@rolly-dev/witness-core 1.1.1 → 1.4.0

package/index.d.ts

@@ -129,13 +129,13 @@ export interface ProcessTxRequest {
   userId: number
   amount: string
   winAmount?: string
-  userAddress?: Buffer
   /**
-   * `Poseidon2(recipient_address)[0..2]` as 16 little-endian bytes (2 limbs)
-   * — the payout counterparty (hot wallet) the client Schnorr-signs. Absent
-   * for operator / non-authenticated tx.
+   * 20-byte EVM address (deposit / withdrawal / key register). For a
+   * withdrawal this is the payout destination the client Schnorr-signed; the
+   * engine derives the slot's `recipient_addr_hash` from it, so the
+   * signature verifies only against the address that is actually paid.
    */
-  recipientAddrHash?: Buffer
+  userAddress?: Buffer
   newPkHash?: Buffer
   /**
    * Client authorization signature bytes, forwarded verbatim (opaque here).
@@ -166,7 +166,21 @@ export interface ProcessTxResult {
   newBalance: string
   available: string
   newCredit: string
+  /**
+   * Full post-tx leaf nonce (`account_lane · 2^40 + game_lane`) — the value
+   * committed in the leaf / pubdata. Clients never sign this directly.
+   */
   newNonce: string
+  /**
+   * Post-tx GAME lane — the counter the next `in_house_bet` / `crash_settle`
+   * signature must carry.
+   */
+  newGameNonce: string
+  /**
+   * Post-tx ACCOUNT lane — the counter the next withdrawal / transfer /
+   * key-registration signature must carry.
+   */
+  newAccountNonce: string
   winAmount: string
   random?: string
   nextSeedHash?: string
@@ -298,7 +312,23 @@ export declare class MerkleEngine {
   getTl(): bigint
   getBalance(userId: number): bigint
   getCredit(userId: number): bigint
+  /**
+   * Full packed leaf nonce (`account_lane · 2^40 + game_lane`) — the pubdata
+   * value. For what a client must SIGN use [`Self::get_game_nonce`] /
+   * [`Self::get_account_nonce`].
+   */
   getNonce(userId: number): bigint
+  /**
+   * Game-lane counter the next `in_house_bet` / `crash_settle` signature
+   * must carry (`leaf_nonce mod 2^40`).
+   */
+  getGameNonce(userId: number): bigint
+  /**
+   * Account-lane counter the next withdrawal / transfer / key-registration
+   * signature must carry (`leaf_nonce >> 40`). Bets never move it, so a
+   * withdrawal signed against it stays valid while the user keeps playing.
+   */
+  getAccountNonce(userId: number): bigint
   /** Spendable balance minus all frozen buckets (withdrawal + game locks). */
   getAvailable(userId: number): bigint
   getSeedHash(userId: number): Buffer
@@ -355,10 +385,12 @@ export declare class MerkleEngine {
   hasInitSeedReservation(userId: number): boolean
   /**
    * Open a crash-round auth lock for `user_id`: while set, `process_tx`
-   * rejects any nonce-bumping tx (`in_house_bet` / `withdrawal` / `transfer`
-   * / `key_register`) with `CrashRoundOpen`, so the account's pre-signed
-   * `crash_settle` auto-cashout keeps its bound nonce. Called by the crash
-   * game when a bet is placed. NON-consensus; idempotent.
+   * rejects a game-lane tx (`in_house_bet`) or a key rotation
+   * (`key_register`) with `CrashRoundOpen`, so the account's pre-signed
+   * `crash_settle` auto-cashout keeps its bound game-lane nonce and signing
+   * key. Account-lane withdrawal / transfer are NOT blocked — they move a
+   * counter the cashout never signed. Called by the crash game when a bet is
+   * placed. NON-consensus; idempotent.
    */
   lockCrashRound(userId: number): void
   /**

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@rolly-dev/witness-core",
-  "version": "1.1.1",
+  "version": "1.4.0",
   "description": "Authoritative native witness-state engine for Rolly ZK-Rollup (Node-API addon)",
   "main": "index.js",
   "types": "index.d.ts",