@totemsdk/txpow 1.0.1 → 1.1.0

package/dist/admission/challenge.js

@@ -1,4 +1,3 @@
-"use strict";
 /**
  * admission/challenge.ts — WorkChallenge creation and validation.
  *
@@ -17,18 +16,12 @@
  * parallel identity/signature system — that belongs to the application layer.
  * ───────────────────────────────────────────────────────────────────────────
  */
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.MAX_CHALLENGE_TTL_MS = exports.DEFAULT_CHALLENGE_TTL_MS = void 0;
-exports.createWorkChallenge = createWorkChallenge;
-exports.validateWorkChallenge = validateWorkChallenge;
-exports.challengeFingerprint = challengeFingerprint;
-exports.canonicalChallenge = canonicalChallenge;
-const core_1 = require("@totemsdk/core");
-const types_js_1 = require("./types.js");
+import { sha3_256 } from '@totemsdk/core';
+import { MACHINE_WORK_ADMISSION_VERSION } from './types.js';
 /** Default challenge lifetime: 5 minutes. */
-exports.DEFAULT_CHALLENGE_TTL_MS = 5 * 60 * 1000;
+export const DEFAULT_CHALLENGE_TTL_MS = 5 * 60 * 1000;
 /** Maximum challenge lifetime: 24 hours. */
-exports.MAX_CHALLENGE_TTL_MS = 24 * 60 * 60 * 1000;
+export const MAX_CHALLENGE_TTL_MS = 24 * 60 * 60 * 1000;
 function toHex(bytes) {
     return Array.from(bytes).map(b => b.toString(16).padStart(2, '0')).join('');
 }
@@ -48,7 +41,7 @@ function randomHex(bytes) {
  * @param target     Absolute 32-byte cryptographic target (hex).
  * @param options    Optional overrides (challengeId, nonce, ttl, issuedAt, network).
  */
-function createWorkChallenge(recipient, domain, target, options) {
+export function createWorkChallenge(recipient, domain, target, options) {
     if (!recipient)
         throw new Error('WorkChallenge requires a recipient');
     if (!domain)
@@ -56,15 +49,15 @@ function createWorkChallenge(recipient, domain, target, options) {
     if (!/^[0-9a-fA-F]{64}$/.test(target)) {
         throw new Error('WorkChallenge target must be 32-byte hex (64 hex chars)');
     }
-    const ttlMs = options?.ttlMs ?? exports.DEFAULT_CHALLENGE_TTL_MS;
-    if (ttlMs <= 0 || ttlMs > exports.MAX_CHALLENGE_TTL_MS) {
-        throw new Error(`WorkChallenge ttlMs must be in (0, ${exports.MAX_CHALLENGE_TTL_MS}]`);
+    const ttlMs = options?.ttlMs ?? DEFAULT_CHALLENGE_TTL_MS;
+    if (ttlMs <= 0 || ttlMs > MAX_CHALLENGE_TTL_MS) {
+        throw new Error(`WorkChallenge ttlMs must be in (0, ${MAX_CHALLENGE_TTL_MS}]`);
     }
     const issuedAt = options?.issuedAt ?? Date.now();
     const challengeId = options?.challengeId ?? randomHex(16);
     const nonce = options?.nonce ?? randomHex(16);
     return {
-        version: types_js_1.MACHINE_WORK_ADMISSION_VERSION,
+        version: MACHINE_WORK_ADMISSION_VERSION,
         challengeId,
         recipient,
         domain,
@@ -82,11 +75,11 @@ function createWorkChallenge(recipient, domain, target, options) {
  * expected recipient/domain. Does NOT check the proof hash — that is the
  * caller's job via verifyWorkAdmission.
  */
-function validateWorkChallenge(challenge, expected) {
+export function validateWorkChallenge(challenge, expected) {
     if (!challenge || typeof challenge !== 'object') {
         return { valid: false, reason: 'challenge is not an object' };
     }
-    if (challenge.version !== types_js_1.MACHINE_WORK_ADMISSION_VERSION) {
+    if (challenge.version !== MACHINE_WORK_ADMISSION_VERSION) {
         return { valid: false, reason: `unsupported challenge version ${challenge.version}` };
     }
     if (!challenge.challengeId) {
@@ -123,9 +116,9 @@ function validateWorkChallenge(challenge, expected) {
  * Derive a stable challenge fingerprint (SHA3-256 of canonical challenge bytes).
  * Useful for higher-level code that tracks already-consumed challenge IDs.
  */
-function challengeFingerprint(challenge) {
+export function challengeFingerprint(challenge) {
     const canonical = canonicalChallenge(challenge);
-    return toHex((0, core_1.sha3_256)(new TextEncoder().encode(canonical)));
+    return toHex(sha3_256(new TextEncoder().encode(canonical)));
 }
 /**
  * Canonical serialization of a WorkChallenge.
@@ -134,7 +127,7 @@ function challengeFingerprint(challenge) {
  * ambiguous concatenation is possible. Used for the commitment and for
  * challenge fingerprints.
  */
-function canonicalChallenge(challenge) {
+export function canonicalChallenge(challenge) {
     const parts = [];
     const push = (s) => {
         parts.push(String(s.length).padStart(8, '0'));

package/dist/admission/commitment.js

@@ -1,4 +1,3 @@
-"use strict";
 /**
  * admission/commitment.ts — Canonical domain-separated action commitment.
  *
@@ -13,12 +12,9 @@
  * field, so the mined nonce commits the work to sender, recipient, action,
  * challenge, target, and freshness.
  */
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.canonicalAction = canonicalAction;
-exports.computeActionCommitment = computeActionCommitment;
-const core_1 = require("@totemsdk/core");
-const types_js_1 = require("./types.js");
-const challenge_js_1 = require("./challenge.js");
+import { sha3_256 } from '@totemsdk/core';
+import { MACHINE_WORK_ADMISSION_VERSION, MACHINE_WORK_DOMAIN, } from './types.js';
+import { canonicalChallenge } from './challenge.js';
 function toHex(bytes) {
     return Array.from(bytes).map(b => b.toString(16).padStart(2, '0')).join('');
 }
@@ -28,7 +24,7 @@ function toHex(bytes) {
  * Length-prefixed fields in a fixed order; context keys are sorted so that
  * equivalent input produces identical output.
  */
-function canonicalAction(action) {
+export function canonicalAction(action) {
     const parts = [];
     const push = (s) => {
         parts.push(String(s.length).padStart(8, '0'));
@@ -61,13 +57,13 @@ function canonicalAction(action) {
  * @param action    The application action.
  * @param challenge The challenge the work is bound to.
  */
-function computeActionCommitment(action, challenge) {
-    const input = types_js_1.MACHINE_WORK_DOMAIN +
+export function computeActionCommitment(action, challenge) {
+    const input = MACHINE_WORK_DOMAIN +
         '|' +
-        String(types_js_1.MACHINE_WORK_ADMISSION_VERSION) +
+        String(MACHINE_WORK_ADMISSION_VERSION) +
         '|' +
         canonicalAction(action) +
         '|' +
-        (0, challenge_js_1.canonicalChallenge)(challenge);
-    return toHex((0, core_1.sha3_256)(new TextEncoder().encode(input)));
+        canonicalChallenge(challenge);
+    return toHex(sha3_256(new TextEncoder().encode(input)));
 }

package/dist/admission/index.js

@@ -1,4 +1,3 @@
-"use strict";
 /**
  * admission/index.ts — Machine Work Admission public surface.
  *
@@ -7,36 +6,9 @@
  * block candidate so that application anti-spam work simultaneously searches
  * for valid Minima L1 blocks.
  */
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.MACHINE_WORK_DOMAIN = exports.MACHINE_WORK_ADMISSION_VERSION = exports.reconstructTxPoWEnvelope = exports.assembleTxPoWEnvelope = exports.buildEmptyBurnWitnessBytes = exports.buildEmptyBurnTxBytes = exports.buildEmptyWitnessBytes = exports.buildEmptyTransactionBytes = exports.buildEmptyBlockBody = exports.computeBlockCandidateId = exports.templateFreshness = exports.computeSuperLevel = exports.isBlockWinner = exports.serializeSuperParents = exports.buildBlockHeaderTail = exports.verifyWorkAdmission = exports.mineWorkAdmission = exports.canonicalAction = exports.computeActionCommitment = exports.MAX_CHALLENGE_TTL_MS = exports.DEFAULT_CHALLENGE_TTL_MS = exports.canonicalChallenge = exports.challengeFingerprint = exports.validateWorkChallenge = exports.createWorkChallenge = void 0;
-var challenge_js_1 = require("./challenge.js");
-Object.defineProperty(exports, "createWorkChallenge", { enumerable: true, get: function () { return challenge_js_1.createWorkChallenge; } });
-Object.defineProperty(exports, "validateWorkChallenge", { enumerable: true, get: function () { return challenge_js_1.validateWorkChallenge; } });
-Object.defineProperty(exports, "challengeFingerprint", { enumerable: true, get: function () { return challenge_js_1.challengeFingerprint; } });
-Object.defineProperty(exports, "canonicalChallenge", { enumerable: true, get: function () { return challenge_js_1.canonicalChallenge; } });
-Object.defineProperty(exports, "DEFAULT_CHALLENGE_TTL_MS", { enumerable: true, get: function () { return challenge_js_1.DEFAULT_CHALLENGE_TTL_MS; } });
-Object.defineProperty(exports, "MAX_CHALLENGE_TTL_MS", { enumerable: true, get: function () { return challenge_js_1.MAX_CHALLENGE_TTL_MS; } });
-var commitment_js_1 = require("./commitment.js");
-Object.defineProperty(exports, "computeActionCommitment", { enumerable: true, get: function () { return commitment_js_1.computeActionCommitment; } });
-Object.defineProperty(exports, "canonicalAction", { enumerable: true, get: function () { return commitment_js_1.canonicalAction; } });
-var mine_js_1 = require("./mine.js");
-Object.defineProperty(exports, "mineWorkAdmission", { enumerable: true, get: function () { return mine_js_1.mineWorkAdmission; } });
-var verify_js_1 = require("./verify.js");
-Object.defineProperty(exports, "verifyWorkAdmission", { enumerable: true, get: function () { return verify_js_1.verifyWorkAdmission; } });
-var template_js_1 = require("./template.js");
-Object.defineProperty(exports, "buildBlockHeaderTail", { enumerable: true, get: function () { return template_js_1.buildBlockHeaderTail; } });
-Object.defineProperty(exports, "serializeSuperParents", { enumerable: true, get: function () { return template_js_1.serializeSuperParents; } });
-Object.defineProperty(exports, "isBlockWinner", { enumerable: true, get: function () { return template_js_1.isBlockWinner; } });
-Object.defineProperty(exports, "computeSuperLevel", { enumerable: true, get: function () { return template_js_1.computeSuperLevel; } });
-Object.defineProperty(exports, "templateFreshness", { enumerable: true, get: function () { return template_js_1.templateFreshness; } });
-Object.defineProperty(exports, "computeBlockCandidateId", { enumerable: true, get: function () { return template_js_1.computeBlockCandidateId; } });
-Object.defineProperty(exports, "buildEmptyBlockBody", { enumerable: true, get: function () { return template_js_1.buildEmptyBlockBody; } });
-Object.defineProperty(exports, "buildEmptyTransactionBytes", { enumerable: true, get: function () { return template_js_1.buildEmptyTransactionBytes; } });
-Object.defineProperty(exports, "buildEmptyWitnessBytes", { enumerable: true, get: function () { return template_js_1.buildEmptyWitnessBytes; } });
-Object.defineProperty(exports, "buildEmptyBurnTxBytes", { enumerable: true, get: function () { return template_js_1.buildEmptyBurnTxBytes; } });
-Object.defineProperty(exports, "buildEmptyBurnWitnessBytes", { enumerable: true, get: function () { return template_js_1.buildEmptyBurnWitnessBytes; } });
-Object.defineProperty(exports, "assembleTxPoWEnvelope", { enumerable: true, get: function () { return template_js_1.assembleTxPoWEnvelope; } });
-Object.defineProperty(exports, "reconstructTxPoWEnvelope", { enumerable: true, get: function () { return template_js_1.reconstructTxPoWEnvelope; } });
-var types_js_1 = require("./types.js");
-Object.defineProperty(exports, "MACHINE_WORK_ADMISSION_VERSION", { enumerable: true, get: function () { return types_js_1.MACHINE_WORK_ADMISSION_VERSION; } });
-Object.defineProperty(exports, "MACHINE_WORK_DOMAIN", { enumerable: true, get: function () { return types_js_1.MACHINE_WORK_DOMAIN; } });
+export { createWorkChallenge, validateWorkChallenge, challengeFingerprint, canonicalChallenge, DEFAULT_CHALLENGE_TTL_MS, MAX_CHALLENGE_TTL_MS, } from './challenge.js';
+export { computeActionCommitment, canonicalAction, } from './commitment.js';
+export { mineWorkAdmission, } from './mine.js';
+export { verifyWorkAdmission, } from './verify.js';
+export { buildBlockHeaderTail, serializeSuperParents, isBlockWinner, computeSuperLevel, templateFreshness, computeBlockCandidateId, buildEmptyBlockBody, buildEmptyTransactionBytes, buildEmptyWitnessBytes, buildEmptyBurnTxBytes, buildEmptyBurnWitnessBytes, assembleTxPoWEnvelope, reconstructTxPoWEnvelope, } from './template.js';
+export { MACHINE_WORK_ADMISSION_VERSION, MACHINE_WORK_DOMAIN, } from './types.js';

package/dist/admission/mine.js

@@ -1,4 +1,3 @@
-"use strict";
 /**
  * admission/mine.ts — Machine Work Admission mining.
  *
@@ -19,13 +18,11 @@
  * stay off-chain; only genuine L1 winners are broadcast via the injected
  * template provider.
  */
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.mineWorkAdmission = mineWorkAdmission;
-const core_1 = require("@totemsdk/core");
-const mine_js_1 = require("../mine.js");
-const commitment_js_1 = require("./commitment.js");
-const template_js_1 = require("./template.js");
-const types_js_1 = require("./types.js");
+import { sha3_256 } from '@totemsdk/core';
+import { mineHeaderTail } from '../mine.js';
+import { computeActionCommitment } from './commitment.js';
+import { buildBlockHeaderTail, buildEmptyBlockBody, assembleTxPoWEnvelope, computeSuperLevel, } from './template.js';
+import { MACHINE_WORK_ADMISSION_VERSION, } from './types.js';
 function toHex(bytes) {
     return Array.from(bytes).map(b => b.toString(16).padStart(2, '0')).join('');
 }
@@ -42,14 +39,14 @@ function toHex(bytes) {
  * @param templateProvider Injected provider for the current Minima template.
  * @param options          Mining options.
  */
-async function mineWorkAdmission(action, challenge, templateProvider, options) {
+export async function mineWorkAdmission(action, challenge, templateProvider, options) {
     const template = await templateProvider.getCurrentTemplate();
     if (templateProvider.validateTemplate) {
         const ok = await templateProvider.validateTemplate(template);
         if (!ok)
             throw new Error('Minima work template failed validation');
     }
-    const actionCommitment = (0, commitment_js_1.computeActionCommitment)(action, challenge);
+    const actionCommitment = computeActionCommitment(action, challenge);
     const admissionTarget = challenge.target;
     const admissionTargetBytes = hexToBytes(admissionTarget);
     const blockTargetBytes = hexToBytes(template.blockDifficulty);
@@ -61,13 +58,13 @@ async function mineWorkAdmission(action, challenge, templateProvider, options) {
     // Build the complete block candidate: empty TxBody (same shape Minima's
     // MINEPULSE automine uses) + header tail with the action commitment.
     const prng = options?.prng ?? randomBytes(32);
-    const bodyBytes = (0, template_js_1.buildEmptyBlockBody)(prng, template.blockDifficulty);
-    const bodyHash = toHex((0, core_1.sha3_256)(bodyBytes));
+    const bodyBytes = buildEmptyBlockBody(prng, template.blockDifficulty);
+    const bodyHash = toHex(sha3_256(bodyBytes));
     const timeMilli = options?.timeMilli ?? template.timeMilli;
-    const headerTail = (0, template_js_1.buildBlockHeaderTail)(template, actionCommitment, bodyHash);
+    const headerTail = buildBlockHeaderTail(template, actionCommitment, bodyHash);
     // Mine against the admission target. The same nonce search also checks the
     // block target: if the winning hash beats the block target, it is a block.
-    const result = await (0, mine_js_1.mineHeaderTail)(headerTail, admissionTargetBytes, {
+    const result = await mineHeaderTail(headerTail, admissionTargetBytes, {
         signal: options?.signal,
         maxIterations: options?.maxIterations,
         chunkSize: options?.chunkSize,
@@ -76,12 +73,12 @@ async function mineWorkAdmission(action, challenge, templateProvider, options) {
         _skipWorker: options?._skipWorker,
     });
     // Assemble the complete Minima TxPoW wire format (header | 0x01 | body).
-    const envelope = (0, template_js_1.assembleTxPoWEnvelope)(result.minedHeaderBytes, bodyBytes);
+    const envelope = assembleTxPoWEnvelope(result.minedHeaderBytes, bodyBytes);
     // Exact Minima-derived metadata.
-    const superLevel = (0, template_js_1.computeSuperLevel)(result.txpowId, template.blockDifficulty);
+    const superLevel = computeSuperLevel(result.txpowId, template.blockDifficulty);
     const isBlock = superLevel >= 0;
     const proof = {
-        version: types_js_1.MACHINE_WORK_ADMISSION_VERSION,
+        version: MACHINE_WORK_ADMISSION_VERSION,
         actionCommitment,
         challengeId: challenge.challengeId,
         admissionTarget,

package/dist/admission/template.js

@@ -1,4 +1,3 @@
-"use strict";
 /**
  * admission/template.ts — Minima block-candidate template handling.
  *
@@ -12,23 +11,9 @@
  * template provider. A real Minima node / Axia integration supplies live chain
  * state; tests supply fixtures.
  */
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.serializeSuperParents = serializeSuperParents;
-exports.buildEmptyBurnTxBytes = buildEmptyBurnTxBytes;
-exports.buildEmptyBurnWitnessBytes = buildEmptyBurnWitnessBytes;
-exports.buildEmptyTransactionBytes = buildEmptyTransactionBytes;
-exports.buildEmptyWitnessBytes = buildEmptyWitnessBytes;
-exports.buildEmptyBlockBody = buildEmptyBlockBody;
-exports.assembleTxPoWEnvelope = assembleTxPoWEnvelope;
-exports.buildBlockHeaderTail = buildBlockHeaderTail;
-exports.computeBlockCandidateId = computeBlockCandidateId;
-exports.isBlockWinner = isBlockWinner;
-exports.computeSuperLevel = computeSuperLevel;
-exports.templateFreshness = templateFreshness;
-exports.reconstructTxPoWEnvelope = reconstructTxPoWEnvelope;
-const core_1 = require("@totemsdk/core");
-const core_2 = require("@totemsdk/core");
-const constants_js_1 = require("../constants.js");
+import { sha3_256 } from '@totemsdk/core';
+import { writeMiniNumber, writeMiniData, writeHashToStream, concat, } from '@totemsdk/core';
+import { CASCADE_LEVELS } from '../constants.js';
 function hexToBytes(hex) {
     const h = hex.startsWith('0x') ? hex.slice(2) : hex;
     const out = new Uint8Array(h.length / 2);
@@ -46,9 +31,9 @@ function toHex(bytes) {
  * Consecutive equal hashes are coalesced into (count: MiniByte, hash) runs.
  * A fresh candidate with all-distinct parents serializes as 32 runs.
  */
-function serializeSuperParents(superParents) {
-    if (superParents.length !== constants_js_1.CASCADE_LEVELS) {
-        throw new Error(`superParents must have ${constants_js_1.CASCADE_LEVELS} entries, got ${superParents.length}`);
+export function serializeSuperParents(superParents) {
+    if (superParents.length !== CASCADE_LEVELS) {
+        throw new Error(`superParents must have ${CASCADE_LEVELS} entries, got ${superParents.length}`);
     }
     const parts = [];
     let runHash = superParents[0];
@@ -59,14 +44,14 @@ function serializeSuperParents(superParents) {
         }
         else {
             parts.push(new Uint8Array([runCount]));
-            parts.push((0, core_2.writeHashToStream)(hexToBytes(runHash)));
+            parts.push(writeHashToStream(hexToBytes(runHash)));
             runHash = superParents[i];
             runCount = 1;
         }
     }
     parts.push(new Uint8Array([runCount]));
-    parts.push((0, core_2.writeHashToStream)(hexToBytes(runHash)));
-    return (0, core_2.concat)(...parts);
+    parts.push(writeHashToStream(hexToBytes(runHash)));
+    return concat(...parts);
 }
 /**
  * Build the empty burn transaction bytes (TxBody.writeDataStream fields 5-6).
@@ -74,29 +59,29 @@ function serializeSuperParents(superParents) {
  * Equivalent to serializeTransaction({ linkHash: [0x00], inputs: [], outputs: [],
  * state: [] }): 0 inputs, 0 outputs, 0 state, linkHash = ZERO_TXPOWID (1 byte).
  */
-function buildEmptyBurnTxBytes() {
-    return (0, core_2.concat)((0, core_2.writeMiniNumber)(0n, 0), (0, core_2.writeMiniNumber)(0n, 0), (0, core_2.writeMiniNumber)(0n, 0), (0, core_2.writeHashToStream)(new Uint8Array([0x00])));
+export function buildEmptyBurnTxBytes() {
+    return concat(writeMiniNumber(0n, 0), writeMiniNumber(0n, 0), writeMiniNumber(0n, 0), writeHashToStream(new Uint8Array([0x00])));
 }
 /**
  * Build the empty burn witness bytes (TxBody.writeDataStream field 6).
  * 0 signatures, 0 coinproofs, 0 scriptproofs.
  */
-function buildEmptyBurnWitnessBytes() {
-    return (0, core_2.concat)((0, core_2.writeMiniNumber)(0n, 0), (0, core_2.writeMiniNumber)(0n, 0), (0, core_2.writeMiniNumber)(0n, 0));
+export function buildEmptyBurnWitnessBytes() {
+    return concat(writeMiniNumber(0n, 0), writeMiniNumber(0n, 0), writeMiniNumber(0n, 0));
 }
 /**
  * Build the empty transaction bytes (TxBody.writeDataStream field 3).
  * 0 inputs, 0 outputs, 0 state, linkHash = ZERO_TXPOWID (1 byte).
  */
-function buildEmptyTransactionBytes() {
-    return (0, core_2.concat)((0, core_2.writeMiniNumber)(0n, 0), (0, core_2.writeMiniNumber)(0n, 0), (0, core_2.writeMiniNumber)(0n, 0), (0, core_2.writeHashToStream)(new Uint8Array([0x00])));
+export function buildEmptyTransactionBytes() {
+    return concat(writeMiniNumber(0n, 0), writeMiniNumber(0n, 0), writeMiniNumber(0n, 0), writeHashToStream(new Uint8Array([0x00])));
 }
 /**
  * Build the empty witness bytes (TxBody.writeDataStream field 4).
  * 0 signatures, 0 coinproofs, 0 scriptproofs.
  */
-function buildEmptyWitnessBytes() {
-    return (0, core_2.concat)((0, core_2.writeMiniNumber)(0n, 0), (0, core_2.writeMiniNumber)(0n, 0), (0, core_2.writeMiniNumber)(0n, 0));
+export function buildEmptyWitnessBytes() {
+    return concat(writeMiniNumber(0n, 0), writeMiniNumber(0n, 0), writeMiniNumber(0n, 0));
 }
 /**
  * Build the serialized TxBody for a fresh block candidate.
@@ -110,8 +95,8 @@ function buildEmptyWitnessBytes() {
  * @param txnDifficulty Transaction difficulty (32-byte hex). For a block
  *                      candidate this is typically the block difficulty.
  */
-function buildEmptyBlockBody(prng, txnDifficulty) {
-    return (0, core_2.concat)((0, core_2.writeHashToStream)(prng), (0, core_2.writeMiniData)(hexToBytes(txnDifficulty)), buildEmptyTransactionBytes(), buildEmptyWitnessBytes(), buildEmptyBurnTxBytes(), buildEmptyBurnWitnessBytes(), (0, core_2.writeMiniNumber)(0n, 0));
+export function buildEmptyBlockBody(prng, txnDifficulty) {
+    return concat(writeHashToStream(prng), writeMiniData(hexToBytes(txnDifficulty)), buildEmptyTransactionBytes(), buildEmptyWitnessBytes(), buildEmptyBurnTxBytes(), buildEmptyBurnWitnessBytes(), writeMiniNumber(0n, 0));
 }
 /**
  * Assemble the complete Minima TxPoW wire format:
@@ -123,8 +108,8 @@ function buildEmptyBlockBody(prng, txnDifficulty) {
  * @param headerBytes  Serialized TxHeader bytes (with the winning nonce).
  * @param bodyBytes    Serialized TxBody bytes.
  */
-function assembleTxPoWEnvelope(headerBytes, bodyBytes) {
-    return (0, core_2.concat)(headerBytes, new Uint8Array([0x01]), bodyBytes);
+export function assembleTxPoWEnvelope(headerBytes, bodyBytes) {
+    return concat(headerBytes, new Uint8Array([0x01]), bodyBytes);
 }
 /**
  * Build the TxHeader tail (everything after the nonce field) for a block
@@ -138,21 +123,21 @@ function assembleTxPoWEnvelope(headerBytes, bodyBytes) {
  * @param customHash   The action commitment (32-byte hex) to place in mCustomHash.
  * @param txBodyHash   SHA3-256 of the serialized TxBody (32-byte hex).
  */
-function buildBlockHeaderTail(template, customHash, txBodyHash) {
-    return (0, core_2.concat)((0, core_2.writeMiniData)(hexToBytes(template.chainId)), (0, core_2.writeMiniNumber)(template.timeMilli, 0), (0, core_2.writeMiniNumber)(template.blockNumber, 0), (0, core_2.writeMiniData)(hexToBytes(template.blockDifficulty)), serializeSuperParents(template.superParents), (0, core_2.writeHashToStream)(hexToBytes(template.mmrRoot)), (0, core_2.writeMiniNumber)(template.mmrTotal, 0), hexToBytes(template.magic), (0, core_2.writeHashToStream)(hexToBytes(customHash)), (0, core_2.writeHashToStream)(hexToBytes(txBodyHash)));
+export function buildBlockHeaderTail(template, customHash, txBodyHash) {
+    return concat(writeMiniData(hexToBytes(template.chainId)), writeMiniNumber(template.timeMilli, 0), writeMiniNumber(template.blockNumber, 0), writeMiniData(hexToBytes(template.blockDifficulty)), serializeSuperParents(template.superParents), writeHashToStream(hexToBytes(template.mmrRoot)), writeMiniNumber(template.mmrTotal, 0), hexToBytes(template.magic), writeHashToStream(hexToBytes(customHash)), writeHashToStream(hexToBytes(txBodyHash)));
 }
 /**
  * Compute the TxPoW ID for a mined block-candidate header.
  * txpowId = SHA3-256(serialized TxHeader).
  */
-function computeBlockCandidateId(headerBytes) {
-    return (0, core_1.sha3_256)(headerBytes);
+export function computeBlockCandidateId(headerBytes) {
+    return sha3_256(headerBytes);
 }
 /**
  * Check whether a txpowId beats the block target (i.e. is a genuine Minima block).
  * valid = txpowId < blockDifficulty (big-endian 256-bit comparison).
  */
-function isBlockWinner(txpowId, blockDifficulty) {
+export function isBlockWinner(txpowId, blockDifficulty) {
     const target = hexToBytes(blockDifficulty);
     for (let i = 0; i < 32; i++) {
         if (txpowId[i] < target[i])
@@ -201,7 +186,7 @@ function bytesToBigInt(bytes) {
  * @param txpowId        SHA3-256(header), 32 bytes.
  * @param blockDifficulty 32-byte hex block difficulty target.
  */
-function computeSuperLevel(txpowId, blockDifficulty) {
+export function computeSuperLevel(txpowId, blockDifficulty) {
     const diffBigInt = bytesToBigInt(hexToBytes(blockDifficulty));
     const idBigInt = bytesToBigInt(txpowId);
     // Not a block: quot = 0 → super = -1
@@ -210,8 +195,8 @@ function computeSuperLevel(txpowId, blockDifficulty) {
     const quot = diffBigInt / idBigInt;
     let superLevel = bigIntBitLength(quot) - 1;
     // Clamp to the maximum represented Super level, exactly as Minima does.
-    if (superLevel >= constants_js_1.CASCADE_LEVELS) {
-        superLevel = constants_js_1.CASCADE_LEVELS - 1;
+    if (superLevel >= CASCADE_LEVELS) {
+        superLevel = CASCADE_LEVELS - 1;
     }
     return superLevel;
 }
@@ -220,7 +205,7 @@ function computeSuperLevel(txpowId, blockDifficulty) {
  * was captured within the window, and "current" for L1 broadcast if it matches
  * the latest template id.
  */
-function templateFreshness(template, latest, options) {
+export function templateFreshness(template, latest, options) {
     const now = options?.now ?? Date.now();
     const windowMs = options?.admissionWindowMs ?? 5 * 60 * 1000;
     const age = now - template.capturedAt;
@@ -239,9 +224,9 @@ function templateFreshness(template, latest, options) {
  * @param headerBytes   The mined TxHeader bytes.
  * @param prng          The PRNG used when the proof was mined (32 bytes).
  */
-function reconstructTxPoWEnvelope(proofTemplate, headerBytes, prng) {
+export function reconstructTxPoWEnvelope(proofTemplate, headerBytes, prng) {
     const body = buildEmptyBlockBody(prng, proofTemplate.blockDifficulty);
-    const bodyHash = toHex((0, core_1.sha3_256)(body));
+    const bodyHash = toHex(sha3_256(body));
     const envelope = assembleTxPoWEnvelope(headerBytes, body);
     return { envelope, bodyHash };
 }

package/dist/admission/types.js

@@ -1,4 +1,3 @@
-"use strict";
 /**
  * admission/types.ts — Machine Work Admission core types.
  *
@@ -16,9 +15,7 @@
  * canonical bytes". It does NOT know about negotiation, compute, storage, or
  * any particular Edge resource. Domain-specific packages supply the action.
  */
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.MACHINE_WORK_DOMAIN = exports.MACHINE_WORK_ADMISSION_VERSION = void 0;
 /** Current Machine Work Admission protocol version. */
-exports.MACHINE_WORK_ADMISSION_VERSION = 1;
+export const MACHINE_WORK_ADMISSION_VERSION = 1;
 /** Canonical protocol domain prefix for the commitment hash. */
-exports.MACHINE_WORK_DOMAIN = 'totem.machine-work-admission';
+export const MACHINE_WORK_DOMAIN = 'totem.machine-work-admission';

package/dist/admission/verify.js

@@ -1,4 +1,3 @@
-"use strict";
 /**
  * admission/verify.ts — Machine Work Admission verification.
  *
@@ -20,13 +19,11 @@
  * broadcastable = false. Offline verification (no provider) must NOT claim
  * Minima block contribution — `broadcastable` is left undefined.
  */
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.verifyWorkAdmission = verifyWorkAdmission;
-const core_1 = require("@totemsdk/core");
-const commitment_js_1 = require("./commitment.js");
-const challenge_js_1 = require("./challenge.js");
-const template_js_1 = require("./template.js");
-const types_js_1 = require("./types.js");
+import { sha3_256 } from '@totemsdk/core';
+import { computeActionCommitment } from './commitment.js';
+import { validateWorkChallenge } from './challenge.js';
+import { computeSuperLevel, templateFreshness } from './template.js';
+import { MACHINE_WORK_ADMISSION_VERSION, } from './types.js';
 function hexToBytes(hex) {
     const h = hex.startsWith('0x') ? hex.slice(2) : hex;
     const out = new Uint8Array(h.length / 2);
@@ -64,12 +61,12 @@ function isLessThan(a, b) {
  *                         block contribution (`broadcastable` is undefined).
  * @param options          Verification options.
  */
-async function verifyWorkAdmission(action, challenge, proof, templateProvider, options) {
+export async function verifyWorkAdmission(action, challenge, proof, templateProvider, options) {
     // 1. Structural checks
     if (!proof || typeof proof !== 'object') {
         return { valid: false, reason: 'proof is not an object' };
     }
-    if (proof.version !== types_js_1.MACHINE_WORK_ADMISSION_VERSION) {
+    if (proof.version !== MACHINE_WORK_ADMISSION_VERSION) {
         return { valid: false, reason: `unsupported proof version ${proof.version}` };
     }
     if (proof.challengeId !== challenge.challengeId) {
@@ -85,7 +82,7 @@ async function verifyWorkAdmission(action, challenge, proof, templateProvider, o
         return { valid: false, reason: 'proof admissionTarget does not match challenge target' };
     }
     // 2. Challenge validity (expiry, recipient, domain)
-    const challengeCheck = (0, challenge_js_1.validateWorkChallenge)(challenge, {
+    const challengeCheck = validateWorkChallenge(challenge, {
         recipient: action.recipient,
         domain: action.domain,
         now: options?.now,
@@ -94,13 +91,13 @@ async function verifyWorkAdmission(action, challenge, proof, templateProvider, o
         return { valid: false, reason: challengeCheck.reason };
     }
     // 3. Recompute the canonical commitment — must match the proof
-    const expectedCommitment = (0, commitment_js_1.computeActionCommitment)(action, challenge);
+    const expectedCommitment = computeActionCommitment(action, challenge);
     if (expectedCommitment !== proof.actionCommitment) {
         return { valid: false, reason: 'action commitment mismatch' };
     }
     // 4. Re-derive the TxPoW ID from the mined header and check the target
     const headerBytes = hexToBytes(proof.txpow);
-    const txpowId = (0, core_1.sha3_256)(headerBytes);
+    const txpowId = sha3_256(headerBytes);
     const txpowIdHex = toHex(txpowId);
     if (txpowIdHex !== proof.txpowId) {
         return { valid: false, reason: 'txpowId does not match mined header' };
@@ -109,33 +106,45 @@ async function verifyWorkAdmission(action, challenge, proof, templateProvider, o
     if (!isLessThan(txpowId, admissionTarget)) {
         return { valid: false, reason: 'txpowId does not beat admission target' };
     }
-    // 5. Template freshness for admission
-    const freshness = (0, template_js_1.templateFreshness)(proof.template, options?.latestTemplate ?? null, {
+    // 5. Resolve a trusted template. Template fields — notably `blockDifficulty`,
+    //    which drives the Super-level claim — must come from a freshly-fetched
+    //    trusted template, never from the prover's copy (RFC-020 H4).
+    let trustedTemplate = options?.latestTemplate ?? null;
+    if (templateProvider) {
+        if (templateProvider.getLatestTemplate) {
+            trustedTemplate = await templateProvider.getLatestTemplate();
+        }
+        else if (options?.latestTemplate) {
+            trustedTemplate = options.latestTemplate;
+        }
+        else {
+            trustedTemplate = await templateProvider.getCurrentTemplate();
+        }
+    }
+    // 5a. Template freshness for admission (uses the proof's capture time).
+    const freshness = templateFreshness(proof.template, trustedTemplate, {
         admissionWindowMs: options?.admissionWindowMs,
         now: options?.now,
     });
     if (!freshness.admissionValid) {
         return { valid: false, reason: 'proof template is stale for admission' };
     }
-    // 6. Level B: independently recompute the exact Minima Super level. Never
-    //    trust proof.superLevel / proof.isBlock / proof.qualifiesAsMinimaBlock.
-    const superLevel = (0, template_js_1.computeSuperLevel)(txpowId, proof.template.blockDifficulty);
-    const isBlock = superLevel >= 0;
-    // 7. Level C: broadcastability requires a live template provider AND a
-    //    current template. Offline mode leaves broadcastable undefined.
+    // 5b. The prover's declared block difficulty must byte-match the trusted
+    //     template — otherwise a prover could set a max difficulty to fake a
+    //     Minima block.
+    if (trustedTemplate && trustedTemplate.blockDifficulty !== proof.template.blockDifficulty) {
+        return { valid: false, reason: 'proof template blockDifficulty does not match the trusted template' };
+    }
+    // 6. Level B: recompute the exact Minima Super level from the TRUSTED block
+    //    difficulty and the re-derived txpowId. Without a trusted template we
+    //    cannot claim Minima block contribution (isBlock = false).
+    const superLevel = trustedTemplate ? computeSuperLevel(txpowId, trustedTemplate.blockDifficulty) : -1;
+    const isBlock = trustedTemplate ? superLevel >= 0 : false;
+    // 7. Level C: broadcastability requires a live template provider, a current
+    //    template, and isBlock. Offline mode leaves broadcastable undefined.
     let broadcastable;
     if (templateProvider) {
-        let latest;
-        if (templateProvider.getLatestTemplate) {
-            latest = await templateProvider.getLatestTemplate();
-        }
-        else if (options?.latestTemplate) {
-            latest = options.latestTemplate;
-        }
-        else {
-            latest = await templateProvider.getCurrentTemplate();
-        }
-        broadcastable = isBlock && latest.templateId === proof.template.templateId;
+        broadcastable = isBlock && trustedTemplate !== null && freshness.broadcastable;
     }
     return { valid: true, superLevel, isBlock, broadcastable };
 }

package/dist/calibrate.js

@@ -1,4 +1,3 @@
-"use strict";
 /**
  * calibrate.ts — Hash rate measurement and mining cost estimation.
  *
@@ -9,24 +8,21 @@
  * estimateMiningCost() converts a difficulty target + hash rate into an
  * expected time and confidence label.
  */
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.calibrateHashRate = calibrateHashRate;
-exports.estimateMiningCost = estimateMiningCost;
-const core_1 = require("@totemsdk/core");
+import { sha3_256 } from '@totemsdk/core';
 /**
  * Run 100K trial SHA3-256 hashes and return the measured hash rate (hashes/sec).
  *
  * Call once per session and cache the result — the cost is ~50ms on a
  * typical desktop and ~300ms on a mid-range mobile.
  */
-async function calibrateHashRate() {
+export async function calibrateHashRate() {
     const TRIAL_COUNT = 100000;
     const data = new Uint8Array(150).fill(0xab);
     const start = typeof performance !== 'undefined'
         ? performance.now()
         : Date.now();
     for (let i = 0; i < TRIAL_COUNT; i++) {
-        (0, core_1.sha3_256)(data);
+        sha3_256(data);
     }
     const elapsed = (typeof performance !== 'undefined' ? performance.now() : Date.now()) - start;
     return Math.round(TRIAL_COUNT / (elapsed / 1000));
@@ -43,7 +39,7 @@ async function calibrateHashRate() {
  *   normal 2 – 15 s
  *   slow   > 15 s
  */
-function estimateMiningCost(txnDifficulty, hashRatePerSec) {
+export function estimateMiningCost(txnDifficulty, hashRatePerSec) {
     if (hashRatePerSec <= 0) {
         throw new Error('hashRatePerSec must be positive');
     }