use risc0_zkvm::{DeserializeOwned, guest::env, serde::Deserializer}; use serde::{Deserialize, Serialize}; use crate::account::{Account, AccountWithMetadata}; pub type ProgramId = [u32; 8]; pub type InstructionData = Vec; pub const DEFAULT_PROGRAM_ID: ProgramId = [0; 8]; pub struct ProgramInput { pub pre_states: Vec, pub instruction: T, } #[derive(Serialize, Deserialize, Clone)] #[cfg_attr(any(feature = "host", test), derive(Debug, PartialEq, Eq))] pub struct ChainedCall { pub program_id: ProgramId, pub instruction_data: InstructionData, pub pre_states: Vec, } #[derive(Serialize, Deserialize, Clone)] #[cfg_attr(any(feature = "host", test), derive(Debug, PartialEq, Eq))] pub struct ProgramOutput { pub pre_states: Vec, pub post_states: Vec, pub chained_calls: Vec, } pub fn read_nssa_inputs() -> ProgramInput { let pre_states: Vec = env::read(); let instruction_words: InstructionData = env::read(); let instruction = T::deserialize(&mut Deserializer::new(instruction_words.as_ref())).unwrap(); ProgramInput { pre_states, instruction, } } pub fn write_nssa_outputs(pre_states: Vec, post_states: Vec) { let output = ProgramOutput { pre_states, post_states, chained_calls: Vec::new(), }; env::commit(&output); } pub fn write_nssa_outputs_with_chained_call( pre_states: Vec, post_states: Vec, chained_calls: Vec, ) { let output = ProgramOutput { pre_states, post_states, chained_calls, }; env::commit(&output); } /// Validates well-behaved program execution /// /// # Parameters /// - `pre_states`: The list of input accounts, each annotated with authorization metadata. /// - `post_states`: The list of resulting accounts after executing the program logic. /// - `executing_program_id`: The identifier of the program that was executed. pub fn validate_execution( pre_states: &[AccountWithMetadata], post_states: &[Account], executing_program_id: ProgramId, ) -> bool { // 1. Lengths must match if pre_states.len() != post_states.len() { return false; } for (pre, post) in pre_states.iter().zip(post_states) { // 2. Nonce must remain unchanged if pre.account.nonce != post.nonce { return false; } // 3. Program ownership changes are not allowed if pre.account.program_owner != post.program_owner { return false; } let account_program_owner = pre.account.program_owner; // 4. Decreasing balance only allowed if owned by executing program if post.balance < pre.account.balance && account_program_owner != executing_program_id { return false; } // 5. Data changes only allowed if owned by executing program or if account pre state has // default values if pre.account.data != post.data && pre.account != Account::default() && account_program_owner != executing_program_id { return false; } // 6. If a post state has default program owner, the pre state must have been a default // account if post.program_owner == DEFAULT_PROGRAM_ID && pre.account != Account::default() { return false; } } // 7. Total balance is preserved let total_balance_pre_states: u128 = pre_states.iter().map(|pre| pre.account.balance).sum(); let total_balance_post_states: u128 = post_states.iter().map(|post| post.balance).sum(); if total_balance_pre_states != total_balance_post_states { return false; } true }