feat!: no_from

boxes/boxes/vanilla/app/embedded-wallet.ts

@@ -19,6 +19,7 @@ import {
   EmbeddedWallet as EmbeddedWalletBase,
   type EmbeddedWalletOptions,
 } from '@aztec/wallets/embedded';
+import { NO_FROM } from '@aztec/aztec.js/account';
 
 const logger = createLogger('wallet');
 const LocalStorageKey = 'aztec-account';
@@ -153,7 +154,7 @@ export class EmbeddedWallet extends EmbeddedWalletBase {
     const sponsoredFPCAddress = await this.#getSponsoredFPCAddress();
 
     const deployOpts: DeployAccountOptions<InteractionWaitOptions> = {
-      from: AztecAddress.ZERO,
+      from: NO_FROM,
       fee: {
         paymentMethod: new SponsoredFeePaymentMethod(sponsoredFPCAddress),
       },

boxes/boxes/vanilla/scripts/deploy.ts

@@ -19,6 +19,7 @@ import fs from 'fs';
 import path from 'path';
 // @ts-ignore
 import { PrivateVotingContract } from '../artifacts/PrivateVoting.ts';
+import { NO_FROM } from '@aztec/aztec.js/account';
 
 const AZTEC_NODE_URL = process.env.AZTEC_NODE_URL || 'http://localhost:8080';
 const WRITE_ENV_FILE = process.env.WRITE_ENV_FILE === 'false' ? false : true;
@@ -51,7 +52,7 @@ async function createAccount(wallet: EmbeddedWallet) {
   const deployMethod = await accountManager.getDeployMethod();
   const sponsoredPFCContract = await getSponsoredPFCContract();
   const deployOpts: DeployAccountOptions<InteractionWaitOptions> = {
-    from: AztecAddress.ZERO,
+    from: NO_FROM,
     fee: {
       paymentMethod: new SponsoredFeePaymentMethod(
         sponsoredPFCContract.address
@@ -71,7 +72,10 @@ async function deployContract(wallet: Wallet, deployer: AztecAddress) {
 
   const sponsoredPFCContract = await getSponsoredPFCContract();
 
-  const { contract } = await PrivateVotingContract.deploy(wallet, deployer).send({
+  const { contract } = await PrivateVotingContract.deploy(
+    wallet,
+    deployer
+  ).send({
     from: deployer,
     contractAddressSalt: salt,
     fee: {

docs/docs-developers/docs/aztec-js/how_to_create_account.md

@@ -50,7 +50,7 @@ If your account already has Fee Juice (for example, [bridged from L1](./how_to_p
 
 #include_code deploy_account_fee_juice /docs/examples/ts/aztecjs_connection/index.ts typescript
 
-The `from: AztecAddress.ZERO` is required because there's no existing account to send from—the transaction itself creates the account.
+The `from: NO_FROM` signals that this transaction should be executed without account contract mediation—the transaction itself creates the account.
 
 ## Verify deployment
 

docs/docs-developers/docs/resources/migration_notes.md

@@ -9,6 +9,47 @@ Aztec is in active development. Each version may introduce breaking changes that
 
 ## TBD
 
+### [Aztec.js] Use `NO_FROM` instead of `AztecAddress.ZERO` to bypass account contract entrypoint
+
+When sending transactions that should not be mediated by an account contract (e.g., account contract self-deployments), use the explicit `NO_FROM` sentinel instead of `AztecAddress.ZERO`.
+
+`NO_FROM` signals that the transaction should be executed directly via the `DefaultEntrypoint`. This replaces the brittle convention of passing `AztecAddress.ZERO` as the `from` field.
+
+**Migration:**
+
+```diff
+- import { AztecAddress } from '@aztec/aztec.js';
++ import { NO_FROM } from '@aztec/aztec.js/account';
+
+  await contract.methods.my_method().send({
+-   from: AztecAddress.ZERO,
++   from: NO_FROM,
+  });
+```
+
+Note that `DefaultEntrypoint` only accepts a single call. If you need to execute multiple calls without account contract mediation (e.g., deploying an account contract and paying a fee in the same transaction), wrap them through `DefaultMultiCallEntrypoint` on the app side before sending:
+
+```typescript
+import { NO_FROM } from "@aztec/aztec.js/account";
+import { DefaultMultiCallEntrypoint } from "@aztec/entrypoints/multicall";
+import { mergeExecutionPayloads } from "@aztec/stdlib/tx";
+
+// Merge multiple execution payloads into one
+const merged = mergeExecutionPayloads([deployPayload, feePayload]);
+
+// Wrap through multicall so it becomes a single call for DefaultEntrypoint
+const multicall = new DefaultMultiCallEntrypoint();
+const chainInfo = await wallet.getChainInfo();
+const wrappedPayload = await multicall.wrapExecutionPayload(merged, chainInfo);
+
+// Send without account contract mediation
+await wallet.sendTx(wrappedPayload, { from: NO_FROM });
+```
+
+Using other contracts for wrapping (for example, supporting more calls) is also supported, as long as the contract is registered in the wallet. This opens the door to different flows that do not use account entrypoints as the first call in the chain, including app sponsored FPCs.
+
+**Impact**: Any code that passes `AztecAddress.ZERO` as the `from` option in `.send()`, `.simulate()`, or deploy options must switch to `NO_FROM`. Wallets use `DefaultEntrypoint` directly for `NO_FROM` transactions, instead of the `DefaultMultiCallEntrypoint` that was used internally before when specifying `AztecAddress.ZERO`.
+
 ### [Aztec.nr] `attempt_note_discovery` now takes two separate functions instead of one
 
 The `attempt_note_discovery` function (and related discovery functions like `do_sync_state`, `process_message_ciphertext`) now takes separate `compute_note_hash` and `compute_note_nullifier` arguments instead of a single combined `compute_note_hash_and_nullifier`. The corresponding type aliases are now `ComputeNoteHash` and `ComputeNoteNullifier` (instead of `ComputeNoteHashAndNullifier`).

docs/examples/ts/aztecjs_connection/index.ts

@@ -55,7 +55,7 @@ console.log("New account address:", newAccount.address.toString());
 
 // docs:start:deploy_account_sponsored_fpc
 // Additional imports needed for account deployment examples
-import { AztecAddress } from "@aztec/aztec.js/addresses";
+import { NO_FROM } from "@aztec/aztec.js/account";
 import { SponsoredFeePaymentMethod } from "@aztec/aztec.js/fee/testing";
 import { SponsoredFPCContract } from "@aztec/noir-contracts.js/SponsoredFPC";
 import { getContractInstanceFromInstantiationParams } from "@aztec/stdlib/contract";
@@ -76,7 +76,7 @@ const sponsoredPaymentMethod = new SponsoredFeePaymentMethod(
 // newAccount is the account created in the previous section
 const deployMethod = await newAccount.getDeployMethod();
 await deployMethod.send({
-  from: AztecAddress.ZERO,
+  from: NO_FROM,
   fee: { paymentMethod: sponsoredPaymentMethod },
 });
 // docs:end:deploy_account_sponsored_fpc
@@ -144,7 +144,7 @@ console.log(`Alice's token balance: ${balance}`);
 // Deploy the account using the bridged Fee Juice
 const deployMethodFeeJuice = await feeJuiceAccount.getDeployMethod();
 await deployMethodFeeJuice.send({
-  from: AztecAddress.ZERO,
+  from: NO_FROM,
   fee: {
     paymentMethod: new FeeJuicePaymentMethodWithClaim(
       feeJuiceAccount.address,

docs/examples/ts/recursive_verification/index.ts

@@ -6,15 +6,17 @@ import { getSponsoredFPCInstance } from "./scripts/sponsored_fpc.js";
 import { SponsoredFPCContract } from "@aztec/noir-contracts.js/SponsoredFPC";
 import { ValueNotEqualContract } from "./artifacts/ValueNotEqual.js";
 import { EmbeddedWallet } from "@aztec/wallets/embedded";
-import { AztecAddress } from "@aztec/aztec.js/addresses";
+import { NO_FROM } from "@aztec/aztec.js/account";
 import { Fr } from "@aztec/aztec.js/fields";
 import assert from "node:assert";
 import fs from "node:fs";
 // docs:end:imports
 
 // docs:start:sample_data
 if (!fs.existsSync("data.json")) {
-  console.error("data.json not found. Run 'yarn data' first to generate proof data.");
+  console.error(
+    "data.json not found. Run 'yarn data' first to generate proof data.",
+  );
   process.exit(1);
 }
 const data = JSON.parse(fs.readFileSync("data.json", "utf-8"));
@@ -57,7 +59,7 @@ async function main() {
   // Deploy the account contract
   const deployMethod = await manager.getDeployMethod();
   await deployMethod.send({
-    from: AztecAddress.ZERO,
+    from: NO_FROM,
     fee: { paymentMethod: sponsoredPaymentMethod },
   });
 
@@ -84,9 +86,11 @@ async function main() {
 
   // Step 3: Read initial counter value
   // simulate() executes without submitting a transaction
-  let counterValue = (await valueNotEqual.methods
-    .get_counter(accounts[0].item)
-    .simulate({ from: accounts[0].item })).result;
+  let counterValue = (
+    await valueNotEqual.methods
+      .get_counter(accounts[0].item)
+      .simulate({ from: accounts[0].item })
+  ).result;
   console.log(`Counter value: ${counterValue}`); // Should be 10
 
   // Step 4: Call increment() with proof data
@@ -107,9 +111,11 @@ async function main() {
   await interaction.send(opts);
 
   // Step 6: Read updated counter
-  counterValue = (await valueNotEqual.methods
-    .get_counter(accounts[0].item)
-    .simulate({ from: accounts[0].item })).result;
+  counterValue = (
+    await valueNotEqual.methods
+      .get_counter(accounts[0].item)
+      .simulate({ from: accounts[0].item })
+  ).result;
   console.log(`Counter value: ${counterValue}`); // Should be 11
 
   assert(counterValue === 11n, "Counter should be 11 after verification");

noir-projects/aztec-nr/aztec/src/authwit/auth.nr

@@ -213,6 +213,7 @@ struct CallAuthorization {
 struct CallAuthorizationRequest {
     selector: AuthorizationSelector,
     inner_hash: Field,
+    on_behalf_of: AztecAddress,
     msg_sender: AztecAddress,
     fn_selector: FunctionSelector,
     args_hash: Field,
@@ -221,11 +222,13 @@ struct CallAuthorizationRequest {
 unconstrained fn emit_authorization_as_offchain_effect<let N: u32>(
     authorization: CallAuthorization,
     inner_hash: Field,
+    on_behalf_of: AztecAddress,
 ) {
     let args: [Field; N] = load(authorization.args_hash);
     let authorization_request = CallAuthorizationRequest {
         selector: authorization.get_authorization_selector(),
         inner_hash: inner_hash,
+        on_behalf_of: on_behalf_of,
         msg_sender: authorization.msg_sender,
         fn_selector: authorization.selector,
         args_hash: authorization.args_hash,
@@ -253,7 +256,7 @@ pub fn assert_current_call_valid_authwit<let N: u32>(context: &mut PrivateContex
     let inner_hash = compute_inner_authwit_hash(authorization.serialize());
     // Safety: Offchain effects are by definition unconstrained. They are emitted via an oracle which we don't use for
     // anything besides its side effects, therefore this is safe to call.
-    unsafe { emit_authorization_as_offchain_effect::<N>(authorization, inner_hash) };
+    unsafe { emit_authorization_as_offchain_effect::<N>(authorization, inner_hash, on_behalf_of) };
 
     assert_inner_hash_valid_authwit(context, on_behalf_of, inner_hash);
 }

playground/src/components/home/components/Landing.tsx

@@ -18,6 +18,7 @@ import { trackButtonClick } from '../../../utils/matomo';
 import type { EmbeddedWallet } from '@aztec/wallets/embedded';
 import { prepareForFeePayment } from '../../../utils/sponsoredFPC';
 import { colors, commonStyles } from '../../../global.styles';
+import { NO_FROM } from '@aztec/aztec.js/account';
 
 const container = css({
   display: 'flex',
@@ -399,7 +400,7 @@ export function Landing() {
 
       const deployMethod = await accountManager.getDeployMethod();
       const opts: DeployAccountOptions = {
-        from: AztecAddress.ZERO,
+        from: NO_FROM,
         fee: {
           paymentMethod,
         },

playground/src/wallet/components/CreateAccountDialog.tsx

@@ -24,6 +24,7 @@ import { INFO_TEXT } from '../../constants';
 import { Box, DialogContent } from '@mui/material';
 import { DialogActions } from '@mui/material';
 import type { EmbeddedWallet } from '@aztec/wallets/embedded';
+import { NO_FROM } from '@aztec/aztec.js/account';
 
 export function CreateAccountDialog({
   wallet,
@@ -77,7 +78,7 @@ export function CreateAccountDialog({
       if (publiclyDeploy) {
         deployMethod = await accountManager.getDeployMethod();
         opts = {
-          from: AztecAddress.ZERO,
+          from: NO_FROM,
           fee: {
             paymentMethod: feePaymentMethod,
           },

yarn-project/aztec.js/src/api/account.ts

@@ -10,4 +10,5 @@ export {
 export type { AuthWitnessProvider, ChainInfo } from '@aztec/entrypoints/interfaces';
 export { ChainInfoSchema } from '@aztec/entrypoints/interfaces';
 
+export { NO_FROM, type NoFrom } from '../contract/interaction_options.js';
 export { SignerlessAccount } from '../account/signerless_account.js';

yarn-project/aztec.js/src/authorization/call_authorization_request.ts

@@ -22,6 +22,11 @@ export class CallAuthorizationRequest {
      * poseidon2([msg_sender, selector, args_hash])
      */
     public innerHash: Fr,
+    /**
+     * The address on whose behalf the auth witness should be created.
+     * This is the account that must sign the authorization.
+     */
+    public onBehalfOf: AztecAddress,
     /**
      * The address performing the call
      */
@@ -75,11 +80,12 @@ export class CallAuthorizationRequest {
     }
     const request = new CallAuthorizationRequest(
       selector,
-      reader.readField(),
-      AztecAddress.fromField(reader.readField()),
-      FunctionSelector.fromField(reader.readField()),
-      reader.readField(),
-      reader.readFieldArray(reader.remainingFields()),
+      reader.readField(), // inner_hash
+      AztecAddress.fromField(reader.readField()), // on_behalf_of
+      AztecAddress.fromField(reader.readField()), // msg_sender
+      FunctionSelector.fromField(reader.readField()), // fn_selector
+      reader.readField(), // args_hash
+      reader.readFieldArray(reader.remainingFields()), // args
     );
     await request.validate();
     return request;

yarn-project/aztec.js/src/contract/batch_call.ts

@@ -1,9 +1,11 @@
 import { type FunctionCall, FunctionType, decodeFromAbi } from '@aztec/stdlib/abi';
+import { AztecAddress } from '@aztec/stdlib/aztec-address';
 import { ExecutionPayload, TxSimulationResult, UtilityExecutionResult, mergeExecutionPayloads } from '@aztec/stdlib/tx';
 
 import type { BatchedMethod, Wallet } from '../wallet/wallet.js';
 import { BaseContractInteraction } from './base_contract_interaction.js';
 import {
+  NO_FROM,
   type RequestInteractionOptions,
   type SimulateInteractionOptions,
   extractOffchainOutput,
@@ -78,7 +80,10 @@ export class BatchCall extends BaseContractInteraction {
     for (const [call] of utility) {
       batchRequests.push({
         name: 'executeUtility' as const,
-        args: [call, { scope: options.from, authWitnesses: options.authWitnesses }],
+        args: [
+          call,
+          { scope: options.from === NO_FROM ? AztecAddress.ZERO : options.from, authWitnesses: options.authWitnesses },
+        ],
       });
     }
 

yarn-project/aztec.js/src/contract/contract_function_interaction.ts

@@ -19,6 +19,7 @@ import type { Wallet } from '../wallet/wallet.js';
 import { BaseContractInteraction } from './base_contract_interaction.js';
 import { getGasLimits } from './get_gas_limits.js';
 import {
+  NO_FROM,
   type ProfileInteractionOptions,
   type RequestInteractionOptions,
   type SimulateInteractionOptions,
@@ -130,7 +131,7 @@ export class ContractFunctionInteraction extends BaseContractInteraction {
     if (this.functionDao.functionType == FunctionType.UTILITY) {
       const call = await this.getFunctionCall();
       const utilityResult = await this.wallet.executeUtility(call, {
-        scope: options.from,
+        scope: options.from === NO_FROM ? AztecAddress.ZERO : options.from,
         authWitnesses: options.authWitnesses,
       });
 

yarn-project/aztec.js/src/contract/deploy_method.ts

@@ -20,6 +20,7 @@ import type { ContractBase } from './contract_base.js';
 import { ContractFunctionInteraction } from './contract_function_interaction.js';
 import { getGasLimits } from './get_gas_limits.js';
 import {
+  NO_FROM,
   NO_WAIT,
   type NoWait,
   type OffchainOutput,
@@ -222,10 +223,14 @@ export class DeployMethod<TContract extends ContractBase = ContractBase> extends
   }
 
   convertDeployOptionsToRequestOptions(options: DeployOptionsWithoutWait): RequestDeployOptions {
-    return {
-      ...options,
-      deployer: !options?.universalDeploy ? options.from : undefined,
-    };
+    const { from } = options;
+    let deployer: AztecAddress | undefined;
+    if (options?.universalDeploy) {
+      deployer = undefined;
+    } else {
+      deployer = from === NO_FROM ? AztecAddress.ZERO : from;
+    }
+    return { ...options, deployer };
   }
 
   /**

yarn-project/aztec.js/src/contract/interaction_options.ts

@@ -74,6 +74,20 @@ export const NO_WAIT = 'NO_WAIT' as const;
  */
 export type NoWait = typeof NO_WAIT;
 
+/**
+ * Constant for explicitly opting out of account contract mediation.
+ * When used as the `from` parameter, the wallet executes the payload directly
+ * via the DefaultEntrypoint without wrapping it in an account contract entrypoint.
+ * The app is responsible for assembling the complete execution payload, including
+ * any entrypoint wrapping (e.g. multicall) if needed.
+ */
+export const NO_FROM = 'NO_FROM' as const;
+
+/**
+ * Type for the NO_FROM constant.
+ */
+export type NoFrom = typeof NO_FROM;
+
 /**
  * Type for wait options in interactions.
  * - NO_WAIT symbol: Don't wait for confirmation, return TxHash immediately
@@ -86,8 +100,8 @@ export type InteractionWaitOptions = NoWait | WaitOpts | undefined;
  * Base options for calling a (constrained) function in a contract, without wait parameter.
  */
 export type SendInteractionOptionsWithoutWait = RequestInteractionOptions & {
-  /** The sender's Aztec address. */
-  from: AztecAddress;
+  /** The sender's Aztec address, or NO_FROM to execute without account contract mediation. */
+  from: AztecAddress | NoFrom;
   /** The fee options for the transaction. */
   fee?: InteractionFeeOptions;
   /**