@openzeppelin/compact-contracts 0.4.0-alpha.1 → 0.4.0-alpha.2

package/security/Pausable.compact

@@ -1,5 +1,5 @@
 // SPDX-License-Identifier: MIT
-// OpenZeppelin Compact Contracts v0.4.0-alpha.1 (security/Pausable.compact)
+// OpenZeppelin Compact Contracts v0.4.0-alpha.2 (security/Pausable.compact)
 
 pragma language_version >= 0.26.0;
 
@@ -12,12 +12,16 @@ pragma language_version >= 0.26.0;
 module Pausable {
   import CompactStandardLibrary;
 
+  /**
+   * @description Whether the contract is paused. Consuming contracts gate
+   * state-changing circuits on it via `assertPaused` / `assertNotPaused`.
+   */
   export ledger _isPaused: Boolean;
 
   /**
    * @description Returns true if the contract is paused, and false otherwise.
    *
-   * @circuitInfo k=10, rows=32
+   * @constraints k=6, rows=24
    *
    * @return {Boolean} True if paused.
    */
@@ -28,7 +32,7 @@ module Pausable {
   /**
    * @description Makes a circuit only callable when the contract is paused.
    *
-   * @circuitInfo k=10, rows=31
+   * @constraints k=6, rows=25
    *
    * Requirements:
    *
@@ -43,7 +47,7 @@ module Pausable {
   /**
    * @description Makes a circuit only callable when the contract is not paused.
    *
-   * @circuitInfo k=10, rows=35
+   * @constraints k=6, rows=28
    *
    * Requirements:
    *
@@ -58,7 +62,7 @@ module Pausable {
   /**
    * @description Triggers a stopped state.
    *
-   * @circuitInfo k=10, rows=38
+   * @constraints k=6, rows=28
    *
    * Requirements:
    *
@@ -74,7 +78,7 @@ module Pausable {
   /**
    * @description Lifts the pause on the contract.
    *
-   * @circuitInfo k=10, rows=34
+   * @constraints k=6, rows=25
    *
    * Requirements:
    *

package/token/ConfidentialFungibleToken.compact

@@ -1,5 +1,5 @@
 // SPDX-License-Identifier: MIT
-// OpenZeppelin Compact Contracts v0.4.0-alpha.1 (token/ConfidentialFungibleToken.compact)
+// OpenZeppelin Compact Contracts v0.4.0-alpha.2 (token/ConfidentialFungibleToken.compact)
 
 pragma language_version >= 0.26.0;
 
@@ -258,22 +258,81 @@ module ConfidentialFungibleToken {
   // Ledger state
   // ---------------------------------------------------------------------------
 
-  // Dual-balance grief fix. `_balances` is the SPENDABLE (confirmed) balance that
-  // debits draw from; `_pending` is the incoming pool that credits land in. Only
-  // the owner moves pending -> spendable, via `sweep()`. So a third party spamming
-  // dust credits cannot churn a victim's spendable ciphertext and invalidate the
-  // victim's in-flight spend proofs (a liveness grief). A wallet's total balance
-  // is `balanceOf` (spendable) + `pendingOf` (pending).
+  /**
+   * @description Spendable (confirmed) balances, encrypted under each account's
+   * ElGamal key. Debits draw from here. Paired with `_pending`: only the owner
+   * moves pending into spendable, via `sweep()`, so a third party spamming dust
+   * credits cannot churn a victim's spendable ciphertext and invalidate their
+   * in-flight spend proofs. A wallet's total is `balanceOf` + `pendingOf`.
+   * @type {Bytes<32>} accountId - The account identifier.
+   * @type {ElGamal_Ciphertext} balance - The encrypted spendable balance.
+   * @type {Map<accountId, balance>}
+   * @type {Map<Bytes<32>, ElGamal_Ciphertext>} _balances
+   */
   export ledger _balances: Map<Bytes<32>, ElGamal_Ciphertext>;
+
+  /**
+   * @description Incoming (unconfirmed) balances, encrypted under each account's
+   * ElGamal key. Credits land here rather than in `_balances`; the owner moves
+   * them across with `sweep()`.
+   * @type {Bytes<32>} accountId - The account identifier.
+   * @type {ElGamal_Ciphertext} pending - The encrypted pending balance.
+   * @type {Map<accountId, pending>}
+   * @type {Map<Bytes<32>, ElGamal_Ciphertext>} _pending
+   */
   export ledger _pending: Map<Bytes<32>, ElGamal_Ciphertext>;
+
+  /**
+   * @description Registered ElGamal encryption keys, one per account.
+   * Registration is one-shot: a second registration for the same account is
+   * rejected.
+   * @type {Bytes<32>} accountId - The account identifier.
+   * @type {JubjubPoint} encryptionKey - The account's ElGamal public key.
+   * @type {Map<accountId, encryptionKey>}
+   * @type {Map<Bytes<32>, JubjubPoint>} _encryptionKeys
+   */
   export ledger _encryptionKeys: Map<Bytes<32>, JubjubPoint>;
+
+  /**
+   * @description Per-account memo inbox. A credit pushes a masked memo the
+   * recipient decrypts off-chain; `pushFront` means newest first.
+   * @type {Bytes<32>} accountId - The recipient's identifier.
+   * @type {List<EcdhMask_Ciphertext>} memos - The recipient's memos.
+   * @type {Map<accountId, memos>}
+   * @type {Map<Bytes<32>, List<EcdhMask_Ciphertext>>} _memos
+   */
   export ledger _memos: Map<Bytes<32>, List<EcdhMask_Ciphertext>>;
+
+  /**
+   * @description Escrowed allowances, keyed by owner then spender. Membership is
+   * checked independently of the entry, so an allowance that was never escrowed
+   * is unspendable.
+   * @type {Bytes<32>} owner - The account that escrowed the allowance.
+   * @type {Bytes<32>} spender - The account allowed to spend it.
+   * @type {EscrowEntry} entry - The escrowed allowance.
+   * @type {Map<owner, Map<spender, entry>>}
+   * @type {Map<Bytes<32>, Map<Bytes<32>, EscrowEntry>>} _escrow
+   */
   export ledger _escrow: Map<Bytes<32>, Map<Bytes<32>, EscrowEntry>>;
 
+  /**
+   * @description Whether `initialize` has run. Guards against re-initialization
+   * and against use before initialization.
+   */
   export ledger _isInitialized: Boolean;
 
+  /**
+   * @description The token's human-readable name, set once at construction.
+   */
   export sealed ledger _name: Opaque<"string">;
+  /**
+   * @description The token's ticker symbol, set once at construction.
+   */
   export sealed ledger _symbol: Opaque<"string">;
+  /**
+   * @description The number of decimals used to display balances, set once at
+   * construction. Purely presentational; no circuit scales by it.
+   */
   export sealed ledger _decimals: Uint<8>;
 
 
@@ -390,7 +449,7 @@ module ConfidentialFungibleToken {
    * ciphertext if the account is unregistered. The amount is encrypted; only the
    * account (or an authorized viewer) can decrypt it.
    *
-   * @circuitInfo k=10, rows=989
+   * @constraints k=10, rows=984
    *
    * Requirements:
    *
@@ -416,7 +475,7 @@ module ConfidentialFungibleToken {
    * balance is `balanceOf`; a wallet's total is the sum of the two. See the
    * dual-balance note on the ledger declarations.
    *
-   * @circuitInfo k=10, rows=986
+   * @constraints k=10, rows=981
    *
    * Requirements:
    *
@@ -447,7 +506,7 @@ module ConfidentialFungibleToken {
    * getter grants nothing, the spend path (`transferFrom`/`burnFrom`) gates on
    * `_escrow` membership independently, so a non-existent allowance is unspendable.
    *
-   * @circuitInfo k=10, rows=938
+   * @constraints k=10, rows=936
    *
    * @param {Bytes<32>} owner - The account that granted the allowance.
    * @param {Bytes<32>} spender - The approved spender.
@@ -473,7 +532,7 @@ module ConfidentialFungibleToken {
   /**
    * @description Returns whether `account` has registered an encryption key.
    *
-   * @circuitInfo k=9, rows=305
+   * @constraints k=9, rows=303
    *
    * @param {Bytes<32>} account - The account to query.
    * @return {Boolean} - True if `account` is registered.
@@ -491,7 +550,7 @@ module ConfidentialFungibleToken {
    * `wit_ConfidentialTokenEK` and initializes their balance to an encryption of
    * zero. Registration is a prerequisite for sending or receiving.
    *
-   * @circuitInfo k=13, rows=6203
+   * @constraints k=13, rows=6157
    *
    * @notice Returns the caller's `accountId`. A composing contract can gate on
    * the returned value (e.g. assert it is KYC-approved) to restrict who may
@@ -693,7 +752,7 @@ module ConfidentialFungibleToken {
    * `extensions/ConfidentialFungibleTokenPublicSupply`) if the deployment tracks
    * `totalSupply`.
    *
-   * @circuitInfo k=15, rows=27142
+   * @constraints k=15, rows=26925
    *
    * Requirements:
    *
@@ -716,7 +775,7 @@ module ConfidentialFungibleToken {
    * `extensions/ConfidentialFungibleTokenPublicSupply`) if the deployment tracks
    * `totalSupply`.
    *
-   * @circuitInfo k=14, rows=14673
+   * @constraints k=14, rows=12860
    *
    * Requirements:
    *
@@ -740,7 +799,7 @@ module ConfidentialFungibleToken {
    * credits `to`, and pushes an encrypted memo to `to`. The amount is hidden;
    * the (sender, recipient) pair is public.
    *
-   * @circuitInfo k=16, rows=41617
+   * @constraints k=16, rows=39561
    *
    * @notice Returns the caller's (sender's) `accountId` for caller-side gating.
    * The sender is derived from the same authentication `_debit` performs, so the
@@ -778,7 +837,7 @@ module ConfidentialFungibleToken {
    * operations (`mint`/`burn`) live in a separate layer outside this conserving
    * surface, and only they may break conservation.
    *
-   * @circuitInfo k=16, rows=41606
+   * @constraints k=16, rows=39550
    *
    * @notice Like `transfer`, the credit lands in the recipient's pending pool
    * (see the dual-balance note); the caller sweeps their own incoming value.
@@ -819,7 +878,7 @@ module ConfidentialFungibleToken {
    * change, which is what would otherwise invalidate the victim's in-flight spend
    * proofs (a liveness grief).
    *
-   * @circuitInfo k=13, rows=2879
+   * @constraints k=13, rows=2860
    *
    * @notice Purely homomorphic: adds the two ciphertexts (same key) and resets
    * pending to Enc(0). No plaintext is needed; the wallet already learned the
@@ -852,7 +911,7 @@ module ConfidentialFungibleToken {
    * refunds any prior escrow, so allowances replace rather than stack. The cap
    * is not public.
    *
-   * @circuitInfo k=16, rows=43067
+   * @constraints k=16, rows=40913
    *
    * @notice Returns the caller's (approver's) `accountId` for caller-side gating.
    *
@@ -936,7 +995,7 @@ module ConfidentialFungibleToken {
    * caller via `approve`) and credits it to `to`, reducing both escrow copies by
    * `value`. The amount is hidden.
    *
-   * @circuitInfo k=16, rows=63207
+   * @constraints k=16, rows=59844
    *
    * @notice Returns the caller's (spender's) `accountId` for caller-side gating.
    *
@@ -976,7 +1035,7 @@ module ConfidentialFungibleToken {
    * @description Clears the caller's memo list, letting a wallet that has folded
    * its memos into its local balance cache prune on-chain memo storage.
    *
-   * @circuitInfo k=13, rows=2316
+   * @constraints k=13, rows=2308
    *
    * @warning Clearing memos is destructive and can permanently lock funds. The
    * on-chain balance ciphertext is not directly decryptable (discrete-log
@@ -1119,7 +1178,7 @@ module ConfidentialFungibleToken {
    * recipient credit. The building block for a composing contract's
    * `burnFrom`; it performs no supply accounting (see `_burn`).
    *
-   * @circuitInfo k=16, rows=36274
+   * @constraints k=16, rows=33128
    *
    * Requirements:
    *

package/token/FungibleToken.compact

@@ -1,5 +1,5 @@
 // SPDX-License-Identifier: MIT
-// OpenZeppelin Compact Contracts v0.4.0-alpha.1 (token/FungibleToken.compact)
+// OpenZeppelin Compact Contracts v0.4.0-alpha.2 (token/FungibleToken.compact)
 
 pragma language_version >= 0.26.0;
 
@@ -93,10 +93,24 @@ module FungibleToken {
   export ledger _allowances: Map<Either<Bytes<32>, ContractAddress>,
                                  Map<Either<Bytes<32>, ContractAddress>, Uint<128>>>;
 
+  /**
+   * @description Total tokens in circulation. `_update` raises it on a mint and
+   * lowers it on a burn, rejecting an increase that would overflow `Uint<128>`.
+   */
   export ledger _totalSupply: Uint<128>;
 
+  /**
+   * @description The token's human-readable name, set once at construction.
+   */
   export sealed ledger _name: Opaque<"string">;
+  /**
+   * @description The token's ticker symbol, set once at construction.
+   */
   export sealed ledger _symbol: Opaque<"string">;
+  /**
+   * @description The number of decimals used to display balances, set once at
+   * construction. Purely presentational; no circuit scales by it.
+   */
   export sealed ledger _decimals: Uint<8>;
 
 
@@ -116,7 +130,7 @@ module FungibleToken {
    * @dev This MUST be called in the implementing contract's constructor. Failure to do so
    * can lead to an irreparable contract.
    *
-   * @circuitInfo k=10, rows=71
+   * @constraints k=10, rows=71
    *
    * @param {Opaque<"string">} name_ - The name of the token.
    * @param {Opaque<"string">} symbol_ - The symbol of the token.
@@ -164,7 +178,7 @@ module FungibleToken {
   /**
    * @description Returns the token name.
    *
-   * @circuitInfo k=6, rows=28
+   * @constraints k=6, rows=26
    *
    * Requirements:
    *
@@ -180,7 +194,7 @@ module FungibleToken {
   /**
    * @description Returns the symbol of the token.
    *
-   * @circuitInfo k=6, rows=28
+   * @constraints k=6, rows=26
    *
    * Requirements:
    *
@@ -196,7 +210,7 @@ module FungibleToken {
   /**
    * @description Returns the number of decimals used to get its user representation.
    *
-   * @circuitInfo k=6, rows=28
+   * @constraints k=6, rows=26
    *
    * Requirements:
    *
@@ -212,7 +226,7 @@ module FungibleToken {
   /**
    * @description Returns the value of tokens in existence.
    *
-   * @circuitInfo k=6, rows=28
+   * @constraints k=6, rows=26
    *
    * Requirements:
    *
@@ -228,7 +242,7 @@ module FungibleToken {
   /**
    * @description Returns the value of tokens owned by `account`.
    *
-   * @circuitInfo k=10, rows=673
+   * @constraints k=10, rows=668
    *
    * @dev Manually checks if `account` is a key in the map and returns 0 if it is not.
    *
@@ -253,7 +267,7 @@ module FungibleToken {
   /**
    * @description Moves a `value` amount of tokens from the caller's account to `to`.
    *
-   * @circuitInfo k=13, rows=3985
+   * @constraints k=13, rows=3743
    *
    * @notice Transfers to contract addresses are currently disallowed until contract-to-contract
    * interactions are supported in Compact. This restriction prevents assets from
@@ -284,7 +298,7 @@ module FungibleToken {
   /**
    * @description Unsafe variant of `transfer` which allows transfers to contract addresses.
    *
-   * @circuitInfo k=13, rows=3982
+   * @constraints k=13, rows=3740
    *
    * @warning Transfers to contract addresses are considered unsafe because contract-to-contract
    * calls are not currently supported. Tokens sent to a contract address may become irretrievable.
@@ -314,7 +328,7 @@ module FungibleToken {
    * @description Returns the remaining number of tokens that `spender` will be allowed to spend on behalf of `owner`
    * through `transferFrom`. This value changes when `approve` or `transferFrom` are called.
    *
-   * @circuitInfo k=11, rows=1346
+   * @constraints k=11, rows=1350
    *
    * @dev Manually checks if `owner` and `spender` are keys in the map and returns 0 if they are not.
    *
@@ -344,7 +358,7 @@ module FungibleToken {
   /**
    * @description Sets a `value` amount of tokens as allowance of `spender` over the caller's tokens.
    *
-   * @circuitInfo k=13, rows=3072
+   * @constraints k=13, rows=3066
    *
    * Requirements:
    *
@@ -369,7 +383,7 @@ module FungibleToken {
    * @description Moves `value` tokens from `fromAddress` to `to` using the allowance mechanism.
    * `value` is the deducted from the caller's allowance.
    *
-   * @circuitInfo k=13, rows=4960
+   * @constraints k=13, rows=4906
    *
    * @notice Transfers to contract addresses are currently disallowed until contract-to-contract
    * interactions are supported in Compact. This restriction prevents assets from
@@ -403,7 +417,7 @@ module FungibleToken {
   /**
    * @description Unsafe variant of `transferFrom` which allows transfers to contract addresses.
    *
-   * @circuitInfo k=13, rows=4957
+   * @constraints k=13, rows=4903
    *
    * @warning Transfers to contract addresses are considered unsafe because contract-to-contract
    * calls are not currently supported. Tokens sent to a contract address may become irretrievable.
@@ -440,7 +454,7 @@ module FungibleToken {
    * This circuit is equivalent to {transfer}, and can be used to
    * e.g. implement automatic token fees, slashing mechanisms, etc.
    *
-   * @circuitInfo k=12, rows=2345
+   * @constraints k=12, rows=2125
    *
    * @notice Transfers to contract addresses are currently disallowed until contract-to-contract
    * interactions are supported in Compact. This restriction prevents assets from
@@ -473,7 +487,7 @@ module FungibleToken {
   /**
    * @description Unsafe variant of `transferFrom` which allows transfers to contract addresses.
    *
-   * @circuitInfo k=12, rows=2342
+   * @constraints k=12, rows=2122
    *
    * @warning Transfers to contract addresses are considered unsafe because contract-to-contract
    * calls are not currently supported. Tokens sent to a contract address may become irretrievable.
@@ -507,7 +521,7 @@ module FungibleToken {
    * (or `to`) is the zero address.
    * @dev Checks for a mint overflow in order to output a more readable error message.
    *
-   * @circuitInfo k=11, rows=1305
+   * @constraints k=11, rows=1305
    *
    * Requirements:
    *
@@ -551,7 +565,7 @@ module FungibleToken {
    * @description Creates a `value` amount of tokens and assigns them to `account`,
    * by transferring it from the zero address. Relies on the `update` mechanism.
    *
-   * @circuitInfo k=11, rows=1437
+   * @constraints k=11, rows=1328
    *
    * @notice Transfers to contract addresses are currently disallowed until contract-to-contract
    * interactions are supported in Compact. This restriction prevents assets from
@@ -577,7 +591,7 @@ module FungibleToken {
   /**
    * @description Unsafe variant of `_mint` which allows transfers to contract addresses.
    *
-   * @circuitInfo k=11, rows=1434
+   * @constraints k=11, rows=1325
    *
    * @warning Transfers to contract addresses are considered unsafe because contract-to-contract
    * calls are not currently supported. Tokens sent to a contract address may become irretrievable.
@@ -605,7 +619,7 @@ module FungibleToken {
    * @description Destroys a `value` amount of tokens from `account`, lowering the total supply.
    * Relies on the `_update` mechanism.
    *
-   * @circuitInfo k=11, rows=1377
+   * @constraints k=11, rows=1268
    *
    * Requirements:
    *
@@ -628,7 +642,7 @@ module FungibleToken {
    * This circuit is equivalent to `approve`, and can be used to
    * e.g. set automatic allowances for certain subsystems, etc.
    *
-   * @circuitInfo k=11, rows=1406
+   * @constraints k=11, rows=1407
    *
    * Requirements:
    *
@@ -667,7 +681,7 @@ module FungibleToken {
    * @description Updates `owner`'s allowance for `spender` based on spent `value`.
    * Does not update the allowance value in case of infinite allowance.
    *
-   * @circuitInfo k=11, rows=1729
+   * @constraints k=11, rows=1935
    *
    * Requirements:
    *

package/token/MultiToken.compact

@@ -1,5 +1,5 @@
 // SPDX-License-Identifier: MIT
-// OpenZeppelin Compact Contracts v0.4.0-alpha.1 (token/MultiToken.compact)
+// OpenZeppelin Compact Contracts v0.4.0-alpha.2 (token/MultiToken.compact)
 
 pragma language_version >= 0.26.0;
 
@@ -176,7 +176,7 @@ module MultiToken {
   /**
    * @description Initializes the contract by setting the base URI for all tokens.
    *
-   * @circuitInfo k=6, rows=33
+   * @constraints k=6, rows=31
    *
    * Requirements:
    *
@@ -224,7 +224,7 @@ module MultiToken {
    * Clients calling this function must replace the `\{id\}` substring with the
    * actual token type ID.
    *
-   * @circuitInfo k=8, rows=176
+   * @constraints k=8, rows=176
    *
    * Requirements:
    *
@@ -241,7 +241,7 @@ module MultiToken {
   /**
    * @description Returns the amount of `id` tokens owned by `account`.
    *
-   * @circuitInfo k=10, rows=875
+   * @constraints k=10, rows=867
    *
    * Requirements:
    *
@@ -270,7 +270,7 @@ module MultiToken {
    * In the case of an external (non-contract) caller, the caller's identity is derived from the `wit_MultiTokenSK`
    * witness as `persistentHash(secretKey)`.
    *
-   * @circuitInfo k=13, rows=2944
+   * @constraints k=13, rows=2938
    *
    * Requirements:
    *
@@ -295,7 +295,7 @@ module MultiToken {
   /**
    * @description Queries if `operator` is an authorized operator for `account`.
    *
-   * @circuitInfo k=11, rows=1343
+   * @constraints k=11, rows=1347
    *
    * Requirements:
    *
@@ -332,7 +332,7 @@ module MultiToken {
    * interactions are supported in Compact. This restriction prevents assets from
    * being inadvertently locked in contracts that cannot currently handle token receipt.
    *
-   * @circuitInfo k=13, rows=4926
+   * @constraints k=13, rows=4833
    *
    * Requirements:
    *
@@ -369,7 +369,7 @@ module MultiToken {
    * interactions are supported in Compact. This restriction prevents assets from
    * being inadvertently locked in contracts that cannot currently handle token receipt.
    *
-   * @circuitInfo k=12, rows=2450
+   * @constraints k=12, rows=2381
    *
    * Requirements:
    *
@@ -462,7 +462,7 @@ module MultiToken {
    * calls are not currently supported. Tokens sent to a contract address may become irretrievable.
    * Once contract-to-contract calls are supported, this circuit may be deprecated.
    *
-   * @circuitInfo k=13, rows=4925
+   * @constraints k=13, rows=4832
    *
    * Requirements:
    *
@@ -504,7 +504,7 @@ module MultiToken {
    * calls are not currently supported. Tokens sent to a contract address may become irretrievable.
    * Once contract-to-contract calls are supported, this circuit may be deprecated.
    *
-   * @circuitInfo k=12, rows=2449
+   * @constraints k=12, rows=2380
    *
    * Requirements:
    *
@@ -546,7 +546,7 @@ module MultiToken {
    * `https://token-cdn-domain/000000000000000000000000000000000000000000000000000000000004cce0.json`
    * for token type ID 0x4cce0.
    *
-   * @circuitInfo k=6, rows=28
+   * @constraints k=6, rows=26
    *
    * Requirements:
    *
@@ -567,7 +567,7 @@ module MultiToken {
    * interactions are supported in Compact. This restriction prevents assets from
    * being inadvertently locked in contracts that cannot currently handle token receipt.
    *
-   * @circuitInfo k=11, rows=1531
+   * @constraints k=11, rows=1449
    *
    * Requirements:
    *
@@ -596,7 +596,7 @@ module MultiToken {
    * calls are not currently supported. Tokens sent to a contract address may become irretrievable.
    * Once contract-to-contract calls are supported, this circuit may be deprecated.
    *
-   * @circuitInfo k=11, rows=1530
+   * @constraints k=11, rows=1448
    *
    * Requirements:
    *
@@ -621,7 +621,7 @@ module MultiToken {
   /**
    * @description Destroys a `value` amount of tokens of type `id` from `fromAddress`.
    *
-   * @circuitInfo k=11, rows=1222
+   * @constraints k=11, rows=1275
    *
    * Requirements:
    *
@@ -649,7 +649,7 @@ module MultiToken {
    * @notice This circuit does not check for access permissions but can be useful as a building block
    * for more complex contract logic.
    *
-   * @circuitInfo k=11, rows=1279
+   * @constraints k=11, rows=1280
    *
    * Requirements:
    *

package/token/NativeShieldedToken.compact

@@ -1,5 +1,5 @@
 // SPDX-License-Identifier: MIT
-// OpenZeppelin Compact Contracts v0.4.0-alpha.1 (token/NativeShieldedToken.compact)
+// OpenZeppelin Compact Contracts v0.4.0-alpha.2 (token/NativeShieldedToken.compact)
 
 pragma language_version >= 0.26.0;
 
@@ -106,7 +106,7 @@ module NativeShieldedToken {
   /**
    * @description Returns whether the contract has been initialized.
    *
-   * @circuitInfo k=6, rows=26
+   * @constraints k=6, rows=24
    *
    * @return {Boolean} - True once `initialize` has run.
    */
@@ -117,7 +117,7 @@ module NativeShieldedToken {
   /**
    * @description Returns the token name.
    *
-   * @circuitInfo k=6, rows=28
+   * @constraints k=6, rows=26
    *
    * Requirements:
    *
@@ -132,7 +132,7 @@ module NativeShieldedToken {
   /**
    * @description Returns the symbol of the token.
    *
-   * @circuitInfo k=6, rows=28
+   * @constraints k=6, rows=26
    *
    * Requirements:
    *
@@ -147,7 +147,7 @@ module NativeShieldedToken {
   /**
    * @description Returns the number of decimals used to get its user representation.
    *
-   * @circuitInfo k=6, rows=28
+   * @constraints k=6, rows=26
    *
    * Requirements:
    *
@@ -163,7 +163,7 @@ module NativeShieldedToken {
    * @description Returns this token's coin color:
    * `tokenType(_domain, kernel.self())`, computed at call time.
    *
-   * @circuitInfo k=13, rows=3971
+   * @constraints k=13, rows=3962
    *
    * Requirements:
    *
@@ -190,7 +190,7 @@ module NativeShieldedToken {
    * recipient; callers SHOULD deliver it out of band. Wallets cannot detect
    * contract-minted coins by scanning the chain.
    *
-   * @circuitInfo k=14, rows=10843
+   * @constraints k=14, rows=10820
    *
    * Requirements:
    *
@@ -229,7 +229,7 @@ module NativeShieldedToken {
    * `refundTo`; callers SHOULD deliver it out of band. Wallets cannot detect
    * contract-sent coins by scanning the chain.
    *
-   * @circuitInfo k=16, rows=47656
+   * @constraints k=16, rows=47477
    *
    * Requirements:
    *
@@ -263,7 +263,7 @@ module NativeShieldedToken {
    * ledger state: the change replaces `coin` as the contract's holding, and
    * its info is not otherwise recoverable.
    *
-   * @circuitInfo k=15, rows=23307
+   * @constraints k=15, rows=23208
    *
    * Requirements:
    *