@aztec/stdlib 0.0.1-commit.d431d1c → 0.0.1-commit.d58ff9d0

package/dest/database-version/database_version.d.ts

@@ -0,0 +1,52 @@
+import { EthAddress } from '@aztec/foundation/eth-address';
+import { z } from 'zod';
+/**
+ * Symbol for Node.js custom inspect. Using Symbol.for() is the documented way to
+ * reference this without importing node:util. In browsers, objects with this symbol
+ * simply won't have custom inspect behavior (which is fine).
+ * @see https://nodejs.org/api/util.html#utilinspectcustom
+ */
+declare const inspectCustomSymbol: unique symbol;
+/**
+ * Represents a version record for storing in a version file.
+ */
+export declare class DatabaseVersion {
+    /** The version of the data on disk. Used to perform upgrades */
+    readonly schemaVersion: number;
+    /** The rollup the data pertains to */
+    readonly rollupAddress: EthAddress;
+    constructor(
+    /** The version of the data on disk. Used to perform upgrades */
+    schemaVersion: number, 
+    /** The rollup the data pertains to */
+    rollupAddress: EthAddress);
+    toBuffer(): Buffer;
+    static fromBuffer(buf: Buffer): DatabaseVersion;
+    /**
+     * Compares two versions. If the rollups addresses are different then it returns undefined
+     */
+    cmp(other: DatabaseVersion): undefined | -1 | 0 | 1;
+    /**
+     * Checks if two versions exactly match
+     */
+    equals(other: DatabaseVersion): boolean;
+    /**
+     * Returns the schema for this class
+     */
+    static get schema(): z.ZodPipe<z.ZodObject<{
+        schemaVersion: z.ZodNumber;
+        rollupAddress: z.ZodType<EthAddress, string, z.core.$ZodTypeInternals<EthAddress, string>>;
+    }, z.core.$strip>, z.ZodTransform<DatabaseVersion, {
+        schemaVersion: number;
+        rollupAddress: EthAddress;
+    }>>;
+    /** Allows for better introspection in Node.js console. Ignored in browser envs. */
+    [inspectCustomSymbol](): string;
+    toString(): string;
+    /**
+     * Returns an empty instance
+     */
+    static empty(): DatabaseVersion;
+}
+export {};
+//# sourceMappingURL=data:application/json;base64,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

package/dest/database-version/database_version.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"database_version.d.ts","sourceRoot":"","sources":["../../src/database-version/database_version.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,+BAA+B,CAAC;AAG3D,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB;;;;;GAKG;AACH,QAAA,MAAM,mBAAmB,eAA2C,CAAC;AAErE;;GAEG;AACH,qBAAa,eAAe;IAExB,gEAAgE;aAChD,aAAa,EAAE,MAAM;IACrC,sCAAsC;aACtB,aAAa,EAAE,UAAU;IAJ3C;IACE,gEAAgE;IAChD,aAAa,EAAE,MAAM;IACrC,sCAAsC;IACtB,aAAa,EAAE,UAAU,EACvC;IAEG,QAAQ,IAAI,MAAM,CAExB;IAED,OAAc,UAAU,CAAC,GAAG,EAAE,MAAM,GAAG,eAAe,CAMrD;IAED;;OAEG;IACI,GAAG,CAAC,KAAK,EAAE,eAAe,GAAG,SAAS,GAAG,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAWzD;IAED;;OAEG;IACI,MAAM,CAAC,KAAK,EAAE,eAAe,GAAG,OAAO,CAE7C;IAED;;OAEG;IACH,MAAM,KAAK,MAAM;;;;;;QAOhB;IAED,mFAAmF;IAC5E,CAAC,mBAAmB,CAAC,IAAI,MAAM,CAErC;IAEM,QAAQ,IAAI,MAAM,CAExB;IAED;;OAEG;IACH,MAAM,CAAC,KAAK,oBAEX;CACF"}

package/dest/database-version/database_version.js

@@ -0,0 +1,69 @@
+import { EthAddress } from '@aztec/foundation/eth-address';
+import { jsonParseWithSchema, jsonStringify } from '@aztec/foundation/json-rpc';
+import { z } from 'zod';
+/**
+ * Symbol for Node.js custom inspect. Using Symbol.for() is the documented way to
+ * reference this without importing node:util. In browsers, objects with this symbol
+ * simply won't have custom inspect behavior (which is fine).
+ * @see https://nodejs.org/api/util.html#utilinspectcustom
+ */ const inspectCustomSymbol = Symbol.for('nodejs.util.inspect.custom');
+/**
+ * Represents a version record for storing in a version file.
+ */ export class DatabaseVersion {
+    schemaVersion;
+    rollupAddress;
+    constructor(/** The version of the data on disk. Used to perform upgrades */ schemaVersion, /** The rollup the data pertains to */ rollupAddress){
+        this.schemaVersion = schemaVersion;
+        this.rollupAddress = rollupAddress;
+    }
+    toBuffer() {
+        return Buffer.from(jsonStringify(this));
+    }
+    static fromBuffer(buf) {
+        try {
+            return jsonParseWithSchema(buf.toString('utf-8'), DatabaseVersion.schema);
+        } catch (err) {
+            throw new Error(`Failed to deserialize version information: ${err}`, {
+                cause: err
+            });
+        }
+    }
+    /**
+   * Compares two versions. If the rollups addresses are different then it returns undefined
+   */ cmp(other) {
+        if (this.rollupAddress.equals(other.rollupAddress)) {
+            if (this.schemaVersion < other.schemaVersion) {
+                return -1;
+            } else if (this.schemaVersion > other.schemaVersion) {
+                return 1;
+            } else {
+                return 0;
+            }
+        }
+        return undefined;
+    }
+    /**
+   * Checks if two versions exactly match
+   */ equals(other) {
+        return this.cmp(other) === 0;
+    }
+    /**
+   * Returns the schema for this class
+   */ static get schema() {
+        return z.object({
+            schemaVersion: z.number(),
+            rollupAddress: EthAddress.schema
+        }).transform(({ schemaVersion, rollupAddress })=>new DatabaseVersion(schemaVersion, rollupAddress));
+    }
+    /** Allows for better introspection in Node.js console. Ignored in browser envs. */ [inspectCustomSymbol]() {
+        return this.toString();
+    }
+    toString() {
+        return `DatabaseVersion{schemaVersion=${this.schemaVersion},rollupAddress=${this.rollupAddress}"}`;
+    }
+    /**
+   * Returns an empty instance
+   */ static empty() {
+        return new DatabaseVersion(0, EthAddress.ZERO);
+    }
+}

package/dest/database-version/version_manager.d.ts

@@ -1,63 +1,26 @@
 import { EthAddress } from '@aztec/foundation/eth-address';
 import { type Logger } from '@aztec/foundation/log';
 import fs from 'fs/promises';
-import { inspect } from 'node:util';
-import { z } from 'zod';
+import { DatabaseVersion } from './database_version.js';
+export type DatabaseVersionManagerFs = Pick<typeof fs, 'readFile' | 'rm' | 'mkdir' | 'rename' | 'open'>;
+export declare const DATABASE_VERSION_FILE_NAME = "db_version";
+export type SchemaVersionMismatchPolicy = 'reset' | 'throw';
 /**
- * Represents a version record for storing in a version file.
+ * How to react when the version file exists but cannot be read (permissions, IO error, truncation).
+ * `'reset'` (default) treats the store as unversioned and lets the reset path run — safe for stores
+ * where an empty state is legitimate. `'throw'` refuses to open, leaving data untouched — required
+ * for protection stores (e.g. signing protection) that must never be silently wiped by a transient
+ * filesystem error. A genuinely missing file (ENOENT) is a first boot and is never affected by this.
  */
-export declare class DatabaseVersion {
-    /** The version of the data on disk. Used to perform upgrades */
-    readonly schemaVersion: number;
-    /** The rollup the data pertains to */
-    readonly rollupAddress: EthAddress;
-    constructor(
-    /** The version of the data on disk. Used to perform upgrades */
-    schemaVersion: number, 
-    /** The rollup the data pertains to */
-    rollupAddress: EthAddress);
-    toBuffer(): Buffer;
-    static fromBuffer(buf: Buffer): DatabaseVersion;
-    /**
-     * Compares two versions. If the rollups addresses are different then it returns undefined
-     */
-    cmp(other: DatabaseVersion): undefined | -1 | 0 | 1;
-    /**
-     * Checks if two versions exactly match
-     */
-    equals(other: DatabaseVersion): boolean;
-    /**
-     * Returns the schema for this class
-     */
-    static get schema(): z.ZodEffects<z.ZodObject<{
-        schemaVersion: z.ZodNumber;
-        rollupAddress: z.ZodType<EthAddress, any, string>;
-    }, "strip", z.ZodTypeAny, {
-        schemaVersion: number;
-        rollupAddress: EthAddress;
-    }, {
-        schemaVersion: number;
-        rollupAddress: string;
-    }>, DatabaseVersion, {
-        schemaVersion: number;
-        rollupAddress: string;
-    }>;
-    /** Allows for better introspection. */
-    [inspect.custom](): string;
-    toString(): string;
-    /**
-     * Returns an empty instance
-     */
-    static empty(): DatabaseVersion;
-}
-export type DatabaseVersionManagerFs = Pick<typeof fs, 'readFile' | 'writeFile' | 'rm' | 'mkdir'>;
-export declare const DATABASE_VERSION_FILE_NAME = "db_version";
+export type VersionFileReadFailurePolicy = 'reset' | 'throw';
 export type DatabaseVersionManagerOptions<T> = {
     schemaVersion: number;
     rollupAddress: EthAddress;
     dataDirectory: string;
     onOpen: (dataDir: string) => Promise<T>;
     onUpgrade?: (dataDir: string, currentVersion: number, latestVersion: number) => Promise<void>;
+    schemaVersionMismatchPolicy?: SchemaVersionMismatchPolicy;
+    versionFileReadFailurePolicy?: VersionFileReadFailurePolicy;
     fileSystem?: DatabaseVersionManagerFs;
     log?: Logger;
 };
@@ -73,6 +36,8 @@ export declare class DatabaseVersionManager<T> {
     private dataDirectory;
     private onOpen;
     private onUpgrade?;
+    private schemaVersionMismatchPolicy;
+    private versionFileReadFailurePolicy;
     private fileSystem;
     private log;
     /**
@@ -82,12 +47,16 @@ export declare class DatabaseVersionManager<T> {
      * @param rollupAddress - The rollup contract address
      * @param dataDirectory - The directory where version information will be stored
      * @param onOpen - A callback to the open the database at the given location
-     * @param onUpgrade - An optional callback to upgrade the database before opening. If not provided it will reset the database
+     * @param onUpgrade - An optional callback to upgrade the database before opening. If not provided it will reset the
+     *   database. Must be idempotent: since the version marker is written only after a successful open, a crash after
+     *   onUpgrade but before the marker is written re-runs onUpgrade on the next start.
+     * @param schemaVersionMismatchPolicy - Whether schema mismatches should reset data or throw
+     * @param versionFileReadFailurePolicy - Whether an unreadable (non-missing) version file should reset data or throw
      * @param fileSystem - An interface to access the filesystem
      * @param log - Optional custom logger
      * @param options - Configuration options
      */
-    constructor({ schemaVersion, rollupAddress, dataDirectory, onOpen, onUpgrade, fileSystem, log }: DatabaseVersionManagerOptions<T>);
+    constructor({ schemaVersion, rollupAddress, dataDirectory, onOpen, onUpgrade, schemaVersionMismatchPolicy, versionFileReadFailurePolicy, fileSystem, log }: DatabaseVersionManagerOptions<T>);
     static writeVersion(version: DatabaseVersion, dataDir: string, fileSystem?: DatabaseVersionManagerFs): Promise<void>;
     /**
      * Checks the stored version against the current version and handles the outcome
@@ -98,6 +67,7 @@ export declare class DatabaseVersionManager<T> {
      * @returns True if data was reset, false if upgraded or no change needed
      */
     open(): Promise<[T, boolean]>;
+    private closeQuietly;
     /**
      * Writes the current version to the version file
      */
@@ -115,4 +85,4 @@ export declare class DatabaseVersionManager<T> {
      */
     getSchemaVersion(): number;
 }
-//# sourceMappingURL=data:application/json;base64,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
+//# sourceMappingURL=data:application/json;base64,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

package/dest/database-version/version_manager.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"version_manager.d.ts","sourceRoot":"","sources":["../../src/database-version/version_manager.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,+BAA+B,CAAC;AAE3D,OAAO,EAAE,KAAK,MAAM,EAAgB,MAAM,uBAAuB,CAAC;AAElE,OAAO,EAAE,MAAM,aAAa,CAAC;AAC7B,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAEpC,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB;;GAEG;AACH,qBAAa,eAAe;IAExB,gEAAgE;aAChD,aAAa,EAAE,MAAM;IACrC,sCAAsC;aACtB,aAAa,EAAE,UAAU;IAJ3C;IACE,gEAAgE;IAChD,aAAa,EAAE,MAAM;IACrC,sCAAsC;IACtB,aAAa,EAAE,UAAU,EACvC;IAEG,QAAQ,IAAI,MAAM,CAExB;IAED,OAAc,UAAU,CAAC,GAAG,EAAE,MAAM,GAAG,eAAe,CAMrD;IAED;;OAEG;IACI,GAAG,CAAC,KAAK,EAAE,eAAe,GAAG,SAAS,GAAG,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAWzD;IAED;;OAEG;IACI,MAAM,CAAC,KAAK,EAAE,eAAe,GAAG,OAAO,CAE7C;IAED;;OAEG;IACH,MAAM,KAAK,MAAM;;;;;;;;;;;;OAOhB;IAED,uCAAuC;IAChC,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI,MAAM,CAEhC;IAEM,QAAQ,IAAI,MAAM,CAExB;IAED;;OAEG;IACH,MAAM,CAAC,KAAK,oBAEX;CACF;AAED,MAAM,MAAM,wBAAwB,GAAG,IAAI,CAAC,OAAO,EAAE,EAAE,UAAU,GAAG,WAAW,GAAG,IAAI,GAAG,OAAO,CAAC,CAAC;AAElG,eAAO,MAAM,0BAA0B,eAAe,CAAC;AAEvD,MAAM,MAAM,6BAA6B,CAAC,CAAC,IAAI;IAC7C,aAAa,EAAE,MAAM,CAAC;IACtB,aAAa,EAAE,UAAU,CAAC;IAC1B,aAAa,EAAE,MAAM,CAAC;IACtB,MAAM,EAAE,CAAC,OAAO,EAAE,MAAM,KAAK,OAAO,CAAC,CAAC,CAAC,CAAC;IACxC,SAAS,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,EAAE,cAAc,EAAE,MAAM,EAAE,aAAa,EAAE,MAAM,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;IAC9F,UAAU,CAAC,EAAE,wBAAwB,CAAC;IACtC,GAAG,CAAC,EAAE,MAAM,CAAC;CACd,CAAC;AAEF;;;;GAIG;AACH,qBAAa,sBAAsB,CAAC,CAAC;IACnC,gBAAuB,YAAY,gBAA8B;IAEjE,OAAO,CAAC,QAAQ,CAAC,WAAW,CAAS;IACrC,OAAO,CAAC,QAAQ,CAAC,cAAc,CAAkB;IAEjD,OAAO,CAAC,aAAa,CAAS;IAC9B,OAAO,CAAC,MAAM,CAAkC;IAChD,OAAO,CAAC,SAAS,CAAC,CAAoF;IACtG,OAAO,CAAC,UAAU,CAA2B;IAC7C,OAAO,CAAC,GAAG,CAAS;IAEpB;;;;;;;;;;;OAWG;IACH,YAAY,EACV,aAAa,EACb,aAAa,EACb,aAAa,EACb,MAAM,EACN,SAAS,EACT,UAAe,EACf,GAAgD,EACjD,EAAE,6BAA6B,CAAC,CAAC,CAAC,EAalC;IAED,OAAa,YAAY,CAAC,OAAO,EAAE,eAAe,EAAE,OAAO,EAAE,MAAM,EAAE,UAAU,GAAE,wBAA6B,iBAG7G;IAED;;;;;;;OAOG;IACU,IAAI,IAAI,OAAO,CAAC,CAAC,CAAC,EAAE,OAAO,CAAC,CAAC,CA6DzC;IAED;;OAEG;IACI,YAAY,CAAC,GAAG,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAE/C;IAED;;OAEG;IACU,kBAAkB,IAAI,OAAO,CAAC,IAAI,CAAC,CAQ/C;IAED;;OAEG;IACI,gBAAgB,IAAI,MAAM,CAEhC;IAED;;OAEG;IACI,gBAAgB,IAAI,MAAM,CAEhC;CACF"}
+{"version":3,"file":"version_manager.d.ts","sourceRoot":"","sources":["../../src/database-version/version_manager.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,+BAA+B,CAAC;AAC3D,OAAO,EAAE,KAAK,MAAM,EAAgB,MAAM,uBAAuB,CAAC;AAElE,OAAO,EAAE,MAAM,aAAa,CAAC;AAG7B,OAAO,EAAE,eAAe,EAAE,MAAM,uBAAuB,CAAC;AAExD,MAAM,MAAM,wBAAwB,GAAG,IAAI,CAAC,OAAO,EAAE,EAAE,UAAU,GAAG,IAAI,GAAG,OAAO,GAAG,QAAQ,GAAG,MAAM,CAAC,CAAC;AAExG,eAAO,MAAM,0BAA0B,eAAe,CAAC;AACvD,MAAM,MAAM,2BAA2B,GAAG,OAAO,GAAG,OAAO,CAAC;AAE5D;;;;;;GAMG;AACH,MAAM,MAAM,4BAA4B,GAAG,OAAO,GAAG,OAAO,CAAC;AAE7D,MAAM,MAAM,6BAA6B,CAAC,CAAC,IAAI;IAC7C,aAAa,EAAE,MAAM,CAAC;IACtB,aAAa,EAAE,UAAU,CAAC;IAC1B,aAAa,EAAE,MAAM,CAAC;IACtB,MAAM,EAAE,CAAC,OAAO,EAAE,MAAM,KAAK,OAAO,CAAC,CAAC,CAAC,CAAC;IACxC,SAAS,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,EAAE,cAAc,EAAE,MAAM,EAAE,aAAa,EAAE,MAAM,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;IAC9F,2BAA2B,CAAC,EAAE,2BAA2B,CAAC;IAC1D,4BAA4B,CAAC,EAAE,4BAA4B,CAAC;IAC5D,UAAU,CAAC,EAAE,wBAAwB,CAAC;IACtC,GAAG,CAAC,EAAE,MAAM,CAAC;CACd,CAAC;AAEF;;;;GAIG;AACH,qBAAa,sBAAsB,CAAC,CAAC;IACnC,gBAAuB,YAAY,gBAA8B;IAEjE,OAAO,CAAC,QAAQ,CAAC,WAAW,CAAS;IACrC,OAAO,CAAC,QAAQ,CAAC,cAAc,CAAkB;IAEjD,OAAO,CAAC,aAAa,CAAS;IAC9B,OAAO,CAAC,MAAM,CAAkC;IAChD,OAAO,CAAC,SAAS,CAAC,CAAoF;IACtG,OAAO,CAAC,2BAA2B,CAA8B;IACjE,OAAO,CAAC,4BAA4B,CAA+B;IACnE,OAAO,CAAC,UAAU,CAA2B;IAC7C,OAAO,CAAC,GAAG,CAAS;IAEpB;;;;;;;;;;;;;;;OAeG;IACH,YAAY,EACV,aAAa,EACb,aAAa,EACb,aAAa,EACb,MAAM,EACN,SAAS,EACT,2BAAqC,EACrC,4BAAsC,EACtC,UAAe,EACf,GAAgD,EACjD,EAAE,6BAA6B,CAAC,CAAC,CAAC,EAelC;IAED,OAAa,YAAY,CAAC,OAAO,EAAE,eAAe,EAAE,OAAO,EAAE,MAAM,EAAE,UAAU,GAAE,wBAA6B,iBA6B7G;IAED;;;;;;;OAOG;IACU,IAAI,IAAI,OAAO,CAAC,CAAC,CAAC,EAAE,OAAO,CAAC,CAAC,CAqGzC;YAMa,YAAY;IAe1B;;OAEG;IACI,YAAY,CAAC,GAAG,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAE/C;IAED;;OAEG;IACU,kBAAkB,IAAI,OAAO,CAAC,IAAI,CAAC,CAQ/C;IAED;;OAEG;IACI,gBAAgB,IAAI,MAAM,CAEhC;IAED;;OAEG;IACI,gBAAgB,IAAI,MAAM,CAEhC;CACF"}

package/dest/database-version/version_manager.js

@@ -1,72 +1,7 @@
-var _computedKey;
-import { EthAddress } from '@aztec/foundation/eth-address';
-import { jsonParseWithSchema, jsonStringify } from '@aztec/foundation/json-rpc';
 import { createLogger } from '@aztec/foundation/log';
 import fs from 'fs/promises';
-import { inspect } from 'node:util';
 import { join } from 'path';
-import { z } from 'zod';
-_computedKey = inspect.custom;
-/**
- * Represents a version record for storing in a version file.
- */ export class DatabaseVersion {
-    schemaVersion;
-    rollupAddress;
-    constructor(/** The version of the data on disk. Used to perform upgrades */ schemaVersion, /** The rollup the data pertains to */ rollupAddress){
-        this.schemaVersion = schemaVersion;
-        this.rollupAddress = rollupAddress;
-    }
-    toBuffer() {
-        return Buffer.from(jsonStringify(this));
-    }
-    static fromBuffer(buf) {
-        try {
-            return jsonParseWithSchema(buf.toString('utf-8'), DatabaseVersion.schema);
-        } catch (err) {
-            throw new Error(`Failed to deserialize version information: ${err}`, {
-                cause: err
-            });
-        }
-    }
-    /**
-   * Compares two versions. If the rollups addresses are different then it returns undefined
-   */ cmp(other) {
-        if (this.rollupAddress.equals(other.rollupAddress)) {
-            if (this.schemaVersion < other.schemaVersion) {
-                return -1;
-            } else if (this.schemaVersion > other.schemaVersion) {
-                return 1;
-            } else {
-                return 0;
-            }
-        }
-        return undefined;
-    }
-    /**
-   * Checks if two versions exactly match
-   */ equals(other) {
-        return this.cmp(other) === 0;
-    }
-    /**
-   * Returns the schema for this class
-   */ static get schema() {
-        return z.object({
-            schemaVersion: z.number(),
-            rollupAddress: EthAddress.schema
-        }).transform(({ schemaVersion, rollupAddress })=>new DatabaseVersion(schemaVersion, rollupAddress));
-    }
-    /** Allows for better introspection. */ [_computedKey]() {
-        return this.toString();
-    }
-    toString() {
-        return `DatabaseVersion{schemaVersion=${this.schemaVersion},rollupAddress=${this.rollupAddress}"}`;
-    }
-    /**
-   * Returns an empty instance
-   */ static empty() {
-        return new DatabaseVersion(0, EthAddress.ZERO);
-    }
-}
+import { DatabaseVersion } from './database_version.js';
 export const DATABASE_VERSION_FILE_NAME = 'db_version';
 /**
  * A manager for handling database versioning and migrations.
@@ -79,6 +14,8 @@ export const DATABASE_VERSION_FILE_NAME = 'db_version';
     dataDirectory;
     onOpen;
     onUpgrade;
+    schemaVersionMismatchPolicy;
+    versionFileReadFailurePolicy;
     fileSystem;
     log;
     /**
@@ -88,11 +25,15 @@ export const DATABASE_VERSION_FILE_NAME = 'db_version';
    * @param rollupAddress - The rollup contract address
    * @param dataDirectory - The directory where version information will be stored
    * @param onOpen - A callback to the open the database at the given location
-   * @param onUpgrade - An optional callback to upgrade the database before opening. If not provided it will reset the database
+   * @param onUpgrade - An optional callback to upgrade the database before opening. If not provided it will reset the
+   *   database. Must be idempotent: since the version marker is written only after a successful open, a crash after
+   *   onUpgrade but before the marker is written re-runs onUpgrade on the next start.
+   * @param schemaVersionMismatchPolicy - Whether schema mismatches should reset data or throw
+   * @param versionFileReadFailurePolicy - Whether an unreadable (non-missing) version file should reset data or throw
    * @param fileSystem - An interface to access the filesystem
    * @param log - Optional custom logger
    * @param options - Configuration options
-   */ constructor({ schemaVersion, rollupAddress, dataDirectory, onOpen, onUpgrade, fileSystem = fs, log = createLogger(`foundation:version-manager`) }){
+   */ constructor({ schemaVersion, rollupAddress, dataDirectory, onOpen, onUpgrade, schemaVersionMismatchPolicy = 'reset', versionFileReadFailurePolicy = 'reset', fileSystem = fs, log = createLogger(`foundation:version-manager`) }){
         if (schemaVersion < 1) {
             throw new TypeError(`Invalid schema version received: ${schemaVersion}`);
         }
@@ -101,6 +42,8 @@ export const DATABASE_VERSION_FILE_NAME = 'db_version';
         this.dataDirectory = dataDirectory;
         this.onOpen = onOpen;
         this.onUpgrade = onUpgrade;
+        this.schemaVersionMismatchPolicy = schemaVersionMismatchPolicy;
+        this.versionFileReadFailurePolicy = versionFileReadFailurePolicy;
         this.fileSystem = fileSystem;
         this.log = log;
     }
@@ -108,7 +51,31 @@ export const DATABASE_VERSION_FILE_NAME = 'db_version';
         await fileSystem.mkdir(dataDir, {
             recursive: true
         });
-        return fileSystem.writeFile(join(dataDir, DatabaseVersionManager.VERSION_FILE), version.toBuffer());
+        const finalPath = join(dataDir, DatabaseVersionManager.VERSION_FILE);
+        const tmpPath = `${finalPath}.tmp`;
+        // Atomic durable write: fill a temp file, fsync it, then rename it into place. The marker only
+        // becomes visible under its final name once its bytes are durably on disk, so a crash mid-write
+        // can never leave a "valid" version file sitting over an empty or partially-populated data dir.
+        const handle = await fileSystem.open(tmpPath, 'w');
+        try {
+            await handle.writeFile(version.toBuffer());
+            await handle.sync();
+        } finally{
+            await handle.close();
+        }
+        await fileSystem.rename(tmpPath, finalPath);
+        // Best-effort fsync of the containing directory so the rename itself survives a crash. Not all
+        // filesystems support directory fsync, so a failure here is non-fatal.
+        try {
+            const dirHandle = await fileSystem.open(dataDir, 'r');
+            try {
+                await dirHandle.sync();
+            } finally{
+                await dirHandle.close();
+            }
+        } catch  {
+        // directory fsync is best-effort
+        }
     }
     /**
    * Checks the stored version against the current version and handles the outcome
@@ -130,6 +97,15 @@ export const DATABASE_VERSION_FILE_NAME = 'db_version';
                 storedVersion = DatabaseVersion.empty();
                 // only turn off these logs if the data dir didn't exist before
                 shouldLogDataReset = false;
+            } else if (this.versionFileReadFailurePolicy === 'throw') {
+                // The version file exists but could not be read/parsed (permissions, IO error, truncation).
+                // Treating this as "unversioned" would reset the data directory, silently wiping a store that
+                // must fail closed. Refuse to open instead, leaving the data untouched for the operator.
+                const code = err?.code;
+                const message = err instanceof Error ? err.message : String(err);
+                throw new Error(`Failed to read database version file at ${this.versionFile} (${code ?? 'unknown error'}: ${message}). ` + `Refusing to open the database; data was NOT reset. Resolve the underlying filesystem error and retry.`, {
+                    cause: err
+                });
             } else {
                 this.log.warn(`Failed to read stored version information: ${err}. Defaulting to empty version`);
                 storedVersion = DatabaseVersion.empty();
@@ -144,10 +120,18 @@ export const DATABASE_VERSION_FILE_NAME = 'db_version';
                 try {
                     await this.onUpgrade(this.dataDirectory, storedVersion.schemaVersion, this.currentVersion.schemaVersion);
                 } catch (error) {
+                    if (this.schemaVersionMismatchPolicy === 'throw') {
+                        throw new Error(`Failed to upgrade database at ${this.dataDirectory} from schema version ${storedVersion.schemaVersion} to ${this.currentVersion.schemaVersion}`, {
+                            cause: error
+                        });
+                    }
                     this.log.error(`Failed to upgrade: ${error}. Falling back to reset.`);
                     needsReset = true;
                 }
             } else if (cmp !== 0) {
+                if (this.schemaVersionMismatchPolicy === 'throw') {
+                    throw new Error(`Cannot open database at ${this.dataDirectory}: stored schema version ${storedVersion.schemaVersion} is incompatible with expected schema version ${this.currentVersion.schemaVersion}`);
+                }
                 if (shouldLogDataReset) {
                     this.log.info(`Can't upgrade from version ${storedVersion} to ${this.currentVersion}. Resetting database at ${this.dataDirectory}`);
                 }
@@ -167,14 +151,46 @@ export const DATABASE_VERSION_FILE_NAME = 'db_version';
         if (needsReset) {
             await this.resetDataDirectory();
         }
-        // Write the current version to disk
-        await this.writeVersion();
+        // Open the database first, then record the version marker. Writing the marker only after a
+        // successful open makes it a post-commit record: if the process crashes between the reset and a
+        // durable open, no marker is left behind, so the next startup re-runs the reset instead of
+        // trusting a marker that sits over empty or partially-initialized data.
+        const instance = await this.onOpen(this.dataDirectory);
+        // Only (re)write the marker when it would actually change — first boot, reset, or upgrade. On a
+        // normal boot it already matches, so skipping avoids an unnecessary fsync (and the directory
+        // write permission the temp-file+rename needs) and, more importantly, any window where a
+        // marker-write failure would orphan the database we just opened.
+        if (!storedVersion.equals(this.currentVersion)) {
+            try {
+                await this.writeVersion();
+            } catch (err) {
+                // The database opened but recording the marker failed; close the freshly opened instance so
+                // we do not leak its file handles / locks before propagating the failure.
+                await this.closeQuietly(instance);
+                throw err;
+            }
+        }
         return [
-            await this.onOpen(this.dataDirectory),
+            instance,
             needsReset
         ];
     }
     /**
+   * Best-effort close of a just-opened database instance, used to avoid leaking handles/locks when a
+   * post-open step fails. Swallows close errors so the original failure is the one that propagates.
+   */ async closeQuietly(instance) {
+        const closable = instance;
+        const dispose = closable?.close ?? closable?.[Symbol.asyncDispose];
+        if (typeof dispose !== 'function') {
+            return;
+        }
+        try {
+            await dispose.call(closable);
+        } catch (err) {
+            this.log.warn(`Failed to close database after version-write failure: ${err}`);
+        }
+    }
+    /**
    * Writes the current version to the version file
    */ writeVersion(dir) {
         return DatabaseVersionManager.writeVersion(this.currentVersion, dir ?? this.dataDirectory, this.fileSystem);

package/dest/delayed_public_mutable/delayed_public_mutable_values.d.ts

@@ -14,7 +14,7 @@ export declare class DelayedPublicMutableValues {
     static empty(valueSize: number): DelayedPublicMutableValues;
     static readFromTree(delayedPublicMutableSlot: Fr, readStorage: (storageSlot: Fr) => Promise<Fr>): Promise<DelayedPublicMutableValues>;
     isEmpty(): boolean;
-    writeToTree(delayedPublicMutableSlot: Fr, storageWrite: (storageSlot: Fr, value: Fr) => Promise<void>): Promise<void>;
+    writeToTree(delayedPublicMutableSlot: Fr, storageWrite: (storageSlot: Fr, value: Fr) => Promise<void>): Promise<void[]>;
     hash(): Promise<Fr>;
 }
-//# sourceMappingURL=data:application/json;base64,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
+//# sourceMappingURL=data:application/json;base64,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

package/dest/delayed_public_mutable/delayed_public_mutable_values.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"delayed_public_mutable_values.d.ts","sourceRoot":"","sources":["../../src/delayed_public_mutable/delayed_public_mutable_values.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,EAAE,EAAE,MAAM,gCAAgC,CAAC;AACpD,OAAO,EAAE,YAAY,EAAE,WAAW,EAAqB,MAAM,6BAA6B,CAAC;AAE3F,OAAO,EAAE,oBAAoB,EAAE,MAAM,6BAA6B,CAAC;AACnE,OAAO,EAAE,oBAAoB,EAAE,MAAM,6BAA6B,CAAC;AAEnE,eAAO,MAAM,iCAAiC,QAA6B,CAAC;AAE5E,qBAAa,0BAA0B;IAE5B,GAAG,EAAE,oBAAoB;IACzB,GAAG,EAAE,oBAAoB;IAFlC,YACS,GAAG,EAAE,oBAAoB,EACzB,GAAG,EAAE,oBAAoB,EAC9B;IAEJ,MAAM,CAAC,UAAU,CAAC,MAAM,EAAE,EAAE,EAAE,GAAG,WAAW,8BAyB3C;IAED,QAAQ,IAAI,EAAE,EAAE,CAWf;IAED,QAAQ,IAAI,MAAM,CAEjB;IAED,MAAM,CAAC,UAAU,CAAC,MAAM,EAAE,MAAM,GAAG,YAAY,EAAE,SAAS,EAAE,MAAM,GAAG,0BAA0B,CAG9F;IAED,MAAM,CAAC,KAAK,CAAC,SAAS,EAAE,MAAM,8BAE7B;IAED,OAAa,YAAY,CAAC,wBAAwB,EAAE,EAAE,EAAE,WAAW,EAAE,CAAC,WAAW,EAAE,EAAE,KAAK,OAAO,CAAC,EAAE,CAAC,uCAMpG;IAED,OAAO,IAAI,OAAO,CAEjB;IAEK,WAAW,CAAC,wBAAwB,EAAE,EAAE,EAAE,YAAY,EAAE,CAAC,WAAW,EAAE,EAAE,EAAE,KAAK,EAAE,EAAE,KAAK,OAAO,CAAC,IAAI,CAAC,iBAM1G;IAEK,IAAI,IAAI,OAAO,CAAC,EAAE,CAAC,CAIxB;CACF"}
+{"version":3,"file":"delayed_public_mutable_values.d.ts","sourceRoot":"","sources":["../../src/delayed_public_mutable/delayed_public_mutable_values.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,EAAE,EAAE,MAAM,gCAAgC,CAAC;AACpD,OAAO,EAAE,YAAY,EAAE,WAAW,EAAqB,MAAM,6BAA6B,CAAC;AAE3F,OAAO,EAAE,oBAAoB,EAAE,MAAM,6BAA6B,CAAC;AACnE,OAAO,EAAE,oBAAoB,EAAE,MAAM,6BAA6B,CAAC;AAEnE,eAAO,MAAM,iCAAiC,QAA6B,CAAC;AAE5E,qBAAa,0BAA0B;IAE5B,GAAG,EAAE,oBAAoB;IACzB,GAAG,EAAE,oBAAoB;IAFlC,YACS,GAAG,EAAE,oBAAoB,EACzB,GAAG,EAAE,oBAAoB,EAC9B;IAEJ,MAAM,CAAC,UAAU,CAAC,MAAM,EAAE,EAAE,EAAE,GAAG,WAAW,8BAyB3C;IAED,QAAQ,IAAI,EAAE,EAAE,CAWf;IAED,QAAQ,IAAI,MAAM,CAEjB;IAED,MAAM,CAAC,UAAU,CAAC,MAAM,EAAE,MAAM,GAAG,YAAY,EAAE,SAAS,EAAE,MAAM,GAAG,0BAA0B,CAG9F;IAED,MAAM,CAAC,KAAK,CAAC,SAAS,EAAE,MAAM,8BAE7B;IAED,OAAa,YAAY,CAAC,wBAAwB,EAAE,EAAE,EAAE,WAAW,EAAE,CAAC,WAAW,EAAE,EAAE,KAAK,OAAO,CAAC,EAAE,CAAC,uCAKpG;IAED,OAAO,IAAI,OAAO,CAEjB;IAED,WAAW,CAAC,wBAAwB,EAAE,EAAE,EAAE,YAAY,EAAE,CAAC,WAAW,EAAE,EAAE,EAAE,KAAK,EAAE,EAAE,KAAK,OAAO,CAAC,IAAI,CAAC,mBAMpG;IAEK,IAAI,IAAI,OAAO,CAAC,EAAE,CAAC,CAIxB;CACF"}

package/dest/delayed_public_mutable/delayed_public_mutable_values.js

@@ -55,20 +55,17 @@ export class DelayedPublicMutableValues {
         return new this(ScheduledValueChange.empty(valueSize), ScheduledDelayChange.empty());
     }
     static async readFromTree(delayedPublicMutableSlot, readStorage) {
-        const fields = [];
-        for(let i = 0; i < DELAYED_PUBLIC_MUTABLE_VALUES_LEN; i++){
-            fields.push(await readStorage(delayedPublicMutableSlot.add(new Fr(i))));
-        }
-        return DelayedPublicMutableValues.fromFields(fields);
+        const fieldPromises = Array.from({
+            length: DELAYED_PUBLIC_MUTABLE_VALUES_LEN
+        }).map((_, i)=>readStorage(delayedPublicMutableSlot.add(new Fr(i))));
+        return DelayedPublicMutableValues.fromFields(await Promise.all(fieldPromises));
     }
     isEmpty() {
         return this.svc.isEmpty() && this.sdc.isEmpty();
     }
-    async writeToTree(delayedPublicMutableSlot, storageWrite) {
-        const fields = this.toFields();
-        for(let i = 0; i < fields.length; i++){
-            await storageWrite(delayedPublicMutableSlot.add(new Fr(i)), fields[i]);
-        }
+    writeToTree(delayedPublicMutableSlot, storageWrite) {
+        const fieldPromises = this.toFields().map((field, i)=>storageWrite(delayedPublicMutableSlot.add(new Fr(i)), field));
+        return Promise.all(fieldPromises);
     }
     async hash() {
         const fields = this.toFields();

package/dest/deserialization/index.d.ts

@@ -2,10 +2,42 @@
 export declare const MAX_TXS_PER_BLOCK: number;
 /** Max committee size - theoretical max from bitmap design (256 bytes × 8 bits) */
 export declare const MAX_COMMITTEE_SIZE = 2048;
-/** Max blocks per checkpoint */
-export declare const MAX_BLOCKS_PER_CHECKPOINT = 72;
+/**
+ * Maximum number of L2 blocks in a provable checkpoint. Used for deserialization and when ingesting
+ * checkpoints already accepted by L1.
+ *
+ * This MUST be >= the number of blocks the proving system can carry, or a structurally-valid, provable
+ * checkpoint that L1 accepts would be rejected on ingest (`validateCheckpoint`) and wedge the archiver.
+ * The circuits and L1 impose no explicit per-checkpoint block count; the ceiling comes from the
+ * blob-field budget:
+ *
+ *   budget = BLOBS_PER_CHECKPOINT * FIELDS_PER_BLOB = 6 * 4096 = 24,576 fields
+ *
+ *   per-block minimal blob footprint:
+ *     first block  (may be empty)   = 7 fields   (NUM_FIRST_BLOCK_END_BLOB_FIELDS)
+ *     every other  (needs >= 1 tx)  = 6 + 4 = 10 fields
+ *                                     (NUM_BLOCK_END_BLOB_FIELDS + a 4-field minimal tx:
+ *                                      tx start marker + tx hash + fee + 1 mandatory nullifier)
+ *     + 1 checkpoint-end marker      (NUM_CHECKPOINT_END_MARKER_FIELDS)
+ *
+ *   max N:  7 + 10*(N - 1) + 1 <= 24,576  =>  10*(N - 1) <= 24,568  =>  N <= 2,457
+ *
+ * Only the first block may be empty; every other block needs >= 1 tx (the circuits have no empty-tx
+ * variant for non-first blocks), so 2457 is the largest provable checkpoint. The blob format can encode
+ * more blocks than this (up to ~4095 with all-empty blocks), but such a checkpoint is unprovable and
+ * can only reach L1 with a malicious committee supermajority — a terminal network compromise where a
+ * wedged archiver is an acceptable outcome. We therefore bound ingest to the provable maximum.
+ * Invariant checked by the unit test in deserialization.test.ts.
+ */
+export declare const MAX_CAPACITY_BLOCKS_PER_CHECKPOINT = 2457;
+/**
+ * Max blocks per checkpoint we are willing to build or attest to (conservative client policy, and the
+ * default block-count limit for `validateCheckpoint`). Distinct from {@link MAX_CAPACITY_BLOCKS_PER_CHECKPOINT},
+ * which is the higher ceiling we tolerate when deserializing checkpoints already accepted by L1.
+ */
+export declare const MAX_ATTESTABLE_BLOCKS_PER_CHECKPOINT = 72;
 /** Max tx effects per body (based on blob capacity per checkpoint) */
 export declare const MAX_TX_EFFECTS_PER_BODY: number;
 /** Max block hash string length (hex: 0x + 64 chars, with generous headroom) */
 export declare const MAX_BLOCK_HASH_STRING_LENGTH = 128;
-//# sourceMappingURL=data:application/json;base64,eyJ2ZXJzaW9uIjozLCJmaWxlIjoiaW5kZXguZC50cyIsInNvdXJjZVJvb3QiOiIiLCJzb3VyY2VzIjpbIi4uLy4uL3NyYy9kZXNlcmlhbGl6YXRpb24vaW5kZXgudHMiXSwibmFtZXMiOltdLCJtYXBwaW5ncyI6IkFBT0EsZ0VBQWdFO0FBQ2hFLGVBQU8sTUFBTSxpQkFBaUIsUUFBVSxDQUFDO0FBRXpDLG9GQUFtRjtBQUNuRixlQUFPLE1BQU0sa0JBQWtCLE9BQU8sQ0FBQztBQUV2QyxnQ0FBZ0M7QUFDaEMsZUFBTyxNQUFNLHlCQUF5QixLQUFLLENBQUM7QUFFNUMsc0VBQXNFO0FBQ3RFLGVBQU8sTUFBTSx1QkFBdUIsUUFBeUMsQ0FBQztBQUU5RSxnRkFBZ0Y7QUFDaEYsZUFBTyxNQUFNLDRCQUE0QixNQUFNLENBQUMifQ==
+//# sourceMappingURL=data:application/json;base64,eyJ2ZXJzaW9uIjozLCJmaWxlIjoiaW5kZXguZC50cyIsInNvdXJjZVJvb3QiOiIiLCJzb3VyY2VzIjpbIi4uLy4uL3NyYy9kZXNlcmlhbGl6YXRpb24vaW5kZXgudHMiXSwibmFtZXMiOltdLCJtYXBwaW5ncyI6IkFBT0EsZ0VBQWdFO0FBQ2hFLGVBQU8sTUFBTSxpQkFBaUIsUUFBVSxDQUFDO0FBRXpDLG9GQUFtRjtBQUNuRixlQUFPLE1BQU0sa0JBQWtCLE9BQU8sQ0FBQztBQUV2Qzs7Ozs7Ozs7Ozs7Ozs7Ozs7Ozs7Ozs7Ozs7R0EwQkc7QUFDSCxlQUFPLE1BQU0sa0NBQWtDLE9BQU8sQ0FBQztBQUV2RDs7OztHQUlHO0FBQ0gsZUFBTyxNQUFNLG9DQUFvQyxLQUFLLENBQUM7QUFFdkQsc0VBQXNFO0FBQ3RFLGVBQU8sTUFBTSx1QkFBdUIsUUFBeUMsQ0FBQztBQUU5RSxnRkFBZ0Y7QUFDaEYsZUFBTyxNQUFNLDRCQUE0QixNQUFNLENBQUMifQ==

package/dest/deserialization/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/deserialization/index.ts"],"names":[],"mappings":"AAOA,gEAAgE;AAChE,eAAO,MAAM,iBAAiB,QAAU,CAAC;AAEzC,oFAAmF;AACnF,eAAO,MAAM,kBAAkB,OAAO,CAAC;AAEvC,gCAAgC;AAChC,eAAO,MAAM,yBAAyB,KAAK,CAAC;AAE5C,sEAAsE;AACtE,eAAO,MAAM,uBAAuB,QAAyC,CAAC;AAE9E,gFAAgF;AAChF,eAAO,MAAM,4BAA4B,MAAM,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/deserialization/index.ts"],"names":[],"mappings":"AAOA,gEAAgE;AAChE,eAAO,MAAM,iBAAiB,QAAU,CAAC;AAEzC,oFAAmF;AACnF,eAAO,MAAM,kBAAkB,OAAO,CAAC;AAEvC;;;;;;;;;;;;;;;;;;;;;;;;;;GA0BG;AACH,eAAO,MAAM,kCAAkC,OAAO,CAAC;AAEvD;;;;GAIG;AACH,eAAO,MAAM,oCAAoC,KAAK,CAAC;AAEvD,sEAAsE;AACtE,eAAO,MAAM,uBAAuB,QAAyC,CAAC;AAE9E,gFAAgF;AAChF,eAAO,MAAM,4BAA4B,MAAM,CAAC"}

package/dest/deserialization/index.js

@@ -5,6 +5,37 @@
  */ import { BLOBS_PER_CHECKPOINT, FIELDS_PER_BLOB } from '@aztec/constants';
 /** Max transactions per block for deserialization validation */ export const MAX_TXS_PER_BLOCK = 2 ** 16;
 /** Max committee size - theoretical max from bitmap design (256 bytes × 8 bits) */ export const MAX_COMMITTEE_SIZE = 2048;
-/** Max blocks per checkpoint */ export const MAX_BLOCKS_PER_CHECKPOINT = 72;
+/**
+ * Maximum number of L2 blocks in a provable checkpoint. Used for deserialization and when ingesting
+ * checkpoints already accepted by L1.
+ *
+ * This MUST be >= the number of blocks the proving system can carry, or a structurally-valid, provable
+ * checkpoint that L1 accepts would be rejected on ingest (`validateCheckpoint`) and wedge the archiver.
+ * The circuits and L1 impose no explicit per-checkpoint block count; the ceiling comes from the
+ * blob-field budget:
+ *
+ *   budget = BLOBS_PER_CHECKPOINT * FIELDS_PER_BLOB = 6 * 4096 = 24,576 fields
+ *
+ *   per-block minimal blob footprint:
+ *     first block  (may be empty)   = 7 fields   (NUM_FIRST_BLOCK_END_BLOB_FIELDS)
+ *     every other  (needs >= 1 tx)  = 6 + 4 = 10 fields
+ *                                     (NUM_BLOCK_END_BLOB_FIELDS + a 4-field minimal tx:
+ *                                      tx start marker + tx hash + fee + 1 mandatory nullifier)
+ *     + 1 checkpoint-end marker      (NUM_CHECKPOINT_END_MARKER_FIELDS)
+ *
+ *   max N:  7 + 10*(N - 1) + 1 <= 24,576  =>  10*(N - 1) <= 24,568  =>  N <= 2,457
+ *
+ * Only the first block may be empty; every other block needs >= 1 tx (the circuits have no empty-tx
+ * variant for non-first blocks), so 2457 is the largest provable checkpoint. The blob format can encode
+ * more blocks than this (up to ~4095 with all-empty blocks), but such a checkpoint is unprovable and
+ * can only reach L1 with a malicious committee supermajority — a terminal network compromise where a
+ * wedged archiver is an acceptable outcome. We therefore bound ingest to the provable maximum.
+ * Invariant checked by the unit test in deserialization.test.ts.
+ */ export const MAX_CAPACITY_BLOCKS_PER_CHECKPOINT = 2457;
+/**
+ * Max blocks per checkpoint we are willing to build or attest to (conservative client policy, and the
+ * default block-count limit for `validateCheckpoint`). Distinct from {@link MAX_CAPACITY_BLOCKS_PER_CHECKPOINT},
+ * which is the higher ceiling we tolerate when deserializing checkpoints already accepted by L1.
+ */ export const MAX_ATTESTABLE_BLOCKS_PER_CHECKPOINT = 72;
 /** Max tx effects per body (based on blob capacity per checkpoint) */ export const MAX_TX_EFFECTS_PER_BODY = BLOBS_PER_CHECKPOINT * FIELDS_PER_BLOB;
 /** Max block hash string length (hex: 0x + 64 chars, with generous headroom) */ export const MAX_BLOCK_HASH_STRING_LENGTH = 128;