@openzeppelin/compact-contracts 0.3.0-alpha.1 → 0.3.0-alpha.2

package/multisig/presets/ShieldedMultiSigV2.compact

@@ -1,5 +1,5 @@
 // SPDX-License-Identifier: MIT
-// OpenZeppelin Compact Contracts v0.3.0-alpha.1 (multisig/presets/ShieldedMultiSigV2.compact)
+// OpenZeppelin Compact Contracts v0.3.0-alpha.2 (multisig/presets/ShieldedMultiSigV2.compact)
 
 pragma language_version >= 0.23.0;
 
@@ -24,7 +24,7 @@ import CompactStandardLibrary;
 
 import "../ProposalManager" prefix Proposal_;
 import "../ShieldedTreasuryStateless" prefix Treasury_;
-import "../SignerManager"<Bytes<32>> prefix Signer_;
+import "../Signer"<Bytes<32>> prefix Signer_;
 
 // ─── Types ──────────────────────────────────────────────────────
 

package/multisig/presets/ShieldedMultiSigV3.compact

@@ -20,7 +20,7 @@ pragma language_version >= 0.23.0;
  *
  * - `mint` creates a new UTXO via `mintShieldedToken`, addressed to the
  *   contract. No external coin input; supply is produced on-chain.
- * - `burn` consumes a UTXO via `sendShielded` to `burnAddress()`. Only
+ * - `burn` consumes a UTXO via `sendShielded` to `shieldedBurnAddress()`. Only
  *   coins of this contract's token type can be burned. Change is handled
  *   automatically by the transaction layer.
  *
@@ -194,7 +194,7 @@ export circuit mint(
  * @description Burns a shielded coin of this contract's token type,
  * authorized by threshold signatures.
  *
- * Sends the specified amount of the supplied coin to `burnAddress()` via
+ * Sends the specified amount of the supplied coin to `shieldedBurnAddress()` via
  * `sendShielded`. The nullifier is submitted on-chain, permanently marking
  * the UTXO as spent.
  *

package/multisig/presets/forwarder/ForwarderPrivate.compact

@@ -1,5 +1,5 @@
 // SPDX-License-Identifier: MIT
-// OpenZeppelin Compact Contracts v0.3.0-alpha.1 (multisig/presets/forwarder/ForwarderPrivate.compact)
+// OpenZeppelin Compact Contracts v0.3.0-alpha.2 (multisig/presets/forwarder/ForwarderPrivate.compact)
 
 pragma language_version >= 0.23.0;
 

package/multisig/presets/forwarder/ForwarderShielded.compact

@@ -1,5 +1,5 @@
 // SPDX-License-Identifier: MIT
-// OpenZeppelin Compact Contracts v0.3.0-alpha.1 (multisig/presets/forwarder/ForwarderShielded.compact)
+// OpenZeppelin Compact Contracts v0.3.0-alpha.2 (multisig/presets/forwarder/ForwarderShielded.compact)
 
 pragma language_version >= 0.23.0;
 

package/multisig/presets/forwarder/ForwarderUnshielded.compact

@@ -1,5 +1,5 @@
 // SPDX-License-Identifier: MIT
-// OpenZeppelin Compact Contracts v0.3.0-alpha.1 (multisig/presets/forwarder/ForwarderUnshielded.compact)
+// OpenZeppelin Compact Contracts v0.3.0-alpha.2 (multisig/presets/forwarder/ForwarderUnshielded.compact)
 
 pragma language_version >= 0.23.0;
 

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@openzeppelin/compact-contracts",
-  "version": "0.3.0-alpha.1",
+  "version": "0.3.0-alpha.2",
   "description": "OpenZeppelin Compact contract library",
   "keywords": [
     "openzeppelin",
@@ -60,9 +60,9 @@
     "@midnight-ntwrk/midnight-js-protocol": "4.1.1",
     "@midnight-ntwrk/midnight-js-types": "4.1.1",
     "@midnight-ntwrk/testkit-js": "4.1.1",
-    "@openzeppelin/compact-simulator": "^0.2.0",
+    "@openzeppelin/compact-simulator": "^0.3.1",
     "@tsconfig/node24": "^24.0.4",
-    "@types/node": "26.1.1",
+    "@types/node": "26.1.2",
     "@vitest/coverage-v8": "^4.1.10",
     "fast-check": "^4.9.0",
     "ts-node": "^10.9.2",

package/security/Allowlist.compact

@@ -1,5 +1,5 @@
 // SPDX-License-Identifier: MIT
-// OpenZeppelin Compact Contracts v0.3.0-alpha.1 (security/Allowlist.compact)
+// OpenZeppelin Compact Contracts v0.3.0-alpha.2 (security/Allowlist.compact)
 
 pragma language_version >= 0.23.0;
 

package/security/Blocklist.compact

@@ -1,5 +1,5 @@
 // SPDX-License-Identifier: MIT
-// OpenZeppelin Compact Contracts v0.3.0-alpha.1 (security/Blocklist.compact)
+// OpenZeppelin Compact Contracts v0.3.0-alpha.2 (security/Blocklist.compact)
 
 pragma language_version >= 0.23.0;
 

package/security/Initializable.compact

@@ -1,5 +1,5 @@
 // SPDX-License-Identifier: MIT
-// OpenZeppelin Compact Contracts v0.3.0-alpha.1 (security/Initializable.compact)
+// OpenZeppelin Compact Contracts v0.3.0-alpha.2 (security/Initializable.compact)
 
 pragma language_version >= 0.23.0;
 

package/security/Pausable.compact

@@ -1,5 +1,5 @@
 // SPDX-License-Identifier: MIT
-// OpenZeppelin Compact Contracts v0.3.0-alpha.1 (security/Pausable.compact)
+// OpenZeppelin Compact Contracts v0.3.0-alpha.2 (security/Pausable.compact)
 
 pragma language_version >= 0.23.0;
 

package/token/ConfidentialFungibleToken.compact

@@ -1,5 +1,5 @@
 // SPDX-License-Identifier: MIT
-// OpenZeppelin Compact Contracts v0.3.0-alpha.1 (token/ConfidentialFungibleToken.compact)
+// OpenZeppelin Compact Contracts v0.3.0-alpha.2 (token/ConfidentialFungibleToken.compact)
 
 pragma language_version >= 0.23.0;
 
@@ -70,6 +70,14 @@ pragma language_version >= 0.23.0;
  * depth), but that counter RESETS on `clearMemos`, so it is an in-epoch
  * backstop only, never a substitute for freshness.
  *
+ * Seed generation is a WALLET responsibility and OUT OF SCOPE for this
+ * contract, which cannot enforce it. The witness shipped in this repo
+ * (`test/witnesses/ConfidentialFungibleTokenWitnesses.ts`) is TEST-ONLY and
+ * returns a FIXED seed for reproducibility; it is NOT a production wallet. A
+ * production integration MUST supply a fresh, high-entropy, secret 32-byte seed
+ * per invocation from a CSPRNG; there is no production reference witness here, so
+ * confidentiality is only as strong as that external, not-yet-built wallet layer.
+ *
  * @dev Plaintext disclosures (what reaches the public ledger):
  *  - This base discloses no amounts; supply accounting lives in a layer.
  *  - A public-supply layer reveals each mint/burn amount via the totalSupply
@@ -119,6 +127,17 @@ pragma language_version >= 0.23.0;
  * calls dominate the credit-path row counts; there is currently no cheaper,
  * upgrade-safe hasher available.
  *
+ * @dev Runtime trust boundary. Confidentiality and integrity rest on the
+ * Midnight runtime enforcing two curve invariants this module does NOT re-check:
+ * every JubjubPoint reaching a curve op is cofactor-cleared into the prime-order
+ * subgroup (so off-curve, low-order, or mixed-order points make the circuit
+ * unsatisfiable), and `ecMul` faults on a scalar >= the subgroup order. These are
+ * regression-pinned with adversarial inputs in
+ * `crypto/test/CurveRuntimeInvariants.test.ts`, which fails loudly if a future
+ * runtime stops enforcing them. That is behavioral verification of the shipped
+ * runtime, NOT a formal audit of its circuit implementation (`midnight-circuits`),
+ * which remains an external trust assumption.
+ *
  * @dev Caller-identity gating (composability). This module is unopinionated
  * about compliance policy (freeze, KYC, pause); a composing contract layers
  * that on top. Gating a circuit on an EXPLICIT argument (e.g. the recipient
@@ -147,18 +166,27 @@ pragma language_version >= 0.23.0;
  * conflict. Documented limitation; acceptable for the v1 target use case
  * (tokenized deposits).
  *
+ * Domain separation. The memo KDF and per-operation randomness are
+ * domain-separated by a version tag but NOT bound to a chain id or
+ * contract-instance identifier, so cross-DEPLOYMENT isolation (the same wallet
+ * seed reused against two instances or two chains) relies on the seed-freshness
+ * requirement above rather than on the derivation itself. Binding `kernel.self()`
+ * into the derivations is a possible defense-in-depth hardening; under review, deferred.
+ *
  * Block weight. A deploy bundles every exported entry point's on-chain IR into
  * one transaction, and the value circuits are SHA256-heavy (k=16), so a
- * full-surface deployment can exceed the node's per-transaction block byte
- * budget and be rejected (`1010: Transaction would exhaust the block limits`).
- * The full token surface exceeds it; a reduced surface (e.g. receive +
- * transfer, dropping allowances and supply accounting) fits, as measured on the
- * local ledger-8 dev stack. The lever is dropping the k=16 value operations a
- * deployment does not need, not just trimming getters. The limit is a
- * governance-configurable, node-side ledger parameter, so confirm against the
- * target network. Keep the deployed circuit surface small (drop
- * unused getters, split oversized composites); raising the limit is a
- * node-side change which is tracked upstream:
+ * full-surface deployment is byte-heavy. Whether it fits is a property of the
+ * target network, not the contract: the per-transaction block byte budget is a
+ * governance-configurable, node-side ledger parameter. On the local ledger-8 dev
+ * stack the full surface exceeded it and was rejected (`1010: Transaction would
+ * exhaust the block limits`), while a reduced surface (e.g. receive + transfer,
+ * dropping allowances and supply accounting) fit. So confirm deployability
+ * against the target network; if a deployment is over budget there, the lever is
+ * exposing only the k=16 value operations it needs, not just trimming getters.
+ * A deployed contract can also be upgraded by its Contract Maintenance Authority
+ * (CMA), so an over-budget deployment can start with a lean surface and add
+ * operations by upgrade instead of fitting the whole surface into one deploy.
+ * Raising the limit itself is a node-side change, tracked upstream:
  * https://github.com/midnightntwrk/midnight-node/issues/1202.
  *
  * Residual griefing. The dual-balance split (see `sweep`) stops dust

package/token/FungibleToken.compact

@@ -1,5 +1,5 @@
 // SPDX-License-Identifier: MIT
-// OpenZeppelin Compact Contracts v0.3.0-alpha.1 (token/FungibleToken.compact)
+// OpenZeppelin Compact Contracts v0.3.0-alpha.2 (token/FungibleToken.compact)
 
 pragma language_version >= 0.23.0;
 

package/token/MultiToken.compact

@@ -1,5 +1,5 @@
 // SPDX-License-Identifier: MIT
-// OpenZeppelin Compact Contracts v0.3.0-alpha.1 (token/MultiToken.compact)
+// OpenZeppelin Compact Contracts v0.3.0-alpha.2 (token/MultiToken.compact)
 
 pragma language_version >= 0.23.0;
 

package/token/NativeShieldedToken.compact

@@ -1,5 +1,5 @@
 // SPDX-License-Identifier: MIT
-// OpenZeppelin Compact Contracts v0.3.0-alpha.1 (token/NativeShieldedToken.compact)
+// OpenZeppelin Compact Contracts v0.3.0-alpha.2 (token/NativeShieldedToken.compact)
 
 pragma language_version >= 0.23.0;
 
@@ -45,7 +45,7 @@ pragma language_version >= 0.23.0;
  * recipient-public.
  *
  * @notice Supply accounting is opt-in: this module tracks NO supply totals.
- * Compose the optional `NativeShieldedTokenSupply` extension only if you need an
+ * Compose the optional `NativeShieldedTokenPublicSupply` extension only if you need an
  * on-chain `totalSupply()`; see it for the privacy trade-off it introduces (it
  * makes contract-mediated burn amounts public).
  *

package/token/NativeShieldedTokenCore.compact

@@ -1,5 +1,5 @@
 // SPDX-License-Identifier: MIT
-// OpenZeppelin Compact Contracts v0.3.0-alpha.1 (token/NativeShieldedTokenCore.compact)
+// OpenZeppelin Compact Contracts v0.3.0-alpha.2 (token/NativeShieldedTokenCore.compact)
 
 pragma language_version >= 0.23.0;
 

package/token/NativeShieldedTokenFamily.compact

@@ -1,5 +1,5 @@
 // SPDX-License-Identifier: MIT
-// OpenZeppelin Compact Contracts v0.3.0-alpha.1 (token/NativeShieldedTokenFamily.compact)
+// OpenZeppelin Compact Contracts v0.3.0-alpha.2 (token/NativeShieldedTokenFamily.compact)
 
 pragma language_version >= 0.23.0;
 
@@ -53,7 +53,7 @@ pragma language_version >= 0.23.0;
  * output, at the cost of making those mints recipient-public.
  *
  * @notice Supply accounting is opt-in: this module tracks NO supply totals.
- * Compose the optional `NativeShieldedTokenFamilySupply` extension only if you
+ * Compose the optional `NativeShieldedTokenFamilyPublicSupply` extension only if you
  * need an on-chain `totalSupply(domain)`; see it for the privacy trade-off it
  * introduces (it makes contract-mediated burn amounts public).
  *

package/token/NonFungibleToken.compact

@@ -1,5 +1,5 @@
 // SPDX-License-Identifier: MIT
-// OpenZeppelin Compact Contracts v0.3.0-alpha.1 (token/NonFungibleToken.compact)
+// OpenZeppelin Compact Contracts v0.3.0-alpha.2 (token/NonFungibleToken.compact)
 
 pragma language_version >= 0.23.0;
 

package/token/extensions/ConfidentialFungibleTokenPublicSupply.compact

@@ -1,5 +1,5 @@
 // SPDX-License-Identifier: MIT
-// OpenZeppelin Compact Contracts v0.3.0-alpha.1 (token/extensions/ConfidentialFungibleTokenPublicSupply.compact)
+// OpenZeppelin Compact Contracts v0.3.0-alpha.2 (token/extensions/ConfidentialFungibleTokenPublicSupply.compact)
 
 pragma language_version >= 0.23.0;
 

package/token/extensions/NativeShieldedTokenDerivedNonce.compact

@@ -1,5 +1,5 @@
 // SPDX-License-Identifier: MIT
-// OpenZeppelin Compact Contracts v0.3.0-alpha.1 (token/extensions/NativeShieldedTokenDerivedNonce.compact)
+// OpenZeppelin Compact Contracts v0.3.0-alpha.2 (token/extensions/NativeShieldedTokenDerivedNonce.compact)
 
 pragma language_version >= 0.23.0;
 

package/token/extensions/{NativeShieldedTokenFamilySupply.compact → NativeShieldedTokenFamilyPublicSupply.compact}

@@ -1,16 +1,16 @@
 // SPDX-License-Identifier: MIT
-// OpenZeppelin Compact Contracts v0.2.0 (token/extensions/NativeShieldedTokenFamilySupply.compact)
+// OpenZeppelin Compact Contracts v0.2.0 (token/extensions/NativeShieldedTokenFamilyPublicSupply.compact)
 
 pragma language_version >= 0.23.0;
 
 /**
- * @module NativeShieldedTokenFamilySupply
+ * @module NativeShieldedTokenFamilyPublicSupply
  * @description Optional standalone extension that adds per-domain on-chain
  * supply accounting to a `NativeShieldedTokenFamily`. It exposes `_addMinted` /
  * `_addBurned` building blocks plus the `totalMinted` / `totalBurned` /
  * `totalSupply` getters, each keyed by domain. It imports no token module.
  *
- * It is a thin wrapper over `NativeShieldedTokenSupplyCore`, forwarding the
+ * It is a thin wrapper over `NativeShieldedTokenPublicSupplyCore`, forwarding the
  * caller's per-call `domain`, so the accounting logic and guarantees live in
  * the shared core.
  *
@@ -51,25 +51,25 @@ pragma language_version >= 0.23.0;
  *
  * @dev Mint amounts are already public via the protocol's `shieldedMints`
  * effect, so `_addMinted` adds accounting, not disclosure. See
- * `NativeShieldedTokenSupplyCore` for the exact / lower-bound / upper-bound
+ * `NativeShieldedTokenPublicSupplyCore` for the exact / lower-bound / upper-bound
  * guarantees, the per-domain `burned <= minted` invariant, and the mint-side
  * drift caveat.
  *
  * @warning Pair every mint with `_addMinted` and every burn with `_addBurned` on
  * every path, under the matching domain; mis-wiring is a security-critical,
  * undetectable error (e.g. an undercounted mint makes `_addBurned` reject
- * legitimate burns). See `NativeShieldedTokenSupplyCore`.
+ * legitimate burns). See `NativeShieldedTokenPublicSupplyCore`.
  */
-module NativeShieldedTokenFamilySupply {
+module NativeShieldedTokenFamilyPublicSupply {
   import CompactStandardLibrary;
-  import "./NativeShieldedTokenSupplyCore" prefix Core_;
+  import "./NativeShieldedTokenPublicSupplyCore" prefix Core_;
 
   // Circuits use the `Core_` prefix above. The named import/re-export below is
   // only for the core supply ledger keys, so the implementing contract's ledger
   // keys read as `_totalMinted` / `_totalBurned` rather than
-  // `NativeShieldedTokenSupplyCore__totalMinted`. The circuit names are
+  // `NativeShieldedTokenPublicSupplyCore__totalMinted`. The circuit names are
   // intentionally NOT imported unprefixed, to avoid potential clashes.
-  import { _totalMinted, _totalBurned } from "./NativeShieldedTokenSupplyCore";
+  import { _totalMinted, _totalBurned } from "./NativeShieldedTokenPublicSupplyCore";
   export { _totalMinted, _totalBurned };
 
   /**

package/token/extensions/{NativeShieldedTokenSupply.compact → NativeShieldedTokenPublicSupply.compact}

@@ -1,16 +1,16 @@
 // SPDX-License-Identifier: MIT
-// OpenZeppelin Compact Contracts v0.2.0 (token/extensions/NativeShieldedTokenSupply.compact)
+// OpenZeppelin Compact Contracts v0.2.0 (token/extensions/NativeShieldedTokenPublicSupply.compact)
 
 pragma language_version >= 0.23.0;
 
 /**
- * @module NativeShieldedTokenSupply
+ * @module NativeShieldedTokenPublicSupply
  * @description Optional standalone extension that adds on-chain supply
  * accounting to a `NativeShieldedToken`. It exposes scalar `_addMinted` /
  * `_addBurned` building blocks plus the `totalMinted` / `totalBurned` /
  * `totalSupply` getters. It imports no token module.
  *
- * It is a thin wrapper over `NativeShieldedTokenSupplyCore`, forwarding a
+ * It is a thin wrapper over `NativeShieldedTokenPublicSupplyCore`, forwarding a
  * single fixed key (the paired contract has exactly one token type), so the
  * accounting logic and guarantees live in the shared core.
  *
@@ -48,24 +48,24 @@ pragma language_version >= 0.23.0;
  *
  * @dev Mint amounts are already public via the protocol's `shieldedMints`
  * effect, so `_addMinted` adds accounting, not disclosure. See
- * `NativeShieldedTokenSupplyCore` for the exact / lower-bound / upper-bound
+ * `NativeShieldedTokenPublicSupplyCore` for the exact / lower-bound / upper-bound
  * guarantees, the `burned <= minted` invariant, and the mint-side drift caveat.
  *
  * @warning Pair every mint with `_addMinted` and every burn with `_addBurned` on
  * every path; mis-wiring is a security-critical, undetectable error (e.g. an
  * undercounted mint makes `_addBurned` reject legitimate burns). See
- * `NativeShieldedTokenSupplyCore`.
+ * `NativeShieldedTokenPublicSupplyCore`.
  */
-module NativeShieldedTokenSupply {
+module NativeShieldedTokenPublicSupply {
   import CompactStandardLibrary;
-  import "./NativeShieldedTokenSupplyCore" prefix Core_;
+  import "./NativeShieldedTokenPublicSupplyCore" prefix Core_;
 
   // Circuits use the `Core_` prefix above. The named import/re-export below is
   // only for the core supply ledger keys, so the implementing contract's ledger
   // keys read as `_totalMinted` / `_totalBurned` rather than
-  // `NativeShieldedTokenSupplyCore__totalMinted`. The circuit names are
+  // `NativeShieldedTokenPublicSupplyCore__totalMinted`. The circuit names are
   // intentionally NOT imported unprefixed, to avoid potential clashes.
-  import { _totalMinted, _totalBurned } from "./NativeShieldedTokenSupplyCore";
+  import { _totalMinted, _totalBurned } from "./NativeShieldedTokenPublicSupplyCore";
   export { _totalMinted, _totalBurned };
 
   /**

package/token/extensions/{NativeShieldedTokenSupplyCore.compact → NativeShieldedTokenPublicSupplyCore.compact}

@@ -1,10 +1,10 @@
 // SPDX-License-Identifier: MIT
-// OpenZeppelin Compact Contracts v0.2.0 (token/extensions/NativeShieldedTokenSupplyCore.compact)
+// OpenZeppelin Compact Contracts v0.2.0 (token/extensions/NativeShieldedTokenPublicSupplyCore.compact)
 
 pragma language_version >= 0.23.0;
 
 /**
- * @module NativeShieldedTokenSupplyCore
+ * @module NativeShieldedTokenPublicSupplyCore
  * @description Shared, domain-keyed core of the optional supply-accounting
  * extension. It owns the per-domain minted/burned maps and exposes the
  * `_addMinted` / `_addBurned` building blocks plus the `totalMinted` /
@@ -13,12 +13,12 @@ pragma language_version >= 0.23.0;
  * This module is NOT meant to be composed directly. It is the de-duplicated
  * base behind the two user-facing flavors:
  *
- * - `NativeShieldedTokenSupply` — pairs with `NativeShieldedToken`; forwards a
+ * - `NativeShieldedTokenPublicSupply` — pairs with `NativeShieldedToken`; forwards a
  *   single fixed key (the contract has one token type).
- * - `NativeShieldedTokenFamilySupply` — pairs with `NativeShieldedTokenFamily`;
+ * - `NativeShieldedTokenFamilyPublicSupply` — pairs with `NativeShieldedTokenFamily`;
  *   forwards the caller's per-call `domain`.
  *
- * @dev Assertion messages use the generic `NativeShieldedTokenSupply:` prefix
+ * @dev Assertion messages use the generic `NativeShieldedTokenPublicSupply:` prefix
  * so they read sensibly from either flavor. There is no initialization: an
  * absent domain key reads as 0, and the getters do not gate on the paired token
  * module's init flag (a counter reading 0 before init is correct), so init
@@ -51,7 +51,7 @@ pragma language_version >= 0.23.0;
  *   overstates circulating supply.
  * Call the matching accounting block on every mint and burn path, same domain.
  */
-module NativeShieldedTokenSupplyCore {
+module NativeShieldedTokenPublicSupplyCore {
   import CompactStandardLibrary;
   import "../../utils/Utils" prefix Utils_;
 
@@ -79,7 +79,7 @@ module NativeShieldedTokenSupplyCore {
    */
   export circuit _addMinted(domain: Bytes<32>, amount: Uint<64>): [] {
     const current = totalMinted(domain);
-    assert(Utils_UINT128_MAX() - current >= amount, "NativeShieldedTokenSupply: arithmetic overflow");
+    assert(Utils_UINT128_MAX() - current >= amount, "NativeShieldedTokenPublicSupply: arithmetic overflow");
     _totalMinted.insert(disclose(domain), disclose((current + amount) as Uint<128>));
   }
 
@@ -103,8 +103,8 @@ module NativeShieldedTokenSupplyCore {
     // First guards the subtraction below from underflowing on an already-corrupt
     // state (stored burned past minted); the second is the reachable per-call
     // check that this burn does not push the domain past its minted total.
-    assert(minted >= current, "NativeShieldedTokenSupply: burned total exceeds minted");
-    assert(minted - current >= amount, "NativeShieldedTokenSupply: burn exceeds available supply");
+    assert(minted >= current, "NativeShieldedTokenPublicSupply: burned total exceeds minted");
+    assert(minted - current >= amount, "NativeShieldedTokenPublicSupply: burn exceeds available supply");
     _totalBurned.insert(disclose(domain), disclose((current + amount) as Uint<128>));
   }
 

package/utils/Utils.compact

@@ -1,5 +1,5 @@
 // SPDX-License-Identifier: MIT
-// OpenZeppelin Compact Contracts v0.3.0-alpha.1 (utils/Utils.compact)
+// OpenZeppelin Compact Contracts v0.3.0-alpha.2 (utils/Utils.compact)
 
 pragma language_version >= 0.23.0;
 

package/multisig/SignerManager.compact

@@ -1,205 +0,0 @@
-// SPDX-License-Identifier: MIT
-// OpenZeppelin Compact Contracts v0.3.0-alpha.1 (multisig/SignerManager.compact)
-
-pragma language_version >= 0.23.0;
-
-/**
- * @module SignerManager<T>
- * @description Manages signer registry, threshold enforcement, and signer
- * validation for multisig governance contracts.
- *
- * Parameterized over the signer identity type `T`, allowing the consuming
- * contract to choose the identity mechanism at import time. Common
- * instantiations include:
- *
- * - `Either<ZswapCoinPublicKey, ContractAddress>` for ownPublicKey()-based identity
- * - `Bytes<32>` for commitment-based identity (e.g., hash of ECDSA public key)
- * - `NativePoint` for Schnorr/MuSig aggregated key
- *
- * SignerManager does not resolve caller identity. It receives a validated
- * caller from the contract layer and checks it against the registry.
- * This separation allows the identity mechanism to change without
- * modifying the module.
- *
- * Underscore-prefixed circuits (_addSigner, _removeSigner,
- * _changeThreshold) have no access control enforcement. The consuming
- * contract must gate these behind its own authorization policy.
- */
-module SignerManager<T> {
-  import CompactStandardLibrary;
-
-  // ─── State ──────────────────────────────────────────────────────────────────
-
-  export ledger _signers: Set<T>;
-  export ledger _signerCount: Uint<8>;
-  export ledger _threshold: Uint<8>;
-
-  // ─── Initialization ─────────────────────────────────────────────────────────
-
-  /**
-   * @description Initializes the signer manager with the given threshold
-   * and an initial set of signers.
-   * Must be called in the contract's constructor.
-   *
-   * Requirements:
-   *
-   * - `thresh` must be greater than 0.
-   * - `signers` must not contain duplicates.
-   *
-   * @param {Vector<n, T>} signers - The initial signer set.
-   * @param {Uint<8>} thresh - The minimum number of approvals required.
-   *
-   * @returns {[]} Empty tuple.
-   */
-  export circuit initialize<#n>(
-    signers: Vector<n, T>,
-    thresh: Uint<8>
-  ): [] {
-    assert(thresh > 0, "SignerManager: threshold must be > 0");
-    _threshold = disclose(thresh);
-
-    for (const signer of signers) {
-      _addSigner(signer);
-    }
-
-    assert(_signerCount >= thresh, "SignerManager: threshold exceeds signer count");
-  }
-
-  // ─── Guards ─────────────────────────────────────────────────────────────
-
-  /**
-   * @description Asserts that the given caller is an active signer.
-   *
-   * Requirements:
-   *
-   * - `caller` must be a member of the signers registry.
-   *
-   * @param {T} caller - The identity to validate.
-   *
-   * @returns {[]} Empty tuple.
-   */
-  export circuit assertSigner(caller: T): [] {
-    assert(isSigner(caller), "SignerManager: not a signer");
-  }
-
-  /**
-   * @description Asserts that the given approval count meets the threshold.
-   *
-   * Requirements:
-   *
-   * - `approvalCount` must be >= threshold.
-   *
-   * @param {Uint<8>} approvalCount - The current number of approvals.
-   *
-   * @returns {[]} Empty tuple.
-   */
-  export circuit assertThresholdMet(approvalCount: Uint<8>): [] {
-    assert(approvalCount >= _threshold, "SignerManager: threshold not met");
-  }
-
-  // ─── View ──────────────────────────────────────────────────────────
-
-  /**
-   * @description Returns the current signer count.
-   *
-   * @returns {Uint<8>} The number of active signers.
-   */
-  export circuit getSignerCount(): Uint<8> {
-    return _signerCount;
-  }
-
-  /**
-   * @description Returns the approval threshold.
-   *
-   * @returns {Uint<8>} The threshold.
-   */
-  export circuit getThreshold(): Uint<8> {
-    return _threshold;
-  }
-
-  /**
-   * @description Returns whether the given account is an active signer.
-   *
-   * @param {T} account - The account to check.
-   *
-   * @returns {Boolean} True if the account is an active signer.
-   */
-  export circuit isSigner(account: T): Boolean {
-    return _signers.member(disclose(account));
-  }
-
-  // ─── Signer Management ─────────────────────────────────────────────────────
-
-  /**
-   * @description Adds a new signer to the registry.
-   *
-   * @notice Access control is NOT enforced here.
-   * The consuming contract must gate this behind its own
-   * authorization policy.
-   *
-   * Requirements:
-   *
-   * - `signer` must not already be an active signer.
-   *
-   * @param {T} signer - The signer to add.
-   *
-   * @returns {[]} Empty tuple.
-   */
-  export circuit _addSigner(signer: T): [] {
-    assert(
-      !isSigner(signer),
-      "SignerManager: signer already active"
-    );
-
-    _signers.insert(disclose(signer));
-    _signerCount = _signerCount + 1 as Uint<8>;
-  }
-
-  /**
-   * @description Removes a signer from the registry.
-   *
-   * @notice Access control is NOT enforced here.
-   * The consuming contract must gate this behind its own
-   * authorization policy.
-   *
-   * Requirements:
-   *
-   * - `signer` must be an active signer.
-   * - Removal must not drop signer count below threshold.
-   *
-   * @param {T} signer - The signer to remove.
-   *
-   * @returns {[]} Empty tuple.
-   */
-  export circuit _removeSigner(signer: T): [] {
-    assert(isSigner(signer), "SignerManager: not a signer");
-
-    const newCount = _signerCount - 1 as Uint<8>;
-    assert(newCount >= _threshold, "SignerManager: removal would breach threshold");
-
-    _signers.remove(disclose(signer));
-    _signerCount = newCount;
-  }
-
-  /**
-   * @description Updates the approval threshold.
-   *
-   * @notice Access control is NOT enforced here.
-   * The consuming contract must gate this behind its own
-   * authorization policy.
-   *
-   * Requirements:
-   *
-   * - `newThreshold` must be greater than 0.
-   * - `newThreshold` must not exceed the current signer count.
-   *
-   * @param {Uint<8>} newThreshold - The new minimum number of approvals required.
-   *
-   * @returns {[]} Empty tuple.
-   */
-  export circuit _changeThreshold(newThreshold: Uint<8>): [] {
-    assert(newThreshold > 0, "SignerManager: threshold must be > 0");
-    assert(newThreshold <= _signerCount, "SignerManager: threshold exceeds signer count");
-    _threshold = disclose(newThreshold);
-  }
-}