@aztec/foundation 0.0.1-commit.b655e406 → 0.0.1-commit.b8a057fa

package/dest/config/index.js

@@ -1,5 +1,7 @@
-import { Fq, Fr } from '../fields/fields.js';
+import { Fq, Fr } from '../curves/bn254/field.js';
+import { createConsoleLogger } from '../log/console.js';
 import { getActiveNetworkName } from './network_name.js';
+import { parseBooleanEnv } from './parse-env.js';
 import { SecretValue } from './secret_value.js';
 export { SecretValue, getActiveNetworkName };
 export { NetworkConfigMapSchema, NetworkConfigSchema } from './network_config.js';
@@ -31,8 +33,8 @@ export function isBooleanConfigValue(obj, key) {
             }
         }
     }
-    // Parse the value if needed
-    if (value !== undefined) {
+    // Parse the value if needed. Empty strings are treated as "not set".
+    if (value !== undefined && value !== '') {
         return parseFunc ? parseFunc(value) : value;
     }
     // Return default if no env var found
@@ -41,12 +43,23 @@ export function isBooleanConfigValue(obj, key) {
 export function getConfigFromMappings(configMappings) {
     const config = {};
     for(const key in configMappings){
-        const { env, parseEnv, defaultValue, nested, fallback } = configMappings[key];
-        if (nested) {
-            config[key] = getConfigFromMappings(nested);
-        } else {
-            // Use the shared utility function
+        const { env, parseEnv, defaultValue, fallback, deprecatedFallback } = configMappings[key];
+        try {
             config[key] = getValueFromEnvWithFallback(env, parseEnv, defaultValue, fallback);
+        } catch (e) {
+            throw new Error(`Failed to parse config '${key}' (env: ${env ?? 'none'}): ${e.message}`);
+        }
+        if (deprecatedFallback?.length) {
+            const userLog = createConsoleLogger('[DEPRECATED]');
+            for (const { env: deprecatedEnv, message } of deprecatedFallback){
+                if (process.env[deprecatedEnv]) {
+                    const warningMessage = message ?? `Environment variable ${deprecatedEnv} is deprecated. Please use ${env} instead.`;
+                    userLog(warningMessage, {
+                        deprecatedEnvVar: deprecatedEnv,
+                        newEnvVar: env
+                    });
+                }
+            }
         }
     }
     return config;
@@ -60,23 +73,31 @@ export function getConfigFromMappings(configMappings) {
     return Object.fromEntries(Object.entries(configMappings).filter(([key])=>!keysToFilter.includes(key)));
 }
 /**
- * Generates parseEnv and default values for a numerical config value.
- * @param defaultVal - The default numerical value to use if the environment variable is not set or is invalid
- * @returns Object with parseEnv and default values for a numerical config value
+ * Generates parseEnv and default values for an integer config value.
+ *
+ * The default is used only when the environment variable is unset or empty. A set-but-invalid
+ * value (non-numeric, fractional, or outside the safe-integer range) throws rather than silently
+ * falling back to the default.
+ * @param defaultVal - The default value to use when the environment variable is unset
+ * @returns Object with parseEnv and default values for an integer config value
  */ export function numberConfigHelper(defaultVal) {
     return {
-        parseEnv: (val)=>safeParseNumber(val, defaultVal),
+        parseEnv: (val)=>parseSafeInteger(val),
         defaultValue: defaultVal
     };
 }
 /**
- * Generates parseEnv and default values for a numerical config value.
- * @param defaultVal - The default numerical value to use if the environment variable is not set or is invalid
- * @returns Object with parseEnv and default values for a numerical config value
+ * Generates parseEnv and default values for a floating-point config value.
+ *
+ * The default is used only when the environment variable is unset or empty. A set-but-invalid
+ * value (not a finite number) throws rather than silently falling back to the default.
+ * @param defaultVal - The default value to use when the environment variable is unset
+ * @param validationFn - Optional extra validation applied to the parsed value; should throw on invalid input
+ * @returns Object with parseEnv and default values for a floating-point config value
  */ export function floatConfigHelper(defaultVal, validationFn) {
     return {
         parseEnv: (val)=>{
-            const parsed = safeParseFloat(val, defaultVal);
+            const parsed = parseFiniteNumber(val);
             validationFn?.(parsed);
             return parsed;
         },
@@ -84,14 +105,41 @@ export function getConfigFromMappings(configMappings) {
     };
 }
 /**
- * Generates parseEnv and default values for a numerical config value.
- * @param defaultVal - The default numerical value to use if the environment variable is not set or is invalid
- * @returns Object with parseEnv and default values for a numerical config value
- */ export function bigintConfigHelper(defaultVal) {
+ * Generates parseEnv and default values for a 0-1 percentage config value.
+ *
+ * The default is used only when the environment variable is unset or empty. A set-but-invalid
+ * value (not a finite number, or outside the 0-1 range) throws rather than silently falling back
+ * to the default.
+ * @param defaultVal - The default value to use when the environment variable is unset
+ */ export function percentageConfigHelper(defaultVal) {
+    return {
+        parseEnv: (val)=>{
+            const parsed = parseFiniteNumber(val);
+            if (parsed < 0 || parsed > 1) {
+                throw new TypeError(`Invalid percentage value: ${parsed} should be between 0 and 1`);
+            }
+            return parsed;
+        },
+        defaultValue: defaultVal
+    };
+}
+export function bigintConfigHelper(defaultVal) {
     return {
         parseEnv: (val)=>{
-            if (val === '') {
-                return defaultVal;
+            // Handle scientific notation (e.g. "1e+23", "2E23") which BigInt() doesn't accept directly.
+            // We parse it losslessly using bigint arithmetic instead of going through float64.
+            if (/[eE]/.test(val)) {
+                const match = val.match(/^(-?\d+(?:\.(\d+))?)[eE]([+-]?\d+)$/);
+                if (!match) {
+                    throw new Error(`Cannot convert '${val}' to a BigInt`);
+                }
+                const digits = match[1].replace('.', '');
+                const decimalPlaces = match[2]?.length ?? 0;
+                const exponent = parseInt(match[3], 10) - decimalPlaces;
+                if (exponent < 0) {
+                    throw new Error(`Cannot convert '${val}' to a BigInt: result is not an integer`);
+                }
+                return BigInt(digits) * 10n ** BigInt(exponent);
             }
             return BigInt(val);
         },
@@ -100,26 +148,18 @@ export function getConfigFromMappings(configMappings) {
 }
 /**
  * Generates parseEnv for an optional numerical config value.
+ * Empty strings are already handled by getValueFromEnvWithFallback.
  */ export function optionalNumberConfigHelper() {
     return {
-        parseEnv: (val)=>{
-            if (val !== undefined && val.length > 0) {
-                const parsedValue = parseInt(val);
-                return Number.isSafeInteger(parsedValue) ? parsedValue : undefined;
-            }
-            return undefined;
-        }
+        parseEnv: (val)=>parseSafeInteger(val)
     };
 }
-/** Generates parseEnv for an enum-like config value. */ export function enumConfigHelper(values, defaultValue) {
+export function enumConfigHelper(values, defaultValue) {
     return {
         parseEnv: (val)=>{
-            const sanitizedVal = (val ?? '').trim().toLowerCase();
-            if (values.includes(sanitizedVal)) {
-                return sanitizedVal;
-            }
-            if (!val && defaultValue) {
-                return defaultValue;
+            const sanitizedVal = val.trim().toLowerCase();
+            if (values.some((v)=>v.toLowerCase() === sanitizedVal)) {
+                return values.find((v)=>v.toLowerCase() === sanitizedVal);
             }
             throw new Error(`Invalid config value '${val}' (must be one of ${values.join(', ')})`);
         },
@@ -144,24 +184,16 @@ export function secretValueConfigHelper(parse) {
     return {
         parseEnv: wrap,
         parseVal: wrap,
-        defaultValue: new SecretValue(parse(undefined)),
-        isBoolean: true
+        defaultValue: new SecretValue(parse(undefined))
     };
 }
-/** Parses an env var as boolean. Returns true only if value is 1, true, or TRUE. */ export function parseBooleanEnv(val) {
-    return val !== undefined && [
-        '1',
-        'true',
-        'TRUE'
-    ].includes(val);
-}
+export { parseBooleanEnv } from './parse-env.js';
 export function secretStringConfigHelper(defaultValue) {
     const parse = (val)=>new SecretValue(val);
     return {
         parseEnv: parse,
         parseVal: parse,
-        defaultValue: defaultValue !== undefined ? new SecretValue(defaultValue) : undefined,
-        isBoolean: true
+        defaultValue: defaultValue !== undefined ? new SecretValue(defaultValue) : undefined
     };
 }
 export function secretFrConfigHelper(defaultValue) {
@@ -169,8 +201,7 @@ export function secretFrConfigHelper(defaultValue) {
     return {
         parseEnv: parse,
         parseVal: parse,
-        defaultValue: defaultValue !== undefined ? new SecretValue(defaultValue) : undefined,
-        isBoolean: true
+        defaultValue: defaultValue !== undefined ? new SecretValue(defaultValue) : undefined
     };
 }
 export function secretFqConfigHelper(defaultValue) {
@@ -178,29 +209,37 @@ export function secretFqConfigHelper(defaultValue) {
     return {
         parseEnv: parse,
         parseVal: parse,
-        defaultValue: typeof defaultValue !== 'undefined' ? new SecretValue(defaultValue) : undefined,
-        isBoolean: true
+        defaultValue: defaultValue !== undefined ? new SecretValue(defaultValue) : undefined
     };
 }
 /**
- * Safely parses a number from a string.
- * If the value is not a number or is not a safe integer, the default value is returned.
+ * Parses a string into a safe integer, throwing if the value is numeric but not an integer.
+ *
+ * Unlike `parseInt`, this does not silently truncate decimals: `'0.8'` throws rather than
+ * becoming `0`. A fractional value indicates the caller intended a non-integer where only
+ * integers are supported (use `floatConfigHelper`/`percentageConfigHelper` for those).
  * @param value - The string value to parse
- * @param defaultValue - The default value to return
- * @returns Either parsed value or default value
- */ function safeParseNumber(value, defaultValue) {
-    const parsedValue = parseInt(value, 10);
-    return Number.isSafeInteger(parsedValue) ? parsedValue : defaultValue;
+ * @returns The parsed integer value
+ */ function parseSafeInteger(value) {
+    const parsedValue = parseFloat(value);
+    if (!Number.isSafeInteger(parsedValue)) {
+        throw new Error(`Invalid integer config value '${value}'; expected a whole number`);
+    }
+    return parsedValue;
 }
 /**
- * Safely parses a floating point number from a string.
- * If the value is not a number, the default value is returned.
+ * Parses a string into a finite floating-point number, throwing if the value is not a finite number.
+ *
+ * Invalid input (e.g. `'abc'`, or an overflow to `Infinity`) throws rather than being silently
+ * swallowed, so a misconfigured value fails loudly instead of falling back to the config default.
  * @param value - The string value to parse
- * @param defaultValue - The default value to return
- * @returns Either parsed value or default value
- */ function safeParseFloat(value, defaultValue) {
+ * @returns The parsed number
+ */ function parseFiniteNumber(value) {
     const parsedValue = parseFloat(value);
-    return Number.isNaN(parsedValue) ? defaultValue : parsedValue;
+    if (!Number.isFinite(parsedValue)) {
+        throw new Error(`Invalid number config value '${value}'`);
+    }
+    return parsedValue;
 }
 /**
  * Picks specific keys from the given configuration mappings.

package/dest/config/network_config.d.ts

@@ -1,42 +1,28 @@
 import { z } from 'zod';
 export declare const NetworkConfigSchema: z.ZodObject<{
-    bootnodes: z.ZodArray<z.ZodString, "many">;
-    snapshots: z.ZodArray<z.ZodString, "many">;
+    bootnodes: z.ZodArray<z.ZodString>;
+    snapshots: z.ZodArray<z.ZodString>;
+    blobFileStoreUrls: z.ZodOptional<z.ZodArray<z.ZodString>>;
+    txCollectionFileStoreUrls: z.ZodOptional<z.ZodArray<z.ZodString>>;
     registryAddress: z.ZodString;
     feeAssetHandlerAddress: z.ZodOptional<z.ZodString>;
     l1ChainId: z.ZodNumber;
-}, "passthrough", z.ZodTypeAny, z.objectOutputType<{
-    bootnodes: z.ZodArray<z.ZodString, "many">;
-    snapshots: z.ZodArray<z.ZodString, "many">;
-    registryAddress: z.ZodString;
-    feeAssetHandlerAddress: z.ZodOptional<z.ZodString>;
-    l1ChainId: z.ZodNumber;
-}, z.ZodTypeAny, "passthrough">, z.objectInputType<{
-    bootnodes: z.ZodArray<z.ZodString, "many">;
-    snapshots: z.ZodArray<z.ZodString, "many">;
-    registryAddress: z.ZodString;
-    feeAssetHandlerAddress: z.ZodOptional<z.ZodString>;
-    l1ChainId: z.ZodNumber;
-}, z.ZodTypeAny, "passthrough">>;
+    blockDurationMs: z.ZodOptional<z.ZodNumber>;
+    txPublicSetupAllowListExtend: z.ZodOptional<z.ZodString>;
+    nodeVersion: z.ZodOptional<z.ZodString>;
+}, z.core.$loose>;
 export declare const NetworkConfigMapSchema: z.ZodRecord<z.ZodString, z.ZodObject<{
-    bootnodes: z.ZodArray<z.ZodString, "many">;
-    snapshots: z.ZodArray<z.ZodString, "many">;
-    registryAddress: z.ZodString;
-    feeAssetHandlerAddress: z.ZodOptional<z.ZodString>;
-    l1ChainId: z.ZodNumber;
-}, "passthrough", z.ZodTypeAny, z.objectOutputType<{
-    bootnodes: z.ZodArray<z.ZodString, "many">;
-    snapshots: z.ZodArray<z.ZodString, "many">;
-    registryAddress: z.ZodString;
-    feeAssetHandlerAddress: z.ZodOptional<z.ZodString>;
-    l1ChainId: z.ZodNumber;
-}, z.ZodTypeAny, "passthrough">, z.objectInputType<{
-    bootnodes: z.ZodArray<z.ZodString, "many">;
-    snapshots: z.ZodArray<z.ZodString, "many">;
+    bootnodes: z.ZodArray<z.ZodString>;
+    snapshots: z.ZodArray<z.ZodString>;
+    blobFileStoreUrls: z.ZodOptional<z.ZodArray<z.ZodString>>;
+    txCollectionFileStoreUrls: z.ZodOptional<z.ZodArray<z.ZodString>>;
     registryAddress: z.ZodString;
     feeAssetHandlerAddress: z.ZodOptional<z.ZodString>;
     l1ChainId: z.ZodNumber;
-}, z.ZodTypeAny, "passthrough">>>;
+    blockDurationMs: z.ZodOptional<z.ZodNumber>;
+    txPublicSetupAllowListExtend: z.ZodOptional<z.ZodString>;
+    nodeVersion: z.ZodOptional<z.ZodString>;
+}, z.core.$loose>>;
 export type NetworkConfig = z.infer<typeof NetworkConfigSchema>;
 export type NetworkConfigMap = z.infer<typeof NetworkConfigMapSchema>;
-//# sourceMappingURL=network_config.d.ts.map
+//# sourceMappingURL=data:application/json;base64,eyJ2ZXJzaW9uIjozLCJmaWxlIjoibmV0d29ya19jb25maWcuZC50cyIsInNvdXJjZVJvb3QiOiIiLCJzb3VyY2VzIjpbIi4uLy4uL3NyYy9jb25maWcvbmV0d29ya19jb25maWcudHMiXSwibmFtZXMiOltdLCJtYXBwaW5ncyI6IkFBQUEsT0FBTyxFQUFFLENBQUMsRUFBRSxNQUFNLEtBQUssQ0FBQztBQUV4QixlQUFPLE1BQU0sbUJBQW1COzs7Ozs7Ozs7OztpQkFhaEIsQ0FBQztBQUVqQixlQUFPLE1BQU0sc0JBQXNCOzs7Ozs7Ozs7OztrQkFBNEMsQ0FBQztBQUVoRixNQUFNLE1BQU0sYUFBYSxHQUFHLENBQUMsQ0FBQyxLQUFLLENBQUMsT0FBTyxtQkFBbUIsQ0FBQyxDQUFDO0FBQ2hFLE1BQU0sTUFBTSxnQkFBZ0IsR0FBRyxDQUFDLENBQUMsS0FBSyxDQUFDLE9BQU8sc0JBQXNCLENBQUMsQ0FBQyJ9

package/dest/config/network_config.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"network_config.d.ts","sourceRoot":"","sources":["../../src/config/network_config.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,eAAO,MAAM,mBAAmB;;;;;;;;;;;;;;;;;;gCAQhB,CAAC;AAEjB,eAAO,MAAM,sBAAsB;;;;;;;;;;;;;;;;;;iCAA4C,CAAC;AAEhF,MAAM,MAAM,aAAa,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,mBAAmB,CAAC,CAAC;AAChE,MAAM,MAAM,gBAAgB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,sBAAsB,CAAC,CAAC"}
+{"version":3,"file":"network_config.d.ts","sourceRoot":"","sources":["../../src/config/network_config.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,eAAO,MAAM,mBAAmB;;;;;;;;;;;iBAahB,CAAC;AAEjB,eAAO,MAAM,sBAAsB;;;;;;;;;;;kBAA4C,CAAC;AAEhF,MAAM,MAAM,aAAa,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,mBAAmB,CAAC,CAAC;AAChE,MAAM,MAAM,gBAAgB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,sBAAsB,CAAC,CAAC"}

package/dest/config/network_config.js

@@ -2,8 +2,13 @@ import { z } from 'zod';
 export const NetworkConfigSchema = z.object({
     bootnodes: z.array(z.string()),
     snapshots: z.array(z.string()),
+    blobFileStoreUrls: z.array(z.string()).optional(),
+    txCollectionFileStoreUrls: z.array(z.string()).optional(),
     registryAddress: z.string(),
     feeAssetHandlerAddress: z.string().optional(),
-    l1ChainId: z.number()
+    l1ChainId: z.number(),
+    blockDurationMs: z.number().positive().optional(),
+    txPublicSetupAllowListExtend: z.string().optional(),
+    nodeVersion: z.string().optional()
 }).passthrough(); // Allow additional unknown fields to pass through
 export const NetworkConfigMapSchema = z.record(z.string(), NetworkConfigSchema);

package/dest/config/network_name.d.ts

@@ -1,3 +1,3 @@
-export type NetworkNames = 'local' | 'staging-ignition' | 'staging-public' | 'testnet' | 'mainnet' | 'next-net' | 'devnet';
+export type NetworkNames = 'local' | 'staging' | 'testnet' | 'mainnet' | 'next-net' | 'devnet' | `v${number}-devnet-${number}`;
 export declare function getActiveNetworkName(name?: string): NetworkNames;
-//# sourceMappingURL=network_name.d.ts.map
+//# sourceMappingURL=data:application/json;base64,eyJ2ZXJzaW9uIjozLCJmaWxlIjoibmV0d29ya19uYW1lLmQudHMiLCJzb3VyY2VSb290IjoiIiwic291cmNlcyI6WyIuLi8uLi9zcmMvY29uZmlnL25ldHdvcmtfbmFtZS50cyJdLCJuYW1lcyI6W10sIm1hcHBpbmdzIjoiQUFBQSxNQUFNLE1BQU0sWUFBWSxHQUNwQixPQUFPLEdBQ1AsU0FBUyxHQUNULFNBQVMsR0FDVCxTQUFTLEdBQ1QsVUFBVSxHQUNWLFFBQVEsR0FDUixJQUFJLE1BQU0sV0FBVyxNQUFNLEVBQUUsQ0FBQztBQUVsQyx3QkFBZ0Isb0JBQW9CLENBQUMsSUFBSSxDQUFDLEVBQUUsTUFBTSxHQUFHLFlBQVksQ0FrQmhFIn0=

package/dest/config/network_name.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"network_name.d.ts","sourceRoot":"","sources":["../../src/config/network_name.ts"],"names":[],"mappings":"AAAA,MAAM,MAAM,YAAY,GACpB,OAAO,GACP,kBAAkB,GAClB,gBAAgB,GAChB,SAAS,GACT,SAAS,GACT,UAAU,GACV,QAAQ,CAAC;AAEb,wBAAgB,oBAAoB,CAAC,IAAI,CAAC,EAAE,MAAM,GAAG,YAAY,CAkBhE"}
+{"version":3,"file":"network_name.d.ts","sourceRoot":"","sources":["../../src/config/network_name.ts"],"names":[],"mappings":"AAAA,MAAM,MAAM,YAAY,GACpB,OAAO,GACP,SAAS,GACT,SAAS,GACT,SAAS,GACT,UAAU,GACV,QAAQ,GACR,IAAI,MAAM,WAAW,MAAM,EAAE,CAAC;AAElC,wBAAgB,oBAAoB,CAAC,IAAI,CAAC,EAAE,MAAM,GAAG,YAAY,CAkBhE"}

package/dest/config/network_name.js

@@ -2,9 +2,7 @@ export function getActiveNetworkName(name) {
     const network = name || process.env.NETWORK;
     if (!network || network === '' || network === 'local') {
         return 'local';
-    } else if (network === 'staging-ignition') {
-        return network;
-    } else if (network === 'staging-public') {
+    } else if (network === 'staging') {
         return network;
     } else if (network === 'testnet' || network === 'alpha-testnet') {
         return 'testnet';
@@ -14,6 +12,8 @@ export function getActiveNetworkName(name) {
         return 'next-net';
     } else if (network === 'devnet') {
         return 'devnet';
+    } else if (/^v\d+-devnet-\d+$/.test(network)) {
+        return network;
     }
     throw new Error(`Unknown network: ${network}`);
 }

package/dest/config/parse-env.d.ts

@@ -0,0 +1,3 @@
+/** Parses an env var as boolean. Returns true only if value is 1, true, or TRUE. */
+export declare function parseBooleanEnv(val: string | undefined): boolean;
+//# sourceMappingURL=data:application/json;base64,eyJ2ZXJzaW9uIjozLCJmaWxlIjoicGFyc2UtZW52LmQudHMiLCJzb3VyY2VSb290IjoiIiwic291cmNlcyI6WyIuLi8uLi9zcmMvY29uZmlnL3BhcnNlLWVudi50cyJdLCJuYW1lcyI6W10sIm1hcHBpbmdzIjoiQUFBQSxvRkFBb0Y7QUFDcEYsd0JBQWdCLGVBQWUsQ0FBQyxHQUFHLEVBQUUsTUFBTSxHQUFHLFNBQVMsR0FBRyxPQUFPLENBRWhFIn0=

package/dest/config/parse-env.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"parse-env.d.ts","sourceRoot":"","sources":["../../src/config/parse-env.ts"],"names":[],"mappings":"AAAA,oFAAoF;AACpF,wBAAgB,eAAe,CAAC,GAAG,EAAE,MAAM,GAAG,SAAS,GAAG,OAAO,CAEhE"}

package/dest/config/parse-env.js

@@ -0,0 +1,7 @@
+/** Parses an env var as boolean. Returns true only if value is 1, true, or TRUE. */ export function parseBooleanEnv(val) {
+    return val !== undefined && [
+        '1',
+        'true',
+        'TRUE'
+    ].includes(val);
+}

package/dest/config/secret_value.d.ts

@@ -23,6 +23,6 @@ export declare class SecretValue<T> {
     /**
      * Returns a Zod schema
      */
-    static schema<O>(valueSchema: ZodType<O, any, any>): ZodType<SecretValue<O>, any, any>;
+    static schema<O>(valueSchema: ZodType<O, any>): ZodType<SecretValue<O>, any>;
 }
-//# sourceMappingURL=secret_value.d.ts.map
+//# sourceMappingURL=data:application/json;base64,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

package/dest/config/secret_value.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"secret_value.d.ts","sourceRoot":"","sources":["../../src/config/secret_value.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,MAAM,MAAM,CAAC;AAC/B,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,KAAK,CAAC;AAEnC;;GAEG;AACH,qBAAa,WAAW,CAAC,CAAC;;IAMtB,OAAO,CAAC,QAAQ,CAAC,aAAa;gBAD9B,KAAK,EAAE,CAAC,EACS,aAAa,SAAe;IAK/C;;OAEG;IACI,QAAQ,IAAI,CAAC;IAIpB;;OAEG;IACI,QAAQ,IAAI,MAAM;IAIzB;;OAEG;IACI,MAAM,IAAI,MAAM;IAIhB,CAAC,OAAO,CAAC,MAAM,CAAC;IAIvB;;OAEG;IACH,MAAM,CAAC,MAAM,CAAC,CAAC,EAAE,WAAW,EAAE,OAAO,CAAC,CAAC,EAAE,GAAG,EAAE,GAAG,CAAC,GAAG,OAAO,CAAC,WAAW,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,GAAG,CAAC;CAGvF"}
+{"version":3,"file":"secret_value.d.ts","sourceRoot":"","sources":["../../src/config/secret_value.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,MAAM,MAAM,CAAC;AAC/B,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,KAAK,CAAC;AAEnC;;GAEG;AACH,qBAAa,WAAW,CAAC,CAAC;;IAMtB,OAAO,CAAC,QAAQ,CAAC,aAAa;IAFhC,YACE,KAAK,EAAE,CAAC,EACS,aAAa,SAAe,EAG9C;IAED;;OAEG;IACI,QAAQ,IAAI,CAAC,CAEnB;IAED;;OAEG;IACI,QAAQ,IAAI,MAAM,CAExB;IAED;;OAEG;IACI,MAAM,IAAI,MAAM,CAEtB;IAEM,CAAC,OAAO,CAAC,MAAM,CAAC,WAEtB;IAED;;OAEG;IACH,MAAM,CAAC,MAAM,CAAC,CAAC,EAAE,WAAW,EAAE,OAAO,CAAC,CAAC,EAAE,GAAG,CAAC,GAAG,OAAO,CAAC,WAAW,CAAC,CAAC,CAAC,EAAE,GAAG,CAAC,CAE3E;CACF"}

package/dest/config/secret_value.js

@@ -1,4 +1,6 @@
+var _computedKey;
 import { inspect } from 'util';
+_computedKey = inspect.custom;
 /**
  * A class wrapping a secret value to protect it from accidently being leaked in logs
  */ export class SecretValue {
@@ -23,7 +25,7 @@ import { inspect } from 'util';
    */ toJSON() {
         return this.redactedValue;
     }
-    [inspect.custom]() {
+    [_computedKey]() {
         return this.toString();
     }
     /**

package/dest/crypto/aes128/index.d.ts

@@ -26,7 +26,8 @@ export declare class Aes128 {
      * @param iv - AES initialization vector.
      * @param key - Key to decrypt with.
      * @returns Decrypted data.
+     * @throws If the decrypted buffer has invalid PKCS#7 padding.
      */
     decryptBufferCBC(data: Uint8Array, iv: Uint8Array, key: Uint8Array): Promise<Buffer<ArrayBufferLike>>;
 }
-//# sourceMappingURL=index.d.ts.map
+//# sourceMappingURL=data:application/json;base64,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

package/dest/crypto/aes128/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/crypto/aes128/index.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,MAAM,EAAE,MAAM,QAAQ,CAAC;AAEhC;;GAEG;AACH,qBAAa,MAAM;IACjB;;;;;;OAMG;IACU,gBAAgB,CAAC,IAAI,EAAE,UAAU,EAAE,EAAE,EAAE,UAAU,EAAE,GAAG,EAAE,UAAU;IAoB/E;;;;;;;OAOG;IACU,2BAA2B,CAAC,IAAI,EAAE,UAAU,EAAE,EAAE,EAAE,UAAU,EAAE,GAAG,EAAE,UAAU,GAAG,OAAO,CAAC,MAAM,CAAC;IAY5G;;;;;;OAMG;IACU,gBAAgB,CAAC,IAAI,EAAE,UAAU,EAAE,EAAE,EAAE,UAAU,EAAE,GAAG,EAAE,UAAU;CAKhF"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/crypto/aes128/index.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,MAAM,EAAE,MAAM,QAAQ,CAAC;AAEhC;;GAEG;AACH,qBAAa,MAAM;IACjB;;;;;;OAMG;IACU,gBAAgB,CAAC,IAAI,EAAE,UAAU,EAAE,EAAE,EAAE,UAAU,EAAE,GAAG,EAAE,UAAU,gCAkB9E;IAED;;;;;;;OAOG;IACU,2BAA2B,CAAC,IAAI,EAAE,UAAU,EAAE,EAAE,EAAE,UAAU,EAAE,GAAG,EAAE,UAAU,GAAG,OAAO,CAAC,MAAM,CAAC,CAU3G;IAED;;;;;;;OAOG;IACU,gBAAgB,CAAC,IAAI,EAAE,UAAU,EAAE,EAAE,EAAE,UAAU,EAAE,GAAG,EAAE,UAAU,oCAY9E;CACF"}

package/dest/crypto/aes128/index.js

@@ -20,9 +20,7 @@ import { Buffer } from 'buffer';
             data,
             paddingBuffer
         ]);
-        await BarretenbergSync.initSingleton({
-            wasmPath: process.env.BB_WASM_PATH
-        });
+        await BarretenbergSync.initSingleton();
         const api = BarretenbergSync.getSingleton();
         const response = api.aesEncrypt({
             plaintext: input,
@@ -40,9 +38,7 @@ import { Buffer } from 'buffer';
    * @param key - Key to decrypt with.
    * @returns Decrypted data.
    */ async decryptBufferCBCKeepPadding(data, iv, key) {
-        await BarretenbergSync.initSingleton({
-            wasmPath: process.env.BB_WASM_PATH
-        });
+        await BarretenbergSync.initSingleton();
         const api = BarretenbergSync.getSingleton();
         const response = api.aesDecrypt({
             ciphertext: data,
@@ -58,9 +54,18 @@ import { Buffer } from 'buffer';
    * @param iv - AES initialization vector.
    * @param key - Key to decrypt with.
    * @returns Decrypted data.
+   * @throws If the decrypted buffer has invalid PKCS#7 padding.
    */ async decryptBufferCBC(data, iv, key) {
         const paddedBuffer = await this.decryptBufferCBCKeepPadding(data, iv, key);
-        const paddingToRemove = paddedBuffer[paddedBuffer.length - 1];
-        return paddedBuffer.subarray(0, paddedBuffer.length - paddingToRemove);
+        const paddingLen = paddedBuffer[paddedBuffer.length - 1];
+        if (paddingLen === 0 || paddingLen > 16) {
+            throw new Error(`Invalid PKCS#7 padding length: ${paddingLen}`);
+        }
+        for(let i = paddedBuffer.length - paddingLen; i < paddedBuffer.length; i++){
+            if (paddedBuffer[i] !== paddingLen) {
+                throw new Error('Invalid PKCS#7 padding');
+            }
+        }
+        return paddedBuffer.subarray(0, paddedBuffer.length - paddingLen);
     }
 }