miden-usdcx 0.17.1

//! `XReserveBurnNote`: the Circle-facing public burn-event note.
//!
//! A withdrawing xUSDC holder creates this note carrying the burned xUSDC; Circle's off-chain
//! withdrawal attester discovers it by its FIXED full-32-bit tag (`SyncNotes` exact-match) and
//! reads its withdrawal-payload attachment `(destDomain, destRecipient)` to release
//! USDC on the source chain.
//!
//! It is built as a standalone note factory. What it does reuse is the standard burn consume
//! script, so consuming one of these notes runs `faucet::receive_and_burn` and the faucet's active
//! burn policy exactly as any other burn would. The stock script reserves all eight `NoteStorage`
//! items for the asset and asserts the stored asset equals the carried one, so this note keeps the
//! stock 8-felt asset storage and carries its withdrawal payload in a scheme-tagged note
//! ATTACHMENT instead. The note is forced public, carries the fixed xUSDC burn tag, and packs the
//! payload with the shared codec so the listener decodes precisely what was encoded.
//!
//! The burn policy requires exactly two attachments: a routing target to the faucet and a
//! withdrawal payload of three words. It checks the withdrawal content against the commitment in
//! the note and accepts only destinations the off-chain withdrawal attester can pay out.

use miden_protocol::account::AccountId;
use miden_protocol::asset::{Asset, AssetAmount, FungibleAsset};
use miden_protocol::crypto::rand::FeltRng;
use miden_protocol::errors::NoteError;
use miden_protocol::note::{
    Note,
    NoteAssets,
    NoteAttachment,
    NoteAttachmentScheme,
    NoteAttachments,
    NoteRecipient,
    NoteScript,
    NoteScriptRoot,
    NoteStorage,
    NoteTag,
    NoteType,
    PartialNoteMetadata,
};
use miden_standards::note::{BurnNote, StandardNoteAttachment};

use crate::xreserve::encoding::{EncodingError, XReserveBurnItems};

/// The fixed tag every xUSDC burn note carries — ASCII `"BURN"`.
///
/// The off-chain listener discovers burn notes by asking the node for this exact 32-bit value, so
/// it has to be a constant shared by every burn note rather than anything per-account. Its low 18
/// bits are non-zero, which means it can never be mistaken for an account-target tag: those are
/// built with the low 18 bits zeroed. It identifies a use case, not a destination.
///
/// The specific value is provisional and awaits Circle's confirmation — it is not a value Circle
/// has assigned.
pub const FIXED_XUSDC_BURN_TAG: u32 = 0x4255_524e;

/// The withdrawal-payload attachment scheme, see [`StandardNoteAttachment::UsdcxBurn`].
pub const XRESERVE_BURN_WITHDRAWAL_ATTACHMENT_SCHEME: u16 =
    StandardNoteAttachment::UsdcxBurn.attachment_scheme().as_u16();

/// The withdrawal payload a burn note carries — the [`XReserveBurnItems`] the off-chain attester
/// decodes.
///
/// This is the withdrawal attachment in domain form. It converts into the
/// [`NoteAttachment`] the note id commits to, the way [`XUsdcDeposit`] converts into the mint
/// note's transport one.
///
/// [`XUsdcDeposit`]: crate::note::xreserve_mint::XUsdcDeposit
pub struct XUsdcBurnAttachment {
    items: XReserveBurnItems,
}

impl XUsdcBurnAttachment {
    /// Word count of the withdrawal attachment.
    pub const NUM_WORDS: usize = 3;

    /// Wraps the withdrawal payload the burn note carries.
    pub fn new(items: XReserveBurnItems) -> Self {
        Self { items }
    }

    /// The carried withdrawal payload.
    pub fn items(&self) -> &XReserveBurnItems {
        &self.items
    }

    /// Consumes the attachment, returning the carried withdrawal payload.
    pub fn into_items(self) -> XReserveBurnItems {
        self.items
    }
}

impl From<&XUsdcBurnAttachment> for NoteAttachment {
    /// Builds the withdrawal attachment from the payload words.
    ///
    /// The encoding is the shared codec the off-chain attester decodes with, so the write and the
    /// read side cannot drift apart.
    fn from(attachment: &XUsdcBurnAttachment) -> Self {
        NoteAttachment::with_words(
            NoteAttachmentScheme::new(XRESERVE_BURN_WITHDRAWAL_ATTACHMENT_SCHEME)
                .expect("the withdrawal scheme is neither reserved nor past the protocol maximum"),
            attachment.items.encode().to_vec(),
        )
        // the payload has `NUM_WORDS` words, which the assertion below keeps within the cap
        .expect("the withdrawal payload is within the per-attachment word cap")
    }
}

impl TryFrom<&NoteAttachment> for XUsdcBurnAttachment {
    type Error = EncodingError;

    /// Decodes the withdrawal payload.
    fn try_from(attachment: &NoteAttachment) -> Result<Self, Self::Error> {
        if attachment.attachment_scheme().as_u16() != XRESERVE_BURN_WITHDRAWAL_ATTACHMENT_SCHEME {
            return Err(EncodingError::BurnItemsMalformed);
        }

        let items = XReserveBurnItems::decode(attachment.content().as_words())?;
        Ok(Self { items })
    }
}

// the fixed word count is what makes the conversion above infallible.
const _: () = assert!(
    XUsdcBurnAttachment::NUM_WORDS <= NoteAttachment::MAX_NUM_WORDS as usize,
    "the withdrawal payload must fit in one attachment"
);

/// The public burn-event note. A standalone unit-struct note factory.
pub struct XReserveBurnNote;

impl XReserveBurnNote {
    /// Returns the (reused) stock burn note consume script — targets `faucet::receive_and_burn`.
    pub fn script() -> NoteScript {
        BurnNote::script()
    }

    /// Returns the (reused) stock burn note script root.
    pub fn script_root() -> NoteScriptRoot {
        BurnNote::script_root()
    }

    /// Convenience constructor over the [`XReserveBurnItems`] payload (a thin delegator to the
    /// [`builder`](Self::builder)); retained because the frozen conformance suites pin this
    /// signature.
    pub fn create<R: FeltRng>(
        sender: AccountId,
        faucet_id: AccountId,
        amount: AssetAmount,
        items: XReserveBurnItems,
        rng: &mut R,
    ) -> Result<Note, NoteError> {
        Self::builder()
            .sender(sender)
            .faucet_id(faucet_id)
            .amount(amount)
            .items(items)
            .rng(rng)
            .build()
    }
}

#[bon::bon]
impl XReserveBurnNote {
    /// Builds an `XReserveBurnNote` via a `bon` builder
    /// (`XReserveBurnNote::builder().sender(..).faucet_id(..).amount(..).items(..).rng(..).
    /// build()`): `NoteType::Public`, the fixed xUSDC burn tag, `metadata.sender = sender` (the
    /// depositor), `NoteAssets` = the burned xUSDC `FungibleAsset` (`amount` issued by
    /// `faucet_id`), and `NoteStorage.items` = the stock 8-felt asset layout the stock burn
    /// script asserts against. The `(destDomain, destRecipient)` withdrawal payload rides in a
    /// scheme-tagged [`XUsdcBurnAttachment`]. The amount is supplied separately for the burned
    /// asset.
    #[builder]
    pub fn new<R: FeltRng>(
        sender: AccountId,
        faucet_id: AccountId,
        amount: AssetAmount,
        items: XReserveBurnItems,
        rng: &mut R,
    ) -> Result<Note, NoteError> {
        let serial_num = rng.draw_word();

        let asset = FungibleAsset::new(faucet_id, u64::from(amount))
            .map_err(|err| NoteError::other_with_source("invalid burned xUSDC asset", err))?;

        // NoteStorage carries the STOCK 8-felt asset layout (ASSET_ID(4) + ASSET_VALUE(4)); the
        // stock consume script requires exactly that and asserts the stored asset equals
        // the carried one. The withdrawal payload no longer lives here — it rides in the
        // attachment below.
        let storage = NoteStorage::new(Asset::from(asset).as_elements().to_vec())?;
        let recipient = NoteRecipient::new(serial_num, BurnNote::script(), storage);

        // the burn note is always Public — there is no note_type parameter.
        let metadata = PartialNoteMetadata::new(sender, NoteType::Public)
            .with_tag(NoteTag::new(FIXED_XUSDC_BURN_TAG));

        let vault = NoteAssets::new(vec![asset.into()])?;

        // two attachments: the scheme-2 NetworkAccountTarget routing bind (routing only, as any
        // faucet-targeted note carries), and the scheme-tagged withdrawal payload the off-chain
        // attester decodes. The stock consume script ignores attachments, so the burn stays gated
        // by receive_and_burn and the burn policy.
        let attachments = NoteAttachments::new(vec![
            super::network_routing_attachment(faucet_id)?,
            NoteAttachment::from(&XUsdcBurnAttachment::new(items)),
        ])?;

        Ok(Note::with_attachments(vault, metadata, recipient, attachments))
    }
}