@openzeppelin/miden-multisig-client 0.17.0 → 0.18.0-rc.1

package/dist/transaction/consumeNotes.js

@@ -1,13 +1,8 @@
-import { NoteAndArgs, NoteAndArgsArray, TransactionRequestBuilder, Word as WordType, } from '@miden-sdk/miden-sdk';
+import { NoteAndArgs, NoteAndArgsArray } from '@miden-sdk/miden-sdk';
 import { LegacyConsumeNotesNoteMissingError } from '../multisig/consumeNotesErrors.js';
 import { getRawMidenClient } from '../raw-client.js';
-import { normalizeHexWord } from '../utils/encoding.js';
-import { randomWord } from '../utils/random.js';
-/**
- * Build a consume-notes request from loaded `Note` objects (no local-store
- * read). v2 verification path for issue #229.
- */
-export function buildConsumeNotesTransactionRequestFromNotes(notes, options = {}) {
+import { buildMultisigRequest, multisigRequestBuilder } from './authArgs.js';
+export async function buildConsumeNotesTransactionRequestFromNotes(client, notes, options) {
     if (notes.length === 0) {
         throw new Error('At least one note is required');
     }
@@ -15,24 +10,14 @@ export function buildConsumeNotesTransactionRequestFromNotes(notes, options = {}
     for (const note of notes) {
         noteAndArgsArray.push(new NoteAndArgs(note, null));
     }
-    const authSaltHex = options.salt ? options.salt.toHex() : randomWord().toHex();
-    const authSaltForBuilder = WordType.fromHex(normalizeHexWord(authSaltHex));
-    let txBuilder = new TransactionRequestBuilder();
-    txBuilder = txBuilder.withInputNotes(noteAndArgsArray);
-    txBuilder = txBuilder.withFeeConversionSalt(authSaltForBuilder);
-    // Borrows rather than consumes: the glue passes `__wbg_ptr` without taking it,
-    // so the handle stays ours to release once the builder has read it.
-    authSaltForBuilder.free?.();
+    const { builder, saltHex } = await multisigRequestBuilder(client, options);
+    let txBuilder = builder.withInputNotes(noteAndArgsArray);
     if (options.signatureAdviceMap) {
         txBuilder = txBuilder.extendAdviceMap(options.signatureAdviceMap);
     }
-    const authSaltForReturn = WordType.fromHex(normalizeHexWord(authSaltHex));
-    return {
-        request: txBuilder.build(),
-        salt: authSaltForReturn,
-    };
+    return buildMultisigRequest(txBuilder, saltHex, options.accountId);
 }
-export async function buildConsumeNotesTransactionRequest(client, noteIds, options = {}) {
+export async function buildConsumeNotesTransactionRequest(client, noteIds, options) {
     if (noteIds.length === 0) {
         throw new Error('At least one note ID is required');
     }
@@ -45,6 +30,6 @@ export async function buildConsumeNotesTransactionRequest(client, noteIds, optio
         }
         notes.push(inputNoteRecord.toNote());
     }
-    return buildConsumeNotesTransactionRequestFromNotes(notes, options);
+    return buildConsumeNotesTransactionRequestFromNotes(rawClient, notes, options);
 }
 //# sourceMappingURL=consumeNotes.js.map

package/dist/transaction/consumeNotes.js.map

@@ -1 +1 @@
-{"version":3,"file":"consumeNotes.js","sourceRoot":"","sources":["../../src/transaction/consumeNotes.ts"],"names":[],"mappings":"AAOA,OAAO,EACL,WAAW,EACX,gBAAgB,EAChB,yBAAyB,EACzB,IAAI,IAAI,QAAQ,GACjB,MAAM,sBAAsB,CAAC;AAC9B,OAAO,EAAE,kCAAkC,EAAE,MAAM,mCAAmC,CAAC;AACvF,OAAO,EAAE,iBAAiB,EAAE,MAAM,kBAAkB,CAAC;AACrD,OAAO,EAAE,gBAAgB,EAAE,MAAM,sBAAsB,CAAC;AACxD,OAAO,EAAE,UAAU,EAAE,MAAM,oBAAoB,CAAC;AAGhD;;;GAGG;AACH,MAAM,UAAU,4CAA4C,CAC1D,KAAa,EACb,UAA4B,EAAE;IAE9B,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACvB,MAAM,IAAI,KAAK,CAAC,+BAA+B,CAAC,CAAC;IACnD,CAAC;IAED,MAAM,gBAAgB,GAAG,IAAI,gBAAgB,EAAE,CAAC;IAChD,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,gBAAgB,CAAC,IAAI,CAAC,IAAI,WAAW,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC,CAAC;IACrD,CAAC;IAED,MAAM,WAAW,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,UAAU,EAAE,CAAC,KAAK,EAAE,CAAC;IAC/E,MAAM,kBAAkB,GAAG,QAAQ,CAAC,OAAO,CAAC,gBAAgB,CAAC,WAAW,CAAC,CAAC,CAAC;IAE3E,IAAI,SAAS,GAAG,IAAI,yBAAyB,EAAE,CAAC;IAChD,SAAS,GAAG,SAAS,CAAC,cAAc,CAAC,gBAAgB,CAAC,CAAC;IACvD,SAAS,GAAG,SAAS,CAAC,qBAAqB,CAAC,kBAAkB,CAAC,CAAC;IAChE,+EAA+E;IAC/E,oEAAoE;IACpE,kBAAkB,CAAC,IAAI,EAAE,EAAE,CAAC;IAE5B,IAAI,OAAO,CAAC,kBAAkB,EAAE,CAAC;QAC/B,SAAS,GAAG,SAAS,CAAC,eAAe,CAAC,OAAO,CAAC,kBAAkB,CAAC,CAAC;IACpE,CAAC;IAED,MAAM,iBAAiB,GAAG,QAAQ,CAAC,OAAO,CAAC,gBAAgB,CAAC,WAAW,CAAC,CAAC,CAAC;IAE1E,OAAO;QACL,OAAO,EAAE,SAAS,CAAC,KAAK,EAAE;QAC1B,IAAI,EAAE,iBAAiB;KACxB,CAAC;AACJ,CAAC;AAgBD,MAAM,CAAC,KAAK,UAAU,mCAAmC,CACvD,MAAmC,EACnC,OAAiB,EACjB,UAA4B,EAAE;IAE9B,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACzB,MAAM,IAAI,KAAK,CAAC,kCAAkC,CAAC,CAAC;IACtD,CAAC;IAED,MAAM,SAAS,GAAG,MAAM,iBAAiB,CAAC,MAAM,EAAE,OAAO,CAAC,gBAAgB,CAAC,CAAC;IAC5E,MAAM,KAAK,GAAW,EAAE,CAAC;IACzB,KAAK,MAAM,SAAS,IAAI,OAAO,EAAE,CAAC;QAChC,MAAM,eAAe,GAAG,MAAM,SAAS,CAAC,YAAY,CAAC,SAAS,CAAC,CAAC;QAChE,IAAI,CAAC,eAAe,EAAE,CAAC;YACrB,MAAM,IAAI,kCAAkC,CAAC,SAAS,CAAC,CAAC;QAC1D,CAAC;QACD,KAAK,CAAC,IAAI,CAAC,eAAe,CAAC,MAAM,EAAE,CAAC,CAAC;IACvC,CAAC;IAED,OAAO,4CAA4C,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC;AACtE,CAAC"}
+{"version":3,"file":"consumeNotes.js","sourceRoot":"","sources":["../../src/transaction/consumeNotes.ts"],"names":[],"mappings":"AAOA,OAAO,EAAE,WAAW,EAAE,gBAAgB,EAAE,MAAM,sBAAsB,CAAC;AACrE,OAAO,EAAE,kCAAkC,EAAE,MAAM,mCAAmC,CAAC;AACvF,OAAO,EAAE,iBAAiB,EAAE,MAAM,kBAAkB,CAAC;AACrD,OAAO,EAAE,oBAAoB,EAAE,sBAAsB,EAAE,MAAM,eAAe,CAAC;AAiB7E,MAAM,CAAC,KAAK,UAAU,4CAA4C,CAChE,MAAmC,EACnC,KAAa,EACb,OAA+B;IAE/B,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACvB,MAAM,IAAI,KAAK,CAAC,+BAA+B,CAAC,CAAC;IACnD,CAAC;IAED,MAAM,gBAAgB,GAAG,IAAI,gBAAgB,EAAE,CAAC;IAChD,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,gBAAgB,CAAC,IAAI,CAAC,IAAI,WAAW,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC,CAAC;IACrD,CAAC;IAED,MAAM,EAAE,OAAO,EAAE,OAAO,EAAE,GAAG,MAAM,sBAAsB,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAC3E,IAAI,SAAS,GAAG,OAAO,CAAC,cAAc,CAAC,gBAAgB,CAAC,CAAC;IAEzD,IAAI,OAAO,CAAC,kBAAkB,EAAE,CAAC;QAC/B,SAAS,GAAG,SAAS,CAAC,eAAe,CAAC,OAAO,CAAC,kBAAkB,CAAC,CAAC;IACpE,CAAC;IAED,OAAO,oBAAoB,CAAC,SAAS,EAAE,OAAO,EAAE,OAAO,CAAC,SAAS,CAAC,CAAC;AACrE,CAAC;AAgBD,MAAM,CAAC,KAAK,UAAU,mCAAmC,CACvD,MAAmC,EACnC,OAAiB,EACjB,OAA+B;IAE/B,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACzB,MAAM,IAAI,KAAK,CAAC,kCAAkC,CAAC,CAAC;IACtD,CAAC;IAED,MAAM,SAAS,GAAG,MAAM,iBAAiB,CAAC,MAAM,EAAE,OAAO,CAAC,gBAAgB,CAAC,CAAC;IAC5E,MAAM,KAAK,GAAW,EAAE,CAAC;IACzB,KAAK,MAAM,SAAS,IAAI,OAAO,EAAE,CAAC;QAChC,MAAM,eAAe,GAAG,MAAM,SAAS,CAAC,YAAY,CAAC,SAAS,CAAC,CAAC;QAChE,IAAI,CAAC,eAAe,EAAE,CAAC;YACrB,MAAM,IAAI,kCAAkC,CAAC,SAAS,CAAC,CAAC;QAC1D,CAAC;QACD,KAAK,CAAC,IAAI,CAAC,eAAe,CAAC,MAAM,EAAE,CAAC,CAAC;IACvC,CAAC;IAED,OAAO,4CAA4C,CAAC,SAAS,EAAE,KAAK,EAAE,OAAO,CAAC,CAAC;AACjF,CAAC"}

package/dist/transaction/noteAuthentication.d.ts

@@ -0,0 +1,39 @@
+/**
+ * Canonical consumption mode for `consume_notes` proposals: authenticated.
+ *
+ * miden-client decides per input note, at execution time and from the local
+ * store alone, whether it is consumed as *authenticated* (the store holds
+ * its inclusion proof) or *unauthenticated* (anything else). The two modes
+ * commit differently into the transaction summary,
+ * `hash(nullifier || note_id_or_ZERO)`, so the proposer and every verifier
+ * must be in the same mode or the summary commitment, and with it the
+ * proposal id, differs. That was issue #409's live shape: a cosigner whose
+ * fresh store had never seen the notes failed with "metadata does not match
+ * tx_summary". Proposal creation and every rebuild call
+ * {@link ensureNotesAuthenticated} first, so the executed transaction is the
+ * one the cosigners signed regardless of what each store held before.
+ */
+import { type Note } from '@miden-sdk/miden-sdk';
+import type { RawClientSource } from '../raw-client.js';
+import { type RpcConfig } from '../rpc/config.js';
+export interface EnsureNotesAuthenticatedOptions {
+    /** Miden node RPC endpoint the inclusion proofs are fetched from. */
+    midenRpcEndpoint: string;
+    /** Retry policy for the proof fetch; defaults to the SDK's RPC defaults. */
+    rpc?: RpcConfig;
+}
+/**
+ * Makes every note in `notes` an authenticated input note in the client's
+ * local store: present, with its on-chain inclusion proof and block header.
+ *
+ * Notes already authenticated locally are left alone. For the rest the
+ * inclusion proofs come from the node in one round trip (the node serves
+ * proofs for private notes too) and each note is imported as committed,
+ * which also upgrades a proof-less record the store already tracked.
+ *
+ * @throws {ConsumeNoteNotAuthenticatedError} when a note is not committed on
+ *   chain yet, the node does not serve its proof, the import fails, or the
+ *   record still lacks authentication after a sync.
+ */
+export declare function ensureNotesAuthenticated(midenClient: RawClientSource, notes: readonly Note[], options: EnsureNotesAuthenticatedOptions): Promise<void>;
+//# sourceMappingURL=noteAuthentication.d.ts.map

package/dist/transaction/noteAuthentication.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"noteAuthentication.d.ts","sourceRoot":"","sources":["../../src/transaction/noteAuthentication.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AACH,OAAO,EAAY,KAAK,IAAI,EAAsC,MAAM,sBAAsB,CAAC;AAG/F,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,kBAAkB,CAAC;AAGxD,OAAO,EAAoB,KAAK,SAAS,EAAE,MAAM,kBAAkB,CAAC;AAIpE,MAAM,WAAW,+BAA+B;IAC9C,qEAAqE;IACrE,gBAAgB,EAAE,MAAM,CAAC;IACzB,4EAA4E;IAC5E,GAAG,CAAC,EAAE,SAAS,CAAC;CACjB;AAED;;;;;;;;;;;;GAYG;AACH,wBAAsB,wBAAwB,CAC5C,WAAW,EAAE,eAAe,EAC5B,KAAK,EAAE,SAAS,IAAI,EAAE,EACtB,OAAO,EAAE,+BAA+B,GACvC,OAAO,CAAC,IAAI,CAAC,CA+Df"}

package/dist/transaction/noteAuthentication.js

@@ -0,0 +1,94 @@
+/**
+ * Canonical consumption mode for `consume_notes` proposals: authenticated.
+ *
+ * miden-client decides per input note, at execution time and from the local
+ * store alone, whether it is consumed as *authenticated* (the store holds
+ * its inclusion proof) or *unauthenticated* (anything else). The two modes
+ * commit differently into the transaction summary,
+ * `hash(nullifier || note_id_or_ZERO)`, so the proposer and every verifier
+ * must be in the same mode or the summary commitment, and with it the
+ * proposal id, differs. That was issue #409's live shape: a cosigner whose
+ * fresh store had never seen the notes failed with "metadata does not match
+ * tx_summary". Proposal creation and every rebuild call
+ * {@link ensureNotesAuthenticated} first, so the executed transaction is the
+ * one the cosigners signed regardless of what each store held before.
+ */
+import { Endpoint, RpcClient } from '@miden-sdk/miden-sdk';
+import { ConsumeNoteNotAuthenticatedError } from '../multisig/consumeNotesErrors.js';
+import { getRawMidenClient } from '../raw-client.js';
+import { importNoteWithProof } from '../recovery/proposalNoteImport.js';
+import { resolveRpcConfig } from '../rpc/config.js';
+import { retryRpcRead } from '../rpc/retry.js';
+import { normalizeHexWord } from '../utils/encoding.js';
+/**
+ * Makes every note in `notes` an authenticated input note in the client's
+ * local store: present, with its on-chain inclusion proof and block header.
+ *
+ * Notes already authenticated locally are left alone. For the rest the
+ * inclusion proofs come from the node in one round trip (the node serves
+ * proofs for private notes too) and each note is imported as committed,
+ * which also upgrades a proof-less record the store already tracked.
+ *
+ * @throws {ConsumeNoteNotAuthenticatedError} when a note is not committed on
+ *   chain yet, the node does not serve its proof, the import fails, or the
+ *   record still lacks authentication after a sync.
+ */
+export async function ensureNotesAuthenticated(midenClient, notes, options) {
+    const webClient = await getRawMidenClient(midenClient, options.midenRpcEndpoint);
+    const pending = await unauthenticatedNotes(webClient, notes);
+    if (pending.length === 0) {
+        return;
+    }
+    const proofs = new Map();
+    try {
+        const rpcClient = new RpcClient(new Endpoint(options.midenRpcEndpoint));
+        const fetched = await retryRpcRead(() => rpcClient.getNotesById(pending.map((note) => note.id())), resolveRpcConfig(options.rpc));
+        for (const entry of fetched) {
+            proofs.set(normalizeHexWord(entry.noteId.toString()), entry.inclusionProof);
+        }
+    }
+    catch (error) {
+        throw new ConsumeNoteNotAuthenticatedError(noteIdHex(pending[0]), `failed to fetch inclusion proofs from the node: ${errorDetail(error)}`);
+    }
+    for (const note of pending) {
+        const idHex = noteIdHex(note);
+        const proof = proofs.get(idHex);
+        if (!proof) {
+            throw new ConsumeNoteNotAuthenticatedError(idHex, 'the node has no inclusion proof for it (not committed on chain yet)');
+        }
+        const { outcome, wasImported } = await importNoteWithProof(webClient, 'proposal', idHex, note, proof);
+        if (!wasImported) {
+            throw new ConsumeNoteNotAuthenticatedError(idHex, `failed to import it with its inclusion proof: ${outcome.reason ?? 'unknown error'}`);
+        }
+    }
+    // The import authenticates a note committed at or below the client's sync
+    // height; a newer one lands unverified until a sync fetches its block
+    // header. A cosigner that just loaded the account is typically behind the
+    // note's block, so sync once and re-check before failing.
+    if ((await unauthenticatedNotes(webClient, notes)).length > 0) {
+        await webClient.syncState();
+    }
+    const still = await unauthenticatedNotes(webClient, notes);
+    if (still.length > 0) {
+        throw new ConsumeNoteNotAuthenticatedError(noteIdHex(still[0]), 'its inclusion proof was imported but the local store could not verify it ' +
+            'against the chain even after a sync');
+    }
+}
+/** The subset of `notes` whose local record is missing or carries no proof. */
+async function unauthenticatedNotes(webClient, notes) {
+    const pending = [];
+    for (const note of notes) {
+        const record = await webClient.getInputNote(noteIdHex(note));
+        if (!record || !record.isAuthenticated()) {
+            pending.push(note);
+        }
+    }
+    return pending;
+}
+function noteIdHex(note) {
+    return normalizeHexWord(note.id().toString());
+}
+function errorDetail(error) {
+    return error instanceof Error ? error.message : String(error);
+}
+//# sourceMappingURL=noteAuthentication.js.map

package/dist/transaction/noteAuthentication.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"noteAuthentication.js","sourceRoot":"","sources":["../../src/transaction/noteAuthentication.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AACH,OAAO,EAAE,QAAQ,EAAsC,SAAS,EAAE,MAAM,sBAAsB,CAAC;AAE/F,OAAO,EAAE,gCAAgC,EAAE,MAAM,mCAAmC,CAAC;AAErF,OAAO,EAAE,iBAAiB,EAAE,MAAM,kBAAkB,CAAC;AACrD,OAAO,EAAE,mBAAmB,EAAE,MAAM,mCAAmC,CAAC;AACxE,OAAO,EAAE,gBAAgB,EAAkB,MAAM,kBAAkB,CAAC;AACpE,OAAO,EAAE,YAAY,EAAE,MAAM,iBAAiB,CAAC;AAC/C,OAAO,EAAE,gBAAgB,EAAE,MAAM,sBAAsB,CAAC;AASxD;;;;;;;;;;;;GAYG;AACH,MAAM,CAAC,KAAK,UAAU,wBAAwB,CAC5C,WAA4B,EAC5B,KAAsB,EACtB,OAAwC;IAExC,MAAM,SAAS,GAAG,MAAM,iBAAiB,CAAC,WAAW,EAAE,OAAO,CAAC,gBAAgB,CAAC,CAAC;IACjF,MAAM,OAAO,GAAG,MAAM,oBAAoB,CAAC,SAAS,EAAE,KAAK,CAAC,CAAC;IAC7D,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACzB,OAAO;IACT,CAAC;IAED,MAAM,MAAM,GAAG,IAAI,GAAG,EAA8B,CAAC;IACrD,IAAI,CAAC;QACH,MAAM,SAAS,GAAG,IAAI,SAAS,CAAC,IAAI,QAAQ,CAAC,OAAO,CAAC,gBAAgB,CAAC,CAAC,CAAC;QACxE,MAAM,OAAO,GAAG,MAAM,YAAY,CAChC,GAAG,EAAE,CAAC,SAAS,CAAC,YAAY,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,EAAE,EAAE,CAAC,CAAC,EAC9D,gBAAgB,CAAC,OAAO,CAAC,GAAG,CAAC,CAC9B,CAAC;QACF,KAAK,MAAM,KAAK,IAAI,OAAO,EAAE,CAAC;YAC5B,MAAM,CAAC,GAAG,CAAC,gBAAgB,CAAC,KAAK,CAAC,MAAM,CAAC,QAAQ,EAAE,CAAC,EAAE,KAAK,CAAC,cAAc,CAAC,CAAC;QAC9E,CAAC;IACH,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,IAAI,gCAAgC,CACxC,SAAS,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,EACrB,mDAAmD,WAAW,CAAC,KAAK,CAAC,EAAE,CACxE,CAAC;IACJ,CAAC;IAED,KAAK,MAAM,IAAI,IAAI,OAAO,EAAE,CAAC;QAC3B,MAAM,KAAK,GAAG,SAAS,CAAC,IAAI,CAAC,CAAC;QAC9B,MAAM,KAAK,GAAG,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;QAChC,IAAI,CAAC,KAAK,EAAE,CAAC;YACX,MAAM,IAAI,gCAAgC,CACxC,KAAK,EACL,qEAAqE,CACtE,CAAC;QACJ,CAAC;QACD,MAAM,EAAE,OAAO,EAAE,WAAW,EAAE,GAAG,MAAM,mBAAmB,CACxD,SAAS,EACT,UAAU,EACV,KAAK,EACL,IAAI,EACJ,KAAK,CACN,CAAC;QACF,IAAI,CAAC,WAAW,EAAE,CAAC;YACjB,MAAM,IAAI,gCAAgC,CACxC,KAAK,EACL,iDAAiD,OAAO,CAAC,MAAM,IAAI,eAAe,EAAE,CACrF,CAAC;QACJ,CAAC;IACH,CAAC;IAED,0EAA0E;IAC1E,sEAAsE;IACtE,0EAA0E;IAC1E,0DAA0D;IAC1D,IAAI,CAAC,MAAM,oBAAoB,CAAC,SAAS,EAAE,KAAK,CAAC,CAAC,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC9D,MAAM,SAAS,CAAC,SAAS,EAAE,CAAC;IAC9B,CAAC;IACD,MAAM,KAAK,GAAG,MAAM,oBAAoB,CAAC,SAAS,EAAE,KAAK,CAAC,CAAC;IAC3D,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACrB,MAAM,IAAI,gCAAgC,CACxC,SAAS,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,EACnB,2EAA2E;YACzE,qCAAqC,CACxC,CAAC;IACJ,CAAC;AACH,CAAC;AAED,+EAA+E;AAC/E,KAAK,UAAU,oBAAoB,CACjC,SAAwD,EACxD,KAAsB;IAEtB,MAAM,OAAO,GAAW,EAAE,CAAC;IAC3B,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,MAAM,MAAM,GAAG,MAAM,SAAS,CAAC,YAAY,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC;QAC7D,IAAI,CAAC,MAAM,IAAI,CAAC,MAAM,CAAC,eAAe,EAAE,EAAE,CAAC;YACzC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACrB,CAAC;IACH,CAAC;IACD,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,SAAS,SAAS,CAAC,IAAU;IAC3B,OAAO,gBAAgB,CAAC,IAAI,CAAC,EAAE,EAAE,CAAC,QAAQ,EAAE,CAAC,CAAC;AAChD,CAAC;AAED,SAAS,WAAW,CAAC,KAAc;IACjC,OAAO,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AAChE,CAAC"}

package/dist/transaction/options.d.ts

@@ -5,8 +5,33 @@ export interface SignatureOptions {
     signatureAdviceMap?: AdviceMap;
     signatureScheme?: SignatureScheme;
     midenRpcEndpoint?: string;
+    /**
+     * The block the transaction summary binds. Omitted, the store's sync height,
+     * which is right for the party creating a proposal. A cosigner or executor
+     * rebuilding a proposal pins it to the proposal's anchor block, or the rebuilt
+     * summary can never match the signed one.
+     */
+    boundBlockNum?: number;
+    /**
+     * Blocks after the bound block at which the approvers' signatures stop
+     * authorizing the transaction, so it must be included by then. Bound by the
+     * summary, so a rebuild must pass the same value. At most 65535 blocks, the
+     * furthest a transaction can expire after its reference block; omitted, the
+     * approval never expires, which is the upstream default.
+     */
+    approvalExpirationDelta?: number;
 }
 export interface MidenClientSignatureOptions extends SignatureOptions {
     midenRpcEndpoint: string;
 }
+/**
+ * Options for a request a multisig account executes. The account decides the
+ * auth args the request has to carry, so every multisig builder needs it.
+ */
+export interface MultisigRequestOptions extends SignatureOptions {
+    accountId: string;
+}
+export interface MidenClientMultisigRequestOptions extends MultisigRequestOptions {
+    midenRpcEndpoint: string;
+}
 //# sourceMappingURL=options.d.ts.map

package/dist/transaction/options.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"options.d.ts","sourceRoot":"","sources":["../../src/transaction/options.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,SAAS,EAAE,IAAI,EAAE,MAAM,sBAAsB,CAAC;AAC5D,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,aAAa,CAAC;AAEnD,MAAM,WAAW,gBAAgB;IAC/B,IAAI,CAAC,EAAE,IAAI,CAAC;IACZ,kBAAkB,CAAC,EAAE,SAAS,CAAC;IAC/B,eAAe,CAAC,EAAE,eAAe,CAAC;IAClC,gBAAgB,CAAC,EAAE,MAAM,CAAC;CAC3B;AAED,MAAM,WAAW,2BAA4B,SAAQ,gBAAgB;IACnE,gBAAgB,EAAE,MAAM,CAAC;CAC1B"}
+{"version":3,"file":"options.d.ts","sourceRoot":"","sources":["../../src/transaction/options.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,SAAS,EAAE,IAAI,EAAE,MAAM,sBAAsB,CAAC;AAC5D,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,aAAa,CAAC;AAEnD,MAAM,WAAW,gBAAgB;IAC/B,IAAI,CAAC,EAAE,IAAI,CAAC;IACZ,kBAAkB,CAAC,EAAE,SAAS,CAAC;IAC/B,eAAe,CAAC,EAAE,eAAe,CAAC;IAClC,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B;;;;;OAKG;IACH,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB;;;;;;OAMG;IACH,uBAAuB,CAAC,EAAE,MAAM,CAAC;CAClC;AAED,MAAM,WAAW,2BAA4B,SAAQ,gBAAgB;IACnE,gBAAgB,EAAE,MAAM,CAAC;CAC1B;AAED;;;GAGG;AACH,MAAM,WAAW,sBAAuB,SAAQ,gBAAgB;IAC9D,SAAS,EAAE,MAAM,CAAC;CACnB;AAED,MAAM,WAAW,iCAAkC,SAAQ,sBAAsB;IAC/E,gBAAgB,EAAE,MAAM,CAAC;CAC1B"}

package/dist/transaction/p2id.d.ts

@@ -1,5 +1,6 @@
 import type { TransactionRequest, Word } from '@miden-sdk/miden-sdk';
 import { Note, NoteType } from '@miden-sdk/miden-sdk';
+import type { RawClientSource } from '../raw-client.js';
 import type { SignatureOptions } from './options.js';
 import type { P2idNoteVisibility } from '../types/proposal.js';
 /**
@@ -37,8 +38,8 @@ export declare function deriveP2idSerialNumber(salt: Word): Word;
  * callback flag is encoded in the faucet account ID.
  */
 export declare function buildP2idNoteFromMetadata(senderId: string, recipientId: string, faucetId: string, amount: bigint, noteType: NoteType, saltHex: string, heights?: P2ideHeightOptions): Note;
-export declare function buildP2idTransactionRequest(senderId: string, recipientId: string, faucetId: string, amount: bigint, options?: P2idTransactionOptions): {
+export declare function buildP2idTransactionRequest(client: RawClientSource, senderId: string, recipientId: string, faucetId: string, amount: bigint, options?: P2idTransactionOptions): Promise<{
     request: TransactionRequest;
     salt: Word;
-};
+}>;
 //# sourceMappingURL=p2id.d.ts.map

package/dist/transaction/p2id.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"p2id.d.ts","sourceRoot":"","sources":["../../src/transaction/p2id.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,kBAAkB,EAAE,IAAI,EAAE,MAAM,sBAAsB,CAAC;AACrE,OAAO,EAML,IAAI,EAOJ,QAAQ,EAIT,MAAM,sBAAsB,CAAC;AAG9B,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,cAAc,CAAC;AACrD,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,sBAAsB,CAAC;AAG/D;;;;GAIG;AACH,MAAM,WAAW,kBAAkB;IACjC,sEAAsE;IACtE,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,sEAAsE;IACtE,cAAc,CAAC,EAAE,MAAM,CAAC;CACzB;AAED,MAAM,WAAW,sBAAuB,SAAQ,gBAAgB,EAAE,kBAAkB;IAClF,qEAAqE;IACrE,QAAQ,CAAC,EAAE,QAAQ,CAAC;CACrB;AAED;;;;;GAKG;AACH,wBAAgB,iBAAiB,CAAC,KAAK,EAAE,MAAM,GAAG,SAAS,GAAG,QAAQ,CAUrE;AAED;;;GAGG;AACH,wBAAgB,sBAAsB,CAAC,QAAQ,EAAE,QAAQ,GAAG,SAAS,GAAG,kBAAkB,GAAG,SAAS,CAErG;AAED,wBAAgB,sBAAsB,CAAC,IAAI,EAAE,IAAI,GAAG,IAAI,CAMvD;AA4CD;;;;;GAKG;AACH,wBAAgB,yBAAyB,CACvC,QAAQ,EAAE,MAAM,EAChB,WAAW,EAAE,MAAM,EACnB,QAAQ,EAAE,MAAM,EAChB,MAAM,EAAE,MAAM,EACd,QAAQ,EAAE,QAAQ,EAClB,OAAO,EAAE,MAAM,EACf,OAAO,GAAE,kBAAuB,GAC/B,IAAI,CASN;AAED,wBAAgB,2BAA2B,CACzC,QAAQ,EAAE,MAAM,EAChB,WAAW,EAAE,MAAM,EACnB,QAAQ,EAAE,MAAM,EAChB,MAAM,EAAE,MAAM,EACd,OAAO,GAAE,sBAA2B,GACnC;IAAE,OAAO,EAAE,kBAAkB,CAAC;IAAC,IAAI,EAAE,IAAI,CAAA;CAAE,CAkC7C"}
+{"version":3,"file":"p2id.d.ts","sourceRoot":"","sources":["../../src/transaction/p2id.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,kBAAkB,EAAE,IAAI,EAAE,MAAM,sBAAsB,CAAC;AACrE,OAAO,EAML,IAAI,EAOJ,QAAQ,EAGT,MAAM,sBAAsB,CAAC;AAC9B,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,kBAAkB,CAAC;AAGxD,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,cAAc,CAAC;AACrD,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,sBAAsB,CAAC;AAG/D;;;;GAIG;AACH,MAAM,WAAW,kBAAkB;IACjC,sEAAsE;IACtE,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,sEAAsE;IACtE,cAAc,CAAC,EAAE,MAAM,CAAC;CACzB;AAED,MAAM,WAAW,sBAAuB,SAAQ,gBAAgB,EAAE,kBAAkB;IAClF,qEAAqE;IACrE,QAAQ,CAAC,EAAE,QAAQ,CAAC;CACrB;AAED;;;;;GAKG;AACH,wBAAgB,iBAAiB,CAAC,KAAK,EAAE,MAAM,GAAG,SAAS,GAAG,QAAQ,CAUrE;AAED;;;GAGG;AACH,wBAAgB,sBAAsB,CAAC,QAAQ,EAAE,QAAQ,GAAG,SAAS,GAAG,kBAAkB,GAAG,SAAS,CAErG;AAED,wBAAgB,sBAAsB,CAAC,IAAI,EAAE,IAAI,GAAG,IAAI,CAMvD;AAiED;;;;;GAKG;AACH,wBAAgB,yBAAyB,CACvC,QAAQ,EAAE,MAAM,EAChB,WAAW,EAAE,MAAM,EACnB,QAAQ,EAAE,MAAM,EAChB,MAAM,EAAE,MAAM,EACd,QAAQ,EAAE,QAAQ,EAClB,OAAO,EAAE,MAAM,EACf,OAAO,GAAE,kBAAuB,GAC/B,IAAI,CASN;AAED,wBAAsB,2BAA2B,CAC/C,MAAM,EAAE,eAAe,EACvB,QAAQ,EAAE,MAAM,EAChB,WAAW,EAAE,MAAM,EACnB,QAAQ,EAAE,MAAM,EAChB,MAAM,EAAE,MAAM,EACd,OAAO,GAAE,sBAA2B,GACnC,OAAO,CAAC;IAAE,OAAO,EAAE,kBAAkB,CAAC;IAAC,IAAI,EAAE,IAAI,CAAA;CAAE,CAAC,CAuBtD"}

package/dist/transaction/p2id.js

@@ -1,5 +1,5 @@
-import { AccountId, Felt, FeltArray, FungibleAsset, MidenArrays, Note, NoteAssets, NoteMetadata, NoteRecipient, NoteScript, NoteStorage, NoteTag, NoteType, Poseidon2, TransactionRequestBuilder, Word as WordType, } from '@miden-sdk/miden-sdk';
-import { randomWord } from '../utils/random.js';
+import { AccountId, Felt, FeltArray, FungibleAsset, MidenArrays, Note, NoteAssets, NoteMetadata, NoteRecipient, NoteScript, NoteStorage, NoteTag, NoteType, Poseidon2, Word as WordType, } from '@miden-sdk/miden-sdk';
+import { buildMultisigRequest, multisigRequestBuilder } from './authArgs.js';
 import { normalizeHexWord } from '../utils/encoding.js';
 import { parseP2ideHeight } from '../types/proposal.js';
 /**
@@ -33,22 +33,39 @@ export function deriveP2idSerialNumber(salt) {
         ...zeroWord.toFelts(),
     ]));
 }
+/**
+ * P2ID storage since protocol 0.17 rc.5: target account, then a two-felt salt.
+ * Zero salt is the upstream default. A secret salt hides the target from
+ * guesses against the storage commitment; this builder keeps the note
+ * deterministic in the proposal salt, which already derives the serial number.
+ */
+function p2idStorage(recipient) {
+    return [recipient.suffix(), recipient.prefix(), new Felt(0n), new Felt(0n)];
+}
+/**
+ * P2IDE storage: reclaimer (the sender), target, then reclaim and timelock
+ * heights. Zero encodes an unset height. The script requires all six items.
+ */
+function p2ideStorage(sender, recipient, reclaimHeight, timelockHeight) {
+    return [
+        sender.suffix(),
+        sender.prefix(),
+        recipient.suffix(),
+        recipient.prefix(),
+        new Felt(BigInt(reclaimHeight)),
+        new Felt(BigInt(timelockHeight)),
+    ];
+}
 function buildP2idNote(sender, recipient, noteAssets, noteType, saltHex, heights = {}) {
     const salt = WordType.fromHex(normalizeHexWord(saltHex));
     const serialNum = deriveP2idSerialNumber(salt);
     const reclaimHeight = parseP2ideHeight('reclaimHeight', heights.reclaimHeight);
     const timelockHeight = parseP2ideHeight('timelockHeight', heights.timelockHeight);
     const isP2ide = reclaimHeight !== undefined || timelockHeight !== undefined;
-    // P2IDE storage layout (miden-standards `P2ideNoteStorage`): the P2ID
-    // storage plus reclaim/timelock heights as felts, 0 encoding "unset".
     const noteScript = isP2ide ? NoteScript.p2ide() : NoteScript.p2id();
-    const storageFelts = [
-        recipient.suffix(),
-        recipient.prefix(),
-    ];
-    if (isP2ide) {
-        storageFelts.push(new Felt(BigInt(reclaimHeight ?? 0)), new Felt(BigInt(timelockHeight ?? 0)));
-    }
+    const storageFelts = isP2ide
+        ? p2ideStorage(sender, recipient, reclaimHeight ?? 0, timelockHeight ?? 0)
+        : p2idStorage(recipient);
     const noteStorage = new NoteStorage(new FeltArray(storageFelts));
     const noteRecipient = new NoteRecipient(serialNum, noteScript, noteStorage);
     const noteTag = NoteTag.withAccountTarget(recipient);
@@ -69,24 +86,16 @@ export function buildP2idNoteFromMetadata(senderId, recipientId, faucetId, amoun
     const noteAssets = new NoteAssets([asset]);
     return buildP2idNote(sender, recipient, noteAssets, noteType, saltHex, heights);
 }
-export function buildP2idTransactionRequest(senderId, recipientId, faucetId, amount, options = {}) {
-    const authSaltHex = options.salt ? options.salt.toHex() : randomWord().toHex();
-    const note = buildP2idNoteFromMetadata(senderId, recipientId, faucetId, amount, options.noteType ?? NoteType.Public, authSaltHex, { reclaimHeight: options.reclaimHeight, timelockHeight: options.timelockHeight });
-    const outputNotes = new MidenArrays.NoteArray([note]);
-    const authSaltForBuilder = WordType.fromHex(normalizeHexWord(authSaltHex));
-    let txBuilder = new TransactionRequestBuilder();
-    txBuilder = txBuilder.withOwnOutputNotes(outputNotes);
-    txBuilder = txBuilder.withFeeConversionSalt(authSaltForBuilder);
-    // Borrows rather than consumes: the glue passes `__wbg_ptr` without taking it,
-    // so the handle stays ours to release once the builder has read it.
-    authSaltForBuilder.free?.();
+export async function buildP2idTransactionRequest(client, senderId, recipientId, faucetId, amount, options = {}) {
+    const { builder, saltHex } = await multisigRequestBuilder(client, {
+        ...options,
+        accountId: senderId,
+    });
+    const note = buildP2idNoteFromMetadata(senderId, recipientId, faucetId, amount, options.noteType ?? NoteType.Public, saltHex, { reclaimHeight: options.reclaimHeight, timelockHeight: options.timelockHeight });
+    let txBuilder = builder.withOwnOutputNotes(new MidenArrays.NoteArray([note]));
     if (options.signatureAdviceMap) {
         txBuilder = txBuilder.extendAdviceMap(options.signatureAdviceMap);
     }
-    const authSaltForReturn = WordType.fromHex(normalizeHexWord(authSaltHex));
-    return {
-        request: txBuilder.build(),
-        salt: authSaltForReturn,
-    };
+    return buildMultisigRequest(txBuilder, saltHex, senderId);
 }
 //# sourceMappingURL=p2id.js.map

package/dist/transaction/p2id.js.map

@@ -1 +1 @@
-{"version":3,"file":"p2id.js","sourceRoot":"","sources":["../../src/transaction/p2id.ts"],"names":[],"mappings":"AACA,OAAO,EACL,SAAS,EACT,IAAI,EACJ,SAAS,EACT,aAAa,EACb,WAAW,EACX,IAAI,EACJ,UAAU,EACV,YAAY,EACZ,aAAa,EACb,UAAU,EACV,WAAW,EACX,OAAO,EACP,QAAQ,EACR,SAAS,EACT,yBAAyB,EACzB,IAAI,IAAI,QAAQ,GACjB,MAAM,sBAAsB,CAAC;AAC9B,OAAO,EAAE,UAAU,EAAE,MAAM,oBAAoB,CAAC;AAChD,OAAO,EAAE,gBAAgB,EAAE,MAAM,sBAAsB,CAAC;AAGxD,OAAO,EAAE,gBAAgB,EAAE,MAAM,sBAAsB,CAAC;AAmBxD;;;;;GAKG;AACH,MAAM,UAAU,iBAAiB,CAAC,KAAyB;IACzD,QAAQ,KAAK,EAAE,CAAC;QACd,KAAK,SAAS,CAAC;QACf,KAAK,QAAQ;YACX,OAAO,QAAQ,CAAC,MAAM,CAAC;QACzB,KAAK,SAAS;YACZ,OAAO,QAAQ,CAAC,OAAO,CAAC;QAC1B;YACE,MAAM,IAAI,KAAK,CAAC,kCAAkC,KAAK,mCAAmC,CAAC,CAAC;IAChG,CAAC;AACH,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,sBAAsB,CAAC,QAA8B;IACnE,OAAO,QAAQ,KAAK,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC;AAC/D,CAAC;AAED,MAAM,UAAU,sBAAsB,CAAC,IAAU;IAC/C,MAAM,QAAQ,GAAG,QAAQ,CAAC,OAAO,CAAC,KAAK,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC;IAC1D,OAAO,SAAS,CAAC,YAAY,CAAC,IAAI,SAAS,CAAC;QAC1C,GAAG,IAAI,CAAC,OAAO,EAAE;QACjB,GAAG,QAAQ,CAAC,OAAO,EAAE;KACtB,CAAC,CAAC,CAAC;AACN,CAAC;AAED,SAAS,aAAa,CACpB,MAAiB,EACjB,SAAoB,EACpB,UAAsB,EACtB,QAAkB,EAClB,OAAe,EACf,UAA8B,EAAE;IAEhC,MAAM,IAAI,GAAG,QAAQ,CAAC,OAAO,CAAC,gBAAgB,CAAC,OAAO,CAAC,CAAC,CAAC;IACzD,MAAM,SAAS,GAAG,sBAAsB,CAAC,IAAI,CAAC,CAAC;IAE/C,MAAM,aAAa,GAAG,gBAAgB,CAAC,eAAe,EAAE,OAAO,CAAC,aAAa,CAAC,CAAC;IAC/E,MAAM,cAAc,GAAG,gBAAgB,CAAC,gBAAgB,EAAE,OAAO,CAAC,cAAc,CAAC,CAAC;IAClF,MAAM,OAAO,GAAG,aAAa,KAAK,SAAS,IAAI,cAAc,KAAK,SAAS,CAAC;IAE5E,sEAAsE;IACtE,sEAAsE;IACtE,MAAM,UAAU,GAAG,OAAO,CAAC,CAAC,CAAC,UAAU,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,UAAU,CAAC,IAAI,EAAE,CAAC;IACpE,MAAM,YAAY,GAAG;QACnB,SAAS,CAAC,MAAM,EAAE;QAClB,SAAS,CAAC,MAAM,EAAE;KACnB,CAAC;IACF,IAAI,OAAO,EAAE,CAAC;QACZ,YAAY,CAAC,IAAI,CACf,IAAI,IAAI,CAAC,MAAM,CAAC,aAAa,IAAI,CAAC,CAAC,CAAC,EACpC,IAAI,IAAI,CAAC,MAAM,CAAC,cAAc,IAAI,CAAC,CAAC,CAAC,CACtC,CAAC;IACJ,CAAC;IACD,MAAM,WAAW,GAAG,IAAI,WAAW,CAAC,IAAI,SAAS,CAAC,YAAY,CAAC,CAAC,CAAC;IAEjE,MAAM,aAAa,GAAG,IAAI,aAAa,CAAC,SAAS,EAAE,UAAU,EAAE,WAAW,CAAC,CAAC;IAC5E,MAAM,OAAO,GAAG,OAAO,CAAC,iBAAiB,CAAC,SAAS,CAAC,CAAC;IAErD,MAAM,YAAY,GAAG,IAAI,YAAY,CACnC,MAAM,EACN,QAAQ,EACR,OAAO,CACR,CAAC;IAEF,OAAO,IAAI,IAAI,CAAC,UAAU,EAAE,YAAY,EAAE,aAAa,CAAC,CAAC;AAC3D,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,yBAAyB,CACvC,QAAgB,EAChB,WAAmB,EACnB,QAAgB,EAChB,MAAc,EACd,QAAkB,EAClB,OAAe,EACf,UAA8B,EAAE;IAEhC,MAAM,MAAM,GAAG,SAAS,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;IAC3C,MAAM,SAAS,GAAG,SAAS,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC;IACjD,MAAM,MAAM,GAAG,SAAS,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;IAE3C,MAAM,KAAK,GAAG,IAAI,aAAa,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAChD,MAAM,UAAU,GAAG,IAAI,UAAU,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC;IAE3C,OAAO,aAAa,CAAC,MAAM,EAAE,SAAS,EAAE,UAAU,EAAE,QAAQ,EAAE,OAAO,EAAE,OAAO,CAAC,CAAC;AAClF,CAAC;AAED,MAAM,UAAU,2BAA2B,CACzC,QAAgB,EAChB,WAAmB,EACnB,QAAgB,EAChB,MAAc,EACd,UAAkC,EAAE;IAEpC,MAAM,WAAW,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,UAAU,EAAE,CAAC,KAAK,EAAE,CAAC;IAE/E,MAAM,IAAI,GAAG,yBAAyB,CACpC,QAAQ,EACR,WAAW,EACX,QAAQ,EACR,MAAM,EACN,OAAO,CAAC,QAAQ,IAAI,QAAQ,CAAC,MAAM,EACnC,WAAW,EACX,EAAE,aAAa,EAAE,OAAO,CAAC,aAAa,EAAE,cAAc,EAAE,OAAO,CAAC,cAAc,EAAE,CACjF,CAAC;IAEF,MAAM,WAAW,GAAG,IAAI,WAAW,CAAC,SAAS,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC;IAEtD,MAAM,kBAAkB,GAAG,QAAQ,CAAC,OAAO,CAAC,gBAAgB,CAAC,WAAW,CAAC,CAAC,CAAC;IAE3E,IAAI,SAAS,GAAG,IAAI,yBAAyB,EAAE,CAAC;IAChD,SAAS,GAAG,SAAS,CAAC,kBAAkB,CAAC,WAAW,CAAC,CAAC;IACtD,SAAS,GAAG,SAAS,CAAC,qBAAqB,CAAC,kBAAkB,CAAC,CAAC;IAChE,+EAA+E;IAC/E,oEAAoE;IACpE,kBAAkB,CAAC,IAAI,EAAE,EAAE,CAAC;IAE5B,IAAI,OAAO,CAAC,kBAAkB,EAAE,CAAC;QAC/B,SAAS,GAAG,SAAS,CAAC,eAAe,CAAC,OAAO,CAAC,kBAAkB,CAAC,CAAC;IACpE,CAAC;IAED,MAAM,iBAAiB,GAAG,QAAQ,CAAC,OAAO,CAAC,gBAAgB,CAAC,WAAW,CAAC,CAAC,CAAC;IAE1E,OAAO;QACL,OAAO,EAAE,SAAS,CAAC,KAAK,EAAE;QAC1B,IAAI,EAAE,iBAAiB;KACxB,CAAC;AACJ,CAAC"}
+{"version":3,"file":"p2id.js","sourceRoot":"","sources":["../../src/transaction/p2id.ts"],"names":[],"mappings":"AACA,OAAO,EACL,SAAS,EACT,IAAI,EACJ,SAAS,EACT,aAAa,EACb,WAAW,EACX,IAAI,EACJ,UAAU,EACV,YAAY,EACZ,aAAa,EACb,UAAU,EACV,WAAW,EACX,OAAO,EACP,QAAQ,EACR,SAAS,EACT,IAAI,IAAI,QAAQ,GACjB,MAAM,sBAAsB,CAAC;AAE9B,OAAO,EAAE,oBAAoB,EAAE,sBAAsB,EAAE,MAAM,eAAe,CAAC;AAC7E,OAAO,EAAE,gBAAgB,EAAE,MAAM,sBAAsB,CAAC;AAGxD,OAAO,EAAE,gBAAgB,EAAE,MAAM,sBAAsB,CAAC;AAmBxD;;;;;GAKG;AACH,MAAM,UAAU,iBAAiB,CAAC,KAAyB;IACzD,QAAQ,KAAK,EAAE,CAAC;QACd,KAAK,SAAS,CAAC;QACf,KAAK,QAAQ;YACX,OAAO,QAAQ,CAAC,MAAM,CAAC;QACzB,KAAK,SAAS;YACZ,OAAO,QAAQ,CAAC,OAAO,CAAC;QAC1B;YACE,MAAM,IAAI,KAAK,CAAC,kCAAkC,KAAK,mCAAmC,CAAC,CAAC;IAChG,CAAC;AACH,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,sBAAsB,CAAC,QAA8B;IACnE,OAAO,QAAQ,KAAK,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC;AAC/D,CAAC;AAED,MAAM,UAAU,sBAAsB,CAAC,IAAU;IAC/C,MAAM,QAAQ,GAAG,QAAQ,CAAC,OAAO,CAAC,KAAK,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC;IAC1D,OAAO,SAAS,CAAC,YAAY,CAAC,IAAI,SAAS,CAAC;QAC1C,GAAG,IAAI,CAAC,OAAO,EAAE;QACjB,GAAG,QAAQ,CAAC,OAAO,EAAE;KACtB,CAAC,CAAC,CAAC;AACN,CAAC;AAED;;;;;GAKG;AACH,SAAS,WAAW,CAAC,SAAoB;IACvC,OAAO,CAAC,SAAS,CAAC,MAAM,EAAE,EAAE,SAAS,CAAC,MAAM,EAAE,EAAE,IAAI,IAAI,CAAC,EAAE,CAAC,EAAE,IAAI,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC;AAC9E,CAAC;AAED;;;GAGG;AACH,SAAS,YAAY,CACnB,MAAiB,EACjB,SAAoB,EACpB,aAAqB,EACrB,cAAsB;IAEtB,OAAO;QACL,MAAM,CAAC,MAAM,EAAE;QACf,MAAM,CAAC,MAAM,EAAE;QACf,SAAS,CAAC,MAAM,EAAE;QAClB,SAAS,CAAC,MAAM,EAAE;QAClB,IAAI,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC;QAC/B,IAAI,IAAI,CAAC,MAAM,CAAC,cAAc,CAAC,CAAC;KACjC,CAAC;AACJ,CAAC;AAED,SAAS,aAAa,CACpB,MAAiB,EACjB,SAAoB,EACpB,UAAsB,EACtB,QAAkB,EAClB,OAAe,EACf,UAA8B,EAAE;IAEhC,MAAM,IAAI,GAAG,QAAQ,CAAC,OAAO,CAAC,gBAAgB,CAAC,OAAO,CAAC,CAAC,CAAC;IACzD,MAAM,SAAS,GAAG,sBAAsB,CAAC,IAAI,CAAC,CAAC;IAE/C,MAAM,aAAa,GAAG,gBAAgB,CAAC,eAAe,EAAE,OAAO,CAAC,aAAa,CAAC,CAAC;IAC/E,MAAM,cAAc,GAAG,gBAAgB,CAAC,gBAAgB,EAAE,OAAO,CAAC,cAAc,CAAC,CAAC;IAClF,MAAM,OAAO,GAAG,aAAa,KAAK,SAAS,IAAI,cAAc,KAAK,SAAS,CAAC;IAE5E,MAAM,UAAU,GAAG,OAAO,CAAC,CAAC,CAAC,UAAU,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,UAAU,CAAC,IAAI,EAAE,CAAC;IACpE,MAAM,YAAY,GAAG,OAAO;QAC1B,CAAC,CAAC,YAAY,CAAC,MAAM,EAAE,SAAS,EAAE,aAAa,IAAI,CAAC,EAAE,cAAc,IAAI,CAAC,CAAC;QAC1E,CAAC,CAAC,WAAW,CAAC,SAAS,CAAC,CAAC;IAC3B,MAAM,WAAW,GAAG,IAAI,WAAW,CAAC,IAAI,SAAS,CAAC,YAAY,CAAC,CAAC,CAAC;IAEjE,MAAM,aAAa,GAAG,IAAI,aAAa,CAAC,SAAS,EAAE,UAAU,EAAE,WAAW,CAAC,CAAC;IAC5E,MAAM,OAAO,GAAG,OAAO,CAAC,iBAAiB,CAAC,SAAS,CAAC,CAAC;IAErD,MAAM,YAAY,GAAG,IAAI,YAAY,CACnC,MAAM,EACN,QAAQ,EACR,OAAO,CACR,CAAC;IAEF,OAAO,IAAI,IAAI,CAAC,UAAU,EAAE,YAAY,EAAE,aAAa,CAAC,CAAC;AAC3D,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,yBAAyB,CACvC,QAAgB,EAChB,WAAmB,EACnB,QAAgB,EAChB,MAAc,EACd,QAAkB,EAClB,OAAe,EACf,UAA8B,EAAE;IAEhC,MAAM,MAAM,GAAG,SAAS,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;IAC3C,MAAM,SAAS,GAAG,SAAS,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC;IACjD,MAAM,MAAM,GAAG,SAAS,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;IAE3C,MAAM,KAAK,GAAG,IAAI,aAAa,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAChD,MAAM,UAAU,GAAG,IAAI,UAAU,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC;IAE3C,OAAO,aAAa,CAAC,MAAM,EAAE,SAAS,EAAE,UAAU,EAAE,QAAQ,EAAE,OAAO,EAAE,OAAO,CAAC,CAAC;AAClF,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,2BAA2B,CAC/C,MAAuB,EACvB,QAAgB,EAChB,WAAmB,EACnB,QAAgB,EAChB,MAAc,EACd,UAAkC,EAAE;IAEpC,MAAM,EAAE,OAAO,EAAE,OAAO,EAAE,GAAG,MAAM,sBAAsB,CAAC,MAAM,EAAE;QAChE,GAAG,OAAO;QACV,SAAS,EAAE,QAAQ;KACpB,CAAC,CAAC;IAEH,MAAM,IAAI,GAAG,yBAAyB,CACpC,QAAQ,EACR,WAAW,EACX,QAAQ,EACR,MAAM,EACN,OAAO,CAAC,QAAQ,IAAI,QAAQ,CAAC,MAAM,EACnC,OAAO,EACP,EAAE,aAAa,EAAE,OAAO,CAAC,aAAa,EAAE,cAAc,EAAE,OAAO,CAAC,cAAc,EAAE,CACjF,CAAC;IAEF,IAAI,SAAS,GAAG,OAAO,CAAC,kBAAkB,CAAC,IAAI,WAAW,CAAC,SAAS,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAE9E,IAAI,OAAO,CAAC,kBAAkB,EAAE,CAAC;QAC/B,SAAS,GAAG,SAAS,CAAC,eAAe,CAAC,OAAO,CAAC,kBAAkB,CAAC,CAAC;IACpE,CAAC;IAED,OAAO,oBAAoB,CAAC,SAAS,EAAE,OAAO,EAAE,QAAQ,CAAC,CAAC;AAC5D,CAAC"}

package/dist/transaction/summary.d.ts

@@ -1,12 +1,31 @@
 import type { MidenClient, TransactionRequest, TransactionSummary, WasmWebClient } from '@miden-sdk/miden-sdk';
 import { ChainAnchor, Word } from '@miden-sdk/miden-sdk';
+/**
+ * The summary binds the block the request's auth args name, and the anchor
+ * the store's sync height at capture. A sync landing between the build and the
+ * capture leaves them one block apart, and every cosigner's anchor check would
+ * then fail on a proposal nothing else is wrong with. Caught here, before the
+ * proposal is pushed, so the proposer rebuilds instead.
+ */
+export declare class SummaryAnchorMismatchError extends Error {
+    readonly retryable = true;
+    constructor(details: {
+        anchorCommitmentHex: string;
+        summaryBlockCommitmentHex: string;
+    });
+}
 /**
  * Captures a `ChainAnchor` for the request at the current sync height and
  * executes the transaction against it to obtain the summary awaiting
  * authorization. The anchor is returned alongside the summary so the proposer
  * can ship it with the signed data; cosigners and the executor then reproduce
- * the summary — which binds the reference block commitment since protocol
- * 0.16 — with {@link executeForSummaryAt} regardless of their own sync height.
+ * the summary with {@link executeForSummaryAt} regardless of their own sync
+ * height.
+ *
+ * The request's auth args bind the block its summary commits to, and this
+ * package pins that block to the anchor: a proposer builds at the sync height
+ * the anchor is captured at, and a rebuild passes the anchor's block number.
+ * The check below is what makes the first half hold.
  */
 export declare function executeForSummary(client: MidenClient, accountId: string, txRequest: TransactionRequest, midenRpcEndpoint: string): Promise<{
     summary: TransactionSummary;
@@ -18,7 +37,7 @@ export declare function executeForSummary(client: WasmWebClient, accountId: stri
 }>;
 /**
  * Executes a transaction at the given `ChainAnchor`'s reference block to
- * obtain the summary awaiting authorization — the anchored counterpart of
+ * obtain the summary awaiting authorization: the anchored counterpart of
  * {@link executeForSummary} for cosigners and executors holding a proposal's
  * anchor.
  */
@@ -36,18 +55,25 @@ export declare function chainAnchorToBase64(anchor: ChainAnchor): string;
  */
 export declare function chainAnchorFromBase64(anchorBase64: string): ChainAnchor;
 /**
- * Reads the auth args back out of a transaction summary.
- *
- * Since miden-protocol 0.16-rc the summary binds seven user-defined elements
- * instead of a dedicated salt word. The guarded-multisig auth component zeroes
- * the leading three and passes the auth args as the trailing four, so the auth
- * args are the tail of `userParams()`.
+ * The block a proposal's `chainAnchor` names, which is the block its summary
+ * binds: a custom producer rebuilds its request at this block. Decodes the
+ * anchor for the one number and frees it.
+ */
+export declare function chainAnchorBlockNum(anchorBase64: string): number;
+/**
+ * Reads the salt a multisig transaction summary binds.
  *
- * This is the auth-arg word, *not* the proposal salt. When the request declares
- * a fee conversion salt, miden-client uses it to commit the native conversion
- * info under `hash(CONVERSION_INFO || SALT)`. That commitment is not invertible
- * to the salt. Keep the salt alongside the proposal — `ProposalMetadata.saltHex`
- * — rather than trying to recover it from the summary.
+ * Since protocol 0.17 the multisig auth components bind the salt itself into
+ * the summary's user params rather than a commitment derived from it, so the
+ * value cosigners signed over is readable again. A proposal still carries the
+ * salt in its metadata, because a request has to be rebuilt before any summary
+ * exists; this reader is the cross-check that the two agree.
+ */
+export declare function summarySalt(summary: TransactionSummary): Word;
+/**
+ * Reads the block at which the approvers' signatures stop authorizing the
+ * transaction, or `undefined` for an approval that never expires, which is
+ * what this package's builders produce.
  */
-export declare function summaryAuthArg(summary: TransactionSummary): Word;
+export declare function summaryApprovalExpirationBlockNum(summary: TransactionSummary): number | undefined;
 //# sourceMappingURL=summary.d.ts.map

package/dist/transaction/summary.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"summary.d.ts","sourceRoot":"","sources":["../../src/transaction/summary.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EACV,WAAW,EACX,kBAAkB,EAClB,kBAAkB,EAClB,aAAa,EACd,MAAM,sBAAsB,CAAC;AAC9B,OAAO,EAAa,WAAW,EAAE,IAAI,EAAE,MAAM,sBAAsB,CAAC;AAWpE;;;;;;;GAOG;AACH,wBAAgB,iBAAiB,CAC/B,MAAM,EAAE,WAAW,EACnB,SAAS,EAAE,MAAM,EACjB,SAAS,EAAE,kBAAkB,EAC7B,gBAAgB,EAAE,MAAM,GACvB,OAAO,CAAC;IAAE,OAAO,EAAE,kBAAkB,CAAC;IAAC,MAAM,EAAE,WAAW,CAAA;CAAE,CAAC,CAAC;AACjE,wBAAgB,iBAAiB,CAC/B,MAAM,EAAE,aAAa,EACrB,SAAS,EAAE,MAAM,EACjB,SAAS,EAAE,kBAAkB,EAC7B,gBAAgB,CAAC,EAAE,MAAM,GACxB,OAAO,CAAC;IAAE,OAAO,EAAE,kBAAkB,CAAC;IAAC,MAAM,EAAE,WAAW,CAAA;CAAE,CAAC,CAAC;AAcjE;;;;;GAKG;AACH,wBAAgB,mBAAmB,CACjC,MAAM,EAAE,WAAW,EACnB,SAAS,EAAE,MAAM,EACjB,SAAS,EAAE,kBAAkB,EAC7B,MAAM,EAAE,WAAW,EACnB,gBAAgB,EAAE,MAAM,GACvB,OAAO,CAAC,kBAAkB,CAAC,CAAC;AAC/B,wBAAgB,mBAAmB,CACjC,MAAM,EAAE,aAAa,EACrB,SAAS,EAAE,MAAM,EACjB,SAAS,EAAE,kBAAkB,EAC7B,MAAM,EAAE,WAAW,EACnB,gBAAgB,CAAC,EAAE,MAAM,GACxB,OAAO,CAAC,kBAAkB,CAAC,CAAC;AAa/B;;GAEG;AACH,wBAAgB,mBAAmB,CAAC,MAAM,EAAE,WAAW,GAAG,MAAM,CAE/D;AAED;;;;;GAKG;AACH,wBAAgB,qBAAqB,CAAC,YAAY,EAAE,MAAM,GAAG,WAAW,CAEvE;AAED;;;;;;;;;;;;;GAaG;AACH,wBAAgB,cAAc,CAAC,OAAO,EAAE,kBAAkB,GAAG,IAAI,CAEhE"}
+{"version":3,"file":"summary.d.ts","sourceRoot":"","sources":["../../src/transaction/summary.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EACV,WAAW,EACX,kBAAkB,EAClB,kBAAkB,EAClB,aAAa,EACd,MAAM,sBAAsB,CAAC;AAC9B,OAAO,EAAa,WAAW,EAAE,IAAI,EAAE,MAAM,sBAAsB,CAAC;AAYpE;;;;;;GAMG;AACH,qBAAa,0BAA2B,SAAQ,KAAK;IACnD,QAAQ,CAAC,SAAS,QAAQ;gBAEd,OAAO,EAAE;QAAE,mBAAmB,EAAE,MAAM,CAAC;QAAC,yBAAyB,EAAE,MAAM,CAAA;KAAE;CAQxF;AAED;;;;;;;;;;;;GAYG;AACH,wBAAgB,iBAAiB,CAC/B,MAAM,EAAE,WAAW,EACnB,SAAS,EAAE,MAAM,EACjB,SAAS,EAAE,kBAAkB,EAC7B,gBAAgB,EAAE,MAAM,GACvB,OAAO,CAAC;IAAE,OAAO,EAAE,kBAAkB,CAAC;IAAC,MAAM,EAAE,WAAW,CAAA;CAAE,CAAC,CAAC;AACjE,wBAAgB,iBAAiB,CAC/B,MAAM,EAAE,aAAa,EACrB,SAAS,EAAE,MAAM,EACjB,SAAS,EAAE,kBAAkB,EAC7B,gBAAgB,CAAC,EAAE,MAAM,GACxB,OAAO,CAAC;IAAE,OAAO,EAAE,kBAAkB,CAAC;IAAC,MAAM,EAAE,WAAW,CAAA;CAAE,CAAC,CAAC;AA+BjE;;;;;GAKG;AACH,wBAAgB,mBAAmB,CACjC,MAAM,EAAE,WAAW,EACnB,SAAS,EAAE,MAAM,EACjB,SAAS,EAAE,kBAAkB,EAC7B,MAAM,EAAE,WAAW,EACnB,gBAAgB,EAAE,MAAM,GACvB,OAAO,CAAC,kBAAkB,CAAC,CAAC;AAC/B,wBAAgB,mBAAmB,CACjC,MAAM,EAAE,aAAa,EACrB,SAAS,EAAE,MAAM,EACjB,SAAS,EAAE,kBAAkB,EAC7B,MAAM,EAAE,WAAW,EACnB,gBAAgB,CAAC,EAAE,MAAM,GACxB,OAAO,CAAC,kBAAkB,CAAC,CAAC;AAa/B;;GAEG;AACH,wBAAgB,mBAAmB,CAAC,MAAM,EAAE,WAAW,GAAG,MAAM,CAE/D;AAED;;;;;GAKG;AACH,wBAAgB,qBAAqB,CAAC,YAAY,EAAE,MAAM,GAAG,WAAW,CAEvE;AAED;;;;GAIG;AACH,wBAAgB,mBAAmB,CAAC,YAAY,EAAE,MAAM,GAAG,MAAM,CAOhE;AAED;;;;;;;;GAQG;AACH,wBAAgB,WAAW,CAAC,OAAO,EAAE,kBAAkB,GAAG,IAAI,CAI7D;AAED;;;;GAIG;AACH,wBAAgB,iCAAiC,CAAC,OAAO,EAAE,kBAAkB,GAAG,MAAM,GAAG,SAAS,CAGjG"}

package/dist/transaction/summary.js

@@ -1,17 +1,51 @@
 import { AccountId, ChainAnchor, Word } from '@miden-sdk/miden-sdk';
 import { getRawMidenClient } from '../raw-client.js';
-import { base64ToUint8Array, uint8ArrayToBase64 } from '../utils/encoding.js';
+import { base64ToUint8Array, normalizeHexWord, uint8ArrayToBase64 } from '../utils/encoding.js';
 /**
- * Index of the first user param carrying the auth args. The guarded-multisig
- * auth component zeroes user params 0-2 and fills 3-6 with the auth args, matching
- * `push.0.0.0` ahead of `multisig::auth_tx` in `guarded_multisig.masm`.
+ * Layout of the six user params a multisig auth component binds into the
+ * transaction summary since protocol 0.17: the approval expiration block (or
+ * zero for an approval that never expires), a zero, then the four salt felts.
  */
-const AUTH_ARG_USER_PARAM_OFFSET = 3;
+const APPROVAL_EXPIRATION_USER_PARAM_INDEX = 0;
+const SALT_USER_PARAM_OFFSET = 2;
+/**
+ * The summary binds the block the request's auth args name, and the anchor
+ * the store's sync height at capture. A sync landing between the build and the
+ * capture leaves them one block apart, and every cosigner's anchor check would
+ * then fail on a proposal nothing else is wrong with. Caught here, before the
+ * proposal is pushed, so the proposer rebuilds instead.
+ */
+export class SummaryAnchorMismatchError extends Error {
+    retryable = true;
+    constructor(details) {
+        super(`the transaction summary binds block commitment ${details.summaryBlockCommitmentHex} but ` +
+            `the captured chain anchor is ${details.anchorCommitmentHex}; a sync landed between ` +
+            'building the request and capturing its anchor, so rebuild the request and retry');
+        this.name = 'SummaryAnchorMismatchError';
+    }
+}
 export async function executeForSummary(client, accountId, txRequest, midenRpcEndpoint) {
     const acc = AccountId.fromHex(accountId);
     const rawClient = await getRawMidenClient(client, midenRpcEndpoint);
     const anchor = await rawClient.chainAnchorForRequest(txRequest);
-    const summary = await rawClient.executeForSummaryAt(acc, txRequest, anchor);
+    let summary;
+    try {
+        summary = await rawClient.executeForSummaryAt(acc, txRequest, anchor);
+    }
+    catch (error) {
+        anchor.free();
+        throw error;
+    }
+    const anchorCommitment = anchor.commitment();
+    const summaryBlockCommitment = summary.blockCommitment();
+    const anchorCommitmentHex = normalizeHexWord(anchorCommitment.toHex());
+    const summaryBlockCommitmentHex = normalizeHexWord(summaryBlockCommitment.toHex());
+    anchorCommitment.free?.();
+    summaryBlockCommitment.free?.();
+    if (anchorCommitmentHex !== summaryBlockCommitmentHex) {
+        anchor.free();
+        throw new SummaryAnchorMismatchError({ anchorCommitmentHex, summaryBlockCommitmentHex });
+    }
     return { summary, anchor };
 }
 export async function executeForSummaryAt(client, accountId, txRequest, anchor, midenRpcEndpoint) {
@@ -35,20 +69,38 @@ export function chainAnchorFromBase64(anchorBase64) {
     return ChainAnchor.deserialize(base64ToUint8Array(anchorBase64));
 }
 /**
- * Reads the auth args back out of a transaction summary.
- *
- * Since miden-protocol 0.16-rc the summary binds seven user-defined elements
- * instead of a dedicated salt word. The guarded-multisig auth component zeroes
- * the leading three and passes the auth args as the trailing four, so the auth
- * args are the tail of `userParams()`.
+ * The block a proposal's `chainAnchor` names, which is the block its summary
+ * binds: a custom producer rebuilds its request at this block. Decodes the
+ * anchor for the one number and frees it.
+ */
+export function chainAnchorBlockNum(anchorBase64) {
+    const anchor = chainAnchorFromBase64(anchorBase64);
+    try {
+        return anchor.blockNum();
+    }
+    finally {
+        anchor.free();
+    }
+}
+/**
+ * Reads the salt a multisig transaction summary binds.
  *
- * This is the auth-arg word, *not* the proposal salt. When the request declares
- * a fee conversion salt, miden-client uses it to commit the native conversion
- * info under `hash(CONVERSION_INFO || SALT)`. That commitment is not invertible
- * to the salt. Keep the salt alongside the proposal — `ProposalMetadata.saltHex`
- * — rather than trying to recover it from the summary.
+ * Since protocol 0.17 the multisig auth components bind the salt itself into
+ * the summary's user params rather than a commitment derived from it, so the
+ * value cosigners signed over is readable again. A proposal still carries the
+ * salt in its metadata, because a request has to be rebuilt before any summary
+ * exists; this reader is the cross-check that the two agree.
+ */
+export function summarySalt(summary) {
+    return Word.newFromFelts(summary.userParams().slice(SALT_USER_PARAM_OFFSET, SALT_USER_PARAM_OFFSET + 4));
+}
+/**
+ * Reads the block at which the approvers' signatures stop authorizing the
+ * transaction, or `undefined` for an approval that never expires, which is
+ * what this package's builders produce.
  */
-export function summaryAuthArg(summary) {
-    return Word.newFromFelts(summary.userParams().slice(AUTH_ARG_USER_PARAM_OFFSET));
+export function summaryApprovalExpirationBlockNum(summary) {
+    const value = summary.userParams()[APPROVAL_EXPIRATION_USER_PARAM_INDEX].asInt();
+    return value === 0n ? undefined : Number(value);
 }
 //# sourceMappingURL=summary.js.map

package/dist/transaction/summary.js.map

@@ -1 +1 @@
-{"version":3,"file":"summary.js","sourceRoot":"","sources":["../../src/transaction/summary.ts"],"names":[],"mappings":"AAMA,OAAO,EAAE,SAAS,EAAE,WAAW,EAAE,IAAI,EAAE,MAAM,sBAAsB,CAAC;AACpE,OAAO,EAAE,iBAAiB,EAAE,MAAM,kBAAkB,CAAC;AACrD,OAAO,EAAE,kBAAkB,EAAE,kBAAkB,EAAE,MAAM,sBAAsB,CAAC;AAE9E;;;;GAIG;AACH,MAAM,0BAA0B,GAAG,CAAC,CAAC;AAsBrC,MAAM,CAAC,KAAK,UAAU,iBAAiB,CACrC,MAAmC,EACnC,SAAiB,EACjB,SAA6B,EAC7B,gBAAyB;IAEzB,MAAM,GAAG,GAAG,SAAS,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;IACzC,MAAM,SAAS,GAAG,MAAM,iBAAiB,CAAC,MAAM,EAAE,gBAAgB,CAAC,CAAC;IACpE,MAAM,MAAM,GAAG,MAAM,SAAS,CAAC,qBAAqB,CAAC,SAAS,CAAC,CAAC;IAChE,MAAM,OAAO,GAAG,MAAM,SAAS,CAAC,mBAAmB,CAAC,GAAG,EAAE,SAAS,EAAE,MAAM,CAAC,CAAC;IAC5E,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,CAAC;AAC7B,CAAC;AAsBD,MAAM,CAAC,KAAK,UAAU,mBAAmB,CACvC,MAAmC,EACnC,SAAiB,EACjB,SAA6B,EAC7B,MAAmB,EACnB,gBAAyB;IAEzB,MAAM,GAAG,GAAG,SAAS,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;IACzC,MAAM,SAAS,GAAG,MAAM,iBAAiB,CAAC,MAAM,EAAE,gBAAgB,CAAC,CAAC;IACpE,OAAO,SAAS,CAAC,mBAAmB,CAAC,GAAG,EAAE,SAAS,EAAE,MAAM,CAAC,CAAC;AAC/D,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,mBAAmB,CAAC,MAAmB;IACrD,OAAO,kBAAkB,CAAC,MAAM,CAAC,SAAS,EAAE,CAAC,CAAC;AAChD,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,qBAAqB,CAAC,YAAoB;IACxD,OAAO,WAAW,CAAC,WAAW,CAAC,kBAAkB,CAAC,YAAY,CAAC,CAAC,CAAC;AACnE,CAAC;AAED;;;;;;;;;;;;;GAaG;AACH,MAAM,UAAU,cAAc,CAAC,OAA2B;IACxD,OAAO,IAAI,CAAC,YAAY,CAAC,OAAO,CAAC,UAAU,EAAE,CAAC,KAAK,CAAC,0BAA0B,CAAC,CAAC,CAAC;AACnF,CAAC"}
+{"version":3,"file":"summary.js","sourceRoot":"","sources":["../../src/transaction/summary.ts"],"names":[],"mappings":"AAMA,OAAO,EAAE,SAAS,EAAE,WAAW,EAAE,IAAI,EAAE,MAAM,sBAAsB,CAAC;AACpE,OAAO,EAAE,iBAAiB,EAAE,MAAM,kBAAkB,CAAC;AACrD,OAAO,EAAE,kBAAkB,EAAE,gBAAgB,EAAE,kBAAkB,EAAE,MAAM,sBAAsB,CAAC;AAEhG;;;;GAIG;AACH,MAAM,oCAAoC,GAAG,CAAC,CAAC;AAC/C,MAAM,sBAAsB,GAAG,CAAC,CAAC;AAEjC;;;;;;GAMG;AACH,MAAM,OAAO,0BAA2B,SAAQ,KAAK;IAC1C,SAAS,GAAG,IAAI,CAAC;IAE1B,YAAY,OAA2E;QACrF,KAAK,CACH,kDAAkD,OAAO,CAAC,yBAAyB,OAAO;YACxF,gCAAgC,OAAO,CAAC,mBAAmB,0BAA0B;YACrF,iFAAiF,CACpF,CAAC;QACF,IAAI,CAAC,IAAI,GAAG,4BAA4B,CAAC;IAC3C,CAAC;CACF;AA2BD,MAAM,CAAC,KAAK,UAAU,iBAAiB,CACrC,MAAmC,EACnC,SAAiB,EACjB,SAA6B,EAC7B,gBAAyB;IAEzB,MAAM,GAAG,GAAG,SAAS,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;IACzC,MAAM,SAAS,GAAG,MAAM,iBAAiB,CAAC,MAAM,EAAE,gBAAgB,CAAC,CAAC;IACpE,MAAM,MAAM,GAAG,MAAM,SAAS,CAAC,qBAAqB,CAAC,SAAS,CAAC,CAAC;IAChE,IAAI,OAA2B,CAAC;IAChC,IAAI,CAAC;QACH,OAAO,GAAG,MAAM,SAAS,CAAC,mBAAmB,CAAC,GAAG,EAAE,SAAS,EAAE,MAAM,CAAC,CAAC;IACxE,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,CAAC,IAAI,EAAE,CAAC;QACd,MAAM,KAAK,CAAC;IACd,CAAC;IAED,MAAM,gBAAgB,GAAG,MAAM,CAAC,UAAU,EAAE,CAAC;IAC7C,MAAM,sBAAsB,GAAG,OAAO,CAAC,eAAe,EAAE,CAAC;IACzD,MAAM,mBAAmB,GAAG,gBAAgB,CAAC,gBAAgB,CAAC,KAAK,EAAE,CAAC,CAAC;IACvE,MAAM,yBAAyB,GAAG,gBAAgB,CAAC,sBAAsB,CAAC,KAAK,EAAE,CAAC,CAAC;IACnF,gBAAgB,CAAC,IAAI,EAAE,EAAE,CAAC;IAC1B,sBAAsB,CAAC,IAAI,EAAE,EAAE,CAAC;IAChC,IAAI,mBAAmB,KAAK,yBAAyB,EAAE,CAAC;QACtD,MAAM,CAAC,IAAI,EAAE,CAAC;QACd,MAAM,IAAI,0BAA0B,CAAC,EAAE,mBAAmB,EAAE,yBAAyB,EAAE,CAAC,CAAC;IAC3F,CAAC;IACD,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,CAAC;AAC7B,CAAC;AAsBD,MAAM,CAAC,KAAK,UAAU,mBAAmB,CACvC,MAAmC,EACnC,SAAiB,EACjB,SAA6B,EAC7B,MAAmB,EACnB,gBAAyB;IAEzB,MAAM,GAAG,GAAG,SAAS,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;IACzC,MAAM,SAAS,GAAG,MAAM,iBAAiB,CAAC,MAAM,EAAE,gBAAgB,CAAC,CAAC;IACpE,OAAO,SAAS,CAAC,mBAAmB,CAAC,GAAG,EAAE,SAAS,EAAE,MAAM,CAAC,CAAC;AAC/D,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,mBAAmB,CAAC,MAAmB;IACrD,OAAO,kBAAkB,CAAC,MAAM,CAAC,SAAS,EAAE,CAAC,CAAC;AAChD,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,qBAAqB,CAAC,YAAoB;IACxD,OAAO,WAAW,CAAC,WAAW,CAAC,kBAAkB,CAAC,YAAY,CAAC,CAAC,CAAC;AACnE,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,mBAAmB,CAAC,YAAoB;IACtD,MAAM,MAAM,GAAG,qBAAqB,CAAC,YAAY,CAAC,CAAC;IACnD,IAAI,CAAC;QACH,OAAO,MAAM,CAAC,QAAQ,EAAE,CAAC;IAC3B,CAAC;YAAS,CAAC;QACT,MAAM,CAAC,IAAI,EAAE,CAAC;IAChB,CAAC;AACH,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,UAAU,WAAW,CAAC,OAA2B;IACrD,OAAO,IAAI,CAAC,YAAY,CACtB,OAAO,CAAC,UAAU,EAAE,CAAC,KAAK,CAAC,sBAAsB,EAAE,sBAAsB,GAAG,CAAC,CAAC,CAC/E,CAAC;AACJ,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,iCAAiC,CAAC,OAA2B;IAC3E,MAAM,KAAK,GAAG,OAAO,CAAC,UAAU,EAAE,CAAC,oCAAoC,CAAC,CAAC,KAAK,EAAE,CAAC;IACjF,OAAO,KAAK,KAAK,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AAClD,CAAC"}