@sig-net/midnight 0.19.0 → 0.21.0-rc.1

package/dist/epsilon-derivation.js

@@ -2,13 +2,11 @@
 //
 // This belongs in github.com/sig-net/signet.js, kept here until upstreamed.
 //
-// v2.0.0 (COLON-separated) is the only scheme the MPC answers. The v1.0.0
-// COMMA-separated form is `key_version 0` in the MPC's KDF and is not served;
-// the Compact contracts also assert `keyVersion >= 1`, which selects v2. The
-// two schemes hash different strings and derive different accounts, so a
-// v1 signer silently gets the wrong address rather than an error.
+// v2.0.0 (COLON-separated) is the only scheme the MPC answers: the Compact
+// contracts assert `keyVersion >= 1`, which selects v2.
 import { secp256k1 } from "@noble/curves/secp256k1.js";
 import { computeAddress, keccak256, SigningKey, toUtf8Bytes } from "ethers";
+import { bigintToBytes32BE, bytesToBigintBE, stripHexPrefix } from "./byte-codecs.js";
 import { SECP256K1_ORDER } from "./ecdsa-attestation.js";
 /**
  * Domain prefix of the sig-net v2.0.0 epsilon derivation scheme. The full
@@ -23,42 +21,50 @@ export const EPSILON_DERIVATION_PREFIX = "sig.network v2.0.0 epsilon derivation"
 export const MIDNIGHT_TESTNET_CHAIN_ID = "midnight:testnet";
 /**
  * The FIXED derivation path of the MPC's respond-bidirectional RESPONSE key
- * for Midnight client contracts, mirroring the real MPC's per-chain
- * `<chain> response key` convention (sig-net/mpc
- * chain-signatures/node/src/respond_bidirectional.rs, where the epsilon
- * requester is the requesting tx's SENDER). The response key is derived PER
- * CLIENT CONTRACT from (the client contract's own address, this path): it is
- * not the MPC root key and not the key that signs the requested transaction.
- *
- * The key depends on the client contract's address, and a Midnight contract
- * address is a hash over the deploy (constructor arguments included), so the
- * key cannot exist before the deploy transaction is built. Client contracts
- * therefore pin its hash with a one-shot `initialise` circuit right after
- * deploy (never a constructor seal) and verify RespondBidirectionalEvents
- * against the pin.
+ * for Midnight client contracts. It enters the derivation string verbatim,
+ * mirroring the real MPC's per-chain `<chain> response key` convention
+ * (sig-net/mpc chain-signatures/node/src/respond_bidirectional.rs). The
+ * response key is derived PER CLIENT CONTRACT from (the client contract's
+ * own address, this path): it is not the MPC root key and not the key that
+ * signs the requested transaction. Client contracts pin its hash with a
+ * one-shot `initialise` circuit after deploy and verify
+ * RespondBidirectionalEvents against the pin.
  */
 export const MIDNIGHT_RESPOND_BIDIRECTIONAL_PATH = "midnight response key";
+/**
+ * Normalise a Midnight contract address for use as the requester component
+ * of the derivation string: strip an optional `0x` prefix and lowercase.
+ * Both sides of the protocol (the deploy pinning a key and the MPC signing
+ * with it) derive through this, so the rendering always agrees.
+ *
+ * @param contractAddress - The Midnight contract address, with or without `0x`.
+ * @returns The address as lowercase hex with no prefix.
+ */
+function normaliseRequesterAddress(contractAddress) {
+    return stripHexPrefix(contractAddress).toLowerCase();
+}
 /**
  * Derive the EVM address the MPC network signs from for a given Midnight
  * contract and derivation path, using the sig-net v2.0.0 epsilon scheme:
- * `epsilon = keccak256("<prefix>:<chainId>:<contractAddress>:<path>")` and
- * `derivedPubKey = mpcRootPubKey + epsilon * G` on secp256k1.
- *
- * The MPC treats `path` as an opaque string: the vault's own account uses the
- * literal path `"vault"`, a user's account uses the lowercase hex of their
- * identity commitment.
+ * `epsilon = keccak256("<prefix>:<chainId>:<requester>:<path>")` and
+ * `derivedPubKey = mpcRootPubKey + epsilon * G` on secp256k1. The MPC
+ * treats `path` as an opaque string.
  *
  * @param mpcSecp256k1PubkeyHex - The MPC root secp256k1 public key as 0x-hex
- *   (compressed or uncompressed; normalized internally).
+ *   (compressed or uncompressed, normalised internally).
  * @param contractAddress - The Midnight contract address the request
- *   originates from (the "requester" in the derivation string).
- * @param path - The derivation path string (e.g. `"vault"` or a commitment
- *   hex).
+ *   originates from (`0x` prefix optional, case-insensitive: it enters the
+ *   derivation string through {@link normaliseRequesterAddress}).
+ * @param path - The derivation path string. For an account derived from an
+ *   on-ledger request record, this is the MPC's rendering of the record's
+ *   `path: Bytes<32>`: the lowercase hex of the FULL 32 bytes, no `0x`
+ *   prefix and no trimming ({@link bytesToHex} of the raw bytes), so
+ *   `0xab..00` and `0xab..` derive different accounts.
  * @param chainId - CAIP-2 chain id component of the derivation string.
  * @returns The derived EVM address as a 0x-prefixed EIP-55 checksummed string.
  */
 export function deriveEvmAddress(mpcSecp256k1PubkeyHex, contractAddress, path, chainId = MIDNIGHT_TESTNET_CHAIN_ID) {
-    const derivedPoint = deriveChildPoint(mpcSecp256k1PubkeyHex, contractAddress, path, chainId);
+    const derivedPoint = deriveChildPoint(mpcSecp256k1PubkeyHex, normaliseRequesterAddress(contractAddress), path, chainId);
     return computeAddress(`0x${derivedPoint.toHex(false)}`);
 }
 /**
@@ -79,32 +85,26 @@ export function deriveEpsilon(requester, path, chainId = MIDNIGHT_TESTNET_CHAIN_
     // server's scalar arithmetic reduces implicitly.
     return BigInt(keccak256(toUtf8Bytes(fullPath))) % SECP256K1_ORDER;
 }
-/** Derive the child public key as a noble curve point (internal shape). */
+/**
+ * Derive the child public key as a noble curve point (internal shape).
+ *
+ * @param mpcSecp256k1PubkeyHex - The MPC root public key in SEC1 hex.
+ * @param requester - The normalised requester address.
+ * @param path - The derivation path component.
+ * @param chainId - The chain id component.
+ * @returns The derived child point on secp256k1.
+ */
 function deriveChildPoint(mpcSecp256k1PubkeyHex, requester, path, chainId) {
     const epsilon = deriveEpsilon(requester, path, chainId);
     const rootPubKeyHex = SigningKey.computePublicKey(mpcSecp256k1PubkeyHex, false);
     const rootPoint = secp256k1.Point.fromHex(rootPubKeyHex.slice(2));
     return epsilon === 0n ? rootPoint : rootPoint.add(secp256k1.Point.BASE.multiply(epsilon));
 }
-/**
- * Normalise a Midnight contract address for use as the requester component
- * of the derivation string: strip an optional `0x` prefix and lowercase.
- * Both sides of the protocol (the deploy pinning a key and the MPC signing
- * with it) derive through this, so the rendering always agrees.
- */
-function normaliseRequesterAddress(contractAddress) {
-    const hex = contractAddress.startsWith("0x") || contractAddress.startsWith("0X")
-        ? contractAddress.slice(2)
-        : contractAddress;
-    return hex.toLowerCase();
-}
 /**
  * Derive the MPC's respond-bidirectional RESPONSE key for one client
  * contract, public side: what the client pins via its `initialise` circuit
- * (`MPC_RESPONSE_KEY`) and what response verification checks against. See
- * {@link MIDNIGHT_RESPOND_BIDIRECTIONAL_PATH} for the scheme (the requester
- * is the client contract's own address, mirroring the real MPC's
- * sender-scoped derivation).
+ * and what response verification checks against. See
+ * {@link MIDNIGHT_RESPOND_BIDIRECTIONAL_PATH} for the scheme.
  *
  * @param mpcSecp256k1PubkeyHex - The MPC root secp256k1 public key as 0x-hex
  *   (compressed or uncompressed).
@@ -120,34 +120,24 @@ export function deriveMidnightResponseKey(mpcSecp256k1PubkeyHex, clientContractA
  * Derive the MPC's respond-bidirectional RESPONSE key for one client
  * contract, secret side: `(rootSecret + epsilon) mod n`. MPC-side only
  * (the fakenet signer, test harnesses): a real client never holds the root
- * key. The result feeds `signAttestationDigest` directly.
+ * key.
  *
- * @param mpcRootSecretKey - The 32-byte MPC root secret key (big-endian, the
- *   standard secp256k1 encoding).
+ * @param mpcRootSecretKey - The 32-byte MPC root secret key (big-endian).
  * @param clientContractAddress - The client contract's Midnight address
  *   (`0x` prefix optional, case-insensitive).
  * @returns The 32-byte response secret key (big-endian).
- * @throws Error if the root key is not 32 bytes or the derived scalar is 0.
+ * @throws {Error} If the root key is not 32 bytes or the derived scalar is 0.
  */
 export function deriveMidnightResponseSecretKey(mpcRootSecretKey, clientContractAddress) {
     if (mpcRootSecretKey.length !== 32) {
-        throw new Error(`MPC root secret key must be 32 bytes, got ${mpcRootSecretKey.length}`);
-    }
-    let root = 0n;
-    for (const byte of mpcRootSecretKey) {
-        root = (root << 8n) | BigInt(byte);
+        throw new Error(`MPC root secret key must be 32 bytes, got ${String(mpcRootSecretKey.length)}`);
     }
+    const root = bytesToBigintBE(mpcRootSecretKey);
     const epsilon = deriveEpsilon(normaliseRequesterAddress(clientContractAddress), MIDNIGHT_RESPOND_BIDIRECTIONAL_PATH, MIDNIGHT_TESTNET_CHAIN_ID);
     const child = (root + epsilon) % SECP256K1_ORDER;
     if (child === 0n) {
         throw new Error("derived response secret key is zero (invalid scalar)");
     }
-    const out = new Uint8Array(32);
-    let value = child;
-    for (let i = 31; i >= 0; i--) {
-        out[i] = Number(value & 0xffn);
-        value >>= 8n;
-    }
-    return out;
+    return bigintToBytes32BE(child);
 }
 //# sourceMappingURL=epsilon-derivation.js.map

package/dist/epsilon-derivation.js.map

@@ -1 +1 @@
-{"version":3,"file":"epsilon-derivation.js","sourceRoot":"","sources":["../src/epsilon-derivation.ts"],"names":[],"mappings":"AAAA,0EAA0E;AAC1E,EAAE;AACF,4EAA4E;AAC5E,EAAE;AACF,0EAA0E;AAC1E,8EAA8E;AAC9E,6EAA6E;AAC7E,yEAAyE;AACzE,kEAAkE;AAElE,OAAO,EAAE,SAAS,EAAE,MAAM,4BAA4B,CAAC;AACvD,OAAO,EAAE,cAAc,EAAE,SAAS,EAAE,UAAU,EAAE,WAAW,EAAE,MAAM,QAAQ,CAAC;AAE5E,OAAO,EAAE,eAAe,EAAuB,MAAM,wBAAwB,CAAC;AAE9E;;;;GAIG;AACH,MAAM,CAAC,MAAM,yBAAyB,GAAG,uCAAuC,CAAC;AAEjF;;;GAGG;AACH,MAAM,CAAC,MAAM,yBAAyB,GAAG,kBAAkB,CAAC;AAE5D;;;;;;;;;;;;;;;GAeG;AACH,MAAM,CAAC,MAAM,mCAAmC,GAAG,uBAAuB,CAAC;AAE3E;;;;;;;;;;;;;;;;;;GAkBG;AACH,MAAM,UAAU,gBAAgB,CAC9B,qBAA6B,EAC7B,eAAuB,EACvB,IAAY,EACZ,UAAkB,yBAAyB;IAE3C,MAAM,YAAY,GAAG,gBAAgB,CAAC,qBAAqB,EAAE,eAAe,EAAE,IAAI,EAAE,OAAO,CAAC,CAAC;IAC7F,OAAO,cAAc,CAAC,KAAK,YAAY,CAAC,KAAK,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;AAC1D,CAAC;AAED;;;;;;;;;;;GAWG;AACH,MAAM,UAAU,aAAa,CAC3B,SAAiB,EACjB,IAAY,EACZ,UAAkB,yBAAyB;IAE3C,MAAM,QAAQ,GAAG,GAAG,yBAAyB,IAAI,OAAO,IAAI,SAAS,IAAI,IAAI,EAAE,CAAC;IAChF,uEAAuE;IACvE,iDAAiD;IACjD,OAAO,MAAM,CAAC,SAAS,CAAC,WAAW,CAAC,QAAQ,CAAC,CAAC,CAAC,GAAG,eAAe,CAAC;AACpE,CAAC;AAED,2EAA2E;AAC3E,SAAS,gBAAgB,CACvB,qBAA6B,EAC7B,SAAiB,EACjB,IAAY,EACZ,OAAe;IAEf,MAAM,OAAO,GAAG,aAAa,CAAC,SAAS,EAAE,IAAI,EAAE,OAAO,CAAC,CAAC;IACxD,MAAM,aAAa,GAAG,UAAU,CAAC,gBAAgB,CAAC,qBAAqB,EAAE,KAAK,CAAC,CAAC;IAChF,MAAM,SAAS,GAAG,SAAS,CAAC,KAAK,CAAC,OAAO,CAAC,aAAa,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;IAClE,OAAO,OAAO,KAAK,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,GAAG,CAAC,SAAS,CAAC,KAAK,CAAC,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC;AAC5F,CAAC;AAED;;;;;GAKG;AACH,SAAS,yBAAyB,CAAC,eAAuB;IACxD,MAAM,GAAG,GACP,eAAe,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,eAAe,CAAC,UAAU,CAAC,IAAI,CAAC;QAClE,CAAC,CAAC,eAAe,CAAC,KAAK,CAAC,CAAC,CAAC;QAC1B,CAAC,CAAC,eAAe,CAAC;IACtB,OAAO,GAAG,CAAC,WAAW,EAAE,CAAC;AAC3B,CAAC;AAED;;;;;;;;;;;;;GAaG;AACH,MAAM,UAAU,yBAAyB,CACvC,qBAA6B,EAC7B,qBAA6B;IAE7B,MAAM,KAAK,GAAG,gBAAgB,CAC5B,qBAAqB,EACrB,yBAAyB,CAAC,qBAAqB,CAAC,EAChD,mCAAmC,EACnC,yBAAyB,CAC1B,CAAC;IACF,OAAO,EAAE,CAAC,EAAE,KAAK,CAAC,CAAC,EAAE,CAAC,EAAE,KAAK,CAAC,CAAC,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC;AACrD,CAAC;AAED;;;;;;;;;;;;GAYG;AACH,MAAM,UAAU,+BAA+B,CAC7C,gBAA4B,EAC5B,qBAA6B;IAE7B,IAAI,gBAAgB,CAAC,MAAM,KAAK,EAAE,EAAE,CAAC;QACnC,MAAM,IAAI,KAAK,CAAC,6CAA6C,gBAAgB,CAAC,MAAM,EAAE,CAAC,CAAC;IAC1F,CAAC;IACD,IAAI,IAAI,GAAG,EAAE,CAAC;IACd,KAAK,MAAM,IAAI,IAAI,gBAAgB,EAAE,CAAC;QACpC,IAAI,GAAG,CAAC,IAAI,IAAI,EAAE,CAAC,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC;IACrC,CAAC;IACD,MAAM,OAAO,GAAG,aAAa,CAC3B,yBAAyB,CAAC,qBAAqB,CAAC,EAChD,mCAAmC,EACnC,yBAAyB,CAC1B,CAAC;IACF,MAAM,KAAK,GAAG,CAAC,IAAI,GAAG,OAAO,CAAC,GAAG,eAAe,CAAC;IACjD,IAAI,KAAK,KAAK,EAAE,EAAE,CAAC;QACjB,MAAM,IAAI,KAAK,CAAC,sDAAsD,CAAC,CAAC;IAC1E,CAAC;IACD,MAAM,GAAG,GAAG,IAAI,UAAU,CAAC,EAAE,CAAC,CAAC;IAC/B,IAAI,KAAK,GAAG,KAAK,CAAC;IAClB,KAAK,IAAI,CAAC,GAAG,EAAE,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC;QAC7B,GAAG,CAAC,CAAC,CAAC,GAAG,MAAM,CAAC,KAAK,GAAG,KAAK,CAAC,CAAC;QAC/B,KAAK,KAAK,EAAE,CAAC;IACf,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC"}
+{"version":3,"file":"epsilon-derivation.js","sourceRoot":"","sources":["../src/epsilon-derivation.ts"],"names":[],"mappings":"AAAA,0EAA0E;AAC1E,EAAE;AACF,4EAA4E;AAC5E,EAAE;AACF,2EAA2E;AAC3E,wDAAwD;AAExD,OAAO,EAAE,SAAS,EAAE,MAAM,4BAA4B,CAAC;AACvD,OAAO,EAAE,cAAc,EAAE,SAAS,EAAE,UAAU,EAAE,WAAW,EAAE,MAAM,QAAQ,CAAC;AAE5E,OAAO,EAAE,iBAAiB,EAAE,eAAe,EAAE,cAAc,EAAE,MAAM,kBAAkB,CAAC;AACtF,OAAO,EAAE,eAAe,EAAuB,MAAM,wBAAwB,CAAC;AAE9E;;;;GAIG;AACH,MAAM,CAAC,MAAM,yBAAyB,GAAG,uCAAuC,CAAC;AAEjF;;;GAGG;AACH,MAAM,CAAC,MAAM,yBAAyB,GAAG,kBAAkB,CAAC;AAE5D;;;;;;;;;;GAUG;AACH,MAAM,CAAC,MAAM,mCAAmC,GAAG,uBAAuB,CAAC;AAE3E;;;;;;;;GAQG;AACH,SAAS,yBAAyB,CAAC,eAAuB;IACxD,OAAO,cAAc,CAAC,eAAe,CAAC,CAAC,WAAW,EAAE,CAAC;AACvD,CAAC;AAED;;;;;;;;;;;;;;;;;;;GAmBG;AACH,MAAM,UAAU,gBAAgB,CAC9B,qBAA6B,EAC7B,eAAuB,EACvB,IAAY,EACZ,OAAO,GAAW,yBAAyB;IAE3C,MAAM,YAAY,GAAG,gBAAgB,CACnC,qBAAqB,EACrB,yBAAyB,CAAC,eAAe,CAAC,EAC1C,IAAI,EACJ,OAAO,CACR,CAAC;IACF,OAAO,cAAc,CAAC,KAAK,YAAY,CAAC,KAAK,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;AAC1D,CAAC;AAED;;;;;;;;;;;GAWG;AACH,MAAM,UAAU,aAAa,CAC3B,SAAiB,EACjB,IAAY,EACZ,OAAO,GAAW,yBAAyB;IAE3C,MAAM,QAAQ,GAAG,GAAG,yBAAyB,IAAI,OAAO,IAAI,SAAS,IAAI,IAAI,EAAE,CAAC;IAChF,uEAAuE;IACvE,iDAAiD;IACjD,OAAO,MAAM,CAAC,SAAS,CAAC,WAAW,CAAC,QAAQ,CAAC,CAAC,CAAC,GAAG,eAAe,CAAC;AACpE,CAAC;AAED;;;;;;;;GAQG;AACH,SAAS,gBAAgB,CACvB,qBAA6B,EAC7B,SAAiB,EACjB,IAAY,EACZ,OAAe;IAEf,MAAM,OAAO,GAAG,aAAa,CAAC,SAAS,EAAE,IAAI,EAAE,OAAO,CAAC,CAAC;IACxD,MAAM,aAAa,GAAG,UAAU,CAAC,gBAAgB,CAAC,qBAAqB,EAAE,KAAK,CAAC,CAAC;IAChF,MAAM,SAAS,GAAG,SAAS,CAAC,KAAK,CAAC,OAAO,CAAC,aAAa,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;IAClE,OAAO,OAAO,KAAK,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,GAAG,CAAC,SAAS,CAAC,KAAK,CAAC,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC;AAC5F,CAAC;AAED;;;;;;;;;;;GAWG;AACH,MAAM,UAAU,yBAAyB,CACvC,qBAA6B,EAC7B,qBAA6B;IAE7B,MAAM,KAAK,GAAG,gBAAgB,CAC5B,qBAAqB,EACrB,yBAAyB,CAAC,qBAAqB,CAAC,EAChD,mCAAmC,EACnC,yBAAyB,CAC1B,CAAC;IACF,OAAO,EAAE,CAAC,EAAE,KAAK,CAAC,CAAC,EAAE,CAAC,EAAE,KAAK,CAAC,CAAC,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC;AACrD,CAAC;AAED;;;;;;;;;;;GAWG;AACH,MAAM,UAAU,+BAA+B,CAC7C,gBAA4B,EAC5B,qBAA6B;IAE7B,IAAI,gBAAgB,CAAC,MAAM,KAAK,EAAE,EAAE,CAAC;QACnC,MAAM,IAAI,KAAK,CAAC,6CAA6C,MAAM,CAAC,gBAAgB,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;IAClG,CAAC;IACD,MAAM,IAAI,GAAG,eAAe,CAAC,gBAAgB,CAAC,CAAC;IAC/C,MAAM,OAAO,GAAG,aAAa,CAC3B,yBAAyB,CAAC,qBAAqB,CAAC,EAChD,mCAAmC,EACnC,yBAAyB,CAC1B,CAAC;IACF,MAAM,KAAK,GAAG,CAAC,IAAI,GAAG,OAAO,CAAC,GAAG,eAAe,CAAC;IACjD,IAAI,KAAK,KAAK,EAAE,EAAE,CAAC;QACjB,MAAM,IAAI,KAAK,CAAC,sDAAsD,CAAC,CAAC;IAC1E,CAAC;IACD,OAAO,iBAAiB,CAAC,KAAK,CAAC,CAAC;AAClC,CAAC"}

package/dist/index.d.ts

@@ -1,19 +1,20 @@
 export * from "./abi-serde.ts";
-export * from "./signet-requests.ts";
-export * from "./signet-evtype2tx-requests.ts";
-export * from "./signature-state-reading.ts";
+export { bigintToBytes32, bigintToBytes32BE, BLS_ORDER, bytesToBigint, bytesToBigintBE, bytesToHex, hexToBytes, stripHexPrefix, } from "./byte-codecs.ts";
+export * from "./constants.ts";
+export { deriveEpsilon, deriveEvmAddress, deriveMidnightResponseKey, EPSILON_DERIVATION_PREFIX, MIDNIGHT_RESPOND_BIDIRECTIONAL_PATH, MIDNIGHT_TESTNET_CHAIN_ID, } from "./epsilon-derivation.ts";
+export { type RawContractState, signetFieldNodeByPath } from "./raw-contract-state.ts";
 export * from "./signature-requests-state-reader.ts";
-export * from "./signet-contract-events.ts";
 export * from "./signature-response-verification.ts";
+export * from "./signet-contract-events.ts";
+export { abiWordToBool, abiWordToUint128, assembleCalldata, boolAbiWord, type EvmAccessListEntry, evmAddressAbiWord, type EvmCalldata, type EvmType2TxParams, numericAbiWord, signBidirectionalEventToSignedEvmTransaction, signBidirectionalEventToUnsignedEvmTransaction, } from "./signet-evtype2tx-requests.ts";
+export { calculateRequestId } from "./signet-request-id.ts";
 export * from "./signet-request-response-reader.ts";
-export * from "./signet-request-feed.ts";
-export * from "./constants.ts";
-export * from "./epsilon-derivation.ts";
-export * from "./ecdsa-attestation.ts";
+export { type ContractAddress, type Maybe, MPCDestination, MPCSignatureAlgorithm, parseRequestIdHex, PATH_BYTES, type RequestId, requestIdBytes, type RequestIdHex, requestIdHex, type SignBidirectionalEvent, type SignBidirectionalEventIndex, type SignBidirectionalEventLedgerMap, toSignBidirectionalEventIndex, TxParamType, } from "./signet-requests.ts";
+export { formatSecp256k1PublicKey, parseSecp256k1PublicKey, respondBidirectionalEventToCircuitInput, SECP256K1_ORDER, type Secp256k1Point, signatureRespondedEventToSignature, verifyRespondBidirectionalSignature, } from "./ecdsa-attestation.ts";
 /**
  * Compiled pure circuits of Signet.compact (run `yarn compile` first).
  * Off-chain code MUST use these instead of re-porting the algorithms:
  * they are the same compiled logic the contracts prove.
  */
-export { pureCircuits, type PureCircuits } from "./managed/contract/index.js";
+export { type PureCircuits, pureCircuits } from "./managed/contract/index.js";
 //# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAIA,cAAc,gBAAgB,CAAC;AAC/B,cAAc,sBAAsB,CAAC;AACrC,cAAc,gCAAgC,CAAC;AAC/C,cAAc,8BAA8B,CAAC;AAC7C,cAAc,sCAAsC,CAAC;AACrD,cAAc,6BAA6B,CAAC;AAC5C,cAAc,sCAAsC,CAAC;AACrD,cAAc,qCAAqC,CAAC;AACpD,cAAc,0BAA0B,CAAC;AACzC,cAAc,gBAAgB,CAAC;AAC/B,cAAc,yBAAyB,CAAC;AACxC,cAAc,wBAAwB,CAAC;AAEvC;;;;GAIG;AACH,OAAO,EAAE,YAAY,EAAE,KAAK,YAAY,EAAE,MAAM,6BAA6B,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAIA,cAAc,gBAAgB,CAAC;AAC/B,OAAO,EACL,eAAe,EACf,iBAAiB,EACjB,SAAS,EACT,aAAa,EACb,eAAe,EACf,UAAU,EACV,UAAU,EACV,cAAc,GACf,MAAM,kBAAkB,CAAC;AAI1B,cAAc,gBAAgB,CAAC;AAG/B,OAAO,EACL,aAAa,EACb,gBAAgB,EAChB,yBAAyB,EACzB,yBAAyB,EACzB,mCAAmC,EACnC,yBAAyB,GAC1B,MAAM,yBAAyB,CAAC;AACjC,OAAO,EAAE,KAAK,gBAAgB,EAAE,qBAAqB,EAAE,MAAM,yBAAyB,CAAC;AACvF,cAAc,sCAAsC,CAAC;AACrD,cAAc,sCAAsC,CAAC;AACrD,cAAc,6BAA6B,CAAC;AAC5C,OAAO,EACL,aAAa,EACb,gBAAgB,EAChB,gBAAgB,EAChB,WAAW,EACX,KAAK,kBAAkB,EACvB,iBAAiB,EACjB,KAAK,WAAW,EAChB,KAAK,gBAAgB,EACrB,cAAc,EACd,4CAA4C,EAC5C,8CAA8C,GAC/C,MAAM,gCAAgC,CAAC;AACxC,OAAO,EAAE,kBAAkB,EAAE,MAAM,wBAAwB,CAAC;AAC5D,cAAc,qCAAqC,CAAC;AACpD,OAAO,EACL,KAAK,eAAe,EACpB,KAAK,KAAK,EACV,cAAc,EACd,qBAAqB,EACrB,iBAAiB,EACjB,UAAU,EACV,KAAK,SAAS,EACd,cAAc,EACd,KAAK,YAAY,EACjB,YAAY,EACZ,KAAK,sBAAsB,EAC3B,KAAK,2BAA2B,EAChC,KAAK,+BAA+B,EACpC,6BAA6B,EAC7B,WAAW,GACZ,MAAM,sBAAsB,CAAC;AAI9B,OAAO,EACL,wBAAwB,EACxB,uBAAuB,EACvB,uCAAuC,EACvC,eAAe,EACf,KAAK,cAAc,EACnB,kCAAkC,EAClC,mCAAmC,GACpC,MAAM,wBAAwB,CAAC;AAEhC;;;;GAIG;AACH,OAAO,EAAE,KAAK,YAAY,EAAE,YAAY,EAAE,MAAM,6BAA6B,CAAC"}

package/dist/index.js

@@ -2,17 +2,26 @@
 // library (wire structs, state readers, event decoders, request feed,
 // crypto) plus the compiled pure circuits of the shared Compact module.
 export * from "./abi-serde.js";
-export * from "./signet-requests.js";
-export * from "./signet-evtype2tx-requests.js";
-export * from "./signature-state-reading.js";
+export { bigintToBytes32, bigintToBytes32BE, BLS_ORDER, bytesToBigint, bytesToBigintBE, bytesToHex, hexToBytes, stripHexPrefix, } from "./byte-codecs.js";
+// Explicit lists for the request/state modules: the runtime descriptor
+// toolkit (compact-descriptors.ts and the per-module record descriptors) is
+// package-internal, consumed only through the reader and request functions.
+export * from "./constants.js";
+// Selective: deriveMidnightResponseSecretKey takes the MPC root secret, so
+// it is exported through ./testing with the other secret-taking helpers.
+export { deriveEpsilon, deriveEvmAddress, deriveMidnightResponseKey, EPSILON_DERIVATION_PREFIX, MIDNIGHT_RESPOND_BIDIRECTIONAL_PATH, MIDNIGHT_TESTNET_CHAIN_ID, } from "./epsilon-derivation.js";
+export { signetFieldNodeByPath } from "./raw-contract-state.js";
 export * from "./signature-requests-state-reader.js";
-export * from "./signet-contract-events.js";
 export * from "./signature-response-verification.js";
+export * from "./signet-contract-events.js";
+export { abiWordToBool, abiWordToUint128, assembleCalldata, boolAbiWord, evmAddressAbiWord, numericAbiWord, signBidirectionalEventToSignedEvmTransaction, signBidirectionalEventToUnsignedEvmTransaction, } from "./signet-evtype2tx-requests.js";
+export { calculateRequestId } from "./signet-request-id.js";
 export * from "./signet-request-response-reader.js";
-export * from "./signet-request-feed.js";
-export * from "./constants.js";
-export * from "./epsilon-derivation.js";
-export * from "./ecdsa-attestation.js";
+export { MPCDestination, MPCSignatureAlgorithm, parseRequestIdHex, PATH_BYTES, requestIdBytes, requestIdHex, toSignBidirectionalEventIndex, TxParamType, } from "./signet-requests.js";
+// Explicit list: ecdsa-attestation.ts also backs the ./testing entry point
+// (the attestation-minting helpers that take a secret key live THERE), and
+// its record decoder (mpcSignatureToEcdsaSignature) is package-internal.
+export { formatSecp256k1PublicKey, parseSecp256k1PublicKey, respondBidirectionalEventToCircuitInput, SECP256K1_ORDER, signatureRespondedEventToSignature, verifyRespondBidirectionalSignature, } from "./ecdsa-attestation.js";
 /**
  * Compiled pure circuits of Signet.compact (run `yarn compile` first).
  * Off-chain code MUST use these instead of re-porting the algorithms:

package/dist/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,yEAAyE;AACzE,sEAAsE;AACtE,wEAAwE;AAExE,cAAc,gBAAgB,CAAC;AAC/B,cAAc,sBAAsB,CAAC;AACrC,cAAc,gCAAgC,CAAC;AAC/C,cAAc,8BAA8B,CAAC;AAC7C,cAAc,sCAAsC,CAAC;AACrD,cAAc,6BAA6B,CAAC;AAC5C,cAAc,sCAAsC,CAAC;AACrD,cAAc,qCAAqC,CAAC;AACpD,cAAc,0BAA0B,CAAC;AACzC,cAAc,gBAAgB,CAAC;AAC/B,cAAc,yBAAyB,CAAC;AACxC,cAAc,wBAAwB,CAAC;AAEvC;;;;GAIG;AACH,OAAO,EAAE,YAAY,EAAqB,MAAM,6BAA6B,CAAC"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,yEAAyE;AACzE,sEAAsE;AACtE,wEAAwE;AAExE,cAAc,gBAAgB,CAAC;AAC/B,OAAO,EACL,eAAe,EACf,iBAAiB,EACjB,SAAS,EACT,aAAa,EACb,eAAe,EACf,UAAU,EACV,UAAU,EACV,cAAc,GACf,MAAM,kBAAkB,CAAC;AAC1B,uEAAuE;AACvE,4EAA4E;AAC5E,4EAA4E;AAC5E,cAAc,gBAAgB,CAAC;AAC/B,2EAA2E;AAC3E,yEAAyE;AACzE,OAAO,EACL,aAAa,EACb,gBAAgB,EAChB,yBAAyB,EACzB,yBAAyB,EACzB,mCAAmC,EACnC,yBAAyB,GAC1B,MAAM,yBAAyB,CAAC;AACjC,OAAO,EAAyB,qBAAqB,EAAE,MAAM,yBAAyB,CAAC;AACvF,cAAc,sCAAsC,CAAC;AACrD,cAAc,sCAAsC,CAAC;AACrD,cAAc,6BAA6B,CAAC;AAC5C,OAAO,EACL,aAAa,EACb,gBAAgB,EAChB,gBAAgB,EAChB,WAAW,EAEX,iBAAiB,EAGjB,cAAc,EACd,4CAA4C,EAC5C,8CAA8C,GAC/C,MAAM,gCAAgC,CAAC;AACxC,OAAO,EAAE,kBAAkB,EAAE,MAAM,wBAAwB,CAAC;AAC5D,cAAc,qCAAqC,CAAC;AACpD,OAAO,EAGL,cAAc,EACd,qBAAqB,EACrB,iBAAiB,EACjB,UAAU,EAEV,cAAc,EAEd,YAAY,EAIZ,6BAA6B,EAC7B,WAAW,GACZ,MAAM,sBAAsB,CAAC;AAC9B,2EAA2E;AAC3E,2EAA2E;AAC3E,yEAAyE;AACzE,OAAO,EACL,wBAAwB,EACxB,uBAAuB,EACvB,uCAAuC,EACvC,eAAe,EAEf,kCAAkC,EAClC,mCAAmC,GACpC,MAAM,wBAAwB,CAAC;AAEhC;;;;GAIG;AACH,OAAO,EAAqB,YAAY,EAAE,MAAM,6BAA6B,CAAC"}

package/dist/managed/compiler/contract-info.json

@@ -64,28 +64,6 @@
         ]
       }
     },
-    {
-      "name": "signetKeyHash",
-      "pure": true,
-      "proof": false,
-      "arguments": [
-        {
-          "name": "pk",
-          "type": {
-            "type-name": "Alias",
-            "name": "Secp256k1Point",
-            "type": {
-              "type-name": "Opaque",
-              "tsType": "Secp256k1Point"
-            }
-          }
-        }
-      ],
-      "result-type": {
-        "type-name": "Bytes",
-        "length": 32
-      }
-    },
     {
       "name": "evmAddressAbiWord",
       "pure": true,

package/dist/managed/compiler/contract-manifest.json

@@ -7,26 +7,26 @@
     "type": "directory",
     "contract-info.json": {
       "type": "file",
-      "size": 8200,
-      "hash": "07a63a0b166c651d4f9eb662029bacc81b0825311959ac67405d3996c064a84c"
+      "size": 7740,
+      "hash": "90cf4d016fbbcfae53716bb2849b230df5593d2d0e3c63cf7b0eea54a4c7b429"
     }
   },
   "contract": {
     "type": "directory",
     "index.d.ts": {
       "type": "file",
-      "size": 6518,
-      "hash": "9c63efc21d21c87c4a1989454c35158c8d783fd86131a5697edfd5e8f9db4bba"
+      "size": 6274,
+      "hash": "a8033193fc158fb0432c3636d04670db812a2ba97c22f5e669ae77e4d3dac0cd"
     },
     "index.js": {
       "type": "file",
-      "size": 49867,
-      "hash": "4f294b5e0d827b405d7fdd753e9558fea009b16fb4a4e47d326d8a38138c0163"
+      "size": 38481,
+      "hash": "b9a95365410dd59527b651a0b6c4f96b464667f6bd3d0f30bb3f393a2d2a9e3d"
     },
     "index.js.map": {
       "type": "file",
-      "size": 4763,
-      "hash": "c80856dbfdbcf04032a19bca94b6273a537ddea36bb4c3102d3f8fe9bce52359"
+      "size": 4291,
+      "hash": "813db2ccfb2cc310777b361899a7213f2734aea8e09566072e5aaa30380e2b80"
     }
   }
 }

package/dist/managed/contract/index.d.ts

@@ -16,7 +16,6 @@ export type PureCircuits = {
                                                 requestsPath_0: bigint[]): { version: bigint,
                                                                              payload: Uint8Array
                                                                            };
-  signetKeyHash(pk_0: __compactRuntime.Secp256k1Point): Uint8Array;
   evmAddressAbiWord(addr_0: Uint8Array): Uint8Array;
   numericAbiWord(value_0: bigint): Uint8Array;
   boolAbiWord(value_0: boolean): Uint8Array;
@@ -48,8 +47,6 @@ export type Circuits<PS> = {
                                                 requestsPath_0: bigint[]): Promise<__compactRuntime.CircuitResults<PS, { version: bigint,
                                                                                                                          payload: Uint8Array
                                                                                                                        }>>;
-  signetKeyHash(context: __compactRuntime.CircuitContext<PS>,
-                pk_0: __compactRuntime.Secp256k1Point): Promise<__compactRuntime.CircuitResults<PS, Uint8Array>>;
   evmAddressAbiWord(context: __compactRuntime.CircuitContext<PS>,
                     addr_0: Uint8Array): Promise<__compactRuntime.CircuitResults<PS, Uint8Array>>;
   numericAbiWord(context: __compactRuntime.CircuitContext<PS>, value_0: bigint): Promise<__compactRuntime.CircuitResults<PS, Uint8Array>>;