@sig-net/midnight 0.0.1

package/dist/signet-response-feed.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"signet-response-feed.d.ts","sourceRoot":"","sources":["../src/signet-response-feed.ts"],"names":[],"mappings":"AAuBA,OAAO,EAGL,KAAK,iBAAiB,EACvB,MAAM,4BAA4B,CAAC;AAOpC,OAAO,EAEL,KAAK,oBAAoB,EAC1B,MAAM,mCAAmC,CAAC;AAC3C,OAAO,EAEL,KAAK,wBAAwB,EAC7B,KAAK,uBAAuB,EAC7B,MAAM,qCAAqC,CAAC;AAC7C,OAAO,KAAK,EACV,YAAY,EACZ,wBAAwB,EACzB,MAAM,sBAAsB,CAAC;AAE9B,8EAA8E;AAC9E,eAAO,MAAM,sCAAsC,OAAO,CAAC;AAE3D,qDAAqD;AACrD,MAAM,WAAW,wBAAwB;IACvC,qFAAqF;IACrF,QAAQ,CAAC,qBAAqB,EAAE,MAAM,CAAC;IACvC,uGAAuG;IACvG,QAAQ,CAAC,wBAAwB,EAAE,MAAM,CAAC;IAC1C;;;OAGG;IACH,QAAQ,CAAC,MAAM,EAAE,iBAAiB,GAAG,uBAAuB,CAAC;IAC7D,4GAA4G;IAC5G,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,CAAC;IAC9B,oHAAoH;IACpH,QAAQ,CAAC,cAAc,CAAC,EAAE,MAAM,CAAC;CAClC;AAED;;;;;;;;GAQG;AACH,qBAAa,kBAAkB;IAC7B,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAA+C;IACxE,OAAO,CAAC,QAAQ,CAAC,MAAM,CAA8B;IACrD,OAAO,CAAC,QAAQ,CAAC,cAAc,CAAS;IAIxC,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAwC;IAEhE;;;OAGG;gBACS,MAAM,EAAE,wBAAwB;IAiB5C,mEAAmE;IACnE,OAAO,CAAC,aAAa;IASrB;;;;;;;;;;;;;;;OAeG;IACG,IAAI,CACR,SAAS,EAAE,YAAY,EACvB,cAAc,EAAE,MAAM,GACrB,OAAO,CAAC,wBAAwB,EAAE,CAAC;IAoBtC;;;;;;;;;;;;;OAaG;IACI,QAAQ,CACb,SAAS,EAAE,YAAY,EACvB,cAAc,EAAE,MAAM,EACtB,IAAI,CAAC,EAAE;QAAE,MAAM,CAAC,EAAE,WAAW,CAAA;KAAE,GAC9B,qBAAqB,CAAC,wBAAwB,CAAC;IASlD;;;;;;;;;;;OAWG;IACG,mBAAmB,CACvB,SAAS,EAAE,YAAY,GACtB,OAAO,CAAC,wBAAwB,CAAC;CAGrC;AAED,iEAAiE;AACjE,MAAM,WAAW,oCAAoC;IACnD;;;;;OAKG;IACH,QAAQ,CAAC,qBAAqB,EAAE,MAAM,CAAC;IACvC;;;OAGG;IACH,QAAQ,CAAC,MAAM,EAAE,iBAAiB,GAAG,uBAAuB,CAAC;IAC7D,4GAA4G;IAC5G,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,CAAC;IAC9B,mIAAmI;IACnI,QAAQ,CAAC,cAAc,CAAC,EAAE,MAAM,CAAC;CAClC;AAED;;;;;;;;;;GAUG;AACH,qBAAa,8BAA8B;IACzC,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAiD;IAC1E,OAAO,CAAC,QAAQ,CAAC,qBAAqB,CAAS;IAC/C,OAAO,CAAC,QAAQ,CAAC,MAAM,CAA0B;IACjD,OAAO,CAAC,QAAQ,CAAC,cAAc,CAAS;IAIxC,OAAO,CAAC,QAAQ,CAAC,YAAY,CAAiD;IAE9E;;;OAGG;gBACS,MAAM,EAAE,oCAAoC;IAcxD;;;;;;;;;;;OAWG;IACG,IAAI,CAAC,SAAS,EAAE,YAAY,GAAG,OAAO,CAAC,oBAAoB,GAAG,SAAS,CAAC;IA2B9E;;;;;;;;;;OAUG;IACG,WAAW,CACf,SAAS,EAAE,YAAY,EACvB,IAAI,CAAC,EAAE;QAAE,MAAM,CAAC,EAAE,WAAW,CAAA;KAAE,GAC9B,OAAO,CAAC,oBAAoB,GAAG,SAAS,CAAC;CAU7C"}

package/dist/signet-response-feed.js

@@ -0,0 +1,234 @@
+// The requesting client's entry point for discovering MPC signature responses
+// by event observation: watch the central signet contract's
+// SignatureRespondedEvent notifications, and when one announces a post for a
+// request the client cares about, read the response log back and verify every
+// post against the request — the response-direction mirror of
+// signet-request-feed.ts. The event is only the TRIGGER for a state read; the
+// verdicts come from the ledger via the same SignetRequestResponseReader all
+// other consumers use, so an event/state indexing skew in either direction is
+// tolerated (a post visible in state before its event is still yielded; an
+// event whose write has not indexed yet is retried next cycle).
+//
+// Trust model (see "Signet Contract Ledger Layout" in Signet.compact): the
+// response log is UNAUTHENTICATED — neither the event nor the stored record
+// confers authenticity. Only the off-chain signature verification does, which
+// is why the feed yields per-post VERDICTS rather than raw responses.
+//
+// The MPC's OTHER response kind — the respond-bidirectional attestation of a
+// request's remote execution — gets the same event-gated treatment via
+// SignetRespondBidirectionalFeed (RespondBidirectionalEvent → index read),
+// but with the opposite trust model: the signet contract verified the
+// attestation IN-CIRCUIT at post time, so the feed yields the stored record
+// itself, no verdicts.
+import { SignetEventObserver, sleepUnlessAborted, } from "./signet-event-observer.js";
+import { respondBidirectionalEventCodec, signatureRespondedEventCodec, } from "./signet-events.js";
+import { readSignetContractLedgerFromState, } from "./signet-contract-state-reader.js";
+import { SignetRequestResponseReader, } from "./signet-request-response-reader.js";
+/** Default gap between poll cycles of {@link SignetResponseFeed.verdicts}. */
+export const DEFAULT_RESPONSE_FEED_POLL_INTERVAL_MS = 3000;
+/**
+ * The event-driven signature response feed. Composes a
+ * {@link SignetEventObserver} of {@link SignatureRespondedEvent} notifications
+ * (discovery) with a {@link SignetRequestResponseReader} (verification),
+ * yielding one {@link SignatureResponseVerdict} per posted response, in count
+ * order, each exactly once per feed lifetime. Consumers act on the first
+ * valid verdict and surface the rejected ones as they see fit — the feed,
+ * like the reader, never logs.
+ */
+export class SignetResponseFeed {
+    observer;
+    reader;
+    pollIntervalMs;
+    // Post counts already yielded, per request. NOT a trust boundary (the
+    // verdicts are) — just an exactly-once gate so a post is not re-judged.
+    yielded = new Map();
+    /**
+     * @param config - The contract pair, combined event/state source, and
+     *   resume floor.
+     */
+    constructor(config) {
+        this.observer = new SignetEventObserver({
+            signetContractAddress: config.signetContractAddress,
+            source: config.source,
+            codec: signatureRespondedEventCodec,
+            fromEventId: config.fromEventId,
+            pollIntervalMs: config.pollIntervalMs,
+        });
+        this.reader = new SignetRequestResponseReader({
+            requesterContractAddress: config.requesterContractAddress,
+            signetContractAddress: config.signetContractAddress,
+            publicDataProvider: config.source,
+        });
+        this.pollIntervalMs =
+            config.pollIntervalMs ?? DEFAULT_RESPONSE_FEED_POLL_INTERVAL_MS;
+    }
+    /** The yielded-count set for `requestId`, created on first use. */
+    yieldedCounts(requestId) {
+        let counts = this.yielded.get(requestId);
+        if (counts === undefined) {
+            counts = new Set();
+            this.yielded.set(requestId, counts);
+        }
+        return counts;
+    }
+    /**
+     * One-shot: the verdicts on every response post for `requestId` not yielded
+     * before, in count order. The response log is only read when a currently-
+     * visible event announces a post this feed has not yielded yet — no new
+     * event, no state query. Ledger posts the read then surfaces beyond the
+     * announced ones are yielded too (events are the trigger, the ledger is the
+     * source of truth), and a post whose event is visible but whose write has
+     * not indexed yet is simply retried next cycle.
+     *
+     * @param requestId - The request whose response posts to judge.
+     * @param expectedSigner - The EVM address (0x hex, any case) the genuine
+     *   response must be signed by — the requester's MPC-derived address.
+     * @returns The newly-judged verdicts this cycle (possibly empty).
+     * @throws Error when either contract has no state, the request is not on
+     *   the requester's ledger, or the responses ledger is inconsistent.
+     */
+    async poll(requestId, expectedSigner) {
+        const events = await this.observer.currentEvents();
+        const counts = this.yieldedCounts(requestId);
+        const announcesNew = events.some((event) => event.requestId === requestId && !counts.has(event.count));
+        if (!announcesNew) {
+            return [];
+        }
+        const { verdicts } = await this.reader.getVerifiedSignatureResponse(requestId, expectedSigner);
+        const fresh = verdicts.filter((verdict) => !counts.has(verdict.count));
+        for (const verdict of fresh) {
+            counts.add(verdict.count);
+        }
+        return fresh;
+    }
+    /**
+     * Live stream: poll + sleep, yielding the verdict on each posted response
+     * exactly once, in count order, until `opts.signal` aborts. The natural
+     * consumption is to warn on each rejected verdict and act on the first
+     * valid one (see the cli's poll-signature-response command).
+     *
+     * @param requestId - The request whose response posts to judge.
+     * @param expectedSigner - The EVM address (0x hex, any case) the genuine
+     *   response must be signed by — the requester's MPC-derived address.
+     * @param opts.signal - Abort to stop the stream.
+     * @yields Each post's verdict, in discovery order.
+     * @throws Error when either contract has no state, the request is not on
+     *   the requester's ledger, or the responses ledger is inconsistent.
+     */
+    async *verdicts(requestId, expectedSigner, opts) {
+        while (!opts?.signal?.aborted) {
+            const batch = await this.poll(requestId, expectedSigner);
+            for (const verdict of batch)
+                yield verdict;
+            if (opts?.signal?.aborted)
+                break;
+            await sleepUnlessAborted(this.pollIntervalMs, opts?.signal);
+        }
+    }
+    /**
+     * The request record a verdict's response answers, read through the feed's
+     * own reader (cached after the first fetch — free after any {@link poll}
+     * that reached verification). What a consumer needs to assemble the signed
+     * transaction from a valid verdict via
+     * `signBidirectionalRequestToSignedEVMTransaction`.
+     *
+     * @param requestId - The request id to look up.
+     * @returns The stored request record.
+     * @throws Error when the requester contract has no state or holds no
+     *   request under `requestId`.
+     */
+    async getSignatureRequest(requestId) {
+        return this.reader.getSignatureRequest(requestId);
+    }
+}
+/**
+ * The event-driven respond-bidirectional feed: composes a
+ * {@link SignetEventObserver} of {@link RespondBidirectionalEvent}
+ * notifications (discovery) with a read of the signet contract's
+ * respond-bidirectional index (the source of truth), yielding the MPC's
+ * attestation of a request's remote execution. No verdicts and no off-chain
+ * verification — the signet contract verified the attestation IN-CIRCUIT at
+ * post time (Schnorr over `(requestId, hash(serializedOutput, outputLen))`
+ * against its sealed MPC key), so the stored record is authentic by
+ * construction and there is exactly one per request (first valid write wins).
+ */
+export class SignetRespondBidirectionalFeed {
+    observer;
+    signetContractAddress;
+    source;
+    pollIntervalMs;
+    // Attestation records never change once stored (one authenticated slot per
+    // request, first valid write wins), so cache them across polls.
+    attestations = new Map();
+    /**
+     * @param config - The signet contract, combined event/state source, and
+     *   resume floor.
+     */
+    constructor(config) {
+        this.observer = new SignetEventObserver({
+            signetContractAddress: config.signetContractAddress,
+            source: config.source,
+            codec: respondBidirectionalEventCodec,
+            fromEventId: config.fromEventId,
+            pollIntervalMs: config.pollIntervalMs,
+        });
+        this.signetContractAddress = config.signetContractAddress;
+        this.source = config.source;
+        this.pollIntervalMs =
+            config.pollIntervalMs ?? DEFAULT_RESPONSE_FEED_POLL_INTERVAL_MS;
+    }
+    /**
+     * One-shot: the attestation for `requestId`, or `undefined` while none is
+     * discoverable yet. The index is only read when a currently-visible event
+     * announces `requestId`'s attestation — no event, no state query. An event
+     * whose ledger write has not indexed yet is simply retried next cycle
+     * (events are the trigger, the ledger is the source of truth).
+     *
+     * @param requestId - The request whose attestation to look for.
+     * @returns The stored attestation record, or `undefined` when its event is
+     *   not yet visible or its write not yet indexed.
+     * @throws Error when the signet contract has no state on-chain.
+     */
+    async poll(requestId) {
+        const cached = this.attestations.get(requestId);
+        if (cached !== undefined) {
+            return cached;
+        }
+        const events = await this.observer.currentEvents();
+        if (!events.some((event) => event.requestId === requestId)) {
+            return undefined;
+        }
+        const state = await this.source.queryContractState(this.signetContractAddress);
+        if (!state?.data) {
+            throw new Error(`no state data found for signet contract '${this.signetContractAddress}' - is it deployed?`);
+        }
+        const record = readSignetContractLedgerFromState(state.data).respondBidirectionalIndex.get(requestId);
+        if (record === undefined) {
+            return undefined;
+        }
+        this.attestations.set(requestId, record);
+        return record;
+    }
+    /**
+     * Live wait: poll + sleep until `requestId`'s attestation is discoverable,
+     * and return it. Runs until `opts.signal` aborts — the caller owns the
+     * give-up policy (see the cli's poll-respond-bidirectional command).
+     *
+     * @param requestId - The request whose attestation to wait for.
+     * @param opts.signal - Abort to stop waiting.
+     * @returns The stored attestation record, or `undefined` when aborted
+     *   before one was discovered.
+     * @throws Error when the signet contract has no state on-chain.
+     */
+    async attestation(requestId, opts) {
+        while (!opts?.signal?.aborted) {
+            const record = await this.poll(requestId);
+            if (record !== undefined) {
+                return record;
+            }
+            await sleepUnlessAborted(this.pollIntervalMs, opts?.signal);
+        }
+        return undefined;
+    }
+}
+//# sourceMappingURL=signet-response-feed.js.map

package/dist/signet-response-feed.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"signet-response-feed.js","sourceRoot":"","sources":["../src/signet-response-feed.ts"],"names":[],"mappings":"AAAA,8EAA8E;AAC9E,4DAA4D;AAC5D,6EAA6E;AAC7E,8EAA8E;AAC9E,8DAA8D;AAC9D,8EAA8E;AAC9E,6EAA6E;AAC7E,8EAA8E;AAC9E,2EAA2E;AAC3E,gEAAgE;AAChE,EAAE;AACF,2EAA2E;AAC3E,4EAA4E;AAC5E,8EAA8E;AAC9E,sEAAsE;AACtE,EAAE;AACF,6EAA6E;AAC7E,uEAAuE;AACvE,2EAA2E;AAC3E,sEAAsE;AACtE,4EAA4E;AAC5E,uBAAuB;AAEvB,OAAO,EACL,mBAAmB,EACnB,kBAAkB,GAEnB,MAAM,4BAA4B,CAAC;AACpC,OAAO,EACL,8BAA8B,EAC9B,4BAA4B,GAG7B,MAAM,oBAAoB,CAAC;AAC5B,OAAO,EACL,iCAAiC,GAElC,MAAM,mCAAmC,CAAC;AAC3C,OAAO,EACL,2BAA2B,GAG5B,MAAM,qCAAqC,CAAC;AAM7C,8EAA8E;AAC9E,MAAM,CAAC,MAAM,sCAAsC,GAAG,IAAI,CAAC;AAmB3D;;;;;;;;GAQG;AACH,MAAM,OAAO,kBAAkB;IACZ,QAAQ,CAA+C;IACvD,MAAM,CAA8B;IACpC,cAAc,CAAS;IAExC,sEAAsE;IACtE,wEAAwE;IACvD,OAAO,GAAG,IAAI,GAAG,EAA6B,CAAC;IAEhE;;;OAGG;IACH,YAAY,MAAgC;QAC1C,IAAI,CAAC,QAAQ,GAAG,IAAI,mBAAmB,CAAC;YACtC,qBAAqB,EAAE,MAAM,CAAC,qBAAqB;YACnD,MAAM,EAAE,MAAM,CAAC,MAAM;YACrB,KAAK,EAAE,4BAA4B;YACnC,WAAW,EAAE,MAAM,CAAC,WAAW;YAC/B,cAAc,EAAE,MAAM,CAAC,cAAc;SACtC,CAAC,CAAC;QACH,IAAI,CAAC,MAAM,GAAG,IAAI,2BAA2B,CAAC;YAC5C,wBAAwB,EAAE,MAAM,CAAC,wBAAwB;YACzD,qBAAqB,EAAE,MAAM,CAAC,qBAAqB;YACnD,kBAAkB,EAAE,MAAM,CAAC,MAAM;SAClC,CAAC,CAAC;QACH,IAAI,CAAC,cAAc;YACjB,MAAM,CAAC,cAAc,IAAI,sCAAsC,CAAC;IACpE,CAAC;IAED,mEAAmE;IAC3D,aAAa,CAAC,SAAuB;QAC3C,IAAI,MAAM,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;QACzC,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;YACzB,MAAM,GAAG,IAAI,GAAG,EAAE,CAAC;YACnB,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC;QACtC,CAAC;QACD,OAAO,MAAM,CAAC;IAChB,CAAC;IAED;;;;;;;;;;;;;;;OAeG;IACH,KAAK,CAAC,IAAI,CACR,SAAuB,EACvB,cAAsB;QAEtB,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,aAAa,EAAE,CAAC;QACnD,MAAM,MAAM,GAAG,IAAI,CAAC,aAAa,CAAC,SAAS,CAAC,CAAC;QAC7C,MAAM,YAAY,GAAG,MAAM,CAAC,IAAI,CAC9B,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,SAAS,KAAK,SAAS,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC,CACrE,CAAC;QACF,IAAI,CAAC,YAAY,EAAE,CAAC;YAClB,OAAO,EAAE,CAAC;QACZ,CAAC;QACD,MAAM,EAAE,QAAQ,EAAE,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,4BAA4B,CACjE,SAAS,EACT,cAAc,CACf,CAAC;QACF,MAAM,KAAK,GAAG,QAAQ,CAAC,MAAM,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC;QACvE,KAAK,MAAM,OAAO,IAAI,KAAK,EAAE,CAAC;YAC5B,MAAM,CAAC,GAAG,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;QAC5B,CAAC;QACD,OAAO,KAAK,CAAC;IACf,CAAC;IAED;;;;;;;;;;;;;OAaG;IACH,KAAK,CAAC,CAAC,QAAQ,CACb,SAAuB,EACvB,cAAsB,EACtB,IAA+B;QAE/B,OAAO,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC;YAC9B,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,cAAc,CAAC,CAAC;YACzD,KAAK,MAAM,OAAO,IAAI,KAAK;gBAAE,MAAM,OAAO,CAAC;YAC3C,IAAI,IAAI,EAAE,MAAM,EAAE,OAAO;gBAAE,MAAM;YACjC,MAAM,kBAAkB,CAAC,IAAI,CAAC,cAAc,EAAE,IAAI,EAAE,MAAM,CAAC,CAAC;QAC9D,CAAC;IACH,CAAC;IAED;;;;;;;;;;;OAWG;IACH,KAAK,CAAC,mBAAmB,CACvB,SAAuB;QAEvB,OAAO,IAAI,CAAC,MAAM,CAAC,mBAAmB,CAAC,SAAS,CAAC,CAAC;IACpD,CAAC;CACF;AAsBD;;;;;;;;;;GAUG;AACH,MAAM,OAAO,8BAA8B;IACxB,QAAQ,CAAiD;IACzD,qBAAqB,CAAS;IAC9B,MAAM,CAA0B;IAChC,cAAc,CAAS;IAExC,2EAA2E;IAC3E,gEAAgE;IAC/C,YAAY,GAAG,IAAI,GAAG,EAAsC,CAAC;IAE9E;;;OAGG;IACH,YAAY,MAA4C;QACtD,IAAI,CAAC,QAAQ,GAAG,IAAI,mBAAmB,CAAC;YACtC,qBAAqB,EAAE,MAAM,CAAC,qBAAqB;YACnD,MAAM,EAAE,MAAM,CAAC,MAAM;YACrB,KAAK,EAAE,8BAA8B;YACrC,WAAW,EAAE,MAAM,CAAC,WAAW;YAC/B,cAAc,EAAE,MAAM,CAAC,cAAc;SACtC,CAAC,CAAC;QACH,IAAI,CAAC,qBAAqB,GAAG,MAAM,CAAC,qBAAqB,CAAC;QAC1D,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC,MAAM,CAAC;QAC5B,IAAI,CAAC,cAAc;YACjB,MAAM,CAAC,cAAc,IAAI,sCAAsC,CAAC;IACpE,CAAC;IAED;;;;;;;;;;;OAWG;IACH,KAAK,CAAC,IAAI,CAAC,SAAuB;QAChC,MAAM,MAAM,GAAG,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;QAChD,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;YACzB,OAAO,MAAM,CAAC;QAChB,CAAC;QACD,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,aAAa,EAAE,CAAC;QACnD,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,SAAS,KAAK,SAAS,CAAC,EAAE,CAAC;YAC3D,OAAO,SAAS,CAAC;QACnB,CAAC;QACD,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,kBAAkB,CAChD,IAAI,CAAC,qBAAqB,CAC3B,CAAC;QACF,IAAI,CAAC,KAAK,EAAE,IAAI,EAAE,CAAC;YACjB,MAAM,IAAI,KAAK,CACb,4CAA4C,IAAI,CAAC,qBAAqB,qBAAqB,CAC5F,CAAC;QACJ,CAAC;QACD,MAAM,MAAM,GAAG,iCAAiC,CAC9C,KAAK,CAAC,IAAI,CACX,CAAC,yBAAyB,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;QAC3C,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;YACzB,OAAO,SAAS,CAAC;QACnB,CAAC;QACD,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC;QACzC,OAAO,MAAM,CAAC;IAChB,CAAC;IAED;;;;;;;;;;OAUG;IACH,KAAK,CAAC,WAAW,CACf,SAAuB,EACvB,IAA+B;QAE/B,OAAO,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC;YAC9B,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;YAC1C,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;gBACzB,OAAO,MAAM,CAAC;YAChB,CAAC;YACD,MAAM,kBAAkB,CAAC,IAAI,CAAC,cAAc,EAAE,IAAI,EAAE,MAAM,CAAC,CAAC;QAC9D,CAAC;QACD,OAAO,SAAS,CAAC;IACnB,CAAC;CACF"}

package/package.json

@@ -0,0 +1,47 @@
+{
+  "name": "@sig-net/midnight",
+  "version": "0.0.1",
+  "type": "module",
+  "description": "Midnight-side sig-net integration — the seed of a future signet.js Midnight adapter.",
+  "//exports": "Local dev consumes raw TS source. `publishConfig.exports` below swaps this to the emitted ./dist at publish time, so npm consumers get JS + .d.ts while the monorepo keeps resolving to src.",
+  "exports": {
+    ".": {
+      "types": "./dist/index.d.ts",
+      "default": "./dist/index.js"
+    }
+  },
+  "files": [
+    "dist",
+    "src"
+  ],
+  "scripts": {
+    "compile": "compact compile --skip-zk src/circuits.compact src/managed",
+    "build": "rm -rf dist && tsc -p tsconfig.json && tsc -p tsconfig.build.json && cp -R src/managed dist/managed",
+    "prepack": "yarn build",
+    "test": "vitest run --passWithNoTests"
+  },
+  "publishConfig": {
+    "access": "public",
+    "main": "./dist/index.js",
+    "types": "./dist/index.d.ts",
+    "exports": {
+      ".": {
+        "types": "./dist/index.d.ts",
+        "default": "./dist/index.js"
+      }
+    }
+  },
+  "dependencies": {
+    "@midnight-ntwrk/compact-runtime": "0.18.0-rc.0",
+    "@midnight-ntwrk/midnight-js-types": "5.0.0-beta.3",
+    "@noble/curves": "^2.2.0",
+    "ethers": "^6.17.0"
+  },
+  "devDependencies": {
+    "@types/node": "^26.1.0",
+    "typescript": "^6.0.3",
+    "vitest": "^4.1.9"
+  },
+  "main": "./dist/index.js",
+  "types": "./dist/index.d.ts"
+}

package/src/Schnorr.compact

@@ -0,0 +1,63 @@
+// ============================================================================
+// Schnorr — shared Compact library: the off-chain-callable challenge circuit
+// for Schnorr signatures on the Jubjub curve embedded in BLS12-381.
+// ============================================================================
+// Verification itself is CompactStandardLibrary's `jubjubSchnorrVerify`
+// (contracts call it directly). The standard library keeps its challenge
+// hashing internal, but off-chain SIGNERS need the same challenge value to
+// compute the response scalar, so this module exports it as a pure circuit
+// (compiled via circuits.compact) — never a TS re-implementation.
+//
+// `SchnorrHashInput` mirrors the standard library's internal
+// `JubjubSchnorrHashInput` field-for-field; the signet-midnight sign→verify
+// round-trip test (schnorrSign + contract-side jubjubSchnorrVerify) keeps the
+// two in agreement.
+//
+// The sig-net MPC attests remote EVM execution by Schnorr-signing a message
+// on Jubjub (see signetAttestationMessage in Signet.compact); contracts
+// verify that signature in-circuit — the signet contract at post time, the
+// vault again at claim time. The challenge is Poseidon (transientHash), so
+// off-chain signers MUST compute it through the COMPILED schnorrChallenge
+// pure circuit (re-exported via circuits.compact).
+//
+// Import from a contract (resolved through node_modules via COMPACT_PATH —
+// see the consuming package's compile script):
+//   import "@sig-net/midnight/src/Schnorr" prefix Schnorr_;
+//
+// This file must contain ONLY this module (plus comments) so the compiler
+// accepts it as an external module import.
+
+module Schnorr {
+  import CompactStandardLibrary;
+
+  // The tuple Poseidon-hashed into the challenge: both points' coordinates
+  // then the message limbs, in exactly this order — the wire format the MPC
+  // signs against (identical to the standard library's internal
+  // JubjubSchnorrHashInput). Never reorder.
+  struct SchnorrHashInput<#n> {
+    ann_x: Field;
+    ann_y: Field;
+    pk_x: Field;
+    pk_y: Field;
+    msg: Vector<n, Field>;
+  }
+
+  // The Schnorr challenge as `jubjubSchnorrVerify` computes it: the Poseidon
+  // transientHash of (R, pk, msg), reduced into Jubjub's scalar field (the
+  // `as JubjubScalar` cast reduces mod the Jubjub subgroup order; the cast
+  // back to Field is exact). Off-chain signers use the returned value
+  // directly: s = (k + c * sk) mod JUBJUB_ORDER.
+  export pure circuit schnorrChallenge(
+                        ann_x: Field,
+                        ann_y: Field,
+                        pk_x: Field,
+                        pk_y: Field,
+                        msg: Vector<4, Field>
+                        ): Field {
+    const cFull: Field =
+            transientHash<SchnorrHashInput<4>>(
+              SchnorrHashInput<4> { ann_x: ann_x, ann_y: ann_y, pk_x: pk_x, pk_y: pk_y, msg: msg }
+              );
+    return (cFull as JubjubScalar) as Field;
+  }
+}