@aztec/stdlib 5.0.0-nightly.20260623 → 5.0.0-nightly.20260624

package/dest/abi/buffer.d.ts

@@ -20,7 +20,11 @@ export declare function bufferAsFields(input: Buffer, targetLength: number): Fr[
  * bytecode commitment computations to diverge from what the circuit produced.
  *
  * @param fields - An output from bufferAsFields: [byteLength, ...payloadFields].
+ * @param maxByteLength - Optional upper bound on the declared byte length. When the field array comes
+ *   from untrusted input (e.g. a gossiped contract-class log), pass the payload capacity so an
+ *   attacker-declared length cannot force a large `Buffer.alloc` before the value is otherwise
+ *   rejected. Throws if the declared length exceeds it, before allocating.
  * @returns A buffer of exactly `byteLength` bytes.
  */
-export declare function bufferFromFields(fields: Fr[]): Buffer;
-//# sourceMappingURL=data:application/json;base64,eyJ2ZXJzaW9uIjozLCJmaWxlIjoiYnVmZmVyLmQudHMiLCJzb3VyY2VSb290IjoiIiwic291cmNlcyI6WyIuLi8uLi9zcmMvYWJpL2J1ZmZlci50cyJdLCJuYW1lcyI6W10sIm1hcHBpbmdzIjoiQUFBQSxPQUFPLEVBQUUsRUFBRSxFQUFFLE1BQU0sZ0NBQWdDLENBQUM7QUFJcEQ7Ozs7OztHQU1HO0FBQ0gsd0JBQWdCLGNBQWMsQ0FBQyxLQUFLLEVBQUUsTUFBTSxFQUFFLFlBQVksRUFBRSxNQUFNLEdBQUcsRUFBRSxFQUFFLENBY3hFO0FBRUQ7Ozs7Ozs7Ozs7Ozs7O0dBY0c7QUFDSCx3QkFBZ0IsZ0JBQWdCLENBQUMsTUFBTSxFQUFFLEVBQUUsRUFBRSxHQUFHLE1BQU0sQ0FjckQifQ==
+export declare function bufferFromFields(fields: Fr[], maxByteLength?: number): Buffer;
+//# sourceMappingURL=data:application/json;base64,eyJ2ZXJzaW9uIjozLCJmaWxlIjoiYnVmZmVyLmQudHMiLCJzb3VyY2VSb290IjoiIiwic291cmNlcyI6WyIuLi8uLi9zcmMvYWJpL2J1ZmZlci50cyJdLCJuYW1lcyI6W10sIm1hcHBpbmdzIjoiQUFBQSxPQUFPLEVBQUUsRUFBRSxFQUFFLE1BQU0sZ0NBQWdDLENBQUM7QUFJcEQ7Ozs7OztHQU1HO0FBQ0gsd0JBQWdCLGNBQWMsQ0FBQyxLQUFLLEVBQUUsTUFBTSxFQUFFLFlBQVksRUFBRSxNQUFNLEdBQUcsRUFBRSxFQUFFLENBY3hFO0FBRUQ7Ozs7Ozs7Ozs7Ozs7Ozs7OztHQWtCRztBQUNILHdCQUFnQixnQkFBZ0IsQ0FBQyxNQUFNLEVBQUUsRUFBRSxFQUFFLEVBQUUsYUFBYSxDQUFDLEVBQUUsTUFBTSxHQUFHLE1BQU0sQ0FzQjdFIn0=

package/dest/abi/buffer.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"buffer.d.ts","sourceRoot":"","sources":["../../src/abi/buffer.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,EAAE,EAAE,MAAM,gCAAgC,CAAC;AAIpD;;;;;;GAMG;AACH,wBAAgB,cAAc,CAAC,KAAK,EAAE,MAAM,EAAE,YAAY,EAAE,MAAM,GAAG,EAAE,EAAE,CAcxE;AAED;;;;;;;;;;;;;;GAcG;AACH,wBAAgB,gBAAgB,CAAC,MAAM,EAAE,EAAE,EAAE,GAAG,MAAM,CAcrD"}
+{"version":3,"file":"buffer.d.ts","sourceRoot":"","sources":["../../src/abi/buffer.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,EAAE,EAAE,MAAM,gCAAgC,CAAC;AAIpD;;;;;;GAMG;AACH,wBAAgB,cAAc,CAAC,KAAK,EAAE,MAAM,EAAE,YAAY,EAAE,MAAM,GAAG,EAAE,EAAE,CAcxE;AAED;;;;;;;;;;;;;;;;;;GAkBG;AACH,wBAAgB,gBAAgB,CAAC,MAAM,EAAE,EAAE,EAAE,EAAE,aAAa,CAAC,EAAE,MAAM,GAAG,MAAM,CAsB7E"}

package/dest/abi/buffer.js

@@ -37,10 +37,22 @@ import chunk from 'lodash.chunk';
  * bytecode commitment computations to diverge from what the circuit produced.
  *
  * @param fields - An output from bufferAsFields: [byteLength, ...payloadFields].
+ * @param maxByteLength - Optional upper bound on the declared byte length. When the field array comes
+ *   from untrusted input (e.g. a gossiped contract-class log), pass the payload capacity so an
+ *   attacker-declared length cannot force a large `Buffer.alloc` before the value is otherwise
+ *   rejected. Throws if the declared length exceeds it, before allocating.
  * @returns A buffer of exactly `byteLength` bytes.
- */ export function bufferFromFields(fields) {
+ */ export function bufferFromFields(fields, maxByteLength) {
+    // A valid bufferAsFields output always has at least the leading byte-length field, so an empty
+    // input encodes no data. Guard so `length` (the destructured head) is never undefined.
+    if (fields.length === 0) {
+        return Buffer.alloc(0);
+    }
     const [length, ...payload] = fields;
     const byteLength = length.toNumber();
+    if (maxByteLength !== undefined && byteLength > maxByteLength) {
+        throw new Error(`Declared byte length ${byteLength} exceeds maximum ${maxByteLength}`);
+    }
     const raw = Buffer.concat(payload.map((f)=>f.toBuffer().subarray(1)));
     if (raw.length >= byteLength) {
         return raw.subarray(0, byteLength);

package/dest/interfaces/prover-node.d.ts

@@ -1,7 +1,7 @@
 import { defaultFetch } from '@aztec/foundation/json-rpc/client';
 import { type ApiSchemaFor } from '../schemas/index.js';
 import { type ComponentsVersions } from '../versioning/index.js';
-declare const EpochProvingJobState: readonly ["initialized", "awaiting-checkpoints", "awaiting-predecessor", "publishing-proof", "completed", "superseded", "failed", "stopped", "cancelled", "timed-out"];
+declare const EpochProvingJobState: readonly ["initialized", "awaiting-checkpoints", "awaiting-root", "awaiting-predecessor", "publishing-proof", "completed", "superseded", "failed", "stopped", "cancelled", "timed-out"];
 export type EpochProvingJobState = (typeof EpochProvingJobState)[number];
 export declare const EpochProvingJobTerminalState: EpochProvingJobState[];
 export type EpochProvingJobTerminalState = (typeof EpochProvingJobTerminalState)[number];
@@ -23,4 +23,4 @@ export interface ProverNodeApi {
 export declare const ProverNodeApiSchema: ApiSchemaFor<ProverNodeApi>;
 export declare function createProverNodeAdminClient(url: string, versions?: Partial<ComponentsVersions>, fetch?: typeof defaultFetch, apiKey?: string): ProverNodeApi;
 export {};
-//# sourceMappingURL=data:application/json;base64,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
+//# sourceMappingURL=data:application/json;base64,eyJ2ZXJzaW9uIjozLCJmaWxlIjoicHJvdmVyLW5vZGUuZC50cyIsInNvdXJjZVJvb3QiOiIiLCJzb3VyY2VzIjpbIi4uLy4uL3NyYy9pbnRlcmZhY2VzL3Byb3Zlci1ub2RlLnRzIl0sIm5hbWVzIjpbXSwibWFwcGluZ3MiOiJBQUFBLE9BQU8sRUFBMkIsWUFBWSxFQUFFLE1BQU0sbUNBQW1DLENBQUM7QUFJMUYsT0FBTyxFQUFFLEtBQUssWUFBWSxFQUFXLE1BQU0scUJBQXFCLENBQUM7QUFDakUsT0FBTyxFQUFFLEtBQUssa0JBQWtCLEVBQWdDLE1BQU0sd0JBQXdCLENBQUM7QUFFL0YsUUFBQSxNQUFNLG9CQUFvQix5TEFZaEIsQ0FBQztBQUVYLE1BQU0sTUFBTSxvQkFBb0IsR0FBRyxDQUFDLE9BQU8sb0JBQW9CLENBQUMsQ0FBQyxNQUFNLENBQUMsQ0FBQztBQUV6RSxlQUFPLE1BQU0sNEJBQTRCLEVBQUUsb0JBQW9CLEVBT3JELENBQUM7QUFFWCxNQUFNLE1BQU0sNEJBQTRCLEdBQUcsQ0FBQyxPQUFPLDRCQUE0QixDQUFDLENBQUMsTUFBTSxDQUFDLENBQUM7QUFFekYsaURBQWlEO0FBQ2pELE1BQU0sV0FBVyxhQUFhO0lBQzVCLE9BQU8sSUFBSSxPQUFPLENBQUM7UUFBRSxJQUFJLEVBQUUsTUFBTSxDQUFDO1FBQUMsTUFBTSxFQUFFLG9CQUFvQixDQUFDO1FBQUMsV0FBVyxFQUFFLE1BQU0sQ0FBQTtLQUFFLEVBQUUsQ0FBQyxDQUFDO0lBRTFGOzs7O09BSUc7SUFDSCxVQUFVLENBQUMsV0FBVyxFQUFFLE1BQU0sR0FBRyxPQUFPLENBQUMsTUFBTSxDQUFDLENBQUM7Q0FDbEQ7QUFFRCw2Q0FBNkM7QUFDN0MsZUFBTyxNQUFNLG1CQUFtQixFQUFFLFlBQVksQ0FBQyxhQUFhLENBTzNELENBQUM7QUFFRix3QkFBZ0IsMkJBQTJCLENBQ3pDLEdBQUcsRUFBRSxNQUFNLEVBQ1gsUUFBUSxHQUFFLE9BQU8sQ0FBQyxrQkFBa0IsQ0FBTSxFQUMxQyxLQUFLLHNCQUFlLEVBQ3BCLE1BQU0sQ0FBQyxFQUFFLE1BQU0sR0FDZCxhQUFhLENBT2YifQ==

package/dest/interfaces/prover-node.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"prover-node.d.ts","sourceRoot":"","sources":["../../src/interfaces/prover-node.ts"],"names":[],"mappings":"AAAA,OAAO,EAA2B,YAAY,EAAE,MAAM,mCAAmC,CAAC;AAI1F,OAAO,EAAE,KAAK,YAAY,EAAW,MAAM,qBAAqB,CAAC;AACjE,OAAO,EAAE,KAAK,kBAAkB,EAAgC,MAAM,wBAAwB,CAAC;AAE/F,QAAA,MAAM,oBAAoB,wKAWhB,CAAC;AAEX,MAAM,MAAM,oBAAoB,GAAG,CAAC,OAAO,oBAAoB,CAAC,CAAC,MAAM,CAAC,CAAC;AAEzE,eAAO,MAAM,4BAA4B,EAAE,oBAAoB,EAOrD,CAAC;AAEX,MAAM,MAAM,4BAA4B,GAAG,CAAC,OAAO,4BAA4B,CAAC,CAAC,MAAM,CAAC,CAAC;AAEzF,iDAAiD;AACjD,MAAM,WAAW,aAAa;IAC5B,OAAO,IAAI,OAAO,CAAC;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,oBAAoB,CAAC;QAAC,WAAW,EAAE,MAAM,CAAA;KAAE,EAAE,CAAC,CAAC;IAE1F;;;;OAIG;IACH,UAAU,CAAC,WAAW,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC;CAClD;AAED,6CAA6C;AAC7C,eAAO,MAAM,mBAAmB,EAAE,YAAY,CAAC,aAAa,CAO3D,CAAC;AAEF,wBAAgB,2BAA2B,CACzC,GAAG,EAAE,MAAM,EACX,QAAQ,GAAE,OAAO,CAAC,kBAAkB,CAAM,EAC1C,KAAK,sBAAe,EACpB,MAAM,CAAC,EAAE,MAAM,GACd,aAAa,CAOf"}
+{"version":3,"file":"prover-node.d.ts","sourceRoot":"","sources":["../../src/interfaces/prover-node.ts"],"names":[],"mappings":"AAAA,OAAO,EAA2B,YAAY,EAAE,MAAM,mCAAmC,CAAC;AAI1F,OAAO,EAAE,KAAK,YAAY,EAAW,MAAM,qBAAqB,CAAC;AACjE,OAAO,EAAE,KAAK,kBAAkB,EAAgC,MAAM,wBAAwB,CAAC;AAE/F,QAAA,MAAM,oBAAoB,yLAYhB,CAAC;AAEX,MAAM,MAAM,oBAAoB,GAAG,CAAC,OAAO,oBAAoB,CAAC,CAAC,MAAM,CAAC,CAAC;AAEzE,eAAO,MAAM,4BAA4B,EAAE,oBAAoB,EAOrD,CAAC;AAEX,MAAM,MAAM,4BAA4B,GAAG,CAAC,OAAO,4BAA4B,CAAC,CAAC,MAAM,CAAC,CAAC;AAEzF,iDAAiD;AACjD,MAAM,WAAW,aAAa;IAC5B,OAAO,IAAI,OAAO,CAAC;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,oBAAoB,CAAC;QAAC,WAAW,EAAE,MAAM,CAAA;KAAE,EAAE,CAAC,CAAC;IAE1F;;;;OAIG;IACH,UAAU,CAAC,WAAW,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC;CAClD;AAED,6CAA6C;AAC7C,eAAO,MAAM,mBAAmB,EAAE,YAAY,CAAC,aAAa,CAO3D,CAAC;AAEF,wBAAgB,2BAA2B,CACzC,GAAG,EAAE,MAAM,EACX,QAAQ,GAAE,OAAO,CAAC,kBAAkB,CAAM,EAC1C,KAAK,sBAAe,EACpB,MAAM,CAAC,EAAE,MAAM,GACd,aAAa,CAOf"}

package/dest/interfaces/prover-node.js

@@ -5,6 +5,7 @@ import { getVersioningResponseHandler } from '../versioning/index.js';
 const EpochProvingJobState = [
     'initialized',
     'awaiting-checkpoints',
+    'awaiting-root',
     'awaiting-predecessor',
     'publishing-proof',
     'completed',

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@aztec/stdlib",
-  "version": "5.0.0-nightly.20260623",
+  "version": "5.0.0-nightly.20260624",
   "type": "module",
   "inherits": [
     "../package.common.json",
@@ -92,13 +92,13 @@
   },
   "dependencies": {
     "@aws-sdk/client-s3": "^3.892.0",
-    "@aztec/bb.js": "5.0.0-nightly.20260623",
-    "@aztec/blob-lib": "5.0.0-nightly.20260623",
-    "@aztec/constants": "5.0.0-nightly.20260623",
-    "@aztec/ethereum": "5.0.0-nightly.20260623",
-    "@aztec/foundation": "5.0.0-nightly.20260623",
-    "@aztec/l1-artifacts": "5.0.0-nightly.20260623",
-    "@aztec/noir-noirc_abi": "5.0.0-nightly.20260623",
+    "@aztec/bb.js": "5.0.0-nightly.20260624",
+    "@aztec/blob-lib": "5.0.0-nightly.20260624",
+    "@aztec/constants": "5.0.0-nightly.20260624",
+    "@aztec/ethereum": "5.0.0-nightly.20260624",
+    "@aztec/foundation": "5.0.0-nightly.20260624",
+    "@aztec/l1-artifacts": "5.0.0-nightly.20260624",
+    "@aztec/noir-noirc_abi": "5.0.0-nightly.20260624",
     "@google-cloud/storage": "^7.15.0",
     "axios": "^1.15.1",
     "json-stringify-deterministic": "1.0.12",

package/src/abi/buffer.ts

@@ -38,11 +38,23 @@ export function bufferAsFields(input: Buffer, targetLength: number): Fr[] {
  * bytecode commitment computations to diverge from what the circuit produced.
  *
  * @param fields - An output from bufferAsFields: [byteLength, ...payloadFields].
+ * @param maxByteLength - Optional upper bound on the declared byte length. When the field array comes
+ *   from untrusted input (e.g. a gossiped contract-class log), pass the payload capacity so an
+ *   attacker-declared length cannot force a large `Buffer.alloc` before the value is otherwise
+ *   rejected. Throws if the declared length exceeds it, before allocating.
  * @returns A buffer of exactly `byteLength` bytes.
  */
-export function bufferFromFields(fields: Fr[]): Buffer {
+export function bufferFromFields(fields: Fr[], maxByteLength?: number): Buffer {
+  // A valid bufferAsFields output always has at least the leading byte-length field, so an empty
+  // input encodes no data. Guard so `length` (the destructured head) is never undefined.
+  if (fields.length === 0) {
+    return Buffer.alloc(0);
+  }
   const [length, ...payload] = fields;
   const byteLength = length.toNumber();
+  if (maxByteLength !== undefined && byteLength > maxByteLength) {
+    throw new Error(`Declared byte length ${byteLength} exceeds maximum ${maxByteLength}`);
+  }
   const raw = Buffer.concat(payload.map(f => f.toBuffer().subarray(1)));
   if (raw.length >= byteLength) {
     return raw.subarray(0, byteLength);

package/src/interfaces/prover-node.ts

@@ -8,6 +8,7 @@ import { type ComponentsVersions, getVersioningResponseHandler } from '../versio
 const EpochProvingJobState = [
   'initialized',
   'awaiting-checkpoints',
+  'awaiting-root',
   'awaiting-predecessor',
   'publishing-proof',
   'completed',