@proto-kit/protocol 0.1.1-develop.456 → 0.1.1-develop.600

package/src/prover/block/accummulators/BlockHashMerkleTree.ts

@@ -0,0 +1,16 @@
+import { createMerkleTree } from "@proto-kit/common";
+import { Bool, Field, Poseidon, Provable, Struct } from "o1js";
+
+export class BlockHashMerkleTree extends createMerkleTree(16) {}
+export class BlockHashMerkleTreeWitness extends BlockHashMerkleTree.WITNESS {}
+
+export class BlockHashTreeEntry extends Struct({
+  blockHash: Field,
+  closed: Bool,
+  // TODO We could add startingEternalTransactionsHash here to offer
+  // a more trivial connection to the sequence state
+}) {
+  public hash(): Field {
+    return Poseidon.hash([this.blockHash, ...this.closed.toFields()]);
+  }
+}

package/src/settlement/ProvableSettlementHook.ts

@@ -0,0 +1,37 @@
+import { Field, UInt32 } from "o1js";
+
+import type { BlockProof } from "../prover/block/BlockProver";
+import { ProtocolModule } from "../protocol/ProtocolModule";
+import { NetworkState } from "../model/network/NetworkState";
+
+import type { SettlementContract } from "./SettlementContract";
+
+export type SettlementStateRecord = {
+  sequencerKey: Field;
+  lastSettlementL1Block: UInt32;
+
+  stateRoot: Field;
+  networkStateHash: Field;
+  blockHashRoot: Field;
+
+  promisedMessagesHash: Field;
+  honoredMessagesHash: Field;
+};
+
+export type SettlementHookInputs = {
+  blockProof: BlockProof;
+  fromNetworkState: NetworkState;
+  toNetworkState: NetworkState;
+  newPromisedMessagesHash: Field;
+  contractState: SettlementStateRecord;
+  currentL1Block: UInt32;
+};
+
+export abstract class ProvableSettlementHook<
+  Config
+> extends ProtocolModule<Config> {
+  public abstract beforeSettlement(
+    smartContract: SettlementContract,
+    inputs: SettlementHookInputs
+  ): void;
+}

package/src/settlement/SettlementContract.ts

@@ -0,0 +1,444 @@
+import {
+  AccountUpdate,
+  Bool,
+  Field,
+  method,
+  Mina,
+  Poseidon,
+  Proof,
+  Provable,
+  ProvableExtended,
+  PublicKey,
+  Reducer,
+  Signature,
+  SmartContract,
+  State,
+  state,
+  Struct,
+  TokenId,
+  UInt32,
+  UInt64,
+} from "o1js";
+import {
+  EMPTY_PUBLICKEY,
+  prefixToField,
+  RollupMerkleTree,
+  RollupMerkleTreeWitness,
+} from "@proto-kit/common";
+import { inject, injectable, injectAll } from "tsyringe";
+
+import { ProtocolModule } from "../protocol/ProtocolModule";
+import { BlockProver } from "../prover/block/BlockProver";
+import {
+  BlockProvable,
+  BlockProverPublicInput,
+  BlockProverPublicOutput,
+} from "../prover/block/BlockProvable";
+import { NetworkState } from "../model/network/NetworkState";
+import { BlockHashMerkleTree } from "../prover/block/accummulators/BlockHashMerkleTree";
+import { RuntimeTransaction } from "../model/transaction/RuntimeTransaction";
+import { Path } from "../model/Path";
+import { MinaActions, MinaEvents } from "../utils/MinaPrefixedProvableHashList";
+
+import {
+  ProvableSettlementHook,
+  SettlementHookInputs,
+  SettlementStateRecord,
+} from "./ProvableSettlementHook";
+
+class LazyBlockProof extends Proof<
+  BlockProverPublicInput,
+  BlockProverPublicOutput
+> {
+  public static publicInputType = BlockProverPublicInput;
+
+  public static publicOutputType = BlockProverPublicOutput;
+
+  public static tag: () => { name: string } = () => {
+    throw new Error("Tag not initialized yet");
+  };
+}
+
+export type SettlementMethodIdMapping = Record<`${string}.${string}`, bigint>;
+
+export class Deposit extends Struct({
+  address: PublicKey,
+  amount: UInt64,
+}) {}
+
+export class Withdrawal extends Struct({
+  address: PublicKey,
+  amount: UInt64,
+}) {
+  static dummy() {
+    return new Withdrawal({
+      address: EMPTY_PUBLICKEY,
+      amount: UInt64.from(0),
+    });
+  }
+}
+
+export const OUTGOING_MESSAGE_BATCH_SIZE = 1;
+
+export class OutgoingMessageArgument extends Struct({
+  witness: RollupMerkleTreeWitness,
+  value: Withdrawal,
+}) {
+  public static dummy(): OutgoingMessageArgument {
+    return new OutgoingMessageArgument({
+      witness: RollupMerkleTreeWitness.dummy(),
+      value: Withdrawal.dummy(),
+    });
+  }
+}
+
+export class OutgoingMessageArgumentBatch extends Struct({
+  arguments: Provable.Array(
+    OutgoingMessageArgument,
+    OUTGOING_MESSAGE_BATCH_SIZE
+  ),
+
+  isDummys: Provable.Array(Bool, OUTGOING_MESSAGE_BATCH_SIZE),
+}) {
+  public static fromMessages(providedArguments: OutgoingMessageArgument[]) {
+    const batch = providedArguments.slice();
+    const isDummys = batch.map(() => Bool(false));
+
+    while (batch.length < OUTGOING_MESSAGE_BATCH_SIZE) {
+      batch.push(OutgoingMessageArgument.dummy());
+      isDummys.push(Bool(true));
+    }
+
+    return new OutgoingMessageArgumentBatch({
+      arguments: batch,
+      isDummys,
+    });
+  }
+}
+
+// Some random prefix for the sequencer signature
+export const BATCH_SIGNATURE_PREFIX = prefixToField("pk-batchSignature");
+
+export const ACTIONS_EMPTY_HASH = Reducer.initialActionState;
+
+export class SettlementContract extends SmartContract {
+  @state(Field) public sequencerKey = State<Field>();
+  @state(UInt32) public lastSettlementL1Block = State<UInt32>();
+
+  @state(Field) public stateRoot = State<Field>();
+  @state(Field) public networkStateHash = State<Field>();
+  @state(Field) public blockHashRoot = State<Field>();
+
+  @state(Field) public promisedMessagesHash = State<Field>();
+  @state(Field) public honoredMessagesHash = State<Field>();
+
+  @state(Field) public outgoingMessageCursor = State<Field>();
+
+  public constructor(
+    address: PublicKey,
+    private readonly methodIdMappings: Record<string, bigint>,
+    private readonly hooks: ProvableSettlementHook<unknown>[],
+    private readonly withdrawalStatePath: [string, string],
+    private readonly incomingMessagesPaths: Record<
+      string,
+      `${string}.${string}`
+    >,
+    // 24 hours
+    private readonly escapeHatchSlotsInterval = (60 / 3) * 24
+  ) {
+    super(address);
+  }
+
+  @method
+  public initialize(sequencer: PublicKey) {
+    this.sequencerKey.getAndAssertEquals().assertEquals(Field(0));
+    this.stateRoot.getAndAssertEquals().assertEquals(Field(0));
+    this.blockHashRoot.getAndAssertEquals().assertEquals(Field(0));
+    this.networkStateHash.getAndAssertEquals().assertEquals(Field(0));
+    this.promisedMessagesHash.getAndAssertEquals().assertEquals(Field(0));
+    this.honoredMessagesHash.getAndAssertEquals().assertEquals(Field(0));
+
+    this.sequencerKey.set(sequencer.x);
+    this.stateRoot.set(Field(RollupMerkleTree.EMPTY_ROOT));
+    this.blockHashRoot.set(Field(BlockHashMerkleTree.EMPTY_ROOT));
+    this.networkStateHash.set(NetworkState.empty().hash());
+    this.promisedMessagesHash.set(ACTIONS_EMPTY_HASH);
+    this.honoredMessagesHash.set(ACTIONS_EMPTY_HASH);
+  }
+
+  @method
+  public settle(
+    blockProof: LazyBlockProof,
+    signature: Signature,
+    publicKey: PublicKey,
+    inputNetworkState: NetworkState,
+    outputNetworkState: NetworkState,
+    newPromisedMessagesHash: Field
+  ) {
+    // Verify the blockproof
+    blockProof.verify();
+
+    // Get and assert on-chain values
+    const stateRoot = this.stateRoot.getAndAssertEquals();
+    const networkStateHash = this.networkStateHash.getAndAssertEquals();
+    const blockHashRoot = this.blockHashRoot.getAndAssertEquals();
+    const sequencerKey = this.sequencerKey.getAndAssertEquals();
+    const promisedMessagesHash = this.promisedMessagesHash.getAndAssertEquals();
+    const honoredMessagesHash = this.honoredMessagesHash.getAndAssertEquals();
+    const lastSettlementL1Block =
+      this.lastSettlementL1Block.getAndAssertEquals();
+
+    // Get block height and use the lower bound for all ops
+    const minBlockIncluded = this.network.globalSlotSinceGenesis.get();
+    this.network.globalSlotSinceGenesis.assertBetween(
+      minBlockIncluded,
+      minBlockIncluded.add(20)
+    );
+
+    // Check signature/escape catch
+    publicKey.x.assertEquals(
+      sequencerKey,
+      "Sequencer public key witness not matching"
+    );
+    const signatureValid = signature.verify(publicKey, [
+      BATCH_SIGNATURE_PREFIX,
+      lastSettlementL1Block.value,
+    ]);
+    const escapeHatchActivated = lastSettlementL1Block
+      .add(UInt32.from(this.escapeHatchSlotsInterval))
+      .lessThan(minBlockIncluded);
+    signatureValid
+      .or(escapeHatchActivated)
+      .assertTrue(
+        "Sequencer signature not valid and escape hatch not activated"
+      );
+
+    // Assert correctness of networkState witness
+    inputNetworkState
+      .hash()
+      .assertEquals(networkStateHash, "InputNetworkState witness not valid");
+    outputNetworkState
+      .hash()
+      .assertEquals(
+        blockProof.publicOutput.networkStateHash,
+        "OutputNetworkState witness not valid"
+      );
+
+    blockProof.publicOutput.closed.assertEquals(
+      Bool(true),
+      "Supplied proof is not a closed BlockProof"
+    );
+
+    // Execute onSettlementHooks for additional checks
+    const stateRecord: SettlementStateRecord = {
+      blockHashRoot,
+      stateRoot,
+      networkStateHash,
+      honoredMessagesHash,
+      lastSettlementL1Block,
+      promisedMessagesHash,
+      sequencerKey,
+    };
+    const inputs: SettlementHookInputs = {
+      blockProof,
+      contractState: stateRecord,
+      newPromisedMessagesHash,
+      fromNetworkState: inputNetworkState,
+      toNetworkState: outputNetworkState,
+      currentL1Block: minBlockIncluded,
+    };
+    this.hooks.forEach((hook) => {
+      hook.beforeSettlement(this, inputs);
+    });
+
+    // Apply blockProof
+    stateRoot.assertEquals(
+      blockProof.publicInput.stateRoot,
+      "Input state root not matching"
+    );
+    networkStateHash.assertEquals(
+      blockProof.publicInput.networkStateHash,
+      "Input networkStateHash not matching"
+    );
+    blockHashRoot.assertEquals(
+      blockProof.publicInput.blockHashRoot,
+      "Input blockHashRoot not matching"
+    );
+    this.stateRoot.set(blockProof.publicOutput.stateRoot);
+    this.networkStateHash.set(blockProof.publicOutput.networkStateHash);
+    this.blockHashRoot.set(blockProof.publicOutput.blockHashRoot);
+
+    // Assert and apply deposit commitments
+    promisedMessagesHash.assertEquals(
+      blockProof.publicOutput.incomingMessagesHash,
+      "Promised messages not honored"
+    );
+    this.honoredMessagesHash.set(promisedMessagesHash);
+
+    // Assert and apply new promisedMessagesHash
+    this.self.account.actionState.assertEquals(newPromisedMessagesHash);
+    this.promisedMessagesHash.set(newPromisedMessagesHash);
+
+    this.lastSettlementL1Block.set(minBlockIncluded);
+  }
+
+  private dispatchMessage<Type>(
+    methodId: Field,
+    value: Type,
+    valueType: ProvableExtended<Type>
+  ) {
+    const args = valueType.toFields(value);
+    // Should be the same as RuntimeTransaction.hash
+    const argsHash = Poseidon.hash(args);
+    const runtimeTransaction = RuntimeTransaction.fromMessage({
+      methodId,
+      argsHash,
+    });
+
+    // Append tx to incomingMessagesHash
+    const actionData = runtimeTransaction.hashData();
+    const actionHash = MinaActions.actionHash(actionData);
+
+    this.self.body.actions = {
+      hash: actionHash,
+      data: [actionData],
+    };
+
+    const eventHash = MinaEvents.eventHash(args);
+    this.self.body.events = {
+      hash: eventHash,
+      data: [args],
+    };
+  }
+
+  @method
+  public deposit(amount: UInt64) {
+    // Save this, since otherwise it would be a second witness later,
+    // which could be a different values than the first
+    const sender = this.sender;
+
+    // Credit the amount to the bridge contract
+    this.self.balance.addInPlace(amount);
+
+    const action = new Deposit({
+      address: sender,
+      amount,
+    });
+    const methodId = Field(
+      this.methodIdMappings[this.incomingMessagesPaths["deposit"]]
+    );
+    this.dispatchMessage(methodId.toConstant(), action, Deposit);
+  }
+
+  @method
+  public rollupOutgoingMessages(batch: OutgoingMessageArgumentBatch) {
+    let counter = this.outgoingMessageCursor.getAndAssertEquals();
+    const stateRoot = this.stateRoot.getAndAssertEquals();
+
+    const [withdrawalModule, withdrawalStateName] = this.withdrawalStatePath;
+    const mapPath = Path.fromProperty(withdrawalModule, withdrawalStateName);
+
+    let accountCreationFeePaid = Field(0);
+
+    for (let i = 0; i < OUTGOING_MESSAGE_BATCH_SIZE; i++) {
+      const args = batch.arguments[i];
+
+      // Check witness
+      const path = Path.fromKey(mapPath, Field, counter);
+
+      args.witness
+        .checkMembership(
+          stateRoot,
+          path,
+          Poseidon.hash(Withdrawal.toFields(args.value))
+        )
+        .assertTrue("Provided Withdrawal witness not valid");
+
+      // Process message
+      const { address, amount } = args.value;
+      const isDummy = address.equals(this.address);
+
+      const tokenAu = this.token.mint({ address, amount });
+      const isNewAccount = tokenAu.account.isNew.getAndAssertEquals();
+      tokenAu.body.balanceChange.magnitude =
+        tokenAu.body.balanceChange.magnitude.sub(
+          Provable.if(
+            isNewAccount,
+            Mina.accountCreationFee().toConstant(),
+            UInt64.zero
+          )
+        );
+
+      accountCreationFeePaid = accountCreationFeePaid.add(
+        Provable.if(isNewAccount, Field(1e9), Field(0))
+      );
+
+      counter = counter.add(Provable.if(isDummy, Field(0), Field(1)));
+    }
+
+    this.balance.subInPlace(UInt64.from(accountCreationFeePaid));
+
+    this.outgoingMessageCursor.set(counter);
+  }
+
+  @method
+  public redeem(additionUpdate: AccountUpdate) {
+    additionUpdate.body.tokenId.assertEquals(
+      TokenId.default,
+      "Tokenid not default token"
+    );
+    additionUpdate.body.balanceChange.sgn
+      .isPositive()
+      .assertTrue("Sign not correct");
+    const amount = additionUpdate.body.balanceChange.magnitude;
+
+    // Burn tokens
+    this.token.burn({
+      address: additionUpdate.publicKey,
+      amount,
+    });
+
+    // Send mina
+    this.approve(additionUpdate);
+    this.balance.subInPlace(amount);
+  }
+}
+
+export interface SettlementContractModuleConfig {
+  withdrawalStatePath: `${string}.${string}`;
+  withdrawalMethodPath: `${string}.${string}`;
+  incomingMessagesMethods: Record<string, `${string}.${string}`>;
+}
+
+@injectable()
+export class SettlementContractModule extends ProtocolModule<SettlementContractModuleConfig> {
+  public constructor(
+    @injectAll("ProvableSettlementHook")
+    private readonly hooks: ProvableSettlementHook<unknown>[],
+    @inject("BlockProver")
+    private readonly blockProver: BlockProvable
+  ) {
+    super();
+    LazyBlockProof.tag = blockProver.zkProgrammable.zkProgram.Proof.tag;
+  }
+
+  public getContractClass(): typeof SettlementContract {
+    return SettlementContract;
+  }
+
+  public createContract(
+    address: PublicKey,
+    methodIdMappings: SettlementMethodIdMapping
+  ): SettlementContract {
+    // We know that this returns [string, string], but TS can't infer that
+    const withdrawalPath = this.config.withdrawalStatePath.split(".");
+
+    return new SettlementContract(
+      address,
+      methodIdMappings,
+      this.hooks,
+      [withdrawalPath[0], withdrawalPath[1]],
+      this.config.incomingMessagesMethods
+    );
+  }
+}

package/src/settlement/modules/NetworkStateSettlementModule.ts

@@ -0,0 +1,39 @@
+import { UInt64 } from "o1js";
+
+import {
+  ProvableSettlementHook,
+  SettlementHookInputs,
+} from "../ProvableSettlementHook";
+import { SettlementContract } from "../SettlementContract";
+
+type NetworkStateSettlementModuleConfig = {
+  blocksPerL1Block: UInt64;
+};
+
+export class NetworkStateSettlementModule extends ProvableSettlementHook<NetworkStateSettlementModuleConfig> {
+  public beforeSettlement(
+    smartContract: SettlementContract,
+    {
+      blockProof,
+      fromNetworkState,
+      toNetworkState,
+      contractState,
+      currentL1Block,
+    }: SettlementHookInputs
+  ): void {
+    const { lastSettlementL1Block } = contractState;
+
+    const blocksPerL1Block = this.config.blocksPerL1Block.toConstant();
+
+    const numL1Blocks = currentL1Block.sub(lastSettlementL1Block);
+    const expectedHeightDiff = numL1Blocks.toUInt64().mul(blocksPerL1Block);
+
+    const actualHeightDiff = toNetworkState.block.height.sub(
+      fromNetworkState.block.height
+    );
+
+    const acceptableDerivation = numL1Blocks.mul(1).div(10);
+
+    // TODO Check within bounds efficiently
+  }
+}

package/src/state/context/RuntimeMethodExecutionContext.ts

@@ -1,4 +1,4 @@
-import { Bool } from "o1js";
+import { Bool, Provable, Struct } from "o1js";
 import { singleton } from "tsyringe";
 import {
   ProvableMethodExecutionContext,
@@ -29,6 +29,11 @@ export interface RuntimeMethodExecutionData {
   networkState: NetworkState;
 }
 
+export class RuntimeMethodExecutionDataStruct extends Struct({
+  transaction: RuntimeTransaction,
+  networkState: NetworkState,
+}) {}
+
 /**
  * Execution context used to wrap runtime module methods,
  * allowing them to post relevant information (such as execution status)
@@ -93,6 +98,18 @@ export class RuntimeMethodExecutionContext extends ProvableMethodExecutionContex
     this.input = input;
   }
 
+  public witnessInput(): RuntimeMethodExecutionDataStruct {
+    this.assertSetupCalled();
+    return Provable.witness(RuntimeMethodExecutionDataStruct, () => {
+      // TODO Is that right? Or this.current().input
+      const { transaction, networkState } = this.input!;
+      return new RuntimeMethodExecutionDataStruct({
+        networkState,
+        transaction,
+      });
+    });
+  }
+
   public setSimulated(simulated: boolean) {
     this.isSimulated = simulated;
   }

package/src/utils/MinaPrefixedProvableHashList.ts

@@ -0,0 +1,72 @@
+import { Field, FlexibleProvablePure, Poseidon } from "o1js";
+import { hashWithPrefix, prefixToField } from "@proto-kit/common";
+
+import { ProvableHashList } from "./ProvableHashList";
+
+function salt(prefix: string) {
+  return Poseidon.update(
+    [Field(0), Field(0), Field(0)],
+    [prefixToField(prefix)]
+  ) as [Field, Field, Field];
+}
+
+export const MINA_EVENT_PREFIXES = {
+  event: "MinaZkappEvent******",
+  events: "MinaZkappEvents*****",
+  sequenceEvents: "MinaZkappSeqEvents**",
+} as const;
+
+export function emptyActions(): Field {
+  return salt("MinaZkappActionsEmpty")[0];
+}
+
+export function emptyEvents(): Field {
+  return salt("MinaZkappEventsEmpty")[0];
+}
+
+export class MinaActions {
+  static actionHash(
+    action: Field[],
+    previousHash: Field = emptyActions()
+  ): Field {
+    const actionDataHash = hashWithPrefix(MINA_EVENT_PREFIXES.event, action);
+    return hashWithPrefix(MINA_EVENT_PREFIXES.sequenceEvents, [
+      previousHash,
+      actionDataHash,
+    ]);
+  }
+}
+
+export class MinaEvents {
+  static eventHash(event: Field[], previousHash: Field = emptyEvents()): Field {
+    const actionDataHash = hashWithPrefix(MINA_EVENT_PREFIXES.event, event);
+    return hashWithPrefix(MINA_EVENT_PREFIXES.events, [
+      previousHash,
+      actionDataHash,
+    ]);
+  }
+}
+
+export class MinaPrefixedProvableHashList<
+  Value
+> extends ProvableHashList<Value> {
+  public constructor(
+    valueType: FlexibleProvablePure<Value>,
+    public readonly prefix: string,
+    internalCommitment: Field = Field(0)
+  ) {
+    super(valueType, internalCommitment);
+  }
+
+  protected hash(elements: Field[]): Field {
+    const init = salt(this.prefix);
+    const digest = Poseidon.update(init, elements);
+    return digest[0];
+  }
+}
+
+export class MinaActionsHashList extends MinaPrefixedProvableHashList<Field> {
+  public constructor(internalCommitment: Field = Field(0)) {
+    super(Field, MINA_EVENT_PREFIXES.sequenceEvents, internalCommitment);
+  }
+}

package/test/BlockProver.test.ts

@@ -22,13 +22,12 @@ import { UnsignedTransaction } from "@proto-kit/sequencer";
 import { AccountStateModule } from "../src/blockmodules/AccountStateModule";
 import { container } from "tsyringe";
 import {
-  BlockModule,
   DefaultProvableHashList,
   MethodPublicOutput,
   NetworkState,
   Protocol,
   ProtocolMethodExecutionContext,
-  ProtocolTransaction,
+  SignedTransaction,
   ProvableStateTransition,
   RuntimeTransaction,
   StateTransitionProver,
@@ -101,7 +100,7 @@ describe("blockProver", () => {
     fromStateRoot: Field,
     toStateRoot: Field,
     protocolHash: Field,
-    tx: ProtocolTransaction,
+    tx: SignedTransaction,
     networkState: NetworkState
   ): BlockProverProofPair {
     const transactionHash =

package/src/model/transaction/ProtocolTransaction.ts

@@ -1,25 +0,0 @@
-import { Bool, Field, PublicKey, Signature, Struct, UInt64 } from "o1js";
-
-export class ProtocolTransaction extends Struct({
-  methodId: Field,
-  nonce: UInt64,
-  sender: PublicKey,
-  argsHash: Field,
-  signature: Signature,
-}) {
-  public static getSignatureData(args: {
-    methodId: Field;
-    nonce: UInt64;
-    argsHash: Field;
-  }): Field[] {
-    return [args.methodId, ...args.nonce.toFields(), args.argsHash];
-  }
-
-  public getSignatureData(): Field[] {
-    return ProtocolTransaction.getSignatureData(this);
-  }
-
-  public validateSignature(): Bool {
-    return this.signature.verify(this.sender, this.getSignatureData());
-  }
-}