@aztec/stdlib 6.0.0-nightly.20260604 → 6.0.0-nightly.20260721

package/dest/checkpoint/simulation_overrides.d.ts

@@ -0,0 +1,61 @@
+import { type FeeHeader, RollupContract, type SimulationOverridesPlan } from '@aztec/ethereum/contracts';
+import { CheckpointNumber } from '@aztec/foundation/branded-types';
+import type { Logger } from '@aztec/foundation/log';
+import type { CoordinationSignatureContext } from '../p2p/signature_utils.js';
+import type { ProposedCheckpointData } from './checkpoint_data.js';
+type CheckpointSimulationOverridesPlanInput = {
+    /** Target rollup contract. */
+    rollup: RollupContract;
+    /** Checkpoint number to be proposed. */
+    checkpointNumber: CheckpointNumber;
+    /** Logger instance. */
+    log: Logger;
+    /**
+     * The proposed parent checkpoint when pipelining. Its `checkpointNumber` must equal
+     * `checkpointNumber - 1`; the helper enforces this. Mutually exclusive with
+     * `invalidateToPendingCheckpointNumber`.
+     */
+    proposedCheckpointData?: ProposedCheckpointData;
+    /**
+     * The pending checkpoint number we'll end up at after invalidation lands. Mutually exclusive
+     * with `proposedCheckpointData`.
+     */
+    invalidateToPendingCheckpointNumber?: CheckpointNumber;
+    /**
+     * The real on-chain pending checkpoint number (typically `syncedTo.checkpointedCheckpointNumber`).
+     * Used as the snapshot we pin both `pending` and `proven` to avoid prunes in simulation.
+     */
+    checkpointedCheckpointNumber: CheckpointNumber;
+    /**
+     * Chain-level consensus signature context. Used to recompute the parent's `payloadDigest` for the
+     * pipelined simulation override so it matches what `propose` will write into `tempCheckpointLogs[parent]`
+     * once the parent lands.
+     */
+    signatureContext: CoordinationSignatureContext;
+};
+/**
+ * Builds the SimulationOverridesPlan describing the simulated L1 rollup state for a checkpoint's
+ * enqueue-time simulations: `canProposeAt` (in Sequencer.doWork) and the propose-related sims
+ * (validateBlockHeader, simulateProposeTx). The plan reflects "as if our pipelined parent
+ * checkpoint has landed and any required invalidation has executed" — the gap that needs to be
+ * bridged at enqueue time.
+ *
+ * Pipelining (`proposedCheckpointData`) and invalidation (`invalidateToPendingCheckpointNumber`)
+ * are mutually exclusive; passing both throws.
+ */
+export declare function buildCheckpointSimulationOverridesPlan(input: CheckpointSimulationOverridesPlanInput): Promise<SimulationOverridesPlan | undefined>;
+type PipelinedParentFeeHeaderInput = {
+    checkpointNumber: CheckpointNumber;
+    proposedCheckpointData: ProposedCheckpointData;
+    rollup: RollupContract;
+    log: Logger;
+};
+/**
+ * Derives the pending parent fee header used during pipelined proposal simulation. Returns
+ * `undefined` only when no grandparent exists (i.e. the proposed parent is the genesis
+ * checkpoint); all other failure modes (missing grandparent state, missing fee header, RPC
+ * errors) throw so callers don't silently desync the fee-header override.
+ */
+export declare function computePipelinedParentFeeHeader(input: PipelinedParentFeeHeaderInput): Promise<FeeHeader | undefined>;
+export {};
+//# sourceMappingURL=data:application/json;base64,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

package/dest/checkpoint/simulation_overrides.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"simulation_overrides.d.ts","sourceRoot":"","sources":["../../src/checkpoint/simulation_overrides.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,KAAK,SAAS,EACd,cAAc,EAEd,KAAK,uBAAuB,EAC7B,MAAM,2BAA2B,CAAC;AACnC,OAAO,EAAE,gBAAgB,EAAE,MAAM,iCAAiC,CAAC;AACnE,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,uBAAuB,CAAC;AAEpD,OAAO,KAAK,EAAE,4BAA4B,EAAE,MAAM,2BAA2B,CAAC;AAC9E,OAAO,KAAK,EAAE,sBAAsB,EAAE,MAAM,sBAAsB,CAAC;AAGnE,KAAK,sCAAsC,GAAG;IAC5C,8BAA8B;IAC9B,MAAM,EAAE,cAAc,CAAC;IACvB,wCAAwC;IACxC,gBAAgB,EAAE,gBAAgB,CAAC;IACnC,uBAAuB;IACvB,GAAG,EAAE,MAAM,CAAC;IACZ;;;;OAIG;IACH,sBAAsB,CAAC,EAAE,sBAAsB,CAAC;IAChD;;;OAGG;IACH,mCAAmC,CAAC,EAAE,gBAAgB,CAAC;IACvD;;;OAGG;IACH,4BAA4B,EAAE,gBAAgB,CAAC;IAC/C;;;;OAIG;IACH,gBAAgB,EAAE,4BAA4B,CAAC;CAChD,CAAC;AAEF;;;;;;;;;GASG;AACH,wBAAsB,sCAAsC,CAC1D,KAAK,EAAE,sCAAsC,GAC5C,OAAO,CAAC,uBAAuB,GAAG,SAAS,CAAC,CAsD9C;AAqBD,KAAK,6BAA6B,GAAG;IACnC,gBAAgB,EAAE,gBAAgB,CAAC;IACnC,sBAAsB,EAAE,sBAAsB,CAAC;IAC/C,MAAM,EAAE,cAAc,CAAC;IACvB,GAAG,EAAE,MAAM,CAAC;CACb,CAAC;AAEF;;;;;GAKG;AACH,wBAAsB,+BAA+B,CACnD,KAAK,EAAE,6BAA6B,GACnC,OAAO,CAAC,SAAS,GAAG,SAAS,CAAC,CAwBhC"}

package/dest/checkpoint/simulation_overrides.js

@@ -0,0 +1,98 @@
+import { RollupContract, SimulationOverridesBuilder } from '@aztec/ethereum/contracts';
+import { CheckpointNumber } from '@aztec/foundation/branded-types';
+import { computeCheckpointPayloadDigest } from './digest.js';
+/**
+ * Builds the SimulationOverridesPlan describing the simulated L1 rollup state for a checkpoint's
+ * enqueue-time simulations: `canProposeAt` (in Sequencer.doWork) and the propose-related sims
+ * (validateBlockHeader, simulateProposeTx). The plan reflects "as if our pipelined parent
+ * checkpoint has landed and any required invalidation has executed" — the gap that needs to be
+ * bridged at enqueue time.
+ *
+ * Pipelining (`proposedCheckpointData`) and invalidation (`invalidateToPendingCheckpointNumber`)
+ * are mutually exclusive; passing both throws.
+ */ export async function buildCheckpointSimulationOverridesPlan(input) {
+    if (input.proposedCheckpointData && input.invalidateToPendingCheckpointNumber !== undefined) {
+        throw new Error('Error in buildCheckpointSimulationOverridesPlan: proposedCheckpointData and invalidateToPendingCheckpointNumber are mutually exclusive');
+    }
+    const builder = new SimulationOverridesBuilder();
+    const pendingCheckpointNumber = derivePendingCheckpointNumber(input);
+    // Override the latest checkpoint number when invalidating or pipelining, so our checkpoint
+    // follows from it. We also override the proven chain tip so we dont need to worry about
+    // prunes kicking in that would break out simulation if there's a prune pending. We always
+    // assume that a proof will land in time. If we don't have a pending checkpoint number to force,
+    // we still set both tips to the current checkpoint number to avoid the prune trigger.
+    const overridenChainTip = pendingCheckpointNumber ?? input.checkpointedCheckpointNumber;
+    builder.withChainTips({
+        pending: overridenChainTip,
+        proven: overridenChainTip
+    });
+    if (input.proposedCheckpointData) {
+        const { header, archive, checkpointOutHash, feeAssetPriceModifier } = input.proposedCheckpointData;
+        builder.withPendingArchive(archive.root);
+        // Override every locally-derivable `tempCheckpointLogs[parent]` field that L1 will eventually
+        // write. `slotNumber` is load-bearing for `STFLib.canPruneAtTime`: without it the cell reads
+        // slotNumber 0, the contract treats the pending tip as belonging to an expired epoch, and
+        // `getEffectivePendingCheckpointNumber` silently collapses pending back to proven — producing
+        // a spurious `Rollup__InvalidArchive` against the on-chain genesis archive. The other fields
+        // (headerHash, outHash, payloadDigest) are not strictly load-bearing for `canProposeAt` /
+        // `validateBlockHeader`, but mirroring the full cell keeps the simulation byte-faithful with
+        // what the actual `propose()` send will observe, which is a defense against future reads
+        // taking dependencies on them.
+        builder.withPendingTempCheckpointLogFields({
+            headerHash: header.hash(),
+            outHash: checkpointOutHash,
+            slotNumber: header.slotNumber,
+            payloadDigest: computeCheckpointPayloadDigest({
+                header,
+                archiveRoot: archive.root,
+                feeAssetPriceModifier,
+                signatureContext: input.signatureContext
+            })
+        });
+        const feeHeader = await computePipelinedParentFeeHeader({
+            checkpointNumber: input.checkpointNumber,
+            proposedCheckpointData: input.proposedCheckpointData,
+            rollup: input.rollup,
+            log: input.log
+        });
+        if (feeHeader) {
+            builder.withPendingFeeHeader(feeHeader);
+        }
+    }
+    return builder.build();
+}
+function derivePendingCheckpointNumber(input) {
+    if (input.invalidateToPendingCheckpointNumber !== undefined) {
+        return input.invalidateToPendingCheckpointNumber;
+    }
+    if (!input.proposedCheckpointData) {
+        return undefined;
+    }
+    if (input.checkpointNumber < 1) {
+        throw new Error(`Cannot build simulation override for checkpoint ${input.checkpointNumber}: no parent exists`);
+    }
+    const expectedParent = CheckpointNumber(input.checkpointNumber - 1);
+    if (input.proposedCheckpointData.checkpointNumber !== expectedParent) {
+        throw new Error(`Cannot build simulation override for checkpoint ${input.checkpointNumber}: proposedCheckpointData.checkpointNumber (${input.proposedCheckpointData.checkpointNumber}) does not match expected parent ${expectedParent}`);
+    }
+    return expectedParent;
+}
+/**
+ * Derives the pending parent fee header used during pipelined proposal simulation. Returns
+ * `undefined` only when no grandparent exists (i.e. the proposed parent is the genesis
+ * checkpoint); all other failure modes (missing grandparent state, missing fee header, RPC
+ * errors) throw so callers don't silently desync the fee-header override.
+ */ export async function computePipelinedParentFeeHeader(input) {
+    if (input.checkpointNumber < 2) {
+        return undefined;
+    }
+    const grandparentCheckpointNumber = CheckpointNumber(input.checkpointNumber - 2);
+    const [grandparentCheckpoint, manaTarget] = await Promise.all([
+        input.rollup.getCheckpoint(grandparentCheckpointNumber),
+        input.rollup.getManaTarget()
+    ]);
+    if (!grandparentCheckpoint?.feeHeader) {
+        throw new Error(`Grandparent checkpoint or feeHeader missing for checkpoint ${grandparentCheckpointNumber.toString()}`);
+    }
+    return RollupContract.computeChildFeeHeader(grandparentCheckpoint.feeHeader, input.proposedCheckpointData.totalManaUsed, input.proposedCheckpointData.feeAssetPriceModifier, manaTarget);
+}

package/dest/checkpoint/validate.d.ts

@@ -19,11 +19,17 @@ export declare function validateCheckpoint(checkpoint: Checkpoint, opts: {
     maxDABlockGas?: number;
     maxTxsPerCheckpoint?: number;
     maxTxsPerBlock?: number;
+    /**
+     * Max blocks per checkpoint. Defaults to {@link MAX_ATTESTABLE_BLOCKS_PER_CHECKPOINT}; the L1-sync
+     * ingest path passes `MAX_CAPACITY_BLOCKS_PER_CHECKPOINT` to tolerate larger checkpoints already
+     * accepted by L1.
+     */
+    maxBlocksPerCheckpoint?: number;
 }): void;
 /**
  * Validates structural integrity of a checkpoint.
  * - Non-empty block list
- * - Block count within MAX_BLOCKS_PER_CHECKPOINT
+ * - Block count within `maxBlocksPerCheckpoint` (default {@link MAX_ATTESTABLE_BLOCKS_PER_CHECKPOINT})
  * - Checkpoint slot matches the first block's slot
  * - Checkpoint lastArchiveRoot matches the first block's lastArchive root
  * - Sequential block numbers without gaps
@@ -32,5 +38,7 @@ export declare function validateCheckpoint(checkpoint: Checkpoint, opts: {
  * - Consistent slot number across all blocks
  * - Global variables (slot, timestamp, coinbase, feeRecipient, gasFees) match checkpoint header for each block
  */
-export declare function validateCheckpointStructure(checkpoint: Checkpoint): void;
-//# sourceMappingURL=data:application/json;base64,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
+export declare function validateCheckpointStructure(checkpoint: Checkpoint, opts?: {
+    maxBlocksPerCheckpoint?: number;
+}): void;
+//# sourceMappingURL=data:application/json;base64,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

package/dest/checkpoint/validate.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"validate.d.ts","sourceRoot":"","sources":["../../src/checkpoint/validate.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,gBAAgB,EAAE,UAAU,EAAE,MAAM,iCAAiC,CAAC;AAIpF,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,iBAAiB,CAAC;AAElD,qBAAa,yBAA0B,SAAQ,KAAK;aAGhC,gBAAgB,EAAE,gBAAgB;aAClC,IAAI,EAAE,UAAU;IAHlC,YACE,OAAO,EAAE,MAAM,EACC,gBAAgB,EAAE,gBAAgB,EAClC,IAAI,EAAE,UAAU,EAIjC;CACF;AAED;;;;;;;GAOG;AACH,wBAAgB,kBAAkB,CAChC,UAAU,EAAE,UAAU,EACtB,IAAI,EAAE;IACJ,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,mBAAmB,CAAC,EAAE,MAAM,CAAC;IAC7B,cAAc,CAAC,EAAE,MAAM,CAAC;CACzB,GACA,IAAI,CAIN;AAED;;;;;;;;;;;GAWG;AACH,wBAAgB,2BAA2B,CAAC,UAAU,EAAE,UAAU,GAAG,IAAI,CAuExE"}
+{"version":3,"file":"validate.d.ts","sourceRoot":"","sources":["../../src/checkpoint/validate.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,gBAAgB,EAAE,UAAU,EAAE,MAAM,iCAAiC,CAAC;AAIpF,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,iBAAiB,CAAC;AAElD,qBAAa,yBAA0B,SAAQ,KAAK;aAGhC,gBAAgB,EAAE,gBAAgB;aAClC,IAAI,EAAE,UAAU;IAHlC,YACE,OAAO,EAAE,MAAM,EACC,gBAAgB,EAAE,gBAAgB,EAClC,IAAI,EAAE,UAAU,EAIjC;CACF;AAED;;;;;;;GAOG;AACH,wBAAgB,kBAAkB,CAChC,UAAU,EAAE,UAAU,EACtB,IAAI,EAAE;IACJ,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,mBAAmB,CAAC,EAAE,MAAM,CAAC;IAC7B,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB;;;;OAIG;IACH,sBAAsB,CAAC,EAAE,MAAM,CAAC;CACjC,GACA,IAAI,CAIN;AAED;;;;;;;;;;;GAWG;AACH,wBAAgB,2BAA2B,CACzC,UAAU,EAAE,UAAU,EACtB,IAAI,GAAE;IAAE,sBAAsB,CAAC,EAAE,MAAM,CAAA;CAAO,GAC7C,IAAI,CAwEN"}

package/dest/checkpoint/validate.js

@@ -1,6 +1,6 @@
 import { BLOBS_PER_CHECKPOINT, FIELDS_PER_BLOB, MAX_PROCESSABLE_DA_GAS_PER_CHECKPOINT } from '@aztec/constants';
 import { sum } from '@aztec/foundation/collection';
-import { MAX_BLOCKS_PER_CHECKPOINT } from '../deserialization/index.js';
+import { MAX_ATTESTABLE_BLOCKS_PER_CHECKPOINT } from '../deserialization/index.js';
 export class CheckpointValidationError extends Error {
     checkpointNumber;
     slot;
@@ -17,14 +17,16 @@ export class CheckpointValidationError extends Error {
  * - Validates total DA gas used by checkpoint blocks against MAX_PROCESSABLE_DA_GAS_PER_CHECKPOINT
  * - Validates individual block L2 gas and DA gas against maxL2BlockGas and maxDABlockGas limits
  */ export function validateCheckpoint(checkpoint, opts) {
-    validateCheckpointStructure(checkpoint);
+    validateCheckpointStructure(checkpoint, {
+        maxBlocksPerCheckpoint: opts.maxBlocksPerCheckpoint
+    });
     validateCheckpointLimits(checkpoint, opts);
     validateCheckpointBlocksLimits(checkpoint, opts);
 }
 /**
  * Validates structural integrity of a checkpoint.
  * - Non-empty block list
- * - Block count within MAX_BLOCKS_PER_CHECKPOINT
+ * - Block count within `maxBlocksPerCheckpoint` (default {@link MAX_ATTESTABLE_BLOCKS_PER_CHECKPOINT})
  * - Checkpoint slot matches the first block's slot
  * - Checkpoint lastArchiveRoot matches the first block's lastArchive root
  * - Sequential block numbers without gaps
@@ -32,13 +34,14 @@ export class CheckpointValidationError extends Error {
  * - Archive root chaining between consecutive blocks
  * - Consistent slot number across all blocks
  * - Global variables (slot, timestamp, coinbase, feeRecipient, gasFees) match checkpoint header for each block
- */ export function validateCheckpointStructure(checkpoint) {
+ */ export function validateCheckpointStructure(checkpoint, opts = {}) {
+    const { maxBlocksPerCheckpoint = MAX_ATTESTABLE_BLOCKS_PER_CHECKPOINT } = opts;
     const { blocks, number, slot } = checkpoint;
     if (blocks.length === 0) {
         throw new CheckpointValidationError('Checkpoint has no blocks', number, slot);
     }
-    if (blocks.length > MAX_BLOCKS_PER_CHECKPOINT) {
-        throw new CheckpointValidationError(`Checkpoint has ${blocks.length} blocks, exceeding limit of ${MAX_BLOCKS_PER_CHECKPOINT}`, number, slot);
+    if (blocks.length > maxBlocksPerCheckpoint) {
+        throw new CheckpointValidationError(`Checkpoint has ${blocks.length} blocks, exceeding limit of ${maxBlocksPerCheckpoint}`, number, slot);
     }
     const firstBlock = blocks[0];
     if (!checkpoint.header.lastArchiveRoot.equals(firstBlock.header.lastArchive.root)) {

package/dest/config/index.d.ts

@@ -1,4 +1,5 @@
 export * from './chain-config.js';
+export * from './network-consensus-config.js';
 export * from './node-rpc-config.js';
 export * from './sequencer-config.js';
-//# sourceMappingURL=data:application/json;base64,eyJ2ZXJzaW9uIjozLCJmaWxlIjoiaW5kZXguZC50cyIsInNvdXJjZVJvb3QiOiIiLCJzb3VyY2VzIjpbIi4uLy4uL3NyYy9jb25maWcvaW5kZXgudHMiXSwibmFtZXMiOltdLCJtYXBwaW5ncyI6IkFBQUEsY0FBYyxtQkFBbUIsQ0FBQztBQUNsQyxjQUFjLHNCQUFzQixDQUFDO0FBQ3JDLGNBQWMsdUJBQXVCLENBQUMifQ==
+//# sourceMappingURL=data:application/json;base64,eyJ2ZXJzaW9uIjozLCJmaWxlIjoiaW5kZXguZC50cyIsInNvdXJjZVJvb3QiOiIiLCJzb3VyY2VzIjpbIi4uLy4uL3NyYy9jb25maWcvaW5kZXgudHMiXSwibmFtZXMiOltdLCJtYXBwaW5ncyI6IkFBQUEsY0FBYyxtQkFBbUIsQ0FBQztBQUNsQyxjQUFjLCtCQUErQixDQUFDO0FBQzlDLGNBQWMsc0JBQXNCLENBQUM7QUFDckMsY0FBYyx1QkFBdUIsQ0FBQyJ9

package/dest/config/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/config/index.ts"],"names":[],"mappings":"AAAA,cAAc,mBAAmB,CAAC;AAClC,cAAc,sBAAsB,CAAC;AACrC,cAAc,uBAAuB,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/config/index.ts"],"names":[],"mappings":"AAAA,cAAc,mBAAmB,CAAC;AAClC,cAAc,+BAA+B,CAAC;AAC9C,cAAc,sBAAsB,CAAC;AACrC,cAAc,uBAAuB,CAAC"}

package/dest/config/index.js

@@ -1,3 +1,4 @@
 export * from './chain-config.js';
+export * from './network-consensus-config.js';
 export * from './node-rpc-config.js';
 export * from './sequencer-config.js';

package/dest/config/network-consensus-config.d.ts

@@ -0,0 +1,72 @@
+import { type L1ContractsConfig } from '@aztec/ethereum/config';
+import type { SequencerConfig } from '../interfaces/configs.js';
+/**
+ * Environment variables whose values must be identical across every node of a network. They fall into three
+ * categories, all consensus-critical:
+ *
+ * - Timing/protocol consensus: slot and epoch durations, block sub-slot duration, max blocks per checkpoint, and
+ *   the checkpoint-proposal materialization grace. Proposers and validators must agree on these to land on the
+ *   same proposed chain and the same checkpoint-proposal receive/handoff deadlines.
+ * - Network identity and L1-posted deployment params: the L1 chain id and the staking/governance/slashing
+ *   parameters baked into the deployed rollup contract (committee size, lags, thresholds, mana target, fee
+ *   pricing, governance/slashing round sizes, quorums, slash amounts, etc.). A node disagreeing with the rollup
+ *   it points at would compute the wrong epoch geometry, fees, or slashing rounds.
+ * - Node-side slashing offense consensus: the offense detection/penalty parameters validators apply locally to
+ *   decide which payloads to sign. Validators must agree on these to reach the on-chain slashing quorum.
+ *
+ * Deliberately excluded: bootnodes, P2P/store/OTEL/sentinel settings, SEQ_MIN_TX_PER_BLOCK, SEQ_MAX_TX_PER_*,
+ * AZTEC_SLASHER_ENABLED, PROVER_REAL_PROOFS, TRANSACTIONS_DISABLED, and AZTEC_ENTRY_QUEUE_* (mainnet-only genesis
+ * params enforced by L1).
+ */
+export declare const NETWORK_CONSENSUS_ENV_VARS: readonly ["ETHEREUM_SLOT_DURATION", "AZTEC_SLOT_DURATION", "AZTEC_EPOCH_DURATION", "SEQ_BLOCK_DURATION_MS", "MAX_BLOCKS_PER_CHECKPOINT", "CHECKPOINT_PROPOSAL_SYNC_GRACE_SECONDS", "L1_CHAIN_ID", "AZTEC_TARGET_COMMITTEE_SIZE", "AZTEC_LAG_IN_EPOCHS_FOR_VALIDATOR_SET", "AZTEC_LAG_IN_EPOCHS_FOR_RANDAO", "AZTEC_ACTIVATION_THRESHOLD", "AZTEC_EJECTION_THRESHOLD", "AZTEC_LOCAL_EJECTION_THRESHOLD", "AZTEC_EXIT_DELAY_SECONDS", "AZTEC_INBOX_LAG", "AZTEC_PROOF_SUBMISSION_EPOCHS", "AZTEC_MANA_TARGET", "AZTEC_PROVING_COST_PER_MANA", "AZTEC_INITIAL_ETH_PER_FEE_ASSET", "AZTEC_GOVERNANCE_PROPOSER_ROUND_SIZE", "AZTEC_GOVERNANCE_PROPOSER_QUORUM", "AZTEC_SLASHING_QUORUM", "AZTEC_SLASHING_ROUND_SIZE_IN_EPOCHS", "AZTEC_SLASHING_LIFETIME_IN_ROUNDS", "AZTEC_SLASHING_OFFSET_IN_ROUNDS", "AZTEC_SLASHING_EXECUTION_DELAY_IN_ROUNDS", "AZTEC_SLASHING_VETOER", "AZTEC_SLASHING_DISABLE_DURATION", "AZTEC_SLASH_AMOUNT_SMALL", "AZTEC_SLASH_AMOUNT_MEDIUM", "AZTEC_SLASH_AMOUNT_LARGE", "SLASH_OFFENSE_EXPIRATION_ROUNDS", "SLASH_MAX_PAYLOAD_SIZE", "SLASH_EXECUTE_ROUNDS_LOOK_BACK", "SLASH_DATA_WITHHOLDING_TOLERANCE_SLOTS", "SLASH_DATA_WITHHOLDING_PENALTY", "SLASH_INACTIVITY_TARGET_PERCENTAGE", "SLASH_INACTIVITY_CONSECUTIVE_EPOCH_THRESHOLD", "SLASH_INACTIVITY_PENALTY", "SLASH_PROPOSE_INVALID_ATTESTATIONS_PENALTY", "SLASH_DUPLICATE_PROPOSAL_PENALTY", "SLASH_DUPLICATE_ATTESTATION_PENALTY", "SLASH_PROPOSE_DESCENDANT_OF_CHECKPOINT_WITH_INVALID_ATTESTATIONS_PENALTY", "SLASH_ATTEST_INVALID_CHECKPOINT_PROPOSAL_PENALTY", "SLASH_UNKNOWN_PENALTY", "SLASH_INVALID_BLOCK_PENALTY", "SLASH_INVALID_CHECKPOINT_PROPOSAL_PENALTY", "SLASH_GRACE_PERIOD_L2_SLOTS"];
+/** A consensus-critical environment variable name; see {@link NETWORK_CONSENSUS_ENV_VARS}. */
+export type ConsensusEnvVar = (typeof NETWORK_CONSENSUS_ENV_VARS)[number];
+/**
+ * The subset of consensus-critical timing config whose geometry can be validated in isolation. Composed by
+ * picking the canonical fields from their owning config types so the field set never drifts from the config
+ * layer: slot durations from {@link L1ContractsConfig}, block sub-slot/checkpoint timings from
+ * {@link SequencerConfig} (whose fields are optional there, hence `Required`).
+ */
+export type NetworkConsensusConfig = Pick<L1ContractsConfig, 'aztecSlotDuration' | 'ethereumSlotDuration'> & Required<Pick<SequencerConfig, 'blockDurationMs' | 'maxBlocksPerCheckpoint' | 'checkpointProposalSyncGraceSeconds'>>;
+/**
+ * Extracts the timing {@link NetworkConsensusConfig} from a generated network config object. The env-var names
+ * and the per-field parsing both come from the canonical config mappings (`l1ContractsConfigMappings` and
+ * `sharedSequencerConfigMappings`), so each field is parsed exactly as the node's config layer would parse it.
+ * A field whose env var is absent becomes `NaN`, which {@link validateNetworkConsensusConfig} reports as an
+ * error. Never throws: parse helpers that would throw or yield `undefined` are coerced to `NaN`.
+ */
+export declare function getConsensusConfigFromNetworkEnv(values: Record<string, string | number | boolean>): NetworkConsensusConfig;
+/**
+ * Validates a {@link NetworkConsensusConfig} for self-consistency, returning a list of error messages (empty
+ * when valid). Used by the cli unit test that gates the generated network configs.
+ *
+ * The check requires `maxBlocksPerCheckpoint` to be *exactly* what a {@link ProposerTimetable} built from the
+ * same slot timings and the production default budgets derives. This exact-equality requirement ensures the
+ * published network value is precisely what the production default budgets produce, so every node running those
+ * defaults agrees on the per-checkpoint block count without clamping.
+ */
+export declare function validateNetworkConsensusConfig(config: NetworkConsensusConfig): string[];
+/**
+ * Enforces that operators do not silently override consensus-critical values diverging from the network config.
+ *
+ * For each var in {@link NETWORK_CONSENSUS_ENV_VARS} present in `networkConfig`: if the operator set it in `env`
+ * to a conflicting value, this throws unless `ALLOW_OVERRIDING_NETWORK_CONFIG` is truthy (in which case it logs
+ * and keeps the operator value).
+ *
+ * This function is pure: it never writes to `env`. Instead it returns the canonical env writes the caller
+ * should apply — a map of env-var name to canonical string value for every numeric var whose env value matched
+ * the network value numerically. Applying these closes a bypass where the config layer parses some vars with
+ * `parseInt` (which reads '6e3' as 6); rewriting them to the network value's string form keeps the operator's
+ * numerically-equal value but in canonical form. Vars kept under `ALLOW_OVERRIDING_NETWORK_CONFIG` (genuine
+ * conflicts) are not included, so the operator value is preserved untouched.
+ *
+ * @returns Canonical env writes (env-var name -> canonical string value) for the caller to apply.
+ */
+export declare function checkConsensusEnvOverrides(networkConfig: Record<string, string | number | boolean>, env?: {
+    [key: string]: string | undefined;
+}, log?: (msg: string) => void): Record<string, string>;
+/** Whether the env opts into overriding network-wide consensus values (`ALLOW_OVERRIDING_NETWORK_CONFIG`). */
+export declare function allowsNetworkConfigOverride(env?: {
+    [key: string]: string | undefined;
+}): boolean;
+//# sourceMappingURL=data:application/json;base64,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

package/dest/config/network-consensus-config.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"network-consensus-config.d.ts","sourceRoot":"","sources":["../../src/config/network-consensus-config.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,iBAAiB,EAAoD,MAAM,wBAAwB,CAAC;AAGlH,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,0BAA0B,CAAC;AAUhE;;;;;;;;;;;;;;;;;GAiBG;AACH,eAAO,MAAM,0BAA0B,2lDAsDD,CAAC;AAEvC,8FAA8F;AAC9F,MAAM,MAAM,eAAe,GAAG,CAAC,OAAO,0BAA0B,CAAC,CAAC,MAAM,CAAC,CAAC;AAE1E;;;;;GAKG;AACH,MAAM,MAAM,sBAAsB,GAAG,IAAI,CAAC,iBAAiB,EAAE,mBAAmB,GAAG,sBAAsB,CAAC,GACxG,QAAQ,CAAC,IAAI,CAAC,eAAe,EAAE,iBAAiB,GAAG,wBAAwB,GAAG,oCAAoC,CAAC,CAAC,CAAC;AAYvH;;;;;;GAMG;AACH,wBAAgB,gCAAgC,CAC9C,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,GAAG,OAAO,CAAC,GAChD,sBAAsB,CAiBxB;AAED;;;;;;;;GAQG;AACH,wBAAgB,8BAA8B,CAAC,MAAM,EAAE,sBAAsB,GAAG,MAAM,EAAE,CAmEvF;AAED;;;;;;;;;;;;;;;GAeG;AACH,wBAAgB,0BAA0B,CACxC,aAAa,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,GAAG,OAAO,CAAC,EACxD,GAAG,GAAE;IAAE,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS,CAAA;CAAgB,EACxD,GAAG,CAAC,EAAE,CAAC,GAAG,EAAE,MAAM,KAAK,IAAI,GAC1B,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAiDxB;AAED,8GAA8G;AAC9G,wBAAgB,2BAA2B,CAAC,GAAG,GAAE;IAAE,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS,CAAA;CAAgB,GAAG,OAAO,CAG7G"}

package/dest/config/network-consensus-config.js

@@ -0,0 +1,223 @@
+import { l1ContractsConfigMappings, validateSlotDurations } from '@aztec/ethereum/config';
+import { pickConfigMappings } from '@aztec/foundation/config';
+import { DEFAULT_CHECKPOINT_PROPOSAL_INIT_TIME, DEFAULT_CHECKPOINT_PROPOSAL_PREPARE_TIME, DEFAULT_MIN_BLOCK_DURATION, DEFAULT_P2P_PROPAGATION_TIME } from '../timetable/budgets.js';
+import { ProposerTimetable } from '../timetable/proposer_timetable.js';
+import { sharedSequencerConfigMappings } from './sequencer-config.js';
+/**
+ * Environment variables whose values must be identical across every node of a network. They fall into three
+ * categories, all consensus-critical:
+ *
+ * - Timing/protocol consensus: slot and epoch durations, block sub-slot duration, max blocks per checkpoint, and
+ *   the checkpoint-proposal materialization grace. Proposers and validators must agree on these to land on the
+ *   same proposed chain and the same checkpoint-proposal receive/handoff deadlines.
+ * - Network identity and L1-posted deployment params: the L1 chain id and the staking/governance/slashing
+ *   parameters baked into the deployed rollup contract (committee size, lags, thresholds, mana target, fee
+ *   pricing, governance/slashing round sizes, quorums, slash amounts, etc.). A node disagreeing with the rollup
+ *   it points at would compute the wrong epoch geometry, fees, or slashing rounds.
+ * - Node-side slashing offense consensus: the offense detection/penalty parameters validators apply locally to
+ *   decide which payloads to sign. Validators must agree on these to reach the on-chain slashing quorum.
+ *
+ * Deliberately excluded: bootnodes, P2P/store/OTEL/sentinel settings, SEQ_MIN_TX_PER_BLOCK, SEQ_MAX_TX_PER_*,
+ * AZTEC_SLASHER_ENABLED, PROVER_REAL_PROOFS, TRANSACTIONS_DISABLED, and AZTEC_ENTRY_QUEUE_* (mainnet-only genesis
+ * params enforced by L1).
+ */ export const NETWORK_CONSENSUS_ENV_VARS = [
+    // Timing/protocol consensus.
+    'ETHEREUM_SLOT_DURATION',
+    'AZTEC_SLOT_DURATION',
+    'AZTEC_EPOCH_DURATION',
+    'SEQ_BLOCK_DURATION_MS',
+    'MAX_BLOCKS_PER_CHECKPOINT',
+    'CHECKPOINT_PROPOSAL_SYNC_GRACE_SECONDS',
+    // Network identity / L1-posted deployment params.
+    'L1_CHAIN_ID',
+    'AZTEC_TARGET_COMMITTEE_SIZE',
+    'AZTEC_LAG_IN_EPOCHS_FOR_VALIDATOR_SET',
+    'AZTEC_LAG_IN_EPOCHS_FOR_RANDAO',
+    'AZTEC_ACTIVATION_THRESHOLD',
+    'AZTEC_EJECTION_THRESHOLD',
+    'AZTEC_LOCAL_EJECTION_THRESHOLD',
+    'AZTEC_EXIT_DELAY_SECONDS',
+    'AZTEC_INBOX_LAG',
+    'AZTEC_PROOF_SUBMISSION_EPOCHS',
+    'AZTEC_MANA_TARGET',
+    'AZTEC_PROVING_COST_PER_MANA',
+    'AZTEC_INITIAL_ETH_PER_FEE_ASSET',
+    'AZTEC_GOVERNANCE_PROPOSER_ROUND_SIZE',
+    'AZTEC_GOVERNANCE_PROPOSER_QUORUM',
+    'AZTEC_SLASHING_QUORUM',
+    'AZTEC_SLASHING_ROUND_SIZE_IN_EPOCHS',
+    'AZTEC_SLASHING_LIFETIME_IN_ROUNDS',
+    'AZTEC_SLASHING_OFFSET_IN_ROUNDS',
+    'AZTEC_SLASHING_EXECUTION_DELAY_IN_ROUNDS',
+    'AZTEC_SLASHING_VETOER',
+    'AZTEC_SLASHING_DISABLE_DURATION',
+    'AZTEC_SLASH_AMOUNT_SMALL',
+    'AZTEC_SLASH_AMOUNT_MEDIUM',
+    'AZTEC_SLASH_AMOUNT_LARGE',
+    // Node-side slashing offense consensus.
+    'SLASH_OFFENSE_EXPIRATION_ROUNDS',
+    'SLASH_MAX_PAYLOAD_SIZE',
+    'SLASH_EXECUTE_ROUNDS_LOOK_BACK',
+    'SLASH_DATA_WITHHOLDING_TOLERANCE_SLOTS',
+    'SLASH_DATA_WITHHOLDING_PENALTY',
+    'SLASH_INACTIVITY_TARGET_PERCENTAGE',
+    'SLASH_INACTIVITY_CONSECUTIVE_EPOCH_THRESHOLD',
+    'SLASH_INACTIVITY_PENALTY',
+    'SLASH_PROPOSE_INVALID_ATTESTATIONS_PENALTY',
+    'SLASH_DUPLICATE_PROPOSAL_PENALTY',
+    'SLASH_DUPLICATE_ATTESTATION_PENALTY',
+    'SLASH_PROPOSE_DESCENDANT_OF_CHECKPOINT_WITH_INVALID_ATTESTATIONS_PENALTY',
+    'SLASH_ATTEST_INVALID_CHECKPOINT_PROPOSAL_PENALTY',
+    'SLASH_UNKNOWN_PENALTY',
+    'SLASH_INVALID_BLOCK_PENALTY',
+    'SLASH_INVALID_CHECKPOINT_PROPOSAL_PENALTY',
+    'SLASH_GRACE_PERIOD_L2_SLOTS'
+];
+/** Config mappings for the slot-timing fields of {@link NetworkConsensusConfig}, picked from their owners. */ const networkConsensusConfigMappings = {
+    ...pickConfigMappings(l1ContractsConfigMappings, [
+        'aztecSlotDuration',
+        'ethereumSlotDuration'
+    ]),
+    ...pickConfigMappings(sharedSequencerConfigMappings, [
+        'blockDurationMs',
+        'maxBlocksPerCheckpoint',
+        'checkpointProposalSyncGraceSeconds'
+    ])
+};
+/**
+ * Extracts the timing {@link NetworkConsensusConfig} from a generated network config object. The env-var names
+ * and the per-field parsing both come from the canonical config mappings (`l1ContractsConfigMappings` and
+ * `sharedSequencerConfigMappings`), so each field is parsed exactly as the node's config layer would parse it.
+ * A field whose env var is absent becomes `NaN`, which {@link validateNetworkConsensusConfig} reports as an
+ * error. Never throws: parse helpers that would throw or yield `undefined` are coerced to `NaN`.
+ */ export function getConsensusConfigFromNetworkEnv(values) {
+    const result = {};
+    for (const [field, mapping] of Object.entries(networkConsensusConfigMappings)){
+        const raw = mapping.env !== undefined ? values[mapping.env] : undefined;
+        if (raw === undefined) {
+            result[field] = NaN;
+            continue;
+        }
+        let parsed;
+        try {
+            parsed = mapping.parseEnv ? mapping.parseEnv(String(raw)) : Number(raw);
+        } catch  {
+            parsed = NaN;
+        }
+        result[field] = parsed ?? NaN;
+    }
+    return result;
+}
+/**
+ * Validates a {@link NetworkConsensusConfig} for self-consistency, returning a list of error messages (empty
+ * when valid). Used by the cli unit test that gates the generated network configs.
+ *
+ * The check requires `maxBlocksPerCheckpoint` to be *exactly* what a {@link ProposerTimetable} built from the
+ * same slot timings and the production default budgets derives. This exact-equality requirement ensures the
+ * published network value is precisely what the production default budgets produce, so every node running those
+ * defaults agrees on the per-checkpoint block count without clamping.
+ */ export function validateNetworkConsensusConfig(config) {
+    const errors = [];
+    for (const [field, value] of Object.entries(config)){
+        if (typeof value !== 'number' || !Number.isFinite(value)) {
+            errors.push(`${field} must be a finite number (got ${value})`);
+        }
+    }
+    if (errors.length > 0) {
+        return errors;
+    }
+    errors.push(...validateSlotDurations(config));
+    if (config.blockDurationMs <= 0) {
+        errors.push(`blockDurationMs must be positive (got ${config.blockDurationMs})`);
+    }
+    if (config.blockDurationMs / 1000 > config.aztecSlotDuration) {
+        errors.push(`blockDurationMs (${config.blockDurationMs}ms) exceeds aztecSlotDuration (${config.aztecSlotDuration}s)`);
+    }
+    if (config.maxBlocksPerCheckpoint < 1) {
+        errors.push(`maxBlocksPerCheckpoint must be at least 1 (got ${config.maxBlocksPerCheckpoint})`);
+    }
+    if (config.checkpointProposalSyncGraceSeconds < 0) {
+        errors.push(`checkpointProposalSyncGraceSeconds must be non-negative (got ${config.checkpointProposalSyncGraceSeconds})`);
+    }
+    if (errors.length > 0) {
+        return errors;
+    }
+    let computed;
+    try {
+        computed = new ProposerTimetable({
+            l1Constants: {
+                l1GenesisTime: 0n,
+                slotDuration: config.aztecSlotDuration,
+                ethereumSlotDuration: config.ethereumSlotDuration
+            },
+            blockDuration: config.blockDurationMs / 1000,
+            minBlockDuration: DEFAULT_MIN_BLOCK_DURATION,
+            p2pPropagationTime: DEFAULT_P2P_PROPAGATION_TIME,
+            checkpointProposalPrepareTime: DEFAULT_CHECKPOINT_PROPOSAL_PREPARE_TIME,
+            checkpointProposalInitTime: DEFAULT_CHECKPOINT_PROPOSAL_INIT_TIME,
+            checkpointProposalSyncGrace: config.checkpointProposalSyncGraceSeconds
+        }).getMaxBlocksPerCheckpoint();
+    } catch (err) {
+        // The timetable constructor throws when not even one block fits the default budgets; report instead.
+        errors.push(`maxBlocksPerCheckpoint (${config.maxBlocksPerCheckpoint}) cannot be achieved: the default operational ` + `budgets fit fewer than one block for slot duration ${config.aztecSlotDuration}s and block duration ` + `${config.blockDurationMs / 1000}s (${err instanceof Error ? err.message : String(err)})`);
+        return errors;
+    }
+    if (computed !== config.maxBlocksPerCheckpoint) {
+        errors.push(`maxBlocksPerCheckpoint (${config.maxBlocksPerCheckpoint}) does not match the ${computed} blocks the ` + `production default budgets derive for slot duration ${config.aztecSlotDuration}s and block duration ` + `${config.blockDurationMs / 1000}s`);
+    }
+    return errors;
+}
+/**
+ * Enforces that operators do not silently override consensus-critical values diverging from the network config.
+ *
+ * For each var in {@link NETWORK_CONSENSUS_ENV_VARS} present in `networkConfig`: if the operator set it in `env`
+ * to a conflicting value, this throws unless `ALLOW_OVERRIDING_NETWORK_CONFIG` is truthy (in which case it logs
+ * and keeps the operator value).
+ *
+ * This function is pure: it never writes to `env`. Instead it returns the canonical env writes the caller
+ * should apply — a map of env-var name to canonical string value for every numeric var whose env value matched
+ * the network value numerically. Applying these closes a bypass where the config layer parses some vars with
+ * `parseInt` (which reads '6e3' as 6); rewriting them to the network value's string form keeps the operator's
+ * numerically-equal value but in canonical form. Vars kept under `ALLOW_OVERRIDING_NETWORK_CONFIG` (genuine
+ * conflicts) are not included, so the operator value is preserved untouched.
+ *
+ * @returns Canonical env writes (env-var name -> canonical string value) for the caller to apply.
+ */ export function checkConsensusEnvOverrides(networkConfig, env = process.env, log) {
+    const allowOverride = allowsNetworkConfigOverride(env);
+    const canonical = {};
+    const conflicts = [];
+    for (const envVar of NETWORK_CONSENSUS_ENV_VARS){
+        const networkValue = networkConfig[envVar];
+        if (networkValue === undefined) {
+            continue;
+        }
+        const current = env[envVar];
+        if (current === undefined || current === '') {
+            continue;
+        }
+        const networkIsNumeric = typeof networkValue === 'number';
+        const matches = networkIsNumeric ? Number(current) === networkValue : current === String(networkValue);
+        if (matches) {
+            if (networkIsNumeric) {
+                canonical[envVar] = String(networkValue);
+            }
+            continue;
+        }
+        const conflict = `${envVar}=${current} conflicts with the network value ${networkValue}`;
+        if (allowOverride) {
+            log?.(`Environment variable ${conflict}. Consensus-critical values must match across the network, but ` + `ALLOW_OVERRIDING_NETWORK_CONFIG is set so the operator value is kept (only do this if you know what ` + `you are doing).`);
+            continue;
+        }
+        conflicts.push(conflict);
+    }
+    // Accumulate every conflict so the operator sees all the env vars they need to reconcile at once, rather than
+    // fixing them one failed startup at a time.
+    if (conflicts.length > 0) {
+        throw new Error(`Environment variables conflict with consensus-critical network values:\n` + conflicts.map((c)=>`  - ${c}`).join('\n') + `\nConsensus-critical values must match across the network. Set ALLOW_OVERRIDING_NETWORK_CONFIG=1 to ` + `override (only do this if you know what you are doing).`);
+    }
+    return canonical;
+}
+/** Whether the env opts into overriding network-wide consensus values (`ALLOW_OVERRIDING_NETWORK_CONFIG`). */ export function allowsNetworkConfigOverride(env = process.env) {
+    const value = env.ALLOW_OVERRIDING_NETWORK_CONFIG;
+    return value === '1' || value?.toLowerCase() === 'true';
+}

package/dest/config/sequencer-config.d.ts

@@ -1,5 +1,7 @@
 import { type ConfigMappingsType } from '@aztec/foundation/config';
 import type { SequencerConfig } from '../interfaces/configs.js';
+/** Default duration per block in milliseconds, used to derive how many blocks fit in a slot. */
+export declare const DEFAULT_BLOCK_DURATION_MS: number;
 /** Default maximum number of transactions per block. */
 export declare const DEFAULT_MAX_TXS_PER_BLOCK = 32;
 /** Default maximum number of blocks the sequencer packs into a single checkpoint. */
@@ -10,5 +12,5 @@ export declare const DEFAULT_MAX_BLOCKS_PER_CHECKPOINT = 24;
  * (like blockDurationMs needed by both p2p and sequencer-client) are defined here
  * to avoid duplication.
  */
-export declare const sharedSequencerConfigMappings: ConfigMappingsType<Pick<SequencerConfig, 'blockDurationMs' | 'expectedBlockProposalsPerSlot' | 'maxTxsPerBlock' | 'attestationPropagationTime' | 'maxBlocksPerCheckpoint'>>;
-//# sourceMappingURL=data:application/json;base64,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
+export declare const sharedSequencerConfigMappings: ConfigMappingsType<Pick<SequencerConfig, 'blockDurationMs' | 'checkpointProposalSyncGraceSeconds' | 'expectedBlockProposalsPerSlot' | 'maxTxsPerBlock' | 'attestationPropagationTime' | 'checkpointProposalPrepareTime' | 'minBlockDuration' | 'maxBlocksPerCheckpoint'>>;
+//# sourceMappingURL=data:application/json;base64,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

package/dest/config/sequencer-config.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"sequencer-config.d.ts","sourceRoot":"","sources":["../../src/config/sequencer-config.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,KAAK,kBAAkB,EAIxB,MAAM,0BAA0B,CAAC;AAElC,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,0BAA0B,CAAC;AAGhE,wDAAwD;AACxD,eAAO,MAAM,yBAAyB,KAAK,CAAC;AAE5C,qFAAqF;AACrF,eAAO,MAAM,iCAAiC,KAAK,CAAC;AAEpD;;;;;GAKG;AACH,eAAO,MAAM,6BAA6B,EAAE,kBAAkB,CAC5D,IAAI,CACF,eAAe,EACb,iBAAiB,GACjB,+BAA+B,GAC/B,gBAAgB,GAChB,4BAA4B,GAC5B,wBAAwB,CAC3B,CAkCF,CAAC"}
+{"version":3,"file":"sequencer-config.d.ts","sourceRoot":"","sources":["../../src/config/sequencer-config.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,KAAK,kBAAkB,EAIxB,MAAM,0BAA0B,CAAC;AAElC,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,0BAA0B,CAAC;AAShE,gGAAgG;AAChG,eAAO,MAAM,yBAAyB,QAAgC,CAAC;AAEvE,wDAAwD;AACxD,eAAO,MAAM,yBAAyB,KAAK,CAAC;AAE5C,qFAAqF;AACrF,eAAO,MAAM,iCAAiC,KAAK,CAAC;AAEpD;;;;;GAKG;AACH,eAAO,MAAM,6BAA6B,EAAE,kBAAkB,CAC5D,IAAI,CACF,eAAe,EACb,iBAAiB,GACjB,oCAAoC,GACpC,+BAA+B,GAC/B,gBAAgB,GAChB,4BAA4B,GAC5B,+BAA+B,GAC/B,kBAAkB,GAClB,wBAAwB,CAC3B,CAqDF,CAAC"}