@openzeppelin/miden-multisig-client 0.13.0 → 0.13.2

package/dist/transport/http.js

@@ -1,162 +0,0 @@
-/**
- * HTTP client for PSM server communication.
- */
-/**
- * Error thrown by the PSM HTTP client.
- */
-export class PsmHttpError extends Error {
-    status;
-    statusText;
-    body;
-    constructor(status, statusText, body) {
-        super(`PSM HTTP error ${status}: ${statusText} - ${body}`);
-        this.status = status;
-        this.statusText = statusText;
-        this.body = body;
-        this.name = 'PsmHttpError';
-    }
-}
-/**
- * HTTP client for PSM server.
- */
-export class PsmHttpClient {
-    baseUrl;
-    signer = null;
-    constructor(baseUrl) {
-        this.baseUrl = baseUrl;
-    }
-    /**
-     * Set the signer for authenticated requests.
-     */
-    setSigner(signer) {
-        this.signer = signer;
-    }
-    /**
-     * Get the PSM server's public key.
-     */
-    async getPubkey() {
-        const response = await this.fetch('/pubkey', { method: 'GET' });
-        const data = (await response.json());
-        return data.pubkey;
-    }
-    /**
-     * Configure/register an account on PSM.
-     */
-    async configure(request) {
-        const response = await this.fetchAuthenticated('/configure', {
-            method: 'POST',
-            body: JSON.stringify(request),
-        }, request.account_id);
-        return (await response.json());
-    }
-    /**
-     * Get account state from PSM.
-     */
-    async getState(accountId) {
-        const params = new URLSearchParams({ account_id: accountId });
-        const response = await this.fetchAuthenticated(`/state?${params}`, {
-            method: 'GET',
-        }, accountId);
-        return (await response.json());
-    }
-    /**
-     * Get all delta proposals for an account.
-     */
-    async getDeltaProposals(accountId) {
-        const params = new URLSearchParams({ account_id: accountId });
-        const response = await this.fetchAuthenticated(`/delta/proposal?${params}`, {
-            method: 'GET',
-        }, accountId);
-        const data = (await response.json());
-        return data.proposals;
-    }
-    /**
-     * Push a new delta proposal.
-     */
-    async pushDeltaProposal(request) {
-        const response = await this.fetchAuthenticated('/delta/proposal', {
-            method: 'POST',
-            body: JSON.stringify(request),
-        }, request.account_id);
-        return (await response.json());
-    }
-    /**
-     * Sign a delta proposal.
-     */
-    async signDeltaProposal(request) {
-        const response = await this.fetchAuthenticated('/delta/proposal', {
-            method: 'PUT',
-            body: JSON.stringify(request),
-        }, request.account_id);
-        return (await response.json());
-    }
-    /**
-     * Push a delta (execute a proposal).
-     */
-    async pushDelta(delta) {
-        const response = await this.fetchAuthenticated('/delta', {
-            method: 'POST',
-            body: JSON.stringify(delta),
-        }, delta.account_id);
-        return (await response.json());
-    }
-    /**
-     * Get a specific delta by nonce.
-     */
-    async getDelta(accountId, nonce) {
-        const params = new URLSearchParams({
-            account_id: accountId,
-            nonce: nonce.toString(),
-        });
-        const response = await this.fetchAuthenticated(`/delta?${params}`, {
-            method: 'GET',
-        }, accountId);
-        return (await response.json());
-    }
-    /**
-     * Get merged delta since a nonce.
-     */
-    async getDeltaSince(accountId, fromNonce) {
-        const params = new URLSearchParams({
-            account_id: accountId,
-            nonce: fromNonce.toString(),
-        });
-        const response = await this.fetchAuthenticated(`/delta/since?${params}`, {
-            method: 'GET',
-        }, accountId);
-        return (await response.json());
-    }
-    // ==========================================================================
-    // Private helpers
-    // ==========================================================================
-    async fetch(path, init) {
-        const url = `${this.baseUrl}${path}`;
-        const response = await fetch(url, {
-            ...init,
-            headers: {
-                'Content-Type': 'application/json',
-                ...init.headers,
-            },
-        });
-        if (!response.ok) {
-            const body = await response.text();
-            throw new PsmHttpError(response.status, response.statusText, body);
-        }
-        return response;
-    }
-    async fetchAuthenticated(path, init, accountId) {
-        if (!this.signer) {
-            throw new Error('No signer configured. Call setSigner() first.');
-        }
-        const signature = this.signer.signAccountId(accountId);
-        return this.fetch(path, {
-            ...init,
-            headers: {
-                ...init.headers,
-                'x-pubkey': this.signer.publicKey,
-                'x-signature': signature,
-            },
-        });
-    }
-}
-//# sourceMappingURL=http.js.map

package/dist/transport/http.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"http.js","sourceRoot":"","sources":["../../src/transport/http.ts"],"names":[],"mappings":"AAAA;;GAEG;AAgBH;;GAEG;AACH,MAAM,OAAO,YAAa,SAAQ,KAAK;IAEnB;IACA;IACA;IAHlB,YACkB,MAAc,EACd,UAAkB,EAClB,IAAY;QAE5B,KAAK,CAAC,kBAAkB,MAAM,KAAK,UAAU,MAAM,IAAI,EAAE,CAAC,CAAC;QAJ3C,WAAM,GAAN,MAAM,CAAQ;QACd,eAAU,GAAV,UAAU,CAAQ;QAClB,SAAI,GAAJ,IAAI,CAAQ;QAG5B,IAAI,CAAC,IAAI,GAAG,cAAc,CAAC;IAC7B,CAAC;CACF;AAED;;GAEG;AACH,MAAM,OAAO,aAAa;IAGK;IAFrB,MAAM,GAAkB,IAAI,CAAC;IAErC,YAA6B,OAAe;QAAf,YAAO,GAAP,OAAO,CAAQ;IAAG,CAAC;IAEhD;;OAEG;IACH,SAAS,CAAC,MAAc;QACtB,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC;IACvB,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,SAAS;QACb,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,SAAS,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,CAAC;QAChE,MAAM,IAAI,GAAG,CAAC,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAmB,CAAC;QACvD,OAAO,IAAI,CAAC,MAAM,CAAC;IACrB,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,SAAS,CAAC,OAAyB;QACvC,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,kBAAkB,CAAC,YAAY,EAAE;YAC3D,MAAM,EAAE,MAAM;YACd,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC;SAC9B,EAAE,OAAO,CAAC,UAAU,CAAC,CAAC;QACvB,OAAO,CAAC,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAsB,CAAC;IACtD,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,QAAQ,CAAC,SAAiB;QAC9B,MAAM,MAAM,GAAG,IAAI,eAAe,CAAC,EAAE,UAAU,EAAE,SAAS,EAAE,CAAC,CAAC;QAC9D,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,kBAAkB,CAAC,UAAU,MAAM,EAAE,EAAE;YACjE,MAAM,EAAE,KAAK;SACd,EAAE,SAAS,CAAC,CAAC;QACd,OAAO,CAAC,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAgB,CAAC;IAChD,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,iBAAiB,CAAC,SAAiB;QACvC,MAAM,MAAM,GAAG,IAAI,eAAe,CAAC,EAAE,UAAU,EAAE,SAAS,EAAE,CAAC,CAAC;QAC9D,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,kBAAkB,CAAC,mBAAmB,MAAM,EAAE,EAAE;YAC1E,MAAM,EAAE,KAAK;SACd,EAAE,SAAS,CAAC,CAAC;QACd,MAAM,IAAI,GAAG,CAAC,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAsB,CAAC;QAC1D,OAAO,IAAI,CAAC,SAAS,CAAC;IACxB,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,iBAAiB,CAAC,OAA6B;QACnD,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,kBAAkB,CAAC,iBAAiB,EAAE;YAChE,MAAM,EAAE,MAAM;YACd,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC;SAC9B,EAAE,OAAO,CAAC,UAAU,CAAC,CAAC;QACvB,OAAO,CAAC,MAAM,QAAQ,CAAC,IAAI,EAAE,CAA0B,CAAC;IAC1D,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,iBAAiB,CAAC,OAA4B;QAClD,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,kBAAkB,CAAC,iBAAiB,EAAE;YAChE,MAAM,EAAE,KAAK;YACb,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC;SAC9B,EAAE,OAAO,CAAC,UAAU,CAAC,CAAC;QACvB,OAAO,CAAC,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAgB,CAAC;IAChD,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,SAAS,CAAC,KAAkB;QAChC,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,kBAAkB,CAAC,QAAQ,EAAE;YACvD,MAAM,EAAE,MAAM;YACd,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC;SAC5B,EAAE,KAAK,CAAC,UAAU,CAAC,CAAC;QACrB,OAAO,CAAC,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAgB,CAAC;IAChD,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,QAAQ,CAAC,SAAiB,EAAE,KAAa;QAC7C,MAAM,MAAM,GAAG,IAAI,eAAe,CAAC;YACjC,UAAU,EAAE,SAAS;YACrB,KAAK,EAAE,KAAK,CAAC,QAAQ,EAAE;SACxB,CAAC,CAAC;QACH,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,kBAAkB,CAAC,UAAU,MAAM,EAAE,EAAE;YACjE,MAAM,EAAE,KAAK;SACd,EAAE,SAAS,CAAC,CAAC;QACd,OAAO,CAAC,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAgB,CAAC;IAChD,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,aAAa,CAAC,SAAiB,EAAE,SAAiB;QACtD,MAAM,MAAM,GAAG,IAAI,eAAe,CAAC;YACjC,UAAU,EAAE,SAAS;YACrB,KAAK,EAAE,SAAS,CAAC,QAAQ,EAAE;SAC5B,CAAC,CAAC;QACH,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,kBAAkB,CAAC,gBAAgB,MAAM,EAAE,EAAE;YACvE,MAAM,EAAE,KAAK;SACd,EAAE,SAAS,CAAC,CAAC;QACd,OAAO,CAAC,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAgB,CAAC;IAChD,CAAC;IAED,6EAA6E;IAC7E,kBAAkB;IAClB,6EAA6E;IAErE,KAAK,CAAC,KAAK,CAAC,IAAY,EAAE,IAAiB;QACjD,MAAM,GAAG,GAAG,GAAG,IAAI,CAAC,OAAO,GAAG,IAAI,EAAE,CAAC;QACrC,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,GAAG,EAAE;YAChC,GAAG,IAAI;YACP,OAAO,EAAE;gBACP,cAAc,EAAE,kBAAkB;gBAClC,GAAG,IAAI,CAAC,OAAO;aAChB;SACF,CAAC,CAAC;QAEH,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;YACjB,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC;YACnC,MAAM,IAAI,YAAY,CAAC,QAAQ,CAAC,MAAM,EAAE,QAAQ,CAAC,UAAU,EAAE,IAAI,CAAC,CAAC;QACrE,CAAC;QAED,OAAO,QAAQ,CAAC;IAClB,CAAC;IAEO,KAAK,CAAC,kBAAkB,CAC9B,IAAY,EACZ,IAAiB,EACjB,SAAiB;QAEjB,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC;YACjB,MAAM,IAAI,KAAK,CAAC,+CAA+C,CAAC,CAAC;QACnE,CAAC;QAED,MAAM,SAAS,GAAG,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,SAAS,CAAC,CAAC;QAEvD,OAAO,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE;YACtB,GAAG,IAAI;YACP,OAAO,EAAE;gBACP,GAAG,IAAI,CAAC,OAAO;gBACf,UAAU,EAAE,IAAI,CAAC,MAAM,CAAC,SAAS;gBACjC,aAAa,EAAE,SAAS;aACzB;SACF,CAAC,CAAC;IACL,CAAC;CACF"}

package/dist/transport/index.d.ts

@@ -1,5 +0,0 @@
-/**
- * Transport layer for PSM server communication.
- */
-export { PsmHttpClient, PsmHttpError } from './http.js';
-//# sourceMappingURL=index.d.ts.map

package/dist/transport/index.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/transport/index.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,OAAO,EAAE,aAAa,EAAE,YAAY,EAAE,MAAM,WAAW,CAAC"}

package/dist/transport/index.js

@@ -1,5 +0,0 @@
-/**
- * Transport layer for PSM server communication.
- */
-export { PsmHttpClient, PsmHttpError } from './http.js';
-//# sourceMappingURL=index.js.map

package/dist/transport/index.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/transport/index.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,OAAO,EAAE,aAAa,EAAE,YAAY,EAAE,MAAM,WAAW,CAAC"}

package/masm/psm.masm

@@ -1,178 +0,0 @@
-# Private State Manager (PSM) Authentication Component
-#
-# This component provides PSM signature verification for accounts.
-# It can be used standalone or in conjunction with other auth components like multisig.
-
-use miden::active_account
-use miden::native_account
-
-# Type definitions for v0.12 syntax
-type BeWord = struct @bigendian { a: felt, b: felt, c: felt, d: felt }
-
-# IMPORTANT SECURITY NOTES
-# --------------------------------------------------------------------------------
-# - The selector in `PSM_SELECTOR_SLOT` controls whether the extra PSM signature
-#   is enforced:
-#     * PSM_ON  => exactly one valid PSM signature is required.
-#     * PSM_OFF => PSM signature is skipped for that call.
-#
-# - `verify_psm_signature` reads the selector from initial storage state.
-#   This means changes made during the same transaction won't affect the check.
-#
-# - `enable_psm` / `disable_psm` procedures allow explicit control over PSM state.
-#
-# - `update_psm_public_key`:
-#     * Installs a new PSM public key in the map at `PSM_PUBLIC_KEY_MAP_SLOT`.
-#     * Does not itself perform any signature checks.
-#     * To update the key without requiring PSM signature, ensure selector is OFF.
-#
-# Storage Layout
-# --------------------------------------------------------------------------------
-#
-# +---------------------+---------------+
-# |     DESCRIPTION     |     SLOT      |
-# +---------------------+---------------+
-# | PSM SELECTOR (word) |       0       |
-# | PSM PUBLIC KEY MAP  |       1       |
-# +---------------------+---------------+
-#
-# - PSM_SELECTOR_SLOT (0):
-#     * Stores a word that is compared against [1, 0, 0, 0] (PSM_ON).
-#     * Any value != PSM_ON is treated as PSM_OFF.
-#
-# - PSM_PUBLIC_KEY_MAP_SLOT (1):
-#     * A map from a fixed key [0, 0, 0, 0] to the single PSM public key:
-#         [0, 0, 0, 0] => PSM_PUBLIC_KEY
-#     * PSM_PUBLIC_KEY is a RPO Falcon 512 public key represented as a word.
-
-# CONSTANTS
-# =================================================================================================
-
-# Slot where the PSM selector flag is stored:
-# - PSM_ON  => PSM signature required
-# - PSM_OFF => PSM signature skipped
-const PSM_SELECTOR_SLOT = 0
-
-# Map slot for PSM public key
-# Uses exactly one PSM public key at index [0, 0, 0, 0]
-# [0, 0, 0, 0] => PSM_PUBLIC_KEY
-const PSM_PUBLIC_KEY_MAP_SLOT = 1
-
-# Selector flag values
-const PSM_ON = [1, 0, 0, 0]
-const PSM_OFF = [0, 0, 0, 0]
-
-# The event emitted when a signature is not found for a required signer.
-const AUTH_UNAUTHORIZED_EVENT = event("miden::auth::unauthorized")
-
-# PSM PROCEDURES
-# =================================================================================================
-
-#! Enable PSM verification by setting the selector to ON.
-#!
-#! Operand stack inputs: []
-#! Outputs: []
-#!
-#! Notes:
-#! - Sets PSM_SELECTOR_SLOT to PSM_ON (1)
-#! - After this, transactions will require PSM signature verification
-proc.enable_psm
-    push.PSM_ON
-    # => [PSM_ON]
-
-    push.PSM_SELECTOR_SLOT
-    # => [PSM_SELECTOR_SLOT, PSM_ON]
-
-    exec.native_account::set_item
-    # => [OLD_ROOT]
-
-    dropw
-    # => []
-end
-
-#! Disable PSM verification by setting the selector to OFF.
-#!
-#! Operand stack inputs: []
-#! Outputs: []
-#!
-#! Notes:
-#! - Sets PSM_SELECTOR_SLOT to PSM_OFF (0)
-#! - After this, transactions will NOT require PSM signature verification
-proc.disable_psm
-    push.PSM_OFF
-    # => [PSM_OFF]
-
-    push.PSM_SELECTOR_SLOT
-    # => [PSM_SELECTOR_SLOT, PSM_OFF]
-
-    exec.native_account::set_item
-    # => [OLD_ROOT]
-
-    dropw
-    # => []
-end
-
-#! Update the PSM public key.
-#!
-#! Operand stack inputs: []
-#! Advice stack inputs:  [PUB_KEY]
-#!   - PUB_KEY is the new PSM RPO Falcon 512 public key
-#!
-#! Notes:
-#! - Stores PUB_KEY into PSM_PUBLIC_KEY_MAP_SLOT:
-#!      [0, 0, 0, 0] => PSM_PUBLIC_KEY
-#! - To update the key without requiring PSM signature, ensure
-#!   PSM_SELECTOR_SLOT = 0 (OFF) before calling this.
-pub proc update_psm_public_key
-    exec.disable_psm
-    # ------ Update the PSM public key ------
-    adv_loadw
-    # => [PUB_KEY]
-
-    push.0.0.0.0
-    # => [MAP_KEY, PUB_KEY]
-    # Note that MAP_KEY is [0, 0, 0, 0] for a single PSM_KEY
-
-    push.PSM_PUBLIC_KEY_MAP_SLOT
-    # => [index, MAP_KEY, PUB_KEY]
-
-    exec.native_account::set_map_item
-    # => [OLD_MAP_ROOT, OLD_MAP_VALUE]
-
-    dropw dropw
-    # => []
-end
-
-#! Conditionally verify a "PSM" signature against a stored public key hash.
-#! The condition is controlled by the selector at PSM_SELECTOR_SLOT.
-#!
-#! Inputs:  [MSG]
-#! Outputs: [MSG]
-#!
-#! Panics if:
-#! - Selector is ON but the provided PSM signature is invalid or missing.
-#!
-#! Notes:
-#! - MSG is TX_SUMMARY_COMMITMENT provided by auth procedure
-#! - If selector is OFF (0), PSM verification is skipped
-#! - Selector value is read from initial storage state
-pub proc verify_psm_signature(msg: BeWord)
-    push.PSM_SELECTOR_SLOT
-    exec.active_account::get_item
-    drop drop drop
-    # => [selector, MSG]
-
-    push.1 eq
-    if.true
-        push.1
-        push.PSM_PUBLIC_KEY_MAP_SLOT
-        exec.::miden::auth::rpo_falcon512::verify_signatures
-        push.1 neq
-        if.true
-            emit.AUTH_UNAUTHORIZED_EVENT
-            push.0 assert.err="invalid PSM signature"
-        end
-    end
-    # => [MSG]
-    exec.enable_psm
-end

package/masm/psm_ecdsa.masm

@@ -1,179 +0,0 @@
-# Private State Manager (PSM) Authentication Component (ECDSA)
-#
-# This component provides PSM signature verification for accounts using
-# ECDSA secp256k1 (k256/keccak) signatures.
-# It can be used standalone or in conjunction with other auth components like multisig.
-
-use miden::active_account
-use miden::native_account
-
-# Type definitions for v0.12 syntax
-type BeWord = struct @bigendian { a: felt, b: felt, c: felt, d: felt }
-
-# IMPORTANT SECURITY NOTES
-# --------------------------------------------------------------------------------
-# - The selector in `PSM_SELECTOR_SLOT` controls whether the extra PSM signature
-#   is enforced:
-#     * PSM_ON  => exactly one valid PSM signature is required.
-#     * PSM_OFF => PSM signature is skipped for that call.
-#
-# - `verify_psm_signature` reads the selector from initial storage state.
-#   This means changes made during the same transaction won't affect the check.
-#
-# - `enable_psm` / `disable_psm` procedures allow explicit control over PSM state.
-#
-# - `update_psm_public_key`:
-#     * Installs a new PSM public key in the map at `PSM_PUBLIC_KEY_MAP_SLOT`.
-#     * Does not itself perform any signature checks.
-#     * To update the key without requiring PSM signature, ensure selector is OFF.
-#
-# Storage Layout
-# --------------------------------------------------------------------------------
-#
-# +---------------------+---------------+
-# |     DESCRIPTION     |     SLOT      |
-# +---------------------+---------------+
-# | PSM SELECTOR (word) |       0       |
-# | PSM PUBLIC KEY MAP  |       1       |
-# +---------------------+---------------+
-#
-# - PSM_SELECTOR_SLOT (0):
-#     * Stores a word that is compared against [1, 0, 0, 0] (PSM_ON).
-#     * Any value != PSM_ON is treated as PSM_OFF.
-#
-# - PSM_PUBLIC_KEY_MAP_SLOT (1):
-#     * A map from a fixed key [0, 0, 0, 0] to the single PSM public key:
-#         [0, 0, 0, 0] => PSM_PUBLIC_KEY
-#     * PSM_PUBLIC_KEY is an ECDSA secp256k1 public key represented as a word.
-
-# CONSTANTS
-# =================================================================================================
-
-# Slot where the PSM selector flag is stored:
-# - PSM_ON  => PSM signature required
-# - PSM_OFF => PSM signature skipped
-const PSM_SELECTOR_SLOT = 0
-
-# Map slot for PSM public key
-# Uses exactly one PSM public key at index [0, 0, 0, 0]
-# [0, 0, 0, 0] => PSM_PUBLIC_KEY
-const PSM_PUBLIC_KEY_MAP_SLOT = 1
-
-# Selector flag values
-const PSM_ON = [1, 0, 0, 0]
-const PSM_OFF = [0, 0, 0, 0]
-
-# The event emitted when a signature is not found for a required signer.
-const AUTH_UNAUTHORIZED_EVENT = event("miden::auth::unauthorized")
-
-# PSM PROCEDURES
-# =================================================================================================
-
-#! Enable PSM verification by setting the selector to ON.
-#!
-#! Operand stack inputs: []
-#! Outputs: []
-#!
-#! Notes:
-#! - Sets PSM_SELECTOR_SLOT to PSM_ON (1)
-#! - After this, transactions will require PSM signature verification
-proc.enable_psm
-    push.PSM_ON
-    # => [PSM_ON]
-
-    push.PSM_SELECTOR_SLOT
-    # => [PSM_SELECTOR_SLOT, PSM_ON]
-
-    exec.native_account::set_item
-    # => [OLD_ROOT]
-
-    dropw
-    # => []
-end
-
-#! Disable PSM verification by setting the selector to OFF.
-#!
-#! Operand stack inputs: []
-#! Outputs: []
-#!
-#! Notes:
-#! - Sets PSM_SELECTOR_SLOT to PSM_OFF (0)
-#! - After this, transactions will NOT require PSM signature verification
-proc.disable_psm
-    push.PSM_OFF
-    # => [PSM_OFF]
-
-    push.PSM_SELECTOR_SLOT
-    # => [PSM_SELECTOR_SLOT, PSM_OFF]
-
-    exec.native_account::set_item
-    # => [OLD_ROOT]
-
-    dropw
-    # => []
-end
-
-#! Update the PSM public key.
-#!
-#! Operand stack inputs: []
-#! Advice stack inputs:  [PUB_KEY]
-#!   - PUB_KEY is the new PSM ECDSA secp256k1 public key
-#!
-#! Notes:
-#! - Stores PUB_KEY into PSM_PUBLIC_KEY_MAP_SLOT:
-#!      [0, 0, 0, 0] => PSM_PUBLIC_KEY
-#! - To update the key without requiring PSM signature, ensure
-#!   PSM_SELECTOR_SLOT = 0 (OFF) before calling this.
-pub proc update_psm_public_key
-    exec.disable_psm
-    # ------ Update the PSM public key ------
-    adv_loadw
-    # => [PUB_KEY]
-
-    push.0.0.0.0
-    # => [MAP_KEY, PUB_KEY]
-    # Note that MAP_KEY is [0, 0, 0, 0] for a single PSM_KEY
-
-    push.PSM_PUBLIC_KEY_MAP_SLOT
-    # => [index, MAP_KEY, PUB_KEY]
-
-    exec.native_account::set_map_item
-    # => [OLD_MAP_ROOT, OLD_MAP_VALUE]
-
-    dropw dropw
-    # => []
-end
-
-#! Conditionally verify a "PSM" signature against a stored public key hash.
-#! The condition is controlled by the selector at PSM_SELECTOR_SLOT.
-#!
-#! Inputs:  [MSG]
-#! Outputs: [MSG]
-#!
-#! Panics if:
-#! - Selector is ON but the provided PSM signature is invalid or missing.
-#!
-#! Notes:
-#! - MSG is TX_SUMMARY_COMMITMENT provided by auth procedure
-#! - If selector is OFF (0), PSM verification is skipped
-#! - Selector value is read from initial storage state
-pub proc verify_psm_signature(msg: BeWord)
-    push.PSM_SELECTOR_SLOT
-    exec.active_account::get_item
-    drop drop drop
-    # => [selector, MSG]
-
-    push.1 eq
-    if.true
-        push.1
-        push.PSM_PUBLIC_KEY_MAP_SLOT
-        exec.::miden::auth::ecdsa_k256_keccak::verify_signatures
-        push.1 neq
-        if.true
-            emit.AUTH_UNAUTHORIZED_EVENT
-            push.0 assert.err="invalid PSM signature"
-        end
-    end
-    # => [MSG]
-    exec.enable_psm
-end