "current.amount" },
+                                                    winner: { var: "accumulator.winner" },
+                                                },
+                                                { var: "accumulator" },
+                                            ],
+                                        },
+                                    ],
+                                },
+                                { max: 0, second: 0, winner: null },
+                            ],
+                        },
+                    },
+                ],
+            },
+            dependencies: [],
+        },
+    ],
+});

package/dist/esm/privacy/shield-app.js

@@ -0,0 +1,127 @@
+/**
+ * shieldApp — turn a fiber app into a PRIVATE-state pool.
+ *
+ * Given a base {@link FiberAppDefinition} (the app whose state + transition you want to keep
+ * private), `shieldApp` returns a new `FiberAppDefinition` for a "shielded pool" Machine fiber.
+ * The pool's state is PUBLIC scaffolding only — the spent-nullifier set, the commitment log, and
+ * the set of valid anchors — while the app's real state lives off-chain in a note committed to
+ * the tree. Each app transition is carried out off-chain and attested by a single
+ * `zk-jlvm-shielded` Groth16 proof; the on-chain combine just verifies the proof, rejects an
+ * already-spent nullifier, and records the new commitment.
+ *
+ * Division of labour (see ottochain-sdk RFC docs/design/zk-private-contract-state-rfc.md):
+ *  - the CIRCUIT proves membership ∧ authorization ∧ `jlvm-core` effect ∧ new commitment;
+ *  - this GUARD (combine) verifies the proof, pins which app logic ran (`exprHash`), checks the
+ *    anchor is recent, and checks the nullifier is fresh — all combiner-only (CLAUDE.md);
+ *  - block-validity stays structural (proof / publicValues present + hex).
+ *
+ * It uses NO new metakit opcode: `groth16_verify` verifies the proof, and the four-`bytes32`
+ * public values (`anchor`, `nullifier`, `newCommitment`, `exprHash`) are extracted from the
+ * VERIFIED `publicValues` string with fixed-offset `substr` — slicing the verified bytes IS the
+ * binding (§8.1).
+ *
+ * NOTE on cost: the note model rehashes the whole state each transition, so proving cost is
+ * O(state size) (RFC §8). Keep shielded note state small (a few KB); for large keyed state use
+ * the auth-DB variant (RFC §3.1.1).
+ */
+import { defineFiberApp, } from "../schema/fiber-app.js";
+/**
+ * Field extractors over the abi-encoded `JlvmTransitionPublicValues` — four static `bytes32`
+ * `[anchor | nullifier | newCommitment | exprHash]`, a fixed 128-byte (256 hex char) layout with
+ * NO dynamic arrays. `publicValues` is the 0x-prefixed hex from the prover, so each field is 64
+ * hex chars starting at: anchor=2, nullifier=66, newCommitment=130, exprHash=194.
+ */
+const pvField = (publicValues, hexOffset) => ({
+    substr: [publicValues, hexOffset, 64],
+});
+/** Standard public state every shielded pool carries (the rest of the app state is private/off-chain). */
+export const SHIELDED_POOL_STATE = {
+    vkey: { type: "hash", immutable: true },
+    exprHash: { type: "hash", immutable: true },
+    rootWindow: { type: "integer", immutable: true },
+    currentRoot: { type: "hash", computed: true },
+    knownRoots: { type: "array", computed: true, description: "rolling window of valid anchors (hex)" },
+    nullifiers: { type: "array", computed: true, description: "spent set (hex); monotonic — see RFC §5.3" },
+    commitments: { type: "array", computed: true, description: "append-only log of output commitments (hex)" },
+    leafCount: { type: "integer", computed: true, default: 0 },
+    transitions: { type: "integer", computed: true, default: 0 },
+};
+/**
+ * Build the shielded-pool variant of `base`.
+ *
+ * @param base  the app being shielded (used for naming + to document the pinned logic).
+ * @param opts  the circuit vkey + the pinned `exprHash` + the anchor window.
+ */
+export function shieldApp(base, opts) {
+    const publicValues = { var: "event.publicValues" };
+    const anchor = pvField(publicValues, 2);
+    const nullifier = pvField(publicValues, 66);
+    const newCommitment = pvField(publicValues, 130);
+    const exprHash = pvField(publicValues, 194);
+    // GUARD (combine): all stateful, combiner-only.
+    const guard = {
+        and: [
+            // 1. the proof verifies against the pool's pinned vkey over EXACTLY these public bytes
+            { groth16_verify: [{ var: "state.vkey" }, publicValues, { var: "event.proof" }] },
+            // 2. it ran the app logic this pool pins (binds which effect produced the transition)
+            { "===": [exprHash, { var: "state.exprHash" }] },
+            // 3. the spent note was proven under an anchor we still honor
+            { in: [anchor, { var: "state.knownRoots" }] },
+            // 4. inter-transfer double-spend guard: the nullifier is not already spent
+            { none: [{ var: "state.nullifiers" }, { "===": [{ var: "" }, nullifier] }] },
+        ],
+    };
+    // EFFECT (combine): spend the nullifier, record the new commitment, advance counters.
+    // Root advancement (turning the appended commitment into the next anchor) is wallet/Bridge-side
+    // per RFC §6.2 / §10; the chain records the commitment + nullifier here.
+    const effect = {
+        merge: [
+            { var: "state" },
+            {
+                nullifiers: { cat: [{ var: "state.nullifiers" }, [nullifier]] },
+                commitments: { cat: [{ var: "state.commitments" }, [newCommitment]] },
+                leafCount: { "+": [{ var: "state.leafCount" }, 1] },
+                transitions: { "+": [{ var: "state.transitions" }, 1] },
+                lastTransitionAt: { var: "$ordinal" },
+            },
+        ],
+    };
+    return defineFiberApp({
+        metadata: {
+            name: `Shielded${base.metadata.name}`,
+            app: "privacy",
+            type: `shielded-${base.metadata.type}`,
+            version: base.metadata.version,
+            description: `Shielded (zk-jlvm-shielded) variant of ${base.metadata.name}: private state transitions ` +
+                `verified by a Groth16 proof; the nullifier set + anchors are public pool state.`,
+        },
+        createSchema: {
+            required: ["vkey", "exprHash"],
+            properties: {
+                vkey: { type: "hash", immutable: true, default: opts.vkey },
+                exprHash: { type: "hash", immutable: true, default: opts.exprHash },
+                rootWindow: { type: "integer", immutable: true, default: opts.rootWindow ?? 64 },
+            },
+        },
+        stateSchema: { properties: { ...SHIELDED_POOL_STATE } },
+        eventSchemas: {
+            transition: {
+                description: `A private state transition of ${base.metadata.name}, attested by a zk-jlvm-shielded Groth16 proof.`,
+                required: ["proof", "publicValues"],
+                properties: {
+                    proof: { type: "string", description: "Groth16 proof bytes (0x hex)" },
+                    publicValues: { type: "string", description: "abi-encoded JlvmTransitionPublicValues (4×bytes32, 0x hex)" },
+                },
+            },
+        },
+        states: {
+            ACTIVE: {
+                id: "ACTIVE",
+                isFinal: false,
+                metadata: { label: "Active", description: "Pool accepts shielded transitions", category: "active" },
+            },
+        },
+        initialState: "ACTIVE",
+        transitions: [{ from: "ACTIVE", to: "ACTIVE", eventName: "transition", guard, effect, dependencies: [] }],
+    });
+}

package/dist/esm/schema/effects.js

@@ -0,0 +1,35 @@
+/**
+ * Builders for the fiber-engine reserved EFFECT directives — the `_`-prefixed keys the chain extracts
+ * from an evaluated effect result and applies as side effects (then strips from the merged state).
+ *
+ * Place the returned fragment INSIDE the state-update map of a `merge` effect, so the directive rides in
+ * the evaluated result map (EffectExtractor reads it; StateMerger drops `_`-prefixed keys from state):
+ *
+ * ```ts
+ * effect: {
+ *   merge: [
+ *     { var: "state" },
+ *     { boundAt: { var: "$ordinal" }, ...addDependency({ var: "event.registryId" }) },
+ *   ],
+ * }
+ * ```
+ */
+/**
+ * `_addDependency` (#24): add — or re-activate — a runtime DYNAMIC dependency on `fiberId`, so that
+ * fiber's state appears in `machines.<fiberId>` for SUBSEQUENT transitions of this fiber. `fiberId` may
+ * be a literal UUID string or an expression (e.g. `{ var: "event.registryId" }`, `{ var: "state.registryId" }`).
+ * The ledger is append-only, idempotent (one entry per fiber), and engine-bounded (active + ledger caps).
+ * Because the `machines` context is built BEFORE the effect runs, the bound dependency is readable only
+ * from the NEXT transition onward (two-phase: bind, then read).
+ */
+export const addDependency = (fiberId) => ({
+    _addDependency: [{ fiberId }],
+});
+/**
+ * `_setDependencyActive` (#24): toggle a dynamic dependency's `active` flag. The entry is NEVER removed —
+ * deactivation simply drops it from the `machines` context (and it can be cheaply re-activated). `fiberId`
+ * may be a literal or an expression.
+ */
+export const setDependencyActive = (fiberId, active) => ({
+    _setDependencyActive: [{ fiberId, active }],
+});

package/dist/esm/schema/fiber-app.js

@@ -68,8 +68,13 @@ export function toProtoDefinition(def) {
             eventName: t.eventName,
             guard: t.guard, // Required - Scala has no default
             effect: t.effect, // Required - Scala has no default
-            // dependencies has default Set.empty in Scala, so omit if empty
-            ...(t.dependencies?.length && { dependencies: [...t.dependencies] }),
+            // Chain `Transition.dependencies: Set[UUID]` is REQUIRED (no Scala default), and each
+            // element must be a fiber UUID string. A `DependencySpec` object is a build-time-only
+            // authoring affordance with no wire representation (concrete dependency UUIDs are per
+            // instance, not part of the definition template), so drop non-string entries. Always
+            // emit the array — omitting a no-default field diverges the canonical and the chain
+            // rejects the whole update (InvalidSignature / decode failure).
+            dependencies: (t.dependencies ?? []).filter((d) => typeof d === 'string'),
         })),
     };
     // Copy states (only id and isFinal)
@@ -79,9 +84,11 @@ export function toProtoDefinition(def) {
             isFinal: state.isFinal,
         };
     }
-    // Pass metadata through unchanged - it's an optional unstructured object
-    if (def.metadata) {
-        protoDef.metadata = def.metadata;
-    }
+    // NOTE: `def.metadata` is the SDK's FiberAppMetadata (name/app/type/version — app-routing
+    // packaging info), NOT chain metadata. Projecting it onto the wire would make the on-chain
+    // canonical + the registry `logicHash` depend on packaging fields (changing `description` would
+    // change the signed digest of an otherwise-identical machine), so it is deliberately NOT emitted
+    // (the chain's `StateMachineDefinition.metadata` stays absent → `None`). A caller that genuinely
+    // needs on-chain metadata sets `ProtoStateMachineDefinition.metadata` explicitly after conversion.
     return protoDef;
 }