@aztec-labs/foundation 6.0.0-nightly.20260829

package/dest/config/index.js

@@ -0,0 +1,272 @@
+import { Fq, Fr } from '../curves/bn254/field.js';
+import { createConsoleLogger } from '../log/console.js';
+import { getActiveNetworkName } from './network_name.js';
+import { parseBooleanEnv } from './parse-env.js';
+import { SecretValue } from './secret_value.js';
+export { SecretValue, getActiveNetworkName };
+export { NetworkConfigMapSchema, NetworkConfigSchema } from './network_config.js';
+export function isBooleanConfigValue(obj, key) {
+    return typeof obj[key] === 'boolean';
+}
+/**
+ * Shared utility function to get a value from environment variables with fallback support.
+ * This can be used by both getConfigFromMappings and CLI utilities.
+ *
+ * @param env - The primary environment variable name
+ * @param fallback - Optional array of fallback environment variable names
+ * @param parseFunc - Optional function to parse the environment variable value
+ * @param defaultValue - Optional default value to use if no environment variable is set
+ * @returns The parsed value from environment variables or the default value
+ */ export function getValueFromEnvWithFallback(env, parseFunc, defaultValue, fallback) {
+    let value;
+    // Try primary env var
+    if (env) {
+        value = process.env[env];
+    }
+    // If primary not found, try fallbacks
+    if (value === undefined && fallback && fallback.length > 0) {
+        for (const fallbackEnv of fallback){
+            const fallbackVal = process.env[fallbackEnv];
+            if (fallbackVal !== undefined) {
+                value = fallbackVal;
+                break;
+            }
+        }
+    }
+    // Parse the value if needed. Empty strings are treated as "not set".
+    if (value !== undefined && value !== '') {
+        return parseFunc ? parseFunc(value) : value;
+    }
+    // Return default if no env var found
+    return defaultValue;
+}
+export function getConfigFromMappings(configMappings) {
+    const config = {};
+    for(const key in configMappings){
+        const { env, parseEnv, defaultValue, fallback, deprecatedFallback } = configMappings[key];
+        try {
+            config[key] = getValueFromEnvWithFallback(env, parseEnv, defaultValue, fallback);
+        } catch (e) {
+            throw new Error(`Failed to parse config '${key}' (env: ${env ?? 'none'}): ${e.message}`);
+        }
+        if (deprecatedFallback?.length) {
+            const userLog = createConsoleLogger('[DEPRECATED]');
+            for (const { env: deprecatedEnv, message } of deprecatedFallback){
+                if (process.env[deprecatedEnv]) {
+                    const warningMessage = message ?? `Environment variable ${deprecatedEnv} is deprecated. Please use ${env} instead.`;
+                    userLog(warningMessage, {
+                        deprecatedEnvVar: deprecatedEnv,
+                        newEnvVar: env
+                    });
+                }
+            }
+        }
+    }
+    return config;
+}
+/**
+ * Filters out a service's config mappings to exclude certain keys.
+ * @param configMappings - The service's config mappings
+ * @param keysToFilter - The keys to filter out
+ * @returns The filtered config mappings
+ */ export function omitConfigMappings(configMappings, keysToFilter) {
+    return Object.fromEntries(Object.entries(configMappings).filter(([key])=>!keysToFilter.includes(key)));
+}
+/**
+ * Generates parseEnv and default values for an integer config value.
+ *
+ * The default is used only when the environment variable is unset or empty. A set-but-invalid
+ * value (non-numeric, fractional, or outside the safe-integer range) throws rather than silently
+ * falling back to the default.
+ * @param defaultVal - The default value to use when the environment variable is unset
+ * @returns Object with parseEnv and default values for an integer config value
+ */ export function numberConfigHelper(defaultVal) {
+    return {
+        parseEnv: (val)=>parseSafeInteger(val),
+        defaultValue: defaultVal
+    };
+}
+/**
+ * Generates parseEnv and default values for a floating-point config value.
+ *
+ * The default is used only when the environment variable is unset or empty. A set-but-invalid
+ * value (not a finite number) throws rather than silently falling back to the default.
+ * @param defaultVal - The default value to use when the environment variable is unset
+ * @param validationFn - Optional extra validation applied to the parsed value; should throw on invalid input
+ * @returns Object with parseEnv and default values for a floating-point config value
+ */ export function floatConfigHelper(defaultVal, validationFn) {
+    return {
+        parseEnv: (val)=>{
+            const parsed = parseFiniteNumber(val);
+            validationFn?.(parsed);
+            return parsed;
+        },
+        defaultValue: defaultVal
+    };
+}
+/**
+ * Generates parseEnv and default values for a 0-1 percentage config value.
+ *
+ * The default is used only when the environment variable is unset or empty. A set-but-invalid
+ * value (not a finite number, or outside the 0-1 range) throws rather than silently falling back
+ * to the default.
+ * @param defaultVal - The default value to use when the environment variable is unset
+ */ export function percentageConfigHelper(defaultVal) {
+    return {
+        parseEnv: (val)=>{
+            const parsed = parseFiniteNumber(val);
+            if (parsed < 0 || parsed > 1) {
+                throw new TypeError(`Invalid percentage value: ${parsed} should be between 0 and 1`);
+            }
+            return parsed;
+        },
+        defaultValue: defaultVal
+    };
+}
+export function bigintConfigHelper(defaultVal) {
+    return {
+        parseEnv: (val)=>{
+            // Handle scientific notation (e.g. "1e+23", "2E23") which BigInt() doesn't accept directly.
+            // We parse it losslessly using bigint arithmetic instead of going through float64.
+            if (/[eE]/.test(val)) {
+                const match = val.match(/^(-?\d+(?:\.(\d+))?)[eE]([+-]?\d+)$/);
+                if (!match) {
+                    throw new Error(`Cannot convert '${val}' to a BigInt`);
+                }
+                const digits = match[1].replace('.', '');
+                const decimalPlaces = match[2]?.length ?? 0;
+                const exponent = parseInt(match[3], 10) - decimalPlaces;
+                if (exponent < 0) {
+                    throw new Error(`Cannot convert '${val}' to a BigInt: result is not an integer`);
+                }
+                return BigInt(digits) * 10n ** BigInt(exponent);
+            }
+            return BigInt(val);
+        },
+        defaultValue: defaultVal
+    };
+}
+/**
+ * Generates parseEnv for an optional numerical config value.
+ * Empty strings are already handled by getValueFromEnvWithFallback.
+ */ export function optionalNumberConfigHelper() {
+    return {
+        parseEnv: (val)=>parseSafeInteger(val)
+    };
+}
+export function enumConfigHelper(values, defaultValue) {
+    return {
+        parseEnv: (val)=>{
+            const sanitizedVal = val.trim().toLowerCase();
+            if (values.some((v)=>v.toLowerCase() === sanitizedVal)) {
+                return values.find((v)=>v.toLowerCase() === sanitizedVal);
+            }
+            throw new Error(`Invalid config value '${val}' (must be one of ${values.join(', ')})`);
+        },
+        defaultValue
+    };
+}
+/**
+ * Generates parseEnv and default values for a boolean config value.
+ * @param defaultVal - The default value to use if the environment variable is not set or is invalid
+ * @returns Object with parseEnv and default values for a boolean config value
+ */ export function booleanConfigHelper(defaultVal = false) {
+    const parse = (val)=>typeof val === 'boolean' ? val : parseBooleanEnv(val);
+    return {
+        parseEnv: parse,
+        parseVal: parse,
+        defaultValue: defaultVal,
+        isBoolean: true
+    };
+}
+export function secretValueConfigHelper(parse) {
+    const wrap = (val)=>new SecretValue(parse(val));
+    return {
+        parseEnv: wrap,
+        parseVal: wrap,
+        defaultValue: new SecretValue(parse(undefined))
+    };
+}
+export { parseBooleanEnv } from './parse-env.js';
+export function secretStringConfigHelper(defaultValue) {
+    const parse = (val)=>new SecretValue(val);
+    return {
+        parseEnv: parse,
+        parseVal: parse,
+        defaultValue: defaultValue !== undefined ? new SecretValue(defaultValue) : undefined
+    };
+}
+export function secretFrConfigHelper(defaultValue) {
+    const parse = (val)=>new SecretValue(Fr.fromHexString(val));
+    return {
+        parseEnv: parse,
+        parseVal: parse,
+        defaultValue: defaultValue !== undefined ? new SecretValue(defaultValue) : undefined
+    };
+}
+export function secretFqConfigHelper(defaultValue) {
+    const parse = (val)=>new SecretValue(Fq.fromHexString(val));
+    return {
+        parseEnv: parse,
+        parseVal: parse,
+        defaultValue: defaultValue !== undefined ? new SecretValue(defaultValue) : undefined
+    };
+}
+/**
+ * Parses a string into a safe integer, throwing if the value is numeric but not an integer.
+ *
+ * Unlike `parseInt`, this does not silently truncate decimals: `'0.8'` throws rather than
+ * becoming `0`. A fractional value indicates the caller intended a non-integer where only
+ * integers are supported (use `floatConfigHelper`/`percentageConfigHelper` for those).
+ * @param value - The string value to parse
+ * @returns The parsed integer value
+ */ function parseSafeInteger(value) {
+    const parsedValue = parseFloat(value);
+    if (!Number.isSafeInteger(parsedValue)) {
+        throw new Error(`Invalid integer config value '${value}'; expected a whole number`);
+    }
+    return parsedValue;
+}
+/**
+ * Parses a string into a finite floating-point number, throwing if the value is not a finite number.
+ *
+ * Invalid input (e.g. `'abc'`, or an overflow to `Infinity`) throws rather than being silently
+ * swallowed, so a misconfigured value fails loudly instead of falling back to the config default.
+ * @param value - The string value to parse
+ * @returns The parsed number
+ */ function parseFiniteNumber(value) {
+    const parsedValue = parseFloat(value);
+    if (!Number.isFinite(parsedValue)) {
+        throw new Error(`Invalid number config value '${value}'`);
+    }
+    return parsedValue;
+}
+/**
+ * Picks specific keys from the given configuration mappings.
+ *
+ * @template T - The type of the full configuration object.
+ * @template K - The keys to pick from the configuration object.
+ * @param {ConfigMappingsType<T>} configMappings - The full configuration mappings object.
+ * @param {K[]} keys - The keys to pick from the configuration mappings.
+ * @returns {ConfigMappingsType<Pick<T, K>>} - A new configuration mappings object containing only the specified keys.
+ */ export function pickConfigMappings(configMappings, keys) {
+    return Object.fromEntries(keys.map((key)=>[
+            key,
+            configMappings[key]
+        ]));
+}
+/**
+ * Extracts the default configuration values from the given configuration mappings.
+ *
+ * @template T - The type of the configuration object.
+ * @param {ConfigMappingsType<T>} configMappings - The configuration mappings object.
+ * @returns {T} - The configuration object with default values.
+ */ export function getDefaultConfig(configMappings) {
+    const defaultConfig = {};
+    for(const key in configMappings){
+        if (configMappings[key] && configMappings[key].defaultValue !== undefined) {
+            defaultConfig[key] = configMappings[key].defaultValue;
+        }
+    }
+    return defaultConfig;
+}

package/dest/config/network_config.d.ts

@@ -0,0 +1,28 @@
+import { z } from 'zod';
+export declare const NetworkConfigSchema: z.ZodObject<{
+    bootnodes: z.ZodArray<z.ZodString>;
+    snapshots: z.ZodArray<z.ZodString>;
+    blobFileStoreUrls: z.ZodOptional<z.ZodArray<z.ZodString>>;
+    txCollectionFileStoreUrls: z.ZodOptional<z.ZodArray<z.ZodString>>;
+    registryAddress: z.ZodString;
+    feeAssetHandlerAddress: z.ZodOptional<z.ZodString>;
+    l1ChainId: z.ZodNumber;
+    blockDurationMs: z.ZodOptional<z.ZodNumber>;
+    txPublicSetupAllowListExtend: z.ZodOptional<z.ZodString>;
+    nodeVersion: z.ZodOptional<z.ZodString>;
+}, z.core.$loose>;
+export declare const NetworkConfigMapSchema: z.ZodRecord<z.ZodString, z.ZodObject<{
+    bootnodes: z.ZodArray<z.ZodString>;
+    snapshots: z.ZodArray<z.ZodString>;
+    blobFileStoreUrls: z.ZodOptional<z.ZodArray<z.ZodString>>;
+    txCollectionFileStoreUrls: z.ZodOptional<z.ZodArray<z.ZodString>>;
+    registryAddress: z.ZodString;
+    feeAssetHandlerAddress: z.ZodOptional<z.ZodString>;
+    l1ChainId: z.ZodNumber;
+    blockDurationMs: z.ZodOptional<z.ZodNumber>;
+    txPublicSetupAllowListExtend: z.ZodOptional<z.ZodString>;
+    nodeVersion: z.ZodOptional<z.ZodString>;
+}, z.core.$loose>>;
+export type NetworkConfig = z.infer<typeof NetworkConfigSchema>;
+export type NetworkConfigMap = z.infer<typeof NetworkConfigMapSchema>;
+//# sourceMappingURL=data:application/json;base64,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

package/dest/config/network_config.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"network_config.d.ts","sourceRoot":"","sources":["../../src/config/network_config.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,eAAO,MAAM,mBAAmB;;;;;;;;;;;iBAahB,CAAC;AAEjB,eAAO,MAAM,sBAAsB;;;;;;;;;;;kBAA4C,CAAC;AAEhF,MAAM,MAAM,aAAa,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,mBAAmB,CAAC,CAAC;AAChE,MAAM,MAAM,gBAAgB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,sBAAsB,CAAC,CAAC"}

package/dest/config/network_config.js

@@ -0,0 +1,14 @@
+import { z } from 'zod';
+export const NetworkConfigSchema = z.object({
+    bootnodes: z.array(z.string()),
+    snapshots: z.array(z.string()),
+    blobFileStoreUrls: z.array(z.string()).optional(),
+    txCollectionFileStoreUrls: z.array(z.string()).optional(),
+    registryAddress: z.string(),
+    feeAssetHandlerAddress: z.string().optional(),
+    l1ChainId: z.number(),
+    blockDurationMs: z.number().positive().optional(),
+    txPublicSetupAllowListExtend: z.string().optional(),
+    nodeVersion: z.string().optional()
+}).passthrough(); // Allow additional unknown fields to pass through
+export const NetworkConfigMapSchema = z.record(z.string(), NetworkConfigSchema);

package/dest/config/network_name.d.ts

@@ -0,0 +1,3 @@
+export type NetworkNames = 'local' | 'staging' | 'testnet' | 'mainnet' | 'next-net' | 'devnet' | `v${number}-devnet-${number}`;
+export declare function getActiveNetworkName(name?: string): NetworkNames;
+//# sourceMappingURL=data:application/json;base64,eyJ2ZXJzaW9uIjozLCJmaWxlIjoibmV0d29ya19uYW1lLmQudHMiLCJzb3VyY2VSb290IjoiIiwic291cmNlcyI6WyIuLi8uLi9zcmMvY29uZmlnL25ldHdvcmtfbmFtZS50cyJdLCJuYW1lcyI6W10sIm1hcHBpbmdzIjoiQUFBQSxNQUFNLE1BQU0sWUFBWSxHQUNwQixPQUFPLEdBQ1AsU0FBUyxHQUNULFNBQVMsR0FDVCxTQUFTLEdBQ1QsVUFBVSxHQUNWLFFBQVEsR0FDUixJQUFJLE1BQU0sV0FBVyxNQUFNLEVBQUUsQ0FBQztBQUVsQyx3QkFBZ0Isb0JBQW9CLENBQUMsSUFBSSxDQUFDLEVBQUUsTUFBTSxHQUFHLFlBQVksQ0FrQmhFIn0=

package/dest/config/network_name.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"network_name.d.ts","sourceRoot":"","sources":["../../src/config/network_name.ts"],"names":[],"mappings":"AAAA,MAAM,MAAM,YAAY,GACpB,OAAO,GACP,SAAS,GACT,SAAS,GACT,SAAS,GACT,UAAU,GACV,QAAQ,GACR,IAAI,MAAM,WAAW,MAAM,EAAE,CAAC;AAElC,wBAAgB,oBAAoB,CAAC,IAAI,CAAC,EAAE,MAAM,GAAG,YAAY,CAkBhE"}

package/dest/config/network_name.js

@@ -0,0 +1,19 @@
+export function getActiveNetworkName(name) {
+    const network = name || process.env.NETWORK;
+    if (!network || network === '' || network === 'local') {
+        return 'local';
+    } else if (network === 'staging') {
+        return network;
+    } else if (network === 'testnet' || network === 'alpha-testnet') {
+        return 'testnet';
+    } else if (network === 'mainnet') {
+        return 'mainnet';
+    } else if (network === 'next-net') {
+        return 'next-net';
+    } else if (network === 'devnet') {
+        return 'devnet';
+    } else if (/^v\d+-devnet-\d+$/.test(network)) {
+        return network;
+    }
+    throw new Error(`Unknown network: ${network}`);
+}

package/dest/config/parse-env.d.ts

@@ -0,0 +1,3 @@
+/** Parses an env var as boolean. Returns true only if value is 1, true, or TRUE. */
+export declare function parseBooleanEnv(val: string | undefined): boolean;
+//# sourceMappingURL=data:application/json;base64,eyJ2ZXJzaW9uIjozLCJmaWxlIjoicGFyc2UtZW52LmQudHMiLCJzb3VyY2VSb290IjoiIiwic291cmNlcyI6WyIuLi8uLi9zcmMvY29uZmlnL3BhcnNlLWVudi50cyJdLCJuYW1lcyI6W10sIm1hcHBpbmdzIjoiQUFBQSxvRkFBb0Y7QUFDcEYsd0JBQWdCLGVBQWUsQ0FBQyxHQUFHLEVBQUUsTUFBTSxHQUFHLFNBQVMsR0FBRyxPQUFPLENBRWhFIn0=

package/dest/config/parse-env.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"parse-env.d.ts","sourceRoot":"","sources":["../../src/config/parse-env.ts"],"names":[],"mappings":"AAAA,oFAAoF;AACpF,wBAAgB,eAAe,CAAC,GAAG,EAAE,MAAM,GAAG,SAAS,GAAG,OAAO,CAEhE"}

package/dest/config/parse-env.js

@@ -0,0 +1,7 @@
+/** Parses an env var as boolean. Returns true only if value is 1, true, or TRUE. */ export function parseBooleanEnv(val) {
+    return val !== undefined && [
+        '1',
+        'true',
+        'TRUE'
+    ].includes(val);
+}

package/dest/config/secret_value.d.ts

@@ -0,0 +1,28 @@
+import { inspect } from 'util';
+import type { ZodType } from 'zod';
+/**
+ * A class wrapping a secret value to protect it from accidently being leaked in logs
+ */
+export declare class SecretValue<T> {
+    #private;
+    private readonly redactedValue;
+    constructor(value: T, redactedValue?: string);
+    /**
+     * Returns the wrapped value
+     */
+    getValue(): T;
+    /**
+     * Returns a redacted string representation of the value
+     */
+    toString(): string;
+    /**
+     * Returns a redacted string representation of the value
+     */
+    toJSON(): string;
+    [inspect.custom](): string;
+    /**
+     * Returns a Zod schema
+     */
+    static schema<O>(valueSchema: ZodType<O, any>): ZodType<SecretValue<O>, any>;
+}
+//# sourceMappingURL=data:application/json;base64,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

package/dest/config/secret_value.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"secret_value.d.ts","sourceRoot":"","sources":["../../src/config/secret_value.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,MAAM,MAAM,CAAC;AAC/B,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,KAAK,CAAC;AAEnC;;GAEG;AACH,qBAAa,WAAW,CAAC,CAAC;;IAMtB,OAAO,CAAC,QAAQ,CAAC,aAAa;IAFhC,YACE,KAAK,EAAE,CAAC,EACS,aAAa,SAAe,EAG9C;IAED;;OAEG;IACI,QAAQ,IAAI,CAAC,CAEnB;IAED;;OAEG;IACI,QAAQ,IAAI,MAAM,CAExB;IAED;;OAEG;IACI,MAAM,IAAI,MAAM,CAEtB;IAEM,CAAC,OAAO,CAAC,MAAM,CAAC,WAEtB;IAED;;OAEG;IACH,MAAM,CAAC,MAAM,CAAC,CAAC,EAAE,WAAW,EAAE,OAAO,CAAC,CAAC,EAAE,GAAG,CAAC,GAAG,OAAO,CAAC,WAAW,CAAC,CAAC,CAAC,EAAE,GAAG,CAAC,CAE3E;CACF"}

package/dest/config/secret_value.js

@@ -0,0 +1,36 @@
+var _computedKey;
+import { inspect } from 'util';
+_computedKey = inspect.custom;
+/**
+ * A class wrapping a secret value to protect it from accidently being leaked in logs
+ */ export class SecretValue {
+    redactedValue;
+    /** The secret value. Use a private member field so that it's not visible to the outside */ #value;
+    constructor(value, redactedValue = '[Redacted]'){
+        this.redactedValue = redactedValue;
+        this.#value = value;
+    }
+    /**
+   * Returns the wrapped value
+   */ getValue() {
+        return this.#value;
+    }
+    /**
+   * Returns a redacted string representation of the value
+   */ toString() {
+        return this.redactedValue;
+    }
+    /**
+   * Returns a redacted string representation of the value
+   */ toJSON() {
+        return this.redactedValue;
+    }
+    [_computedKey]() {
+        return this.toString();
+    }
+    /**
+   * Returns a Zod schema
+   */ static schema(valueSchema) {
+        return valueSchema.transform((value)=>new SecretValue(value));
+    }
+}

package/dest/crypto/aes128/index.d.ts

@@ -0,0 +1,33 @@
+import { Buffer } from 'buffer';
+/**
+ * AES-128-CBC encryption/decryption.
+ */
+export declare class Aes128 {
+    /**
+     * Encrypt a buffer using AES-128-CBC.
+     * @param data - Data to encrypt.
+     * @param iv - AES initialization vector.
+     * @param key - Key to encrypt with.
+     * @returns Encrypted data.
+     */
+    encryptBufferCBC(data: Uint8Array, iv: Uint8Array, key: Uint8Array): Promise<Buffer<ArrayBuffer>>;
+    /**
+     * Decrypt a buffer using AES-128-CBC.
+     * We keep the padding in the returned buffer.
+     * @param data - Data to decrypt.
+     * @param iv - AES initialization vector.
+     * @param key - Key to decrypt with.
+     * @returns Decrypted data.
+     */
+    decryptBufferCBCKeepPadding(data: Uint8Array, iv: Uint8Array, key: Uint8Array): Promise<Buffer>;
+    /**
+     * Decrypt a buffer using AES-128-CBC.
+     * @param data - Data to decrypt.
+     * @param iv - AES initialization vector.
+     * @param key - Key to decrypt with.
+     * @returns Decrypted data.
+     * @throws If the decrypted buffer has invalid PKCS#7 padding.
+     */
+    decryptBufferCBC(data: Uint8Array, iv: Uint8Array, key: Uint8Array): Promise<Buffer<ArrayBufferLike>>;
+}
+//# sourceMappingURL=data:application/json;base64,eyJ2ZXJzaW9uIjozLCJmaWxlIjoiaW5kZXguZC50cyIsInNvdXJjZVJvb3QiOiIiLCJzb3VyY2VzIjpbIi4uLy4uLy4uL3NyYy9jcnlwdG8vYWVzMTI4L2luZGV4LnRzIl0sIm5hbWVzIjpbXSwibWFwcGluZ3MiOiJBQUVBLE9BQU8sRUFBRSxNQUFNLEVBQUUsTUFBTSxRQUFRLENBQUM7QUFFaEM7O0dBRUc7QUFDSCxxQkFBYSxNQUFNO0lBQ2pCOzs7Ozs7T0FNRztJQUNVLGdCQUFnQixDQUFDLElBQUksRUFBRSxVQUFVLEVBQUUsRUFBRSxFQUFFLFVBQVUsRUFBRSxHQUFHLEVBQUUsVUFBVSxnQ0FrQjlFO0lBRUQ7Ozs7Ozs7T0FPRztJQUNVLDJCQUEyQixDQUFDLElBQUksRUFBRSxVQUFVLEVBQUUsRUFBRSxFQUFFLFVBQVUsRUFBRSxHQUFHLEVBQUUsVUFBVSxHQUFHLE9BQU8sQ0FBQyxNQUFNLENBQUMsQ0FVM0c7SUFFRDs7Ozs7OztPQU9HO0lBQ1UsZ0JBQWdCLENBQUMsSUFBSSxFQUFFLFVBQVUsRUFBRSxFQUFFLEVBQUUsVUFBVSxFQUFFLEdBQUcsRUFBRSxVQUFVLG9DQVk5RTtDQUNGIn0=

package/dest/crypto/aes128/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/crypto/aes128/index.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,MAAM,EAAE,MAAM,QAAQ,CAAC;AAEhC;;GAEG;AACH,qBAAa,MAAM;IACjB;;;;;;OAMG;IACU,gBAAgB,CAAC,IAAI,EAAE,UAAU,EAAE,EAAE,EAAE,UAAU,EAAE,GAAG,EAAE,UAAU,gCAkB9E;IAED;;;;;;;OAOG;IACU,2BAA2B,CAAC,IAAI,EAAE,UAAU,EAAE,EAAE,EAAE,UAAU,EAAE,GAAG,EAAE,UAAU,GAAG,OAAO,CAAC,MAAM,CAAC,CAU3G;IAED;;;;;;;OAOG;IACU,gBAAgB,CAAC,IAAI,EAAE,UAAU,EAAE,EAAE,EAAE,UAAU,EAAE,GAAG,EAAE,UAAU,oCAY9E;CACF"}

package/dest/crypto/aes128/index.js

@@ -0,0 +1,71 @@
+import { BarretenbergSync } from '@aztec/bb.js';
+import { Buffer } from 'buffer';
+/**
+ * AES-128-CBC encryption/decryption.
+ */ export class Aes128 {
+    /**
+   * Encrypt a buffer using AES-128-CBC.
+   * @param data - Data to encrypt.
+   * @param iv - AES initialization vector.
+   * @param key - Key to encrypt with.
+   * @returns Encrypted data.
+   */ async encryptBufferCBC(data, iv, key) {
+        const rawLength = data.length;
+        const numPaddingBytes = 16 - rawLength % 16;
+        const paddingBuffer = Buffer.alloc(numPaddingBytes);
+        // input num bytes needs to be a multiple of 16 and at least 1 byte
+        // node uses PKCS#7-Padding scheme, where padding byte value = the number of padding bytes
+        paddingBuffer.fill(numPaddingBytes);
+        const input = Buffer.concat([
+            data,
+            paddingBuffer
+        ]);
+        await BarretenbergSync.initSingleton();
+        const api = BarretenbergSync.getSingleton();
+        const response = api.aesEncrypt({
+            plaintext: input,
+            iv,
+            key,
+            length: input.length
+        });
+        return Buffer.from(response.ciphertext);
+    }
+    /**
+   * Decrypt a buffer using AES-128-CBC.
+   * We keep the padding in the returned buffer.
+   * @param data - Data to decrypt.
+   * @param iv - AES initialization vector.
+   * @param key - Key to decrypt with.
+   * @returns Decrypted data.
+   */ async decryptBufferCBCKeepPadding(data, iv, key) {
+        await BarretenbergSync.initSingleton();
+        const api = BarretenbergSync.getSingleton();
+        const response = api.aesDecrypt({
+            ciphertext: data,
+            iv,
+            key,
+            length: data.length
+        });
+        return Buffer.from(response.plaintext);
+    }
+    /**
+   * Decrypt a buffer using AES-128-CBC.
+   * @param data - Data to decrypt.
+   * @param iv - AES initialization vector.
+   * @param key - Key to decrypt with.
+   * @returns Decrypted data.
+   * @throws If the decrypted buffer has invalid PKCS#7 padding.
+   */ async decryptBufferCBC(data, iv, key) {
+        const paddedBuffer = await this.decryptBufferCBCKeepPadding(data, iv, key);
+        const paddingLen = paddedBuffer[paddedBuffer.length - 1];
+        if (paddingLen === 0 || paddingLen > 16) {
+            throw new Error(`Invalid PKCS#7 padding length: ${paddingLen}`);
+        }
+        for(let i = paddedBuffer.length - paddingLen; i < paddedBuffer.length; i++){
+            if (paddedBuffer[i] !== paddingLen) {
+                throw new Error('Invalid PKCS#7 padding');
+            }
+        }
+        return paddedBuffer.subarray(0, paddedBuffer.length - paddingLen);
+    }
+}