@openzeppelin/miden-multisig-client 0.14.5 → 0.14.8

package/dist/types/proposal.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"proposal.d.ts","sourceRoot":"","sources":["../../src/types/proposal.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EACV,iBAAiB,EACjB,YAAY,IAAI,oBAAoB,EACpC,eAAe,EAChB,MAAM,+BAA+B,CAAC;AACvC,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,kBAAkB,CAAC;AAEtD,MAAM,MAAM,YAAY,GAAG,OAAO,CAAC,oBAAoB,EAAE,QAAQ,CAAC,CAAC;AAEnE,MAAM,MAAM,cAAc,GAAG,SAAS,GAAG,OAAO,GAAG,WAAW,CAAC;AAE/D,MAAM,MAAM,yBAAyB,GACjC;IAAE,IAAI,EAAE,SAAS,CAAC;IAAC,mBAAmB,EAAE,MAAM,CAAC;IAAC,kBAAkB,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,MAAM,EAAE,CAAA;CAAE,GAC/F;IAAE,IAAI,EAAE,OAAO,CAAA;CAAE,GACjB;IAAE,IAAI,EAAE,WAAW,CAAA;CAAE,CAAC;AAE1B,MAAM,WAAW,sBAAsB;IACrC,QAAQ,EAAE,MAAM,CAAC;IACjB,SAAS,EAAE,iBAAiB,CAAC;IAC7B,SAAS,EAAE,MAAM,CAAC;CACnB;AAED,MAAM,MAAM,4BAA4B,GAAG,sBAAsB,CAAC;AAElE,UAAU,oBAAoB;IAC5B,YAAY,EAAE,YAAY,CAAC;IAC3B,WAAW,EAAE,MAAM,CAAC;IACpB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,kBAAkB,CAAC,EAAE,MAAM,CAAC;CAC7B;AAED,MAAM,WAAW,6BAA8B,SAAQ,oBAAoB;IACzE,YAAY,EAAE,YAAY,GAAG,eAAe,GAAG,kBAAkB,CAAC;IAClE,eAAe,EAAE,MAAM,CAAC;IACxB,uBAAuB,EAAE,MAAM,EAAE,CAAC;CACnC;AAED,MAAM,WAAW,8BAA+B,SAAQ,oBAAoB;IAC1E,YAAY,EAAE,iBAAiB,CAAC;IAChC,iBAAiB,EAAE,MAAM,CAAC;IAC1B,mBAAmB,CAAC,EAAE,MAAM,CAAC;IAC7B,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,uBAAuB,CAAC,EAAE,MAAM,EAAE,CAAC;CACpC;AAED,MAAM,WAAW,wCAAyC,SAAQ,oBAAoB;IACpF,YAAY,EAAE,4BAA4B,CAAC;IAC3C,eAAe,EAAE,aAAa,CAAC;IAC/B,eAAe,EAAE,MAAM,CAAC;CACzB;AAED,MAAM,WAAW,4BAA6B,SAAQ,oBAAoB;IACxE,YAAY,EAAE,eAAe,CAAC;IAC9B,OAAO,EAAE,MAAM,EAAE,CAAC;CACnB;AAED,MAAM,WAAW,oBAAqB,SAAQ,oBAAoB;IAChE,YAAY,EAAE,MAAM,CAAC;IACrB,WAAW,EAAE,MAAM,CAAC;IACpB,QAAQ,EAAE,MAAM,CAAC;IACjB,MAAM,EAAE,MAAM,CAAC;CAChB;AAED,MAAM,WAAW,uBAAwB,SAAQ,oBAAoB;IACnE,YAAY,EAAE,SAAS,CAAC;CACzB;AAED,MAAM,MAAM,gBAAgB,GACxB,6BAA6B,GAC7B,8BAA8B,GAC9B,wCAAwC,GACxC,4BAA4B,GAC5B,oBAAoB,GACpB,uBAAuB,CAAC;AAE5B,MAAM,WAAW,QAAQ;IACvB,EAAE,EAAE,MAAM,CAAC;IACX,SAAS,EAAE,MAAM,CAAC;IAClB,KAAK,EAAE,MAAM,CAAC;IACd,MAAM,EAAE,cAAc,CAAC;IACvB,SAAS,EAAE,MAAM,CAAC;IAClB,UAAU,EAAE,sBAAsB,EAAE,CAAC;IACrC,QAAQ,EAAE,gBAAgB,CAAC;CAC5B;AAED,MAAM,WAAW,mBAAmB;IAClC,EAAE,EAAE,MAAM,CAAC;IACX,UAAU,EAAE,MAAM,CAAC;IACnB,SAAS,EAAE,MAAM,CAAC;IAClB,KAAK,EAAE,MAAM,CAAC;IACd,MAAM,EAAE,yBAAyB,CAAC;IAClC,SAAS,EAAE,MAAM,CAAC;IAClB,UAAU,EAAE,4BAA4B,EAAE,CAAC;IAC3C,QAAQ,EAAE,gBAAgB,CAAC;CAC5B;AAED,MAAM,WAAW,gBAAgB;IAC/B,SAAS,EAAE,MAAM,CAAC;IAClB,KAAK,EAAE,MAAM,CAAC;IACd,UAAU,EAAE,MAAM,CAAC;IACnB,eAAe,EAAE,MAAM,CAAC;IACxB,UAAU,EAAE,KAAK,CAAC;QAChB,UAAU,EAAE,MAAM,CAAC;QACnB,YAAY,EAAE,MAAM,CAAC;QACrB,MAAM,CAAC,EAAE,eAAe,CAAC;QACzB,SAAS,CAAC,EAAE,MAAM,CAAC;QACnB,SAAS,CAAC,EAAE,MAAM,CAAC;KACpB,CAAC,CAAC;IACH,QAAQ,EAAE,gBAAgB,CAAC;CAC5B;AAED,MAAM,MAAM,2BAA2B,GAAG,gBAAgB,CAAC;AAE3D,MAAM,WAAW,6BAA6B;IAC5C,UAAU,EAAE,MAAM,CAAC;IACnB,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,MAAM,CAAC,EAAE,eAAe,CAAC;CAC1B"}
+{"version":3,"file":"proposal.d.ts","sourceRoot":"","sources":["../../src/types/proposal.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EACV,iBAAiB,EACjB,YAAY,IAAI,oBAAoB,EACpC,eAAe,EAChB,MAAM,+BAA+B,CAAC;AACvC,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,kBAAkB,CAAC;AAEtD,MAAM,MAAM,YAAY,GAAG,OAAO,CAAC,oBAAoB,EAAE,QAAQ,CAAC,CAAC;AAEnE,MAAM,MAAM,cAAc,GAAG,SAAS,GAAG,OAAO,GAAG,WAAW,CAAC;AAE/D,MAAM,MAAM,yBAAyB,GACjC;IAAE,IAAI,EAAE,SAAS,CAAC;IAAC,mBAAmB,EAAE,MAAM,CAAC;IAAC,kBAAkB,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,MAAM,EAAE,CAAA;CAAE,GAC/F;IAAE,IAAI,EAAE,OAAO,CAAA;CAAE,GACjB;IAAE,IAAI,EAAE,WAAW,CAAA;CAAE,CAAC;AAE1B,MAAM,WAAW,sBAAsB;IACrC,QAAQ,EAAE,MAAM,CAAC;IACjB,SAAS,EAAE,iBAAiB,CAAC;IAC7B,SAAS,EAAE,MAAM,CAAC;CACnB;AAED,MAAM,MAAM,4BAA4B,GAAG,sBAAsB,CAAC;AAElE,UAAU,oBAAoB;IAC5B,YAAY,EAAE,YAAY,CAAC;IAC3B,WAAW,EAAE,MAAM,CAAC;IACpB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,kBAAkB,CAAC,EAAE,MAAM,CAAC;CAC7B;AAED,MAAM,WAAW,6BAA8B,SAAQ,oBAAoB;IACzE,YAAY,EAAE,YAAY,GAAG,eAAe,GAAG,kBAAkB,CAAC;IAClE,eAAe,EAAE,MAAM,CAAC;IACxB,uBAAuB,EAAE,MAAM,EAAE,CAAC;CACnC;AAED,MAAM,WAAW,8BAA+B,SAAQ,oBAAoB;IAC1E,YAAY,EAAE,iBAAiB,CAAC;IAChC,iBAAiB,EAAE,MAAM,CAAC;IAC1B,mBAAmB,CAAC,EAAE,MAAM,CAAC;IAC7B,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,uBAAuB,CAAC,EAAE,MAAM,EAAE,CAAC;CACpC;AAED,MAAM,WAAW,wCAAyC,SAAQ,oBAAoB;IACpF,YAAY,EAAE,4BAA4B,CAAC;IAC3C,eAAe,EAAE,aAAa,CAAC;IAC/B,eAAe,EAAE,MAAM,CAAC;CACzB;AAED,gFAAgF;AAChF,eAAO,MAAM,iCAAiC,EAAG,CAAU,CAAC;AAE5D,iEAAiE;AACjE,eAAO,MAAM,gCAAgC,QAAa,CAAC;AAE3D,MAAM,WAAW,4BAA6B,SAAQ,oBAAoB;IACxE,YAAY,EAAE,eAAe,CAAC;IAC9B,OAAO,EAAE,MAAM,EAAE,CAAC;IAClB,4DAA4D;IAC5D,eAAe,CAAC,EAAE,CAAC,GAAG,CAAC,CAAC;IACxB,kFAAkF;IAClF,KAAK,CAAC,EAAE,MAAM,EAAE,CAAC;CAClB;AAED,wBAAgB,gBAAgB,CAAC,EAAE,EAAE,4BAA4B,GAAG,OAAO,CAE1E;AAED,wBAAgB,gBAAgB,CAAC,EAAE,EAAE,4BAA4B,GAAG,OAAO,CAE1E;AAED,MAAM,WAAW,oBAAqB,SAAQ,oBAAoB;IAChE,YAAY,EAAE,MAAM,CAAC;IACrB,WAAW,EAAE,MAAM,CAAC;IACpB,QAAQ,EAAE,MAAM,CAAC;IACjB,MAAM,EAAE,MAAM,CAAC;CAChB;AAED,MAAM,WAAW,uBAAwB,SAAQ,oBAAoB;IACnE,YAAY,EAAE,SAAS,CAAC;CACzB;AAED,MAAM,MAAM,gBAAgB,GACxB,6BAA6B,GAC7B,8BAA8B,GAC9B,wCAAwC,GACxC,4BAA4B,GAC5B,oBAAoB,GACpB,uBAAuB,CAAC;AAE5B,MAAM,WAAW,QAAQ;IACvB,EAAE,EAAE,MAAM,CAAC;IACX,SAAS,EAAE,MAAM,CAAC;IAClB,KAAK,EAAE,MAAM,CAAC;IACd,MAAM,EAAE,cAAc,CAAC;IACvB,SAAS,EAAE,MAAM,CAAC;IAClB,UAAU,EAAE,sBAAsB,EAAE,CAAC;IACrC,QAAQ,EAAE,gBAAgB,CAAC;CAC5B;AAED,MAAM,WAAW,mBAAmB;IAClC,EAAE,EAAE,MAAM,CAAC;IACX,UAAU,EAAE,MAAM,CAAC;IACnB,SAAS,EAAE,MAAM,CAAC;IAClB,KAAK,EAAE,MAAM,CAAC;IACd,MAAM,EAAE,yBAAyB,CAAC;IAClC,SAAS,EAAE,MAAM,CAAC;IAClB,UAAU,EAAE,4BAA4B,EAAE,CAAC;IAC3C,QAAQ,EAAE,gBAAgB,CAAC;CAC5B;AAED,MAAM,WAAW,gBAAgB;IAC/B,SAAS,EAAE,MAAM,CAAC;IAClB,KAAK,EAAE,MAAM,CAAC;IACd,UAAU,EAAE,MAAM,CAAC;IACnB,eAAe,EAAE,MAAM,CAAC;IACxB,UAAU,EAAE,KAAK,CAAC;QAChB,UAAU,EAAE,MAAM,CAAC;QACnB,YAAY,EAAE,MAAM,CAAC;QACrB,MAAM,CAAC,EAAE,eAAe,CAAC;QACzB,SAAS,CAAC,EAAE,MAAM,CAAC;QACnB,SAAS,CAAC,EAAE,MAAM,CAAC;KACpB,CAAC,CAAC;IACH,QAAQ,EAAE,gBAAgB,CAAC;CAC5B;AAED,MAAM,MAAM,2BAA2B,GAAG,gBAAgB,CAAC;AAE3D,MAAM,WAAW,6BAA6B;IAC5C,UAAU,EAAE,MAAM,CAAC;IACnB,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,MAAM,CAAC,EAAE,eAAe,CAAC;CAC1B"}

package/dist/types/proposal.js

@@ -1,2 +1,11 @@
-export {};
+/** `consume_notes` metadata version. Absence on the wire => v1 (issue #229). */
+export const CONSUME_NOTES_METADATA_VERSION_V2 = 2;
+/** Max serialized v2 metadata, enforced at creation (FR-011). */
+export const MAX_CONSUME_NOTES_METADATA_BYTES = 256 * 1024;
+export function isConsumeNotesV2(md) {
+    return md.metadataVersion === CONSUME_NOTES_METADATA_VERSION_V2;
+}
+export function isConsumeNotesV1(md) {
+    return md.metadataVersion === undefined || md.metadataVersion === 1;
+}
 //# sourceMappingURL=proposal.js.map

package/dist/types/proposal.js.map

@@ -1 +1 @@
-{"version":3,"file":"proposal.js","sourceRoot":"","sources":["../../src/types/proposal.ts"],"names":[],"mappings":""}
+{"version":3,"file":"proposal.js","sourceRoot":"","sources":["../../src/types/proposal.ts"],"names":[],"mappings":"AAmDA,gFAAgF;AAChF,MAAM,CAAC,MAAM,iCAAiC,GAAG,CAAU,CAAC;AAE5D,iEAAiE;AACjE,MAAM,CAAC,MAAM,gCAAgC,GAAG,GAAG,GAAG,IAAI,CAAC;AAW3D,MAAM,UAAU,gBAAgB,CAAC,EAAgC;IAC/D,OAAO,EAAE,CAAC,eAAe,KAAK,iCAAiC,CAAC;AAClE,CAAC;AAED,MAAM,UAAU,gBAAgB,CAAC,EAAgC;IAC/D,OAAO,EAAE,CAAC,eAAe,KAAK,SAAS,IAAI,EAAE,CAAC,eAAe,KAAK,CAAC,CAAC;AACtE,CAAC"}

package/dist/types/proposal.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=proposal.test.d.ts.map

package/dist/types/proposal.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"proposal.test.d.ts","sourceRoot":"","sources":["../../src/types/proposal.test.ts"],"names":[],"mappings":""}

package/dist/types/proposal.test.js

@@ -0,0 +1,56 @@
+import { describe, expect, it } from 'vitest';
+import { CONSUME_NOTES_METADATA_VERSION_V2, MAX_CONSUME_NOTES_METADATA_BYTES, isConsumeNotesV1, isConsumeNotesV2, } from './proposal.js';
+describe('consume_notes metadata v1/v2 discriminator (issue #229)', () => {
+    it('v1 metadata omits metadataVersion and notes on the wire', () => {
+        const md = {
+            proposalType: 'consume_notes',
+            description: '',
+            noteIds: ['0xabc', '0xdef'],
+        };
+        const json = JSON.parse(JSON.stringify(md));
+        expect(json.metadataVersion).toBeUndefined();
+        expect(json.notes).toBeUndefined();
+        expect(isConsumeNotesV1(md)).toBe(true);
+        expect(isConsumeNotesV2(md)).toBe(false);
+    });
+    it('v2 metadata round-trips with discriminator and embedded notes', () => {
+        const md = {
+            proposalType: 'consume_notes',
+            description: '',
+            noteIds: ['0xabc'],
+            metadataVersion: CONSUME_NOTES_METADATA_VERSION_V2,
+            notes: ['YmFzZTY0Tm90ZQ=='],
+        };
+        const json = JSON.stringify(md);
+        const parsed = JSON.parse(json);
+        expect(parsed.metadataVersion).toBe(2);
+        expect(parsed.notes).toEqual(['YmFzZTY0Tm90ZQ==']);
+        expect(isConsumeNotesV2(parsed)).toBe(true);
+        expect(isConsumeNotesV1(parsed)).toBe(false);
+    });
+    it('explicit metadataVersion === 1 is treated as v1', () => {
+        const md = {
+            proposalType: 'consume_notes',
+            description: '',
+            noteIds: ['0xabc'],
+            metadataVersion: 1, // legacy explicit-v1 case
+        };
+        expect(isConsumeNotesV1(md)).toBe(true);
+        expect(isConsumeNotesV2(md)).toBe(false);
+    });
+    it('unknown future version is neither v1 nor v2; dispatch handles rejection', () => {
+        const md = {
+            proposalType: 'consume_notes',
+            description: '',
+            noteIds: ['0xabc'],
+            metadataVersion: 99,
+        };
+        expect(isConsumeNotesV1(md)).toBe(false);
+        expect(isConsumeNotesV2(md)).toBe(false);
+    });
+    it('pins MAX_CONSUME_NOTES_METADATA_BYTES at 256 KiB', () => {
+        expect(MAX_CONSUME_NOTES_METADATA_BYTES).toBe(256 * 1024);
+        expect(MAX_CONSUME_NOTES_METADATA_BYTES).toBe(262_144);
+    });
+});
+//# sourceMappingURL=proposal.test.js.map

package/dist/types/proposal.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"proposal.test.js","sourceRoot":"","sources":["../../src/types/proposal.test.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,QAAQ,CAAC;AAC9C,OAAO,EACL,iCAAiC,EAEjC,gCAAgC,EAChC,gBAAgB,EAChB,gBAAgB,GACjB,MAAM,eAAe,CAAC;AAEvB,QAAQ,CAAC,yDAAyD,EAAE,GAAG,EAAE;IACvE,EAAE,CAAC,yDAAyD,EAAE,GAAG,EAAE;QACjE,MAAM,EAAE,GAAiC;YACvC,YAAY,EAAE,eAAe;YAC7B,WAAW,EAAE,EAAE;YACf,OAAO,EAAE,CAAC,OAAO,EAAE,OAAO,CAAC;SAC5B,CAAC;QAEF,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC,CAAC;QAC5C,MAAM,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC,aAAa,EAAE,CAAC;QAC7C,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,aAAa,EAAE,CAAC;QACnC,MAAM,CAAC,gBAAgB,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACxC,MAAM,CAAC,gBAAgB,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IAC3C,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,+DAA+D,EAAE,GAAG,EAAE;QACvE,MAAM,EAAE,GAAiC;YACvC,YAAY,EAAE,eAAe;YAC7B,WAAW,EAAE,EAAE;YACf,OAAO,EAAE,CAAC,OAAO,CAAC;YAClB,eAAe,EAAE,iCAAiC;YAClD,KAAK,EAAE,CAAC,kBAAkB,CAAC;SAC5B,CAAC;QAEF,MAAM,IAAI,GAAG,IAAI,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC;QAChC,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAiC,CAAC;QAChE,MAAM,CAAC,MAAM,CAAC,eAAe,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QACvC,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,OAAO,CAAC,CAAC,kBAAkB,CAAC,CAAC,CAAC;QACnD,MAAM,CAAC,gBAAgB,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC5C,MAAM,CAAC,gBAAgB,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IAC/C,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,iDAAiD,EAAE,GAAG,EAAE;QACzD,MAAM,EAAE,GAAG;YACT,YAAY,EAAE,eAAe;YAC7B,WAAW,EAAE,EAAE;YACf,OAAO,EAAE,CAAC,OAAO,CAAC;YAClB,eAAe,EAAE,CAAiB,EAAE,0BAA0B;SAC/B,CAAC;QAClC,MAAM,CAAC,gBAAgB,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACxC,MAAM,CAAC,gBAAgB,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IAC3C,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,yEAAyE,EAAE,GAAG,EAAE;QACjF,MAAM,EAAE,GAAG;YACT,YAAY,EAAE,eAAe;YAC7B,WAAW,EAAE,EAAE;YACf,OAAO,EAAE,CAAC,OAAO,CAAC;YAClB,eAAe,EAAE,EAAkB;SACJ,CAAC;QAClC,MAAM,CAAC,gBAAgB,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACzC,MAAM,CAAC,gBAAgB,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IAC3C,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,kDAAkD,EAAE,GAAG,EAAE;QAC1D,MAAM,CAAC,gCAAgC,CAAC,CAAC,IAAI,CAAC,GAAG,GAAG,IAAI,CAAC,CAAC;QAC1D,MAAM,CAAC,gCAAgC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IACzD,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/dist/utils/encoding.d.ts

@@ -3,5 +3,13 @@ export declare function normalizeHexWord(hex: string): string;
 export declare function bytesToHex(bytes: Uint8Array): string;
 export declare function hexToBytes(hex: string): Uint8Array;
 export declare function uint8ArrayToBase64(bytes: Uint8Array): string;
+/** Serialize a Miden `Note` to base64 (v2 `consume_notes` metadata, issue #229). */
+export declare function noteToBase64(note: {
+    serialize(): Uint8Array;
+}): string;
+/** Decode a base64 note. `noteCtor` is `Note` from `@miden-sdk/miden-sdk`. */
+export declare function noteFromBase64<TNote>(base64: string, noteCtor: {
+    deserialize(bytes: Uint8Array): TNote;
+}): TNote;
 export declare function base64ToUint8Array(base64: string): Uint8Array;
 //# sourceMappingURL=encoding.d.ts.map

package/dist/utils/encoding.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"encoding.d.ts","sourceRoot":"","sources":["../../src/utils/encoding.ts"],"names":[],"mappings":"AAAA,wBAAgB,eAAe,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,CAEnD;AAED,wBAAgB,gBAAgB,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,CAIpD;AAED,wBAAgB,UAAU,CAAC,KAAK,EAAE,UAAU,GAAG,MAAM,CAMpD;AAED,wBAAgB,UAAU,CAAC,GAAG,EAAE,MAAM,GAAG,UAAU,CAOlD;AAED,wBAAgB,kBAAkB,CAAC,KAAK,EAAE,UAAU,GAAG,MAAM,CAa5D;AAED,wBAAgB,kBAAkB,CAAC,MAAM,EAAE,MAAM,GAAG,UAAU,CAgB7D"}
+{"version":3,"file":"encoding.d.ts","sourceRoot":"","sources":["../../src/utils/encoding.ts"],"names":[],"mappings":"AAAA,wBAAgB,eAAe,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,CAEnD;AAED,wBAAgB,gBAAgB,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,CAIpD;AAED,wBAAgB,UAAU,CAAC,KAAK,EAAE,UAAU,GAAG,MAAM,CAMpD;AAED,wBAAgB,UAAU,CAAC,GAAG,EAAE,MAAM,GAAG,UAAU,CAOlD;AAED,wBAAgB,kBAAkB,CAAC,KAAK,EAAE,UAAU,GAAG,MAAM,CAa5D;AAED,oFAAoF;AACpF,wBAAgB,YAAY,CAAC,IAAI,EAAE;IAAE,SAAS,IAAI,UAAU,CAAA;CAAE,GAAG,MAAM,CAEtE;AAED,8EAA8E;AAC9E,wBAAgB,cAAc,CAAC,KAAK,EAClC,MAAM,EAAE,MAAM,EACd,QAAQ,EAAE;IAAE,WAAW,CAAC,KAAK,EAAE,UAAU,GAAG,KAAK,CAAA;CAAE,GAClD,KAAK,CAEP;AAED,wBAAgB,kBAAkB,CAAC,MAAM,EAAE,MAAM,GAAG,UAAU,CAgB7D"}

package/dist/utils/encoding.js

@@ -35,6 +35,14 @@ export function uint8ArrayToBase64(bytes) {
     }
     throw new Error('No base64 encoder available in this environment');
 }
+/** Serialize a Miden `Note` to base64 (v2 `consume_notes` metadata, issue #229). */
+export function noteToBase64(note) {
+    return uint8ArrayToBase64(note.serialize());
+}
+/** Decode a base64 note. `noteCtor` is `Note` from `@miden-sdk/miden-sdk`. */
+export function noteFromBase64(base64, noteCtor) {
+    return noteCtor.deserialize(base64ToUint8Array(base64));
+}
 export function base64ToUint8Array(base64) {
     const binary = typeof atob === 'function'
         ? atob(base64)

package/dist/utils/encoding.js.map

@@ -1 +1 @@
-{"version":3,"file":"encoding.js","sourceRoot":"","sources":["../../src/utils/encoding.ts"],"names":[],"mappings":"AAAA,MAAM,UAAU,eAAe,CAAC,GAAW;IACzC,OAAO,GAAG,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,GAAG,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,KAAK,GAAG,EAAE,CAAC;AACzE,CAAC;AAED,MAAM,UAAU,gBAAgB,CAAC,GAAW;IAC1C,IAAI,KAAK,GAAG,eAAe,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC;IACxD,KAAK,GAAG,KAAK,CAAC,QAAQ,CAAC,EAAE,EAAE,GAAG,CAAC,CAAC;IAChC,OAAO,KAAK,KAAK,EAAE,CAAC;AACtB,CAAC;AAED,MAAM,UAAU,UAAU,CAAC,KAAiB;IAC1C,IAAI,GAAG,GAAG,IAAI,CAAC;IACf,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACtC,GAAG,IAAI,KAAK,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;IAChD,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED,MAAM,UAAU,UAAU,CAAC,GAAW;IACpC,MAAM,QAAQ,GAAG,eAAe,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;IAC/C,MAAM,KAAK,GAAG,IAAI,UAAU,CAAC,QAAQ,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;IAClD,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACtC,KAAK,CAAC,CAAC,CAAC,GAAG,QAAQ,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;IAChE,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,MAAM,UAAU,kBAAkB,CAAC,KAAiB;IAClD,IAAI,OAAO,IAAI,KAAK,UAAU,EAAE,CAAC;QAC/B,IAAI,MAAM,GAAG,EAAE,CAAC;QAChB,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;YACtC,MAAM,IAAI,MAAM,CAAC,YAAY,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;QAC1C,CAAC;QACD,OAAO,IAAI,CAAC,MAAM,CAAC,CAAC;IACtB,CAAC;IACD,MAAM,GAAG,GAAS,UAAkB,CAAC,MAAM,CAAC;IAC5C,IAAI,GAAG,EAAE,CAAC;QACR,OAAO,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;IAC5C,CAAC;IACD,MAAM,IAAI,KAAK,CAAC,iDAAiD,CAAC,CAAC;AACrE,CAAC;AAED,MAAM,UAAU,kBAAkB,CAAC,MAAc;IAC/C,MAAM,MAAM,GACV,OAAO,IAAI,KAAK,UAAU;QACxB,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC;QACd,CAAC,CAAC,CAAC,GAAG,EAAE;YACJ,MAAM,GAAG,GAAS,UAAkB,CAAC,MAAM,CAAC;YAC5C,IAAI,GAAG,EAAE,CAAC;gBACR,OAAO,GAAG,CAAC,IAAI,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;YACvD,CAAC;YACD,MAAM,IAAI,KAAK,CAAC,iDAAiD,CAAC,CAAC;QACrE,CAAC,CAAC,EAAE,CAAC;IACX,MAAM,KAAK,GAAG,IAAI,UAAU,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IAC5C,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,MAAM,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACvC,KAAK,CAAC,CAAC,CAAC,GAAG,MAAM,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC;IAClC,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC"}
+{"version":3,"file":"encoding.js","sourceRoot":"","sources":["../../src/utils/encoding.ts"],"names":[],"mappings":"AAAA,MAAM,UAAU,eAAe,CAAC,GAAW;IACzC,OAAO,GAAG,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,GAAG,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,KAAK,GAAG,EAAE,CAAC;AACzE,CAAC;AAED,MAAM,UAAU,gBAAgB,CAAC,GAAW;IAC1C,IAAI,KAAK,GAAG,eAAe,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC;IACxD,KAAK,GAAG,KAAK,CAAC,QAAQ,CAAC,EAAE,EAAE,GAAG,CAAC,CAAC;IAChC,OAAO,KAAK,KAAK,EAAE,CAAC;AACtB,CAAC;AAED,MAAM,UAAU,UAAU,CAAC,KAAiB;IAC1C,IAAI,GAAG,GAAG,IAAI,CAAC;IACf,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACtC,GAAG,IAAI,KAAK,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;IAChD,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED,MAAM,UAAU,UAAU,CAAC,GAAW;IACpC,MAAM,QAAQ,GAAG,eAAe,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;IAC/C,MAAM,KAAK,GAAG,IAAI,UAAU,CAAC,QAAQ,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;IAClD,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACtC,KAAK,CAAC,CAAC,CAAC,GAAG,QAAQ,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;IAChE,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,MAAM,UAAU,kBAAkB,CAAC,KAAiB;IAClD,IAAI,OAAO,IAAI,KAAK,UAAU,EAAE,CAAC;QAC/B,IAAI,MAAM,GAAG,EAAE,CAAC;QAChB,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;YACtC,MAAM,IAAI,MAAM,CAAC,YAAY,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;QAC1C,CAAC;QACD,OAAO,IAAI,CAAC,MAAM,CAAC,CAAC;IACtB,CAAC;IACD,MAAM,GAAG,GAAS,UAAkB,CAAC,MAAM,CAAC;IAC5C,IAAI,GAAG,EAAE,CAAC;QACR,OAAO,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;IAC5C,CAAC;IACD,MAAM,IAAI,KAAK,CAAC,iDAAiD,CAAC,CAAC;AACrE,CAAC;AAED,oFAAoF;AACpF,MAAM,UAAU,YAAY,CAAC,IAAiC;IAC5D,OAAO,kBAAkB,CAAC,IAAI,CAAC,SAAS,EAAE,CAAC,CAAC;AAC9C,CAAC;AAED,8EAA8E;AAC9E,MAAM,UAAU,cAAc,CAC5B,MAAc,EACd,QAAmD;IAEnD,OAAO,QAAQ,CAAC,WAAW,CAAC,kBAAkB,CAAC,MAAM,CAAC,CAAC,CAAC;AAC1D,CAAC;AAED,MAAM,UAAU,kBAAkB,CAAC,MAAc;IAC/C,MAAM,MAAM,GACV,OAAO,IAAI,KAAK,UAAU;QACxB,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC;QACd,CAAC,CAAC,CAAC,GAAG,EAAE;YACJ,MAAM,GAAG,GAAS,UAAkB,CAAC,MAAM,CAAC;YAC5C,IAAI,GAAG,EAAE,CAAC;gBACR,OAAO,GAAG,CAAC,IAAI,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;YACvD,CAAC;YACD,MAAM,IAAI,KAAK,CAAC,iDAAiD,CAAC,CAAC;QACrE,CAAC,CAAC,EAAE,CAAC;IACX,MAAM,KAAK,GAAG,IAAI,UAAU,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IAC5C,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,MAAM,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACvC,KAAK,CAAC,CAAC,CAAC,GAAG,MAAM,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC;IAClC,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@openzeppelin/miden-multisig-client",
-  "version": "0.14.5",
+  "version": "0.14.8",
   "description": "TypeScript SDK for Miden multisig accounts with GUARDIAN integration",
   "type": "module",
   "main": "./dist/index.js",
@@ -28,9 +28,9 @@
   },
   "dependencies": {
     "@noble/curves": "^1.9.7",
-    "@miden-sdk/miden-sdk": "0.14.3",
+    "@miden-sdk/miden-sdk": "0.14.5",
     "@noble/hashes": "^2.0.1",
-    "@openzeppelin/guardian-client": "^0.14.5"
+    "@openzeppelin/guardian-client": "^0.14.8"
   },
   "devDependencies": {
     "typescript": "^5.7.2",

package/src/client.test.ts

@@ -250,4 +250,101 @@ describe('MultisigClient', () => {
       expect(bindAccountKey).toHaveBeenCalledWith(webClient, '0x' + 'd'.repeat(30));
     });
   });
+
+  // --- recoverByKey -------------------
+
+  describe('recoverByKey', () => {
+    function makeLookupCapableSigner() {
+      return {
+        commitment: '0x' + 'a'.repeat(64),
+        publicKey: '0x' + 'p'.repeat(897),
+        scheme: 'falcon' as const,
+        signAccountIdWithTimestamp: vi.fn().mockResolvedValue('0x' + 'a'.repeat(128)),
+        signRequest: vi.fn().mockReturnValue('0x' + 'a'.repeat(128)),
+        signCommitment: vi.fn().mockReturnValue('0x' + 'b'.repeat(128)),
+        signLookupMessage: vi.fn().mockResolvedValue('0x' + 'c'.repeat(762)),
+      };
+    }
+
+    function mockServerLookupResponse(accountIds: string[]) {
+      mockFetch.mockResolvedValueOnce({
+        ok: true,
+        json: async () => ({
+          accounts: accountIds.map((id) => ({ account_id: id })),
+        }),
+      });
+    }
+
+    function mockServerStateResponse(accountId: string) {
+      mockFetch.mockResolvedValueOnce({
+        ok: true,
+        json: async () => ({
+          account_id: accountId,
+          commitment: '0x' + 'f'.repeat(64),
+          state_json: { data: 'base64data' },
+          created_at: '2024-01-01T00:00:00Z',
+          updated_at: '2024-01-01T00:00:00Z',
+        }),
+      });
+    }
+
+    it('returns one (accountId, state) pair when lookup matches a single account', async () => {
+      const client = new MultisigClient(webClient);
+      const signer = makeLookupCapableSigner();
+      const accountId = '0x7bfb0f38b0fafa103f86a805594170';
+
+      mockServerLookupResponse([accountId]);
+      mockServerStateResponse(accountId);
+
+      const recovered = await client.recoverByKey(signer);
+
+      expect(recovered).toHaveLength(1);
+      expect(recovered[0].accountId).toBe(accountId);
+      expect(recovered[0].state.commitment).toBe('0x' + 'f'.repeat(64));
+      expect(signer.signLookupMessage).toHaveBeenCalledTimes(1);
+      expect(signer.signLookupMessage).toHaveBeenCalledWith(
+        signer.commitment,
+        expect.any(Number)
+      );
+      // Lookup + getState = exactly two HTTP requests.
+      expect(mockFetch).toHaveBeenCalledTimes(2);
+    });
+
+    it('returns multiple (accountId, state) pairs when one commitment authorizes several accounts', async () => {
+      const client = new MultisigClient(webClient);
+      const signer = makeLookupCapableSigner();
+      const accountA = '0xaaa1';
+      const accountB = '0xbbb2';
+
+      mockServerLookupResponse([accountA, accountB]);
+      mockServerStateResponse(accountA);
+      mockServerStateResponse(accountB);
+
+      const recovered = await client.recoverByKey(signer);
+
+      expect(recovered.map((r) => r.accountId)).toEqual([accountA, accountB]);
+      // 1 lookup + 2 state fetches.
+      expect(mockFetch).toHaveBeenCalledTimes(3);
+    });
+
+    it('returns empty array when no account authorizes the commitment', async () => {
+      const client = new MultisigClient(webClient);
+      const signer = makeLookupCapableSigner();
+
+      mockServerLookupResponse([]);
+
+      const recovered = await client.recoverByKey(signer);
+
+      expect(recovered).toEqual([]);
+      // Only the lookup HTTP call — no per-account state fetches.
+      expect(mockFetch).toHaveBeenCalledTimes(1);
+    });
+
+    it('throws a clear error when the signer does not implement signLookupMessage', async () => {
+      const client = new MultisigClient(webClient);
+      // mockSigner from the outer beforeEach lacks signLookupMessage.
+      await expect(client.recoverByKey(mockSigner)).rejects.toThrow(/signLookupMessage/);
+      expect(mockFetch).not.toHaveBeenCalled();
+    });
+  });
 });

package/src/client.ts

@@ -7,6 +7,7 @@
 
 import { type MidenClient, Account, AccountId } from '@miden-sdk/miden-sdk';
 import { GuardianHttpClient } from '@openzeppelin/guardian-client';
+import type { StateObject } from '@openzeppelin/guardian-client';
 import { Multisig } from './multisig.js';
 import { createMultisigAccount } from './account/index.js';
 import { AccountInspector } from './inspector.js';
@@ -38,6 +39,16 @@ export interface MultisigClientConfig {
   midenRpcEndpoint?: string;
 }
 
+/**
+ * One match returned by `MultisigClient.recoverByKey`. Pairs the discovered
+ * `accountId` with the current `state` snapshot so callers do not need to do a
+ * second round-trip per account.
+ */
+export interface RecoveredAccount {
+  accountId: string;
+  state: StateObject;
+}
+
 /**
  * Client for creating and loading multisig accounts.
  *
@@ -92,6 +103,31 @@ export class MultisigClient {
     return this._guardianClient;
   }
 
+  /**
+   * Recover the set of accounts a given signer authorizes by querying
+   * Guardian's `/state/lookup` endpoint and fetching state for each match.
+   * Returns `(accountId, state)` pairs; an empty array means no account on
+   * this operator authorizes the commitment (distinct from "wrong key",
+   * which would fail authentication first).
+   *
+   * @throws if `signer` does not implement `signLookupMessage`. The bundled
+   *   `FalconSigner` and `EcdsaSigner` both do.
+   */
+  async recoverByKey(signer: Signer): Promise<RecoveredAccount[]> {
+    this._guardianClient.setSigner(signer);
+
+    const lookup = await this._guardianClient.lookupAccountByKeyCommitment(signer.commitment);
+
+    // Per-account replay protection is scoped to each account's
+    // last_auth_timestamp, so concurrent getState calls do not race.
+    return Promise.all(
+      lookup.accounts.map(async ({ accountId }) => ({
+        accountId,
+        state: await this._guardianClient.getState(accountId),
+      })),
+    );
+  }
+
   /**
    * Create a new multisig account.
    *

package/src/index.ts

@@ -39,7 +39,12 @@
  * ```
  */
 
-export { MultisigClient, type MultisigClientConfig } from './client.js';
+export {
+  MultisigClient,
+  type MultisigClientConfig,
+  type RecoveredAccount,
+} from './client.js';
+export { lookupAuthDigest } from './lookupAuth.js';
 export { Multisig, type AccountState } from './multisig.js';
 export { AccountInspector, type DetectedMultisigConfig, type VaultBalance } from './inspector.js';
 export {
@@ -74,6 +79,30 @@ export {
   StorageLayoutBuilder,
 } from './account/index.js';
 
+export {
+  CONSUME_NOTES_METADATA_VERSION_V2,
+  MAX_CONSUME_NOTES_METADATA_BYTES,
+  isConsumeNotesV1,
+  isConsumeNotesV2,
+} from './types/proposal.js';
+
+export {
+  LEGACY_CONSUME_NOTES_ENABLED,
+} from './multisig/config.js';
+
+export {
+  type ConsumeNotesErrorCode,
+  NoteBindingMismatchError,
+  UnsupportedMetadataVersionError,
+  ConsumeNotesMetadataOversizeError,
+  LegacyConsumeNotesNoteMissingError,
+} from './multisig/consumeNotesErrors.js';
+
+export {
+  noteToBase64,
+  noteFromBase64,
+} from './utils/encoding.js';
+
 export {
   PROCEDURE_ROOTS,
   getProcedureRoot,

package/src/lookupAuth.test.ts

@@ -0,0 +1,184 @@
+import { describe, it, expect, vi, beforeEach } from 'vitest';
+
+// The Miden SDK is wasm-bound and is mocked across this test suite (matching
+// the pattern in transaction.test.ts, multisig.test.ts, etc.). We cannot run
+// real RPO256 here, but we CAN verify the lookup-digest function builds the
+// FeltArray sequence in the right order and chunking convention. Cross-language
+// parity against `crates/shared/tests/fixtures/lookup_auth_vectors.json` is
+// intentionally a separate runner — see `runRealSdkParity` below for the gated
+// hook.
+
+interface FakeFelt {
+  __felt: true;
+  value: bigint;
+}
+
+interface FakeWord {
+  __word: true;
+  felts: FakeFelt[];
+  toFelts: () => FakeFelt[];
+  toHex: () => string;
+}
+
+const hashCalls: { input: FakeFelt[] }[] = [];
+
+vi.mock('@miden-sdk/miden-sdk', () => {
+  const Felt = vi.fn().mockImplementation((value: bigint) => ({
+    __felt: true,
+    value,
+  }));
+
+  const FeltArray = vi.fn().mockImplementation((felts: FakeFelt[]) => felts);
+
+  const makeWord = (felts: FakeFelt[], hex = '0xMOCKED'): FakeWord => ({
+    __word: true,
+    felts,
+    toFelts: () => felts,
+    toHex: () => hex,
+  });
+
+  const Word = {
+    fromHex: vi.fn().mockImplementation((hex: string) => {
+      // Deterministic four-felt decomposition: split hex into 4 8-byte pieces.
+      // The values are not real Word semantics, but they let us assert the
+      // implementation passes them through in order.
+      const stripped = hex.startsWith('0x') ? hex.slice(2) : hex;
+      const padded = stripped.padStart(64, '0');
+      const felts: FakeFelt[] = [];
+      for (let i = 0; i < 4; i += 1) {
+        const piece = padded.slice(i * 16, (i + 1) * 16);
+        felts.push({ __felt: true, value: BigInt('0x' + piece) });
+      }
+      return makeWord(felts, hex);
+    }),
+  };
+
+  const Rpo256 = {
+    hashElements: vi.fn().mockImplementation((felts: FakeFelt[]) => {
+      hashCalls.push({ input: [...felts] });
+      // Synthesize a fake digest: 4 felts derived from the input length and
+      // first felt's value, so each call's output is distinguishable.
+      const seed = felts.length === 0 ? 0n : felts[0].value;
+      return makeWord(
+        [
+          { __felt: true, value: seed ^ BigInt(felts.length) },
+          { __felt: true, value: seed + 1n },
+          { __felt: true, value: seed + 2n },
+          { __felt: true, value: seed + 3n },
+        ],
+        '0xfakehash',
+      );
+    }),
+  };
+
+  return { Felt, FeltArray, Rpo256, Word };
+});
+
+const DOMAIN_TAG_BYTES = new TextEncoder().encode('guardian.lookup.v1');
+
+function bytesToExpectedFelts(bytes: Uint8Array): bigint[] {
+  const out: bigint[] = [];
+  for (let offset = 0; offset < bytes.length; offset += 8) {
+    let value = 0n;
+    for (let i = 0; i < 8; i += 1) {
+      const byte = offset + i < bytes.length ? bytes[offset + i] : 0;
+      value |= BigInt(byte) << BigInt(8 * i);
+    }
+    out.push(value);
+  }
+  return out;
+}
+
+let lookupAuthDigest: typeof import('./lookupAuth.js').lookupAuthDigest;
+let _resetLookupDomainTagCacheForTesting: typeof import('./lookupAuth.js')._resetLookupDomainTagCacheForTesting;
+
+beforeEach(async () => {
+  hashCalls.length = 0;
+  // Re-import to pick up a fresh cached domain tag per test, in addition to
+  // the explicit reset, so test ordering does not change behavior.
+  const mod = await import('./lookupAuth.js');
+  lookupAuthDigest = mod.lookupAuthDigest;
+  _resetLookupDomainTagCacheForTesting = mod._resetLookupDomainTagCacheForTesting;
+  _resetLookupDomainTagCacheForTesting();
+});
+
+describe('lookupAuthDigest', () => {
+  it('hashes the domain-tag bytes via the same 8-byte LE chunking as Rust', () => {
+    const keyCommitmentHex = '0x' + 'aa'.repeat(32);
+    lookupAuthDigest(1_700_000_000_000, keyCommitmentHex);
+
+    // First Rpo256.hashElements call must be the domain-tag computation
+    // (3 felts for "guardian.lookup.v1" — 18 bytes → ceil(18/8) = 3 chunks).
+    expect(hashCalls.length).toBeGreaterThanOrEqual(2);
+    const tagCall = hashCalls[0];
+    const expected = bytesToExpectedFelts(DOMAIN_TAG_BYTES);
+    expect(tagCall.input).toHaveLength(expected.length);
+    expect(tagCall.input.length).toBe(3);
+    for (let i = 0; i < expected.length; i += 1) {
+      expect(tagCall.input[i].value).toBe(expected[i]);
+    }
+  });
+
+  it('caches the domain-tag computation across calls', () => {
+    const keyCommitmentHex = '0x' + 'bb'.repeat(32);
+    lookupAuthDigest(1_700_000_000_000, keyCommitmentHex);
+    const callsAfterFirst = hashCalls.length;
+    lookupAuthDigest(1_700_000_000_001, keyCommitmentHex);
+    const callsAfterSecond = hashCalls.length;
+
+    // Second invocation should perform exactly one Rpo256.hashElements call
+    // (the message hash); the domain-tag hash is cached.
+    expect(callsAfterSecond - callsAfterFirst).toBe(1);
+  });
+
+  it('passes 9 felts in [tag, timestamp, key_commitment] order to the message hash', () => {
+    const keyCommitmentHex = '0x' + '01'.repeat(32);
+    const timestamp = 1_700_000_000_000n;
+    lookupAuthDigest(timestamp, keyCommitmentHex);
+
+    const messageCall = hashCalls[hashCalls.length - 1];
+    expect(messageCall.input).toHaveLength(9);
+
+    // Felt 4 is the timestamp, reinterpreted as u64 (no change for positive).
+    expect(messageCall.input[4].value).toBe(timestamp);
+
+    // Felts 5..8 are the key-commitment felts, derived deterministically by
+    // the mocked Word.fromHex from the hex representation.
+    const expectedKcWord = '01'.repeat(32);
+    for (let i = 0; i < 4; i += 1) {
+      const piece = expectedKcWord.slice(i * 16, (i + 1) * 16);
+      expect(messageCall.input[5 + i].value).toBe(BigInt('0x' + piece));
+    }
+  });
+
+  it('reinterprets a negative timestamp via two-complement u64 cast', () => {
+    const keyCommitmentHex = '0x' + 'cc'.repeat(32);
+    lookupAuthDigest(-1, keyCommitmentHex);
+
+    const messageCall = hashCalls[hashCalls.length - 1];
+    // -1 cast to u64 is 0xFFFFFFFFFFFFFFFF.
+    expect(messageCall.input[4].value).toBe(0xFFFFFFFFFFFFFFFFn);
+  });
+
+  it('produces distinct digest inputs for distinct commitments', () => {
+    lookupAuthDigest(1_700_000_000_000, '0x' + '01'.repeat(32));
+    lookupAuthDigest(1_700_000_000_000, '0x' + '02'.repeat(32));
+
+    // Call 0 is the cached domain-tag hash. Calls 1 and 2 are the two message
+    // hashes; the second call hits the domain-tag cache so it does not produce
+    // an extra hash call.
+    const messageCallA = hashCalls[1];
+    const messageCallB = hashCalls[2];
+    expect(messageCallA.input[5].value).not.toBe(messageCallB.input[5].value);
+  });
+
+  it('produces distinct digest inputs for distinct timestamps', () => {
+    const keyCommitmentHex = '0x' + '01'.repeat(32);
+    lookupAuthDigest(1_700_000_000_000, keyCommitmentHex);
+    lookupAuthDigest(1_700_000_000_001, keyCommitmentHex);
+
+    const messageCallA = hashCalls[1];
+    const messageCallB = hashCalls[2];
+    expect(messageCallA.input[4].value).not.toBe(messageCallB.input[4].value);
+  });
+});

package/src/lookupAuth.ts

@@ -0,0 +1,93 @@
+import { Felt, FeltArray, Rpo256, Word } from '@miden-sdk/miden-sdk';
+
+/**
+ * Lookup-bound message format used to sign requests against the Guardian
+ * `/state/lookup` endpoint. MUST produce byte-identical digests to
+ * `crates/shared/src/lookup_auth_message.rs`; parity is verified against
+ * `crates/shared/tests/fixtures/lookup_auth_vectors.json`.
+ */
+
+const DOMAIN_TAG_BYTES = new TextEncoder().encode('guardian.lookup.v1');
+
+let cachedDomainTag: Word | null = null;
+
+/**
+ * Convert a byte array to a sequence of Goldilocks-field felts using the same
+ * 8-byte little-endian chunking convention as
+ * `guardian_shared::auth_request_payload::AuthRequestPayload::from_bytes`. The
+ * final chunk is zero-padded if `bytes.length` is not a multiple of 8.
+ */
+function bytesToFelts(bytes: Uint8Array): Felt[] {
+  const felts: Felt[] = [];
+  for (let offset = 0; offset < bytes.length; offset += 8) {
+    let value = 0n;
+    for (let i = 0; i < 8; i += 1) {
+      const byte = offset + i < bytes.length ? bytes[offset + i] : 0;
+      value |= BigInt(byte) << BigInt(8 * i);
+    }
+    felts.push(new Felt(value));
+  }
+  return felts;
+}
+
+/**
+ * The 4-felt RPO domain tag prepended to every lookup digest, computed once
+ * from `DOMAIN_TAG_BYTES`. Cached on first call.
+ */
+function lookupDomainTag(): Word {
+  if (cachedDomainTag === null) {
+    cachedDomainTag = Rpo256.hashElements(new FeltArray(bytesToFelts(DOMAIN_TAG_BYTES)));
+  }
+  return cachedDomainTag;
+}
+
+/**
+ * Compute the digest a lookup-bound signer signs.
+ *
+ * Layout (must mirror `LookupAuthMessage::to_word` in `crates/shared`):
+ *
+ * ```text
+ * RPO256_hash([
+ *   DOMAIN_TAG_W0, DOMAIN_TAG_W1, DOMAIN_TAG_W2, DOMAIN_TAG_W3,
+ *   timestamp_ms_felt,
+ *   key_commitment_W0, key_commitment_W1,
+ *   key_commitment_W2, key_commitment_W3,
+ * ])
+ * ```
+ *
+ * @param timestampMs Unix milliseconds. Reinterpreted as `u64` to match the
+ *                    Rust `as u64` cast (so negative inputs wrap into the
+ *                    high range, then are reduced mod the Goldilocks prime by
+ *                    the Felt constructor).
+ * @param keyCommitmentHex `0x`-prefixed 32-byte hex string for the queried
+ *                         commitment.
+ */
+export function lookupAuthDigest(timestampMs: number | bigint, keyCommitmentHex: string): Word {
+  const tag = lookupDomainTag().toFelts();
+  const kc = Word.fromHex(keyCommitmentHex).toFelts();
+  const tsBigInt = typeof timestampMs === 'bigint' ? timestampMs : BigInt(timestampMs);
+  const timestampU64 = BigInt.asUintN(64, tsBigInt);
+  const timestampFelt = new Felt(timestampU64);
+
+  const message = new FeltArray([
+    tag[0],
+    tag[1],
+    tag[2],
+    tag[3],
+    timestampFelt,
+    kc[0],
+    kc[1],
+    kc[2],
+    kc[3],
+  ]);
+
+  return Rpo256.hashElements(message);
+}
+
+/**
+ * Reset the cached domain tag. Tests use this to exercise the cache miss path;
+ * production callers should not need it.
+ */
+export function _resetLookupDomainTagCacheForTesting(): void {
+  cachedDomainTag = null;
+}

package/src/multisig/config.ts

@@ -0,0 +1,7 @@
+/**
+ * Whether this build accepts v1 `consume_notes` metadata (issue #229).
+ * Mirrors the Rust `legacy-consume-notes` Cargo feature. Flip to `false`
+ * in the cut-over release; v1 proposals will then be refused with
+ * `UnsupportedMetadataVersionError`.
+ */
+export const LEGACY_CONSUME_NOTES_ENABLED = true;