@aztec-labs/stdlib 6.0.0-nightly.20260829

package/dest/logs/public_log.js

@@ -0,0 +1,186 @@
+var _computedKey;
+import { FLAT_PUBLIC_LOGS_PAYLOAD_LENGTH, PUBLIC_LOG_HEADER_LENGTH } from '@aztec-labs/constants';
+import { Fr } from '@aztec-labs/foundation/curves/bn254';
+import { schemas } from '@aztec-labs/foundation/schemas';
+import { BufferReader, FieldReader, serializeToBuffer } from '@aztec-labs/foundation/serialize';
+import { inspect } from 'util';
+import { z } from 'zod';
+import { AztecAddress } from '../aztec-address/index.js';
+function totalSizeInFields(logs) {
+    return logs.reduce((acc, log)=>acc + log.sizeInFields(), 0);
+}
+// This class represents logs in the same format as noir does, with a bounded maximum length.
+export class FlatPublicLogs {
+    length;
+    payload;
+    // We don't use tuple here because FLAT_PUBLIC_LOGS_PAYLOAD_LENGTH is too large
+    constructor(length, payload){
+        this.length = length;
+        this.payload = payload;
+        if (payload.length !== FLAT_PUBLIC_LOGS_PAYLOAD_LENGTH) {
+            throw new Error('Invalid payload given to FlatPublicLogs');
+        }
+        if (length > payload.length) {
+            throw new Error('Invalid length given to FlatPublicLogs');
+        }
+    }
+    static fromUnpaddedPayload(payload) {
+        const length = payload.length;
+        return new FlatPublicLogs(length, [
+            ...payload,
+            ...Array(FLAT_PUBLIC_LOGS_PAYLOAD_LENGTH - length).fill(Fr.ZERO)
+        ]);
+    }
+    // In blobs, the actual nonempty length of the logs is encoded with the prefix, and then we have the non-padded payload.
+    static fromBlobFields(length, fields) {
+        const reader = FieldReader.asReader(fields);
+        const payload = reader.readFieldArray(length);
+        return this.fromUnpaddedPayload(payload);
+    }
+    toBlobFields() {
+        return this.payload.slice(0, this.length);
+    }
+    static fromLogs(logs) {
+        return this.fromUnpaddedPayload(logs.flatMap((log)=>log.toFields()));
+    }
+    toLogs() {
+        const reader = FieldReader.asReader(this.payload);
+        const logs = [];
+        while(totalSizeInFields(logs) < this.length){
+            logs.push(PublicLog.fromFields(reader));
+        }
+        if (totalSizeInFields(logs) !== this.length) {
+            throw new Error('Wrong length in FlatPublicLogs');
+        }
+        return logs;
+    }
+    static get schema() {
+        return z.object({
+            length: z.number(),
+            payload: z.array(schemas.Fr).min(FLAT_PUBLIC_LOGS_PAYLOAD_LENGTH).max(FLAT_PUBLIC_LOGS_PAYLOAD_LENGTH)
+        }).transform(({ length, payload })=>new FlatPublicLogs(length, payload));
+    }
+    toBuffer() {
+        return serializeToBuffer(this.length, this.payload.slice(0, this.length));
+    }
+    static fromBuffer(buffer) {
+        const reader = BufferReader.asReader(buffer);
+        const length = reader.readNumber();
+        return this.fromUnpaddedPayload(reader.readArray(length, Fr));
+    }
+    // ToFields and fromFields expect the noir style representation, with constant length payload.
+    toFields() {
+        return [
+            new Fr(this.length),
+            ...this.payload
+        ];
+    }
+    static fromFields(fields) {
+        const reader = FieldReader.asReader(fields);
+        // We need to do this because field reader returns tuples, which break the type system on these sizes.
+        const length = reader.readU32();
+        const payload = [];
+        for(let i = 0; i < FLAT_PUBLIC_LOGS_PAYLOAD_LENGTH; ++i){
+            payload.push(reader.readField());
+        }
+        return new FlatPublicLogs(length, payload);
+    }
+    static empty() {
+        return new FlatPublicLogs(0, Array(FLAT_PUBLIC_LOGS_PAYLOAD_LENGTH).fill(Fr.ZERO));
+    }
+    /**
+   * Creates a FlatPublicLogs instance from a plain object without Zod validation.
+   * This method is optimized for performance and skips validation, making it suitable
+   * for deserializing trusted data (e.g., from C++ via MessagePack).
+   * @param obj - Plain object containing FlatPublicLogs fields
+   * @returns A FlatPublicLogs instance
+   */ static fromPlainObject(obj) {
+        return new FlatPublicLogs(obj.length, obj.payload.map((p)=>Fr.fromPlainObject(p)));
+    }
+    isEmpty() {
+        return this.length === 0;
+    }
+}
+_computedKey = inspect.custom;
+export class PublicLog {
+    contractAddress;
+    fields;
+    constructor(contractAddress, fields){
+        this.contractAddress = contractAddress;
+        this.fields = fields;
+    }
+    static from(fields) {
+        return new PublicLog(...PublicLog.getFields(fields));
+    }
+    static getFields(fields) {
+        return [
+            fields.contractAddress,
+            fields.fields
+        ];
+    }
+    toFields() {
+        return [
+            new Fr(this.fields.length),
+            this.contractAddress.toField(),
+            ...this.fields
+        ];
+    }
+    static fromFields(fields) {
+        const reader = FieldReader.asReader(fields);
+        const fieldsLength = reader.readU32();
+        return new PublicLog(reader.readObject(AztecAddress), reader.readFieldArray(fieldsLength));
+    }
+    sizeInFields() {
+        return this.fields.length + PUBLIC_LOG_HEADER_LENGTH;
+    }
+    /** Returns the serialized log (field as in noir field and not a struct field). */ getEmittedFields() {
+        // We slice from 0 to return a shallow copy.
+        return this.fields.slice(0);
+    }
+    getEmittedFieldsWithoutTag() {
+        return this.fields.slice(1);
+    }
+    isEmpty() {
+        return this.contractAddress.isZero() && this.fields.length === 0;
+    }
+    static empty() {
+        return new PublicLog(AztecAddress.ZERO, []);
+    }
+    toBuffer() {
+        return serializeToBuffer(this.fields.length, this.contractAddress, this.fields);
+    }
+    static fromBuffer(buffer) {
+        const reader = BufferReader.asReader(buffer);
+        const fieldsLength = reader.readNumber();
+        return new PublicLog(reader.readObject(AztecAddress), reader.readArray(fieldsLength, Fr));
+    }
+    static fromPlainObject(obj) {
+        return new PublicLog(AztecAddress.fromPlainObject(obj.contractAddress), obj.fields.map((f)=>Fr.fromPlainObject(f)));
+    }
+    static async random() {
+        return new PublicLog(await AztecAddress.random(), Array.from({
+            length: 10
+        }, ()=>Fr.random()));
+    }
+    equals(other) {
+        return this.fields.length === other.fields.length && this.contractAddress.equals(other.contractAddress) && this.fields.every((field, i)=>field.equals(other.fields[i]));
+    }
+    toHumanReadable() {
+        return `PublicLog: (contractAddress: ${this.contractAddress} fields: ${this.fields})`;
+    }
+    static get schema() {
+        return z.object({
+            contractAddress: AztecAddress.schema,
+            fields: z.array(schemas.Fr)
+        }).transform(({ contractAddress, fields })=>PublicLog.from({
+                contractAddress,
+                fields
+            }));
+    }
+    [_computedKey]() {
+        return `PublicLog {
+      contractAddress: ${inspect(this.contractAddress)},
+      fields: [${this.fields.map((x)=>inspect(x)).join(', ')}],
+    }`;
+    }
+}

package/dest/logs/query_all_logs_by_tags.d.ts

@@ -0,0 +1,24 @@
+import type { LogResult } from './log_result.js';
+import type { PrivateLogsQuery, PublicLogsQuery } from './logs_query.js';
+/** Minimal node surface needed by {@link queryAllPrivateLogsByTags}. */
+export type PrivateLogsByTagsFetcher = {
+    getPrivateLogsByTags(query: PrivateLogsQuery): Promise<LogResult[][]>;
+};
+/** Minimal node surface needed by {@link queryAllPublicLogsByTags}. */
+export type PublicLogsByTagsFetcher = {
+    getPublicLogsByTags(query: PublicLogsQuery): Promise<LogResult[][]>;
+};
+/**
+ * Drives the per-tag `afterLog` cursor loop for {@link PrivateLogsByTagsFetcher.getPrivateLogsByTags}.
+ *
+ * Each round re-queries only the tags whose previous page was full (`length === effective limit`), passing
+ * the cursor of the last seen log. Tags drop out as soon as they return a short page. Results are stitched
+ * back into one inner array per input tag, preserving the original input order.
+ *
+ * Honors {@link PrivateLogsQuery.limitPerTag} when set (caller is responsible for keeping it `<=`
+ * {@link MAX_LOGS_PER_TAG}; the query schema enforces this on the RPC boundary).
+ */
+export declare function queryAllPrivateLogsByTags(node: PrivateLogsByTagsFetcher, query: PrivateLogsQuery): Promise<LogResult[][]>;
+/** {@inheritDoc queryAllPrivateLogsByTags} */
+export declare function queryAllPublicLogsByTags(node: PublicLogsByTagsFetcher, query: PublicLogsQuery): Promise<LogResult[][]>;
+//# sourceMappingURL=data:application/json;base64,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

package/dest/logs/query_all_logs_by_tags.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"query_all_logs_by_tags.d.ts","sourceRoot":"","sources":["../../src/logs/query_all_logs_by_tags.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,iBAAiB,CAAC;AACjD,OAAO,KAAK,EAAE,gBAAgB,EAAE,eAAe,EAAY,MAAM,iBAAiB,CAAC;AAInF,wEAAwE;AACxE,MAAM,MAAM,wBAAwB,GAAG;IACrC,oBAAoB,CAAC,KAAK,EAAE,gBAAgB,GAAG,OAAO,CAAC,SAAS,EAAE,EAAE,CAAC,CAAC;CACvE,CAAC;AAEF,uEAAuE;AACvE,MAAM,MAAM,uBAAuB,GAAG;IACpC,mBAAmB,CAAC,KAAK,EAAE,eAAe,GAAG,OAAO,CAAC,SAAS,EAAE,EAAE,CAAC,CAAC;CACrE,CAAC;AAEF;;;;;;;;;GASG;AACH,wBAAgB,yBAAyB,CACvC,IAAI,EAAE,wBAAwB,EAC9B,KAAK,EAAE,gBAAgB,GACtB,OAAO,CAAC,SAAS,EAAE,EAAE,CAAC,CAMxB;AAED,8CAA8C;AAC9C,wBAAgB,wBAAwB,CACtC,IAAI,EAAE,uBAAuB,EAC7B,KAAK,EAAE,eAAe,GACrB,OAAO,CAAC,SAAS,EAAE,EAAE,CAAC,CAMxB"}

package/dest/logs/query_all_logs_by_tags.js

@@ -0,0 +1,64 @@
+import { MAX_LOGS_PER_TAG } from '../interfaces/api_limit.js';
+import { LogCursor } from './log_cursor.js';
+/**
+ * Drives the per-tag `afterLog` cursor loop for {@link PrivateLogsByTagsFetcher.getPrivateLogsByTags}.
+ *
+ * Each round re-queries only the tags whose previous page was full (`length === effective limit`), passing
+ * the cursor of the last seen log. Tags drop out as soon as they return a short page. Results are stitched
+ * back into one inner array per input tag, preserving the original input order.
+ *
+ * Honors {@link PrivateLogsQuery.limitPerTag} when set (caller is responsible for keeping it `<=`
+ * {@link MAX_LOGS_PER_TAG}; the query schema enforces this on the RPC boundary).
+ */ export function queryAllPrivateLogsByTags(node, query) {
+    return queryAllByTags(query.tags, (tagQueries)=>node.getPrivateLogsByTags({
+            ...query,
+            tags: tagQueries
+        }), query.limitPerTag);
+}
+/** {@inheritDoc queryAllPrivateLogsByTags} */ export function queryAllPublicLogsByTags(node, query) {
+    return queryAllByTags(query.tags, (tagQueries)=>node.getPublicLogsByTags({
+            ...query,
+            tags: tagQueries
+        }), query.limitPerTag);
+}
+/**
+ * Generic per-tag pagination loop, abstracted over the query shape (private vs public). Caller supplies
+ * a `fetchPage` that runs one round against the node with the still-active subset of tag queries.
+ *
+ * @param tags - Input tag queries in original order. Returned outer array has the same length and order.
+ * @param fetchPage - Per-round fetch hook; receives the active subset and returns one page per active tag.
+ * @param limitPerTag - Effective page cap used to detect "full page" → keep paginating; defaults to
+ *   {@link MAX_LOGS_PER_TAG} (the server-side cap when the query doesn't override).
+ */ async function queryAllByTags(tags, fetchPage, limitPerTag) {
+    const effectiveLimit = limitPerTag ?? MAX_LOGS_PER_TAG;
+    const allResultsPerTag = tags.map(()=>[]);
+    let activeIndexes = tags.map((_, i)=>i);
+    let nextQueries = tags.slice();
+    while(activeIndexes.length > 0){
+        const pageResults = await fetchPage(nextQueries);
+        const stillActive = [];
+        const followups = [];
+        for(let i = 0; i < activeIndexes.length; i++){
+            const originalIdx = activeIndexes[i];
+            const pageForTag = pageResults[i];
+            allResultsPerTag[originalIdx].push(...pageForTag);
+            if (pageForTag.length === effectiveLimit) {
+                const lastLog = pageForTag[pageForTag.length - 1];
+                stillActive.push(originalIdx);
+                followups.push({
+                    tag: tagOf(tags[originalIdx]),
+                    afterLog: LogCursor.fromLog(lastLog)
+                });
+            }
+        }
+        activeIndexes = stillActive;
+        nextQueries = followups;
+    }
+    return allResultsPerTag;
+}
+/** Unwraps a `TagQuery` to its underlying `Tag` / `SiloedTag` regardless of the bare-vs-object form. */ function tagOf(entry) {
+    if (typeof entry === 'object' && entry !== null && 'tag' in entry) {
+        return entry.tag;
+    }
+    return entry;
+}

package/dest/logs/shared_secret_derivation.d.ts

@@ -0,0 +1,41 @@
+import type { Fr } from '@aztec-labs/foundation/curves/bn254';
+import { GrumpkinScalar, type Point } from '@aztec-labs/foundation/curves/grumpkin';
+import type { AztecAddress } from '../aztec-address/index.js';
+import type { PublicKey } from '../keys/public_key.js';
+/**
+ * Derives the raw ECDH shared secret point `S = secretKey * publicKey`.
+ *
+ * @throws If the publicKey is zero.
+ */
+export declare function deriveEcdhSharedSecretPoint(secretKey: GrumpkinScalar, publicKey: PublicKey): Promise<Point>;
+/**
+ * Derives an app-siloed ECDH shared secret from keys: ECDHs `S = secretKey * publicKey` via
+ * {@link deriveEcdhSharedSecretPoint}, then app-silos it via {@link appSiloEcdhSharedSecretPoint}.
+ *
+ * @param secretKey - The secret key used to derive shared secret.
+ * @param publicKey - The public key used to derive shared secret.
+ * @param contractAddress - The address of the calling contract, used for app-siloing.
+ * @returns The app-siloed shared secret as a Field.
+ * @throws If the publicKey is zero.
+ */
+export declare function appSiloEcdhSharedSecret(secretKey: GrumpkinScalar, publicKey: PublicKey, contractAddress: AztecAddress): Promise<Fr>;
+/**
+ * App-silos a shared secret point: `s_app = h(DOM_SEP__APP_SILOED_ECDH_SHARED_SECRET, S.x, S.y, app)`.
+ *
+ * Mirrors `compute_app_siloed_shared_secret` in aztec-nr.
+ *
+ * @param point - The raw shared secret point `S`.
+ * @param app - The contract address to silo to.
+ */
+export declare function appSiloEcdhSharedSecretPoint(point: Point, app: AztecAddress): Promise<Fr>;
+/**
+ * Protects a handshake's shared secret from being forged by the recipient: `S' = hash(ephPk, recipientPoint) * S`.
+ *
+ * Mirrors aztec-nr's `protect_from_forgery` and must stay byte-compatible with it.
+ *
+ * @param secret - The raw shared secret `S` to protect.
+ * @param ephPk - The handshake's ephemeral public key.
+ * @param recipientPoint - The recipient's address point.
+ */
+export declare function protectFromForgery(secret: Point, ephPk: Point, recipientPoint: Point): Promise<Point>;
+//# sourceMappingURL=data:application/json;base64,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

package/dest/logs/shared_secret_derivation.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"shared_secret_derivation.d.ts","sourceRoot":"","sources":["../../src/logs/shared_secret_derivation.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,EAAE,EAAE,MAAM,qCAAqC,CAAC;AAC9D,OAAO,EAAE,cAAc,EAAE,KAAK,KAAK,EAAE,MAAM,wCAAwC,CAAC;AAEpF,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,2BAA2B,CAAC;AAC9D,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,uBAAuB,CAAC;AAEvD;;;;GAIG;AACH,wBAAgB,2BAA2B,CAAC,SAAS,EAAE,cAAc,EAAE,SAAS,EAAE,SAAS,GAAG,OAAO,CAAC,KAAK,CAAC,CAO3G;AAED;;;;;;;;;GASG;AACH,wBAAsB,uBAAuB,CAC3C,SAAS,EAAE,cAAc,EACzB,SAAS,EAAE,SAAS,EACpB,eAAe,EAAE,YAAY,GAC5B,OAAO,CAAC,EAAE,CAAC,CAGb;AAED;;;;;;;GAOG;AACH,wBAAgB,4BAA4B,CAAC,KAAK,EAAE,KAAK,EAAE,GAAG,EAAE,YAAY,GAAG,OAAO,CAAC,EAAE,CAAC,CAEzF;AAED;;;;;;;;GAQG;AACH,wBAAsB,kBAAkB,CAAC,MAAM,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,cAAc,EAAE,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC,CAM3G"}

package/dest/logs/shared_secret_derivation.js

@@ -0,0 +1,58 @@
+import { DomainSeparator } from '@aztec-labs/constants';
+import { Grumpkin } from '@aztec-labs/foundation/crypto/grumpkin';
+import { poseidon2HashWithSeparator } from '@aztec-labs/foundation/crypto/poseidon';
+import { GrumpkinScalar } from '@aztec-labs/foundation/curves/grumpkin';
+/**
+ * Derives the raw ECDH shared secret point `S = secretKey * publicKey`.
+ *
+ * @throws If the publicKey is zero.
+ */ export function deriveEcdhSharedSecretPoint(secretKey, publicKey) {
+    if (publicKey.isZero()) {
+        throw new Error(`Attempting to derive a shared secret with a zero public key. You have probably passed a zero public key in your Noir code somewhere thinking that the note won't be broadcast... but it was.`);
+    }
+    return Grumpkin.mul(publicKey, secretKey);
+}
+/**
+ * Derives an app-siloed ECDH shared secret from keys: ECDHs `S = secretKey * publicKey` via
+ * {@link deriveEcdhSharedSecretPoint}, then app-silos it via {@link appSiloEcdhSharedSecretPoint}.
+ *
+ * @param secretKey - The secret key used to derive shared secret.
+ * @param publicKey - The public key used to derive shared secret.
+ * @param contractAddress - The address of the calling contract, used for app-siloing.
+ * @returns The app-siloed shared secret as a Field.
+ * @throws If the publicKey is zero.
+ */ export async function appSiloEcdhSharedSecret(secretKey, publicKey, contractAddress) {
+    const rawSharedSecret = await deriveEcdhSharedSecretPoint(secretKey, publicKey);
+    return appSiloEcdhSharedSecretPoint(rawSharedSecret, contractAddress);
+}
+/**
+ * App-silos a shared secret point: `s_app = h(DOM_SEP__APP_SILOED_ECDH_SHARED_SECRET, S.x, S.y, app)`.
+ *
+ * Mirrors `compute_app_siloed_shared_secret` in aztec-nr.
+ *
+ * @param point - The raw shared secret point `S`.
+ * @param app - The contract address to silo to.
+ */ export function appSiloEcdhSharedSecretPoint(point, app) {
+    return poseidon2HashWithSeparator([
+        point.x,
+        point.y,
+        app
+    ], DomainSeparator.APP_SILOED_ECDH_SHARED_SECRET);
+}
+/**
+ * Protects a handshake's shared secret from being forged by the recipient: `S' = hash(ephPk, recipientPoint) * S`.
+ *
+ * Mirrors aztec-nr's `protect_from_forgery` and must stay byte-compatible with it.
+ *
+ * @param secret - The raw shared secret `S` to protect.
+ * @param ephPk - The handshake's ephemeral public key.
+ * @param recipientPoint - The recipient's address point.
+ */ export async function protectFromForgery(secret, ephPk, recipientPoint) {
+    const scalar = await poseidon2HashWithSeparator([
+        ephPk.x,
+        ephPk.y,
+        recipientPoint.x,
+        recipientPoint.y
+    ], DomainSeparator.HANDSHAKE_FORGERY_PROTECTION);
+    return Grumpkin.mul(secret, new GrumpkinScalar(scalar.toBigInt()));
+}

package/dest/logs/siloed_tag.d.ts

@@ -0,0 +1,26 @@
+import { Fr } from '@aztec-labs/foundation/curves/bn254';
+import type { ZodFor } from '@aztec-labs/foundation/schemas';
+import type { AztecAddress } from '../aztec-address/index.js';
+import type { PreTag } from './pre_tag.js';
+import { Tag } from './tag.js';
+/**
+ * Represents a tag used in private log as it "appears on the chain" - that is the tag is siloed with a contract
+ * address that emitted the log.
+ */
+export declare class SiloedTag {
+    readonly value: Fr;
+    /** Branding for nominal typing. */
+    private readonly _branding;
+    constructor(value: Fr);
+    static compute(preTag: PreTag): Promise<SiloedTag>;
+    /**
+     * Unlike `compute`, this expects a tag whose value is already domain-separated.
+     */
+    static computeFromTagAndApp(tag: Tag, app: AztecAddress): Promise<SiloedTag>;
+    toString(): string;
+    toJSON(): string;
+    equals(other: SiloedTag): boolean;
+    static random(): SiloedTag;
+    static get schema(): ZodFor<SiloedTag>;
+}
+//# sourceMappingURL=data:application/json;base64,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

package/dest/logs/siloed_tag.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"siloed_tag.d.ts","sourceRoot":"","sources":["../../src/logs/siloed_tag.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,EAAE,EAAE,MAAM,qCAAqC,CAAC;AACzD,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,gCAAgC,CAAC;AAE7D,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,2BAA2B,CAAC;AAI9D,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,cAAc,CAAC;AAC3C,OAAO,EAAE,GAAG,EAAE,MAAM,UAAU,CAAC;AAE/B;;;GAGG;AACH,qBAAa,SAAS;aAIQ,KAAK,EAAE,EAAE;IAHrC,mCAAmC;IACnC,iBAAyB,SAAS,CAAc;IAEhD,YAA4B,KAAK,EAAE,EAAE,EAAI;IAEzC,OAAa,OAAO,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,SAAS,CAAC,CAQvD;IAED;;OAEG;IACH,OAAa,oBAAoB,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,YAAY,GAAG,OAAO,CAAC,SAAS,CAAC,CAGjF;IAED,QAAQ,IAAI,MAAM,CAEjB;IAED,MAAM,IAAI,MAAM,CAEf;IAED,MAAM,CAAC,KAAK,EAAE,SAAS,GAAG,OAAO,CAEhC;IAED,MAAM,CAAC,MAAM,IAAI,SAAS,CAEzB;IAED,MAAM,KAAK,MAAM,IAAI,MAAM,CAAC,SAAS,CAAC,CAErC;CACF"}

package/dest/logs/siloed_tag.js

@@ -0,0 +1,42 @@
+import { DomainSeparator } from '@aztec-labs/constants';
+import { Fr } from '@aztec-labs/foundation/curves/bn254';
+import { computeLogTag, computeSiloedPrivateLogFirstField } from '../hash/hash.js';
+import { schemas } from '../schemas/schemas.js';
+import { AppTaggingSecretKind } from './app_tagging_secret_kind.js';
+import { Tag } from './tag.js';
+/**
+ * Represents a tag used in private log as it "appears on the chain" - that is the tag is siloed with a contract
+ * address that emitted the log.
+ */ export class SiloedTag {
+    value;
+    constructor(value){
+        this.value = value;
+    }
+    static async compute(preTag) {
+        const tag = await Tag.compute(preTag);
+        const domainSeparator = preTag.extendedSecret.kind === AppTaggingSecretKind.CONSTRAINED ? DomainSeparator.CONSTRAINED_MSG_LOG_TAG : DomainSeparator.UNCONSTRAINED_MSG_LOG_TAG;
+        const logTag = await computeLogTag(tag.value, domainSeparator);
+        return SiloedTag.computeFromTagAndApp(new Tag(logTag), preTag.extendedSecret.app);
+    }
+    /**
+   * Unlike `compute`, this expects a tag whose value is already domain-separated.
+   */ static async computeFromTagAndApp(tag, app) {
+        const siloedTag = await computeSiloedPrivateLogFirstField(app, tag.value);
+        return new SiloedTag(siloedTag);
+    }
+    toString() {
+        return this.value.toString();
+    }
+    toJSON() {
+        return this.value.toString();
+    }
+    equals(other) {
+        return this.value.equals(other.value);
+    }
+    static random() {
+        return new SiloedTag(Fr.random());
+    }
+    static get schema() {
+        return schemas.Fr.transform((fr)=>new SiloedTag(fr));
+    }
+}

package/dest/logs/tag.d.ts

@@ -0,0 +1,20 @@
+import { Fr } from '@aztec-labs/foundation/curves/bn254';
+import type { ZodFor } from '@aztec-labs/foundation/schemas';
+import type { PreTag } from './pre_tag.js';
+/**
+ * Represents a tag of a private log. This is not the tag that "appears" on the chain as this tag is first siloed
+ * with a contract address by kernels before being included in the final log.
+ */
+export declare class Tag {
+    readonly value: Fr;
+    /** Branding for nominal typing. */
+    private readonly _branding;
+    constructor(value: Fr);
+    static compute(preTag: PreTag): Promise<Tag>;
+    toString(): string;
+    toJSON(): string;
+    equals(other: Tag): boolean;
+    static random(): Tag;
+    static get schema(): ZodFor<Tag>;
+}
+//# sourceMappingURL=data:application/json;base64,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

package/dest/logs/tag.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"tag.d.ts","sourceRoot":"","sources":["../../src/logs/tag.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,EAAE,EAAE,MAAM,qCAAqC,CAAC;AACzD,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,gCAAgC,CAAC;AAG7D,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,cAAc,CAAC;AAE3C;;;GAGG;AACH,qBAAa,GAAG;aAIc,KAAK,EAAE,EAAE;IAHrC,mCAAmC;IACnC,iBAAyB,SAAS,CAAQ;IAE1C,YAA4B,KAAK,EAAE,EAAE,EAAI;IAEzC,OAAa,OAAO,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC,CAGjD;IAED,QAAQ,IAAI,MAAM,CAEjB;IAED,MAAM,IAAI,MAAM,CAEf;IAED,MAAM,CAAC,KAAK,EAAE,GAAG,GAAG,OAAO,CAE1B;IAED,MAAM,CAAC,MAAM,IAAI,GAAG,CAEnB;IAED,MAAM,KAAK,MAAM,IAAI,MAAM,CAAC,GAAG,CAAC,CAE/B;CACF"}

package/dest/logs/tag.js

@@ -0,0 +1,34 @@
+import { poseidon2Hash } from '@aztec-labs/foundation/crypto/poseidon';
+import { Fr } from '@aztec-labs/foundation/curves/bn254';
+import { schemas } from '../schemas/schemas.js';
+/**
+ * Represents a tag of a private log. This is not the tag that "appears" on the chain as this tag is first siloed
+ * with a contract address by kernels before being included in the final log.
+ */ export class Tag {
+    value;
+    constructor(value){
+        this.value = value;
+    }
+    static async compute(preTag) {
+        const tag = await poseidon2Hash([
+            preTag.extendedSecret.secret,
+            preTag.index
+        ]);
+        return new Tag(tag);
+    }
+    toString() {
+        return this.value.toString();
+    }
+    toJSON() {
+        return this.value.toString();
+    }
+    equals(other) {
+        return this.value.equals(other.value);
+    }
+    static random() {
+        return new Tag(Fr.random());
+    }
+    static get schema() {
+        return schemas.Fr.transform((fr)=>new Tag(fr));
+    }
+}

package/dest/logs/tagging_index_range.d.ts

@@ -0,0 +1,22 @@
+import { z } from 'zod';
+import { type AppTaggingSecret } from './app_tagging_secret.js';
+/** Represents a range of tagging indexes for a given app tagging secret. */
+export type TaggingIndexRange = {
+    extendedSecret: AppTaggingSecret;
+    lowestIndex: number;
+    highestIndex: number;
+};
+export declare const TaggingIndexRangeSchema: z.ZodObject<{
+    extendedSecret: z.ZodPipe<z.ZodObject<{
+        kind: z.ZodDefault<z.ZodUnion<readonly [z.ZodLiteral<"unconstrained">, z.ZodLiteral<"constrained">]>>;
+        secret: z.ZodType<import("@aztec-labs/foundation/schemas").Fr, string, z.core.$ZodTypeInternals<import("@aztec-labs/foundation/schemas").Fr, string>>;
+        app: import("@aztec-labs/foundation/schemas").ZodFor<import("../aztec-address/index.js").AztecAddress>;
+    }, z.core.$strip>, z.ZodTransform<AppTaggingSecret, {
+        kind: "constrained" | "unconstrained";
+        secret: import("@aztec-labs/foundation/schemas").Fr;
+        app: import("../aztec-address/index.js").AztecAddress;
+    }>>;
+    lowestIndex: z.ZodPipe<z.ZodUnion<readonly [z.ZodBigInt, z.ZodNumber, z.ZodString]>, z.ZodCoercedNumber<string | number | bigint>>;
+    highestIndex: z.ZodPipe<z.ZodUnion<readonly [z.ZodBigInt, z.ZodNumber, z.ZodString]>, z.ZodCoercedNumber<string | number | bigint>>;
+}, z.core.$strip>;
+//# sourceMappingURL=data:application/json;base64,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

package/dest/logs/tagging_index_range.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"tagging_index_range.d.ts","sourceRoot":"","sources":["../../src/logs/tagging_index_range.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,OAAO,EAAE,KAAK,gBAAgB,EAA0B,MAAM,yBAAyB,CAAC;AAExF,4EAA4E;AAC5E,MAAM,MAAM,iBAAiB,GAAG;IAC9B,cAAc,EAAE,gBAAgB,CAAC;IACjC,WAAW,EAAE,MAAM,CAAC;IACpB,YAAY,EAAE,MAAM,CAAC;CACtB,CAAC;AAEF,eAAO,MAAM,uBAAuB;;;;;;;;;;;;iBAIlC,CAAC"}

package/dest/logs/tagging_index_range.js

@@ -0,0 +1,8 @@
+import { schemas } from '@aztec-labs/foundation/schemas';
+import { z } from 'zod';
+import { AppTaggingSecretSchema } from './app_tagging_secret.js';
+export const TaggingIndexRangeSchema = z.object({
+    extendedSecret: AppTaggingSecretSchema,
+    lowestIndex: schemas.Integer,
+    highestIndex: schemas.Integer
+});

package/dest/messaging/append_l1_to_l2_messages.d.ts

@@ -0,0 +1,9 @@
+import type { Fr } from '@aztec-labs/foundation/curves/bn254';
+import type { MerkleTreeWriteOperations } from '../interfaces/merkle_tree_operations.js';
+/**
+ * Appends a block's real L1→L2 message leaves (unpadded, at compact indices) to the L1→L2 message tree of `db`.
+ * Use whenever a fork at "state before a block" needs to mirror what the world-state
+ * synchronizer inserts at sync time.
+ */
+export declare function appendL1ToL2MessagesToTree(db: MerkleTreeWriteOperations, l1ToL2Messages: Fr[]): Promise<void>;
+//# sourceMappingURL=data:application/json;base64,eyJ2ZXJzaW9uIjozLCJmaWxlIjoiYXBwZW5kX2wxX3RvX2wyX21lc3NhZ2VzLmQudHMiLCJzb3VyY2VSb290IjoiIiwic291cmNlcyI6WyIuLi8uLi9zcmMvbWVzc2FnaW5nL2FwcGVuZF9sMV90b19sMl9tZXNzYWdlcy50cyJdLCJuYW1lcyI6W10sIm1hcHBpbmdzIjoiQUFBQSxPQUFPLEtBQUssRUFBRSxFQUFFLEVBQUUsTUFBTSxxQ0FBcUMsQ0FBQztBQUU5RCxPQUFPLEtBQUssRUFBRSx5QkFBeUIsRUFBRSxNQUFNLHlDQUF5QyxDQUFDO0FBR3pGOzs7O0dBSUc7QUFDSCx3QkFBc0IsMEJBQTBCLENBQUMsRUFBRSxFQUFFLHlCQUF5QixFQUFFLGNBQWMsRUFBRSxFQUFFLEVBQUUsR0FBRyxPQUFPLENBQUMsSUFBSSxDQUFDLENBRW5IIn0=

package/dest/messaging/append_l1_to_l2_messages.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"append_l1_to_l2_messages.d.ts","sourceRoot":"","sources":["../../src/messaging/append_l1_to_l2_messages.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,EAAE,EAAE,MAAM,qCAAqC,CAAC;AAE9D,OAAO,KAAK,EAAE,yBAAyB,EAAE,MAAM,yCAAyC,CAAC;AAGzF;;;;GAIG;AACH,wBAAsB,0BAA0B,CAAC,EAAE,EAAE,yBAAyB,EAAE,cAAc,EAAE,EAAE,EAAE,GAAG,OAAO,CAAC,IAAI,CAAC,CAEnH"}

package/dest/messaging/append_l1_to_l2_messages.js

@@ -0,0 +1,8 @@
+import { MerkleTreeId } from '../trees/merkle_tree_id.js';
+/**
+ * Appends a block's real L1→L2 message leaves (unpadded, at compact indices) to the L1→L2 message tree of `db`.
+ * Use whenever a fork at "state before a block" needs to mirror what the world-state
+ * synchronizer inserts at sync time.
+ */ export async function appendL1ToL2MessagesToTree(db, l1ToL2Messages) {
+    await db.appendLeaves(MerkleTreeId.L1_TO_L2_MESSAGE_TREE, l1ToL2Messages);
+}