@sig-net/midnight-contract-deploy 0.0.3

package/dist/deploy-signet-contract.d.ts

@@ -0,0 +1,24 @@
+import { type TransactionIdentifier } from "./plumbing/wallet.ts";
+/** The outcome of a successful signet-contract deployment. */
+export interface SignetContractDeployment {
+    /** Address of the deployed signet contract on Midnight. */
+    contractAddress: string;
+    /** Identifier of the submitted deploy transaction. */
+    txId: TransactionIdentifier;
+}
+/**
+ * Deploy the signet contract: read config from `env`, build and prove the
+ * deploy transaction and submit it through a synced wallet. Progress is
+ * logged to the console. The one constructor argument is the MPC attestation
+ * key (`MPC_JUBJUB_PK`, "x,y" decimal or 0x-hex field coordinates),
+ * whose hash the contract seals — remote execution responses must be signed
+ * by it. Any funded wallet can deploy; nothing about the deployer is sealed.
+ *
+ * @param env - Environment map providing `DEPLOYER_SEED`,
+ *   `MPC_JUBJUB_PK` and the shared Midnight node configuration (see `getMidnightNodeConfig`).
+ * @returns The deployed contract address and deploy transaction id.
+ * @throws If `MPC_JUBJUB_PK` is missing/malformed, the deployer
+ *   wallet holds no funds, or submission fails.
+ */
+export declare function deploySignetContract(env?: Record<string, string | undefined>): Promise<SignetContractDeployment>;
+//# sourceMappingURL=deploy-signet-contract.d.ts.map

package/dist/deploy-signet-contract.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"deploy-signet-contract.d.ts","sourceRoot":"","sources":["../src/deploy-signet-contract.ts"],"names":[],"mappings":"AAaA,OAAO,EAIL,KAAK,qBAAqB,EAC3B,MAAM,sBAAsB,CAAC;AAM9B,8DAA8D;AAC9D,MAAM,WAAW,wBAAwB;IACvC,2DAA2D;IAC3D,eAAe,EAAE,MAAM,CAAC;IACxB,sDAAsD;IACtD,IAAI,EAAE,qBAAqB,CAAC;CAC7B;AAED;;;;;;;;;;;;;GAaG;AACH,wBAAsB,oBAAoB,CACxC,GAAG,GAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,CAAe,GACpD,OAAO,CAAC,wBAAwB,CAAC,CA2CnC"}

package/dist/deploy-signet-contract.js

@@ -0,0 +1,47 @@
+// Signet-contract deploy flow: builds, balances, proves and submits the
+// contract's deploy transaction using the generic plumbing in ./plumbing.
+// Everything contract-specific lives HERE: the MPC attestation key
+// constructor arg and the (empty) private state. Requires the contract
+// package's compiled assets to carry keys (its published dist/managed
+// always does; an in-repo checkout needs `yarn compile:zk`).
+import { parseJubjubPublicKey } from "@sig-net/midnight";
+import { assertDeployerFunded, buildDeployTransaction, getDeployConfig, } from "./plumbing/deploy.js";
+import { deriveAccountKeys, submitUnprovenTransaction, withSyncedWalletFacade, } from "./plumbing/wallet.js";
+import { createSignetContractPrivateState, signetContractCompiledContract, } from "./signet-contract-binding.js";
+/**
+ * Deploy the signet contract: read config from `env`, build and prove the
+ * deploy transaction and submit it through a synced wallet. Progress is
+ * logged to the console. The one constructor argument is the MPC attestation
+ * key (`MPC_JUBJUB_PK`, "x,y" decimal or 0x-hex field coordinates),
+ * whose hash the contract seals — remote execution responses must be signed
+ * by it. Any funded wallet can deploy; nothing about the deployer is sealed.
+ *
+ * @param env - Environment map providing `DEPLOYER_SEED`,
+ *   `MPC_JUBJUB_PK` and the shared Midnight node configuration (see `getMidnightNodeConfig`).
+ * @returns The deployed contract address and deploy transaction id.
+ * @throws If `MPC_JUBJUB_PK` is missing/malformed, the deployer
+ *   wallet holds no funds, or submission fails.
+ */
+export async function deploySignetContract(env = process.env) {
+    const deployConfig = getDeployConfig(env);
+    const { networkId } = deployConfig.midnightNodeConfig;
+    const mpcPkRaw = env.MPC_JUBJUB_PK?.trim();
+    if (!mpcPkRaw) {
+        throw new Error("MPC_JUBJUB_PK is required (the MPC attestation key, as \"x,y\")");
+    }
+    const mpcPk = parseJubjubPublicKey(mpcPkRaw);
+    const accountKeys = deriveAccountKeys(deployConfig.deployerSeed, networkId);
+    console.log(`deploying signet-contract to ${networkId} (${deployConfig.midnightNodeConfig.nodeUrl})`);
+    console.log(`mpc attestation key: x=${mpcPk.x} y=${mpcPk.y}`);
+    const { contractAddress, txId } = await withSyncedWalletFacade(accountKeys, deployConfig.midnightNodeConfig, async (facade, state) => {
+        assertDeployerFunded(state);
+        const deployTransaction = await buildDeployTransaction(signetContractCompiledContract, networkId, accountKeys.shieldedSecretKeys.coinPublicKey, createSignetContractPrivateState(), mpcPk);
+        console.log(`contract address (pre-submit): ${deployTransaction.contractAddress}`);
+        const submittedTxId = await submitUnprovenTransaction(facade, accountKeys, deployTransaction.serializedTransaction);
+        return { contractAddress: deployTransaction.contractAddress, txId: submittedTxId };
+    });
+    console.log(`submitted deploy tx ${txId}`);
+    console.log(`deployed signet-contract at ${contractAddress}`);
+    return { contractAddress, txId };
+}
+//# sourceMappingURL=deploy-signet-contract.js.map

package/dist/deploy-signet-contract.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"deploy-signet-contract.js","sourceRoot":"","sources":["../src/deploy-signet-contract.ts"],"names":[],"mappings":"AAAA,wEAAwE;AACxE,0EAA0E;AAC1E,mEAAmE;AACnE,uEAAuE;AACvE,sEAAsE;AACtE,6DAA6D;AAE7D,OAAO,EAAE,oBAAoB,EAAE,MAAM,mBAAmB,CAAC;AACzD,OAAO,EACL,oBAAoB,EACpB,sBAAsB,EACtB,eAAe,GAChB,MAAM,sBAAsB,CAAC;AAC9B,OAAO,EACL,iBAAiB,EACjB,yBAAyB,EACzB,sBAAsB,GAEvB,MAAM,sBAAsB,CAAC;AAC9B,OAAO,EACL,gCAAgC,EAChC,8BAA8B,GAC/B,MAAM,8BAA8B,CAAC;AAUtC;;;;;;;;;;;;;GAaG;AACH,MAAM,CAAC,KAAK,UAAU,oBAAoB,CACxC,MAA0C,OAAO,CAAC,GAAG;IAErD,MAAM,YAAY,GAAG,eAAe,CAAC,GAAG,CAAC,CAAC;IAC1C,MAAM,EAAE,SAAS,EAAE,GAAG,YAAY,CAAC,kBAAkB,CAAC;IAEtD,MAAM,QAAQ,GAAG,GAAG,CAAC,aAAa,EAAE,IAAI,EAAE,CAAC;IAC3C,IAAI,CAAC,QAAQ,EAAE,CAAC;QACd,MAAM,IAAI,KAAK,CAAC,iEAAiE,CAAC,CAAC;IACrF,CAAC;IACD,MAAM,KAAK,GAAG,oBAAoB,CAAC,QAAQ,CAAC,CAAC;IAE7C,MAAM,WAAW,GAAG,iBAAiB,CAAC,YAAY,CAAC,YAAY,EAAE,SAAS,CAAC,CAAC;IAE5E,OAAO,CAAC,GAAG,CAAC,gCAAgC,SAAS,KAAK,YAAY,CAAC,kBAAkB,CAAC,OAAO,GAAG,CAAC,CAAC;IACtG,OAAO,CAAC,GAAG,CAAC,0BAA0B,KAAK,CAAC,CAAC,MAAM,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC;IAE9D,MAAM,EAAE,eAAe,EAAE,IAAI,EAAE,GAAG,MAAM,sBAAsB,CAC5D,WAAW,EACX,YAAY,CAAC,kBAAkB,EAC/B,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,EAAE;QACtB,oBAAoB,CAAC,KAAK,CAAC,CAAC;QAE5B,MAAM,iBAAiB,GAAG,MAAM,sBAAsB,CACpD,8BAA8B,EAC9B,SAAS,EACT,WAAW,CAAC,kBAAkB,CAAC,aAAa,EAC5C,gCAAgC,EAAE,EAClC,KAAK,CACN,CAAC;QACF,OAAO,CAAC,GAAG,CAAC,kCAAkC,iBAAiB,CAAC,eAAe,EAAE,CAAC,CAAC;QAEnF,MAAM,aAAa,GAAG,MAAM,yBAAyB,CACnD,MAAM,EACN,WAAW,EACX,iBAAiB,CAAC,qBAAqB,CACxC,CAAC;QACF,OAAO,EAAE,eAAe,EAAE,iBAAiB,CAAC,eAAe,EAAE,IAAI,EAAE,aAAa,EAAE,CAAC;IACrF,CAAC,CACF,CAAC;IAEF,OAAO,CAAC,GAAG,CAAC,uBAAuB,IAAI,EAAE,CAAC,CAAC;IAC3C,OAAO,CAAC,GAAG,CAAC,+BAA+B,eAAe,EAAE,CAAC,CAAC;IAE9D,OAAO,EAAE,eAAe,EAAE,IAAI,EAAE,CAAC;AACnC,CAAC"}

package/dist/index.d.ts

@@ -0,0 +1,8 @@
+export * from "./deploy-signet-contract.ts";
+export * from "./signet-contract-binding.ts";
+export * from "./plumbing/network-id.ts";
+export * from "./plumbing/midnight-node-config.ts";
+export * from "./plumbing/seed.ts";
+export * from "./plumbing/wallet.ts";
+export * from "./plumbing/deploy.ts";
+//# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAOA,cAAc,6BAA6B,CAAC;AAC5C,cAAc,8BAA8B,CAAC;AAC7C,cAAc,0BAA0B,CAAC;AACzC,cAAc,oCAAoC,CAAC;AACnD,cAAc,oBAAoB,CAAC;AACnC,cAAc,sBAAsB,CAAC;AACrC,cAAc,sBAAsB,CAAC"}

package/dist/index.js

@@ -0,0 +1,14 @@
+// Deploy tooling for the central signet contract, self-contained for npm:
+// the operator deploy flow, the Node binding of @sig-net/midnight-contract
+// to its compiled assets, and the generic Midnight deploy/wallet plumbing
+// (config, seed parsing, key derivation, wallet facade, unproven-tx
+// build/submit) the flow is built from. The plumbing is generic on purpose —
+// any contract package's deploy script composes it.
+export * from "./deploy-signet-contract.js";
+export * from "./signet-contract-binding.js";
+export * from "./plumbing/network-id.js";
+export * from "./plumbing/midnight-node-config.js";
+export * from "./plumbing/seed.js";
+export * from "./plumbing/wallet.js";
+export * from "./plumbing/deploy.js";
+//# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,0EAA0E;AAC1E,2EAA2E;AAC3E,0EAA0E;AAC1E,oEAAoE;AACpE,6EAA6E;AAC7E,oDAAoD;AAEpD,cAAc,6BAA6B,CAAC;AAC5C,cAAc,8BAA8B,CAAC;AAC7C,cAAc,0BAA0B,CAAC;AACzC,cAAc,oCAAoC,CAAC;AACnD,cAAc,oBAAoB,CAAC;AACnC,cAAc,sBAAsB,CAAC;AACrC,cAAc,sBAAsB,CAAC"}

package/dist/plumbing/deploy.d.ts

@@ -0,0 +1,82 @@
+import { CompiledContract, Contract } from "@midnight-ntwrk/compact-js/effect";
+import type { FacadeState } from "@midnightntwrk/wallet-sdk-facade";
+import { type Types } from "effect";
+import { type MidnightNodeConfig } from "./midnight-node-config.ts";
+import type { NetworkId } from "./network-id.ts";
+/** Everything needed to perform a contract deploy: which stack to target, and which wallet pays for it. */
+export interface DeployConfig {
+    /** The stack (node/indexer/proof-server endpoints + network id) to deploy to. */
+    readonly midnightNodeConfig: MidnightNodeConfig;
+    /** Seed (hex or mnemonic) of the wallet that funds & signs the deploy. */
+    readonly deployerSeed: string;
+}
+/**
+ * Read a {@link DeployConfig} from the environment. Every variable is
+ * optional: node config per {@link getMidnightNodeConfig}, plus
+ * `DEPLOYER_SEED` (hex or mnemonic) defaulting to the genesis mint wallet.
+ *
+ * @param env - The environment to read from; defaults to `process.env`.
+ * @returns The resolved deploy configuration.
+ */
+export declare function getDeployConfig(env?: Record<string, string | undefined>): DeployConfig;
+/** An unproven contract-deploy transaction, ready to balance/sign/prove/submit via a wallet. */
+export interface DeployTransaction {
+    /** The contract address this deployment will create, known before submission. */
+    readonly contractAddress: string;
+    /** The serialized unproven transaction — see `submitUnprovenTransaction` in wallet.ts. */
+    readonly serializedTransaction: Uint8Array;
+}
+/**
+ * Bind a generated Compact contract to its witnesses and compiled assets.
+ *
+ * Thin typed wrapper over the compact-js `CompiledContract` combinators so
+ * contract packages need no direct compact-js dependency. Chained data-first
+ * on purpose: the witness/asset combinators rebuild the binding via object
+ * spread, which drops the prototype carrying `.pipe`.
+ *
+ * @param tag - Identifier for the binding (not the on-chain address), e.g. the contract name.
+ * @param ctor - The `Contract` class exported by the generated `managed/contract` module.
+ * @param witnesses - The contract's real witness implementations (from the package's `witnesses.ts`).
+ * @param managedDirPath - Absolute path to the compiler output dir (`contract/`, `zkir/`, `keys/`, `compiler/`).
+ * @returns The fully-bound {@link CompiledContract.CompiledContract}, ready for {@link buildDeployTransaction}.
+ */
+export declare function makeCompiledContract<C extends Contract.Contract<PS>, PS>(tag: string, ctor: Types.Ctor<C>, witnesses: Contract.Contract.Witnesses<C>, managedDirPath: string): CompiledContract.CompiledContract<C, PS>;
+/**
+ * Bind a generated Compact contract that declares NO witnesses to its
+ * compiled assets. Counterpart to {@link makeCompiledContract}: compact-js
+ * types `Contract.Witnesses<C>` as `never` when the generated witness shape
+ * is empty, so witness-less contracts must bind via `withVacantWitnesses`
+ * rather than passing an empty object.
+ *
+ * @param tag - Identifier for the binding (not the on-chain address), e.g. the contract name.
+ * @param ctor - The `Contract` class exported by the generated `managed/contract` module.
+ * @param managedDirPath - Absolute path to the compiler output dir (`contract/`, `zkir/`, `keys/`, `compiler/`).
+ * @returns The fully-bound {@link CompiledContract.CompiledContract}, ready for {@link buildDeployTransaction}.
+ */
+export declare function makeVacantCompiledContract<C extends Contract.Contract<PS>, PS>(tag: string, ctor: Types.Ctor<C>, managedDirPath: string): CompiledContract.CompiledContract<C, PS>;
+/**
+ * Build an UNPROVEN contract-deploy transaction: run the Compact constructor
+ * with `constructorArgs`, attach the verifier keys from the compiled assets,
+ * and wrap the resulting contract state in a deploy intent. Touches no
+ * network and no wallet — the only wallet-derived input is the deployer's
+ * coin public key, which feeds the constructor's context.
+ *
+ * @param compiledContract - The bound contract, from {@link makeCompiledContract}.
+ * @param networkId - The network the transaction targets.
+ * @param coinPublicKeyHex - The deploying wallet's Zswap coin public key (hex).
+ * @param initialPrivateState - The private state the constructor (and its witnesses, if any) runs against.
+ * @param constructorArgs - The contract's constructor arguments, statically typed per contract.
+ * @returns The deterministic contract address plus the serialized unproven transaction.
+ * @throws If the constructor traps, or the verifier keys are missing from the
+ * compiled assets (run `compile:zk` — the default `--skip-zk` output has none).
+ */
+export declare function buildDeployTransaction<C extends Contract.Contract<PS>, PS>(compiledContract: CompiledContract.CompiledContract<C, PS>, networkId: NetworkId, coinPublicKeyHex: string, initialPrivateState: PS, ...constructorArgs: Contract.Contract.InitializeParameters<C>): Promise<DeployTransaction>;
+/**
+ * Fail fast when the deployer wallet cannot pay for a transaction: fees are
+ * paid in DUST, which only generates on NIGHT registered for dust generation.
+ *
+ * @param state - The synced facade state to inspect (see `withSyncedWalletFacade` in wallet.ts).
+ * @throws If the deployer's spendable DUST balance is zero.
+ */
+export declare function assertDeployerFunded(state: FacadeState): void;
+//# sourceMappingURL=deploy.d.ts.map

package/dist/plumbing/deploy.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"deploy.d.ts","sourceRoot":"","sources":["../../src/plumbing/deploy.ts"],"names":[],"mappings":"AAQA,OAAO,EAAE,gBAAgB,EAAE,QAAQ,EAAsB,MAAM,mCAAmC,CAAC;AAKnG,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,kCAAkC,CAAC;AACpE,OAAO,EAAyB,KAAK,KAAK,EAAE,MAAM,QAAQ,CAAC;AAE3D,OAAO,EAAyB,KAAK,kBAAkB,EAAE,MAAM,2BAA2B,CAAC;AAC3F,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,iBAAiB,CAAC;AAEjD,2GAA2G;AAC3G,MAAM,WAAW,YAAY;IAC3B,iFAAiF;IACjF,QAAQ,CAAC,kBAAkB,EAAE,kBAAkB,CAAC;IAChD,0EAA0E;IAC1E,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;CAC/B;AAMD;;;;;;;GAOG;AACH,wBAAgB,eAAe,CAAC,GAAG,GAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,CAAe,GAAG,YAAY,CAKnG;AAED,gGAAgG;AAChG,MAAM,WAAW,iBAAiB;IAChC,iFAAiF;IACjF,QAAQ,CAAC,eAAe,EAAE,MAAM,CAAC;IACjC,0FAA0F;IAC1F,QAAQ,CAAC,qBAAqB,EAAE,UAAU,CAAC;CAC5C;AAED;;;;;;;;;;;;;GAaG;AACH,wBAAgB,oBAAoB,CAAC,CAAC,SAAS,QAAQ,CAAC,QAAQ,CAAC,EAAE,CAAC,EAAE,EAAE,EACtE,GAAG,EAAE,MAAM,EACX,IAAI,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EACnB,SAAS,EAAE,QAAQ,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC,CAAC,EACzC,cAAc,EAAE,MAAM,GACrB,gBAAgB,CAAC,gBAAgB,CAAC,CAAC,EAAE,EAAE,CAAC,CAI1C;AAED;;;;;;;;;;;GAWG;AACH,wBAAgB,0BAA0B,CAAC,CAAC,SAAS,QAAQ,CAAC,QAAQ,CAAC,EAAE,CAAC,EAAE,EAAE,EAC5E,GAAG,EAAE,MAAM,EACX,IAAI,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EACnB,cAAc,EAAE,MAAM,GACrB,gBAAgB,CAAC,gBAAgB,CAAC,CAAC,EAAE,EAAE,CAAC,CAI1C;AAKD;;;;;;;;;;;;;;;GAeG;AACH,wBAAsB,sBAAsB,CAAC,CAAC,SAAS,QAAQ,CAAC,QAAQ,CAAC,EAAE,CAAC,EAAE,EAAE,EAC9E,gBAAgB,EAAE,gBAAgB,CAAC,gBAAgB,CAAC,CAAC,EAAE,EAAE,CAAC,EAC1D,SAAS,EAAE,SAAS,EACpB,gBAAgB,EAAE,MAAM,EACxB,mBAAmB,EAAE,EAAE,EACvB,GAAG,eAAe,EAAE,QAAQ,CAAC,QAAQ,CAAC,oBAAoB,CAAC,CAAC,CAAC,GAC5D,OAAO,CAAC,iBAAiB,CAAC,CAiC5B;AAED;;;;;;GAMG;AACH,wBAAgB,oBAAoB,CAAC,KAAK,EAAE,WAAW,GAAG,IAAI,CAQ7D"}

package/dist/plumbing/deploy.js

@@ -0,0 +1,125 @@
+// Contract-deploy plumbing shared by every contract package's deploy script
+// (ported from midday app/ui/lib/actions/buildDeployTransaction.ts): the
+// deploy config, the compiled-contract binding, and building the unproven
+// deploy transaction. Everything contract-SPECIFIC — constructor args, witness
+// implementations, initial private state — stays in the contract package's own
+// deploy.ts and arrives here through the type parameters.
+import { NodeContext } from "@effect/platform-node";
+import { CompiledContract, Contract, ContractExecutable } from "@midnight-ntwrk/compact-js/effect";
+import { ZKFileConfiguration } from "@midnight-ntwrk/compact-js-node/effect";
+import * as ledger from "@midnightntwrk/ledger-v9";
+import * as Configuration from "@midnight-ntwrk/platform-js/effect/Configuration";
+import * as CoinPublicKey from "@midnight-ntwrk/platform-js/effect/CoinPublicKey";
+import { Effect, Layer, Option } from "effect";
+import { getMidnightNodeConfig } from "./midnight-node-config.js";
+// Pre-funded genesis wallet of the local standalone stack — the default
+// deployer for development.
+const GENESIS_MINT_WALLET_SEED = "0000000000000000000000000000000000000000000000000000000000000001";
+/**
+ * Read a {@link DeployConfig} from the environment. Every variable is
+ * optional: node config per {@link getMidnightNodeConfig}, plus
+ * `DEPLOYER_SEED` (hex or mnemonic) defaulting to the genesis mint wallet.
+ *
+ * @param env - The environment to read from; defaults to `process.env`.
+ * @returns The resolved deploy configuration.
+ */
+export function getDeployConfig(env = process.env) {
+    return {
+        midnightNodeConfig: getMidnightNodeConfig(env),
+        deployerSeed: env.DEPLOYER_SEED?.trim() || GENESIS_MINT_WALLET_SEED,
+    };
+}
+/**
+ * Bind a generated Compact contract to its witnesses and compiled assets.
+ *
+ * Thin typed wrapper over the compact-js `CompiledContract` combinators so
+ * contract packages need no direct compact-js dependency. Chained data-first
+ * on purpose: the witness/asset combinators rebuild the binding via object
+ * spread, which drops the prototype carrying `.pipe`.
+ *
+ * @param tag - Identifier for the binding (not the on-chain address), e.g. the contract name.
+ * @param ctor - The `Contract` class exported by the generated `managed/contract` module.
+ * @param witnesses - The contract's real witness implementations (from the package's `witnesses.ts`).
+ * @param managedDirPath - Absolute path to the compiler output dir (`contract/`, `zkir/`, `keys/`, `compiler/`).
+ * @returns The fully-bound {@link CompiledContract.CompiledContract}, ready for {@link buildDeployTransaction}.
+ */
+export function makeCompiledContract(tag, ctor, witnesses, managedDirPath) {
+    const base = CompiledContract.make(tag, ctor);
+    const withWitnesses = CompiledContract.withWitnesses(base, witnesses);
+    return CompiledContract.withCompiledFileAssets(withWitnesses, managedDirPath);
+}
+/**
+ * Bind a generated Compact contract that declares NO witnesses to its
+ * compiled assets. Counterpart to {@link makeCompiledContract}: compact-js
+ * types `Contract.Witnesses<C>` as `never` when the generated witness shape
+ * is empty, so witness-less contracts must bind via `withVacantWitnesses`
+ * rather than passing an empty object.
+ *
+ * @param tag - Identifier for the binding (not the on-chain address), e.g. the contract name.
+ * @param ctor - The `Contract` class exported by the generated `managed/contract` module.
+ * @param managedDirPath - Absolute path to the compiler output dir (`contract/`, `zkir/`, `keys/`, `compiler/`).
+ * @returns The fully-bound {@link CompiledContract.CompiledContract}, ready for {@link buildDeployTransaction}.
+ */
+export function makeVacantCompiledContract(tag, ctor, managedDirPath) {
+    const base = CompiledContract.make(tag, ctor);
+    const vacant = CompiledContract.withVacantWitnesses(base);
+    return CompiledContract.withCompiledFileAssets(vacant, managedDirPath);
+}
+// How long the deploy intent stays valid before it must be re-built.
+const DEPLOY_TTL_MS = 30 * 60 * 1000;
+/**
+ * Build an UNPROVEN contract-deploy transaction: run the Compact constructor
+ * with `constructorArgs`, attach the verifier keys from the compiled assets,
+ * and wrap the resulting contract state in a deploy intent. Touches no
+ * network and no wallet — the only wallet-derived input is the deployer's
+ * coin public key, which feeds the constructor's context.
+ *
+ * @param compiledContract - The bound contract, from {@link makeCompiledContract}.
+ * @param networkId - The network the transaction targets.
+ * @param coinPublicKeyHex - The deploying wallet's Zswap coin public key (hex).
+ * @param initialPrivateState - The private state the constructor (and its witnesses, if any) runs against.
+ * @param constructorArgs - The contract's constructor arguments, statically typed per contract.
+ * @returns The deterministic contract address plus the serialized unproven transaction.
+ * @throws If the constructor traps, or the verifier keys are missing from the
+ * compiled assets (run `compile:zk` — the default `--skip-zk` output has none).
+ */
+export async function buildDeployTransaction(compiledContract, networkId, coinPublicKeyHex, initialPrivateState, ...constructorArgs) {
+    // initialize() needs the deployer's coin public key (for the constructor
+    // context) and a signing key for the contract maintenance authority.
+    // Option.none() makes the SDK sample a fresh CMA key (discarded — the
+    // contract can't be maintained later, which is fine for now).
+    const keysLayer = Layer.succeed(Configuration.Keys, {
+        coinPublicKey: CoinPublicKey.Hex(coinPublicKeyHex),
+        getSigningKey: () => Option.none(),
+    });
+    // Run the contract constructor and attach verifier keys → initial ContractState.
+    const deployResult = await Effect.runPromise(ContractExecutable.make(compiledContract)
+        .initialize(initialPrivateState, ...constructorArgs)
+        .pipe(Effect.provide(ZKFileConfiguration.layer(CompiledContract.getCompiledAssetsPath(compiledContract))), Effect.provide(NodeContext.layer), Effect.provide(keysLayer)));
+    // `initialize` yields an onchain-runtime ContractState; bridge it to the
+    // ledger's ContractState (separate package/type) via its serialized form.
+    const contractState = ledger.ContractState.deserialize(deployResult.public.contractState.serialize());
+    const deploy = new ledger.ContractDeploy(contractState);
+    const intent = ledger.Intent.new(new Date(Date.now() + DEPLOY_TTL_MS)).addDeploy(deploy);
+    const transaction = ledger.Transaction.fromPartsRandomized(networkId, undefined, undefined, intent);
+    return {
+        contractAddress: deploy.address,
+        serializedTransaction: transaction.serialize(),
+    };
+}
+/**
+ * Fail fast when the deployer wallet cannot pay for a transaction: fees are
+ * paid in DUST, which only generates on NIGHT registered for dust generation.
+ *
+ * @param state - The synced facade state to inspect (see `withSyncedWalletFacade` in wallet.ts).
+ * @throws If the deployer's spendable DUST balance is zero.
+ */
+export function assertDeployerFunded(state) {
+    const dust = state.dust.balance(new Date());
+    if (dust > 0n)
+        return;
+    const night = Object.values(state.unshielded.balances).reduce((sum, value) => sum + value, 0n);
+    throw new Error(`deployer wallet has no DUST to pay fees (NIGHT balance: ${night}). ` +
+        "Fund the wallet with NIGHT and register it for dust generation, then retry.");
+}
+//# sourceMappingURL=deploy.js.map

package/dist/plumbing/deploy.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"deploy.js","sourceRoot":"","sources":["../../src/plumbing/deploy.ts"],"names":[],"mappings":"AAAA,4EAA4E;AAC5E,yEAAyE;AACzE,0EAA0E;AAC1E,+EAA+E;AAC/E,+EAA+E;AAC/E,0DAA0D;AAE1D,OAAO,EAAE,WAAW,EAAE,MAAM,uBAAuB,CAAC;AACpD,OAAO,EAAE,gBAAgB,EAAE,QAAQ,EAAE,kBAAkB,EAAE,MAAM,mCAAmC,CAAC;AACnG,OAAO,EAAE,mBAAmB,EAAE,MAAM,wCAAwC,CAAC;AAC7E,OAAO,KAAK,MAAM,MAAM,0BAA0B,CAAC;AACnD,OAAO,KAAK,aAAa,MAAM,kDAAkD,CAAC;AAClF,OAAO,KAAK,aAAa,MAAM,kDAAkD,CAAC;AAElF,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAc,MAAM,QAAQ,CAAC;AAE3D,OAAO,EAAE,qBAAqB,EAA2B,MAAM,2BAA2B,CAAC;AAW3F,wEAAwE;AACxE,4BAA4B;AAC5B,MAAM,wBAAwB,GAAG,kEAAkE,CAAC;AAEpG;;;;;;;GAOG;AACH,MAAM,UAAU,eAAe,CAAC,MAA0C,OAAO,CAAC,GAAG;IACnF,OAAO;QACL,kBAAkB,EAAE,qBAAqB,CAAC,GAAG,CAAC;QAC9C,YAAY,EAAE,GAAG,CAAC,aAAa,EAAE,IAAI,EAAE,IAAI,wBAAwB;KACpE,CAAC;AACJ,CAAC;AAUD;;;;;;;;;;;;;GAaG;AACH,MAAM,UAAU,oBAAoB,CAClC,GAAW,EACX,IAAmB,EACnB,SAAyC,EACzC,cAAsB;IAEtB,MAAM,IAAI,GAAG,gBAAgB,CAAC,IAAI,CAAQ,GAAG,EAAE,IAAI,CAAC,CAAC;IACrD,MAAM,aAAa,GAAG,gBAAgB,CAAC,aAAa,CAAC,IAAI,EAAE,SAAS,CAAC,CAAC;IACtE,OAAO,gBAAgB,CAAC,sBAAsB,CAAC,aAAa,EAAE,cAAc,CAAC,CAAC;AAChF,CAAC;AAED;;;;;;;;;;;GAWG;AACH,MAAM,UAAU,0BAA0B,CACxC,GAAW,EACX,IAAmB,EACnB,cAAsB;IAEtB,MAAM,IAAI,GAAG,gBAAgB,CAAC,IAAI,CAAQ,GAAG,EAAE,IAAI,CAAC,CAAC;IACrD,MAAM,MAAM,GAAG,gBAAgB,CAAC,mBAAmB,CAAC,IAAI,CAAC,CAAC;IAC1D,OAAO,gBAAgB,CAAC,sBAAsB,CAAC,MAAM,EAAE,cAAc,CAAC,CAAC;AACzE,CAAC;AAED,qEAAqE;AACrE,MAAM,aAAa,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC;AAErC;;;;;;;;;;;;;;;GAeG;AACH,MAAM,CAAC,KAAK,UAAU,sBAAsB,CAC1C,gBAA0D,EAC1D,SAAoB,EACpB,gBAAwB,EACxB,mBAAuB,EACvB,GAAG,eAA0D;IAE7D,yEAAyE;IACzE,qEAAqE;IACrE,sEAAsE;IACtE,8DAA8D;IAC9D,MAAM,SAAS,GAAG,KAAK,CAAC,OAAO,CAAC,aAAa,CAAC,IAAI,EAAE;QAClD,aAAa,EAAE,aAAa,CAAC,GAAG,CAAC,gBAAgB,CAAC;QAClD,aAAa,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,IAAI,EAAE;KACnC,CAAC,CAAC;IAEH,iFAAiF;IACjF,MAAM,YAAY,GAAG,MAAM,MAAM,CAAC,UAAU,CAC1C,kBAAkB,CAAC,IAAI,CAAC,gBAAgB,CAAC;SACtC,UAAU,CAAC,mBAAmB,EAAE,GAAG,eAAe,CAAC;SACnD,IAAI,CACH,MAAM,CAAC,OAAO,CAAC,mBAAmB,CAAC,KAAK,CAAC,gBAAgB,CAAC,qBAAqB,CAAC,gBAAgB,CAAC,CAAC,CAAC,EACnG,MAAM,CAAC,OAAO,CAAC,WAAW,CAAC,KAAK,CAAC,EACjC,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,CAC1B,CACJ,CAAC;IAEF,yEAAyE;IACzE,0EAA0E;IAC1E,MAAM,aAAa,GAAG,MAAM,CAAC,aAAa,CAAC,WAAW,CAAC,YAAY,CAAC,MAAM,CAAC,aAAa,CAAC,SAAS,EAAE,CAAC,CAAC;IAEtG,MAAM,MAAM,GAAG,IAAI,MAAM,CAAC,cAAc,CAAC,aAAa,CAAC,CAAC;IACxD,MAAM,MAAM,GAAG,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,aAAa,CAAC,CAAC,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC;IACzF,MAAM,WAAW,GAAG,MAAM,CAAC,WAAW,CAAC,mBAAmB,CAAC,SAAS,EAAE,SAAS,EAAE,SAAS,EAAE,MAAM,CAAC,CAAC;IAEpG,OAAO;QACL,eAAe,EAAE,MAAM,CAAC,OAAO;QAC/B,qBAAqB,EAAE,WAAW,CAAC,SAAS,EAAE;KAC/C,CAAC;AACJ,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,oBAAoB,CAAC,KAAkB;IACrD,MAAM,IAAI,GAAG,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC;IAC5C,IAAI,IAAI,GAAG,EAAE;QAAE,OAAO;IACtB,MAAM,KAAK,GAAG,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,KAAK,EAAE,EAAE,CAAC,GAAG,GAAG,KAAK,EAAE,EAAE,CAAC,CAAC;IAC/F,MAAM,IAAI,KAAK,CACb,2DAA2D,KAAK,KAAK;QACnE,6EAA6E,CAChF,CAAC;AACJ,CAAC"}

package/dist/plumbing/midnight-node-config.d.ts

@@ -0,0 +1,33 @@
+import { type NetworkId } from "./network-id.ts";
+/**
+ * The set of endpoints (+ network id) needed to reach the chain. Plain data,
+ * so it can be handed to domain classes/functions by argument rather than
+ * having them reach for a global. A seed is intentionally NOT part of this:
+ * this config describes a *network*, while a seed identifies a *wallet*.
+ */
+export interface MidnightNodeConfig {
+    readonly indexerUrl: string;
+    readonly indexerWsUrl: string;
+    readonly nodeUrl: string;
+    readonly proofServerUrl: string;
+    readonly networkId: NetworkId;
+}
+export type Endpoints = Omit<MidnightNodeConfig, "networkId">;
+export declare const LOCAL_PROOF_SERVER = "http://127.0.0.1:6300";
+export declare const DEFAULT_ENDPOINTS: Record<NetworkId, Endpoints>;
+export declare function indexerWsUrlFromIndexerUrl(indexerUrl: string): string;
+/**
+ * Read a {@link MidnightNodeConfig} from the environment. Every variable is
+ * optional — with nothing set this yields the local "undeployed" stack.
+ *
+ * Parse flow:
+ * 1. `NETWORK_ID` (default "undeployed", validated against {@link NETWORK_IDS})
+ *    selects the {@link DEFAULT_ENDPOINTS} baseline.
+ * 2. Per-URL overrides then replace individual baseline endpoints:
+ *    `MIDNIGHT_NODE_URL`, `MIDNIGHT_NODE_INDEXER_URL`,
+ *    `MIDNIGHT_NODE_INDEXER_WS_URL`, `MIDNIGHT_NODE_PROOF_SERVER_URL`.
+ *    When the indexer URL is overridden without a WS override, the WS URL is
+ *    derived from it instead of keeping the baseline host.
+ */
+export declare function getMidnightNodeConfig(env?: Record<string, string | undefined>): MidnightNodeConfig;
+//# sourceMappingURL=midnight-node-config.d.ts.map

package/dist/plumbing/midnight-node-config.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"midnight-node-config.d.ts","sourceRoot":"","sources":["../../src/plumbing/midnight-node-config.ts"],"names":[],"mappings":"AAEA,OAAO,EAAe,KAAK,SAAS,EAAE,MAAM,iBAAiB,CAAC;AAE9D;;;;;GAKG;AACH,MAAM,WAAW,kBAAkB;IACjC,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAC;IAChC,QAAQ,CAAC,SAAS,EAAE,SAAS,CAAC;CAC/B;AAED,MAAM,MAAM,SAAS,GAAG,IAAI,CAAC,kBAAkB,EAAE,WAAW,CAAC,CAAC;AAI9D,eAAO,MAAM,kBAAkB,0BAA0B,CAAC;AAI1D,eAAO,MAAM,iBAAiB,EAAE,MAAM,CAAC,SAAS,EAAE,SAAS,CAyB1D,CAAC;AAIF,wBAAgB,0BAA0B,CAAC,UAAU,EAAE,MAAM,GAAG,MAAM,CAKrE;AAED;;;;;;;;;;;;GAYG;AACH,wBAAgB,qBAAqB,CACnC,GAAG,GAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,CAAe,GACpD,kBAAkB,CAmBpB"}

package/dist/plumbing/midnight-node-config.js

@@ -0,0 +1,72 @@
+// Midnight node connection config — everything needed to talk to one Midnight
+import { NETWORK_IDS } from "./network-id.js";
+// The proof server sees private witness data, so it is always run locally
+// rather than against a remote host.
+export const LOCAL_PROOF_SERVER = "http://127.0.0.1:6300";
+// Default endpoints per network. Undeployed is the local standalone stack
+// (Docker containers) run during development.
+export const DEFAULT_ENDPOINTS = {
+    ["undeployed"]: {
+        indexerUrl: "http://127.0.0.1:8088/api/v3/graphql",
+        indexerWsUrl: "ws://127.0.0.1:8088/api/v3/graphql/ws",
+        nodeUrl: "http://127.0.0.1:9944",
+        proofServerUrl: LOCAL_PROOF_SERVER,
+    },
+    ["preview"]: {
+        indexerUrl: "https://indexer.preview.midnight.network/api/v3/graphql",
+        indexerWsUrl: "wss://indexer.preview.midnight.network/api/v3/graphql/ws",
+        nodeUrl: "https://rpc.preview.midnight.network",
+        proofServerUrl: LOCAL_PROOF_SERVER,
+    },
+    ["preprod"]: {
+        indexerUrl: "https://indexer.preprod.midnight.network/api/v3/graphql",
+        indexerWsUrl: "wss://indexer.preprod.midnight.network/api/v3/graphql/ws",
+        nodeUrl: "https://rpc.preprod.midnight.network",
+        proofServerUrl: LOCAL_PROOF_SERVER,
+    },
+    ["mainnet"]: {
+        indexerUrl: "https://indexer.mainnet.midnight.network/api/v3/graphql",
+        indexerWsUrl: "wss://indexer.mainnet.midnight.network/api/v3/graphql/ws",
+        nodeUrl: "https://rpc.mainnet.midnight.network",
+        proofServerUrl: LOCAL_PROOF_SERVER,
+    },
+};
+// Derive the indexer WebSocket URL from the indexer HTTP URL: swap the scheme
+// to ws(s) and append the "/ws" path segment the indexer expects.
+export function indexerWsUrlFromIndexerUrl(indexerUrl) {
+    const url = new URL(indexerUrl);
+    url.protocol = url.protocol === "https:" ? "wss:" : "ws:";
+    url.pathname = `${url.pathname.replace(/\/$/, "")}/ws`;
+    return url.toString();
+}
+/**
+ * Read a {@link MidnightNodeConfig} from the environment. Every variable is
+ * optional — with nothing set this yields the local "undeployed" stack.
+ *
+ * Parse flow:
+ * 1. `NETWORK_ID` (default "undeployed", validated against {@link NETWORK_IDS})
+ *    selects the {@link DEFAULT_ENDPOINTS} baseline.
+ * 2. Per-URL overrides then replace individual baseline endpoints:
+ *    `MIDNIGHT_NODE_URL`, `MIDNIGHT_NODE_INDEXER_URL`,
+ *    `MIDNIGHT_NODE_INDEXER_WS_URL`, `MIDNIGHT_NODE_PROOF_SERVER_URL`.
+ *    When the indexer URL is overridden without a WS override, the WS URL is
+ *    derived from it instead of keeping the baseline host.
+ */
+export function getMidnightNodeConfig(env = process.env) {
+    const networkId = env.NETWORK_ID?.trim() || "undeployed";
+    if (!NETWORK_IDS.includes(networkId)) {
+        throw new Error(`Invalid NETWORK_ID "${networkId}" — expected one of: ${NETWORK_IDS.join(", ")}.`);
+    }
+    const defaults = DEFAULT_ENDPOINTS[networkId];
+    const indexerUrl = env.MIDNIGHT_NODE_INDEXER_URL || defaults.indexerUrl;
+    const indexerWsUrl = env.MIDNIGHT_NODE_INDEXER_WS_URL ||
+        (env.MIDNIGHT_NODE_INDEXER_URL ? indexerWsUrlFromIndexerUrl(indexerUrl) : defaults.indexerWsUrl);
+    return {
+        networkId,
+        indexerUrl,
+        indexerWsUrl,
+        nodeUrl: env.MIDNIGHT_NODE_URL || defaults.nodeUrl,
+        proofServerUrl: env.MIDNIGHT_NODE_PROOF_SERVER_URL || defaults.proofServerUrl,
+    };
+}
+//# sourceMappingURL=midnight-node-config.js.map

package/dist/plumbing/midnight-node-config.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"midnight-node-config.js","sourceRoot":"","sources":["../../src/plumbing/midnight-node-config.ts"],"names":[],"mappings":"AAAA,8EAA8E;AAE9E,OAAO,EAAE,WAAW,EAAkB,MAAM,iBAAiB,CAAC;AAkB9D,0EAA0E;AAC1E,qCAAqC;AACrC,MAAM,CAAC,MAAM,kBAAkB,GAAG,uBAAuB,CAAC;AAE1D,0EAA0E;AAC1E,8CAA8C;AAC9C,MAAM,CAAC,MAAM,iBAAiB,GAAiC;IAC7D,CAAC,YAAY,CAAC,EAAE;QACd,UAAU,EAAE,sCAAsC;QAClD,YAAY,EAAE,uCAAuC;QACrD,OAAO,EAAE,uBAAuB;QAChC,cAAc,EAAE,kBAAkB;KACnC;IACD,CAAC,SAAS,CAAC,EAAE;QACX,UAAU,EAAE,yDAAyD;QACrE,YAAY,EAAE,0DAA0D;QACxE,OAAO,EAAE,sCAAsC;QAC/C,cAAc,EAAE,kBAAkB;KACnC;IACD,CAAC,SAAS,CAAC,EAAE;QACX,UAAU,EAAE,yDAAyD;QACrE,YAAY,EAAE,0DAA0D;QACxE,OAAO,EAAE,sCAAsC;QAC/C,cAAc,EAAE,kBAAkB;KACnC;IACD,CAAC,SAAS,CAAC,EAAE;QACX,UAAU,EAAE,yDAAyD;QACrE,YAAY,EAAE,0DAA0D;QACxE,OAAO,EAAE,sCAAsC;QAC/C,cAAc,EAAE,kBAAkB;KACnC;CACF,CAAC;AAEF,8EAA8E;AAC9E,kEAAkE;AAClE,MAAM,UAAU,0BAA0B,CAAC,UAAkB;IAC3D,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,UAAU,CAAC,CAAC;IAChC,GAAG,CAAC,QAAQ,GAAG,GAAG,CAAC,QAAQ,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC;IAC1D,GAAG,CAAC,QAAQ,GAAG,GAAG,GAAG,CAAC,QAAQ,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC;IACvD,OAAO,GAAG,CAAC,QAAQ,EAAE,CAAC;AACxB,CAAC;AAED;;;;;;;;;;;;GAYG;AACH,MAAM,UAAU,qBAAqB,CACnC,MAA0C,OAAO,CAAC,GAAG;IAErD,MAAM,SAAS,GAAc,GAAG,CAAC,UAAU,EAAE,IAAI,EAAE,IAAI,YAAY,CAAC;IACpE,IAAI,CAAC,WAAW,CAAC,QAAQ,CAAC,SAAS,CAAC,EAAE,CAAC;QACrC,MAAM,IAAI,KAAK,CAAC,uBAAuB,SAAS,wBAAwB,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IACrG,CAAC;IAED,MAAM,QAAQ,GAAG,iBAAiB,CAAC,SAAS,CAAC,CAAC;IAC9C,MAAM,UAAU,GAAG,GAAG,CAAC,yBAAyB,IAAI,QAAQ,CAAC,UAAU,CAAC;IACxE,MAAM,YAAY,GAChB,GAAG,CAAC,4BAA4B;QAChC,CAAC,GAAG,CAAC,yBAAyB,CAAC,CAAC,CAAC,0BAA0B,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,YAAY,CAAC,CAAC;IAEnG,OAAO;QACL,SAAS;QACT,UAAU;QACV,YAAY;QACZ,OAAO,EAAE,GAAG,CAAC,iBAAiB,IAAI,QAAQ,CAAC,OAAO;QAClD,cAAc,EAAE,GAAG,CAAC,8BAA8B,IAAI,QAAQ,CAAC,cAAc;KAC9E,CAAC;AACJ,CAAC"}

package/dist/plumbing/network-id.d.ts

@@ -0,0 +1,5 @@
+import type { NetworkId as MidnightSDKNetworkId } from "@midnight-ntwrk/midnight-js/network-id";
+/** A Midnight network id: the SDK's bare-string type plus our known named networks. */
+export type NetworkId = MidnightSDKNetworkId | "undeployed" | "preview" | "preprod" | "mainnet";
+export declare const NETWORK_IDS: readonly NetworkId[];
+//# sourceMappingURL=network-id.d.ts.map

package/dist/plumbing/network-id.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"network-id.d.ts","sourceRoot":"","sources":["../../src/plumbing/network-id.ts"],"names":[],"mappings":"AAKA,OAAO,KAAK,EAAE,SAAS,IAAI,oBAAoB,EAAE,MAAM,wCAAwC,CAAC;AAEhG,uFAAuF;AACvF,MAAM,MAAM,SAAS,GAEjB,oBAAoB,GAEpB,YAAY,GAEZ,SAAS,GAET,SAAS,GAET,SAAS,CAAC;AAGd,eAAO,MAAM,WAAW,EAAE,SAAS,SAAS,EAK3C,CAAC"}

package/dist/plumbing/network-id.js

@@ -0,0 +1,8 @@
+// All known network ids, for runtime validation and iteration.
+export const NETWORK_IDS = [
+    "undeployed",
+    "preview",
+    "preprod",
+    "mainnet",
+];
+//# sourceMappingURL=network-id.js.map

package/dist/plumbing/network-id.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"network-id.js","sourceRoot":"","sources":["../../src/plumbing/network-id.ts"],"names":[],"mappings":"AAoBA,+DAA+D;AAC/D,MAAM,CAAC,MAAM,WAAW,GAAyB;IAC7C,YAAY;IACZ,SAAS;IACT,SAAS;IACT,SAAS;CACZ,CAAC"}

package/dist/plumbing/seed.d.ts

@@ -0,0 +1,44 @@
+/** How the input seed was supplied. (Const object + union — see network.ts.) */
+export declare const SeedFormat: {
+    readonly Mnemonic: "mnemonic";
+    readonly Hex: "hex";
+};
+export type SeedFormat = (typeof SeedFormat)[keyof typeof SeedFormat];
+/** Where a parsed seed came from, including its normalised hex form. */
+export interface DerivationSource {
+    format: SeedFormat;
+    /** Word count, when the input was a mnemonic. */
+    words?: number;
+    /** The normalised hex of the seed bytes — the stable dedup key. */
+    seedHex: string;
+    seedBytes: number;
+}
+export declare class ParseError extends Error {
+}
+/**
+ * Parse `input` as a hex seed (16–64 bytes, optional 0x prefix) or a BIP-39
+ * mnemonic (run through PBKDF2 to its 64-byte seed). Throws {@link ParseError}
+ * when it is neither.
+ */
+export declare function parseSeed(input: string): {
+    seed: Uint8Array;
+    source: DerivationSource;
+};
+/** Generate a fresh random 24-word BIP-39 mnemonic (256 bits of entropy). */
+export declare function generateMnemonic(): string;
+/**
+ * Resolve a 32-byte identity secret key from the environment: `env[envVar]`
+ * (hex, optional 0x prefix) when set, else the bytes of `fallbackSeed` (the
+ * wallet seed doubling as the identity). Contract packages use this for the
+ * secret whose commitment gates a circuit (e.g. the vault deployer identity),
+ * and clients use it for the caller identity answering a secret-key witness.
+ *
+ * @param envVar - Name of the environment variable holding the hex secret.
+ * @param env - The environment to read from.
+ * @param fallbackSeed - The wallet seed (hex or mnemonic) used as the identity when `env[envVar]` is unset.
+ * @returns The 32-byte secret key.
+ * @throws If `env[envVar]` is set but not 32 bytes of hex, or if it is unset
+ * and `fallbackSeed` does not parse to exactly 32 bytes (e.g. a mnemonic).
+ */
+export declare function parseIdentitySecretKey(envVar: string, env: Record<string, string | undefined>, fallbackSeed: string): Uint8Array;
+//# sourceMappingURL=seed.d.ts.map

package/dist/plumbing/seed.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"seed.d.ts","sourceRoot":"","sources":["../../src/plumbing/seed.ts"],"names":[],"mappings":"AAQA,gFAAgF;AAChF,eAAO,MAAM,UAAU;;;CAGb,CAAC;AACX,MAAM,MAAM,UAAU,GAAG,CAAC,OAAO,UAAU,CAAC,CAAC,MAAM,OAAO,UAAU,CAAC,CAAC;AAEtE,wEAAwE;AACxE,MAAM,WAAW,gBAAgB;IAC/B,MAAM,EAAE,UAAU,CAAC;IACnB,iDAAiD;IACjD,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,mEAAmE;IACnE,OAAO,EAAE,MAAM,CAAC;IAChB,SAAS,EAAE,MAAM,CAAC;CACnB;AAED,qBAAa,UAAW,SAAQ,KAAK;CAAG;AAExC;;;;GAIG;AACH,wBAAgB,SAAS,CAAC,KAAK,EAAE,MAAM,GAAG;IAAE,IAAI,EAAE,UAAU,CAAC;IAAC,MAAM,EAAE,gBAAgB,CAAA;CAAE,CAyBvF;AAED,6EAA6E;AAC7E,wBAAgB,gBAAgB,IAAI,MAAM,CAEzC;AAED;;;;;;;;;;;;;GAaG;AACH,wBAAgB,sBAAsB,CACpC,MAAM,EAAE,MAAM,EACd,GAAG,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,CAAC,EACvC,YAAY,EAAE,MAAM,GACnB,UAAU,CAiBZ"}

package/dist/plumbing/seed.js

@@ -0,0 +1,77 @@
+// Seed parsing — turns user input (a BIP-39 mnemonic or a raw hex seed) into
+// the seed bytes the HD wallet derives from, plus a record of how it was
+// supplied (so the normalised hex form can be used as a stable identifier).
+import * as bip39 from "@scure/bip39";
+import { wordlist as english } from "@scure/bip39/wordlists/english.js";
+const toHex = (bytes) => Array.from(bytes, (b) => b.toString(16).padStart(2, "0")).join("");
+/** How the input seed was supplied. (Const object + union — see network.ts.) */
+export const SeedFormat = {
+    Mnemonic: "mnemonic",
+    Hex: "hex",
+};
+export class ParseError extends Error {
+}
+/**
+ * Parse `input` as a hex seed (16–64 bytes, optional 0x prefix) or a BIP-39
+ * mnemonic (run through PBKDF2 to its 64-byte seed). Throws {@link ParseError}
+ * when it is neither.
+ */
+export function parseSeed(input) {
+    const trimmed = input.trim();
+    if (!trimmed)
+        throw new ParseError("Nothing to parse — generate or paste a seed first.");
+    const compact = trimmed.replace(/^0x/i, "");
+    const looksHex = /^[0-9a-fA-F]+$/.test(compact) && compact.length % 2 === 0;
+    if (looksHex) {
+        const bytes = compact.length / 2;
+        if (bytes < 16 || bytes > 64) {
+            throw new ParseError(`Hex seed must be 16–64 bytes; got ${bytes}.`);
+        }
+        const seed = Uint8Array.from(compact.match(/.{2}/g).map((h) => parseInt(h, 16)));
+        return { seed, source: { format: SeedFormat.Hex, seedHex: compact.toLowerCase(), seedBytes: bytes } };
+    }
+    const words = trimmed.split(/\s+/);
+    if (!bip39.validateMnemonic(words.join(" "), english)) {
+        throw new ParseError("Not a valid BIP-39 mnemonic (and not valid hex).");
+    }
+    const seed = bip39.mnemonicToSeedSync(words.join(" "));
+    return {
+        seed,
+        source: { format: SeedFormat.Mnemonic, words: words.length, seedHex: toHex(seed), seedBytes: seed.length },
+    };
+}
+/** Generate a fresh random 24-word BIP-39 mnemonic (256 bits of entropy). */
+export function generateMnemonic() {
+    return bip39.generateMnemonic(english, 256);
+}
+/**
+ * Resolve a 32-byte identity secret key from the environment: `env[envVar]`
+ * (hex, optional 0x prefix) when set, else the bytes of `fallbackSeed` (the
+ * wallet seed doubling as the identity). Contract packages use this for the
+ * secret whose commitment gates a circuit (e.g. the vault deployer identity),
+ * and clients use it for the caller identity answering a secret-key witness.
+ *
+ * @param envVar - Name of the environment variable holding the hex secret.
+ * @param env - The environment to read from.
+ * @param fallbackSeed - The wallet seed (hex or mnemonic) used as the identity when `env[envVar]` is unset.
+ * @returns The 32-byte secret key.
+ * @throws If `env[envVar]` is set but not 32 bytes of hex, or if it is unset
+ * and `fallbackSeed` does not parse to exactly 32 bytes (e.g. a mnemonic).
+ */
+export function parseIdentitySecretKey(envVar, env, fallbackSeed) {
+    const raw = env[envVar]?.trim();
+    if (raw) {
+        const hex = raw.replace(/^0x/i, "");
+        if (!/^[0-9a-fA-F]{64}$/.test(hex)) {
+            throw new ParseError(`${envVar} must be exactly 32 bytes of hex`);
+        }
+        return Uint8Array.from(hex.match(/.{2}/g).map((byte) => parseInt(byte, 16)));
+    }
+    const { seed } = parseSeed(fallbackSeed);
+    if (seed.length !== 32) {
+        throw new ParseError(`The fallback seed parses to ${seed.length} bytes; the identity secret needs exactly 32. ` +
+            `Set ${envVar} explicitly.`);
+    }
+    return seed;
+}
+//# sourceMappingURL=seed.js.map

package/dist/plumbing/seed.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"seed.js","sourceRoot":"","sources":["../../src/plumbing/seed.ts"],"names":[],"mappings":"AAAA,6EAA6E;AAC7E,yEAAyE;AACzE,4EAA4E;AAC5E,OAAO,KAAK,KAAK,MAAM,cAAc,CAAC;AACtC,OAAO,EAAE,QAAQ,IAAI,OAAO,EAAE,MAAM,mCAAmC,CAAC;AAExE,MAAM,KAAK,GAAG,CAAC,KAAiB,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;AAExG,gFAAgF;AAChF,MAAM,CAAC,MAAM,UAAU,GAAG;IACxB,QAAQ,EAAE,UAAU;IACpB,GAAG,EAAE,KAAK;CACF,CAAC;AAaX,MAAM,OAAO,UAAW,SAAQ,KAAK;CAAG;AAExC;;;;GAIG;AACH,MAAM,UAAU,SAAS,CAAC,KAAa;IACrC,MAAM,OAAO,GAAG,KAAK,CAAC,IAAI,EAAE,CAAC;IAC7B,IAAI,CAAC,OAAO;QAAE,MAAM,IAAI,UAAU,CAAC,oDAAoD,CAAC,CAAC;IAEzF,MAAM,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;IAC5C,MAAM,QAAQ,GAAG,gBAAgB,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,KAAK,CAAC,CAAC;IAE5E,IAAI,QAAQ,EAAE,CAAC;QACb,MAAM,KAAK,GAAG,OAAO,CAAC,MAAM,GAAG,CAAC,CAAC;QACjC,IAAI,KAAK,GAAG,EAAE,IAAI,KAAK,GAAG,EAAE,EAAE,CAAC;YAC7B,MAAM,IAAI,UAAU,CAAC,qCAAqC,KAAK,GAAG,CAAC,CAAC;QACtE,CAAC;QACD,MAAM,IAAI,GAAG,UAAU,CAAC,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,OAAO,CAAE,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,QAAQ,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC;QAClF,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,EAAE,MAAM,EAAE,UAAU,CAAC,GAAG,EAAE,OAAO,EAAE,OAAO,CAAC,WAAW,EAAE,EAAE,SAAS,EAAE,KAAK,EAAE,EAAE,CAAC;IACxG,CAAC;IAED,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;IACnC,IAAI,CAAC,KAAK,CAAC,gBAAgB,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,OAAO,CAAC,EAAE,CAAC;QACtD,MAAM,IAAI,UAAU,CAAC,kDAAkD,CAAC,CAAC;IAC3E,CAAC;IACD,MAAM,IAAI,GAAG,KAAK,CAAC,kBAAkB,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;IACvD,OAAO;QACL,IAAI;QACJ,MAAM,EAAE,EAAE,MAAM,EAAE,UAAU,CAAC,QAAQ,EAAE,KAAK,EAAE,KAAK,CAAC,MAAM,EAAE,OAAO,EAAE,KAAK,CAAC,IAAI,CAAC,EAAE,SAAS,EAAE,IAAI,CAAC,MAAM,EAAE;KAC3G,CAAC;AACJ,CAAC;AAED,6EAA6E;AAC7E,MAAM,UAAU,gBAAgB;IAC9B,OAAO,KAAK,CAAC,gBAAgB,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC;AAC9C,CAAC;AAED;;;;;;;;;;;;;GAaG;AACH,MAAM,UAAU,sBAAsB,CACpC,MAAc,EACd,GAAuC,EACvC,YAAoB;IAEpB,MAAM,GAAG,GAAG,GAAG,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,CAAC;IAChC,IAAI,GAAG,EAAE,CAAC;QACR,MAAM,GAAG,GAAG,GAAG,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;QACpC,IAAI,CAAC,mBAAmB,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;YACnC,MAAM,IAAI,UAAU,CAAC,GAAG,MAAM,kCAAkC,CAAC,CAAC;QACpE,CAAC;QACD,OAAO,UAAU,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,OAAO,CAAE,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,QAAQ,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC;IAChF,CAAC;IACD,MAAM,EAAE,IAAI,EAAE,GAAG,SAAS,CAAC,YAAY,CAAC,CAAC;IACzC,IAAI,IAAI,CAAC,MAAM,KAAK,EAAE,EAAE,CAAC;QACvB,MAAM,IAAI,UAAU,CAClB,+BAA+B,IAAI,CAAC,MAAM,gDAAgD;YACxF,OAAO,MAAM,cAAc,CAC9B,CAAC;IACJ,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC"}

package/dist/plumbing/wallet.d.ts

@@ -0,0 +1,90 @@
+import * as ledger from "@midnightntwrk/ledger-v9";
+import { WalletFacade, type FacadeState, type TransactionIdentifier } from "@midnightntwrk/wallet-sdk-facade";
+import { type UnshieldedKeystore } from "@midnightntwrk/wallet-sdk-unshielded-wallet";
+import type { MidnightNodeConfig } from "./midnight-node-config.ts";
+import type { NetworkId } from "./network-id.ts";
+export type { FacadeState, TransactionIdentifier, WalletFacade } from "@midnightntwrk/wallet-sdk-facade";
+export type { EncPublicKey } from "@midnightntwrk/ledger-v9";
+/** The live key material for one account. Reused for signing / balancing. */
+export interface AccountKeys {
+    shieldedSecretKeys: ledger.ZswapSecretKeys;
+    dustSecretKey: ledger.DustSecretKey;
+    unshieldedKeystore: UnshieldedKeystore;
+}
+/** A wallet's three Midnight addresses, as bech32m strings. */
+export interface WalletAddresses {
+    unshielded: string;
+    shielded: string;
+    dust: string;
+}
+/**
+ * The fee settings the facade balances transactions with: it burns
+ * `feesWithMargin(params, feeBlocksMargin) + additionalFeeOverhead` per
+ * transaction.
+ */
+export declare const COST_PARAMETERS: {
+    readonly additionalFeeOverhead: bigint;
+    readonly feeBlocksMargin: number;
+};
+/**
+ * Parse a seed and derive the three role keys (Zswap / NightExternal / Dust).
+ * Pure crypto — no network. This is the step that exercises the ledger WASM.
+ */
+export declare function deriveAccountKeys(seed: string, networkId: NetworkId): AccountKeys;
+/** Compute the three bech32m addresses from the keys. Pure — no network. */
+export declare function deriveAddresses(keys: AccountKeys, networkId: NetworkId): WalletAddresses;
+/**
+ * Wire up the WalletFacade for the given keys + connection config. This only
+ * constructs the three sub-wallets — it does NOT start syncing.
+ */
+export declare function initialiseWalletFacade(keys: AccountKeys, config: MidnightNodeConfig): Promise<WalletFacade>;
+/**
+ * Balance, sign, prove and submit a serialized unproven transaction (e.g. a
+ * contract deploy built by `buildDeployTransaction` in deploy.ts). Proving
+ * happens in `finalizeRecipe` via the facade's configured proof server.
+ *
+ * @param facade - A started (and synced) wallet facade that pays for and submits the transaction.
+ * @param keys - The key material of the same wallet, for balancing and signing.
+ * @param serializedTransaction - The unproven transaction bytes.
+ * @returns The submitted transaction's identifier.
+ * @throws If the wallet cannot cover fees, proving fails, or the node rejects the transaction.
+ */
+export declare function submitUnprovenTransaction(facade: WalletFacade, keys: AccountKeys, serializedTransaction: Uint8Array): Promise<TransactionIdentifier>;
+/**
+ * Register every NIGHT UTXO not yet registered for dust generation, so the
+ * wallet can pay transaction fees (fees are paid in DUST, which only
+ * generates on registered NIGHT). Registers ONLY unregistered UTXOs — the
+ * node rejects a re-registration of an already-registered one — and submits
+ * nothing when there is nothing new to register.
+ *
+ * @param facade - A started wallet facade for `keys` (builds, proves and submits the registration).
+ * @param keys - The key material of the same wallet; its unshielded keystore signs the registration.
+ * @param state - The synced facade state to read the NIGHT UTXOs from.
+ * @returns How many NIGHT UTXOs this call registered (0 = nothing unregistered, including no NIGHT at all).
+ * @throws If the node rejects the registration transaction.
+ */
+export declare function registerNightForDustGeneration(facade: WalletFacade, keys: AccountKeys, state: FacadeState): Promise<number>;
+/**
+ * Wait until the wallet's spendable DUST (fee) balance is positive, polling
+ * the synced facade state. Pair with {@link registerNightForDustGeneration}:
+ * a wallet whose NIGHT was just registered has no dust for a few blocks.
+ *
+ * @param facade - A started wallet facade.
+ * @param timeoutMs - Give-up deadline in milliseconds.
+ * @returns The first positive dust balance observed.
+ * @throws If no dust appears within `timeoutMs`.
+ */
+export declare function waitForSpendableDust(facade: WalletFacade, timeoutMs?: number): Promise<bigint>;
+/**
+ * Run `fn` against a started-and-synced {@link WalletFacade}, then stop the
+ * facade — even when `fn` throws. The one place the start / wait-for-sync /
+ * stop boilerplate lives.
+ *
+ * @param keys - The account to open the facade for (see {@link deriveAccountKeys}).
+ * @param config - The stack the facade connects to.
+ * @param fn - Work to run with the live facade; receives the synced state for balance checks.
+ * @returns Whatever `fn` returns.
+ * @throws Whatever {@link initialiseWalletFacade}, the facade start/sync, or `fn` throws.
+ */
+export declare function withSyncedWalletFacade<T>(keys: AccountKeys, config: MidnightNodeConfig, fn: (facade: WalletFacade, state: FacadeState) => Promise<T>): Promise<T>;
+//# sourceMappingURL=wallet.d.ts.map

package/dist/plumbing/wallet.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"wallet.d.ts","sourceRoot":"","sources":["../../src/plumbing/wallet.ts"],"names":[],"mappings":"AAIA,OAAO,KAAK,MAAM,MAAM,0BAA0B,CAAC;AAEnD,OAAO,EAGL,YAAY,EACZ,KAAK,WAAW,EAChB,KAAK,qBAAqB,EAC3B,MAAM,kCAAkC,CAAC;AAG1C,OAAO,EAGL,KAAK,kBAAkB,EAExB,MAAM,6CAA6C,CAAC;AAUrD,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,2BAA2B,CAAC;AACpE,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,iBAAiB,CAAC;AAKjD,YAAY,EAAE,WAAW,EAAE,qBAAqB,EAAE,YAAY,EAAE,MAAM,kCAAkC,CAAC;AAIzG,YAAY,EAAE,YAAY,EAAE,MAAM,0BAA0B,CAAC;AAE7D,6EAA6E;AAC7E,MAAM,WAAW,WAAW;IAC1B,kBAAkB,EAAE,MAAM,CAAC,eAAe,CAAC;IAC3C,aAAa,EAAE,MAAM,CAAC,aAAa,CAAC;IACpC,kBAAkB,EAAE,kBAAkB,CAAC;CACxC;AAED,+DAA+D;AAC/D,MAAM,WAAW,eAAe;IAC9B,UAAU,EAAE,MAAM,CAAC;IACnB,QAAQ,EAAE,MAAM,CAAC;IACjB,IAAI,EAAE,MAAM,CAAC;CACd;AAED;;;;GAIG;AACH,eAAO,MAAM,eAAe,EAAE;IAAE,QAAQ,CAAC,qBAAqB,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,eAAe,EAAE,MAAM,CAAA;CAGvG,CAAC;AAEF;;;GAGG;AACH,wBAAgB,iBAAiB,CAAC,IAAI,EAAE,MAAM,EAAE,SAAS,EAAE,SAAS,GAAG,WAAW,CAqBjF;AAED,4EAA4E;AAC5E,wBAAgB,eAAe,CAAC,IAAI,EAAE,WAAW,EAAE,SAAS,EAAE,SAAS,GAAG,eAAe,CAUxF;AAED;;;GAGG;AACH,wBAAgB,sBAAsB,CAAC,IAAI,EAAE,WAAW,EAAE,MAAM,EAAE,kBAAkB,GAAG,OAAO,CAAC,YAAY,CAAC,CAoB3G;AAKD;;;;;;;;;;GAUG;AACH,wBAAsB,yBAAyB,CAC7C,MAAM,EAAE,YAAY,EACpB,IAAI,EAAE,WAAW,EACjB,qBAAqB,EAAE,UAAU,GAChC,OAAO,CAAC,qBAAqB,CAAC,CAkBhC;AAED;;;;;;;;;;;;GAYG;AACH,wBAAsB,8BAA8B,CAClD,MAAM,EAAE,YAAY,EACpB,IAAI,EAAE,WAAW,EACjB,KAAK,EAAE,WAAW,GACjB,OAAO,CAAC,MAAM,CAAC,CAiBjB;AAMD;;;;;;;;;GASG;AACH,wBAAsB,oBAAoB,CAAC,MAAM,EAAE,YAAY,EAAE,SAAS,GAAE,MAAgB,GAAG,OAAO,CAAC,MAAM,CAAC,CAa7G;AAED;;;;;;;;;;GAUG;AACH,wBAAsB,sBAAsB,CAAC,CAAC,EAC5C,IAAI,EAAE,WAAW,EACjB,MAAM,EAAE,kBAAkB,EAC1B,EAAE,EAAE,CAAC,MAAM,EAAE,YAAY,EAAE,KAAK,EAAE,WAAW,KAAK,OAAO,CAAC,CAAC,CAAC,GAC3D,OAAO,CAAC,CAAC,CAAC,CASZ"}

package/dist/plumbing/wallet.js

@@ -0,0 +1,171 @@
+// Seed → account construction utilities shared by every wallet host (the UI's
+// SeedWallet and the integration tests' buildWallet): key derivation, address
+// encoding and WalletFacade wiring. Pure crypto + facade construction — no
+// network I/O happens here (the facade connects only when started).
+import * as ledger from "@midnightntwrk/ledger-v9";
+import { HDWallet, Roles } from "@midnightntwrk/wallet-sdk-hd";
+import { mergeWalletEntries, WalletEntrySchema, WalletFacade, } from "@midnightntwrk/wallet-sdk-facade";
+import { ShieldedWallet } from "@midnightntwrk/wallet-sdk-shielded";
+import { DustWallet } from "@midnightntwrk/wallet-sdk-dust-wallet";
+import { createKeystore, PublicKey as UnshieldedPublicKey, UnshieldedWallet, } from "@midnightntwrk/wallet-sdk-unshielded-wallet";
+import { InMemoryTransactionHistoryStorage } from "@midnightntwrk/wallet-sdk-abstractions";
+import { DustAddress, MidnightBech32m, ShieldedAddress, ShieldedCoinPublicKey, ShieldedEncryptionPublicKey, } from "@midnightntwrk/wallet-sdk-address-format";
+import { parseSeed } from "./seed.js";
+/**
+ * The fee settings the facade balances transactions with: it burns
+ * `feesWithMargin(params, feeBlocksMargin) + additionalFeeOverhead` per
+ * transaction.
+ */
+export const COST_PARAMETERS = {
+    additionalFeeOverhead: 300000000000n,
+    feeBlocksMargin: 5,
+};
+/**
+ * Parse a seed and derive the three role keys (Zswap / NightExternal / Dust).
+ * Pure crypto — no network. This is the step that exercises the ledger WASM.
+ */
+export function deriveAccountKeys(seed, networkId) {
+    const { seed: seedBytes } = parseSeed(seed);
+    const hd = HDWallet.fromSeed(seedBytes);
+    if (hd.type !== "seedOk")
+        throw new Error("HDWallet.fromSeed failed (seedError).");
+    const derived = hd.hdWallet
+        .selectAccount(0)
+        .selectRoles([Roles.Zswap, Roles.NightExternal, Roles.Dust])
+        .deriveKeysAt(0);
+    if (derived.type !== "keysDerived")
+        throw new Error("deriveKeysAt failed (keyOutOfBounds).");
+    hd.hdWallet.clear();
+    const shieldedSecretKeys = ledger.ZswapSecretKeys.fromSeed(derived.keys[Roles.Zswap]);
+    const dustSecretKey = ledger.DustSecretKey.fromSeed(derived.keys[Roles.Dust]);
+    const unshieldedKeystore = createKeystore({ kind: "schnorr", secret: derived.keys[Roles.NightExternal] }, networkId);
+    return { shieldedSecretKeys, dustSecretKey, unshieldedKeystore };
+}
+/** Compute the three bech32m addresses from the keys. Pure — no network. */
+export function deriveAddresses(keys, networkId) {
+    const shieldedAddr = new ShieldedAddress(ShieldedCoinPublicKey.fromHexString(keys.shieldedSecretKeys.coinPublicKey), ShieldedEncryptionPublicKey.fromHexString(keys.shieldedSecretKeys.encryptionPublicKey));
+    return {
+        unshielded: keys.unshieldedKeystore.getBech32Address().asString(),
+        shielded: MidnightBech32m.encode(networkId, shieldedAddr).asString(),
+        dust: DustAddress.encodePublicKey(networkId, keys.dustSecretKey.publicKey),
+    };
+}
+/**
+ * Wire up the WalletFacade for the given keys + connection config. This only
+ * constructs the three sub-wallets — it does NOT start syncing.
+ */
+export function initialiseWalletFacade(keys, config) {
+    return WalletFacade.init({
+        configuration: {
+            networkId: config.networkId,
+            indexerClientConnection: {
+                indexerHttpUrl: config.indexerUrl,
+                indexerWsUrl: config.indexerWsUrl,
+            },
+            provingServerUrl: new URL(config.proofServerUrl),
+            // The facade talks to the node over WebSocket, so flip http(s) -> ws(s).
+            relayURL: new URL(config.nodeUrl.replace(/^http/, "ws")),
+            costParameters: COST_PARAMETERS,
+            txHistoryStorage: new InMemoryTransactionHistoryStorage(WalletEntrySchema, mergeWalletEntries),
+        },
+        shielded: (cfg) => ShieldedWallet(cfg).startWithSecretKeys(keys.shieldedSecretKeys),
+        unshielded: (cfg) => UnshieldedWallet(cfg).startWithPublicKey(UnshieldedPublicKey.fromKeyStore(keys.unshieldedKeystore)),
+        dust: (cfg) => DustWallet(cfg).startWithSecretKey(keys.dustSecretKey, ledger.LedgerParameters.initialParameters().dust),
+    });
+}
+// Recipes (balancing plans for submitted transactions) expire 30 min out.
+const RECIPE_TTL_MS = 30 * 60 * 1000;
+/**
+ * Balance, sign, prove and submit a serialized unproven transaction (e.g. a
+ * contract deploy built by `buildDeployTransaction` in deploy.ts). Proving
+ * happens in `finalizeRecipe` via the facade's configured proof server.
+ *
+ * @param facade - A started (and synced) wallet facade that pays for and submits the transaction.
+ * @param keys - The key material of the same wallet, for balancing and signing.
+ * @param serializedTransaction - The unproven transaction bytes.
+ * @returns The submitted transaction's identifier.
+ * @throws If the wallet cannot cover fees, proving fails, or the node rejects the transaction.
+ */
+export async function submitUnprovenTransaction(facade, keys, serializedTransaction) {
+    // Deserialize back into the ledger UnprovenTransaction the facade balances.
+    const tx = ledger.Transaction.deserialize("signature", "pre-proof", "pre-binding", serializedTransaction);
+    // Balance (add dust/fee inputs) → sign those inputs → finalize (prove) → submit.
+    const recipe = await facade.balanceUnprovenTransaction(tx, { shieldedSecretKeys: keys.shieldedSecretKeys, dustSecretKey: keys.dustSecretKey }, { ttl: new Date(Date.now() + RECIPE_TTL_MS) });
+    const signed = await facade.signRecipe(recipe, keys.unshieldedKeystore.signDataAsync);
+    const finalized = await facade.finalizeRecipe(signed);
+    return facade.submitTransaction(finalized);
+}
+/**
+ * Register every NIGHT UTXO not yet registered for dust generation, so the
+ * wallet can pay transaction fees (fees are paid in DUST, which only
+ * generates on registered NIGHT). Registers ONLY unregistered UTXOs — the
+ * node rejects a re-registration of an already-registered one — and submits
+ * nothing when there is nothing new to register.
+ *
+ * @param facade - A started wallet facade for `keys` (builds, proves and submits the registration).
+ * @param keys - The key material of the same wallet; its unshielded keystore signs the registration.
+ * @param state - The synced facade state to read the NIGHT UTXOs from.
+ * @returns How many NIGHT UTXOs this call registered (0 = nothing unregistered, including no NIGHT at all).
+ * @throws If the node rejects the registration transaction.
+ */
+export async function registerNightForDustGeneration(facade, keys, state) {
+    const unregistered = state.unshielded.availableCoins.filter((coin) => !coin.meta.registeredForDustGeneration);
+    if (unregistered.length === 0)
+        return 0;
+    // Register → finalize (prove) → submit. The registration segments are
+    // signed inside registerNightUtxosForDustGeneration via the keystore
+    // callback; no separate signRecipe step.
+    const recipe = await facade.registerNightUtxosForDustGeneration(unregistered, keys.unshieldedKeystore.getPublicKey(), keys.unshieldedKeystore.signDataAsync);
+    const finalized = await facade.finalizeRecipe(recipe);
+    await facade.submitTransaction(finalized);
+    return unregistered.length;
+}
+// Dust generates continuously once NIGHT is registered, but a fresh
+// registration takes a few blocks before a spendable balance appears.
+const DUST_POLL_INTERVAL_MS = 5_000;
+/**
+ * Wait until the wallet's spendable DUST (fee) balance is positive, polling
+ * the synced facade state. Pair with {@link registerNightForDustGeneration}:
+ * a wallet whose NIGHT was just registered has no dust for a few blocks.
+ *
+ * @param facade - A started wallet facade.
+ * @param timeoutMs - Give-up deadline in milliseconds.
+ * @returns The first positive dust balance observed.
+ * @throws If no dust appears within `timeoutMs`.
+ */
+export async function waitForSpendableDust(facade, timeoutMs = 300_000) {
+    const deadline = Date.now() + timeoutMs;
+    for (;;) {
+        const state = await facade.waitForSyncedState();
+        const dust = state.dust.balance(new Date());
+        if (dust > 0n)
+            return dust;
+        if (Date.now() >= deadline) {
+            throw new Error(`no spendable DUST after ${timeoutMs} ms — is the wallet's NIGHT registered for dust generation?`);
+        }
+        await new Promise((resolve) => setTimeout(resolve, DUST_POLL_INTERVAL_MS));
+    }
+}
+/**
+ * Run `fn` against a started-and-synced {@link WalletFacade}, then stop the
+ * facade — even when `fn` throws. The one place the start / wait-for-sync /
+ * stop boilerplate lives.
+ *
+ * @param keys - The account to open the facade for (see {@link deriveAccountKeys}).
+ * @param config - The stack the facade connects to.
+ * @param fn - Work to run with the live facade; receives the synced state for balance checks.
+ * @returns Whatever `fn` returns.
+ * @throws Whatever {@link initialiseWalletFacade}, the facade start/sync, or `fn` throws.
+ */
+export async function withSyncedWalletFacade(keys, config, fn) {
+    const facade = await initialiseWalletFacade(keys, config);
+    await facade.start(keys.shieldedSecretKeys, keys.dustSecretKey);
+    try {
+        const state = await facade.waitForSyncedState();
+        return await fn(facade, state);
+    }
+    finally {
+        await facade.stop().catch(() => { });
+    }
+}
+//# sourceMappingURL=wallet.js.map

package/dist/plumbing/wallet.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"wallet.js","sourceRoot":"","sources":["../../src/plumbing/wallet.ts"],"names":[],"mappings":"AAAA,8EAA8E;AAC9E,8EAA8E;AAC9E,2EAA2E;AAC3E,oEAAoE;AACpE,OAAO,KAAK,MAAM,MAAM,0BAA0B,CAAC;AACnD,OAAO,EAAE,QAAQ,EAAE,KAAK,EAAE,MAAM,8BAA8B,CAAC;AAC/D,OAAO,EACL,kBAAkB,EAClB,iBAAiB,EACjB,YAAY,GAGb,MAAM,kCAAkC,CAAC;AAC1C,OAAO,EAAE,cAAc,EAAE,MAAM,oCAAoC,CAAC;AACpE,OAAO,EAAE,UAAU,EAAE,MAAM,uCAAuC,CAAC;AACnE,OAAO,EACL,cAAc,EACd,SAAS,IAAI,mBAAmB,EAEhC,gBAAgB,GACjB,MAAM,6CAA6C,CAAC;AACrD,OAAO,EAAE,iCAAiC,EAAE,MAAM,wCAAwC,CAAC;AAC3F,OAAO,EACL,WAAW,EACX,eAAe,EACf,eAAe,EACf,qBAAqB,EACrB,2BAA2B,GAC5B,MAAM,0CAA0C,CAAC;AAIlD,OAAO,EAAE,SAAS,EAAE,MAAM,WAAW,CAAC;AAwBtC;;;;GAIG;AACH,MAAM,CAAC,MAAM,eAAe,GAAiF;IAC3G,qBAAqB,EAAE,aAAgB;IACvC,eAAe,EAAE,CAAC;CACnB,CAAC;AAEF;;;GAGG;AACH,MAAM,UAAU,iBAAiB,CAAC,IAAY,EAAE,SAAoB;IAClE,MAAM,EAAE,IAAI,EAAE,SAAS,EAAE,GAAG,SAAS,CAAC,IAAI,CAAC,CAAC;IAE5C,MAAM,EAAE,GAAG,QAAQ,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC;IACxC,IAAI,EAAE,CAAC,IAAI,KAAK,QAAQ;QAAE,MAAM,IAAI,KAAK,CAAC,uCAAuC,CAAC,CAAC;IAEnF,MAAM,OAAO,GAAG,EAAE,CAAC,QAAQ;SACxB,aAAa,CAAC,CAAC,CAAC;SAChB,WAAW,CAAC,CAAC,KAAK,CAAC,KAAK,EAAE,KAAK,CAAC,aAAa,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC;SAC3D,YAAY,CAAC,CAAC,CAAC,CAAC;IACnB,IAAI,OAAO,CAAC,IAAI,KAAK,aAAa;QAAE,MAAM,IAAI,KAAK,CAAC,uCAAuC,CAAC,CAAC;IAC7F,EAAE,CAAC,QAAQ,CAAC,KAAK,EAAE,CAAC;IAEpB,MAAM,kBAAkB,GAAG,MAAM,CAAC,eAAe,CAAC,QAAQ,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC;IACtF,MAAM,aAAa,GAAG,MAAM,CAAC,aAAa,CAAC,QAAQ,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC;IAC9E,MAAM,kBAAkB,GAAG,cAAc,CACvC,EAAE,IAAI,EAAE,SAAS,EAAE,MAAM,EAAE,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,aAAa,CAAC,EAAE,EAC9D,SAAS,CACV,CAAC;IAEF,OAAO,EAAE,kBAAkB,EAAE,aAAa,EAAE,kBAAkB,EAAE,CAAC;AACnE,CAAC;AAED,4EAA4E;AAC5E,MAAM,UAAU,eAAe,CAAC,IAAiB,EAAE,SAAoB;IACrE,MAAM,YAAY,GAAG,IAAI,eAAe,CACtC,qBAAqB,CAAC,aAAa,CAAC,IAAI,CAAC,kBAAkB,CAAC,aAAa,CAAC,EAC1E,2BAA2B,CAAC,aAAa,CAAC,IAAI,CAAC,kBAAkB,CAAC,mBAAmB,CAAC,CACvF,CAAC;IACF,OAAO;QACL,UAAU,EAAE,IAAI,CAAC,kBAAkB,CAAC,gBAAgB,EAAE,CAAC,QAAQ,EAAE;QACjE,QAAQ,EAAE,eAAe,CAAC,MAAM,CAAC,SAAS,EAAE,YAAY,CAAC,CAAC,QAAQ,EAAE;QACpE,IAAI,EAAE,WAAW,CAAC,eAAe,CAAC,SAAS,EAAE,IAAI,CAAC,aAAa,CAAC,SAAS,CAAC;KAC3E,CAAC;AACJ,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,sBAAsB,CAAC,IAAiB,EAAE,MAA0B;IAClF,OAAO,YAAY,CAAC,IAAI,CAAC;QACvB,aAAa,EAAE;YACb,SAAS,EAAE,MAAM,CAAC,SAAS;YAC3B,uBAAuB,EAAE;gBACvB,cAAc,EAAE,MAAM,CAAC,UAAU;gBACjC,YAAY,EAAE,MAAM,CAAC,YAAY;aAClC;YACD,gBAAgB,EAAE,IAAI,GAAG,CAAC,MAAM,CAAC,cAAc,CAAC;YAChD,yEAAyE;YACzE,QAAQ,EAAE,IAAI,GAAG,CAAC,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;YACxD,cAAc,EAAE,eAAe;YAC/B,gBAAgB,EAAE,IAAI,iCAAiC,CAAC,iBAAiB,EAAE,kBAAkB,CAAC;SAC/F;QACD,QAAQ,EAAE,CAAC,GAAG,EAAE,EAAE,CAAC,cAAc,CAAC,GAAG,CAAC,CAAC,mBAAmB,CAAC,IAAI,CAAC,kBAAkB,CAAC;QACnF,UAAU,EAAE,CAAC,GAAG,EAAE,EAAE,CAClB,gBAAgB,CAAC,GAAG,CAAC,CAAC,kBAAkB,CAAC,mBAAmB,CAAC,YAAY,CAAC,IAAI,CAAC,kBAAkB,CAAC,CAAC;QACrG,IAAI,EAAE,CAAC,GAAG,EAAE,EAAE,CACZ,UAAU,CAAC,GAAG,CAAC,CAAC,kBAAkB,CAAC,IAAI,CAAC,aAAa,EAAE,MAAM,CAAC,gBAAgB,CAAC,iBAAiB,EAAE,CAAC,IAAI,CAAC;KAC3G,CAAC,CAAC;AACL,CAAC;AAED,0EAA0E;AAC1E,MAAM,aAAa,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC;AAErC;;;;;;;;;;GAUG;AACH,MAAM,CAAC,KAAK,UAAU,yBAAyB,CAC7C,MAAoB,EACpB,IAAiB,EACjB,qBAAiC;IAEjC,4EAA4E;IAC5E,MAAM,EAAE,GAAG,MAAM,CAAC,WAAW,CAAC,WAAW,CACvC,WAAW,EACX,WAAW,EACX,aAAa,EACb,qBAAqB,CACtB,CAAC;IAEF,iFAAiF;IACjF,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,0BAA0B,CACpD,EAAE,EACF,EAAE,kBAAkB,EAAE,IAAI,CAAC,kBAAkB,EAAE,aAAa,EAAE,IAAI,CAAC,aAAa,EAAE,EAClF,EAAE,GAAG,EAAE,IAAI,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,aAAa,CAAC,EAAE,CAC9C,CAAC;IACF,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,UAAU,CAAC,MAAM,EAAE,IAAI,CAAC,kBAAkB,CAAC,aAAa,CAAC,CAAC;IACtF,MAAM,SAAS,GAAG,MAAM,MAAM,CAAC,cAAc,CAAC,MAAM,CAAC,CAAC;IACtD,OAAO,MAAM,CAAC,iBAAiB,CAAC,SAAS,CAAC,CAAC;AAC7C,CAAC;AAED;;;;;;;;;;;;GAYG;AACH,MAAM,CAAC,KAAK,UAAU,8BAA8B,CAClD,MAAoB,EACpB,IAAiB,EACjB,KAAkB;IAElB,MAAM,YAAY,GAAG,KAAK,CAAC,UAAU,CAAC,cAAc,CAAC,MAAM,CACzD,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,2BAA2B,CACjD,CAAC;IACF,IAAI,YAAY,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,CAAC,CAAC;IAExC,sEAAsE;IACtE,qEAAqE;IACrE,yCAAyC;IACzC,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,mCAAmC,CAC7D,YAAY,EACZ,IAAI,CAAC,kBAAkB,CAAC,YAAY,EAAE,EACtC,IAAI,CAAC,kBAAkB,CAAC,aAAa,CACtC,CAAC;IACF,MAAM,SAAS,GAAG,MAAM,MAAM,CAAC,cAAc,CAAC,MAAM,CAAC,CAAC;IACtD,MAAM,MAAM,CAAC,iBAAiB,CAAC,SAAS,CAAC,CAAC;IAC1C,OAAO,YAAY,CAAC,MAAM,CAAC;AAC7B,CAAC;AAED,oEAAoE;AACpE,sEAAsE;AACtE,MAAM,qBAAqB,GAAG,KAAK,CAAC;AAEpC;;;;;;;;;GASG;AACH,MAAM,CAAC,KAAK,UAAU,oBAAoB,CAAC,MAAoB,EAAE,YAAoB,OAAO;IAC1F,MAAM,QAAQ,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS,CAAC;IACxC,SAAS,CAAC;QACR,MAAM,KAAK,GAAG,MAAM,MAAM,CAAC,kBAAkB,EAAE,CAAC;QAChD,MAAM,IAAI,GAAG,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC;QAC5C,IAAI,IAAI,GAAG,EAAE;YAAE,OAAO,IAAI,CAAC;QAC3B,IAAI,IAAI,CAAC,GAAG,EAAE,IAAI,QAAQ,EAAE,CAAC;YAC3B,MAAM,IAAI,KAAK,CACb,2BAA2B,SAAS,6DAA6D,CAClG,CAAC;QACJ,CAAC;QACD,MAAM,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,UAAU,CAAC,OAAO,EAAE,qBAAqB,CAAC,CAAC,CAAC;IAC7E,CAAC;AACH,CAAC;AAED;;;;;;;;;;GAUG;AACH,MAAM,CAAC,KAAK,UAAU,sBAAsB,CAC1C,IAAiB,EACjB,MAA0B,EAC1B,EAA4D;IAE5D,MAAM,MAAM,GAAG,MAAM,sBAAsB,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;IAC1D,MAAM,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,kBAAkB,EAAE,IAAI,CAAC,aAAa,CAAC,CAAC;IAChE,IAAI,CAAC;QACH,MAAM,KAAK,GAAG,MAAM,MAAM,CAAC,kBAAkB,EAAE,CAAC;QAChD,OAAO,MAAM,EAAE,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;IACjC,CAAC;YAAS,CAAC;QACT,MAAM,MAAM,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC;IACtC,CAAC;AACH,CAAC"}

package/dist/signet-contract-binding.d.ts

@@ -0,0 +1,11 @@
+import { Contract, createSignetContractPrivateState, type SignetContractPrivateState } from "@sig-net/midnight-contract";
+export declare const signetContractManagedPath: string;
+/**
+ * The signet-contract compact-js compiled-contract binding: generated module
+ * (the contract declares no witnesses) and the compiled assets on disk.
+ * Consumed by deploy tooling (and `findDeployedContract`, should a Node
+ * client ever join the deployed contract).
+ */
+export declare const signetContractCompiledContract: import("@midnight-ntwrk/compact-js/effect/CompiledContract").CompiledContract<Contract<SignetContractPrivateState, import("@sig-net/midnight-contract").Witnesses<SignetContractPrivateState>>, SignetContractPrivateState, never>;
+export { createSignetContractPrivateState };
+//# sourceMappingURL=signet-contract-binding.d.ts.map

package/dist/signet-contract-binding.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"signet-contract-binding.d.ts","sourceRoot":"","sources":["../src/signet-contract-binding.ts"],"names":[],"mappings":"AAQA,OAAO,EACL,QAAQ,EACR,gCAAgC,EAChC,KAAK,0BAA0B,EAChC,MAAM,4BAA4B,CAAC;AAapC,eAAO,MAAM,yBAAyB,QAGrC,CAAC;AAEF;;;;;GAKG;AACH,eAAO,MAAM,8BAA8B,oOAO1C,CAAC;AAIF,OAAO,EAAE,gCAAgC,EAAE,CAAC"}

package/dist/signet-contract-binding.js

@@ -0,0 +1,30 @@
+// The NODE binding of the signet contract to its compiled assets — the
+// environment-specific half that @sig-net/midnight-contract deliberately
+// does not ship (it assumes Node + fs + assets on disk). Consumers each
+// declare their own; this is the deploy package's.
+import { createRequire } from "node:module";
+import { dirname, join } from "node:path";
+import { Contract, createSignetContractPrivateState, } from "@sig-net/midnight-contract";
+import { makeVacantCompiledContract } from "./plumbing/deploy.js";
+// The contract package's compiler output dir (contract/, keys/, zkir/) — the
+// "zk config root" deploy tooling reads proving/verifier keys from. Resolved
+// THROUGH THE PACKAGE SPECIFIER, never a workspace-relative path, so the same
+// code works in-repo and from the npm tarball: the managed/ dir sits beside
+// the entry module in both layouts (src/index.ts + src/managed in the repo,
+// dist/index.js + dist/managed in the published package — the tarball ships
+// prover keys, its build refuses to emit without them; an in-repo checkout
+// needs `yarn compile:zk` output first). createRequire rather than
+// `import.meta.resolve` because vitest's module runner does not implement
+// the latter; the CJS resolver honors the same exports map.
+export const signetContractManagedPath = join(dirname(createRequire(import.meta.url).resolve("@sig-net/midnight-contract")), "managed");
+/**
+ * The signet-contract compact-js compiled-contract binding: generated module
+ * (the contract declares no witnesses) and the compiled assets on disk.
+ * Consumed by deploy tooling (and `findDeployedContract`, should a Node
+ * client ever join the deployed contract).
+ */
+export const signetContractCompiledContract = makeVacantCompiledContract("signet-contract", Contract, signetContractManagedPath);
+// Re-exported so deploy-side callers get the private state builder from the
+// same module as the binding it pairs with.
+export { createSignetContractPrivateState };
+//# sourceMappingURL=signet-contract-binding.js.map

package/dist/signet-contract-binding.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"signet-contract-binding.js","sourceRoot":"","sources":["../src/signet-contract-binding.ts"],"names":[],"mappings":"AAAA,uEAAuE;AACvE,yEAAyE;AACzE,wEAAwE;AACxE,mDAAmD;AAEnD,OAAO,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC;AAC5C,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAE1C,OAAO,EACL,QAAQ,EACR,gCAAgC,GAEjC,MAAM,4BAA4B,CAAC;AACpC,OAAO,EAAE,0BAA0B,EAAE,MAAM,sBAAsB,CAAC;AAElE,6EAA6E;AAC7E,6EAA6E;AAC7E,8EAA8E;AAC9E,4EAA4E;AAC5E,4EAA4E;AAC5E,4EAA4E;AAC5E,2EAA2E;AAC3E,mEAAmE;AACnE,0EAA0E;AAC1E,4DAA4D;AAC5D,MAAM,CAAC,MAAM,yBAAyB,GAAG,IAAI,CAC3C,OAAO,CAAC,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,OAAO,CAAC,4BAA4B,CAAC,CAAC,EAC7E,SAAS,CACV,CAAC;AAEF;;;;;GAKG;AACH,MAAM,CAAC,MAAM,8BAA8B,GAAG,0BAA0B,CAItE,iBAAiB,EACjB,QAAQ,EACR,yBAAyB,CAC1B,CAAC;AAEF,4EAA4E;AAC5E,4CAA4C;AAC5C,OAAO,EAAE,gCAAgC,EAAE,CAAC"}

package/package.json

@@ -0,0 +1,60 @@
+{
+  "name": "@sig-net/midnight-contract-deploy",
+  "version": "0.0.3",
+  "type": "module",
+  "description": "Deploy tooling for the central signet contract on Midnight: the operator deploy flow, the Node binding of @sig-net/midnight-contract to its compiled assets, and the generic deploy/wallet plumbing (node config, seed parsing, key derivation, wallet facade, unproven-tx build/submit) any Compact contract's deploy script composes.",
+  "//exports": "Local dev consumes raw TS source. `publishConfig.exports` below swaps this to the emitted ./dist at publish time, so npm consumers get JS + .d.ts while the monorepo keeps resolving to src.",
+  "exports": {
+    ".": {
+      "types": "./dist/index.d.ts",
+      "default": "./dist/index.js"
+    }
+  },
+  "files": [
+    "dist"
+  ],
+  "scripts": {
+    "build": "rm -rf dist && tsc -p tsconfig.json && tsc -p tsconfig.build.json",
+    "prepack": "yarn build",
+    "test": "vitest run",
+    "deploy": "tsx deploy.ts"
+  },
+  "publishConfig": {
+    "access": "public",
+    "main": "./dist/index.js",
+    "types": "./dist/index.d.ts",
+    "exports": {
+      ".": {
+        "types": "./dist/index.d.ts",
+        "default": "./dist/index.js"
+      }
+    }
+  },
+  "dependencies": {
+    "@effect/platform-node": "^0.107.0",
+    "@midnight-ntwrk/compact-js": "2.5.5-rc.5",
+    "@midnight-ntwrk/compact-js-node": "2.5.5-rc.5",
+    "@midnight-ntwrk/midnight-js": "5.0.0-beta.3",
+    "@midnight-ntwrk/platform-js": "^3.0.0",
+    "@midnightntwrk/ledger-v9": "1.0.0-rc.3",
+    "@midnightntwrk/wallet-sdk-abstractions": "3.0.0-beta.0",
+    "@midnightntwrk/wallet-sdk-address-format": "4.0.0-beta.2",
+    "@midnightntwrk/wallet-sdk-dust-wallet": "5.0.0-beta.2",
+    "@midnightntwrk/wallet-sdk-facade": "5.0.0-beta.2",
+    "@midnightntwrk/wallet-sdk-hd": "3.1.0-beta.1",
+    "@midnightntwrk/wallet-sdk-shielded": "4.0.0-beta.2",
+    "@midnightntwrk/wallet-sdk-unshielded-wallet": "4.0.0-beta.2",
+    "@scure/bip39": "^2.2.0",
+    "@sig-net/midnight": "^0.0.3",
+    "@sig-net/midnight-contract": "^0.0.3",
+    "effect": "^3.21.4"
+  },
+  "devDependencies": {
+    "@types/node": "^26.1.0",
+    "tsx": "^4.23.0",
+    "typescript": "^6.0.3",
+    "vitest": "^4.1.9"
+  },
+  "main": "./dist/index.js",
+  "types": "./dist/index.d.ts"
+}