@totemsdk/txpow 1.0.2 → 1.1.1

package/dist/cjs/admission/types.d.ts

@@ -0,0 +1,224 @@
+/**
+ * admission/types.ts — Machine Work Admission core types.
+ *
+ * Machine Work Admission lets a receiver require a sender to perform bounded
+ * computational work before scarce machine resources are allocated. The work
+ * searches the nonce space of a real current Minima block candidate, so the
+ * same hashes that admit the machine action also search for Minima L1 blocks.
+ *
+ * The three distinct concepts:
+ *   - WorkChallenge  — the receiver-controlled admission requirement
+ *   - MachineWorkAction — the domain-separated application action commitment
+ *   - MachineWorkAdmissionProof — the mined result
+ *
+ * The TxPoW package knows only "there is an application action represented by
+ * canonical bytes". It does NOT know about negotiation, compute, storage, or
+ * any particular Edge resource. Domain-specific packages supply the action.
+ */
+/** Current Machine Work Admission protocol version. */
+export declare const MACHINE_WORK_ADMISSION_VERSION = 1;
+/** Canonical protocol domain prefix for the commitment hash. */
+export declare const MACHINE_WORK_DOMAIN = "totem.machine-work-admission";
+/**
+ * The receiver controls the admission requirement.
+ *
+ * A challenge must be unique enough to prevent useful pre-mining, must expire,
+ * must bind to the intended receiver, and must bind to an application domain.
+ * `target` is an absolute cryptographic target: verification is `hash < target`.
+ */
+export interface WorkChallenge {
+    /** Protocol version. */
+    version: number;
+    /** Unique challenge identifier (receiver-generated, prevents pre-mining). */
+    challengeId: string;
+    /** The intended receiver this challenge is bound to. */
+    recipient: string;
+    /** Application domain (e.g. "totem.negotiation.proposal"). Open-ended. */
+    domain: string;
+    /** Absolute 32-byte cryptographic target (big-endian 256-bit). */
+    target: string;
+    /** Receiver-generated random nonce to prevent pre-mining. */
+    nonce: string;
+    /** Epoch milliseconds when the challenge was issued. */
+    issuedAt: number;
+    /** Epoch milliseconds after which the challenge is invalid. */
+    expiresAt: number;
+    /** Optional network identifier (e.g. "mainnet", "testnet"). */
+    network?: string;
+}
+/**
+ * The application action, represented in a generic domain-separated form.
+ *
+ * Only a commitment to this action enters the TxPoW header — never the
+ * application payload itself. The application remains off-chain.
+ */
+export interface MachineWorkAction {
+    /** Protocol version. */
+    version: number;
+    /** Application domain (e.g. "totem.compute.reserve"). Open-ended. */
+    domain: string;
+    /** The sender performing the work. */
+    sender: string;
+    /** The intended recipient. */
+    recipient: string;
+    /** Unique action identifier. */
+    actionId: string;
+    /** SHA3-256 hex commitment to the application payload (off-chain). */
+    payloadHash: string;
+    /** Optional domain-specific context (canonicalized into the commitment). */
+    context?: Record<string, string>;
+}
+/**
+ * A Minima block-candidate work template.
+ *
+ * This is the chain state a candidate is mined against. It is structurally
+ * capable of becoming a legitimate Minima block: block number, block
+ * difficulty, super-parents, MMR root/total, magic, and time are all taken
+ * from the current chain tip (see TxPoWGenerator.generateTxPoW in Minima).
+ */
+export interface MinimaWorkTemplate {
+    /** Chain ID (MAIN_NET = 0x00). */
+    chainId: string;
+    /** Block number = current tip + 1. */
+    blockNumber: bigint;
+    /** Current block difficulty target (32-byte hex). */
+    blockDifficulty: string;
+    /** Super-parent hashes at each cascade level (RLE-serialized). */
+    superParents: string[];
+    /** Current MMR root (32-byte hex). */
+    mmrRoot: string;
+    /** Current MMR total (sum of all coins). */
+    mmrTotal: bigint;
+    /** Serialized Magic struct (hex). */
+    magic: string;
+    /** Candidate timestamp in epoch milliseconds. */
+    timeMilli: bigint;
+    /** Template identifier (e.g. tip txpowId) for staleness checks. */
+    templateId: string;
+    /** Epoch milliseconds when the template was captured. */
+    capturedAt: number;
+}
+/**
+ * Provider abstraction for the current Minima block-candidate template.
+ *
+ * The TxPoW package remains transport/node-client agnostic: callers inject a
+ * provider that fetches the current template from a Minima node, Axia, or a
+ * test fixture.
+ *
+ * `MinimaWorkRelay` is the preferred long-term relay boundary. The legacy
+ * `broadcastBlockCandidate` callback is retained as a compatibility/fallback
+ * path only — new consumers should use `relay` via `MinimaWorkRelay` and not
+ * build around the lossy `candidate: unknown` shape.
+ */
+export interface MinimaWorkTemplateProvider {
+    /** Fetch the current block-candidate template. */
+    getCurrentTemplate(): Promise<MinimaWorkTemplate>;
+    /** Optional: fetch the latest template for freshness checks. Falls back to getCurrentTemplate. */
+    getLatestTemplate?(): Promise<MinimaWorkTemplate>;
+    /** Optional: validate a template before mining against it. */
+    validateTemplate?(template: MinimaWorkTemplate): Promise<boolean>;
+    /**
+     * @deprecated Prefer `MinimaWorkRelay.submitBlock` (complete envelope).
+     * Retained for compatibility; only invoked for genuine Minima blocks
+     * (Super-0 … Super-31) when no relay is configured.
+     */
+    broadcastBlockCandidate?(candidate: MachineWorkAdmissionProof): Promise<void>;
+}
+/**
+ * Relay boundary for a complete Minima TxPoW envelope.
+ *
+ * Keeps Minima networking outside core mining logic. A future
+ * @totemsdk/minima-rpc or chain-provider adapter may implement this port.
+ * Duplicate relay attempts must be safe/idempotent at the integration boundary.
+ */
+export interface MinimaWorkRelay {
+    /** Submit a complete Minima TxPoW envelope for block relay. */
+    submitBlock(envelope: Uint8Array): Promise<void>;
+}
+/**
+ * The mined Machine Work Admission proof.
+ *
+ * Reuses the existing TxPoW types where possible:
+ *   - `txpow`          — serialized TxHeader bytes (SHA3-256 of these is `txpowId`)
+ *   - `txpowEnvelope`  — the COMPLETE Minima TxPoW wire format
+ *                        (header | 0x01 hasBody | body), required for network
+ *                        submission of a genuine Minima block
+ *   - `txpowId`        — SHA3-256(header)
+ *
+ * `qualifiesAsMinimaBlock`, `isBlock`, and `superLevel` are DERIVED METADATA
+ * recorded at mining time. They are never trusted by verification —
+ * verification recomputes all of them from the re-derived txpowId and the
+ * template's block difficulty.
+ */
+export interface MachineWorkAdmissionProof {
+    /** Protocol version. */
+    version: number;
+    /** Hex commitment placed in the TxPoW header's customHash field. */
+    actionCommitment: string;
+    /** The challenge this proof was mined against. */
+    challengeId: string;
+    /** The admission target (32-byte hex) the proof satisfies. */
+    admissionTarget: string;
+    /** Serialized TxHeader bytes (SHA3-256 of these is the TxPoW ID). */
+    txpow: string;
+    /** Complete Minima TxPoW envelope (header | 0x01 | body) for block relay. */
+    txpowEnvelope: string;
+    /** SHA3-256(header) — the canonical TxPoW ID. */
+    txpowId: string;
+    /** The winning nonce. */
+    nonce: string;
+    /** Epoch milliseconds when the proof was mined. */
+    minedAt: number;
+    /** Always true for a valid admission proof. */
+    qualifiesForAdmission: true;
+    /**
+     * DERIVED METADATA: true when the mined hash also beats the block difficulty
+     * encoded by the candidate template (i.e. a genuine Minima block). Never
+     * trusted by verification — it is recomputed from the re-derived txpowId.
+     */
+    qualifiesAsMinimaBlock: boolean;
+    /**
+     * DERIVED METADATA: Minima Super level (-1 = not a block, 0..31 = block
+     * strength). Never trusted by verification.
+     */
+    superLevel: number;
+    /** DERIVED METADATA: superLevel >= 0. Never trusted by verification. */
+    isBlock: boolean;
+    /** Template the proof was mined against (for staleness policy). */
+    template: MinimaWorkTemplate;
+}
+/**
+ * Result of verifying a Machine Work Admission proof.
+ *
+ * Three distinct claims, never to be confused:
+ *   A. `valid` — the hash satisfies the challenge target (admission proof).
+ *   B. `superLevel` / `isBlock` — the hash ALSO satisfies the block difficulty
+ *      encoded by the candidate template, yielding an exact Minima Super level.
+ *   C. `broadcastable` — the candidate still corresponds to sufficiently
+ *      current live Minima state AND can be submitted through the relay.
+ *
+ * A stale candidate may remain `valid = true` (and `superLevel >= 0`) while
+ * `broadcastable = false`.
+ *
+ * `superLevel === -1 ⇔ isBlock === false`, and
+ * `superLevel >= 0 ⇔ isBlock === true`. Verification recomputes these — it
+ * never trusts sender-supplied `isBlock`/`superLevel` metadata.
+ */
+export interface WorkAdmissionVerification {
+    /** Level A: the hash satisfies the challenge target. */
+    valid: boolean;
+    reason?: string;
+    /**
+     * Level B: exact Minima Super level of the candidate hash.
+     * -1 = not a Minima block; 0..31 = Super-0 … Super-31 block strength.
+     */
+    superLevel?: number;
+    /** Level B: superLevel >= 0 (a genuine Minima block). */
+    isBlock?: boolean;
+    /**
+     * Level C: isBlock AND the template is current AND a live template provider
+     * was supplied. Undefined in offline mode (no provider) — offline
+     * verification must NOT claim Minima block contribution.
+     */
+    broadcastable?: boolean;
+}

package/dist/cjs/admission/types.js

@@ -0,0 +1,24 @@
+"use strict";
+/**
+ * admission/types.ts — Machine Work Admission core types.
+ *
+ * Machine Work Admission lets a receiver require a sender to perform bounded
+ * computational work before scarce machine resources are allocated. The work
+ * searches the nonce space of a real current Minima block candidate, so the
+ * same hashes that admit the machine action also search for Minima L1 blocks.
+ *
+ * The three distinct concepts:
+ *   - WorkChallenge  — the receiver-controlled admission requirement
+ *   - MachineWorkAction — the domain-separated application action commitment
+ *   - MachineWorkAdmissionProof — the mined result
+ *
+ * The TxPoW package knows only "there is an application action represented by
+ * canonical bytes". It does NOT know about negotiation, compute, storage, or
+ * any particular Edge resource. Domain-specific packages supply the action.
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.MACHINE_WORK_DOMAIN = exports.MACHINE_WORK_ADMISSION_VERSION = void 0;
+/** Current Machine Work Admission protocol version. */
+exports.MACHINE_WORK_ADMISSION_VERSION = 1;
+/** Canonical protocol domain prefix for the commitment hash. */
+exports.MACHINE_WORK_DOMAIN = 'totem.machine-work-admission';

package/dist/cjs/admission/verify.d.ts

@@ -0,0 +1,50 @@
+/**
+ * admission/verify.ts — Machine Work Admission verification.
+ *
+ * Verification NEVER trusts sender-reported hardware speed or self-reported
+ * block metadata (`isBlock`, `superLevel`, `qualifiesAsMinimaBlock`,
+ * `broadcastable`). It recomputes the canonical action commitment, re-derives
+ * the TxPoW ID from the mined header, and checks `txpowId < challenge.target`.
+ * It also checks challenge validity (expiry, recipient, domain) and template
+ * freshness.
+ *
+ * Three distinct claims, never to be confused:
+ *   A. valid — the hash satisfies the challenge target.
+ *   B. superLevel/isBlock — the exact Minima Super level (-1 or 0..31)
+ *      computed from blockDifficulty / txpowId.
+ *   C. broadcastable — isBlock AND the template is current AND a live
+ *      template provider was supplied.
+ *
+ * A stale candidate may remain valid = true (and superLevel >= 0) while
+ * broadcastable = false. Offline verification (no provider) must NOT claim
+ * Minima block contribution — `broadcastable` is left undefined.
+ */
+import { type MachineWorkAction, type MachineWorkAdmissionProof, type MinimaWorkTemplate, type MinimaWorkTemplateProvider, type WorkChallenge, type WorkAdmissionVerification } from './types.js';
+export interface VerifyWorkAdmissionOptions {
+    /** Override the current time for deterministic testing. */
+    now?: number;
+    /** Staleness window (ms) within which a template is acceptable for admission. */
+    admissionWindowMs?: number;
+    /** The latest template, for broadcastability checks. */
+    latestTemplate?: MinimaWorkTemplate | null;
+}
+/**
+ * Verify a Machine Work Admission proof.
+ *
+ * The admission target is taken from the validated challenge — never from the
+ * proof. `proof.qualifiesAsMinimaBlock`, `proof.superLevel`, and
+ * `proof.isBlock` are treated as derived metadata and are NOT trusted; the
+ * Super level is recomputed from the re-derived txpowId and the template's
+ * block difficulty.
+ *
+ * @param action           The application action the proof claims to commit.
+ * @param challenge        The challenge the proof claims to satisfy.
+ * @param proof            The mined proof.
+ * @param templateProvider Optional live provider. When supplied, template
+ *                         freshness and broadcastability are checked and
+ *                         `broadcastable` is set. When omitted, verification
+ *                         runs in offline mode and does NOT claim Minima
+ *                         block contribution (`broadcastable` is undefined).
+ * @param options          Verification options.
+ */
+export declare function verifyWorkAdmission(action: MachineWorkAction, challenge: WorkChallenge, proof: MachineWorkAdmissionProof, templateProvider?: MinimaWorkTemplateProvider, options?: VerifyWorkAdmissionOptions): Promise<WorkAdmissionVerification>;

package/dist/cjs/admission/verify.js

@@ -0,0 +1,156 @@
+"use strict";
+/**
+ * admission/verify.ts — Machine Work Admission verification.
+ *
+ * Verification NEVER trusts sender-reported hardware speed or self-reported
+ * block metadata (`isBlock`, `superLevel`, `qualifiesAsMinimaBlock`,
+ * `broadcastable`). It recomputes the canonical action commitment, re-derives
+ * the TxPoW ID from the mined header, and checks `txpowId < challenge.target`.
+ * It also checks challenge validity (expiry, recipient, domain) and template
+ * freshness.
+ *
+ * Three distinct claims, never to be confused:
+ *   A. valid — the hash satisfies the challenge target.
+ *   B. superLevel/isBlock — the exact Minima Super level (-1 or 0..31)
+ *      computed from blockDifficulty / txpowId.
+ *   C. broadcastable — isBlock AND the template is current AND a live
+ *      template provider was supplied.
+ *
+ * A stale candidate may remain valid = true (and superLevel >= 0) while
+ * broadcastable = false. Offline verification (no provider) must NOT claim
+ * Minima block contribution — `broadcastable` is left undefined.
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.verifyWorkAdmission = verifyWorkAdmission;
+const core_1 = require("@totemsdk/core");
+const commitment_js_1 = require("./commitment.js");
+const challenge_js_1 = require("./challenge.js");
+const template_js_1 = require("./template.js");
+const types_js_1 = require("./types.js");
+function hexToBytes(hex) {
+    const h = hex.startsWith('0x') ? hex.slice(2) : hex;
+    const out = new Uint8Array(h.length / 2);
+    for (let i = 0; i < h.length; i += 2) {
+        out[i / 2] = parseInt(h.slice(i, i + 2), 16);
+    }
+    return out;
+}
+/** Big-endian 256-bit comparison: true if a < b. */
+function isLessThan(a, b) {
+    for (let i = 0; i < 32; i++) {
+        if (a[i] < b[i])
+            return true;
+        if (a[i] > b[i])
+            return false;
+    }
+    return false;
+}
+/**
+ * Verify a Machine Work Admission proof.
+ *
+ * The admission target is taken from the validated challenge — never from the
+ * proof. `proof.qualifiesAsMinimaBlock`, `proof.superLevel`, and
+ * `proof.isBlock` are treated as derived metadata and are NOT trusted; the
+ * Super level is recomputed from the re-derived txpowId and the template's
+ * block difficulty.
+ *
+ * @param action           The application action the proof claims to commit.
+ * @param challenge        The challenge the proof claims to satisfy.
+ * @param proof            The mined proof.
+ * @param templateProvider Optional live provider. When supplied, template
+ *                         freshness and broadcastability are checked and
+ *                         `broadcastable` is set. When omitted, verification
+ *                         runs in offline mode and does NOT claim Minima
+ *                         block contribution (`broadcastable` is undefined).
+ * @param options          Verification options.
+ */
+async function verifyWorkAdmission(action, challenge, proof, templateProvider, options) {
+    // 1. Structural checks
+    if (!proof || typeof proof !== 'object') {
+        return { valid: false, reason: 'proof is not an object' };
+    }
+    if (proof.version !== types_js_1.MACHINE_WORK_ADMISSION_VERSION) {
+        return { valid: false, reason: `unsupported proof version ${proof.version}` };
+    }
+    if (proof.challengeId !== challenge.challengeId) {
+        return { valid: false, reason: 'proof challengeId does not match challenge' };
+    }
+    if (proof.qualifiesForAdmission !== true) {
+        return { valid: false, reason: 'proof does not claim admission' };
+    }
+    // Target manipulation guard: the proof must have been mined against the
+    // challenge's exact target. A sender must not be able to mine against a
+    // trivially easy target and present it as satisfying a harder challenge.
+    if (proof.admissionTarget !== challenge.target) {
+        return { valid: false, reason: 'proof admissionTarget does not match challenge target' };
+    }
+    // 2. Challenge validity (expiry, recipient, domain)
+    const challengeCheck = (0, challenge_js_1.validateWorkChallenge)(challenge, {
+        recipient: action.recipient,
+        domain: action.domain,
+        now: options?.now,
+    });
+    if (!challengeCheck.valid) {
+        return { valid: false, reason: challengeCheck.reason };
+    }
+    // 3. Recompute the canonical commitment — must match the proof
+    const expectedCommitment = (0, commitment_js_1.computeActionCommitment)(action, challenge);
+    if (expectedCommitment !== proof.actionCommitment) {
+        return { valid: false, reason: 'action commitment mismatch' };
+    }
+    // 4. Re-derive the TxPoW ID from the mined header and check the target
+    const headerBytes = hexToBytes(proof.txpow);
+    const txpowId = (0, core_1.sha3_256)(headerBytes);
+    const txpowIdHex = toHex(txpowId);
+    if (txpowIdHex !== proof.txpowId) {
+        return { valid: false, reason: 'txpowId does not match mined header' };
+    }
+    const admissionTarget = hexToBytes(proof.admissionTarget);
+    if (!isLessThan(txpowId, admissionTarget)) {
+        return { valid: false, reason: 'txpowId does not beat admission target' };
+    }
+    // 5. Resolve a trusted template. Template fields — notably `blockDifficulty`,
+    //    which drives the Super-level claim — must come from a freshly-fetched
+    //    trusted template, never from the prover's copy (RFC-020 H4).
+    let trustedTemplate = options?.latestTemplate ?? null;
+    if (templateProvider) {
+        if (templateProvider.getLatestTemplate) {
+            trustedTemplate = await templateProvider.getLatestTemplate();
+        }
+        else if (options?.latestTemplate) {
+            trustedTemplate = options.latestTemplate;
+        }
+        else {
+            trustedTemplate = await templateProvider.getCurrentTemplate();
+        }
+    }
+    // 5a. Template freshness for admission (uses the proof's capture time).
+    const freshness = (0, template_js_1.templateFreshness)(proof.template, trustedTemplate, {
+        admissionWindowMs: options?.admissionWindowMs,
+        now: options?.now,
+    });
+    if (!freshness.admissionValid) {
+        return { valid: false, reason: 'proof template is stale for admission' };
+    }
+    // 5b. The prover's declared block difficulty must byte-match the trusted
+    //     template — otherwise a prover could set a max difficulty to fake a
+    //     Minima block.
+    if (trustedTemplate && trustedTemplate.blockDifficulty !== proof.template.blockDifficulty) {
+        return { valid: false, reason: 'proof template blockDifficulty does not match the trusted template' };
+    }
+    // 6. Level B: recompute the exact Minima Super level from the TRUSTED block
+    //    difficulty and the re-derived txpowId. Without a trusted template we
+    //    cannot claim Minima block contribution (isBlock = false).
+    const superLevel = trustedTemplate ? (0, template_js_1.computeSuperLevel)(txpowId, trustedTemplate.blockDifficulty) : -1;
+    const isBlock = trustedTemplate ? superLevel >= 0 : false;
+    // 7. Level C: broadcastability requires a live template provider, a current
+    //    template, and isBlock. Offline mode leaves broadcastable undefined.
+    let broadcastable;
+    if (templateProvider) {
+        broadcastable = isBlock && trustedTemplate !== null && freshness.broadcastable;
+    }
+    return { valid: true, superLevel, isBlock, broadcastable };
+}
+function toHex(bytes) {
+    return Array.from(bytes).map(b => b.toString(16).padStart(2, '0')).join('');
+}

package/dist/cjs/calibrate.d.ts

@@ -0,0 +1,35 @@
+/**
+ * calibrate.ts — Hash rate measurement and mining cost estimation.
+ *
+ * calibrateHashRate() measures how many SHA3-256 hashes/sec the current
+ * environment can produce. Used by the extension UX to show a warning
+ * before starting a mine on slow devices.
+ *
+ * estimateMiningCost() converts a difficulty target + hash rate into an
+ * expected time and confidence label.
+ */
+export interface MiningEstimate {
+    expectedHashes: bigint;
+    expectedSeconds: number;
+    confidence: 'fast' | 'normal' | 'slow';
+}
+/**
+ * Run 100K trial SHA3-256 hashes and return the measured hash rate (hashes/sec).
+ *
+ * Call once per session and cache the result — the cost is ~50ms on a
+ * typical desktop and ~300ms on a mid-range mobile.
+ */
+export declare function calibrateHashRate(): Promise<number>;
+/**
+ * Given a difficulty target and a measured hash rate, return the expected
+ * number of hashes, expected wall-clock time, and a confidence label.
+ *
+ * expectedHashes ≈ MAX_HASH / txnDifficulty
+ *   (geometric distribution: each hash has P(valid) = txnDifficulty / MAX_HASH)
+ *
+ * Confidence labels:
+ *   fast   < 2 s
+ *   normal 2 – 15 s
+ *   slow   > 15 s
+ */
+export declare function estimateMiningCost(txnDifficulty: Uint8Array, hashRatePerSec: number): MiningEstimate;

package/dist/cjs/calibrate.js

@@ -0,0 +1,68 @@
+"use strict";
+/**
+ * calibrate.ts — Hash rate measurement and mining cost estimation.
+ *
+ * calibrateHashRate() measures how many SHA3-256 hashes/sec the current
+ * environment can produce. Used by the extension UX to show a warning
+ * before starting a mine on slow devices.
+ *
+ * estimateMiningCost() converts a difficulty target + hash rate into an
+ * expected time and confidence label.
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.calibrateHashRate = calibrateHashRate;
+exports.estimateMiningCost = estimateMiningCost;
+const core_1 = require("@totemsdk/core");
+/**
+ * Run 100K trial SHA3-256 hashes and return the measured hash rate (hashes/sec).
+ *
+ * Call once per session and cache the result — the cost is ~50ms on a
+ * typical desktop and ~300ms on a mid-range mobile.
+ */
+async function calibrateHashRate() {
+    const TRIAL_COUNT = 100000;
+    const data = new Uint8Array(150).fill(0xab);
+    const start = typeof performance !== 'undefined'
+        ? performance.now()
+        : Date.now();
+    for (let i = 0; i < TRIAL_COUNT; i++) {
+        (0, core_1.sha3_256)(data);
+    }
+    const elapsed = (typeof performance !== 'undefined' ? performance.now() : Date.now()) - start;
+    return Math.round(TRIAL_COUNT / (elapsed / 1000));
+}
+/**
+ * Given a difficulty target and a measured hash rate, return the expected
+ * number of hashes, expected wall-clock time, and a confidence label.
+ *
+ * expectedHashes ≈ MAX_HASH / txnDifficulty
+ *   (geometric distribution: each hash has P(valid) = txnDifficulty / MAX_HASH)
+ *
+ * Confidence labels:
+ *   fast   < 2 s
+ *   normal 2 – 15 s
+ *   slow   > 15 s
+ */
+function estimateMiningCost(txnDifficulty, hashRatePerSec) {
+    if (hashRatePerSec <= 0) {
+        throw new Error('hashRatePerSec must be positive');
+    }
+    const diffBigInt = txnDifficulty.reduce((acc, b) => (acc << 8n) | BigInt(b), 0n);
+    if (diffBigInt === 0n) {
+        return { expectedHashes: 0n, expectedSeconds: 0, confidence: 'fast' };
+    }
+    const MAX_HASH_BIGINT = (2n ** 256n) - 1n;
+    const expectedHashes = MAX_HASH_BIGINT / diffBigInt;
+    const expectedSeconds = Number(expectedHashes) / hashRatePerSec;
+    let confidence;
+    if (expectedSeconds < 2) {
+        confidence = 'fast';
+    }
+    else if (expectedSeconds < 15) {
+        confidence = 'normal';
+    }
+    else {
+        confidence = 'slow';
+    }
+    return { expectedHashes, expectedSeconds, confidence };
+}

package/dist/cjs/constants.d.ts

@@ -0,0 +1,27 @@
+/**
+ * constants.ts — TxPoW-level constants matching Minima Java protocol values.
+ *
+ * ZERO_HASH:              32-byte all-zeros — used for MMRRoot, CustomHash, super-parent slot.
+ * MAX_HASH:               32-byte all-0xFF — default mBlockDifficulty / mTxnDifficulty for
+ *                         MEG-side-mined paths. Rejected by checkTxPoWSimple() at block level.
+ * TX_POW_MIN_DIFFICULTY:  Safe transaction difficulty target.
+ *                         ≈ MAX_HASH / 1,000,000 = Magic.getMinTxPowWork() floor.
+ *                         Local-mining paths MUST use a target ≤ this value.
+ * MAIN_NET_CHAIN_ID:      1-byte [0x00] — Java MiniData("0x00") = MAIN_NET chain ID.
+ * CASCADE_LEVELS:         32 — number of super-parent slots in a fresh TxPoW header.
+ */
+export declare const CASCADE_LEVELS = 32;
+export declare const ZERO_HASH: Uint8Array<ArrayBuffer>;
+export declare const MAX_HASH: Uint8Array;
+/**
+ * TX_POW_MIN_DIFFICULTY = floor((2^256 - 1) / 1_000_000)
+ *
+ * This is the hardcoded floor constant matching Magic.getMinTxPowWork().
+ * Any locally mined TxPoW must have mTxnDifficulty ≤ this value to pass
+ * TxPoWChecker.checkTxPoWSimple() at block inclusion.
+ *
+ * Computed: (2n**256n - 1n) / 1_000_000n
+ * Hex: 0x000010C6F7A0B5ED8538AACDD46595F0C7AC73E0E9DBF12F70000000000000000
+ */
+export declare const TX_POW_MIN_DIFFICULTY: Uint8Array;
+export declare const MAIN_NET_CHAIN_ID: Uint8Array<ArrayBuffer>;

package/dist/cjs/constants.js

@@ -0,0 +1,47 @@
+"use strict";
+/**
+ * constants.ts — TxPoW-level constants matching Minima Java protocol values.
+ *
+ * ZERO_HASH:              32-byte all-zeros — used for MMRRoot, CustomHash, super-parent slot.
+ * MAX_HASH:               32-byte all-0xFF — default mBlockDifficulty / mTxnDifficulty for
+ *                         MEG-side-mined paths. Rejected by checkTxPoWSimple() at block level.
+ * TX_POW_MIN_DIFFICULTY:  Safe transaction difficulty target.
+ *                         ≈ MAX_HASH / 1,000,000 = Magic.getMinTxPowWork() floor.
+ *                         Local-mining paths MUST use a target ≤ this value.
+ * MAIN_NET_CHAIN_ID:      1-byte [0x00] — Java MiniData("0x00") = MAIN_NET chain ID.
+ * CASCADE_LEVELS:         32 — number of super-parent slots in a fresh TxPoW header.
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.MAIN_NET_CHAIN_ID = exports.TX_POW_MIN_DIFFICULTY = exports.MAX_HASH = exports.ZERO_HASH = exports.CASCADE_LEVELS = void 0;
+exports.CASCADE_LEVELS = 32;
+exports.ZERO_HASH = new Uint8Array(32);
+exports.MAX_HASH = (() => {
+    const b = new Uint8Array(32);
+    b.fill(0xff);
+    return b;
+})();
+/**
+ * TX_POW_MIN_DIFFICULTY = floor((2^256 - 1) / 1_000_000)
+ *
+ * This is the hardcoded floor constant matching Magic.getMinTxPowWork().
+ * Any locally mined TxPoW must have mTxnDifficulty ≤ this value to pass
+ * TxPoWChecker.checkTxPoWSimple() at block inclusion.
+ *
+ * Computed: (2n**256n - 1n) / 1_000_000n
+ * Hex: 0x000010C6F7A0B5ED8538AACDD46595F0C7AC73E0E9DBF12F70000000000000000
+ */
+exports.TX_POW_MIN_DIFFICULTY = (() => {
+    const maxHashBigInt = (2n ** 256n) - 1n;
+    const minDiffBigInt = maxHashBigInt / 1000000n;
+    let hex = minDiffBigInt.toString(16);
+    if (hex.length % 2 !== 0)
+        hex = '0' + hex;
+    while (hex.length < 64)
+        hex = '00' + hex;
+    const bytes = new Uint8Array(32);
+    for (let i = 0; i < 32; i++) {
+        bytes[i] = parseInt(hex.slice(i * 2, i * 2 + 2), 16);
+    }
+    return bytes;
+})();
+exports.MAIN_NET_CHAIN_ID = new Uint8Array([0x00]);