zk-credits 0.2.2 → 0.2.3

package/dist/setup-config.js

@@ -2,6 +2,7 @@ import { randomUUID } from 'node:crypto';
 import { chmod, lstat, mkdir, open, readFile, readdir, realpath, rename, rm, } from 'node:fs/promises';
 import { dirname, join, resolve } from 'node:path';
 import { resolvePinnedArtifactBundle } from './artifact-bundle.js';
+import { acquirePinnedArtifactBundle } from './artifact-release.js';
 const WITNESS_FILENAMES = new Set([
     'base-tree.json',
     'base-sepolia-tree.json',
@@ -137,26 +138,55 @@ async function resolveArtifactDirectory(options, saved) {
         throw new Error('The configured proving bundle at ' + explicit + ' failed its pinned checks.' + reason);
     }
     if (valid.size === 0) {
-        throw new Error('Could not find a valid pinned proving bundle. Extract the bundle from your pilot contact into ~/.zk-credits/artifacts/base-sepolia or ~/Downloads, or set ZK_CREDITS_ARTIFACT_DIR.');
+        if (options.manifest.release && !explicit) {
+            const targetDirectory = resolve(options.stateDirectory, 'artifacts', 'base-sepolia');
+            const acquire = options.acquireArtifactBundle ?? (async (target, manifest) => {
+                await acquirePinnedArtifactBundle({ manifest, targetDirectory: target });
+            });
+            await acquire(targetDirectory, options.manifest);
+            const bundle = await resolvePinnedArtifactBundle({ artifactDirectory: targetDirectory, manifest: options.manifest });
+            return resolve(bundle.directory);
+        }
+        throw new Error('Could not find a valid pinned proving bundle. Set ZK_CREDITS_ARTIFACT_DIR to a verified local bundle.');
     }
     const selected = await chooseOne('proving bundle', [...valid.values()], options.chooseCandidate);
     return resolve(selected);
 }
-function eventSourceFromEnvironment(environment) {
+function eventSourceFromEnvironment(environment, manifest) {
     const rpcUrl = environment.BASE_RPC_URL?.trim();
-    const contractAddress = environment.BASE_PRIVATE_CREDIT_BOND_ADDRESS?.trim();
+    const configuredContract = environment.BASE_PRIVATE_CREDIT_BOND_ADDRESS?.trim();
+    const configuredBlock = optionalEnvironmentInteger(environment, 'BASE_DEPLOYMENT_BLOCK');
+    const deployment = manifest.deployment;
+    if (deployment) {
+        if (configuredContract && configuredContract.toLowerCase() !== deployment.bondAddress.toLowerCase()) {
+            throw new Error('BASE_PRIVATE_CREDIT_BOND_ADDRESS does not match the pinned Base Sepolia V2 bond');
+        }
+        if (configuredBlock && configuredBlock !== deployment.deploymentBlock) {
+            throw new Error('BASE_DEPLOYMENT_BLOCK does not match the pinned Base Sepolia V2 deployment block');
+        }
+    }
+    const contractAddress = deployment?.bondAddress ?? configuredContract;
     if (!rpcUrl || !contractAddress)
         return undefined;
-    const deploymentBlock = optionalEnvironmentInteger(environment, 'BASE_DEPLOYMENT_BLOCK');
     const confirmations = optionalEnvironmentInteger(environment, 'BASE_CONFIRMATIONS');
     return {
         kind: 'base-events',
         rpcUrl,
         contractAddress,
-        ...(deploymentBlock === undefined ? {} : { deploymentBlock }),
+        ...(deployment ? { deploymentBlock: deployment.deploymentBlock } : configuredBlock === undefined ? {} : { deploymentBlock: configuredBlock }),
         ...(confirmations === undefined ? {} : { confirmations }),
     };
 }
+function assertPinnedEventSource(source, manifest) {
+    const deployment = manifest.deployment;
+    if (!deployment)
+        return;
+    if (source.kind !== 'base-events'
+        || source.contractAddress.toLowerCase() !== deployment.bondAddress.toLowerCase()
+        || source.deploymentBlock !== deployment.deploymentBlock) {
+        throw new Error('Saved Base event witness source does not match the pinned Base Sepolia V2 deployment');
+    }
+}
 function witnessCandidates(homeDirectory, stateDirectory) {
     const roots = [
         join(stateDirectory, 'witnesses'),
@@ -170,6 +200,9 @@ async function resolveWitnessSource(options, saved) {
     const environment = options.environment;
     const explicitPath = environment.ZK_CREDITS_WITNESS_PATH?.trim();
     if (explicitPath) {
+        if (options.manifest.deployment) {
+            throw new Error('Base Sepolia V2 setup requires a witness synchronized from the pinned public Base events');
+        }
         const source = {
             kind: 'file',
             path: resolve(options.workingDirectory ?? process.cwd(), explicitPath),
@@ -183,7 +216,7 @@ async function resolveWitnessSource(options, saved) {
             throw new Error('The configured Base witness at ' + explicitPath + ' failed validation.' + reason);
         }
     }
-    const environmentSource = eventSourceFromEnvironment(environment);
+    const environmentSource = eventSourceFromEnvironment(environment, options.manifest);
     if (environmentSource) {
         try {
             await options.validateWitness(environmentSource);
@@ -196,6 +229,7 @@ async function resolveWitnessSource(options, saved) {
     }
     if (saved?.witness.kind === 'base-events') {
         try {
+            assertPinnedEventSource(saved.witness, options.manifest);
             await options.validateWitness(saved.witness);
             return saved.witness;
         }
@@ -204,6 +238,9 @@ async function resolveWitnessSource(options, saved) {
             throw new Error('Saved Base event witness source failed validation.' + reason);
         }
     }
+    if (options.manifest.deployment) {
+        throw new Error('Base Sepolia V2 setup requires BASE_RPC_URL to sync the pinned V2 bond from its deployment block');
+    }
     if (saved?.witness.kind === 'file') {
         try {
             await options.validateWitness(saved.witness);