@sig-net/midnight 0.15.0 → 0.16.0

package/dist/signet-request-feed.d.ts

@@ -1,22 +1,42 @@
-import { type ResolvedSignetRequest } from "./signet-request-resolver.ts";
+import { type SignetEventSource } from "./signet-contract-events.ts";
 import type { SignetPublicStateSource } from "./signet-request-response-reader.ts";
-import { type RequestIdHex } from "./signet-requests.ts";
+import { type RequestIdHex, type SignBidirectionalEvent } from "./signet-requests.ts";
 /** Default gap between poll cycles of {@link SignetRequestFeed.requests}. */
 export declare const DEFAULT_FEED_POLL_INTERVAL_MS = 3000;
+/**
+ * A request discovered through a notification event and read from the named
+ * caller's own authenticated ledger.
+ */
+export interface ResolvedSignetRequest {
+    /**
+     * The contract whose authenticated state the request was read from: the
+     * epsilon-derivation predecessor. Key derivation keys off THIS, never off a
+     * field taken from the notification on faith.
+     */
+    callerAddress: string;
+    /** The request id the record is stored under in `callerAddress`'s index. */
+    requestId: RequestIdHex;
+    /** The authenticated request record to sign. */
+    request: SignBidirectionalEvent;
+}
 /** Everything a {@link SignetRequestFeed} needs. */
 export interface SignetRequestFeedConfig {
-    /** Address of the central signet contract whose notification registry to poll. */
+    /** Address of the central signet contract whose notification events to poll. */
     readonly signetContractAddress: string;
     /**
-     * Source of raw contract state for BOTH the signet contract's registry and
-     * the requester ledgers the resolver authenticates against — a full
-     * `indexerPublicDataProvider` is assignable.
+     * Source of raw contract state for the requester ledgers the feed
+     * enumerates. A full `indexerPublicDataProvider` is assignable.
      */
     readonly source: SignetPublicStateSource;
+    /**
+     * Source of the signet contract's emitted events (discovery). Adapt a full
+     * provider with `signetEventSourceFromPublicDataProvider`.
+     */
+    readonly eventSource: SignetEventSource;
     /**
      * Optional policy allow-list of requester contract addresses to serve
      * (matched case- and `0x`-prefix-insensitively). Omit to serve every
-     * requester the resolver can authenticate. NOT a security control.
+     * requester a notification points at. NOT a security control.
      */
     readonly allowContracts?: Iterable<string>;
     /** Poll cadence for {@link SignetRequestFeed.requests}; default {@link DEFAULT_FEED_POLL_INTERVAL_MS}. */
@@ -32,51 +52,56 @@ export interface SignetRequestFeedConfig {
  */
 export declare function sleepUnlessAborted(ms: number, signal?: AbortSignal): Promise<void>;
 /**
- * The registry-polling request feed. Reads the signet contract's notification
- * registry (discovery) and hands each notification to a
- * {@link SignetRequestResolver} (authentication), yielding only notifications
- * that resolve to a real, member request. Dedupes by request id across its
- * lifetime, so a re-registered notification is not re-yielded; call
- * {@link forget} to re-arm a request whose downstream processing failed.
+ * The event-polling request feed. Reads the signet contract's emitted
+ * notifications (discovery) and enumerates each pointed-at caller's own
+ * request map (authentication by construction: the records come from the
+ * caller's ledger), yielding each member request once. Dedupes by request id
+ * across its lifetime, so a re-notified or still-pending request is not
+ * re-yielded. Call {@link forget} to re-arm a request whose downstream
+ * processing failed.
  */
 export declare class SignetRequestFeed {
     private readonly signetContractAddress;
     private readonly source;
-    private readonly resolver;
+    private readonly eventSource;
     private readonly allowContracts?;
     private readonly pollIntervalMs;
     private readonly yielded;
     /**
-     * @param config - The signet contract, state source, and optional policy
-     *   allow-list.
+     * @param config - The signet contract, state and event sources, and
+     *   optional policy allow-list.
      */
     constructor(config: SignetRequestFeedConfig);
     /** Whether the policy allow-list admits `callerAddress` (always true when unset). */
     private allowed;
     /**
-     * One-shot: every currently-registered notification that decodes, is
-     * admitted by the allow-list, not already yielded, and resolves to an
-     * authenticated member request. Registry enumeration has no meaningful
-     * on-ledger order, so entries are processed in ascending request-id-hex
-     * order — a stable, deterministic sequence. Forged / not-yet-indexed /
-     * wrong-field notifications resolve to nothing and are dropped WITHOUT
-     * being marked yielded, so a genuine request whose ledger write has not
-     * indexed yet is retried next cycle; undecodable or unsupported-version
-     * records are likewise skipped (and logged) without being marked.
+     * The unique `(callerAddress, requestsPath)` pointers of the currently
+     * emitted notification events, allow-list applied, in ascending
+     * caller-address order (event enumeration order is per-source, so a
+     * stable sort keeps the poll deterministic). Undecodable or
+     * unsupported-version events are skipped (and logged): they carry no
+     * request, so nothing is lost.
      *
-     * Dedupe and resolution key off the request id of the registry entry's map
-     * key (the V1 payload no longer carries one). The key is caller-supplied,
-     * so it confers no authority — the resolver's membership check against the
-     * named caller's own ledger is what authenticates it.
+     * @returns The deduplicated pointers to enumerate this cycle.
+     */
+    private notificationPointers;
+    /**
+     * One-shot: every request in a notified caller's request map that is
+     * admitted by the allow-list and not already yielded. Within one caller's
+     * map, requests are processed in ascending request-id-hex order: a
+     * stable, deterministic sequence. A pointer at a caller with no readable
+     * state, or at a field that is not a request map, yields nothing WITHOUT
+     * marking anything, so a genuine request whose ledger write has not
+     * indexed yet is retried next cycle.
      *
-     * @returns The newly-authenticated requests this cycle.
-     * @throws Error if the signet contract has no readable state at the
-     *   configured address (wrong address or not yet deployed/indexed).
+     * @returns The newly-discovered authenticated requests this cycle.
+     * @throws Error when the event source itself fails (e.g. the indexer is
+     *   unreachable).
      */
     poll(): Promise<ResolvedSignetRequest[]>;
     /**
      * Re-arm `requestId` for redelivery on the next {@link poll} / {@link requests}
-     * cycle — call when downstream processing of a yielded request failed, so it
+     * cycle: call when downstream processing of a yielded request failed, so it
      * is retried (mirrors the MPC's delete-on-failure of its processed set).
      *
      * @param requestId - The request id to allow through again.
@@ -85,7 +110,7 @@ export declare class SignetRequestFeed {
     /**
      * Live stream: poll + sleep, yielding each authenticated request exactly once
      * (subject to {@link forget}), until `opts.signal` aborts. The natural
-     * sequential `for await` consumption serializes downstream processing — no
+     * sequential `for await` consumption serializes downstream processing: no
      * two requests are handed over concurrently.
      *
      * @param opts.signal - Abort to stop the stream.

package/dist/signet-request-feed.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"signet-request-feed.d.ts","sourceRoot":"","sources":["../src/signet-request-feed.ts"],"names":[],"mappings":"AAkBA,OAAO,EAEL,KAAK,qBAAqB,EAC3B,MAAM,8BAA8B,CAAC;AACtC,OAAO,KAAK,EAAE,uBAAuB,EAAE,MAAM,qCAAqC,CAAC;AACnF,OAAO,EAAkB,KAAK,YAAY,EAAE,MAAM,sBAAsB,CAAC;AAEzE,6EAA6E;AAC7E,eAAO,MAAM,6BAA6B,OAAO,CAAC;AAElD,oDAAoD;AACpD,MAAM,WAAW,uBAAuB;IACtC,kFAAkF;IAClF,QAAQ,CAAC,qBAAqB,EAAE,MAAM,CAAC;IACvC;;;;OAIG;IACH,QAAQ,CAAC,MAAM,EAAE,uBAAuB,CAAC;IACzC;;;;OAIG;IACH,QAAQ,CAAC,cAAc,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,CAAC;IAC3C,0GAA0G;IAC1G,QAAQ,CAAC,cAAc,CAAC,EAAE,MAAM,CAAC;CAClC;AAED;;;;;;;GAOG;AACH,wBAAgB,kBAAkB,CAChC,EAAE,EAAE,MAAM,EACV,MAAM,CAAC,EAAE,WAAW,GACnB,OAAO,CAAC,IAAI,CAAC,CAaf;AAOD;;;;;;;GAOG;AACH,qBAAa,iBAAiB;IAC5B,OAAO,CAAC,QAAQ,CAAC,qBAAqB,CAAS;IAC/C,OAAO,CAAC,QAAQ,CAAC,MAAM,CAA0B;IACjD,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAwB;IACjD,OAAO,CAAC,QAAQ,CAAC,cAAc,CAAC,CAAc;IAC9C,OAAO,CAAC,QAAQ,CAAC,cAAc,CAAS;IAIxC,OAAO,CAAC,QAAQ,CAAC,OAAO,CAA2B;IAEnD;;;OAGG;gBACS,MAAM,EAAE,uBAAuB;IAW3C,qFAAqF;IACrF,OAAO,CAAC,OAAO;IAOf;;;;;;;;;;;;;;;;;;;OAmBG;IACG,IAAI,IAAI,OAAO,CAAC,qBAAqB,EAAE,CAAC;IAqC9C;;;;;;OAMG;IACH,MAAM,CAAC,SAAS,EAAE,YAAY,GAAG,IAAI;IAIrC;;;;;;;;OAQG;IACI,QAAQ,CAAC,IAAI,CAAC,EAAE;QACrB,MAAM,CAAC,EAAE,WAAW,CAAC;KACtB,GAAG,qBAAqB,CAAC,qBAAqB,CAAC;CAQjD"}
+{"version":3,"file":"signet-request-feed.d.ts","sourceRoot":"","sources":["../src/signet-request-feed.ts"],"names":[],"mappings":"AAmBA,OAAO,EAIL,KAAK,iBAAiB,EACvB,MAAM,6BAA6B,CAAC;AAErC,OAAO,KAAK,EAAE,uBAAuB,EAAE,MAAM,qCAAqC,CAAC;AACnF,OAAO,EAEL,KAAK,YAAY,EACjB,KAAK,sBAAsB,EAC5B,MAAM,sBAAsB,CAAC;AAE9B,6EAA6E;AAC7E,eAAO,MAAM,6BAA6B,OAAO,CAAC;AAElD;;;GAGG;AACH,MAAM,WAAW,qBAAqB;IACpC;;;;OAIG;IACH,aAAa,EAAE,MAAM,CAAC;IACtB,4EAA4E;IAC5E,SAAS,EAAE,YAAY,CAAC;IACxB,gDAAgD;IAChD,OAAO,EAAE,sBAAsB,CAAC;CACjC;AAED,oDAAoD;AACpD,MAAM,WAAW,uBAAuB;IACtC,gFAAgF;IAChF,QAAQ,CAAC,qBAAqB,EAAE,MAAM,CAAC;IACvC;;;OAGG;IACH,QAAQ,CAAC,MAAM,EAAE,uBAAuB,CAAC;IACzC;;;OAGG;IACH,QAAQ,CAAC,WAAW,EAAE,iBAAiB,CAAC;IACxC;;;;OAIG;IACH,QAAQ,CAAC,cAAc,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,CAAC;IAC3C,0GAA0G;IAC1G,QAAQ,CAAC,cAAc,CAAC,EAAE,MAAM,CAAC;CAClC;AAED;;;;;;;GAOG;AACH,wBAAgB,kBAAkB,CAChC,EAAE,EAAE,MAAM,EACV,MAAM,CAAC,EAAE,WAAW,GACnB,OAAO,CAAC,IAAI,CAAC,CAaf;AAOD;;;;;;;;GAQG;AACH,qBAAa,iBAAiB;IAC5B,OAAO,CAAC,QAAQ,CAAC,qBAAqB,CAAS;IAC/C,OAAO,CAAC,QAAQ,CAAC,MAAM,CAA0B;IACjD,OAAO,CAAC,QAAQ,CAAC,WAAW,CAAoB;IAChD,OAAO,CAAC,QAAQ,CAAC,cAAc,CAAC,CAAc;IAC9C,OAAO,CAAC,QAAQ,CAAC,cAAc,CAAS;IAIxC,OAAO,CAAC,QAAQ,CAAC,OAAO,CAA2B;IAEnD;;;OAGG;gBACS,MAAM,EAAE,uBAAuB;IAW3C,qFAAqF;IACrF,OAAO,CAAC,OAAO;IAOf;;;;;;;;;OASG;YACW,oBAAoB;IAyClC;;;;;;;;;;;;OAYG;IACG,IAAI,IAAI,OAAO,CAAC,qBAAqB,EAAE,CAAC;IA+B9C;;;;;;OAMG;IACH,MAAM,CAAC,SAAS,EAAE,YAAY,GAAG,IAAI;IAIrC;;;;;;;;OAQG;IACI,QAAQ,CAAC,IAAI,CAAC,EAAE;QACrB,MAAM,CAAC,EAAE,WAAW,CAAC;KACtB,GAAG,qBAAqB,CAAC,qBAAqB,CAAC;CAQjD"}

package/dist/signet-request-feed.js

@@ -1,19 +1,24 @@
 // The MPC's single entry point for discovering signature requests: poll the
-// central signet contract's notification registry (ledger field 4), resolve
-// each notification to an AUTHENTICATED request read from the named caller's
-// own ledger, and yield only the ones that pass the membership check. The
-// registry is append-only with no on-ledger cursor, so the feed's in-memory
-// `yielded` set is the diff cursor: every poll enumerates the registry and
-// serves what it has not served before.
+// central signet contract's emitted SignBidirectionalEvent notifications,
+// follow each to the named caller contract, and enumerate the AUTHENTICATED
+// requests in that caller's own request map. A notification is a doorbell,
+// never an authority: it says only WHERE to look (caller address + the
+// resolved ledger-tree path of its request map), and every request served
+// comes from the named caller's own ledger. An attacker cannot write into a
+// contract it does not control, so a forged notification can at most
+// re-point at a legitimate caller's map, never inject a request.
+//
+// The event log has no on-ledger cursor the feed consumes, so the feed's
+// in-memory `yielded` set is the diff cursor: every poll enumerates the
+// pointed-at maps and serves what it has not served before.
 //
 // The requester allow-list is an OPTIONAL policy filter here (drop requests
 // from contracts you choose not to serve), never a security requirement and
-// never the discovery mechanism — attribution comes from the resolver's
-// authenticated read (see signet-request-resolver.ts and
-// knowledge-base/caller-attribution.md).
-import { decodeSignBidirectionalNotification, readSignBidirectionalNotificationIndexFromState, } from "./signet-contract-state-reader.js";
-import { SignetRequestResolver, } from "./signet-request-resolver.js";
-import { stripHexPrefix } from "./signet-requests.js";
+// never the discovery mechanism: attribution comes from reading the
+// caller's authenticated state.
+import { decodeSignBidirectionalEventNotificationPayload, decodeSignBidirectionalNotification, SignetEventName, } from "./signet-contract-events.js";
+import { readSignetRequestIndexAt } from "./signature-requests-state-reader.js";
+import { stripHexPrefix, } from "./signet-requests.js";
 /** Default gap between poll cycles of {@link SignetRequestFeed.requests}. */
 export const DEFAULT_FEED_POLL_INTERVAL_MS = 3000;
 /**
@@ -44,30 +49,31 @@ function normalizeAddress(address) {
     return stripHexPrefix(address).toLowerCase();
 }
 /**
- * The registry-polling request feed. Reads the signet contract's notification
- * registry (discovery) and hands each notification to a
- * {@link SignetRequestResolver} (authentication), yielding only notifications
- * that resolve to a real, member request. Dedupes by request id across its
- * lifetime, so a re-registered notification is not re-yielded; call
- * {@link forget} to re-arm a request whose downstream processing failed.
+ * The event-polling request feed. Reads the signet contract's emitted
+ * notifications (discovery) and enumerates each pointed-at caller's own
+ * request map (authentication by construction: the records come from the
+ * caller's ledger), yielding each member request once. Dedupes by request id
+ * across its lifetime, so a re-notified or still-pending request is not
+ * re-yielded. Call {@link forget} to re-arm a request whose downstream
+ * processing failed.
  */
 export class SignetRequestFeed {
     signetContractAddress;
     source;
-    resolver;
+    eventSource;
     allowContracts;
     pollIntervalMs;
-    // Request ids already yielded. NOT the security boundary (the resolver is) —
-    // just an at-most-once gate so one request is not processed twice.
+    // Request ids already yielded. NOT the security boundary (the caller-ledger
+    // read is), just an at-most-once gate so one request is not processed twice.
     yielded = new Set();
     /**
-     * @param config - The signet contract, state source, and optional policy
-     *   allow-list.
+     * @param config - The signet contract, state and event sources, and
+     *   optional policy allow-list.
      */
     constructor(config) {
         this.signetContractAddress = config.signetContractAddress;
         this.source = config.source;
-        this.resolver = new SignetRequestResolver({ source: config.source });
+        this.eventSource = config.eventSource;
         this.allowContracts = config.allowContracts
             ? new Set(Array.from(config.allowContracts, normalizeAddress))
             : undefined;
@@ -80,58 +86,85 @@ export class SignetRequestFeed {
             this.allowContracts.has(normalizeAddress(callerAddress)));
     }
     /**
-     * One-shot: every currently-registered notification that decodes, is
-     * admitted by the allow-list, not already yielded, and resolves to an
-     * authenticated member request. Registry enumeration has no meaningful
-     * on-ledger order, so entries are processed in ascending request-id-hex
-     * order — a stable, deterministic sequence. Forged / not-yet-indexed /
-     * wrong-field notifications resolve to nothing and are dropped WITHOUT
-     * being marked yielded, so a genuine request whose ledger write has not
-     * indexed yet is retried next cycle; undecodable or unsupported-version
-     * records are likewise skipped (and logged) without being marked.
-     *
-     * Dedupe and resolution key off the request id of the registry entry's map
-     * key (the V1 payload no longer carries one). The key is caller-supplied,
-     * so it confers no authority — the resolver's membership check against the
-     * named caller's own ledger is what authenticates it.
+     * The unique `(callerAddress, requestsPath)` pointers of the currently
+     * emitted notification events, allow-list applied, in ascending
+     * caller-address order (event enumeration order is per-source, so a
+     * stable sort keeps the poll deterministic). Undecodable or
+     * unsupported-version events are skipped (and logged): they carry no
+     * request, so nothing is lost.
      *
-     * @returns The newly-authenticated requests this cycle.
-     * @throws Error if the signet contract has no readable state at the
-     *   configured address (wrong address or not yet deployed/indexed).
+     * @returns The deduplicated pointers to enumerate this cycle.
      */
-    async poll() {
-        const state = await this.source.queryContractState(this.signetContractAddress);
-        if (!state?.data) {
-            throw new Error(`No contract state at signet contract ${this.signetContractAddress} ` +
-                `— wrong address, or not yet deployed/indexed`);
-        }
-        const registry = readSignBidirectionalNotificationIndexFromState(state.data);
-        const out = [];
-        for (const [requestId, record] of [...registry.entries()].sort(([a], [b]) => (a < b ? -1 : a > b ? 1 : 0))) {
+    async notificationPointers() {
+        const events = await this.eventSource.querySignetEvents(this.signetContractAddress);
+        const pointers = new Map();
+        for (const event of events) {
+            if (event.name !== SignetEventName.SignBidirectionalEvent)
+                continue;
             let notification;
             try {
-                notification = decodeSignBidirectionalNotification(record);
+                notification = decodeSignBidirectionalNotification(decodeSignBidirectionalEventNotificationPayload(event.payload));
             }
             catch (error) {
-                console.warn(`SignetRequestFeed: skipping undecodable notification ` +
-                    `registered under ${requestId}: ${String(error)}`);
+                console.warn(`SignetRequestFeed: skipping undecodable notification event: ${String(error)}`);
                 continue;
             }
-            if (this.yielded.has(requestId))
-                continue;
             if (!this.allowed(notification.callerAddress))
                 continue;
-            const resolved = await this.resolver.resolve(requestId, notification);
-            if (resolved === undefined)
-                continue;
-            this.yielded.add(requestId);
-            out.push(resolved);
+            pointers.set(`${notification.callerAddress}:${notification.requestsPath.join(",")}`, {
+                callerAddress: notification.callerAddress,
+                requestsPath: notification.requestsPath,
+            });
+        }
+        return [...pointers.values()].sort((a, b) => a.callerAddress < b.callerAddress
+            ? -1
+            : a.callerAddress > b.callerAddress
+                ? 1
+                : 0);
+    }
+    /**
+     * One-shot: every request in a notified caller's request map that is
+     * admitted by the allow-list and not already yielded. Within one caller's
+     * map, requests are processed in ascending request-id-hex order: a
+     * stable, deterministic sequence. A pointer at a caller with no readable
+     * state, or at a field that is not a request map, yields nothing WITHOUT
+     * marking anything, so a genuine request whose ledger write has not
+     * indexed yet is retried next cycle.
+     *
+     * @returns The newly-discovered authenticated requests this cycle.
+     * @throws Error when the event source itself fails (e.g. the indexer is
+     *   unreachable).
+     */
+    async poll() {
+        const out = [];
+        for (const pointer of await this.notificationPointers()) {
+            let state;
+            try {
+                state = await this.source.queryContractState(pointer.callerAddress);
+            }
+            catch {
+                continue; // caller address not a contract / transient read error
+            }
+            if (!state?.data) {
+                continue; // no state at the named caller: nothing to serve yet
+            }
+            const index = readSignetRequestIndexAt(state.data, pointer.requestsPath);
+            for (const [requestId, request] of [...index.entries()].sort(([a], [b]) => (a < b ? -1 : a > b ? 1 : 0))) {
+                if (this.yielded.has(requestId))
+                    continue;
+                this.yielded.add(requestId);
+                out.push({
+                    callerAddress: pointer.callerAddress,
+                    requestId,
+                    request,
+                });
+            }
         }
         return out;
     }
     /**
      * Re-arm `requestId` for redelivery on the next {@link poll} / {@link requests}
-     * cycle — call when downstream processing of a yielded request failed, so it
+     * cycle: call when downstream processing of a yielded request failed, so it
      * is retried (mirrors the MPC's delete-on-failure of its processed set).
      *
      * @param requestId - The request id to allow through again.
@@ -142,7 +175,7 @@ export class SignetRequestFeed {
     /**
      * Live stream: poll + sleep, yielding each authenticated request exactly once
      * (subject to {@link forget}), until `opts.signal` aborts. The natural
-     * sequential `for await` consumption serializes downstream processing — no
+     * sequential `for await` consumption serializes downstream processing: no
      * two requests are handed over concurrently.
      *
      * @param opts.signal - Abort to stop the stream.

package/dist/signet-request-feed.js.map

@@ -1 +1 @@
-{"version":3,"file":"signet-request-feed.js","sourceRoot":"","sources":["../src/signet-request-feed.ts"],"names":[],"mappings":"AAAA,4EAA4E;AAC5E,4EAA4E;AAC5E,6EAA6E;AAC7E,0EAA0E;AAC1E,4EAA4E;AAC5E,2EAA2E;AAC3E,wCAAwC;AACxC,EAAE;AACF,4EAA4E;AAC5E,4EAA4E;AAC5E,wEAAwE;AACxE,yDAAyD;AACzD,yCAAyC;AAEzC,OAAO,EACL,mCAAmC,EACnC,+CAA+C,GAChD,MAAM,mCAAmC,CAAC;AAC3C,OAAO,EACL,qBAAqB,GAEtB,MAAM,8BAA8B,CAAC;AAEtC,OAAO,EAAE,cAAc,EAAqB,MAAM,sBAAsB,CAAC;AAEzE,6EAA6E;AAC7E,MAAM,CAAC,MAAM,6BAA6B,GAAG,IAAI,CAAC;AAsBlD;;;;;;;GAOG;AACH,MAAM,UAAU,kBAAkB,CAChC,EAAU,EACV,MAAoB;IAEpB,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE;QAC7B,IAAI,MAAM,EAAE,OAAO;YAAE,OAAO,OAAO,EAAE,CAAC;QACtC,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE;YAC5B,MAAM,EAAE,mBAAmB,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;YAC9C,OAAO,EAAE,CAAC;QACZ,CAAC,EAAE,EAAE,CAAC,CAAC;QACP,MAAM,OAAO,GAAG,GAAG,EAAE;YACnB,YAAY,CAAC,KAAK,CAAC,CAAC;YACpB,OAAO,EAAE,CAAC;QACZ,CAAC,CAAC;QACF,MAAM,EAAE,gBAAgB,CAAC,OAAO,EAAE,OAAO,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;IAC7D,CAAC,CAAC,CAAC;AACL,CAAC;AAED,2EAA2E;AAC3E,SAAS,gBAAgB,CAAC,OAAe;IACvC,OAAO,cAAc,CAAC,OAAO,CAAC,CAAC,WAAW,EAAE,CAAC;AAC/C,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,OAAO,iBAAiB;IACX,qBAAqB,CAAS;IAC9B,MAAM,CAA0B;IAChC,QAAQ,CAAwB;IAChC,cAAc,CAAe;IAC7B,cAAc,CAAS;IAExC,6EAA6E;IAC7E,mEAAmE;IAClD,OAAO,GAAG,IAAI,GAAG,EAAgB,CAAC;IAEnD;;;OAGG;IACH,YAAY,MAA+B;QACzC,IAAI,CAAC,qBAAqB,GAAG,MAAM,CAAC,qBAAqB,CAAC;QAC1D,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC,MAAM,CAAC;QAC5B,IAAI,CAAC,QAAQ,GAAG,IAAI,qBAAqB,CAAC,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC;QACrE,IAAI,CAAC,cAAc,GAAG,MAAM,CAAC,cAAc;YACzC,CAAC,CAAC,IAAI,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,cAAc,EAAE,gBAAgB,CAAC,CAAC;YAC9D,CAAC,CAAC,SAAS,CAAC;QACd,IAAI,CAAC,cAAc;YACjB,MAAM,CAAC,cAAc,IAAI,6BAA6B,CAAC;IAC3D,CAAC;IAED,qFAAqF;IAC7E,OAAO,CAAC,aAAqB;QACnC,OAAO,CACL,IAAI,CAAC,cAAc,KAAK,SAAS;YACjC,IAAI,CAAC,cAAc,CAAC,GAAG,CAAC,gBAAgB,CAAC,aAAa,CAAC,CAAC,CACzD,CAAC;IACJ,CAAC;IAED;;;;;;;;;;;;;;;;;;;OAmBG;IACH,KAAK,CAAC,IAAI;QACR,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,kBAAkB,CAChD,IAAI,CAAC,qBAAqB,CAC3B,CAAC;QACF,IAAI,CAAC,KAAK,EAAE,IAAI,EAAE,CAAC;YACjB,MAAM,IAAI,KAAK,CACb,wCAAwC,IAAI,CAAC,qBAAqB,GAAG;gBACnE,8CAA8C,CACjD,CAAC;QACJ,CAAC;QACD,MAAM,QAAQ,GAAG,+CAA+C,CAC9D,KAAK,CAAC,IAAI,CACX,CAAC;QACF,MAAM,GAAG,GAA4B,EAAE,CAAC;QACxC,KAAK,MAAM,CAAC,SAAS,EAAE,MAAM,CAAC,IAAI,CAAC,GAAG,QAAQ,CAAC,OAAO,EAAE,CAAC,CAAC,IAAI,CAC5D,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAC3C,EAAE,CAAC;YACF,IAAI,YAAY,CAAC;YACjB,IAAI,CAAC;gBACH,YAAY,GAAG,mCAAmC,CAAC,MAAM,CAAC,CAAC;YAC7D,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,OAAO,CAAC,IAAI,CACV,uDAAuD;oBACrD,oBAAoB,SAAS,KAAK,MAAM,CAAC,KAAK,CAAC,EAAE,CACpD,CAAC;gBACF,SAAS;YACX,CAAC;YACD,IAAI,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,SAAS,CAAC;gBAAE,SAAS;YAC1C,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,YAAY,CAAC,aAAa,CAAC;gBAAE,SAAS;YACxD,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,SAAS,EAAE,YAAY,CAAC,CAAC;YACtE,IAAI,QAAQ,KAAK,SAAS;gBAAE,SAAS;YACrC,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;YAC5B,GAAG,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QACrB,CAAC;QACD,OAAO,GAAG,CAAC;IACb,CAAC;IAED;;;;;;OAMG;IACH,MAAM,CAAC,SAAuB;QAC5B,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;IACjC,CAAC;IAED;;;;;;;;OAQG;IACH,KAAK,CAAC,CAAC,QAAQ,CAAC,IAEf;QACC,OAAO,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC;YAC9B,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,IAAI,EAAE,CAAC;YAChC,KAAK,MAAM,QAAQ,IAAI,KAAK;gBAAE,MAAM,QAAQ,CAAC;YAC7C,IAAI,IAAI,EAAE,MAAM,EAAE,OAAO;gBAAE,MAAM;YACjC,MAAM,kBAAkB,CAAC,IAAI,CAAC,cAAc,EAAE,IAAI,EAAE,MAAM,CAAC,CAAC;QAC9D,CAAC;IACH,CAAC;CACF"}
+{"version":3,"file":"signet-request-feed.js","sourceRoot":"","sources":["../src/signet-request-feed.ts"],"names":[],"mappings":"AAAA,4EAA4E;AAC5E,0EAA0E;AAC1E,4EAA4E;AAC5E,2EAA2E;AAC3E,uEAAuE;AACvE,0EAA0E;AAC1E,4EAA4E;AAC5E,qEAAqE;AACrE,iEAAiE;AACjE,EAAE;AACF,yEAAyE;AACzE,wEAAwE;AACxE,4DAA4D;AAC5D,EAAE;AACF,4EAA4E;AAC5E,4EAA4E;AAC5E,oEAAoE;AACpE,gCAAgC;AAEhC,OAAO,EACL,+CAA+C,EAC/C,mCAAmC,EACnC,eAAe,GAEhB,MAAM,6BAA6B,CAAC;AACrC,OAAO,EAAE,wBAAwB,EAAE,MAAM,sCAAsC,CAAC;AAEhF,OAAO,EACL,cAAc,GAGf,MAAM,sBAAsB,CAAC;AAE9B,6EAA6E;AAC7E,MAAM,CAAC,MAAM,6BAA6B,GAAG,IAAI,CAAC;AA2ClD;;;;;;;GAOG;AACH,MAAM,UAAU,kBAAkB,CAChC,EAAU,EACV,MAAoB;IAEpB,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE;QAC7B,IAAI,MAAM,EAAE,OAAO;YAAE,OAAO,OAAO,EAAE,CAAC;QACtC,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE;YAC5B,MAAM,EAAE,mBAAmB,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;YAC9C,OAAO,EAAE,CAAC;QACZ,CAAC,EAAE,EAAE,CAAC,CAAC;QACP,MAAM,OAAO,GAAG,GAAG,EAAE;YACnB,YAAY,CAAC,KAAK,CAAC,CAAC;YACpB,OAAO,EAAE,CAAC;QACZ,CAAC,CAAC;QACF,MAAM,EAAE,gBAAgB,CAAC,OAAO,EAAE,OAAO,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;IAC7D,CAAC,CAAC,CAAC;AACL,CAAC;AAED,2EAA2E;AAC3E,SAAS,gBAAgB,CAAC,OAAe;IACvC,OAAO,cAAc,CAAC,OAAO,CAAC,CAAC,WAAW,EAAE,CAAC;AAC/C,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,OAAO,iBAAiB;IACX,qBAAqB,CAAS;IAC9B,MAAM,CAA0B;IAChC,WAAW,CAAoB;IAC/B,cAAc,CAAe;IAC7B,cAAc,CAAS;IAExC,4EAA4E;IAC5E,6EAA6E;IAC5D,OAAO,GAAG,IAAI,GAAG,EAAgB,CAAC;IAEnD;;;OAGG;IACH,YAAY,MAA+B;QACzC,IAAI,CAAC,qBAAqB,GAAG,MAAM,CAAC,qBAAqB,CAAC;QAC1D,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC,MAAM,CAAC;QAC5B,IAAI,CAAC,WAAW,GAAG,MAAM,CAAC,WAAW,CAAC;QACtC,IAAI,CAAC,cAAc,GAAG,MAAM,CAAC,cAAc;YACzC,CAAC,CAAC,IAAI,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,cAAc,EAAE,gBAAgB,CAAC,CAAC;YAC9D,CAAC,CAAC,SAAS,CAAC;QACd,IAAI,CAAC,cAAc;YACjB,MAAM,CAAC,cAAc,IAAI,6BAA6B,CAAC;IAC3D,CAAC;IAED,qFAAqF;IAC7E,OAAO,CAAC,aAAqB;QACnC,OAAO,CACL,IAAI,CAAC,cAAc,KAAK,SAAS;YACjC,IAAI,CAAC,cAAc,CAAC,GAAG,CAAC,gBAAgB,CAAC,aAAa,CAAC,CAAC,CACzD,CAAC;IACJ,CAAC;IAED;;;;;;;;;OASG;IACK,KAAK,CAAC,oBAAoB;QAGhC,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC,iBAAiB,CACrD,IAAI,CAAC,qBAAqB,CAC3B,CAAC;QACF,MAAM,QAAQ,GAAG,IAAI,GAAG,EAGrB,CAAC;QACJ,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;YAC3B,IAAI,KAAK,CAAC,IAAI,KAAK,eAAe,CAAC,sBAAsB;gBAAE,SAAS;YACpE,IAAI,YAAY,CAAC;YACjB,IAAI,CAAC;gBACH,YAAY,GAAG,mCAAmC,CAChD,+CAA+C,CAAC,KAAK,CAAC,OAAO,CAAC,CAC/D,CAAC;YACJ,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,OAAO,CAAC,IAAI,CACV,+DAA+D,MAAM,CAAC,KAAK,CAAC,EAAE,CAC/E,CAAC;gBACF,SAAS;YACX,CAAC;YACD,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,YAAY,CAAC,aAAa,CAAC;gBAAE,SAAS;YACxD,QAAQ,CAAC,GAAG,CACV,GAAG,YAAY,CAAC,aAAa,IAAI,YAAY,CAAC,YAAY,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,EACtE;gBACE,aAAa,EAAE,YAAY,CAAC,aAAa;gBACzC,YAAY,EAAE,YAAY,CAAC,YAAY;aACxC,CACF,CAAC;QACJ,CAAC;QACD,OAAO,CAAC,GAAG,QAAQ,CAAC,MAAM,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAC1C,CAAC,CAAC,aAAa,GAAG,CAAC,CAAC,aAAa;YAC/B,CAAC,CAAC,CAAC,CAAC;YACJ,CAAC,CAAC,CAAC,CAAC,aAAa,GAAG,CAAC,CAAC,aAAa;gBACjC,CAAC,CAAC,CAAC;gBACH,CAAC,CAAC,CAAC,CACR,CAAC;IACJ,CAAC;IAED;;;;;;;;;;;;OAYG;IACH,KAAK,CAAC,IAAI;QACR,MAAM,GAAG,GAA4B,EAAE,CAAC;QACxC,KAAK,MAAM,OAAO,IAAI,MAAM,IAAI,CAAC,oBAAoB,EAAE,EAAE,CAAC;YACxD,IAAI,KAAK,CAAC;YACV,IAAI,CAAC;gBACH,KAAK,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,kBAAkB,CAAC,OAAO,CAAC,aAAa,CAAC,CAAC;YACtE,CAAC;YAAC,MAAM,CAAC;gBACP,SAAS,CAAC,uDAAuD;YACnE,CAAC;YACD,IAAI,CAAC,KAAK,EAAE,IAAI,EAAE,CAAC;gBACjB,SAAS,CAAC,qDAAqD;YACjE,CAAC;YACD,MAAM,KAAK,GAAG,wBAAwB,CACpC,KAAK,CAAC,IAAI,EACV,OAAO,CAAC,YAAY,CACrB,CAAC;YACF,KAAK,MAAM,CAAC,SAAS,EAAE,OAAO,CAAC,IAAI,CAAC,GAAG,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC,IAAI,CAC1D,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAC3C,EAAE,CAAC;gBACF,IAAI,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,SAAS,CAAC;oBAAE,SAAS;gBAC1C,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;gBAC5B,GAAG,CAAC,IAAI,CAAC;oBACP,aAAa,EAAE,OAAO,CAAC,aAAa;oBACpC,SAAS;oBACT,OAAO;iBACR,CAAC,CAAC;YACL,CAAC;QACH,CAAC;QACD,OAAO,GAAG,CAAC;IACb,CAAC;IAED;;;;;;OAMG;IACH,MAAM,CAAC,SAAuB;QAC5B,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;IACjC,CAAC;IAED;;;;;;;;OAQG;IACH,KAAK,CAAC,CAAC,QAAQ,CAAC,IAEf;QACC,OAAO,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC;YAC9B,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,IAAI,EAAE,CAAC;YAChC,KAAK,MAAM,QAAQ,IAAI,KAAK;gBAAE,MAAM,QAAQ,CAAC;YAC7C,IAAI,IAAI,EAAE,MAAM,EAAE,OAAO;gBAAE,MAAM;YACjC,MAAM,kBAAkB,CAAC,IAAI,CAAC,cAAc,EAAE,IAAI,EAAE,MAAM,CAAC,CAAC;QAC9D,CAAC;IACH,CAAC;CACF"}

package/dist/signet-request-response-reader.d.ts

@@ -1,6 +1,6 @@
 import type { PublicDataProvider } from "@midnight-ntwrk/midnight-js-types";
 import type { Transaction } from "ethers";
-import { type SignatureRespondedEvent, type RespondBidirectionalEvent } from "./signet-contract-state-reader.ts";
+import { type SignetEventSource, type SignatureRespondedEvent, type RespondBidirectionalEvent } from "./signet-contract-events.ts";
 import { type Secp256k1Point } from "./ecdsa-attestation.ts";
 import type { RawContractState } from "./signature-state-reading.ts";
 import { type SignBidirectionalEvent, type RequestIdHex } from "./signet-requests.ts";
@@ -38,11 +38,16 @@ export interface SignetRequestResponseReaderConfig {
     readonly signetContractAddress: string;
     /** Source of raw contract state, e.g. midnight-js's `indexerPublicDataProvider`. */
     readonly publicDataProvider: SignetPublicStateSource;
+    /**
+     * Source of the signet contract's emitted events. Adapt a full provider
+     * with `signetEventSourceFromPublicDataProvider`.
+     */
+    readonly eventSource: SignetEventSource;
 }
-/** The verdict on one posted response, in `count` order. */
+/** The verdict on one emitted response, in emission order. */
 export interface SignatureResponseVerdict {
-    /** 0-based position of the post in the request's response log. */
-    count: bigint;
+    /** 0-based position of the post among the request's signature-response events. */
+    index: bigint;
     /** The posted signature record, verbatim. */
     response: SignatureRespondedEvent;
     /** Recovered signer address, absent when the signature did not decode. */
@@ -53,13 +58,13 @@ export interface SignatureResponseVerdict {
 /** Result of {@link SignetRequestResponseReader['getVerifiedSignatureRespondedEvent']}. */
 export interface VerifiedSignatureResponseResult {
     /**
-     * The first valid response (lowest count), or `undefined` when no valid
+     * The first valid response (lowest index), or `undefined` when no valid
      * response has been posted yet: poll again.
      */
     verified?: SignatureRespondedEvent;
     /**
-     * One verdict per post, count order. Pure data: the reader never logs, so
-     * callers decide how to surface rejected posts.
+     * One verdict per post, emission order. Pure data: the reader never logs,
+     * so callers decide how to surface rejected posts.
      */
     verdicts: SignatureResponseVerdict[];
 }
@@ -67,24 +72,16 @@ export interface VerifiedSignatureResponseResult {
  * Reader over one requester contract / signet contract pair.
  * Construct once per pair and reuse: fetched request records are cached (they
  * are immutable, the ledger key is their hash), so repeated verification
- * calls cost one responses-contract query each.
+ * calls cost one event query each.
  */
 export declare class SignetRequestResponseReader {
     private readonly config;
     private readonly requestCache;
     /**
-     * @param config - The contract pair and state source to read through.
+     * @param config - The contract pair, state source and event source to read
+     *   through.
      */
     constructor(config: SignetRequestResponseReaderConfig);
-    /**
-     * Query one contract's raw state, throwing a uniform error when absent.
-     *
-     * @param contractAddress - The contract to query.
-     * @param role - Human name of the contract for the error message.
-     * @returns The raw ledger state tree.
-     * @throws Error when the address holds no contract state.
-     */
-    private queryRawState;
     /**
      * Fetch the request record for `requestId` from the requester contract's
      * request index (at the configured `requesterRequestsPath`). Cached
@@ -97,35 +94,49 @@ export declare class SignetRequestResponseReader {
      */
     getSignatureRequest(requestId: RequestIdHex): Promise<SignBidirectionalEvent>;
     /**
-     * Fetch every response posted for `requestId`, in post (count) order.
-     * UNVERIFIED: any of them may be garbage (see
-     * {@link getVerifiedSignatureRespondedEvent}).
+     * Fetch every event of `name` the signet contract has emitted, decode each
+     * with `decode`, and keep the posts whose declared request id is
+     * `requestId`, in emission order. The declared id is routing data only:
+     * the verified getters run the actual authenticity checks.
+     *
+     * @param name - The signet event name to keep.
+     * @param decode - The payload decoder for that event kind.
+     * @param requestId - The request id the kept posts must declare.
+     * @returns The kept posts' records, oldest first.
+     */
+    private getRespondPostsNamed;
+    /**
+     * Fetch every signature response posted under `requestId`, in emission
+     * order. UNVERIFIED: the declared id is routing data on an unauthenticated
+     * event log, so any post may still be garbage (see
+     * {@link getVerifiedSignatureRespondedEvent}, where verification
+     * establishes authenticity).
      *
-     * @param requestId - The request id whose posts to enumerate.
-     * @returns The posted payloads, index = count, empty when none yet.
-     * @throws Error when the responses contract has no state, or its counter
-     *   disagrees with the log (inconsistent ledger).
+     * @param requestId - The request id the posts must declare.
+     * @returns The request's posted records, oldest first, empty when none yet.
      */
-    getSignatureResponses(requestId: RequestIdHex): Promise<SignatureRespondedEvent[]>;
+    getSignatureRespondedEvents(requestId: RequestIdHex): Promise<SignatureRespondedEvent[]>;
     /**
-     * Fetch and verify the responses posted for `requestId`: each post's
-     * signature must recover to `expectedSigner`
-     * (compared case-insensitively) over the signing hash of the transaction
-     * the request record describes. The first valid post wins, and every post
-     * gets a verdict so callers can report the noise.
+     * Fetch the signature responses posted under `requestId` and verify each
+     * against the request: a post's signature must recover to
+     * `expectedSigner` (compared case-insensitively) over the signing hash of
+     * the transaction the request record describes. The first valid post wins,
+     * and every candidate gets a verdict so callers can report the noise. The
+     * declared id only routes: this verification is what separates the genuine
+     * response from garbage posted under the same id.
      *
      * @param requestId - The request id to fetch a verified response for.
      * @param expectedSigner - The EVM address (0x hex, any case) the genuine
      *   response must be signed by: the requester's MPC-derived address.
      * @returns The first valid response (if any) plus per-post verdicts.
-     * @throws Error when either contract has no state, the request is not on
-     *   the requester's ledger, or the responses ledger is inconsistent.
+     * @throws Error when the requester contract has no state or the request is
+     *   not on its ledger.
      */
     getVerifiedSignatureRespondedEvent(requestId: RequestIdHex, expectedSigner: string): Promise<VerifiedSignatureResponseResult>;
     /**
      * Rebuild the unsigned EIP-1559 transaction for `requestId`: the exact
      * transaction the MPC signs, assembled from the request record's decomposed
-     * fields. No responses-contract query: this needs only the request record
+     * fields. No event query: this needs only the request record
      * (fetched via {@link getSignatureRequest}, cached).
      *
      * @param requestId - The request id whose transaction to rebuild.
@@ -139,7 +150,7 @@ export declare class SignetRequestResponseReader {
      * Assemble the broadcast-ready signed EIP-1559 transaction for `requestId`:
      * rebuild the request's transaction and attach the first VERIFIED response
      * signed by `expectedSigner` (see {@link getVerifiedSignatureRespondedEvent}:
-     * the response log is unauthenticated, so an `expectedSigner` is required
+     * the event log is unauthenticated, so an `expectedSigner` is required
      * and unverified posts are never attached).
      *
      * @param requestId - The request id to produce a signed transaction for.
@@ -148,47 +159,43 @@ export declare class SignetRequestResponseReader {
      * @returns The signed ethers transaction (`serialized` is the payload for
      *   `eth_sendRawTransaction`), or `undefined` when no valid response has
      *   been posted yet: poll again.
-     * @throws Error when either contract has no state, the request is not on the
-     *   requester's ledger, or the responses ledger is inconsistent.
+     * @throws Error when the requester contract has no state or the request is
+     *   not on its ledger.
      */
     getSignedEvmTransaction(requestId: RequestIdHex, expectedSigner: string): Promise<Transaction | undefined>;
     /**
-     * Fetch every respond-bidirectional response posted for `requestId`, in
-     * post (count) order. UNVERIFIED: the signet contract stores posts without
-     * checking them, so any entry may be garbage. Each post carries a signature
-     * and nothing else, so verifying it against the MPC response key you expect
-     * is the only way to pick the genuine one: in-circuit at claim time, or off
-     * chain with {@link verifyRespondBidirectionalSignature} over the output you
-     * fetched. An empty array simply means none posted yet: poll again.
+     * Fetch every respond-bidirectional response posted under `requestId`, in
+     * emission order. UNVERIFIED: the declared id is routing data on an
+     * unauthenticated event log, so verifying a post against the MPC response
+     * key you expect is still the only way to pick the genuine one: in-circuit
+     * at claim time, or off chain with
+     * {@link verifyRespondBidirectionalSignature} over the output you fetched.
+     * An empty array simply means none posted yet: poll again.
      *
-     * @param requestId - The request id whose responses to enumerate.
-     * @returns The posted records, index = count, empty when none yet.
-     * @throws Error when the signet contract has no state, or its counter
-     *   disagrees with the log (inconsistent ledger).
+     * @param requestId - The request id the posts must declare.
+     * @returns The request's posted records, oldest first, empty when none yet.
      */
     getRespondBidirectionalEvents(requestId: RequestIdHex): Promise<RespondBidirectionalEvent[]>;
     /**
-     * Fetch the respond-bidirectional posts for `requestId` and return the
-     * first (lowest count) one whose signature verifies over
+     * Fetch the respond-bidirectional posts declared under `requestId` and
+     * return the first (oldest) one whose signature verifies over
      * `serializedOutput` against `mpcResponseKey`: the off-chain twin of the
      * check the client contract runs in-circuit, and the only way to pick a
-     * genuine post out of an unauthenticated log now that posts carry nothing
-     * but a signature.
+     * genuine post out of an unauthenticated event log.
      *
      * The output must be the exact unpadded bytes the attestation commits to
      * (the packed respond payload, recomputed from the execution output the
      * client fetched), so a post that verifies here is the post that proves at
      * claim time.
      *
-     * @param requestId - The request id to fetch a verified attestation for.
+     * @param requestId - The request id the posts must declare and the
+     *   attestation must commit to.
      * @param serializedOutput - The serialised execution output the attestation
      *   must commit to, exact unpadded bytes.
      * @param mpcResponseKey - The MPC response key the requesting contract
      *   pinned at deploy (see `deriveMidnightResponseKey`).
      * @returns The first verifying post, or `undefined` when none has been
      *   posted yet (poll again) or none attests this output.
-     * @throws Error when the signet contract has no state, or its counter
-     *   disagrees with the log (inconsistent ledger).
      */
     getVerifiedRespondBidirectionalEvent(requestId: RequestIdHex, serializedOutput: Uint8Array, mpcResponseKey: Secp256k1Point): Promise<RespondBidirectionalEvent | undefined>;
 }

package/dist/signet-request-response-reader.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"signet-request-response-reader.d.ts","sourceRoot":"","sources":["../src/signet-request-response-reader.ts"],"names":[],"mappings":"AAWA,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,mCAAmC,CAAC;AAC5E,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,QAAQ,CAAC;AAG1C,OAAO,EAGL,KAAK,uBAAuB,EAC5B,KAAK,yBAAyB,EAC/B,MAAM,mCAAmC,CAAC;AAE3C,OAAO,EAEL,KAAK,cAAc,EACpB,MAAM,wBAAwB,CAAC;AAChC,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,8BAA8B,CAAC;AAKrE,OAAO,EAEL,KAAK,sBAAsB,EAC3B,KAAK,YAAY,EAClB,MAAM,sBAAsB,CAAC;AAE9B;;;;;GAKG;AACH,MAAM,WAAW,uBAAuB;IACtC;;;;;;OAMG;IACH,kBAAkB,CAChB,eAAe,EAAE,UAAU,CAAC,kBAAkB,CAAC,oBAAoB,CAAC,CAAC,CAAC,CAAC,CAAC,GACvE,OAAO,CAAC;QAAE,IAAI,EAAE,gBAAgB,CAAA;KAAE,GAAG,IAAI,CAAC,CAAC;CAC/C;AAED,yEAAyE;AACzE,MAAM,WAAW,iCAAiC;IAChD,2EAA2E;IAC3E,QAAQ,CAAC,wBAAwB,EAAE,MAAM,CAAC;IAC1C;;;;;;OAMG;IACH,QAAQ,CAAC,qBAAqB,EAAE,SAAS,MAAM,EAAE,CAAC;IAClD,8CAA8C;IAC9C,QAAQ,CAAC,qBAAqB,EAAE,MAAM,CAAC;IACvC,oFAAoF;IACpF,QAAQ,CAAC,kBAAkB,EAAE,uBAAuB,CAAC;CACtD;AAED,4DAA4D;AAC5D,MAAM,WAAW,wBAAwB;IACvC,kEAAkE;IAClE,KAAK,EAAE,MAAM,CAAC;IACd,6CAA6C;IAC7C,QAAQ,EAAE,uBAAuB,CAAC;IAClC,0EAA0E;IAC1E,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,gEAAgE;IAChE,cAAc,CAAC,EAAE,MAAM,CAAC;CACzB;AAED,2FAA2F;AAC3F,MAAM,WAAW,+BAA+B;IAC9C;;;OAGG;IACH,QAAQ,CAAC,EAAE,uBAAuB,CAAC;IACnC;;;OAGG;IACH,QAAQ,EAAE,wBAAwB,EAAE,CAAC;CACtC;AAED;;;;;GAKG;AACH,qBAAa,2BAA2B;IACtC,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAoC;IAG3D,OAAO,CAAC,QAAQ,CAAC,YAAY,CAGzB;IAEJ;;OAEG;gBACS,MAAM,EAAE,iCAAiC;IAIrD;;;;;;;OAOG;YACW,aAAa;IAc3B;;;;;;;;;OASG;IACG,mBAAmB,CACvB,SAAS,EAAE,YAAY,GACtB,OAAO,CAAC,sBAAsB,CAAC;IAwBlC;;;;;;;;;OASG;IACG,qBAAqB,CACzB,SAAS,EAAE,YAAY,GACtB,OAAO,CAAC,uBAAuB,EAAE,CAAC;IAwBrC;;;;;;;;;;;;;OAaG;IACG,kCAAkC,CACtC,SAAS,EAAE,YAAY,EACvB,cAAc,EAAE,MAAM,GACrB,OAAO,CAAC,+BAA+B,CAAC;IAiC3C;;;;;;;;;;;OAWG;IACG,yBAAyB,CAC7B,SAAS,EAAE,YAAY,GACtB,OAAO,CAAC,WAAW,CAAC;IAMvB;;;;;;;;;;;;;;;OAeG;IACG,uBAAuB,CAC3B,SAAS,EAAE,YAAY,EACvB,cAAc,EAAE,MAAM,GACrB,OAAO,CAAC,WAAW,GAAG,SAAS,CAAC;IAcnC;;;;;;;;;;;;;OAaG;IACG,6BAA6B,CACjC,SAAS,EAAE,YAAY,GACtB,OAAO,CAAC,yBAAyB,EAAE,CAAC;IAwBvC;;;;;;;;;;;;;;;;;;;;;;OAsBG;IACG,oCAAoC,CACxC,SAAS,EAAE,YAAY,EACvB,gBAAgB,EAAE,UAAU,EAC5B,cAAc,EAAE,cAAc,GAC7B,OAAO,CAAC,yBAAyB,GAAG,SAAS,CAAC;CAWlD"}
+{"version":3,"file":"signet-request-response-reader.d.ts","sourceRoot":"","sources":["../src/signet-request-response-reader.ts"],"names":[],"mappings":"AAeA,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,mCAAmC,CAAC;AAC5E,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,QAAQ,CAAC;AAG1C,OAAO,EAIL,KAAK,iBAAiB,EAEtB,KAAK,uBAAuB,EAC5B,KAAK,yBAAyB,EAC/B,MAAM,6BAA6B,CAAC;AAErC,OAAO,EAEL,KAAK,cAAc,EACpB,MAAM,wBAAwB,CAAC;AAChC,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,8BAA8B,CAAC;AAKrE,OAAO,EAGL,KAAK,sBAAsB,EAC3B,KAAK,YAAY,EAClB,MAAM,sBAAsB,CAAC;AAE9B;;;;;GAKG;AACH,MAAM,WAAW,uBAAuB;IACtC;;;;;;OAMG;IACH,kBAAkB,CAChB,eAAe,EAAE,UAAU,CAAC,kBAAkB,CAAC,oBAAoB,CAAC,CAAC,CAAC,CAAC,CAAC,GACvE,OAAO,CAAC;QAAE,IAAI,EAAE,gBAAgB,CAAA;KAAE,GAAG,IAAI,CAAC,CAAC;CAC/C;AAED,yEAAyE;AACzE,MAAM,WAAW,iCAAiC;IAChD,2EAA2E;IAC3E,QAAQ,CAAC,wBAAwB,EAAE,MAAM,CAAC;IAC1C;;;;;;OAMG;IACH,QAAQ,CAAC,qBAAqB,EAAE,SAAS,MAAM,EAAE,CAAC;IAClD,8CAA8C;IAC9C,QAAQ,CAAC,qBAAqB,EAAE,MAAM,CAAC;IACvC,oFAAoF;IACpF,QAAQ,CAAC,kBAAkB,EAAE,uBAAuB,CAAC;IACrD;;;OAGG;IACH,QAAQ,CAAC,WAAW,EAAE,iBAAiB,CAAC;CACzC;AAED,8DAA8D;AAC9D,MAAM,WAAW,wBAAwB;IACvC,kFAAkF;IAClF,KAAK,EAAE,MAAM,CAAC;IACd,6CAA6C;IAC7C,QAAQ,EAAE,uBAAuB,CAAC;IAClC,0EAA0E;IAC1E,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,gEAAgE;IAChE,cAAc,CAAC,EAAE,MAAM,CAAC;CACzB;AAED,2FAA2F;AAC3F,MAAM,WAAW,+BAA+B;IAC9C;;;OAGG;IACH,QAAQ,CAAC,EAAE,uBAAuB,CAAC;IACnC;;;OAGG;IACH,QAAQ,EAAE,wBAAwB,EAAE,CAAC;CACtC;AAED;;;;;GAKG;AACH,qBAAa,2BAA2B;IACtC,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAoC;IAG3D,OAAO,CAAC,QAAQ,CAAC,YAAY,CAGzB;IAEJ;;;OAGG;gBACS,MAAM,EAAE,iCAAiC;IAIrD;;;;;;;;;OASG;IACG,mBAAmB,CACvB,SAAS,EAAE,YAAY,GACtB,OAAO,CAAC,sBAAsB,CAAC;IA4BlC;;;;;;;;;;OAUG;YACW,oBAAoB;IAelC;;;;;;;;;OASG;IACG,2BAA2B,CAC/B,SAAS,EAAE,YAAY,GACtB,OAAO,CAAC,uBAAuB,EAAE,CAAC;IAQrC;;;;;;;;;;;;;;;OAeG;IACG,kCAAkC,CACtC,SAAS,EAAE,YAAY,EACvB,cAAc,EAAE,MAAM,GACrB,OAAO,CAAC,+BAA+B,CAAC;IAiC3C;;;;;;;;;;;OAWG;IACG,yBAAyB,CAC7B,SAAS,EAAE,YAAY,GACtB,OAAO,CAAC,WAAW,CAAC;IAMvB;;;;;;;;;;;;;;;OAeG;IACG,uBAAuB,CAC3B,SAAS,EAAE,YAAY,EACvB,cAAc,EAAE,MAAM,GACrB,OAAO,CAAC,WAAW,GAAG,SAAS,CAAC;IAcnC;;;;;;;;;;;OAWG;IACG,6BAA6B,CACjC,SAAS,EAAE,YAAY,GACtB,OAAO,CAAC,yBAAyB,EAAE,CAAC;IAQvC;;;;;;;;;;;;;;;;;;;;OAoBG;IACG,oCAAoC,CACxC,SAAS,EAAE,YAAY,EACvB,gBAAgB,EAAE,UAAU,EAC5B,cAAc,EAAE,cAAc,GAC7B,OAAO,CAAC,yBAAyB,GAAG,SAAS,CAAC;CAWlD"}