Introduce Commodity

[ltardivo]

feat: introduce Commodity PoW meta-token with determinism hardening and TBC777 zero-amount support

This PR delivers the Commodity standard — a pure-utility meta-token whose issuance is bound 1:1 to host-chain blocks through a min-revision PoW race — together with the foundational determinism work that makes rich on-chain introspection safe inside smart contracts. Commodity reframes the earlier pow-token prototype as a clean digital commodity primitive (deterministic host-block subsidies, genuine-mint lineage via immutable _root, no governance or profit expectations). Along the way we cleaned up the RPC surface, gave contracts first-class access to confirmed chain state, and relaxed TBC777 so zero-amount tokens are first-class citizens.

Commodity (new package)

• Renamed from pow-token / Pow to commodity / Commodity for clearer regulatory and product positioning.
• Issuance is strictly one subsidy per host block that contains module creations; the winner is the genuine mint whose creation revision is the lexicographically smallest.
• Client-side Bitcoin-compatible SHA-256 grinding produces the competitive salt; the subsidy schedule follows Bitcoin (50 coins, halving every 210 000 host blocks, zero after 64 halvings).
• claim() is fully deterministic and cheap: it uses only txIdToBlockHeight, decode and getOTXOs (all-object TXOs of the block) so every honest validator sees an identical, immutable candidate set. Selecting via getOUTXOs had allowed a same-block loser to claim after the winner’s creation UTXO was spent; that race is closed.
• Commodity now extends TBC777 (instead of bare Contract) so modules reuse the escrow/auditor machinery. Deployed modules must therefore export the full inheritance chain (TBC20, EscrowAuditor, TBC777, Commodity) for SES resolution.
• Constructor aligned with TBC777/TBC20 style: a single params object { to, salt?, amount?, name?, … }. Genuine mint roots still require a non-empty salt and amount === 0n.
• transfer() retains classic fungible shape via a protected _createTransferToken helper that always produces non-mint children (salt === '') and drops escrow bookkeeping.
• Tests, README examples and the esbuild contract build (now externalising @bitcoin-computer/*) updated accordingly.

TBC777

• Feature / migration: ordinary tokens may now be created with amount === 0n (empty bags, deferred issuance). Remote-root tokens remain constrained to amount === 0n so bridged value still originates from audited escrow claims.
• Commodity can therefore pass the amount through directly; the previous temporary 1n + immediate burn() dance is gone. makeRegex and unit tests cover the revised rules.

Lib & Computer API

• Breaking change: Computer.rpc() (and all downstream helpers) now return the payload directly. The long-standing double-nested .result / .result.result indirection has been removed. Update every call site:

  // before
  const { result } = await computer.rpc('getBlockchainInfo', '')
  // after
  const result = await computer.rpc('getBlockchainInfo', '')

• New public helpers for chain introspection (also available inside contracts via the InnerComputer):
  • txIdToBlockHeight, txIdToBlockHash
  • getBlockHash, getBlockHeight
  • getRawTransaction, getRawBlock, getBlockHeader
• getTXOs / getUTXOs / getOTXOs / getOUTXOs gain (and inside contracts require) stabilizing filters: blockHeight, lteBlockHeight, gteBlockHeight, blockHash. Height-based filters must be ≤ current tip; future-height queries set globalInvalidState and are rejected exactly like missing state.
• The height filters moved from TXORecord to TXOQuery where they belong; types and docs updated.
• getTxos.md documents the new parameters.

Workspace (lib/ node)

These changes are invisible to public consumers but are the real foundation that lets Commodity (and future Ordinals-/Runes-/BRC-20-style meta-protocols) live as pure on-chain contracts:

• Centralized _safeCall, _invalidate and _ensureConfirmedTx helpers eliminate duplicated error handling and guarantee uniform diagnostic messages.
• Every potentially non-deterministic observation (mempool txs, future heights, missing state) is turned into an invalidation before it can leak into contract execution.
• The core invariant is now explicit and enforceable: any successful observation made against a confirmed chain prefix must return the identical value on every future extension.
• prev() on a root revision is now fatal (use first() or _id); the previous special-case that returned undefined has been removed.
• On reorg unconfirm, blockHeight and blockIndex are cleared together with blockHash, preventing stale height matches.
• Comprehensive contract tests cover happy-path round-trips, raw-data consistency and every invalidation path.

Tests, docs & miscellaneous

• Full regtest suite for Commodity: same-block competition, post-claim sync, history-stable index behaviour, Tier-1 eligibility guards and Tier-2 canonical selection.
• getTXOs / RPC / OrdSale tests updated for the new response shape, longer sleeps for stability, and the inclusive height filters.
• Compliance docs rewritten for uniform Layer-1 (IP/GeoIP + network) screening at the broadcast endpoint and a universal lightweight pre-render gate (generic disclosure + cached click-wrap + CSP sandbox) before every fullscreen-rendered app object. Differentiated canonicalMods / canonicalAppObjectIds screening is gone.
• Package-lock, tsconfig and build scripts cleaned up; @types/mocha added where needed; trailing commas and formatting fixed throughout.

Together these pieces give Bitcoin Computer a clean, deterministic foundation for fair per-block meta-token issuance while preserving the strict “no non-existent or non-deterministic state” guarantee that makes smart-contract execution reproducible.