@aztec-labs/stdlib 6.0.0-nightly.20260829

package/dest/messaging/inbox_bucket.d.ts

@@ -0,0 +1,77 @@
+import { Fr } from '@aztec-labs/foundation/curves/bn254';
+import { type ZodFor } from '@aztec-labs/foundation/schemas';
+import { BufferReader } from '@aztec-labs/foundation/serialize';
+import type { FieldsOf } from '@aztec-labs/foundation/types';
+import { z } from 'zod';
+/**
+ * Snapshot of an Inbox rolling-hash bucket as tracked by the archiver.
+ *
+ * A bucket accumulates the message leaves inserted into the Inbox within a single L1 block (up to a per-bucket
+ * maximum, after which further messages in the same block spill into the next bucket). Buckets are identified by
+ * a dense, monotonically increasing sequence number and keyed for recency lookups by the L1 block timestamp at
+ * which they were opened. Mirrors the on-chain `InboxBucket` struct plus the fields the archiver derives while
+ * syncing.
+ */
+export type InboxBucket = {
+    /** Dense, monotonically increasing sequence number of this bucket in the Inbox ring. */
+    seq: bigint;
+    /** Consensus rolling hash (truncated sha256 chain) after the last message absorbed into this bucket. */
+    inboxRollingHash: Fr;
+    /** Cumulative number of messages inserted into the Inbox up to and including this bucket. */
+    totalMsgCount: bigint;
+    /** L1 block timestamp at which this bucket was opened; the recency key for lag/cutoff comparisons, in seconds. */
+    timestamp: bigint;
+    /** Number of messages absorbed into this bucket. */
+    msgCount: number;
+    /** Global leaf index of the last message absorbed into this bucket. */
+    lastMessageIndex: bigint;
+};
+export declare const InboxBucketSchema: z.ZodObject<{
+    seq: z.ZodPipe<z.ZodUnion<readonly [z.ZodBigInt, z.ZodNumber, z.ZodString]>, z.ZodCoercedBigInt<string | number | bigint>>;
+    inboxRollingHash: z.ZodType<Fr, string, z.core.$ZodTypeInternals<Fr, string>>;
+    totalMsgCount: z.ZodPipe<z.ZodUnion<readonly [z.ZodBigInt, z.ZodNumber, z.ZodString]>, z.ZodCoercedBigInt<string | number | bigint>>;
+    timestamp: z.ZodPipe<z.ZodUnion<readonly [z.ZodBigInt, z.ZodNumber, z.ZodString]>, z.ZodCoercedBigInt<string | number | bigint>>;
+    msgCount: z.ZodPipe<z.ZodUnion<readonly [z.ZodBigInt, z.ZodNumber, z.ZodString]>, z.ZodCoercedNumber<string | number | bigint>>;
+    lastMessageIndex: z.ZodPipe<z.ZodUnion<readonly [z.ZodBigInt, z.ZodNumber, z.ZodString]>, z.ZodCoercedBigInt<string | number | bigint>>;
+}, z.core.$strip>;
+/**
+ * Reference to a settled Inbox rolling-hash bucket, carried alongside a block proposal so a
+ * validator can look the bucket up in its own Inbox view and derive the consumed-message bundle itself, rather than
+ * trusting a proposer-supplied message list. Pins the bucket by its dense sequence number and recency-key timestamp
+ * and asserts the expected consensus rolling hash. A wrong reference can only cause a lookup miss or hash mismatch; it
+ * can never change what a validator accepts, because the checkpoint header's `inboxRollingHash` remains the signed
+ * consensus commitment (mirrors the unsigned bucket hint on L1's `Rollup.propose`).
+ */
+export declare class InboxBucketRef {
+    /** Dense, monotonically increasing sequence number of the referenced bucket in the Inbox ring. */
+    readonly bucketSeq: bigint;
+    /** L1 block timestamp (in seconds) at which the referenced bucket was opened; its recency key. */
+    readonly bucketTimestamp: bigint;
+    /** Consensus rolling hash (truncated sha256 chain) after the last message absorbed into the referenced bucket. */
+    readonly inboxRollingHash: Fr;
+    constructor(
+    /** Dense, monotonically increasing sequence number of the referenced bucket in the Inbox ring. */
+    bucketSeq: bigint, 
+    /** L1 block timestamp (in seconds) at which the referenced bucket was opened; its recency key. */
+    bucketTimestamp: bigint, 
+    /** Consensus rolling hash (truncated sha256 chain) after the last message absorbed into the referenced bucket. */
+    inboxRollingHash: Fr);
+    /** Serialized size in bytes: two uint64 fields plus one field element. */
+    static readonly SIZE: number;
+    static get schema(): ZodFor<InboxBucketRef>;
+    static from(fields: FieldsOf<InboxBucketRef>): InboxBucketRef;
+    /** Derives a wire reference from a bucket snapshot as tracked by the archiver. */
+    static fromBucket(bucket: InboxBucket): InboxBucketRef;
+    toBuffer(): Buffer;
+    static fromBuffer(buffer: Buffer | BufferReader): InboxBucketRef;
+    getSize(): number;
+    equals(other: InboxBucketRef): boolean;
+    static empty(): InboxBucketRef;
+    static random(): InboxBucketRef;
+    toInspect(): {
+        bucketSeq: string;
+        bucketTimestamp: string;
+        inboxRollingHash: `0x${string}`;
+    };
+}
+//# sourceMappingURL=data:application/json;base64,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

package/dest/messaging/inbox_bucket.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"inbox_bucket.d.ts","sourceRoot":"","sources":["../../src/messaging/inbox_bucket.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,EAAE,EAAE,MAAM,qCAAqC,CAAC;AACzD,OAAO,EAAE,KAAK,MAAM,EAAW,MAAM,gCAAgC,CAAC;AACtE,OAAO,EAAE,YAAY,EAAuC,MAAM,kCAAkC,CAAC;AACrG,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,8BAA8B,CAAC;AAC7D,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB;;;;;;;;GAQG;AACH,MAAM,MAAM,WAAW,GAAG;IACxB,wFAAwF;IACxF,GAAG,EAAE,MAAM,CAAC;IACZ,wGAAwG;IACxG,gBAAgB,EAAE,EAAE,CAAC;IACrB,6FAA6F;IAC7F,aAAa,EAAE,MAAM,CAAC;IACtB,kHAAkH;IAClH,SAAS,EAAE,MAAM,CAAC;IAClB,oDAAoD;IACpD,QAAQ,EAAE,MAAM,CAAC;IACjB,uEAAuE;IACvE,gBAAgB,EAAE,MAAM,CAAC;CAC1B,CAAC;AAEF,eAAO,MAAM,iBAAiB;;;;;;;iBAOK,CAAC;AAEpC;;;;;;;GAOG;AACH,qBAAa,cAAc;IAEvB,kGAAkG;aAClF,SAAS,EAAE,MAAM;IACjC,kGAAkG;aAClF,eAAe,EAAE,MAAM;IACvC,kHAAkH;aAClG,gBAAgB,EAAE,EAAE;IANtC;IACE,kGAAkG;IAClF,SAAS,EAAE,MAAM;IACjC,kGAAkG;IAClF,eAAe,EAAE,MAAM;IACvC,kHAAkH;IAClG,gBAAgB,EAAE,EAAE,EAClC;IAEJ,0EAA0E;IAC1E,MAAM,CAAC,QAAQ,CAAC,IAAI,SAA4B;IAEhD,MAAM,KAAK,MAAM,IAAI,MAAM,CAAC,cAAc,CAAC,CAQ1C;IAED,MAAM,CAAC,IAAI,CAAC,MAAM,EAAE,QAAQ,CAAC,cAAc,CAAC,GAAG,cAAc,CAE5D;IAED,kFAAkF;IAClF,MAAM,CAAC,UAAU,CAAC,MAAM,EAAE,WAAW,GAAG,cAAc,CAErD;IAED,QAAQ,IAAI,MAAM,CAMjB;IAED,MAAM,CAAC,UAAU,CAAC,MAAM,EAAE,MAAM,GAAG,YAAY,GAAG,cAAc,CAG/D;IAED,OAAO,IAAI,MAAM,CAEhB;IAED,MAAM,CAAC,KAAK,EAAE,cAAc,GAAG,OAAO,CAMrC;IAED,MAAM,CAAC,KAAK,IAAI,cAAc,CAE7B;IAED,MAAM,CAAC,MAAM,IAAI,cAAc,CAM9B;IAED,SAAS;;;;MAMR;CACF"}

package/dest/messaging/inbox_bucket.js

@@ -0,0 +1,73 @@
+import { Fr } from '@aztec-labs/foundation/curves/bn254';
+import { schemas } from '@aztec-labs/foundation/schemas';
+import { BufferReader, bigintToUInt64BE, serializeToBuffer } from '@aztec-labs/foundation/serialize';
+import { z } from 'zod';
+export const InboxBucketSchema = z.object({
+    seq: schemas.BigInt,
+    inboxRollingHash: Fr.schema,
+    totalMsgCount: schemas.BigInt,
+    timestamp: schemas.BigInt,
+    msgCount: schemas.Integer,
+    lastMessageIndex: schemas.BigInt
+});
+/**
+ * Reference to a settled Inbox rolling-hash bucket, carried alongside a block proposal so a
+ * validator can look the bucket up in its own Inbox view and derive the consumed-message bundle itself, rather than
+ * trusting a proposer-supplied message list. Pins the bucket by its dense sequence number and recency-key timestamp
+ * and asserts the expected consensus rolling hash. A wrong reference can only cause a lookup miss or hash mismatch; it
+ * can never change what a validator accepts, because the checkpoint header's `inboxRollingHash` remains the signed
+ * consensus commitment (mirrors the unsigned bucket hint on L1's `Rollup.propose`).
+ */ export class InboxBucketRef {
+    bucketSeq;
+    bucketTimestamp;
+    inboxRollingHash;
+    constructor(/** Dense, monotonically increasing sequence number of the referenced bucket in the Inbox ring. */ bucketSeq, /** L1 block timestamp (in seconds) at which the referenced bucket was opened; its recency key. */ bucketTimestamp, /** Consensus rolling hash (truncated sha256 chain) after the last message absorbed into the referenced bucket. */ inboxRollingHash){
+        this.bucketSeq = bucketSeq;
+        this.bucketTimestamp = bucketTimestamp;
+        this.inboxRollingHash = inboxRollingHash;
+    }
+    /** Serialized size in bytes: two uint64 fields plus one field element. */ static SIZE = 8 + 8 + Fr.SIZE_IN_BYTES;
+    static get schema() {
+        return z.object({
+            bucketSeq: schemas.BigInt,
+            bucketTimestamp: schemas.BigInt,
+            inboxRollingHash: Fr.schema
+        }).transform(InboxBucketRef.from);
+    }
+    static from(fields) {
+        return new InboxBucketRef(fields.bucketSeq, fields.bucketTimestamp, fields.inboxRollingHash);
+    }
+    /** Derives a wire reference from a bucket snapshot as tracked by the archiver. */ static fromBucket(bucket) {
+        return new InboxBucketRef(bucket.seq, bucket.timestamp, bucket.inboxRollingHash);
+    }
+    toBuffer() {
+        return serializeToBuffer([
+            bigintToUInt64BE(this.bucketSeq),
+            bigintToUInt64BE(this.bucketTimestamp),
+            this.inboxRollingHash
+        ]);
+    }
+    static fromBuffer(buffer) {
+        const reader = BufferReader.asReader(buffer);
+        return new InboxBucketRef(reader.readUInt64(), reader.readUInt64(), reader.readObject(Fr));
+    }
+    getSize() {
+        return InboxBucketRef.SIZE;
+    }
+    equals(other) {
+        return this.bucketSeq === other.bucketSeq && this.bucketTimestamp === other.bucketTimestamp && this.inboxRollingHash.equals(other.inboxRollingHash);
+    }
+    static empty() {
+        return new InboxBucketRef(0n, 0n, Fr.ZERO);
+    }
+    static random() {
+        return new InboxBucketRef(BigInt(Math.floor(Math.random() * 1000)), BigInt(Math.floor(Math.random() * 1_000_000)), Fr.random());
+    }
+    toInspect() {
+        return {
+            bucketSeq: this.bucketSeq.toString(),
+            bucketTimestamp: this.bucketTimestamp.toString(),
+            inboxRollingHash: this.inboxRollingHash.toString()
+        };
+    }
+}

package/dest/messaging/inbox_consumption.d.ts

@@ -0,0 +1,55 @@
+import { SlotNumber } from '@aztec-labs/foundation/branded-types';
+import { type L1RollupConstants } from '../epoch-helpers/index.js';
+import type { InboxBucket } from './inbox_bucket.js';
+/**
+ * Censorship cutoff timestamp for a checkpoint proposed in `slot`, mirroring the cutoff in
+ * `ProposeLib.validateInboxConsumption`, which is `TimeLib.getBuildFrameStart(slot)`. A checkpoint proposed in slot
+ * `S` is built during slot `S - 1`, and the build frame opens one Ethereum slot before that slot starts, since the
+ * builder works from the L1 state as of the preceding L1 block: `cutoff(S) = toTimestamp(S - 1) - E`. Buckets opened
+ * at or before the cutoff were visible to every node for the whole build frame and are mandatory to consume by the
+ * checkpoint's last block; the strict `>` on the L1 "past cutoff" test (see {@link isInboxConsumptionSufficient})
+ * makes a bucket opened exactly at the cutoff mandatory.
+ *
+ * This is the single source of truth for the cutoff formula shared by the sequencer's streaming bucket selection and
+ * the validator's last-block censorship check.
+ */
+export declare function getInboxCutoffTimestamp(slot: SlotNumber, l1Constants: Pick<L1RollupConstants, 'l1GenesisTime' | 'slotDuration' | 'ethereumSlotDuration'>): bigint;
+/**
+ * Smallest number of blocks a checkpoint must be able to build for the streaming Inbox to be guaranteed to clear any
+ * mandatory backlog, and therefore the floor on a network's `maxBlocksPerCheckpoint`.
+ *
+ * Blocks consume whole buckets — a bucket is never split — so a block can only consume a bucket prefix whose message
+ * count fits `MAX_L1_TO_L2_MSGS_PER_BLOCK`. The worst case alternates a one-message bucket with a full
+ * `MAX_L1_TO_L2_MSGS_PER_BLOCK`-message bucket: each such pair needs two blocks (the pair's `cap + 1` messages
+ * overflow one block), and the backlog only stops being mandatory once consuming the next bucket would exceed
+ * `MAX_L1_TO_L2_MSGS_PER_CHECKPOINT` (the cap-escape). That bounds the backlog at `cap + 1` messages per block-pair
+ * and yields `2 * ceil((MAX_L1_TO_L2_MSGS_PER_CHECKPOINT + 1) / (MAX_L1_TO_L2_MSGS_PER_BLOCK + 1)) - 1` blocks (the
+ * final pair needs only its first block).
+ *
+ * A network configured below this floor can be halted permanently: an adversary posts that bucket pattern, no
+ * checkpoint can reach the censorship floor within its block budget, every checkpoint is rejected, and because a
+ * rejected checkpoint never advances the consumed position the next checkpoint faces the identical backlog.
+ */
+export declare const MIN_BLOCKS_FOR_INBOX_CATCHUP: number;
+/**
+ * Whether a checkpoint whose last-consumed bucket is immediately followed by `nextBucket` meets the censorship floor,
+ * mirroring the mandatory-consumption assert in `ProposeLib.validateInboxConsumption`.
+ * Consumption is sufficient when the first unconsumed bucket:
+ *  - does not exist (the checkpoint consumed everything the Inbox has), or
+ *  - was opened strictly after the cutoff (`timestamp > cutoffTimestamp`), or
+ *  - consuming through it would exceed the per-checkpoint cap (the cap-escape).
+ *
+ * The strict `>` matches L1: a bucket opened exactly at the cutoff must be consumed. This is the single source of
+ * truth for the minimum-consumption / cap-escape rule shared by the sequencer's selection floor and the validator.
+ */
+export declare function isInboxConsumptionSufficient(input: {
+    /** The first unconsumed bucket (the one after the checkpoint's last-consumed bucket), or undefined if none exists. */
+    nextBucket: Pick<InboxBucket, 'timestamp' | 'totalMsgCount'> | undefined;
+    /** Censorship cutoff timestamp from {@link getInboxCutoffTimestamp}. */
+    cutoffTimestamp: bigint;
+    /** Cumulative Inbox message count consumed as of the parent checkpoint; the per-checkpoint cap origin. */
+    checkpointStartTotalMsgCount: bigint;
+    /** Maximum number of messages the checkpoint may consume in total (`MAX_L1_TO_L2_MSGS_PER_CHECKPOINT`). */
+    perCheckpointCap: number;
+}): boolean;
+//# sourceMappingURL=data:application/json;base64,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

package/dest/messaging/inbox_consumption.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"inbox_consumption.d.ts","sourceRoot":"","sources":["../../src/messaging/inbox_consumption.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,UAAU,EAAE,MAAM,sCAAsC,CAAC;AAElE,OAAO,EAAE,KAAK,iBAAiB,EAAuB,MAAM,2BAA2B,CAAC;AACxF,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,mBAAmB,CAAC;AAErD;;;;;;;;;;;GAWG;AACH,wBAAgB,uBAAuB,CACrC,IAAI,EAAE,UAAU,EAChB,WAAW,EAAE,IAAI,CAAC,iBAAiB,EAAE,eAAe,GAAG,cAAc,GAAG,sBAAsB,CAAC,GAC9F,MAAM,CAER;AAED;;;;;;;;;;;;;;;GAeG;AACH,eAAO,MAAM,4BAA4B,QACsD,CAAC;AAEhG;;;;;;;;;;GAUG;AACH,wBAAgB,4BAA4B,CAAC,KAAK,EAAE;IAClD,sHAAsH;IACtH,UAAU,EAAE,IAAI,CAAC,WAAW,EAAE,WAAW,GAAG,eAAe,CAAC,GAAG,SAAS,CAAC;IACzE,wEAAwE;IACxE,eAAe,EAAE,MAAM,CAAC;IACxB,0GAA0G;IAC1G,4BAA4B,EAAE,MAAM,CAAC;IACrC,2GAA2G;IAC3G,gBAAgB,EAAE,MAAM,CAAC;CAC1B,GAAG,OAAO,CASV"}

package/dest/messaging/inbox_consumption.js

@@ -0,0 +1,53 @@
+import { MAX_L1_TO_L2_MSGS_PER_BLOCK, MAX_L1_TO_L2_MSGS_PER_CHECKPOINT } from '@aztec-labs/constants';
+import { SlotNumber } from '@aztec-labs/foundation/branded-types';
+import { getTimestampForSlot } from '../epoch-helpers/index.js';
+/**
+ * Censorship cutoff timestamp for a checkpoint proposed in `slot`, mirroring the cutoff in
+ * `ProposeLib.validateInboxConsumption`, which is `TimeLib.getBuildFrameStart(slot)`. A checkpoint proposed in slot
+ * `S` is built during slot `S - 1`, and the build frame opens one Ethereum slot before that slot starts, since the
+ * builder works from the L1 state as of the preceding L1 block: `cutoff(S) = toTimestamp(S - 1) - E`. Buckets opened
+ * at or before the cutoff were visible to every node for the whole build frame and are mandatory to consume by the
+ * checkpoint's last block; the strict `>` on the L1 "past cutoff" test (see {@link isInboxConsumptionSufficient})
+ * makes a bucket opened exactly at the cutoff mandatory.
+ *
+ * This is the single source of truth for the cutoff formula shared by the sequencer's streaming bucket selection and
+ * the validator's last-block censorship check.
+ */ export function getInboxCutoffTimestamp(slot, l1Constants) {
+    return getTimestampForSlot(SlotNumber(slot - 1), l1Constants) - BigInt(l1Constants.ethereumSlotDuration);
+}
+/**
+ * Smallest number of blocks a checkpoint must be able to build for the streaming Inbox to be guaranteed to clear any
+ * mandatory backlog, and therefore the floor on a network's `maxBlocksPerCheckpoint`.
+ *
+ * Blocks consume whole buckets — a bucket is never split — so a block can only consume a bucket prefix whose message
+ * count fits `MAX_L1_TO_L2_MSGS_PER_BLOCK`. The worst case alternates a one-message bucket with a full
+ * `MAX_L1_TO_L2_MSGS_PER_BLOCK`-message bucket: each such pair needs two blocks (the pair's `cap + 1` messages
+ * overflow one block), and the backlog only stops being mandatory once consuming the next bucket would exceed
+ * `MAX_L1_TO_L2_MSGS_PER_CHECKPOINT` (the cap-escape). That bounds the backlog at `cap + 1` messages per block-pair
+ * and yields `2 * ceil((MAX_L1_TO_L2_MSGS_PER_CHECKPOINT + 1) / (MAX_L1_TO_L2_MSGS_PER_BLOCK + 1)) - 1` blocks (the
+ * final pair needs only its first block).
+ *
+ * A network configured below this floor can be halted permanently: an adversary posts that bucket pattern, no
+ * checkpoint can reach the censorship floor within its block budget, every checkpoint is rejected, and because a
+ * rejected checkpoint never advances the consumed position the next checkpoint faces the identical backlog.
+ */ export const MIN_BLOCKS_FOR_INBOX_CATCHUP = 2 * Math.ceil((MAX_L1_TO_L2_MSGS_PER_CHECKPOINT + 1) / (MAX_L1_TO_L2_MSGS_PER_BLOCK + 1)) - 1;
+/**
+ * Whether a checkpoint whose last-consumed bucket is immediately followed by `nextBucket` meets the censorship floor,
+ * mirroring the mandatory-consumption assert in `ProposeLib.validateInboxConsumption`.
+ * Consumption is sufficient when the first unconsumed bucket:
+ *  - does not exist (the checkpoint consumed everything the Inbox has), or
+ *  - was opened strictly after the cutoff (`timestamp > cutoffTimestamp`), or
+ *  - consuming through it would exceed the per-checkpoint cap (the cap-escape).
+ *
+ * The strict `>` matches L1: a bucket opened exactly at the cutoff must be consumed. This is the single source of
+ * truth for the minimum-consumption / cap-escape rule shared by the sequencer's selection floor and the validator.
+ */ export function isInboxConsumptionSufficient(input) {
+    const { nextBucket, cutoffTimestamp, checkpointStartTotalMsgCount, perCheckpointCap } = input;
+    if (nextBucket === undefined) {
+        return true;
+    }
+    if (nextBucket.timestamp > cutoffTimestamp) {
+        return true;
+    }
+    return nextBucket.totalMsgCount - checkpointStartTotalMsgCount > BigInt(perCheckpointCap);
+}

package/dest/messaging/inbox_rolling_hash.d.ts

@@ -0,0 +1,16 @@
+import { Fr } from '@aztec-labs/foundation/curves/bn254';
+/**
+ * Extends the Inbox rolling-hash chain by a single message leaf, returning the new rolling hash.
+ *
+ * Each link is `sha256ToField(DOM_SEP__INBOX_ROLLING_HASH || prev || leaf)` over the 4-byte big-endian domain
+ * separator followed by the two 32-byte big-endian values, matching the truncated-to-field sha256 the L1 Inbox
+ * accumulates and the noir `accumulate_inbox_rolling_hash` helper. The separator distinguishes a chain link from the
+ * untagged `outHash` merkle node hash, which absorbs the same two-field preimage shape.
+ */
+export declare function updateInboxRollingHash(prev: Fr, leaf: Fr): Fr;
+/**
+ * Extends the Inbox rolling-hash chain by a list of message leaves, in order, returning the new rolling hash.
+ * The genesis rolling hash is `Fr.ZERO`, and an empty list returns `start` unchanged.
+ */
+export declare function accumulateInboxRollingHash(start: Fr, leaves: Fr[]): Fr;
+//# sourceMappingURL=data:application/json;base64,eyJ2ZXJzaW9uIjozLCJmaWxlIjoiaW5ib3hfcm9sbGluZ19oYXNoLmQudHMiLCJzb3VyY2VSb290IjoiIiwic291cmNlcyI6WyIuLi8uLi9zcmMvbWVzc2FnaW5nL2luYm94X3JvbGxpbmdfaGFzaC50cyJdLCJuYW1lcyI6W10sIm1hcHBpbmdzIjoiQUFFQSxPQUFPLEVBQUUsRUFBRSxFQUFFLE1BQU0scUNBQXFDLENBQUM7QUFHekQ7Ozs7Ozs7R0FPRztBQUNILHdCQUFnQixzQkFBc0IsQ0FBQyxJQUFJLEVBQUUsRUFBRSxFQUFFLElBQUksRUFBRSxFQUFFLEdBQUcsRUFBRSxDQUU3RDtBQUVEOzs7R0FHRztBQUNILHdCQUFnQiwwQkFBMEIsQ0FBQyxLQUFLLEVBQUUsRUFBRSxFQUFFLE1BQU0sRUFBRSxFQUFFLEVBQUUsR0FBRyxFQUFFLENBRXRFIn0=

package/dest/messaging/inbox_rolling_hash.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"inbox_rolling_hash.d.ts","sourceRoot":"","sources":["../../src/messaging/inbox_rolling_hash.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,EAAE,EAAE,MAAM,qCAAqC,CAAC;AAGzD;;;;;;;GAOG;AACH,wBAAgB,sBAAsB,CAAC,IAAI,EAAE,EAAE,EAAE,IAAI,EAAE,EAAE,GAAG,EAAE,CAE7D;AAED;;;GAGG;AACH,wBAAgB,0BAA0B,CAAC,KAAK,EAAE,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE,GAAG,EAAE,CAEtE"}

package/dest/messaging/inbox_rolling_hash.js

@@ -0,0 +1,23 @@
+import { DomainSeparator } from '@aztec-labs/constants';
+import { sha256ToField } from '@aztec-labs/foundation/crypto/sha256';
+import { numToUInt32BE } from '@aztec-labs/foundation/serialize';
+/**
+ * Extends the Inbox rolling-hash chain by a single message leaf, returning the new rolling hash.
+ *
+ * Each link is `sha256ToField(DOM_SEP__INBOX_ROLLING_HASH || prev || leaf)` over the 4-byte big-endian domain
+ * separator followed by the two 32-byte big-endian values, matching the truncated-to-field sha256 the L1 Inbox
+ * accumulates and the noir `accumulate_inbox_rolling_hash` helper. The separator distinguishes a chain link from the
+ * untagged `outHash` merkle node hash, which absorbs the same two-field preimage shape.
+ */ export function updateInboxRollingHash(prev, leaf) {
+    return sha256ToField([
+        numToUInt32BE(DomainSeparator.INBOX_ROLLING_HASH),
+        prev.toBuffer(),
+        leaf.toBuffer()
+    ]);
+}
+/**
+ * Extends the Inbox rolling-hash chain by a list of message leaves, in order, returning the new rolling hash.
+ * The genesis rolling hash is `Fr.ZERO`, and an empty list returns `start` unchanged.
+ */ export function accumulateInboxRollingHash(start, leaves) {
+    return leaves.reduce(updateInboxRollingHash, start);
+}

package/dest/messaging/index.d.ts

@@ -0,0 +1,14 @@
+export * from './append_l1_to_l2_messages.js';
+export * from './inbox_bucket.js';
+export * from './inbox_consumption.js';
+export * from './inbox_rolling_hash.js';
+export * from './l1_to_l2_message_bundle.js';
+export * from './l1_to_l2_message_sponge.js';
+export * from './l1_to_l2_message.js';
+export * from './l1_to_l2_message_source.js';
+export * from './l1_actor.js';
+export * from './l2_actor.js';
+export * from './l2_to_l1_message.js';
+export * from './l2_to_l1_membership.js';
+export * from './out_hash.js';
+//# sourceMappingURL=data:application/json;base64,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

package/dest/messaging/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/messaging/index.ts"],"names":[],"mappings":"AAAA,cAAc,+BAA+B,CAAC;AAC9C,cAAc,mBAAmB,CAAC;AAClC,cAAc,wBAAwB,CAAC;AACvC,cAAc,yBAAyB,CAAC;AACxC,cAAc,8BAA8B,CAAC;AAC7C,cAAc,8BAA8B,CAAC;AAC7C,cAAc,uBAAuB,CAAC;AACtC,cAAc,8BAA8B,CAAC;AAC7C,cAAc,eAAe,CAAC;AAC9B,cAAc,eAAe,CAAC;AAC9B,cAAc,uBAAuB,CAAC;AACtC,cAAc,0BAA0B,CAAC;AACzC,cAAc,eAAe,CAAC"}

package/dest/messaging/index.js

@@ -0,0 +1,13 @@
+export * from './append_l1_to_l2_messages.js';
+export * from './inbox_bucket.js';
+export * from './inbox_consumption.js';
+export * from './inbox_rolling_hash.js';
+export * from './l1_to_l2_message_bundle.js';
+export * from './l1_to_l2_message_sponge.js';
+export * from './l1_to_l2_message.js';
+export * from './l1_to_l2_message_source.js';
+export * from './l1_actor.js';
+export * from './l2_actor.js';
+export * from './l2_to_l1_message.js';
+export * from './l2_to_l1_membership.js';
+export * from './out_hash.js';

package/dest/messaging/l1_actor.d.ts

@@ -0,0 +1,31 @@
+import { Fr } from '@aztec-labs/foundation/curves/bn254';
+import { EthAddress } from '@aztec-labs/foundation/eth-address';
+import { BufferReader } from '@aztec-labs/foundation/serialize';
+/**
+ * The sender of an L1 to L2 message or recipient of an L2 to L1 message.
+ */
+export declare class L1Actor {
+    /**
+     * The sender of the message.
+     */
+    readonly sender: EthAddress;
+    /**
+     * The chain id on which the message was sent (L1 -> L2) or on which the message will be received (L2 -> L1).
+     */
+    readonly chainId: number;
+    constructor(
+    /**
+     * The sender of the message.
+     */
+    sender: EthAddress, 
+    /**
+     * The chain id on which the message was sent (L1 -> L2) or on which the message will be received (L2 -> L1).
+     */
+    chainId: number);
+    static empty(): L1Actor;
+    toFields(): Fr[];
+    toBuffer(): Buffer;
+    static fromBuffer(buffer: Buffer | BufferReader): L1Actor;
+    static random(): L1Actor;
+}
+//# sourceMappingURL=data:application/json;base64,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

package/dest/messaging/l1_actor.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"l1_actor.d.ts","sourceRoot":"","sources":["../../src/messaging/l1_actor.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,EAAE,EAAE,MAAM,qCAAqC,CAAC;AACzD,OAAO,EAAE,UAAU,EAAE,MAAM,oCAAoC,CAAC;AAChE,OAAO,EAAE,YAAY,EAAqB,MAAM,kCAAkC,CAAC;AAEnF;;GAEG;AACH,qBAAa,OAAO;IAEhB;;OAEG;aACa,MAAM,EAAE,UAAU;IAClC;;OAEG;aACa,OAAO,EAAE,MAAM;IARjC;IACE;;OAEG;IACa,MAAM,EAAE,UAAU;IAClC;;OAEG;IACa,OAAO,EAAE,MAAM,EAC7B;IAEJ,MAAM,CAAC,KAAK,YAEX;IAED,QAAQ,IAAI,EAAE,EAAE,CAEf;IAED,QAAQ,IAAI,MAAM,CAEjB;IAED,MAAM,CAAC,UAAU,CAAC,MAAM,EAAE,MAAM,GAAG,YAAY,GAAG,OAAO,CAKxD;IAED,MAAM,CAAC,MAAM,IAAI,OAAO,CAEvB;CACF"}

package/dest/messaging/l1_actor.js

@@ -0,0 +1,39 @@
+import { randomInt } from '@aztec-labs/foundation/crypto/random';
+import { Fr } from '@aztec-labs/foundation/curves/bn254';
+import { EthAddress } from '@aztec-labs/foundation/eth-address';
+import { BufferReader, serializeToBuffer } from '@aztec-labs/foundation/serialize';
+/**
+ * The sender of an L1 to L2 message or recipient of an L2 to L1 message.
+ */ export class L1Actor {
+    sender;
+    chainId;
+    constructor(/**
+     * The sender of the message.
+     */ sender, /**
+     * The chain id on which the message was sent (L1 -> L2) or on which the message will be received (L2 -> L1).
+     */ chainId){
+        this.sender = sender;
+        this.chainId = chainId;
+    }
+    static empty() {
+        return new L1Actor(EthAddress.ZERO, 0);
+    }
+    toFields() {
+        return [
+            this.sender.toField(),
+            new Fr(BigInt(this.chainId))
+        ];
+    }
+    toBuffer() {
+        return serializeToBuffer(this.sender, this.chainId);
+    }
+    static fromBuffer(buffer) {
+        const reader = BufferReader.asReader(buffer);
+        const ethAddr = reader.readObject(EthAddress);
+        const chainId = reader.readNumber();
+        return new L1Actor(ethAddr, chainId);
+    }
+    static random() {
+        return new L1Actor(EthAddress.random(), randomInt(1000));
+    }
+}

package/dest/messaging/l1_to_l2_message.d.ts

@@ -0,0 +1,70 @@
+import { type L1_TO_L2_MSG_TREE_HEIGHT } from '@aztec-labs/constants';
+import { Fr } from '@aztec-labs/foundation/curves/bn254';
+import { BufferReader } from '@aztec-labs/foundation/serialize';
+import { SiblingPath } from '@aztec-labs/foundation/trees';
+import type { AztecAddress } from '../aztec-address/index.js';
+import type { BlockParameter } from '../block/block_parameter.js';
+import type { AztecNode } from '../interfaces/aztec-node.js';
+import { L1Actor } from './l1_actor.js';
+import { L2Actor } from './l2_actor.js';
+/**
+ * The format of an L1 to L2 Message.
+ */
+export declare class L1ToL2Message {
+    /** The sender of the message on L1. */
+    readonly sender: L1Actor;
+    /** The recipient of the message on L2. */
+    readonly recipient: L2Actor;
+    /** The message content. */
+    readonly content: Fr;
+    /** The hash of the spending secret. */
+    readonly secretHash: Fr;
+    /** Global index of this message on the tree. */
+    readonly index: Fr;
+    constructor(
+    /** The sender of the message on L1. */
+    sender: L1Actor, 
+    /** The recipient of the message on L2. */
+    recipient: L2Actor, 
+    /** The message content. */
+    content: Fr, 
+    /** The hash of the spending secret. */
+    secretHash: Fr, 
+    /** Global index of this message on the tree. */
+    index: Fr);
+    /**
+     * Returns each element within its own field so that it can be consumed by an acvm oracle call.
+     * @returns The message as an array of fields (in order).
+     */
+    toFields(): Fr[];
+    toBuffer(): Buffer;
+    hash(): Fr;
+    static fromBuffer(buffer: Buffer | BufferReader): L1ToL2Message;
+    toString(): string;
+    static fromString(data: string): L1ToL2Message;
+    static empty(): L1ToL2Message;
+    static random(): Promise<L1ToL2Message>;
+}
+/**
+ * The unsiloed nullifier a message consumer derives, together with the contract address needed to silo it.
+ */
+export interface UnsiloedMessageNullifier {
+    contractAddress: AztecAddress;
+    nullifier: Fr;
+}
+/**
+ * Computes the unsiloed nullifier that the fee juice contract (and any consumer following the same scheme) derives when
+ * consuming an L1 to L2 message.
+ *
+ * This is not a general-purpose utility: other contracts may derive the secret hash and hence the nullifier
+ * differently. The result is unsiloed — callers silo it (with the consuming contract's address) before looking it up
+ * in the nullifier tree.
+ */
+export declare function computeFeeJuiceMessageNullifier(messageHash: Fr, secret: Fr): Promise<Fr>;
+/**
+ * Fetches the membership witness of an L1 to L2 message. When `unsiloedNullifier` is provided, the message is
+ * additionally required to be un-nullified.
+ */
+export declare function getL1ToL2MessageWitness(node: AztecNode, messageHash: Fr, unsiloedNullifier?: UnsiloedMessageNullifier, referenceBlock?: BlockParameter): Promise<[bigint, SiblingPath<typeof L1_TO_L2_MSG_TREE_HEIGHT>]>;
+export declare function getNonNullifiedL1ToL2MessageWitness(node: AztecNode, contractAddress: AztecAddress, messageHash: Fr, secret: Fr, referenceBlock?: BlockParameter): Promise<[bigint, SiblingPath<typeof L1_TO_L2_MSG_TREE_HEIGHT>]>;
+//# sourceMappingURL=data:application/json;base64,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

package/dest/messaging/l1_to_l2_message.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"l1_to_l2_message.d.ts","sourceRoot":"","sources":["../../src/messaging/l1_to_l2_message.ts"],"names":[],"mappings":"AAAA,OAAO,EAAmB,KAAK,wBAAwB,EAAE,MAAM,uBAAuB,CAAC;AAGvF,OAAO,EAAE,EAAE,EAAE,MAAM,qCAAqC,CAAC;AACzD,OAAO,EAAE,YAAY,EAAqB,MAAM,kCAAkC,CAAC;AAEnF,OAAO,EAAE,WAAW,EAAE,MAAM,8BAA8B,CAAC;AAE3D,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,2BAA2B,CAAC;AAC9D,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,6BAA6B,CAAC;AAElE,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,6BAA6B,CAAC;AAE7D,OAAO,EAAE,OAAO,EAAE,MAAM,eAAe,CAAC;AACxC,OAAO,EAAE,OAAO,EAAE,MAAM,eAAe,CAAC;AAExC;;GAEG;AACH,qBAAa,aAAa;IAEtB,uCAAuC;aACvB,MAAM,EAAE,OAAO;IAC/B,0CAA0C;aAC1B,SAAS,EAAE,OAAO;IAClC,2BAA2B;aACX,OAAO,EAAE,EAAE;IAC3B,uCAAuC;aACvB,UAAU,EAAE,EAAE;IAC9B,gDAAgD;aAChC,KAAK,EAAE,EAAE;IAV3B;IACE,uCAAuC;IACvB,MAAM,EAAE,OAAO;IAC/B,0CAA0C;IAC1B,SAAS,EAAE,OAAO;IAClC,2BAA2B;IACX,OAAO,EAAE,EAAE;IAC3B,uCAAuC;IACvB,UAAU,EAAE,EAAE;IAC9B,gDAAgD;IAChC,KAAK,EAAE,EAAE,EACvB;IAEJ;;;OAGG;IACH,QAAQ,IAAI,EAAE,EAAE,CAEf;IAED,QAAQ,IAAI,MAAM,CAEjB;IAED,IAAI,IAAI,EAAE,CAET;IAED,MAAM,CAAC,UAAU,CAAC,MAAM,EAAE,MAAM,GAAG,YAAY,GAAG,aAAa,CAQ9D;IAED,QAAQ,IAAI,MAAM,CAEjB;IAED,MAAM,CAAC,UAAU,CAAC,IAAI,EAAE,MAAM,GAAG,aAAa,CAG7C;IAED,MAAM,CAAC,KAAK,IAAI,aAAa,CAE5B;IAED,OAAa,MAAM,IAAI,OAAO,CAAC,aAAa,CAAC,CAE5C;CACF;AAED;;GAEG;AACH,MAAM,WAAW,wBAAwB;IACvC,eAAe,EAAE,YAAY,CAAC;IAC9B,SAAS,EAAE,EAAE,CAAC;CACf;AAED;;;;;;;GAOG;AACH,wBAAgB,+BAA+B,CAAC,WAAW,EAAE,EAAE,EAAE,MAAM,EAAE,EAAE,GAAG,OAAO,CAAC,EAAE,CAAC,CAExF;AAED;;;GAGG;AACH,wBAAsB,uBAAuB,CAC3C,IAAI,EAAE,SAAS,EACf,WAAW,EAAE,EAAE,EACf,iBAAiB,CAAC,EAAE,wBAAwB,EAC5C,cAAc,GAAE,cAAyB,GACxC,OAAO,CAAC,CAAC,MAAM,EAAE,WAAW,CAAC,OAAO,wBAAwB,CAAC,CAAC,CAAC,CAoBjE;AAGD,wBAAsB,mCAAmC,CACvD,IAAI,EAAE,SAAS,EACf,eAAe,EAAE,YAAY,EAC7B,WAAW,EAAE,EAAE,EACf,MAAM,EAAE,EAAE,EACV,cAAc,GAAE,cAAyB,GACxC,OAAO,CAAC,CAAC,MAAM,EAAE,WAAW,CAAC,OAAO,wBAAwB,CAAC,CAAC,CAAC,CAGjE"}

package/dest/messaging/l1_to_l2_message.js

@@ -0,0 +1,106 @@
+import { DomainSeparator } from '@aztec-labs/constants';
+import { poseidon2HashWithSeparator } from '@aztec-labs/foundation/crypto/poseidon';
+import { sha256ToField } from '@aztec-labs/foundation/crypto/sha256';
+import { Fr } from '@aztec-labs/foundation/curves/bn254';
+import { BufferReader, serializeToBuffer } from '@aztec-labs/foundation/serialize';
+import { bufferToHex } from '@aztec-labs/foundation/string';
+import { siloNullifier } from '../hash/hash.js';
+import { MerkleTreeId } from '../trees/merkle_tree_id.js';
+import { L1Actor } from './l1_actor.js';
+import { L2Actor } from './l2_actor.js';
+/**
+ * The format of an L1 to L2 Message.
+ */ export class L1ToL2Message {
+    sender;
+    recipient;
+    content;
+    secretHash;
+    index;
+    constructor(/** The sender of the message on L1. */ sender, /** The recipient of the message on L2. */ recipient, /** The message content. */ content, /** The hash of the spending secret. */ secretHash, /** Global index of this message on the tree. */ index){
+        this.sender = sender;
+        this.recipient = recipient;
+        this.content = content;
+        this.secretHash = secretHash;
+        this.index = index;
+    }
+    /**
+   * Returns each element within its own field so that it can be consumed by an acvm oracle call.
+   * @returns The message as an array of fields (in order).
+   */ toFields() {
+        return [
+            ...this.sender.toFields(),
+            ...this.recipient.toFields(),
+            this.content,
+            this.secretHash,
+            this.index
+        ];
+    }
+    toBuffer() {
+        return serializeToBuffer(this.sender, this.recipient, this.content, this.secretHash, this.index);
+    }
+    hash() {
+        return sha256ToField(this.toFields());
+    }
+    static fromBuffer(buffer) {
+        const reader = BufferReader.asReader(buffer);
+        const sender = reader.readObject(L1Actor);
+        const recipient = reader.readObject(L2Actor);
+        const content = Fr.fromBuffer(reader);
+        const secretHash = Fr.fromBuffer(reader);
+        const index = Fr.fromBuffer(reader);
+        return new L1ToL2Message(sender, recipient, content, secretHash, index);
+    }
+    toString() {
+        return bufferToHex(this.toBuffer());
+    }
+    static fromString(data) {
+        const buffer = Buffer.from(data, 'hex');
+        return L1ToL2Message.fromBuffer(buffer);
+    }
+    static empty() {
+        return new L1ToL2Message(L1Actor.empty(), L2Actor.empty(), Fr.ZERO, Fr.ZERO, Fr.ZERO);
+    }
+    static async random() {
+        return new L1ToL2Message(L1Actor.random(), await L2Actor.random(), Fr.random(), Fr.random(), Fr.random());
+    }
+}
+/**
+ * Computes the unsiloed nullifier that the fee juice contract (and any consumer following the same scheme) derives when
+ * consuming an L1 to L2 message.
+ *
+ * This is not a general-purpose utility: other contracts may derive the secret hash and hence the nullifier
+ * differently. The result is unsiloed — callers silo it (with the consuming contract's address) before looking it up
+ * in the nullifier tree.
+ */ export function computeFeeJuiceMessageNullifier(messageHash, secret) {
+    return poseidon2HashWithSeparator([
+        messageHash,
+        secret
+    ], DomainSeparator.MESSAGE_NULLIFIER);
+}
+/**
+ * Fetches the membership witness of an L1 to L2 message. When `unsiloedNullifier` is provided, the message is
+ * additionally required to be un-nullified.
+ */ export async function getL1ToL2MessageWitness(node, messageHash, unsiloedNullifier, referenceBlock = 'latest') {
+    // Both requests are dispatched before awaiting so they run concurrently.
+    const l1ToL2ResponsePromise = node.getL1ToL2MessageMembershipWitness(referenceBlock, messageHash);
+    const nullifierResponsePromise = unsiloedNullifier ? siloNullifier(unsiloedNullifier.contractAddress, unsiloedNullifier.nullifier).then((siloed)=>node.findLeavesIndexes(referenceBlock, MerkleTreeId.NULLIFIER_TREE, [
+            siloed
+        ])) : undefined;
+    const l1ToL2Response = await l1ToL2ResponsePromise;
+    if (!l1ToL2Response) {
+        throw new Error(`No L1 to L2 message found for message hash ${messageHash.toString()}`);
+    }
+    const nullifierResponse = await nullifierResponsePromise;
+    if (nullifierResponse?.[0] !== undefined) {
+        throw new Error(`No non-nullified L1 to L2 message found for message hash ${messageHash.toString()}`);
+    }
+    return l1ToL2Response;
+}
+// This functionality is not on the node because we do not want to pass the node the secret, and give the node the ability to derive a valid nullifer for an L1 to L2 message.
+export async function getNonNullifiedL1ToL2MessageWitness(node, contractAddress, messageHash, secret, referenceBlock = 'latest') {
+    const nullifier = await computeFeeJuiceMessageNullifier(messageHash, secret);
+    return getL1ToL2MessageWitness(node, messageHash, {
+        contractAddress,
+        nullifier
+    }, referenceBlock);
+}