@openzeppelin/miden-multisig-client 0.17.0 → 0.18.0-rc.2

package/dist/retry/classify.d.ts

@@ -6,6 +6,9 @@
  * transient-wording fallback fires only when no status-level evidence exists
  * in any link. Behavior is pinned by the cross-SDK fixture corpus.
  */
+export type StructuredEvidence = 'transient' | 'permanent' | 'indeterminate';
+export declare function httpMessageEvidence(message: string): StructuredEvidence | undefined;
+export declare function grpcMessageEvidence(message: string): StructuredEvidence | undefined;
 /**
  * Walks the error's cause chain and reports whether every piece of evidence
  * points at a transient failure. `extraTransientSignals` extends the

package/dist/retry/classify.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"classify.d.ts","sourceRoot":"","sources":["../../src/retry/classify.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAsJH;;;;;GAKG;AACH,wBAAgB,gBAAgB,CAC9B,KAAK,EAAE,OAAO,EACd,qBAAqB,GAAE,SAAS,MAAM,EAAO,GAC5C,OAAO,CAqDT"}
+{"version":3,"file":"classify.d.ts","sourceRoot":"","sources":["../../src/retry/classify.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAUH,MAAM,MAAM,kBAAkB,GAAG,WAAW,GAAG,WAAW,GAAG,eAAe,CAAC;AAiF7E,wBAAgB,mBAAmB,CAAC,OAAO,EAAE,MAAM,GAAG,kBAAkB,GAAG,SAAS,CAYnF;AAED,wBAAgB,mBAAmB,CAAC,OAAO,EAAE,MAAM,GAAG,kBAAkB,GAAG,SAAS,CAYnF;AAiCD;;;;;GAKG;AACH,wBAAgB,gBAAgB,CAC9B,KAAK,EAAE,OAAO,EACd,qBAAqB,GAAE,SAAS,MAAM,EAAO,GAC5C,OAAO,CAqDT"}

package/dist/retry/classify.js

@@ -78,7 +78,7 @@ function httpEvidence(value) {
     }
     return TRANSIENT_HTTP.has(value) ? 'transient' : 'permanent';
 }
-function httpMessageEvidence(message) {
+export function httpMessageEvidence(message) {
     let hasTransient = false;
     for (const match of message.matchAll(/(?:\bhttp(?:\s+status)?|\bstatus)(?:\s+code)?\s*:?\s*(\d{3})\b/g)) {
         const evidence = httpEvidence(Number(match[1]));
@@ -89,7 +89,7 @@ function httpMessageEvidence(message) {
     }
     return hasTransient ? 'transient' : undefined;
 }
-function grpcMessageEvidence(message) {
+export function grpcMessageEvidence(message) {
     const normalized = message.replaceAll(/[^a-z0-9]/g, '');
     let hasTransient = false;
     for (const { token, evidence } of GRPC_MESSAGE_TOKENS) {

package/dist/retry/classify.js.map

@@ -1 +1 @@
-{"version":3,"file":"classify.js","sourceRoot":"","sources":["../../src/retry/classify.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAYH,MAAM,cAAc,GAAG,IAAI,GAAG,CAAC;IAC7B,WAAW;IACX,UAAU;IACV,kBAAkB;IAClB,aAAa;IACb,mBAAmB;CACpB,CAAC,CAAC;AAEH,MAAM,cAAc,GAAG,IAAI,GAAG,CAAC;IAC7B,iBAAiB;IACjB,oBAAoB;IACpB,kBAAkB;IAClB,iBAAiB;IACjB,UAAU;IACV,eAAe;IACf,YAAY;IACZ,eAAe;IACf,SAAS;IACT,UAAU;IACV,UAAU;CACX,CAAC,CAAC;AAEH,MAAM,cAAc,GAAG,IAAI,GAAG,CAAC,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,CAAC,CAAC,CAAC;AAC1D,MAAM,kBAAkB,GAAG,IAAI,GAAG,CAAiB;IACjD,CAAC,CAAC,EAAE,IAAI,CAAC;IACT,CAAC,CAAC,EAAE,WAAW,CAAC;IAChB,CAAC,CAAC,EAAE,SAAS,CAAC;IACd,CAAC,CAAC,EAAE,iBAAiB,CAAC;IACtB,CAAC,CAAC,EAAE,kBAAkB,CAAC;IACvB,CAAC,CAAC,EAAE,UAAU,CAAC;IACf,CAAC,CAAC,EAAE,eAAe,CAAC;IACpB,CAAC,CAAC,EAAE,kBAAkB,CAAC;IACvB,CAAC,CAAC,EAAE,mBAAmB,CAAC;IACxB,CAAC,CAAC,EAAE,oBAAoB,CAAC;IACzB,CAAC,EAAE,EAAE,SAAS,CAAC;IACf,CAAC,EAAE,EAAE,YAAY,CAAC;IAClB,CAAC,EAAE,EAAE,eAAe,CAAC;IACrB,CAAC,EAAE,EAAE,UAAU,CAAC;IAChB,CAAC,EAAE,EAAE,aAAa,CAAC;IACnB,CAAC,EAAE,EAAE,UAAU,CAAC;IAChB,CAAC,EAAE,EAAE,iBAAiB,CAAC;CACxB,CAAC,CAAC;AAEH,MAAM,mBAAmB,GAAmE;IAC1F,GAAG,CAAC,GAAG,cAAc,CAAC,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,EAAE,KAAK,EAAE,WAAW,IAAI,EAAE,EAAE,QAAQ,EAAE,WAAoB,EAAE,CAAC,CAAC;IACpG,GAAG,CAAC,GAAG,cAAc,CAAC,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,EAAE,KAAK,EAAE,WAAW,IAAI,EAAE,EAAE,QAAQ,EAAE,WAAoB,EAAE,CAAC,CAAC;CACrG,CAAC;AAEF,SAAS,aAAa,CAAC,KAAc;IACnC,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QAC9B,OAAO,kBAAkB,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;IACvC,CAAC;IACD,OAAO,OAAO,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,UAAU,CAAC,SAAS,EAAE,EAAE,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC;AAC/F,CAAC;AAED,SAAS,YAAY,CAAC,KAAc;IAClC,MAAM,IAAI,GAAG,aAAa,CAAC,KAAK,CAAC,CAAC;IAClC,IAAI,IAAI,KAAK,SAAS,EAAE,CAAC;QACvB,OAAO,SAAS,CAAC;IACnB,CAAC;IACD,IAAI,cAAc,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC;QAC7B,OAAO,WAAW,CAAC;IACrB,CAAC;IACD,IAAI,cAAc,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC;QAC7B,OAAO,WAAW,CAAC;IACrB,CAAC;IACD,IAAI,IAAI,KAAK,SAAS,IAAI,IAAI,KAAK,IAAI,EAAE,CAAC;QACxC,OAAO,eAAe,CAAC;IACzB,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,SAAS,YAAY,CAAC,KAAc;IAClC,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,KAAK,CAAC,IAAI,KAAK,GAAG,GAAG,IAAI,KAAK,GAAG,GAAG,EAAE,CAAC;QACxF,OAAO,SAAS,CAAC;IACnB,CAAC;IACD,OAAO,cAAc,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,WAAW,CAAC;AAC/D,CAAC;AAED,SAAS,mBAAmB,CAAC,OAAe;IAC1C,IAAI,YAAY,GAAG,KAAK,CAAC;IACzB,KAAK,MAAM,KAAK,IAAI,OAAO,CAAC,QAAQ,CAClC,iEAAiE,CAClE,EAAE,CAAC;QACF,MAAM,QAAQ,GAAG,YAAY,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QAChD,IAAI,QAAQ,KAAK,WAAW,EAAE,CAAC;YAC7B,OAAO,WAAW,CAAC;QACrB,CAAC;QACD,YAAY,KAAK,QAAQ,KAAK,WAAW,CAAC;IAC5C,CAAC;IACD,OAAO,YAAY,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,SAAS,CAAC;AAChD,CAAC;AAED,SAAS,mBAAmB,CAAC,OAAe;IAC1C,MAAM,UAAU,GAAG,OAAO,CAAC,UAAU,CAAC,YAAY,EAAE,EAAE,CAAC,CAAC;IACxD,IAAI,YAAY,GAAG,KAAK,CAAC;IACzB,KAAK,MAAM,EAAE,KAAK,EAAE,QAAQ,EAAE,IAAI,mBAAmB,EAAE,CAAC;QACtD,IAAI,UAAU,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;YAC/B,IAAI,QAAQ,KAAK,WAAW,EAAE,CAAC;gBAC7B,OAAO,WAAW,CAAC;YACrB,CAAC;YACD,YAAY,KAAK,QAAQ,KAAK,WAAW,CAAC;QAC5C,CAAC;IACH,CAAC;IACD,OAAO,YAAY,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,SAAS,CAAC;AAChD,CAAC;AAED;;;;GAIG;AACH,SAAS,kBAAkB,CAAC,OAAe;IACzC,OAAO;QACL,WAAW;QACX,UAAU;QACV,mBAAmB;QACnB,SAAS;QACT,aAAa;QACb,oBAAoB;QACpB,iBAAiB;QACjB,mBAAmB;QACnB,cAAc;QACd,YAAY;QACZ,aAAa;QACb,qBAAqB;QACrB,iBAAiB;QACjB,aAAa;QACb,YAAY;QACZ,kBAAkB;QAClB,aAAa;KACd,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC;AAC/C,CAAC;AAED,SAAS,QAAQ,CAAC,KAAc;IAC9B,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,CAAC,CAAC,CAAC,KAAoB,CAAC,CAAC,CAAC,SAAS,CAAC;AACxF,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,gBAAgB,CAC9B,KAAc,EACd,wBAA2C,EAAE;IAE7C,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAC;IAC/B,MAAM,QAAQ,GAAa,EAAE,CAAC;IAC9B,IAAI,YAAY,GAAG,KAAK,CAAC;IACzB,IAAI,YAAY,GAAG,KAAK,CAAC;IACzB,IAAI,OAAO,GAAY,KAAK,CAAC;IAE7B,MAAM,aAAa,GAAG,CAAC,OAAe,EAAQ,EAAE;QAC9C,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QACvB,KAAK,MAAM,QAAQ,IAAI,CAAC,mBAAmB,CAAC,OAAO,CAAC,EAAE,mBAAmB,CAAC,OAAO,CAAC,CAAC,EAAE,CAAC;YACpF,YAAY,KAAK,QAAQ,KAAK,WAAW,CAAC;YAC1C,YAAY,KAAK,QAAQ,KAAK,WAAW,CAAC;QAC5C,CAAC;IACH,CAAC,CAAC;IAEF,OAAO,OAAO,KAAK,SAAS,IAAI,OAAO,KAAK,IAAI,EAAE,CAAC;QACjD,MAAM,MAAM,GAAG,QAAQ,CAAC,OAAO,CAAC,CAAC;QACjC,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;YACzB,IAAI,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC;gBACrB,MAAM;YACR,CAAC;YACD,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;YACjB,KAAK,MAAM,QAAQ,IAAI;gBACrB,YAAY,CAAC,MAAM,CAAC,IAAI,CAAC;gBACzB,YAAY,CAAC,MAAM,CAAC,MAAM,CAAC;gBAC3B,YAAY,CAAC,MAAM,CAAC,UAAU,CAAC;aAChC,EAAE,CAAC;gBACF,YAAY,KAAK,QAAQ,KAAK,WAAW,CAAC;gBAC1C,YAAY,KAAK,QAAQ,KAAK,WAAW,CAAC;YAC5C,CAAC;YACD,aAAa,CACX,OAAO,MAAM,CAAC,OAAO,KAAK,QAAQ;gBAChC,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,WAAW,EAAE;gBAC9B,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,WAAW,EAAE,CAClC,CAAC;YACF,OAAO,GAAG,MAAM,CAAC,KAAK,CAAC;QACzB,CAAC;aAAM,CAAC;YACN,aAAa,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC;YAC7C,MAAM;QACR,CAAC;IACH,CAAC;IAED,IAAI,YAAY,EAAE,CAAC;QACjB,OAAO,KAAK,CAAC;IACf,CAAC;IACD,IAAI,YAAY,EAAE,CAAC;QACjB,OAAO,IAAI,CAAC;IACd,CAAC;IACD,OAAO,QAAQ,CAAC,IAAI,CAClB,CAAC,OAAO,EAAE,EAAE,CACV,kBAAkB,CAAC,OAAO,CAAC;QAC3B,qBAAqB,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CACnE,CAAC;AACJ,CAAC"}
+{"version":3,"file":"classify.js","sourceRoot":"","sources":["../../src/retry/classify.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAYH,MAAM,cAAc,GAAG,IAAI,GAAG,CAAC;IAC7B,WAAW;IACX,UAAU;IACV,kBAAkB;IAClB,aAAa;IACb,mBAAmB;CACpB,CAAC,CAAC;AAEH,MAAM,cAAc,GAAG,IAAI,GAAG,CAAC;IAC7B,iBAAiB;IACjB,oBAAoB;IACpB,kBAAkB;IAClB,iBAAiB;IACjB,UAAU;IACV,eAAe;IACf,YAAY;IACZ,eAAe;IACf,SAAS;IACT,UAAU;IACV,UAAU;CACX,CAAC,CAAC;AAEH,MAAM,cAAc,GAAG,IAAI,GAAG,CAAC,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,CAAC,CAAC,CAAC;AAC1D,MAAM,kBAAkB,GAAG,IAAI,GAAG,CAAiB;IACjD,CAAC,CAAC,EAAE,IAAI,CAAC;IACT,CAAC,CAAC,EAAE,WAAW,CAAC;IAChB,CAAC,CAAC,EAAE,SAAS,CAAC;IACd,CAAC,CAAC,EAAE,iBAAiB,CAAC;IACtB,CAAC,CAAC,EAAE,kBAAkB,CAAC;IACvB,CAAC,CAAC,EAAE,UAAU,CAAC;IACf,CAAC,CAAC,EAAE,eAAe,CAAC;IACpB,CAAC,CAAC,EAAE,kBAAkB,CAAC;IACvB,CAAC,CAAC,EAAE,mBAAmB,CAAC;IACxB,CAAC,CAAC,EAAE,oBAAoB,CAAC;IACzB,CAAC,EAAE,EAAE,SAAS,CAAC;IACf,CAAC,EAAE,EAAE,YAAY,CAAC;IAClB,CAAC,EAAE,EAAE,eAAe,CAAC;IACrB,CAAC,EAAE,EAAE,UAAU,CAAC;IAChB,CAAC,EAAE,EAAE,aAAa,CAAC;IACnB,CAAC,EAAE,EAAE,UAAU,CAAC;IAChB,CAAC,EAAE,EAAE,iBAAiB,CAAC;CACxB,CAAC,CAAC;AAEH,MAAM,mBAAmB,GAAmE;IAC1F,GAAG,CAAC,GAAG,cAAc,CAAC,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,EAAE,KAAK,EAAE,WAAW,IAAI,EAAE,EAAE,QAAQ,EAAE,WAAoB,EAAE,CAAC,CAAC;IACpG,GAAG,CAAC,GAAG,cAAc,CAAC,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,EAAE,KAAK,EAAE,WAAW,IAAI,EAAE,EAAE,QAAQ,EAAE,WAAoB,EAAE,CAAC,CAAC;CACrG,CAAC;AAEF,SAAS,aAAa,CAAC,KAAc;IACnC,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QAC9B,OAAO,kBAAkB,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;IACvC,CAAC;IACD,OAAO,OAAO,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,UAAU,CAAC,SAAS,EAAE,EAAE,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC;AAC/F,CAAC;AAED,SAAS,YAAY,CAAC,KAAc;IAClC,MAAM,IAAI,GAAG,aAAa,CAAC,KAAK,CAAC,CAAC;IAClC,IAAI,IAAI,KAAK,SAAS,EAAE,CAAC;QACvB,OAAO,SAAS,CAAC;IACnB,CAAC;IACD,IAAI,cAAc,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC;QAC7B,OAAO,WAAW,CAAC;IACrB,CAAC;IACD,IAAI,cAAc,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC;QAC7B,OAAO,WAAW,CAAC;IACrB,CAAC;IACD,IAAI,IAAI,KAAK,SAAS,IAAI,IAAI,KAAK,IAAI,EAAE,CAAC;QACxC,OAAO,eAAe,CAAC;IACzB,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,SAAS,YAAY,CAAC,KAAc;IAClC,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,KAAK,CAAC,IAAI,KAAK,GAAG,GAAG,IAAI,KAAK,GAAG,GAAG,EAAE,CAAC;QACxF,OAAO,SAAS,CAAC;IACnB,CAAC;IACD,OAAO,cAAc,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,WAAW,CAAC;AAC/D,CAAC;AAED,MAAM,UAAU,mBAAmB,CAAC,OAAe;IACjD,IAAI,YAAY,GAAG,KAAK,CAAC;IACzB,KAAK,MAAM,KAAK,IAAI,OAAO,CAAC,QAAQ,CAClC,iEAAiE,CAClE,EAAE,CAAC;QACF,MAAM,QAAQ,GAAG,YAAY,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QAChD,IAAI,QAAQ,KAAK,WAAW,EAAE,CAAC;YAC7B,OAAO,WAAW,CAAC;QACrB,CAAC;QACD,YAAY,KAAK,QAAQ,KAAK,WAAW,CAAC;IAC5C,CAAC;IACD,OAAO,YAAY,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,SAAS,CAAC;AAChD,CAAC;AAED,MAAM,UAAU,mBAAmB,CAAC,OAAe;IACjD,MAAM,UAAU,GAAG,OAAO,CAAC,UAAU,CAAC,YAAY,EAAE,EAAE,CAAC,CAAC;IACxD,IAAI,YAAY,GAAG,KAAK,CAAC;IACzB,KAAK,MAAM,EAAE,KAAK,EAAE,QAAQ,EAAE,IAAI,mBAAmB,EAAE,CAAC;QACtD,IAAI,UAAU,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;YAC/B,IAAI,QAAQ,KAAK,WAAW,EAAE,CAAC;gBAC7B,OAAO,WAAW,CAAC;YACrB,CAAC;YACD,YAAY,KAAK,QAAQ,KAAK,WAAW,CAAC;QAC5C,CAAC;IACH,CAAC;IACD,OAAO,YAAY,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,SAAS,CAAC;AAChD,CAAC;AAED;;;;GAIG;AACH,SAAS,kBAAkB,CAAC,OAAe;IACzC,OAAO;QACL,WAAW;QACX,UAAU;QACV,mBAAmB;QACnB,SAAS;QACT,aAAa;QACb,oBAAoB;QACpB,iBAAiB;QACjB,mBAAmB;QACnB,cAAc;QACd,YAAY;QACZ,aAAa;QACb,qBAAqB;QACrB,iBAAiB;QACjB,aAAa;QACb,YAAY;QACZ,kBAAkB;QAClB,aAAa;KACd,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC;AAC/C,CAAC;AAED,SAAS,QAAQ,CAAC,KAAc;IAC9B,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,CAAC,CAAC,CAAC,KAAoB,CAAC,CAAC,CAAC,SAAS,CAAC;AACxF,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,gBAAgB,CAC9B,KAAc,EACd,wBAA2C,EAAE;IAE7C,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAC;IAC/B,MAAM,QAAQ,GAAa,EAAE,CAAC;IAC9B,IAAI,YAAY,GAAG,KAAK,CAAC;IACzB,IAAI,YAAY,GAAG,KAAK,CAAC;IACzB,IAAI,OAAO,GAAY,KAAK,CAAC;IAE7B,MAAM,aAAa,GAAG,CAAC,OAAe,EAAQ,EAAE;QAC9C,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QACvB,KAAK,MAAM,QAAQ,IAAI,CAAC,mBAAmB,CAAC,OAAO,CAAC,EAAE,mBAAmB,CAAC,OAAO,CAAC,CAAC,EAAE,CAAC;YACpF,YAAY,KAAK,QAAQ,KAAK,WAAW,CAAC;YAC1C,YAAY,KAAK,QAAQ,KAAK,WAAW,CAAC;QAC5C,CAAC;IACH,CAAC,CAAC;IAEF,OAAO,OAAO,KAAK,SAAS,IAAI,OAAO,KAAK,IAAI,EAAE,CAAC;QACjD,MAAM,MAAM,GAAG,QAAQ,CAAC,OAAO,CAAC,CAAC;QACjC,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;YACzB,IAAI,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC;gBACrB,MAAM;YACR,CAAC;YACD,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;YACjB,KAAK,MAAM,QAAQ,IAAI;gBACrB,YAAY,CAAC,MAAM,CAAC,IAAI,CAAC;gBACzB,YAAY,CAAC,MAAM,CAAC,MAAM,CAAC;gBAC3B,YAAY,CAAC,MAAM,CAAC,UAAU,CAAC;aAChC,EAAE,CAAC;gBACF,YAAY,KAAK,QAAQ,KAAK,WAAW,CAAC;gBAC1C,YAAY,KAAK,QAAQ,KAAK,WAAW,CAAC;YAC5C,CAAC;YACD,aAAa,CACX,OAAO,MAAM,CAAC,OAAO,KAAK,QAAQ;gBAChC,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,WAAW,EAAE;gBAC9B,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,WAAW,EAAE,CAClC,CAAC;YACF,OAAO,GAAG,MAAM,CAAC,KAAK,CAAC;QACzB,CAAC;aAAM,CAAC;YACN,aAAa,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC;YAC7C,MAAM;QACR,CAAC;IACH,CAAC;IAED,IAAI,YAAY,EAAE,CAAC;QACjB,OAAO,KAAK,CAAC;IACf,CAAC;IACD,IAAI,YAAY,EAAE,CAAC;QACjB,OAAO,IAAI,CAAC;IACd,CAAC;IACD,OAAO,QAAQ,CAAC,IAAI,CAClB,CAAC,OAAO,EAAE,EAAE,CACV,kBAAkB,CAAC,OAAO,CAAC;QAC3B,qBAAqB,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CACnE,CAAC;AACJ,CAAC"}

package/dist/signer.d.ts

@@ -1,5 +1,6 @@
 export { FalconSigner } from './signers/falcon.js';
 export { EcdsaSigner } from './signers/ecdsa.js';
+export { Eip712Signer, LedgerSigner, type Eip1193SignerProvider } from './signers/ledger.js';
 export { ParaSigner, type ParaSigningContext } from './signers/para.js';
 export { MidenWalletSigner, type WalletSigningContext } from './signers/miden-wallet.js';
 //# sourceMappingURL=signer.d.ts.map

package/dist/signer.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"signer.d.ts","sourceRoot":"","sources":["../src/signer.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,MAAM,qBAAqB,CAAC;AACnD,OAAO,EAAE,WAAW,EAAE,MAAM,oBAAoB,CAAC;AACjD,OAAO,EAAE,UAAU,EAAE,KAAK,kBAAkB,EAAE,MAAM,mBAAmB,CAAC;AACxE,OAAO,EAAE,iBAAiB,EAAE,KAAK,oBAAoB,EAAE,MAAM,2BAA2B,CAAC"}
+{"version":3,"file":"signer.d.ts","sourceRoot":"","sources":["../src/signer.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,MAAM,qBAAqB,CAAC;AACnD,OAAO,EAAE,WAAW,EAAE,MAAM,oBAAoB,CAAC;AACjD,OAAO,EAAE,YAAY,EAAE,YAAY,EAAE,KAAK,qBAAqB,EAAE,MAAM,qBAAqB,CAAC;AAC7F,OAAO,EAAE,UAAU,EAAE,KAAK,kBAAkB,EAAE,MAAM,mBAAmB,CAAC;AACxE,OAAO,EAAE,iBAAiB,EAAE,KAAK,oBAAoB,EAAE,MAAM,2BAA2B,CAAC"}

package/dist/signer.js

@@ -1,5 +1,6 @@
 export { FalconSigner } from './signers/falcon.js';
 export { EcdsaSigner } from './signers/ecdsa.js';
+export { Eip712Signer, LedgerSigner } from './signers/ledger.js';
 export { ParaSigner } from './signers/para.js';
 export { MidenWalletSigner } from './signers/miden-wallet.js';
 //# sourceMappingURL=signer.js.map

package/dist/signer.js.map

@@ -1 +1 @@
-{"version":3,"file":"signer.js","sourceRoot":"","sources":["../src/signer.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,MAAM,qBAAqB,CAAC;AACnD,OAAO,EAAE,WAAW,EAAE,MAAM,oBAAoB,CAAC;AACjD,OAAO,EAAE,UAAU,EAA2B,MAAM,mBAAmB,CAAC;AACxE,OAAO,EAAE,iBAAiB,EAA6B,MAAM,2BAA2B,CAAC"}
+{"version":3,"file":"signer.js","sourceRoot":"","sources":["../src/signer.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,MAAM,qBAAqB,CAAC;AACnD,OAAO,EAAE,WAAW,EAAE,MAAM,oBAAoB,CAAC;AACjD,OAAO,EAAE,YAAY,EAAE,YAAY,EAA8B,MAAM,qBAAqB,CAAC;AAC7F,OAAO,EAAE,UAAU,EAA2B,MAAM,mBAAmB,CAAC;AACxE,OAAO,EAAE,iBAAiB,EAA6B,MAAM,2BAA2B,CAAC"}

package/dist/signers/index.d.ts

@@ -1,5 +1,6 @@
 export { FalconSigner } from './falcon.js';
 export { EcdsaSigner } from './ecdsa.js';
+export { Eip712Signer, LedgerSigner, type Eip1193SignerProvider } from './ledger.js';
 export { ParaSigner, type ParaSigningContext } from './para.js';
 export { MidenWalletSigner, type WalletSigningContext } from './miden-wallet.js';
 //# sourceMappingURL=index.d.ts.map

package/dist/signers/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/signers/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAC3C,OAAO,EAAE,WAAW,EAAE,MAAM,YAAY,CAAC;AACzC,OAAO,EAAE,UAAU,EAAE,KAAK,kBAAkB,EAAE,MAAM,WAAW,CAAC;AAChE,OAAO,EAAE,iBAAiB,EAAE,KAAK,oBAAoB,EAAE,MAAM,mBAAmB,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/signers/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAC3C,OAAO,EAAE,WAAW,EAAE,MAAM,YAAY,CAAC;AACzC,OAAO,EAAE,YAAY,EAAE,YAAY,EAAE,KAAK,qBAAqB,EAAE,MAAM,aAAa,CAAC;AACrF,OAAO,EAAE,UAAU,EAAE,KAAK,kBAAkB,EAAE,MAAM,WAAW,CAAC;AAChE,OAAO,EAAE,iBAAiB,EAAE,KAAK,oBAAoB,EAAE,MAAM,mBAAmB,CAAC"}

package/dist/signers/index.js

@@ -1,5 +1,6 @@
 export { FalconSigner } from './falcon.js';
 export { EcdsaSigner } from './ecdsa.js';
+export { Eip712Signer, LedgerSigner } from './ledger.js';
 export { ParaSigner } from './para.js';
 export { MidenWalletSigner } from './miden-wallet.js';
 //# sourceMappingURL=index.js.map

package/dist/signers/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/signers/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAC3C,OAAO,EAAE,WAAW,EAAE,MAAM,YAAY,CAAC;AACzC,OAAO,EAAE,UAAU,EAA2B,MAAM,WAAW,CAAC;AAChE,OAAO,EAAE,iBAAiB,EAA6B,MAAM,mBAAmB,CAAC"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/signers/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAC3C,OAAO,EAAE,WAAW,EAAE,MAAM,YAAY,CAAC;AACzC,OAAO,EAAE,YAAY,EAAE,YAAY,EAA8B,MAAM,aAAa,CAAC;AACrF,OAAO,EAAE,UAAU,EAA2B,MAAM,WAAW,CAAC;AAChE,OAAO,EAAE,iBAAiB,EAA6B,MAAM,mBAAmB,CAAC"}

package/dist/signers/ledger.d.ts

@@ -0,0 +1,25 @@
+import type { RequestAuthPayload, Signer } from '@openzeppelin/guardian-client';
+export interface Eip1193SignerProvider {
+    request(args: {
+        method: string;
+        params: unknown[];
+    }): Promise<unknown>;
+}
+export declare class Eip712Signer implements Signer {
+    private readonly provider;
+    readonly scheme = "ecdsa";
+    readonly requestAuthFormat = "eip712";
+    readonly proposalMessageFormat = "eip712";
+    readonly publicKey: string;
+    readonly commitment: string;
+    readonly address: string;
+    static connect(provider: Eip1193SignerProvider): Promise<Eip712Signer>;
+    constructor(provider: Eip1193SignerProvider, publicKey: string, address: string);
+    signAccountIdWithTimestamp(): Promise<string>;
+    signRequest(accountId: string, timestamp: number, requestPayload: RequestAuthPayload): Promise<string>;
+    signLookupMessage(keyCommitmentHex: string, timestampMs: number): Promise<string>;
+    signCommitment(commitmentHex: string): Promise<string>;
+    private signTypedData;
+}
+export { Eip712Signer as LedgerSigner };
+//# sourceMappingURL=ledger.d.ts.map

package/dist/signers/ledger.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"ledger.d.ts","sourceRoot":"","sources":["../../src/signers/ledger.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,EAAE,MAAM,+BAA+B,CAAC;AAehF,MAAM,WAAW,qBAAqB;IACpC,OAAO,CAAC,IAAI,EAAE;QAAE,MAAM,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,OAAO,EAAE,CAAA;KAAE,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;CACxE;AAED,qBAAa,YAAa,YAAW,MAAM;IAmCvC,OAAO,CAAC,QAAQ,CAAC,QAAQ;IAlC3B,QAAQ,CAAC,MAAM,WAAW;IAC1B,QAAQ,CAAC,iBAAiB,YAAY;IACtC,QAAQ,CAAC,qBAAqB,YAAY;IAC1C,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;WAEZ,OAAO,CAAC,QAAQ,EAAE,qBAAqB,GAAG,OAAO,CAAC,YAAY,CAAC;gBA2BzD,QAAQ,EAAE,qBAAqB,EAChD,SAAS,EAAE,MAAM,EACjB,OAAO,EAAE,MAAM;IAoBjB,0BAA0B,IAAI,OAAO,CAAC,MAAM,CAAC;IAIvC,WAAW,CACf,SAAS,EAAE,MAAM,EACjB,SAAS,EAAE,MAAM,EACjB,cAAc,EAAE,kBAAkB,GACjC,OAAO,CAAC,MAAM,CAAC;IAKZ,iBAAiB,CAAC,gBAAgB,EAAE,MAAM,EAAE,WAAW,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;IAKjF,cAAc,CAAC,aAAa,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;YAK9C,aAAa;CAkB5B;AAED,OAAO,EAAE,YAAY,IAAI,YAAY,EAAE,CAAC"}

package/dist/signers/ledger.js

@@ -0,0 +1,96 @@
+import { secp256k1 } from '@noble/curves/secp256k1';
+import { keccak_256 } from '@noble/hashes/sha3.js';
+import { AuthDigest } from '../utils/digest.js';
+import { lookupAuthDigest } from '../lookupAuth.js';
+import { EcdsaFormat } from '../utils/ecdsa.js';
+import { bytesToHex, hexToBytes } from '../utils/encoding.js';
+import { guardianKeyDiscoveryTypedData, guardianLookupTypedData, guardianRequestTypedData, midenTransactionTypedData, typedDataDigest, } from '../utils/eip712.js';
+import { tryComputeEcdsaCommitmentHex } from '../utils/signature.js';
+import { wordToBytes } from '../utils/word.js';
+export class Eip712Signer {
+    provider;
+    scheme = 'ecdsa';
+    requestAuthFormat = 'eip712';
+    proposalMessageFormat = 'eip712';
+    publicKey;
+    commitment;
+    address;
+    static async connect(provider) {
+        const accounts = await provider.request({ method: 'eth_requestAccounts', params: [] });
+        if (!Array.isArray(accounts) || typeof accounts[0] !== 'string') {
+            throw new Error('Wallet did not provide an Ethereum address');
+        }
+        const address = accounts[0];
+        const challenge = crypto.getRandomValues(new Uint8Array(32));
+        const data = guardianKeyDiscoveryTypedData(challenge);
+        const result = await provider.request({
+            method: 'eth_signTypedData_v4',
+            params: [address, JSON.stringify(data)],
+        });
+        if (typeof result !== 'string' || !/^0x[0-9a-fA-F]{130}$/.test(result)) {
+            throw new Error('Wallet returned an invalid key-discovery signature');
+        }
+        const signature = hexToBytes(EcdsaFormat.normalizeRecoveryByte(result));
+        if (signature[64] !== 0 && signature[64] !== 1) {
+            throw new Error('Wallet returned an invalid recovery ID');
+        }
+        const publicKey = secp256k1.Signature.fromCompact(signature.slice(0, 64))
+            .addRecoveryBit(signature[64])
+            .recoverPublicKey(typedDataDigest(data))
+            .toRawBytes(true);
+        return new Eip712Signer(provider, bytesToHex(publicKey), address);
+    }
+    constructor(provider, publicKey, address) {
+        this.provider = provider;
+        if (!EcdsaFormat.isValidPublicKeyPoint(publicKey)) {
+            throw new Error('Invalid wallet public key');
+        }
+        this.publicKey = EcdsaFormat.compressPublicKey(publicKey);
+        const commitment = tryComputeEcdsaCommitmentHex(this.publicKey);
+        if (!commitment) {
+            throw new Error('Cannot derive the Miden commitment for the wallet public key');
+        }
+        this.commitment = commitment;
+        const uncompressed = secp256k1.ProjectivePoint.fromHex(this.publicKey.slice(2)).toRawBytes(false);
+        const derivedAddress = bytesToHex(keccak_256(uncompressed.slice(1)).slice(-20));
+        if (derivedAddress.toLowerCase() !== address.toLowerCase()) {
+            throw new Error('Wallet address does not match its public key');
+        }
+        this.address = address;
+    }
+    signAccountIdWithTimestamp() {
+        throw new Error('Eip712Signer requires request-bound Guardian authentication');
+    }
+    async signRequest(accountId, timestamp, requestPayload) {
+        const requestHash = AuthDigest.fromRequest(accountId, timestamp, requestPayload);
+        return this.signTypedData(guardianRequestTypedData(wordToBytes(requestHash)));
+    }
+    async signLookupMessage(keyCommitmentHex, timestampMs) {
+        const lookupHash = lookupAuthDigest(timestampMs, keyCommitmentHex);
+        return this.signTypedData(guardianLookupTypedData(wordToBytes(lookupHash)));
+    }
+    async signCommitment(commitmentHex) {
+        const commitment = AuthDigest.fromCommitmentHex(commitmentHex);
+        return this.signTypedData(midenTransactionTypedData(wordToBytes(commitment)));
+    }
+    async signTypedData(data) {
+        const result = await this.provider.request({
+            method: 'eth_signTypedData_v4',
+            params: [this.address, JSON.stringify(data)],
+        });
+        if (typeof result !== 'string' || !/^0x[0-9a-fA-F]{130}$/.test(result)) {
+            throw new Error('Wallet returned an invalid EIP-712 signature');
+        }
+        const signatureHex = EcdsaFormat.normalizeRecoveryByte(result);
+        const signature = hexToBytes(signatureHex);
+        if (signature[64] !== 0 && signature[64] !== 1) {
+            throw new Error('Wallet returned an invalid ECDSA recovery ID');
+        }
+        if (!secp256k1.verify(signature.slice(0, 64), typedDataDigest(data), hexToBytes(this.publicKey))) {
+            throw new Error('Wallet signature was produced by a different key');
+        }
+        return signatureHex;
+    }
+}
+export { Eip712Signer as LedgerSigner };
+//# sourceMappingURL=ledger.js.map

package/dist/signers/ledger.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"ledger.js","sourceRoot":"","sources":["../../src/signers/ledger.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,MAAM,yBAAyB,CAAC;AACpD,OAAO,EAAE,UAAU,EAAE,MAAM,uBAAuB,CAAC;AAEnD,OAAO,EAAE,UAAU,EAAE,MAAM,oBAAoB,CAAC;AAChD,OAAO,EAAE,gBAAgB,EAAE,MAAM,kBAAkB,CAAC;AACpD,OAAO,EAAE,WAAW,EAAE,MAAM,mBAAmB,CAAC;AAChD,OAAO,EAAE,UAAU,EAAE,UAAU,EAAE,MAAM,sBAAsB,CAAC;AAC9D,OAAO,EACL,6BAA6B,EAC7B,uBAAuB,EACvB,wBAAwB,EACxB,yBAAyB,EACzB,eAAe,GAChB,MAAM,oBAAoB,CAAC;AAC5B,OAAO,EAAE,4BAA4B,EAAE,MAAM,uBAAuB,CAAC;AACrE,OAAO,EAAE,WAAW,EAAE,MAAM,kBAAkB,CAAC;AAM/C,MAAM,OAAO,YAAY;IAmCJ;IAlCV,MAAM,GAAG,OAAO,CAAC;IACjB,iBAAiB,GAAG,QAAQ,CAAC;IAC7B,qBAAqB,GAAG,QAAQ,CAAC;IACjC,SAAS,CAAS;IAClB,UAAU,CAAS;IACnB,OAAO,CAAS;IAEzB,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,QAA+B;QAClD,MAAM,QAAQ,GAAG,MAAM,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,EAAE,qBAAqB,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC,CAAC;QACvF,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,IAAI,OAAO,QAAQ,CAAC,CAAC,CAAC,KAAK,QAAQ,EAAE,CAAC;YAChE,MAAM,IAAI,KAAK,CAAC,4CAA4C,CAAC,CAAC;QAChE,CAAC;QACD,MAAM,OAAO,GAAG,QAAQ,CAAC,CAAC,CAAC,CAAC;QAC5B,MAAM,SAAS,GAAG,MAAM,CAAC,eAAe,CAAC,IAAI,UAAU,CAAC,EAAE,CAAC,CAAC,CAAC;QAC7D,MAAM,IAAI,GAAG,6BAA6B,CAAC,SAAS,CAAC,CAAC;QACtD,MAAM,MAAM,GAAG,MAAM,QAAQ,CAAC,OAAO,CAAC;YACpC,MAAM,EAAE,sBAAsB;YAC9B,MAAM,EAAE,CAAC,OAAO,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC;SACxC,CAAC,CAAC;QACH,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,CAAC,sBAAsB,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC;YACvE,MAAM,IAAI,KAAK,CAAC,oDAAoD,CAAC,CAAC;QACxE,CAAC;QACD,MAAM,SAAS,GAAG,UAAU,CAAC,WAAW,CAAC,qBAAqB,CAAC,MAAM,CAAC,CAAC,CAAC;QACxE,IAAI,SAAS,CAAC,EAAE,CAAC,KAAK,CAAC,IAAI,SAAS,CAAC,EAAE,CAAC,KAAK,CAAC,EAAE,CAAC;YAC/C,MAAM,IAAI,KAAK,CAAC,wCAAwC,CAAC,CAAC;QAC5D,CAAC;QACD,MAAM,SAAS,GAAG,SAAS,CAAC,SAAS,CAAC,WAAW,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;aACtE,cAAc,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC;aAC7B,gBAAgB,CAAC,eAAe,CAAC,IAAI,CAAC,CAAC;aACvC,UAAU,CAAC,IAAI,CAAC,CAAC;QACpB,OAAO,IAAI,YAAY,CAAC,QAAQ,EAAE,UAAU,CAAC,SAAS,CAAC,EAAE,OAAO,CAAC,CAAC;IACpE,CAAC;IAED,YACmB,QAA+B,EAChD,SAAiB,EACjB,OAAe;QAFE,aAAQ,GAAR,QAAQ,CAAuB;QAIhD,IAAI,CAAC,WAAW,CAAC,qBAAqB,CAAC,SAAS,CAAC,EAAE,CAAC;YAClD,MAAM,IAAI,KAAK,CAAC,2BAA2B,CAAC,CAAC;QAC/C,CAAC;QACD,IAAI,CAAC,SAAS,GAAG,WAAW,CAAC,iBAAiB,CAAC,SAAS,CAAC,CAAC;QAC1D,MAAM,UAAU,GAAG,4BAA4B,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;QAChE,IAAI,CAAC,UAAU,EAAE,CAAC;YAChB,MAAM,IAAI,KAAK,CAAC,8DAA8D,CAAC,CAAC;QAClF,CAAC;QACD,IAAI,CAAC,UAAU,GAAG,UAAU,CAAC;QAE7B,MAAM,YAAY,GAAG,SAAS,CAAC,eAAe,CAAC,OAAO,CAAC,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC;QAClG,MAAM,cAAc,GAAG,UAAU,CAAC,UAAU,CAAC,YAAY,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;QAChF,IAAI,cAAc,CAAC,WAAW,EAAE,KAAK,OAAO,CAAC,WAAW,EAAE,EAAE,CAAC;YAC3D,MAAM,IAAI,KAAK,CAAC,8CAA8C,CAAC,CAAC;QAClE,CAAC;QACD,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC;IACzB,CAAC;IAED,0BAA0B;QACxB,MAAM,IAAI,KAAK,CAAC,6DAA6D,CAAC,CAAC;IACjF,CAAC;IAED,KAAK,CAAC,WAAW,CACf,SAAiB,EACjB,SAAiB,EACjB,cAAkC;QAElC,MAAM,WAAW,GAAG,UAAU,CAAC,WAAW,CAAC,SAAS,EAAE,SAAS,EAAE,cAAc,CAAC,CAAC;QACjF,OAAO,IAAI,CAAC,aAAa,CAAC,wBAAwB,CAAC,WAAW,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC;IAChF,CAAC;IAED,KAAK,CAAC,iBAAiB,CAAC,gBAAwB,EAAE,WAAmB;QACnE,MAAM,UAAU,GAAG,gBAAgB,CAAC,WAAW,EAAE,gBAAgB,CAAC,CAAC;QACnE,OAAO,IAAI,CAAC,aAAa,CAAC,uBAAuB,CAAC,WAAW,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC;IAC9E,CAAC;IAED,KAAK,CAAC,cAAc,CAAC,aAAqB;QACxC,MAAM,UAAU,GAAG,UAAU,CAAC,iBAAiB,CAAC,aAAa,CAAC,CAAC;QAC/D,OAAO,IAAI,CAAC,aAAa,CAAC,yBAAyB,CAAC,WAAW,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC;IAChF,CAAC;IAEO,KAAK,CAAC,aAAa,CAAC,IAAiD;QAC3E,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC;YACzC,MAAM,EAAE,sBAAsB;YAC9B,MAAM,EAAE,CAAC,IAAI,CAAC,OAAO,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC;SAC7C,CAAC,CAAC;QACH,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,CAAC,sBAAsB,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC;YACvE,MAAM,IAAI,KAAK,CAAC,8CAA8C,CAAC,CAAC;QAClE,CAAC;QACD,MAAM,YAAY,GAAG,WAAW,CAAC,qBAAqB,CAAC,MAAM,CAAC,CAAC;QAC/D,MAAM,SAAS,GAAG,UAAU,CAAC,YAAY,CAAC,CAAC;QAC3C,IAAI,SAAS,CAAC,EAAE,CAAC,KAAK,CAAC,IAAI,SAAS,CAAC,EAAE,CAAC,KAAK,CAAC,EAAE,CAAC;YAC/C,MAAM,IAAI,KAAK,CAAC,8CAA8C,CAAC,CAAC;QAClE,CAAC;QACD,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,EAAE,eAAe,CAAC,IAAI,CAAC,EAAE,UAAU,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,EAAE,CAAC;YACjG,MAAM,IAAI,KAAK,CAAC,kDAAkD,CAAC,CAAC;QACtE,CAAC;QACD,OAAO,YAAY,CAAC;IACtB,CAAC;CACF;AAED,OAAO,EAAE,YAAY,IAAI,YAAY,EAAE,CAAC"}

package/dist/state/adopt.d.ts

@@ -0,0 +1,45 @@
+/**
+ * Deciding when GUARDIAN-provided account state may replace the local store.
+ *
+ * Both entry points that pull an account from GUARDIAN need this: `syncState`,
+ * which refreshes an account already in hand, and `MultisigClient.load`, which
+ * rebuilds one. Sharing the rule is the point. Deciding it twice is how the two
+ * paths came to disagree, with `load` keeping whatever the store held whenever
+ * it held anything, so a caller that had touched the account before read stale
+ * state with no error.
+ */
+import { Account, AccountId } from '@miden-sdk/miden-sdk';
+import type { ResolvedRpcConfig } from '../rpc/config.js';
+/**
+ * The account's commitment as the node reports it, or `null` when the account
+ * is not deployed yet. An undeployed account is not an error: it has no
+ * on-chain commitment to disagree with.
+ */
+export declare function readOnChainCommitment(midenRpcEndpoint: string, accountId: AccountId, rpcConfig: ResolvedRpcConfig): Promise<string | null>;
+/**
+ * Decide whether GUARDIAN-provided state may overwrite the local store.
+ *
+ * Returns `false`, rather than throwing, when the GUARDIAN state is simply
+ * *behind* local (lower nonce). That happens whenever the execution delta the
+ * client pushed has not been canonicalized by GUARDIAN's background worker yet
+ * (see OpenZeppelin/guardian#316), or permanently if that candidate was
+ * discarded (#312 / #319). In that case the local account is already ahead and
+ * is independently verifiable against chain (`verifyStateCommitment`), so it is
+ * authoritative and must be kept, not clobbered; the caller keeps local and
+ * refreshes config from it.
+ *
+ * Still throws for genuine divergence: an incoming state at the *same* nonce as
+ * local but a different commitment, or an incoming state whose commitment does
+ * not match the on-chain commitment.
+ *
+ * Callers must only reach here once they know the two states differ. At equal
+ * nonce this treats the pair as divergent, which is true only when the
+ * commitments already disagree.
+ */
+export declare function isSafeToAdoptGuardianState(params: {
+    accountId: string;
+    incomingAccount: Account;
+    localAccount?: Account;
+    readCommitment: () => Promise<string | null>;
+}): Promise<boolean>;
+//# sourceMappingURL=adopt.d.ts.map

package/dist/state/adopt.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"adopt.d.ts","sourceRoot":"","sources":["../../src/state/adopt.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAEH,OAAO,EAAE,OAAO,EAAE,SAAS,EAAuB,MAAM,sBAAsB,CAAC;AAG/E,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,kBAAkB,CAAC;AAK1D;;;;GAIG;AACH,wBAAsB,qBAAqB,CACzC,gBAAgB,EAAE,MAAM,EACxB,SAAS,EAAE,SAAS,EACpB,SAAS,EAAE,iBAAiB,GAC3B,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,CAwBxB;AAED;;;;;;;;;;;;;;;;;;;GAmBG;AACH,wBAAsB,0BAA0B,CAAC,MAAM,EAAE;IACvD,SAAS,EAAE,MAAM,CAAC;IAClB,eAAe,EAAE,OAAO,CAAC;IACzB,YAAY,CAAC,EAAE,OAAO,CAAC;IACvB,cAAc,EAAE,MAAM,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,CAAC;CAC9C,GAAG,OAAO,CAAC,OAAO,CAAC,CAoDnB"}

package/dist/state/adopt.js

@@ -0,0 +1,101 @@
+/**
+ * Deciding when GUARDIAN-provided account state may replace the local store.
+ *
+ * Both entry points that pull an account from GUARDIAN need this: `syncState`,
+ * which refreshes an account already in hand, and `MultisigClient.load`, which
+ * rebuilds one. Sharing the rule is the point. Deciding it twice is how the two
+ * paths came to disagree, with `load` keeping whatever the store held whenever
+ * it held anything, so a caller that had touched the account before read stale
+ * state with no error.
+ */
+import { Endpoint, RpcClient } from '@miden-sdk/miden-sdk';
+import { retryRpcRead } from '../rpc/retry.js';
+import { normalizeHexWord } from '../utils/encoding.js';
+const ZERO_COMMITMENT = `0x${'0'.repeat(64)}`;
+/**
+ * The account's commitment as the node reports it, or `null` when the account
+ * is not deployed yet. An undeployed account is not an error: it has no
+ * on-chain commitment to disagree with.
+ */
+export async function readOnChainCommitment(midenRpcEndpoint, accountId, rpcConfig) {
+    const rpcClient = new RpcClient(new Endpoint(midenRpcEndpoint));
+    try {
+        const accountDetails = await retryRpcRead(() => rpcClient.getAccountDetails(accountId), rpcConfig);
+        if (!accountDetails) {
+            return null;
+        }
+        const commitment = normalizeHexWord(accountDetails.commitment().toHex());
+        return commitment === ZERO_COMMITMENT ? null : commitment;
+    }
+    catch (error) {
+        const message = error instanceof Error ? error.message : String(error);
+        if (message.includes('null pointer passed to rust') ||
+            message.includes('No account header record found for given ID') ||
+            message.toLowerCase().includes('not found')) {
+            return null;
+        }
+        throw error;
+    }
+}
+/**
+ * Decide whether GUARDIAN-provided state may overwrite the local store.
+ *
+ * Returns `false`, rather than throwing, when the GUARDIAN state is simply
+ * *behind* local (lower nonce). That happens whenever the execution delta the
+ * client pushed has not been canonicalized by GUARDIAN's background worker yet
+ * (see OpenZeppelin/guardian#316), or permanently if that candidate was
+ * discarded (#312 / #319). In that case the local account is already ahead and
+ * is independently verifiable against chain (`verifyStateCommitment`), so it is
+ * authoritative and must be kept, not clobbered; the caller keeps local and
+ * refreshes config from it.
+ *
+ * Still throws for genuine divergence: an incoming state at the *same* nonce as
+ * local but a different commitment, or an incoming state whose commitment does
+ * not match the on-chain commitment.
+ *
+ * Callers must only reach here once they know the two states differ. At equal
+ * nonce this treats the pair as divergent, which is true only when the
+ * commitments already disagree.
+ */
+export async function isSafeToAdoptGuardianState(params) {
+    const { accountId, incomingAccount, localAccount, readCommitment } = params;
+    if (localAccount) {
+        const localNonce = localAccount.nonce().asInt();
+        const incomingNonce = incomingAccount.nonce().asInt();
+        if (incomingNonce < localNonce) {
+            return false;
+        }
+        if (incomingNonce === localNonce) {
+            throw new Error(`Refusing to overwrite local state: incoming nonce ${incomingNonce.toString()} equals local nonce ${localNonce.toString()} but commitments differ for account ${accountId}`);
+        }
+    }
+    const onChainCommitment = await readCommitment();
+    if (!onChainCommitment) {
+        // No on-chain commitment means the account is not deployed, and an
+        // undeployed account has nothing to disagree with. That reading is only
+        // safe when the account has never transacted: `readOnChainCommitment`
+        // reports a missing account by matching `not found` in the error text, and
+        // a proxy or gateway 404 says exactly that. An account with a non-zero
+        // nonce has transacted, so it is deployed, so this is an RPC failure rather
+        // than an undeployed account, and adopting on it would skip the commitment
+        // check entirely.
+        // Keyed on the *local* nonce only. An account this client has transacted is
+        // deployed, so a node reporting nothing for it is an RPC failure rather
+        // than an undeployed account, and adopting there would skip the check
+        // against chain. The incoming nonce is GUARDIAN's claim rather than
+        // evidence, and `syncState` legitimately meets a higher incoming nonce with
+        // no local history; the caller that has no local record at all applies its
+        // own rule.
+        const transacted = localAccount?.nonce().asInt() ?? BigInt(0);
+        if (transacted > BigInt(0)) {
+            throw new Error(`Refusing to overwrite local state: account ${accountId} has transacted (nonce ${transacted.toString()}) but the node reported no on-chain commitment, so the incoming state could not be checked against chain`);
+        }
+        return true;
+    }
+    const incomingCommitment = normalizeHexWord(incomingAccount.to_commitment().toHex());
+    if (incomingCommitment !== onChainCommitment) {
+        throw new Error(`Refusing to overwrite local state: incoming commitment does not match on-chain commitment for account ${accountId}`);
+    }
+    return true;
+}
+//# sourceMappingURL=adopt.js.map

package/dist/state/adopt.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"adopt.js","sourceRoot":"","sources":["../../src/state/adopt.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAEH,OAAO,EAAsB,QAAQ,EAAE,SAAS,EAAE,MAAM,sBAAsB,CAAC;AAE/E,OAAO,EAAE,YAAY,EAAE,MAAM,iBAAiB,CAAC;AAE/C,OAAO,EAAE,gBAAgB,EAAE,MAAM,sBAAsB,CAAC;AAExD,MAAM,eAAe,GAAG,KAAK,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,EAAE,CAAC;AAE9C;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,qBAAqB,CACzC,gBAAwB,EACxB,SAAoB,EACpB,SAA4B;IAE5B,MAAM,SAAS,GAAG,IAAI,SAAS,CAAC,IAAI,QAAQ,CAAC,gBAAgB,CAAC,CAAC,CAAC;IAEhE,IAAI,CAAC;QACH,MAAM,cAAc,GAAG,MAAM,YAAY,CACvC,GAAG,EAAE,CAAC,SAAS,CAAC,iBAAiB,CAAC,SAAS,CAAC,EAC5C,SAAS,CACV,CAAC;QACF,IAAI,CAAC,cAAc,EAAE,CAAC;YACpB,OAAO,IAAI,CAAC;QACd,CAAC;QACD,MAAM,UAAU,GAAG,gBAAgB,CAAC,cAAc,CAAC,UAAU,EAAE,CAAC,KAAK,EAAE,CAAC,CAAC;QACzE,OAAO,UAAU,KAAK,eAAe,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,UAAU,CAAC;IAC5D,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,OAAO,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QACvE,IACE,OAAO,CAAC,QAAQ,CAAC,6BAA6B,CAAC;YAC/C,OAAO,CAAC,QAAQ,CAAC,6CAA6C,CAAC;YAC/D,OAAO,CAAC,WAAW,EAAE,CAAC,QAAQ,CAAC,WAAW,CAAC,EAC3C,CAAC;YACD,OAAO,IAAI,CAAC;QACd,CAAC;QACD,MAAM,KAAK,CAAC;IACd,CAAC;AACH,CAAC;AAED;;;;;;;;;;;;;;;;;;;GAmBG;AACH,MAAM,CAAC,KAAK,UAAU,0BAA0B,CAAC,MAKhD;IACC,MAAM,EAAE,SAAS,EAAE,eAAe,EAAE,YAAY,EAAE,cAAc,EAAE,GAAG,MAAM,CAAC;IAE5E,IAAI,YAAY,EAAE,CAAC;QACjB,MAAM,UAAU,GAAG,YAAY,CAAC,KAAK,EAAE,CAAC,KAAK,EAAE,CAAC;QAChD,MAAM,aAAa,GAAG,eAAe,CAAC,KAAK,EAAE,CAAC,KAAK,EAAE,CAAC;QAEtD,IAAI,aAAa,GAAG,UAAU,EAAE,CAAC;YAC/B,OAAO,KAAK,CAAC;QACf,CAAC;QAED,IAAI,aAAa,KAAK,UAAU,EAAE,CAAC;YACjC,MAAM,IAAI,KAAK,CACb,qDAAqD,aAAa,CAAC,QAAQ,EAAE,uBAAuB,UAAU,CAAC,QAAQ,EAAE,uCAAuC,SAAS,EAAE,CAC5K,CAAC;QACJ,CAAC;IACH,CAAC;IAED,MAAM,iBAAiB,GAAG,MAAM,cAAc,EAAE,CAAC;IACjD,IAAI,CAAC,iBAAiB,EAAE,CAAC;QACvB,mEAAmE;QACnE,wEAAwE;QACxE,sEAAsE;QACtE,2EAA2E;QAC3E,uEAAuE;QACvE,4EAA4E;QAC5E,2EAA2E;QAC3E,kBAAkB;QAClB,4EAA4E;QAC5E,wEAAwE;QACxE,sEAAsE;QACtE,oEAAoE;QACpE,4EAA4E;QAC5E,2EAA2E;QAC3E,YAAY;QACZ,MAAM,UAAU,GAAG,YAAY,EAAE,KAAK,EAAE,CAAC,KAAK,EAAE,IAAI,MAAM,CAAC,CAAC,CAAC,CAAC;QAC9D,IAAI,UAAU,GAAG,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC;YAC3B,MAAM,IAAI,KAAK,CACb,8CAA8C,SAAS,0BAA0B,UAAU,CAAC,QAAQ,EAAE,0GAA0G,CACjN,CAAC;QACJ,CAAC;QACD,OAAO,IAAI,CAAC;IACd,CAAC;IAED,MAAM,kBAAkB,GAAG,gBAAgB,CAAC,eAAe,CAAC,aAAa,EAAE,CAAC,KAAK,EAAE,CAAC,CAAC;IACrF,IAAI,kBAAkB,KAAK,iBAAiB,EAAE,CAAC;QAC7C,MAAM,IAAI,KAAK,CACb,yGAAyG,SAAS,EAAE,CACrH,CAAC;IACJ,CAAC;IAED,OAAO,IAAI,CAAC;AACd,CAAC"}

package/dist/transaction/authArgs.d.ts

@@ -0,0 +1,57 @@
+import type { TransactionRequest, TransactionRequestBuilder, Word } from '@miden-sdk/miden-sdk';
+import { type RawClientSource } from '../raw-client.js';
+import type { MultisigRequestOptions } from './options.js';
+/**
+ * A request under construction that already carries the multisig auth args,
+ * and the salt they commit to as normalized hex.
+ */
+export interface MultisigRequestDraft {
+    builder: TransactionRequestBuilder;
+    saltHex: string;
+}
+/**
+ * Starts a request carrying the multisig auth args for `options.accountId`:
+ * the three-word preimage in the advice map and its commitment as the auth
+ * arg, which miden-client then leaves alone.
+ *
+ * The salt is `options.salt` or a fresh one. `approvalExpirationDelta` left
+ * out means the approval never expires, the upstream default. `boundBlockNum`
+ * left out binds the store's sync height, which is what a proposer wants; a
+ * rebuild pins the proposal's anchor block and the expiration the summary
+ * already binds.
+ *
+ * The salt is moved across the WASM boundary, so a handle is built here from
+ * the hex rather than taken from the caller, and nothing frees it afterwards.
+ */
+export declare function multisigRequestBuilder(client: RawClientSource, options: MultisigRequestOptions): Promise<MultisigRequestDraft>;
+/**
+ * The furthest a transaction may expire after its reference block
+ * (`MAX_EXPIRATION_BLOCK_DELTA` in the transaction kernel). The auth procedure
+ * clamps the approval expiration it applies to this, so a longer approval would
+ * outlive the transaction it authorizes: the summary would still say "valid"
+ * while the node already refuses the submission as expired.
+ */
+export declare const MAX_APPROVAL_EXPIRATION_DELTA = 65535;
+/**
+ * Builds the request and hands back the salt it commits to as a fresh handle
+ * the caller owns. Refuses a request that carries no auth arg:
+ * `feeAwareTransactionRequestBuilder` hands back an untouched builder for an
+ * account it cannot classify as a multisig, typically one the client's store
+ * does not hold, and such a request would only fail later, inside the VM,
+ * while the auth procedure pipes a preimage that is not there.
+ */
+export declare function buildMultisigRequest(builder: TransactionRequestBuilder, saltHex: string, accountId: string): {
+    request: TransactionRequest;
+    salt: Word;
+};
+/**
+ * The block a multisig request's summary binds, read from the auth-args
+ * preimage the request carries. `undefined` when the request carries none.
+ */
+export declare function requestBoundBlockNum(request: TransactionRequest): number | undefined;
+/**
+ * The salt a multisig request's summary binds, read from the auth-args
+ * preimage the request carries. `undefined` when the request carries none.
+ */
+export declare function requestSaltHex(request: TransactionRequest): string | undefined;
+//# sourceMappingURL=authArgs.d.ts.map

package/dist/transaction/authArgs.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"authArgs.d.ts","sourceRoot":"","sources":["../../src/transaction/authArgs.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAQ,kBAAkB,EAAE,yBAAyB,EAAE,IAAI,EAAE,MAAM,sBAAsB,CAAC;AAGtG,OAAO,EAA0C,KAAK,eAAe,EAAE,MAAM,kBAAkB,CAAC;AAGhG,OAAO,KAAK,EAAE,sBAAsB,EAAE,MAAM,cAAc,CAAC;AAU3D;;;GAGG;AACH,MAAM,WAAW,oBAAoB;IACnC,OAAO,EAAE,yBAAyB,CAAC;IACnC,OAAO,EAAE,MAAM,CAAC;CACjB;AAED;;;;;;;;;;;;;GAaG;AACH,wBAAsB,sBAAsB,CAC1C,MAAM,EAAE,eAAe,EACvB,OAAO,EAAE,sBAAsB,GAC9B,OAAO,CAAC,oBAAoB,CAAC,CAqB/B;AAED;;;;;;GAMG;AACH,eAAO,MAAM,6BAA6B,QAAS,CAAC;AAmBpD;;;;;;;GAOG;AACH,wBAAgB,oBAAoB,CAClC,OAAO,EAAE,yBAAyB,EAClC,OAAO,EAAE,MAAM,EACf,SAAS,EAAE,MAAM,GAChB;IAAE,OAAO,EAAE,kBAAkB,CAAC;IAAC,IAAI,EAAE,IAAI,CAAA;CAAE,CAM7C;AAED;;;GAGG;AACH,wBAAgB,oBAAoB,CAAC,OAAO,EAAE,kBAAkB,GAAG,MAAM,GAAG,SAAS,CAGpF;AAED;;;GAGG;AACH,wBAAgB,cAAc,CAAC,OAAO,EAAE,kBAAkB,GAAG,MAAM,GAAG,SAAS,CAQ9E"}

package/dist/transaction/authArgs.js

@@ -0,0 +1,108 @@
+import { AccountId, Word as WordType } from '@miden-sdk/miden-sdk';
+import { MultisigAuthArgsMissingError } from '../multisig/authArgErrors.js';
+import { getRawMidenClient, isPublicMidenClient } from '../raw-client.js';
+import { normalizeHexWord } from '../utils/encoding.js';
+import { randomWord } from '../utils/random.js';
+/**
+ * Layout of the multisig auth-args preimage the auth arg commits to, in felts:
+ * `[bound_block_num, approval_expiration_block_num, 0, 0, SALT, CONVERSION_INFO]`.
+ */
+const AUTH_ARGS_BOUND_BLOCK_INDEX = 0;
+const AUTH_ARGS_SALT_OFFSET = 4;
+const AUTH_ARGS_NUM_ELEMENTS = 12;
+/**
+ * Starts a request carrying the multisig auth args for `options.accountId`:
+ * the three-word preimage in the advice map and its commitment as the auth
+ * arg, which miden-client then leaves alone.
+ *
+ * The salt is `options.salt` or a fresh one. `approvalExpirationDelta` left
+ * out means the approval never expires, the upstream default. `boundBlockNum`
+ * left out binds the store's sync height, which is what a proposer wants; a
+ * rebuild pins the proposal's anchor block and the expiration the summary
+ * already binds.
+ *
+ * The salt is moved across the WASM boundary, so a handle is built here from
+ * the hex rather than taken from the caller, and nothing frees it afterwards.
+ */
+export async function multisigRequestBuilder(client, options) {
+    const { accountId, boundBlockNum, approvalExpirationDelta, midenRpcEndpoint } = options;
+    assertApprovalExpirationDelta(approvalExpirationDelta);
+    const saltHex = normalizeHexWord(options.salt ? options.salt.toHex() : randomWord().toHex());
+    const salt = WordType.fromHex(saltHex);
+    if (isPublicMidenClient(client)) {
+        const builder = await client.feeAwareTransactionRequestBuilder(accountId, {
+            feeConversionSalt: salt,
+            boundBlockNum,
+            approvalExpirationDelta,
+        });
+        return { builder, saltHex };
+    }
+    const rawClient = await getRawMidenClient(client, midenRpcEndpoint);
+    const builder = await rawClient.feeAwareTransactionRequestBuilder(AccountId.fromHex(accountId), approvalExpirationDelta ?? null, salt, boundBlockNum ?? null);
+    return { builder, saltHex };
+}
+/**
+ * The furthest a transaction may expire after its reference block
+ * (`MAX_EXPIRATION_BLOCK_DELTA` in the transaction kernel). The auth procedure
+ * clamps the approval expiration it applies to this, so a longer approval would
+ * outlive the transaction it authorizes: the summary would still say "valid"
+ * while the node already refuses the submission as expired.
+ */
+export const MAX_APPROVAL_EXPIRATION_DELTA = 65_535;
+/**
+ * Zero is not "no expiration": the kernel reads it as expired at the bound
+ * block and rejects the transaction. Refused here, where the caller can see why,
+ * together with a delta the auth procedure would silently clamp.
+ */
+function assertApprovalExpirationDelta(delta) {
+    if (delta === undefined) {
+        return;
+    }
+    if (!Number.isInteger(delta) || delta < 1 || delta > MAX_APPROVAL_EXPIRATION_DELTA) {
+        throw new Error(`approvalExpirationDelta must be a whole number of blocks between 1 and ${MAX_APPROVAL_EXPIRATION_DELTA}, ` +
+            `got ${delta}; omit it for an approval that does not expire`);
+    }
+}
+/**
+ * Builds the request and hands back the salt it commits to as a fresh handle
+ * the caller owns. Refuses a request that carries no auth arg:
+ * `feeAwareTransactionRequestBuilder` hands back an untouched builder for an
+ * account it cannot classify as a multisig, typically one the client's store
+ * does not hold, and such a request would only fail later, inside the VM,
+ * while the auth procedure pipes a preimage that is not there.
+ */
+export function buildMultisigRequest(builder, saltHex, accountId) {
+    const request = builder.build();
+    if (!request.authArg()) {
+        throw new MultisigAuthArgsMissingError(accountId);
+    }
+    return { request, salt: WordType.fromHex(saltHex) };
+}
+/**
+ * The block a multisig request's summary binds, read from the auth-args
+ * preimage the request carries. `undefined` when the request carries none.
+ */
+export function requestBoundBlockNum(request) {
+    const preimage = authArgsPreimage(request);
+    return preimage ? Number(preimage[AUTH_ARGS_BOUND_BLOCK_INDEX].asInt()) : undefined;
+}
+/**
+ * The salt a multisig request's summary binds, read from the auth-args
+ * preimage the request carries. `undefined` when the request carries none.
+ */
+export function requestSaltHex(request) {
+    const preimage = authArgsPreimage(request);
+    if (!preimage) {
+        return undefined;
+    }
+    return WordType.newFromFelts(preimage.slice(AUTH_ARGS_SALT_OFFSET, AUTH_ARGS_SALT_OFFSET + 4)).toHex();
+}
+function authArgsPreimage(request) {
+    const authArg = request.authArg();
+    if (!authArg) {
+        return undefined;
+    }
+    const felts = request.adviceMap().get(authArg);
+    return felts && felts.length === AUTH_ARGS_NUM_ELEMENTS ? felts : undefined;
+}
+//# sourceMappingURL=authArgs.js.map

package/dist/transaction/authArgs.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"authArgs.js","sourceRoot":"","sources":["../../src/transaction/authArgs.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,SAAS,EAAE,IAAI,IAAI,QAAQ,EAAE,MAAM,sBAAsB,CAAC;AACnE,OAAO,EAAE,4BAA4B,EAAE,MAAM,8BAA8B,CAAC;AAC5E,OAAO,EAAE,iBAAiB,EAAE,mBAAmB,EAAwB,MAAM,kBAAkB,CAAC;AAChG,OAAO,EAAE,gBAAgB,EAAE,MAAM,sBAAsB,CAAC;AACxD,OAAO,EAAE,UAAU,EAAE,MAAM,oBAAoB,CAAC;AAGhD;;;GAGG;AACH,MAAM,2BAA2B,GAAG,CAAC,CAAC;AACtC,MAAM,qBAAqB,GAAG,CAAC,CAAC;AAChC,MAAM,sBAAsB,GAAG,EAAE,CAAC;AAWlC;;;;;;;;;;;;;GAaG;AACH,MAAM,CAAC,KAAK,UAAU,sBAAsB,CAC1C,MAAuB,EACvB,OAA+B;IAE/B,MAAM,EAAE,SAAS,EAAE,aAAa,EAAE,uBAAuB,EAAE,gBAAgB,EAAE,GAAG,OAAO,CAAC;IACxF,6BAA6B,CAAC,uBAAuB,CAAC,CAAC;IACvD,MAAM,OAAO,GAAG,gBAAgB,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,UAAU,EAAE,CAAC,KAAK,EAAE,CAAC,CAAC;IAC7F,MAAM,IAAI,GAAG,QAAQ,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;IACvC,IAAI,mBAAmB,CAAC,MAAM,CAAC,EAAE,CAAC;QAChC,MAAM,OAAO,GAAG,MAAM,MAAM,CAAC,iCAAiC,CAAC,SAAS,EAAE;YACxE,iBAAiB,EAAE,IAAI;YACvB,aAAa;YACb,uBAAuB;SACxB,CAAC,CAAC;QACH,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC;IAC9B,CAAC;IACD,MAAM,SAAS,GAAG,MAAM,iBAAiB,CAAC,MAAM,EAAE,gBAAgB,CAAC,CAAC;IACpE,MAAM,OAAO,GAAG,MAAM,SAAS,CAAC,iCAAiC,CAC/D,SAAS,CAAC,OAAO,CAAC,SAAS,CAAC,EAC5B,uBAAuB,IAAI,IAAI,EAC/B,IAAI,EACJ,aAAa,IAAI,IAAI,CACtB,CAAC;IACF,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC;AAC9B,CAAC;AAED;;;;;;GAMG;AACH,MAAM,CAAC,MAAM,6BAA6B,GAAG,MAAM,CAAC;AAEpD;;;;GAIG;AACH,SAAS,6BAA6B,CAAC,KAAyB;IAC9D,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;QACxB,OAAO;IACT,CAAC;IACD,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,KAAK,CAAC,IAAI,KAAK,GAAG,CAAC,IAAI,KAAK,GAAG,6BAA6B,EAAE,CAAC;QACnF,MAAM,IAAI,KAAK,CACb,0EAA0E,6BAA6B,IAAI;YACzG,OAAO,KAAK,gDAAgD,CAC/D,CAAC;IACJ,CAAC;AACH,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,oBAAoB,CAClC,OAAkC,EAClC,OAAe,EACf,SAAiB;IAEjB,MAAM,OAAO,GAAG,OAAO,CAAC,KAAK,EAAE,CAAC;IAChC,IAAI,CAAC,OAAO,CAAC,OAAO,EAAE,EAAE,CAAC;QACvB,MAAM,IAAI,4BAA4B,CAAC,SAAS,CAAC,CAAC;IACpD,CAAC;IACD,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,QAAQ,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC;AACtD,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,oBAAoB,CAAC,OAA2B;IAC9D,MAAM,QAAQ,GAAG,gBAAgB,CAAC,OAAO,CAAC,CAAC;IAC3C,OAAO,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,2BAA2B,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;AACtF,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,cAAc,CAAC,OAA2B;IACxD,MAAM,QAAQ,GAAG,gBAAgB,CAAC,OAAO,CAAC,CAAC;IAC3C,IAAI,CAAC,QAAQ,EAAE,CAAC;QACd,OAAO,SAAS,CAAC;IACnB,CAAC;IACD,OAAO,QAAQ,CAAC,YAAY,CAC1B,QAAQ,CAAC,KAAK,CAAC,qBAAqB,EAAE,qBAAqB,GAAG,CAAC,CAAC,CACjE,CAAC,KAAK,EAAE,CAAC;AACZ,CAAC;AAED,SAAS,gBAAgB,CAAC,OAA2B;IACnD,MAAM,OAAO,GAAG,OAAO,CAAC,OAAO,EAAE,CAAC;IAClC,IAAI,CAAC,OAAO,EAAE,CAAC;QACb,OAAO,SAAS,CAAC;IACnB,CAAC;IACD,MAAM,KAAK,GAAG,OAAO,CAAC,SAAS,EAAE,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;IAC/C,OAAO,KAAK,IAAI,KAAK,CAAC,MAAM,KAAK,sBAAsB,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC;AAC9E,CAAC"}

package/dist/transaction/consumeNotes.d.ts

@@ -1,22 +1,26 @@
 import type { MidenClient, Note, TransactionRequest, WasmWebClient, Word } from '@miden-sdk/miden-sdk';
-import type { MidenClientSignatureOptions, SignatureOptions } from './options.js';
+import type { MidenClientMultisigRequestOptions, MultisigRequestOptions } from './options.js';
 /**
  * Build a consume-notes request from loaded `Note` objects (no local-store
  * read). v2 verification path for issue #229.
  */
-export declare function buildConsumeNotesTransactionRequestFromNotes(notes: Note[], options?: SignatureOptions): {
+export declare function buildConsumeNotesTransactionRequestFromNotes(client: MidenClient, notes: Note[], options: MidenClientMultisigRequestOptions): Promise<{
     request: TransactionRequest;
     salt: Word;
-};
+}>;
+export declare function buildConsumeNotesTransactionRequestFromNotes(client: WasmWebClient, notes: Note[], options: MultisigRequestOptions): Promise<{
+    request: TransactionRequest;
+    salt: Word;
+}>;
 /**
  * Legacy/creation adapter: fetches notes from the local store and delegates
  * to the from-notes variant. v2 verification MUST NOT call this.
  */
-export declare function buildConsumeNotesTransactionRequest(client: MidenClient, noteIds: string[], options: MidenClientSignatureOptions): Promise<{
+export declare function buildConsumeNotesTransactionRequest(client: MidenClient, noteIds: string[], options: MidenClientMultisigRequestOptions): Promise<{
     request: TransactionRequest;
     salt: Word;
 }>;
-export declare function buildConsumeNotesTransactionRequest(client: WasmWebClient, noteIds: string[], options?: SignatureOptions): Promise<{
+export declare function buildConsumeNotesTransactionRequest(client: WasmWebClient, noteIds: string[], options: MultisigRequestOptions): Promise<{
     request: TransactionRequest;
     salt: Word;
 }>;