@aztec/cli 0.0.1-commit.9ef841308 → 0.0.1-commit.a4600f49

package/dest/cmds/validator_keys/new.js

@@ -2,13 +2,74 @@ import { prettyPrintJSON } from '@aztec/cli/utils';
 import { createEthereumChain } from '@aztec/ethereum/chain';
 import { GSEContract } from '@aztec/ethereum/contracts';
 import { wordlist } from '@scure/bip39/wordlists/english.js';
-import { writeFile } from 'fs/promises';
+import { readFile, writeFile } from 'fs/promises';
 import { basename, dirname, join } from 'path';
 import { createPublicClient, fallback, http } from 'viem';
 import { generateMnemonic, mnemonicToAccount } from 'viem/accounts';
 import { buildValidatorEntries, logValidatorSummaries, maybePrintJson, resolveKeystoreOutputPath, writeBlsBn254ToFile, writeEthJsonV3ToFile, writeKeystoreFile } from './shared.js';
 import { processAttesterAccounts } from './staker.js';
 import { validateBlsPathOptions, validatePublisherOptions, validateRemoteSignerOptions, validateStakerOutputOptions } from './utils.js';
+function validatePassword(password, source) {
+    if (password.length === 0) {
+        throw new Error(`${source} cannot be empty`);
+    }
+    return password;
+}
+function stripOneTrailingNewline(password) {
+    if (password.endsWith('\n')) {
+        password = password.slice(0, -1);
+    }
+    if (password.endsWith('\r')) {
+        password = password.slice(0, -1);
+    }
+    return password;
+}
+async function resolvePasswordSource(source) {
+    if (source.password !== undefined && source.passwordFile !== undefined) {
+        throw new Error(`${source.passwordOption} and ${source.passwordFileOption} cannot be used together`);
+    }
+    if (source.password !== undefined) {
+        return validatePassword(source.password, source.passwordOption);
+    }
+    if (source.passwordFile !== undefined) {
+        if (source.passwordFile.length === 0) {
+            throw new Error(`${source.passwordFileOption} cannot be empty`);
+        }
+        const password = stripOneTrailingNewline(await readFile(source.passwordFile, 'utf-8'));
+        return validatePassword(password, source.passwordFileOption);
+    }
+    return undefined;
+}
+async function resolvePasswords(options) {
+    const sharedPassword = await resolvePasswordSource({
+        password: options.password,
+        passwordFile: options.passwordFile,
+        passwordOption: '--password',
+        passwordFileOption: '--password-file'
+    });
+    const ethPassword = await resolvePasswordSource({
+        password: options.ethPassword,
+        passwordFile: options.ethPasswordFile,
+        passwordOption: '--eth-password',
+        passwordFileOption: '--eth-password-file'
+    }) ?? sharedPassword;
+    const blsPassword = await resolvePasswordSource({
+        password: options.blsPassword,
+        passwordFile: options.blsPasswordFile,
+        passwordOption: '--bls-password',
+        passwordFileOption: '--bls-password-file'
+    }) ?? sharedPassword;
+    if (ethPassword === undefined && blsPassword === undefined) {
+        return {};
+    }
+    if (ethPassword === undefined || blsPassword === undefined) {
+        throw new Error('Both ETH and BLS passwords are required when writing encrypted keystores. Provide --password to use one password for both, or provide both --eth-password and --bls-password.');
+    }
+    return {
+        ethPassword,
+        blsPassword
+    };
+}
 export async function newValidatorKeystore(options, log) {
     // validate bls-path inputs before proceeding with key generation
     validateBlsPathOptions(options);
@@ -18,9 +79,18 @@ export async function newValidatorKeystore(options, log) {
     validatePublisherOptions(options);
     // validate remote signer options
     validateRemoteSignerOptions(options);
-    const { dataDir, file, count, publisherCount = 0, publishers, json, coinbase, accountIndex = 0, addressIndex = 0, feeRecipient, remoteSigner, blsPath, ikm, mnemonic: _mnemonic, password, encryptedKeystoreDir, stakerOutput, gseAddress, l1RpcUrls, l1ChainId } = options;
+    const { dataDir, file, count, publisherCount = 0, publishers, json, coinbase, accountIndex = 0, addressIndex = 0, feeRecipient, remoteSigner, blsPath, ikm, mnemonic: _mnemonic, password: passwordOption, passwordFile, ethPassword: ethPasswordOption, ethPasswordFile, blsPassword: blsPasswordOption, blsPasswordFile, encryptedKeystoreDir, stakerOutput, gseAddress, l1RpcUrls, l1ChainId } = options;
+    const { ethPassword, blsPassword } = await resolvePasswords({
+        password: passwordOption,
+        passwordFile,
+        ethPassword: ethPasswordOption,
+        ethPasswordFile,
+        blsPassword: blsPasswordOption,
+        blsPasswordFile
+    });
+    const shouldEncryptKeystores = ethPassword !== undefined && blsPassword !== undefined;
     const mnemonic = _mnemonic ?? generateMnemonic(wordlist);
-    if (!_mnemonic && !json) {
+    if (!_mnemonic && !json && !shouldEncryptKeystores) {
         log('No mnemonic provided, generating new one...');
         log(`Using new mnemonic:`);
         log('');
@@ -44,15 +114,15 @@ export async function newValidatorKeystore(options, log) {
         remoteSigner
     });
     // If password provided, write ETH JSON V3 and BLS BN254 keystores and replace plaintext
-    if (password !== undefined) {
+    if (shouldEncryptKeystores) {
         const encryptedKeystoreOutDir = encryptedKeystoreDir && encryptedKeystoreDir.length > 0 ? encryptedKeystoreDir : keystoreOutDir;
         await writeEthJsonV3ToFile(validators, {
             outDir: encryptedKeystoreOutDir,
-            password
+            password: ethPassword
         });
         await writeBlsBn254ToFile(validators, {
             outDir: encryptedKeystoreOutDir,
-            password
+            password: blsPassword
         });
     }
     const keystore = {
@@ -76,7 +146,7 @@ export async function newValidatorKeystore(options, log) {
         // Process each validator
         for(let i = 0; i < validators.length; i++){
             const validator = validators[i];
-            const outputs = await processAttesterAccounts(validator.attester, gse, password);
+            const outputs = await processAttesterAccounts(validator.attester, gse);
             // Collect all staker outputs
             for(let j = 0; j < outputs.length; j++){
                 allStakerOutputs.push(outputs[j]);
@@ -88,7 +158,7 @@ export async function newValidatorKeystore(options, log) {
             await writeFile(stakerOutputPath, prettyPrintJSON(allStakerOutputs), 'utf-8');
         }
     }
-    const outputData = !_mnemonic ? {
+    const outputData = !_mnemonic && !shouldEncryptKeystores ? {
         ...keystore,
         generatedMnemonic: mnemonic
     } : keystore;

package/dest/cmds/validator_keys/shared.d.ts

@@ -65,4 +65,4 @@ export declare function writeEthJsonV3ToFile(validators: ValidatorKeyStore[], op
     outDir: string;
     password: string;
 }): Promise<void>;
-//# sourceMappingURL=data:application/json;base64,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
+//# sourceMappingURL=data:application/json;base64,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

package/dest/cmds/validator_keys/shared.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"shared.d.ts","sourceRoot":"","sources":["../../../src/cmds/validator_keys/shared.ts"],"names":[],"mappings":"AAIA,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,+BAA+B,CAAC;AAChE,OAAO,KAAK,EAAE,KAAK,EAAE,MAAM,uBAAuB,CAAC;AACnD,OAAO,KAAK,EAAE,UAAU,EAAE,aAAa,EAAE,iBAAiB,EAAE,MAAM,4BAA4B,CAAC;AAC/F,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,6BAA6B,CAAC;AAWhE,MAAM,MAAM,gBAAgB,GAAG;IAAE,WAAW,CAAC,EAAE,MAAM,CAAC;IAAC,WAAW,CAAC,EAAE,MAAM,CAAC;IAAC,YAAY,CAAC,EAAE,MAAM,EAAE,CAAA;CAAE,CAAC;AAEvG,MAAM,MAAM,oBAAoB,GAAG;IACjC,cAAc,EAAE,MAAM,CAAC;IACvB,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,UAAU,CAAC,EAAE,MAAM,EAAE,CAAC;IACtB,YAAY,EAAE,MAAM,CAAC;IACrB,gBAAgB,EAAE,MAAM,CAAC;IACzB,QAAQ,EAAE,MAAM,CAAC;IACjB,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,YAAY,EAAE,YAAY,CAAC;IAC3B,QAAQ,CAAC,EAAE,UAAU,CAAC;IACtB,YAAY,CAAC,EAAE,MAAM,CAAC;CACvB,CAAC;AAEF,wBAAgB,kBAAkB,CAAC,IAAI,EAAE,MAAM,EAAE,YAAY,GAAE,MAAU,EAAE,YAAY,GAAE,MAAU,UAqBlG;AAED;;;;GAIG;AACH,wBAAsB,6BAA6B,CAAC,aAAa,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAE1F;AAED,wBAAgB,iBAAiB,CAC/B,QAAQ,EAAE,MAAM,EAChB,gBAAgB,EAAE,MAAM,EACxB,YAAY,EAAE,MAAM,EACpB,YAAY,CAAC,EAAE,MAAM,GACpB,UAAU,GAAG,aAAa,CAK5B;AAED,wBAAsB,qBAAqB,CAAC,KAAK,EAAE,oBAAoB;;;GAuEtE;AAED,wBAAsB,yBAAyB,CAAC,OAAO,CAAC,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,MAAM;;;GAoB9E;AAED,wBAAsB,iBAAiB,CAAC,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,OAAO,iBAGtE;AAED,wBAAgB,qBAAqB,CAAC,GAAG,EAAE,KAAK,EAAE,SAAS,EAAE,gBAAgB,EAAE,QAsB9E;AAED,wBAAgB,cAAc,CAAC,GAAG,EAAE,KAAK,EAAE,QAAQ,EAAE,OAAO,GAAG,SAAS,EAAE,GAAG,EAAE,OAAO,QAIrF;AAED;;;;;;;;;;;GAWG;AACH,wBAAsB,qBAAqB,CACzC,MAAM,EAAE,MAAM,EACd,YAAY,EAAE,MAAM,EACpB,QAAQ,EAAE,MAAM,EAChB,aAAa,EAAE,MAAM,EACrB,SAAS,EAAE,MAAM,EACjB,cAAc,EAAE,MAAM,GACrB,OAAO,CAAC,MAAM,CAAC,CASjB;AAED,yGAAyG;AACzG,wBAAsB,mBAAmB,CACvC,UAAU,EAAE,iBAAiB,EAAE,EAC/B,OAAO,EAAE;IAAE,MAAM,EAAE,MAAM,CAAC;IAAC,QAAQ,EAAE,MAAM,CAAC;IAAC,OAAO,CAAC,EAAE,MAAM,CAAA;CAAE,GAC9D,OAAO,CAAC,IAAI,CAAC,CAuBf;AAED,8EAA8E;AAC9E,wBAAsB,sBAAsB,CAC1C,MAAM,EAAE,MAAM,EACd,YAAY,EAAE,MAAM,EACpB,QAAQ,EAAE,MAAM,EAChB,aAAa,EAAE,MAAM,GACpB,OAAO,CAAC,MAAM,CAAC,CAQjB;AAED,kGAAkG;AAClG,wBAAsB,oBAAoB,CACxC,UAAU,EAAE,iBAAiB,EAAE,EAC/B,OAAO,EAAE;IAAE,MAAM,EAAE,MAAM,CAAC;IAAC,QAAQ,EAAE,MAAM,CAAA;CAAE,GAC5C,OAAO,CAAC,IAAI,CAAC,CAsCf"}
+{"version":3,"file":"shared.d.ts","sourceRoot":"","sources":["../../../src/cmds/validator_keys/shared.ts"],"names":[],"mappings":"AAKA,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,+BAA+B,CAAC;AAChE,OAAO,KAAK,EAAE,KAAK,EAAE,MAAM,uBAAuB,CAAC;AACnD,OAAO,KAAK,EAAE,UAAU,EAAE,aAAa,EAAE,iBAAiB,EAAE,MAAM,4BAA4B,CAAC;AAC/F,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,6BAA6B,CAAC;AA2DhE,MAAM,MAAM,gBAAgB,GAAG;IAAE,WAAW,CAAC,EAAE,MAAM,CAAC;IAAC,WAAW,CAAC,EAAE,MAAM,CAAC;IAAC,YAAY,CAAC,EAAE,MAAM,EAAE,CAAA;CAAE,CAAC;AAEvG,MAAM,MAAM,oBAAoB,GAAG;IACjC,cAAc,EAAE,MAAM,CAAC;IACvB,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,UAAU,CAAC,EAAE,MAAM,EAAE,CAAC;IACtB,YAAY,EAAE,MAAM,CAAC;IACrB,gBAAgB,EAAE,MAAM,CAAC;IACzB,QAAQ,EAAE,MAAM,CAAC;IACjB,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,YAAY,EAAE,YAAY,CAAC;IAC3B,QAAQ,CAAC,EAAE,UAAU,CAAC;IACtB,YAAY,CAAC,EAAE,MAAM,CAAC;CACvB,CAAC;AAEF,wBAAgB,kBAAkB,CAAC,IAAI,EAAE,MAAM,EAAE,YAAY,GAAE,MAAU,EAAE,YAAY,GAAE,MAAU,UAqBlG;AAED;;;;GAIG;AACH,wBAAsB,6BAA6B,CAAC,aAAa,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAE1F;AAED,wBAAgB,iBAAiB,CAC/B,QAAQ,EAAE,MAAM,EAChB,gBAAgB,EAAE,MAAM,EACxB,YAAY,EAAE,MAAM,EACpB,YAAY,CAAC,EAAE,MAAM,GACpB,UAAU,GAAG,aAAa,CAK5B;AAED,wBAAsB,qBAAqB,CAAC,KAAK,EAAE,oBAAoB;;;GAuEtE;AAED,wBAAsB,yBAAyB,CAAC,OAAO,CAAC,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,MAAM;;;GAoB9E;AAED,wBAAsB,iBAAiB,CAAC,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,OAAO,iBAGtE;AAED,wBAAgB,qBAAqB,CAAC,GAAG,EAAE,KAAK,EAAE,SAAS,EAAE,gBAAgB,EAAE,QAsB9E;AAED,wBAAgB,cAAc,CAAC,GAAG,EAAE,KAAK,EAAE,QAAQ,EAAE,OAAO,GAAG,SAAS,EAAE,GAAG,EAAE,OAAO,QAIrF;AAED;;;;;;;;;;;GAWG;AACH,wBAAsB,qBAAqB,CACzC,MAAM,EAAE,MAAM,EACd,YAAY,EAAE,MAAM,EACpB,QAAQ,EAAE,MAAM,EAChB,aAAa,EAAE,MAAM,EACrB,SAAS,EAAE,MAAM,EACjB,cAAc,EAAE,MAAM,GACrB,OAAO,CAAC,MAAM,CAAC,CASjB;AAED,yGAAyG;AACzG,wBAAsB,mBAAmB,CACvC,UAAU,EAAE,iBAAiB,EAAE,EAC/B,OAAO,EAAE;IAAE,MAAM,EAAE,MAAM,CAAC;IAAC,QAAQ,EAAE,MAAM,CAAC;IAAC,OAAO,CAAC,EAAE,MAAM,CAAA;CAAE,GAC9D,OAAO,CAAC,IAAI,CAAC,CAwBf;AAED,8EAA8E;AAC9E,wBAAsB,sBAAsB,CAC1C,MAAM,EAAE,MAAM,EACd,YAAY,EAAE,MAAM,EACpB,QAAQ,EAAE,MAAM,EAChB,aAAa,EAAE,MAAM,GACpB,OAAO,CAAC,MAAM,CAAC,CAOjB;AAED,kGAAkG;AAClG,wBAAsB,oBAAoB,CACxC,UAAU,EAAE,iBAAiB,EAAE,EAC/B,OAAO,EAAE;IAAE,MAAM,EAAE,MAAM,CAAC;IAAC,QAAQ,EAAE,MAAM,CAAA;CAAE,GAC5C,OAAO,CAAC,IAAI,CAAC,CAyCf"}

package/dest/cmds/validator_keys/shared.js

@@ -1,14 +1,58 @@
 import { prettyPrintJSON } from '@aztec/cli/utils';
+import { asyncPool } from '@aztec/foundation/async-pool';
 import { deriveBlsPrivateKey } from '@aztec/foundation/crypto/bls';
 import { createBn254Keystore } from '@aztec/foundation/crypto/bls/bn254_keystore';
 import { computeBn254G1PublicKeyCompressed } from '@aztec/foundation/crypto/bn254';
 import { Wallet } from '@ethersproject/wallet';
 import { constants as fsConstants, mkdirSync } from 'fs';
 import { access, writeFile } from 'fs/promises';
-import { homedir } from 'os';
+import { availableParallelism, homedir } from 'os';
 import { dirname, isAbsolute, join } from 'path';
 import { mnemonicToAccount } from 'viem/accounts';
+import { Worker } from 'worker_threads';
 import { defaultBlsPath } from './utils.js';
+// ethers' default scrypt parameters use substantial memory, so keep worker fan-out bounded.
+const maxEthKeystoreWorkers = Math.max(1, Math.min(4, availableParallelism()));
+function deserializeWorkerError(error) {
+    const result = new Error(error.message);
+    result.name = error.name ?? result.name;
+    result.stack = error.stack;
+    return result;
+}
+function encryptEthJsonV3InWorker(privateKeyHex, password) {
+    return new Promise((resolve, reject)=>{
+        const worker = new Worker(new URL('./eth_json_v3_worker.js', import.meta.url), {
+            workerData: {
+                privateKeyHex,
+                password
+            }
+        });
+        let settled = false;
+        worker.once('message', (result)=>{
+            settled = true;
+            if ('json' in result) {
+                resolve(result.json);
+            } else {
+                reject(deserializeWorkerError(result.error));
+            }
+        });
+        worker.once('error', (error)=>{
+            settled = true;
+            reject(error);
+        });
+        worker.once('exit', (code)=>{
+            if (!settled) {
+                reject(new Error(`ETH JSON V3 worker stopped with exit code ${code}`));
+            }
+        });
+    });
+}
+async function encryptEthJsonV3(privateKeyHex, password) {
+    if (process.env.JEST_WORKER_ID !== undefined) {
+        return await new Wallet(privateKeyHex).encrypt(password);
+    }
+    return await encryptEthJsonV3InWorker(privateKeyHex, password);
+}
 export function withValidatorIndex(path, accountIndex = 0, addressIndex = 0) {
     // NOTE: The legacy BLS CLI is to allow users who generated keys in 2.1.4 to be able to use the same command
     // to re-generate their keys. In 2.1.5 we switched how we append addresses to the path so this is to maintain backwards compatibility.
@@ -188,7 +232,7 @@ export function maybePrintJson(log, jsonFlag, obj) {
     mkdirSync(outDir, {
         recursive: true
     });
-    const keystore = createBn254Keystore(password, privateKeyHex, pubkeyHex, derivationPath);
+    const keystore = await createBn254Keystore(password, privateKeyHex, pubkeyHex, derivationPath);
     const safeBase = fileNameBase.replace(/[^a-zA-Z0-9_-]/g, '_');
     const outPath = join(outDir, `keystore-${safeBase}.json`);
     await writeFile(outPath, JSON.stringify(keystore, null, 2), {
@@ -197,16 +241,15 @@ export function maybePrintJson(log, jsonFlag, obj) {
     return outPath;
 }
 /** Replace plaintext BLS keys in validators with { path, password } pointing to BN254 keystore files. */ export async function writeBlsBn254ToFile(validators, options) {
-    for(let i = 0; i < validators.length; i++){
-        const v = validators[i];
+    await Promise.all(validators.map(async (v, i)=>{
         if (!v || typeof v !== 'object' || !('attester' in v)) {
-            continue;
+            return;
         }
         const att = v.attester;
         // Shapes: { bls: <hex> } or { eth: <ethAccount>, bls?: <hex> } or plain EthAccount
         const blsKey = typeof att === 'object' && 'bls' in att ? att.bls : undefined;
         if (!blsKey || typeof blsKey !== 'string') {
-            continue;
+            return;
         }
         const pub = await computeBlsPublicKeyCompressed(blsKey);
         const path = options.blsPath ?? defaultBlsPath;
@@ -218,15 +261,14 @@ export function maybePrintJson(log, jsonFlag, obj) {
                 password: options.password
             };
         }
-    }
+    }));
 }
 /** Writes an Ethereum JSON V3 keystore using ethers, returns absolute path */ export async function writeEthJsonV3Keystore(outDir, fileNameBase, password, privateKeyHex) {
     const safeBase = fileNameBase.replace(/[^a-zA-Z0-9_-]/g, '_');
     mkdirSync(outDir, {
         recursive: true
     });
-    const wallet = new Wallet(privateKeyHex);
-    const json = await wallet.encrypt(password);
+    const json = await encryptEthJsonV3(privateKeyHex, password);
     const outPath = join(outDir, `keystore-eth-${safeBase}.json`);
     await writeFile(outPath, json, {
         encoding: 'utf-8'
@@ -234,16 +276,18 @@ export function maybePrintJson(log, jsonFlag, obj) {
     return outPath;
 }
 /** Replace plaintext ETH keys in validators with { path, password } pointing to JSON V3 files. */ export async function writeEthJsonV3ToFile(validators, options) {
-    const maybeEncryptEth = async (account, label)=>{
+    const tasks = [];
+    const maybeQueueEncryptEth = (account, label, setEncryptedAccount)=>{
         if (typeof account === 'string' && account.startsWith('0x') && account.length === 66) {
-            const fileBase = `${label}_${account.slice(2, 10)}`;
-            const p = await writeEthJsonV3Keystore(options.outDir, fileBase, options.password, account);
-            return {
-                path: p,
-                password: options.password
-            };
+            tasks.push(async ()=>{
+                const fileBase = `${label}_${account.slice(2, 10)}`;
+                const path = await writeEthJsonV3Keystore(options.outDir, fileBase, options.password, account);
+                setEncryptedAccount({
+                    path,
+                    password: options.password
+                });
+            });
         }
-        return account;
     };
     for(let i = 0; i < validators.length; i++){
         const v = validators[i];
@@ -253,22 +297,21 @@ export function maybePrintJson(log, jsonFlag, obj) {
         // attester may be string (eth), object with eth, or remote signer
         const att = v.attester;
         if (typeof att === 'string') {
-            v.attester = await maybeEncryptEth(att, `attester_${i + 1}`);
+            maybeQueueEncryptEth(att, `attester_${i + 1}`, (account)=>v.attester = account);
         } else if (att && typeof att === 'object' && 'eth' in att) {
-            att.eth = await maybeEncryptEth(att.eth, `attester_${i + 1}`);
+            maybeQueueEncryptEth(att.eth, `attester_${i + 1}`, (account)=>att.eth = account);
         }
         // publisher can be single or array
         if ('publisher' in v) {
             const pub = v.publisher;
             if (Array.isArray(pub)) {
-                const out = [];
                 for(let j = 0; j < pub.length; j++){
-                    out.push(await maybeEncryptEth(pub[j], `publisher_${i + 1}_${j + 1}`));
+                    maybeQueueEncryptEth(pub[j], `publisher_${i + 1}_${j + 1}`, (account)=>pub[j] = account);
                 }
-                v.publisher = out;
             } else if (pub !== undefined) {
-                v.publisher = await maybeEncryptEth(pub, `publisher_${i + 1}`);
+                maybeQueueEncryptEth(pub, `publisher_${i + 1}`, (account)=>v.publisher = account);
             }
         }
     }
+    await asyncPool(maxEthKeystoreWorkers, tasks, (task)=>task());
 }

package/dest/config/chain_l2_config.d.ts

@@ -1,4 +1,7 @@
 import type { NetworkNames } from '@aztec/foundation/config';
+import { type ConsensusEnvVar } from '@aztec/stdlib/config';
+/** Every generated network config must define every consensus-critical env var. */
+export type ConsensusComplete = Record<ConsensusEnvVar, string | number | boolean>;
 /**
  * Sets up environment for the given network.
  *
@@ -6,9 +9,11 @@ import type { NetworkNames } from '@aztec/foundation/config';
  * and DefaultSlasherConfig (which match the 'defaults' section of defaults.yml).
  *
  * For deployed networks: applies network configuration from generated defaults.yml,
- * merging base defaults with network-specific overrides.
+ * merging base defaults with network-specific overrides. Before merging, enforces that operators have not
+ * overridden any consensus-critical env var with a value diverging from the network config (throwing unless
+ * ALLOW_OVERRIDING_NETWORK_CONFIG is set), so all nodes of a network agree on consensus-critical values.
  *
  * @param networkName - The network name
  */
 export declare function enrichEnvironmentWithChainName(networkName: NetworkNames): void;
-//# sourceMappingURL=data:application/json;base64,eyJ2ZXJzaW9uIjozLCJmaWxlIjoiY2hhaW5fbDJfY29uZmlnLmQudHMiLCJzb3VyY2VSb290IjoiIiwic291cmNlcyI6WyIuLi8uLi9zcmMvY29uZmlnL2NoYWluX2wyX2NvbmZpZy50cyJdLCJuYW1lcyI6W10sIm1hcHBpbmdzIjoiQUFBQSxPQUFPLEtBQUssRUFBRSxZQUFZLEVBQUUsTUFBTSwwQkFBMEIsQ0FBQztBQTBCN0Q7Ozs7Ozs7Ozs7R0FVRztBQUNILHdCQUFnQiw4QkFBOEIsQ0FBQyxXQUFXLEVBQUUsWUFBWSxRQXFCdkUifQ==
+//# sourceMappingURL=data:application/json;base64,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

package/dest/config/chain_l2_config.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"chain_l2_config.d.ts","sourceRoot":"","sources":["../../src/config/chain_l2_config.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,0BAA0B,CAAC;AA0B7D;;;;;;;;;;GAUG;AACH,wBAAgB,8BAA8B,CAAC,WAAW,EAAE,YAAY,QAqBvE"}
+{"version":3,"file":"chain_l2_config.d.ts","sourceRoot":"","sources":["../../src/config/chain_l2_config.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,0BAA0B,CAAC;AAE7D,OAAO,EAAE,KAAK,eAAe,EAA8B,MAAM,sBAAsB,CAAC;AAcxF,mFAAmF;AACnF,MAAM,MAAM,iBAAiB,GAAG,MAAM,CAAC,eAAe,EAAE,MAAM,GAAG,MAAM,GAAG,OAAO,CAAC,CAAC;AAiBnF;;;;;;;;;;;;GAYG;AACH,wBAAgB,8BAA8B,CAAC,WAAW,EAAE,YAAY,QAwBvE"}

package/dest/config/chain_l2_config.js

@@ -1,3 +1,5 @@
+import { createLogger } from '@aztec/foundation/log';
+import { checkConsensusEnvOverrides } from '@aztec/stdlib/config';
 import path from 'path';
 import { devnetConfig, mainnetConfig, testnetConfig } from './generated/networks.js';
 const NetworkConfigs = {
@@ -5,6 +7,12 @@ const NetworkConfigs = {
     testnet: testnetConfig,
     mainnet: mainnetConfig
 };
+({
+    devnetConfig,
+    testnetConfig,
+    mainnetConfig
+});
+const log = createLogger('cli:chain_l2_config');
 function enrichEnvironmentWithNetworkConfig(config) {
     for (const [key, value] of Object.entries(config)){
         if (process.env[key] === undefined && value !== undefined) {
@@ -22,7 +30,9 @@ function getDefaultDataDir(networkName) {
  * and DefaultSlasherConfig (which match the 'defaults' section of defaults.yml).
  *
  * For deployed networks: applies network configuration from generated defaults.yml,
- * merging base defaults with network-specific overrides.
+ * merging base defaults with network-specific overrides. Before merging, enforces that operators have not
+ * overridden any consensus-critical env var with a value diverging from the network config (throwing unless
+ * ALLOW_OVERRIDING_NETWORK_CONFIG is set), so all nodes of a network agree on consensus-critical values.
  *
  * @param networkName - The network name
  */ export function enrichEnvironmentWithChainName(networkName) {
@@ -38,6 +48,9 @@ function getDefaultDataDir(networkName) {
     const configKey = /^v\d+-devnet-\d+$/.test(networkName) ? 'devnet' : networkName;
     const generatedConfig = NetworkConfigs[configKey];
     if (generatedConfig) {
+        // The check is pure; this layer owns env mutation, so apply its canonical writes before enriching.
+        const canonical = checkConsensusEnvOverrides(generatedConfig, process.env, (msg)=>log.warn(msg));
+        Object.assign(process.env, canonical);
         enrichEnvironmentWithNetworkConfig(generatedConfig);
     }
     // Set DATA_DIRECTORY if not already set

package/dest/config/generated/networks.d.ts

@@ -1,17 +1,15 @@
 export declare const devnetConfig: {
     readonly ETHEREUM_SLOT_DURATION: 12;
-    readonly AZTEC_SLOT_DURATION: 72;
-    readonly AZTEC_TARGET_COMMITTEE_SIZE: 48;
     readonly AZTEC_ACTIVATION_THRESHOLD: 100000000000000000000;
     readonly AZTEC_EJECTION_THRESHOLD: 50000000000000000000;
     readonly AZTEC_LOCAL_EJECTION_THRESHOLD: 98000000000000000000;
     readonly AZTEC_EXIT_DELAY_SECONDS: 172800;
-    readonly AZTEC_INBOX_LAG: 1;
+    readonly AZTEC_INBOX_LAG: 2;
     readonly AZTEC_PROOF_SUBMISSION_EPOCHS: 1;
     readonly AZTEC_MANA_TARGET: 100000000;
     readonly AZTEC_PROVING_COST_PER_MANA: 100;
     readonly AZTEC_INITIAL_ETH_PER_FEE_ASSET: 10000000;
-    readonly AZTEC_SLASHER_FLAVOR: "tally";
+    readonly AZTEC_SLASHER_ENABLED: true;
     readonly AZTEC_SLASHING_ROUND_SIZE_IN_EPOCHS: 4;
     readonly AZTEC_SLASHING_LIFETIME_IN_ROUNDS: 5;
     readonly AZTEC_SLASHING_OFFSET_IN_ROUNDS: 2;
@@ -21,17 +19,21 @@ export declare const devnetConfig: {
     readonly AZTEC_SLASH_AMOUNT_MEDIUM: 20000000000000000000;
     readonly AZTEC_SLASH_AMOUNT_LARGE: 50000000000000000000;
     readonly AZTEC_GOVERNANCE_PROPOSER_ROUND_SIZE: 300;
-    readonly SLASH_MIN_PENALTY_PERCENTAGE: 0.5;
-    readonly SLASH_MAX_PENALTY_PERCENTAGE: 2;
+    readonly AZTEC_ENTRY_QUEUE_BOOTSTRAP_VALIDATOR_SET_SIZE: 0;
+    readonly AZTEC_ENTRY_QUEUE_BOOTSTRAP_FLUSH_SIZE: 0;
+    readonly AZTEC_ENTRY_QUEUE_FLUSH_SIZE_MIN: 48;
+    readonly AZTEC_ENTRY_QUEUE_FLUSH_SIZE_QUOTIENT: 2;
+    readonly AZTEC_ENTRY_QUEUE_MAX_FLUSH_SIZE: 48;
     readonly SLASH_OFFENSE_EXPIRATION_ROUNDS: 4;
     readonly SLASH_MAX_PAYLOAD_SIZE: 80;
     readonly SLASH_EXECUTE_ROUNDS_LOOK_BACK: 4;
+    readonly SLASH_DATA_WITHHOLDING_TOLERANCE_SLOTS: 3;
     readonly P2P_ENABLED: true;
     readonly BOOTSTRAP_NODES: "";
     readonly SEQ_MIN_TX_PER_BLOCK: 1;
     readonly SEQ_BUILD_CHECKPOINT_IF_EMPTY: true;
     readonly SEQ_BLOCK_DURATION_MS: 6000;
-    readonly SEQ_L1_PUBLISHING_TIME_ALLOWANCE_IN_SLOT: 36;
+    readonly CHECKPOINT_PROPOSAL_SYNC_GRACE_SECONDS: 12;
     readonly DATA_STORE_MAP_SIZE_KB: 134217728;
     readonly ARCHIVER_STORE_MAP_SIZE_KB: 1073741824;
     readonly NOTE_HASH_TREE_MAP_SIZE_KB: 1073741824;
@@ -39,10 +41,16 @@ export declare const devnetConfig: {
     readonly PUBLIC_DATA_TREE_MAP_SIZE_KB: 1073741824;
     readonly PUBLIC_OTEL_INCLUDE_METRICS: "aztec.validator,aztec.tx_collector,aztec.mempool,aztec.p2p.gossip.agg_,aztec.ivc_verifier.agg_";
     readonly SENTINEL_ENABLED: true;
+    readonly OFFENSE_COLLECTION_ENABLED: true;
+    readonly AZTEC_SLOT_DURATION: 36;
     readonly AZTEC_EPOCH_DURATION: 8;
     readonly AZTEC_LAG_IN_EPOCHS_FOR_VALIDATOR_SET: 1;
     readonly AZTEC_LAG_IN_EPOCHS_FOR_RANDAO: 1;
+    readonly AZTEC_TARGET_COMMITTEE_SIZE: 1;
+    readonly MAX_BLOCKS_PER_CHECKPOINT: 4;
     readonly AZTEC_SLASHING_EXECUTION_DELAY_IN_ROUNDS: 1;
+    readonly AZTEC_SLASHING_QUORUM: 17;
+    readonly AZTEC_GOVERNANCE_PROPOSER_QUORUM: 151;
     readonly L1_CHAIN_ID: 11155111;
     readonly TEST_ACCOUNTS: true;
     readonly SPONSORED_FPC: true;
@@ -58,7 +66,6 @@ export declare const devnetConfig: {
     readonly PUBLIC_OTEL_OPT_OUT: true;
     readonly PUBLIC_OTEL_EXPORTER_OTLP_METRICS_ENDPOINT: "";
     readonly PUBLIC_OTEL_COLLECT_FROM: "";
-    readonly SLASH_PRUNE_PENALTY: 10000000000000000000;
     readonly SLASH_DATA_WITHHOLDING_PENALTY: 10000000000000000000;
     readonly SLASH_INACTIVITY_TARGET_PERCENTAGE: 0.9;
     readonly SLASH_INACTIVITY_CONSECUTIVE_EPOCH_THRESHOLD: 1;
@@ -66,11 +73,13 @@ export declare const devnetConfig: {
     readonly SLASH_PROPOSE_INVALID_ATTESTATIONS_PENALTY: 10000000000000000000;
     readonly SLASH_DUPLICATE_PROPOSAL_PENALTY: 10000000000000000000;
     readonly SLASH_DUPLICATE_ATTESTATION_PENALTY: 10000000000000000000;
-    readonly SLASH_ATTEST_DESCENDANT_OF_INVALID_PENALTY: 10000000000000000000;
+    readonly SLASH_PROPOSE_DESCENDANT_OF_CHECKPOINT_WITH_INVALID_ATTESTATIONS_PENALTY: 10000000000000000000;
+    readonly SLASH_ATTEST_INVALID_CHECKPOINT_PROPOSAL_PENALTY: 10000000000000000000;
     readonly SLASH_UNKNOWN_PENALTY: 10000000000000000000;
     readonly SLASH_INVALID_BLOCK_PENALTY: 10000000000000000000;
+    readonly SLASH_INVALID_CHECKPOINT_PROPOSAL_PENALTY: 0;
     readonly SLASH_GRACE_PERIOD_L2_SLOTS: 0;
-    readonly ENABLE_VERSION_CHECK: true;
+    readonly ENABLE_AUTO_SHUTDOWN: false;
 };
 export declare const testnetConfig: {
     readonly ETHEREUM_SLOT_DURATION: 12;
@@ -79,25 +88,30 @@ export declare const testnetConfig: {
     readonly AZTEC_LAG_IN_EPOCHS_FOR_VALIDATOR_SET: 2;
     readonly AZTEC_LAG_IN_EPOCHS_FOR_RANDAO: 2;
     readonly AZTEC_EXIT_DELAY_SECONDS: 172800;
-    readonly AZTEC_INBOX_LAG: 1;
+    readonly AZTEC_INBOX_LAG: 2;
     readonly AZTEC_PROOF_SUBMISSION_EPOCHS: 1;
     readonly AZTEC_INITIAL_ETH_PER_FEE_ASSET: 10000000;
-    readonly AZTEC_SLASHER_FLAVOR: "tally";
+    readonly AZTEC_SLASHER_ENABLED: true;
     readonly AZTEC_SLASHING_ROUND_SIZE_IN_EPOCHS: 4;
     readonly AZTEC_SLASHING_LIFETIME_IN_ROUNDS: 5;
     readonly AZTEC_SLASHING_OFFSET_IN_ROUNDS: 2;
     readonly AZTEC_SLASHING_DISABLE_DURATION: 432000;
-    readonly SLASH_MIN_PENALTY_PERCENTAGE: 0.5;
-    readonly SLASH_MAX_PENALTY_PERCENTAGE: 2;
+    readonly AZTEC_ENTRY_QUEUE_BOOTSTRAP_VALIDATOR_SET_SIZE: 0;
+    readonly AZTEC_ENTRY_QUEUE_BOOTSTRAP_FLUSH_SIZE: 0;
+    readonly AZTEC_ENTRY_QUEUE_FLUSH_SIZE_MIN: 48;
+    readonly AZTEC_ENTRY_QUEUE_FLUSH_SIZE_QUOTIENT: 2;
+    readonly AZTEC_ENTRY_QUEUE_MAX_FLUSH_SIZE: 48;
     readonly SLASH_OFFENSE_EXPIRATION_ROUNDS: 4;
     readonly SLASH_MAX_PAYLOAD_SIZE: 80;
     readonly SLASH_EXECUTE_ROUNDS_LOOK_BACK: 4;
+    readonly SLASH_DATA_WITHHOLDING_TOLERANCE_SLOTS: 3;
     readonly P2P_ENABLED: true;
     readonly BOOTSTRAP_NODES: "";
     readonly SEQ_MIN_TX_PER_BLOCK: 1;
     readonly SEQ_BUILD_CHECKPOINT_IF_EMPTY: true;
     readonly SEQ_BLOCK_DURATION_MS: 6000;
-    readonly SEQ_L1_PUBLISHING_TIME_ALLOWANCE_IN_SLOT: 36;
+    readonly MAX_BLOCKS_PER_CHECKPOINT: 10;
+    readonly CHECKPOINT_PROPOSAL_SYNC_GRACE_SECONDS: 12;
     readonly DATA_STORE_MAP_SIZE_KB: 134217728;
     readonly ARCHIVER_STORE_MAP_SIZE_KB: 1073741824;
     readonly NOTE_HASH_TREE_MAP_SIZE_KB: 1073741824;
@@ -105,6 +119,7 @@ export declare const testnetConfig: {
     readonly PUBLIC_DATA_TREE_MAP_SIZE_KB: 1073741824;
     readonly PUBLIC_OTEL_INCLUDE_METRICS: "aztec.validator,aztec.tx_collector,aztec.mempool,aztec.p2p.gossip.agg_,aztec.ivc_verifier.agg_";
     readonly SENTINEL_ENABLED: true;
+    readonly OFFENSE_COLLECTION_ENABLED: true;
     readonly AZTEC_SLOT_DURATION: 72;
     readonly AZTEC_ACTIVATION_THRESHOLD: 2e+23;
     readonly AZTEC_EJECTION_THRESHOLD: 1e+23;
@@ -115,10 +130,10 @@ export declare const testnetConfig: {
     readonly AZTEC_GOVERNANCE_PROPOSER_ROUND_SIZE: 100;
     readonly AZTEC_GOVERNANCE_PROPOSER_QUORUM: 60;
     readonly AZTEC_MANA_TARGET: 75000000;
-    readonly AZTEC_PROVING_COST_PER_MANA: 25000000;
+    readonly AZTEC_PROVING_COST_PER_MANA: 12500000;
     readonly AZTEC_SLASH_AMOUNT_SMALL: 1e+23;
-    readonly AZTEC_SLASH_AMOUNT_MEDIUM: 1e+23;
-    readonly AZTEC_SLASH_AMOUNT_LARGE: 1e+23;
+    readonly AZTEC_SLASH_AMOUNT_MEDIUM: 2.5e+23;
+    readonly AZTEC_SLASH_AMOUNT_LARGE: 2.5e+23;
     readonly L1_CHAIN_ID: 11155111;
     readonly TEST_ACCOUNTS: false;
     readonly SPONSORED_FPC: false;
@@ -127,19 +142,20 @@ export declare const testnetConfig: {
     readonly PROVER_REAL_PROOFS: true;
     readonly P2P_MAX_PENDING_TX_COUNT: 1000;
     readonly P2P_TX_POOL_DELETE_TXS_AFTER_REORG: true;
-    readonly SLASH_PRUNE_PENALTY: 10000000000000000000;
-    readonly SLASH_DATA_WITHHOLDING_PENALTY: 10000000000000000000;
+    readonly SLASH_DATA_WITHHOLDING_PENALTY: 0;
     readonly SLASH_INACTIVITY_TARGET_PERCENTAGE: 0.9;
     readonly SLASH_INACTIVITY_CONSECUTIVE_EPOCH_THRESHOLD: 1;
-    readonly SLASH_INACTIVITY_PENALTY: 10000000000000000000;
-    readonly SLASH_PROPOSE_INVALID_ATTESTATIONS_PENALTY: 10000000000000000000;
-    readonly SLASH_DUPLICATE_PROPOSAL_PENALTY: 10000000000000000000;
-    readonly SLASH_DUPLICATE_ATTESTATION_PENALTY: 10000000000000000000;
-    readonly SLASH_ATTEST_DESCENDANT_OF_INVALID_PENALTY: 10000000000000000000;
-    readonly SLASH_UNKNOWN_PENALTY: 10000000000000000000;
-    readonly SLASH_INVALID_BLOCK_PENALTY: 10000000000000000000;
+    readonly SLASH_INACTIVITY_PENALTY: 1e+23;
+    readonly SLASH_PROPOSE_INVALID_ATTESTATIONS_PENALTY: 1e+23;
+    readonly SLASH_DUPLICATE_PROPOSAL_PENALTY: 2.5e+23;
+    readonly SLASH_DUPLICATE_ATTESTATION_PENALTY: 2.5e+23;
+    readonly SLASH_PROPOSE_DESCENDANT_OF_CHECKPOINT_WITH_INVALID_ATTESTATIONS_PENALTY: 0;
+    readonly SLASH_ATTEST_INVALID_CHECKPOINT_PROPOSAL_PENALTY: 0;
+    readonly SLASH_UNKNOWN_PENALTY: 1e+23;
+    readonly SLASH_INVALID_BLOCK_PENALTY: 1e+23;
+    readonly SLASH_INVALID_CHECKPOINT_PROPOSAL_PENALTY: 1e+23;
     readonly SLASH_GRACE_PERIOD_L2_SLOTS: 64;
-    readonly ENABLE_VERSION_CHECK: true;
+    readonly ENABLE_AUTO_SHUTDOWN: false;
 };
 export declare const mainnetConfig: {
     readonly ETHEREUM_SLOT_DURATION: 12;
@@ -147,23 +163,23 @@ export declare const mainnetConfig: {
     readonly AZTEC_TARGET_COMMITTEE_SIZE: 48;
     readonly AZTEC_LAG_IN_EPOCHS_FOR_VALIDATOR_SET: 2;
     readonly AZTEC_LAG_IN_EPOCHS_FOR_RANDAO: 2;
-    readonly AZTEC_INBOX_LAG: 1;
+    readonly AZTEC_INBOX_LAG: 2;
     readonly AZTEC_PROOF_SUBMISSION_EPOCHS: 1;
     readonly AZTEC_INITIAL_ETH_PER_FEE_ASSET: 10000000;
-    readonly AZTEC_SLASHER_FLAVOR: "tally";
+    readonly AZTEC_SLASHER_ENABLED: true;
     readonly AZTEC_SLASHING_ROUND_SIZE_IN_EPOCHS: 4;
     readonly AZTEC_SLASHING_OFFSET_IN_ROUNDS: 2;
-    readonly SLASH_MIN_PENALTY_PERCENTAGE: 0.5;
-    readonly SLASH_MAX_PENALTY_PERCENTAGE: 2;
     readonly SLASH_OFFENSE_EXPIRATION_ROUNDS: 4;
     readonly SLASH_MAX_PAYLOAD_SIZE: 80;
     readonly SLASH_EXECUTE_ROUNDS_LOOK_BACK: 4;
+    readonly SLASH_DATA_WITHHOLDING_TOLERANCE_SLOTS: 3;
     readonly P2P_ENABLED: true;
     readonly BOOTSTRAP_NODES: "";
     readonly SEQ_MIN_TX_PER_BLOCK: 1;
     readonly SEQ_BUILD_CHECKPOINT_IF_EMPTY: true;
     readonly SEQ_BLOCK_DURATION_MS: 6000;
-    readonly SEQ_L1_PUBLISHING_TIME_ALLOWANCE_IN_SLOT: 36;
+    readonly MAX_BLOCKS_PER_CHECKPOINT: 10;
+    readonly CHECKPOINT_PROPOSAL_SYNC_GRACE_SECONDS: 12;
     readonly DATA_STORE_MAP_SIZE_KB: 134217728;
     readonly ARCHIVER_STORE_MAP_SIZE_KB: 1073741824;
     readonly NOTE_HASH_TREE_MAP_SIZE_KB: 1073741824;
@@ -171,13 +187,14 @@ export declare const mainnetConfig: {
     readonly PUBLIC_DATA_TREE_MAP_SIZE_KB: 1073741824;
     readonly PUBLIC_OTEL_INCLUDE_METRICS: "aztec.validator,aztec.tx_collector,aztec.mempool,aztec.p2p.gossip.agg_,aztec.ivc_verifier.agg_";
     readonly SENTINEL_ENABLED: true;
+    readonly OFFENSE_COLLECTION_ENABLED: true;
     readonly AZTEC_SLOT_DURATION: 72;
     readonly AZTEC_ACTIVATION_THRESHOLD: 2e+23;
     readonly AZTEC_EJECTION_THRESHOLD: 1e+23;
     readonly AZTEC_LOCAL_EJECTION_THRESHOLD: 1.9e+23;
     readonly AZTEC_SLASH_AMOUNT_SMALL: 2e+21;
-    readonly AZTEC_SLASH_AMOUNT_MEDIUM: 2e+21;
-    readonly AZTEC_SLASH_AMOUNT_LARGE: 2e+21;
+    readonly AZTEC_SLASH_AMOUNT_MEDIUM: 5e+21;
+    readonly AZTEC_SLASH_AMOUNT_LARGE: 5e+21;
     readonly AZTEC_SLASHING_LIFETIME_IN_ROUNDS: 34;
     readonly AZTEC_SLASHING_EXECUTION_DELAY_IN_ROUNDS: 28;
     readonly AZTEC_SLASHING_VETOER: "0xBbB4aF368d02827945748b28CD4b2D42e4A37480";
@@ -185,7 +202,7 @@ export declare const mainnetConfig: {
     readonly AZTEC_GOVERNANCE_PROPOSER_QUORUM: 600;
     readonly AZTEC_GOVERNANCE_PROPOSER_ROUND_SIZE: 1000;
     readonly AZTEC_MANA_TARGET: 75000000;
-    readonly AZTEC_PROVING_COST_PER_MANA: 25000000;
+    readonly AZTEC_PROVING_COST_PER_MANA: 12500000;
     readonly AZTEC_EXIT_DELAY_SECONDS: 345600;
     readonly AZTEC_SLASHING_DISABLE_DURATION: 259200;
     readonly AZTEC_ENTRY_QUEUE_BOOTSTRAP_VALIDATOR_SET_SIZE: 500;
@@ -204,18 +221,19 @@ export declare const mainnetConfig: {
     readonly P2P_TX_POOL_DELETE_TXS_AFTER_REORG: true;
     readonly PUBLIC_OTEL_EXPORTER_OTLP_METRICS_ENDPOINT: "";
     readonly PUBLIC_OTEL_COLLECT_FROM: "";
-    readonly ENABLE_VERSION_CHECK: false;
-    readonly SLASH_PRUNE_PENALTY: 0;
+    readonly ENABLE_AUTO_SHUTDOWN: false;
     readonly SLASH_DATA_WITHHOLDING_PENALTY: 0;
     readonly SLASH_INACTIVITY_TARGET_PERCENTAGE: 0.8;
     readonly SLASH_INACTIVITY_CONSECUTIVE_EPOCH_THRESHOLD: 2;
     readonly SLASH_INACTIVITY_PENALTY: 2e+21;
     readonly SLASH_PROPOSE_INVALID_ATTESTATIONS_PENALTY: 2e+21;
-    readonly SLASH_DUPLICATE_PROPOSAL_PENALTY: 2e+21;
-    readonly SLASH_DUPLICATE_ATTESTATION_PENALTY: 2e+21;
-    readonly SLASH_ATTEST_DESCENDANT_OF_INVALID_PENALTY: 2e+21;
+    readonly SLASH_DUPLICATE_PROPOSAL_PENALTY: 5e+21;
+    readonly SLASH_DUPLICATE_ATTESTATION_PENALTY: 5e+21;
+    readonly SLASH_PROPOSE_DESCENDANT_OF_CHECKPOINT_WITH_INVALID_ATTESTATIONS_PENALTY: 0;
+    readonly SLASH_ATTEST_INVALID_CHECKPOINT_PROPOSAL_PENALTY: 0;
     readonly SLASH_UNKNOWN_PENALTY: 2e+21;
     readonly SLASH_INVALID_BLOCK_PENALTY: 2e+21;
-    readonly SLASH_GRACE_PERIOD_L2_SLOTS: 1200;
+    readonly SLASH_INVALID_CHECKPOINT_PROPOSAL_PENALTY: 2e+21;
+    readonly SLASH_GRACE_PERIOD_L2_SLOTS: 8400;
 };
-//# sourceMappingURL=data:application/json;base64,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
+//# sourceMappingURL=data:application/json;base64,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