ox 1.7.2 → 1.7.5

package/src/tempo/MultisigOperation.test.ts

@@ -1,3 +1,4 @@
+import { factory } from '../../test/tempo/multisig.js'
 import { Address, Hash, Hex, P256 } from 'ox'
 import {
   KeyAuthorization,
@@ -39,8 +40,8 @@ const config = MultisigConfig.from({
   ],
   threshold: 2,
 })
-const initializedConfig = MultisigConfig.from({ ...config, version: 1n })
-const account = MultisigConfig.getAddress(config)
+const currentConfig = MultisigConfig.from({ ...config, version: 1n })
+const account = MultisigConfig.getAddress(config, { factory })
 const ownerSignature_1 = owners[0]!.signature
 const approval_1 = SignatureEnvelope.serialize(ownerSignature_1)
 const approval_2 = SignatureEnvelope.serialize(owners[1]!.signature)
@@ -66,14 +67,14 @@ const keyAuthorization = KeyAuthorization.serialize(
 
 const transactionHash_ = MultisigConfig.getSignPayload({
   account,
-  config: initializedConfig,
+  config: currentConfig,
   payload: TxEnvelopeTempo.getSignPayload(
     TxEnvelopeTempo.deserialize(transaction),
   ),
 })
 const keyAuthorizationHash = MultisigConfig.getSignPayload({
   account,
-  config: initializedConfig,
+  config: currentConfig,
   payload: KeyAuthorization.getSignPayload(
     KeyAuthorization.deserialize(keyAuthorization),
   ),
@@ -82,10 +83,8 @@ const keyAuthorizationHash = MultisigConfig.getSignPayload({
 const base = {
   account,
   approvals: [approval_1],
-  config: initializedConfig,
-  configVersion: 1n,
+  config: currentConfig,
   createdAt: 1,
-  init: false,
   signatureCount: 1,
   threshold: 2,
   updatedAt: 2,
@@ -142,20 +141,20 @@ describe('getHash', () => {
     expect({
       keyAuthorization: MultisigOperation.getHash({
         account,
-        configVersion: 1n,
+        config: currentConfig,
         keyAuthorization,
         type: 'keyAuthorization',
       }),
       transaction: MultisigOperation.getHash({
         account,
-        configVersion: 1n,
+        config: currentConfig,
         transaction,
         type: 'transaction',
       }),
     }).toMatchInlineSnapshot(`
       {
-        "keyAuthorization": "0xf6995eb69c12c03d3d13b357abf7cac22b4effe52fba8ff02e5aef26161f77a0",
-        "transaction": "0xcdbc24a8fb192f799c5d166b13a99fb29cbb15e71a5e730988d6f8b3c5959d02",
+        "keyAuthorization": "0xa83016f0e94c4a6125483ffeba3abb0a8df1bc0f5a503f63639e806b793520bb",
+        "transaction": "0x2d7e3c7c38a9acf85f0a9d70a39b0e9e5a05d92c7a73b633a47a45be4a112b3b",
       }
     `)
   })
@@ -171,10 +170,10 @@ describe('selectApprovals', () => {
       ],
       threshold: 3,
     })
-    const account = MultisigConfig.getAddress(config)
+    const account = MultisigConfig.getAddress(config, { factory })
     const hash = MultisigOperation.getHash({
       account,
-      configVersion: 1n,
+      config: { ...config, version: 1n },
       transaction,
       type: 'transaction',
     })
@@ -227,178 +226,45 @@ describe('selectApprovals', () => {
       }
     `)
   })
-
-  test('counts a nested owner only after its quorum', async () => {
-    const childConfig = MultisigConfig.from({
-      owners: [
-        { owner: owners[1]!.address, weight: 1 },
-        { owner: owners[2]!.address, weight: 1 },
-      ],
-      threshold: 2,
-    })
-    const child = MultisigConfig.getAddress(childConfig)
-    const config = MultisigConfig.from({
-      owners: [
-        { owner: owners[0]!.address, weight: 1 },
-        { owner: child, weight: 2 },
-      ],
-      threshold: 2,
-    })
-    const account = MultisigConfig.getAddress(config)
-    const hash = MultisigOperation.getHash({
-      account,
-      configVersion: 1n,
-      transaction,
-      type: 'transaction',
-    })
-    const childHash = MultisigConfig.getSignPayload({
-      account: child,
-      config: { version: 2n },
-      payload: hash,
-    })
-    const childApprovals = [
-      signApproval(owners[1]!, childHash),
-      signApproval(owners[2]!, childHash),
-    ]
-    const rootApproval = signApproval(owners[0]!, hash)
-    const resolveConfig: MultisigOperation.selectApprovals.ResolveConfig = ({
-      account,
-    }) => {
-      if (!Address.isEqual(account, child)) throw new Error('unknown account')
-      return {
-        config: MultisigConfig.from({ ...childConfig, version: 2n }),
-        version: 2n,
-      }
-    }
-    const partial = await MultisigOperation.selectApprovals({
-      account,
-      approvals: [
-        rootApproval,
-        SignatureEnvelope.serialize({
-          account: child,
-          config: MultisigConfig.from({ ...childConfig, version: 2n }),
-          signatures: [SignatureEnvelope.deserialize(childApprovals[0]!)],
-          type: 'multisig',
-        }),
-      ],
-      config,
-      hash,
-      resolveConfig,
-    })
-    const complete = await MultisigOperation.selectApprovals({
+  test('accepts an explicit account from a chain-configured factory', async () => {
+    const selected = await MultisigOperation.selectApprovals({
       account,
-      approvals: [
-        rootApproval,
-        SignatureEnvelope.serialize({
-          account: child,
-          config: MultisigConfig.from({ ...childConfig, version: 2n }),
-          signatures: childApprovals.map((approval) =>
-            SignatureEnvelope.deserialize(approval),
-          ),
-          type: 'multisig',
-        }),
-      ],
+      approvals: [],
       config,
-      hash,
-      resolveConfig,
+      hash: transactionHash_,
     })
-
-    expect({
-      complete: {
-        ...complete,
-        approvals: approvalAddresses(complete.approvals, hash),
-        selectedApprovals: approvalAddresses(complete.selectedApprovals, hash),
-      },
-      partial: {
-        ...partial,
-        approvals: approvalAddresses(partial.approvals, hash),
-        selectedApprovals: approvalAddresses(partial.selectedApprovals, hash),
-      },
-    }).toMatchInlineSnapshot(`
-      {
-        "complete": {
-          "approvals": [
-            "0x07e1ed8ea0e9601e5546b0a03aed683df3601407",
-            "0xe2d2c3c2fc4b17af341cc5c1a459af9606167e8a",
-          ],
-          "selectedApprovals": [
-            "0xe2d2c3c2fc4b17af341cc5c1a459af9606167e8a",
-          ],
-          "signatureCount": 1,
-          "threshold": 2,
-          "weight": 2,
-        },
-        "partial": {
-          "approvals": [
-            "0x07e1ed8ea0e9601e5546b0a03aed683df3601407",
-            "0xe2d2c3c2fc4b17af341cc5c1a459af9606167e8a",
-          ],
-          "selectedApprovals": [
-            "0x07e1ed8ea0e9601e5546b0a03aed683df3601407",
-          ],
-          "signatureCount": 1,
-          "threshold": 2,
-          "weight": 1,
-        },
-      }
-    `)
+    expect(selected.weight).toMatchInlineSnapshot(`0`)
   })
-
-  test('rejects mismatched nested config versions', async () => {
-    const childConfig = MultisigConfig.from({
-      owners: [{ owner: owners[1]!.address, weight: 1 }],
-      threshold: 1,
-    })
-    const child = MultisigConfig.getAddress(childConfig)
-    const config = MultisigConfig.from({
-      owners: [{ owner: child, weight: 1 }],
-      threshold: 1,
-    })
-    const account = MultisigConfig.getAddress(config)
-    const hash = MultisigOperation.getHash({
-      account,
-      configVersion: 1n,
-      transaction,
-      type: 'transaction',
-    })
-    const resolvedConfig = MultisigConfig.from({
-      ...childConfig,
-      version: 2n,
-    })
-    const childHash = MultisigConfig.getSignPayload({
-      account: child,
-      config: resolvedConfig,
-      payload: hash,
-    })
-
-    await expect(
-      MultisigOperation.selectApprovals({
+  test('rejects keychain and multisig owner approvals', async () => {
+    for (const signature of [
+      SignatureEnvelope.from({
+        inner: ownerSignature_1,
+        type: 'keychain',
+        userAddress: account,
+        version: 'v2',
+      }),
+      SignatureEnvelope.from({
         account,
-        approvals: [
-          SignatureEnvelope.serialize({
-            account: child,
-            config: resolvedConfig,
-            signatures: [
-              SignatureEnvelope.deserialize(
-                signApproval(owners[1]!, childHash),
-              ),
-            ],
-            type: 'multisig',
-          }),
-        ],
         config,
-        hash,
-        resolveConfig: () => ({ config: childConfig, version: 2n }),
+        signatures: [ownerSignature_1],
       }),
-    ).rejects.toThrowErrorMatchingInlineSnapshot(
-      `[MultisigOperation.InvalidApprovalError: Invalid multisig approval: resolved config.version must equal version for nested multisig owner 0x7888d60e9cc26c8569d394fce435c248f1e49c3b.]`,
-    )
+    ])
+      await expect(
+        MultisigOperation.selectApprovals({
+          account,
+          approvals: [SignatureEnvelope.serialize(signature)],
+          config,
+          hash: transactionHash_,
+        }),
+      ).rejects.toThrowErrorMatchingInlineSnapshot(
+        `[MultisigOperation.InvalidApprovalError: Invalid multisig approval: only primitive signatures can approve a multisig operation.]`,
+      )
   })
 
   test('rejects invalid and non-owner approvals', async () => {
     const hash = MultisigOperation.getHash({
       account,
-      configVersion: 1n,
+      config: currentConfig,
       transaction,
       type: 'transaction',
     })
@@ -429,247 +295,109 @@ describe('selectApprovals', () => {
       `[MultisigOperation.InvalidApprovalError: Invalid multisig approval: signature is from non-owner 0xd3a9f047ad43d7e2e4e7e491f1fe2e657a2651b6.]`,
     )
   })
+})
 
-  test('requires a resolver for nested owners', async () => {
-    const childConfig = MultisigConfig.from({
-      owners: [{ owner: owners[1]!.address, weight: 1 }],
-      threshold: 1,
-    })
-    const child = MultisigConfig.getAddress(childConfig)
-    const config = MultisigConfig.from({
-      owners: [{ owner: child, weight: 1 }],
-      threshold: 1,
-    })
-    const account = MultisigConfig.getAddress(config)
-    const hash = MultisigOperation.getHash({
-      account,
-      configVersion: 1n,
-      transaction,
-      type: 'transaction',
-    })
-    const childHash = MultisigConfig.getSignPayload({
-      account: child,
-      config: { version: 1n },
-      payload: hash,
-    })
-
-    await expect(
-      MultisigOperation.selectApprovals({
+describe('serializeKeyAuthorization', () => {
+  test('current and initial authorizations', async () => {
+    const results = []
+    for (const applicableConfig of [currentConfig, config]) {
+      const hash = MultisigOperation.getHash({
+        account,
+        config: applicableConfig,
+        keyAuthorization,
+        type: 'keyAuthorization',
+      })
+      const selection = await MultisigOperation.selectApprovals({
         account,
         approvals: [
-          SignatureEnvelope.serialize({
-            account: child,
-            config: MultisigConfig.from({ ...childConfig, version: 1n }),
-            signatures: [
-              SignatureEnvelope.deserialize(
-                signApproval(owners[1]!, childHash),
-              ),
-            ],
-            type: 'multisig',
-          }),
+          signApproval(owners[1]!, hash),
+          signApproval(owners[0]!, hash),
         ],
-        config,
+        config: applicableConfig,
         hash,
-      }),
-    ).rejects.toThrowErrorMatchingInlineSnapshot(
-      `[MultisigOperation.InvalidApprovalError: Invalid multisig approval: nested multisig owner 0x7888d60e9cc26c8569d394fce435c248f1e49c3b requires a config resolver.]`,
-    )
-  })
+      })
+      const serialized = MultisigOperation.serializeKeyAuthorization(
+        keyAuthorization,
+        {
+          account,
+          approvals: selection.selectedApprovals,
+          config: applicableConfig,
+        },
+      )
+      const value = KeyAuthorization.deserialize(serialized)
+      results.push({
+        account:
+          value.signature?.type === 'multisig'
+            ? value.signature.account
+            : undefined,
+        hash: Hash.keccak256(serialized),
+        signatureCount:
+          value.signature?.type === 'multisig'
+            ? value.signature.signatures.length
+            : 0,
+        version:
+          value.signature?.type === 'multisig'
+            ? value.signature.config.version
+            : undefined,
+      })
+    }
 
-  test('rejects keychain and accepts initial nested approvals', async () => {
-    const childConfig = MultisigConfig.from({
-      owners: [{ owner: owners[1]!.address, weight: 1 }],
-      threshold: 1,
-    })
-    const child = MultisigConfig.getAddress(childConfig)
-    const config = MultisigConfig.from({
-      owners: [
-        { owner: owners[0]!.address, weight: 1 },
-        { owner: child, weight: 1 },
-      ],
-      threshold: 1,
-    })
-    const account = MultisigConfig.getAddress(config)
-    const hash = MultisigOperation.getHash({
-      account,
-      configVersion: 1n,
-      transaction,
-      type: 'transaction',
-    })
-    const childHash = MultisigConfig.getSignPayload({
-      account: child,
-      config: childConfig,
-      payload: hash,
-    })
+    expect(results).toMatchInlineSnapshot(`
+      [
+        {
+          "account": "0xef6b17836e1b3647105c3084124485e3e1b0ab7f",
+          "hash": "0xcd4283709cc1853dc8ed9cc4dd8c3b6a22e1b01f19ad3f6348f4bebe79590408",
+          "signatureCount": 2,
+          "version": 1n,
+        },
+        {
+          "account": "0xef6b17836e1b3647105c3084124485e3e1b0ab7f",
+          "hash": "0x1f66e6adc4ddf8ac9d4575f518be11509ca616ac13d4e0a286b4eef7b96959f2",
+          "signatureCount": 2,
+          "version": 0n,
+        },
+      ]
+    `)
+  })
 
-    await expect(
-      MultisigOperation.selectApprovals({
-        account,
-        approvals: [
-          SignatureEnvelope.serialize({
-            inner: SignatureEnvelope.deserialize(
-              signApproval(owners[0]!, hash),
-            ),
-            type: 'keychain',
-            userAddress: owners[0]!.address,
-          }),
-        ],
-        config,
-        hash,
-      }),
-    ).rejects.toThrowErrorMatchingInlineSnapshot(
-      `[MultisigOperation.InvalidApprovalError: Invalid multisig approval: keychain signatures cannot approve a multisig operation.]`,
-    )
+  test('rejects a signed authorization', async () => {
     const selection = await MultisigOperation.selectApprovals({
       account,
       approvals: [
-        SignatureEnvelope.serialize({
-          account: child,
-          config: childConfig,
-          signatures: [
-            SignatureEnvelope.deserialize(signApproval(owners[1]!, childHash)),
-          ],
-          type: 'multisig',
-        }),
+        signApproval(owners[0]!, keyAuthorizationHash),
+        signApproval(owners[1]!, keyAuthorizationHash),
       ],
-      config,
-      hash,
-      resolveConfig: () => ({ config: childConfig, version: 0n }),
+      config: currentConfig,
+      hash: keyAuthorizationHash,
     })
-    expect({
-      signatureCount: selection.signatureCount,
-      threshold: selection.threshold,
-      weight: selection.weight,
-    }).toMatchInlineSnapshot(`
+    const signed = MultisigOperation.serializeKeyAuthorization(
+      keyAuthorization,
       {
-        "signatureCount": 1,
-        "threshold": 1,
-        "weight": 1,
-      }
-    `)
-  })
-
-  test('rejects nested account cycles while serializing', () => {
-    const config = MultisigConfig.from({
-      owners: [{ owner: account, weight: 1 }],
-      threshold: 1,
-    })
-    const hash = MultisigOperation.getHash({
-      account,
-      configVersion: 2n,
-      transaction,
-      type: 'transaction',
-    })
-    const nestedHash = MultisigConfig.getSignPayload({
-      account,
-      config: { version: 2n },
-      payload: hash,
-    })
-
-    expect(() =>
-      SignatureEnvelope.serialize({
         account,
-        config: MultisigConfig.from({ ...config, version: 2n }),
-        signatures: [
-          SignatureEnvelope.deserialize(signApproval(owners[0]!, nestedHash)),
-        ],
-        type: 'multisig',
-      }),
-    ).toThrowErrorMatchingInlineSnapshot(
-      `[SignatureEnvelope.InvalidMultisigApprovalError: Invalid native multisig owner approval: multisig account cannot be an owner.]`,
+        approvals: selection.selectedApprovals,
+        config: currentConfig,
+      },
     )
-  })
 
-  test('rejects excess nesting depth', async () => {
-    const grandchildConfig = MultisigConfig.from({
-      owners: [{ owner: owners[2]!.address, weight: 1 }],
-      threshold: 1,
-    })
-    const grandchild = MultisigConfig.getAddress(grandchildConfig)
-    const childConfig = MultisigConfig.from({
-      owners: [{ owner: grandchild, weight: 1 }],
-      threshold: 1,
-    })
-    const child = MultisigConfig.getAddress(childConfig)
-    const config = MultisigConfig.from({
-      owners: [{ owner: child, weight: 1 }],
-      threshold: 1,
-    })
-    const account = MultisigConfig.getAddress(config)
-    const hash = MultisigOperation.getHash({
-      account,
-      configVersion: 1n,
-      transaction,
-      type: 'transaction',
-    })
-    const childHash = MultisigConfig.getSignPayload({
-      account: child,
-      config: { version: 1n },
-      payload: hash,
-    })
-    const grandchildHash = MultisigConfig.getSignPayload({
-      account: grandchild,
-      config: { version: 1n },
-      payload: childHash,
-    })
-
-    await expect(
-      MultisigOperation.selectApprovals({
+    expect(() =>
+      MultisigOperation.serializeKeyAuthorization(signed, {
         account,
-        approvals: [
-          SignatureEnvelope.serialize({
-            account: child,
-            config: MultisigConfig.from({ ...childConfig, version: 1n }),
-            signatures: [
-              {
-                account: grandchild,
-                config: MultisigConfig.from({
-                  ...grandchildConfig,
-                  version: 1n,
-                }),
-                signatures: [
-                  SignatureEnvelope.deserialize(
-                    signApproval(owners[2]!, grandchildHash),
-                  ),
-                ],
-                type: 'multisig',
-              },
-            ],
-            type: 'multisig',
-          }),
-        ],
-        config,
-        hash,
-        resolveConfig: ({ account }) => {
-          if (Address.isEqual(account, child))
-            return {
-              config: MultisigConfig.from({ ...childConfig, version: 1n }),
-              version: 1n,
-            }
-          return {
-            config: MultisigConfig.from({
-              ...grandchildConfig,
-              version: 1n,
-            }),
-            version: 1n,
-          }
-        },
+        approvals: selection.selectedApprovals,
+        config: currentConfig,
       }),
-    ).rejects.toThrowErrorMatchingInlineSnapshot(
-      `[MultisigOperation.InvalidApprovalError: Invalid multisig approval: nested multisig owner 0xf529c8f6b2b4c72102af4cfe5eeb55b7d45dede2 is invalid.]`,
+    ).toThrowErrorMatchingInlineSnapshot(
+      `[MultisigOperation.InvalidOperationError: Invalid multisig operation: keyAuthorization must not contain a signature.]`,
     )
   })
 })
 
 describe('serializeTransaction', () => {
-  test('initialized and bootstrap transactions', async () => {
+  test('current and initial transactions', async () => {
     const results = []
-    for (const init of [false, true]) {
-      const configVersion = init ? 0n : 1n
-      const applicableConfig = init ? config : initializedConfig
+    for (const applicableConfig of [currentConfig, config]) {
       const hash = MultisigOperation.getHash({
         account,
-        configVersion,
+        config: applicableConfig,
         transaction,
         type: 'transaction',
       })
@@ -686,10 +414,8 @@ describe('serializeTransaction', () => {
         account,
         approvals: selection.approvals,
         config: applicableConfig,
-        configVersion,
         createdAt: 1,
         hash,
-        init,
         signatureCount: selection.signatureCount,
         status: 'pending',
         threshold: selection.threshold,
@@ -704,7 +430,7 @@ describe('serializeTransaction', () => {
       const value = TxEnvelopeTempo.deserialize(serialized)
       results.push({
         account: value.signature?.account,
-        configVersion:
+        version:
           value.signature?.type === 'multisig'
             ? value.signature.config.version
             : undefined,
@@ -720,18 +446,18 @@ describe('serializeTransaction', () => {
     expect(results).toMatchInlineSnapshot(`
       [
         {
-          "account": "0xf81b7763d3a6876195d780865bd783dbd97dd36e",
-          "configVersion": 1n,
-          "hash": "0x8309740edaf304284186f7bcfe4527745cd4eb48e7441795ebdd970798091f8f",
+          "account": "0xef6b17836e1b3647105c3084124485e3e1b0ab7f",
+          "hash": "0x6a034f208339f7eaa4a42b3fa03aad5df77ebe83659dac2e4d2b11226d221928",
           "signatureCount": 2,
           "type": "0x76",
+          "version": 1n,
         },
         {
-          "account": "0xf81b7763d3a6876195d780865bd783dbd97dd36e",
-          "configVersion": 0n,
-          "hash": "0x636af84d8445d87cbcd33039d5a3a2274a5911036b1b7ceb740ac41e2f638611",
+          "account": "0xef6b17836e1b3647105c3084124485e3e1b0ab7f",
+          "hash": "0x04d36e54d7a816b080dfa03370da6fbeb3523ce3eff5211d7f22a3c7e87476ee",
           "signatureCount": 2,
           "type": "0x76",
+          "version": 0n,
         },
       ]
     `)
@@ -763,7 +489,7 @@ describe('serializeTransaction', () => {
     for (const transaction of transactions) {
       const hash = MultisigOperation.getHash({
         account,
-        configVersion: 1n,
+        config: currentConfig,
         transaction,
         type: 'transaction',
       })
@@ -773,18 +499,16 @@ describe('serializeTransaction', () => {
           signApproval(owners[0]!, hash),
           signApproval(owners[1]!, hash),
         ],
-        config: initializedConfig,
+        config: currentConfig,
         hash,
       })
       const serialized = MultisigOperation.serializeTransaction(
         MultisigOperation.from({
           account,
           approvals: selection.approvals,
-          config: initializedConfig,
-          configVersion: 1n,
+          config: currentConfig,
           createdAt: 1,
           hash,
-          init: false,
           signatureCount: selection.signatureCount,
           status: 'pending',
           threshold: selection.threshold,
@@ -811,7 +535,7 @@ describe('serializeTransaction', () => {
       [
         {
           "feePayerSignature": null,
-          "from": "0xf81b7763d3a6876195d780865bd783dbd97dd36e",
+          "from": "0xef6b17836e1b3647105c3084124485e3e1b0ab7f",
           "signatureCount": 2,
           "type": "0x78",
         },
@@ -821,7 +545,7 @@ describe('serializeTransaction', () => {
             "s": "0x0000000000000000000000000000000000000000000000000000000000000006",
             "yParity": 0,
           },
-          "from": "0xf81b7763d3a6876195d780865bd783dbd97dd36e",
+          "from": "0xef6b17836e1b3647105c3084124485e3e1b0ab7f",
           "signatureCount": 2,
           "type": "0x78",
         },
@@ -832,7 +556,7 @@ describe('serializeTransaction', () => {
   test('rejects an approval not retained by the operation', async () => {
     const hash = MultisigOperation.getHash({
       account,
-      configVersion: 1n,
+      config: currentConfig,
       transaction,
       type: 'transaction',
     })
@@ -841,17 +565,15 @@ describe('serializeTransaction', () => {
     const selection = await MultisigOperation.selectApprovals({
       account,
       approvals: [approval_1],
-      config: initializedConfig,
+      config: currentConfig,
       hash,
     })
     const operation = MultisigOperation.from({
       account,
       approvals: selection.approvals,
-      config: initializedConfig,
-      configVersion: 1n,
+      config: currentConfig,
       createdAt: 1,
       hash,
-      init: false,
       signatureCount: selection.signatureCount,
       status: 'pending',
       threshold: selection.threshold,
@@ -895,7 +617,7 @@ describe('from', () => {
     expect({ pending, submitting, success }).toMatchInlineSnapshot(`
       {
         "pending": {
-          "account": "0xf81b7763d3a6876195d780865bd783dbd97dd36e",
+          "account": "0xef6b17836e1b3647105c3084124485e3e1b0ab7f",
           "approvals": [
             "0x01000000000000000000000000000000000000000000000000000000000000000500000000000000000000000000000000000000000000000000000000000000065ecbe4d1a6330a44c8f7ef951d4bf165e6c6b721efada985fb41661bc6e7fd6c8734640c4998ff7e374b06ce1a64a2ecd82ab036384fb83d9a79b127a27d503200",
           ],
@@ -914,10 +636,8 @@ describe('from', () => {
             "threshold": 2,
             "version": 1n,
           },
-          "configVersion": 1n,
           "createdAt": 1,
-          "hash": "0xcdbc24a8fb192f799c5d166b13a99fb29cbb15e71a5e730988d6f8b3c5959d02",
-          "init": false,
+          "hash": "0x2d7e3c7c38a9acf85f0a9d70a39b0e9e5a05d92c7a73b633a47a45be4a112b3b",
           "signatureCount": 1,
           "status": "pending",
           "threshold": 2,
@@ -927,7 +647,7 @@ describe('from', () => {
           "weight": 1,
         },
         "submitting": {
-          "account": "0xf81b7763d3a6876195d780865bd783dbd97dd36e",
+          "account": "0xef6b17836e1b3647105c3084124485e3e1b0ab7f",
           "approvals": [
             "0x01000000000000000000000000000000000000000000000000000000000000000500000000000000000000000000000000000000000000000000000000000000065ecbe4d1a6330a44c8f7ef951d4bf165e6c6b721efada985fb41661bc6e7fd6c8734640c4998ff7e374b06ce1a64a2ecd82ab036384fb83d9a79b127a27d503200",
             "0x01000000000000000000000000000000000000000000000000000000000000000300000000000000000000000000000000000000000000000000000000000000047cf27b188d034f7e8a52380304b51ac3c08969e277f21b35a60b48fc4766997807775510db8ed040293d9ac69f7430dbba7dade63ce982299e04b79d227873d100",
@@ -947,11 +667,9 @@ describe('from', () => {
             "threshold": 2,
             "version": 1n,
           },
-          "configVersion": 1n,
           "createdAt": 1,
           "expiresAt": 10,
-          "hash": "0xcdbc24a8fb192f799c5d166b13a99fb29cbb15e71a5e730988d6f8b3c5959d02",
-          "init": false,
+          "hash": "0x2d7e3c7c38a9acf85f0a9d70a39b0e9e5a05d92c7a73b633a47a45be4a112b3b",
           "signatureCount": 2,
           "status": "submitting",
           "submissionId": "0xbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbb",
@@ -962,7 +680,7 @@ describe('from', () => {
           "weight": 2,
         },
         "success": {
-          "account": "0xf81b7763d3a6876195d780865bd783dbd97dd36e",
+          "account": "0xef6b17836e1b3647105c3084124485e3e1b0ab7f",
           "approvals": [
             "0x01000000000000000000000000000000000000000000000000000000000000000500000000000000000000000000000000000000000000000000000000000000065ecbe4d1a6330a44c8f7ef951d4bf165e6c6b721efada985fb41661bc6e7fd6c8734640c4998ff7e374b06ce1a64a2ecd82ab036384fb83d9a79b127a27d503200",
             "0x01000000000000000000000000000000000000000000000000000000000000000300000000000000000000000000000000000000000000000000000000000000047cf27b188d034f7e8a52380304b51ac3c08969e277f21b35a60b48fc4766997807775510db8ed040293d9ac69f7430dbba7dade63ce982299e04b79d227873d100",
@@ -982,10 +700,8 @@ describe('from', () => {
             "threshold": 2,
             "version": 1n,
           },
-          "configVersion": 1n,
           "createdAt": 1,
-          "hash": "0xcdbc24a8fb192f799c5d166b13a99fb29cbb15e71a5e730988d6f8b3c5959d02",
-          "init": false,
+          "hash": "0x2d7e3c7c38a9acf85f0a9d70a39b0e9e5a05d92c7a73b633a47a45be4a112b3b",
           "signatureCount": 2,
           "status": "success",
           "threshold": 2,
@@ -1011,7 +727,7 @@ describe('from', () => {
       ...transactionPending,
       hash: MultisigConfig.getSignPayload({
         account,
-        config: initializedConfig,
+        config: currentConfig,
         payload: TxEnvelopeTempo.getSignPayload(
           TxEnvelopeTempo.deserialize(
             Hex.concat(
@@ -1031,7 +747,7 @@ describe('from', () => {
       },
       `
       {
-        "account": "0xf81b7763d3a6876195d780865bd783dbd97dd36e",
+        "account": "0xef6b17836e1b3647105c3084124485e3e1b0ab7f",
         "approvals": [
           "0x01000000000000000000000000000000000000000000000000000000000000000500000000000000000000000000000000000000000000000000000000000000065ecbe4d1a6330a44c8f7ef951d4bf165e6c6b721efada985fb41661bc6e7fd6c8734640c4998ff7e374b06ce1a64a2ecd82ab036384fb83d9a79b127a27d503200",
         ],
@@ -1050,10 +766,8 @@ describe('from', () => {
           "threshold": 2,
           "version": 1n,
         },
-        "configVersion": 1n,
         "createdAt": 1,
         "hash": Any<String>,
-        "init": false,
         "signatureCount": 1,
         "status": "pending",
         "threshold": 2,
@@ -1083,7 +797,7 @@ describe('from', () => {
       ...transactionPending,
       hash: MultisigConfig.getSignPayload({
         account,
-        config: initializedConfig,
+        config: currentConfig,
         payload: TxEnvelopeTempo.getSignPayload(
           TxEnvelopeTempo.deserialize(
             Hex.concat(
@@ -1099,11 +813,10 @@ describe('from', () => {
     expect(operation.transaction).toBe(transaction)
   })
 
-  test('bootstrap transaction', () => {
+  test('initial transaction', () => {
     const operation = MultisigOperation.from({
       ...transactionPending,
       config,
-      configVersion: 0n,
       hash: MultisigConfig.getSignPayload({
         account,
         config,
@@ -1111,7 +824,6 @@ describe('from', () => {
           TxEnvelopeTempo.deserialize(transaction),
         ),
       }),
-      init: true,
     })
 
     expect(operation).toMatchInlineSnapshot(
@@ -1121,7 +833,7 @@ describe('from', () => {
       },
       `
       {
-        "account": "0xf81b7763d3a6876195d780865bd783dbd97dd36e",
+        "account": "0xef6b17836e1b3647105c3084124485e3e1b0ab7f",
         "approvals": [
           "0x01000000000000000000000000000000000000000000000000000000000000000500000000000000000000000000000000000000000000000000000000000000065ecbe4d1a6330a44c8f7ef951d4bf165e6c6b721efada985fb41661bc6e7fd6c8734640c4998ff7e374b06ce1a64a2ecd82ab036384fb83d9a79b127a27d503200",
         ],
@@ -1140,10 +852,8 @@ describe('from', () => {
           "threshold": 2,
           "version": 0n,
         },
-        "configVersion": 0n,
         "createdAt": 1,
         "hash": Any<String>,
-        "init": true,
         "signatureCount": 1,
         "status": "pending",
         "threshold": 2,
@@ -1156,31 +866,6 @@ describe('from', () => {
     )
   })
 
-  test('initialized transaction at config version zero', () => {
-    const operation = MultisigOperation.from({
-      ...transactionPending,
-      config,
-      configVersion: 0n,
-      hash: MultisigConfig.getSignPayload({
-        account,
-        config,
-        payload: TxEnvelopeTempo.getSignPayload(
-          TxEnvelopeTempo.deserialize(transaction),
-        ),
-      }),
-    })
-
-    expect({
-      configVersion: operation.configVersion,
-      init: operation.init,
-    }).toMatchInlineSnapshot(`
-      {
-        "configVersion": 0n,
-        "init": false,
-      }
-    `)
-  })
-
   test('key authorization states', () => {
     const pending = MultisigOperation.from(keyAuthorizationPending)
     const authorization = KeyAuthorization.deserialize(keyAuthorization)
@@ -1191,11 +876,8 @@ describe('from', () => {
         KeyAuthorization.from(authorization, {
           signature: {
             account,
-            config: initializedConfig,
-            signatures: [
-              SignatureEnvelope.deserialize(approval_1),
-              SignatureEnvelope.deserialize(approval_2),
-            ],
+            config: currentConfig,
+            signatures: [ownerSignature_1, owners[1]!.signature],
             type: 'multisig',
           },
         }),
@@ -1208,7 +890,7 @@ describe('from', () => {
     expect({ pending, success }).toMatchInlineSnapshot(`
       {
         "pending": {
-          "account": "0xf81b7763d3a6876195d780865bd783dbd97dd36e",
+          "account": "0xef6b17836e1b3647105c3084124485e3e1b0ab7f",
           "approvals": [
             "0x01000000000000000000000000000000000000000000000000000000000000000500000000000000000000000000000000000000000000000000000000000000065ecbe4d1a6330a44c8f7ef951d4bf165e6c6b721efada985fb41661bc6e7fd6c8734640c4998ff7e374b06ce1a64a2ecd82ab036384fb83d9a79b127a27d503200",
           ],
@@ -1227,11 +909,9 @@ describe('from', () => {
             "threshold": 2,
             "version": 1n,
           },
-          "configVersion": 1n,
           "createdAt": 1,
-          "hash": "0xf6995eb69c12c03d3d13b357abf7cac22b4effe52fba8ff02e5aef26161f77a0",
-          "init": false,
-          "keyAuthorization": "0xf838f782107980943333333333333333333333333333333333333333846b49d2008080808094f81b7763d3a6876195d780865bd783dbd97dd36e",
+          "hash": "0xa83016f0e94c4a6125483ffeba3abb0a8df1bc0f5a503f63639e806b793520bb",
+          "keyAuthorization": "0xf838f782107980943333333333333333333333333333333333333333846b49d2008080808094ef6b17836e1b3647105c3084124485e3e1b0ab7f",
           "signatureCount": 1,
           "status": "pending",
           "threshold": 2,
@@ -1240,7 +920,7 @@ describe('from', () => {
           "weight": 1,
         },
         "success": {
-          "account": "0xf81b7763d3a6876195d780865bd783dbd97dd36e",
+          "account": "0xef6b17836e1b3647105c3084124485e3e1b0ab7f",
           "approvals": [
             "0x01000000000000000000000000000000000000000000000000000000000000000500000000000000000000000000000000000000000000000000000000000000065ecbe4d1a6330a44c8f7ef951d4bf165e6c6b721efada985fb41661bc6e7fd6c8734640c4998ff7e374b06ce1a64a2ecd82ab036384fb83d9a79b127a27d503200",
             "0x01000000000000000000000000000000000000000000000000000000000000000300000000000000000000000000000000000000000000000000000000000000047cf27b188d034f7e8a52380304b51ac3c08969e277f21b35a60b48fc4766997807775510db8ed040293d9ac69f7430dbba7dade63ce982299e04b79d227873d100",
@@ -1260,11 +940,9 @@ describe('from', () => {
             "threshold": 2,
             "version": 1n,
           },
-          "configVersion": 1n,
           "createdAt": 1,
-          "hash": "0xf6995eb69c12c03d3d13b357abf7cac22b4effe52fba8ff02e5aef26161f77a0",
-          "init": false,
-          "keyAuthorization": "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",
+          "hash": "0xa83016f0e94c4a6125483ffeba3abb0a8df1bc0f5a503f63639e806b793520bb",
+          "keyAuthorization": "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",
           "signatureCount": 2,
           "status": "success",
           "threshold": 2,
@@ -1276,17 +954,14 @@ describe('from', () => {
     `)
   })
 
-  test('bootstrap key authorization', () => {
+  test('initial key authorization', () => {
     const authorization = KeyAuthorization.deserialize(keyAuthorization)
     const keyAuthorization_ = KeyAuthorization.serialize(
       KeyAuthorization.from(authorization, {
         signature: {
           account,
           config,
-          signatures: [
-            SignatureEnvelope.deserialize(approval_1),
-            SignatureEnvelope.deserialize(approval_2),
-          ],
+          signatures: [ownerSignature_1, owners[1]!.signature],
           type: 'multisig',
         },
       }),
@@ -1295,13 +970,11 @@ describe('from', () => {
       ...keyAuthorizationPending,
       approvals: [approval_1, approval_2],
       config,
-      configVersion: 0n,
       hash: MultisigConfig.getSignPayload({
         account,
         config,
         payload: KeyAuthorization.getSignPayload(authorization),
       }),
-      init: true,
       keyAuthorization: keyAuthorization_,
       signatureCount: 2,
       status: 'success',
@@ -1315,7 +988,7 @@ describe('from', () => {
       },
       `
       {
-        "account": "0xf81b7763d3a6876195d780865bd783dbd97dd36e",
+        "account": "0xef6b17836e1b3647105c3084124485e3e1b0ab7f",
         "approvals": [
           "0x01000000000000000000000000000000000000000000000000000000000000000500000000000000000000000000000000000000000000000000000000000000065ecbe4d1a6330a44c8f7ef951d4bf165e6c6b721efada985fb41661bc6e7fd6c8734640c4998ff7e374b06ce1a64a2ecd82ab036384fb83d9a79b127a27d503200",
           "0x01000000000000000000000000000000000000000000000000000000000000000300000000000000000000000000000000000000000000000000000000000000047cf27b188d034f7e8a52380304b51ac3c08969e277f21b35a60b48fc4766997807775510db8ed040293d9ac69f7430dbba7dade63ce982299e04b79d227873d100",
@@ -1335,10 +1008,8 @@ describe('from', () => {
           "threshold": 2,
           "version": 0n,
         },
-        "configVersion": 0n,
         "createdAt": 1,
         "hash": Any<String>,
-        "init": true,
         "keyAuthorization": Any<String>,
         "signatureCount": 2,
         "status": "success",
@@ -1363,7 +1034,7 @@ describe('RPC conversion', () => {
     expect({ keyAuthorizationRpc, transactionRpc }).toMatchInlineSnapshot(`
       {
         "keyAuthorizationRpc": {
-          "account": "0xf81b7763d3a6876195d780865bd783dbd97dd36e",
+          "account": "0xef6b17836e1b3647105c3084124485e3e1b0ab7f",
           "approvals": [
             "0x01000000000000000000000000000000000000000000000000000000000000000500000000000000000000000000000000000000000000000000000000000000065ecbe4d1a6330a44c8f7ef951d4bf165e6c6b721efada985fb41661bc6e7fd6c8734640c4998ff7e374b06ce1a64a2ecd82ab036384fb83d9a79b127a27d503200",
           ],
@@ -1382,11 +1053,9 @@ describe('RPC conversion', () => {
             "threshold": 2,
             "version": "0x1",
           },
-          "configVersion": "0x1",
           "createdAt": 1,
-          "hash": "0xf6995eb69c12c03d3d13b357abf7cac22b4effe52fba8ff02e5aef26161f77a0",
-          "init": false,
-          "keyAuthorization": "0xf838f782107980943333333333333333333333333333333333333333846b49d2008080808094f81b7763d3a6876195d780865bd783dbd97dd36e",
+          "hash": "0xa83016f0e94c4a6125483ffeba3abb0a8df1bc0f5a503f63639e806b793520bb",
+          "keyAuthorization": "0xf838f782107980943333333333333333333333333333333333333333846b49d2008080808094ef6b17836e1b3647105c3084124485e3e1b0ab7f",
           "signatureCount": 1,
           "status": "pending",
           "threshold": 2,
@@ -1395,7 +1064,7 @@ describe('RPC conversion', () => {
           "weight": 1,
         },
         "transactionRpc": {
-          "account": "0xf81b7763d3a6876195d780865bd783dbd97dd36e",
+          "account": "0xef6b17836e1b3647105c3084124485e3e1b0ab7f",
           "approvals": [
             "0x01000000000000000000000000000000000000000000000000000000000000000500000000000000000000000000000000000000000000000000000000000000065ecbe4d1a6330a44c8f7ef951d4bf165e6c6b721efada985fb41661bc6e7fd6c8734640c4998ff7e374b06ce1a64a2ecd82ab036384fb83d9a79b127a27d503200",
           ],
@@ -1414,10 +1083,8 @@ describe('RPC conversion', () => {
             "threshold": 2,
             "version": "0x1",
           },
-          "configVersion": "0x1",
           "createdAt": 1,
-          "hash": "0xcdbc24a8fb192f799c5d166b13a99fb29cbb15e71a5e730988d6f8b3c5959d02",
-          "init": false,
+          "hash": "0x2d7e3c7c38a9acf85f0a9d70a39b0e9e5a05d92c7a73b633a47a45be4a112b3b",
           "signatureCount": 1,
           "status": "pending",
           "threshold": 2,
@@ -1449,7 +1116,7 @@ describe('validation', () => {
         ...transactionPending,
         transaction: TxEnvelopeTempo.serialize(
           TxEnvelopeTempo.deserialize(transaction),
-          { signature: SignatureEnvelope.deserialize(approval_1) },
+          { signature: ownerSignature_1 },
         ),
       },
     },
@@ -1550,7 +1217,7 @@ describe('validation', () => {
         account: '0x0000000000000000000000000000000000000000',
         hash: MultisigConfig.getSignPayload({
           account: '0x0000000000000000000000000000000000000000',
-          config: initializedConfig,
+          config: currentConfig,
           payload: TxEnvelopeTempo.getSignPayload(
             TxEnvelopeTempo.deserialize(transaction),
           ),
@@ -1617,7 +1284,7 @@ describe('validation', () => {
       },
     },
     {
-      name: 'nested bootstrap owner approval',
+      name: 'nested non-owner approval',
       operation: {
         ...transactionPending,
         approvals: [
@@ -1630,35 +1297,35 @@ describe('validation', () => {
         ],
       },
     },
-    {
-      name: 'bootstrap with initialized version',
-      operation: { ...transactionPending, init: true },
-    },
   ])('rejects $name', ({ operation }) => {
     expect(() =>
       MultisigOperation.from(operation as MultisigOperation.Operation),
     ).toThrowError(MultisigOperation.InvalidOperationError)
   })
-
-  test('rejects mismatched config versions', () => {
-    expect(() =>
-      MultisigOperation.from({
-        ...transactionPending,
-        config: { ...initializedConfig, version: 2n },
+  test('accepts initial accounts validated by the chain', () => {
+    const value = MultisigOperation.from({
+      ...transactionPending,
+      config,
+      hash: MultisigOperation.getHash({
+        account,
+        config,
+        transaction,
+        type: 'transaction',
       }),
-    ).toThrowErrorMatchingInlineSnapshot(
-      `[MultisigOperation.InvalidOperationError: Invalid multisig operation: config.version must equal configVersion.]`,
-    )
+    })
+    expect(value.account).toBe(account)
+    expect(value.config).toEqual(config)
   })
 
   test('rejects noncanonical RPC quantities', () => {
+    const operation = MultisigOperation.toRpc(transactionPending)
     expect(() =>
       MultisigOperation.fromRpc({
-        ...MultisigOperation.toRpc(transactionPending),
-        configVersion: '0x01',
+        ...operation,
+        config: { ...operation.config, version: '0x01' },
       }),
     ).toThrowError(
-      'Invalid multisig operation: configVersion must use canonical quantity encoding.',
+      'Invalid multisig operation: config.version must use canonical quantity encoding.',
     )
   })
 
@@ -1671,11 +1338,8 @@ describe('validation', () => {
         KeyAuthorization.from(authorization, {
           signature: {
             account,
-            config: initializedConfig,
-            signatures: [
-              SignatureEnvelope.deserialize(approval_1),
-              SignatureEnvelope.deserialize(approval_3),
-            ],
+            config: currentConfig,
+            signatures: [ownerSignature_1, owners[2]!.signature],
             type: 'multisig',
           },
         }),
@@ -1695,12 +1359,9 @@ describe('validation', () => {
     const signatures = [
       ...SignatureEnvelope.sortMultisigApprovals({
         account,
-        config: initializedConfig,
+        config: currentConfig,
         payload: KeyAuthorization.getSignPayload(authorization),
-        signatures: [
-          SignatureEnvelope.deserialize(approval_1),
-          SignatureEnvelope.deserialize(approval_2),
-        ],
+        signatures: [ownerSignature_1, owners[1]!.signature],
       }),
     ].reverse()
     const operation = {
@@ -1710,7 +1371,7 @@ describe('validation', () => {
         KeyAuthorization.from(authorization, {
           signature: {
             account,
-            config: initializedConfig,
+            config: currentConfig,
             signatures,
             type: 'multisig',
           },
@@ -1735,11 +1396,8 @@ describe('validation', () => {
         KeyAuthorization.from(authorization, {
           signature: {
             account,
-            config: initializedConfig,
-            signatures: [
-              SignatureEnvelope.deserialize(approval_1),
-              SignatureEnvelope.deserialize(approval_1),
-            ],
+            config: currentConfig,
+            signatures: [ownerSignature_1, ownerSignature_1],
             type: 'multisig',
           },
         }),
@@ -1754,64 +1412,7 @@ describe('validation', () => {
     )
   })
 
-  test('rejects reordered nested key authorization approvals', () => {
-    const authorization = KeyAuthorization.deserialize(keyAuthorization)
-    const nestedConfig = MultisigConfig.from({
-      owners: [{ owner: owner_2, weight: 1 }],
-      threshold: 1,
-      version: 1n,
-    })
-    const childSignatures = SignatureEnvelope.sortMultisigApprovals({
-      account: owner_1,
-      config: nestedConfig,
-      payload: keyAuthorizationHash,
-      signatures: [
-        SignatureEnvelope.deserialize(approval_1),
-        SignatureEnvelope.deserialize(approval_2),
-      ],
-    })
-    const retainedNested = SignatureEnvelope.from({
-      account: owner_1,
-      config: nestedConfig,
-      signatures: childSignatures,
-      type: 'multisig',
-    })
-    const selectedNested = SignatureEnvelope.from({
-      account: owner_1,
-      config: nestedConfig,
-      signatures: [...childSignatures].reverse(),
-      type: 'multisig',
-    })
-    const selected = SignatureEnvelope.sortMultisigApprovals({
-      account,
-      config: initializedConfig,
-      payload: KeyAuthorization.getSignPayload(authorization),
-      signatures: [selectedNested, SignatureEnvelope.deserialize(approval_2)],
-    })
-    const operation = {
-      ...keyAuthorizationPending,
-      approvals: [SignatureEnvelope.serialize(retainedNested), approval_2],
-      keyAuthorization: KeyAuthorization.serialize(
-        KeyAuthorization.from(authorization, {
-          signature: {
-            account,
-            config: initializedConfig,
-            signatures: selected,
-            type: 'multisig',
-          },
-        }),
-      ),
-      signatureCount: 2,
-      status: 'success',
-      weight: 2,
-    } as const
-
-    expect(() => MultisigOperation.from(operation)).toThrowError(
-      'Invalid multisig operation: key authorization signature is not a retained approval.',
-    )
-  })
-
-  test('accepts case-insensitive bootstrap configs', () => {
+  test('accepts case-insensitive initial configs', () => {
     const config = MultisigConfig.from({
       owners: [
         {
@@ -1826,7 +1427,7 @@ describe('validation', () => {
       salt: `0x${'AB'.repeat(32)}`,
       threshold: 2,
     })
-    const account = MultisigConfig.getAddress(config)
+    const account = MultisigConfig.getAddress(config, { factory })
     const authorization = KeyAuthorization.from({
       account,
       address: '0x3333333333333333333333333333333333333333',
@@ -1839,10 +1440,7 @@ describe('validation', () => {
       account,
       config,
       payload: KeyAuthorization.getSignPayload(authorization),
-      signatures: [
-        SignatureEnvelope.deserialize(approval_1),
-        SignatureEnvelope.deserialize(approval_2),
-      ],
+      signatures: [ownerSignature_1, owners[1]!.signature],
     })
     const approvals = signatures.map((signature) =>
       SignatureEnvelope.serialize(signature),
@@ -1852,14 +1450,12 @@ describe('validation', () => {
       account,
       approvals,
       config,
-      configVersion: 0n,
       createdAt: 1,
       hash: MultisigConfig.getSignPayload({
         account,
         config,
         payload: KeyAuthorization.getSignPayload(authorization),
       }),
-      init: true,
       keyAuthorization: KeyAuthorization.serialize(
         KeyAuthorization.from(authorization, {
           signature: {