@sig-net/midnight 0.0.2 → 0.0.3

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@sig-net/midnight",
-  "version": "0.0.2",
+  "version": "0.0.3",
   "type": "module",
   "description": "Midnight-side sig-net integration — the seed of a future signet.js Midnight adapter.",
   "//exports": "Local dev consumes raw TS source. `publishConfig.exports` below swaps this to the emitted ./dist at publish time, so npm consumers get JS + .d.ts while the monorepo keeps resolving to src.",
@@ -12,7 +12,7 @@
   },
   "files": [
     "dist",
-    "src"
+    "src/*.compact"
   ],
   "scripts": {
     "compile": "compact compile --skip-zk src/circuits.compact src/managed",

package/src/constants.ts

@@ -1,97 +0,0 @@
-// MPC routing constants + the padded-ASCII codec for the signet request
-// structs. Field widths mirror Signet.compact (the wire format —
-// keep in lockstep); the string constants are the values the MPC network
-// routes on. Ported from the MVP's contract-cli signet/constants.ts, adapted
-// to the refactor's zero-padded convention (Compact `pad(N, "text")`) — the
-// MVP's 2-byte length-prefixed codec is gone with the old layout.
-//
-// The routing constants belong in github.com/sig-net/signet.js — kept here
-// until upstreamed.
-
-/** Width of `SignBidirectionalRequest.caip2Id` (`Bytes<32>`). */
-export const CAIP2_ID_BYTES = 32;
-
-/** Width of `SignBidirectionalRequest.algo` (`Bytes<32>`). */
-export const ALGO_BYTES = 32;
-
-/** Width of `SignBidirectionalRequest.dest` (`Bytes<32>`). */
-export const DEST_BYTES = 32;
-
-/** Width of `SignBidirectionalRequest.params` (`Bytes<64>`). */
-export const MPC_PARAMS_BYTES = 64;
-
-/** Width of `SignBidirectionalRequest.outputDeserializationSchema` (`Bytes<128>`). */
-export const OUTPUT_DESERIALIZATION_SCHEMA_BYTES = 128;
-
-/** Width of `SignBidirectionalRequest.respondSerializationSchema` (`Bytes<128>`). */
-export const RESPOND_SERIALIZATION_SCHEMA_BYTES = 128;
-
-/** Width of `EVMCalldata.selector` (`Bytes<4>`) — the literal first 4 calldata bytes. */
-export const SELECTOR_BYTES = 4;
-
-/** Width of `RespondBidirectional.serializedOutput` (`Bytes<128>`). */
-export const SERIALIZED_OUTPUT_BYTES = 128;
-
-/**
- * The MPC's error sentinel: `serializedOutput` beginning with these four
- * bytes marks a failed/absent remote execution (mirrors the sig-net MPC's
- * MAGIC_ERROR_PREFIX).
- */
-export const MPC_ERROR_SENTINEL = new Uint8Array([0xde, 0xad, 0xbe, 0xef]);
-
-/**
- * Whether an attestation's serialized output reports a successful remote
- * execution: the first byte is 1 — the little-endian encoding of the
- * ABI-decoded success flag, matching the circuits'
- * `serializedOutput as Field == 1` check.
- *
- * @param serializedOutput - The attestation's serialized output.
- * @returns `true` when the remote call succeeded.
- */
-export function executionSucceeded(serializedOutput: Uint8Array): boolean {
-  return serializedOutput[0] === 1;
-}
-
-/**
- * Whether an attestation's serialized output is the MPC's error sentinel
- * (see {@link MPC_ERROR_SENTINEL}) rather than a call result.
- *
- * @param serializedOutput - The attestation's serialized output.
- * @returns `true` when the MPC reported an execution error.
- */
-export function isExecutionError(serializedOutput: Uint8Array): boolean {
-  return MPC_ERROR_SENTINEL.every((byte, index) => serializedOutput[index] === byte);
-}
-
-/** Signature algorithm the MPC uses for EVM chains (`algo` field value). */
-export const SIGNET_ALGO_ECDSA = "ecdsa";
-
-/** Destination chain family for EVM requests (`dest` field value). */
-export const SIGNET_DEST_ETHEREUM = "ethereum";
-
-/**
- * Default MPC key version (`keyVersion` field value). Version 0 is the
- * unsupported legacy format — the canonical MPC (and
- * `constructSignBidirectionalRequest`) requires `keyVersion >= 1`.
- */
-export const SIGNET_DEFAULT_KEY_VERSION = 1n;
-
-/**
- * Encode text as zero-padded ASCII bytes — the Compact `pad(N, "text")`
- * convention every string-ish field of the request structs uses (consumers
- * NUL-trim on decode).
- *
- * @param text - The ASCII text to encode.
- * @param length - The fixed field width in bytes.
- * @returns `text`'s bytes followed by zero padding to exactly `length`.
- * @throws If the encoded text does not fit in `length` bytes.
- */
-export function asciiPadded(text: string, length: number): Uint8Array {
-  const encoded = new TextEncoder().encode(text);
-  if (encoded.length > length) {
-    throw new Error(`"${text}" is ${encoded.length} bytes — does not fit the ${length}-byte field`);
-  }
-  const out = new Uint8Array(length);
-  out.set(encoded);
-  return out;
-}

package/src/epsilon-derivation.ts

@@ -1,62 +0,0 @@
-// Epsilon key derivation: contract address + path -> derived EVM account.
-//
-// This belongs in github.com/sig-net/signet.js — kept here until upstreamed.
-// It is NOT imported from signet.js because signet.js's `deriveChildPublicKey`
-// implements the v2.0.0 COLON-separated epsilon format
-// (`sig.network v2.0.0 epsilon derivation:<chainId>:<requester>:<path>`),
-// which is incompatible with the live sig-net response server's v1.0.0
-// COMMA-separated format (see solana-signet-program
-// clients/response-server/src/modules/CryptoUtils.ts). The two schemes hash
-// different strings and therefore derive different accounts; this module
-// matches the server.
-
-import { secp256k1 } from "@noble/curves/secp256k1.js";
-import { computeAddress, keccak256, SigningKey, toUtf8Bytes } from "ethers";
-
-/**
- * Domain prefix of the sig-net v1.0.0 epsilon derivation scheme, as used by
- * the live response server. The full derivation string is
- * `<prefix>,<chainId>,<requester>,<path>` (comma-separated).
- */
-export const EPSILON_DERIVATION_PREFIX = "sig.network v1.0.0 epsilon derivation";
-
-/**
- * CAIP-2 chain id under which the MPC derives keys for requests originating
- * from Midnight contracts.
- */
-export const MIDNIGHT_TESTNET_CHAIN_ID = "midnight:testnet";
-
-/**
- * Derive the EVM address the MPC network signs from for a given Midnight
- * contract and derivation path, using the sig-net v1.0.0 epsilon scheme:
- * `epsilon = keccak256("<prefix>,<chainId>,<contractAddress>,<path>")` and
- * `derivedPubKey = mpcRootPubKey + epsilon * G` on secp256k1.
- *
- * The MPC treats `path` as an opaque string: the vault's own account uses the
- * literal path `"vault"`, a user's account uses the lowercase hex of their
- * identity commitment.
- *
- * @param mpcSecp256k1PubkeyHex - The MPC root secp256k1 public key as 0x-hex
- *   (compressed or uncompressed; normalized internally).
- * @param contractAddress - The Midnight contract address the request
- *   originates from (the "requester" in the derivation string).
- * @param path - The derivation path string (e.g. `"vault"` or a commitment
- *   hex).
- * @param chainId - CAIP-2 chain id component of the derivation string.
- * @returns The derived EVM address as a 0x-prefixed EIP-55 checksummed string.
- */
-export function deriveEvmAddress(
-  mpcSecp256k1PubkeyHex: string,
-  contractAddress: string,
-  path: string,
-  chainId: string = MIDNIGHT_TESTNET_CHAIN_ID,
-): string {
-  const fullPath = `${EPSILON_DERIVATION_PREFIX},${chainId},${contractAddress},${path}`;
-  // Reduce mod n before multiplying: noble throws on scalars >= n, whereas the
-  // server's scalar arithmetic reduces implicitly.
-  const epsilon = BigInt(keccak256(toUtf8Bytes(fullPath))) % secp256k1.Point.Fn.ORDER;
-  const rootPubKeyHex = SigningKey.computePublicKey(mpcSecp256k1PubkeyHex, false);
-  const rootPoint = secp256k1.Point.fromHex(rootPubKeyHex.slice(2));
-  const derivedPoint = epsilon === 0n ? rootPoint : rootPoint.add(secp256k1.Point.BASE.multiply(epsilon));
-  return computeAddress(`0x${derivedPoint.toHex(false)}`);
-}

package/src/index.ts

@@ -1,29 +0,0 @@
-// Midnight-side sig-net integration. See README.md for the module plan:
-// request-id, calldata-builder, tx-builder, codec, constants, schnorr,
-// state-reader, response-poller — ported bit by bit from the old repo's
-// boilerplate/contract-cli/src/signet/.
-
-export * from "./signet-requests.ts";
-export * from "./signature-state-reading.ts";
-export * from "./signature-requests-state-reader.ts";
-export * from "./signet-contract-state-reader.ts";
-export * from "./signature-response-verification.ts";
-export * from "./signet-request-response-reader.ts";
-export * from "./signet-request-resolver.ts";
-export * from "./signet-request-feed.ts";
-export * from "./constants.ts";
-export * from "./epsilon-derivation.ts";
-export * from "./schnorr.ts";
-
-/**
- * Compiled pure circuits of Signet.compact (run `yarn compile` first): the
- * executable reference implementation of the client-agnostic circuits —
- * path<->identity checks, the attestation message, the notification packer
- * (`constructSignBidirectionalNotificationV1`), and the Schnorr challenge.
- * Off-chain code MUST use these instead of re-porting the algorithms — they
- * are the same compiled logic the contracts prove. The generic request
- * circuits cannot be compiled here (type-parameterized): request construction
- * is contract-only, and request-id hashing has a documented-deviation TS twin
- * (`calculateRequestId` in signet-requests.ts).
- */
-export { pureCircuits, type PureCircuits } from "./managed/contract/index.js";

package/src/managed/compiler/contract-info.json

@@ -1,222 +0,0 @@
-{
-  "compiler-version": "0.33.0",
-  "language-version": "0.25.0",
-  "runtime-version": "0.18.0-rc.0",
-  "circuits": [
-    {
-      "name": "constructSignBidirectionalNotificationV1",
-      "pure": true,
-      "proof": false,
-      "arguments": [
-        {
-          "name": "callerAddress",
-          "type": {
-            "type-name": "Struct",
-            "name": "ContractAddress",
-            "elements": [
-              {
-                "name": "bytes",
-                "type": {
-                  "type-name": "Bytes",
-                  "length": 32
-                }
-              }
-            ]
-          }
-        },
-        {
-          "name": "requestId",
-          "type": {
-            "type-name": "Bytes",
-            "length": 32
-          }
-        },
-        {
-          "name": "requestsIndexField",
-          "type": {
-            "type-name": "Uint",
-            "maxval": 255
-          }
-        }
-      ],
-      "result-type": {
-        "type-name": "Struct",
-        "name": "SignBidirectionalNotification",
-        "elements": [
-          {
-            "name": "version",
-            "type": {
-              "type-name": "Uint",
-              "maxval": 255
-            }
-          },
-          {
-            "name": "payload",
-            "type": {
-              "type-name": "Bytes",
-              "length": 65
-            }
-          }
-        ]
-      }
-    },
-    {
-      "name": "evmAddressAbiValue",
-      "pure": true,
-      "proof": false,
-      "arguments": [
-        {
-          "name": "addr",
-          "type": {
-            "type-name": "Bytes",
-            "length": 20
-          }
-        }
-      ],
-      "result-type": {
-        "type-name": "Field"
-      }
-    },
-    {
-      "name": "signetAttestationMessage",
-      "pure": true,
-      "proof": false,
-      "arguments": [
-        {
-          "name": "requestId",
-          "type": {
-            "type-name": "Alias",
-            "name": "RequestId",
-            "type": {
-              "type-name": "Bytes",
-              "length": 32
-            }
-          }
-        },
-        {
-          "name": "serializedOutput",
-          "type": {
-            "type-name": "Bytes",
-            "length": 128
-          }
-        },
-        {
-          "name": "outputLen",
-          "type": {
-            "type-name": "Uint",
-            "maxval": 255
-          }
-        }
-      ],
-      "result-type": {
-        "type-name": "Vector",
-        "length": 4,
-        "type": {
-          "type-name": "Field"
-        }
-      }
-    },
-    {
-      "name": "assertHexOf",
-      "pure": true,
-      "proof": false,
-      "arguments": [
-        {
-          "name": "commitment",
-          "type": {
-            "type-name": "Bytes",
-            "length": 32
-          }
-        },
-        {
-          "name": "hexStr",
-          "type": {
-            "type-name": "Bytes",
-            "length": 64
-          }
-        }
-      ],
-      "result-type": {
-        "type-name": "Tuple",
-        "types": [
-        ]
-      }
-    },
-    {
-      "name": "assertPathCommitment",
-      "pure": true,
-      "proof": false,
-      "arguments": [
-        {
-          "name": "commitment",
-          "type": {
-            "type-name": "Bytes",
-            "length": 32
-          }
-        },
-        {
-          "name": "path",
-          "type": {
-            "type-name": "Bytes",
-            "length": 256
-          }
-        }
-      ],
-      "result-type": {
-        "type-name": "Tuple",
-        "types": [
-        ]
-      }
-    },
-    {
-      "name": "schnorrChallenge",
-      "pure": true,
-      "proof": false,
-      "arguments": [
-        {
-          "name": "ann_x",
-          "type": {
-            "type-name": "Field"
-          }
-        },
-        {
-          "name": "ann_y",
-          "type": {
-            "type-name": "Field"
-          }
-        },
-        {
-          "name": "pk_x",
-          "type": {
-            "type-name": "Field"
-          }
-        },
-        {
-          "name": "pk_y",
-          "type": {
-            "type-name": "Field"
-          }
-        },
-        {
-          "name": "msg",
-          "type": {
-            "type-name": "Vector",
-            "length": 4,
-            "type": {
-              "type-name": "Field"
-            }
-          }
-        }
-      ],
-      "result-type": {
-        "type-name": "Field"
-      }
-    }
-  ],
-  "witnesses": [
-  ],
-  "contracts": [
-  ],
-  "ledger": [
-  ]
-}

package/src/managed/compiler/contract-manifest.json

@@ -1,32 +0,0 @@
-{
-  "manifest-version": "1",
-  "compiler-version": "0.33.0",
-  "language-version": "0.25.0",
-  "runtime-version": "0.18.0-rc.0",
-  "compiler": {
-    "type": "directory",
-    "contract-info.json": {
-      "type": "file",
-      "size": 4406,
-      "hash": "d0757fe6d320a0d3162ab00faf3ebb74d28fa678f588b83957212086eb4b3080"
-    }
-  },
-  "contract": {
-    "type": "directory",
-    "index.d.ts": {
-      "type": "file",
-      "size": 3842,
-      "hash": "4edb5966c4b41a810691af9a12abcd359a517d95dcf6bb91faedef4da2d23019"
-    },
-    "index.js": {
-      "type": "file",
-      "size": 42888,
-      "hash": "de719f4711b4def77673f55b0b54c2b96a9039fdd001358d1be9a400a19aeb61"
-    },
-    "index.js.map": {
-      "type": "file",
-      "size": 3115,
-      "hash": "42d40aaf65da98f7b9df2e329b13fca3c0526418eb9697f64b6a562b12ed8b82"
-    }
-  }
-}

package/src/managed/contract/index.d.ts

@@ -1,78 +0,0 @@
-import type * as __compactRuntime from '@midnight-ntwrk/compact-runtime';
-
-export type Witnesses<PS> = {
-}
-
-export type ImpureCircuits<PS> = {
-}
-
-export type ProvableCircuits<PS> = {
-}
-
-export type PureCircuits = {
-  constructSignBidirectionalNotificationV1(callerAddress_0: { bytes: Uint8Array
-                                                            },
-                                           requestId_0: Uint8Array,
-                                           requestsIndexField_0: bigint): { version: bigint,
-                                                                            payload: Uint8Array
-                                                                          };
-  evmAddressAbiValue(addr_0: Uint8Array): bigint;
-  signetAttestationMessage(requestId_0: Uint8Array,
-                           serializedOutput_0: Uint8Array,
-                           outputLen_0: bigint): bigint[];
-  assertHexOf(commitment_0: Uint8Array, hexStr_0: Uint8Array): [];
-  assertPathCommitment(commitment_0: Uint8Array, path_0: Uint8Array): [];
-  schnorrChallenge(ann_x_0: bigint,
-                   ann_y_0: bigint,
-                   pk_x_0: bigint,
-                   pk_y_0: bigint,
-                   msg_0: bigint[]): bigint;
-}
-
-export type Circuits<PS> = {
-  constructSignBidirectionalNotificationV1(context: __compactRuntime.CircuitContext<PS>,
-                                           callerAddress_0: { bytes: Uint8Array
-                                                            },
-                                           requestId_0: Uint8Array,
-                                           requestsIndexField_0: bigint): Promise<__compactRuntime.CircuitResults<PS, { version: bigint,
-                                                                                                                        payload: Uint8Array
-                                                                                                                      }>>;
-  evmAddressAbiValue(context: __compactRuntime.CircuitContext<PS>,
-                     addr_0: Uint8Array): Promise<__compactRuntime.CircuitResults<PS, bigint>>;
-  signetAttestationMessage(context: __compactRuntime.CircuitContext<PS>,
-                           requestId_0: Uint8Array,
-                           serializedOutput_0: Uint8Array,
-                           outputLen_0: bigint): Promise<__compactRuntime.CircuitResults<PS, bigint[]>>;
-  assertHexOf(context: __compactRuntime.CircuitContext<PS>,
-              commitment_0: Uint8Array,
-              hexStr_0: Uint8Array): Promise<__compactRuntime.CircuitResults<PS, []>>;
-  assertPathCommitment(context: __compactRuntime.CircuitContext<PS>,
-                       commitment_0: Uint8Array,
-                       path_0: Uint8Array): Promise<__compactRuntime.CircuitResults<PS, []>>;
-  schnorrChallenge(context: __compactRuntime.CircuitContext<PS>,
-                   ann_x_0: bigint,
-                   ann_y_0: bigint,
-                   pk_x_0: bigint,
-                   pk_y_0: bigint,
-                   msg_0: bigint[]): Promise<__compactRuntime.CircuitResults<PS, bigint>>;
-}
-
-export type Ledger = {
-}
-
-export type ContractReferenceLocations = any;
-
-export declare const contractReferenceLocations : ContractReferenceLocations;
-
-export declare class Contract<PS = any, W extends Witnesses<PS> = Witnesses<PS>> {
-  witnesses: W;
-  circuits: Circuits<PS>;
-  impureCircuits: ImpureCircuits<PS>;
-  provableCircuits: ProvableCircuits<PS>;
-  constructor(witnesses: W);
-  initialState(context: __compactRuntime.ConstructorContext<PS>): Promise<__compactRuntime.ConstructorResult<PS>>;
-}
-
-export declare function ledger(state: __compactRuntime.StateValue | __compactRuntime.ChargedState): Ledger;
-export declare const pureCircuits: PureCircuits;
-export declare const expectedVk: Record<string, string>;