@openzeppelin/miden-multisig-client 0.18.0 → 0.18.2

package/dist/types/proposal.d.ts

@@ -30,11 +30,17 @@ interface BaseProposalMetadata {
     saltHex?: string;
     requiredSignatures?: number;
     /**
-     * Base64-serialized Miden `ChainAnchor` at the block the proposal's
-     * transaction summary binds, the proposer's sync height when it built the
-     * request. Required, and checked against the summary's block commitment: a
-     * rebuild binds the block it names. The proposal executes at the chain tip,
-     * not at the anchor; 0.18.0-rc.1 clients still re-execute at it.
+     * The block the proposal's transaction summary binds: the proposer's sync
+     * height when it built the request, or the block a custom producer's request
+     * names. Not signed: this SDK reads the block from the summary and refuses a
+     * proposal whose value disagrees (`BoundBlockMismatchError`), as the Rust SDK
+     * does. Every proposal this SDK creates writes it.
+     */
+    boundBlockNum?: number;
+    /**
+     * Legacy: the base64 Miden `ChainAnchor` 0.18 clients wrote instead of
+     * `boundBlockNum`. This SDK never sets or reads it; the codec passes it
+     * through so an old proposal exports and imports unchanged.
      */
     chainAnchor?: string;
 }

package/dist/types/proposal.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"proposal.d.ts","sourceRoot":"","sources":["../../src/types/proposal.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,iBAAiB,EAAE,eAAe,EAAE,MAAM,+BAA+B,CAAC;AACxF,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,kBAAkB,CAAC;AAEtD;;;;;GAKG;AACH,MAAM,MAAM,YAAY,GACpB,YAAY,GACZ,eAAe,GACf,kBAAkB,GAClB,4BAA4B,GAC5B,iBAAiB,GACjB,eAAe,GACf,MAAM,GACN,QAAQ,CAAC;AAEb,MAAM,MAAM,cAAc,GAAG,SAAS,GAAG,OAAO,GAAG,WAAW,CAAC;AAE/D,MAAM,MAAM,yBAAyB,GACjC;IAAE,IAAI,EAAE,SAAS,CAAC;IAAC,mBAAmB,EAAE,MAAM,CAAC;IAAC,kBAAkB,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,MAAM,EAAE,CAAA;CAAE,GAC/F;IAAE,IAAI,EAAE,OAAO,CAAA;CAAE,GACjB;IAAE,IAAI,EAAE,WAAW,CAAA;CAAE,CAAC;AAE1B,MAAM,WAAW,sBAAsB;IACrC,QAAQ,EAAE,MAAM,CAAC;IACjB,SAAS,EAAE,iBAAiB,CAAC;IAC7B,SAAS,EAAE,MAAM,CAAC;CACnB;AAED,MAAM,MAAM,4BAA4B,GAAG,sBAAsB,CAAC;AAElE,UAAU,oBAAoB;IAC5B,YAAY,EAAE,YAAY,CAAC;IAC3B,WAAW,EAAE,MAAM,CAAC;IACpB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,kBAAkB,CAAC,EAAE,MAAM,CAAC;IAC5B;;;;;;OAMG;IACH,WAAW,CAAC,EAAE,MAAM,CAAC;CACtB;AAED,MAAM,WAAW,6BAA8B,SAAQ,oBAAoB;IACzE,YAAY,EAAE,YAAY,GAAG,eAAe,GAAG,kBAAkB,CAAC;IAClE,eAAe,EAAE,MAAM,CAAC;IACxB,uBAAuB,EAAE,MAAM,EAAE,CAAC;CACnC;AAED,MAAM,WAAW,8BAA+B,SAAQ,oBAAoB;IAC1E,YAAY,EAAE,iBAAiB,CAAC;IAChC,iBAAiB,EAAE,MAAM,CAAC;IAC1B,mBAAmB,CAAC,EAAE,MAAM,CAAC;IAC7B,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,uBAAuB,CAAC,EAAE,MAAM,EAAE,CAAC;CACpC;AAED,MAAM,WAAW,wCAAyC,SAAQ,oBAAoB;IACpF,YAAY,EAAE,4BAA4B,CAAC;IAC3C,eAAe,EAAE,aAAa,CAAC;IAC/B,eAAe,EAAE,MAAM,CAAC;CACzB;AAED,gFAAgF;AAChF,eAAO,MAAM,iCAAiC,EAAG,CAAU,CAAC;AAE5D,iEAAiE;AACjE,eAAO,MAAM,gCAAgC,QAAa,CAAC;AAE3D,MAAM,WAAW,4BAA6B,SAAQ,oBAAoB;IACxE,YAAY,EAAE,eAAe,CAAC;IAC9B,OAAO,EAAE,MAAM,EAAE,CAAC;IAClB,4DAA4D;IAC5D,eAAe,CAAC,EAAE,CAAC,GAAG,CAAC,CAAC;IACxB,kFAAkF;IAClF,KAAK,CAAC,EAAE,MAAM,EAAE,CAAC;CAClB;AAED,wBAAgB,gBAAgB,CAAC,EAAE,EAAE,4BAA4B,GAAG,OAAO,CAE1E;AAED,wBAAgB,gBAAgB,CAAC,EAAE,EAAE,4BAA4B,GAAG,OAAO,CAE1E;AAED,6DAA6D;AAC7D,MAAM,MAAM,kBAAkB,GAAG,QAAQ,GAAG,SAAS,CAAC;AAEtD,wBAAgB,oBAAoB,CAAC,KAAK,EAAE,MAAM,GAAG,KAAK,IAAI,kBAAkB,CAE/E;AAED,8EAA8E;AAC9E,eAAO,MAAM,sBAAsB,aAAc,CAAC;AAElD;;;;;;GAMG;AACH,wBAAgB,gBAAgB,CAC9B,KAAK,EAAE,eAAe,GAAG,gBAAgB,EACzC,KAAK,EAAE,MAAM,GAAG,SAAS,GACxB,MAAM,GAAG,SAAS,CAUpB;AAED,MAAM,WAAW,oBAAqB,SAAQ,oBAAoB;IAChE,YAAY,EAAE,MAAM,CAAC;IACrB,WAAW,EAAE,MAAM,CAAC;IACpB,QAAQ,EAAE,MAAM,CAAC;IACjB,MAAM,EAAE,MAAM,CAAC;IACf,2FAA2F;IAC3F,QAAQ,CAAC,EAAE,kBAAkB,CAAC;IAC9B;;;;;OAKG;IACH,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,sEAAsE;IACtE,cAAc,CAAC,EAAE,MAAM,CAAC;CACzB;AAED,MAAM,WAAW,sBAAuB,SAAQ,oBAAoB;IAClE,YAAY,EAAE,QAAQ,CAAC;IACvB,4EAA4E;IAC5E,eAAe,EAAE,MAAM,CAAC;CACzB;AAED,MAAM,MAAM,gBAAgB,GACxB,6BAA6B,GAC7B,8BAA8B,GAC9B,wCAAwC,GACxC,4BAA4B,GAC5B,oBAAoB,GACpB,sBAAsB,CAAC;AAE3B,MAAM,WAAW,QAAQ;IACvB,EAAE,EAAE,MAAM,CAAC;IACX,SAAS,EAAE,MAAM,CAAC;IAClB,KAAK,EAAE,MAAM,CAAC;IACd,MAAM,EAAE,cAAc,CAAC;IACvB,SAAS,EAAE,MAAM,CAAC;IAClB,UAAU,EAAE,sBAAsB,EAAE,CAAC;IACrC,QAAQ,EAAE,gBAAgB,CAAC;IAC3B;;;;;;OAMG;IACH,YAAY,EAAE,oBAAoB,CAAC;CACpC;AAED;;;;;;;GAOG;AACH,MAAM,MAAM,oBAAoB,GAC5B;IAAE,MAAM,EAAE,WAAW,CAAA;CAAE,GACvB;IAAE,MAAM,EAAE,UAAU,CAAA;CAAE,GACtB;IAAE,MAAM,EAAE,QAAQ,CAAC;IAAC,SAAS,EAAE,OAAO,CAAC;IAAC,OAAO,EAAE,MAAM,CAAA;CAAE,CAAC;AAE9D;;;;GAIG;AACH,wBAAgB,oBAAoB,CAAC,QAAQ,EAAE,QAAQ,GAAG,OAAO,CAEhE;AAED,MAAM,WAAW,mBAAmB;IAClC,EAAE,EAAE,MAAM,CAAC;IACX,UAAU,EAAE,MAAM,CAAC;IACnB,SAAS,EAAE,MAAM,CAAC;IAClB,KAAK,EAAE,MAAM,CAAC;IACd,MAAM,EAAE,yBAAyB,CAAC;IAClC,SAAS,EAAE,MAAM,CAAC;IAClB,UAAU,EAAE,4BAA4B,EAAE,CAAC;IAC3C,QAAQ,EAAE,gBAAgB,CAAC;CAC5B;AAED,MAAM,WAAW,gBAAgB;IAC/B,SAAS,EAAE,MAAM,CAAC;IAClB,KAAK,EAAE,MAAM,CAAC;IACd,UAAU,EAAE,MAAM,CAAC;IACnB,eAAe,EAAE,MAAM,CAAC;IACxB,UAAU,EAAE,KAAK,CAAC;QAChB,UAAU,EAAE,MAAM,CAAC;QACnB,YAAY,EAAE,MAAM,CAAC;QACrB,MAAM,CAAC,EAAE,eAAe,CAAC;QACzB,SAAS,CAAC,EAAE,MAAM,CAAC;QACnB,aAAa,CAAC,EAAE,QAAQ,CAAC;QACzB,SAAS,CAAC,EAAE,MAAM,CAAC;KACpB,CAAC,CAAC;IACH,QAAQ,EAAE,gBAAgB,CAAC;CAC5B;AAED,MAAM,MAAM,2BAA2B,GAAG,gBAAgB,CAAC;AAE3D,MAAM,WAAW,6BAA6B;IAC5C,UAAU,EAAE,MAAM,CAAC;IACnB,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,MAAM,CAAC,EAAE,eAAe,CAAC;CAC1B"}
+{"version":3,"file":"proposal.d.ts","sourceRoot":"","sources":["../../src/types/proposal.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,iBAAiB,EAAE,eAAe,EAAE,MAAM,+BAA+B,CAAC;AACxF,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,kBAAkB,CAAC;AAEtD;;;;;GAKG;AACH,MAAM,MAAM,YAAY,GACpB,YAAY,GACZ,eAAe,GACf,kBAAkB,GAClB,4BAA4B,GAC5B,iBAAiB,GACjB,eAAe,GACf,MAAM,GACN,QAAQ,CAAC;AAEb,MAAM,MAAM,cAAc,GAAG,SAAS,GAAG,OAAO,GAAG,WAAW,CAAC;AAE/D,MAAM,MAAM,yBAAyB,GACjC;IAAE,IAAI,EAAE,SAAS,CAAC;IAAC,mBAAmB,EAAE,MAAM,CAAC;IAAC,kBAAkB,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,MAAM,EAAE,CAAA;CAAE,GAC/F;IAAE,IAAI,EAAE,OAAO,CAAA;CAAE,GACjB;IAAE,IAAI,EAAE,WAAW,CAAA;CAAE,CAAC;AAE1B,MAAM,WAAW,sBAAsB;IACrC,QAAQ,EAAE,MAAM,CAAC;IACjB,SAAS,EAAE,iBAAiB,CAAC;IAC7B,SAAS,EAAE,MAAM,CAAC;CACnB;AAED,MAAM,MAAM,4BAA4B,GAAG,sBAAsB,CAAC;AAElE,UAAU,oBAAoB;IAC5B,YAAY,EAAE,YAAY,CAAC;IAC3B,WAAW,EAAE,MAAM,CAAC;IACpB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,kBAAkB,CAAC,EAAE,MAAM,CAAC;IAC5B;;;;;;OAMG;IACH,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB;;;;OAIG;IACH,WAAW,CAAC,EAAE,MAAM,CAAC;CACtB;AAED,MAAM,WAAW,6BAA8B,SAAQ,oBAAoB;IACzE,YAAY,EAAE,YAAY,GAAG,eAAe,GAAG,kBAAkB,CAAC;IAClE,eAAe,EAAE,MAAM,CAAC;IACxB,uBAAuB,EAAE,MAAM,EAAE,CAAC;CACnC;AAED,MAAM,WAAW,8BAA+B,SAAQ,oBAAoB;IAC1E,YAAY,EAAE,iBAAiB,CAAC;IAChC,iBAAiB,EAAE,MAAM,CAAC;IAC1B,mBAAmB,CAAC,EAAE,MAAM,CAAC;IAC7B,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,uBAAuB,CAAC,EAAE,MAAM,EAAE,CAAC;CACpC;AAED,MAAM,WAAW,wCAAyC,SAAQ,oBAAoB;IACpF,YAAY,EAAE,4BAA4B,CAAC;IAC3C,eAAe,EAAE,aAAa,CAAC;IAC/B,eAAe,EAAE,MAAM,CAAC;CACzB;AAED,gFAAgF;AAChF,eAAO,MAAM,iCAAiC,EAAG,CAAU,CAAC;AAE5D,iEAAiE;AACjE,eAAO,MAAM,gCAAgC,QAAa,CAAC;AAE3D,MAAM,WAAW,4BAA6B,SAAQ,oBAAoB;IACxE,YAAY,EAAE,eAAe,CAAC;IAC9B,OAAO,EAAE,MAAM,EAAE,CAAC;IAClB,4DAA4D;IAC5D,eAAe,CAAC,EAAE,CAAC,GAAG,CAAC,CAAC;IACxB,kFAAkF;IAClF,KAAK,CAAC,EAAE,MAAM,EAAE,CAAC;CAClB;AAED,wBAAgB,gBAAgB,CAAC,EAAE,EAAE,4BAA4B,GAAG,OAAO,CAE1E;AAED,wBAAgB,gBAAgB,CAAC,EAAE,EAAE,4BAA4B,GAAG,OAAO,CAE1E;AAED,6DAA6D;AAC7D,MAAM,MAAM,kBAAkB,GAAG,QAAQ,GAAG,SAAS,CAAC;AAEtD,wBAAgB,oBAAoB,CAAC,KAAK,EAAE,MAAM,GAAG,KAAK,IAAI,kBAAkB,CAE/E;AAED,8EAA8E;AAC9E,eAAO,MAAM,sBAAsB,aAAc,CAAC;AAElD;;;;;;GAMG;AACH,wBAAgB,gBAAgB,CAC9B,KAAK,EAAE,eAAe,GAAG,gBAAgB,EACzC,KAAK,EAAE,MAAM,GAAG,SAAS,GACxB,MAAM,GAAG,SAAS,CAUpB;AAED,MAAM,WAAW,oBAAqB,SAAQ,oBAAoB;IAChE,YAAY,EAAE,MAAM,CAAC;IACrB,WAAW,EAAE,MAAM,CAAC;IACpB,QAAQ,EAAE,MAAM,CAAC;IACjB,MAAM,EAAE,MAAM,CAAC;IACf,2FAA2F;IAC3F,QAAQ,CAAC,EAAE,kBAAkB,CAAC;IAC9B;;;;;OAKG;IACH,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,sEAAsE;IACtE,cAAc,CAAC,EAAE,MAAM,CAAC;CACzB;AAED,MAAM,WAAW,sBAAuB,SAAQ,oBAAoB;IAClE,YAAY,EAAE,QAAQ,CAAC;IACvB,4EAA4E;IAC5E,eAAe,EAAE,MAAM,CAAC;CACzB;AAED,MAAM,MAAM,gBAAgB,GACxB,6BAA6B,GAC7B,8BAA8B,GAC9B,wCAAwC,GACxC,4BAA4B,GAC5B,oBAAoB,GACpB,sBAAsB,CAAC;AAE3B,MAAM,WAAW,QAAQ;IACvB,EAAE,EAAE,MAAM,CAAC;IACX,SAAS,EAAE,MAAM,CAAC;IAClB,KAAK,EAAE,MAAM,CAAC;IACd,MAAM,EAAE,cAAc,CAAC;IACvB,SAAS,EAAE,MAAM,CAAC;IAClB,UAAU,EAAE,sBAAsB,EAAE,CAAC;IACrC,QAAQ,EAAE,gBAAgB,CAAC;IAC3B;;;;;;OAMG;IACH,YAAY,EAAE,oBAAoB,CAAC;CACpC;AAED;;;;;;;GAOG;AACH,MAAM,MAAM,oBAAoB,GAC5B;IAAE,MAAM,EAAE,WAAW,CAAA;CAAE,GACvB;IAAE,MAAM,EAAE,UAAU,CAAA;CAAE,GACtB;IAAE,MAAM,EAAE,QAAQ,CAAC;IAAC,SAAS,EAAE,OAAO,CAAC;IAAC,OAAO,EAAE,MAAM,CAAA;CAAE,CAAC;AAE9D;;;;GAIG;AACH,wBAAgB,oBAAoB,CAAC,QAAQ,EAAE,QAAQ,GAAG,OAAO,CAEhE;AAED,MAAM,WAAW,mBAAmB;IAClC,EAAE,EAAE,MAAM,CAAC;IACX,UAAU,EAAE,MAAM,CAAC;IACnB,SAAS,EAAE,MAAM,CAAC;IAClB,KAAK,EAAE,MAAM,CAAC;IACd,MAAM,EAAE,yBAAyB,CAAC;IAClC,SAAS,EAAE,MAAM,CAAC;IAClB,UAAU,EAAE,4BAA4B,EAAE,CAAC;IAC3C,QAAQ,EAAE,gBAAgB,CAAC;CAC5B;AAED,MAAM,WAAW,gBAAgB;IAC/B,SAAS,EAAE,MAAM,CAAC;IAClB,KAAK,EAAE,MAAM,CAAC;IACd,UAAU,EAAE,MAAM,CAAC;IACnB,eAAe,EAAE,MAAM,CAAC;IACxB,UAAU,EAAE,KAAK,CAAC;QAChB,UAAU,EAAE,MAAM,CAAC;QACnB,YAAY,EAAE,MAAM,CAAC;QACrB,MAAM,CAAC,EAAE,eAAe,CAAC;QACzB,SAAS,CAAC,EAAE,MAAM,CAAC;QACnB,aAAa,CAAC,EAAE,QAAQ,CAAC;QACzB,SAAS,CAAC,EAAE,MAAM,CAAC;KACpB,CAAC,CAAC;IACH,QAAQ,EAAE,gBAAgB,CAAC;CAC5B;AAED,MAAM,MAAM,2BAA2B,GAAG,gBAAgB,CAAC;AAE3D,MAAM,WAAW,6BAA6B;IAC5C,UAAU,EAAE,MAAM,CAAC;IACnB,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,MAAM,CAAC,EAAE,eAAe,CAAC;CAC1B"}

package/dist/types/proposal.js.map

@@ -1 +1 @@
-{"version":3,"file":"proposal.js","sourceRoot":"","sources":["../../src/types/proposal.ts"],"names":[],"mappings":"AAqEA,gFAAgF;AAChF,MAAM,CAAC,MAAM,iCAAiC,GAAG,CAAU,CAAC;AAE5D,iEAAiE;AACjE,MAAM,CAAC,MAAM,gCAAgC,GAAG,GAAG,GAAG,IAAI,CAAC;AAW3D,MAAM,UAAU,gBAAgB,CAAC,EAAgC;IAC/D,OAAO,EAAE,CAAC,eAAe,KAAK,iCAAiC,CAAC;AAClE,CAAC;AAED,MAAM,UAAU,gBAAgB,CAAC,EAAgC;IAC/D,OAAO,EAAE,CAAC,eAAe,KAAK,SAAS,IAAI,EAAE,CAAC,eAAe,KAAK,CAAC,CAAC;AACtE,CAAC;AAKD,MAAM,UAAU,oBAAoB,CAAC,KAAa;IAChD,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,SAAS,CAAC;AACnD,CAAC;AAED,8EAA8E;AAC9E,MAAM,CAAC,MAAM,sBAAsB,GAAG,WAAW,CAAC;AAElD;;;;;;GAMG;AACH,MAAM,UAAU,gBAAgB,CAC9B,KAAyC,EACzC,KAAyB;IAEzB,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;QACxB,OAAO,SAAS,CAAC;IACnB,CAAC;IACD,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,KAAK,CAAC,IAAI,KAAK,GAAG,CAAC,IAAI,KAAK,GAAG,sBAAsB,EAAE,CAAC;QAC5E,MAAM,IAAI,KAAK,CACb,eAAe,KAAK,KAAK,KAAK,wCAAwC,sBAAsB,EAAE,CAC/F,CAAC;IACJ,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAiED;;;;GAIG;AACH,MAAM,UAAU,oBAAoB,CAAC,QAAkB;IACrD,OAAO,QAAQ,CAAC,YAAY,CAAC,MAAM,KAAK,UAAU,IAAI,QAAQ,CAAC,MAAM,KAAK,OAAO,CAAC;AACpF,CAAC"}
+{"version":3,"file":"proposal.js","sourceRoot":"","sources":["../../src/types/proposal.ts"],"names":[],"mappings":"AA2EA,gFAAgF;AAChF,MAAM,CAAC,MAAM,iCAAiC,GAAG,CAAU,CAAC;AAE5D,iEAAiE;AACjE,MAAM,CAAC,MAAM,gCAAgC,GAAG,GAAG,GAAG,IAAI,CAAC;AAW3D,MAAM,UAAU,gBAAgB,CAAC,EAAgC;IAC/D,OAAO,EAAE,CAAC,eAAe,KAAK,iCAAiC,CAAC;AAClE,CAAC;AAED,MAAM,UAAU,gBAAgB,CAAC,EAAgC;IAC/D,OAAO,EAAE,CAAC,eAAe,KAAK,SAAS,IAAI,EAAE,CAAC,eAAe,KAAK,CAAC,CAAC;AACtE,CAAC;AAKD,MAAM,UAAU,oBAAoB,CAAC,KAAa;IAChD,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,SAAS,CAAC;AACnD,CAAC;AAED,8EAA8E;AAC9E,MAAM,CAAC,MAAM,sBAAsB,GAAG,WAAW,CAAC;AAElD;;;;;;GAMG;AACH,MAAM,UAAU,gBAAgB,CAC9B,KAAyC,EACzC,KAAyB;IAEzB,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;QACxB,OAAO,SAAS,CAAC;IACnB,CAAC;IACD,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,KAAK,CAAC,IAAI,KAAK,GAAG,CAAC,IAAI,KAAK,GAAG,sBAAsB,EAAE,CAAC;QAC5E,MAAM,IAAI,KAAK,CACb,eAAe,KAAK,KAAK,KAAK,wCAAwC,sBAAsB,EAAE,CAC/F,CAAC;IACJ,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAiED;;;;GAIG;AACH,MAAM,UAAU,oBAAoB,CAAC,QAAkB;IACrD,OAAO,QAAQ,CAAC,YAAY,CAAC,MAAM,KAAK,UAAU,IAAI,QAAQ,CAAC,MAAM,KAAK,OAAO,CAAC;AACpF,CAAC"}

package/dist/utils/eip712.d.ts

@@ -1,80 +1,37 @@
+import type { SessionGrantFields } from '@openzeppelin/guardian-client';
 type TypedField = {
     name: string;
     type: string;
 };
-declare function typedData(name: string, primaryType: string, fieldName: string, value: string): {
-    types: {
-        [primaryType]: {
-            name: string;
-            type: string;
-        }[];
-        EIP712Domain: TypedField[];
-    };
-    primaryType: string;
-    domain: {
-        name: string;
-        version: string;
-    };
-    message: {
-        [fieldName]: string;
-    };
-};
-export declare function guardianRequestTypedData(requestHash: Uint8Array): {
-    types: {
-        [x: string]: TypedField[];
-        EIP712Domain: TypedField[];
-    };
+/**
+ * EIP-712 typed data over `string`, `bytes`, `bytes32` and `uint64` fields,
+ * as Guardian signs it. Integers are decimal strings, as wallets accept them.
+ */
+export interface GuardianTypedData {
+    types: Record<string, TypedField[]>;
     primaryType: string;
     domain: {
         name: string;
         version: string;
     };
-    message: {
-        [x: string]: string;
-    };
-};
-export declare function guardianLookupTypedData(lookupHash: Uint8Array): {
-    types: {
-        [x: string]: TypedField[];
-        EIP712Domain: TypedField[];
-    };
-    primaryType: string;
-    domain: {
-        name: string;
-        version: string;
-    };
-    message: {
-        [x: string]: string;
-    };
-};
-export declare function midenTransactionTypedData(txSummaryHash: Uint8Array): {
-    types: {
-        [x: string]: TypedField[];
-        EIP712Domain: TypedField[];
-    };
-    primaryType: string;
-    domain: {
-        name: string;
-        version: string;
-    };
-    message: {
-        [x: string]: string;
-    };
-};
-export declare function guardianKeyDiscoveryTypedData(challenge: Uint8Array): {
-    types: {
-        [x: string]: TypedField[];
-        EIP712Domain: TypedField[];
-    };
-    primaryType: string;
-    domain: {
-        name: string;
-        version: string;
-    };
-    message: {
-        [x: string]: string;
-    };
-};
-export declare function typedDataDigest(data: ReturnType<typeof typedData>): Uint8Array;
+    message: Record<string, string>;
+}
+export declare function guardianRequestTypedData(requestHash: Uint8Array): GuardianTypedData;
+export declare function guardianLookupTypedData(lookupHash: Uint8Array): GuardianTypedData;
+export declare function midenTransactionTypedData(txSummaryHash: Uint8Array): GuardianTypedData;
+export declare function guardianKeyDiscoveryTypedData(challenge: Uint8Array): GuardianTypedData;
+/**
+ * Readable session grant: every value Guardian binds is a top-level member,
+ * so the wallet displays the signer, the delegated key, the website, the
+ * lifetime (with a readable expiry), the scope, the Guardian key and the
+ * network instead of a hash.
+ */
+export declare function guardianSessionTypedData(grant: SessionGrantFields): GuardianTypedData;
+/**
+ * Readable revoke-all: the signer whose sessions end and the request
+ * timestamp in milliseconds.
+ */
+export declare function guardianSessionRevokeAllTypedData(signerCommitment: string, timestampMs: number): GuardianTypedData;
+export declare function typedDataDigest(data: GuardianTypedData): Uint8Array;
 export {};
 //# sourceMappingURL=eip712.d.ts.map

package/dist/utils/eip712.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"eip712.d.ts","sourceRoot":"","sources":["../../src/utils/eip712.ts"],"names":[],"mappings":"AAGA,KAAK,UAAU,GAAG;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAA;CAAE,CAAC;AAUjD,iBAAS,SAAS,CAAC,IAAI,EAAE,MAAM,EAAE,WAAW,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM;;QAIhF,CAAC,WAAW,CAAC;;;YAAwC;;;;;;;;;QAI5C,CAAC,SAAS,CAAC,SAAO;;EAEhC;AAED,wBAAgB,wBAAwB,CAAC,WAAW,EAAE,UAAU;;;;;;;;;;;;;EAE/D;AAED,wBAAgB,uBAAuB,CAAC,UAAU,EAAE,UAAU;;;;;;;;;;;;;EAE7D;AAED,wBAAgB,yBAAyB,CAAC,aAAa,EAAE,UAAU;;;;;;;;;;;;;EAElE;AAED,wBAAgB,6BAA6B,CAAC,SAAS,EAAE,UAAU;;;;;;;;;;;;;EAElE;AAED,wBAAgB,eAAe,CAAC,IAAI,EAAE,UAAU,CAAC,OAAO,SAAS,CAAC,GAAG,UAAU,CAe9E"}
+{"version":3,"file":"eip712.d.ts","sourceRoot":"","sources":["../../src/utils/eip712.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,+BAA+B,CAAC;AAIxE,KAAK,UAAU,GAAG;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAA;CAAE,CAAC;AAEjD;;;GAGG;AACH,MAAM,WAAW,iBAAiB;IAChC,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,UAAU,EAAE,CAAC,CAAC;IACpC,WAAW,EAAE,MAAM,CAAC;IACpB,MAAM,EAAE;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,MAAM,CAAA;KAAE,CAAC;IAC1C,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;CACjC;AA8BD,wBAAgB,wBAAwB,CAAC,WAAW,EAAE,UAAU,qBAE/D;AAED,wBAAgB,uBAAuB,CAAC,UAAU,EAAE,UAAU,qBAE7D;AAED,wBAAgB,yBAAyB,CAAC,aAAa,EAAE,UAAU,qBAElE;AAED,wBAAgB,6BAA6B,CAAC,SAAS,EAAE,UAAU,qBAElE;AAED;;;;;GAKG;AACH,wBAAgB,wBAAwB,CAAC,KAAK,EAAE,kBAAkB,GAAG,iBAAiB,CA8BrF;AAED;;;GAGG;AACH,wBAAgB,iCAAiC,CAC/C,gBAAgB,EAAE,MAAM,EACxB,WAAW,EAAE,MAAM,GAClB,iBAAiB,CAgBnB;AAgCD,wBAAgB,eAAe,CAAC,IAAI,EAAE,iBAAiB,GAAG,UAAU,CAqBnE"}

package/dist/utils/eip712.js

@@ -1,8 +1,11 @@
 import { keccak_256 } from '@noble/hashes/sha3.js';
 import { bytesToHex, hexToBytes } from './encoding.js';
+import { SESSION_GRANT_SCOPE, formatUtcSeconds } from '../session/grant.js';
 const EIP191_PREFIX = 0x19;
 const EIP712_VERSION = 0x01;
 const DOMAIN_VERSION = '1';
+const SESSION_DOMAIN_NAME = 'Guardian Session';
+const UINT64_MAX = 0xffffffffffffffffn;
 const domainFields = [
     { name: 'name', type: 'string' },
     { name: 'version', type: 'string' },
@@ -30,16 +33,106 @@ export function midenTransactionTypedData(txSummaryHash) {
 export function guardianKeyDiscoveryTypedData(challenge) {
     return typedData('Guardian Key Discovery', 'GuardianKeyDiscovery', 'challenge', bytesToHex(challenge));
 }
+/**
+ * Readable session grant: every value Guardian binds is a top-level member,
+ * so the wallet displays the signer, the delegated key, the website, the
+ * lifetime (with a readable expiry), the scope, the Guardian key and the
+ * network instead of a hash.
+ */
+export function guardianSessionTypedData(grant) {
+    return {
+        types: {
+            EIP712Domain: domainFields,
+            GuardianSession: [
+                { name: 'signer', type: 'bytes32' },
+                { name: 'sessionKey', type: 'bytes' },
+                { name: 'origin', type: 'string' },
+                { name: 'issuedAt', type: 'uint64' },
+                { name: 'expiresAt', type: 'uint64' },
+                { name: 'expires', type: 'string' },
+                { name: 'scope', type: 'string' },
+                { name: 'guardianKey', type: 'bytes32' },
+                { name: 'network', type: 'string' },
+            ],
+        },
+        primaryType: 'GuardianSession',
+        domain: { name: SESSION_DOMAIN_NAME, version: DOMAIN_VERSION },
+        message: {
+            signer: grant.signerCommitment,
+            sessionKey: grant.sessionPublicKey,
+            origin: grant.origin,
+            issuedAt: String(grant.issuedAt),
+            expiresAt: String(grant.expiresAt),
+            expires: formatUtcSeconds(grant.expiresAt),
+            scope: SESSION_GRANT_SCOPE,
+            guardianKey: grant.guardianCommitment,
+            network: grant.network,
+        },
+    };
+}
+/**
+ * Readable revoke-all: the signer whose sessions end and the request
+ * timestamp in milliseconds.
+ */
+export function guardianSessionRevokeAllTypedData(signerCommitment, timestampMs) {
+    if (!Number.isInteger(timestampMs) || timestampMs < 0) {
+        throw new Error('Revoke-all timestamp must be a non-negative integer');
+    }
+    return {
+        types: {
+            EIP712Domain: domainFields,
+            GuardianSessionRevokeAll: [
+                { name: 'signer', type: 'bytes32' },
+                { name: 'timestamp', type: 'uint64' },
+            ],
+        },
+        primaryType: 'GuardianSessionRevokeAll',
+        domain: { name: SESSION_DOMAIN_NAME, version: DOMAIN_VERSION },
+        message: { signer: signerCommitment, timestamp: String(timestampMs) },
+    };
+}
+function encodeField(field, value) {
+    switch (field.type) {
+        case 'string':
+            return keccak_256(new TextEncoder().encode(value));
+        case 'bytes':
+            return keccak_256(hexToBytes(value));
+        case 'bytes32': {
+            const bytes = hexToBytes(value);
+            if (bytes.length !== 32) {
+                throw new Error(`EIP-712 field ${field.name} must be 32 bytes`);
+            }
+            return bytes;
+        }
+        case 'uint64': {
+            let remaining = BigInt(value);
+            if (remaining < 0n || remaining > UINT64_MAX) {
+                throw new Error(`EIP-712 field ${field.name} must fit in uint64`);
+            }
+            const bytes = new Uint8Array(32);
+            for (let i = 31; i >= 24; i -= 1) {
+                bytes[i] = Number(remaining & 0xffn);
+                remaining >>= 8n;
+            }
+            return bytes;
+        }
+        default:
+            throw new Error(`Unsupported EIP-712 field type: ${field.type}`);
+    }
+}
 export function typedDataDigest(data) {
-    const domainType = new TextEncoder().encode('EIP712Domain(string name,string version)');
-    const primaryType = new TextEncoder().encode(`${data.primaryType}(bytes32 ${Object.keys(data.message)[0]})`);
+    const encoder = new TextEncoder();
+    const fields = data.types[data.primaryType];
+    const typeString = `${data.primaryType}(${fields.map((f) => `${f.type} ${f.name}`).join(',')})`;
     const domain = new Uint8Array(96);
-    domain.set(keccak_256(domainType));
-    domain.set(keccak_256(new TextEncoder().encode(data.domain.name)), 32);
-    domain.set(keccak_256(new TextEncoder().encode(data.domain.version)), 64);
-    const struct = new Uint8Array(64);
-    struct.set(keccak_256(primaryType));
-    struct.set(hexToBytes(Object.values(data.message)[0]), 32);
+    domain.set(keccak_256(encoder.encode('EIP712Domain(string name,string version)')));
+    domain.set(keccak_256(encoder.encode(data.domain.name)), 32);
+    domain.set(keccak_256(encoder.encode(data.domain.version)), 64);
+    const struct = new Uint8Array(32 * (fields.length + 1));
+    struct.set(keccak_256(encoder.encode(typeString)));
+    fields.forEach((field, index) => {
+        struct.set(encodeField(field, data.message[field.name]), 32 * (index + 1));
+    });
     const preimage = new Uint8Array(66);
     preimage.set([EIP191_PREFIX, EIP712_VERSION]);
     preimage.set(keccak_256(domain), 2);

package/dist/utils/eip712.js.map

@@ -1 +1 @@
-{"version":3,"file":"eip712.js","sourceRoot":"","sources":["../../src/utils/eip712.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,uBAAuB,CAAC;AACnD,OAAO,EAAE,UAAU,EAAE,UAAU,EAAE,MAAM,eAAe,CAAC;AAGvD,MAAM,aAAa,GAAG,IAAI,CAAC;AAC3B,MAAM,cAAc,GAAG,IAAI,CAAC;AAC5B,MAAM,cAAc,GAAG,GAAG,CAAC;AAE3B,MAAM,YAAY,GAAiB;IACjC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,QAAQ,EAAE;IAChC,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,QAAQ,EAAE;CACpC,CAAC;AAEF,SAAS,SAAS,CAAC,IAAY,EAAE,WAAmB,EAAE,SAAiB,EAAE,KAAa;IACpF,OAAO;QACL,KAAK,EAAE;YACL,YAAY,EAAE,YAAY;YAC1B,CAAC,WAAW,CAAC,EAAE,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC;SACtD;QACD,WAAW;QACX,MAAM,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,cAAc,EAAE;QACzC,OAAO,EAAE,EAAE,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE;KAChC,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,wBAAwB,CAAC,WAAuB;IAC9D,OAAO,SAAS,CAAC,kBAAkB,EAAE,iBAAiB,EAAE,aAAa,EAAE,UAAU,CAAC,WAAW,CAAC,CAAC,CAAC;AAClG,CAAC;AAED,MAAM,UAAU,uBAAuB,CAAC,UAAsB;IAC5D,OAAO,SAAS,CAAC,iBAAiB,EAAE,gBAAgB,EAAE,YAAY,EAAE,UAAU,CAAC,UAAU,CAAC,CAAC,CAAC;AAC9F,CAAC;AAED,MAAM,UAAU,yBAAyB,CAAC,aAAyB;IACjE,OAAO,SAAS,CAAC,mBAAmB,EAAE,kBAAkB,EAAE,eAAe,EAAE,UAAU,CAAC,aAAa,CAAC,CAAC,CAAC;AACxG,CAAC;AAED,MAAM,UAAU,6BAA6B,CAAC,SAAqB;IACjE,OAAO,SAAS,CAAC,wBAAwB,EAAE,sBAAsB,EAAE,WAAW,EAAE,UAAU,CAAC,SAAS,CAAC,CAAC,CAAC;AACzG,CAAC;AAED,MAAM,UAAU,eAAe,CAAC,IAAkC;IAChE,MAAM,UAAU,GAAG,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,0CAA0C,CAAC,CAAC;IACxF,MAAM,WAAW,GAAG,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,GAAG,IAAI,CAAC,WAAW,YAAY,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC;IAC7G,MAAM,MAAM,GAAG,IAAI,UAAU,CAAC,EAAE,CAAC,CAAC;IAClC,MAAM,CAAC,GAAG,CAAC,UAAU,CAAC,UAAU,CAAC,CAAC,CAAC;IACnC,MAAM,CAAC,GAAG,CAAC,UAAU,CAAC,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;IACvE,MAAM,CAAC,GAAG,CAAC,UAAU,CAAC,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;IAC1E,MAAM,MAAM,GAAG,IAAI,UAAU,CAAC,EAAE,CAAC,CAAC;IAClC,MAAM,CAAC,GAAG,CAAC,UAAU,CAAC,WAAW,CAAC,CAAC,CAAC;IACpC,MAAM,CAAC,GAAG,CAAC,UAAU,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;IAC3D,MAAM,QAAQ,GAAG,IAAI,UAAU,CAAC,EAAE,CAAC,CAAC;IACpC,QAAQ,CAAC,GAAG,CAAC,CAAC,aAAa,EAAE,cAAc,CAAC,CAAC,CAAC;IAC9C,QAAQ,CAAC,GAAG,CAAC,UAAU,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC;IACpC,QAAQ,CAAC,GAAG,CAAC,UAAU,CAAC,MAAM,CAAC,EAAE,EAAE,CAAC,CAAC;IACrC,OAAO,UAAU,CAAC,QAAQ,CAAC,CAAC;AAC9B,CAAC"}
+{"version":3,"file":"eip712.js","sourceRoot":"","sources":["../../src/utils/eip712.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,uBAAuB,CAAC;AAEnD,OAAO,EAAE,UAAU,EAAE,UAAU,EAAE,MAAM,eAAe,CAAC;AACvD,OAAO,EAAE,mBAAmB,EAAE,gBAAgB,EAAE,MAAM,qBAAqB,CAAC;AAe5E,MAAM,aAAa,GAAG,IAAI,CAAC;AAC3B,MAAM,cAAc,GAAG,IAAI,CAAC;AAC5B,MAAM,cAAc,GAAG,GAAG,CAAC;AAC3B,MAAM,mBAAmB,GAAG,kBAAkB,CAAC;AAC/C,MAAM,UAAU,GAAG,mBAAmB,CAAC;AAEvC,MAAM,YAAY,GAAiB;IACjC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,QAAQ,EAAE;IAChC,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,QAAQ,EAAE;CACpC,CAAC;AAEF,SAAS,SAAS,CAChB,IAAY,EACZ,WAAmB,EACnB,SAAiB,EACjB,KAAa;IAEb,OAAO;QACL,KAAK,EAAE;YACL,YAAY,EAAE,YAAY;YAC1B,CAAC,WAAW,CAAC,EAAE,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC;SACtD;QACD,WAAW;QACX,MAAM,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,cAAc,EAAE;QACzC,OAAO,EAAE,EAAE,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE;KAChC,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,wBAAwB,CAAC,WAAuB;IAC9D,OAAO,SAAS,CAAC,kBAAkB,EAAE,iBAAiB,EAAE,aAAa,EAAE,UAAU,CAAC,WAAW,CAAC,CAAC,CAAC;AAClG,CAAC;AAED,MAAM,UAAU,uBAAuB,CAAC,UAAsB;IAC5D,OAAO,SAAS,CAAC,iBAAiB,EAAE,gBAAgB,EAAE,YAAY,EAAE,UAAU,CAAC,UAAU,CAAC,CAAC,CAAC;AAC9F,CAAC;AAED,MAAM,UAAU,yBAAyB,CAAC,aAAyB;IACjE,OAAO,SAAS,CAAC,mBAAmB,EAAE,kBAAkB,EAAE,eAAe,EAAE,UAAU,CAAC,aAAa,CAAC,CAAC,CAAC;AACxG,CAAC;AAED,MAAM,UAAU,6BAA6B,CAAC,SAAqB;IACjE,OAAO,SAAS,CAAC,wBAAwB,EAAE,sBAAsB,EAAE,WAAW,EAAE,UAAU,CAAC,SAAS,CAAC,CAAC,CAAC;AACzG,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,wBAAwB,CAAC,KAAyB;IAChE,OAAO;QACL,KAAK,EAAE;YACL,YAAY,EAAE,YAAY;YAC1B,eAAe,EAAE;gBACf,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,SAAS,EAAE;gBACnC,EAAE,IAAI,EAAE,YAAY,EAAE,IAAI,EAAE,OAAO,EAAE;gBACrC,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,QAAQ,EAAE;gBAClC,EAAE,IAAI,EAAE,UAAU,EAAE,IAAI,EAAE,QAAQ,EAAE;gBACpC,EAAE,IAAI,EAAE,WAAW,EAAE,IAAI,EAAE,QAAQ,EAAE;gBACrC,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,QAAQ,EAAE;gBACnC,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE;gBACjC,EAAE,IAAI,EAAE,aAAa,EAAE,IAAI,EAAE,SAAS,EAAE;gBACxC,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,QAAQ,EAAE;aACpC;SACF;QACD,WAAW,EAAE,iBAAiB;QAC9B,MAAM,EAAE,EAAE,IAAI,EAAE,mBAAmB,EAAE,OAAO,EAAE,cAAc,EAAE;QAC9D,OAAO,EAAE;YACP,MAAM,EAAE,KAAK,CAAC,gBAAgB;YAC9B,UAAU,EAAE,KAAK,CAAC,gBAAgB;YAClC,MAAM,EAAE,KAAK,CAAC,MAAM;YACpB,QAAQ,EAAE,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC;YAChC,SAAS,EAAE,MAAM,CAAC,KAAK,CAAC,SAAS,CAAC;YAClC,OAAO,EAAE,gBAAgB,CAAC,KAAK,CAAC,SAAS,CAAC;YAC1C,KAAK,EAAE,mBAAmB;YAC1B,WAAW,EAAE,KAAK,CAAC,kBAAkB;YACrC,OAAO,EAAE,KAAK,CAAC,OAAO;SACvB;KACF,CAAC;AACJ,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,iCAAiC,CAC/C,gBAAwB,EACxB,WAAmB;IAEnB,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,WAAW,CAAC,IAAI,WAAW,GAAG,CAAC,EAAE,CAAC;QACtD,MAAM,IAAI,KAAK,CAAC,qDAAqD,CAAC,CAAC;IACzE,CAAC;IACD,OAAO;QACL,KAAK,EAAE;YACL,YAAY,EAAE,YAAY;YAC1B,wBAAwB,EAAE;gBACxB,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,SAAS,EAAE;gBACnC,EAAE,IAAI,EAAE,WAAW,EAAE,IAAI,EAAE,QAAQ,EAAE;aACtC;SACF;QACD,WAAW,EAAE,0BAA0B;QACvC,MAAM,EAAE,EAAE,IAAI,EAAE,mBAAmB,EAAE,OAAO,EAAE,cAAc,EAAE;QAC9D,OAAO,EAAE,EAAE,MAAM,EAAE,gBAAgB,EAAE,SAAS,EAAE,MAAM,CAAC,WAAW,CAAC,EAAE;KACtE,CAAC;AACJ,CAAC;AAED,SAAS,WAAW,CAAC,KAAiB,EAAE,KAAa;IACnD,QAAQ,KAAK,CAAC,IAAI,EAAE,CAAC;QACnB,KAAK,QAAQ;YACX,OAAO,UAAU,CAAC,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;QACrD,KAAK,OAAO;YACV,OAAO,UAAU,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC,CAAC;QACvC,KAAK,SAAS,CAAC,CAAC,CAAC;YACf,MAAM,KAAK,GAAG,UAAU,CAAC,KAAK,CAAC,CAAC;YAChC,IAAI,KAAK,CAAC,MAAM,KAAK,EAAE,EAAE,CAAC;gBACxB,MAAM,IAAI,KAAK,CAAC,iBAAiB,KAAK,CAAC,IAAI,mBAAmB,CAAC,CAAC;YAClE,CAAC;YACD,OAAO,KAAK,CAAC;QACf,CAAC;QACD,KAAK,QAAQ,CAAC,CAAC,CAAC;YACd,IAAI,SAAS,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC;YAC9B,IAAI,SAAS,GAAG,EAAE,IAAI,SAAS,GAAG,UAAU,EAAE,CAAC;gBAC7C,MAAM,IAAI,KAAK,CAAC,iBAAiB,KAAK,CAAC,IAAI,qBAAqB,CAAC,CAAC;YACpE,CAAC;YACD,MAAM,KAAK,GAAG,IAAI,UAAU,CAAC,EAAE,CAAC,CAAC;YACjC,KAAK,IAAI,CAAC,GAAG,EAAE,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC;gBACjC,KAAK,CAAC,CAAC,CAAC,GAAG,MAAM,CAAC,SAAS,GAAG,KAAK,CAAC,CAAC;gBACrC,SAAS,KAAK,EAAE,CAAC;YACnB,CAAC;YACD,OAAO,KAAK,CAAC;QACf,CAAC;QACD;YACE,MAAM,IAAI,KAAK,CAAC,mCAAmC,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC;IACrE,CAAC;AACH,CAAC;AAED,MAAM,UAAU,eAAe,CAAC,IAAuB;IACrD,MAAM,OAAO,GAAG,IAAI,WAAW,EAAE,CAAC;IAClC,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;IAC5C,MAAM,UAAU,GAAG,GAAG,IAAI,CAAC,WAAW,IAAI,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC;IAEhG,MAAM,MAAM,GAAG,IAAI,UAAU,CAAC,EAAE,CAAC,CAAC;IAClC,MAAM,CAAC,GAAG,CAAC,UAAU,CAAC,OAAO,CAAC,MAAM,CAAC,0CAA0C,CAAC,CAAC,CAAC,CAAC;IACnF,MAAM,CAAC,GAAG,CAAC,UAAU,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;IAC7D,MAAM,CAAC,GAAG,CAAC,UAAU,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;IAEhE,MAAM,MAAM,GAAG,IAAI,UAAU,CAAC,EAAE,GAAG,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC;IACxD,MAAM,CAAC,GAAG,CAAC,UAAU,CAAC,OAAO,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC;IACnD,MAAM,CAAC,OAAO,CAAC,CAAC,KAAK,EAAE,KAAK,EAAE,EAAE;QAC9B,MAAM,CAAC,GAAG,CAAC,WAAW,CAAC,KAAK,EAAE,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,EAAE,EAAE,GAAG,CAAC,KAAK,GAAG,CAAC,CAAC,CAAC,CAAC;IAC7E,CAAC,CAAC,CAAC;IAEH,MAAM,QAAQ,GAAG,IAAI,UAAU,CAAC,EAAE,CAAC,CAAC;IACpC,QAAQ,CAAC,GAAG,CAAC,CAAC,aAAa,EAAE,cAAc,CAAC,CAAC,CAAC;IAC9C,QAAQ,CAAC,GAAG,CAAC,UAAU,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC;IACpC,QAAQ,CAAC,GAAG,CAAC,UAAU,CAAC,MAAM,CAAC,EAAE,EAAE,CAAC,CAAC;IACrC,OAAO,UAAU,CAAC,QAAQ,CAAC,CAAC;AAC9B,CAAC"}

package/dist/utils/felt.d.ts

@@ -1,4 +1,4 @@
-import { Felt } from '@miden-sdk/miden-sdk';
+import { Felt, type Word } from '@miden-sdk/miden-sdk';
 /**
  * Maps an arbitrary `u64` onto a canonical field element by reducing modulo the
  * field order, mirroring `guardian_shared::felt::felt_from_u64_reduced`.
@@ -9,4 +9,10 @@ import { Felt } from '@miden-sdk/miden-sdk';
  * construction infallible, and stays byte-identical to server-side signing.
  */
 export declare function feltFromU64Reduced(value: bigint): Felt;
+/**
+ * RPO hash of `bytes` packed as 8-byte little-endian chunks (the last one
+ * zero-padded), mirroring `guardian_shared::felt::domain_tag_word`. The
+ * convention every Guardian message domain tag uses.
+ */
+export declare function domainTagWord(bytes: Uint8Array): Word;
 //# sourceMappingURL=felt.d.ts.map

package/dist/utils/felt.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"felt.d.ts","sourceRoot":"","sources":["../../src/utils/felt.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,IAAI,EAAE,MAAM,sBAAsB,CAAC;AAQ5C;;;;;;;;GAQG;AACH,wBAAgB,kBAAkB,CAAC,KAAK,EAAE,MAAM,GAAG,IAAI,CAEtD"}
+{"version":3,"file":"felt.d.ts","sourceRoot":"","sources":["../../src/utils/felt.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,IAAI,EAAqB,KAAK,IAAI,EAAE,MAAM,sBAAsB,CAAC;AAQ1E;;;;;;;;GAQG;AACH,wBAAgB,kBAAkB,CAAC,KAAK,EAAE,MAAM,GAAG,IAAI,CAEtD;AAED;;;;GAIG;AACH,wBAAgB,aAAa,CAAC,KAAK,EAAE,UAAU,GAAG,IAAI,CAWrD"}

package/dist/utils/felt.js

@@ -1,4 +1,4 @@
-import { Felt } from '@miden-sdk/miden-sdk';
+import { Felt, FeltArray, Rpo256 } from '@miden-sdk/miden-sdk';
 /**
  * Goldilocks field order (`2^64 - 2^32 + 1`), matching `Felt::ORDER` in
  * `miden-protocol`.
@@ -16,4 +16,21 @@ const FELT_ORDER = 18446744069414584321n;
 export function feltFromU64Reduced(value) {
     return new Felt(BigInt.asUintN(64, value) % FELT_ORDER);
 }
+/**
+ * RPO hash of `bytes` packed as 8-byte little-endian chunks (the last one
+ * zero-padded), mirroring `guardian_shared::felt::domain_tag_word`. The
+ * convention every Guardian message domain tag uses.
+ */
+export function domainTagWord(bytes) {
+    const felts = [];
+    for (let offset = 0; offset < bytes.length; offset += 8) {
+        let value = 0n;
+        for (let i = 0; i < 8; i += 1) {
+            const byte = offset + i < bytes.length ? bytes[offset + i] : 0;
+            value |= BigInt(byte) << BigInt(8 * i);
+        }
+        felts.push(feltFromU64Reduced(value));
+    }
+    return Rpo256.hashElements(new FeltArray(felts));
+}
 //# sourceMappingURL=felt.js.map

package/dist/utils/felt.js.map

@@ -1 +1 @@
-{"version":3,"file":"felt.js","sourceRoot":"","sources":["../../src/utils/felt.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,IAAI,EAAE,MAAM,sBAAsB,CAAC;AAE5C;;;GAGG;AACH,MAAM,UAAU,GAAG,qBAAqB,CAAC;AAEzC;;;;;;;;GAQG;AACH,MAAM,UAAU,kBAAkB,CAAC,KAAa;IAC9C,OAAO,IAAI,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,EAAE,EAAE,KAAK,CAAC,GAAG,UAAU,CAAC,CAAC;AAC1D,CAAC"}
+{"version":3,"file":"felt.js","sourceRoot":"","sources":["../../src/utils/felt.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,MAAM,EAAa,MAAM,sBAAsB,CAAC;AAE1E;;;GAGG;AACH,MAAM,UAAU,GAAG,qBAAqB,CAAC;AAEzC;;;;;;;;GAQG;AACH,MAAM,UAAU,kBAAkB,CAAC,KAAa;IAC9C,OAAO,IAAI,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,EAAE,EAAE,KAAK,CAAC,GAAG,UAAU,CAAC,CAAC;AAC1D,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,aAAa,CAAC,KAAiB;IAC7C,MAAM,KAAK,GAAW,EAAE,CAAC;IACzB,KAAK,IAAI,MAAM,GAAG,CAAC,EAAE,MAAM,GAAG,KAAK,CAAC,MAAM,EAAE,MAAM,IAAI,CAAC,EAAE,CAAC;QACxD,IAAI,KAAK,GAAG,EAAE,CAAC;QACf,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC;YAC9B,MAAM,IAAI,GAAG,MAAM,GAAG,CAAC,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;YAC/D,KAAK,IAAI,MAAM,CAAC,IAAI,CAAC,IAAI,MAAM,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;QACzC,CAAC;QACD,KAAK,CAAC,IAAI,CAAC,kBAAkB,CAAC,KAAK,CAAC,CAAC,CAAC;IACxC,CAAC;IACD,OAAO,MAAM,CAAC,YAAY,CAAC,IAAI,SAAS,CAAC,KAAK,CAAC,CAAC,CAAC;AACnD,CAAC"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@openzeppelin/miden-multisig-client",
-  "version": "0.18.0",
+  "version": "0.18.2",
   "description": "TypeScript SDK for Miden multisig accounts with GUARDIAN integration",
   "repository": {
     "type": "git",
@@ -42,13 +42,13 @@
     "test:qualification": "vitest run --config vitest.qualification.config.ts"
   },
   "dependencies": {
-    "@miden-sdk/miden-sdk": "0.17.0",
+    "@miden-sdk/miden-sdk": "0.17.3",
     "@noble/curves": "^1.9.7",
     "@noble/hashes": "^2.0.1",
-    "@openzeppelin/guardian-client": "^0.18.0"
+    "@openzeppelin/guardian-client": "^0.18.2"
   },
   "devDependencies": {
-    "@openzeppelin/guardian-operator-client": "^0.18.0",
+    "@openzeppelin/guardian-operator-client": "^0.18.2",
     "@playwright/test": "^1.60.0",
     "@types/node": "^24.13.5",
     "fake-indexeddb": "^6.2.5",

package/src/client.ts

@@ -15,6 +15,14 @@ import { requireConfigValue, requireMidenRpcEndpoint } from './config.js';
 import type { MultisigConfig, Signer } from './types.js';
 import { isSafeToAdoptGuardianState, readOnChainCommitment } from './state/adopt.js';
 import { normalizeHexWord } from './utils/encoding.js';
+import type { GuardianSession, SessionKeyStore } from './session/key.js';
+import {
+  type StartSessionOptions,
+  endGuardianSession,
+  resumeGuardianSession,
+  revokeAllGuardianSessions,
+  startGuardianSession,
+} from './session/manager.js';
 import {
   resolveProverConfig,
   type ProverConfig,
@@ -99,8 +107,8 @@ export interface RecoveredAccount {
  *   },
  * });
  *
- * // Get GUARDIAN pubkey for config
- * const guardianCommitment = await client.guardianClient.getPubkey();
+ * // Get GUARDIAN's ACK commitment for the account's signature scheme
+ * const { commitment: guardianCommitment } = await client.guardianClient.getPubkey(signer.scheme);
  *
  * // Create multisig
  * const config = { threshold: 2, signerCommitments: [...], guardianCommitment };
@@ -113,6 +121,7 @@ export class MultisigClient {
   private readonly proverConfig: ResolvedProverConfig;
   private readonly rpcConfig: ResolvedRpcConfig;
   private _guardianClient: GuardianHttpClient;
+  private guardianSession: GuardianSession | null = null;
 
   constructor(midenClient: MidenClient, config: MultisigClientConfig) {
     this.midenClient = midenClient;
@@ -133,6 +142,7 @@ export class MultisigClient {
     this._guardianClient = new GuardianHttpClient(
       requireConfigValue('guardianEndpoint', endpoint),
     );
+    this.guardianSession = null;
   }
 
   /**
@@ -142,6 +152,91 @@ export class MultisigClient {
     return this._guardianClient;
   }
 
+  /**
+   * Start a Guardian session: `signer` signs one grant, then a non-extractable
+   * browser key (the delegated signer) signs this client's session-eligible
+   * Guardian requests (state and delta reads, proposal list/get/create/sign)
+   * until the session ends. Account configuration, lookup, delta pushes,
+   * candidate abandons and transaction approvals keep using `signer`. Pass
+   * `options.store` to survive page reloads via `resumeSession`, and
+   * `options.onEnded` to learn when requests fall back to the wallet.
+   *
+   * A session this client already holds is logged out once the new one is
+   * registered. A Guardian endpoint change (`setGuardianEndpoint`) drops the
+   * session.
+   */
+  async startSession(signer: Signer, options: StartSessionOptions = {}): Promise<GuardianSession> {
+    const previous = this.guardianSession;
+    const session = await startGuardianSession(this._guardianClient, signer, {
+      ...options,
+      onEnded: this.trackSessionEnd(options.onEnded),
+    });
+    this.guardianSession = session;
+    if (previous) {
+      await endGuardianSession(this._guardianClient, previous, options.store).catch(() => false);
+    }
+    return session;
+  }
+
+  /**
+   * Reuse a session key stored by `startSession` without a wallet prompt.
+   * Returns `null` when there is none or it is about to expire.
+   */
+  async resumeSession(
+    signer: Signer,
+    store: SessionKeyStore,
+    options: Pick<StartSessionOptions, 'onEnded'> = {},
+  ): Promise<GuardianSession | null> {
+    const session = await resumeGuardianSession(this._guardianClient, signer, store, {
+      onEnded: this.trackSessionEnd(options.onEnded),
+    });
+    if (session) {
+      this.guardianSession = session;
+    }
+    return session;
+  }
+
+  /**
+   * Revoke the current session, fall back to wallet signatures, and forget its
+   * stored key. Returns whether Guardian still had the session active. On
+   * error the session stays in use.
+   */
+  async endSession(store?: SessionKeyStore): Promise<boolean> {
+    const session = this.guardianSession;
+    if (!session) {
+      return false;
+    }
+    const revoked = await endGuardianSession(this._guardianClient, session, store);
+    if (this.guardianSession === session) {
+      this.guardianSession = null;
+    }
+    return revoked;
+  }
+
+  /**
+   * Revoke every session of `signer` on the Guardian with a wallet signature,
+   * including sessions started in other tabs or devices; stop using the
+   * current one and forget its stored key. Use it when a session key may be
+   * compromised, and run it again 10 minutes later: it ends only sessions
+   * already registered, and a page can register a grant it got signed for up
+   * to about 10 minutes. Returns how many sessions Guardian revoked.
+   */
+  async revokeAllSessions(signer: Signer, store?: SessionKeyStore): Promise<number> {
+    return revokeAllGuardianSessions(this._guardianClient, signer, store);
+  }
+
+  /** Forgets the session this client holds once Guardian stops using it. */
+  private trackSessionEnd(
+    onEnded: StartSessionOptions['onEnded'],
+  ): NonNullable<StartSessionOptions['onEnded']> {
+    return (reason, session) => {
+      if (this.guardianSession === session) {
+        this.guardianSession = null;
+      }
+      onEnded?.(reason, session);
+    };
+  }
+
   /**
    * Recover the set of accounts a given signer authorizes by querying
    * Guardian's `/state/lookup` endpoint and fetching state for each match.

package/src/index.ts

@@ -31,8 +31,8 @@
  *   },
  * });
  *
- * // Get GUARDIAN pubkey for config
- * const guardianCommitment = await client.guardianClient.getPubkey();
+ * // Get GUARDIAN's ACK commitment for the account's signature scheme
+ * const { commitment: guardianCommitment } = await client.guardianClient.getPubkey(signer.scheme);
  *
  * // Create multisig account
  * const config = { threshold: 2, signerCommitments: [signer.commitment, ...], guardianCommitment };
@@ -56,6 +56,30 @@ export type {
 export type { ProverConfig, ProverRetryPolicy } from './prover/config.js';
 export type { RpcConfig, RpcRetryPolicy } from './rpc/config.js';
 export { lookupAuthDigest } from './lookupAuth.js';
+export {
+  SESSION_GRANT_SCOPE,
+  describeSessionGrant,
+  sessionGrantDigest,
+  sessionLogoutDigest,
+  sessionRevokeAllDigest,
+} from './session/grant.js';
+export {
+  GuardianSession,
+  IndexedDbSessionKeyStore,
+  type GuardianSessionOptions,
+  WebCryptoSessionKey,
+  type SessionKeyStore,
+  type StoredSessionKey,
+} from './session/key.js';
+export {
+  GuardianSessionsUnsupportedError,
+  SessionGrantDeclinedError,
+  endGuardianSession,
+  resumeGuardianSession,
+  revokeAllGuardianSessions,
+  startGuardianSession,
+  type StartSessionOptions,
+} from './session/manager.js';
 export {
   Multisig,
   type AccountState,
@@ -67,15 +91,10 @@ export {
 export { AccountInspector, type DetectedMultisigConfig, type VaultBalance } from './inspector.js';
 export {
   ChainBehindBoundBlockError,
-  chainAnchorFromBase64,
-  chainAnchorToBase64,
-  chainAnchorBlockNum,
-  executeForSummary,
-  executeForSummaryAt,
   executeForSummaryAtTip,
   summaryApprovalExpirationBlockNum,
+  summaryBoundBlockNum,
   summarySalt,
-  SummaryAnchorMismatchError,
   buildUpdateSignersTransactionRequest,
   buildUpdateProcedureThresholdTransactionRequest,
   buildUpdateGuardianTransactionRequest,
@@ -196,9 +215,11 @@ export {
 
 export {
   type AuthArgErrorCode,
+  BoundBlockMismatchError,
   BoundBlockNotDeclaredError,
   MultisigAuthArgsMissingError,
   ProposalSaltMalformedError,
+  TransactionSummaryLayoutError,
 } from './multisig/authArgErrors.js';
 
 export {

package/src/lookupAuth.ts

@@ -1,5 +1,5 @@
-import { Felt, FeltArray, Rpo256, Word } from '@miden-sdk/miden-sdk';
-import { feltFromU64Reduced } from './utils/felt.js';
+import { FeltArray, Rpo256, Word } from '@miden-sdk/miden-sdk';
+import { domainTagWord, feltFromU64Reduced } from './utils/felt.js';
 
 /**
  * Lookup-bound message format used to sign requests against the Guardian
@@ -12,32 +12,13 @@ const DOMAIN_TAG_BYTES = new TextEncoder().encode('guardian.lookup.v1');
 
 let cachedDomainTag: Word | null = null;
 
-/**
- * Convert a byte array to a sequence of Goldilocks-field felts using the same
- * 8-byte little-endian chunking convention as
- * `guardian_shared::auth_request_payload::AuthRequestPayload::from_bytes`. The
- * final chunk is zero-padded if `bytes.length` is not a multiple of 8.
- */
-function bytesToFelts(bytes: Uint8Array): Felt[] {
-  const felts: Felt[] = [];
-  for (let offset = 0; offset < bytes.length; offset += 8) {
-    let value = 0n;
-    for (let i = 0; i < 8; i += 1) {
-      const byte = offset + i < bytes.length ? bytes[offset + i] : 0;
-      value |= BigInt(byte) << BigInt(8 * i);
-    }
-    felts.push(feltFromU64Reduced(value));
-  }
-  return felts;
-}
-
 /**
  * The 4-felt RPO domain tag prepended to every lookup digest, computed once
  * from `DOMAIN_TAG_BYTES`. Cached on first call.
  */
 function lookupDomainTag(): Word {
   if (cachedDomainTag === null) {
-    cachedDomainTag = Rpo256.hashElements(new FeltArray(bytesToFelts(DOMAIN_TAG_BYTES)));
+    cachedDomainTag = domainTagWord(DOMAIN_TAG_BYTES);
   }
   return cachedDomainTag;
 }