lez-programs/docs/LP-0013-README.md

LP-0013: Token Program Mint Authority

This document describes the mint authority model added to the LEZ Token program as part of LP-0013.

Overview

The LEZ Token program now supports a mint authority model for fungible tokens:

• Mint authority set at initialization — create a token with a designated minter
• Minting by the authority — the authority can mint additional tokens at any time
• Authority rotation — transfer minting rights to a new key
• Authority revocation — permanently fix the supply by setting authority to None

The lez-authority crate provides a reusable, program-agnostic authority library (RFP-001).

Architecture

Authority Model

mint_authority: Option<[u8; 32]> is added to TokenDefinition::Fungible:

• Some(key) — the key holder can mint and rotate/revoke
• None — supply is permanently fixed, minting rejected

New Instructions

Instruction	Description
NewFungibleDefinitionWithAuthority	Create token with mint authority
Mint (updated)	Now authority-gated — rejects if authority is None
SetAuthority	Rotate or revoke mint authority

Atomicity

SetAuthority only mutates state after all checks pass. A failed authorization check returns an error before any write occurs, leaving the prior authority intact.

Error Codes

Condition	Message
Mint with revoked authority	Mint authority has been revoked; this token has a fixed supply
SetAuthority without authorization	Definition account authorization is missing
SetAuthority on already-revoked	Mint authority already revoked; supply is permanently fixed

Crate Structure

• lez-authority/ — Agnostic AuthoritySlot library (RFP-001)
• programs/token/core/ — TokenDefinition with mint_authority field
• programs/token/src/mint.rs — Authority-gated minting
• programs/token/src/set_authority.rs — Rotation and revocation handler
• programs/token/src/new_definition.rs — NewFungibleDefinitionWithAuthority handler
• program_methods/guest/src/bin/token.rs — Guest binary dispatch
• wallet/src/program_facades/token.rs — SDK facade methods

Deployment Steps

Prerequisites

git clone https://github.com/bristinWild/logos-execution-zone
cd logos-execution-zone
cargo install logos-scaffold
lgs new my-project && cd my-project
lgs setup

Start local sequencer

lgs localnet start
lgs wallet topup

Create accounts

lgs wallet -- account new public   # definition account
lgs wallet -- account new public   # supply account

Create token

lgs wallet -- token new \
  --definition-account-id <definition_id> \
  --supply-account-id <supply_id> \
  --name "MyCoin" \
  --total-supply 1000000

Mint additional tokens

lgs wallet -- token mint \
  --definition <definition_id> \
  --holder <holder_id> \
  --amount 500000

Verify on-chain

lgs wallet -- account get --account-id <definition_id>

Running Tests

# Unit tests
cargo test -p lez-authority --lib
cargo test -p token_program --lib

# All LP-0013 tests
RISC0_DEV_MODE=1 cargo test -p lez-authority -p token_program --lib

Example Scripts

# Fixed supply token
bash scripts/examples/fixed_supply_token.sh

# Variable supply token with authority rotation
bash scripts/examples/variable_supply_token.sh

End-to-End Demo

RISC0_DEV_MODE=0 bash scripts/demo-full-flow.sh

Compute Unit Costs

Operation	CU Cost
NewFungibleDefinitionWithAuthority	TBD
Mint (with authority check)	TBD
SetAuthority (rotate)	TBD
SetAuthority (revoke)	TBD

References

• lez-authority crate
• SetAuthority handler
• Mint handler
• Solana SPL Token - Set Authority

Deployment

Program ID (LEZ localnet/testnet)

efdf86b1127c57c4653903e78bd2174b539fd688054331618c48f98c8fc057bd

Deploy

lgs deploy --program-path target/riscv-guest/token-methods/token-guest/riscv32im-risc0-zkvm-elf/release/token.bin

Compute Unit (CU) Costs

Measured on LEZ localnet with RISC0_DEV_MODE=1 (execution only, no proof):

Operation	Execution Time	Notes
NewFungibleDefinitionWithAuthority	~11ms	Creates token with mint authority
Mint (with authority)	~10ms	Authority-gated mint
SetAuthority (rotate)	~8ms	Rotates to new key
SetAuthority (revoke)	~8ms	Permanently revokes, sets None

Note: With RISC0_DEV_MODE=0, full ZK proof generation takes 3-10 minutes per transaction on Apple M-series hardware. LEZ's per-transaction compute budget may change during testnet.

CLI Usage

Create token with mint authority

spel --idl token-idl.json --program token.bin \
  -- NewFungibleDefinitionWithAuthority \
  --definition-account <DEF_ID> \
  --holding-account <SUPPLY_ID> \
  --name "MyToken" \
  --initial-supply 1000000 \
  --mint-authority <AUTHORITY_KEY_HEX>

Mint tokens

spel --idl token-idl.json --program token.bin \
  -- Mint \
  --definition-account <DEF_ID> \
  --holding-account <HOLDER_ID> \
  --amount-to-mint 500000

Rotate authority

spel --idl token-idl.json --program token.bin \
  -- SetAuthority \
  --definition-account <DEF_ID> \
  --new-authority <NEW_KEY_HEX>

Revoke authority (fix supply permanently)

spel --idl token-idl.json --program token.bin \
  -- SetAuthority \
  --definition-account <DEF_ID> \
  --new-authority none

Module/SDK

token_core provides the reusable types and instructions for building Logos modules:

[dependencies]
token_core = { path = "programs/token/core" }

Key types:

• TokenDefinition::Fungible { mint_authority, .. } — token definition with authority
• Instruction::NewFungibleDefinitionWithAuthority — create with authority
• Instruction::SetAuthority — rotate or revoke