@openzeppelin/miden-multisig-client 0.13.4 → 0.14.5

package/README.md

@@ -17,26 +17,25 @@ Miden multisig accounts store their authentication logic on-chain, but **their s
 ## Installation
 
 ```bash
-npm install @openzeppelin/miden-multisig-client @demox-labs/miden-sdk
+npm install @openzeppelin/miden-multisig-client @miden-sdk/miden-sdk
 ```
 
 ## Setup
 
 ```typescript
 import { MultisigClient, FalconSigner } from '@openzeppelin/miden-multisig-client';
-import { WebClient, SecretKey } from '@demox-labs/miden-sdk';
+import { AuthSecretKey, MidenClient } from '@miden-sdk/miden-sdk';
 
-// Initialize Miden WebClient
-const webClient = await WebClient.createClient('https://rpc.testnet.miden.io:443');
+const midenClient = await MidenClient.createDevnet();
 
 // Create a signer from your secret key
-const secretKey = SecretKey.rpoFalconWithRNG(seed);
+const secretKey = AuthSecretKey.rpoFalconWithRNG(undefined);
 const signer = new FalconSigner(secretKey);
 
 // Create MultisigClient
-const client = new MultisigClient(webClient, {
+const client = new MultisigClient(midenClient, {
   guardianEndpoint: 'http://localhost:3000',
-  midenRpcEndpoint: 'https://rpc.testnet.miden.io:443',
+  midenRpcEndpoint: 'https://rpc.devnet.miden.io',
 });
 ```
 
@@ -94,12 +93,10 @@ console.log('Created:', state.createdAt);
 
 ```typescript
 // Create a proposal to add a new signer
-const nonce = Math.floor(Math.random() * 1_000_000_000);
 const proposal = await multisig.createAddSignerProposal(
-  webClient,
   newSignerCommitment, // Commitment of signer to add
-  nonce,               // Optional nonce (random value)
-  3,                   // Optional new threshold
+  undefined,
+  3,
 );
 console.log('Proposal ID:', proposal.id);
 ```
@@ -143,7 +140,7 @@ When a proposal has enough signatures:
 
 ```typescript
 if (proposal.status === 'ready') {
-  await multisig.executeProposal(proposal.id, webClient);
+  await multisig.executeProposal(proposal.id);
   console.log('Transaction executed on-chain!');
 }
 ```
@@ -190,7 +187,7 @@ const bytes = hexToUint8Array('deadbeef');
 
 // Add auth scheme prefix to signature
 const sigBytes = signatureHexToBytes(signatureHex);
-// => Uint8Array with 0x00 prefix (RpoFalcon512)
+// => Uint8Array with the Falcon Poseidon2 auth prefix
 ```
 
 ## Testing

package/dist/account/builder.d.ts

@@ -3,16 +3,16 @@
  *
  * This module provides functionality to create multisig accounts.
  */
-import { type WebClient } from '@miden-sdk/miden-sdk';
+import { type MidenClient } from '@miden-sdk/miden-sdk';
 import type { MultisigConfig, CreateAccountResult } from '../types.js';
 /**
  * Creates a multisig account with GUARDIAN authentication.
  *
- * @param webClient - Initialized Miden WebClient
+ * @param midenClient - Initialized MidenClient
  * @param config - Multisig configuration
  * @returns The created account and seed
  */
-export declare function createMultisigAccount(webClient: WebClient, config: MultisigConfig): Promise<CreateAccountResult>;
+export declare function createMultisigAccount(midenClient: MidenClient, config: MultisigConfig, midenRpcEndpoint?: string): Promise<CreateAccountResult>;
 /**
  * Validates a multisig configuration.
  *

package/dist/account/builder.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"builder.d.ts","sourceRoot":"","sources":["../../src/account/builder.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,EAKL,KAAK,SAAS,EACf,MAAM,sBAAsB,CAAC;AAC9B,OAAO,KAAK,EAAE,cAAc,EAAE,mBAAmB,EAAE,MAAM,aAAa,CAAC;AAcvE;;;;;;GAMG;AACH,wBAAsB,qBAAqB,CACzC,SAAS,EAAE,SAAS,EACpB,MAAM,EAAE,cAAc,GACrB,OAAO,CAAC,mBAAmB,CAAC,CAqD9B;AAED;;;;;GAKG;AACH,wBAAgB,sBAAsB,CAAC,MAAM,EAAE,cAAc,GAAG,IAAI,CA6CnE"}
+{"version":3,"file":"builder.d.ts","sourceRoot":"","sources":["../../src/account/builder.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,EAKL,KAAK,WAAW,EACjB,MAAM,sBAAsB,CAAC;AAC9B,OAAO,KAAK,EAAE,cAAc,EAAE,mBAAmB,EAAE,MAAM,aAAa,CAAC;AAevE;;;;;;GAMG;AACH,wBAAsB,qBAAqB,CACzC,WAAW,EAAE,WAAW,EACxB,MAAM,EAAE,cAAc,EACtB,gBAAgB,CAAC,EAAE,MAAM,GACxB,OAAO,CAAC,mBAAmB,CAAC,CAoD9B;AAED;;;;;GAKG;AACH,wBAAgB,sBAAsB,CAAC,MAAM,EAAE,cAAc,GAAG,IAAI,CA6CnE"}

package/dist/account/builder.js

@@ -4,6 +4,7 @@
  * This module provides functionality to create multisig accounts.
  */
 import { AccountBuilder, AccountComponent, AccountType, AccountStorageMode, } from '@miden-sdk/miden-sdk';
+import { getRawMidenClient } from '../raw-client.js';
 import { buildMultisigStorageSlots, buildGuardianStorageSlots } from './storage.js';
 import { MULTISIG_ECDSA_MASM, MULTISIG_MASM, GUARDIAN_ECDSA_MASM, GUARDIAN_MASM, } from './masm/auth.js';
 import { MULTISIG_GUARDIAN_ACCOUNT_COMPONENT_MASM, MULTISIG_GUARDIAN_ECDSA_ACCOUNT_COMPONENT_MASM, } from './masm/account-components/auth.js';
@@ -11,13 +12,14 @@ import { normalizeSignerCommitment } from '../utils/signature.js';
 /**
  * Creates a multisig account with GUARDIAN authentication.
  *
- * @param webClient - Initialized Miden WebClient
+ * @param midenClient - Initialized MidenClient
  * @param config - Multisig configuration
  * @returns The created account and seed
  */
-export async function createMultisigAccount(webClient, config) {
+export async function createMultisigAccount(midenClient, config, midenRpcEndpoint) {
     validateMultisigConfig(config);
     const signatureScheme = config.signatureScheme ?? 'falcon';
+    const rawClient = await getRawMidenClient(midenClient, midenRpcEndpoint);
     const authSlots = [
         ...buildMultisigStorageSlots(config),
         ...buildGuardianStorageSlots(config),
@@ -33,14 +35,12 @@ export async function createMultisigAccount(webClient, config) {
     const multisigLibraryPath = signatureScheme === 'ecdsa'
         ? 'openzeppelin::auth::multisig_ecdsa'
         : 'openzeppelin::auth::multisig';
-    const authBuilder = webClient.createCodeBuilder();
-    const guardianLib = authBuilder.buildLibrary(guardianLibraryPath, guardianMasm);
-    authBuilder.linkStaticLibrary(guardianLib);
-    const multisigLib = authBuilder.buildLibrary(multisigLibraryPath, multisigMasm);
-    authBuilder.linkStaticLibrary(multisigLib);
-    const authCode = authBuilder.compileAccountComponentCode(authComponentMasm);
+    const authBuilder = rawClient.createCodeBuilder();
+    authBuilder.linkModule(guardianLibraryPath, guardianMasm);
+    authBuilder.linkModule(multisigLibraryPath, multisigMasm);
+    const authComponentCode = authBuilder.compileAccountComponentCode(authComponentMasm);
     const authComponent = AccountComponent
-        .compile(authCode, authSlots)
+        .compile(authComponentCode, authSlots)
         .withSupportsAllTypes();
     let seed = config.seed;
     // Generate random seed if not provided
@@ -56,7 +56,7 @@ export async function createMultisigAccount(webClient, config) {
         .withAuthComponent(authComponent)
         .withBasicWalletComponent();
     const result = accountBuilder.build();
-    await webClient.newAccount(result.account, false);
+    await midenClient.accounts.insert({ account: result.account, overwrite: false });
     return {
         account: result.account,
         seed,

package/dist/account/builder.js.map

@@ -1 +1 @@
-{"version":3,"file":"builder.js","sourceRoot":"","sources":["../../src/account/builder.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,EACL,cAAc,EACd,gBAAgB,EAChB,WAAW,EACX,kBAAkB,GAEnB,MAAM,sBAAsB,CAAC;AAE9B,OAAO,EAAE,yBAAyB,EAAE,yBAAyB,EAAE,MAAM,cAAc,CAAC;AACpF,OAAO,EACL,mBAAmB,EACnB,aAAa,EACb,mBAAmB,EACnB,aAAa,GACd,MAAM,gBAAgB,CAAC;AACxB,OAAO,EACL,wCAAwC,EACxC,8CAA8C,GAC/C,MAAM,mCAAmC,CAAC;AAC3C,OAAO,EAAE,yBAAyB,EAAE,MAAM,uBAAuB,CAAC;AAElE;;;;;;GAMG;AACH,MAAM,CAAC,KAAK,UAAU,qBAAqB,CACzC,SAAoB,EACpB,MAAsB;IAEtB,sBAAsB,CAAC,MAAM,CAAC,CAAC;IAC/B,MAAM,eAAe,GAAG,MAAM,CAAC,eAAe,IAAI,QAAQ,CAAC;IAC3D,MAAM,SAAS,GAAG;QAChB,GAAG,yBAAyB,CAAC,MAAM,CAAC;QACpC,GAAG,yBAAyB,CAAC,MAAM,CAAC;KACrC,CAAC;IACF,MAAM,YAAY,GAAG,eAAe,KAAK,OAAO,CAAC,CAAC,CAAC,mBAAmB,CAAC,CAAC,CAAC,aAAa,CAAC;IACvF,MAAM,YAAY,GAAG,eAAe,KAAK,OAAO,CAAC,CAAC,CAAC,mBAAmB,CAAC,CAAC,CAAC,aAAa,CAAC;IACvF,MAAM,iBAAiB,GAAG,eAAe,KAAK,OAAO;QACnD,CAAC,CAAC,8CAA8C;QAChD,CAAC,CAAC,wCAAwC,CAAC;IAC7C,MAAM,mBAAmB,GAAG,eAAe,KAAK,OAAO;QACrD,CAAC,CAAC,oCAAoC;QACtC,CAAC,CAAC,8BAA8B,CAAC;IACnC,MAAM,mBAAmB,GAAG,eAAe,KAAK,OAAO;QACrD,CAAC,CAAC,oCAAoC;QACtC,CAAC,CAAC,8BAA8B,CAAC;IAEnC,MAAM,WAAW,GAAG,SAAS,CAAC,iBAAiB,EAAE,CAAC;IAClD,MAAM,WAAW,GAAG,WAAW,CAAC,YAAY,CAAC,mBAAmB,EAAE,YAAY,CAAC,CAAC;IAChF,WAAW,CAAC,iBAAiB,CAAC,WAAW,CAAC,CAAC;IAC3C,MAAM,WAAW,GAAG,WAAW,CAAC,YAAY,CAAC,mBAAmB,EAAE,YAAY,CAAC,CAAC;IAChF,WAAW,CAAC,iBAAiB,CAAC,WAAW,CAAC,CAAC;IAC3C,MAAM,QAAQ,GAAG,WAAW,CAAC,2BAA2B,CAAC,iBAAiB,CAAC,CAAC;IAC5E,MAAM,aAAa,GAAG,gBAAgB;SACnC,OAAO,CAAC,QAAQ,EAAE,SAAS,CAAC;SAC5B,oBAAoB,EAAE,CAAC;IAE1B,IAAI,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC;IACvB,uCAAuC;IACvC,IAAI,CAAC,IAAI,EAAE,CAAC;QACV,IAAI,GAAG,MAAM,CAAC,eAAe,CAAC,IAAI,UAAU,CAAC,EAAE,CAAC,CAAC,CAAC;IACpD,CAAC;IAED,MAAM,WAAW,GAAG,MAAM,CAAC,WAAW,KAAK,QAAQ;QACjD,CAAC,CAAC,kBAAkB,CAAC,MAAM,EAAE;QAC7B,CAAC,CAAC,kBAAkB,CAAC,OAAO,EAAE,CAAC;IAEjC,MAAM,cAAc,GAAG,IAAI,cAAc,CAAC,IAAI,CAAC;SAC5C,WAAW,CAAC,WAAW,CAAC,2BAA2B,CAAC;SACpD,WAAW,CAAC,WAAW,CAAC;SACxB,iBAAiB,CAAC,aAAa,CAAC;SAChC,wBAAwB,EAAE,CAAC;IAE9B,MAAM,MAAM,GAAG,cAAc,CAAC,KAAK,EAAE,CAAC;IAEtC,MAAM,SAAS,CAAC,UAAU,CAAC,MAAM,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;IAElD,OAAO;QACL,OAAO,EAAE,MAAM,CAAC,OAAO;QACvB,IAAI;KACL,CAAC;AACJ,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,sBAAsB,CAAC,MAAsB;IAC3D,IAAI,MAAM,CAAC,SAAS,KAAK,CAAC,EAAE,CAAC;QAC3B,MAAM,IAAI,KAAK,CAAC,kCAAkC,CAAC,CAAC;IACtD,CAAC;IACD,IAAI,MAAM,CAAC,iBAAiB,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC1C,MAAM,IAAI,KAAK,CAAC,4CAA4C,CAAC,CAAC;IAChE,CAAC;IAED,MAAM,iBAAiB,GAAG,IAAI,GAAG,EAAU,CAAC;IAC5C,KAAK,MAAM,gBAAgB,IAAI,MAAM,CAAC,iBAAiB,EAAE,CAAC;QACxD,MAAM,oBAAoB,GAAG,yBAAyB,CAAC,gBAAgB,CAAC,CAAC;QACzE,IAAI,iBAAiB,CAAC,GAAG,CAAC,oBAAoB,CAAC,EAAE,CAAC;YAChD,MAAM,IAAI,KAAK,CAAC,gCAAgC,oBAAoB,EAAE,CAAC,CAAC;QAC1E,CAAC;QACD,iBAAiB,CAAC,GAAG,CAAC,oBAAoB,CAAC,CAAC;IAC9C,CAAC;IAED,IAAI,MAAM,CAAC,SAAS,GAAG,MAAM,CAAC,iBAAiB,CAAC,MAAM,EAAE,CAAC;QACvD,MAAM,IAAI,KAAK,CACb,cAAc,MAAM,CAAC,SAAS,sCAAsC,MAAM,CAAC,iBAAiB,CAAC,MAAM,GAAG,CACvG,CAAC;IACJ,CAAC;IACD,IAAI,CAAC,MAAM,CAAC,kBAAkB,EAAE,CAAC;QAC/B,MAAM,IAAI,KAAK,CAAC,iCAAiC,CAAC,CAAC;IACrD,CAAC;IAED,4CAA4C;IAC5C,IAAI,MAAM,CAAC,mBAAmB,EAAE,CAAC;QAC/B,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAC;QAC/B,KAAK,MAAM,EAAE,IAAI,MAAM,CAAC,mBAAmB,EAAE,CAAC;YAC5C,IAAI,EAAE,CAAC,SAAS,GAAG,CAAC,EAAE,CAAC;gBACrB,MAAM,IAAI,KAAK,CAAC,wCAAwC,CAAC,CAAC;YAC5D,CAAC;YACD,IAAI,EAAE,CAAC,SAAS,GAAG,MAAM,CAAC,iBAAiB,CAAC,MAAM,EAAE,CAAC;gBACnD,MAAM,IAAI,KAAK,CACb,wBAAwB,EAAE,CAAC,SAAS,sCAAsC,MAAM,CAAC,iBAAiB,CAAC,MAAM,GAAG,CAC7G,CAAC;YACJ,CAAC;YAED,IAAI,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,SAAS,CAAC,EAAE,CAAC;gBAC3B,MAAM,IAAI,KAAK,CAAC,sCAAsC,EAAE,CAAC,SAAS,EAAE,CAAC,CAAC;YACxE,CAAC;YACD,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,SAAS,CAAC,CAAC;QACzB,CAAC;IACH,CAAC;AACH,CAAC"}
+{"version":3,"file":"builder.js","sourceRoot":"","sources":["../../src/account/builder.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,EACL,cAAc,EACd,gBAAgB,EAChB,WAAW,EACX,kBAAkB,GAEnB,MAAM,sBAAsB,CAAC;AAE9B,OAAO,EAAE,iBAAiB,EAAE,MAAM,kBAAkB,CAAC;AACrD,OAAO,EAAE,yBAAyB,EAAE,yBAAyB,EAAE,MAAM,cAAc,CAAC;AACpF,OAAO,EACL,mBAAmB,EACnB,aAAa,EACb,mBAAmB,EACnB,aAAa,GACd,MAAM,gBAAgB,CAAC;AACxB,OAAO,EACL,wCAAwC,EACxC,8CAA8C,GAC/C,MAAM,mCAAmC,CAAC;AAC3C,OAAO,EAAE,yBAAyB,EAAE,MAAM,uBAAuB,CAAC;AAElE;;;;;;GAMG;AACH,MAAM,CAAC,KAAK,UAAU,qBAAqB,CACzC,WAAwB,EACxB,MAAsB,EACtB,gBAAyB;IAEzB,sBAAsB,CAAC,MAAM,CAAC,CAAC;IAC/B,MAAM,eAAe,GAAG,MAAM,CAAC,eAAe,IAAI,QAAQ,CAAC;IAC3D,MAAM,SAAS,GAAG,MAAM,iBAAiB,CAAC,WAAW,EAAE,gBAAgB,CAAC,CAAC;IACzE,MAAM,SAAS,GAAG;QAChB,GAAG,yBAAyB,CAAC,MAAM,CAAC;QACpC,GAAG,yBAAyB,CAAC,MAAM,CAAC;KACrC,CAAC;IACF,MAAM,YAAY,GAAG,eAAe,KAAK,OAAO,CAAC,CAAC,CAAC,mBAAmB,CAAC,CAAC,CAAC,aAAa,CAAC;IACvF,MAAM,YAAY,GAAG,eAAe,KAAK,OAAO,CAAC,CAAC,CAAC,mBAAmB,CAAC,CAAC,CAAC,aAAa,CAAC;IACvF,MAAM,iBAAiB,GAAG,eAAe,KAAK,OAAO;QACnD,CAAC,CAAC,8CAA8C;QAChD,CAAC,CAAC,wCAAwC,CAAC;IAC7C,MAAM,mBAAmB,GAAG,eAAe,KAAK,OAAO;QACrD,CAAC,CAAC,oCAAoC;QACtC,CAAC,CAAC,8BAA8B,CAAC;IACnC,MAAM,mBAAmB,GAAG,eAAe,KAAK,OAAO;QACrD,CAAC,CAAC,oCAAoC;QACtC,CAAC,CAAC,8BAA8B,CAAC;IAEnC,MAAM,WAAW,GAAG,SAAS,CAAC,iBAAiB,EAAE,CAAC;IAClD,WAAW,CAAC,UAAU,CAAC,mBAAmB,EAAE,YAAY,CAAC,CAAC;IAC1D,WAAW,CAAC,UAAU,CAAC,mBAAmB,EAAE,YAAY,CAAC,CAAC;IAC1D,MAAM,iBAAiB,GAAG,WAAW,CAAC,2BAA2B,CAAC,iBAAiB,CAAC,CAAC;IACrF,MAAM,aAAa,GAAG,gBAAgB;SACnC,OAAO,CAAC,iBAAiB,EAAE,SAAS,CAAC;SACrC,oBAAoB,EAAE,CAAC;IAE1B,IAAI,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC;IACvB,uCAAuC;IACvC,IAAI,CAAC,IAAI,EAAE,CAAC;QACV,IAAI,GAAG,MAAM,CAAC,eAAe,CAAC,IAAI,UAAU,CAAC,EAAE,CAAC,CAAC,CAAC;IACpD,CAAC;IAED,MAAM,WAAW,GAAG,MAAM,CAAC,WAAW,KAAK,QAAQ;QACjD,CAAC,CAAC,kBAAkB,CAAC,MAAM,EAAE;QAC7B,CAAC,CAAC,kBAAkB,CAAC,OAAO,EAAE,CAAC;IAEjC,MAAM,cAAc,GAAG,IAAI,cAAc,CAAC,IAAI,CAAC;SAC5C,WAAW,CAAC,WAAW,CAAC,2BAA2B,CAAC;SACpD,WAAW,CAAC,WAAW,CAAC;SACxB,iBAAiB,CAAC,aAAa,CAAC;SAChC,wBAAwB,EAAE,CAAC;IAE9B,MAAM,MAAM,GAAG,cAAc,CAAC,KAAK,EAAE,CAAC;IAEtC,MAAM,WAAW,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,OAAO,EAAE,MAAM,CAAC,OAAO,EAAE,SAAS,EAAE,KAAK,EAAE,CAAC,CAAC;IAEjF,OAAO;QACL,OAAO,EAAE,MAAM,CAAC,OAAO;QACvB,IAAI;KACL,CAAC;AACJ,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,sBAAsB,CAAC,MAAsB;IAC3D,IAAI,MAAM,CAAC,SAAS,KAAK,CAAC,EAAE,CAAC;QAC3B,MAAM,IAAI,KAAK,CAAC,kCAAkC,CAAC,CAAC;IACtD,CAAC;IACD,IAAI,MAAM,CAAC,iBAAiB,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC1C,MAAM,IAAI,KAAK,CAAC,4CAA4C,CAAC,CAAC;IAChE,CAAC;IAED,MAAM,iBAAiB,GAAG,IAAI,GAAG,EAAU,CAAC;IAC5C,KAAK,MAAM,gBAAgB,IAAI,MAAM,CAAC,iBAAiB,EAAE,CAAC;QACxD,MAAM,oBAAoB,GAAG,yBAAyB,CAAC,gBAAgB,CAAC,CAAC;QACzE,IAAI,iBAAiB,CAAC,GAAG,CAAC,oBAAoB,CAAC,EAAE,CAAC;YAChD,MAAM,IAAI,KAAK,CAAC,gCAAgC,oBAAoB,EAAE,CAAC,CAAC;QAC1E,CAAC;QACD,iBAAiB,CAAC,GAAG,CAAC,oBAAoB,CAAC,CAAC;IAC9C,CAAC;IAED,IAAI,MAAM,CAAC,SAAS,GAAG,MAAM,CAAC,iBAAiB,CAAC,MAAM,EAAE,CAAC;QACvD,MAAM,IAAI,KAAK,CACb,cAAc,MAAM,CAAC,SAAS,sCAAsC,MAAM,CAAC,iBAAiB,CAAC,MAAM,GAAG,CACvG,CAAC;IACJ,CAAC;IACD,IAAI,CAAC,MAAM,CAAC,kBAAkB,EAAE,CAAC;QAC/B,MAAM,IAAI,KAAK,CAAC,iCAAiC,CAAC,CAAC;IACrD,CAAC;IAED,4CAA4C;IAC5C,IAAI,MAAM,CAAC,mBAAmB,EAAE,CAAC;QAC/B,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAC;QAC/B,KAAK,MAAM,EAAE,IAAI,MAAM,CAAC,mBAAmB,EAAE,CAAC;YAC5C,IAAI,EAAE,CAAC,SAAS,GAAG,CAAC,EAAE,CAAC;gBACrB,MAAM,IAAI,KAAK,CAAC,wCAAwC,CAAC,CAAC;YAC5D,CAAC;YACD,IAAI,EAAE,CAAC,SAAS,GAAG,MAAM,CAAC,iBAAiB,CAAC,MAAM,EAAE,CAAC;gBACnD,MAAM,IAAI,KAAK,CACb,wBAAwB,EAAE,CAAC,SAAS,sCAAsC,MAAM,CAAC,iBAAiB,CAAC,MAAM,GAAG,CAC7G,CAAC;YACJ,CAAC;YAED,IAAI,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,SAAS,CAAC,EAAE,CAAC;gBAC3B,MAAM,IAAI,KAAK,CAAC,sCAAsC,EAAE,CAAC,SAAS,EAAE,CAAC,CAAC;YACxE,CAAC;YACD,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,SAAS,CAAC,CAAC;QACzB,CAAC;IACH,CAAC;AACH,CAAC"}

package/dist/account/builder.test.js

@@ -72,33 +72,35 @@ describe('createMultisigAccount', () => {
     });
     it('uses Falcon MASM by default', async () => {
         const authBuilder = {
-            buildLibrary: vi.fn((libraryPath, source) => ({ libraryPath, source })),
-            linkStaticLibrary: vi.fn(),
-            compileAccountComponentCode: vi.fn((source) => `auth:${source.slice(0, 16)}`),
+            linkModule: vi.fn(),
+            compileAccountComponentCode: vi.fn((source) => ({ source })),
         };
         const webClient = {
             createCodeBuilder: vi.fn().mockReturnValue(authBuilder),
-            newAccount: vi.fn(),
+            accounts: {
+                insert: vi.fn().mockResolvedValue(undefined),
+            },
         };
         await createMultisigAccount(webClient, {
             threshold: 1,
             signerCommitments: ['0x' + '1'.repeat(64)],
             guardianCommitment: '0x' + '2'.repeat(64),
         });
-        expect(authBuilder.buildLibrary).toHaveBeenNthCalledWith(1, 'openzeppelin::auth::guardian', GUARDIAN_MASM);
-        expect(authBuilder.buildLibrary).toHaveBeenNthCalledWith(2, 'openzeppelin::auth::multisig', MULTISIG_MASM);
+        expect(authBuilder.linkModule).toHaveBeenNthCalledWith(1, 'openzeppelin::auth::guardian', GUARDIAN_MASM);
+        expect(authBuilder.linkModule).toHaveBeenNthCalledWith(2, 'openzeppelin::auth::multisig', MULTISIG_MASM);
         expect(authBuilder.compileAccountComponentCode).toHaveBeenCalledWith(MULTISIG_GUARDIAN_ACCOUNT_COMPONENT_MASM);
-        expect(webClient.newAccount).toHaveBeenCalledTimes(1);
+        expect(webClient.accounts.insert).toHaveBeenCalledTimes(1);
     });
     it('uses ECDSA MASM when requested', async () => {
         const authBuilder = {
-            buildLibrary: vi.fn((libraryPath, source) => ({ libraryPath, source })),
-            linkStaticLibrary: vi.fn(),
-            compileAccountComponentCode: vi.fn((source) => `auth:${source.slice(0, 16)}`),
+            linkModule: vi.fn(),
+            compileAccountComponentCode: vi.fn((source) => ({ source })),
         };
         const webClient = {
             createCodeBuilder: vi.fn().mockReturnValue(authBuilder),
-            newAccount: vi.fn(),
+            accounts: {
+                insert: vi.fn().mockResolvedValue(undefined),
+            },
         };
         await createMultisigAccount(webClient, {
             threshold: 1,
@@ -106,10 +108,10 @@ describe('createMultisigAccount', () => {
             guardianCommitment: '0x' + '2'.repeat(64),
             signatureScheme: 'ecdsa',
         });
-        expect(authBuilder.buildLibrary).toHaveBeenNthCalledWith(1, 'openzeppelin::auth::guardian_ecdsa', GUARDIAN_ECDSA_MASM);
-        expect(authBuilder.buildLibrary).toHaveBeenNthCalledWith(2, 'openzeppelin::auth::multisig_ecdsa', MULTISIG_ECDSA_MASM);
+        expect(authBuilder.linkModule).toHaveBeenNthCalledWith(1, 'openzeppelin::auth::guardian_ecdsa', GUARDIAN_ECDSA_MASM);
+        expect(authBuilder.linkModule).toHaveBeenNthCalledWith(2, 'openzeppelin::auth::multisig_ecdsa', MULTISIG_ECDSA_MASM);
         expect(authBuilder.compileAccountComponentCode).toHaveBeenCalledWith(MULTISIG_GUARDIAN_ECDSA_ACCOUNT_COMPONENT_MASM);
-        expect(webClient.newAccount).toHaveBeenCalledTimes(1);
+        expect(webClient.accounts.insert).toHaveBeenCalledTimes(1);
     });
 });
 //# sourceMappingURL=builder.test.js.map

package/dist/account/builder.test.js.map

@@ -1 +1 @@
-{"version":3,"file":"builder.test.js","sourceRoot":"","sources":["../../src/account/builder.test.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,EAAE,EAAE,EAAE,MAAM,QAAQ,CAAC;AAC9D,OAAO,EAAE,qBAAqB,EAAE,MAAM,cAAc,CAAC;AACrD,OAAO,EACL,mBAAmB,EACnB,aAAa,EACb,mBAAmB,EACnB,aAAa,GACd,MAAM,gBAAgB,CAAC;AACxB,OAAO,EACL,wCAAwC,EACxC,8CAA8C,GAC/C,MAAM,mCAAmC,CAAC;AAE3C,MAAM,EACJ,yBAAyB,EACzB,yBAAyB,EACzB,oBAAoB,EACpB,gBAAgB,EAChB,kBAAkB,GACnB,GAAG,EAAE,CAAC,OAAO,CAAC,GAAG,EAAE;IAClB,MAAM,yBAAyB,GAAG,EAAE,CAAC,EAAE,CAAC,GAAG,EAAE,CAAC,CAAC,gBAAgB,CAAC,CAAC,CAAC;IAClE,MAAM,yBAAyB,GAAG,EAAE,CAAC,EAAE,CAAC,GAAG,EAAE,CAAC,CAAC,gBAAgB,CAAC,CAAC,CAAC;IAClE,MAAM,oBAAoB,GAAG,EAAE,CAAC,EAAE,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,SAAS,CAAC,CAAC;IAC7D,MAAM,gBAAgB,GAAG,EAAE,CAAC,EAAE,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC,CAAC;QAC/C,IAAI;QACJ,KAAK;QACL,oBAAoB,EAAE,GAAG,EAAE,CAAC,oBAAoB,CAAC,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC;KAClE,CAAC,CAAC,CAAC;IAEJ,MAAM,kBAAkB;QACtB,WAAW;YACT,OAAO,IAAI,CAAC;QACd,CAAC;QAED,WAAW;YACT,OAAO,IAAI,CAAC;QACd,CAAC;QAED,iBAAiB;YACf,OAAO,IAAI,CAAC;QACd,CAAC;QAED,aAAa;YACX,OAAO,IAAI,CAAC;QACd,CAAC;QAED,wBAAwB;YACtB,OAAO,IAAI,CAAC;QACd,CAAC;QAED,KAAK;YACH,OAAO;gBACL,OAAO,EAAE,EAAE,EAAE,EAAE,GAAG,EAAE,CAAC,CAAC,EAAE,QAAQ,EAAE,GAAG,EAAE,CAAC,IAAI,GAAG,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE;aACnE,CAAC;QACJ,CAAC;KACF;IAED,OAAO;QACL,yBAAyB;QACzB,yBAAyB;QACzB,oBAAoB;QACpB,gBAAgB;QAChB,kBAAkB;KACnB,CAAC;AACJ,CAAC,CAAC,CAAC;AAEH,EAAE,CAAC,IAAI,CAAC,cAAc,EAAE,GAAG,EAAE,CAAC,CAAC;IAC7B,yBAAyB;IACzB,yBAAyB;CAC1B,CAAC,CAAC,CAAC;AAEJ,EAAE,CAAC,IAAI,CAAC,sBAAsB,EAAE,GAAG,EAAE,CAAC,CAAC;IACrC,cAAc,EAAE,kBAAkB;IAClC,gBAAgB,EAAE;QAChB,OAAO,EAAE,gBAAgB;KAC1B;IACD,WAAW,EAAE;QACX,2BAA2B,EAAE,SAAS;KACvC;IACD,kBAAkB,EAAE;QAClB,MAAM,EAAE,GAAG,EAAE,CAAC,QAAQ;QACtB,OAAO,EAAE,GAAG,EAAE,CAAC,SAAS;KACzB;CACF,CAAC,CAAC,CAAC;AAEJ,QAAQ,CAAC,uBAAuB,EAAE,GAAG,EAAE;IACrC,UAAU,CAAC,GAAG,EAAE;QACd,EAAE,CAAC,UAAU,CAAC,QAAQ,EAAE;YACtB,eAAe,CAAC,MAAkB;gBAChC,OAAO,MAAM,CAAC;YAChB,CAAC;SACF,CAAC,CAAC;QACH,yBAAyB,CAAC,SAAS,EAAE,CAAC;QACtC,yBAAyB,CAAC,SAAS,EAAE,CAAC;QACtC,oBAAoB,CAAC,SAAS,EAAE,CAAC;QACjC,gBAAgB,CAAC,SAAS,EAAE,CAAC;IAC/B,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,6BAA6B,EAAE,KAAK,IAAI,EAAE;QAC3C,MAAM,WAAW,GAAG;YAClB,YAAY,EAAE,EAAE,CAAC,EAAE,CAAC,CAAC,WAAW,EAAE,MAAM,EAAE,EAAE,CAAC,CAAC,EAAE,WAAW,EAAE,MAAM,EAAE,CAAC,CAAC;YACvE,iBAAiB,EAAE,EAAE,CAAC,EAAE,EAAE;YAC1B,2BAA2B,EAAE,EAAE,CAAC,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,QAAQ,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,EAAE,CAAC;SAC9E,CAAC;QACF,MAAM,SAAS,GAAG;YAChB,iBAAiB,EAAE,EAAE,CAAC,EAAE,EAAE,CAAC,eAAe,CAAC,WAAW,CAAC;YACvD,UAAU,EAAE,EAAE,CAAC,EAAE,EAAE;SACpB,CAAC;QAEF,MAAM,qBAAqB,CAAC,SAAkB,EAAE;YAC9C,SAAS,EAAE,CAAC;YACZ,iBAAiB,EAAE,CAAC,IAAI,GAAG,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;YAC1C,kBAAkB,EAAE,IAAI,GAAG,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC;SAC1C,CAAC,CAAC;QAEH,MAAM,CAAC,WAAW,CAAC,YAAY,CAAC,CAAC,uBAAuB,CACtD,CAAC,EACD,8BAA8B,EAC9B,aAAa,CACd,CAAC;QACF,MAAM,CAAC,WAAW,CAAC,YAAY,CAAC,CAAC,uBAAuB,CACtD,CAAC,EACD,8BAA8B,EAC9B,aAAa,CACd,CAAC;QACF,MAAM,CAAC,WAAW,CAAC,2BAA2B,CAAC,CAAC,oBAAoB,CAClE,wCAAwC,CACzC,CAAC;QACF,MAAM,CAAC,SAAS,CAAC,UAAU,CAAC,CAAC,qBAAqB,CAAC,CAAC,CAAC,CAAC;IACxD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,gCAAgC,EAAE,KAAK,IAAI,EAAE;QAC9C,MAAM,WAAW,GAAG;YAClB,YAAY,EAAE,EAAE,CAAC,EAAE,CAAC,CAAC,WAAW,EAAE,MAAM,EAAE,EAAE,CAAC,CAAC,EAAE,WAAW,EAAE,MAAM,EAAE,CAAC,CAAC;YACvE,iBAAiB,EAAE,EAAE,CAAC,EAAE,EAAE;YAC1B,2BAA2B,EAAE,EAAE,CAAC,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,QAAQ,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,EAAE,CAAC;SAC9E,CAAC;QACF,MAAM,SAAS,GAAG;YAChB,iBAAiB,EAAE,EAAE,CAAC,EAAE,EAAE,CAAC,eAAe,CAAC,WAAW,CAAC;YACvD,UAAU,EAAE,EAAE,CAAC,EAAE,EAAE;SACpB,CAAC;QAEF,MAAM,qBAAqB,CAAC,SAAkB,EAAE;YAC9C,SAAS,EAAE,CAAC;YACZ,iBAAiB,EAAE,CAAC,IAAI,GAAG,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;YAC1C,kBAAkB,EAAE,IAAI,GAAG,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC;YACzC,eAAe,EAAE,OAAO;SACzB,CAAC,CAAC;QAEH,MAAM,CAAC,WAAW,CAAC,YAAY,CAAC,CAAC,uBAAuB,CACtD,CAAC,EACD,oCAAoC,EACpC,mBAAmB,CACpB,CAAC;QACF,MAAM,CAAC,WAAW,CAAC,YAAY,CAAC,CAAC,uBAAuB,CACtD,CAAC,EACD,oCAAoC,EACpC,mBAAmB,CACpB,CAAC;QACF,MAAM,CAAC,WAAW,CAAC,2BAA2B,CAAC,CAAC,oBAAoB,CAClE,8CAA8C,CAC/C,CAAC;QACF,MAAM,CAAC,SAAS,CAAC,UAAU,CAAC,CAAC,qBAAqB,CAAC,CAAC,CAAC,CAAC;IACxD,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}
+{"version":3,"file":"builder.test.js","sourceRoot":"","sources":["../../src/account/builder.test.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,EAAE,EAAE,EAAE,MAAM,QAAQ,CAAC;AAC9D,OAAO,EAAE,qBAAqB,EAAE,MAAM,cAAc,CAAC;AACrD,OAAO,EACL,mBAAmB,EACnB,aAAa,EACb,mBAAmB,EACnB,aAAa,GACd,MAAM,gBAAgB,CAAC;AACxB,OAAO,EACL,wCAAwC,EACxC,8CAA8C,GAC/C,MAAM,mCAAmC,CAAC;AAE3C,MAAM,EACJ,yBAAyB,EACzB,yBAAyB,EACzB,oBAAoB,EACpB,gBAAgB,EAChB,kBAAkB,GACnB,GAAG,EAAE,CAAC,OAAO,CAAC,GAAG,EAAE;IAClB,MAAM,yBAAyB,GAAG,EAAE,CAAC,EAAE,CAAC,GAAG,EAAE,CAAC,CAAC,gBAAgB,CAAC,CAAC,CAAC;IAClE,MAAM,yBAAyB,GAAG,EAAE,CAAC,EAAE,CAAC,GAAG,EAAE,CAAC,CAAC,gBAAgB,CAAC,CAAC,CAAC;IAClE,MAAM,oBAAoB,GAAG,EAAE,CAAC,EAAE,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,SAAS,CAAC,CAAC;IAC7D,MAAM,gBAAgB,GAAG,EAAE,CAAC,EAAE,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC,CAAC;QAC/C,IAAI;QACJ,KAAK;QACL,oBAAoB,EAAE,GAAG,EAAE,CAAC,oBAAoB,CAAC,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC;KAClE,CAAC,CAAC,CAAC;IAEJ,MAAM,kBAAkB;QACtB,WAAW;YACT,OAAO,IAAI,CAAC;QACd,CAAC;QAED,WAAW;YACT,OAAO,IAAI,CAAC;QACd,CAAC;QAED,iBAAiB;YACf,OAAO,IAAI,CAAC;QACd,CAAC;QAED,aAAa;YACX,OAAO,IAAI,CAAC;QACd,CAAC;QAED,wBAAwB;YACtB,OAAO,IAAI,CAAC;QACd,CAAC;QAED,KAAK;YACH,OAAO;gBACL,OAAO,EAAE,EAAE,EAAE,EAAE,GAAG,EAAE,CAAC,CAAC,EAAE,QAAQ,EAAE,GAAG,EAAE,CAAC,IAAI,GAAG,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE;aACnE,CAAC;QACJ,CAAC;KACF;IAED,OAAO;QACL,yBAAyB;QACzB,yBAAyB;QACzB,oBAAoB;QACpB,gBAAgB;QAChB,kBAAkB;KACnB,CAAC;AACJ,CAAC,CAAC,CAAC;AAEH,EAAE,CAAC,IAAI,CAAC,cAAc,EAAE,GAAG,EAAE,CAAC,CAAC;IAC7B,yBAAyB;IACzB,yBAAyB;CAC1B,CAAC,CAAC,CAAC;AAEJ,EAAE,CAAC,IAAI,CAAC,sBAAsB,EAAE,GAAG,EAAE,CAAC,CAAC;IACrC,cAAc,EAAE,kBAAkB;IAClC,gBAAgB,EAAE;QAChB,OAAO,EAAE,gBAAgB;KAC1B;IACD,WAAW,EAAE;QACX,2BAA2B,EAAE,SAAS;KACvC;IACD,kBAAkB,EAAE;QAClB,MAAM,EAAE,GAAG,EAAE,CAAC,QAAQ;QACtB,OAAO,EAAE,GAAG,EAAE,CAAC,SAAS;KACzB;CACF,CAAC,CAAC,CAAC;AAEJ,QAAQ,CAAC,uBAAuB,EAAE,GAAG,EAAE;IACrC,UAAU,CAAC,GAAG,EAAE;QACd,EAAE,CAAC,UAAU,CAAC,QAAQ,EAAE;YACtB,eAAe,CAAC,MAAkB;gBAChC,OAAO,MAAM,CAAC;YAChB,CAAC;SACF,CAAC,CAAC;QACH,yBAAyB,CAAC,SAAS,EAAE,CAAC;QACtC,yBAAyB,CAAC,SAAS,EAAE,CAAC;QACtC,oBAAoB,CAAC,SAAS,EAAE,CAAC;QACjC,gBAAgB,CAAC,SAAS,EAAE,CAAC;IAC/B,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,6BAA6B,EAAE,KAAK,IAAI,EAAE;QAC3C,MAAM,WAAW,GAAG;YAClB,UAAU,EAAE,EAAE,CAAC,EAAE,EAAE;YACnB,2BAA2B,EAAE,EAAE,CAAC,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC;SAC7D,CAAC;QACF,MAAM,SAAS,GAAG;YAChB,iBAAiB,EAAE,EAAE,CAAC,EAAE,EAAE,CAAC,eAAe,CAAC,WAAW,CAAC;YACvD,QAAQ,EAAE;gBACR,MAAM,EAAE,EAAE,CAAC,EAAE,EAAE,CAAC,iBAAiB,CAAC,SAAS,CAAC;aAC7C;SACF,CAAC;QAEF,MAAM,qBAAqB,CAAC,SAAkB,EAAE;YAC9C,SAAS,EAAE,CAAC;YACZ,iBAAiB,EAAE,CAAC,IAAI,GAAG,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;YAC1C,kBAAkB,EAAE,IAAI,GAAG,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC;SAC1C,CAAC,CAAC;QAEH,MAAM,CAAC,WAAW,CAAC,UAAU,CAAC,CAAC,uBAAuB,CACpD,CAAC,EACD,8BAA8B,EAC9B,aAAa,CACd,CAAC;QACF,MAAM,CAAC,WAAW,CAAC,UAAU,CAAC,CAAC,uBAAuB,CACpD,CAAC,EACD,8BAA8B,EAC9B,aAAa,CACd,CAAC;QACF,MAAM,CAAC,WAAW,CAAC,2BAA2B,CAAC,CAAC,oBAAoB,CAClE,wCAAwC,CACzC,CAAC;QACF,MAAM,CAAC,SAAS,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,qBAAqB,CAAC,CAAC,CAAC,CAAC;IAC7D,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,gCAAgC,EAAE,KAAK,IAAI,EAAE;QAC9C,MAAM,WAAW,GAAG;YAClB,UAAU,EAAE,EAAE,CAAC,EAAE,EAAE;YACnB,2BAA2B,EAAE,EAAE,CAAC,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC;SAC7D,CAAC;QACF,MAAM,SAAS,GAAG;YAChB,iBAAiB,EAAE,EAAE,CAAC,EAAE,EAAE,CAAC,eAAe,CAAC,WAAW,CAAC;YACvD,QAAQ,EAAE;gBACR,MAAM,EAAE,EAAE,CAAC,EAAE,EAAE,CAAC,iBAAiB,CAAC,SAAS,CAAC;aAC7C;SACF,CAAC;QAEF,MAAM,qBAAqB,CAAC,SAAkB,EAAE;YAC9C,SAAS,EAAE,CAAC;YACZ,iBAAiB,EAAE,CAAC,IAAI,GAAG,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;YAC1C,kBAAkB,EAAE,IAAI,GAAG,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC;YACzC,eAAe,EAAE,OAAO;SACzB,CAAC,CAAC;QAEH,MAAM,CAAC,WAAW,CAAC,UAAU,CAAC,CAAC,uBAAuB,CACpD,CAAC,EACD,oCAAoC,EACpC,mBAAmB,CACpB,CAAC;QACF,MAAM,CAAC,WAAW,CAAC,UAAU,CAAC,CAAC,uBAAuB,CACpD,CAAC,EACD,oCAAoC,EACpC,mBAAmB,CACpB,CAAC;QACF,MAAM,CAAC,WAAW,CAAC,2BAA2B,CAAC,CAAC,oBAAoB,CAClE,8CAA8C,CAC/C,CAAC;QACF,MAAM,CAAC,SAAS,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,qBAAqB,CAAC,CAAC,CAAC,CAAC;IAC7D,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/dist/account/masm/account-components/auth.d.ts

@@ -1,5 +1,5 @@
-export declare const MULTISIG_ACCOUNT_COMPONENT_MASM = "# Multi-Signature RPO Falcon 512 Authentication Component\n\nuse openzeppelin::auth::multisig\n\ntype BeWord = struct @bigendian { a: felt, b: felt, c: felt, d: felt }\n\npub use multisig::update_signers_and_threshold\npub use multisig::update_procedure_threshold\n\npub proc auth_tx_multisig(salt: BeWord)\n    exec.multisig::auth_tx\n    exec.multisig::assert_new_tx\nend\n";
-export declare const MULTISIG_GUARDIAN_ACCOUNT_COMPONENT_MASM = "# Multi-Signature RPO Falcon 512 Authentication Component With GUARDIAN\n\nuse openzeppelin::auth::multisig\nuse openzeppelin::auth::guardian\n\ntype BeWord = struct @bigendian { a: felt, b: felt, c: felt, d: felt }\n\npub use multisig::update_signers_and_threshold\npub use multisig::update_procedure_threshold\npub use guardian::update_guardian_public_key\npub use guardian::verify_guardian_signature\n\npub proc auth_tx_multisig_guardian(salt: BeWord)\n    exec.multisig::auth_tx\n    exec.guardian::verify_guardian_signature\n    exec.multisig::assert_new_tx\nend\n";
-export declare const MULTISIG_ECDSA_ACCOUNT_COMPONENT_MASM = "# Multi-Signature ECDSA secp256k1 Authentication Component\n\nuse openzeppelin::auth::multisig_ecdsa\n\ntype BeWord = struct @bigendian { a: felt, b: felt, c: felt, d: felt }\n\npub use multisig_ecdsa::update_signers_and_threshold\npub use multisig_ecdsa::update_procedure_threshold\n\npub proc auth_tx_multisig_ecdsa(salt: BeWord)\n    exec.multisig_ecdsa::auth_tx\n    exec.multisig_ecdsa::assert_new_tx\nend\n";
-export declare const MULTISIG_GUARDIAN_ECDSA_ACCOUNT_COMPONENT_MASM = "# Multi-Signature ECDSA secp256k1 Authentication Component With GUARDIAN\n\nuse openzeppelin::auth::multisig_ecdsa\nuse openzeppelin::auth::guardian_ecdsa\n\ntype BeWord = struct @bigendian { a: felt, b: felt, c: felt, d: felt }\n\npub use multisig_ecdsa::update_signers_and_threshold\npub use multisig_ecdsa::update_procedure_threshold\npub use guardian_ecdsa::update_guardian_public_key\npub use guardian_ecdsa::verify_guardian_signature\n\npub proc auth_tx_multisig_guardian_ecdsa(salt: BeWord)\n    exec.multisig_ecdsa::auth_tx\n    exec.guardian_ecdsa::verify_guardian_signature\n    exec.multisig_ecdsa::assert_new_tx\nend\n";
+export declare const MULTISIG_ACCOUNT_COMPONENT_MASM = "# Multi-Signature RPO Falcon 512 Authentication Component\n\nuse openzeppelin::auth::multisig\n\npub use multisig::update_signers_and_threshold\npub use multisig::update_procedure_threshold\n\n@auth_script\npub proc auth_tx_multisig(salt: word)\n    exec.multisig::auth_tx\n    exec.multisig::assert_new_tx\nend\n";
+export declare const MULTISIG_GUARDIAN_ACCOUNT_COMPONENT_MASM = "# Multi-Signature RPO Falcon 512 Authentication Component With GUARDIAN\n\nuse openzeppelin::auth::multisig\nuse openzeppelin::auth::guardian\n\npub use multisig::update_signers_and_threshold\npub use multisig::update_procedure_threshold\npub use guardian::update_guardian_public_key\npub use guardian::verify_guardian_signature\n\n@auth_script\npub proc auth_tx_multisig_guardian(salt: word)\n    exec.multisig::auth_tx\n    exec.guardian::verify_guardian_signature\n    exec.multisig::assert_new_tx\nend\n";
+export declare const MULTISIG_ECDSA_ACCOUNT_COMPONENT_MASM = "# Multi-Signature ECDSA secp256k1 Authentication Component\n\nuse openzeppelin::auth::multisig_ecdsa\n\npub use multisig_ecdsa::update_signers_and_threshold\npub use multisig_ecdsa::update_procedure_threshold\n\n@auth_script\npub proc auth_tx_multisig_ecdsa(salt: word)\n    exec.multisig_ecdsa::auth_tx\n    exec.multisig_ecdsa::assert_new_tx\nend\n";
+export declare const MULTISIG_GUARDIAN_ECDSA_ACCOUNT_COMPONENT_MASM = "# Multi-Signature ECDSA secp256k1 Authentication Component With GUARDIAN\n\nuse openzeppelin::auth::multisig_ecdsa\nuse openzeppelin::auth::guardian_ecdsa\n\npub use multisig_ecdsa::update_signers_and_threshold\npub use multisig_ecdsa::update_procedure_threshold\npub use guardian_ecdsa::update_guardian_public_key\npub use guardian_ecdsa::verify_guardian_signature\n\n@auth_script\npub proc auth_tx_multisig_guardian_ecdsa(salt: word)\n    exec.multisig_ecdsa::auth_tx\n    exec.guardian_ecdsa::verify_guardian_signature\n    exec.multisig_ecdsa::assert_new_tx\nend\n";
 //# sourceMappingURL=auth.d.ts.map

package/dist/account/masm/account-components/auth.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"auth.d.ts","sourceRoot":"","sources":["../../../../src/account/masm/account-components/auth.ts"],"names":[],"mappings":"AAGA,eAAO,MAAM,+BAA+B,4XAa3C,CAAC;AAEF,eAAO,MAAM,wCAAwC,8jBAiBpD,CAAC;AAEF,eAAO,MAAM,qCAAqC,iaAajD,CAAC;AAEF,eAAO,MAAM,8CAA8C,2nBAiB1D,CAAC"}
+{"version":3,"file":"auth.d.ts","sourceRoot":"","sources":["../../../../src/account/masm/account-components/auth.ts"],"names":[],"mappings":"AAGA,eAAO,MAAM,+BAA+B,8TAY3C,CAAC;AAEF,eAAO,MAAM,wCAAwC,ggBAgBpD,CAAC;AAEF,eAAO,MAAM,qCAAqC,mWAYjD,CAAC;AAEF,eAAO,MAAM,8CAA8C,6jBAgB1D,CAAC"}

package/dist/account/masm/account-components/auth.js

@@ -4,12 +4,11 @@ export const MULTISIG_ACCOUNT_COMPONENT_MASM = `# Multi-Signature RPO Falcon 512
 
 use openzeppelin::auth::multisig
 
-type BeWord = struct @bigendian { a: felt, b: felt, c: felt, d: felt }
-
 pub use multisig::update_signers_and_threshold
 pub use multisig::update_procedure_threshold
 
-pub proc auth_tx_multisig(salt: BeWord)
+@auth_script
+pub proc auth_tx_multisig(salt: word)
     exec.multisig::auth_tx
     exec.multisig::assert_new_tx
 end
@@ -19,14 +18,13 @@ export const MULTISIG_GUARDIAN_ACCOUNT_COMPONENT_MASM = `# Multi-Signature RPO F
 use openzeppelin::auth::multisig
 use openzeppelin::auth::guardian
 
-type BeWord = struct @bigendian { a: felt, b: felt, c: felt, d: felt }
-
 pub use multisig::update_signers_and_threshold
 pub use multisig::update_procedure_threshold
 pub use guardian::update_guardian_public_key
 pub use guardian::verify_guardian_signature
 
-pub proc auth_tx_multisig_guardian(salt: BeWord)
+@auth_script
+pub proc auth_tx_multisig_guardian(salt: word)
     exec.multisig::auth_tx
     exec.guardian::verify_guardian_signature
     exec.multisig::assert_new_tx
@@ -36,12 +34,11 @@ export const MULTISIG_ECDSA_ACCOUNT_COMPONENT_MASM = `# Multi-Signature ECDSA se
 
 use openzeppelin::auth::multisig_ecdsa
 
-type BeWord = struct @bigendian { a: felt, b: felt, c: felt, d: felt }
-
 pub use multisig_ecdsa::update_signers_and_threshold
 pub use multisig_ecdsa::update_procedure_threshold
 
-pub proc auth_tx_multisig_ecdsa(salt: BeWord)
+@auth_script
+pub proc auth_tx_multisig_ecdsa(salt: word)
     exec.multisig_ecdsa::auth_tx
     exec.multisig_ecdsa::assert_new_tx
 end
@@ -51,14 +48,13 @@ export const MULTISIG_GUARDIAN_ECDSA_ACCOUNT_COMPONENT_MASM = `# Multi-Signature
 use openzeppelin::auth::multisig_ecdsa
 use openzeppelin::auth::guardian_ecdsa
 
-type BeWord = struct @bigendian { a: felt, b: felt, c: felt, d: felt }
-
 pub use multisig_ecdsa::update_signers_and_threshold
 pub use multisig_ecdsa::update_procedure_threshold
 pub use guardian_ecdsa::update_guardian_public_key
 pub use guardian_ecdsa::verify_guardian_signature
 
-pub proc auth_tx_multisig_guardian_ecdsa(salt: BeWord)
+@auth_script
+pub proc auth_tx_multisig_guardian_ecdsa(salt: word)
     exec.multisig_ecdsa::auth_tx
     exec.guardian_ecdsa::verify_guardian_signature
     exec.multisig_ecdsa::assert_new_tx

package/dist/account/masm/account-components/auth.js.map

@@ -1 +1 @@
-{"version":3,"file":"auth.js","sourceRoot":"","sources":["../../../../src/account/masm/account-components/auth.ts"],"names":[],"mappings":"AAAA,sFAAsF;AACtF,0BAA0B;AAE1B,MAAM,CAAC,MAAM,+BAA+B,GAAG;;;;;;;;;;;;;CAa9C,CAAC;AAEF,MAAM,CAAC,MAAM,wCAAwC,GAAG;;;;;;;;;;;;;;;;;CAiBvD,CAAC;AAEF,MAAM,CAAC,MAAM,qCAAqC,GAAG;;;;;;;;;;;;;CAapD,CAAC;AAEF,MAAM,CAAC,MAAM,8CAA8C,GAAG;;;;;;;;;;;;;;;;;CAiB7D,CAAC"}
+{"version":3,"file":"auth.js","sourceRoot":"","sources":["../../../../src/account/masm/account-components/auth.ts"],"names":[],"mappings":"AAAA,sFAAsF;AACtF,0BAA0B;AAE1B,MAAM,CAAC,MAAM,+BAA+B,GAAG;;;;;;;;;;;;CAY9C,CAAC;AAEF,MAAM,CAAC,MAAM,wCAAwC,GAAG;;;;;;;;;;;;;;;;CAgBvD,CAAC;AAEF,MAAM,CAAC,MAAM,qCAAqC,GAAG;;;;;;;;;;;;CAYpD,CAAC;AAEF,MAAM,CAAC,MAAM,8CAA8C,GAAG;;;;;;;;;;;;;;;;CAgB7D,CAAC"}

package/dist/account/masm/auth.d.ts

@@ -1,5 +1,5 @@
-export declare const MULTISIG_MASM = "# Multi-Signature RPO Falcon 512 Authentication Core Library\n#\n# This library provides the reusable multisig procedures used by account wrappers.\n\nuse miden::protocol::active_account\nuse miden::protocol::native_account\nuse miden::standards::auth\n\ntype BeWord = struct @bigendian { a: felt, b: felt, c: felt, d: felt }\n\n# CONSTANTS\n# =================================================================================================\n\n# Auth Request Constants\n\n# The event emitted when a signature is not found for a required signer.\nconst AUTH_UNAUTHORIZED_EVENT=event(\"miden::auth::unauthorized\")\n\n# Storage Layout Constants\n#\n# +-------------------------------+----------+--------------+-------------------+\n# | THRESHOLD & APPROVERS CONFIG  | PUB KEYS | EXECUTED TXS |  PROC THRESHOLDS  |\n# |           (slot)              |   (map)  |    (map)     |       (map)       |\n# +-------------------------------+----------+--------------+-------------------+\n# |              0                |    1     |      2       |         3         |\n# +-------------------------------+----------+--------------+-------------------+\n\n# The slot in this component's storage layout where the default signature threshold and\n# number of approvers are stored as:\n# [default_threshold, num_approvers, 0, 0].\n# The threshold is guaranteed to be less than or equal to num_approvers.\nconst THRESHOLD_CONFIG_SLOT=word(\"openzeppelin::multisig::threshold_config\")\n\n# The slot in this component's storage layout where the public keys map is stored.\n# Map entries: [key_index, 0, 0, 0] => APPROVER_PUBLIC_KEY\nconst PUBLIC_KEYS_MAP_SLOT=word(\"openzeppelin::multisig::signer_public_keys\")\n\n# The slot in this component's storage layout where executed transactions are stored.\n# Map entries: transaction_message => [is_executed, 0, 0, 0]\nconst EXECUTED_TXS_SLOT=word(\"openzeppelin::multisig::executed_transactions\")\n\n# The slot in this component's storage layout where procedure thresholds are stored.\n# Map entries: PROC_ROOT => [proc_threshold, 0, 0, 0]\nconst PROC_THRESHOLD_ROOTS_SLOT=word(\"openzeppelin::multisig::procedure_thresholds\")\n\n# Executed Transaction Flag Constant\nconst IS_EXECUTED_FLAG=[1, 0, 0, 0]\n\n# ERRORS\nconst ERR_TX_ALREADY_EXECUTED=\"failed to approve multisig transaction as it was already executed\"\n\nconst ERR_MALFORMED_MULTISIG_CONFIG=\"number of approvers must be equal to or greater than threshold\"\n\nconst ERR_ZERO_IN_MULTISIG_CONFIG=\"number of approvers or threshold must not be zero\"\n\nconst ERR_PROC_THRESHOLD_NOT_U32=\"procedure threshold must be a u32 value\"\n\nconst ERR_NUM_APPROVERS_OR_PROC_THRESHOLD_NOT_U32=\"number of approvers and procedure threshold must be u32\"\n\nconst ERR_PROC_THRESHOLD_EXCEEDS_NUM_APPROVERS=\"procedure threshold exceeds number of approvers\"\n\n# MULTISIG PROCEDURES\n# =================================================================================================\n\n#! Check if transaction has already been executed and add it to executed transactions for replay protection.\n#!\n#! Inputs:  [MSG]\n#! Outputs: []\n#!\n#! Panics if:\n#! - the same transaction has already been executed\npub proc assert_new_tx(msg: BeWord)\n    push.IS_EXECUTED_FLAG\n    # => [[0, 0, 0, is_executed], MSG]\n\n    swapw\n    # => [MSG, IS_EXECUTED_FLAG]\n\n    push.EXECUTED_TXS_SLOT[0..2]\n    # => [txs_slot_prefix, txs_slot_suffix, MSG, IS_EXECUTED_FLAG]\n\n    # Set the key value pair in the map to mark transaction as executed\n    exec.native_account::set_map_item\n    # => [[0, 0, 0, is_executed]]\n\n    drop drop drop\n    # => [is_executed]\n\n    assertz.err=ERR_TX_ALREADY_EXECUTED\n    # => []\nend\n\n#! Remove old approver public keys from the approver public key mapping.\n#!\n#! This procedure cleans up the storage by removing public keys of approvers that are no longer\n#! part of the multisig configuration. This procedure assumes that init_num_of_approvers and\n#! new_num_of_approvers are u32 values.\n#!\n#! Inputs: [init_num_of_approvers, new_num_of_approvers]\n#! Outputs: []\n#!\n#! Where:\n#! - init_num_of_approvers is the original number of approvers before the update\n#! - new_num_of_approvers is the new number of approvers after the update\nproc cleanup_pubkey_mapping(init_num_of_approvers: u32, new_num_of_approvers: u32)\n    dup.1 dup.1\n    u32assert2 u32lt\n    # => [should_loop, i = init_num_of_approvers, new_num_of_approvers]\n\n    while.true\n        # => [i, new_num_of_approvers]\n\n        sub.1\n        # => [i-1, new_num_of_approvers]\n\n        dup\n        # => [i-1, i-1, new_num_of_approvers]\n\n        push.0.0.0\n        # => [[0, 0, 0, i-1], i-1, new_num_of_approvers]\n\n        padw swapw\n        # => [[0, 0, 0, i-1], EMPTY_WORD, i-1, new_num_of_approvers]\n\n        push.PUBLIC_KEYS_MAP_SLOT[0..2]\n        # => [pub_key_slot_prefix, pub_key_slot_suffix, [0, 0, 0, i-1], EMPTY_WORD, i-1, new_num_of_approvers]\n\n        exec.native_account::set_map_item\n        # => [OLD_MAP_VALUE, i-1, new_num_of_approvers]\n\n        dropw\n        # => [i-1, new_num_of_approvers]\n\n        dup.1 dup.1\n        u32lt\n        # => [should_loop, i-1, new_num_of_approvers]\n    end\n\n    drop drop\n    # => []\nend\n\nproc get_threshold_and_num_approvers\n    push.THRESHOLD_CONFIG_SLOT[0..2]\n    exec.active_account::get_initial_item\n    # => [0, 0, num_approvers, threshold]\n\n    drop drop\n    # => [num_approvers, threshold]\n\n    swap\n    # => [threshold, num_approvers]\nend\n\nproc assert_proc_thresholds_lte_num_approvers(num_approvers: u32)\n    exec.active_account::get_num_procedures\n    # => [num_procedures, num_approvers]\n\n    dup neq.0\n    # => [should_continue, num_procedures, num_approvers]\n    while.true\n        sub.1 dup\n        # => [proc_index, proc_index, num_approvers]\n\n        exec.active_account::get_procedure_root\n        # => [PROC_ROOT, proc_index, num_approvers]\n\n        push.PROC_THRESHOLD_ROOTS_SLOT[0..2]\n        # => [proc_roots_slot_prefix, proc_roots_slot_suffix, PROC_ROOT, proc_index, num_approvers]\n\n        exec.active_account::get_initial_map_item\n        # => [[0, 0, 0, proc_threshold], proc_index, num_approvers]\n\n        drop drop drop\n        # => [proc_threshold, proc_index, num_approvers]\n\n        dup.2\n        # => [num_approvers, proc_threshold, proc_index, num_approvers]\n\n        u32assert2.err=ERR_PROC_THRESHOLD_NOT_U32\n        u32gt assertz.err=ERR_PROC_THRESHOLD_EXCEEDS_NUM_APPROVERS\n        # => [proc_index, num_approvers]\n\n        dup neq.0\n        # => [should_continue, proc_index, num_approvers]\n    end\n\n    drop drop\n    # => []\nend\n\n# Internal storage helper used by the public `update_procedure_threshold`\n# entrypoint after it receives direct stack arguments.\nproc set_procedure_threshold(proc_threshold: u32, proc_root: BeWord)\n    exec.get_threshold_and_num_approvers\n    # => [threshold, num_approvers, proc_threshold, PROC_ROOT]\n\n    drop\n    # => [num_approvers, proc_threshold, PROC_ROOT]\n\n    dup.1 swap\n    # => [num_approvers, proc_threshold, proc_threshold, PROC_ROOT]\n\n    u32assert2.err=ERR_NUM_APPROVERS_OR_PROC_THRESHOLD_NOT_U32\n    u32gt assertz.err=ERR_PROC_THRESHOLD_EXCEEDS_NUM_APPROVERS\n    # => [proc_threshold, PROC_ROOT]\n\n    push.0.0.0\n    swapw\n    # => [PROC_ROOT, PROC_THRESHOLD_WORD]\n\n    push.PROC_THRESHOLD_ROOTS_SLOT[0..2]\n    # => [proc_roots_slot_prefix, proc_roots_slot_suffix, PROC_ROOT, PROC_THRESHOLD_WORD]\n\n    exec.native_account::set_map_item\n    # => [OLD_VALUE]\n\n    dropw\n    # => []\nend\n\n#! Update threshold config and add / remove approvers\n#!\n#! Inputs:\n#!   Operand stack: [MULTISIG_CONFIG_HASH, pad(12)]\n#!   Advice map: {\n#!     MULTISIG_CONFIG_HASH => [CONFIG, PUB_KEY_N, PUB_KEY_N-1, ..., PUB_KEY_0]\n#!   }\n#! Outputs:\n#!   Operand stack: [TX_SUMMARY_COMMITMENT]\n#!\n#! Where:\n#! - MULTISIG_CONFIG_HASH is the hash of the threshold and new public key vector\n#! - MULTISIG_CONFIG is [threshold, num_approvers, 0, 0]\n#! - PUB_KEY_i is the public key of the i-th signer\n#!\n#! Locals:\n#! 0: new_num_of_approvers\n#! 1: init_num_of_approvers\n@locals(2)\npub proc update_signers_and_threshold(multisig_config_hash: BeWord)\n    adv.push_mapval\n    # => [MULTISIG_CONFIG_HASH, pad(12)]\n\n    adv_loadw\n    # => [MULTISIG_CONFIG, pad(12)]\n\n    # store new_num_of_approvers for later\n    dup.2 loc_store.0\n    # => [MULTISIG_CONFIG, pad(12)]\n\n    dup.3 dup.3\n    # => [num_approvers, threshold, MULTISIG_CONFIG, pad(12)]\n\n    # make sure that the threshold is smaller than the number of approvers\n    u32assert2.err=ERR_MALFORMED_MULTISIG_CONFIG\n    u32gt assertz.err=ERR_MALFORMED_MULTISIG_CONFIG\n    # => [MULTISIG_CONFIG, pad(12)]\n\n    dup.3 dup.3\n    # => [num_approvers, threshold, MULTISIG_CONFIG, pad(12)]\n\n    # make sure that threshold or num_approvers are not zero\n    eq.0 assertz.err=ERR_ZERO_IN_MULTISIG_CONFIG\n    eq.0 assertz.err=ERR_ZERO_IN_MULTISIG_CONFIG\n    # => [MULTISIG_CONFIG, pad(12)]\n\n    loc_load.0\n    # => [num_approvers, MULTISIG_CONFIG, pad(12)]\n\n    exec.assert_proc_thresholds_lte_num_approvers\n    # => [MULTISIG_CONFIG, pad(12)]\n\n    push.THRESHOLD_CONFIG_SLOT[0..2]\n    # => [config_slot_prefix, config_slot_suffix, MULTISIG_CONFIG, pad(12)]\n\n    exec.native_account::set_item\n    # => [OLD_THRESHOLD_CONFIG, pad(12)]\n\n    # store init_num_of_approvers for later\n    drop drop loc_store.1 drop\n    # => [pad(12)]\n\n    loc_load.0\n    # => [num_approvers]\n\n    dup neq.0\n    while.true\n        sub.1\n        # => [i-1, pad(12)]\n\n        dup push.0.0.0\n        # => [[0, 0, 0, i-1], i-1, pad(12)]\n\n        padw adv_loadw\n        # => [PUB_KEY, [0, 0, 0, i-1], i-1, pad(12)]\n\n        swapw\n        # => [[0, 0, 0, i-1], PUB_KEY, i-1, pad(12)]\n\n        push.PUBLIC_KEYS_MAP_SLOT[0..2]\n        # => [pub_key_slot_prefix, pub_key_slot_suffix, [0, 0, 0, i-1], PUB_KEY, i-1, pad(12)]\n\n        exec.native_account::set_map_item\n        # => [OLD_VALUE, i-1, pad(12)]\n\n        dropw\n        # => [i-1, pad(12)]\n\n        dup neq.0\n        # => [is_non_zero, i-1, pad(12)]\n    end\n    # => [pad(13)]\n\n    drop\n    # => [pad(12)]\n\n    # compare initial vs current multisig config\n\n    # load init_num_of_approvers & new_num_of_approvers\n    loc_load.0 loc_load.1\n    # => [init_num_of_approvers, new_num_of_approvers, pad(12)]\n\n    exec.cleanup_pubkey_mapping\n    # => [pad(12)]\nend\n\n#! Update or clear the threshold override for a specific procedure.\n#!\n#! Inputs:\n#!   Operand stack: [proc_threshold, PROC_ROOT]\n#! Outputs:\n#!   Operand stack: []\n#! Invocation: call\npub proc update_procedure_threshold(proc_threshold: u32, proc_root: BeWord)\n    exec.set_procedure_threshold\nend\n\n# Computes the effective transaction threshold based on called procedures and per-procedure\n# overrides stored in PROC_THRESHOLD_ROOTS_SLOT. Falls back to default_threshold if no\n# overrides apply.\n#\n#! Inputs:  [default_threshold]\n#! Outputs: [transaction_threshold]\n@locals(1)\nproc compute_transaction_threshold(default_threshold: u32) -> u32\n    # 1. initialize transaction_threshold = 0\n    # 2. iterate through all account procedures\n    #   a. check if the procedure was called during the transaction\n    #   b. if called, get the override threshold of that procedure from the config map\n    #   c. if proc_threshold > transaction_threshold, set transaction_threshold = proc_threshold\n    # 3. if transaction_threshold == 0 at the end, revert to using default_threshold\n\n    # store default_threshold for later\n    loc_store.0\n    # => []\n\n    # 1. initialize transaction_threshold = 0\n    push.0\n    # => [transaction_threshold]\n\n    # get the number of account procedures\n    exec.active_account::get_num_procedures\n    # => [num_procedures, transaction_threshold]\n\n    # 2. iterate through all account procedures\n    dup neq.0\n    # => [should_continue, num_procedures, transaction_threshold]\n    while.true\n        sub.1 dup\n        # => [num_procedures-1, num_procedures-1, transaction_threshold]\n\n        # get procedure root of the procedure with index i\n        exec.active_account::get_procedure_root dupw\n        # => [PROC_ROOT, PROC_ROOT, num_procedures-1, transaction_threshold]\n\n        # 2a. check if this procedure has been called in the transaction\n        exec.native_account::was_procedure_called\n        # => [was_called, PROC_ROOT, num_procedures-1, transaction_threshold]\n\n        # if it has been called, get the override threshold of that procedure\n        if.true\n            # => [PROC_ROOT, num_procedures-1, transaction_threshold]\n\n            push.PROC_THRESHOLD_ROOTS_SLOT[0..2]\n            # => [PROC_THRESHOLD_ROOTS_SLOT_prefix, PROC_THRESHOLD_ROOTS_SLOT_suffix, PROC_ROOT, num_procedures-1, transaction_threshold]\n\n            # 2b. get the override proc_threshold of that procedure\n            # if the procedure has no override threshold, the returned map item will be [0, 0, 0, 0]\n            exec.active_account::get_initial_map_item\n            # => [[0, 0, 0, proc_threshold], num_procedures-1, transaction_threshold]\n\n            drop drop drop dup dup.3\n            # => [transaction_threshold, proc_threshold, proc_threshold, num_procedures-1, transaction_threshold]\n\n            u32assert2.err=\"transaction threshold or procedure threshold are not u32\"\n            u32gt\n            # => [is_gt, proc_threshold, num_procedures-1, transaction_threshold]\n            # 2c. if proc_threshold > transaction_threshold, update transaction_threshold\n            movup.2 movdn.3\n            # => [is_gt, proc_threshold, transaction_threshold, num_procedures-1]\n            cdrop\n            # => [updated_transaction_threshold, num_procedures-1]\n            swap\n            # => [num_procedures-1, updated_transaction_threshold]\n        # if it has not been called during this transaction, nothing to do, move to the next procedure\n        else\n            dropw\n            # => [num_procedures-1, transaction_threshold]\n        end\n\n        dup neq.0\n        # => [should_continue, num_procedures-1, transaction_threshold]\n    end\n\n    drop\n    # => [transaction_threshold]\n\n    loc_load.0\n    # => [default_threshold, transaction_threshold]\n\n    # 3. if transaction_threshold == 0 at the end, revert to using default_threshold\n    dup.1 eq.0\n    # => [is_zero, default_threshold, transaction_threshold]\n\n    cdrop\n    # => [effective_transaction_threshold]\nend\n\n#! Authenticate a transaction using the Falcon signature scheme with multi-signature support.\n#!\n#! This procedure implements multi-signature authentication by:\n#! 1. Computing the transaction summary message that needs to be signed\n#! 2. Verifying signatures from multiple required signers against their public keys\n#! 3. Ensuring the minimum threshold of valid signatures is met\n#! 4. Returning the transaction summary commitment for higher-level wrappers.\n#!\n#! Inputs:\n#!   Operand stack: [SALT]\n#!   Advice map: {\n#!     h(SIG_0, MSG): SIG_0,\n#!     h(SIG_1, MSG): SIG_1,\n#!     h(SIG_n, MSG): SIG_n\n#!   }\n#! Outputs:\n#!   Operand stack: []\n#!\n#! Where:\n#! - SALT is a cryptographically random nonce that enables multiple concurrent\n#!   multisig transactions while maintaining replay protection. Each transaction\n#!   must use a unique SALT value to ensure transaction uniqueness.\n#! - SIG_i is the signature from the i-th signer.\n#! - MSG is the transaction message being signed.\n#! - h(SIG_i, MSG) is the hash of the signature and message used as the advice map key.\n#!\n#! Panics if:\n#! - insufficient number of valid signatures (below threshold).\n#! - insufficient number of valid signatures (below threshold).\n#!\n#! Invocation: exec\n@locals(1)\npub proc auth_tx(salt: BeWord) -> BeWord\n    exec.native_account::incr_nonce drop\n    # => [SALT]\n\n    # ------ Computing transaction summary ------\n\n    exec.auth::create_tx_summary\n    # => [SALT, OUTPUT_NOTES_COMMITMENT, INPUT_NOTES_COMMITMENT, ACCOUNT_DELTA_COMMITMENT]\n\n    # to build a tx_summary in the host, we need these four words in the advice provider\n    exec.auth::adv_insert_hqword\n    # => [SALT, OUTPUT_NOTES_COMMITMENT, INPUT_NOTES_COMMITMENT, ACCOUNT_DELTA_COMMITMENT]\n\n    # the commitment to the tx summary is the message that is signed\n    exec.auth::hash_tx_summary\n    # => [TX_SUMMARY_COMMITMENT]\n\n    # ------ Verifying approver signatures ------\n\n    push.THRESHOLD_CONFIG_SLOT[0..2]\n    # => [config_slot_prefix, config_slot_suffix, TX_SUMMARY_COMMITMENT]\n\n    exec.active_account::get_initial_item\n    # => [0, 0, num_of_approvers, default_threshold, TX_SUMMARY_COMMITMENT]\n\n    drop drop\n    # => [num_of_approvers, default_threshold, TX_SUMMARY_COMMITMENT]\n\n    swap movdn.5\n    # => [num_of_approvers, TX_SUMMARY_COMMITMENT, default_threshold]\n\n    push.PUBLIC_KEYS_MAP_SLOT[0..2]\n    # => [pub_key_slot_prefix, pub_key_slot_suffix, num_of_approvers, TX_SUMMARY_COMMITMENT, default_threshold]\n\n    exec.::miden::standards::auth::falcon512_rpo::verify_signatures\n    # => [num_verified_signatures, TX_SUMMARY_COMMITMENT, default_threshold]\n\n    # ------ Checking threshold is >= num_verified_signatures ------\n\n    movup.5\n    # => [default_threshold, num_verified_signatures, TX_SUMMARY_COMMITMENT]\n\n    exec.compute_transaction_threshold\n    # => [transaction_threshold, num_verified_signatures, TX_SUMMARY_COMMITMENT]\n\n    u32assert2 u32lt\n    # => [is_unauthorized, TX_SUMMARY_COMMITMENT]\n\n    # If signatures are non-existent the tx will fail here.\n    if.true\n        emit.AUTH_UNAUTHORIZED_EVENT\n        push.0 assert.err=\"insufficient number of signatures\"\n    end\n\n    # => [TX_SUMMARY_COMMITMENT]\nend\n";
-export declare const MULTISIG_ECDSA_MASM = "# Multi-Signature ECDSA secp256k1 Authentication Core Library\n#\n# This library provides the reusable multisig procedures used by account wrappers.\n\nuse miden::protocol::active_account\nuse miden::protocol::native_account\nuse miden::standards::auth\ntype BeWord = struct @bigendian { a: felt, b: felt, c: felt, d: felt }\n\n# CONSTANTS\n# =================================================================================================\n\n# Auth Request Constants\n\n# The event emitted when a signature is not found for a required signer.\nconst AUTH_UNAUTHORIZED_EVENT=event(\"miden::auth::unauthorized\")\n\n# Storage Layout Constants\n#\n# +-------------------------------+----------+--------------+-------------------+\n# | THRESHOLD & APPROVERS CONFIG  | PUB KEYS | EXECUTED TXS |  PROC THRESHOLDS  |\n# |           (slot)              |   (map)  |    (map)     |       (map)       |\n# +-------------------------------+----------+--------------+-------------------+\n# |              0                |    1     |      2       |         3         |\n# +-------------------------------+----------+--------------+-------------------+\n\n# The slot in this component's storage layout where the default signature threshold and\n# number of approvers are stored as:\n# [default_threshold, num_approvers, 0, 0].\n# The threshold is guaranteed to be less than or equal to num_approvers.\nconst THRESHOLD_CONFIG_SLOT=word(\"openzeppelin::multisig::threshold_config\")\n\n# The slot in this component's storage layout where the public keys map is stored.\n# Map entries: [key_index, 0, 0, 0] => APPROVER_PUBLIC_KEY\nconst PUBLIC_KEYS_MAP_SLOT=word(\"openzeppelin::multisig::signer_public_keys\")\n\n# The slot in this component's storage layout where executed transactions are stored.\n# Map entries: transaction_message => [is_executed, 0, 0, 0]\nconst EXECUTED_TXS_SLOT=word(\"openzeppelin::multisig::executed_transactions\")\n\n# The slot in this component's storage layout where procedure thresholds are stored.\n# Map entries: PROC_ROOT => [proc_threshold, 0, 0, 0]\nconst PROC_THRESHOLD_ROOTS_SLOT=word(\"openzeppelin::multisig::procedure_thresholds\")\n\n# Executed Transaction Flag Constant\nconst IS_EXECUTED_FLAG=[1, 0, 0, 0]\n\n# ERRORS\nconst ERR_TX_ALREADY_EXECUTED=\"failed to approve multisig transaction as it was already executed\"\n\nconst ERR_MALFORMED_MULTISIG_CONFIG=\"number of approvers must be equal to or greater than threshold\"\n\nconst ERR_ZERO_IN_MULTISIG_CONFIG=\"number of approvers or threshold must not be zero\"\n\nconst ERR_PROC_THRESHOLD_NOT_U32=\"procedure threshold must be a u32 value\"\n\nconst ERR_NUM_APPROVERS_OR_PROC_THRESHOLD_NOT_U32=\"number of approvers and procedure threshold must be u32\"\n\nconst ERR_PROC_THRESHOLD_EXCEEDS_NUM_APPROVERS=\"procedure threshold exceeds number of approvers\"\n\n# MULTISIG PROCEDURES\n# =================================================================================================\n\n#! Check if transaction has already been executed and add it to executed transactions for replay protection.\n#!\n#! Inputs:  [MSG]\n#! Outputs: []\n#!\n#! Panics if:\n#! - the same transaction has already been executed\npub proc assert_new_tx(msg: BeWord)\n    push.IS_EXECUTED_FLAG\n    # => [[0, 0, 0, is_executed], MSG]\n\n    swapw\n    # => [MSG, IS_EXECUTED_FLAG]\n\n    push.EXECUTED_TXS_SLOT[0..2]\n    # => [txs_slot_prefix, txs_slot_suffix, MSG, IS_EXECUTED_FLAG]\n\n    # Set the key value pair in the map to mark transaction as executed\n    exec.native_account::set_map_item\n    # => [[0, 0, 0, is_executed]]\n\n    drop drop drop\n    # => [is_executed]\n\n    assertz.err=ERR_TX_ALREADY_EXECUTED\n    # => []\nend\n\n#! Remove old approver public keys from the approver public key mapping.\n#!\n#! This procedure cleans up the storage by removing public keys of approvers that are no longer\n#! part of the multisig configuration. This procedure assumes that init_num_of_approvers and\n#! new_num_of_approvers are u32 values.\n#!\n#! Inputs: [init_num_of_approvers, new_num_of_approvers]\n#! Outputs: []\n#!\n#! Where:\n#! - init_num_of_approvers is the original number of approvers before the update\n#! - new_num_of_approvers is the new number of approvers after the update\nproc cleanup_pubkey_mapping(init_num_of_approvers: u32, new_num_of_approvers: u32)\n    dup.1 dup.1\n    u32assert2 u32lt\n    # => [should_loop, i = init_num_of_approvers, new_num_of_approvers]\n\n    while.true\n        # => [i, new_num_of_approvers]\n\n        sub.1\n        # => [i-1, new_num_of_approvers]\n\n        dup\n        # => [i-1, i-1, new_num_of_approvers]\n\n        push.0.0.0\n        # => [[0, 0, 0, i-1], i-1, new_num_of_approvers]\n\n        padw swapw\n        # => [[0, 0, 0, i-1], EMPTY_WORD, i-1, new_num_of_approvers]\n\n        push.PUBLIC_KEYS_MAP_SLOT[0..2]\n        # => [pub_key_slot_prefix, pub_key_slot_suffix, [0, 0, 0, i-1], EMPTY_WORD, i-1, new_num_of_approvers]\n\n        exec.native_account::set_map_item\n        # => [OLD_MAP_VALUE, i-1, new_num_of_approvers]\n\n        dropw\n        # => [i-1, new_num_of_approvers]\n\n        dup.1 dup.1\n        u32lt\n        # => [should_loop, i-1, new_num_of_approvers]\n    end\n\n    drop drop\n    # => []\nend\n\nproc get_threshold_and_num_approvers\n    push.THRESHOLD_CONFIG_SLOT[0..2]\n    exec.active_account::get_initial_item\n    # => [0, 0, num_approvers, threshold]\n\n    drop drop\n    # => [num_approvers, threshold]\n\n    swap\n    # => [threshold, num_approvers]\nend\n\nproc assert_proc_thresholds_lte_num_approvers(num_approvers: u32)\n    exec.active_account::get_num_procedures\n    # => [num_procedures, num_approvers]\n\n    dup neq.0\n    # => [should_continue, num_procedures, num_approvers]\n    while.true\n        sub.1 dup\n        # => [proc_index, proc_index, num_approvers]\n\n        exec.active_account::get_procedure_root\n        # => [PROC_ROOT, proc_index, num_approvers]\n\n        push.PROC_THRESHOLD_ROOTS_SLOT[0..2]\n        # => [proc_roots_slot_prefix, proc_roots_slot_suffix, PROC_ROOT, proc_index, num_approvers]\n\n        exec.active_account::get_initial_map_item\n        # => [[0, 0, 0, proc_threshold], proc_index, num_approvers]\n\n        drop drop drop\n        # => [proc_threshold, proc_index, num_approvers]\n\n        dup.2\n        # => [num_approvers, proc_threshold, proc_index, num_approvers]\n\n        u32assert2.err=ERR_PROC_THRESHOLD_NOT_U32\n        u32gt assertz.err=ERR_PROC_THRESHOLD_EXCEEDS_NUM_APPROVERS\n        # => [proc_index, num_approvers]\n\n        dup neq.0\n        # => [should_continue, proc_index, num_approvers]\n    end\n\n    drop drop\n    # => []\nend\n\n# Internal storage helper used by the public `update_procedure_threshold`\n# entrypoint after it receives direct stack arguments.\nproc set_procedure_threshold(proc_threshold: u32, proc_root: BeWord)\n    exec.get_threshold_and_num_approvers\n    # => [threshold, num_approvers, proc_threshold, PROC_ROOT]\n\n    drop\n    # => [num_approvers, proc_threshold, PROC_ROOT]\n\n    dup.1 swap\n    # => [num_approvers, proc_threshold, proc_threshold, PROC_ROOT]\n\n    u32assert2.err=ERR_NUM_APPROVERS_OR_PROC_THRESHOLD_NOT_U32\n    u32gt assertz.err=ERR_PROC_THRESHOLD_EXCEEDS_NUM_APPROVERS\n    # => [proc_threshold, PROC_ROOT]\n\n    push.0.0.0\n    swapw\n    # => [PROC_ROOT, PROC_THRESHOLD_WORD]\n\n    push.PROC_THRESHOLD_ROOTS_SLOT[0..2]\n    # => [proc_roots_slot_prefix, proc_roots_slot_suffix, PROC_ROOT, PROC_THRESHOLD_WORD]\n\n    exec.native_account::set_map_item\n    # => [OLD_VALUE]\n\n    dropw\n    # => []\nend\n\n#! Update threshold config and add / remove approvers\n#!\n#! Inputs:\n#!   Operand stack: [MULTISIG_CONFIG_HASH, pad(12)]\n#!   Advice map: {\n#!     MULTISIG_CONFIG_HASH => [CONFIG, PUB_KEY_N, PUB_KEY_N-1, ..., PUB_KEY_0]\n#!   }\n#! Outputs:\n#!   Operand stack: []\n#!\n#! Where:\n#! - MULTISIG_CONFIG_HASH is the hash of the threshold and new public key vector\n#! - MULTISIG_CONFIG is [threshold, num_approvers, 0, 0]\n#! - PUB_KEY_i is the public key of the i-th signer\n#!\n#! Locals:\n#! 0: new_num_of_approvers\n#! 1: init_num_of_approvers\n@locals(2)\npub proc update_signers_and_threshold(multisig_config_hash: BeWord)\n    adv.push_mapval\n    # => [MULTISIG_CONFIG_HASH, pad(12)]\n\n    adv_loadw\n    # => [MULTISIG_CONFIG, pad(12)]\n\n    # store new_num_of_approvers for later\n    dup.2 loc_store.0\n    # => [MULTISIG_CONFIG, pad(12)]\n\n    dup.3 dup.3\n    # => [num_approvers, threshold, MULTISIG_CONFIG, pad(12)]\n\n    # make sure that the threshold is smaller than the number of approvers\n    u32assert2.err=ERR_MALFORMED_MULTISIG_CONFIG\n    u32gt assertz.err=ERR_MALFORMED_MULTISIG_CONFIG\n    # => [MULTISIG_CONFIG, pad(12)]\n\n    dup.3 dup.3\n    # => [num_approvers, threshold, MULTISIG_CONFIG, pad(12)]\n\n    # make sure that threshold or num_approvers are not zero\n    eq.0 assertz.err=ERR_ZERO_IN_MULTISIG_CONFIG\n    eq.0 assertz.err=ERR_ZERO_IN_MULTISIG_CONFIG\n    # => [MULTISIG_CONFIG, pad(12)]\n\n    loc_load.0\n    # => [num_approvers, MULTISIG_CONFIG, pad(12)]\n\n    exec.assert_proc_thresholds_lte_num_approvers\n    # => [MULTISIG_CONFIG, pad(12)]\n\n    push.THRESHOLD_CONFIG_SLOT[0..2]\n    # => [config_slot_prefix, config_slot_suffix, MULTISIG_CONFIG, pad(12)]\n\n    exec.native_account::set_item\n    # => [OLD_THRESHOLD_CONFIG, pad(12)]\n\n    # store init_num_of_approvers for later\n    drop drop loc_store.1 drop\n    # => [pad(12)]\n\n    loc_load.0\n    # => [num_approvers]\n\n    dup neq.0\n    while.true\n        sub.1\n        # => [i-1, pad(12)]\n\n        dup push.0.0.0\n        # => [[0, 0, 0, i-1], i-1, pad(12)]\n\n        padw adv_loadw\n        # => [PUB_KEY, [0, 0, 0, i-1], i-1, pad(12)]\n\n        swapw\n        # => [[0, 0, 0, i-1], PUB_KEY, i-1, pad(12)]\n\n        push.PUBLIC_KEYS_MAP_SLOT[0..2]\n        # => [pub_key_slot_prefix, pub_key_slot_suffix, [0, 0, 0, i-1], PUB_KEY, i-1, pad(12)]\n\n        exec.native_account::set_map_item\n        # => [OLD_VALUE, i-1, pad(12)]\n\n        dropw\n        # => [i-1, pad(12)]\n\n        dup neq.0\n        # => [is_non_zero, i-1, pad(12)]\n    end\n    # => [pad(13)]\n\n    drop\n    # => [pad(12)]\n\n    # compare initial vs current multisig config\n\n    # load init_num_of_approvers & new_num_of_approvers\n    loc_load.0 loc_load.1\n    # => [init_num_of_approvers, new_num_of_approvers, pad(12)]\n\n    exec.cleanup_pubkey_mapping\n    # => [pad(12)]\nend\n\n#! Update or clear the threshold override for a specific procedure.\n#!\n#! Inputs:\n#!   Operand stack: [proc_threshold, PROC_ROOT]\n#! Outputs:\n#!   Operand stack: []\n#! Invocation: call\npub proc update_procedure_threshold(proc_threshold: u32, proc_root: BeWord)\n    exec.set_procedure_threshold\nend\n\n# Computes the effective transaction threshold based on called procedures and per-procedure\n# overrides stored in PROC_THRESHOLD_ROOTS_SLOT. Falls back to default_threshold if no\n# overrides apply.\n#\n#! Inputs:  [default_threshold]\n#! Outputs: [transaction_threshold]\n@locals(1)\nproc compute_transaction_threshold(default_threshold: u32) -> u32\n    # 1. initialize transaction_threshold = 0\n    # 2. iterate through all account procedures\n    #   a. check if the procedure was called during the transaction\n    #   b. if called, get the override threshold of that procedure from the config map\n    #   c. if proc_threshold > transaction_threshold, set transaction_threshold = proc_threshold\n    # 3. if transaction_threshold == 0 at the end, revert to using default_threshold\n\n    # store default_threshold for later\n    loc_store.0\n    # => []\n\n    # 1. initialize transaction_threshold = 0\n    push.0\n    # => [transaction_threshold]\n\n    # get the number of account procedures\n    exec.active_account::get_num_procedures\n    # => [num_procedures, transaction_threshold]\n\n    # 2. iterate through all account procedures\n    dup neq.0\n    # => [should_continue, num_procedures, transaction_threshold]\n    while.true\n        sub.1 dup\n        # => [num_procedures-1, num_procedures-1, transaction_threshold]\n\n        # get procedure root of the procedure with index i\n        exec.active_account::get_procedure_root dupw\n        # => [PROC_ROOT, PROC_ROOT, num_procedures-1, transaction_threshold]\n\n        # 2a. check if this procedure has been called in the transaction\n        exec.native_account::was_procedure_called\n        # => [was_called, PROC_ROOT, num_procedures-1, transaction_threshold]\n\n        # if it has been called, get the override threshold of that procedure\n        if.true\n            # => [PROC_ROOT, num_procedures-1, transaction_threshold]\n\n            push.PROC_THRESHOLD_ROOTS_SLOT[0..2]\n            # => [PROC_THRESHOLD_ROOTS_SLOT_prefix, PROC_THRESHOLD_ROOTS_SLOT_suffix, PROC_ROOT, num_procedures-1, transaction_threshold]\n\n            # 2b. get the override proc_threshold of that procedure\n            # if the procedure has no override threshold, the returned map item will be [0, 0, 0, 0]\n            exec.active_account::get_initial_map_item\n            # => [[0, 0, 0, proc_threshold], num_procedures-1, transaction_threshold]\n\n            drop drop drop dup dup.3\n            # => [transaction_threshold, proc_threshold, proc_threshold, num_procedures-1, transaction_threshold]\n\n            u32assert2.err=\"transaction threshold or procedure threshold are not u32\"\n            u32gt\n            # => [is_gt, proc_threshold, num_procedures-1, transaction_threshold]\n            # 2c. if proc_threshold > transaction_threshold, update transaction_threshold\n            movup.2 movdn.3\n            # => [is_gt, proc_threshold, transaction_threshold, num_procedures-1]\n            cdrop\n            # => [updated_transaction_threshold, num_procedures-1]\n            swap\n            # => [num_procedures-1, updated_transaction_threshold]\n        # if it has not been called during this transaction, nothing to do, move to the next procedure\n        else\n            dropw\n            # => [num_procedures-1, transaction_threshold]\n        end\n\n        dup neq.0\n        # => [should_continue, num_procedures-1, transaction_threshold]\n    end\n\n    drop\n    # => [transaction_threshold]\n\n    loc_load.0\n    # => [default_threshold, transaction_threshold]\n\n    # 3. if transaction_threshold == 0 at the end, revert to using default_threshold\n    dup.1 eq.0\n    # => [is_zero, default_threshold, transaction_threshold]\n\n    cdrop\n    # => [effective_transaction_threshold]\nend\n\n#! Authenticate a transaction using ECDSA secp256k1 with multi-signature support.\n#!\n#! This procedure implements multi-signature authentication by:\n#! 1. Computing the transaction summary message that needs to be signed\n#! 2. Verifying ECDSA signatures from multiple required signers against their public keys\n#! 3. Ensuring the minimum threshold of valid signatures is met\n#! 4. Returning the transaction summary commitment for higher-level wrappers.\n#!\n#! Inputs:\n#!   Operand stack: [SALT]\n#!   Advice map: {\n#!     h(PUB_KEY_0, MSG): SIG_0,\n#!     h(PUB_KEY_1, MSG): SIG_1,\n#!     h(PUB_KEY_n, MSG): SIG_n\n#!   }\n#! Outputs:\n#!   Operand stack: [TX_SUMMARY_COMMITMENT]\n#!\n#! Where:\n#! - SALT is a cryptographically random nonce that enables multiple concurrent\n#!   multisig transactions while maintaining replay protection. Each transaction\n#!   must use a unique SALT value to ensure transaction uniqueness.\n#! - SIG_i is the ECDSA signature from the i-th signer.\n#! - MSG is the transaction message being signed.\n#! - h(PUB_KEY_i, MSG) is the hash of the public key and message used as the advice map key.\n#!\n#! Panics if:\n#! - insufficient number of valid signatures (below threshold).\n#! - insufficient number of valid signatures (below threshold).\n#!\n#! Invocation: exec\n@locals(1)\npub proc auth_tx(salt: BeWord) -> BeWord\n    exec.native_account::incr_nonce drop\n    # => [SALT]\n\n    # ------ Computing transaction summary ------\n\n    exec.auth::create_tx_summary\n    # => [SALT, OUTPUT_NOTES_COMMITMENT, INPUT_NOTES_COMMITMENT, ACCOUNT_DELTA_COMMITMENT]\n\n    # to build a tx_summary in the host, we need these four words in the advice provider\n    exec.auth::adv_insert_hqword\n    # => [SALT, OUTPUT_NOTES_COMMITMENT, INPUT_NOTES_COMMITMENT, ACCOUNT_DELTA_COMMITMENT]\n\n    # the commitment to the tx summary is the message that is signed\n    exec.auth::hash_tx_summary\n    # => [TX_SUMMARY_COMMITMENT]\n\n    # ------ Verifying approver signatures ------\n\n    push.THRESHOLD_CONFIG_SLOT[0..2]\n    # => [config_slot_prefix, config_slot_suffix, TX_SUMMARY_COMMITMENT]\n\n    exec.active_account::get_initial_item\n    # => [0, 0, num_of_approvers, default_threshold, TX_SUMMARY_COMMITMENT]\n\n    drop drop\n    # => [num_of_approvers, default_threshold, TX_SUMMARY_COMMITMENT]\n\n    swap movdn.5\n    # => [num_of_approvers, TX_SUMMARY_COMMITMENT, default_threshold]\n\n    push.PUBLIC_KEYS_MAP_SLOT[0..2]\n    # => [pub_key_slot_prefix, pub_key_slot_suffix, num_of_approvers, TX_SUMMARY_COMMITMENT, default_threshold]\n\n    exec.::miden::standards::auth::ecdsa_k256_keccak::verify_signatures\n    # => [num_verified_signatures, TX_SUMMARY_COMMITMENT, default_threshold]\n\n    # ------ Checking threshold is >= num_verified_signatures ------\n\n    movup.5\n    # => [default_threshold, num_verified_signatures, TX_SUMMARY_COMMITMENT]\n\n    exec.compute_transaction_threshold\n    # => [transaction_threshold, num_verified_signatures, TX_SUMMARY_COMMITMENT]\n\n    u32assert2 u32lt\n    # => [is_unauthorized, TX_SUMMARY_COMMITMENT]\n\n    # If signatures are non-existent the tx will fail here.\n    if.true\n        emit.AUTH_UNAUTHORIZED_EVENT\n        push.0 assert.err=\"insufficient number of signatures\"\n    end\n\n    # => [TX_SUMMARY_COMMITMENT]\nend\n";
-export declare const GUARDIAN_MASM = "# Guardian Authentication Component\n#\n# This component provides GUARDIAN signature verification for accounts.\n# It can be used standalone or in conjunction with other auth components like multisig.\n\nuse miden::protocol::active_account\nuse miden::protocol::native_account\n\ntype BeWord = struct @bigendian { a: felt, b: felt, c: felt, d: felt }\n\n# IMPORTANT SECURITY NOTES\n# --------------------------------------------------------------------------------\n# - The selector in `GUARDIAN_SELECTOR_SLOT` controls whether the extra GUARDIAN signature\n#   is enforced:\n#     * GUARDIAN_ON  => exactly one valid GUARDIAN signature is required.\n#     * GUARDIAN_OFF => GUARDIAN signature is skipped for that call.\n#\n# - `verify_guardian_signature` reads the selector from initial storage state.\n#   This means changes made during the same transaction won't affect the check.\n#\n# - `enable_guardian` / `disable_guardian` procedures allow explicit control over GUARDIAN state.\n#\n# - `update_guardian_public_key`:\n#     * Installs a new GUARDIAN public key in the map at `GUARDIAN_PUBLIC_KEY_MAP_SLOT`.\n#     * Does not itself perform any signature checks.\n#     * To update the key without requiring GUARDIAN signature, ensure selector is OFF.\n#\n# Storage Layout\n# --------------------------------------------------------------------------------\n#\n# +---------------------+---------------+\n# |     DESCRIPTION     |     SLOT      |\n# +---------------------+---------------+\n# | GUARDIAN SELECTOR (word) |       0       |\n# | GUARDIAN PUBLIC KEY MAP  |       1       |\n# +---------------------+---------------+\n#\n# - GUARDIAN_SELECTOR_SLOT (0):\n#     * Stores a word that is compared against [1, 0, 0, 0] (GUARDIAN_ON).\n#     * Any value != GUARDIAN_ON is treated as GUARDIAN_OFF.\n#\n# - GUARDIAN_PUBLIC_KEY_MAP_SLOT (1):\n#     * A map from a fixed key [0, 0, 0, 0] to the single GUARDIAN public key:\n#         [0, 0, 0, 0] => GUARDIAN_PUBLIC_KEY\n#     * GUARDIAN_PUBLIC_KEY is a RPO Falcon 512 public key represented as a word.\n\n# CONSTANTS\n# =================================================================================================\n\n# Slot where the GUARDIAN selector flag is stored (using word() for named slot access):\n# - GUARDIAN_ON  => GUARDIAN signature required\n# - GUARDIAN_OFF => GUARDIAN signature skipped\nconst GUARDIAN_SELECTOR_SLOT=word(\"openzeppelin::guardian::selector\")\n\n# Map slot for GUARDIAN public key\n# Uses exactly one GUARDIAN public key at index [0, 0, 0, 0]\n# [0, 0, 0, 0] => GUARDIAN_PUBLIC_KEY\nconst GUARDIAN_PUBLIC_KEY_MAP_SLOT=word(\"openzeppelin::guardian::public_key\")\n\n# Selector flag values\nconst GUARDIAN_ON=[1, 0, 0, 0]\nconst GUARDIAN_OFF=[0, 0, 0, 0]\n\n# The event emitted when a signature is not found for a required signer.\nconst AUTH_UNAUTHORIZED_EVENT=event(\"miden::auth::unauthorized\")\n\n# GUARDIAN PROCEDURES\n# =================================================================================================\n\n#! Enable GUARDIAN verification by setting the selector to ON.\n#!\n#! Operand stack inputs: []\n#! Outputs: []\n#!\n#! Notes:\n#! - Sets GUARDIAN_SELECTOR_SLOT to GUARDIAN_ON (1)\n#! - After this, transactions will require GUARDIAN signature verification\nproc enable_guardian\n    push.GUARDIAN_ON\n    # => [GUARDIAN_ON]\n\n    push.GUARDIAN_SELECTOR_SLOT[0..2]\n    # => [selector_slot_prefix, selector_slot_suffix, GUARDIAN_ON]\n\n    exec.native_account::set_item\n    # => [OLD_ROOT]\n\n    dropw\n    # => []\nend\n\n#! Disable GUARDIAN verification by setting the selector to OFF.\n#!\n#! Operand stack inputs: []\n#! Outputs: []\n#!\n#! Notes:\n#! - Sets GUARDIAN_SELECTOR_SLOT to GUARDIAN_OFF (0)\n#! - After this, transactions will NOT require GUARDIAN signature verification\nproc disable_guardian\n    push.GUARDIAN_OFF\n    # => [GUARDIAN_OFF]\n\n    push.GUARDIAN_SELECTOR_SLOT[0..2]\n    # => [selector_slot_prefix, selector_slot_suffix, GUARDIAN_OFF]\n\n    exec.native_account::set_item\n    # => [OLD_ROOT]\n\n    dropw\n    # => []\nend\n\n#! Update the GUARDIAN public key.\n#!\n#! Operand stack inputs: []\n#! Advice stack inputs:  [PUB_KEY]\n#!   - PUB_KEY is the new GUARDIAN RPO Falcon 512 public key\n#!\n#! Notes:\n#! - Stores PUB_KEY into GUARDIAN_PUBLIC_KEY_MAP_SLOT:\n#!      [0, 0, 0, 0] => GUARDIAN_PUBLIC_KEY\n#! - To update the key without requiring GUARDIAN signature, ensure\n#!   GUARDIAN_SELECTOR_SLOT = 0 (OFF) before calling this.\npub proc update_guardian_public_key\n    exec.disable_guardian\n    # ------ Update the GUARDIAN public key ------\n    adv_loadw\n    # => [PUB_KEY]\n\n    push.0.0.0.0\n    # => [MAP_KEY, PUB_KEY]\n    # Note that MAP_KEY is [0, 0, 0, 0] for a single GUARDIAN_KEY\n\n    push.GUARDIAN_PUBLIC_KEY_MAP_SLOT[0..2]\n    # => [pub_key_slot_prefix, pub_key_slot_suffix, MAP_KEY, PUB_KEY]\n\n    exec.native_account::set_map_item\n    # => [OLD_MAP_VALUE]\n\n    dropw\n    # => []\nend\n\n#! Conditionally verify a \"GUARDIAN\" signature against a stored public key hash.\n#! The condition is controlled by the selector at GUARDIAN_SELECTOR_SLOT.\n#!\n#! Inputs:  [MSG]\n#! Outputs: [MSG]\n#!\n#! Panics if:\n#! - Selector is ON but the provided GUARDIAN signature is invalid or missing.\n#!\n#! Notes:\n#! - MSG is TX_SUMMARY_COMMITMENT provided by auth procedure\n#! - If selector is OFF (0), GUARDIAN verification is skipped\n#! - Selector value is read from initial storage state\npub proc verify_guardian_signature(msg: BeWord) -> BeWord\n    push.GUARDIAN_SELECTOR_SLOT[0..2]\n    exec.active_account::get_item\n    drop drop drop\n    # => [selector, MSG]\n\n    push.1 eq\n    if.true\n        push.1\n        push.GUARDIAN_PUBLIC_KEY_MAP_SLOT[0..2]\n        exec.::miden::standards::auth::falcon512_rpo::verify_signatures\n        push.1 neq\n        if.true\n            emit.AUTH_UNAUTHORIZED_EVENT\n            push.0 assert.err=\"invalid GUARDIAN signature\"\n        end\n    end\n    # => [MSG]\n    exec.enable_guardian\nend\n";
-export declare const GUARDIAN_ECDSA_MASM = "# Guardian Authentication Component (ECDSA)\n#\n# This component provides GUARDIAN signature verification for accounts using\n# ECDSA secp256k1 (k256/keccak) signatures.\n# It can be used standalone or in conjunction with other auth components like multisig.\n\nuse miden::protocol::active_account\nuse miden::protocol::native_account\n\ntype BeWord = struct @bigendian { a: felt, b: felt, c: felt, d: felt }\n\n# IMPORTANT SECURITY NOTES\n# --------------------------------------------------------------------------------\n# - The selector in `GUARDIAN_SELECTOR_SLOT` controls whether the extra GUARDIAN signature\n#   is enforced:\n#     * GUARDIAN_ON  => exactly one valid GUARDIAN signature is required.\n#     * GUARDIAN_OFF => GUARDIAN signature is skipped for that call.\n#\n# - `verify_guardian_signature` reads the selector from initial storage state.\n#   This means changes made during the same transaction won't affect the check.\n#\n# - `enable_guardian` / `disable_guardian` procedures allow explicit control over GUARDIAN state.\n#\n# - `update_guardian_public_key`:\n#     * Installs a new GUARDIAN public key in the map at `GUARDIAN_PUBLIC_KEY_MAP_SLOT`.\n#     * Does not itself perform any signature checks.\n#     * To update the key without requiring GUARDIAN signature, ensure selector is OFF.\n#\n# Storage Layout\n# --------------------------------------------------------------------------------\n#\n# +---------------------+---------------+\n# |     DESCRIPTION     |     SLOT      |\n# +---------------------+---------------+\n# | GUARDIAN SELECTOR (word) |       0       |\n# | GUARDIAN PUBLIC KEY MAP  |       1       |\n# +---------------------+---------------+\n#\n# - GUARDIAN_SELECTOR_SLOT (0):\n#     * Stores a word that is compared against [1, 0, 0, 0] (GUARDIAN_ON).\n#     * Any value != GUARDIAN_ON is treated as GUARDIAN_OFF.\n#\n# - GUARDIAN_PUBLIC_KEY_MAP_SLOT (1):\n#     * A map from a fixed key [0, 0, 0, 0] to the single GUARDIAN public key:\n#         [0, 0, 0, 0] => GUARDIAN_PUBLIC_KEY\n#     * GUARDIAN_PUBLIC_KEY is an ECDSA secp256k1 public key represented as a word.\n\n# CONSTANTS\n# =================================================================================================\n\n# Slot where the GUARDIAN selector flag is stored (using word() for named slot access):\n# - GUARDIAN_ON  => GUARDIAN signature required\n# - GUARDIAN_OFF => GUARDIAN signature skipped\nconst GUARDIAN_SELECTOR_SLOT=word(\"openzeppelin::guardian::selector\")\n\n# Map slot for GUARDIAN public key\n# Uses exactly one GUARDIAN public key at index [0, 0, 0, 0]\n# [0, 0, 0, 0] => GUARDIAN_PUBLIC_KEY\nconst GUARDIAN_PUBLIC_KEY_MAP_SLOT=word(\"openzeppelin::guardian::public_key\")\n\n# Selector flag values\nconst GUARDIAN_ON=[1, 0, 0, 0]\nconst GUARDIAN_OFF=[0, 0, 0, 0]\n\n# The event emitted when a signature is not found for a required signer.\nconst AUTH_UNAUTHORIZED_EVENT=event(\"miden::auth::unauthorized\")\n\n# GUARDIAN PROCEDURES\n# =================================================================================================\n\n#! Enable GUARDIAN verification by setting the selector to ON.\n#!\n#! Operand stack inputs: []\n#! Outputs: []\n#!\n#! Notes:\n#! - Sets GUARDIAN_SELECTOR_SLOT to GUARDIAN_ON (1)\n#! - After this, transactions will require GUARDIAN signature verification\nproc enable_guardian\n    push.GUARDIAN_ON\n    # => [GUARDIAN_ON]\n\n    push.GUARDIAN_SELECTOR_SLOT[0..2]\n    # => [selector_slot_prefix, selector_slot_suffix, GUARDIAN_ON]\n\n    exec.native_account::set_item\n    # => [OLD_ROOT]\n\n    dropw\n    # => []\nend\n\n#! Disable GUARDIAN verification by setting the selector to OFF.\n#!\n#! Operand stack inputs: []\n#! Outputs: []\n#!\n#! Notes:\n#! - Sets GUARDIAN_SELECTOR_SLOT to GUARDIAN_OFF (0)\n#! - After this, transactions will NOT require GUARDIAN signature verification\nproc disable_guardian\n    push.GUARDIAN_OFF\n    # => [GUARDIAN_OFF]\n\n    push.GUARDIAN_SELECTOR_SLOT[0..2]\n    # => [selector_slot_prefix, selector_slot_suffix, GUARDIAN_OFF]\n\n    exec.native_account::set_item\n    # => [OLD_ROOT]\n\n    dropw\n    # => []\nend\n\n#! Update the GUARDIAN public key.\n#!\n#! Operand stack inputs: []\n#! Advice stack inputs:  [PUB_KEY]\n#!   - PUB_KEY is the new GUARDIAN ECDSA secp256k1 public key\n#!\n#! Notes:\n#! - Stores PUB_KEY into GUARDIAN_PUBLIC_KEY_MAP_SLOT:\n#!      [0, 0, 0, 0] => GUARDIAN_PUBLIC_KEY\n#! - To update the key without requiring GUARDIAN signature, ensure\n#!   GUARDIAN_SELECTOR_SLOT = 0 (OFF) before calling this.\npub proc update_guardian_public_key\n    exec.disable_guardian\n    # ------ Update the GUARDIAN public key ------\n    adv_loadw\n    # => [PUB_KEY]\n\n    push.0.0.0.0\n    # => [MAP_KEY, PUB_KEY]\n    # Note that MAP_KEY is [0, 0, 0, 0] for a single GUARDIAN_KEY\n\n    push.GUARDIAN_PUBLIC_KEY_MAP_SLOT[0..2]\n    # => [pub_key_slot_prefix, pub_key_slot_suffix, MAP_KEY, PUB_KEY]\n\n    exec.native_account::set_map_item\n    # => [OLD_MAP_VALUE]\n\n    dropw\n    # => []\nend\n\n#! Conditionally verify a \"GUARDIAN\" signature against a stored public key hash.\n#! The condition is controlled by the selector at GUARDIAN_SELECTOR_SLOT.\n#!\n#! Inputs:  [MSG]\n#! Outputs: [MSG]\n#!\n#! Panics if:\n#! - Selector is ON but the provided GUARDIAN signature is invalid or missing.\n#!\n#! Notes:\n#! - MSG is TX_SUMMARY_COMMITMENT provided by auth procedure\n#! - If selector is OFF (0), GUARDIAN verification is skipped\n#! - Selector value is read from initial storage state\npub proc verify_guardian_signature(msg: BeWord) -> BeWord\n    push.GUARDIAN_SELECTOR_SLOT[0..2]\n    exec.active_account::get_item\n    drop drop drop\n    # => [selector, MSG]\n\n    push.1 eq\n    if.true\n        push.1\n        push.GUARDIAN_PUBLIC_KEY_MAP_SLOT[0..2]\n        exec.::miden::standards::auth::ecdsa_k256_keccak::verify_signatures\n        push.1 neq\n        if.true\n            emit.AUTH_UNAUTHORIZED_EVENT\n            push.0 assert.err=\"invalid GUARDIAN signature\"\n        end\n    end\n    # => [MSG]\n    exec.enable_guardian\nend\n";
+export declare const MULTISIG_MASM = "# Multi-Signature RPO Falcon 512 Authentication Core Library\n#\n# This library provides the reusable multisig procedures used by account wrappers.\n\nuse miden::protocol::active_account\nuse miden::protocol::auth::AUTH_UNAUTHORIZED_EVENT\nuse miden::protocol::native_account\nuse miden::standards::auth\n\n# CONSTANTS\n# =================================================================================================\n\n# Auth Request Constants\n\n# Storage Layout Constants\n#\n# +-------------------------------+----------+------------+--------------+-------------------+\n# | THRESHOLD & APPROVERS CONFIG  | PUB KEYS | SCHEME IDS | EXECUTED TXS |  PROC THRESHOLDS  |\n# |           (slot)              |   (map)  |   (map)    |    (map)     |       (map)       |\n# +-------------------------------+----------+------------+--------------+-------------------+\n# |              0                |    1     |      2     |      3       |         4         |\n# +-------------------------------+----------+------------+--------------+-------------------+\n\n# The slot in this component's storage layout where the default signature threshold and\n# number of approvers are stored as:\n# [default_threshold, num_approvers, 0, 0].\n# The threshold is guaranteed to be less than or equal to num_approvers.\nconst THRESHOLD_CONFIG_SLOT=word(\"openzeppelin::multisig::threshold_config\")\n\n# The slot in this component's storage layout where the public keys map is stored.\n# Map entries: [key_index, 0, 0, 0] => APPROVER_PUBLIC_KEY\nconst PUBLIC_KEYS_MAP_SLOT=word(\"openzeppelin::multisig::signer_public_keys\")\n\n# The slot in this component's storage layout where signer scheme IDs are stored.\n# Map entries: [key_index, 0, 0, 0] => [scheme_id, 0, 0, 0]\nconst APPROVER_SCHEME_ID_SLOT=word(\"openzeppelin::multisig::signer_scheme_ids\")\n\n# The slot in this component's storage layout where executed transactions are stored.\n# Map entries: transaction_message => [is_executed, 0, 0, 0]\nconst EXECUTED_TXS_SLOT=word(\"openzeppelin::multisig::executed_transactions\")\n\n# The slot in this component's storage layout where procedure thresholds are stored.\n# Map entries: PROC_ROOT => [proc_threshold, 0, 0, 0]\nconst PROC_THRESHOLD_ROOTS_SLOT=word(\"openzeppelin::multisig::procedure_thresholds\")\n\n# Executed Transaction Flag Constant\nconst IS_EXECUTED_FLAG=[1, 0, 0, 0]\nconst FALCON_512_POSEIDON2_SCHEME_WORD=[2, 0, 0, 0]\n\n# ERRORS\nconst ERR_TX_ALREADY_EXECUTED=\"failed to approve multisig transaction as it was already executed\"\n\nconst ERR_MALFORMED_MULTISIG_CONFIG=\"number of approvers must be equal to or greater than threshold\"\n\nconst ERR_ZERO_IN_MULTISIG_CONFIG=\"number of approvers or threshold must not be zero\"\n\nconst ERR_PROC_THRESHOLD_NOT_U32=\"procedure threshold must be a u32 value\"\n\nconst ERR_NUM_APPROVERS_OR_PROC_THRESHOLD_NOT_U32=\"number of approvers and procedure threshold must be u32\"\n\nconst ERR_PROC_THRESHOLD_EXCEEDS_NUM_APPROVERS=\"procedure threshold exceeds number of approvers\"\n\n# MULTISIG PROCEDURES\n# =================================================================================================\n\n#! Check if transaction has already been executed and add it to executed transactions for replay protection.\n#!\n#! Inputs:  [MSG]\n#! Outputs: []\n#!\n#! Panics if:\n#! - the same transaction has already been executed\npub proc assert_new_tx(msg: word)\n    push.IS_EXECUTED_FLAG\n    # => [[0, 0, 0, is_executed], MSG]\n\n    swapw\n    # => [MSG, IS_EXECUTED_FLAG]\n\n    push.EXECUTED_TXS_SLOT[0..2]\n    # => [txs_slot_prefix, txs_slot_suffix, MSG, IS_EXECUTED_FLAG]\n\n    # Set the key value pair in the map to mark transaction as executed\n    exec.native_account::set_map_item\n    # => [[0, 0, 0, is_executed]]\n\n    drop drop drop\n    # => [is_executed]\n\n    assertz.err=ERR_TX_ALREADY_EXECUTED\n    # => []\nend\n\n#! Remove old approver public keys from the approver public key mapping.\n#!\n#! This procedure cleans up the storage by removing public keys of approvers that are no longer\n#! part of the multisig configuration. This procedure assumes that init_num_of_approvers and\n#! new_num_of_approvers are u32 values.\n#!\n#! Inputs: [init_num_of_approvers, new_num_of_approvers]\n#! Outputs: []\n#!\n#! Where:\n#! - init_num_of_approvers is the original number of approvers before the update\n#! - new_num_of_approvers is the new number of approvers after the update\nproc cleanup_pubkey_mapping(init_num_of_approvers: u32, new_num_of_approvers: u32)\n    dup.1 dup.1\n    u32assert2 u32lt\n    # => [should_loop, i = init_num_of_approvers, new_num_of_approvers]\n\n    while.true\n        # => [i, new_num_of_approvers]\n\n        sub.1\n        # => [i-1, new_num_of_approvers]\n\n        dup exec.create_approver_map_key\n        # => [APPROVER_MAP_KEY, i-1, new_num_of_approvers]\n\n        padw swapw\n        # => [APPROVER_MAP_KEY, EMPTY_WORD, i-1, new_num_of_approvers]\n\n        push.PUBLIC_KEYS_MAP_SLOT[0..2]\n        # => [pub_key_slot_prefix, pub_key_slot_suffix, APPROVER_MAP_KEY, EMPTY_WORD, i-1, new_num_of_approvers]\n\n        exec.native_account::set_map_item\n        # => [OLD_MAP_VALUE, i-1, new_num_of_approvers]\n\n        dropw\n        # => [i-1, new_num_of_approvers]\n\n        dup exec.create_approver_map_key\n        # => [APPROVER_MAP_KEY, i-1, new_num_of_approvers]\n\n        padw swapw\n        # => [APPROVER_MAP_KEY, EMPTY_WORD, i-1, new_num_of_approvers]\n\n        push.APPROVER_SCHEME_ID_SLOT[0..2]\n        # => [scheme_slot_prefix, scheme_slot_suffix, APPROVER_MAP_KEY, EMPTY_WORD, i-1, new_num_of_approvers]\n\n        exec.native_account::set_map_item\n        # => [OLD_MAP_VALUE, i-1, new_num_of_approvers]\n\n        dropw\n        # => [i-1, new_num_of_approvers]\n\n        dup.1 dup.1\n        u32lt\n        # => [should_loop, i-1, new_num_of_approvers]\n    end\n\n    drop drop\n    # => []\nend\n\nproc create_approver_map_key\n    push.0.0.0 movup.3\n    # => [APPROVER_MAP_KEY]\nend\n\nproc get_threshold_and_num_approvers\n    push.THRESHOLD_CONFIG_SLOT[0..2]\n    exec.active_account::get_initial_item\n    # => [threshold, num_approvers]\n\n    movup.2 drop movup.2 drop\n    # => [threshold, num_approvers]\nend\n\nproc assert_proc_thresholds_lte_num_approvers(num_approvers: u32)\n    exec.active_account::get_num_procedures\n    # => [num_procedures, num_approvers]\n\n    dup neq.0\n    # => [should_continue, num_procedures, num_approvers]\n    while.true\n        sub.1 dup\n        # => [proc_index, proc_index, num_approvers]\n\n        exec.active_account::get_procedure_root\n        # => [PROC_ROOT, proc_index, num_approvers]\n\n        push.PROC_THRESHOLD_ROOTS_SLOT[0..2]\n        # => [proc_roots_slot_prefix, proc_roots_slot_suffix, PROC_ROOT, proc_index, num_approvers]\n\n        exec.active_account::get_map_item\n        # => [[proc_threshold, 0, 0, 0], proc_index, num_approvers]\n\n        movdn.3 drop drop drop\n        # => [proc_threshold, proc_index, num_approvers]\n\n        dup.2\n        # => [num_approvers, proc_threshold, proc_index, num_approvers]\n\n        u32assert2.err=ERR_PROC_THRESHOLD_NOT_U32\n        u32gt assertz.err=ERR_PROC_THRESHOLD_EXCEEDS_NUM_APPROVERS\n        # => [proc_index, num_approvers]\n\n        dup neq.0\n        # => [should_continue, proc_index, num_approvers]\n    end\n\n    drop drop\n    # => []\nend\n\n# Internal storage helper used by the public `update_procedure_threshold`\n# entrypoint after it receives direct stack arguments.\nproc set_procedure_threshold(proc_threshold: u32, proc_root: word)\n    exec.get_threshold_and_num_approvers\n    # => [threshold, num_approvers, proc_threshold, PROC_ROOT]\n\n    drop\n    # => [num_approvers, proc_threshold, PROC_ROOT]\n\n    dup.1 swap\n    # => [num_approvers, proc_threshold, proc_threshold, PROC_ROOT]\n\n    u32assert2.err=ERR_NUM_APPROVERS_OR_PROC_THRESHOLD_NOT_U32\n    u32gt assertz.err=ERR_PROC_THRESHOLD_EXCEEDS_NUM_APPROVERS\n    # => [proc_threshold, PROC_ROOT]\n\n    push.0.0.0\n    movup.3\n    swapw\n    # => [PROC_ROOT, PROC_THRESHOLD_WORD]\n\n    push.PROC_THRESHOLD_ROOTS_SLOT[0..2]\n    # => [proc_roots_slot_prefix, proc_roots_slot_suffix, PROC_ROOT, PROC_THRESHOLD_WORD]\n\n    exec.native_account::set_map_item\n    # => [OLD_VALUE]\n\n    dropw\n    # => []\nend\n\n#! Update threshold config and add / remove approvers\n#!\n#! Inputs:\n#!   Operand stack: [MULTISIG_CONFIG_HASH, pad(12)]\n#!   Advice map: {\n#!     MULTISIG_CONFIG_HASH => [CONFIG, PUB_KEY_N, PUB_KEY_N-1, ..., PUB_KEY_0]\n#!   }\n#! Outputs:\n#!   Operand stack: [TX_SUMMARY_COMMITMENT]\n#!\n#! Where:\n#! - MULTISIG_CONFIG_HASH is the hash of the threshold and new public key vector\n#! - MULTISIG_CONFIG is [threshold, num_approvers, 0, 0]\n#! - PUB_KEY_i is the public key of the i-th signer\n#!\n#! Locals:\n#! 0: new_num_of_approvers\n#! 1: init_num_of_approvers\n@locals(2)\npub proc update_signers_and_threshold(multisig_config_hash: word)\n    adv.push_mapval\n    # => [MULTISIG_CONFIG_HASH, pad(12)]\n\n    adv_loadw\n    # => [MULTISIG_CONFIG, pad(12)]\n\n    # store new_num_of_approvers for later\n    dup.1 loc_store.0\n    # => [MULTISIG_CONFIG, pad(12)]\n\n    dup dup.2\n    # => [num_approvers, threshold, MULTISIG_CONFIG, pad(12)]\n\n    # make sure that the threshold is smaller than the number of approvers\n    u32assert2.err=ERR_MALFORMED_MULTISIG_CONFIG\n    u32gt assertz.err=ERR_MALFORMED_MULTISIG_CONFIG\n    # => [MULTISIG_CONFIG, pad(12)]\n\n    dup dup.2\n    # => [num_approvers, threshold, MULTISIG_CONFIG, pad(12)]\n\n    # make sure that threshold or num_approvers are not zero\n    eq.0 assertz.err=ERR_ZERO_IN_MULTISIG_CONFIG\n    eq.0 assertz.err=ERR_ZERO_IN_MULTISIG_CONFIG\n    # => [MULTISIG_CONFIG, pad(12)]\n\n    loc_load.0\n    # => [num_approvers, MULTISIG_CONFIG, pad(12)]\n\n    exec.assert_proc_thresholds_lte_num_approvers\n    # => [MULTISIG_CONFIG, pad(12)]\n\n    push.THRESHOLD_CONFIG_SLOT[0..2]\n    # => [config_slot_prefix, config_slot_suffix, MULTISIG_CONFIG, pad(12)]\n\n    exec.native_account::set_item\n    # => [OLD_THRESHOLD_CONFIG, pad(12)]\n\n    # store init_num_of_approvers for later\n    drop loc_store.1 drop drop\n    # => [pad(12)]\n\n    loc_load.0\n    # => [num_approvers]\n\n    dup neq.0\n    while.true\n        sub.1\n        # => [i-1, pad(12)]\n\n        dup exec.create_approver_map_key\n        # => [APPROVER_MAP_KEY, i-1, pad(12)]\n\n        padw adv_loadw\n        # => [PUB_KEY, APPROVER_MAP_KEY, i-1, pad(12)]\n\n        swapw\n        # => [APPROVER_MAP_KEY, PUB_KEY, i-1, pad(12)]\n\n        push.PUBLIC_KEYS_MAP_SLOT[0..2]\n        # => [pub_key_slot_prefix, pub_key_slot_suffix, APPROVER_MAP_KEY, PUB_KEY, i-1, pad(12)]\n\n        exec.native_account::set_map_item\n        # => [OLD_VALUE, i-1, pad(12)]\n\n        dropw\n        # => [i-1, pad(12)]\n\n        dup exec.create_approver_map_key\n        # => [APPROVER_MAP_KEY, i-1, pad(12)]\n\n        push.FALCON_512_POSEIDON2_SCHEME_WORD\n        # => [SCHEME_ID_WORD, APPROVER_MAP_KEY, i-1, pad(12)]\n\n        swapw\n        # => [APPROVER_MAP_KEY, [2, 0, 0, 0], i-1, pad(12)]\n\n        push.APPROVER_SCHEME_ID_SLOT[0..2]\n        # => [scheme_slot_prefix, scheme_slot_suffix, APPROVER_MAP_KEY, [2, 0, 0, 0], i-1, pad(12)]\n\n        exec.native_account::set_map_item\n        # => [OLD_VALUE, i-1, pad(12)]\n\n        dropw\n        # => [i-1, pad(12)]\n\n        dup neq.0\n        # => [is_non_zero, i-1, pad(12)]\n    end\n    # => [pad(13)]\n\n    drop\n    # => [pad(12)]\n\n    # compare initial vs current multisig config\n\n    # load init_num_of_approvers & new_num_of_approvers\n    loc_load.0 loc_load.1\n    # => [init_num_of_approvers, new_num_of_approvers, pad(12)]\n\n    exec.cleanup_pubkey_mapping\n    # => [pad(12)]\nend\n\n#! Update or clear the threshold override for a specific procedure.\n#!\n#! Inputs:\n#!   Operand stack: [proc_threshold, PROC_ROOT]\n#! Outputs:\n#!   Operand stack: []\n#! Invocation: call\npub proc update_procedure_threshold(proc_threshold: u32, proc_root: word)\n    exec.set_procedure_threshold\nend\n\n# Computes the effective transaction threshold based on called procedures and per-procedure\n# overrides stored in PROC_THRESHOLD_ROOTS_SLOT. Falls back to default_threshold if no\n# overrides apply.\n#\n#! Inputs:  [default_threshold]\n#! Outputs: [transaction_threshold]\n@locals(1)\nproc compute_transaction_threshold(default_threshold: u32) -> u32\n    # 1. initialize transaction_threshold = 0\n    # 2. iterate through all account procedures\n    #   a. check if the procedure was called during the transaction\n    #   b. if called, get the override threshold of that procedure from the config map\n    #   c. if proc_threshold > transaction_threshold, set transaction_threshold = proc_threshold\n    # 3. if transaction_threshold == 0 at the end, revert to using default_threshold\n\n    # store default_threshold for later\n    loc_store.0\n    # => []\n\n    # 1. initialize transaction_threshold = 0\n    push.0\n    # => [transaction_threshold]\n\n    # get the number of account procedures\n    exec.active_account::get_num_procedures\n    # => [num_procedures, transaction_threshold]\n\n    # 2. iterate through all account procedures\n    dup neq.0\n    # => [should_continue, num_procedures, transaction_threshold]\n    while.true\n        sub.1 dup\n        # => [num_procedures-1, num_procedures-1, transaction_threshold]\n\n        # get procedure root of the procedure with index i\n        exec.active_account::get_procedure_root dupw\n        # => [PROC_ROOT, PROC_ROOT, num_procedures-1, transaction_threshold]\n\n        # 2a. check if this procedure has been called in the transaction\n        exec.native_account::was_procedure_called\n        # => [was_called, PROC_ROOT, num_procedures-1, transaction_threshold]\n\n        # if it has been called, get the override threshold of that procedure\n        if.true\n            # => [PROC_ROOT, num_procedures-1, transaction_threshold]\n\n            push.PROC_THRESHOLD_ROOTS_SLOT[0..2]\n            # => [PROC_THRESHOLD_ROOTS_SLOT_prefix, PROC_THRESHOLD_ROOTS_SLOT_suffix, PROC_ROOT, num_procedures-1, transaction_threshold]\n\n            # 2b. get the override proc_threshold of that procedure\n            # if the procedure has no override threshold, the returned map item will be [0, 0, 0, 0]\n            exec.active_account::get_initial_map_item\n            # => [[proc_threshold, 0, 0, 0], num_procedures-1, transaction_threshold]\n\n            movdn.3 drop drop drop dup dup.3\n            # => [transaction_threshold, proc_threshold, proc_threshold, num_procedures-1, transaction_threshold]\n\n            u32assert2.err=\"transaction threshold or procedure threshold are not u32\"\n            u32gt\n            # => [is_gt, proc_threshold, num_procedures-1, transaction_threshold]\n            # 2c. if proc_threshold > transaction_threshold, update transaction_threshold\n            movup.2 movdn.3\n            # => [is_gt, proc_threshold, transaction_threshold, num_procedures-1]\n            cdrop\n            # => [updated_transaction_threshold, num_procedures-1]\n            swap\n            # => [num_procedures-1, updated_transaction_threshold]\n        # if it has not been called during this transaction, nothing to do, move to the next procedure\n        else\n            dropw\n            # => [num_procedures-1, transaction_threshold]\n        end\n\n        dup neq.0\n        # => [should_continue, num_procedures-1, transaction_threshold]\n    end\n\n    drop\n    # => [transaction_threshold]\n\n    loc_load.0\n    # => [default_threshold, transaction_threshold]\n\n    # 3. if transaction_threshold == 0 at the end, revert to using default_threshold\n    dup.1 eq.0\n    # => [is_zero, default_threshold, transaction_threshold]\n\n    cdrop\n    # => [effective_transaction_threshold]\nend\n\n#! Authenticate a transaction using the Falcon signature scheme with multi-signature support.\n#!\n#! This procedure implements multi-signature authentication by:\n#! 1. Computing the transaction summary message that needs to be signed\n#! 2. Verifying signatures from multiple required signers against their public keys\n#! 3. Ensuring the minimum threshold of valid signatures is met\n#! 4. Returning the transaction summary commitment for higher-level wrappers.\n#!\n#! Inputs:\n#!   Operand stack: [SALT]\n#!   Advice map: {\n#!     h(SIG_0, MSG): SIG_0,\n#!     h(SIG_1, MSG): SIG_1,\n#!     h(SIG_n, MSG): SIG_n\n#!   }\n#! Outputs:\n#!   Operand stack: []\n#!\n#! Where:\n#! - SALT is a cryptographically random nonce that enables multiple concurrent\n#!   multisig transactions while maintaining replay protection. Each transaction\n#!   must use a unique SALT value to ensure transaction uniqueness.\n#! - SIG_i is the signature from the i-th signer.\n#! - MSG is the transaction message being signed.\n#! - h(SIG_i, MSG) is the hash of the signature and message used as the advice map key.\n#!\n#! Panics if:\n#! - insufficient number of valid signatures (below threshold).\n#! - insufficient number of valid signatures (below threshold).\n#!\n#! Invocation: exec\n@locals(1)\npub proc auth_tx(salt: word)\n    exec.native_account::incr_nonce drop\n    # => [SALT]\n\n    # ------ Computing transaction summary ------\n\n    exec.auth::create_tx_summary\n    # => [ACCOUNT_DELTA_COMMITMENT, INPUT_NOTES_COMMITMENT, OUTPUT_NOTES_COMMITMENT, SALT]\n\n    # to build a tx_summary in the host, we need these four words in the advice provider\n    adv.insert_hqword\n    # => [ACCOUNT_DELTA_COMMITMENT, INPUT_NOTES_COMMITMENT, OUTPUT_NOTES_COMMITMENT, SALT]\n\n    # the commitment to the tx summary is the message that is signed\n    exec.auth::hash_tx_summary\n    # => [TX_SUMMARY_COMMITMENT]\n\n    # ------ Verifying approver signatures ------\n\n    exec.get_threshold_and_num_approvers\n    # => [default_threshold, num_of_approvers, TX_SUMMARY_COMMITMENT]\n\n    movdn.5\n    # => [num_of_approvers, TX_SUMMARY_COMMITMENT, default_threshold]\n\n    push.PUBLIC_KEYS_MAP_SLOT[0..2]\n    # => [pub_key_slot_prefix, pub_key_slot_suffix, num_of_approvers, TX_SUMMARY_COMMITMENT, default_threshold]\n\n    push.APPROVER_SCHEME_ID_SLOT[0..2]\n    # => [scheme_id_slot_prefix, scheme_id_slot_suffix, pub_key_slot_prefix, pub_key_slot_suffix, num_of_approvers, TX_SUMMARY_COMMITMENT, default_threshold]\n\n    exec.::miden::standards::auth::signature::verify_signatures\n    # => [num_verified_signatures, TX_SUMMARY_COMMITMENT, default_threshold]\n\n    # ------ Checking threshold is >= num_verified_signatures ------\n\n    movup.5\n    # => [default_threshold, num_verified_signatures, TX_SUMMARY_COMMITMENT]\n\n    exec.compute_transaction_threshold\n    # => [transaction_threshold, num_verified_signatures, TX_SUMMARY_COMMITMENT]\n\n    u32assert2 u32lt\n    # => [is_unauthorized, TX_SUMMARY_COMMITMENT]\n\n    # If signatures are non-existent the tx will fail here.\n    if.true\n        emit.AUTH_UNAUTHORIZED_EVENT\n        push.0 assert.err=\"insufficient number of signatures\"\n    end\n\n    # => [TX_SUMMARY_COMMITMENT]\nend\n";
+export declare const MULTISIG_ECDSA_MASM = "# Multi-Signature ECDSA secp256k1 Authentication Core Library\n#\n# This library provides the reusable multisig procedures used by account wrappers.\n\nuse miden::protocol::active_account\nuse miden::protocol::auth::AUTH_UNAUTHORIZED_EVENT\nuse miden::protocol::native_account\nuse miden::standards::auth\n\n# CONSTANTS\n# =================================================================================================\n\n# Auth Request Constants\n\n# Storage Layout Constants\n#\n# +-------------------------------+----------+------------+--------------+-------------------+\n# | THRESHOLD & APPROVERS CONFIG  | PUB KEYS | SCHEME IDS | EXECUTED TXS |  PROC THRESHOLDS  |\n# |           (slot)              |   (map)  |   (map)    |    (map)     |       (map)       |\n# +-------------------------------+----------+------------+--------------+-------------------+\n# |              0                |    1     |      2     |      3       |         4         |\n# +-------------------------------+----------+------------+--------------+-------------------+\n\n# The slot in this component's storage layout where the default signature threshold and\n# number of approvers are stored as:\n# [default_threshold, num_approvers, 0, 0].\n# The threshold is guaranteed to be less than or equal to num_approvers.\nconst THRESHOLD_CONFIG_SLOT=word(\"openzeppelin::multisig::threshold_config\")\n\n# The slot in this component's storage layout where the public keys map is stored.\n# Map entries: [key_index, 0, 0, 0] => APPROVER_PUBLIC_KEY\nconst PUBLIC_KEYS_MAP_SLOT=word(\"openzeppelin::multisig::signer_public_keys\")\n\n# The slot in this component's storage layout where signer scheme IDs are stored.\n# Map entries: [key_index, 0, 0, 0] => [scheme_id, 0, 0, 0]\nconst APPROVER_SCHEME_ID_SLOT=word(\"openzeppelin::multisig::signer_scheme_ids\")\n\n# The slot in this component's storage layout where executed transactions are stored.\n# Map entries: transaction_message => [is_executed, 0, 0, 0]\nconst EXECUTED_TXS_SLOT=word(\"openzeppelin::multisig::executed_transactions\")\n\n# The slot in this component's storage layout where procedure thresholds are stored.\n# Map entries: PROC_ROOT => [proc_threshold, 0, 0, 0]\nconst PROC_THRESHOLD_ROOTS_SLOT=word(\"openzeppelin::multisig::procedure_thresholds\")\n\n# Executed Transaction Flag Constant\nconst IS_EXECUTED_FLAG=[1, 0, 0, 0]\nconst ECDSA_K256_KECCAK_SCHEME_WORD=[1, 0, 0, 0]\n\n# ERRORS\nconst ERR_TX_ALREADY_EXECUTED=\"failed to approve multisig transaction as it was already executed\"\n\nconst ERR_MALFORMED_MULTISIG_CONFIG=\"number of approvers must be equal to or greater than threshold\"\n\nconst ERR_ZERO_IN_MULTISIG_CONFIG=\"number of approvers or threshold must not be zero\"\n\nconst ERR_PROC_THRESHOLD_NOT_U32=\"procedure threshold must be a u32 value\"\n\nconst ERR_NUM_APPROVERS_OR_PROC_THRESHOLD_NOT_U32=\"number of approvers and procedure threshold must be u32\"\n\nconst ERR_PROC_THRESHOLD_EXCEEDS_NUM_APPROVERS=\"procedure threshold exceeds number of approvers\"\n\n# MULTISIG PROCEDURES\n# =================================================================================================\n\n#! Check if transaction has already been executed and add it to executed transactions for replay protection.\n#!\n#! Inputs:  [MSG]\n#! Outputs: []\n#!\n#! Panics if:\n#! - the same transaction has already been executed\npub proc assert_new_tx(msg: word)\n    push.IS_EXECUTED_FLAG\n    # => [[0, 0, 0, is_executed], MSG]\n\n    swapw\n    # => [MSG, IS_EXECUTED_FLAG]\n\n    push.EXECUTED_TXS_SLOT[0..2]\n    # => [txs_slot_prefix, txs_slot_suffix, MSG, IS_EXECUTED_FLAG]\n\n    # Set the key value pair in the map to mark transaction as executed\n    exec.native_account::set_map_item\n    # => [[0, 0, 0, is_executed]]\n\n    drop drop drop\n    # => [is_executed]\n\n    assertz.err=ERR_TX_ALREADY_EXECUTED\n    # => []\nend\n\n#! Remove old approver public keys from the approver public key mapping.\n#!\n#! This procedure cleans up the storage by removing public keys of approvers that are no longer\n#! part of the multisig configuration. This procedure assumes that init_num_of_approvers and\n#! new_num_of_approvers are u32 values.\n#!\n#! Inputs: [init_num_of_approvers, new_num_of_approvers]\n#! Outputs: []\n#!\n#! Where:\n#! - init_num_of_approvers is the original number of approvers before the update\n#! - new_num_of_approvers is the new number of approvers after the update\nproc cleanup_pubkey_mapping(init_num_of_approvers: u32, new_num_of_approvers: u32)\n    dup.1 dup.1\n    u32assert2 u32lt\n    # => [should_loop, i = init_num_of_approvers, new_num_of_approvers]\n\n    while.true\n        # => [i, new_num_of_approvers]\n\n        sub.1\n        # => [i-1, new_num_of_approvers]\n\n        dup exec.create_approver_map_key\n        # => [APPROVER_MAP_KEY, i-1, new_num_of_approvers]\n\n        padw swapw\n        # => [APPROVER_MAP_KEY, EMPTY_WORD, i-1, new_num_of_approvers]\n\n        push.PUBLIC_KEYS_MAP_SLOT[0..2]\n        # => [pub_key_slot_prefix, pub_key_slot_suffix, APPROVER_MAP_KEY, EMPTY_WORD, i-1, new_num_of_approvers]\n\n        exec.native_account::set_map_item\n        # => [OLD_MAP_VALUE, i-1, new_num_of_approvers]\n\n        dropw\n        # => [i-1, new_num_of_approvers]\n\n        dup exec.create_approver_map_key\n        # => [APPROVER_MAP_KEY, i-1, new_num_of_approvers]\n\n        padw swapw\n        # => [APPROVER_MAP_KEY, EMPTY_WORD, i-1, new_num_of_approvers]\n\n        push.APPROVER_SCHEME_ID_SLOT[0..2]\n        # => [scheme_slot_prefix, scheme_slot_suffix, APPROVER_MAP_KEY, EMPTY_WORD, i-1, new_num_of_approvers]\n\n        exec.native_account::set_map_item\n        # => [OLD_MAP_VALUE, i-1, new_num_of_approvers]\n\n        dropw\n        # => [i-1, new_num_of_approvers]\n\n        dup.1 dup.1\n        u32lt\n        # => [should_loop, i-1, new_num_of_approvers]\n    end\n\n    drop drop\n    # => []\nend\n\nproc create_approver_map_key\n    push.0.0.0 movup.3\n    # => [APPROVER_MAP_KEY]\nend\n\nproc get_threshold_and_num_approvers\n    push.THRESHOLD_CONFIG_SLOT[0..2]\n    exec.active_account::get_initial_item\n    # => [threshold, num_approvers]\n\n    movup.2 drop movup.2 drop\n    # => [threshold, num_approvers]\nend\n\nproc assert_proc_thresholds_lte_num_approvers(num_approvers: u32)\n    exec.active_account::get_num_procedures\n    # => [num_procedures, num_approvers]\n\n    dup neq.0\n    # => [should_continue, num_procedures, num_approvers]\n    while.true\n        sub.1 dup\n        # => [proc_index, proc_index, num_approvers]\n\n        exec.active_account::get_procedure_root\n        # => [PROC_ROOT, proc_index, num_approvers]\n\n        push.PROC_THRESHOLD_ROOTS_SLOT[0..2]\n        # => [proc_roots_slot_prefix, proc_roots_slot_suffix, PROC_ROOT, proc_index, num_approvers]\n\n        exec.active_account::get_map_item\n        # => [[proc_threshold, 0, 0, 0], proc_index, num_approvers]\n\n        movdn.3 drop drop drop\n        # => [proc_threshold, proc_index, num_approvers]\n\n        dup.2\n        # => [num_approvers, proc_threshold, proc_index, num_approvers]\n\n        u32assert2.err=ERR_PROC_THRESHOLD_NOT_U32\n        u32gt assertz.err=ERR_PROC_THRESHOLD_EXCEEDS_NUM_APPROVERS\n        # => [proc_index, num_approvers]\n\n        dup neq.0\n        # => [should_continue, proc_index, num_approvers]\n    end\n\n    drop drop\n    # => []\nend\n\n# Internal storage helper used by the public `update_procedure_threshold`\n# entrypoint after it receives direct stack arguments.\nproc set_procedure_threshold(proc_threshold: u32, proc_root: word)\n    exec.get_threshold_and_num_approvers\n    # => [threshold, num_approvers, proc_threshold, PROC_ROOT]\n\n    drop\n    # => [num_approvers, proc_threshold, PROC_ROOT]\n\n    dup.1 swap\n    # => [num_approvers, proc_threshold, proc_threshold, PROC_ROOT]\n\n    u32assert2.err=ERR_NUM_APPROVERS_OR_PROC_THRESHOLD_NOT_U32\n    u32gt assertz.err=ERR_PROC_THRESHOLD_EXCEEDS_NUM_APPROVERS\n    # => [proc_threshold, PROC_ROOT]\n\n    push.0.0.0\n    movup.3\n    swapw\n    # => [PROC_ROOT, PROC_THRESHOLD_WORD]\n\n    push.PROC_THRESHOLD_ROOTS_SLOT[0..2]\n    # => [proc_roots_slot_prefix, proc_roots_slot_suffix, PROC_ROOT, PROC_THRESHOLD_WORD]\n\n    exec.native_account::set_map_item\n    # => [OLD_VALUE]\n\n    dropw\n    # => []\nend\n\n#! Update threshold config and add / remove approvers\n#!\n#! Inputs:\n#!   Operand stack: [MULTISIG_CONFIG_HASH, pad(12)]\n#!   Advice map: {\n#!     MULTISIG_CONFIG_HASH => [CONFIG, PUB_KEY_N, PUB_KEY_N-1, ..., PUB_KEY_0]\n#!   }\n#! Outputs:\n#!   Operand stack: []\n#!\n#! Where:\n#! - MULTISIG_CONFIG_HASH is the hash of the threshold and new public key vector\n#! - MULTISIG_CONFIG is [threshold, num_approvers, 0, 0]\n#! - PUB_KEY_i is the public key of the i-th signer\n#!\n#! Locals:\n#! 0: new_num_of_approvers\n#! 1: init_num_of_approvers\n@locals(2)\npub proc update_signers_and_threshold(multisig_config_hash: word)\n    adv.push_mapval\n    # => [MULTISIG_CONFIG_HASH, pad(12)]\n\n    adv_loadw\n    # => [MULTISIG_CONFIG, pad(12)]\n\n    # store new_num_of_approvers for later\n    dup.1 loc_store.0\n    # => [MULTISIG_CONFIG, pad(12)]\n\n    dup dup.2\n    # => [num_approvers, threshold, MULTISIG_CONFIG, pad(12)]\n\n    # make sure that the threshold is smaller than the number of approvers\n    u32assert2.err=ERR_MALFORMED_MULTISIG_CONFIG\n    u32gt assertz.err=ERR_MALFORMED_MULTISIG_CONFIG\n    # => [MULTISIG_CONFIG, pad(12)]\n\n    dup dup.2\n    # => [num_approvers, threshold, MULTISIG_CONFIG, pad(12)]\n\n    # make sure that threshold or num_approvers are not zero\n    eq.0 assertz.err=ERR_ZERO_IN_MULTISIG_CONFIG\n    eq.0 assertz.err=ERR_ZERO_IN_MULTISIG_CONFIG\n    # => [MULTISIG_CONFIG, pad(12)]\n\n    loc_load.0\n    # => [num_approvers, MULTISIG_CONFIG, pad(12)]\n\n    exec.assert_proc_thresholds_lte_num_approvers\n    # => [MULTISIG_CONFIG, pad(12)]\n\n    push.THRESHOLD_CONFIG_SLOT[0..2]\n    # => [config_slot_prefix, config_slot_suffix, MULTISIG_CONFIG, pad(12)]\n\n    exec.native_account::set_item\n    # => [OLD_THRESHOLD_CONFIG, pad(12)]\n\n    # store init_num_of_approvers for later\n    drop loc_store.1 drop drop\n    # => [pad(12)]\n\n    loc_load.0\n    # => [num_approvers]\n\n    dup neq.0\n    while.true\n        sub.1\n        # => [i-1, pad(12)]\n\n        dup exec.create_approver_map_key\n        # => [APPROVER_MAP_KEY, i-1, pad(12)]\n\n        padw adv_loadw\n        # => [PUB_KEY, APPROVER_MAP_KEY, i-1, pad(12)]\n\n        swapw\n        # => [APPROVER_MAP_KEY, PUB_KEY, i-1, pad(12)]\n\n        push.PUBLIC_KEYS_MAP_SLOT[0..2]\n        # => [pub_key_slot_prefix, pub_key_slot_suffix, APPROVER_MAP_KEY, PUB_KEY, i-1, pad(12)]\n\n        exec.native_account::set_map_item\n        # => [OLD_VALUE, i-1, pad(12)]\n\n        dropw\n        # => [i-1, pad(12)]\n\n        dup exec.create_approver_map_key\n        # => [APPROVER_MAP_KEY, i-1, pad(12)]\n\n        push.ECDSA_K256_KECCAK_SCHEME_WORD\n        # => [SCHEME_ID_WORD, APPROVER_MAP_KEY, i-1, pad(12)]\n\n        swapw\n        # => [APPROVER_MAP_KEY, [1, 0, 0, 0], i-1, pad(12)]\n\n        push.APPROVER_SCHEME_ID_SLOT[0..2]\n        # => [scheme_slot_prefix, scheme_slot_suffix, APPROVER_MAP_KEY, [1, 0, 0, 0], i-1, pad(12)]\n\n        exec.native_account::set_map_item\n        # => [OLD_VALUE, i-1, pad(12)]\n\n        dropw\n        # => [i-1, pad(12)]\n\n        dup neq.0\n        # => [is_non_zero, i-1, pad(12)]\n    end\n    # => [pad(13)]\n\n    drop\n    # => [pad(12)]\n\n    # compare initial vs current multisig config\n\n    # load init_num_of_approvers & new_num_of_approvers\n    loc_load.0 loc_load.1\n    # => [init_num_of_approvers, new_num_of_approvers, pad(12)]\n\n    exec.cleanup_pubkey_mapping\n    # => [pad(12)]\nend\n\n#! Update or clear the threshold override for a specific procedure.\n#!\n#! Inputs:\n#!   Operand stack: [proc_threshold, PROC_ROOT]\n#! Outputs:\n#!   Operand stack: []\n#! Invocation: call\npub proc update_procedure_threshold(proc_threshold: u32, proc_root: word)\n    exec.set_procedure_threshold\nend\n\n# Computes the effective transaction threshold based on called procedures and per-procedure\n# overrides stored in PROC_THRESHOLD_ROOTS_SLOT. Falls back to default_threshold if no\n# overrides apply.\n#\n#! Inputs:  [default_threshold]\n#! Outputs: [transaction_threshold]\n@locals(1)\nproc compute_transaction_threshold(default_threshold: u32) -> u32\n    # 1. initialize transaction_threshold = 0\n    # 2. iterate through all account procedures\n    #   a. check if the procedure was called during the transaction\n    #   b. if called, get the override threshold of that procedure from the config map\n    #   c. if proc_threshold > transaction_threshold, set transaction_threshold = proc_threshold\n    # 3. if transaction_threshold == 0 at the end, revert to using default_threshold\n\n    # store default_threshold for later\n    loc_store.0\n    # => []\n\n    # 1. initialize transaction_threshold = 0\n    push.0\n    # => [transaction_threshold]\n\n    # get the number of account procedures\n    exec.active_account::get_num_procedures\n    # => [num_procedures, transaction_threshold]\n\n    # 2. iterate through all account procedures\n    dup neq.0\n    # => [should_continue, num_procedures, transaction_threshold]\n    while.true\n        sub.1 dup\n        # => [num_procedures-1, num_procedures-1, transaction_threshold]\n\n        # get procedure root of the procedure with index i\n        exec.active_account::get_procedure_root dupw\n        # => [PROC_ROOT, PROC_ROOT, num_procedures-1, transaction_threshold]\n\n        # 2a. check if this procedure has been called in the transaction\n        exec.native_account::was_procedure_called\n        # => [was_called, PROC_ROOT, num_procedures-1, transaction_threshold]\n\n        # if it has been called, get the override threshold of that procedure\n        if.true\n            # => [PROC_ROOT, num_procedures-1, transaction_threshold]\n\n            push.PROC_THRESHOLD_ROOTS_SLOT[0..2]\n            # => [PROC_THRESHOLD_ROOTS_SLOT_prefix, PROC_THRESHOLD_ROOTS_SLOT_suffix, PROC_ROOT, num_procedures-1, transaction_threshold]\n\n            # 2b. get the override proc_threshold of that procedure\n            # if the procedure has no override threshold, the returned map item will be [0, 0, 0, 0]\n            exec.active_account::get_initial_map_item\n            # => [[proc_threshold, 0, 0, 0], num_procedures-1, transaction_threshold]\n\n            movdn.3 drop drop drop dup dup.3\n            # => [transaction_threshold, proc_threshold, proc_threshold, num_procedures-1, transaction_threshold]\n\n            u32assert2.err=\"transaction threshold or procedure threshold are not u32\"\n            u32gt\n            # => [is_gt, proc_threshold, num_procedures-1, transaction_threshold]\n            # 2c. if proc_threshold > transaction_threshold, update transaction_threshold\n            movup.2 movdn.3\n            # => [is_gt, proc_threshold, transaction_threshold, num_procedures-1]\n            cdrop\n            # => [updated_transaction_threshold, num_procedures-1]\n            swap\n            # => [num_procedures-1, updated_transaction_threshold]\n        # if it has not been called during this transaction, nothing to do, move to the next procedure\n        else\n            dropw\n            # => [num_procedures-1, transaction_threshold]\n        end\n\n        dup neq.0\n        # => [should_continue, num_procedures-1, transaction_threshold]\n    end\n\n    drop\n    # => [transaction_threshold]\n\n    loc_load.0\n    # => [default_threshold, transaction_threshold]\n\n    # 3. if transaction_threshold == 0 at the end, revert to using default_threshold\n    dup.1 eq.0\n    # => [is_zero, default_threshold, transaction_threshold]\n\n    cdrop\n    # => [effective_transaction_threshold]\nend\n\n#! Authenticate a transaction using ECDSA secp256k1 with multi-signature support.\n#!\n#! This procedure implements multi-signature authentication by:\n#! 1. Computing the transaction summary message that needs to be signed\n#! 2. Verifying ECDSA signatures from multiple required signers against their public keys\n#! 3. Ensuring the minimum threshold of valid signatures is met\n#! 4. Returning the transaction summary commitment for higher-level wrappers.\n#!\n#! Inputs:\n#!   Operand stack: [SALT]\n#!   Advice map: {\n#!     h(PUB_KEY_0, MSG): SIG_0,\n#!     h(PUB_KEY_1, MSG): SIG_1,\n#!     h(PUB_KEY_n, MSG): SIG_n\n#!   }\n#! Outputs:\n#!   Operand stack: [TX_SUMMARY_COMMITMENT]\n#!\n#! Where:\n#! - SALT is a cryptographically random nonce that enables multiple concurrent\n#!   multisig transactions while maintaining replay protection. Each transaction\n#!   must use a unique SALT value to ensure transaction uniqueness.\n#! - SIG_i is the ECDSA signature from the i-th signer.\n#! - MSG is the transaction message being signed.\n#! - h(PUB_KEY_i, MSG) is the hash of the public key and message used as the advice map key.\n#!\n#! Panics if:\n#! - insufficient number of valid signatures (below threshold).\n#! - insufficient number of valid signatures (below threshold).\n#!\n#! Invocation: exec\n@locals(1)\npub proc auth_tx(salt: word)\n    exec.native_account::incr_nonce drop\n    # => [SALT]\n\n    # ------ Computing transaction summary ------\n\n    exec.auth::create_tx_summary\n    # => [ACCOUNT_DELTA_COMMITMENT, INPUT_NOTES_COMMITMENT, OUTPUT_NOTES_COMMITMENT, SALT]\n\n    # to build a tx_summary in the host, we need these four words in the advice provider\n    adv.insert_hqword\n    # => [ACCOUNT_DELTA_COMMITMENT, INPUT_NOTES_COMMITMENT, OUTPUT_NOTES_COMMITMENT, SALT]\n\n    # the commitment to the tx summary is the message that is signed\n    exec.auth::hash_tx_summary\n    # => [TX_SUMMARY_COMMITMENT]\n\n    # ------ Verifying approver signatures ------\n\n    exec.get_threshold_and_num_approvers\n    # => [default_threshold, num_of_approvers, TX_SUMMARY_COMMITMENT]\n\n    movdn.5\n    # => [num_of_approvers, TX_SUMMARY_COMMITMENT, default_threshold]\n\n    push.PUBLIC_KEYS_MAP_SLOT[0..2]\n    # => [pub_key_slot_prefix, pub_key_slot_suffix, num_of_approvers, TX_SUMMARY_COMMITMENT, default_threshold]\n\n    push.APPROVER_SCHEME_ID_SLOT[0..2]\n    # => [scheme_id_slot_prefix, scheme_id_slot_suffix, pub_key_slot_prefix, pub_key_slot_suffix, num_of_approvers, TX_SUMMARY_COMMITMENT, default_threshold]\n\n    exec.::miden::standards::auth::signature::verify_signatures\n    # => [num_verified_signatures, TX_SUMMARY_COMMITMENT, default_threshold]\n\n    # ------ Checking threshold is >= num_verified_signatures ------\n\n    movup.5\n    # => [default_threshold, num_verified_signatures, TX_SUMMARY_COMMITMENT]\n\n    exec.compute_transaction_threshold\n    # => [transaction_threshold, num_verified_signatures, TX_SUMMARY_COMMITMENT]\n\n    u32assert2 u32lt\n    # => [is_unauthorized, TX_SUMMARY_COMMITMENT]\n\n    # If signatures are non-existent the tx will fail here.\n    if.true\n        emit.AUTH_UNAUTHORIZED_EVENT\n        push.0 assert.err=\"insufficient number of signatures\"\n    end\n\n    # => [TX_SUMMARY_COMMITMENT]\nend\n";
+export declare const GUARDIAN_MASM = "# Guardian Authentication Component\n#\n# This component provides GUARDIAN signature verification for accounts.\n# It can be used standalone or in conjunction with other auth components like multisig.\n\nuse miden::protocol::active_account\nuse miden::protocol::auth::AUTH_UNAUTHORIZED_EVENT\nuse miden::protocol::native_account\n\n# IMPORTANT SECURITY NOTES\n# --------------------------------------------------------------------------------\n# - The selector in `GUARDIAN_SELECTOR_SLOT` controls whether the extra GUARDIAN signature\n#   is enforced:\n#     * GUARDIAN_ON  => exactly one valid GUARDIAN signature is required.\n#     * GUARDIAN_OFF => GUARDIAN signature is skipped for that call.\n#\n# - `verify_guardian_signature` reads the selector from initial storage state.\n#   This means changes made during the same transaction won't affect the check.\n#\n# - `enable_guardian` / `disable_guardian` procedures allow explicit control over GUARDIAN state.\n#\n# - `update_guardian_public_key`:\n#     * Installs a new GUARDIAN public key in the map at `GUARDIAN_PUBLIC_KEY_MAP_SLOT`.\n#     * Does not itself perform any signature checks.\n#     * To update the key without requiring GUARDIAN signature, ensure selector is OFF.\n#\n# Storage Layout\n# --------------------------------------------------------------------------------\n#\n# +---------------------+---------------+\n# |     DESCRIPTION     |     SLOT      |\n# +---------------------+---------------+\n# | GUARDIAN SELECTOR (word) |       0       |\n# | GUARDIAN PUBLIC KEY MAP  |       1       |\n# | GUARDIAN SCHEME ID MAP   |       2       |\n# +---------------------+---------------+\n#\n# - GUARDIAN_SELECTOR_SLOT (0):\n#     * Stores a word that is compared against [1, 0, 0, 0] (GUARDIAN_ON).\n#     * Any value != GUARDIAN_ON is treated as GUARDIAN_OFF.\n#\n# - GUARDIAN_PUBLIC_KEY_MAP_SLOT (1):\n#     * A map from a fixed key [0, 0, 0, 0] to the single GUARDIAN public key:\n#         [0, 0, 0, 0] => GUARDIAN_PUBLIC_KEY\n#     * GUARDIAN_PUBLIC_KEY is a Falcon Poseidon2 public key represented as a word.\n\n# CONSTANTS\n# =================================================================================================\n\n# Slot where the GUARDIAN selector flag is stored (using word() for named slot access):\n# - GUARDIAN_ON  => GUARDIAN signature required\n# - GUARDIAN_OFF => GUARDIAN signature skipped\nconst GUARDIAN_SELECTOR_SLOT=word(\"openzeppelin::guardian::selector\")\n\n# Map slot for GUARDIAN public key\n# Uses exactly one GUARDIAN public key at index [0, 0, 0, 0]\n# [0, 0, 0, 0] => GUARDIAN_PUBLIC_KEY\nconst GUARDIAN_PUBLIC_KEY_MAP_SLOT=word(\"openzeppelin::guardian::public_key\")\n\n# Map slot for GUARDIAN signature scheme IDs\n# Uses exactly one scheme ID entry at index [0, 0, 0, 0]\n# [0, 0, 0, 0] => [scheme_id, 0, 0, 0]\nconst GUARDIAN_SCHEME_ID_MAP_SLOT=word(\"openzeppelin::guardian::scheme_id\")\n\n# Selector flag values\nconst GUARDIAN_ON=[1, 0, 0, 0]\nconst GUARDIAN_OFF=[0, 0, 0, 0]\nconst FALCON_512_POSEIDON2_SCHEME_WORD=[2, 0, 0, 0]\n\n# GUARDIAN PROCEDURES\n# =================================================================================================\n\n#! Enable GUARDIAN verification by setting the selector to ON.\n#!\n#! Operand stack inputs: []\n#! Outputs: []\n#!\n#! Notes:\n#! - Sets GUARDIAN_SELECTOR_SLOT to GUARDIAN_ON (1)\n#! - After this, transactions will require GUARDIAN signature verification\nproc enable_guardian\n    push.GUARDIAN_ON\n    # => [GUARDIAN_ON]\n\n    push.GUARDIAN_SELECTOR_SLOT[0..2]\n    # => [selector_slot_prefix, selector_slot_suffix, GUARDIAN_ON]\n\n    exec.native_account::set_item\n    # => [OLD_ROOT]\n\n    dropw\n    # => []\nend\n\n#! Disable GUARDIAN verification by setting the selector to OFF.\n#!\n#! Operand stack inputs: []\n#! Outputs: []\n#!\n#! Notes:\n#! - Sets GUARDIAN_SELECTOR_SLOT to GUARDIAN_OFF (0)\n#! - After this, transactions will NOT require GUARDIAN signature verification\nproc disable_guardian\n    push.GUARDIAN_OFF\n    # => [GUARDIAN_OFF]\n\n    push.GUARDIAN_SELECTOR_SLOT[0..2]\n    # => [selector_slot_prefix, selector_slot_suffix, GUARDIAN_OFF]\n\n    exec.native_account::set_item\n    # => [OLD_ROOT]\n\n    dropw\n    # => []\nend\n\n#! Update the GUARDIAN public key.\n#!\n#! Operand stack inputs: []\n#! Advice stack inputs:  [PUB_KEY]\n#!   - PUB_KEY is the new GUARDIAN RPO Falcon 512 public key\n#!\n#! Notes:\n#! - Stores PUB_KEY into GUARDIAN_PUBLIC_KEY_MAP_SLOT:\n#!      [0, 0, 0, 0] => GUARDIAN_PUBLIC_KEY\n#! - To update the key without requiring GUARDIAN signature, ensure\n#!   GUARDIAN_SELECTOR_SLOT = 0 (OFF) before calling this.\npub proc update_guardian_public_key\n    exec.disable_guardian\n    # ------ Update the GUARDIAN public key ------\n    adv_loadw\n    # => [PUB_KEY]\n\n    push.0.0.0.0\n    # => [MAP_KEY, PUB_KEY]\n    # Note that MAP_KEY is [0, 0, 0, 0] for a single GUARDIAN_KEY\n\n    push.GUARDIAN_PUBLIC_KEY_MAP_SLOT[0..2]\n    # => [pub_key_slot_prefix, pub_key_slot_suffix, MAP_KEY, PUB_KEY]\n\n    exec.native_account::set_map_item\n    # => [OLD_MAP_VALUE]\n\n    dropw\n    # => []\n\n    push.0.0.0.0\n    # => [MAP_KEY]\n\n    push.FALCON_512_POSEIDON2_SCHEME_WORD\n    # => [SCHEME_ID_WORD, MAP_KEY]\n\n    swapw\n    # => [MAP_KEY, SCHEME_ID_WORD]\n\n    push.GUARDIAN_SCHEME_ID_MAP_SLOT[0..2]\n    # => [scheme_id_slot_prefix, scheme_id_slot_suffix, MAP_KEY, SCHEME_ID_WORD]\n\n    exec.native_account::set_map_item\n    # => [OLD_MAP_VALUE]\n\n    dropw\n    # => []\nend\n\n#! Conditionally verify a \"GUARDIAN\" signature against a stored public key hash.\n#! The condition is controlled by the selector at GUARDIAN_SELECTOR_SLOT.\n#!\n#! Inputs:  [MSG]\n#! Outputs: [MSG]\n#!\n#! Panics if:\n#! - Selector is ON but the provided GUARDIAN signature is invalid or missing.\n#!\n#! Notes:\n#! - MSG is TX_SUMMARY_COMMITMENT provided by auth procedure\n#! - If selector is OFF (0), GUARDIAN verification is skipped\n#! - Selector value is read from initial storage state\npub proc verify_guardian_signature(msg: word)\n    push.GUARDIAN_SELECTOR_SLOT[0..2]\n    exec.active_account::get_item\n    drop drop drop\n    # => [selector, MSG]\n\n    push.1 eq\n    if.true\n        push.1\n        push.GUARDIAN_PUBLIC_KEY_MAP_SLOT[0..2]\n        push.GUARDIAN_SCHEME_ID_MAP_SLOT[0..2]\n        exec.::miden::standards::auth::signature::verify_signatures\n        push.1 neq\n        if.true\n            emit.AUTH_UNAUTHORIZED_EVENT\n            push.0 assert.err=\"invalid GUARDIAN signature\"\n        end\n    end\n    # => [MSG]\n    exec.enable_guardian\nend\n";
+export declare const GUARDIAN_ECDSA_MASM = "# Guardian Authentication Component (ECDSA)\n#\n# This component provides GUARDIAN signature verification for accounts using\n# ECDSA secp256k1 (k256/keccak) signatures.\n# It can be used standalone or in conjunction with other auth components like multisig.\n\nuse miden::protocol::active_account\nuse miden::protocol::auth::AUTH_UNAUTHORIZED_EVENT\nuse miden::protocol::native_account\n\n# IMPORTANT SECURITY NOTES\n# --------------------------------------------------------------------------------\n# - The selector in `GUARDIAN_SELECTOR_SLOT` controls whether the extra GUARDIAN signature\n#   is enforced:\n#     * GUARDIAN_ON  => exactly one valid GUARDIAN signature is required.\n#     * GUARDIAN_OFF => GUARDIAN signature is skipped for that call.\n#\n# - `verify_guardian_signature` reads the selector from initial storage state.\n#   This means changes made during the same transaction won't affect the check.\n#\n# - `enable_guardian` / `disable_guardian` procedures allow explicit control over GUARDIAN state.\n#\n# - `update_guardian_public_key`:\n#     * Installs a new GUARDIAN public key in the map at `GUARDIAN_PUBLIC_KEY_MAP_SLOT`.\n#     * Does not itself perform any signature checks.\n#     * To update the key without requiring GUARDIAN signature, ensure selector is OFF.\n#\n# Storage Layout\n# --------------------------------------------------------------------------------\n#\n# +---------------------+---------------+\n# |     DESCRIPTION     |     SLOT      |\n# +---------------------+---------------+\n# | GUARDIAN SELECTOR (word) |       0       |\n# | GUARDIAN PUBLIC KEY MAP  |       1       |\n# +---------------------+---------------+\n#\n# - GUARDIAN_SELECTOR_SLOT (0):\n#     * Stores a word that is compared against [1, 0, 0, 0] (GUARDIAN_ON).\n#     * Any value != GUARDIAN_ON is treated as GUARDIAN_OFF.\n#\n# - GUARDIAN_PUBLIC_KEY_MAP_SLOT (1):\n#     * A map from a fixed key [0, 0, 0, 0] to the single GUARDIAN public key:\n#         [0, 0, 0, 0] => GUARDIAN_PUBLIC_KEY\n#     * GUARDIAN_PUBLIC_KEY is an ECDSA secp256k1 public key represented as a word.\n\n# CONSTANTS\n# =================================================================================================\n\n# Slot where the GUARDIAN selector flag is stored (using word() for named slot access):\n# - GUARDIAN_ON  => GUARDIAN signature required\n# - GUARDIAN_OFF => GUARDIAN signature skipped\nconst GUARDIAN_SELECTOR_SLOT=word(\"openzeppelin::guardian::selector\")\n\n# Map slot for GUARDIAN public key\n# Uses exactly one GUARDIAN public key at index [0, 0, 0, 0]\n# [0, 0, 0, 0] => GUARDIAN_PUBLIC_KEY\nconst GUARDIAN_PUBLIC_KEY_MAP_SLOT=word(\"openzeppelin::guardian::public_key\")\nconst GUARDIAN_SCHEME_ID_MAP_SLOT=word(\"openzeppelin::guardian::scheme_id\")\n\n# Selector flag values\nconst GUARDIAN_ON=[1, 0, 0, 0]\nconst GUARDIAN_OFF=[0, 0, 0, 0]\nconst ECDSA_K256_KECCAK_SCHEME_WORD=[1, 0, 0, 0]\n\n# GUARDIAN PROCEDURES\n# =================================================================================================\n\n#! Enable GUARDIAN verification by setting the selector to ON.\n#!\n#! Operand stack inputs: []\n#! Outputs: []\n#!\n#! Notes:\n#! - Sets GUARDIAN_SELECTOR_SLOT to GUARDIAN_ON (1)\n#! - After this, transactions will require GUARDIAN signature verification\nproc enable_guardian\n    push.GUARDIAN_ON\n    # => [GUARDIAN_ON]\n\n    push.GUARDIAN_SELECTOR_SLOT[0..2]\n    # => [selector_slot_prefix, selector_slot_suffix, GUARDIAN_ON]\n\n    exec.native_account::set_item\n    # => [OLD_ROOT]\n\n    dropw\n    # => []\nend\n\n#! Disable GUARDIAN verification by setting the selector to OFF.\n#!\n#! Operand stack inputs: []\n#! Outputs: []\n#!\n#! Notes:\n#! - Sets GUARDIAN_SELECTOR_SLOT to GUARDIAN_OFF (0)\n#! - After this, transactions will NOT require GUARDIAN signature verification\nproc disable_guardian\n    push.GUARDIAN_OFF\n    # => [GUARDIAN_OFF]\n\n    push.GUARDIAN_SELECTOR_SLOT[0..2]\n    # => [selector_slot_prefix, selector_slot_suffix, GUARDIAN_OFF]\n\n    exec.native_account::set_item\n    # => [OLD_ROOT]\n\n    dropw\n    # => []\nend\n\n#! Update the GUARDIAN public key.\n#!\n#! Operand stack inputs: []\n#! Advice stack inputs:  [PUB_KEY]\n#!   - PUB_KEY is the new GUARDIAN ECDSA secp256k1 public key\n#!\n#! Notes:\n#! - Stores PUB_KEY into GUARDIAN_PUBLIC_KEY_MAP_SLOT:\n#!      [0, 0, 0, 0] => GUARDIAN_PUBLIC_KEY\n#! - To update the key without requiring GUARDIAN signature, ensure\n#!   GUARDIAN_SELECTOR_SLOT = 0 (OFF) before calling this.\npub proc update_guardian_public_key\n    exec.disable_guardian\n    # ------ Update the GUARDIAN public key ------\n    adv_loadw\n    # => [PUB_KEY]\n\n    push.0.0.0.0\n    # => [MAP_KEY, PUB_KEY]\n    # Note that MAP_KEY is [0, 0, 0, 0] for a single GUARDIAN_KEY\n\n    push.GUARDIAN_PUBLIC_KEY_MAP_SLOT[0..2]\n    # => [pub_key_slot_prefix, pub_key_slot_suffix, MAP_KEY, PUB_KEY]\n\n    exec.native_account::set_map_item\n    # => [OLD_MAP_VALUE]\n\n    dropw\n    # => []\n\n    push.0.0.0.0\n    # => [MAP_KEY]\n\n    push.ECDSA_K256_KECCAK_SCHEME_WORD\n    # => [SCHEME_ID_WORD, MAP_KEY]\n\n    swapw\n    # => [MAP_KEY, SCHEME_ID_WORD]\n\n    push.GUARDIAN_SCHEME_ID_MAP_SLOT[0..2]\n    # => [scheme_id_slot_prefix, scheme_id_slot_suffix, MAP_KEY, SCHEME_ID_WORD]\n\n    exec.native_account::set_map_item\n    # => [OLD_MAP_VALUE]\n\n    dropw\n    # => []\nend\n\n#! Conditionally verify a \"GUARDIAN\" signature against a stored public key hash.\n#! The condition is controlled by the selector at GUARDIAN_SELECTOR_SLOT.\n#!\n#! Inputs:  [MSG]\n#! Outputs: [MSG]\n#!\n#! Panics if:\n#! - Selector is ON but the provided GUARDIAN signature is invalid or missing.\n#!\n#! Notes:\n#! - MSG is TX_SUMMARY_COMMITMENT provided by auth procedure\n#! - If selector is OFF (0), GUARDIAN verification is skipped\n#! - Selector value is read from initial storage state\npub proc verify_guardian_signature(msg: word)\n    push.GUARDIAN_SELECTOR_SLOT[0..2]\n    exec.active_account::get_item\n    drop drop drop\n    # => [selector, MSG]\n\n    push.1 eq\n    if.true\n        push.1\n        push.GUARDIAN_PUBLIC_KEY_MAP_SLOT[0..2]\n        push.GUARDIAN_SCHEME_ID_MAP_SLOT[0..2]\n        exec.::miden::standards::auth::signature::verify_signatures\n        push.1 neq\n        if.true\n            emit.AUTH_UNAUTHORIZED_EVENT\n            push.0 assert.err=\"invalid GUARDIAN signature\"\n        end\n    end\n    # => [MSG]\n    exec.enable_guardian\nend\n";
 //# sourceMappingURL=auth.d.ts.map

package/dist/account/masm/auth.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"auth.d.ts","sourceRoot":"","sources":["../../../src/account/masm/auth.ts"],"names":[],"mappings":"AAGA,eAAO,MAAM,aAAa,2hjBAqgBzB,CAAC;AAEF,eAAO,MAAM,mBAAmB,+ijBAogB/B,CAAC;AAEF,eAAO,MAAM,aAAa,q5LAiLzB,CAAC;AAEF,eAAO,MAAM,mBAAmB,s9LAkL/B,CAAC"}
+{"version":3,"file":"auth.d.ts","sourceRoot":"","sources":["../../../src/account/masm/auth.ts"],"names":[],"mappings":"AAGA,eAAO,MAAM,aAAa,6xlBAoiBzB,CAAC;AAEF,eAAO,MAAM,mBAAmB,yylBAoiB/B,CAAC;AAEF,eAAO,MAAM,aAAa,89MAuMzB,CAAC;AAEF,eAAO,MAAM,mBAAmB,i1MAmM/B,CAAC"}