@sig-net/midnight 0.0.6 → 0.0.7

package/src/circuits.compact

@@ -3,35 +3,36 @@ pragma language_version >= 0.25;
 // Compiled export surface of the Signet module.
 //
 // Signet.compact must stay a module-only file (that is what lets contracts
-// import it), but a bare module compiles to nothing. This
-// contract-less program re-exports the module's pure circuits so the compiler
-// emits them as pureCircuits in managed/contract/index.js — giving the
-// package an in-process, provable-logic-identical reference implementation:
-// unit tests exercise the REAL circuits, and off-chain code (path checks,
-// attestation messages, notification packing) reuses them
+// import it), but a bare module compiles to nothing. This contract-less
+// program re-exports the module's pure circuits so the compiler emits them as
+// pureCircuits in managed/contract/index.js, giving the package an
+// in-process, provable-logic-identical reference implementation: unit tests
+// exercise the REAL circuits, and off-chain code (the attestation digest,
+// response verification, key-pin hashing, notification packing) reuses them
 // instead of hand-porting the algorithms. Off-chain code only ever DECODES a
-// SignBidirectionalNotification (fixed-offset byte reads), but tests build
-// fixtures with the compiled packer to pin the pack<->decode lockstep.
+// SignBidirectionalEventNotification (fixed-offset byte reads), but tests
+// build fixtures with the compiled packer to pin the pack<->decode lockstep.
 //
 // ONLY the non-generic circuits are exported here. The request circuits
-// (calculateRequestId, constructSignBidirectionalRequest) are generic over the
-// tx-params type, the compiler cannot export type-parameterized circuits from
-// the top level, and this package is client-agnostic — a capacity
-// instantiation is a CLIENT contract's choice and never belongs here.
-// constructSignBidirectionalRequest is contract-only, so it needs no off-chain
-// copy; calculateRequestId IS needed off-chain (clients recompute ledger map
-// keys), so it alone has a documented-deviation TS twin in signet-requests.ts,
-// kept honest by caller-contract's submitSignatureRequest round-trip test.
+// (calculateRequestId, constructSignBidirectionalEvent) are generic over the
+// tx-params type and schema lengths, the compiler cannot export
+// type-parameterized circuits from the top level, and this package is
+// client-agnostic: a capacity instantiation is a CLIENT contract's choice and
+// never belongs here. constructSignBidirectionalEvent is contract-only, so it
+// needs no off-chain copy. calculateRequestId IS needed off-chain (clients
+// recompute ledger map keys), so it alone has a documented-deviation TS twin
+// in signet-requests.ts, kept honest by caller-contract's
+// submitSignatureRequest round-trip test.
 //
 // Compile with --skip-zk only: pure circuits run in TS without proving keys.
+// The secp256k1 types require the --feature-zkir-v3 compiler flag.
 
 import CompactStandardLibrary;
 import "./Signet";
 
 export {
-  signetAttestationMessage,
-  assertHexOf,
-  assertPathCommitment,
-  constructSignBidirectionalNotificationV1,
-  evmAddressAbiValue
+  signetAttestationDigest,
+  verifyRespondBidirectionalEvent,
+  signetKeyHash,
+  constructSignBidirectionalEventNotificationV1
 };

package/dist/ecdsa.d.ts

@@ -1,114 +0,0 @@
-import { type Secp256k1Point } from "@midnight-ntwrk/compact-runtime";
-export type { Secp256k1Point } from "@midnight-ntwrk/compact-runtime";
-/** secp256k1 curve (group) order n — the scalar field the signature r, s live in. */
-export declare const SECP256K1_ORDER: bigint;
-/**
- * BLS12-381 scalar field order (the Compact `Field` type modulus). Retained
- * because {@link bigintToBytes32} interprets negative `Field` values in it and
- * signet-requests.ts imports the byte helpers below.
- */
-export declare const BLS_ORDER = 52435875175126190479447740508185965837690552500527637822603658699938581184513n;
-/**
- * Convert little-endian bytes to a bigint. Matches Compact's
- * `Bytes<32> as Field` / `Bytes<32> as Secp256k1Scalar` interpretation (and
- * the MPC monitor's ABI-word decoding convention).
- *
- * @param bytes - Little-endian byte array.
- * @returns The decoded non-negative integer.
- */
-export declare function bytesToBigint(bytes: Uint8Array): bigint;
-/**
- * Convert a bigint to exactly 32 little-endian bytes. Matches Compact's
- * `Field as Bytes<32>` / `Secp256k1Scalar as Bytes<32>` encoding (the inverse
- * of {@link bytesToBigint}); negative inputs are interpreted in the BLS scalar
- * field.
- *
- * @param n - The integer to encode.
- * @returns The 32-byte little-endian encoding.
- */
-export declare function bigintToBytes32(n: bigint): Uint8Array;
-/**
- * An ECDSA signature over the attestation digest (TS twin of
- * CompactStandardLibrary's `Secp256k1EcdsaSignature`). Both scalars are plain
- * bigints mod {@link SECP256K1_ORDER}; convert to the ledger form with
- * {@link ecdsaSignatureToLeBytes}.
- */
-export interface EcdsaSignature {
-    /** Signature scalar r. */
-    r: bigint;
-    /** Signature scalar s (low-s normalized by {@link signAttestation}). */
-    s: bigint;
-}
-/**
- * The little-endian 32-byte scalar encoding of an {@link EcdsaSignature} — the
- * exact `sigR`/`sigS` bytes the Compact `RespondBidirectional` struct stores
- * (the byte order the `Secp256k1Scalar as Bytes<32>` cast produces).
- */
-export interface EcdsaSignatureBytes {
-    /** Signature scalar r as 32 little-endian bytes. */
-    sigR: Uint8Array;
-    /** Signature scalar s as 32 little-endian bytes. */
-    sigS: Uint8Array;
-}
-/**
- * Sign a 32-byte attestation digest with secp256k1 ECDSA, matching
- * CompactStandardLibrary's `secp256k1EcdsaVerify`: the digest IS the message
- * hash (interpreted big-endian, RFC 6979), so signing is `prehash: false` —
- * noble must not re-hash it. The digest is the compiled
- * `pureCircuits.signetAttestationMessage(requestId, serializedOutput,
- * outputLen)`. noble normalizes to low-s by default; the verifier accepts
- * either s, so this is a convention, not a requirement.
- *
- * @param digest - The 32-byte attestation digest to sign.
- * @param secretKey - The 32-byte secp256k1 private key (the MPC root key).
- * @returns The signature `{ r, s }`.
- */
-export declare function signAttestation(digest: Uint8Array, secretKey: Uint8Array): EcdsaSignature;
-/**
- * Encode an {@link EcdsaSignature}'s scalars as the little-endian 32-byte
- * `sigR`/`sigS` the Compact `RespondBidirectional` struct stores — the form
- * the verifying circuits cast back with `as Secp256k1Scalar`.
- *
- * @param signature - The signature to encode.
- * @returns The `{ sigR, sigS }` little-endian scalar bytes.
- */
-export declare function ecdsaSignatureToLeBytes(signature: EcdsaSignature): EcdsaSignatureBytes;
-/**
- * Derive the secp256k1 public key point from a private key — the MPC
- * attestation key, which is the MPC root key used directly as the secp256k1
- * private key (the same key the EVM signing accounts epsilon-derive from).
- *
- * @param secretKey - The 32-byte secp256k1 private key (the MPC root key).
- * @returns The public key as a {@link Secp256k1Point}.
- */
-export declare function secp256k1PublicKeyFromSecretKey(secretKey: Uint8Array): Secp256k1Point;
-/**
- * Parse a secp256k1 public key from its 0x-hex config/env form (compressed
- * 33-byte or uncompressed 65-byte) into the runtime's point shape — how
- * deploys receive `MPC_SECP256K1_PUBKEY`.
- *
- * @param value - The 0x-hex public key (0x prefix optional).
- * @returns The parsed point.
- * @throws Error if the value is not a valid secp256k1 point encoding.
- */
-export declare function parseSecp256k1PublicKey(value: string): Secp256k1Point;
-/**
- * Format a secp256k1 public key as the compressed 0x-hex config/env form that
- * {@link parseSecp256k1PublicKey} accepts — the round-trip inverse, for
- * handing a derived key to deploys as `MPC_SECP256K1_PUBKEY`.
- *
- * @param point - The point to format.
- * @returns The compressed public key as 0x-prefixed hex.
- * @throws Error if the point is the identity (has no compressed encoding).
- */
-export declare function formatSecp256k1PublicKey(point: Secp256k1Point): string;
-/**
- * Hash a secp256k1 point exactly as the circuits do
- * (`persistentHash<Secp256k1Point>`) — the form the signet contract and caller
- * seal as `mpcPubKeyHash`.
- *
- * @param point - The point to hash.
- * @returns The 32-byte hash.
- */
-export declare function hashSecp256k1Point(point: Secp256k1Point): Uint8Array;
-//# sourceMappingURL=ecdsa.d.ts.map

package/dist/ecdsa.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"ecdsa.d.ts","sourceRoot":"","sources":["../src/ecdsa.ts"],"names":[],"mappings":"AAgBA,OAAO,EAGL,KAAK,cAAc,EACpB,MAAM,iCAAiC,CAAC;AAKzC,YAAY,EAAE,cAAc,EAAE,MAAM,iCAAiC,CAAC;AAEtE,qFAAqF;AACrF,eAAO,MAAM,eAAe,QAA2B,CAAC;AAExD;;;;GAIG;AACH,eAAO,MAAM,SAAS,iFAAiF,CAAC;AAExG;;;;;;;GAOG;AACH,wBAAgB,aAAa,CAAC,KAAK,EAAE,UAAU,GAAG,MAAM,CAMvD;AAED;;;;;;;;GAQG;AACH,wBAAgB,eAAe,CAAC,CAAC,EAAE,MAAM,GAAG,UAAU,CAQrD;AAED;;;;;GAKG;AACH,MAAM,WAAW,cAAc;IAC7B,0BAA0B;IAC1B,CAAC,EAAE,MAAM,CAAC;IACV,wEAAwE;IACxE,CAAC,EAAE,MAAM,CAAC;CACX;AAED;;;;GAIG;AACH,MAAM,WAAW,mBAAmB;IAClC,oDAAoD;IACpD,IAAI,EAAE,UAAU,CAAC;IACjB,oDAAoD;IACpD,IAAI,EAAE,UAAU,CAAC;CAClB;AAED;;;;;;;;;;;;GAYG;AACH,wBAAgB,eAAe,CAC7B,MAAM,EAAE,UAAU,EAClB,SAAS,EAAE,UAAU,GACpB,cAAc,CAMhB;AAED;;;;;;;GAOG;AACH,wBAAgB,uBAAuB,CACrC,SAAS,EAAE,cAAc,GACxB,mBAAmB,CAKrB;AAED;;;;;;;GAOG;AACH,wBAAgB,+BAA+B,CAC7C,SAAS,EAAE,UAAU,GACpB,cAAc,CAGhB;AAED;;;;;;;;GAQG;AACH,wBAAgB,uBAAuB,CAAC,KAAK,EAAE,MAAM,GAAG,cAAc,CAUrE;AAED;;;;;;;;GAQG;AACH,wBAAgB,wBAAwB,CAAC,KAAK,EAAE,cAAc,GAAG,MAAM,CAKtE;AAED;;;;;;;GAOG;AACH,wBAAgB,kBAAkB,CAAC,KAAK,EAAE,cAAc,GAAG,UAAU,CAEpE"}

package/dist/ecdsa.js

@@ -1,145 +0,0 @@
-// secp256k1 ECDSA helpers — the TS side of the shared attestation flow:
-// SIGNING (which needs the secret scalar, so it cannot be a circuit), key
-// parsing/formatting/hashing, and the little-endian scalar-byte plumbing the
-// ledger struct stores. Everything provable stays in Compact: the attestation
-// message is the COMPILED `pureCircuits.signetAttestationMessage` (this file
-// never re-implements it) and verification is CompactStandardLibrary's
-// `secp256k1EcdsaVerify`, run by the signet contract at post time and by the
-// caller at settle time.
-//
-// This belongs in github.com/sig-net/signet.js as its Midnight adapter —
-// kept here until upstreamed. It is Midnight-specific only in the point-hash
-// form (`persistentHash<Secp256k1Point>` via @midnight-ntwrk/compact-runtime),
-// which is exactly the deploy-time key pin the contracts seal.
-import { secp256k1 } from "@noble/curves/secp256k1.js";
-import { CompactTypeSecp256k1Point, persistentHash, } from "@midnight-ntwrk/compact-runtime";
-/** secp256k1 curve (group) order n — the scalar field the signature r, s live in. */
-export const SECP256K1_ORDER = secp256k1.Point.Fn.ORDER;
-/**
- * BLS12-381 scalar field order (the Compact `Field` type modulus). Retained
- * because {@link bigintToBytes32} interprets negative `Field` values in it and
- * signet-requests.ts imports the byte helpers below.
- */
-export const BLS_ORDER = 52435875175126190479447740508185965837690552500527637822603658699938581184513n;
-/**
- * Convert little-endian bytes to a bigint. Matches Compact's
- * `Bytes<32> as Field` / `Bytes<32> as Secp256k1Scalar` interpretation (and
- * the MPC monitor's ABI-word decoding convention).
- *
- * @param bytes - Little-endian byte array.
- * @returns The decoded non-negative integer.
- */
-export function bytesToBigint(bytes) {
-    let result = 0n;
-    for (let i = bytes.length - 1; i >= 0; i--) {
-        result = (result << 8n) | BigInt(bytes[i]);
-    }
-    return result;
-}
-/**
- * Convert a bigint to exactly 32 little-endian bytes. Matches Compact's
- * `Field as Bytes<32>` / `Secp256k1Scalar as Bytes<32>` encoding (the inverse
- * of {@link bytesToBigint}); negative inputs are interpreted in the BLS scalar
- * field.
- *
- * @param n - The integer to encode.
- * @returns The 32-byte little-endian encoding.
- */
-export function bigintToBytes32(n) {
-    const buf = new Uint8Array(32);
-    let v = n < 0n ? n + BLS_ORDER : n;
-    for (let i = 0; i < 32; i++) {
-        buf[i] = Number(v & 0xffn);
-        v >>= 8n;
-    }
-    return buf;
-}
-/**
- * Sign a 32-byte attestation digest with secp256k1 ECDSA, matching
- * CompactStandardLibrary's `secp256k1EcdsaVerify`: the digest IS the message
- * hash (interpreted big-endian, RFC 6979), so signing is `prehash: false` —
- * noble must not re-hash it. The digest is the compiled
- * `pureCircuits.signetAttestationMessage(requestId, serializedOutput,
- * outputLen)`. noble normalizes to low-s by default; the verifier accepts
- * either s, so this is a convention, not a requirement.
- *
- * @param digest - The 32-byte attestation digest to sign.
- * @param secretKey - The 32-byte secp256k1 private key (the MPC root key).
- * @returns The signature `{ r, s }`.
- */
-export function signAttestation(digest, secretKey) {
-    const signature = secp256k1.Signature.fromBytes(secp256k1.sign(digest, secretKey, { prehash: false }), "compact");
-    return { r: signature.r, s: signature.s };
-}
-/**
- * Encode an {@link EcdsaSignature}'s scalars as the little-endian 32-byte
- * `sigR`/`sigS` the Compact `RespondBidirectional` struct stores — the form
- * the verifying circuits cast back with `as Secp256k1Scalar`.
- *
- * @param signature - The signature to encode.
- * @returns The `{ sigR, sigS }` little-endian scalar bytes.
- */
-export function ecdsaSignatureToLeBytes(signature) {
-    return {
-        sigR: bigintToBytes32(signature.r),
-        sigS: bigintToBytes32(signature.s),
-    };
-}
-/**
- * Derive the secp256k1 public key point from a private key — the MPC
- * attestation key, which is the MPC root key used directly as the secp256k1
- * private key (the same key the EVM signing accounts epsilon-derive from).
- *
- * @param secretKey - The 32-byte secp256k1 private key (the MPC root key).
- * @returns The public key as a {@link Secp256k1Point}.
- */
-export function secp256k1PublicKeyFromSecretKey(secretKey) {
-    const point = secp256k1.Point.fromBytes(secp256k1.getPublicKey(secretKey, false));
-    return { x: point.x, y: point.y, identity: false };
-}
-/**
- * Parse a secp256k1 public key from its 0x-hex config/env form (compressed
- * 33-byte or uncompressed 65-byte) into the runtime's point shape — how
- * deploys receive `MPC_SECP256K1_PUBKEY`.
- *
- * @param value - The 0x-hex public key (0x prefix optional).
- * @returns The parsed point.
- * @throws Error if the value is not a valid secp256k1 point encoding.
- */
-export function parseSecp256k1PublicKey(value) {
-    const hex = value.startsWith("0x") ? value.slice(2) : value;
-    try {
-        const point = secp256k1.Point.fromHex(hex);
-        return { x: point.x, y: point.y, identity: false };
-    }
-    catch {
-        throw new Error(`expected a secp256k1 public key as compressed/uncompressed 0x-hex; got "${value}"`);
-    }
-}
-/**
- * Format a secp256k1 public key as the compressed 0x-hex config/env form that
- * {@link parseSecp256k1PublicKey} accepts — the round-trip inverse, for
- * handing a derived key to deploys as `MPC_SECP256K1_PUBKEY`.
- *
- * @param point - The point to format.
- * @returns The compressed public key as 0x-prefixed hex.
- * @throws Error if the point is the identity (has no compressed encoding).
- */
-export function formatSecp256k1PublicKey(point) {
-    if (point.identity) {
-        throw new Error("cannot format the identity point as a public key");
-    }
-    return `0x${secp256k1.Point.fromAffine({ x: point.x, y: point.y }).toHex(true)}`;
-}
-/**
- * Hash a secp256k1 point exactly as the circuits do
- * (`persistentHash<Secp256k1Point>`) — the form the signet contract and caller
- * seal as `mpcPubKeyHash`.
- *
- * @param point - The point to hash.
- * @returns The 32-byte hash.
- */
-export function hashSecp256k1Point(point) {
-    return persistentHash(CompactTypeSecp256k1Point, point);
-}
-//# sourceMappingURL=ecdsa.js.map

package/dist/ecdsa.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"ecdsa.js","sourceRoot":"","sources":["../src/ecdsa.ts"],"names":[],"mappings":"AAAA,wEAAwE;AACxE,0EAA0E;AAC1E,6EAA6E;AAC7E,8EAA8E;AAC9E,6EAA6E;AAC7E,uEAAuE;AACvE,6EAA6E;AAC7E,yBAAyB;AACzB,EAAE;AACF,yEAAyE;AACzE,6EAA6E;AAC7E,+EAA+E;AAC/E,+DAA+D;AAE/D,OAAO,EAAE,SAAS,EAAE,MAAM,4BAA4B,CAAC;AAEvD,OAAO,EACL,yBAAyB,EACzB,cAAc,GAEf,MAAM,iCAAiC,CAAC;AAOzC,qFAAqF;AACrF,MAAM,CAAC,MAAM,eAAe,GAAG,SAAS,CAAC,KAAK,CAAC,EAAE,CAAC,KAAK,CAAC;AAExD;;;;GAIG;AACH,MAAM,CAAC,MAAM,SAAS,GAAG,8EAA8E,CAAC;AAExG;;;;;;;GAOG;AACH,MAAM,UAAU,aAAa,CAAC,KAAiB;IAC7C,IAAI,MAAM,GAAG,EAAE,CAAC;IAChB,KAAK,IAAI,CAAC,GAAG,KAAK,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC;QAC3C,MAAM,GAAG,CAAC,MAAM,IAAI,EAAE,CAAC,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;IAC7C,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,UAAU,eAAe,CAAC,CAAS;IACvC,MAAM,GAAG,GAAG,IAAI,UAAU,CAAC,EAAE,CAAC,CAAC;IAC/B,IAAI,CAAC,GAAG,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,CAAC,GAAG,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC;IACnC,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,EAAE,EAAE,CAAC,EAAE,EAAE,CAAC;QAC5B,GAAG,CAAC,CAAC,CAAC,GAAG,MAAM,CAAC,CAAC,GAAG,KAAK,CAAC,CAAC;QAC3B,CAAC,KAAK,EAAE,CAAC;IACX,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AA2BD;;;;;;;;;;;;GAYG;AACH,MAAM,UAAU,eAAe,CAC7B,MAAkB,EAClB,SAAqB;IAErB,MAAM,SAAS,GAAG,SAAS,CAAC,SAAS,CAAC,SAAS,CAC7C,SAAS,CAAC,IAAI,CAAC,MAAM,EAAE,SAAS,EAAE,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC,EACrD,SAAS,CACV,CAAC;IACF,OAAO,EAAE,CAAC,EAAE,SAAS,CAAC,CAAC,EAAE,CAAC,EAAE,SAAS,CAAC,CAAC,EAAE,CAAC;AAC5C,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,uBAAuB,CACrC,SAAyB;IAEzB,OAAO;QACL,IAAI,EAAE,eAAe,CAAC,SAAS,CAAC,CAAC,CAAC;QAClC,IAAI,EAAE,eAAe,CAAC,SAAS,CAAC,CAAC,CAAC;KACnC,CAAC;AACJ,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,+BAA+B,CAC7C,SAAqB;IAErB,MAAM,KAAK,GAAG,SAAS,CAAC,KAAK,CAAC,SAAS,CAAC,SAAS,CAAC,YAAY,CAAC,SAAS,EAAE,KAAK,CAAC,CAAC,CAAC;IAClF,OAAO,EAAE,CAAC,EAAE,KAAK,CAAC,CAAC,EAAE,CAAC,EAAE,KAAK,CAAC,CAAC,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC;AACrD,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,UAAU,uBAAuB,CAAC,KAAa;IACnD,MAAM,GAAG,GAAG,KAAK,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC;IAC5D,IAAI,CAAC;QACH,MAAM,KAAK,GAAG,SAAS,CAAC,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;QAC3C,OAAO,EAAE,CAAC,EAAE,KAAK,CAAC,CAAC,EAAE,CAAC,EAAE,KAAK,CAAC,CAAC,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC;IACrD,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,IAAI,KAAK,CACb,2EAA2E,KAAK,GAAG,CACpF,CAAC;IACJ,CAAC;AACH,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,UAAU,wBAAwB,CAAC,KAAqB;IAC5D,IAAI,KAAK,CAAC,QAAQ,EAAE,CAAC;QACnB,MAAM,IAAI,KAAK,CAAC,kDAAkD,CAAC,CAAC;IACtE,CAAC;IACD,OAAO,KAAK,SAAS,CAAC,KAAK,CAAC,UAAU,CAAC,EAAE,CAAC,EAAE,KAAK,CAAC,CAAC,EAAE,CAAC,EAAE,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC;AACnF,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,kBAAkB,CAAC,KAAqB;IACtD,OAAO,cAAc,CAAC,yBAAyB,EAAE,KAAK,CAAC,CAAC;AAC1D,CAAC"}