@sig-net/midnight 0.15.0 → 0.17.0

package/dist/signet-contract-state-reader.js

@@ -1,363 +0,0 @@
-// MPC-/client-style raw state reader for the central SIGNET contract: decode
-// its ledger fields out of a contract's raw state WITHOUT the compiled
-// contract, the mirror image of signature-requests-state-reader.ts. A poller
-// has only the contract address, queries raw state from the indexer
-// (queryContractState(address).data), and decodes by the signet contract's
-// declaration-order layout:
-//   field 0: signBidirectionalEventNotificationCounterMap (Map<RequestId, Counter>)
-//   field 1: signBidirectionalEventNotificationMap (Map<SignetMapKey, Notification>)
-//   field 2: respondCounterMap (Map<RequestId, Counter>)
-//   field 3: respondMap (Map<SignetMapKey, SignatureRespondedEvent>)
-//   field 4: respondBidirectionalCounterMap (Map<RequestId, Counter>)
-//   field 5: respondBidirectionalMap (Map<SignetMapKey, RespondBidirectionalEvent>)
-// Every store is an unauthenticated append-only log keyed by
-// (requestId, count): verification is the reader's job. The generic
-// state-tree walk (RawContractState, signetFieldNodeByPath) and the shared base
-// descriptors live in signature-state-reading.ts.
-import { CompactTypeBytes, CompactTypeUnsignedInteger, } from "@midnight-ntwrk/compact-runtime";
-import { bytesToHex, requestIdHex, } from "./signet-requests.js";
-import { requestIdType, signetFieldNodeByPath, u64, } from "./signature-state-reading.js";
-/** Signet contract layout: the notification counter map is ledger field 0. */
-export const SIGN_BIDIRECTIONAL_EVENT_NOTIFICATION_COUNTER_MAP_FIELD = 0;
-/** Signet contract layout: the notification map is ledger field 1. */
-export const SIGN_BIDIRECTIONAL_EVENT_NOTIFICATION_MAP_FIELD = 1;
-/** Signet contract layout: the `respond` counter map is ledger field 2. */
-export const RESPOND_COUNTER_MAP_FIELD = 2;
-/** Signet contract layout: the `respond` post log is ledger field 3. */
-export const RESPOND_MAP_FIELD = 3;
-/** Signet contract layout: the respond-bidirectional counter map is ledger field 4. */
-export const RESPOND_BIDIRECTIONAL_COUNTER_MAP_FIELD = 4;
-/** Signet contract layout: the respond-bidirectional map is ledger field 5. */
-export const RESPOND_BIDIRECTIONAL_MAP_FIELD = 5;
-// ---- Type descriptors (must mirror Signet.compact field-for-field) ----
-// As in the requests reader, fromValue consumes the aligned value
-// sequentially, so field order and width here must match the Compact structs
-// exactly: a mismatch is silent data corruption, not an error.
-/** Descriptor for a 32-byte scalar / coordinate / hash (`Bytes<32>`). */
-const bytes32 = new CompactTypeBytes(32);
-/** Descriptor for a Compact `Uint<8>` (1-byte unsigned integer). */
-const u8 = new CompactTypeUnsignedInteger(255n, 1);
-/**
- * Hand-composed descriptor for {@link MpcSignature}. Leaf order
- * (bigR.x, bigR.y, s, recoveryId) must match the nested Compact structs.
- */
-const mpcSignatureType = {
-    /** @returns Compound alignment of the struct's leaves in declaration order. */
-    alignment() {
-        return bytes32
-            .alignment()
-            .concat(bytes32.alignment())
-            .concat(bytes32.alignment())
-            .concat(u8.alignment());
-    },
-    /**
-     * Decode one signature from an aligned value, consuming it leaf by leaf.
-     *
-     * @param value - Mutable aligned value cursor: pass a copy.
-     * @returns The decoded signature.
-     */
-    fromValue(value) {
-        return {
-            bigR: { x: bytes32.fromValue(value), y: bytes32.fromValue(value) },
-            s: bytes32.fromValue(value),
-            recoveryId: u8.fromValue(value),
-        };
-    },
-    /**
-     * Encode a signature into its aligned on-ledger representation.
-     *
-     * @param record - The signature to encode.
-     * @returns The aligned value, leaves concatenated in declaration order.
-     */
-    toValue(record) {
-        return bytes32
-            .toValue(record.bigR.x)
-            .concat(bytes32.toValue(record.bigR.y))
-            .concat(bytes32.toValue(record.s))
-            .concat(u8.toValue(record.recoveryId));
-    },
-};
-/**
- * Hand-composed descriptor for {@link SignatureRespondedEvent}: the single
- * {@link MpcSignature} field, matching the Compact struct.
- */
-export const signatureRespondedEventType = {
-    /** @returns Alignment of the struct's single signature field. */
-    alignment() {
-        return mpcSignatureType.alignment();
-    },
-    /**
-     * Decode one signature response from an aligned value.
-     *
-     * @param value - Mutable aligned value cursor: pass a copy.
-     * @returns The decoded record.
-     */
-    fromValue(value) {
-        return { signature: mpcSignatureType.fromValue(value) };
-    },
-    /**
-     * Encode a signature response into its aligned on-ledger representation.
-     *
-     * @param record - The record to encode.
-     * @returns The aligned value.
-     */
-    toValue(record) {
-        return mpcSignatureType.toValue(record.signature);
-    },
-};
-/**
- * Hand-composed descriptor for {@link SignetMapKey}, the map key of every
- * posted-entry map in the signet contract. Field order (count, then
- * requestId) must match the Compact struct.
- */
-export const signetMapKeyType = {
-    /** @returns Compound alignment of the struct's fields in declaration order. */
-    alignment() {
-        return u64.alignment().concat(requestIdType.alignment());
-    },
-    /**
-     * Decode one key from an aligned value, consuming it field by field.
-     *
-     * @param value - Mutable aligned value cursor: pass a copy.
-     * @returns The decoded composite key.
-     */
-    fromValue(value) {
-        return {
-            count: u64.fromValue(value),
-            requestId: requestIdType.fromValue(value),
-        };
-    },
-    /**
-     * Encode a key into its aligned on-ledger representation.
-     *
-     * @param key - The composite key to encode.
-     * @returns The aligned value, fields concatenated in declaration order.
-     */
-    toValue(key) {
-        return u64.toValue(key.count).concat(requestIdType.toValue(key.requestId));
-    },
-};
-/**
- * Hand-composed descriptor for {@link RespondBidirectionalEvent}: the single
- * {@link MpcSignature} field, matching the Compact struct.
- */
-export const respondBidirectionalEventType = {
-    /** @returns Alignment of the struct's single signature field. */
-    alignment() {
-        return mpcSignatureType.alignment();
-    },
-    /**
-     * Decode one response record from an aligned value.
-     *
-     * @param value - Mutable aligned value cursor: pass a copy.
-     * @returns The decoded record.
-     */
-    fromValue(value) {
-        return { signature: mpcSignatureType.fromValue(value) };
-    },
-    /**
-     * Encode a response record into its aligned on-ledger representation.
-     *
-     * @param record - The record to encode.
-     * @returns The aligned value.
-     */
-    toValue(record) {
-        return mpcSignatureType.toValue(record.signature);
-    },
-};
-/** Descriptor for the notification's packed V1 payload (`Bytes<128>`). */
-const bytes128Payload = new CompactTypeBytes(128);
-/**
- * Hand-composed descriptor for {@link SignBidirectionalNotificationRecord}.
- * Field order (version, payload) must match the Compact struct.
- */
-export const signBidirectionalNotificationType = {
-    /** @returns Compound alignment of the struct's fields in declaration order. */
-    alignment() {
-        return u8.alignment().concat(bytes128Payload.alignment());
-    },
-    /**
-     * Decode one notification record from an aligned value, consuming it
-     * field by field.
-     *
-     * @param value - Mutable aligned value cursor: pass a copy.
-     * @returns The decoded record.
-     */
-    fromValue(value) {
-        return {
-            version: u8.fromValue(value),
-            payload: bytes128Payload.fromValue(value),
-        };
-    },
-    /**
-     * Encode a notification record into its aligned on-ledger representation.
-     *
-     * @param record - The record to encode.
-     * @returns The aligned value, fields concatenated in declaration order.
-     */
-    toValue(record) {
-        return u8
-            .toValue(record.version)
-            .concat(bytes128Payload.toValue(record.payload));
-    },
-};
-/** Offset of the V1 `callerAddress` in the packed payload (`Bytes<32>` at the front). */
-const NOTIFICATION_CALLER_ADDRESS_OFFSET = 0;
-/** Offset of the V1 `requestsPathDepth` (after the 32 callerAddress bytes). */
-const NOTIFICATION_PATH_DEPTH_OFFSET = 32;
-/** Offset of the V1 `requestsPath` bytes (after the 1-byte depth). */
-const NOTIFICATION_PATH_OFFSET = 33;
-/**
- * Maximum ledger-tree path depth the V1 payload carries, matching the
- * `Vector<4, Uint<8>>` the `constructSignBidirectionalEventNotificationV1`
- * circuit packs. Depth 1 addresses up to 15 fields, depth 4 up to 15^4.
- */
-const MAX_LEDGER_PATH_DEPTH = 4;
-/** The only payload interpretation {@link decodeSignBidirectionalNotification} understands today. */
-const SUPPORTED_NOTIFICATION_VERSION = 1n;
-/**
- * Unpack a stored {@link SignBidirectionalNotificationRecord}'s payload by
- * the fixed V1 offsets: the decode twin of the compiled
- * `constructSignBidirectionalEventNotificationV1` circuit (byte plumbing
- * only: the pack↔decode lockstep is pinned by the state-reader unit test that
- * round-trips through the real circuit). V1 layout:
- * callerAddress (32) ++ requestsPathDepth (1) ++ requestsPath (4) ++ zero
- * padding (91), where only the first `requestsPathDepth` path bytes are
- * meaningful.
- *
- * Fails closed on an unrecognised `version`: a future payload layout adds a
- * branch here rather than silently misinterpreting bytes under the V1 offsets.
- *
- * @param record - The raw on-ledger record.
- * @returns The decoded notification, its `requestsPath` trimmed to the
- *   declared depth.
- * @throws Error if the record's `version` is not one this decoder understands,
- *   or its `requestsPathDepth` is zero or exceeds {@link MAX_LEDGER_PATH_DEPTH}.
- */
-export function decodeSignBidirectionalNotification(record) {
-    if (record.version !== SUPPORTED_NOTIFICATION_VERSION) {
-        throw new Error(`SignBidirectionalEventNotification version ${record.version} is not supported ` +
-            `(this decoder understands version ${SUPPORTED_NOTIFICATION_VERSION})`);
-    }
-    const callerAddress = bytesToHex(record.payload.slice(NOTIFICATION_CALLER_ADDRESS_OFFSET, NOTIFICATION_PATH_DEPTH_OFFSET));
-    const depth = record.payload[NOTIFICATION_PATH_DEPTH_OFFSET];
-    if (depth === undefined || depth < 1 || depth > MAX_LEDGER_PATH_DEPTH) {
-        throw new Error(`SignBidirectionalEventNotification requestsPathDepth ${depth} is out of range ` +
-            `(expected 1 to ${MAX_LEDGER_PATH_DEPTH})`);
-    }
-    // payload is a re-padded Bytes<128> and depth is bounded to MAX_LEDGER_PATH_DEPTH
-    // above, so this slice always yields exactly `depth` bytes.
-    const requestsPath = Array.from(record.payload.slice(NOTIFICATION_PATH_OFFSET, NOTIFICATION_PATH_OFFSET + depth));
-    return {
-        version: Number(record.version),
-        callerAddress,
-        requestsPath,
-    };
-}
-/**
- * Build the flattened JS map key for a `(requestId, count)` pair: the
- * composite Compact {@link SignetMapKey} as a string so it works as a JS
- * `Map` key.
- *
- * @param id - The request id the entry belongs to, in canonical hex form.
- * @param count - 0-based post count within that request.
- * @returns `"<hexRequestId>:<count>"`.
- */
-export function signetMapEntryKey(id, count) {
-    return `${id}:${count}`;
-}
-/** Decode a `Map<RequestId, Counter>` ledger field into a {@link SignetCounterIndex}. */
-function readCounterMap(raw, field) {
-    // The central singleton is flat (6 fields), so a field number is a depth-1 path.
-    const counterMap = signetFieldNodeByPath(raw, [field]).asMap();
-    if (counterMap === undefined) {
-        throw new Error(`Ledger field ${field} is not a Map`);
-    }
-    const index = new Map();
-    for (const key of counterMap.keys()) {
-        // fromValue consumes its input, so hand each descriptor a copy.
-        const requestId = requestIdType.fromValue([...key.value]);
-        // A Counter is stored as a plain u64 cell.
-        const cell = counterMap.get(key)?.asCell();
-        if (cell === undefined)
-            continue;
-        index.set(requestIdHex(requestId), u64.fromValue([...cell.value]));
-    }
-    return index;
-}
-/** Decode a `Map<SignetMapKey, T>` ledger field into a string-keyed JS map. */
-function readSignetKeyedMap(raw, field, valueType) {
-    const map = signetFieldNodeByPath(raw, [field]).asMap();
-    if (map === undefined) {
-        throw new Error(`Ledger field ${field} is not a Map`);
-    }
-    const index = new Map();
-    for (const key of map.keys()) {
-        const mapKey = signetMapKeyType.fromValue([...key.value]);
-        const cell = map.get(key)?.asCell();
-        if (cell === undefined)
-            continue;
-        index.set(signetMapEntryKey(requestIdHex(mapKey.requestId), mapKey.count), valueType.fromValue([...cell.value]));
-    }
-    return index;
-}
-/**
- * Read ONLY the notification registry (ledger field
- * {@link SIGN_BIDIRECTIONAL_EVENT_NOTIFICATION_MAP_FIELD}) out of raw signet
- * contract state: the poll-loop primitive of {@link SignetRequestFeed},
- * which cycles frequently and has no use for the response fields. One record
- * per request id (the count-0 post, see
- * {@link SignBidirectionalNotificationIndex}).
- *
- * @param raw - Raw contract state, e.g. `queryContractState(address).data`
- *   from the indexer or `ctx.currentQueryContext.state` from the simulator.
- * @returns The registry, keyed by the hex request id of each entry's map key.
- * @throws Error if the field is missing or is not a Map.
- */
-export function readSignBidirectionalNotificationIndexFromState(raw) {
-    const notificationMap = signetFieldNodeByPath(raw, [
-        SIGN_BIDIRECTIONAL_EVENT_NOTIFICATION_MAP_FIELD,
-    ]).asMap();
-    if (notificationMap === undefined) {
-        throw new Error(`Ledger field ${SIGN_BIDIRECTIONAL_EVENT_NOTIFICATION_MAP_FIELD} is not a Map`);
-    }
-    const index = new Map();
-    const counts = new Map();
-    for (const key of notificationMap.keys()) {
-        // fromValue consumes its input, so hand each descriptor a copy.
-        const mapKey = signetMapKeyType.fromValue([...key.value]);
-        const cell = notificationMap.get(key)?.asCell();
-        if (cell === undefined)
-            continue;
-        const id = requestIdHex(mapKey.requestId);
-        const seen = counts.get(id);
-        // Keep the FIRST post (lowest count) per request id.
-        if (seen !== undefined && seen <= mapKey.count)
-            continue;
-        counts.set(id, mapKey.count);
-        index.set(id, signBidirectionalNotificationType.fromValue([...cell.value]));
-    }
-    return index;
-}
-/**
- * MPC-/client-style read: parse the signet contract's ledger fields out of
- * raw contract state by field position alone, with no compiled contract and
- * no generated `ledger()`, only the declaration-order layout and the
- * canonical descriptors above.
- *
- * @param raw - Raw contract state, e.g. `queryContractState(address).data`
- *   from the indexer or `ctx.currentQueryContext.state` from the simulator.
- * @returns The decoded {@link SignetContractLedger}.
- * @throws Error if a field is missing or has the wrong state-value shape.
- */
-export function readSignetContractLedgerFromState(raw) {
-    return {
-        signBidirectionalEventNotificationCounterMap: readCounterMap(raw, SIGN_BIDIRECTIONAL_EVENT_NOTIFICATION_COUNTER_MAP_FIELD),
-        signBidirectionalEventNotificationMap: readSignBidirectionalNotificationIndexFromState(raw),
-        respondCounterMap: readCounterMap(raw, RESPOND_COUNTER_MAP_FIELD),
-        respondMap: readSignetKeyedMap(raw, RESPOND_MAP_FIELD, signatureRespondedEventType),
-        respondBidirectionalCounterMap: readCounterMap(raw, RESPOND_BIDIRECTIONAL_COUNTER_MAP_FIELD),
-        respondBidirectionalMap: readSignetKeyedMap(raw, RESPOND_BIDIRECTIONAL_MAP_FIELD, respondBidirectionalEventType),
-    };
-}
-//# sourceMappingURL=signet-contract-state-reader.js.map

package/dist/signet-contract-state-reader.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"signet-contract-state-reader.js","sourceRoot":"","sources":["../src/signet-contract-state-reader.ts"],"names":[],"mappings":"AAAA,6EAA6E;AAC7E,uEAAuE;AACvE,6EAA6E;AAC7E,oEAAoE;AACpE,2EAA2E;AAC3E,4BAA4B;AAC5B,oFAAoF;AACpF,qFAAqF;AACrF,yDAAyD;AACzD,qEAAqE;AACrE,sEAAsE;AACtE,oFAAoF;AACpF,6DAA6D;AAC7D,oEAAoE;AACpE,gFAAgF;AAChF,kDAAkD;AAElD,OAAO,EACL,gBAAgB,EAChB,0BAA0B,GAE3B,MAAM,iCAAiC,CAAC;AAEzC,OAAO,EACL,UAAU,EACV,YAAY,GAGb,MAAM,sBAAsB,CAAC;AAE9B,OAAO,EACL,aAAa,EACb,qBAAqB,EACrB,GAAG,GAEJ,MAAM,8BAA8B,CAAC;AAEtC,8EAA8E;AAC9E,MAAM,CAAC,MAAM,uDAAuD,GAAG,CAAC,CAAC;AAEzE,sEAAsE;AACtE,MAAM,CAAC,MAAM,+CAA+C,GAAG,CAAC,CAAC;AAEjE,2EAA2E;AAC3E,MAAM,CAAC,MAAM,yBAAyB,GAAG,CAAC,CAAC;AAE3C,wEAAwE;AACxE,MAAM,CAAC,MAAM,iBAAiB,GAAG,CAAC,CAAC;AAEnC,uFAAuF;AACvF,MAAM,CAAC,MAAM,uCAAuC,GAAG,CAAC,CAAC;AAEzD,+EAA+E;AAC/E,MAAM,CAAC,MAAM,+BAA+B,GAAG,CAAC,CAAC;AAEjD,0EAA0E;AAC1E,kEAAkE;AAClE,6EAA6E;AAC7E,+DAA+D;AAE/D,yEAAyE;AACzE,MAAM,OAAO,GAAG,IAAI,gBAAgB,CAAC,EAAE,CAAC,CAAC;AAEzC,oEAAoE;AACpE,MAAM,EAAE,GAAG,IAAI,0BAA0B,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC;AAgCnD;;;GAGG;AACH,MAAM,gBAAgB,GAA8B;IAClD,+EAA+E;IAC/E,SAAS;QACP,OAAO,OAAO;aACX,SAAS,EAAE;aACX,MAAM,CAAC,OAAO,CAAC,SAAS,EAAE,CAAC;aAC3B,MAAM,CAAC,OAAO,CAAC,SAAS,EAAE,CAAC;aAC3B,MAAM,CAAC,EAAE,CAAC,SAAS,EAAE,CAAC,CAAC;IAC5B,CAAC;IACD;;;;;OAKG;IACH,SAAS,CAAC,KAAK;QACb,OAAO;YACL,IAAI,EAAE,EAAE,CAAC,EAAE,OAAO,CAAC,SAAS,CAAC,KAAK,CAAC,EAAE,CAAC,EAAE,OAAO,CAAC,SAAS,CAAC,KAAK,CAAC,EAAE;YAClE,CAAC,EAAE,OAAO,CAAC,SAAS,CAAC,KAAK,CAAC;YAC3B,UAAU,EAAE,EAAE,CAAC,SAAS,CAAC,KAAK,CAAC;SAChC,CAAC;IACJ,CAAC;IACD;;;;;OAKG;IACH,OAAO,CAAC,MAAM;QACZ,OAAO,OAAO;aACX,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC;aACtB,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;aACtC,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;aACjC,MAAM,CAAC,EAAE,CAAC,OAAO,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC,CAAC;IAC3C,CAAC;CACF,CAAC;AAaF;;;GAGG;AACH,MAAM,CAAC,MAAM,2BAA2B,GAAyC;IAC/E,iEAAiE;IACjE,SAAS;QACP,OAAO,gBAAgB,CAAC,SAAS,EAAE,CAAC;IACtC,CAAC;IACD;;;;;OAKG;IACH,SAAS,CAAC,KAAK;QACb,OAAO,EAAE,SAAS,EAAE,gBAAgB,CAAC,SAAS,CAAC,KAAK,CAAC,EAAE,CAAC;IAC1D,CAAC;IACD;;;;;OAKG;IACH,OAAO,CAAC,MAAM;QACZ,OAAO,gBAAgB,CAAC,OAAO,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;IACpD,CAAC;CACF,CAAC;AAgCF;;;;GAIG;AACH,MAAM,CAAC,MAAM,gBAAgB,GAA8B;IACzD,+EAA+E;IAC/E,SAAS;QACP,OAAO,GAAG,CAAC,SAAS,EAAE,CAAC,MAAM,CAAC,aAAa,CAAC,SAAS,EAAE,CAAC,CAAC;IAC3D,CAAC;IACD;;;;;OAKG;IACH,SAAS,CAAC,KAAK;QACb,OAAO;YACL,KAAK,EAAE,GAAG,CAAC,SAAS,CAAC,KAAK,CAAC;YAC3B,SAAS,EAAE,aAAa,CAAC,SAAS,CAAC,KAAK,CAAC;SAC1C,CAAC;IACJ,CAAC;IACD;;;;;OAKG;IACH,OAAO,CAAC,GAAG;QACT,OAAO,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,aAAa,CAAC,OAAO,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC,CAAC;IAC7E,CAAC;CACF,CAAC;AAEF;;;GAGG;AACH,MAAM,CAAC,MAAM,6BAA6B,GAA2C;IACnF,iEAAiE;IACjE,SAAS;QACP,OAAO,gBAAgB,CAAC,SAAS,EAAE,CAAC;IACtC,CAAC;IACD;;;;;OAKG;IACH,SAAS,CAAC,KAAK;QACb,OAAO,EAAE,SAAS,EAAE,gBAAgB,CAAC,SAAS,CAAC,KAAK,CAAC,EAAE,CAAC;IAC1D,CAAC;IACD;;;;;OAKG;IACH,OAAO,CAAC,MAAM;QACZ,OAAO,gBAAgB,CAAC,OAAO,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;IACpD,CAAC;CACF,CAAC;AAEF,0EAA0E;AAC1E,MAAM,eAAe,GAAG,IAAI,gBAAgB,CAAC,GAAG,CAAC,CAAC;AAclD;;;GAGG;AACH,MAAM,CAAC,MAAM,iCAAiC,GAC5C;IACE,+EAA+E;IAC/E,SAAS;QACP,OAAO,EAAE,CAAC,SAAS,EAAE,CAAC,MAAM,CAAC,eAAe,CAAC,SAAS,EAAE,CAAC,CAAC;IAC5D,CAAC;IACD;;;;;;OAMG;IACH,SAAS,CAAC,KAAK;QACb,OAAO;YACL,OAAO,EAAE,EAAE,CAAC,SAAS,CAAC,KAAK,CAAC;YAC5B,OAAO,EAAE,eAAe,CAAC,SAAS,CAAC,KAAK,CAAC;SAC1C,CAAC;IACJ,CAAC;IACD;;;;;OAKG;IACH,OAAO,CAAC,MAAM;QACZ,OAAO,EAAE;aACN,OAAO,CAAC,MAAM,CAAC,OAAO,CAAC;aACvB,MAAM,CAAC,eAAe,CAAC,OAAO,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC;IACrD,CAAC;CACF,CAAC;AAEJ,yFAAyF;AACzF,MAAM,kCAAkC,GAAG,CAAC,CAAC;AAE7C,+EAA+E;AAC/E,MAAM,8BAA8B,GAAG,EAAE,CAAC;AAE1C,sEAAsE;AACtE,MAAM,wBAAwB,GAAG,EAAE,CAAC;AAEpC;;;;GAIG;AACH,MAAM,qBAAqB,GAAG,CAAC,CAAC;AAEhC,qGAAqG;AACrG,MAAM,8BAA8B,GAAG,EAAE,CAAC;AA8B1C;;;;;;;;;;;;;;;;;;GAkBG;AACH,MAAM,UAAU,mCAAmC,CACjD,MAA2C;IAE3C,IAAI,MAAM,CAAC,OAAO,KAAK,8BAA8B,EAAE,CAAC;QACtD,MAAM,IAAI,KAAK,CACb,8CAA8C,MAAM,CAAC,OAAO,oBAAoB;YAC9E,qCAAqC,8BAA8B,GAAG,CACzE,CAAC;IACJ,CAAC;IACD,MAAM,aAAa,GAAG,UAAU,CAC9B,MAAM,CAAC,OAAO,CAAC,KAAK,CAClB,kCAAkC,EAClC,8BAA8B,CAC/B,CACF,CAAC;IACF,MAAM,KAAK,GAAG,MAAM,CAAC,OAAO,CAAC,8BAA8B,CAAC,CAAC;IAC7D,IAAI,KAAK,KAAK,SAAS,IAAI,KAAK,GAAG,CAAC,IAAI,KAAK,GAAG,qBAAqB,EAAE,CAAC;QACtE,MAAM,IAAI,KAAK,CACb,wDAAwD,KAAK,mBAAmB;YAC9E,kBAAkB,qBAAqB,GAAG,CAC7C,CAAC;IACJ,CAAC;IACD,kFAAkF;IAClF,4DAA4D;IAC5D,MAAM,YAAY,GAAG,KAAK,CAAC,IAAI,CAC7B,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,wBAAwB,EAAE,wBAAwB,GAAG,KAAK,CAAC,CACjF,CAAC;IACF,OAAO;QACL,OAAO,EAAE,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC;QAC/B,aAAa;QACb,YAAY;KACb,CAAC;AACJ,CAAC;AAmCD;;;;;;;;GAQG;AACH,MAAM,UAAU,iBAAiB,CAAC,EAAgB,EAAE,KAAa;IAC/D,OAAO,GAAG,EAAE,IAAI,KAAK,EAAE,CAAC;AAC1B,CAAC;AAED,yFAAyF;AACzF,SAAS,cAAc,CAAC,GAAqB,EAAE,KAAa;IAC1D,iFAAiF;IACjF,MAAM,UAAU,GAAG,qBAAqB,CAAC,GAAG,EAAE,CAAC,KAAK,CAAC,CAAC,CAAC,KAAK,EAAE,CAAC;IAC/D,IAAI,UAAU,KAAK,SAAS,EAAE,CAAC;QAC7B,MAAM,IAAI,KAAK,CAAC,gBAAgB,KAAK,eAAe,CAAC,CAAC;IACxD,CAAC;IACD,MAAM,KAAK,GAAuB,IAAI,GAAG,EAAE,CAAC;IAC5C,KAAK,MAAM,GAAG,IAAI,UAAU,CAAC,IAAI,EAAE,EAAE,CAAC;QACpC,gEAAgE;QAChE,MAAM,SAAS,GAAG,aAAa,CAAC,SAAS,CAAC,CAAC,GAAG,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC;QAC1D,2CAA2C;QAC3C,MAAM,IAAI,GAAG,UAAU,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,MAAM,EAAE,CAAC;QAC3C,IAAI,IAAI,KAAK,SAAS;YAAE,SAAS;QACjC,KAAK,CAAC,GAAG,CAAC,YAAY,CAAC,SAAS,CAAC,EAAE,GAAG,CAAC,SAAS,CAAC,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;IACrE,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,+EAA+E;AAC/E,SAAS,kBAAkB,CACzB,GAAqB,EACrB,KAAa,EACb,SAAyB;IAEzB,MAAM,GAAG,GAAG,qBAAqB,CAAC,GAAG,EAAE,CAAC,KAAK,CAAC,CAAC,CAAC,KAAK,EAAE,CAAC;IACxD,IAAI,GAAG,KAAK,SAAS,EAAE,CAAC;QACtB,MAAM,IAAI,KAAK,CAAC,gBAAgB,KAAK,eAAe,CAAC,CAAC;IACxD,CAAC;IACD,MAAM,KAAK,GAAG,IAAI,GAAG,EAAa,CAAC;IACnC,KAAK,MAAM,GAAG,IAAI,GAAG,CAAC,IAAI,EAAE,EAAE,CAAC;QAC7B,MAAM,MAAM,GAAG,gBAAgB,CAAC,SAAS,CAAC,CAAC,GAAG,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC;QAC1D,MAAM,IAAI,GAAG,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,MAAM,EAAE,CAAC;QACpC,IAAI,IAAI,KAAK,SAAS;YAAE,SAAS;QACjC,KAAK,CAAC,GAAG,CACP,iBAAiB,CAAC,YAAY,CAAC,MAAM,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,EAC/D,SAAS,CAAC,SAAS,CAAC,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,CACrC,CAAC;IACJ,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED;;;;;;;;;;;;GAYG;AACH,MAAM,UAAU,+CAA+C,CAC7D,GAAqB;IAErB,MAAM,eAAe,GAAG,qBAAqB,CAAC,GAAG,EAAE;QACjD,+CAA+C;KAChD,CAAC,CAAC,KAAK,EAAE,CAAC;IACX,IAAI,eAAe,KAAK,SAAS,EAAE,CAAC;QAClC,MAAM,IAAI,KAAK,CACb,gBAAgB,+CAA+C,eAAe,CAC/E,CAAC;IACJ,CAAC;IACD,MAAM,KAAK,GAAuC,IAAI,GAAG,EAAE,CAAC;IAC5D,MAAM,MAAM,GAAG,IAAI,GAAG,EAAwB,CAAC;IAC/C,KAAK,MAAM,GAAG,IAAI,eAAe,CAAC,IAAI,EAAE,EAAE,CAAC;QACzC,gEAAgE;QAChE,MAAM,MAAM,GAAG,gBAAgB,CAAC,SAAS,CAAC,CAAC,GAAG,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC;QAC1D,MAAM,IAAI,GAAG,eAAe,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,MAAM,EAAE,CAAC;QAChD,IAAI,IAAI,KAAK,SAAS;YAAE,SAAS;QACjC,MAAM,EAAE,GAAG,YAAY,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;QAC1C,MAAM,IAAI,GAAG,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QAC5B,qDAAqD;QACrD,IAAI,IAAI,KAAK,SAAS,IAAI,IAAI,IAAI,MAAM,CAAC,KAAK;YAAE,SAAS;QACzD,MAAM,CAAC,GAAG,CAAC,EAAE,EAAE,MAAM,CAAC,KAAK,CAAC,CAAC;QAC7B,KAAK,CAAC,GAAG,CAAC,EAAE,EAAE,iCAAiC,CAAC,SAAS,CAAC,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;IAC9E,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AA2BD;;;;;;;;;;GAUG;AACH,MAAM,UAAU,iCAAiC,CAC/C,GAAqB;IAErB,OAAO;QACL,4CAA4C,EAAE,cAAc,CAC1D,GAAG,EACH,uDAAuD,CACxD;QACD,qCAAqC,EACnC,+CAA+C,CAAC,GAAG,CAAC;QACtD,iBAAiB,EAAE,cAAc,CAC/B,GAAG,EACH,yBAAyB,CAC1B;QACD,UAAU,EAAE,kBAAkB,CAC5B,GAAG,EACH,iBAAiB,EACjB,2BAA2B,CAC5B;QACD,8BAA8B,EAAE,cAAc,CAC5C,GAAG,EACH,uCAAuC,CACxC;QACD,uBAAuB,EAAE,kBAAkB,CACzC,GAAG,EACH,+BAA+B,EAC/B,6BAA6B,CAC9B;KACF,CAAC;AACJ,CAAC"}

package/dist/signet-request-resolver.d.ts

@@ -1,60 +0,0 @@
-import type { SignBidirectionalNotification } from "./signet-contract-state-reader.ts";
-import type { SignetPublicStateSource } from "./signet-request-response-reader.ts";
-import type { RequestIdHex, SignBidirectionalEvent } from "./signet-requests.ts";
-/**
- * A {@link SignBidirectionalNotification} resolved to the authenticated
- * request it refers to: the request record read from `callerAddress`'s own
- * ledger, with `requestId` confirmed to be a member of that contract's index.
- */
-export interface ResolvedSignetRequest {
-    /**
-     * The contract whose authenticated state the request was read from — the
-     * epsilon-derivation predecessor. Key derivation keys off THIS, never off a
-     * field taken from the notification on faith.
-     */
-    callerAddress: string;
-    /** The request id, confirmed to be a member of `callerAddress`'s index. */
-    requestId: RequestIdHex;
-    /** The authenticated request record to sign. */
-    request: SignBidirectionalEvent;
-}
-/** Everything a {@link SignetRequestResolver} needs. */
-export interface SignetRequestResolverConfig {
-    /** Source of raw contract state, e.g. midnight-js's `indexerPublicDataProvider`. */
-    readonly source: SignetPublicStateSource;
-}
-/**
- * Resolves {@link SignBidirectionalNotification}s to authenticated
- * {@link ResolvedSignetRequest}s by reading the named caller's ledger and
- * enforcing the membership check. Construct once and reuse: resolved records
- * are immutable (their ledger key is their hash), so they are cached by request
- * id and a repeated notification for the same request costs no query.
- *
- * NB the cache is keyed by request id, NOT by contract address: a caller
- * contract's state grows as it stores new requests, so caching its state would
- * make the resolver blind to later requests from the same caller. Caching the
- * immutable resolved record instead is the same pattern
- * {@link SignetRequestResponseReader.getSignatureRequest} uses.
- */
-export declare class SignetRequestResolver {
-    private readonly source;
-    private readonly resolvedCache;
-    /**
-     * @param config - The state source to read caller ledgers through.
-     */
-    constructor(config: SignetRequestResolverConfig);
-    /**
-     * Resolve a notification to its authenticated request, or `undefined` when it
-     * cannot be trusted: the caller contract has no state, or `requestId` is not
-     * a member of the map at `requestsPath` (forged, stale, wrong field,
-     * or not yet indexed — poll again). Never throws on an untrusted
-     * notification; a bad one is dropped, not surfaced as an error.
-     *
-     * @param requestId - The request id the notification was registered under
-     *   (the registry map key — the V1 payload does not carry one).
-     * @param notification - The decoded notification.
-     * @returns The authenticated request, or `undefined` to drop the notification.
-     */
-    resolve(requestId: RequestIdHex, notification: SignBidirectionalNotification): Promise<ResolvedSignetRequest | undefined>;
-}
-//# sourceMappingURL=signet-request-resolver.d.ts.map

package/dist/signet-request-resolver.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"signet-request-resolver.d.ts","sourceRoot":"","sources":["../src/signet-request-resolver.ts"],"names":[],"mappings":"AAeA,OAAO,KAAK,EAAE,6BAA6B,EAAE,MAAM,mCAAmC,CAAC;AACvF,OAAO,KAAK,EAAE,uBAAuB,EAAE,MAAM,qCAAqC,CAAC;AACnF,OAAO,KAAK,EACV,YAAY,EACZ,sBAAsB,EACvB,MAAM,sBAAsB,CAAC;AAE9B;;;;GAIG;AACH,MAAM,WAAW,qBAAqB;IACpC;;;;OAIG;IACH,aAAa,EAAE,MAAM,CAAC;IACtB,2EAA2E;IAC3E,SAAS,EAAE,YAAY,CAAC;IACxB,gDAAgD;IAChD,OAAO,EAAE,sBAAsB,CAAC;CACjC;AAED,wDAAwD;AACxD,MAAM,WAAW,2BAA2B;IAC1C,oFAAoF;IACpF,QAAQ,CAAC,MAAM,EAAE,uBAAuB,CAAC;CAC1C;AAED;;;;;;;;;;;;GAYG;AACH,qBAAa,qBAAqB;IAChC,OAAO,CAAC,QAAQ,CAAC,MAAM,CAA0B;IAIjD,OAAO,CAAC,QAAQ,CAAC,aAAa,CAAkD;IAEhF;;OAEG;gBACS,MAAM,EAAE,2BAA2B;IAI/C;;;;;;;;;;;OAWG;IACG,OAAO,CACX,SAAS,EAAE,YAAY,EACvB,YAAY,EAAE,6BAA6B,GAC1C,OAAO,CAAC,qBAAqB,GAAG,SAAS,CAAC;CA8B9C"}

package/dist/signet-request-resolver.js

@@ -1,78 +0,0 @@
-// Turn a SignBidirectionalNotification into an AUTHENTICATED request record.
-// This is the security core of the discovery flow (see
-// knowledge-base/caller-attribution.md): the notification says only WHERE to
-// look; the request that gets signed is read from the named caller's own
-// authenticated ledger, and the notification's `requestId` must be a member
-// of that contract's request index. An attacker cannot write into a contract
-// it does not control, so a forged notification can at most re-point at a
-// legitimate request that already exists — never inject one.
-//
-// Key derivation stays f(callerAddress, path), keyed off the contract whose
-// authenticated state was actually read — the notification registry is a
-// pointer board, never an authority.
-import { lookupSignetRequestAt } from "./signature-requests-state-reader.js";
-/**
- * Resolves {@link SignBidirectionalNotification}s to authenticated
- * {@link ResolvedSignetRequest}s by reading the named caller's ledger and
- * enforcing the membership check. Construct once and reuse: resolved records
- * are immutable (their ledger key is their hash), so they are cached by request
- * id and a repeated notification for the same request costs no query.
- *
- * NB the cache is keyed by request id, NOT by contract address: a caller
- * contract's state grows as it stores new requests, so caching its state would
- * make the resolver blind to later requests from the same caller. Caching the
- * immutable resolved record instead is the same pattern
- * {@link SignetRequestResponseReader.getSignatureRequest} uses.
- */
-export class SignetRequestResolver {
-    source;
-    // Resolved records never change; cache them so a redelivered notification for
-    // the same request id does not re-query the caller's state.
-    resolvedCache = new Map();
-    /**
-     * @param config - The state source to read caller ledgers through.
-     */
-    constructor(config) {
-        this.source = config.source;
-    }
-    /**
-     * Resolve a notification to its authenticated request, or `undefined` when it
-     * cannot be trusted: the caller contract has no state, or `requestId` is not
-     * a member of the map at `requestsPath` (forged, stale, wrong field,
-     * or not yet indexed — poll again). Never throws on an untrusted
-     * notification; a bad one is dropped, not surfaced as an error.
-     *
-     * @param requestId - The request id the notification was registered under
-     *   (the registry map key — the V1 payload does not carry one).
-     * @param notification - The decoded notification.
-     * @returns The authenticated request, or `undefined` to drop the notification.
-     */
-    async resolve(requestId, notification) {
-        const cached = this.resolvedCache.get(requestId);
-        if (cached !== undefined) {
-            return cached;
-        }
-        let state;
-        try {
-            state = await this.source.queryContractState(notification.callerAddress);
-        }
-        catch {
-            return undefined; // caller address not a contract / transient read error
-        }
-        if (!state?.data) {
-            return undefined; // no state at the named caller — cannot authenticate
-        }
-        const request = lookupSignetRequestAt(state.data, notification.requestsPath, requestId);
-        if (request === undefined) {
-            return undefined; // membership check failed — drop the notification
-        }
-        const resolved = {
-            callerAddress: notification.callerAddress,
-            requestId,
-            request,
-        };
-        this.resolvedCache.set(requestId, resolved);
-        return resolved;
-    }
-}
-//# sourceMappingURL=signet-request-resolver.js.map

package/dist/signet-request-resolver.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"signet-request-resolver.js","sourceRoot":"","sources":["../src/signet-request-resolver.ts"],"names":[],"mappings":"AAAA,6EAA6E;AAC7E,uDAAuD;AACvD,6EAA6E;AAC7E,yEAAyE;AACzE,4EAA4E;AAC5E,6EAA6E;AAC7E,0EAA0E;AAC1E,6DAA6D;AAC7D,EAAE;AACF,4EAA4E;AAC5E,yEAAyE;AACzE,qCAAqC;AAErC,OAAO,EAAE,qBAAqB,EAAE,MAAM,sCAAsC,CAAC;AAiC7E;;;;;;;;;;;;GAYG;AACH,MAAM,OAAO,qBAAqB;IACf,MAAM,CAA0B;IAEjD,8EAA8E;IAC9E,4DAA4D;IAC3C,aAAa,GAAG,IAAI,GAAG,EAAuC,CAAC;IAEhF;;OAEG;IACH,YAAY,MAAmC;QAC7C,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC,MAAM,CAAC;IAC9B,CAAC;IAED;;;;;;;;;;;OAWG;IACH,KAAK,CAAC,OAAO,CACX,SAAuB,EACvB,YAA2C;QAE3C,MAAM,MAAM,GAAG,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;QACjD,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;YACzB,OAAO,MAAM,CAAC;QAChB,CAAC;QACD,IAAI,KAAwC,CAAC;QAC7C,IAAI,CAAC;YACH,KAAK,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,kBAAkB,CAAC,YAAY,CAAC,aAAa,CAAC,CAAC;QAC3E,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,SAAS,CAAC,CAAC,uDAAuD;QAC3E,CAAC;QACD,IAAI,CAAC,KAAK,EAAE,IAAI,EAAE,CAAC;YACjB,OAAO,SAAS,CAAC,CAAC,qDAAqD;QACzE,CAAC;QACD,MAAM,OAAO,GAAG,qBAAqB,CACnC,KAAK,CAAC,IAAI,EACV,YAAY,CAAC,YAAY,EACzB,SAAS,CACV,CAAC;QACF,IAAI,OAAO,KAAK,SAAS,EAAE,CAAC;YAC1B,OAAO,SAAS,CAAC,CAAC,kDAAkD;QACtE,CAAC;QACD,MAAM,QAAQ,GAA0B;YACtC,aAAa,EAAE,YAAY,CAAC,aAAa;YACzC,SAAS;YACT,OAAO;SACR,CAAC;QACF,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,SAAS,EAAE,QAAQ,CAAC,CAAC;QAC5C,OAAO,QAAQ,CAAC;IAClB,CAAC;CACF"}