Type Members

1.  sealed trait ConfirmationPolicy extends Product with Serializable with PrettyPrinting
2.  case class ContractMetadata extends HasVersionedWrapper[VersionedMessage[ContractMetadata]] with PrettyPrinting with Product with Serializable

   Metadata for a contract.

   Metadata for a contract.

   Exceptions thrown

   ContractMetadata.InvalidContractMetadata if some maintainers are not signatories or some signatories are not stakeholders.

3.  final case class ContractSalt(unwrap: Salt) extends AnyVal with Product with Serializable

   A blinded cryptographic hash of the information that ensures uniqueness of Unicums in Canton.

   A blinded cryptographic hash of the information that ensures uniqueness of Unicums in Canton. The hash can be used to unblind the Unicum's cryptographic commitment to the contract data.

   See also

   UnicumGenerator for the construction details

4.  case class CreatedContract extends NoCopy with PrettyPrinting with Product with Serializable

5.  case class CreatedContractInView(contract: SerializableContract, consumedInView: Boolean, rolledBack: Boolean) extends Product with Serializable
   consumedInView

   Whether the contract is consumed in the view. com.digitalasset.canton.protocol.WellFormedTransaction checks that a created contract can only be used in the same or deeper rollback scopes as the create, so if rolledBack is true then consumedInView is false.

   rolledBack

   Whether the contract creation has a different rollback scope than the view.

6.  sealed trait DomainParametersLookup[+P] extends AnyRef

   This class allows to query domain parameters, regardless of whether they are static or dynamic.

   This class allows to query domain parameters, regardless of whether they are static or dynamic. The returned value can be a single parameter (see reconciliation interval example below) or a set of values.

   Type parameter P is the type of the returned value.

7.  sealed abstract case class DynamicDomainParameters extends HasProtocolVersionedWrapper[DynamicDomainParameters] with PrettyPrinting with Product with Serializable
   Exceptions thrown

   DynamicDomainParameters$.InvalidDomainParameters if mediatorDeduplicationTimeout is less than twice of ledgerTimeRecordTimeTolerance.

8.  class DynamicDomainParametersLookup[P] extends DomainParametersLookup[P] with NamedLogging
9.  case class InputContract(contract: SerializableContract, consumed: Boolean) extends PrettyPrinting with Product with Serializable
   consumed

   Whether this contract is consumed in the core of the view this InputContract belongs to.

   See also

   com.digitalasset.canton.data.ViewParticipantData.coreInputs

10.  type LedgerTransactionNodeStatistics = TransactionNodeStatistics
11.  type LfActionNode = Action

    Shorthand for Daml-LF "action" nodes (all node types besides "rollback" nodes)

12.  type LfChoiceName = Name
13.  type LfCommittedTransaction = T
14.  type LfContractId = daml.lf.value.Value.ContractId

    Shorthand for Daml-LF contract ids

15.  type LfContractInst = Versioned[ContractInstance]

    Shorthand for contract instances.

16.  type LfGlobalKey = GlobalKey

    Shorthand for global contract keys (with template_id).

17.  type LfGlobalKeyWithMaintainers = GlobalKeyWithMaintainers
18.  type LfHash = Hash
19.  type LfKeyWithMaintainers = KeyWithMaintainers

    Shorthand for contract keys ("local" within an lf transaction node).

20.  type LfLeafOnlyActionNode = LeafOnlyAction

    Shorthand for leaf only action nodes.

21.  type LfNode = Node

    Shorthand for Daml-LF nodes.

    Shorthand for Daml-LF nodes. Nodes include NodeIds of their children. Children need to be looked up in the underlying transaction.

22.  type LfNodeCreate = Create

    Shorthand for create nodes.

23.  type LfNodeExercises = Exercise

    Shorthand for exercise nodes.

    Shorthand for exercise nodes. Nodes include NodeIds of their children. Children need to be looked up in the underlying transaction.

24.  type LfNodeFetch = Fetch

    Shorthand for fetch nodes.

25.  type LfNodeId = NodeId
26.  type LfNodeLookupByKey = LookupByKey

    Shorthand for lookup by key nodes.

27.  type LfNodeRollback = Rollback

    Shorthand for rollback nodes.

28.  type LfSubmittedTransaction = T
29.  type LfTemplateId = Identifier
30.  type LfTransaction = Transaction

    Shorthand for Daml-LF transaction wrapped in versioned transaction in turn wrapped in committed or submitted transaction

31.  type LfTransactionVersion = TransactionVersion
32.  type LfVersionedTransaction = VersionedTransaction
33.  case class MalformedContractId(id: String, message: String) extends Product with Serializable
34.  case class PackageDescription(packageId: LfPackageId, sourceDescription: String256M) extends Product with Serializable
    packageId

    the unique identifier for the package

    sourceDescription

    an informal human readable description of what the package contains

35.  trait PackageInfoService extends AnyRef
36.  trait Phase37Processor[RequestBatch] extends AnyRef
37.  final case class RequestAndRootHashMessage[RequestEnvelope](requestEnvelopes: NonEmpty[Seq[RequestEnvelope]], rootHashMessage: RootHashMessage[SerializedRootHashMessagePayload], mediatorId: MediatorId) extends Product with Serializable

    Request messages, along with the root hash message and the mediator ID that received the root hash message

38.  case class RequestId(ts: CantonTimestamp) extends PrettyPrinting with Product with Serializable

    A confirmation request is identified by the sequencer timestamp.

39.  type RequestProcessor[VT <: ViewType] = Phase37Processor[RequestAndRootHashMessage[OpenEnvelope[EncryptedViewMessage[VT]]]]
40.  case class ResolvedKey(key: LfGlobalKey, resolution: SerializableKeyResolution) extends Product with Serializable
41.  case class RollbackContext extends NoCopy with PrettyPrinting with Product with Serializable

    RollbackContext tracks the location of lf transaction nodes or canton participant views within a hierarchy of LfNodeRollback suitable for maintaining the local position within the hierarchy of rollback nodes when iterating over a transaction.

42.  case class RootHash(hash: Hash) extends PrettyPrinting with HasCryptographicEvidence with Product with Serializable

    The root hash of a Merkle tree used as an identifier for requests.

    The root hash of a Merkle tree used as an identifier for requests.

    Extends com.digitalasset.canton.serialization.HasCryptographicEvidence so that RootHash's serialization can be used to compute the hash of an inner Merkle node from its children using RootHash.getCryptographicEvidence. Serialization to Protobuf fields can be done with RootHash.toProtoPrimitive

    Here is how we use it: (1) Every participant gets a “partially blinded” Merkle tree, defining the locations of the views they are privy to. (2) That Merkle tree has a root. That root has a hash. That’s the root hash. (3) The mediator receives a fully blinded Merkle tree, with the same hash. (4) The submitting participant will send for each receiving participant an additional “root hash message” in the same batch. That message will contain the same hash, with recipients (participant, mediator). (5) The mediator will check that all participants mentioned in the tree received a root hash message and that all hashes are equal. (6) Once the mediator sends out the verdict, the verdict will include the tree structure and thus the root hash. Hence, the participant will now have certainty about the mediator having checked all root hash messages and having observed the same tree structure.

43.  case class SerializableContract(contractId: LfContractId, rawContractInstance: SerializableRawContractInstance, metadata: ContractMetadata, ledgerCreateTime: CantonTimestamp) extends HasVersionedWrapper[VersionedMessage[SerializableContract]] with PrettyPrinting with Product with Serializable

    Represents a serializable contract.

    Represents a serializable contract.

    contractId

    The ID of the contract.

    rawContractInstance

    The raw instance of the contract.

    metadata

    The metadata with stakeholders and signatories; can be computed from contract instance

    ledgerCreateTime

    The ledger time of the transaction creating the contract

44.  case class SerializableContractWithWitnesses(contract: SerializableContract, witnesses: Set[PartyId]) extends Product with Serializable

    Serializable contract with witnesses for contract add/import used in admin repairs.

    Serializable contract with witnesses for contract add/import used in admin repairs.

    contract

    serializable contract

    witnesses

    optional witnesses that observe the creation of the contract

45.  case class SerializableDeduplicationPeriod(deduplicationPeriod: DeduplicationPeriod) extends Product with Serializable
46.  case class SerializableRawContractInstance extends MemoizedEvidenceWithFailure[EncodeError] with Product with Serializable

    Represents a serializable contract instance and memoizes the serialization.

47.  sealed abstract case class StaticDomainParameters extends HasProtocolVersionedWrapper[StaticDomainParameters] with Product with Serializable
48.  class StaticDomainParametersLookup[P] extends DomainParametersLookup[P]
49.  case class StoredParties(parties: SortedSet[LfPartyId]) extends HasVersionedWrapper[VersionedMessage[StoredParties]] with Product with Serializable
50.  case class TransactionId(hash: Hash) extends HasCryptographicEvidence with Product with Serializable

    A hash-based transaction id.

51.  case class TransactionMetadata(ledgerTime: CantonTimestamp, submissionTime: CantonTimestamp, seeds: Map[LfNodeId, LfHash]) extends Product with Serializable

    Collects the metadata of a LF transaction to the extent that is needed in Canton

    Collects the metadata of a LF transaction to the extent that is needed in Canton

    ledgerTime

    The ledger time of the transaction

    submissionTime

    The submission time of the transaction

    seeds

    The node seeds by node ID

52.  case class TransferId(sourceDomain: DomainId, requestTimestamp: CantonTimestamp) extends PrettyPrinting with Product with Serializable

    A transfer is identified by the source domain and the sequencer timestamp on the transfer-out request.

53.  final case class Unicum(unwrap: Hash) extends AnyVal with Product with Serializable

    A hash-based identifier for contracts.

    A hash-based identifier for contracts. Must be paired with a discriminator to obtain a complete contract ID.

54.  class UnicumGenerator extends AnyRef

    Generates Unicums for contract IDs such that the Unicum is a cryptographic commitment to the following:

    Generates Unicums for contract IDs such that the Unicum is a cryptographic commitment to the following:

    • The com.digitalasset.canton.topology.DomainId of the transaction that creates the contract
    • The com.digitalasset.canton.topology.MediatorId of the mediator that handles the transaction request
    • The UUID of the transaction that creates the contract
    • The com.digitalasset.canton.data.ViewPosition of the view whose core creates the contract
    • The index of the create node within the view
    • The ledger time when the contract was created
    • The template ID and the template arguments of the contract, including the agreement text

    The commitment is implemented as a blinded hash with the view action salt as the blinding factor.

    The above data is split into two groups:

    • com.digitalasset.canton.topology.DomainId, com.digitalasset.canton.topology.MediatorId, the UUID, the com.digitalasset.canton.data.ViewPosition, and the index contribute to the blinded hash of the ContractSalt.
    • The ledger time and the template arguments

    The Unicum is then the cryptographic hash of the ContractSalt and the second group.

    The ContractSalt contains all the information that ensures uniqueness of contract IDs in Canton. The second group contains the information that is relevant for using the contract in transactions. The commitment to the information in the second group can be opened by revealing the ContractSalt. Since the ContractSalt is a blinded hash, such an opening does not reveal information about the data in the first group.

    Properties

    • If a transaction is added to the virtual domain ledger for a given domain, then the [[Unicum]] is globally unique unless a hash collision occurs.
      Contracts with the same Unicum must run over the same domain, have the same transaction UUID, and are handled by the same mediator. The definition of the virtual domain ledger ensures that transaction UUIDs are unique within the com.daml.api.util.LedgerEffectiveTimeTolerance and within the mediator handling the request, and that the sequencing time deviates from the ledger time by at most this tolerance. So two contracts with the same Unicum must be generated by the same transaction. However, the com.digitalasset.canton.data.ViewPosition and the create index uniquely identify the node in the transaction that creates the contract.

    We include both the com.digitalasset.canton.topology.DomainId and the com.digitalasset.canton.topology.MediatorId in the ContractSalt because we cannot exclude that mediators on different domains happen to have the same identifier and there may be mupltiple mediators on a domain.

    • If the submitter is honest and chooses a random transaction seed, the [[Unicum]] does not leak information about template arguments.
      The transaction seed's randomness propagates to the action seed through the seed derivation scheme. Since the honest submitter does not leak the transaction seed and shows the action seed only to the witnesses of the view, the ContractSalt looks random to non-witnesses of the view. Accordingly, the ContractSalt blinds the template arguments.
    • The [[Unicum]] authenticates the contract details (ledger time and template arguments) if the hash function is preimage resistant.
      By checking the hash of the ContractSalt and the contract details against the Unicum, everyone can verify that they fit together. As the hash function is preimage resistant, it is therefore computationally infeasible for a participant to find a different ContractSalt such that different contract details lead to the same hash.
    • Participants learning about the contract only through divulgence or disclosure do not learn in which transaction the contract was created unless the submitter or witnesses of the creation leak this information.
      By the honesty assumption, the action seed is a random value to those participants. Accordingly, since the ContractSalt contains all the information that ties the contract to a particular transaction, the participants cannot say which transaction with the same ledger time created the contract.
    • The [[Unicum]] does not leak the contract details when a contract ID is shown to a third party if the submitter and all witnesses and divulgees are honest.
      By the honesty assumption, the action seed is a random value to the third party, and so is the ContractSalt. This entropy hides the contract details to the third party.
55.  case class ViewHash(hash: Hash) extends PrettyPrinting with Product with Serializable

    A hash-based transaction view id

    A hash-based transaction view id

    Views from different requests may have the same view hash.

56.  case class WellFormedTransaction[+S <: State] extends NoCopy with Product with Serializable

    Used to mark a transaction to be well-formed.

    Used to mark a transaction to be well-formed. That means:

    • tx is well-formed according to the Daml-LF definition, i.e., a root node is not child of another node and every non-root node has exactly one parent and is reachable from a root node. (No cycles, no sharing, no orphaned node).
    • All node Ids are non-negative.
    • The type parameter S determines whether all create nodes have suffixed IDs or none.
    • Create nodes have unique contract ids of shape com.daml.lf.value.Value.ContractId.V1. The contract id of a create node is not referenced before the node. The contract id of a rolled back create node is not referenced outside its rollback scope.
    • The discriminators of create nodes without suffixed contract ids are unique among all discriminators that appear in the transaction.
    • Every action node has at least one signatory.
    • Every signatory is also a stakeholder.
    • Fetch actors are defined.
    • All created contract instances and choice arguments in the transaction can be serialized.
    • All nodes in the transaction have the optLocation field set to None.
    • metadata contains seeds exactly for those node IDs from tx that should have a seed (creates and exercises).
    • Keys of transaction nodes don't contain contract IDs.
    • The maintainers of keys are non-empty.
    • ByKey nodes have a key.
    • All parties referenced by the transaction can be converted to com.digitalasset.canton.topology.PartyId
    • The transaction has the optUsedPackages set to scala.None$
    • Every rollback node has at least one child and no rollback node appears at the root unless the transaction has been merged by Canton.
57.  case class WithContractHash[+A](x: A, contractHash: LfHash) extends Product with Serializable
58.  case class WithContractMetadata[+A](x: A, metadata: ContractMetadata) extends Product with Serializable
59.  case class WithRollbackScope[T](rbScope: RollbackScope, unwrap: T) extends Product with Serializable
60.  case class WithTransactionId[+A](x: A, transactionId: TransactionId) extends Product with Serializable