sui_protocol_config/
lib.rs

1// Copyright (c) Mysten Labs, Inc.
2// SPDX-License-Identifier: Apache-2.0
3
4use std::{
5    collections::{BTreeMap, BTreeSet},
6    sync::{
7        Arc, LazyLock,
8        atomic::{AtomicBool, Ordering},
9    },
10};
11
12#[cfg(msim)]
13use std::cell::RefCell;
14#[cfg(not(msim))]
15use std::sync::Mutex;
16
17use clap::*;
18use fastcrypto::encoding::{Base58, Encoding, Hex};
19use move_binary_format::{
20    binary_config::{BinaryConfig, TableConfig},
21    file_format_common::VERSION_1,
22};
23use move_core_types::account_address::AccountAddress;
24use move_vm_config::verifier::VerifierConfig;
25use mysten_common::in_integration_test;
26use serde::{Deserialize, Serialize};
27use serde_with::skip_serializing_none;
28use sui_protocol_config_macros::{
29    ProtocolConfigAccessors, ProtocolConfigFeatureFlagsGetters, ProtocolConfigOverride,
30};
31use tracing::{info, warn};
32
33/// The minimum and maximum protocol versions supported by this build.
34const MIN_PROTOCOL_VERSION: u64 = 1;
35const MAX_PROTOCOL_VERSION: u64 = 122;
36
37const TESTNET_USDC: &str =
38    "0xa1ec7fc00a6f40db9693ad1415d0c193ad3906494428cf252621037bd7117e29::usdc::USDC";
39
40// Record history of protocol version allocations here:
41//
42// Version 1: Original version.
43// Version 2: Framework changes, including advancing epoch_start_time in safemode.
44// Version 3: gas model v2, including all sui conservation fixes. Fix for loaded child object
45//            changes, enable package upgrades, add limits on `max_size_written_objects`,
46//            `max_size_written_objects_system_tx`
47// Version 4: New reward slashing rate. Framework changes to skip stake susbidy when the epoch
48//            length is short.
49// Version 5: Package upgrade compatibility error fix. New gas cost table. New scoring decision
50//            mechanism that includes up to f scoring authorities.
51// Version 6: Change to how bytes are charged in the gas meter, increase buffer stake to 0.5f
52// Version 7: Disallow adding new abilities to types during package upgrades,
53//            disable_invariant_violation_check_in_swap_loc,
54//            disable init functions becoming entry,
55//            hash module bytes individually before computing package digest.
56// Version 8: Disallow changing abilities and type constraints for type parameters in structs
57//            during upgrades.
58// Version 9: Limit the length of Move idenfitiers to 128.
59//            Disallow extraneous module bytes,
60//            advance_to_highest_supported_protocol_version,
61// Version 10:increase bytecode verifier `max_verifier_meter_ticks_per_function` and
62//            `max_meter_ticks_per_module` limits each from 6_000_000 to 16_000_000. sui-system
63//            framework changes.
64// Version 11: Introduce `std::type_name::get_with_original_ids` to the system frameworks. Bound max depth of values within the VM.
65// Version 12: Changes to deepbook in framework to add API for querying marketplace.
66//             Change NW Batch to use versioned metadata field.
67//             Changes to sui-system package to add PTB-friendly unstake function, and minor cleanup.
68// Version 13: System package change deprecating `0xdee9::clob` and `0xdee9::custodian`, replaced by
69//             `0xdee9::clob_v2` and `0xdee9::custodian_v2`.
70// Version 14: Introduce a config variable to allow charging of computation to be either
71//             bucket base or rounding up. The presence of `gas_rounding_step` (or `None`)
72//             decides whether rounding is applied or not.
73// Version 15: Add reordering of user transactions by gas price after consensus.
74//             Add `sui::table_vec::drop` to the framework via a system package upgrade.
75// Version 16: Enabled simplified_unwrap_then_delete feature flag, which allows the execution engine
76//             to no longer consult the object store when generating unwrapped_then_deleted in the
77//             effects; this also allows us to stop including wrapped tombstones in accumulator.
78//             Add self-matching prevention for deepbook.
79// Version 17: Enable upgraded multisig support.
80// Version 18: Introduce execution layer versioning, preserve all existing behaviour in v0.
81//             Gas minimum charges moved to be a multiplier over the reference gas price. In this
82//             protocol version the multiplier is the same as the lowest bucket of computation
83//             such that the minimum transaction cost is the same as the minimum computation
84//             bucket.
85//             Add a feature flag to indicate the changes semantics of `base_tx_cost_fixed`.
86// Version 19: Changes to sui-system package to enable liquid staking.
87//             Add limit for total size of events.
88//             Increase limit for number of events emitted to 1024.
89// Version 20: Enables the flag `narwhal_new_leader_election_schedule` for the new narwhal leader
90//             schedule algorithm for enhanced fault tolerance and sets the bad node stake threshold
91//             value. Both values are set for all the environments except mainnet.
92// Version 21: ZKLogin known providers.
93// Version 22: Child object format change.
94// Version 23: Enabling the flag `narwhal_new_leader_election_schedule` for the new narwhal leader
95//             schedule algorithm for enhanced fault tolerance and sets the bad node stake threshold
96//             value for mainnet.
97// Version 24: Re-enable simple gas conservation checks.
98//             Package publish/upgrade number in a single transaction limited.
99//             JWK / authenticator state flags.
100// Version 25: Add sui::table_vec::swap and sui::table_vec::swap_remove to system packages.
101// Version 26: New gas model version.
102//             Add support for receiving objects off of other objects in devnet only.
103// Version 28: Add sui::zklogin::verify_zklogin_id and related functions to sui framework.
104//             Enable transaction effects v2 in devnet.
105// Version 29: Add verify_legacy_zklogin_address flag to sui framework, this add ability to verify
106//             transactions from a legacy zklogin address.
107// Version 30: Enable Narwhal CertificateV2
108//             Add support for random beacon.
109//             Enable transaction effects v2 in testnet.
110//             Deprecate supported oauth providers from protocol config and rely on node config
111//             instead.
112//             In execution, has_public_transfer is recomputed when loading the object.
113//             Add support for shared obj deletion and receiving objects off of other objects in devnet only.
114// Version 31: Add support for shared object deletion in devnet only.
115//             Add support for getting object ID referenced by receiving object in sui framework.
116//             Create new execution layer version, and preserve previous behavior in v1.
117//             Update semantics of `sui::transfer::receive` and add `sui::transfer::public_receive`.
118// Version 32: Add delete functions for VerifiedID and VerifiedIssuer.
119//             Add sui::token module to sui framework.
120//             Enable transfer to object in testnet.
121//             Enable Narwhal CertificateV2 on mainnet
122//             Make critbit tree and order getters public in deepbook.
123// Version 33: Add support for `receiving_object_id` function in framework
124//             Hardened OTW check.
125//             Enable transfer-to-object in mainnet.
126//             Enable shared object deletion in testnet.
127//             Enable effects v2 in mainnet.
128// Version 34: Framework changes for random beacon.
129// Version 35: Add poseidon hash function.
130//             Enable coin deny list.
131// Version 36: Enable group operations native functions in devnet.
132//             Enable shared object deletion in mainnet.
133//             Set the consensus accepted transaction size and the included transactions size in the proposed block.
134// Version 37: Reject entry functions with mutable Random.
135// Version 38: Introduce limits for binary tables size.
136// Version 39: Allow skipped epochs for randomness updates.
137//             Extra version to fix `test_upgrade_compatibility` simtest.
138// Version 40:
139// Version 41: Enable group operations native functions in testnet and mainnet (without msm).
140// Version 42: Migrate sui framework and related code to Move 2024
141// Version 43: Introduce the upper bound delta config for a zklogin signature's max epoch.
142//             Introduce an explicit parameter for the tick limit per package (previously this was
143//             represented by the parameter for the tick limit per module).
144// Version 44: Enable consensus fork detection on mainnet.
145//             Switch between Narwhal and Mysticeti consensus in tests, devnet and testnet.
146// Version 45: Use tonic networking for Mysticeti consensus.
147//             Set min Move binary format version to 6.
148//             Enable transactions to be signed with zkLogin inside multisig signature.
149//             Add native bridge.
150//             Enable native bridge in devnet
151//             Enable Leader Scoring & Schedule Change for Mysticeti consensus on testnet.
152// Version 46: Enable native bridge in testnet
153//             Enable resharing at the same initial shared version.
154// Version 47: Deepbook changes (framework update)
155// Version 48: Use tonic networking for Mysticeti.
156//             Resolve Move abort locations to the package id instead of the runtime module ID.
157//             Enable random beacon in testnet.
158//             Use new VM when verifying framework packages.
159// Version 49: Enable Move enums on devnet.
160//             Enable VDF in devnet
161//             Enable consensus commit prologue V3 in devnet.
162//             Run Mysticeti consensus by default.
163// Version 50: Add update_node_url to native bridge,
164//             New Move stdlib integer modules
165//             Enable checkpoint batching in testnet.
166//             Prepose consensus commit prologue in checkpoints.
167//             Set number of leaders per round for Mysticeti commits.
168// Version 51: Switch to DKG V1.
169//             Enable deny list v2 on devnet.
170// Version 52: Emit `CommitteeMemberUrlUpdateEvent` when updating bridge node url.
171//             std::config native functions.
172//             Modified sui-system package to enable withdrawal of stake before it becomes active.
173//             Enable soft bundle in devnet and testnet.
174//             Core macro visibility in sui core framework.
175//             Enable checkpoint batching in mainnet.
176//             Enable Mysticeti on mainnet.
177//             Enable Leader Scoring & Schedule Change for Mysticeti consensus on mainnet.
178//             Turn on count based shared object congestion control in devnet.
179//             Enable consensus commit prologue V3 in testnet.
180//             Enable enums on testnet.
181//             Add support for passkey in devnet.
182//             Enable deny list v2 on testnet and mainnet.
183// Version 53: Add feature flag to decide whether to attempt to finalize bridge committee
184//             Enable consensus commit prologue V3 on testnet.
185//             Turn on shared object congestion control in testnet.
186//             Update stdlib natives costs
187// Version 54: Enable random beacon on mainnet.
188//             Enable soft bundle on mainnet.
189// Version 55: Enable enums on mainnet.
190//             Rethrow serialization type layout errors instead of converting them.
191// Version 56: Enable bridge on mainnet.
192//             Note: do not use version 56 for any new features.
193// Version 57: Reduce minimum number of random beacon shares.
194// Version 58: Optimize boolean binops
195//             Finalize bridge committee on mainnet.
196//             Switch to distributed vote scoring in consensus in devnet
197// Version 59: Enable round prober in consensus.
198// Version 60: Validation of public inputs for Groth16 verification.
199//             Enable configuration of maximum number of type nodes in a type layout.
200// Version 61: Switch to distributed vote scoring in consensus in testnet
201//             Further reduce minimum number of random beacon shares.
202//             Add feature flag for Mysticeti fastpath.
203// Version 62: Makes the event's sending module package upgrade-aware.
204// Version 63: Enable gas based congestion control in consensus commit.
205// Version 64: Revert congestion control change.
206// Version 65: Enable distributed vote scoring in mainnet.
207// Version 66: Revert distributed vote scoring in mainnet.
208//             Framework fix for fungible staking book-keeping.
209// Version 67: Re-enable distributed vote scoring in mainnet.
210// Version 68: Add G1Uncompressed group to group ops.
211//             Update to Move stdlib.
212//             Enable gas based congestion control with overage.
213//             Further reduce minimum number of random beacon shares.
214//             Disallow adding new modules in `deps-only` packages.
215// Version 69: Sets number of rounds allowed for fastpath voting in consensus.
216//             Enable smart ancestor selection in devnet.
217//             Enable G1Uncompressed group in testnet.
218// Version 70: Enable smart ancestor selection in testnet.
219//             Enable probing for accepted rounds in round prober in testnet
220//             Add new gas model version to update charging of native functions.
221//             Add std::uq64_64 module to Move stdlib.
222//             Improve gas/wall time efficiency of some Move stdlib vector functions
223// Version 71: [SIP-45] Enable consensus amplification.
224// Version 72: Fix issue where `convert_type_argument_error` wasn't being used in all cases.
225//             Max gas budget moved to 50_000 SUI
226//             Max gas price moved to 50 SUI
227//             Variants as type nodes.
228// Version 73: Enable new marker table version.
229//             Enable consensus garbage collection and new commit rule for devnet.
230//             Enable zstd compression for consensus tonic network in testnet.
231//             Enable smart ancestor selection in mainnet.
232//             Enable probing for accepted rounds in round prober in mainnet
233// Version 74: Enable load_nitro_attestation move function in sui framework in devnet.
234//             Enable all gas costs for load_nitro_attestation.
235//             Enable zstd compression for consensus tonic network in mainnet.
236//             Enable the new commit rule for devnet.
237// Version 75: Enable passkey auth in testnet.
238// Version 76: Deprecate Deepbook V2 order placement and deposit.
239//             Removes unnecessary child object mutations
240//             Enable passkey auth in multisig for testnet.
241// Version 77: Enable uncompressed point group ops on mainnet.
242//             Enable consensus garbage collection for testnet
243//             Enable the new consensus commit rule for testnet.
244// Version 78: Make `TxContext` Move API native
245//             Enable execution time estimate mode for congestion control on testnet.
246// Version 79: Enable median based commit timestamp in consensus on testnet.
247//             Increase threshold for bad nodes that won't be considered leaders in consensus in testnet
248//             Enable load_nitro_attestation move function in sui framework in testnet.
249//             Enable consensus garbage collection for mainnet
250//             Enable the new consensus commit rule for mainnet.
251// Version 80: Bound size of values created in the adapter.
252// Version 81: Enable median based commit timestamp in consensus on mainnet.
253//             Enforce checkpoint timestamps are non-decreasing for testnet and mainnet.
254//             Increase threshold for bad nodes that won't be considered leaders in consensus in mainnet
255// Version 82: Relax bounding of size of values created in the adapter.
256// Version 83: Resolve `TypeInput` IDs to defining ID when converting to `TypeTag`s in the adapter.
257//             Enable execution time estimate mode for congestion control on mainnet.
258//             Enable nitro attestation upgraded parsing and mainnet.
259// Version 84: Limit number of stored execution time observations between epochs.
260// Version 85: Enable party transfer in devnet.
261// Version 86: Use type tags in the object runtime and adapter instead of `Type`s.
262//             Make variant count limit explicit in protocol config.
263//             Enable party transfer in testnet.
264// Version 87: Enable better type resolution errors in the adapter.
265// Version 88: Update `sui-system` package to use `calculate_rewards` function.
266//             Define the cost for the native Move function `rgp`.
267//             Ignore execution time observations after validator stops accepting certs.
268// Version 89: Add additional signature checks
269//             Add additional linkage checks
270// Version 90: Standard library improvements.
271//             Enable `debug_fatal` on Move invariant violations.
272//             Enable passkey and passkey inside multisig for mainnet.
273// Version 91: Minor changes in Sui Framework. Include CheckpointDigest in consensus dedup key for checkpoint signatures (V2).
274// Version 92: Disable checking shared object transfer restrictions per command = false
275// Version 93: Enable CheckpointDigest in consensus dedup key for checkpoint signatures.
276// Version 94: Decrease stored observations limit by 10% to stay within system object size limit.
277//             Enable party transfer on mainnet.
278// Version 95: Change type name id base cost to 52, increase max transactions per checkpoint to 20000.
279// Version 96: Enable authority capabilities v2.
280//             Fix bug where MFP transaction shared inputs' debts were not loaded
281//             Create Coin Registry object
282//             Enable checkpoint artifacts digest in devnet.
283// Version 97: Enable additional borrow checks
284// Version 98: Add authenticated event streams support via emit_authenticated function.
285//             Add better error messages to the loader.
286// Version 99: Enable new commit handler.
287// Version 100: Framework update
288// Version 101: Framework update
289//              Set max updates per settlement txn to 100.
290// Version 103: Framework update: internal Coin methods
291// Version 104: Framework update: CoinRegistry follow up for Coin methods
292//              Enable all non-zero PCRs parsing for nitro attestation native function in Devnet and Testnet.
293// Version 105: Framework update: address aliases
294//              Enable multi-epoch transaction expiration.
295//              Enable always include required PCRs (0-4 & 8) parsing even if they are zeros for
296//              nitro attestation native function in Devnet and Testnet.
297// Version 106: Framework update: accumulator storage fund calculations
298//              Enable address balances on devnet
299// Version 108: Enable new digit based gas rounding.
300//              Support TxContext in all parameter positions.
301//              Disable entry point signature check.
302//              Enable address aliases on testnet.
303//              Enable poseidon_bn254 on mainnet.
304// Version 109: Update where we set bounds for some binary tables to be a bit more idiomatic.
305// Version 110: Enable parsing on all nonzero custom pcrs in nitro attestation parsing native
306//              function on mainnet.
307//              split_checkpoints_in_consensus_handler in devnet
308//              Enable additional validation on zkLogin public identifier.
309// Version 111: Validator metadata
310// Version 112: Enable Ristretto255 in devnet.
311// Version 113: Validate gas price >= RGP at signing for address balance gas payments.
312// Version 114: Gate seeded test overrides for checkpoint tx limit behind feature flag.
313// Version 115: Gasless transaction drop safety.
314//              Enable address aliases on mainnet.
315//              Relax ValidDuring requirement for transactions with owned inputs.
316// Version 116: Enable Display Registry.
317//              Disable defer_unpaid_amplification (debugging).
318// Version 117: Update Sui System metadata handling.
319// Version 118: Adds `transfer_migration_cap` to display registry
320// Version 119: Enable the new VM.
321// Version 120: Disallow unused jump tables
322// Version 121: Re-enable defer_unpaid_amplification (devnet + testnet).
323// Version 122: Framework update: vector::empty is deprecated.
324//              Enable bulletproofs verification on devnet.
325//              Enable defer_unpaid_amplification on mainnet.
326
327#[derive(Copy, Clone, Debug, Hash, Serialize, Deserialize, PartialEq, Eq, PartialOrd, Ord)]
328pub struct ProtocolVersion(u64);
329
330impl ProtocolVersion {
331    // The minimum and maximum protocol version supported by this binary. Counterintuitively, this constant may
332    // change over time as support for old protocol versions is removed from the source. This
333    // ensures that when a new network (such as a testnet) is created, its genesis committee will
334    // use a protocol version that is actually supported by the binary.
335    pub const MIN: Self = Self(MIN_PROTOCOL_VERSION);
336
337    pub const MAX: Self = Self(MAX_PROTOCOL_VERSION);
338
339    #[cfg(not(msim))]
340    pub const MAX_ALLOWED: Self = Self::MAX;
341
342    // We create one additional "fake" version in simulator builds so that we can test upgrades.
343    #[cfg(msim)]
344    pub const MAX_ALLOWED: Self = Self(MAX_PROTOCOL_VERSION + 1);
345
346    pub fn new(v: u64) -> Self {
347        Self(v)
348    }
349
350    pub const fn as_u64(&self) -> u64 {
351        self.0
352    }
353
354    // For serde deserialization - we don't define a Default impl because there isn't a single
355    // universally appropriate default value.
356    pub fn max() -> Self {
357        Self::MAX
358    }
359
360    pub fn prev(self) -> Self {
361        Self(self.0.checked_sub(1).unwrap())
362    }
363}
364
365impl From<u64> for ProtocolVersion {
366    fn from(v: u64) -> Self {
367        Self::new(v)
368    }
369}
370
371impl std::ops::Sub<u64> for ProtocolVersion {
372    type Output = Self;
373    fn sub(self, rhs: u64) -> Self::Output {
374        Self::new(self.0 - rhs)
375    }
376}
377
378impl std::ops::Add<u64> for ProtocolVersion {
379    type Output = Self;
380    fn add(self, rhs: u64) -> Self::Output {
381        Self::new(self.0 + rhs)
382    }
383}
384
385#[derive(
386    Clone, Serialize, Deserialize, Debug, Default, PartialEq, Copy, PartialOrd, Ord, Eq, ValueEnum,
387)]
388pub enum Chain {
389    Mainnet,
390    Testnet,
391    #[default]
392    Unknown,
393}
394
395impl Chain {
396    pub fn as_str(self) -> &'static str {
397        match self {
398            Chain::Mainnet => "mainnet",
399            Chain::Testnet => "testnet",
400            Chain::Unknown => "unknown",
401        }
402    }
403}
404
405pub struct Error(pub String);
406
407// TODO: There are quite a few non boolean values in the feature flags. We should move them out.
408/// Records on/off feature flags that may vary at each protocol version.
409#[derive(Default, Clone, Serialize, Deserialize, Debug, ProtocolConfigFeatureFlagsGetters)]
410struct FeatureFlags {
411    // Add feature flags here, e.g.:
412    // new_protocol_feature: bool,
413    #[serde(skip_serializing_if = "is_false")]
414    package_upgrades: bool,
415    // If true, validators will commit to the root state digest
416    // in end of epoch checkpoint proposals
417    #[serde(skip_serializing_if = "is_false")]
418    commit_root_state_digest: bool,
419    // Pass epoch start time to advance_epoch safe mode function.
420    #[serde(skip_serializing_if = "is_false")]
421    advance_epoch_start_time_in_safe_mode: bool,
422    // If true, apply the fix to correctly capturing loaded child object versions in execution's
423    // object runtime.
424    #[serde(skip_serializing_if = "is_false")]
425    loaded_child_objects_fixed: bool,
426    // If true, treat missing types in the upgraded modules when creating an upgraded package as a
427    // compatibility error.
428    #[serde(skip_serializing_if = "is_false")]
429    missing_type_is_compatibility_error: bool,
430    // If true, then the scoring decision mechanism will not get disabled when we do have more than
431    // f low scoring authorities, but it will simply flag as low scoring only up to f authorities.
432    #[serde(skip_serializing_if = "is_false")]
433    scoring_decision_with_validity_cutoff: bool,
434
435    // DEPRECATED: this was an ephemeral feature flag only used by consensus handler, which has now
436    // been deployed everywhere.
437    #[serde(skip_serializing_if = "is_false")]
438    consensus_order_end_of_epoch_last: bool,
439
440    // Disallow adding abilities to types during package upgrades.
441    #[serde(skip_serializing_if = "is_false")]
442    disallow_adding_abilities_on_upgrade: bool,
443    // Disables unnecessary invariant check in the Move VM when swapping the value out of a local
444    #[serde(skip_serializing_if = "is_false")]
445    disable_invariant_violation_check_in_swap_loc: bool,
446    // advance to highest supported protocol version at epoch change, instead of the next consecutive
447    // protocol version.
448    #[serde(skip_serializing_if = "is_false")]
449    advance_to_highest_supported_protocol_version: bool,
450    // If true, disallow entry modifiers on entry functions
451    #[serde(skip_serializing_if = "is_false")]
452    ban_entry_init: bool,
453    // If true, hash module bytes individually when calculating package digests for upgrades
454    #[serde(skip_serializing_if = "is_false")]
455    package_digest_hash_module: bool,
456    // If true, disallow changing struct type parameters during package upgrades
457    #[serde(skip_serializing_if = "is_false")]
458    disallow_change_struct_type_params_on_upgrade: bool,
459    // If true, checks no extra bytes in a compiled module
460    #[serde(skip_serializing_if = "is_false")]
461    no_extraneous_module_bytes: bool,
462    // If true, then use the versioned metadata format in narwhal entities.
463    #[serde(skip_serializing_if = "is_false")]
464    narwhal_versioned_metadata: bool,
465
466    // Enable zklogin auth
467    #[serde(skip_serializing_if = "is_false")]
468    zklogin_auth: bool,
469    // How we order transactions coming out of consensus before sending to execution.
470    #[serde(skip_serializing_if = "ConsensusTransactionOrdering::is_none")]
471    consensus_transaction_ordering: ConsensusTransactionOrdering,
472
473    // Previously, the unwrapped_then_deleted field in TransactionEffects makes a distinction between
474    // whether an object has existed in the store previously (i.e. whether there is a tombstone).
475    // Such dependency makes effects generation inefficient, and requires us to include wrapped
476    // tombstone in state root hash.
477    // To prepare for effects V2, with this flag set to true, we simplify the definition of
478    // unwrapped_then_deleted to always include unwrapped then deleted objects,
479    // regardless of their previous state in the store.
480    #[serde(skip_serializing_if = "is_false")]
481    simplified_unwrap_then_delete: bool,
482    // Enable upgraded multisig support
483    #[serde(skip_serializing_if = "is_false")]
484    upgraded_multisig_supported: bool,
485    // If true minimum txn charge is a multiplier of the gas price
486    #[serde(skip_serializing_if = "is_false")]
487    txn_base_cost_as_multiplier: bool,
488
489    // If true, the ability to delete shared objects is in effect
490    #[serde(skip_serializing_if = "is_false")]
491    shared_object_deletion: bool,
492
493    // If true, then the new algorithm for the leader election schedule will be used
494    #[serde(skip_serializing_if = "is_false")]
495    narwhal_new_leader_election_schedule: bool,
496
497    // A list of supported OIDC providers that can be used for zklogin.
498    #[serde(skip_serializing_if = "is_empty")]
499    zklogin_supported_providers: BTreeSet<String>,
500
501    // If true, use the new child object format
502    #[serde(skip_serializing_if = "is_false")]
503    loaded_child_object_format: bool,
504
505    #[serde(skip_serializing_if = "is_false")]
506    enable_jwk_consensus_updates: bool,
507
508    #[serde(skip_serializing_if = "is_false")]
509    end_of_epoch_transaction_supported: bool,
510
511    // Perform simple conservation checks keeping into account out of gas scenarios
512    // while charging for storage.
513    #[serde(skip_serializing_if = "is_false")]
514    simple_conservation_checks: bool,
515
516    // If true, use the new child object format type logging
517    #[serde(skip_serializing_if = "is_false")]
518    loaded_child_object_format_type: bool,
519
520    // Enable receiving sent objects
521    #[serde(skip_serializing_if = "is_false")]
522    receive_objects: bool,
523
524    // If true, include CheckpointDigest in consensus dedup key for checkpoint signatures (V2).
525    #[serde(skip_serializing_if = "is_false")]
526    consensus_checkpoint_signature_key_includes_digest: bool,
527
528    // Enable random beacon protocol
529    #[serde(skip_serializing_if = "is_false")]
530    random_beacon: bool,
531
532    // Enable bridge protocol
533    #[serde(skip_serializing_if = "is_false")]
534    bridge: bool,
535
536    #[serde(skip_serializing_if = "is_false")]
537    enable_effects_v2: bool,
538
539    // If true, then use CertificateV2 in narwhal.
540    #[serde(skip_serializing_if = "is_false")]
541    narwhal_certificate_v2: bool,
542
543    // If true, allow verify with legacy zklogin address
544    #[serde(skip_serializing_if = "is_false")]
545    verify_legacy_zklogin_address: bool,
546
547    // Enable throughput aware consensus submission
548    #[serde(skip_serializing_if = "is_false")]
549    throughput_aware_consensus_submission: bool,
550
551    // If true, recompute has_public_transfer from the type instead of what is stored in the object
552    #[serde(skip_serializing_if = "is_false")]
553    recompute_has_public_transfer_in_execution: bool,
554
555    // If true, multisig containing zkLogin sig is accepted.
556    #[serde(skip_serializing_if = "is_false")]
557    accept_zklogin_in_multisig: bool,
558
559    // If true, multisig containing passkey sig is accepted.
560    #[serde(skip_serializing_if = "is_false")]
561    accept_passkey_in_multisig: bool,
562
563    // If true, additional zkLogin public identifier structure is validated.
564    #[serde(skip_serializing_if = "is_false")]
565    validate_zklogin_public_identifier: bool,
566
567    // If true, consensus prologue transaction also includes the consensus output digest.
568    // It can be used to detect consensus output folk.
569    #[serde(skip_serializing_if = "is_false")]
570    include_consensus_digest_in_prologue: bool,
571
572    // If true, use the hardened OTW check
573    #[serde(skip_serializing_if = "is_false")]
574    hardened_otw_check: bool,
575
576    // If true allow calling receiving_object_id function
577    #[serde(skip_serializing_if = "is_false")]
578    allow_receiving_object_id: bool,
579
580    // Enable the poseidon hash function
581    #[serde(skip_serializing_if = "is_false")]
582    enable_poseidon: bool,
583
584    // If true, enable the coin deny list.
585    #[serde(skip_serializing_if = "is_false")]
586    enable_coin_deny_list: bool,
587
588    // Enable native functions for group operations.
589    #[serde(skip_serializing_if = "is_false")]
590    enable_group_ops_native_functions: bool,
591
592    // Enable native function for msm.
593    #[serde(skip_serializing_if = "is_false")]
594    enable_group_ops_native_function_msm: bool,
595
596    // Enable group operations for Ristretto255
597    #[serde(skip_serializing_if = "is_false")]
598    enable_ristretto255_group_ops: bool,
599
600    // Enable native functions for group operations.
601    #[serde(skip_serializing_if = "is_false")]
602    enable_verify_bulletproofs_ristretto255: bool,
603
604    // Enable nitro attestation.
605    #[serde(skip_serializing_if = "is_false")]
606    enable_nitro_attestation: bool,
607
608    // Enable upgraded parsing of nitro attestation that interprets pcrs as a map.
609    #[serde(skip_serializing_if = "is_false")]
610    enable_nitro_attestation_upgraded_parsing: bool,
611
612    // Enable upgraded parsing of nitro attestation containing all nonzero PCRs.
613    #[serde(skip_serializing_if = "is_false")]
614    enable_nitro_attestation_all_nonzero_pcrs_parsing: bool,
615
616    // Enable upgraded parsing of nitro attestation to always include required PCRs, even when all zeros.
617    #[serde(skip_serializing_if = "is_false")]
618    enable_nitro_attestation_always_include_required_pcrs_parsing: bool,
619
620    // Reject functions with mutable Random.
621    #[serde(skip_serializing_if = "is_false")]
622    reject_mutable_random_on_entry_functions: bool,
623
624    // Controls the behavior of per object congestion control in consensus handler.
625    #[serde(skip_serializing_if = "PerObjectCongestionControlMode::is_none")]
626    per_object_congestion_control_mode: PerObjectCongestionControlMode,
627
628    // The consensus protocol to be used for the epoch.
629    #[serde(skip_serializing_if = "ConsensusChoice::is_narwhal")]
630    consensus_choice: ConsensusChoice,
631
632    // Consensus network to use.
633    #[serde(skip_serializing_if = "ConsensusNetwork::is_anemo")]
634    consensus_network: ConsensusNetwork,
635
636    // If true, use the correct (<=) comparison for max_gas_payment_objects instead of (<)
637    #[serde(skip_serializing_if = "is_false")]
638    correct_gas_payment_limit_check: bool,
639
640    // Set the upper bound allowed for max_epoch in zklogin signature.
641    #[serde(skip_serializing_if = "Option::is_none")]
642    zklogin_max_epoch_upper_bound_delta: Option<u64>,
643
644    // Controls leader scoring & schedule change in Mysticeti consensus.
645    #[serde(skip_serializing_if = "is_false")]
646    mysticeti_leader_scoring_and_schedule: bool,
647
648    // Enable resharing of shared objects using the same initial shared version
649    #[serde(skip_serializing_if = "is_false")]
650    reshare_at_same_initial_version: bool,
651
652    // Resolve Move abort locations to the package id instead of the runtime module ID.
653    #[serde(skip_serializing_if = "is_false")]
654    resolve_abort_locations_to_package_id: bool,
655
656    // Enables the use of the Mysticeti committed sub dag digest to the `ConsensusCommitInfo` in checkpoints.
657    // When disabled the default digest is used instead. It's important to have this guarded behind
658    // a flag as it will lead to checkpoint forks.
659    #[serde(skip_serializing_if = "is_false")]
660    mysticeti_use_committed_subdag_digest: bool,
661
662    // Enable VDF
663    #[serde(skip_serializing_if = "is_false")]
664    enable_vdf: bool,
665
666    // Controls whether consensus handler should record consensus determined shared object version
667    // assignments in consensus commit prologue transaction.
668    // The purpose of doing this is to enable replaying transaction without transaction effects.
669    // V2 also records initial shared versions for consensus objects.
670    #[serde(skip_serializing_if = "is_false")]
671    record_consensus_determined_version_assignments_in_prologue: bool,
672    #[serde(skip_serializing_if = "is_false")]
673    record_consensus_determined_version_assignments_in_prologue_v2: bool,
674
675    // Run verification of framework upgrades using a new/fresh VM.
676    #[serde(skip_serializing_if = "is_false")]
677    fresh_vm_on_framework_upgrade: bool,
678
679    // When set to true, the consensus commit prologue transaction will be placed first
680    // in a consensus commit in checkpoints.
681    // If a checkpoint contains multiple consensus commit, say [cm1][cm2]. The each commit's
682    // consensus commit prologue will be the first transaction in each segment:
683    //     [ccp1, rest cm1][ccp2, rest cm2]
684    // The reason to prepose the prologue transaction is to provide information for transaction
685    // cancellation.
686    #[serde(skip_serializing_if = "is_false")]
687    prepend_prologue_tx_in_consensus_commit_in_checkpoints: bool,
688
689    // Set number of leaders per round for Mysticeti commits.
690    #[serde(skip_serializing_if = "Option::is_none")]
691    mysticeti_num_leaders_per_round: Option<usize>,
692
693    // Enable Soft Bundle (SIP-19).
694    #[serde(skip_serializing_if = "is_false")]
695    soft_bundle: bool,
696
697    // If true, enable the coin deny list V2.
698    #[serde(skip_serializing_if = "is_false")]
699    enable_coin_deny_list_v2: bool,
700
701    // Enable passkey auth (SIP-9)
702    #[serde(skip_serializing_if = "is_false")]
703    passkey_auth: bool,
704
705    // Use AuthorityCapabilitiesV2
706    #[serde(skip_serializing_if = "is_false")]
707    authority_capabilities_v2: bool,
708
709    // Rethrow type layout errors during serialization instead of trying to convert them.
710    #[serde(skip_serializing_if = "is_false")]
711    rethrow_serialization_type_layout_errors: bool,
712
713    // Use distributed vote leader scoring strategy in consensus.
714    #[serde(skip_serializing_if = "is_false")]
715    consensus_distributed_vote_scoring_strategy: bool,
716
717    // Probe rounds received by peers from every authority.
718    #[serde(skip_serializing_if = "is_false")]
719    consensus_round_prober: bool,
720
721    // Validate identifier inputs separately
722    #[serde(skip_serializing_if = "is_false")]
723    validate_identifier_inputs: bool,
724
725    // Disallow self identifier
726    #[serde(skip_serializing_if = "is_false")]
727    disallow_self_identifier: bool,
728
729    // Enables Mysticeti fastpath.
730    #[serde(skip_serializing_if = "is_false")]
731    mysticeti_fastpath: bool,
732
733    // If true, disable pre-consensus locking for owned objects.
734    // All transactions go through consensus, and owned object conflict detection
735    // happens post-consensus via lock acquisition.
736    #[serde(skip_serializing_if = "is_false")]
737    disable_preconsensus_locking: bool,
738
739    // Makes the event's sending module version-aware.
740    #[serde(skip_serializing_if = "is_false")]
741    relocate_event_module: bool,
742
743    // Enable uncompressed group elements in BLS123-81 G1
744    #[serde(skip_serializing_if = "is_false")]
745    uncompressed_g1_group_elements: bool,
746
747    #[serde(skip_serializing_if = "is_false")]
748    disallow_new_modules_in_deps_only_packages: bool,
749
750    // Use smart ancestor selection in consensus.
751    #[serde(skip_serializing_if = "is_false")]
752    consensus_smart_ancestor_selection: bool,
753
754    // Probe accepted rounds in round prober.
755    #[serde(skip_serializing_if = "is_false")]
756    consensus_round_prober_probe_accepted_rounds: bool,
757
758    // Enable v2 native charging for natives.
759    #[serde(skip_serializing_if = "is_false")]
760    native_charging_v2: bool,
761
762    // Enables the new logic for collecting the subdag in the consensus linearizer. The new logic does not stop the recursion at the highest
763    // committed round for each authority, but allows to commit uncommitted blocks up to gc round (excluded) for that authority.
764    #[serde(skip_serializing_if = "is_false")]
765    consensus_linearize_subdag_v2: bool,
766
767    // Properly convert certain type argument errors in the execution layer.
768    #[serde(skip_serializing_if = "is_false")]
769    convert_type_argument_error: bool,
770
771    // Variants count as nodes
772    #[serde(skip_serializing_if = "is_false")]
773    variant_nodes: bool,
774
775    // If true, enable zstd compression for consensus tonic network.
776    #[serde(skip_serializing_if = "is_false")]
777    consensus_zstd_compression: bool,
778
779    // If true, enables the optimizations for child object mutations, removing unnecessary mutations
780    #[serde(skip_serializing_if = "is_false")]
781    minimize_child_object_mutations: bool,
782
783    // If true, record the additional state digest in the consensus commit prologue.
784    #[serde(skip_serializing_if = "is_false")]
785    record_additional_state_digest_in_prologue: bool,
786
787    // If true, enable `TxContext` Move API to go native.
788    #[serde(skip_serializing_if = "is_false")]
789    move_native_context: bool,
790
791    // If true, then it (1) will not enforce monotonicity checks for a block's ancestors and (2) calculates the commit's timestamp based on the
792    // weighted by stake median timestamp of the leader's ancestors.
793    #[serde(skip_serializing_if = "is_false")]
794    consensus_median_based_commit_timestamp: bool,
795
796    // If true, enables the normalization of PTB arguments but does not yet enable splatting
797    // `Result`s of length not equal to 1
798    #[serde(skip_serializing_if = "is_false")]
799    normalize_ptb_arguments: bool,
800
801    // If true, enabled batched block sync in consensus.
802    #[serde(skip_serializing_if = "is_false")]
803    consensus_batched_block_sync: bool,
804
805    // If true, enforces checkpoint timestamps are non-decreasing.
806    #[serde(skip_serializing_if = "is_false")]
807    enforce_checkpoint_timestamp_monotonicity: bool,
808
809    // If true, enables better errors and bounds for max ptb values
810    #[serde(skip_serializing_if = "is_false")]
811    max_ptb_value_size_v2: bool,
812
813    // If true, resolves all type input ids to be defining ID based in the adapter
814    #[serde(skip_serializing_if = "is_false")]
815    resolve_type_input_ids_to_defining_id: bool,
816
817    // Enable native function for party transfer
818    #[serde(skip_serializing_if = "is_false")]
819    enable_party_transfer: bool,
820
821    // Allow objects created or mutated in system transactions to exceed the max object size limit.
822    #[serde(skip_serializing_if = "is_false")]
823    allow_unbounded_system_objects: bool,
824
825    // Signifies the cut-over of using type tags instead of `Type`s in the object runtime.
826    #[serde(skip_serializing_if = "is_false")]
827    type_tags_in_object_runtime: bool,
828
829    // Enable accumulators
830    #[serde(skip_serializing_if = "is_false")]
831    enable_accumulators: bool,
832
833    // Enable coin reservation
834    #[serde(skip_serializing_if = "is_false")]
835    enable_coin_reservation_obj_refs: bool,
836
837    // If true, create the root accumulator object in the change epoch transaction.
838    // This must be enabled and shipped before `enable_accumulators` is set to true.
839    #[serde(skip_serializing_if = "is_false")]
840    create_root_accumulator_object: bool,
841
842    // Enable authenticated event streams
843    #[serde(skip_serializing_if = "is_false")]
844    enable_authenticated_event_streams: bool,
845
846    // Enable address balance gas payments
847    #[serde(skip_serializing_if = "is_false")]
848    enable_address_balance_gas_payments: bool,
849
850    // Validate gas price >= RGP at signing for address balance gas payments
851    #[serde(skip_serializing_if = "is_false")]
852    address_balance_gas_check_rgp_at_signing: bool,
853
854    #[serde(skip_serializing_if = "is_false")]
855    address_balance_gas_reject_gas_coin_arg: bool,
856
857    // Enable multi-epoch transaction expiration (max 1 epoch difference)
858    #[serde(skip_serializing_if = "is_false")]
859    enable_multi_epoch_transaction_expiration: bool,
860
861    // Relax ValidDuring expiration requirement for transactions with owned inputs
862    #[serde(skip_serializing_if = "is_false")]
863    relax_valid_during_for_owned_inputs: bool,
864
865    // Enable statically type checked ptb execution
866    #[serde(skip_serializing_if = "is_false")]
867    enable_ptb_execution_v2: bool,
868
869    // Provide better type resolution errors in the adapter.
870    #[serde(skip_serializing_if = "is_false")]
871    better_adapter_type_resolution_errors: bool,
872
873    // If true, record the time estimate processed in the consensus commit prologue.
874    #[serde(skip_serializing_if = "is_false")]
875    record_time_estimate_processed: bool,
876
877    // If true enable additional linkage checks.
878    #[serde(skip_serializing_if = "is_false")]
879    dependency_linkage_error: bool,
880
881    // If true enable additional multisig checks.
882    #[serde(skip_serializing_if = "is_false")]
883    additional_multisig_checks: bool,
884
885    // If true, ignore execution time observations after certs are closed.
886    #[serde(skip_serializing_if = "is_false")]
887    ignore_execution_time_observations_after_certs_closed: bool,
888
889    // If true use `debug_fatal` to report invariant violations.
890    // `debug_fatal` panics in debug builds and breaks tests/behavior based on older
891    // protocol versions (see make_vec_non_existent_type_v71.move)
892    #[serde(skip_serializing_if = "is_false")]
893    debug_fatal_on_move_invariant_violation: bool,
894
895    // DO NOT ENABLE THIS FOR PRODUCTION NETWORKS. used for testing only.
896    // Allow private accumulator entrypoints
897    #[serde(skip_serializing_if = "is_false")]
898    allow_private_accumulator_entrypoints: bool,
899
900    // If true, include indirect state in the additional consensus digest.
901    #[serde(skip_serializing_if = "is_false")]
902    additional_consensus_digest_indirect_state: bool,
903
904    // Check for `init` for new modules to a package on upgrade.
905    #[serde(skip_serializing_if = "is_false")]
906    check_for_init_during_upgrade: bool,
907
908    // Check shared object transfer restrictions per command.
909    #[serde(skip_serializing_if = "is_false")]
910    per_command_shared_object_transfer_rules: bool,
911
912    // Enable including checkpoint artifacts digest in the summary.
913    #[serde(skip_serializing_if = "is_false")]
914    include_checkpoint_artifacts_digest_in_summary: bool,
915
916    // If true, use MFP txns in load initial object debts.
917    #[serde(skip_serializing_if = "is_false")]
918    use_mfp_txns_in_load_initial_object_debts: bool,
919
920    // If true, cancel randomness-using txns when DKG has failed *before* doing other congestion checks.
921    #[serde(skip_serializing_if = "is_false")]
922    cancel_for_failed_dkg_early: bool,
923
924    // Enable coin registry protocol
925    #[serde(skip_serializing_if = "is_false")]
926    enable_coin_registry: bool,
927
928    // Use abstract size in the object runtime instead the legacy value size.
929    #[serde(skip_serializing_if = "is_false")]
930    abstract_size_in_object_runtime: bool,
931
932    // If true charge for loads into the cache (i.e., fetches from storage) in the object runtime.
933    #[serde(skip_serializing_if = "is_false")]
934    object_runtime_charge_cache_load_gas: bool,
935
936    // If true, perform additional borrow checks
937    #[serde(skip_serializing_if = "is_false")]
938    additional_borrow_checks: bool,
939
940    // If true, use the new commit handler.
941    #[serde(skip_serializing_if = "is_false")]
942    use_new_commit_handler: bool,
943
944    // If true return a better error message when we encounter a loader error.
945    #[serde(skip_serializing_if = "is_false")]
946    better_loader_errors: bool,
947
948    // If true generate layouts for dynamic fields
949    #[serde(skip_serializing_if = "is_false")]
950    generate_df_type_layouts: bool,
951
952    // If true, allow Move functions called in PTBs to return references
953    #[serde(skip_serializing_if = "is_false")]
954    allow_references_in_ptbs: bool,
955
956    // Enable display registry protocol
957    #[serde(skip_serializing_if = "is_false")]
958    enable_display_registry: bool,
959
960    // If true, enable private generics verifier v2
961    #[serde(skip_serializing_if = "is_false")]
962    private_generics_verifier_v2: bool,
963
964    // If true, deprecate global storage ops during Move module deserialization
965    #[serde(skip_serializing_if = "is_false")]
966    deprecate_global_storage_ops_during_deserialization: bool,
967
968    // If true, enable non-exclusive writes for user transactions.
969    // DO NOT ENABLE outside of the transaction test runner.
970    #[serde(skip_serializing_if = "is_false")]
971    enable_non_exclusive_writes: bool,
972
973    // If true, deprecate global storage ops everywhere.
974    #[serde(skip_serializing_if = "is_false")]
975    deprecate_global_storage_ops: bool,
976
977    // If true, normalize depth formula to not be empty for zero depth.
978    #[serde(skip_serializing_if = "is_false")]
979    normalize_depth_formula: bool,
980
981    // If true, skip GC'ed accept votes in CommitFinalizer.
982    #[serde(skip_serializing_if = "is_false")]
983    consensus_skip_gced_accept_votes: bool,
984
985    // If true, include cancelled randomness txns in the consensus commit prologue.
986    #[serde(skip_serializing_if = "is_false")]
987    include_cancelled_randomness_txns_in_prologue: bool,
988
989    // Enables address aliases.
990    #[serde(skip_serializing_if = "is_false")]
991    address_aliases: bool,
992
993    // Corrects signature-to-signer mapping in CheckpointContentsV2.
994    // TODO: remove old code and deprecate once in mainnet.
995    #[serde(skip_serializing_if = "is_false")]
996    fix_checkpoint_signature_mapping: bool,
997
998    // If true, enable object funds withdraw.
999    #[serde(skip_serializing_if = "is_false")]
1000    enable_object_funds_withdraw: bool,
1001
1002    // If true, skip GC'ed blocks in direct finalization.
1003    #[serde(skip_serializing_if = "is_false")]
1004    consensus_skip_gced_blocks_in_direct_finalization: bool,
1005
1006    // If true, uses a new rounding mechanism for gas calculations, replacing the step-based one
1007    #[serde(skip_serializing_if = "is_false")]
1008    gas_rounding_halve_digits: bool,
1009
1010    // If true, enable tx contexts in all argument positions
1011    #[serde(skip_serializing_if = "is_false")]
1012    flexible_tx_context_positions: bool,
1013
1014    // If true, disable entry point signature check.
1015    #[serde(skip_serializing_if = "is_false")]
1016    disable_entry_point_signature_check: bool,
1017
1018    // If true, convert withdrawal compatibility PTB arguments to coins at the start of the PTB.
1019    #[serde(skip_serializing_if = "is_false")]
1020    convert_withdrawal_compatibility_ptb_arguments: bool,
1021
1022    // If true, additional restrictions for hot or not entry functions are enforced.
1023    #[serde(skip_serializing_if = "is_false")]
1024    restrict_hot_or_not_entry_functions: bool,
1025
1026    // If true, split checkpoints in consensus handler.
1027    #[serde(skip_serializing_if = "is_false")]
1028    split_checkpoints_in_consensus_handler: bool,
1029
1030    // If true, always accept committed system transactions.
1031    #[serde(skip_serializing_if = "is_false")]
1032    consensus_always_accept_system_transactions: bool,
1033
1034    // If true perform consistent verification of metadata
1035    #[serde(skip_serializing_if = "is_false")]
1036    validator_metadata_verify_v2: bool,
1037
1038    // If true, defer transactions with unpaid consensus amplification
1039    // (where duplicate count exceeds gas_price / RGP + 1)
1040    #[serde(skip_serializing_if = "is_false")]
1041    defer_unpaid_amplification: bool,
1042
1043    #[serde(skip_serializing_if = "is_false")]
1044    randomize_checkpoint_tx_limit_in_tests: bool,
1045
1046    // If true, mark the gas coin as uninitialized in drop safety when there is no gas coin.
1047    #[serde(skip_serializing_if = "is_false")]
1048    gasless_transaction_drop_safety: bool,
1049
1050    // When split-checkpoints enabled, merge randomness and non-randomness schedulables together.
1051    #[serde(skip_serializing_if = "is_false")]
1052    merge_randomness_into_checkpoint: bool,
1053
1054    // If true, use coin party owner information.
1055    #[serde(skip_serializing_if = "is_false")]
1056    use_coin_party_owner: bool,
1057
1058    #[serde(skip_serializing_if = "is_false")]
1059    enable_gasless: bool,
1060
1061    #[serde(skip_serializing_if = "is_false")]
1062    gasless_verify_remaining_balance: bool,
1063
1064    #[serde(skip_serializing_if = "is_false")]
1065    disallow_jump_orphans: bool,
1066
1067    // If true, return early on type mismatch in receive_object.
1068    #[serde(skip_serializing_if = "is_false")]
1069    early_return_receive_object_mismatched_type: bool,
1070}
1071
1072fn is_false(b: &bool) -> bool {
1073    !b
1074}
1075
1076fn is_empty(b: &BTreeSet<String>) -> bool {
1077    b.is_empty()
1078}
1079
1080fn is_zero(val: &u64) -> bool {
1081    *val == 0
1082}
1083
1084/// Ordering mechanism for transactions in one Narwhal consensus output.
1085#[derive(Default, Copy, Clone, PartialEq, Eq, Serialize, Deserialize, Debug)]
1086pub enum ConsensusTransactionOrdering {
1087    /// No ordering. Transactions are processed in the order they appear in the consensus output.
1088    #[default]
1089    None,
1090    /// Order transactions by gas price, highest first.
1091    ByGasPrice,
1092}
1093
1094impl ConsensusTransactionOrdering {
1095    pub fn is_none(&self) -> bool {
1096        matches!(self, ConsensusTransactionOrdering::None)
1097    }
1098}
1099
1100#[derive(Default, Copy, Clone, PartialEq, Eq, Serialize, Deserialize, Debug)]
1101pub struct ExecutionTimeEstimateParams {
1102    // Targeted per-object utilization as an integer percentage (1-100).
1103    pub target_utilization: u64,
1104    // Schedule up to this much extra work (in microseconds) per object,
1105    // but don't allow more than a single transaction to exceed this
1106    // burst limit.
1107    pub allowed_txn_cost_overage_burst_limit_us: u64,
1108
1109    // For separate budget for randomness-using tx, the above limits are
1110    // used with this integer-percentage scaling factor (1-100).
1111    pub randomness_scalar: u64,
1112
1113    // Absolute maximum allowed transaction duration estimate (in microseconds).
1114    pub max_estimate_us: u64,
1115
1116    // Number of the final checkpoints in an epoch whose observations should be
1117    // stored for use in the next epoch.
1118    pub stored_observations_num_included_checkpoints: u64,
1119
1120    // Absolute limit on the number of saved observations at end of epoch.
1121    pub stored_observations_limit: u64,
1122
1123    // Requires observations from at least this amount of stake in order to use
1124    // observation-based execution time estimates instead of the default.
1125    #[serde(skip_serializing_if = "is_zero")]
1126    pub stake_weighted_median_threshold: u64,
1127
1128    // For backwards compatibility with old behavior we use a zero default duration when adding
1129    // new execution time observation keys and a zero generation when loading stored observations.
1130    // This can be removed once set to "true" on mainnet.
1131    #[serde(skip_serializing_if = "is_false")]
1132    pub default_none_duration_for_new_keys: bool,
1133
1134    // Number of observations per chunk. When None, chunking is disabled.
1135    #[serde(skip_serializing_if = "Option::is_none")]
1136    pub observations_chunk_size: Option<u64>,
1137}
1138
1139// The config for per object congestion control in consensus handler.
1140#[derive(Default, Copy, Clone, PartialEq, Eq, Serialize, Deserialize, Debug)]
1141pub enum PerObjectCongestionControlMode {
1142    #[default]
1143    None, // Deprecated.
1144    TotalGasBudget,                                     // Deprecated.
1145    TotalTxCount,                                       // Deprecated.
1146    TotalGasBudgetWithCap,                              // Deprecated.
1147    ExecutionTimeEstimate(ExecutionTimeEstimateParams), // Use execution time estimate as execution cost.
1148}
1149
1150impl PerObjectCongestionControlMode {
1151    pub fn is_none(&self) -> bool {
1152        matches!(self, PerObjectCongestionControlMode::None)
1153    }
1154}
1155
1156// Configuration options for consensus algorithm.
1157#[derive(Default, Copy, Clone, PartialEq, Eq, Serialize, Deserialize, Debug)]
1158pub enum ConsensusChoice {
1159    #[default]
1160    Narwhal,
1161    SwapEachEpoch,
1162    Mysticeti,
1163}
1164
1165impl ConsensusChoice {
1166    pub fn is_narwhal(&self) -> bool {
1167        matches!(self, ConsensusChoice::Narwhal)
1168    }
1169}
1170
1171// Configuration options for consensus network.
1172#[derive(Default, Copy, Clone, PartialEq, Eq, Serialize, Deserialize, Debug)]
1173pub enum ConsensusNetwork {
1174    #[default]
1175    Anemo,
1176    Tonic,
1177}
1178
1179impl ConsensusNetwork {
1180    pub fn is_anemo(&self) -> bool {
1181        matches!(self, ConsensusNetwork::Anemo)
1182    }
1183}
1184
1185/// Constants that change the behavior of the protocol.
1186///
1187/// The value of each constant here must be fixed for a given protocol version. To change the value
1188/// of a constant, advance the protocol version, and add support for it in `get_for_version` under
1189/// the new version number.
1190/// (below).
1191///
1192/// To add a new field to this struct, use the following procedure:
1193/// - Advance the protocol version.
1194/// - Add the field as a private `Option<T>` to the struct.
1195/// - Initialize the field to `None` in prior protocol versions.
1196/// - Initialize the field to `Some(val)` for your new protocol version.
1197/// - Add a public getter that simply unwraps the field.
1198/// - Two public getters of the form `field(&self) -> field_type`
1199///     and `field_as_option(&self) -> Option<field_type>` will be automatically generated for you.
1200/// Example for a field: `new_constant: Option<u64>`
1201/// ```rust,ignore
1202///      pub fn new_constant(&self) -> u64 {
1203///         self.new_constant.expect(Self::CONSTANT_ERR_MSG)
1204///     }
1205///      pub fn new_constant_as_option(&self) -> Option<u64> {
1206///         self.new_constant.expect(Self::CONSTANT_ERR_MSG)
1207///     }
1208/// ```
1209/// With `pub fn new_constant(&self) -> u64`, if the constant is accessed in a protocol version
1210/// in which it is not defined, the validator will crash. (Crashing is necessary because
1211/// this type of error would almost always result in forking if not prevented here).
1212/// If you don't want the validator to crash, you can use the
1213/// `pub fn new_constant_as_option(&self) -> Option<u64>` getter, which will
1214/// return `None` if the field is not defined at that version.
1215/// - If you want a customized getter, you can add a method in the impl.
1216#[skip_serializing_none]
1217#[derive(Clone, Serialize, Debug, ProtocolConfigAccessors, ProtocolConfigOverride)]
1218pub struct ProtocolConfig {
1219    pub version: ProtocolVersion,
1220
1221    feature_flags: FeatureFlags,
1222
1223    // ==== Transaction input limits ====
1224    /// Maximum serialized size of a transaction (in bytes).
1225    max_tx_size_bytes: Option<u64>,
1226
1227    /// Maximum number of input objects to a transaction. Enforced by the transaction input checker
1228    max_input_objects: Option<u64>,
1229
1230    /// Max size of objects a transaction can write to disk after completion. Enforce by the Sui adapter.
1231    /// This is the sum of the serialized size of all objects written to disk.
1232    /// The max size of individual objects on the other hand is `max_move_object_size`.
1233    max_size_written_objects: Option<u64>,
1234    /// Max size of objects a system transaction can write to disk after completion. Enforce by the Sui adapter.
1235    /// Similar to `max_size_written_objects` but for system transactions.
1236    max_size_written_objects_system_tx: Option<u64>,
1237
1238    /// Maximum size of serialized transaction effects.
1239    max_serialized_tx_effects_size_bytes: Option<u64>,
1240
1241    /// Maximum size of serialized transaction effects for system transactions.
1242    max_serialized_tx_effects_size_bytes_system_tx: Option<u64>,
1243
1244    /// Maximum number of gas payment objects for a transaction.
1245    max_gas_payment_objects: Option<u32>,
1246
1247    /// Maximum number of modules in a Publish transaction.
1248    max_modules_in_publish: Option<u32>,
1249
1250    /// Maximum number of transitive dependencies in a package when publishing.
1251    max_package_dependencies: Option<u32>,
1252
1253    /// Maximum number of arguments in a move call or a ProgrammableTransaction's
1254    /// TransferObjects command.
1255    max_arguments: Option<u32>,
1256
1257    /// Maximum number of total type arguments, computed recursively.
1258    max_type_arguments: Option<u32>,
1259
1260    /// Maximum depth of an individual type argument.
1261    max_type_argument_depth: Option<u32>,
1262
1263    /// Maximum size of a Pure CallArg.
1264    max_pure_argument_size: Option<u32>,
1265
1266    /// Maximum number of Commands in a ProgrammableTransaction.
1267    max_programmable_tx_commands: Option<u32>,
1268
1269    // ==== Move VM, Move bytecode verifier, and execution limits ===
1270    /// Maximum Move bytecode version the VM understands. All older versions are accepted.
1271    move_binary_format_version: Option<u32>,
1272    min_move_binary_format_version: Option<u32>,
1273
1274    /// Configuration controlling binary tables size.
1275    binary_module_handles: Option<u16>,
1276    binary_struct_handles: Option<u16>,
1277    binary_function_handles: Option<u16>,
1278    binary_function_instantiations: Option<u16>,
1279    binary_signatures: Option<u16>,
1280    binary_constant_pool: Option<u16>,
1281    binary_identifiers: Option<u16>,
1282    binary_address_identifiers: Option<u16>,
1283    binary_struct_defs: Option<u16>,
1284    binary_struct_def_instantiations: Option<u16>,
1285    binary_function_defs: Option<u16>,
1286    binary_field_handles: Option<u16>,
1287    binary_field_instantiations: Option<u16>,
1288    binary_friend_decls: Option<u16>,
1289    binary_enum_defs: Option<u16>,
1290    binary_enum_def_instantiations: Option<u16>,
1291    binary_variant_handles: Option<u16>,
1292    binary_variant_instantiation_handles: Option<u16>,
1293
1294    /// Maximum size of the `contents` part of an object, in bytes. Enforced by the Sui adapter when effects are produced.
1295    max_move_object_size: Option<u64>,
1296
1297    // TODO: Option<increase to 500 KB. currently, publishing a package > 500 KB exceeds the max computation gas cost
1298    /// Maximum size of a Move package object, in bytes. Enforced by the Sui adapter at the end of a publish transaction.
1299    max_move_package_size: Option<u64>,
1300
1301    /// Max number of publish or upgrade commands allowed in a programmable transaction block.
1302    max_publish_or_upgrade_per_ptb: Option<u64>,
1303
1304    /// Maximum gas budget in MIST that a transaction can use.
1305    max_tx_gas: Option<u64>,
1306
1307    /// Maximum amount of the proposed gas price in MIST (defined in the transaction).
1308    max_gas_price: Option<u64>,
1309
1310    /// For aborted txns, we cap the gas price at a factor of RGP. This lowers risk of setting higher priority gas price
1311    /// if there's a chance the txn will abort.
1312    max_gas_price_rgp_factor_for_aborted_transactions: Option<u64>,
1313
1314    /// The max computation bucket for gas. This is the max that can be charged for computation.
1315    max_gas_computation_bucket: Option<u64>,
1316
1317    // Define the value used to round up computation gas charges
1318    gas_rounding_step: Option<u64>,
1319
1320    /// Maximum number of nested loops. Enforced by the Move bytecode verifier.
1321    max_loop_depth: Option<u64>,
1322
1323    /// Maximum number of type arguments that can be bound to generic type parameters. Enforced by the Move bytecode verifier.
1324    max_generic_instantiation_length: Option<u64>,
1325
1326    /// Maximum number of parameters that a Move function can have. Enforced by the Move bytecode verifier.
1327    max_function_parameters: Option<u64>,
1328
1329    /// Maximum number of basic blocks that a Move function can have. Enforced by the Move bytecode verifier.
1330    max_basic_blocks: Option<u64>,
1331
1332    /// Maximum stack size value. Enforced by the Move bytecode verifier.
1333    max_value_stack_size: Option<u64>,
1334
1335    /// Maximum number of "type nodes", a metric for how big a SignatureToken will be when expanded into a fully qualified type. Enforced by the Move bytecode verifier.
1336    max_type_nodes: Option<u64>,
1337
1338    /// Maximum number of push instructions in one function. Enforced by the Move bytecode verifier.
1339    max_push_size: Option<u64>,
1340
1341    /// Maximum number of struct definitions in a module. Enforced by the Move bytecode verifier.
1342    max_struct_definitions: Option<u64>,
1343
1344    /// Maximum number of function definitions in a module. Enforced by the Move bytecode verifier.
1345    max_function_definitions: Option<u64>,
1346
1347    /// Maximum number of fields allowed in a struct definition. Enforced by the Move bytecode verifier.
1348    max_fields_in_struct: Option<u64>,
1349
1350    /// Maximum dependency depth. Enforced by the Move linker when loading dependent modules.
1351    max_dependency_depth: Option<u64>,
1352
1353    /// Maximum number of Move events that a single transaction can emit. Enforced by the VM during execution.
1354    max_num_event_emit: Option<u64>,
1355
1356    /// Maximum number of new IDs that a single transaction can create. Enforced by the VM during execution.
1357    max_num_new_move_object_ids: Option<u64>,
1358
1359    /// Maximum number of new IDs that a single system transaction can create. Enforced by the VM during execution.
1360    max_num_new_move_object_ids_system_tx: Option<u64>,
1361
1362    /// Maximum number of IDs that a single transaction can delete. Enforced by the VM during execution.
1363    max_num_deleted_move_object_ids: Option<u64>,
1364
1365    /// Maximum number of IDs that a single system transaction can delete. Enforced by the VM during execution.
1366    max_num_deleted_move_object_ids_system_tx: Option<u64>,
1367
1368    /// Maximum number of IDs that a single transaction can transfer. Enforced by the VM during execution.
1369    max_num_transferred_move_object_ids: Option<u64>,
1370
1371    /// Maximum number of IDs that a single system transaction can transfer. Enforced by the VM during execution.
1372    max_num_transferred_move_object_ids_system_tx: Option<u64>,
1373
1374    /// Maximum size of a Move user event. Enforced by the VM during execution.
1375    max_event_emit_size: Option<u64>,
1376
1377    /// Maximum size of a Move user event. Enforced by the VM during execution.
1378    max_event_emit_size_total: Option<u64>,
1379
1380    /// Maximum length of a vector in Move. Enforced by the VM during execution, and for constants, by the verifier.
1381    max_move_vector_len: Option<u64>,
1382
1383    /// Maximum length of an `Identifier` in Move. Enforced by the bytecode verifier at signing.
1384    max_move_identifier_len: Option<u64>,
1385
1386    /// Maximum depth of a Move value within the VM.
1387    max_move_value_depth: Option<u64>,
1388
1389    /// Maximum number of variants in an enum. Enforced by the bytecode verifier at signing.
1390    max_move_enum_variants: Option<u64>,
1391
1392    /// Maximum number of back edges in Move function. Enforced by the bytecode verifier at signing.
1393    max_back_edges_per_function: Option<u64>,
1394
1395    /// Maximum number of back edges in Move module. Enforced by the bytecode verifier at signing.
1396    max_back_edges_per_module: Option<u64>,
1397
1398    /// Maximum number of meter `ticks` spent verifying a Move function. Enforced by the bytecode verifier at signing.
1399    max_verifier_meter_ticks_per_function: Option<u64>,
1400
1401    /// Maximum number of meter `ticks` spent verifying a Move module. Enforced by the bytecode verifier at signing.
1402    max_meter_ticks_per_module: Option<u64>,
1403
1404    /// Maximum number of meter `ticks` spent verifying a Move package. Enforced by the bytecode verifier at signing.
1405    max_meter_ticks_per_package: Option<u64>,
1406
1407    // === Object runtime internal operation limits ====
1408    // These affect dynamic fields
1409    /// Maximum number of cached objects in the object runtime ObjectStore. Enforced by object runtime during execution
1410    object_runtime_max_num_cached_objects: Option<u64>,
1411
1412    /// Maximum number of cached objects in the object runtime ObjectStore in system transaction. Enforced by object runtime during execution
1413    object_runtime_max_num_cached_objects_system_tx: Option<u64>,
1414
1415    /// Maximum number of stored objects accessed by object runtime ObjectStore. Enforced by object runtime during execution
1416    object_runtime_max_num_store_entries: Option<u64>,
1417
1418    /// Maximum number of stored objects accessed by object runtime ObjectStore in system transaction. Enforced by object runtime during execution
1419    object_runtime_max_num_store_entries_system_tx: Option<u64>,
1420
1421    // === Execution gas costs ====
1422    /// Base cost for any Sui transaction
1423    base_tx_cost_fixed: Option<u64>,
1424
1425    /// Additional cost for a transaction that publishes a package
1426    /// i.e., the base cost of such a transaction is base_tx_cost_fixed + package_publish_cost_fixed
1427    package_publish_cost_fixed: Option<u64>,
1428
1429    /// Cost per byte of a Move call transaction
1430    /// i.e., the cost of such a transaction is base_cost + (base_tx_cost_per_byte * size)
1431    base_tx_cost_per_byte: Option<u64>,
1432
1433    /// Cost per byte for a transaction that publishes a package
1434    package_publish_cost_per_byte: Option<u64>,
1435
1436    // Per-byte cost of reading an object during transaction execution
1437    obj_access_cost_read_per_byte: Option<u64>,
1438
1439    // Per-byte cost of writing an object during transaction execution
1440    obj_access_cost_mutate_per_byte: Option<u64>,
1441
1442    // Per-byte cost of deleting an object during transaction execution
1443    obj_access_cost_delete_per_byte: Option<u64>,
1444
1445    /// Per-byte cost charged for each input object to a transaction.
1446    /// Meant to approximate the cost of checking locks for each object
1447    // TODO: Option<I'm not sure that this cost makes sense. Checking locks is "free"
1448    // in the sense that an invalid tx that can never be committed/pay gas can
1449    // force validators to check an arbitrary number of locks. If those checks are
1450    // "free" for invalid transactions, why charge for them in valid transactions
1451    // TODO: Option<if we keep this, I think we probably want it to be a fixed cost rather
1452    // than a per-byte cost. checking an object lock should not require loading an
1453    // entire object, just consulting an ID -> tx digest map
1454    obj_access_cost_verify_per_byte: Option<u64>,
1455
1456    // Maximal nodes which are allowed when converting to a type layout.
1457    max_type_to_layout_nodes: Option<u64>,
1458
1459    // Maximal size in bytes that a PTB value can be
1460    max_ptb_value_size: Option<u64>,
1461
1462    // === Gas version. gas model ===
1463    /// Gas model version, what code we are using to charge gas
1464    gas_model_version: Option<u64>,
1465
1466    // === Storage gas costs ===
1467    /// Per-byte cost of storing an object in the Sui global object store. Some of this cost may be refundable if the object is later freed
1468    obj_data_cost_refundable: Option<u64>,
1469
1470    // Per-byte cost of storing an object in the Sui transaction log (e.g., in CertifiedTransactionEffects)
1471    // This depends on the size of various fields including the effects
1472    // TODO: Option<I don't fully understand this^ and more details would be useful
1473    obj_metadata_cost_non_refundable: Option<u64>,
1474
1475    // === Tokenomics ===
1476
1477    // TODO: Option<this should be changed to u64.
1478    /// Sender of a txn that touches an object will get this percent of the storage rebate back.
1479    /// In basis point.
1480    storage_rebate_rate: Option<u64>,
1481
1482    /// 5% of the storage fund's share of rewards are reinvested into the storage fund.
1483    /// In basis point.
1484    storage_fund_reinvest_rate: Option<u64>,
1485
1486    /// The share of rewards that will be slashed and redistributed is 50%.
1487    /// In basis point.
1488    reward_slashing_rate: Option<u64>,
1489
1490    /// Unit gas price, Mist per internal gas unit.
1491    storage_gas_price: Option<u64>,
1492
1493    /// Per-object storage cost for accumulator objects, used during end-of-epoch accounting.
1494    accumulator_object_storage_cost: Option<u64>,
1495
1496    // === Core Protocol ===
1497    /// Max number of transactions per checkpoint.
1498    /// Note that this is a protocol constant and not a config as validators must have this set to
1499    /// the same value, otherwise they *will* fork.
1500    max_transactions_per_checkpoint: Option<u64>,
1501
1502    /// Max size of a checkpoint in bytes.
1503    /// Note that this is a protocol constant and not a config as validators must have this set to
1504    /// the same value, otherwise they *will* fork.
1505    max_checkpoint_size_bytes: Option<u64>,
1506
1507    /// A protocol upgrade always requires 2f+1 stake to agree. We support a buffer of additional
1508    /// stake (as a fraction of f, expressed in basis points) that is required before an upgrade
1509    /// can happen automatically. 10000bps would indicate that complete unanimity is required (all
1510    /// 3f+1 must vote), while 0bps would indicate that 2f+1 is sufficient.
1511    buffer_stake_for_protocol_upgrade_bps: Option<u64>,
1512
1513    // === Native Function Costs ===
1514
1515    // `address` module
1516    // Cost params for the Move native function `address::from_bytes(bytes: vector<u8>)`
1517    address_from_bytes_cost_base: Option<u64>,
1518    // Cost params for the Move native function `address::to_u256(address): u256`
1519    address_to_u256_cost_base: Option<u64>,
1520    // Cost params for the Move native function `address::from_u256(u256): address`
1521    address_from_u256_cost_base: Option<u64>,
1522
1523    // `config` module
1524    // Cost params for the Move native function `read_setting_impl<Name: copy + drop + store,
1525    // SettingValue: key + store, SettingDataValue: store, Value: copy + drop + store,
1526    // >(config: address, name: address, current_epoch: u64): Option<Value>`
1527    config_read_setting_impl_cost_base: Option<u64>,
1528    config_read_setting_impl_cost_per_byte: Option<u64>,
1529
1530    // `dynamic_field` module
1531    // Cost params for the Move native function `hash_type_and_key<K: copy + drop + store>(parent: address, k: K): address`
1532    dynamic_field_hash_type_and_key_cost_base: Option<u64>,
1533    dynamic_field_hash_type_and_key_type_cost_per_byte: Option<u64>,
1534    dynamic_field_hash_type_and_key_value_cost_per_byte: Option<u64>,
1535    dynamic_field_hash_type_and_key_type_tag_cost_per_byte: Option<u64>,
1536    // Cost params for the Move native function `add_child_object<Child: key>(parent: address, child: Child)`
1537    dynamic_field_add_child_object_cost_base: Option<u64>,
1538    dynamic_field_add_child_object_type_cost_per_byte: Option<u64>,
1539    dynamic_field_add_child_object_value_cost_per_byte: Option<u64>,
1540    dynamic_field_add_child_object_struct_tag_cost_per_byte: Option<u64>,
1541    // Cost params for the Move native function `borrow_child_object_mut<Child: key>(parent: &mut UID, id: address): &mut Child`
1542    dynamic_field_borrow_child_object_cost_base: Option<u64>,
1543    dynamic_field_borrow_child_object_child_ref_cost_per_byte: Option<u64>,
1544    dynamic_field_borrow_child_object_type_cost_per_byte: Option<u64>,
1545    // Cost params for the Move native function `remove_child_object<Child: key>(parent: address, id: address): Child`
1546    dynamic_field_remove_child_object_cost_base: Option<u64>,
1547    dynamic_field_remove_child_object_child_cost_per_byte: Option<u64>,
1548    dynamic_field_remove_child_object_type_cost_per_byte: Option<u64>,
1549    // Cost params for the Move native function `has_child_object(parent: address, id: address): bool`
1550    dynamic_field_has_child_object_cost_base: Option<u64>,
1551    // Cost params for the Move native function `has_child_object_with_ty<Child: key>(parent: address, id: address): bool`
1552    dynamic_field_has_child_object_with_ty_cost_base: Option<u64>,
1553    dynamic_field_has_child_object_with_ty_type_cost_per_byte: Option<u64>,
1554    dynamic_field_has_child_object_with_ty_type_tag_cost_per_byte: Option<u64>,
1555
1556    // `event` module
1557    // Cost params for the Move native function `event::emit<T: copy + drop>(event: T)`
1558    event_emit_cost_base: Option<u64>,
1559    event_emit_value_size_derivation_cost_per_byte: Option<u64>,
1560    event_emit_tag_size_derivation_cost_per_byte: Option<u64>,
1561    event_emit_output_cost_per_byte: Option<u64>,
1562    event_emit_auth_stream_cost: Option<u64>,
1563
1564    //  `object` module
1565    // Cost params for the Move native function `borrow_uid<T: key>(obj: &T): &UID`
1566    object_borrow_uid_cost_base: Option<u64>,
1567    // Cost params for the Move native function `delete_impl(id: address)`
1568    object_delete_impl_cost_base: Option<u64>,
1569    // Cost params for the Move native function `record_new_uid(id: address)`
1570    object_record_new_uid_cost_base: Option<u64>,
1571
1572    // Transfer
1573    // Cost params for the Move native function `transfer_impl<T: key>(obj: T, recipient: address)`
1574    transfer_transfer_internal_cost_base: Option<u64>,
1575    // Cost params for the Move native function `party_transfer_impl<T: key>(obj: T, party_members: vector<address>)`
1576    transfer_party_transfer_internal_cost_base: Option<u64>,
1577    // Cost params for the Move native function `freeze_object<T: key>(obj: T)`
1578    transfer_freeze_object_cost_base: Option<u64>,
1579    // Cost params for the Move native function `share_object<T: key>(obj: T)`
1580    transfer_share_object_cost_base: Option<u64>,
1581    // Cost params for the Move native function
1582    // `receive_object<T: key>(p: &mut UID, recv: Receiving<T>T)`
1583    transfer_receive_object_cost_base: Option<u64>,
1584    transfer_receive_object_cost_per_byte: Option<u64>,
1585    transfer_receive_object_type_cost_per_byte: Option<u64>,
1586
1587    // TxContext
1588    // Cost params for the Move native function `transfer_impl<T: key>(obj: T, recipient: address)`
1589    tx_context_derive_id_cost_base: Option<u64>,
1590    tx_context_fresh_id_cost_base: Option<u64>,
1591    tx_context_sender_cost_base: Option<u64>,
1592    tx_context_epoch_cost_base: Option<u64>,
1593    tx_context_epoch_timestamp_ms_cost_base: Option<u64>,
1594    tx_context_sponsor_cost_base: Option<u64>,
1595    tx_context_rgp_cost_base: Option<u64>,
1596    tx_context_gas_price_cost_base: Option<u64>,
1597    tx_context_gas_budget_cost_base: Option<u64>,
1598    tx_context_ids_created_cost_base: Option<u64>,
1599    tx_context_replace_cost_base: Option<u64>,
1600
1601    // Types
1602    // Cost params for the Move native function `is_one_time_witness<T: drop>(_: &T): bool`
1603    types_is_one_time_witness_cost_base: Option<u64>,
1604    types_is_one_time_witness_type_tag_cost_per_byte: Option<u64>,
1605    types_is_one_time_witness_type_cost_per_byte: Option<u64>,
1606
1607    // Validator
1608    // Cost params for the Move native function `validate_metadata_bcs(metadata: vector<u8>)`
1609    validator_validate_metadata_cost_base: Option<u64>,
1610    validator_validate_metadata_data_cost_per_byte: Option<u64>,
1611
1612    // Crypto natives
1613    crypto_invalid_arguments_cost: Option<u64>,
1614    // bls12381::bls12381_min_sig_verify
1615    bls12381_bls12381_min_sig_verify_cost_base: Option<u64>,
1616    bls12381_bls12381_min_sig_verify_msg_cost_per_byte: Option<u64>,
1617    bls12381_bls12381_min_sig_verify_msg_cost_per_block: Option<u64>,
1618
1619    // bls12381::bls12381_min_pk_verify
1620    bls12381_bls12381_min_pk_verify_cost_base: Option<u64>,
1621    bls12381_bls12381_min_pk_verify_msg_cost_per_byte: Option<u64>,
1622    bls12381_bls12381_min_pk_verify_msg_cost_per_block: Option<u64>,
1623
1624    // ecdsa_k1::ecrecover
1625    ecdsa_k1_ecrecover_keccak256_cost_base: Option<u64>,
1626    ecdsa_k1_ecrecover_keccak256_msg_cost_per_byte: Option<u64>,
1627    ecdsa_k1_ecrecover_keccak256_msg_cost_per_block: Option<u64>,
1628    ecdsa_k1_ecrecover_sha256_cost_base: Option<u64>,
1629    ecdsa_k1_ecrecover_sha256_msg_cost_per_byte: Option<u64>,
1630    ecdsa_k1_ecrecover_sha256_msg_cost_per_block: Option<u64>,
1631
1632    // ecdsa_k1::decompress_pubkey
1633    ecdsa_k1_decompress_pubkey_cost_base: Option<u64>,
1634
1635    // ecdsa_k1::secp256k1_verify
1636    ecdsa_k1_secp256k1_verify_keccak256_cost_base: Option<u64>,
1637    ecdsa_k1_secp256k1_verify_keccak256_msg_cost_per_byte: Option<u64>,
1638    ecdsa_k1_secp256k1_verify_keccak256_msg_cost_per_block: Option<u64>,
1639    ecdsa_k1_secp256k1_verify_sha256_cost_base: Option<u64>,
1640    ecdsa_k1_secp256k1_verify_sha256_msg_cost_per_byte: Option<u64>,
1641    ecdsa_k1_secp256k1_verify_sha256_msg_cost_per_block: Option<u64>,
1642
1643    // ecdsa_r1::ecrecover
1644    ecdsa_r1_ecrecover_keccak256_cost_base: Option<u64>,
1645    ecdsa_r1_ecrecover_keccak256_msg_cost_per_byte: Option<u64>,
1646    ecdsa_r1_ecrecover_keccak256_msg_cost_per_block: Option<u64>,
1647    ecdsa_r1_ecrecover_sha256_cost_base: Option<u64>,
1648    ecdsa_r1_ecrecover_sha256_msg_cost_per_byte: Option<u64>,
1649    ecdsa_r1_ecrecover_sha256_msg_cost_per_block: Option<u64>,
1650
1651    // ecdsa_r1::secp256k1_verify
1652    ecdsa_r1_secp256r1_verify_keccak256_cost_base: Option<u64>,
1653    ecdsa_r1_secp256r1_verify_keccak256_msg_cost_per_byte: Option<u64>,
1654    ecdsa_r1_secp256r1_verify_keccak256_msg_cost_per_block: Option<u64>,
1655    ecdsa_r1_secp256r1_verify_sha256_cost_base: Option<u64>,
1656    ecdsa_r1_secp256r1_verify_sha256_msg_cost_per_byte: Option<u64>,
1657    ecdsa_r1_secp256r1_verify_sha256_msg_cost_per_block: Option<u64>,
1658
1659    // ecvrf::verify
1660    ecvrf_ecvrf_verify_cost_base: Option<u64>,
1661    ecvrf_ecvrf_verify_alpha_string_cost_per_byte: Option<u64>,
1662    ecvrf_ecvrf_verify_alpha_string_cost_per_block: Option<u64>,
1663
1664    // ed25519
1665    ed25519_ed25519_verify_cost_base: Option<u64>,
1666    ed25519_ed25519_verify_msg_cost_per_byte: Option<u64>,
1667    ed25519_ed25519_verify_msg_cost_per_block: Option<u64>,
1668
1669    // groth16::prepare_verifying_key
1670    groth16_prepare_verifying_key_bls12381_cost_base: Option<u64>,
1671    groth16_prepare_verifying_key_bn254_cost_base: Option<u64>,
1672
1673    // groth16::verify_groth16_proof_internal
1674    groth16_verify_groth16_proof_internal_bls12381_cost_base: Option<u64>,
1675    groth16_verify_groth16_proof_internal_bls12381_cost_per_public_input: Option<u64>,
1676    groth16_verify_groth16_proof_internal_bn254_cost_base: Option<u64>,
1677    groth16_verify_groth16_proof_internal_bn254_cost_per_public_input: Option<u64>,
1678    groth16_verify_groth16_proof_internal_public_input_cost_per_byte: Option<u64>,
1679
1680    // hash::blake2b256
1681    hash_blake2b256_cost_base: Option<u64>,
1682    hash_blake2b256_data_cost_per_byte: Option<u64>,
1683    hash_blake2b256_data_cost_per_block: Option<u64>,
1684
1685    // hash::keccak256
1686    hash_keccak256_cost_base: Option<u64>,
1687    hash_keccak256_data_cost_per_byte: Option<u64>,
1688    hash_keccak256_data_cost_per_block: Option<u64>,
1689
1690    // poseidon::poseidon_bn254
1691    poseidon_bn254_cost_base: Option<u64>,
1692    poseidon_bn254_cost_per_block: Option<u64>,
1693
1694    // group_ops
1695    group_ops_bls12381_decode_scalar_cost: Option<u64>,
1696    group_ops_bls12381_decode_g1_cost: Option<u64>,
1697    group_ops_bls12381_decode_g2_cost: Option<u64>,
1698    group_ops_bls12381_decode_gt_cost: Option<u64>,
1699    group_ops_bls12381_scalar_add_cost: Option<u64>,
1700    group_ops_bls12381_g1_add_cost: Option<u64>,
1701    group_ops_bls12381_g2_add_cost: Option<u64>,
1702    group_ops_bls12381_gt_add_cost: Option<u64>,
1703    group_ops_bls12381_scalar_sub_cost: Option<u64>,
1704    group_ops_bls12381_g1_sub_cost: Option<u64>,
1705    group_ops_bls12381_g2_sub_cost: Option<u64>,
1706    group_ops_bls12381_gt_sub_cost: Option<u64>,
1707    group_ops_bls12381_scalar_mul_cost: Option<u64>,
1708    group_ops_bls12381_g1_mul_cost: Option<u64>,
1709    group_ops_bls12381_g2_mul_cost: Option<u64>,
1710    group_ops_bls12381_gt_mul_cost: Option<u64>,
1711    group_ops_bls12381_scalar_div_cost: Option<u64>,
1712    group_ops_bls12381_g1_div_cost: Option<u64>,
1713    group_ops_bls12381_g2_div_cost: Option<u64>,
1714    group_ops_bls12381_gt_div_cost: Option<u64>,
1715    group_ops_bls12381_g1_hash_to_base_cost: Option<u64>,
1716    group_ops_bls12381_g2_hash_to_base_cost: Option<u64>,
1717    group_ops_bls12381_g1_hash_to_cost_per_byte: Option<u64>,
1718    group_ops_bls12381_g2_hash_to_cost_per_byte: Option<u64>,
1719    group_ops_bls12381_g1_msm_base_cost: Option<u64>,
1720    group_ops_bls12381_g2_msm_base_cost: Option<u64>,
1721    group_ops_bls12381_g1_msm_base_cost_per_input: Option<u64>,
1722    group_ops_bls12381_g2_msm_base_cost_per_input: Option<u64>,
1723    group_ops_bls12381_msm_max_len: Option<u32>,
1724    group_ops_bls12381_pairing_cost: Option<u64>,
1725    group_ops_bls12381_g1_to_uncompressed_g1_cost: Option<u64>,
1726    group_ops_bls12381_uncompressed_g1_to_g1_cost: Option<u64>,
1727    group_ops_bls12381_uncompressed_g1_sum_base_cost: Option<u64>,
1728    group_ops_bls12381_uncompressed_g1_sum_cost_per_term: Option<u64>,
1729    group_ops_bls12381_uncompressed_g1_sum_max_terms: Option<u64>,
1730
1731    group_ops_ristretto_decode_scalar_cost: Option<u64>,
1732    group_ops_ristretto_decode_point_cost: Option<u64>,
1733    group_ops_ristretto_scalar_add_cost: Option<u64>,
1734    group_ops_ristretto_point_add_cost: Option<u64>,
1735    group_ops_ristretto_scalar_sub_cost: Option<u64>,
1736    group_ops_ristretto_point_sub_cost: Option<u64>,
1737    group_ops_ristretto_scalar_mul_cost: Option<u64>,
1738    group_ops_ristretto_point_mul_cost: Option<u64>,
1739    group_ops_ristretto_scalar_div_cost: Option<u64>,
1740    group_ops_ristretto_point_div_cost: Option<u64>,
1741
1742    verify_bulletproofs_ristretto255_base_cost: Option<u64>,
1743    verify_bulletproofs_ristretto255_cost_per_bit_and_commitment: Option<u64>,
1744
1745    // hmac::hmac_sha3_256
1746    hmac_hmac_sha3_256_cost_base: Option<u64>,
1747    hmac_hmac_sha3_256_input_cost_per_byte: Option<u64>,
1748    hmac_hmac_sha3_256_input_cost_per_block: Option<u64>,
1749
1750    // zklogin::check_zklogin_id
1751    check_zklogin_id_cost_base: Option<u64>,
1752    // zklogin::check_zklogin_issuer
1753    check_zklogin_issuer_cost_base: Option<u64>,
1754
1755    vdf_verify_vdf_cost: Option<u64>,
1756    vdf_hash_to_input_cost: Option<u64>,
1757
1758    // nitro_attestation::load_nitro_attestation
1759    nitro_attestation_parse_base_cost: Option<u64>,
1760    nitro_attestation_parse_cost_per_byte: Option<u64>,
1761    nitro_attestation_verify_base_cost: Option<u64>,
1762    nitro_attestation_verify_cost_per_cert: Option<u64>,
1763
1764    // Stdlib costs
1765    bcs_per_byte_serialized_cost: Option<u64>,
1766    bcs_legacy_min_output_size_cost: Option<u64>,
1767    bcs_failure_cost: Option<u64>,
1768
1769    hash_sha2_256_base_cost: Option<u64>,
1770    hash_sha2_256_per_byte_cost: Option<u64>,
1771    hash_sha2_256_legacy_min_input_len_cost: Option<u64>,
1772    hash_sha3_256_base_cost: Option<u64>,
1773    hash_sha3_256_per_byte_cost: Option<u64>,
1774    hash_sha3_256_legacy_min_input_len_cost: Option<u64>,
1775    type_name_get_base_cost: Option<u64>,
1776    type_name_get_per_byte_cost: Option<u64>,
1777    type_name_id_base_cost: Option<u64>,
1778
1779    string_check_utf8_base_cost: Option<u64>,
1780    string_check_utf8_per_byte_cost: Option<u64>,
1781    string_is_char_boundary_base_cost: Option<u64>,
1782    string_sub_string_base_cost: Option<u64>,
1783    string_sub_string_per_byte_cost: Option<u64>,
1784    string_index_of_base_cost: Option<u64>,
1785    string_index_of_per_byte_pattern_cost: Option<u64>,
1786    string_index_of_per_byte_searched_cost: Option<u64>,
1787
1788    vector_empty_base_cost: Option<u64>,
1789    vector_length_base_cost: Option<u64>,
1790    vector_push_back_base_cost: Option<u64>,
1791    vector_push_back_legacy_per_abstract_memory_unit_cost: Option<u64>,
1792    vector_borrow_base_cost: Option<u64>,
1793    vector_pop_back_base_cost: Option<u64>,
1794    vector_destroy_empty_base_cost: Option<u64>,
1795    vector_swap_base_cost: Option<u64>,
1796    debug_print_base_cost: Option<u64>,
1797    debug_print_stack_trace_base_cost: Option<u64>,
1798
1799    // ==== Ephemeral (consensus only) params deleted ====
1800    //
1801    // Const params for consensus scoring decision
1802    // The scaling factor property for the MED outlier detection
1803    // scoring_decision_mad_divisor: Option<f64>,
1804    // The cutoff value for the MED outlier detection
1805    // scoring_decision_cutoff_value: Option<f64>,
1806    /// === Execution Version ===
1807    execution_version: Option<u64>,
1808
1809    // Dictates the threshold (percentage of stake) that is used to calculate the "bad" nodes to be
1810    // swapped when creating the consensus schedule. The values should be of the range [0 - 33]. Anything
1811    // above 33 (f) will not be allowed.
1812    consensus_bad_nodes_stake_threshold: Option<u64>,
1813
1814    max_jwk_votes_per_validator_per_epoch: Option<u64>,
1815    // The maximum age of a JWK in epochs before it is removed from the AuthenticatorState object.
1816    // Applied at the end of an epoch as a delta from the new epoch value, so setting this to 1
1817    // will cause the new epoch to start with JWKs from the previous epoch still valid.
1818    max_age_of_jwk_in_epochs: Option<u64>,
1819
1820    // === random beacon ===
1821    /// Maximum allowed precision loss when reducing voting weights for the random beacon
1822    /// protocol.
1823    random_beacon_reduction_allowed_delta: Option<u16>,
1824
1825    /// Minimum number of shares below which voting weights will not be reduced for the
1826    /// random beacon protocol.
1827    random_beacon_reduction_lower_bound: Option<u32>,
1828
1829    /// Consensus Round after which DKG should be aborted and randomness disabled for
1830    /// the epoch, if it hasn't already completed.
1831    random_beacon_dkg_timeout_round: Option<u32>,
1832
1833    /// Minimum interval between consecutive rounds of generated randomness.
1834    random_beacon_min_round_interval_ms: Option<u64>,
1835
1836    /// Version of the random beacon DKG protocol.
1837    /// 0 was deprecated (and currently not supported), 1 is the default version.
1838    random_beacon_dkg_version: Option<u64>,
1839
1840    /// The maximum serialised transaction size (in bytes) accepted by consensus. That should be bigger than the
1841    /// `max_tx_size_bytes` with some additional headroom.
1842    consensus_max_transaction_size_bytes: Option<u64>,
1843    /// The maximum size of transactions included in a consensus block.
1844    consensus_max_transactions_in_block_bytes: Option<u64>,
1845    /// The maximum number of transactions included in a consensus block.
1846    consensus_max_num_transactions_in_block: Option<u64>,
1847
1848    /// The maximum number of rounds where transaction voting is allowed.
1849    consensus_voting_rounds: Option<u32>,
1850
1851    /// DEPRECATED. Do not use.
1852    max_accumulated_txn_cost_per_object_in_narwhal_commit: Option<u64>,
1853
1854    /// The max number of consensus rounds a transaction can be deferred due to shared object congestion.
1855    /// Transactions will be cancelled after this many rounds.
1856    max_deferral_rounds_for_congestion_control: Option<u64>,
1857
1858    /// DEPRECATED. Do not use.
1859    max_txn_cost_overage_per_object_in_commit: Option<u64>,
1860
1861    /// DEPRECATED. Do not use.
1862    allowed_txn_cost_overage_burst_per_object_in_commit: Option<u64>,
1863
1864    /// Minimum interval of commit timestamps between consecutive checkpoints.
1865    min_checkpoint_interval_ms: Option<u64>,
1866
1867    /// Version number to use for version_specific_data in `CheckpointSummary`.
1868    checkpoint_summary_version_specific_data: Option<u64>,
1869
1870    /// The max number of transactions that can be included in a single Soft Bundle.
1871    max_soft_bundle_size: Option<u64>,
1872
1873    /// Whether to try to form bridge committee
1874    // Note: this is not a feature flag because we want to distinguish between
1875    // `None` and `Some(false)`, as committee was already finalized on Testnet.
1876    bridge_should_try_to_finalize_committee: Option<bool>,
1877
1878    /// The max accumulated txn execution cost per object in a mysticeti. Transactions
1879    /// in a commit will be deferred once their touch shared objects hit this limit,
1880    /// unless the selected congestion control mode allows overage.
1881    /// This config plays the same role as `max_accumulated_txn_cost_per_object_in_narwhal_commit`
1882    /// but for mysticeti commits due to that mysticeti has higher commit rate.
1883    max_accumulated_txn_cost_per_object_in_mysticeti_commit: Option<u64>,
1884
1885    /// As above, but separate per-commit budget for transactions that use randomness.
1886    /// If not configured, uses the setting for `max_accumulated_txn_cost_per_object_in_mysticeti_commit`.
1887    max_accumulated_randomness_txn_cost_per_object_in_mysticeti_commit: Option<u64>,
1888
1889    /// Configures the garbage collection depth for consensus. When is unset or `0` then the garbage collection
1890    /// is disabled.
1891    consensus_gc_depth: Option<u32>,
1892
1893    /// DEPRECATED. Do not use.
1894    gas_budget_based_txn_cost_cap_factor: Option<u64>,
1895
1896    /// DEPRECATED. Do not use.
1897    gas_budget_based_txn_cost_absolute_cap_commit_count: Option<u64>,
1898
1899    /// SIP-45: K in the formula `amplification_factor = max(0, gas_price / reference_gas_price - K)`.
1900    /// This is the threshold for activating consensus amplification.
1901    sip_45_consensus_amplification_threshold: Option<u64>,
1902
1903    /// DEPRECATED: this was an ephemeral feature flag only used in per-epoch tables, which has now
1904    /// been deployed everywhere.
1905    use_object_per_epoch_marker_table_v2: Option<bool>,
1906
1907    /// The number of commits to consider when computing a deterministic commit rate.
1908    consensus_commit_rate_estimation_window_size: Option<u32>,
1909
1910    /// A list of effective AliasedAddress.
1911    /// For each pair, `aliased` is allowed to act as `original` for any of the transaction digests
1912    /// listed in `tx_digests`
1913    #[serde(skip_serializing_if = "Vec::is_empty")]
1914    aliased_addresses: Vec<AliasedAddress>,
1915
1916    /// The base charge for each command in a programmable transaction. This is a fixed cost to
1917    /// account for the overhead of processing each command.
1918    translation_per_command_base_charge: Option<u64>,
1919
1920    /// The base charge for each input in a programmable transaction regardless of if it is used or
1921    /// not, or a pure/object/funds withdrawal input.
1922    translation_per_input_base_charge: Option<u64>,
1923
1924    /// The base charge for each byte of pure input in a programmable transaction.
1925    translation_pure_input_per_byte_charge: Option<u64>,
1926
1927    /// The multiplier for the number of type nodes when charging for type loading.
1928    /// This is multiplied by the number of type nodes to get the total cost.
1929    /// This should be a small number to avoid excessive gas costs for loading types.
1930    translation_per_type_node_charge: Option<u64>,
1931
1932    /// The multiplier for the number of type references when charging for type checking and reference
1933    /// checking.
1934    translation_per_reference_node_charge: Option<u64>,
1935
1936    /// The multiplier for each linkage entry when charging for linkage tables that we have
1937    /// created.
1938    translation_per_linkage_entry_charge: Option<u64>,
1939
1940    /// The maximum number of updates per settlement transaction.
1941    max_updates_per_settlement_txn: Option<u32>,
1942
1943    /// Maximum computation units allowed for a gasless transaction.
1944    gasless_max_computation_units: Option<u64>,
1945
1946    /// Allowed token types for gasless transactions, with minimum transfer sizes per token.
1947    #[skip_accessor]
1948    gasless_allowed_token_types: Option<Vec<(String, u64)>>,
1949
1950    /// Maximum number of unused Pure inputs allowed in a gasless transaction.
1951    /// Object and FundsWithdrawal inputs must always be used.
1952    /// When None, there is no limit (effectively unlimited).
1953    gasless_max_unused_inputs: Option<u64>,
1954
1955    /// Maximum size in bytes of each Pure input in a gasless transaction.
1956    /// When None, there is no limit (effectively unlimited).
1957    gasless_max_pure_input_bytes: Option<u64>,
1958
1959    /// Max tps for gasless transactions. Unlimited when unset, zero when set to zero.
1960    gasless_max_tps: Option<u64>,
1961
1962    #[serde(skip_serializing_if = "Option::is_none")]
1963    #[skip_accessor]
1964    include_special_package_amendments: Option<Arc<Amendments>>,
1965
1966    /// Maximum serialized size in bytes of a gasless transaction (SenderSignedData).
1967    /// Bounds the persistent storage impact of each admitted gasless transaction.
1968    gasless_max_tx_size_bytes: Option<u64>,
1969}
1970
1971/// An aliased address.
1972#[derive(Clone, Serialize, Deserialize, Debug)]
1973pub struct AliasedAddress {
1974    /// The original address.
1975    pub original: [u8; 32],
1976    /// An aliased address which is allowed to act as the original address.
1977    pub aliased: [u8; 32],
1978    /// A list of transaction digests for which the aliasing is allowed to be in effect.
1979    pub allowed_tx_digests: Vec<[u8; 32]>,
1980}
1981
1982// feature flags
1983impl ProtocolConfig {
1984    // Add checks for feature flag support here, e.g.:
1985    // pub fn check_new_protocol_feature_supported(&self) -> Result<(), Error> {
1986    //     if self.feature_flags.new_protocol_feature_supported {
1987    //         Ok(())
1988    //     } else {
1989    //         Err(Error(format!(
1990    //             "new_protocol_feature is not supported at {:?}",
1991    //             self.version
1992    //         )))
1993    //     }
1994    // }
1995
1996    pub fn check_package_upgrades_supported(&self) -> Result<(), Error> {
1997        if self.feature_flags.package_upgrades {
1998            Ok(())
1999        } else {
2000            Err(Error(format!(
2001                "package upgrades are not supported at {:?}",
2002                self.version
2003            )))
2004        }
2005    }
2006
2007    pub fn allow_receiving_object_id(&self) -> bool {
2008        self.feature_flags.allow_receiving_object_id
2009    }
2010
2011    pub fn receiving_objects_supported(&self) -> bool {
2012        self.feature_flags.receive_objects
2013    }
2014
2015    pub fn package_upgrades_supported(&self) -> bool {
2016        self.feature_flags.package_upgrades
2017    }
2018
2019    pub fn check_commit_root_state_digest_supported(&self) -> bool {
2020        self.feature_flags.commit_root_state_digest
2021    }
2022
2023    pub fn get_advance_epoch_start_time_in_safe_mode(&self) -> bool {
2024        self.feature_flags.advance_epoch_start_time_in_safe_mode
2025    }
2026
2027    pub fn loaded_child_objects_fixed(&self) -> bool {
2028        self.feature_flags.loaded_child_objects_fixed
2029    }
2030
2031    pub fn missing_type_is_compatibility_error(&self) -> bool {
2032        self.feature_flags.missing_type_is_compatibility_error
2033    }
2034
2035    pub fn scoring_decision_with_validity_cutoff(&self) -> bool {
2036        self.feature_flags.scoring_decision_with_validity_cutoff
2037    }
2038
2039    pub fn narwhal_versioned_metadata(&self) -> bool {
2040        self.feature_flags.narwhal_versioned_metadata
2041    }
2042
2043    pub fn consensus_order_end_of_epoch_last(&self) -> bool {
2044        self.feature_flags.consensus_order_end_of_epoch_last
2045    }
2046
2047    pub fn disallow_adding_abilities_on_upgrade(&self) -> bool {
2048        self.feature_flags.disallow_adding_abilities_on_upgrade
2049    }
2050
2051    pub fn disable_invariant_violation_check_in_swap_loc(&self) -> bool {
2052        self.feature_flags
2053            .disable_invariant_violation_check_in_swap_loc
2054    }
2055
2056    pub fn advance_to_highest_supported_protocol_version(&self) -> bool {
2057        self.feature_flags
2058            .advance_to_highest_supported_protocol_version
2059    }
2060
2061    pub fn ban_entry_init(&self) -> bool {
2062        self.feature_flags.ban_entry_init
2063    }
2064
2065    pub fn package_digest_hash_module(&self) -> bool {
2066        self.feature_flags.package_digest_hash_module
2067    }
2068
2069    pub fn disallow_change_struct_type_params_on_upgrade(&self) -> bool {
2070        self.feature_flags
2071            .disallow_change_struct_type_params_on_upgrade
2072    }
2073
2074    pub fn no_extraneous_module_bytes(&self) -> bool {
2075        self.feature_flags.no_extraneous_module_bytes
2076    }
2077
2078    pub fn zklogin_auth(&self) -> bool {
2079        self.feature_flags.zklogin_auth
2080    }
2081
2082    pub fn zklogin_supported_providers(&self) -> &BTreeSet<String> {
2083        &self.feature_flags.zklogin_supported_providers
2084    }
2085
2086    pub fn consensus_transaction_ordering(&self) -> ConsensusTransactionOrdering {
2087        self.feature_flags.consensus_transaction_ordering
2088    }
2089
2090    pub fn simplified_unwrap_then_delete(&self) -> bool {
2091        self.feature_flags.simplified_unwrap_then_delete
2092    }
2093
2094    pub fn supports_upgraded_multisig(&self) -> bool {
2095        self.feature_flags.upgraded_multisig_supported
2096    }
2097
2098    pub fn txn_base_cost_as_multiplier(&self) -> bool {
2099        self.feature_flags.txn_base_cost_as_multiplier
2100    }
2101
2102    pub fn shared_object_deletion(&self) -> bool {
2103        self.feature_flags.shared_object_deletion
2104    }
2105
2106    pub fn narwhal_new_leader_election_schedule(&self) -> bool {
2107        self.feature_flags.narwhal_new_leader_election_schedule
2108    }
2109
2110    pub fn loaded_child_object_format(&self) -> bool {
2111        self.feature_flags.loaded_child_object_format
2112    }
2113
2114    pub fn enable_jwk_consensus_updates(&self) -> bool {
2115        let ret = self.feature_flags.enable_jwk_consensus_updates;
2116        if ret {
2117            // jwk updates required end-of-epoch transactions
2118            assert!(self.feature_flags.end_of_epoch_transaction_supported);
2119        }
2120        ret
2121    }
2122
2123    pub fn simple_conservation_checks(&self) -> bool {
2124        self.feature_flags.simple_conservation_checks
2125    }
2126
2127    pub fn loaded_child_object_format_type(&self) -> bool {
2128        self.feature_flags.loaded_child_object_format_type
2129    }
2130
2131    pub fn end_of_epoch_transaction_supported(&self) -> bool {
2132        let ret = self.feature_flags.end_of_epoch_transaction_supported;
2133        if !ret {
2134            // jwk updates required end-of-epoch transactions
2135            assert!(!self.feature_flags.enable_jwk_consensus_updates);
2136        }
2137        ret
2138    }
2139
2140    pub fn recompute_has_public_transfer_in_execution(&self) -> bool {
2141        self.feature_flags
2142            .recompute_has_public_transfer_in_execution
2143    }
2144
2145    // this function only exists for readability in the genesis code.
2146    pub fn create_authenticator_state_in_genesis(&self) -> bool {
2147        self.enable_jwk_consensus_updates()
2148    }
2149
2150    pub fn random_beacon(&self) -> bool {
2151        self.feature_flags.random_beacon
2152    }
2153
2154    pub fn dkg_version(&self) -> u64 {
2155        // Version 0 was deprecated and removed, the default is 1 if not set.
2156        self.random_beacon_dkg_version.unwrap_or(1)
2157    }
2158
2159    pub fn enable_bridge(&self) -> bool {
2160        let ret = self.feature_flags.bridge;
2161        if ret {
2162            // bridge required end-of-epoch transactions
2163            assert!(self.feature_flags.end_of_epoch_transaction_supported);
2164        }
2165        ret
2166    }
2167
2168    pub fn should_try_to_finalize_bridge_committee(&self) -> bool {
2169        if !self.enable_bridge() {
2170            return false;
2171        }
2172        // In the older protocol version, always try to finalize the committee.
2173        self.bridge_should_try_to_finalize_committee.unwrap_or(true)
2174    }
2175
2176    pub fn enable_effects_v2(&self) -> bool {
2177        self.feature_flags.enable_effects_v2
2178    }
2179
2180    pub fn narwhal_certificate_v2(&self) -> bool {
2181        self.feature_flags.narwhal_certificate_v2
2182    }
2183
2184    pub fn verify_legacy_zklogin_address(&self) -> bool {
2185        self.feature_flags.verify_legacy_zklogin_address
2186    }
2187
2188    pub fn accept_zklogin_in_multisig(&self) -> bool {
2189        self.feature_flags.accept_zklogin_in_multisig
2190    }
2191
2192    pub fn accept_passkey_in_multisig(&self) -> bool {
2193        self.feature_flags.accept_passkey_in_multisig
2194    }
2195
2196    pub fn validate_zklogin_public_identifier(&self) -> bool {
2197        self.feature_flags.validate_zklogin_public_identifier
2198    }
2199
2200    pub fn zklogin_max_epoch_upper_bound_delta(&self) -> Option<u64> {
2201        self.feature_flags.zklogin_max_epoch_upper_bound_delta
2202    }
2203
2204    pub fn throughput_aware_consensus_submission(&self) -> bool {
2205        self.feature_flags.throughput_aware_consensus_submission
2206    }
2207
2208    pub fn include_consensus_digest_in_prologue(&self) -> bool {
2209        self.feature_flags.include_consensus_digest_in_prologue
2210    }
2211
2212    pub fn record_consensus_determined_version_assignments_in_prologue(&self) -> bool {
2213        self.feature_flags
2214            .record_consensus_determined_version_assignments_in_prologue
2215    }
2216
2217    pub fn record_additional_state_digest_in_prologue(&self) -> bool {
2218        self.feature_flags
2219            .record_additional_state_digest_in_prologue
2220    }
2221
2222    pub fn record_consensus_determined_version_assignments_in_prologue_v2(&self) -> bool {
2223        self.feature_flags
2224            .record_consensus_determined_version_assignments_in_prologue_v2
2225    }
2226
2227    pub fn prepend_prologue_tx_in_consensus_commit_in_checkpoints(&self) -> bool {
2228        self.feature_flags
2229            .prepend_prologue_tx_in_consensus_commit_in_checkpoints
2230    }
2231
2232    pub fn hardened_otw_check(&self) -> bool {
2233        self.feature_flags.hardened_otw_check
2234    }
2235
2236    pub fn enable_poseidon(&self) -> bool {
2237        self.feature_flags.enable_poseidon
2238    }
2239
2240    pub fn enable_coin_deny_list_v1(&self) -> bool {
2241        self.feature_flags.enable_coin_deny_list
2242    }
2243
2244    pub fn enable_accumulators(&self) -> bool {
2245        self.feature_flags.enable_accumulators
2246    }
2247
2248    pub fn enable_coin_reservation_obj_refs(&self) -> bool {
2249        self.new_vm_enabled() && self.feature_flags.enable_coin_reservation_obj_refs
2250    }
2251
2252    pub fn create_root_accumulator_object(&self) -> bool {
2253        self.feature_flags.create_root_accumulator_object
2254    }
2255
2256    pub fn enable_address_balance_gas_payments(&self) -> bool {
2257        self.feature_flags.enable_address_balance_gas_payments
2258    }
2259
2260    pub fn address_balance_gas_check_rgp_at_signing(&self) -> bool {
2261        self.feature_flags.address_balance_gas_check_rgp_at_signing
2262    }
2263
2264    pub fn address_balance_gas_reject_gas_coin_arg(&self) -> bool {
2265        self.feature_flags.address_balance_gas_reject_gas_coin_arg
2266    }
2267
2268    pub fn enable_multi_epoch_transaction_expiration(&self) -> bool {
2269        self.feature_flags.enable_multi_epoch_transaction_expiration
2270    }
2271
2272    pub fn relax_valid_during_for_owned_inputs(&self) -> bool {
2273        self.feature_flags.relax_valid_during_for_owned_inputs
2274    }
2275
2276    pub fn enable_authenticated_event_streams(&self) -> bool {
2277        self.feature_flags.enable_authenticated_event_streams && self.enable_accumulators()
2278    }
2279
2280    pub fn enable_non_exclusive_writes(&self) -> bool {
2281        self.feature_flags.enable_non_exclusive_writes
2282    }
2283
2284    pub fn enable_coin_registry(&self) -> bool {
2285        self.feature_flags.enable_coin_registry
2286    }
2287
2288    pub fn enable_display_registry(&self) -> bool {
2289        self.feature_flags.enable_display_registry
2290    }
2291
2292    pub fn enable_coin_deny_list_v2(&self) -> bool {
2293        self.feature_flags.enable_coin_deny_list_v2
2294    }
2295
2296    pub fn enable_group_ops_native_functions(&self) -> bool {
2297        self.feature_flags.enable_group_ops_native_functions
2298    }
2299
2300    pub fn enable_group_ops_native_function_msm(&self) -> bool {
2301        self.feature_flags.enable_group_ops_native_function_msm
2302    }
2303
2304    pub fn enable_ristretto255_group_ops(&self) -> bool {
2305        self.feature_flags.enable_ristretto255_group_ops
2306    }
2307
2308    pub fn enable_verify_bulletproofs_ristretto255(&self) -> bool {
2309        self.feature_flags.enable_verify_bulletproofs_ristretto255
2310    }
2311
2312    pub fn reject_mutable_random_on_entry_functions(&self) -> bool {
2313        self.feature_flags.reject_mutable_random_on_entry_functions
2314    }
2315
2316    pub fn per_object_congestion_control_mode(&self) -> PerObjectCongestionControlMode {
2317        self.feature_flags.per_object_congestion_control_mode
2318    }
2319
2320    pub fn consensus_choice(&self) -> ConsensusChoice {
2321        self.feature_flags.consensus_choice
2322    }
2323
2324    pub fn consensus_network(&self) -> ConsensusNetwork {
2325        self.feature_flags.consensus_network
2326    }
2327
2328    pub fn correct_gas_payment_limit_check(&self) -> bool {
2329        self.feature_flags.correct_gas_payment_limit_check
2330    }
2331
2332    pub fn reshare_at_same_initial_version(&self) -> bool {
2333        self.feature_flags.reshare_at_same_initial_version
2334    }
2335
2336    pub fn resolve_abort_locations_to_package_id(&self) -> bool {
2337        self.feature_flags.resolve_abort_locations_to_package_id
2338    }
2339
2340    pub fn mysticeti_use_committed_subdag_digest(&self) -> bool {
2341        self.feature_flags.mysticeti_use_committed_subdag_digest
2342    }
2343
2344    pub fn enable_vdf(&self) -> bool {
2345        self.feature_flags.enable_vdf
2346    }
2347
2348    pub fn fresh_vm_on_framework_upgrade(&self) -> bool {
2349        self.feature_flags.fresh_vm_on_framework_upgrade
2350    }
2351
2352    pub fn mysticeti_num_leaders_per_round(&self) -> Option<usize> {
2353        self.feature_flags.mysticeti_num_leaders_per_round
2354    }
2355
2356    pub fn soft_bundle(&self) -> bool {
2357        self.feature_flags.soft_bundle
2358    }
2359
2360    pub fn passkey_auth(&self) -> bool {
2361        self.feature_flags.passkey_auth
2362    }
2363
2364    pub fn authority_capabilities_v2(&self) -> bool {
2365        self.feature_flags.authority_capabilities_v2
2366    }
2367
2368    pub fn max_transaction_size_bytes(&self) -> u64 {
2369        // Provide a default value if protocol config version is too low.
2370        self.consensus_max_transaction_size_bytes
2371            .unwrap_or(256 * 1024)
2372    }
2373
2374    pub fn max_transactions_in_block_bytes(&self) -> u64 {
2375        if cfg!(msim) {
2376            256 * 1024
2377        } else {
2378            self.consensus_max_transactions_in_block_bytes
2379                .unwrap_or(512 * 1024)
2380        }
2381    }
2382
2383    pub fn max_num_transactions_in_block(&self) -> u64 {
2384        if cfg!(msim) {
2385            8
2386        } else {
2387            self.consensus_max_num_transactions_in_block.unwrap_or(512)
2388        }
2389    }
2390
2391    pub fn rethrow_serialization_type_layout_errors(&self) -> bool {
2392        self.feature_flags.rethrow_serialization_type_layout_errors
2393    }
2394
2395    pub fn consensus_distributed_vote_scoring_strategy(&self) -> bool {
2396        self.feature_flags
2397            .consensus_distributed_vote_scoring_strategy
2398    }
2399
2400    pub fn consensus_round_prober(&self) -> bool {
2401        self.feature_flags.consensus_round_prober
2402    }
2403
2404    pub fn validate_identifier_inputs(&self) -> bool {
2405        self.feature_flags.validate_identifier_inputs
2406    }
2407
2408    pub fn gc_depth(&self) -> u32 {
2409        self.consensus_gc_depth.unwrap_or(0)
2410    }
2411
2412    pub fn mysticeti_fastpath(&self) -> bool {
2413        self.feature_flags.mysticeti_fastpath
2414    }
2415
2416    pub fn relocate_event_module(&self) -> bool {
2417        self.feature_flags.relocate_event_module
2418    }
2419
2420    pub fn uncompressed_g1_group_elements(&self) -> bool {
2421        self.feature_flags.uncompressed_g1_group_elements
2422    }
2423
2424    pub fn disallow_new_modules_in_deps_only_packages(&self) -> bool {
2425        self.feature_flags
2426            .disallow_new_modules_in_deps_only_packages
2427    }
2428
2429    pub fn consensus_smart_ancestor_selection(&self) -> bool {
2430        self.feature_flags.consensus_smart_ancestor_selection
2431    }
2432
2433    pub fn disable_preconsensus_locking(&self) -> bool {
2434        self.feature_flags.disable_preconsensus_locking
2435    }
2436
2437    pub fn consensus_round_prober_probe_accepted_rounds(&self) -> bool {
2438        self.feature_flags
2439            .consensus_round_prober_probe_accepted_rounds
2440    }
2441
2442    pub fn native_charging_v2(&self) -> bool {
2443        self.feature_flags.native_charging_v2
2444    }
2445
2446    pub fn consensus_linearize_subdag_v2(&self) -> bool {
2447        let res = self.feature_flags.consensus_linearize_subdag_v2;
2448        assert!(
2449            !res || self.gc_depth() > 0,
2450            "The consensus linearize sub dag V2 requires GC to be enabled"
2451        );
2452        res
2453    }
2454
2455    pub fn consensus_median_based_commit_timestamp(&self) -> bool {
2456        let res = self.feature_flags.consensus_median_based_commit_timestamp;
2457        assert!(
2458            !res || self.gc_depth() > 0,
2459            "The consensus median based commit timestamp requires GC to be enabled"
2460        );
2461        res
2462    }
2463
2464    pub fn consensus_batched_block_sync(&self) -> bool {
2465        self.feature_flags.consensus_batched_block_sync
2466    }
2467
2468    pub fn convert_type_argument_error(&self) -> bool {
2469        self.feature_flags.convert_type_argument_error
2470    }
2471
2472    pub fn variant_nodes(&self) -> bool {
2473        self.feature_flags.variant_nodes
2474    }
2475
2476    pub fn consensus_zstd_compression(&self) -> bool {
2477        self.feature_flags.consensus_zstd_compression
2478    }
2479
2480    pub fn enable_nitro_attestation(&self) -> bool {
2481        self.feature_flags.enable_nitro_attestation
2482    }
2483
2484    pub fn enable_nitro_attestation_upgraded_parsing(&self) -> bool {
2485        self.feature_flags.enable_nitro_attestation_upgraded_parsing
2486    }
2487
2488    pub fn enable_nitro_attestation_all_nonzero_pcrs_parsing(&self) -> bool {
2489        self.feature_flags
2490            .enable_nitro_attestation_all_nonzero_pcrs_parsing
2491    }
2492
2493    pub fn enable_nitro_attestation_always_include_required_pcrs_parsing(&self) -> bool {
2494        self.feature_flags
2495            .enable_nitro_attestation_always_include_required_pcrs_parsing
2496    }
2497
2498    pub fn get_consensus_commit_rate_estimation_window_size(&self) -> u32 {
2499        self.consensus_commit_rate_estimation_window_size
2500            .unwrap_or(0)
2501    }
2502
2503    pub fn consensus_num_requested_prior_commits_at_startup(&self) -> u32 {
2504        // Currently there is only one parameter driving this value. If there are multiple
2505        // things computed from prior consensus commits, this function must return the max
2506        // of all of them.
2507        let window_size = self.get_consensus_commit_rate_estimation_window_size();
2508        // Ensure we are not using past commits without recording a state digest in the prologue.
2509        assert!(window_size == 0 || self.record_additional_state_digest_in_prologue());
2510        window_size
2511    }
2512
2513    pub fn minimize_child_object_mutations(&self) -> bool {
2514        self.feature_flags.minimize_child_object_mutations
2515    }
2516
2517    pub fn move_native_context(&self) -> bool {
2518        self.feature_flags.move_native_context
2519    }
2520
2521    pub fn normalize_ptb_arguments(&self) -> bool {
2522        self.feature_flags.normalize_ptb_arguments
2523    }
2524
2525    pub fn enforce_checkpoint_timestamp_monotonicity(&self) -> bool {
2526        self.feature_flags.enforce_checkpoint_timestamp_monotonicity
2527    }
2528
2529    pub fn max_ptb_value_size_v2(&self) -> bool {
2530        self.feature_flags.max_ptb_value_size_v2
2531    }
2532
2533    pub fn resolve_type_input_ids_to_defining_id(&self) -> bool {
2534        self.feature_flags.resolve_type_input_ids_to_defining_id
2535    }
2536
2537    pub fn enable_party_transfer(&self) -> bool {
2538        self.feature_flags.enable_party_transfer
2539    }
2540
2541    pub fn allow_unbounded_system_objects(&self) -> bool {
2542        self.feature_flags.allow_unbounded_system_objects
2543    }
2544
2545    pub fn type_tags_in_object_runtime(&self) -> bool {
2546        self.feature_flags.type_tags_in_object_runtime
2547    }
2548
2549    pub fn enable_ptb_execution_v2(&self) -> bool {
2550        self.feature_flags.enable_ptb_execution_v2
2551    }
2552
2553    pub fn better_adapter_type_resolution_errors(&self) -> bool {
2554        self.feature_flags.better_adapter_type_resolution_errors
2555    }
2556
2557    pub fn record_time_estimate_processed(&self) -> bool {
2558        self.feature_flags.record_time_estimate_processed
2559    }
2560
2561    pub fn ignore_execution_time_observations_after_certs_closed(&self) -> bool {
2562        self.feature_flags
2563            .ignore_execution_time_observations_after_certs_closed
2564    }
2565
2566    pub fn dependency_linkage_error(&self) -> bool {
2567        self.feature_flags.dependency_linkage_error
2568    }
2569
2570    pub fn additional_multisig_checks(&self) -> bool {
2571        self.feature_flags.additional_multisig_checks
2572    }
2573
2574    pub fn debug_fatal_on_move_invariant_violation(&self) -> bool {
2575        self.feature_flags.debug_fatal_on_move_invariant_violation
2576    }
2577
2578    pub fn allow_private_accumulator_entrypoints(&self) -> bool {
2579        self.feature_flags.allow_private_accumulator_entrypoints
2580    }
2581
2582    pub fn additional_consensus_digest_indirect_state(&self) -> bool {
2583        self.feature_flags
2584            .additional_consensus_digest_indirect_state
2585    }
2586
2587    pub fn check_for_init_during_upgrade(&self) -> bool {
2588        self.feature_flags.check_for_init_during_upgrade
2589    }
2590
2591    pub fn per_command_shared_object_transfer_rules(&self) -> bool {
2592        self.feature_flags.per_command_shared_object_transfer_rules
2593    }
2594
2595    pub fn consensus_checkpoint_signature_key_includes_digest(&self) -> bool {
2596        self.feature_flags
2597            .consensus_checkpoint_signature_key_includes_digest
2598    }
2599
2600    pub fn include_checkpoint_artifacts_digest_in_summary(&self) -> bool {
2601        self.feature_flags
2602            .include_checkpoint_artifacts_digest_in_summary
2603    }
2604
2605    pub fn use_mfp_txns_in_load_initial_object_debts(&self) -> bool {
2606        self.feature_flags.use_mfp_txns_in_load_initial_object_debts
2607    }
2608
2609    pub fn cancel_for_failed_dkg_early(&self) -> bool {
2610        self.feature_flags.cancel_for_failed_dkg_early
2611    }
2612
2613    pub fn abstract_size_in_object_runtime(&self) -> bool {
2614        self.feature_flags.abstract_size_in_object_runtime
2615    }
2616
2617    pub fn object_runtime_charge_cache_load_gas(&self) -> bool {
2618        self.feature_flags.object_runtime_charge_cache_load_gas
2619    }
2620
2621    pub fn additional_borrow_checks(&self) -> bool {
2622        self.feature_flags.additional_borrow_checks
2623    }
2624
2625    pub fn use_new_commit_handler(&self) -> bool {
2626        self.feature_flags.use_new_commit_handler
2627    }
2628
2629    pub fn better_loader_errors(&self) -> bool {
2630        self.feature_flags.better_loader_errors
2631    }
2632
2633    pub fn generate_df_type_layouts(&self) -> bool {
2634        self.feature_flags.generate_df_type_layouts
2635    }
2636
2637    pub fn allow_references_in_ptbs(&self) -> bool {
2638        self.feature_flags.allow_references_in_ptbs
2639    }
2640
2641    pub fn private_generics_verifier_v2(&self) -> bool {
2642        self.feature_flags.private_generics_verifier_v2
2643    }
2644
2645    pub fn deprecate_global_storage_ops_during_deserialization(&self) -> bool {
2646        self.feature_flags
2647            .deprecate_global_storage_ops_during_deserialization
2648    }
2649
2650    pub fn enable_observation_chunking(&self) -> bool {
2651        matches!(self.feature_flags.per_object_congestion_control_mode,
2652            PerObjectCongestionControlMode::ExecutionTimeEstimate(ref params)
2653                if params.observations_chunk_size.is_some()
2654        )
2655    }
2656
2657    pub fn deprecate_global_storage_ops(&self) -> bool {
2658        self.feature_flags.deprecate_global_storage_ops
2659    }
2660
2661    pub fn normalize_depth_formula(&self) -> bool {
2662        self.feature_flags.normalize_depth_formula
2663    }
2664
2665    pub fn consensus_skip_gced_accept_votes(&self) -> bool {
2666        self.feature_flags.consensus_skip_gced_accept_votes
2667    }
2668
2669    pub fn include_cancelled_randomness_txns_in_prologue(&self) -> bool {
2670        self.feature_flags
2671            .include_cancelled_randomness_txns_in_prologue
2672    }
2673
2674    pub fn address_aliases(&self) -> bool {
2675        let address_aliases = self.feature_flags.address_aliases;
2676        assert!(
2677            !address_aliases || self.mysticeti_fastpath(),
2678            "Address aliases requires Mysticeti fastpath to be enabled"
2679        );
2680        if address_aliases {
2681            assert!(
2682                self.feature_flags.disable_preconsensus_locking,
2683                "Address aliases requires CertifiedTransaction to be disabled"
2684            );
2685        }
2686        address_aliases
2687    }
2688
2689    pub fn fix_checkpoint_signature_mapping(&self) -> bool {
2690        self.feature_flags.fix_checkpoint_signature_mapping
2691    }
2692
2693    pub fn enable_object_funds_withdraw(&self) -> bool {
2694        self.feature_flags.enable_object_funds_withdraw
2695    }
2696
2697    pub fn gas_rounding_halve_digits(&self) -> bool {
2698        self.feature_flags.gas_rounding_halve_digits
2699    }
2700
2701    pub fn flexible_tx_context_positions(&self) -> bool {
2702        self.feature_flags.flexible_tx_context_positions
2703    }
2704
2705    pub fn disable_entry_point_signature_check(&self) -> bool {
2706        self.feature_flags.disable_entry_point_signature_check
2707    }
2708
2709    pub fn consensus_skip_gced_blocks_in_direct_finalization(&self) -> bool {
2710        self.feature_flags
2711            .consensus_skip_gced_blocks_in_direct_finalization
2712    }
2713
2714    pub fn convert_withdrawal_compatibility_ptb_arguments(&self) -> bool {
2715        self.feature_flags
2716            .convert_withdrawal_compatibility_ptb_arguments
2717    }
2718
2719    pub fn restrict_hot_or_not_entry_functions(&self) -> bool {
2720        self.feature_flags.restrict_hot_or_not_entry_functions
2721    }
2722
2723    pub fn split_checkpoints_in_consensus_handler(&self) -> bool {
2724        self.feature_flags.split_checkpoints_in_consensus_handler
2725    }
2726
2727    pub fn consensus_always_accept_system_transactions(&self) -> bool {
2728        self.feature_flags
2729            .consensus_always_accept_system_transactions
2730    }
2731
2732    pub fn validator_metadata_verify_v2(&self) -> bool {
2733        self.feature_flags.validator_metadata_verify_v2
2734    }
2735
2736    pub fn defer_unpaid_amplification(&self) -> bool {
2737        self.feature_flags.defer_unpaid_amplification
2738    }
2739
2740    pub fn gasless_transaction_drop_safety(&self) -> bool {
2741        self.feature_flags.gasless_transaction_drop_safety
2742    }
2743
2744    pub fn new_vm_enabled(&self) -> bool {
2745        self.execution_version.is_some_and(|v| v >= 4)
2746    }
2747
2748    pub fn merge_randomness_into_checkpoint(&self) -> bool {
2749        self.feature_flags.merge_randomness_into_checkpoint
2750    }
2751
2752    pub fn use_coin_party_owner(&self) -> bool {
2753        self.feature_flags.use_coin_party_owner
2754    }
2755
2756    pub fn enable_gasless(&self) -> bool {
2757        self.feature_flags.enable_gasless
2758    }
2759
2760    pub fn gasless_verify_remaining_balance(&self) -> bool {
2761        self.feature_flags.gasless_verify_remaining_balance
2762    }
2763
2764    pub fn gasless_allowed_token_types(&self) -> &[(String, u64)] {
2765        debug_assert!(self.gasless_allowed_token_types.is_some());
2766        self.gasless_allowed_token_types.as_deref().unwrap_or(&[])
2767    }
2768
2769    pub fn get_gasless_max_unused_inputs(&self) -> u64 {
2770        self.gasless_max_unused_inputs.unwrap_or(u64::MAX)
2771    }
2772
2773    pub fn get_gasless_max_pure_input_bytes(&self) -> u64 {
2774        self.gasless_max_pure_input_bytes.unwrap_or(u64::MAX)
2775    }
2776
2777    pub fn get_gasless_max_tx_size_bytes(&self) -> u64 {
2778        self.gasless_max_tx_size_bytes.unwrap_or(u64::MAX)
2779    }
2780
2781    pub fn disallow_jump_orphans(&self) -> bool {
2782        self.feature_flags.disallow_jump_orphans
2783    }
2784
2785    pub fn early_return_receive_object_mismatched_type(&self) -> bool {
2786        self.feature_flags
2787            .early_return_receive_object_mismatched_type
2788    }
2789
2790    pub fn include_special_package_amendments_as_option(&self) -> &Option<Arc<Amendments>> {
2791        &self.include_special_package_amendments
2792    }
2793}
2794
2795#[cfg(not(msim))]
2796static POISON_VERSION_METHODS: AtomicBool = AtomicBool::new(false);
2797
2798// Use a thread local in sim tests for test isolation.
2799#[cfg(msim)]
2800thread_local! {
2801    static POISON_VERSION_METHODS: AtomicBool = AtomicBool::new(false);
2802}
2803
2804// Instantiations for each protocol version.
2805impl ProtocolConfig {
2806    /// Get the value ProtocolConfig that are in effect during the given protocol version.
2807    pub fn get_for_version(version: ProtocolVersion, chain: Chain) -> Self {
2808        // ProtocolVersion can be deserialized so we need to check it here as well.
2809        assert!(
2810            version >= ProtocolVersion::MIN,
2811            "Network protocol version is {:?}, but the minimum supported version by the binary is {:?}. Please upgrade the binary.",
2812            version,
2813            ProtocolVersion::MIN.0,
2814        );
2815        assert!(
2816            version <= ProtocolVersion::MAX_ALLOWED,
2817            "Network protocol version is {:?}, but the maximum supported version by the binary is {:?}. Please upgrade the binary.",
2818            version,
2819            ProtocolVersion::MAX_ALLOWED.0,
2820        );
2821
2822        let mut ret = Self::get_for_version_impl(version, chain);
2823        ret.version = version;
2824
2825        ret = Self::apply_config_override(version, ret);
2826
2827        if std::env::var("SUI_PROTOCOL_CONFIG_OVERRIDE_ENABLE").is_ok() {
2828            warn!(
2829                "overriding ProtocolConfig settings with custom settings; this may break non-local networks"
2830            );
2831            let overrides: ProtocolConfigOptional =
2832                serde_env::from_env_with_prefix("SUI_PROTOCOL_CONFIG_OVERRIDE")
2833                    .expect("failed to parse ProtocolConfig override env variables");
2834            overrides.apply_to(&mut ret);
2835        }
2836
2837        ret
2838    }
2839
2840    /// Get the value ProtocolConfig that are in effect during the given protocol version.
2841    /// Or none if the version is not supported.
2842    pub fn get_for_version_if_supported(version: ProtocolVersion, chain: Chain) -> Option<Self> {
2843        if version.0 >= ProtocolVersion::MIN.0 && version.0 <= ProtocolVersion::MAX_ALLOWED.0 {
2844            let mut ret = Self::get_for_version_impl(version, chain);
2845            ret.version = version;
2846            ret = Self::apply_config_override(version, ret);
2847            Some(ret)
2848        } else {
2849            None
2850        }
2851    }
2852
2853    #[cfg(not(msim))]
2854    pub fn poison_get_for_min_version() {
2855        POISON_VERSION_METHODS.store(true, Ordering::Relaxed);
2856    }
2857
2858    #[cfg(not(msim))]
2859    fn load_poison_get_for_min_version() -> bool {
2860        POISON_VERSION_METHODS.load(Ordering::Relaxed)
2861    }
2862
2863    #[cfg(msim)]
2864    pub fn poison_get_for_min_version() {
2865        POISON_VERSION_METHODS.with(|p| p.store(true, Ordering::Relaxed));
2866    }
2867
2868    #[cfg(msim)]
2869    fn load_poison_get_for_min_version() -> bool {
2870        POISON_VERSION_METHODS.with(|p| p.load(Ordering::Relaxed))
2871    }
2872
2873    /// Convenience to get the constants at the current minimum supported version.
2874    /// Mainly used by client code that may not yet be protocol-version aware.
2875    pub fn get_for_min_version() -> Self {
2876        if Self::load_poison_get_for_min_version() {
2877            panic!("get_for_min_version called on validator");
2878        }
2879        ProtocolConfig::get_for_version(ProtocolVersion::MIN, Chain::Unknown)
2880    }
2881
2882    /// CAREFUL! - You probably want to use `get_for_version` instead.
2883    ///
2884    /// Convenience to get the constants at the current maximum supported version.
2885    /// Mainly used by genesis. Note well that this function uses the max version
2886    /// supported locally by the node, which is not necessarily the current version
2887    /// of the network. ALSO, this function disregards chain specific config (by
2888    /// using Chain::Unknown), thereby potentially returning a protocol config that
2889    /// is incorrect for some feature flags. Definitely safe for testing and for
2890    /// protocol version 11 and prior.
2891    #[allow(non_snake_case)]
2892    pub fn get_for_max_version_UNSAFE() -> Self {
2893        if Self::load_poison_get_for_min_version() {
2894            panic!("get_for_max_version_UNSAFE called on validator");
2895        }
2896        ProtocolConfig::get_for_version(ProtocolVersion::MAX, Chain::Unknown)
2897    }
2898
2899    fn get_for_version_impl(version: ProtocolVersion, chain: Chain) -> Self {
2900        #[cfg(msim)]
2901        {
2902            // populate the fake simulator version # with a different base tx cost.
2903            if version == ProtocolVersion::MAX_ALLOWED {
2904                let mut config = Self::get_for_version_impl(version - 1, Chain::Unknown);
2905                config.base_tx_cost_fixed = Some(config.base_tx_cost_fixed() + 1000);
2906                return config;
2907            }
2908        }
2909
2910        // IMPORTANT: Never modify the value of any constant for a pre-existing protocol version.
2911        // To change the values here you must create a new protocol version with the new values!
2912        let mut cfg = Self {
2913            // will be overwritten before being returned
2914            version,
2915
2916            // All flags are disabled in V1
2917            feature_flags: Default::default(),
2918
2919            max_tx_size_bytes: Some(128 * 1024),
2920            // We need this number to be at least 100x less than `max_serialized_tx_effects_size_bytes`otherwise effects can be huge
2921            max_input_objects: Some(2048),
2922            max_serialized_tx_effects_size_bytes: Some(512 * 1024),
2923            max_serialized_tx_effects_size_bytes_system_tx: Some(512 * 1024 * 16),
2924            max_gas_payment_objects: Some(256),
2925            max_modules_in_publish: Some(128),
2926            max_package_dependencies: None,
2927            max_arguments: Some(512),
2928            max_type_arguments: Some(16),
2929            max_type_argument_depth: Some(16),
2930            max_pure_argument_size: Some(16 * 1024),
2931            max_programmable_tx_commands: Some(1024),
2932            move_binary_format_version: Some(6),
2933            min_move_binary_format_version: None,
2934            binary_module_handles: None,
2935            binary_struct_handles: None,
2936            binary_function_handles: None,
2937            binary_function_instantiations: None,
2938            binary_signatures: None,
2939            binary_constant_pool: None,
2940            binary_identifiers: None,
2941            binary_address_identifiers: None,
2942            binary_struct_defs: None,
2943            binary_struct_def_instantiations: None,
2944            binary_function_defs: None,
2945            binary_field_handles: None,
2946            binary_field_instantiations: None,
2947            binary_friend_decls: None,
2948            binary_enum_defs: None,
2949            binary_enum_def_instantiations: None,
2950            binary_variant_handles: None,
2951            binary_variant_instantiation_handles: None,
2952            max_move_object_size: Some(250 * 1024),
2953            max_move_package_size: Some(100 * 1024),
2954            max_publish_or_upgrade_per_ptb: None,
2955            max_tx_gas: Some(10_000_000_000),
2956            max_gas_price: Some(100_000),
2957            max_gas_price_rgp_factor_for_aborted_transactions: None,
2958            max_gas_computation_bucket: Some(5_000_000),
2959            max_loop_depth: Some(5),
2960            max_generic_instantiation_length: Some(32),
2961            max_function_parameters: Some(128),
2962            max_basic_blocks: Some(1024),
2963            max_value_stack_size: Some(1024),
2964            max_type_nodes: Some(256),
2965            max_push_size: Some(10000),
2966            max_struct_definitions: Some(200),
2967            max_function_definitions: Some(1000),
2968            max_fields_in_struct: Some(32),
2969            max_dependency_depth: Some(100),
2970            max_num_event_emit: Some(256),
2971            max_num_new_move_object_ids: Some(2048),
2972            max_num_new_move_object_ids_system_tx: Some(2048 * 16),
2973            max_num_deleted_move_object_ids: Some(2048),
2974            max_num_deleted_move_object_ids_system_tx: Some(2048 * 16),
2975            max_num_transferred_move_object_ids: Some(2048),
2976            max_num_transferred_move_object_ids_system_tx: Some(2048 * 16),
2977            max_event_emit_size: Some(250 * 1024),
2978            max_move_vector_len: Some(256 * 1024),
2979            max_type_to_layout_nodes: None,
2980            max_ptb_value_size: None,
2981
2982            max_back_edges_per_function: Some(10_000),
2983            max_back_edges_per_module: Some(10_000),
2984            max_verifier_meter_ticks_per_function: Some(6_000_000),
2985            max_meter_ticks_per_module: Some(6_000_000),
2986            max_meter_ticks_per_package: None,
2987
2988            object_runtime_max_num_cached_objects: Some(1000),
2989            object_runtime_max_num_cached_objects_system_tx: Some(1000 * 16),
2990            object_runtime_max_num_store_entries: Some(1000),
2991            object_runtime_max_num_store_entries_system_tx: Some(1000 * 16),
2992            base_tx_cost_fixed: Some(110_000),
2993            package_publish_cost_fixed: Some(1_000),
2994            base_tx_cost_per_byte: Some(0),
2995            package_publish_cost_per_byte: Some(80),
2996            obj_access_cost_read_per_byte: Some(15),
2997            obj_access_cost_mutate_per_byte: Some(40),
2998            obj_access_cost_delete_per_byte: Some(40),
2999            obj_access_cost_verify_per_byte: Some(200),
3000            obj_data_cost_refundable: Some(100),
3001            obj_metadata_cost_non_refundable: Some(50),
3002            gas_model_version: Some(1),
3003            storage_rebate_rate: Some(9900),
3004            storage_fund_reinvest_rate: Some(500),
3005            reward_slashing_rate: Some(5000),
3006            storage_gas_price: Some(1),
3007            accumulator_object_storage_cost: None,
3008            max_transactions_per_checkpoint: Some(10_000),
3009            max_checkpoint_size_bytes: Some(30 * 1024 * 1024),
3010
3011            // For now, perform upgrades with a bare quorum of validators.
3012            // MUSTFIX: This number should be increased to at least 2000 (20%) for mainnet.
3013            buffer_stake_for_protocol_upgrade_bps: Some(0),
3014
3015            // === Native Function Costs ===
3016            // `address` module
3017            // Cost params for the Move native function `address::from_bytes(bytes: vector<u8>)`
3018            address_from_bytes_cost_base: Some(52),
3019            // Cost params for the Move native function `address::to_u256(address): u256`
3020            address_to_u256_cost_base: Some(52),
3021            // Cost params for the Move native function `address::from_u256(u256): address`
3022            address_from_u256_cost_base: Some(52),
3023
3024            // `config` module
3025            // Cost params for the Move native function `read_setting_impl``
3026            config_read_setting_impl_cost_base: None,
3027            config_read_setting_impl_cost_per_byte: None,
3028
3029            // `dynamic_field` module
3030            // Cost params for the Move native function `hash_type_and_key<K: copy + drop + store>(parent: address, k: K): address`
3031            dynamic_field_hash_type_and_key_cost_base: Some(100),
3032            dynamic_field_hash_type_and_key_type_cost_per_byte: Some(2),
3033            dynamic_field_hash_type_and_key_value_cost_per_byte: Some(2),
3034            dynamic_field_hash_type_and_key_type_tag_cost_per_byte: Some(2),
3035            // Cost params for the Move native function `add_child_object<Child: key>(parent: address, child: Child)`
3036            dynamic_field_add_child_object_cost_base: Some(100),
3037            dynamic_field_add_child_object_type_cost_per_byte: Some(10),
3038            dynamic_field_add_child_object_value_cost_per_byte: Some(10),
3039            dynamic_field_add_child_object_struct_tag_cost_per_byte: Some(10),
3040            // Cost params for the Move native function `borrow_child_object_mut<Child: key>(parent: &mut UID, id: address): &mut Child`
3041            dynamic_field_borrow_child_object_cost_base: Some(100),
3042            dynamic_field_borrow_child_object_child_ref_cost_per_byte: Some(10),
3043            dynamic_field_borrow_child_object_type_cost_per_byte: Some(10),
3044            // Cost params for the Move native function `remove_child_object<Child: key>(parent: address, id: address): Child`
3045            dynamic_field_remove_child_object_cost_base: Some(100),
3046            dynamic_field_remove_child_object_child_cost_per_byte: Some(2),
3047            dynamic_field_remove_child_object_type_cost_per_byte: Some(2),
3048            // Cost params for the Move native function `has_child_object(parent: address, id: address): bool`
3049            dynamic_field_has_child_object_cost_base: Some(100),
3050            // Cost params for the Move native function `has_child_object_with_ty<Child: key>(parent: address, id: address): bool`
3051            dynamic_field_has_child_object_with_ty_cost_base: Some(100),
3052            dynamic_field_has_child_object_with_ty_type_cost_per_byte: Some(2),
3053            dynamic_field_has_child_object_with_ty_type_tag_cost_per_byte: Some(2),
3054
3055            // `event` module
3056            // Cost params for the Move native function `event::emit<T: copy + drop>(event: T)`
3057            event_emit_cost_base: Some(52),
3058            event_emit_value_size_derivation_cost_per_byte: Some(2),
3059            event_emit_tag_size_derivation_cost_per_byte: Some(5),
3060            event_emit_output_cost_per_byte: Some(10),
3061            event_emit_auth_stream_cost: None,
3062
3063            //  `object` module
3064            // Cost params for the Move native function `borrow_uid<T: key>(obj: &T): &UID`
3065            object_borrow_uid_cost_base: Some(52),
3066            // Cost params for the Move native function `delete_impl(id: address)`
3067            object_delete_impl_cost_base: Some(52),
3068            // Cost params for the Move native function `record_new_uid(id: address)`
3069            object_record_new_uid_cost_base: Some(52),
3070
3071            // `transfer` module
3072            // Cost params for the Move native function `transfer_impl<T: key>(obj: T, recipient: address)`
3073            transfer_transfer_internal_cost_base: Some(52),
3074            // Cost params for the Move native function `party_transfer_impl<T: key>(obj: T, party_members: vector<address>)`
3075            transfer_party_transfer_internal_cost_base: None,
3076            // Cost params for the Move native function `freeze_object<T: key>(obj: T)`
3077            transfer_freeze_object_cost_base: Some(52),
3078            // Cost params for the Move native function `share_object<T: key>(obj: T)`
3079            transfer_share_object_cost_base: Some(52),
3080            transfer_receive_object_cost_base: None,
3081            transfer_receive_object_type_cost_per_byte: None,
3082            transfer_receive_object_cost_per_byte: None,
3083
3084            // `tx_context` module
3085            // Cost params for the Move native function `transfer_impl<T: key>(obj: T, recipient: address)`
3086            tx_context_derive_id_cost_base: Some(52),
3087            tx_context_fresh_id_cost_base: None,
3088            tx_context_sender_cost_base: None,
3089            tx_context_epoch_cost_base: None,
3090            tx_context_epoch_timestamp_ms_cost_base: None,
3091            tx_context_sponsor_cost_base: None,
3092            tx_context_rgp_cost_base: None,
3093            tx_context_gas_price_cost_base: None,
3094            tx_context_gas_budget_cost_base: None,
3095            tx_context_ids_created_cost_base: None,
3096            tx_context_replace_cost_base: None,
3097
3098            // `types` module
3099            // Cost params for the Move native function `is_one_time_witness<T: drop>(_: &T): bool`
3100            types_is_one_time_witness_cost_base: Some(52),
3101            types_is_one_time_witness_type_tag_cost_per_byte: Some(2),
3102            types_is_one_time_witness_type_cost_per_byte: Some(2),
3103
3104            // `validator` module
3105            // Cost params for the Move native function `validate_metadata_bcs(metadata: vector<u8>)`
3106            validator_validate_metadata_cost_base: Some(52),
3107            validator_validate_metadata_data_cost_per_byte: Some(2),
3108
3109            // Crypto
3110            crypto_invalid_arguments_cost: Some(100),
3111            // bls12381::bls12381_min_pk_verify
3112            bls12381_bls12381_min_sig_verify_cost_base: Some(52),
3113            bls12381_bls12381_min_sig_verify_msg_cost_per_byte: Some(2),
3114            bls12381_bls12381_min_sig_verify_msg_cost_per_block: Some(2),
3115
3116            // bls12381::bls12381_min_pk_verify
3117            bls12381_bls12381_min_pk_verify_cost_base: Some(52),
3118            bls12381_bls12381_min_pk_verify_msg_cost_per_byte: Some(2),
3119            bls12381_bls12381_min_pk_verify_msg_cost_per_block: Some(2),
3120
3121            // ecdsa_k1::ecrecover
3122            ecdsa_k1_ecrecover_keccak256_cost_base: Some(52),
3123            ecdsa_k1_ecrecover_keccak256_msg_cost_per_byte: Some(2),
3124            ecdsa_k1_ecrecover_keccak256_msg_cost_per_block: Some(2),
3125            ecdsa_k1_ecrecover_sha256_cost_base: Some(52),
3126            ecdsa_k1_ecrecover_sha256_msg_cost_per_byte: Some(2),
3127            ecdsa_k1_ecrecover_sha256_msg_cost_per_block: Some(2),
3128
3129            // ecdsa_k1::decompress_pubkey
3130            ecdsa_k1_decompress_pubkey_cost_base: Some(52),
3131
3132            // ecdsa_k1::secp256k1_verify
3133            ecdsa_k1_secp256k1_verify_keccak256_cost_base: Some(52),
3134            ecdsa_k1_secp256k1_verify_keccak256_msg_cost_per_byte: Some(2),
3135            ecdsa_k1_secp256k1_verify_keccak256_msg_cost_per_block: Some(2),
3136            ecdsa_k1_secp256k1_verify_sha256_cost_base: Some(52),
3137            ecdsa_k1_secp256k1_verify_sha256_msg_cost_per_byte: Some(2),
3138            ecdsa_k1_secp256k1_verify_sha256_msg_cost_per_block: Some(2),
3139
3140            // ecdsa_r1::ecrecover
3141            ecdsa_r1_ecrecover_keccak256_cost_base: Some(52),
3142            ecdsa_r1_ecrecover_keccak256_msg_cost_per_byte: Some(2),
3143            ecdsa_r1_ecrecover_keccak256_msg_cost_per_block: Some(2),
3144            ecdsa_r1_ecrecover_sha256_cost_base: Some(52),
3145            ecdsa_r1_ecrecover_sha256_msg_cost_per_byte: Some(2),
3146            ecdsa_r1_ecrecover_sha256_msg_cost_per_block: Some(2),
3147
3148            // ecdsa_r1::secp256k1_verify
3149            ecdsa_r1_secp256r1_verify_keccak256_cost_base: Some(52),
3150            ecdsa_r1_secp256r1_verify_keccak256_msg_cost_per_byte: Some(2),
3151            ecdsa_r1_secp256r1_verify_keccak256_msg_cost_per_block: Some(2),
3152            ecdsa_r1_secp256r1_verify_sha256_cost_base: Some(52),
3153            ecdsa_r1_secp256r1_verify_sha256_msg_cost_per_byte: Some(2),
3154            ecdsa_r1_secp256r1_verify_sha256_msg_cost_per_block: Some(2),
3155
3156            // ecvrf::verify
3157            ecvrf_ecvrf_verify_cost_base: Some(52),
3158            ecvrf_ecvrf_verify_alpha_string_cost_per_byte: Some(2),
3159            ecvrf_ecvrf_verify_alpha_string_cost_per_block: Some(2),
3160
3161            // ed25519
3162            ed25519_ed25519_verify_cost_base: Some(52),
3163            ed25519_ed25519_verify_msg_cost_per_byte: Some(2),
3164            ed25519_ed25519_verify_msg_cost_per_block: Some(2),
3165
3166            // groth16::prepare_verifying_key
3167            groth16_prepare_verifying_key_bls12381_cost_base: Some(52),
3168            groth16_prepare_verifying_key_bn254_cost_base: Some(52),
3169
3170            // groth16::verify_groth16_proof_internal
3171            groth16_verify_groth16_proof_internal_bls12381_cost_base: Some(52),
3172            groth16_verify_groth16_proof_internal_bls12381_cost_per_public_input: Some(2),
3173            groth16_verify_groth16_proof_internal_bn254_cost_base: Some(52),
3174            groth16_verify_groth16_proof_internal_bn254_cost_per_public_input: Some(2),
3175            groth16_verify_groth16_proof_internal_public_input_cost_per_byte: Some(2),
3176
3177            // hash::blake2b256
3178            hash_blake2b256_cost_base: Some(52),
3179            hash_blake2b256_data_cost_per_byte: Some(2),
3180            hash_blake2b256_data_cost_per_block: Some(2),
3181
3182            // hash::keccak256
3183            hash_keccak256_cost_base: Some(52),
3184            hash_keccak256_data_cost_per_byte: Some(2),
3185            hash_keccak256_data_cost_per_block: Some(2),
3186
3187            poseidon_bn254_cost_base: None,
3188            poseidon_bn254_cost_per_block: None,
3189
3190            // hmac::hmac_sha3_256
3191            hmac_hmac_sha3_256_cost_base: Some(52),
3192            hmac_hmac_sha3_256_input_cost_per_byte: Some(2),
3193            hmac_hmac_sha3_256_input_cost_per_block: Some(2),
3194
3195            // group ops
3196            group_ops_bls12381_decode_scalar_cost: None,
3197            group_ops_bls12381_decode_g1_cost: None,
3198            group_ops_bls12381_decode_g2_cost: None,
3199            group_ops_bls12381_decode_gt_cost: None,
3200            group_ops_bls12381_scalar_add_cost: None,
3201            group_ops_bls12381_g1_add_cost: None,
3202            group_ops_bls12381_g2_add_cost: None,
3203            group_ops_bls12381_gt_add_cost: None,
3204            group_ops_bls12381_scalar_sub_cost: None,
3205            group_ops_bls12381_g1_sub_cost: None,
3206            group_ops_bls12381_g2_sub_cost: None,
3207            group_ops_bls12381_gt_sub_cost: None,
3208            group_ops_bls12381_scalar_mul_cost: None,
3209            group_ops_bls12381_g1_mul_cost: None,
3210            group_ops_bls12381_g2_mul_cost: None,
3211            group_ops_bls12381_gt_mul_cost: None,
3212            group_ops_bls12381_scalar_div_cost: None,
3213            group_ops_bls12381_g1_div_cost: None,
3214            group_ops_bls12381_g2_div_cost: None,
3215            group_ops_bls12381_gt_div_cost: None,
3216            group_ops_bls12381_g1_hash_to_base_cost: None,
3217            group_ops_bls12381_g2_hash_to_base_cost: None,
3218            group_ops_bls12381_g1_hash_to_cost_per_byte: None,
3219            group_ops_bls12381_g2_hash_to_cost_per_byte: None,
3220            group_ops_bls12381_g1_msm_base_cost: None,
3221            group_ops_bls12381_g2_msm_base_cost: None,
3222            group_ops_bls12381_g1_msm_base_cost_per_input: None,
3223            group_ops_bls12381_g2_msm_base_cost_per_input: None,
3224            group_ops_bls12381_msm_max_len: None,
3225            group_ops_bls12381_pairing_cost: None,
3226            group_ops_bls12381_g1_to_uncompressed_g1_cost: None,
3227            group_ops_bls12381_uncompressed_g1_to_g1_cost: None,
3228            group_ops_bls12381_uncompressed_g1_sum_base_cost: None,
3229            group_ops_bls12381_uncompressed_g1_sum_cost_per_term: None,
3230            group_ops_bls12381_uncompressed_g1_sum_max_terms: None,
3231
3232            group_ops_ristretto_decode_scalar_cost: None,
3233            group_ops_ristretto_decode_point_cost: None,
3234            group_ops_ristretto_scalar_add_cost: None,
3235            group_ops_ristretto_point_add_cost: None,
3236            group_ops_ristretto_scalar_sub_cost: None,
3237            group_ops_ristretto_point_sub_cost: None,
3238            group_ops_ristretto_scalar_mul_cost: None,
3239            group_ops_ristretto_point_mul_cost: None,
3240            group_ops_ristretto_scalar_div_cost: None,
3241            group_ops_ristretto_point_div_cost: None,
3242
3243            verify_bulletproofs_ristretto255_base_cost: None,
3244            verify_bulletproofs_ristretto255_cost_per_bit_and_commitment: None,
3245
3246            // zklogin::check_zklogin_id
3247            check_zklogin_id_cost_base: None,
3248            // zklogin::check_zklogin_issuer
3249            check_zklogin_issuer_cost_base: None,
3250
3251            vdf_verify_vdf_cost: None,
3252            vdf_hash_to_input_cost: None,
3253
3254            // nitro_attestation::verify_nitro_attestation
3255            nitro_attestation_parse_base_cost: None,
3256            nitro_attestation_parse_cost_per_byte: None,
3257            nitro_attestation_verify_base_cost: None,
3258            nitro_attestation_verify_cost_per_cert: None,
3259
3260            bcs_per_byte_serialized_cost: None,
3261            bcs_legacy_min_output_size_cost: None,
3262            bcs_failure_cost: None,
3263            hash_sha2_256_base_cost: None,
3264            hash_sha2_256_per_byte_cost: None,
3265            hash_sha2_256_legacy_min_input_len_cost: None,
3266            hash_sha3_256_base_cost: None,
3267            hash_sha3_256_per_byte_cost: None,
3268            hash_sha3_256_legacy_min_input_len_cost: None,
3269            type_name_get_base_cost: None,
3270            type_name_get_per_byte_cost: None,
3271            type_name_id_base_cost: None,
3272            string_check_utf8_base_cost: None,
3273            string_check_utf8_per_byte_cost: None,
3274            string_is_char_boundary_base_cost: None,
3275            string_sub_string_base_cost: None,
3276            string_sub_string_per_byte_cost: None,
3277            string_index_of_base_cost: None,
3278            string_index_of_per_byte_pattern_cost: None,
3279            string_index_of_per_byte_searched_cost: None,
3280            vector_empty_base_cost: None,
3281            vector_length_base_cost: None,
3282            vector_push_back_base_cost: None,
3283            vector_push_back_legacy_per_abstract_memory_unit_cost: None,
3284            vector_borrow_base_cost: None,
3285            vector_pop_back_base_cost: None,
3286            vector_destroy_empty_base_cost: None,
3287            vector_swap_base_cost: None,
3288            debug_print_base_cost: None,
3289            debug_print_stack_trace_base_cost: None,
3290
3291            max_size_written_objects: None,
3292            max_size_written_objects_system_tx: None,
3293
3294            // ==== Ephemeral (consensus only) params deleted ====
3295            // Const params for consensus scoring decision
3296            // scoring_decision_mad_divisor: None,
3297            // scoring_decision_cutoff_value: None,
3298
3299            // Limits the length of a Move identifier
3300            max_move_identifier_len: None,
3301            max_move_value_depth: None,
3302            max_move_enum_variants: None,
3303
3304            gas_rounding_step: None,
3305
3306            execution_version: None,
3307
3308            max_event_emit_size_total: None,
3309
3310            consensus_bad_nodes_stake_threshold: None,
3311
3312            max_jwk_votes_per_validator_per_epoch: None,
3313
3314            max_age_of_jwk_in_epochs: None,
3315
3316            random_beacon_reduction_allowed_delta: None,
3317
3318            random_beacon_reduction_lower_bound: None,
3319
3320            random_beacon_dkg_timeout_round: None,
3321
3322            random_beacon_min_round_interval_ms: None,
3323
3324            random_beacon_dkg_version: None,
3325
3326            consensus_max_transaction_size_bytes: None,
3327
3328            consensus_max_transactions_in_block_bytes: None,
3329
3330            consensus_max_num_transactions_in_block: None,
3331
3332            consensus_voting_rounds: None,
3333
3334            max_accumulated_txn_cost_per_object_in_narwhal_commit: None,
3335
3336            max_deferral_rounds_for_congestion_control: None,
3337
3338            max_txn_cost_overage_per_object_in_commit: None,
3339
3340            allowed_txn_cost_overage_burst_per_object_in_commit: None,
3341
3342            min_checkpoint_interval_ms: None,
3343
3344            checkpoint_summary_version_specific_data: None,
3345
3346            max_soft_bundle_size: None,
3347
3348            bridge_should_try_to_finalize_committee: None,
3349
3350            max_accumulated_txn_cost_per_object_in_mysticeti_commit: None,
3351
3352            max_accumulated_randomness_txn_cost_per_object_in_mysticeti_commit: None,
3353
3354            consensus_gc_depth: None,
3355
3356            gas_budget_based_txn_cost_cap_factor: None,
3357
3358            gas_budget_based_txn_cost_absolute_cap_commit_count: None,
3359
3360            sip_45_consensus_amplification_threshold: None,
3361
3362            use_object_per_epoch_marker_table_v2: None,
3363
3364            consensus_commit_rate_estimation_window_size: None,
3365
3366            aliased_addresses: vec![],
3367
3368            translation_per_command_base_charge: None,
3369            translation_per_input_base_charge: None,
3370            translation_pure_input_per_byte_charge: None,
3371            translation_per_type_node_charge: None,
3372            translation_per_reference_node_charge: None,
3373            translation_per_linkage_entry_charge: None,
3374
3375            max_updates_per_settlement_txn: None,
3376
3377            gasless_max_computation_units: None,
3378            gasless_allowed_token_types: None,
3379            gasless_max_unused_inputs: None,
3380            gasless_max_pure_input_bytes: None,
3381            gasless_max_tps: None,
3382            include_special_package_amendments: None,
3383            gasless_max_tx_size_bytes: None,
3384            // When adding a new constant, set it to None in the earliest version, like this:
3385            // new_constant: None,
3386        };
3387        for cur in 2..=version.0 {
3388            match cur {
3389                1 => unreachable!(),
3390                2 => {
3391                    cfg.feature_flags.advance_epoch_start_time_in_safe_mode = true;
3392                }
3393                3 => {
3394                    // changes for gas model
3395                    cfg.gas_model_version = Some(2);
3396                    // max gas budget is in MIST and an absolute value 50SUI
3397                    cfg.max_tx_gas = Some(50_000_000_000);
3398                    // min gas budget is in MIST and an absolute value 2000MIST or 0.000002SUI
3399                    cfg.base_tx_cost_fixed = Some(2_000);
3400                    // storage gas price multiplier
3401                    cfg.storage_gas_price = Some(76);
3402                    cfg.feature_flags.loaded_child_objects_fixed = true;
3403                    // max size of written objects during a TXn
3404                    // this is a sum of all objects written during a TXn
3405                    cfg.max_size_written_objects = Some(5 * 1000 * 1000);
3406                    // max size of written objects during a system TXn to allow for larger writes
3407                    // akin to `max_size_written_objects` but for system TXns
3408                    cfg.max_size_written_objects_system_tx = Some(50 * 1000 * 1000);
3409                    cfg.feature_flags.package_upgrades = true;
3410                }
3411                // This is the first protocol version currently possible.
3412                // Mainnet starts with version 4. Previous versions are pre mainnet and have
3413                // all been wiped out.
3414                // Every other chain is after version 4.
3415                4 => {
3416                    // Change reward slashing rate to 100%.
3417                    cfg.reward_slashing_rate = Some(10000);
3418                    // protect old and new lookup for object version
3419                    cfg.gas_model_version = Some(3);
3420                }
3421                5 => {
3422                    cfg.feature_flags.missing_type_is_compatibility_error = true;
3423                    cfg.gas_model_version = Some(4);
3424                    cfg.feature_flags.scoring_decision_with_validity_cutoff = true;
3425                    // ==== Ephemeral (consensus only) params deleted ====
3426                    // cfg.scoring_decision_mad_divisor = Some(2.3);
3427                    // cfg.scoring_decision_cutoff_value = Some(2.5);
3428                }
3429                6 => {
3430                    cfg.gas_model_version = Some(5);
3431                    cfg.buffer_stake_for_protocol_upgrade_bps = Some(5000);
3432                    cfg.feature_flags.consensus_order_end_of_epoch_last = true;
3433                }
3434                7 => {
3435                    cfg.feature_flags.disallow_adding_abilities_on_upgrade = true;
3436                    cfg.feature_flags
3437                        .disable_invariant_violation_check_in_swap_loc = true;
3438                    cfg.feature_flags.ban_entry_init = true;
3439                    cfg.feature_flags.package_digest_hash_module = true;
3440                }
3441                8 => {
3442                    cfg.feature_flags
3443                        .disallow_change_struct_type_params_on_upgrade = true;
3444                }
3445                9 => {
3446                    // Limits the length of a Move identifier
3447                    cfg.max_move_identifier_len = Some(128);
3448                    cfg.feature_flags.no_extraneous_module_bytes = true;
3449                    cfg.feature_flags
3450                        .advance_to_highest_supported_protocol_version = true;
3451                }
3452                10 => {
3453                    cfg.max_verifier_meter_ticks_per_function = Some(16_000_000);
3454                    cfg.max_meter_ticks_per_module = Some(16_000_000);
3455                }
3456                11 => {
3457                    cfg.max_move_value_depth = Some(128);
3458                }
3459                12 => {
3460                    cfg.feature_flags.narwhal_versioned_metadata = true;
3461                    if chain != Chain::Mainnet {
3462                        cfg.feature_flags.commit_root_state_digest = true;
3463                    }
3464
3465                    if chain != Chain::Mainnet && chain != Chain::Testnet {
3466                        cfg.feature_flags.zklogin_auth = true;
3467                    }
3468                }
3469                13 => {}
3470                14 => {
3471                    cfg.gas_rounding_step = Some(1_000);
3472                    cfg.gas_model_version = Some(6);
3473                }
3474                15 => {
3475                    cfg.feature_flags.consensus_transaction_ordering =
3476                        ConsensusTransactionOrdering::ByGasPrice;
3477                }
3478                16 => {
3479                    cfg.feature_flags.simplified_unwrap_then_delete = true;
3480                }
3481                17 => {
3482                    cfg.feature_flags.upgraded_multisig_supported = true;
3483                }
3484                18 => {
3485                    cfg.execution_version = Some(1);
3486                    // Following flags are implied by this execution version.  Once support for earlier
3487                    // protocol versions is dropped, these flags can be removed:
3488                    // cfg.feature_flags.package_upgrades = true;
3489                    // cfg.feature_flags.disallow_adding_abilities_on_upgrade = true;
3490                    // cfg.feature_flags.disallow_change_struct_type_params_on_upgrade = true;
3491                    // cfg.feature_flags.loaded_child_objects_fixed = true;
3492                    // cfg.feature_flags.ban_entry_init = true;
3493                    // cfg.feature_flags.pack_digest_hash_modules = true;
3494                    cfg.feature_flags.txn_base_cost_as_multiplier = true;
3495                    // this is a multiplier of the gas price
3496                    cfg.base_tx_cost_fixed = Some(1_000);
3497                }
3498                19 => {
3499                    cfg.max_num_event_emit = Some(1024);
3500                    // We maintain the same total size limit for events, but increase the number of
3501                    // events that can be emitted.
3502                    cfg.max_event_emit_size_total = Some(
3503                        256 /* former event count limit */ * 250 * 1024, /* size limit per event */
3504                    );
3505                }
3506                20 => {
3507                    cfg.feature_flags.commit_root_state_digest = true;
3508
3509                    if chain != Chain::Mainnet {
3510                        cfg.feature_flags.narwhal_new_leader_election_schedule = true;
3511                        cfg.consensus_bad_nodes_stake_threshold = Some(20);
3512                    }
3513                }
3514
3515                21 => {
3516                    if chain != Chain::Mainnet {
3517                        cfg.feature_flags.zklogin_supported_providers = BTreeSet::from([
3518                            "Google".to_string(),
3519                            "Facebook".to_string(),
3520                            "Twitch".to_string(),
3521                        ]);
3522                    }
3523                }
3524                22 => {
3525                    cfg.feature_flags.loaded_child_object_format = true;
3526                }
3527                23 => {
3528                    cfg.feature_flags.loaded_child_object_format_type = true;
3529                    cfg.feature_flags.narwhal_new_leader_election_schedule = true;
3530                    // Taking a baby step approach, we consider only 20% by stake as bad nodes so we
3531                    // have a 80% by stake of nodes participating in the leader committee. That allow
3532                    // us for more redundancy in case we have validators under performing - since the
3533                    // responsibility is shared amongst more nodes. We can increase that once we do have
3534                    // higher confidence.
3535                    cfg.consensus_bad_nodes_stake_threshold = Some(20);
3536                }
3537                24 => {
3538                    cfg.feature_flags.simple_conservation_checks = true;
3539                    cfg.max_publish_or_upgrade_per_ptb = Some(5);
3540
3541                    cfg.feature_flags.end_of_epoch_transaction_supported = true;
3542
3543                    if chain != Chain::Mainnet {
3544                        cfg.feature_flags.enable_jwk_consensus_updates = true;
3545                        // Max of 10 votes per hour
3546                        cfg.max_jwk_votes_per_validator_per_epoch = Some(240);
3547                        cfg.max_age_of_jwk_in_epochs = Some(1);
3548                    }
3549                }
3550                25 => {
3551                    // Enable zkLogin for all providers in all networks.
3552                    cfg.feature_flags.zklogin_supported_providers = BTreeSet::from([
3553                        "Google".to_string(),
3554                        "Facebook".to_string(),
3555                        "Twitch".to_string(),
3556                    ]);
3557                    cfg.feature_flags.zklogin_auth = true;
3558
3559                    // Enable jwk consensus updates
3560                    cfg.feature_flags.enable_jwk_consensus_updates = true;
3561                    cfg.max_jwk_votes_per_validator_per_epoch = Some(240);
3562                    cfg.max_age_of_jwk_in_epochs = Some(1);
3563                }
3564                26 => {
3565                    cfg.gas_model_version = Some(7);
3566                    // Only enable receiving objects in devnet
3567                    if chain != Chain::Mainnet && chain != Chain::Testnet {
3568                        cfg.transfer_receive_object_cost_base = Some(52);
3569                        cfg.feature_flags.receive_objects = true;
3570                    }
3571                }
3572                27 => {
3573                    cfg.gas_model_version = Some(8);
3574                }
3575                28 => {
3576                    // zklogin::check_zklogin_id
3577                    cfg.check_zklogin_id_cost_base = Some(200);
3578                    // zklogin::check_zklogin_issuer
3579                    cfg.check_zklogin_issuer_cost_base = Some(200);
3580
3581                    // Only enable effects v2 on devnet.
3582                    if chain != Chain::Mainnet && chain != Chain::Testnet {
3583                        cfg.feature_flags.enable_effects_v2 = true;
3584                    }
3585                }
3586                29 => {
3587                    cfg.feature_flags.verify_legacy_zklogin_address = true;
3588                }
3589                30 => {
3590                    // Only enable nw certificate v2 on testnet.
3591                    if chain != Chain::Mainnet {
3592                        cfg.feature_flags.narwhal_certificate_v2 = true;
3593                    }
3594
3595                    cfg.random_beacon_reduction_allowed_delta = Some(800);
3596                    // Only enable effects v2 on devnet and testnet.
3597                    if chain != Chain::Mainnet {
3598                        cfg.feature_flags.enable_effects_v2 = true;
3599                    }
3600
3601                    // zklogin_supported_providers config is deprecated, zklogin
3602                    // signature verifier will use the fetched jwk map to determine
3603                    // whether the provider is supported based on node config.
3604                    cfg.feature_flags.zklogin_supported_providers = BTreeSet::default();
3605
3606                    cfg.feature_flags.recompute_has_public_transfer_in_execution = true;
3607                }
3608                31 => {
3609                    cfg.execution_version = Some(2);
3610                    // Only enable shared object deletion on devnet
3611                    if chain != Chain::Mainnet && chain != Chain::Testnet {
3612                        cfg.feature_flags.shared_object_deletion = true;
3613                    }
3614                }
3615                32 => {
3616                    // enable zklogin in multisig in devnet and testnet
3617                    if chain != Chain::Mainnet {
3618                        cfg.feature_flags.accept_zklogin_in_multisig = true;
3619                    }
3620                    // enable receiving objects in devnet and testnet
3621                    if chain != Chain::Mainnet {
3622                        cfg.transfer_receive_object_cost_base = Some(52);
3623                        cfg.feature_flags.receive_objects = true;
3624                    }
3625                    // Only enable random beacon on devnet
3626                    if chain != Chain::Mainnet && chain != Chain::Testnet {
3627                        cfg.feature_flags.random_beacon = true;
3628                        cfg.random_beacon_reduction_lower_bound = Some(1600);
3629                        cfg.random_beacon_dkg_timeout_round = Some(3000);
3630                        cfg.random_beacon_min_round_interval_ms = Some(150);
3631                    }
3632                    // Only enable consensus digest in consensus commit prologue in devnet.
3633                    if chain != Chain::Testnet && chain != Chain::Mainnet {
3634                        cfg.feature_flags.include_consensus_digest_in_prologue = true;
3635                    }
3636
3637                    // enable nw cert v2 on mainnet
3638                    cfg.feature_flags.narwhal_certificate_v2 = true;
3639                }
3640                33 => {
3641                    cfg.feature_flags.hardened_otw_check = true;
3642                    cfg.feature_flags.allow_receiving_object_id = true;
3643
3644                    // Enable transfer-to-object in mainnet
3645                    cfg.transfer_receive_object_cost_base = Some(52);
3646                    cfg.feature_flags.receive_objects = true;
3647
3648                    // Enable shared object deletion in testnet and devnet
3649                    if chain != Chain::Mainnet {
3650                        cfg.feature_flags.shared_object_deletion = true;
3651                    }
3652
3653                    cfg.feature_flags.enable_effects_v2 = true;
3654                }
3655                34 => {}
3656                35 => {
3657                    // Add costs for poseidon::poseidon_bn254
3658                    if chain != Chain::Mainnet && chain != Chain::Testnet {
3659                        cfg.feature_flags.enable_poseidon = true;
3660                        cfg.poseidon_bn254_cost_base = Some(260);
3661                        cfg.poseidon_bn254_cost_per_block = Some(10);
3662                    }
3663
3664                    cfg.feature_flags.enable_coin_deny_list = true;
3665                }
3666                36 => {
3667                    // Only enable group ops on devnet
3668                    if chain != Chain::Mainnet && chain != Chain::Testnet {
3669                        cfg.feature_flags.enable_group_ops_native_functions = true;
3670                        cfg.feature_flags.enable_group_ops_native_function_msm = true;
3671                        // Next values are arbitrary in a similar way as the other crypto native functions.
3672                        cfg.group_ops_bls12381_decode_scalar_cost = Some(52);
3673                        cfg.group_ops_bls12381_decode_g1_cost = Some(52);
3674                        cfg.group_ops_bls12381_decode_g2_cost = Some(52);
3675                        cfg.group_ops_bls12381_decode_gt_cost = Some(52);
3676                        cfg.group_ops_bls12381_scalar_add_cost = Some(52);
3677                        cfg.group_ops_bls12381_g1_add_cost = Some(52);
3678                        cfg.group_ops_bls12381_g2_add_cost = Some(52);
3679                        cfg.group_ops_bls12381_gt_add_cost = Some(52);
3680                        cfg.group_ops_bls12381_scalar_sub_cost = Some(52);
3681                        cfg.group_ops_bls12381_g1_sub_cost = Some(52);
3682                        cfg.group_ops_bls12381_g2_sub_cost = Some(52);
3683                        cfg.group_ops_bls12381_gt_sub_cost = Some(52);
3684                        cfg.group_ops_bls12381_scalar_mul_cost = Some(52);
3685                        cfg.group_ops_bls12381_g1_mul_cost = Some(52);
3686                        cfg.group_ops_bls12381_g2_mul_cost = Some(52);
3687                        cfg.group_ops_bls12381_gt_mul_cost = Some(52);
3688                        cfg.group_ops_bls12381_scalar_div_cost = Some(52);
3689                        cfg.group_ops_bls12381_g1_div_cost = Some(52);
3690                        cfg.group_ops_bls12381_g2_div_cost = Some(52);
3691                        cfg.group_ops_bls12381_gt_div_cost = Some(52);
3692                        cfg.group_ops_bls12381_g1_hash_to_base_cost = Some(52);
3693                        cfg.group_ops_bls12381_g2_hash_to_base_cost = Some(52);
3694                        cfg.group_ops_bls12381_g1_hash_to_cost_per_byte = Some(2);
3695                        cfg.group_ops_bls12381_g2_hash_to_cost_per_byte = Some(2);
3696                        cfg.group_ops_bls12381_g1_msm_base_cost = Some(52);
3697                        cfg.group_ops_bls12381_g2_msm_base_cost = Some(52);
3698                        cfg.group_ops_bls12381_g1_msm_base_cost_per_input = Some(52);
3699                        cfg.group_ops_bls12381_g2_msm_base_cost_per_input = Some(52);
3700                        cfg.group_ops_bls12381_msm_max_len = Some(32);
3701                        cfg.group_ops_bls12381_pairing_cost = Some(52);
3702                    }
3703                    // Enable shared object deletion on all networks.
3704                    cfg.feature_flags.shared_object_deletion = true;
3705
3706                    cfg.consensus_max_transaction_size_bytes = Some(256 * 1024); // 256KB
3707                    cfg.consensus_max_transactions_in_block_bytes = Some(6 * 1_024 * 1024);
3708                    // 6 MB
3709                }
3710                37 => {
3711                    cfg.feature_flags.reject_mutable_random_on_entry_functions = true;
3712
3713                    // Enable consensus digest in consensus commit prologue in testnet and devnet.
3714                    if chain != Chain::Mainnet {
3715                        cfg.feature_flags.include_consensus_digest_in_prologue = true;
3716                    }
3717                }
3718                38 => {
3719                    cfg.binary_module_handles = Some(100);
3720                    cfg.binary_struct_handles = Some(300);
3721                    cfg.binary_function_handles = Some(1500);
3722                    cfg.binary_function_instantiations = Some(750);
3723                    cfg.binary_signatures = Some(1000);
3724                    // constants and identifiers are proportional to the binary size,
3725                    // and they vastly depend on the code, so we are leaving them
3726                    // reasonably high
3727                    cfg.binary_constant_pool = Some(4000);
3728                    cfg.binary_identifiers = Some(10000);
3729                    cfg.binary_address_identifiers = Some(100);
3730                    cfg.binary_struct_defs = Some(200);
3731                    cfg.binary_struct_def_instantiations = Some(100);
3732                    cfg.binary_function_defs = Some(1000);
3733                    cfg.binary_field_handles = Some(500);
3734                    cfg.binary_field_instantiations = Some(250);
3735                    cfg.binary_friend_decls = Some(100);
3736                    // reduce dependencies maximum
3737                    cfg.max_package_dependencies = Some(32);
3738                    cfg.max_modules_in_publish = Some(64);
3739                    // bump execution version
3740                    cfg.execution_version = Some(3);
3741                }
3742                39 => {
3743                    // It is important that we keep this protocol version blank due to an issue with random.move.
3744                }
3745                40 => {}
3746                41 => {
3747                    // Enable group ops and all networks (but not msm)
3748                    cfg.feature_flags.enable_group_ops_native_functions = true;
3749                    // Next values are arbitrary in a similar way as the other crypto native functions.
3750                    cfg.group_ops_bls12381_decode_scalar_cost = Some(52);
3751                    cfg.group_ops_bls12381_decode_g1_cost = Some(52);
3752                    cfg.group_ops_bls12381_decode_g2_cost = Some(52);
3753                    cfg.group_ops_bls12381_decode_gt_cost = Some(52);
3754                    cfg.group_ops_bls12381_scalar_add_cost = Some(52);
3755                    cfg.group_ops_bls12381_g1_add_cost = Some(52);
3756                    cfg.group_ops_bls12381_g2_add_cost = Some(52);
3757                    cfg.group_ops_bls12381_gt_add_cost = Some(52);
3758                    cfg.group_ops_bls12381_scalar_sub_cost = Some(52);
3759                    cfg.group_ops_bls12381_g1_sub_cost = Some(52);
3760                    cfg.group_ops_bls12381_g2_sub_cost = Some(52);
3761                    cfg.group_ops_bls12381_gt_sub_cost = Some(52);
3762                    cfg.group_ops_bls12381_scalar_mul_cost = Some(52);
3763                    cfg.group_ops_bls12381_g1_mul_cost = Some(52);
3764                    cfg.group_ops_bls12381_g2_mul_cost = Some(52);
3765                    cfg.group_ops_bls12381_gt_mul_cost = Some(52);
3766                    cfg.group_ops_bls12381_scalar_div_cost = Some(52);
3767                    cfg.group_ops_bls12381_g1_div_cost = Some(52);
3768                    cfg.group_ops_bls12381_g2_div_cost = Some(52);
3769                    cfg.group_ops_bls12381_gt_div_cost = Some(52);
3770                    cfg.group_ops_bls12381_g1_hash_to_base_cost = Some(52);
3771                    cfg.group_ops_bls12381_g2_hash_to_base_cost = Some(52);
3772                    cfg.group_ops_bls12381_g1_hash_to_cost_per_byte = Some(2);
3773                    cfg.group_ops_bls12381_g2_hash_to_cost_per_byte = Some(2);
3774                    cfg.group_ops_bls12381_g1_msm_base_cost = Some(52);
3775                    cfg.group_ops_bls12381_g2_msm_base_cost = Some(52);
3776                    cfg.group_ops_bls12381_g1_msm_base_cost_per_input = Some(52);
3777                    cfg.group_ops_bls12381_g2_msm_base_cost_per_input = Some(52);
3778                    cfg.group_ops_bls12381_msm_max_len = Some(32);
3779                    cfg.group_ops_bls12381_pairing_cost = Some(52);
3780                }
3781                42 => {}
3782                43 => {
3783                    cfg.feature_flags.zklogin_max_epoch_upper_bound_delta = Some(30);
3784                    cfg.max_meter_ticks_per_package = Some(16_000_000);
3785                }
3786                44 => {
3787                    // Enable consensus digest in consensus commit prologue on all networks..
3788                    cfg.feature_flags.include_consensus_digest_in_prologue = true;
3789                    // Switch between Narwhal and Mysticeti per epoch in tests, devnet and testnet.
3790                    if chain != Chain::Mainnet {
3791                        cfg.feature_flags.consensus_choice = ConsensusChoice::SwapEachEpoch;
3792                    }
3793                }
3794                45 => {
3795                    // Use tonic networking for consensus, in tests and devnet.
3796                    if chain != Chain::Testnet && chain != Chain::Mainnet {
3797                        cfg.feature_flags.consensus_network = ConsensusNetwork::Tonic;
3798                    }
3799
3800                    if chain != Chain::Mainnet {
3801                        // Enable leader scoring & schedule change on testnet for mysticeti.
3802                        cfg.feature_flags.mysticeti_leader_scoring_and_schedule = true;
3803                    }
3804                    cfg.min_move_binary_format_version = Some(6);
3805                    cfg.feature_flags.accept_zklogin_in_multisig = true;
3806
3807                    // Also bumps framework snapshot to fix binop issue.
3808
3809                    // enable bridge in devnet
3810                    if chain != Chain::Mainnet && chain != Chain::Testnet {
3811                        cfg.feature_flags.bridge = true;
3812                    }
3813                }
3814                46 => {
3815                    // enable bridge in devnet and testnet
3816                    if chain != Chain::Mainnet {
3817                        cfg.feature_flags.bridge = true;
3818                    }
3819
3820                    // Enable resharing at same initial version
3821                    cfg.feature_flags.reshare_at_same_initial_version = true;
3822                }
3823                47 => {}
3824                48 => {
3825                    // Use tonic networking for Mysticeti.
3826                    cfg.feature_flags.consensus_network = ConsensusNetwork::Tonic;
3827
3828                    // Enable resolving abort code IDs to package ID instead of runtime module ID
3829                    cfg.feature_flags.resolve_abort_locations_to_package_id = true;
3830
3831                    // Enable random beacon on testnet.
3832                    if chain != Chain::Mainnet {
3833                        cfg.feature_flags.random_beacon = true;
3834                        cfg.random_beacon_reduction_lower_bound = Some(1600);
3835                        cfg.random_beacon_dkg_timeout_round = Some(3000);
3836                        cfg.random_beacon_min_round_interval_ms = Some(200);
3837                    }
3838
3839                    // Enable the committed sub dag digest inclusion on the commit output
3840                    cfg.feature_flags.mysticeti_use_committed_subdag_digest = true;
3841                }
3842                49 => {
3843                    if chain != Chain::Testnet && chain != Chain::Mainnet {
3844                        cfg.move_binary_format_version = Some(7);
3845                    }
3846
3847                    // enable vdf in devnet
3848                    if chain != Chain::Mainnet && chain != Chain::Testnet {
3849                        cfg.feature_flags.enable_vdf = true;
3850                        // Set to 30x and 2x the cost of a signature verification for now. This
3851                        // should be updated along with other native crypto functions.
3852                        cfg.vdf_verify_vdf_cost = Some(1500);
3853                        cfg.vdf_hash_to_input_cost = Some(100);
3854                    }
3855
3856                    // Only enable consensus commit prologue V3 in devnet.
3857                    if chain != Chain::Testnet && chain != Chain::Mainnet {
3858                        cfg.feature_flags
3859                            .record_consensus_determined_version_assignments_in_prologue = true;
3860                    }
3861
3862                    // Run Mysticeti consensus in testnet.
3863                    if chain != Chain::Mainnet {
3864                        cfg.feature_flags.consensus_choice = ConsensusChoice::Mysticeti;
3865                    }
3866
3867                    // Run Move verification on framework upgrades in its own VM
3868                    cfg.feature_flags.fresh_vm_on_framework_upgrade = true;
3869                }
3870                50 => {
3871                    // Enable checkpoint batching in testnet.
3872                    if chain != Chain::Mainnet {
3873                        cfg.checkpoint_summary_version_specific_data = Some(1);
3874                        cfg.min_checkpoint_interval_ms = Some(200);
3875                    }
3876
3877                    // Only enable prepose consensus commit prologue in checkpoints in devnet.
3878                    if chain != Chain::Testnet && chain != Chain::Mainnet {
3879                        cfg.feature_flags
3880                            .prepend_prologue_tx_in_consensus_commit_in_checkpoints = true;
3881                    }
3882
3883                    cfg.feature_flags.mysticeti_num_leaders_per_round = Some(1);
3884
3885                    // Set max transaction deferral to 10 consensus rounds.
3886                    cfg.max_deferral_rounds_for_congestion_control = Some(10);
3887                }
3888                51 => {
3889                    cfg.random_beacon_dkg_version = Some(1);
3890
3891                    if chain != Chain::Testnet && chain != Chain::Mainnet {
3892                        cfg.feature_flags.enable_coin_deny_list_v2 = true;
3893                    }
3894                }
3895                52 => {
3896                    if chain != Chain::Mainnet {
3897                        cfg.feature_flags.soft_bundle = true;
3898                        cfg.max_soft_bundle_size = Some(5);
3899                    }
3900
3901                    cfg.config_read_setting_impl_cost_base = Some(100);
3902                    cfg.config_read_setting_impl_cost_per_byte = Some(40);
3903
3904                    // Turn on shared object congestion control in devnet.
3905                    if chain != Chain::Testnet && chain != Chain::Mainnet {
3906                        cfg.max_accumulated_txn_cost_per_object_in_narwhal_commit = Some(100);
3907                        cfg.feature_flags.per_object_congestion_control_mode =
3908                            PerObjectCongestionControlMode::TotalTxCount;
3909                    }
3910
3911                    // Enable Mysticeti on mainnet.
3912                    cfg.feature_flags.consensus_choice = ConsensusChoice::Mysticeti;
3913
3914                    // Enable leader scoring & schedule change on mainnet for mysticeti.
3915                    cfg.feature_flags.mysticeti_leader_scoring_and_schedule = true;
3916
3917                    // Enable checkpoint batching on mainnet.
3918                    cfg.checkpoint_summary_version_specific_data = Some(1);
3919                    cfg.min_checkpoint_interval_ms = Some(200);
3920
3921                    // Enable consensus commit prologue V3 in testnet.
3922                    if chain != Chain::Mainnet {
3923                        cfg.feature_flags
3924                            .record_consensus_determined_version_assignments_in_prologue = true;
3925                        cfg.feature_flags
3926                            .prepend_prologue_tx_in_consensus_commit_in_checkpoints = true;
3927                    }
3928                    // Turn on enums in testnet and devnet
3929                    if chain != Chain::Mainnet {
3930                        cfg.move_binary_format_version = Some(7);
3931                    }
3932
3933                    if chain != Chain::Testnet && chain != Chain::Mainnet {
3934                        cfg.feature_flags.passkey_auth = true;
3935                    }
3936                    cfg.feature_flags.enable_coin_deny_list_v2 = true;
3937                }
3938                53 => {
3939                    // Do not allow bridge committee to finalize on mainnet.
3940                    cfg.bridge_should_try_to_finalize_committee = Some(chain != Chain::Mainnet);
3941
3942                    // Enable consensus commit prologue V3 on mainnet.
3943                    cfg.feature_flags
3944                        .record_consensus_determined_version_assignments_in_prologue = true;
3945                    cfg.feature_flags
3946                        .prepend_prologue_tx_in_consensus_commit_in_checkpoints = true;
3947
3948                    if chain == Chain::Unknown {
3949                        cfg.feature_flags.authority_capabilities_v2 = true;
3950                    }
3951
3952                    // Turns on shared object congestion control on testnet.
3953                    if chain != Chain::Mainnet {
3954                        cfg.max_accumulated_txn_cost_per_object_in_narwhal_commit = Some(100);
3955                        cfg.max_accumulated_txn_cost_per_object_in_mysticeti_commit = Some(10);
3956                        cfg.feature_flags.per_object_congestion_control_mode =
3957                            PerObjectCongestionControlMode::TotalTxCount;
3958                    }
3959
3960                    // Adjust stdlib gas costs
3961                    cfg.bcs_per_byte_serialized_cost = Some(2);
3962                    cfg.bcs_legacy_min_output_size_cost = Some(1);
3963                    cfg.bcs_failure_cost = Some(52);
3964                    cfg.debug_print_base_cost = Some(52);
3965                    cfg.debug_print_stack_trace_base_cost = Some(52);
3966                    cfg.hash_sha2_256_base_cost = Some(52);
3967                    cfg.hash_sha2_256_per_byte_cost = Some(2);
3968                    cfg.hash_sha2_256_legacy_min_input_len_cost = Some(1);
3969                    cfg.hash_sha3_256_base_cost = Some(52);
3970                    cfg.hash_sha3_256_per_byte_cost = Some(2);
3971                    cfg.hash_sha3_256_legacy_min_input_len_cost = Some(1);
3972                    cfg.type_name_get_base_cost = Some(52);
3973                    cfg.type_name_get_per_byte_cost = Some(2);
3974                    cfg.string_check_utf8_base_cost = Some(52);
3975                    cfg.string_check_utf8_per_byte_cost = Some(2);
3976                    cfg.string_is_char_boundary_base_cost = Some(52);
3977                    cfg.string_sub_string_base_cost = Some(52);
3978                    cfg.string_sub_string_per_byte_cost = Some(2);
3979                    cfg.string_index_of_base_cost = Some(52);
3980                    cfg.string_index_of_per_byte_pattern_cost = Some(2);
3981                    cfg.string_index_of_per_byte_searched_cost = Some(2);
3982                    cfg.vector_empty_base_cost = Some(52);
3983                    cfg.vector_length_base_cost = Some(52);
3984                    cfg.vector_push_back_base_cost = Some(52);
3985                    cfg.vector_push_back_legacy_per_abstract_memory_unit_cost = Some(2);
3986                    cfg.vector_borrow_base_cost = Some(52);
3987                    cfg.vector_pop_back_base_cost = Some(52);
3988                    cfg.vector_destroy_empty_base_cost = Some(52);
3989                    cfg.vector_swap_base_cost = Some(52);
3990                }
3991                54 => {
3992                    // Enable random beacon on mainnet.
3993                    cfg.feature_flags.random_beacon = true;
3994                    cfg.random_beacon_reduction_lower_bound = Some(1000);
3995                    cfg.random_beacon_dkg_timeout_round = Some(3000);
3996                    cfg.random_beacon_min_round_interval_ms = Some(500);
3997
3998                    // Turns on shared object congestion control on mainnet.
3999                    cfg.max_accumulated_txn_cost_per_object_in_narwhal_commit = Some(100);
4000                    cfg.max_accumulated_txn_cost_per_object_in_mysticeti_commit = Some(10);
4001                    cfg.feature_flags.per_object_congestion_control_mode =
4002                        PerObjectCongestionControlMode::TotalTxCount;
4003
4004                    // Enable soft bundle on mainnet.
4005                    cfg.feature_flags.soft_bundle = true;
4006                    cfg.max_soft_bundle_size = Some(5);
4007                }
4008                55 => {
4009                    // Turn on enums mainnet
4010                    cfg.move_binary_format_version = Some(7);
4011
4012                    // Assume 1KB per transaction and 500 transactions per block.
4013                    cfg.consensus_max_transactions_in_block_bytes = Some(512 * 1024);
4014                    // Assume 20_000 TPS * 5% max stake per validator / (minimum) 4 blocks per round = 250 transactions per block maximum
4015                    // Using a higher limit that is 512, to account for bursty traffic and system transactions.
4016                    cfg.consensus_max_num_transactions_in_block = Some(512);
4017
4018                    cfg.feature_flags.rethrow_serialization_type_layout_errors = true;
4019                }
4020                56 => {
4021                    if chain == Chain::Mainnet {
4022                        cfg.feature_flags.bridge = true;
4023                    }
4024                }
4025                57 => {
4026                    // Reduce minimum number of random beacon shares.
4027                    cfg.random_beacon_reduction_lower_bound = Some(800);
4028                }
4029                58 => {
4030                    if chain == Chain::Mainnet {
4031                        cfg.bridge_should_try_to_finalize_committee = Some(true);
4032                    }
4033
4034                    if chain != Chain::Mainnet && chain != Chain::Testnet {
4035                        // Enable distributed vote scoring for devnet
4036                        cfg.feature_flags
4037                            .consensus_distributed_vote_scoring_strategy = true;
4038                    }
4039                }
4040                59 => {
4041                    // Enable round prober in consensus.
4042                    cfg.feature_flags.consensus_round_prober = true;
4043                }
4044                60 => {
4045                    cfg.max_type_to_layout_nodes = Some(512);
4046                    cfg.feature_flags.validate_identifier_inputs = true;
4047                }
4048                61 => {
4049                    if chain != Chain::Mainnet {
4050                        // Enable distributed vote scoring for testnet
4051                        cfg.feature_flags
4052                            .consensus_distributed_vote_scoring_strategy = true;
4053                    }
4054                    // Further reduce minimum number of random beacon shares.
4055                    cfg.random_beacon_reduction_lower_bound = Some(700);
4056
4057                    if chain != Chain::Mainnet && chain != Chain::Testnet {
4058                        // Enable Mysticeti fastpath for devnet
4059                        cfg.feature_flags.mysticeti_fastpath = true;
4060                    }
4061                }
4062                62 => {
4063                    cfg.feature_flags.relocate_event_module = true;
4064                }
4065                63 => {
4066                    cfg.feature_flags.per_object_congestion_control_mode =
4067                        PerObjectCongestionControlMode::TotalGasBudgetWithCap;
4068                    cfg.gas_budget_based_txn_cost_cap_factor = Some(400_000);
4069                    cfg.max_accumulated_txn_cost_per_object_in_mysticeti_commit = Some(18_500_000);
4070                    cfg.max_accumulated_txn_cost_per_object_in_narwhal_commit = Some(240_000_000);
4071                }
4072                64 => {
4073                    cfg.feature_flags.per_object_congestion_control_mode =
4074                        PerObjectCongestionControlMode::TotalTxCount;
4075                    cfg.max_accumulated_txn_cost_per_object_in_narwhal_commit = Some(40);
4076                    cfg.max_accumulated_txn_cost_per_object_in_mysticeti_commit = Some(3);
4077                }
4078                65 => {
4079                    // Enable distributed vote scoring for mainnet
4080                    cfg.feature_flags
4081                        .consensus_distributed_vote_scoring_strategy = true;
4082                }
4083                66 => {
4084                    if chain == Chain::Mainnet {
4085                        // Revert the distributed vote scoring for mainnet (for one protocol upgrade)
4086                        cfg.feature_flags
4087                            .consensus_distributed_vote_scoring_strategy = false;
4088                    }
4089                }
4090                67 => {
4091                    // Enable it once again.
4092                    cfg.feature_flags
4093                        .consensus_distributed_vote_scoring_strategy = true;
4094                }
4095                68 => {
4096                    cfg.group_ops_bls12381_g1_to_uncompressed_g1_cost = Some(26);
4097                    cfg.group_ops_bls12381_uncompressed_g1_to_g1_cost = Some(52);
4098                    cfg.group_ops_bls12381_uncompressed_g1_sum_base_cost = Some(26);
4099                    cfg.group_ops_bls12381_uncompressed_g1_sum_cost_per_term = Some(13);
4100                    cfg.group_ops_bls12381_uncompressed_g1_sum_max_terms = Some(2000);
4101
4102                    if chain != Chain::Mainnet && chain != Chain::Testnet {
4103                        cfg.feature_flags.uncompressed_g1_group_elements = true;
4104                    }
4105
4106                    cfg.feature_flags.per_object_congestion_control_mode =
4107                        PerObjectCongestionControlMode::TotalGasBudgetWithCap;
4108                    cfg.gas_budget_based_txn_cost_cap_factor = Some(400_000);
4109                    cfg.max_accumulated_txn_cost_per_object_in_mysticeti_commit = Some(18_500_000);
4110                    cfg.max_accumulated_randomness_txn_cost_per_object_in_mysticeti_commit =
4111                        Some(3_700_000); // 20% of above
4112                    cfg.max_txn_cost_overage_per_object_in_commit = Some(u64::MAX);
4113                    cfg.gas_budget_based_txn_cost_absolute_cap_commit_count = Some(50);
4114
4115                    // Further reduce minimum number of random beacon shares.
4116                    cfg.random_beacon_reduction_lower_bound = Some(500);
4117
4118                    cfg.feature_flags.disallow_new_modules_in_deps_only_packages = true;
4119                }
4120                69 => {
4121                    // Sets number of rounds allowed for fastpath voting in consensus.
4122                    cfg.consensus_voting_rounds = Some(40);
4123
4124                    if chain != Chain::Mainnet && chain != Chain::Testnet {
4125                        // Enable smart ancestor selection for devnet
4126                        cfg.feature_flags.consensus_smart_ancestor_selection = true;
4127                    }
4128
4129                    if chain != Chain::Mainnet {
4130                        cfg.feature_flags.uncompressed_g1_group_elements = true;
4131                    }
4132                }
4133                70 => {
4134                    if chain != Chain::Mainnet {
4135                        // Enable smart ancestor selection for testnet
4136                        cfg.feature_flags.consensus_smart_ancestor_selection = true;
4137                        // Enable probing for accepted rounds in round prober for testnet
4138                        cfg.feature_flags
4139                            .consensus_round_prober_probe_accepted_rounds = true;
4140                    }
4141
4142                    cfg.poseidon_bn254_cost_per_block = Some(388);
4143
4144                    cfg.gas_model_version = Some(9);
4145                    cfg.feature_flags.native_charging_v2 = true;
4146                    cfg.bls12381_bls12381_min_sig_verify_cost_base = Some(44064);
4147                    cfg.bls12381_bls12381_min_pk_verify_cost_base = Some(49282);
4148                    cfg.ecdsa_k1_secp256k1_verify_keccak256_cost_base = Some(1470);
4149                    cfg.ecdsa_k1_secp256k1_verify_sha256_cost_base = Some(1470);
4150                    cfg.ecdsa_r1_secp256r1_verify_sha256_cost_base = Some(4225);
4151                    cfg.ecdsa_r1_secp256r1_verify_keccak256_cost_base = Some(4225);
4152                    cfg.ecvrf_ecvrf_verify_cost_base = Some(4848);
4153                    cfg.ed25519_ed25519_verify_cost_base = Some(1802);
4154
4155                    // Manually changed to be "under cost"
4156                    cfg.ecdsa_r1_ecrecover_keccak256_cost_base = Some(1173);
4157                    cfg.ecdsa_r1_ecrecover_sha256_cost_base = Some(1173);
4158                    cfg.ecdsa_k1_ecrecover_keccak256_cost_base = Some(500);
4159                    cfg.ecdsa_k1_ecrecover_sha256_cost_base = Some(500);
4160
4161                    cfg.groth16_prepare_verifying_key_bls12381_cost_base = Some(53838);
4162                    cfg.groth16_prepare_verifying_key_bn254_cost_base = Some(82010);
4163                    cfg.groth16_verify_groth16_proof_internal_bls12381_cost_base = Some(72090);
4164                    cfg.groth16_verify_groth16_proof_internal_bls12381_cost_per_public_input =
4165                        Some(8213);
4166                    cfg.groth16_verify_groth16_proof_internal_bn254_cost_base = Some(115502);
4167                    cfg.groth16_verify_groth16_proof_internal_bn254_cost_per_public_input =
4168                        Some(9484);
4169
4170                    cfg.hash_keccak256_cost_base = Some(10);
4171                    cfg.hash_blake2b256_cost_base = Some(10);
4172
4173                    // group ops
4174                    cfg.group_ops_bls12381_decode_scalar_cost = Some(7);
4175                    cfg.group_ops_bls12381_decode_g1_cost = Some(2848);
4176                    cfg.group_ops_bls12381_decode_g2_cost = Some(3770);
4177                    cfg.group_ops_bls12381_decode_gt_cost = Some(3068);
4178
4179                    cfg.group_ops_bls12381_scalar_add_cost = Some(10);
4180                    cfg.group_ops_bls12381_g1_add_cost = Some(1556);
4181                    cfg.group_ops_bls12381_g2_add_cost = Some(3048);
4182                    cfg.group_ops_bls12381_gt_add_cost = Some(188);
4183
4184                    cfg.group_ops_bls12381_scalar_sub_cost = Some(10);
4185                    cfg.group_ops_bls12381_g1_sub_cost = Some(1550);
4186                    cfg.group_ops_bls12381_g2_sub_cost = Some(3019);
4187                    cfg.group_ops_bls12381_gt_sub_cost = Some(497);
4188
4189                    cfg.group_ops_bls12381_scalar_mul_cost = Some(11);
4190                    cfg.group_ops_bls12381_g1_mul_cost = Some(4842);
4191                    cfg.group_ops_bls12381_g2_mul_cost = Some(9108);
4192                    cfg.group_ops_bls12381_gt_mul_cost = Some(27490);
4193
4194                    cfg.group_ops_bls12381_scalar_div_cost = Some(91);
4195                    cfg.group_ops_bls12381_g1_div_cost = Some(5091);
4196                    cfg.group_ops_bls12381_g2_div_cost = Some(9206);
4197                    cfg.group_ops_bls12381_gt_div_cost = Some(27804);
4198
4199                    cfg.group_ops_bls12381_g1_hash_to_base_cost = Some(2962);
4200                    cfg.group_ops_bls12381_g2_hash_to_base_cost = Some(8688);
4201
4202                    cfg.group_ops_bls12381_g1_msm_base_cost = Some(62648);
4203                    cfg.group_ops_bls12381_g2_msm_base_cost = Some(131192);
4204                    cfg.group_ops_bls12381_g1_msm_base_cost_per_input = Some(1333);
4205                    cfg.group_ops_bls12381_g2_msm_base_cost_per_input = Some(3216);
4206
4207                    cfg.group_ops_bls12381_uncompressed_g1_to_g1_cost = Some(677);
4208                    cfg.group_ops_bls12381_g1_to_uncompressed_g1_cost = Some(2099);
4209                    cfg.group_ops_bls12381_uncompressed_g1_sum_base_cost = Some(77);
4210                    cfg.group_ops_bls12381_uncompressed_g1_sum_cost_per_term = Some(26);
4211
4212                    cfg.group_ops_bls12381_pairing_cost = Some(26897);
4213                    cfg.group_ops_bls12381_uncompressed_g1_sum_max_terms = Some(1200);
4214
4215                    cfg.validator_validate_metadata_cost_base = Some(20000);
4216                }
4217                71 => {
4218                    cfg.sip_45_consensus_amplification_threshold = Some(5);
4219
4220                    // Enable bursts for congestion control. (10x the per-commit budget)
4221                    cfg.allowed_txn_cost_overage_burst_per_object_in_commit = Some(185_000_000);
4222                }
4223                72 => {
4224                    cfg.feature_flags.convert_type_argument_error = true;
4225
4226                    // Invariant: max_gas_price * base_tx_cost_fixed <= max_tx_gas
4227                    // max gas budget is in MIST and an absolute value 50_000 SUI
4228                    cfg.max_tx_gas = Some(50_000_000_000_000);
4229                    // max gas price is in MIST and an absolute value 50 SUI
4230                    cfg.max_gas_price = Some(50_000_000_000);
4231
4232                    cfg.feature_flags.variant_nodes = true;
4233                }
4234                73 => {
4235                    // Enable new marker table version.
4236                    cfg.use_object_per_epoch_marker_table_v2 = Some(true);
4237
4238                    if chain != Chain::Mainnet && chain != Chain::Testnet {
4239                        // Assuming a round rate of max 15/sec, then using a gc depth of 60 allow blocks within a window of ~4 seconds
4240                        // to be included before be considered garbage collected.
4241                        cfg.consensus_gc_depth = Some(60);
4242                    }
4243
4244                    if chain != Chain::Mainnet {
4245                        // Enable zstd compression for consensus in testnet
4246                        cfg.feature_flags.consensus_zstd_compression = true;
4247                    }
4248
4249                    // Enable smart ancestor selection for mainnet
4250                    cfg.feature_flags.consensus_smart_ancestor_selection = true;
4251                    // Enable probing for accepted rounds in round prober for mainnet
4252                    cfg.feature_flags
4253                        .consensus_round_prober_probe_accepted_rounds = true;
4254
4255                    // Increase congestion control budget.
4256                    cfg.feature_flags.per_object_congestion_control_mode =
4257                        PerObjectCongestionControlMode::TotalGasBudgetWithCap;
4258                    cfg.gas_budget_based_txn_cost_cap_factor = Some(400_000);
4259                    cfg.max_accumulated_txn_cost_per_object_in_mysticeti_commit = Some(37_000_000);
4260                    cfg.max_accumulated_randomness_txn_cost_per_object_in_mysticeti_commit =
4261                        Some(7_400_000); // 20% of above
4262                    cfg.max_txn_cost_overage_per_object_in_commit = Some(u64::MAX);
4263                    cfg.gas_budget_based_txn_cost_absolute_cap_commit_count = Some(50);
4264                    cfg.allowed_txn_cost_overage_burst_per_object_in_commit = Some(370_000_000);
4265                }
4266                74 => {
4267                    // Enable nitro attestation verify native move function for devnet
4268                    if chain != Chain::Mainnet && chain != Chain::Testnet {
4269                        cfg.feature_flags.enable_nitro_attestation = true;
4270                    }
4271                    cfg.nitro_attestation_parse_base_cost = Some(53 * 50);
4272                    cfg.nitro_attestation_parse_cost_per_byte = Some(50);
4273                    cfg.nitro_attestation_verify_base_cost = Some(49632 * 50);
4274                    cfg.nitro_attestation_verify_cost_per_cert = Some(52369 * 50);
4275
4276                    // Enable zstd compression for consensus in mainnet
4277                    cfg.feature_flags.consensus_zstd_compression = true;
4278
4279                    if chain != Chain::Mainnet && chain != Chain::Testnet {
4280                        cfg.feature_flags.consensus_linearize_subdag_v2 = true;
4281                    }
4282                }
4283                75 => {
4284                    if chain != Chain::Mainnet {
4285                        cfg.feature_flags.passkey_auth = true;
4286                    }
4287                }
4288                76 => {
4289                    if chain != Chain::Mainnet && chain != Chain::Testnet {
4290                        cfg.feature_flags.record_additional_state_digest_in_prologue = true;
4291                        cfg.consensus_commit_rate_estimation_window_size = Some(10);
4292                    }
4293                    cfg.feature_flags.minimize_child_object_mutations = true;
4294
4295                    if chain != Chain::Mainnet {
4296                        cfg.feature_flags.accept_passkey_in_multisig = true;
4297                    }
4298                }
4299                77 => {
4300                    cfg.feature_flags.uncompressed_g1_group_elements = true;
4301
4302                    if chain != Chain::Mainnet {
4303                        cfg.consensus_gc_depth = Some(60);
4304                        cfg.feature_flags.consensus_linearize_subdag_v2 = true;
4305                    }
4306                }
4307                78 => {
4308                    cfg.feature_flags.move_native_context = true;
4309                    cfg.tx_context_fresh_id_cost_base = Some(52);
4310                    cfg.tx_context_sender_cost_base = Some(30);
4311                    cfg.tx_context_epoch_cost_base = Some(30);
4312                    cfg.tx_context_epoch_timestamp_ms_cost_base = Some(30);
4313                    cfg.tx_context_sponsor_cost_base = Some(30);
4314                    cfg.tx_context_gas_price_cost_base = Some(30);
4315                    cfg.tx_context_gas_budget_cost_base = Some(30);
4316                    cfg.tx_context_ids_created_cost_base = Some(30);
4317                    cfg.tx_context_replace_cost_base = Some(30);
4318                    cfg.gas_model_version = Some(10);
4319
4320                    if chain != Chain::Mainnet {
4321                        cfg.feature_flags.record_additional_state_digest_in_prologue = true;
4322                        cfg.consensus_commit_rate_estimation_window_size = Some(10);
4323
4324                        // Enable execution time estimate mode for congestion control on testnet.
4325                        cfg.feature_flags.per_object_congestion_control_mode =
4326                            PerObjectCongestionControlMode::ExecutionTimeEstimate(
4327                                ExecutionTimeEstimateParams {
4328                                    target_utilization: 30,
4329                                    allowed_txn_cost_overage_burst_limit_us: 100_000, // 100 ms
4330                                    randomness_scalar: 20,
4331                                    max_estimate_us: 1_500_000, // 1.5s
4332                                    stored_observations_num_included_checkpoints: 10,
4333                                    stored_observations_limit: u64::MAX,
4334                                    stake_weighted_median_threshold: 0,
4335                                    default_none_duration_for_new_keys: false,
4336                                    observations_chunk_size: None,
4337                                },
4338                            );
4339                    }
4340                }
4341                79 => {
4342                    if chain != Chain::Mainnet {
4343                        cfg.feature_flags.consensus_median_based_commit_timestamp = true;
4344
4345                        // Increase threshold for bad nodes that won't be considered
4346                        // leaders in consensus in testnet
4347                        cfg.consensus_bad_nodes_stake_threshold = Some(30);
4348
4349                        cfg.feature_flags.consensus_batched_block_sync = true;
4350
4351                        // Enable verify nitro attestation in testnet.
4352                        cfg.feature_flags.enable_nitro_attestation = true
4353                    }
4354                    cfg.feature_flags.normalize_ptb_arguments = true;
4355
4356                    cfg.consensus_gc_depth = Some(60);
4357                    cfg.feature_flags.consensus_linearize_subdag_v2 = true;
4358                }
4359                80 => {
4360                    cfg.max_ptb_value_size = Some(1024 * 1024);
4361                }
4362                81 => {
4363                    cfg.feature_flags.consensus_median_based_commit_timestamp = true;
4364                    cfg.feature_flags.enforce_checkpoint_timestamp_monotonicity = true;
4365                    cfg.consensus_bad_nodes_stake_threshold = Some(30)
4366                }
4367                82 => {
4368                    cfg.feature_flags.max_ptb_value_size_v2 = true;
4369                }
4370                83 => {
4371                    if chain == Chain::Mainnet {
4372                        // The address that will sign the recovery transaction.
4373                        let aliased: [u8; 32] = Hex::decode(
4374                            "0x0b2da327ba6a4cacbe75dddd50e6e8bbf81d6496e92d66af9154c61c77f7332f",
4375                        )
4376                        .unwrap()
4377                        .try_into()
4378                        .unwrap();
4379
4380                        // Allow aliasing for the two addresses that contain stolen funds.
4381                        cfg.aliased_addresses.push(AliasedAddress {
4382                            original: Hex::decode("0xcd8962dad278d8b50fa0f9eb0186bfa4cbdecc6d59377214c88d0286a0ac9562").unwrap().try_into().unwrap(),
4383                            aliased,
4384                            allowed_tx_digests: vec![
4385                                Base58::decode("B2eGLFoMHgj93Ni8dAJBfqGzo8EWSTLBesZzhEpTPA4").unwrap().try_into().unwrap(),
4386                            ],
4387                        });
4388
4389                        cfg.aliased_addresses.push(AliasedAddress {
4390                            original: Hex::decode("0xe28b50cef1d633ea43d3296a3f6b67ff0312a5f1a99f0af753c85b8b5de8ff06").unwrap().try_into().unwrap(),
4391                            aliased,
4392                            allowed_tx_digests: vec![
4393                                Base58::decode("J4QqSAgp7VrQtQpMy5wDX4QGsCSEZu3U5KuDAkbESAge").unwrap().try_into().unwrap(),
4394                            ],
4395                        });
4396                    }
4397
4398                    // These features had to be deferred to v84 for mainnet in order to ship the recovery protocol
4399                    // upgrade as a patch to 1.48
4400                    if chain != Chain::Mainnet {
4401                        cfg.feature_flags.resolve_type_input_ids_to_defining_id = true;
4402                        cfg.transfer_party_transfer_internal_cost_base = Some(52);
4403
4404                        // Enable execution time estimate mode for congestion control on mainnet.
4405                        cfg.feature_flags.record_additional_state_digest_in_prologue = true;
4406                        cfg.consensus_commit_rate_estimation_window_size = Some(10);
4407                        cfg.feature_flags.per_object_congestion_control_mode =
4408                            PerObjectCongestionControlMode::ExecutionTimeEstimate(
4409                                ExecutionTimeEstimateParams {
4410                                    target_utilization: 30,
4411                                    allowed_txn_cost_overage_burst_limit_us: 100_000, // 100 ms
4412                                    randomness_scalar: 20,
4413                                    max_estimate_us: 1_500_000, // 1.5s
4414                                    stored_observations_num_included_checkpoints: 10,
4415                                    stored_observations_limit: u64::MAX,
4416                                    stake_weighted_median_threshold: 0,
4417                                    default_none_duration_for_new_keys: false,
4418                                    observations_chunk_size: None,
4419                                },
4420                            );
4421
4422                        // Enable the new depth-first block sync logic.
4423                        cfg.feature_flags.consensus_batched_block_sync = true;
4424
4425                        // Enable nitro attestation upgraded parsing logic and enable the
4426                        // native function on mainnet.
4427                        cfg.feature_flags.enable_nitro_attestation_upgraded_parsing = true;
4428                        cfg.feature_flags.enable_nitro_attestation = true;
4429                    }
4430                }
4431                84 => {
4432                    if chain == Chain::Mainnet {
4433                        cfg.feature_flags.resolve_type_input_ids_to_defining_id = true;
4434                        cfg.transfer_party_transfer_internal_cost_base = Some(52);
4435
4436                        // Enable execution time estimate mode for congestion control on mainnet.
4437                        cfg.feature_flags.record_additional_state_digest_in_prologue = true;
4438                        cfg.consensus_commit_rate_estimation_window_size = Some(10);
4439                        cfg.feature_flags.per_object_congestion_control_mode =
4440                            PerObjectCongestionControlMode::ExecutionTimeEstimate(
4441                                ExecutionTimeEstimateParams {
4442                                    target_utilization: 30,
4443                                    allowed_txn_cost_overage_burst_limit_us: 100_000, // 100 ms
4444                                    randomness_scalar: 20,
4445                                    max_estimate_us: 1_500_000, // 1.5s
4446                                    stored_observations_num_included_checkpoints: 10,
4447                                    stored_observations_limit: u64::MAX,
4448                                    stake_weighted_median_threshold: 0,
4449                                    default_none_duration_for_new_keys: false,
4450                                    observations_chunk_size: None,
4451                                },
4452                            );
4453
4454                        // Enable the new depth-first block sync logic.
4455                        cfg.feature_flags.consensus_batched_block_sync = true;
4456
4457                        // Enable nitro attestation upgraded parsing logic and enable the
4458                        // native function on mainnet.
4459                        cfg.feature_flags.enable_nitro_attestation_upgraded_parsing = true;
4460                        cfg.feature_flags.enable_nitro_attestation = true;
4461                    }
4462
4463                    // Limit the number of stored execution time observations at end of epoch.
4464                    cfg.feature_flags.per_object_congestion_control_mode =
4465                        PerObjectCongestionControlMode::ExecutionTimeEstimate(
4466                            ExecutionTimeEstimateParams {
4467                                target_utilization: 30,
4468                                allowed_txn_cost_overage_burst_limit_us: 100_000, // 100 ms
4469                                randomness_scalar: 20,
4470                                max_estimate_us: 1_500_000, // 1.5s
4471                                stored_observations_num_included_checkpoints: 10,
4472                                stored_observations_limit: 20,
4473                                stake_weighted_median_threshold: 0,
4474                                default_none_duration_for_new_keys: false,
4475                                observations_chunk_size: None,
4476                            },
4477                        );
4478                    cfg.feature_flags.allow_unbounded_system_objects = true;
4479                }
4480                85 => {
4481                    if chain != Chain::Mainnet && chain != Chain::Testnet {
4482                        cfg.feature_flags.enable_party_transfer = true;
4483                    }
4484
4485                    cfg.feature_flags
4486                        .record_consensus_determined_version_assignments_in_prologue_v2 = true;
4487                    cfg.feature_flags.disallow_self_identifier = true;
4488                    cfg.feature_flags.per_object_congestion_control_mode =
4489                        PerObjectCongestionControlMode::ExecutionTimeEstimate(
4490                            ExecutionTimeEstimateParams {
4491                                target_utilization: 50,
4492                                allowed_txn_cost_overage_burst_limit_us: 500_000, // 500 ms
4493                                randomness_scalar: 20,
4494                                max_estimate_us: 1_500_000, // 1.5s
4495                                stored_observations_num_included_checkpoints: 10,
4496                                stored_observations_limit: 20,
4497                                stake_weighted_median_threshold: 0,
4498                                default_none_duration_for_new_keys: false,
4499                                observations_chunk_size: None,
4500                            },
4501                        );
4502                }
4503                86 => {
4504                    cfg.feature_flags.type_tags_in_object_runtime = true;
4505                    cfg.max_move_enum_variants = Some(move_core_types::VARIANT_COUNT_MAX);
4506
4507                    // Set a stake_weighted_median_threshold for congestion control.
4508                    cfg.feature_flags.per_object_congestion_control_mode =
4509                        PerObjectCongestionControlMode::ExecutionTimeEstimate(
4510                            ExecutionTimeEstimateParams {
4511                                target_utilization: 50,
4512                                allowed_txn_cost_overage_burst_limit_us: 500_000, // 500 ms
4513                                randomness_scalar: 20,
4514                                max_estimate_us: 1_500_000, // 1.5s
4515                                stored_observations_num_included_checkpoints: 10,
4516                                stored_observations_limit: 20,
4517                                stake_weighted_median_threshold: 3334,
4518                                default_none_duration_for_new_keys: false,
4519                                observations_chunk_size: None,
4520                            },
4521                        );
4522                    // Enable party transfer for testnet.
4523                    if chain != Chain::Mainnet {
4524                        cfg.feature_flags.enable_party_transfer = true;
4525                    }
4526                }
4527                87 => {
4528                    if chain == Chain::Mainnet {
4529                        cfg.feature_flags.record_time_estimate_processed = true;
4530                    }
4531                    cfg.feature_flags.better_adapter_type_resolution_errors = true;
4532                }
4533                88 => {
4534                    cfg.feature_flags.record_time_estimate_processed = true;
4535                    cfg.tx_context_rgp_cost_base = Some(30);
4536                    cfg.feature_flags
4537                        .ignore_execution_time_observations_after_certs_closed = true;
4538
4539                    // Disable backwards compatible behavior in execution time estimator for
4540                    // new protocol version.
4541                    cfg.feature_flags.per_object_congestion_control_mode =
4542                        PerObjectCongestionControlMode::ExecutionTimeEstimate(
4543                            ExecutionTimeEstimateParams {
4544                                target_utilization: 50,
4545                                allowed_txn_cost_overage_burst_limit_us: 500_000, // 500 ms
4546                                randomness_scalar: 20,
4547                                max_estimate_us: 1_500_000, // 1.5s
4548                                stored_observations_num_included_checkpoints: 10,
4549                                stored_observations_limit: 20,
4550                                stake_weighted_median_threshold: 3334,
4551                                default_none_duration_for_new_keys: true,
4552                                observations_chunk_size: None,
4553                            },
4554                        );
4555                }
4556                89 => {
4557                    cfg.feature_flags.dependency_linkage_error = true;
4558                    cfg.feature_flags.additional_multisig_checks = true;
4559                }
4560                90 => {
4561                    // 100x RGP
4562                    cfg.max_gas_price_rgp_factor_for_aborted_transactions = Some(100);
4563                    cfg.feature_flags.debug_fatal_on_move_invariant_violation = true;
4564                    cfg.feature_flags.additional_consensus_digest_indirect_state = true;
4565                    cfg.feature_flags.accept_passkey_in_multisig = true;
4566                    cfg.feature_flags.passkey_auth = true;
4567                    cfg.feature_flags.check_for_init_during_upgrade = true;
4568
4569                    // Enable Mysticeti fastpath handlers on testnet.
4570                    if chain != Chain::Mainnet {
4571                        cfg.feature_flags.mysticeti_fastpath = true;
4572                    }
4573                }
4574                91 => {
4575                    cfg.feature_flags.per_command_shared_object_transfer_rules = true;
4576                }
4577                92 => {
4578                    cfg.feature_flags.per_command_shared_object_transfer_rules = false;
4579                }
4580                93 => {
4581                    cfg.feature_flags
4582                        .consensus_checkpoint_signature_key_includes_digest = true;
4583                }
4584                94 => {
4585                    // Decrease stored observations limit 20->18 to stay within system object size limit.
4586                    cfg.feature_flags.per_object_congestion_control_mode =
4587                        PerObjectCongestionControlMode::ExecutionTimeEstimate(
4588                            ExecutionTimeEstimateParams {
4589                                target_utilization: 50,
4590                                allowed_txn_cost_overage_burst_limit_us: 500_000, // 500 ms
4591                                randomness_scalar: 20,
4592                                max_estimate_us: 1_500_000, // 1.5s
4593                                stored_observations_num_included_checkpoints: 10,
4594                                stored_observations_limit: 18,
4595                                stake_weighted_median_threshold: 3334,
4596                                default_none_duration_for_new_keys: true,
4597                                observations_chunk_size: None,
4598                            },
4599                        );
4600
4601                    // Enable party transfer on mainnet.
4602                    cfg.feature_flags.enable_party_transfer = true;
4603                }
4604                95 => {
4605                    cfg.type_name_id_base_cost = Some(52);
4606
4607                    // Reduce the frequency of checkpoint splitting under high TPS.
4608                    cfg.max_transactions_per_checkpoint = Some(20_000);
4609                }
4610                96 => {
4611                    // Enable artifacts digest in devnet.
4612                    if chain != Chain::Mainnet && chain != Chain::Testnet {
4613                        cfg.feature_flags
4614                            .include_checkpoint_artifacts_digest_in_summary = true;
4615                    }
4616                    cfg.feature_flags.correct_gas_payment_limit_check = true;
4617                    cfg.feature_flags.authority_capabilities_v2 = true;
4618                    cfg.feature_flags.use_mfp_txns_in_load_initial_object_debts = true;
4619                    cfg.feature_flags.cancel_for_failed_dkg_early = true;
4620                    cfg.feature_flags.enable_coin_registry = true;
4621
4622                    // Enable Mysticeti fastpath handlers on mainnet.
4623                    cfg.feature_flags.mysticeti_fastpath = true;
4624                }
4625                97 => {
4626                    cfg.feature_flags.additional_borrow_checks = true;
4627                }
4628                98 => {
4629                    cfg.event_emit_auth_stream_cost = Some(52);
4630                    cfg.feature_flags.better_loader_errors = true;
4631                    cfg.feature_flags.generate_df_type_layouts = true;
4632                }
4633                99 => {
4634                    cfg.feature_flags.use_new_commit_handler = true;
4635                }
4636                100 => {
4637                    cfg.feature_flags.private_generics_verifier_v2 = true;
4638                }
4639                101 => {
4640                    cfg.feature_flags.create_root_accumulator_object = true;
4641                    cfg.max_updates_per_settlement_txn = Some(100);
4642                    if chain != Chain::Mainnet {
4643                        cfg.feature_flags.enable_poseidon = true;
4644                    }
4645                }
4646                102 => {
4647                    // Enable execution time observation chunking and increase limit to 180.
4648                    // max_move_object_size is 250 KB, we've experientially determined that fits ~ 18 estimates
4649                    // so if we have 10 chunks, that's 2.5MB, < 8MB max_serialized_tx_effects_size_bytes_system_tx
4650                    cfg.feature_flags.per_object_congestion_control_mode =
4651                        PerObjectCongestionControlMode::ExecutionTimeEstimate(
4652                            ExecutionTimeEstimateParams {
4653                                target_utilization: 50,
4654                                allowed_txn_cost_overage_burst_limit_us: 500_000, // 500 ms
4655                                randomness_scalar: 20,
4656                                max_estimate_us: 1_500_000, // 1.5s
4657                                stored_observations_num_included_checkpoints: 10,
4658                                stored_observations_limit: 180,
4659                                stake_weighted_median_threshold: 3334,
4660                                default_none_duration_for_new_keys: true,
4661                                observations_chunk_size: Some(18),
4662                            },
4663                        );
4664                    cfg.feature_flags.deprecate_global_storage_ops = true;
4665                }
4666                103 => {}
4667                104 => {
4668                    cfg.translation_per_command_base_charge = Some(1);
4669                    cfg.translation_per_input_base_charge = Some(1);
4670                    cfg.translation_pure_input_per_byte_charge = Some(1);
4671                    cfg.translation_per_type_node_charge = Some(1);
4672                    cfg.translation_per_reference_node_charge = Some(1);
4673                    cfg.translation_per_linkage_entry_charge = Some(10);
4674                    cfg.gas_model_version = Some(11);
4675                    cfg.feature_flags.abstract_size_in_object_runtime = true;
4676                    cfg.feature_flags.object_runtime_charge_cache_load_gas = true;
4677                    cfg.dynamic_field_hash_type_and_key_cost_base = Some(52);
4678                    cfg.dynamic_field_add_child_object_cost_base = Some(52);
4679                    cfg.dynamic_field_add_child_object_value_cost_per_byte = Some(1);
4680                    cfg.dynamic_field_borrow_child_object_cost_base = Some(52);
4681                    cfg.dynamic_field_borrow_child_object_child_ref_cost_per_byte = Some(1);
4682                    cfg.dynamic_field_remove_child_object_cost_base = Some(52);
4683                    cfg.dynamic_field_remove_child_object_child_cost_per_byte = Some(1);
4684                    cfg.dynamic_field_has_child_object_cost_base = Some(52);
4685                    cfg.dynamic_field_has_child_object_with_ty_cost_base = Some(52);
4686                    cfg.feature_flags.enable_ptb_execution_v2 = true;
4687
4688                    cfg.poseidon_bn254_cost_base = Some(260);
4689
4690                    cfg.feature_flags.consensus_skip_gced_accept_votes = true;
4691
4692                    if chain != Chain::Mainnet {
4693                        cfg.feature_flags
4694                            .enable_nitro_attestation_all_nonzero_pcrs_parsing = true;
4695                    }
4696
4697                    cfg.feature_flags
4698                        .include_cancelled_randomness_txns_in_prologue = true;
4699                }
4700                105 => {
4701                    cfg.feature_flags.enable_multi_epoch_transaction_expiration = true;
4702                    cfg.feature_flags.disable_preconsensus_locking = true;
4703
4704                    if chain != Chain::Mainnet {
4705                        cfg.feature_flags
4706                            .enable_nitro_attestation_always_include_required_pcrs_parsing = true;
4707                    }
4708                }
4709                106 => {
4710                    // est. 100 bytes per object * 76 (storage_gas_price)
4711                    cfg.accumulator_object_storage_cost = Some(7600);
4712
4713                    if chain != Chain::Mainnet && chain != Chain::Testnet {
4714                        cfg.feature_flags.enable_accumulators = true;
4715                        cfg.feature_flags.enable_address_balance_gas_payments = true;
4716                        cfg.feature_flags.enable_authenticated_event_streams = true;
4717                        cfg.feature_flags.enable_object_funds_withdraw = true;
4718                    }
4719                }
4720                107 => {
4721                    cfg.feature_flags
4722                        .consensus_skip_gced_blocks_in_direct_finalization = true;
4723
4724                    // Trigger edge cases more often in integration tests.
4725                    if in_integration_test() {
4726                        cfg.consensus_gc_depth = Some(6);
4727                        cfg.consensus_max_num_transactions_in_block = Some(8);
4728                    }
4729                }
4730                108 => {
4731                    cfg.feature_flags.gas_rounding_halve_digits = true;
4732                    cfg.feature_flags.flexible_tx_context_positions = true;
4733                    cfg.feature_flags.disable_entry_point_signature_check = true;
4734
4735                    if chain != Chain::Mainnet {
4736                        cfg.feature_flags.address_aliases = true;
4737
4738                        cfg.feature_flags.enable_accumulators = true;
4739                        cfg.feature_flags.enable_address_balance_gas_payments = true;
4740                    }
4741
4742                    cfg.feature_flags.enable_poseidon = true;
4743                }
4744                109 => {
4745                    cfg.binary_variant_handles = Some(1024);
4746                    cfg.binary_variant_instantiation_handles = Some(1024);
4747                    cfg.feature_flags.restrict_hot_or_not_entry_functions = true;
4748                }
4749                110 => {
4750                    cfg.feature_flags
4751                        .enable_nitro_attestation_all_nonzero_pcrs_parsing = true;
4752                    cfg.feature_flags
4753                        .enable_nitro_attestation_always_include_required_pcrs_parsing = true;
4754                    if chain != Chain::Mainnet && chain != Chain::Testnet {
4755                        cfg.feature_flags.split_checkpoints_in_consensus_handler = true;
4756                    }
4757                    cfg.feature_flags.validate_zklogin_public_identifier = true;
4758                    cfg.feature_flags.fix_checkpoint_signature_mapping = true;
4759                    cfg.feature_flags
4760                        .consensus_always_accept_system_transactions = true;
4761                    if chain != Chain::Mainnet {
4762                        cfg.feature_flags.enable_object_funds_withdraw = true;
4763                    }
4764                }
4765                111 => {
4766                    cfg.feature_flags.validator_metadata_verify_v2 = true;
4767                }
4768                112 => {
4769                    cfg.group_ops_ristretto_decode_scalar_cost = Some(7);
4770                    cfg.group_ops_ristretto_decode_point_cost = Some(200);
4771                    cfg.group_ops_ristretto_scalar_add_cost = Some(10);
4772                    cfg.group_ops_ristretto_point_add_cost = Some(500);
4773                    cfg.group_ops_ristretto_scalar_sub_cost = Some(10);
4774                    cfg.group_ops_ristretto_point_sub_cost = Some(500);
4775                    cfg.group_ops_ristretto_scalar_mul_cost = Some(11);
4776                    cfg.group_ops_ristretto_point_mul_cost = Some(1200);
4777                    cfg.group_ops_ristretto_scalar_div_cost = Some(151);
4778                    cfg.group_ops_ristretto_point_div_cost = Some(2500);
4779
4780                    if chain != Chain::Mainnet && chain != Chain::Testnet {
4781                        cfg.feature_flags.enable_ristretto255_group_ops = true;
4782                    }
4783                }
4784                113 => {
4785                    cfg.feature_flags.address_balance_gas_check_rgp_at_signing = true;
4786                    if chain != Chain::Mainnet && chain != Chain::Testnet {
4787                        cfg.feature_flags.defer_unpaid_amplification = true;
4788                    }
4789                }
4790                114 => {
4791                    cfg.feature_flags.randomize_checkpoint_tx_limit_in_tests = true;
4792                    cfg.feature_flags.address_balance_gas_reject_gas_coin_arg = true;
4793                    if chain != Chain::Mainnet {
4794                        cfg.feature_flags.split_checkpoints_in_consensus_handler = true;
4795                        cfg.feature_flags.enable_authenticated_event_streams = true;
4796                        cfg.feature_flags
4797                            .include_checkpoint_artifacts_digest_in_summary = true;
4798                    }
4799                }
4800                115 => {
4801                    cfg.feature_flags.normalize_depth_formula = true;
4802                }
4803                116 => {
4804                    cfg.feature_flags.gasless_transaction_drop_safety = true;
4805                    cfg.feature_flags.address_aliases = true;
4806                    cfg.feature_flags.relax_valid_during_for_owned_inputs = true;
4807                    // Disabled while debugging
4808                    cfg.feature_flags.defer_unpaid_amplification = false;
4809                    cfg.feature_flags.enable_display_registry = true;
4810                }
4811                117 => {}
4812                118 => {
4813                    cfg.feature_flags.use_coin_party_owner = true;
4814                }
4815                119 => {
4816                    // Enable new VM.
4817                    cfg.execution_version = Some(4);
4818                    cfg.feature_flags.address_balance_gas_reject_gas_coin_arg = false;
4819                    cfg.feature_flags.merge_randomness_into_checkpoint = true;
4820                    if chain != Chain::Mainnet {
4821                        cfg.feature_flags.enable_gasless = true;
4822                        cfg.gasless_max_computation_units = Some(50_000);
4823                        cfg.gasless_allowed_token_types = Some(vec![]);
4824                        cfg.feature_flags.enable_coin_reservation_obj_refs = true;
4825                        cfg.feature_flags
4826                            .convert_withdrawal_compatibility_ptb_arguments = true;
4827                    }
4828                    cfg.gasless_max_unused_inputs = Some(1);
4829                    cfg.gasless_max_pure_input_bytes = Some(32);
4830                    if chain == Chain::Testnet {
4831                        cfg.gasless_allowed_token_types = Some(vec![(TESTNET_USDC.to_string(), 0)]);
4832                    }
4833                    cfg.transfer_receive_object_cost_per_byte = Some(1);
4834                    cfg.transfer_receive_object_type_cost_per_byte = Some(2);
4835                }
4836                120 => {
4837                    cfg.feature_flags.disallow_jump_orphans = true;
4838                }
4839                121 => {
4840                    // Re-enable unpaid amplification deferral protection (testnet + devnet)
4841                    if chain != Chain::Mainnet {
4842                        cfg.feature_flags.defer_unpaid_amplification = true;
4843                        cfg.gasless_max_tps = Some(50);
4844                    }
4845                    cfg.feature_flags
4846                        .early_return_receive_object_mismatched_type = true;
4847                }
4848                122 => {
4849                    // Enable unpaid amplification deferral on mainnet
4850                    cfg.feature_flags.defer_unpaid_amplification = true;
4851                    // Enable bulletproofs range proofs on devnet
4852                    cfg.verify_bulletproofs_ristretto255_base_cost = Some(30000);
4853                    cfg.verify_bulletproofs_ristretto255_cost_per_bit_and_commitment = Some(6500);
4854                    if chain != Chain::Mainnet && chain != Chain::Testnet {
4855                        cfg.feature_flags.enable_verify_bulletproofs_ristretto255 = true;
4856                    }
4857                    cfg.feature_flags.gasless_verify_remaining_balance = true;
4858                    cfg.include_special_package_amendments = match chain {
4859                        Chain::Mainnet => Some(MAINNET_LINKAGE_AMENDMENTS.clone()),
4860                        Chain::Testnet => Some(TESTNET_LINKAGE_AMENDMENTS.clone()),
4861                        Chain::Unknown => None,
4862                    };
4863                    cfg.gasless_max_tx_size_bytes = Some(16 * 1024);
4864                    cfg.gasless_max_tps = Some(300);
4865                    cfg.gasless_max_computation_units = Some(5_000);
4866                }
4867                // Use this template when making changes:
4868                //
4869                //     // modify an existing constant.
4870                //     move_binary_format_version: Some(7),
4871                //
4872                //     // Add a new constant (which is set to None in prior versions).
4873                //     new_constant: Some(new_value),
4874                //
4875                //     // Remove a constant (ensure that it is never accessed during this version).
4876                //     max_move_object_size: None,
4877                _ => panic!("unsupported version {:?}", version),
4878            }
4879        }
4880
4881        cfg
4882    }
4883
4884    pub fn apply_seeded_test_overrides(&mut self, seed: &[u8; 32]) {
4885        if !self.feature_flags.randomize_checkpoint_tx_limit_in_tests
4886            || !self.feature_flags.split_checkpoints_in_consensus_handler
4887        {
4888            return;
4889        }
4890
4891        if !mysten_common::in_test_configuration() {
4892            return;
4893        }
4894
4895        use rand::{Rng, SeedableRng, rngs::StdRng};
4896        let mut rng = StdRng::from_seed(*seed);
4897        let max_txns = rng.gen_range(10..=100u64);
4898        info!("seeded test override: max_transactions_per_checkpoint = {max_txns}");
4899        self.max_transactions_per_checkpoint = Some(max_txns);
4900    }
4901
4902    // Extract the bytecode verifier config from this protocol config.
4903    // If used during signing, `signing_limits` should be set.
4904    // The third limit configures`sanity_check_with_regex_reference_safety`,
4905    // which runs the new regex-based reference safety check to check that it is strictly more
4906    // permissive than the current implementation.
4907    pub fn verifier_config(&self, signing_limits: Option<(usize, usize, usize)>) -> VerifierConfig {
4908        let (
4909            max_back_edges_per_function,
4910            max_back_edges_per_module,
4911            sanity_check_with_regex_reference_safety,
4912        ) = if let Some((
4913            max_back_edges_per_function,
4914            max_back_edges_per_module,
4915            sanity_check_with_regex_reference_safety,
4916        )) = signing_limits
4917        {
4918            (
4919                Some(max_back_edges_per_function),
4920                Some(max_back_edges_per_module),
4921                Some(sanity_check_with_regex_reference_safety),
4922            )
4923        } else {
4924            (None, None, None)
4925        };
4926
4927        let additional_borrow_checks = if signing_limits.is_some() {
4928            // always turn on additional borrow checks during signing
4929            true
4930        } else {
4931            self.additional_borrow_checks()
4932        };
4933        let deprecate_global_storage_ops = if signing_limits.is_some() {
4934            // always turn on additional vector borrow checks during signing
4935            true
4936        } else {
4937            self.deprecate_global_storage_ops()
4938        };
4939
4940        VerifierConfig {
4941            max_loop_depth: Some(self.max_loop_depth() as usize),
4942            max_generic_instantiation_length: Some(self.max_generic_instantiation_length() as usize),
4943            max_function_parameters: Some(self.max_function_parameters() as usize),
4944            max_basic_blocks: Some(self.max_basic_blocks() as usize),
4945            max_value_stack_size: self.max_value_stack_size() as usize,
4946            max_type_nodes: Some(self.max_type_nodes() as usize),
4947            max_push_size: Some(self.max_push_size() as usize),
4948            max_dependency_depth: Some(self.max_dependency_depth() as usize),
4949            max_fields_in_struct: Some(self.max_fields_in_struct() as usize),
4950            max_function_definitions: Some(self.max_function_definitions() as usize),
4951            max_data_definitions: Some(self.max_struct_definitions() as usize),
4952            max_constant_vector_len: Some(self.max_move_vector_len()),
4953            max_back_edges_per_function,
4954            max_back_edges_per_module,
4955            max_basic_blocks_in_script: None,
4956            max_identifier_len: self.max_move_identifier_len_as_option(), // Before protocol version 9, there was no limit
4957            disallow_self_identifier: self.feature_flags.disallow_self_identifier,
4958            allow_receiving_object_id: self.allow_receiving_object_id(),
4959            reject_mutable_random_on_entry_functions: self
4960                .reject_mutable_random_on_entry_functions(),
4961            bytecode_version: self.move_binary_format_version(),
4962            max_variants_in_enum: self.max_move_enum_variants_as_option(),
4963            additional_borrow_checks,
4964            better_loader_errors: self.better_loader_errors(),
4965            private_generics_verifier_v2: self.private_generics_verifier_v2(),
4966            sanity_check_with_regex_reference_safety: sanity_check_with_regex_reference_safety
4967                .map(|limit| limit as u128),
4968            deprecate_global_storage_ops,
4969            disable_entry_point_signature_check: self.disable_entry_point_signature_check(),
4970            switch_to_regex_reference_safety: false,
4971            disallow_jump_orphans: self.disallow_jump_orphans(),
4972        }
4973    }
4974
4975    pub fn binary_config(
4976        &self,
4977        override_deprecate_global_storage_ops_during_deserialization: Option<bool>,
4978    ) -> BinaryConfig {
4979        let deprecate_global_storage_ops =
4980            override_deprecate_global_storage_ops_during_deserialization
4981                .unwrap_or_else(|| self.deprecate_global_storage_ops());
4982        BinaryConfig::new(
4983            self.move_binary_format_version(),
4984            self.min_move_binary_format_version_as_option()
4985                .unwrap_or(VERSION_1),
4986            self.no_extraneous_module_bytes(),
4987            deprecate_global_storage_ops,
4988            TableConfig {
4989                module_handles: self.binary_module_handles_as_option().unwrap_or(u16::MAX),
4990                datatype_handles: self.binary_struct_handles_as_option().unwrap_or(u16::MAX),
4991                function_handles: self.binary_function_handles_as_option().unwrap_or(u16::MAX),
4992                function_instantiations: self
4993                    .binary_function_instantiations_as_option()
4994                    .unwrap_or(u16::MAX),
4995                signatures: self.binary_signatures_as_option().unwrap_or(u16::MAX),
4996                constant_pool: self.binary_constant_pool_as_option().unwrap_or(u16::MAX),
4997                identifiers: self.binary_identifiers_as_option().unwrap_or(u16::MAX),
4998                address_identifiers: self
4999                    .binary_address_identifiers_as_option()
5000                    .unwrap_or(u16::MAX),
5001                struct_defs: self.binary_struct_defs_as_option().unwrap_or(u16::MAX),
5002                struct_def_instantiations: self
5003                    .binary_struct_def_instantiations_as_option()
5004                    .unwrap_or(u16::MAX),
5005                function_defs: self.binary_function_defs_as_option().unwrap_or(u16::MAX),
5006                field_handles: self.binary_field_handles_as_option().unwrap_or(u16::MAX),
5007                field_instantiations: self
5008                    .binary_field_instantiations_as_option()
5009                    .unwrap_or(u16::MAX),
5010                friend_decls: self.binary_friend_decls_as_option().unwrap_or(u16::MAX),
5011                enum_defs: self.binary_enum_defs_as_option().unwrap_or(u16::MAX),
5012                enum_def_instantiations: self
5013                    .binary_enum_def_instantiations_as_option()
5014                    .unwrap_or(u16::MAX),
5015                variant_handles: self.binary_variant_handles_as_option().unwrap_or(u16::MAX),
5016                variant_instantiation_handles: self
5017                    .binary_variant_instantiation_handles_as_option()
5018                    .unwrap_or(u16::MAX),
5019            },
5020        )
5021    }
5022
5023    /// Override one or more settings in the config, for testing.
5024    /// This must be called at the beginning of the test, before get_for_(min|max)_version is
5025    /// called, since those functions cache their return value.
5026    #[cfg(not(msim))]
5027    pub fn apply_overrides_for_testing(
5028        override_fn: impl Fn(ProtocolVersion, Self) -> Self + Send + Sync + 'static,
5029    ) -> OverrideGuard {
5030        let mut cur = CONFIG_OVERRIDE.lock().unwrap();
5031        assert!(cur.is_none(), "config override already present");
5032        *cur = Some(Box::new(override_fn));
5033        OverrideGuard
5034    }
5035
5036    /// Override one or more settings in the config, for testing.
5037    /// This must be called at the beginning of the test, before get_for_(min|max)_version is
5038    /// called, since those functions cache their return value.
5039    #[cfg(msim)]
5040    pub fn apply_overrides_for_testing(
5041        override_fn: impl Fn(ProtocolVersion, Self) -> Self + Send + 'static,
5042    ) -> OverrideGuard {
5043        CONFIG_OVERRIDE.with(|ovr| {
5044            let mut cur = ovr.borrow_mut();
5045            assert!(cur.is_none(), "config override already present");
5046            *cur = Some(Box::new(override_fn));
5047            OverrideGuard
5048        })
5049    }
5050
5051    #[cfg(not(msim))]
5052    fn apply_config_override(version: ProtocolVersion, mut ret: Self) -> Self {
5053        if let Some(override_fn) = CONFIG_OVERRIDE.lock().unwrap().as_ref() {
5054            warn!(
5055                "overriding ProtocolConfig settings with custom settings (you should not see this log outside of tests)"
5056            );
5057            ret = override_fn(version, ret);
5058        }
5059        ret
5060    }
5061
5062    #[cfg(msim)]
5063    fn apply_config_override(version: ProtocolVersion, ret: Self) -> Self {
5064        CONFIG_OVERRIDE.with(|ovr| {
5065            if let Some(override_fn) = &*ovr.borrow() {
5066                warn!(
5067                    "overriding ProtocolConfig settings with custom settings (you should not see this log outside of tests)"
5068                );
5069                override_fn(version, ret)
5070            } else {
5071                ret
5072            }
5073        })
5074    }
5075}
5076
5077// Setters for tests.
5078// This is only needed for feature_flags. Please suffix each setter with `_for_testing`.
5079// Non-feature_flags should already have test setters defined through macros.
5080impl ProtocolConfig {
5081    pub fn set_advance_to_highest_supported_protocol_version_for_testing(&mut self, val: bool) {
5082        self.feature_flags
5083            .advance_to_highest_supported_protocol_version = val
5084    }
5085    pub fn set_commit_root_state_digest_supported_for_testing(&mut self, val: bool) {
5086        self.feature_flags.commit_root_state_digest = val
5087    }
5088    pub fn set_zklogin_auth_for_testing(&mut self, val: bool) {
5089        self.feature_flags.zklogin_auth = val
5090    }
5091    pub fn set_enable_jwk_consensus_updates_for_testing(&mut self, val: bool) {
5092        self.feature_flags.enable_jwk_consensus_updates = val
5093    }
5094    pub fn set_random_beacon_for_testing(&mut self, val: bool) {
5095        self.feature_flags.random_beacon = val
5096    }
5097
5098    pub fn set_upgraded_multisig_for_testing(&mut self, val: bool) {
5099        self.feature_flags.upgraded_multisig_supported = val
5100    }
5101    pub fn set_accept_zklogin_in_multisig_for_testing(&mut self, val: bool) {
5102        self.feature_flags.accept_zklogin_in_multisig = val
5103    }
5104
5105    pub fn set_shared_object_deletion_for_testing(&mut self, val: bool) {
5106        self.feature_flags.shared_object_deletion = val;
5107    }
5108
5109    pub fn set_narwhal_new_leader_election_schedule_for_testing(&mut self, val: bool) {
5110        self.feature_flags.narwhal_new_leader_election_schedule = val;
5111    }
5112
5113    pub fn set_receive_object_for_testing(&mut self, val: bool) {
5114        self.feature_flags.receive_objects = val
5115    }
5116    pub fn set_narwhal_certificate_v2_for_testing(&mut self, val: bool) {
5117        self.feature_flags.narwhal_certificate_v2 = val
5118    }
5119    pub fn set_verify_legacy_zklogin_address_for_testing(&mut self, val: bool) {
5120        self.feature_flags.verify_legacy_zklogin_address = val
5121    }
5122
5123    pub fn set_per_object_congestion_control_mode_for_testing(
5124        &mut self,
5125        val: PerObjectCongestionControlMode,
5126    ) {
5127        self.feature_flags.per_object_congestion_control_mode = val;
5128    }
5129
5130    pub fn set_consensus_choice_for_testing(&mut self, val: ConsensusChoice) {
5131        self.feature_flags.consensus_choice = val;
5132    }
5133
5134    pub fn set_consensus_network_for_testing(&mut self, val: ConsensusNetwork) {
5135        self.feature_flags.consensus_network = val;
5136    }
5137
5138    pub fn set_zklogin_max_epoch_upper_bound_delta_for_testing(&mut self, val: Option<u64>) {
5139        self.feature_flags.zklogin_max_epoch_upper_bound_delta = val
5140    }
5141
5142    pub fn set_disable_bridge_for_testing(&mut self) {
5143        self.feature_flags.bridge = false
5144    }
5145
5146    pub fn set_mysticeti_num_leaders_per_round_for_testing(&mut self, val: Option<usize>) {
5147        self.feature_flags.mysticeti_num_leaders_per_round = val;
5148    }
5149
5150    pub fn set_enable_soft_bundle_for_testing(&mut self, val: bool) {
5151        self.feature_flags.soft_bundle = val;
5152    }
5153
5154    pub fn set_passkey_auth_for_testing(&mut self, val: bool) {
5155        self.feature_flags.passkey_auth = val
5156    }
5157
5158    pub fn set_enable_party_transfer_for_testing(&mut self, val: bool) {
5159        self.feature_flags.enable_party_transfer = val
5160    }
5161
5162    pub fn set_consensus_distributed_vote_scoring_strategy_for_testing(&mut self, val: bool) {
5163        self.feature_flags
5164            .consensus_distributed_vote_scoring_strategy = val;
5165    }
5166
5167    pub fn set_consensus_round_prober_for_testing(&mut self, val: bool) {
5168        self.feature_flags.consensus_round_prober = val;
5169    }
5170
5171    pub fn set_disallow_new_modules_in_deps_only_packages_for_testing(&mut self, val: bool) {
5172        self.feature_flags
5173            .disallow_new_modules_in_deps_only_packages = val;
5174    }
5175
5176    pub fn set_correct_gas_payment_limit_check_for_testing(&mut self, val: bool) {
5177        self.feature_flags.correct_gas_payment_limit_check = val;
5178    }
5179
5180    pub fn set_address_aliases_for_testing(&mut self, val: bool) {
5181        self.feature_flags.address_aliases = val;
5182    }
5183
5184    pub fn set_consensus_round_prober_probe_accepted_rounds(&mut self, val: bool) {
5185        self.feature_flags
5186            .consensus_round_prober_probe_accepted_rounds = val;
5187    }
5188
5189    pub fn set_mysticeti_fastpath_for_testing(&mut self, val: bool) {
5190        self.feature_flags.mysticeti_fastpath = val;
5191    }
5192
5193    pub fn set_accept_passkey_in_multisig_for_testing(&mut self, val: bool) {
5194        self.feature_flags.accept_passkey_in_multisig = val;
5195    }
5196
5197    pub fn set_consensus_batched_block_sync_for_testing(&mut self, val: bool) {
5198        self.feature_flags.consensus_batched_block_sync = val;
5199    }
5200
5201    pub fn set_record_time_estimate_processed_for_testing(&mut self, val: bool) {
5202        self.feature_flags.record_time_estimate_processed = val;
5203    }
5204
5205    pub fn set_prepend_prologue_tx_in_consensus_commit_in_checkpoints_for_testing(
5206        &mut self,
5207        val: bool,
5208    ) {
5209        self.feature_flags
5210            .prepend_prologue_tx_in_consensus_commit_in_checkpoints = val;
5211    }
5212
5213    pub fn enable_accumulators_for_testing(&mut self) {
5214        self.feature_flags.enable_accumulators = true;
5215    }
5216
5217    pub fn disable_accumulators_for_testing(&mut self) {
5218        self.feature_flags.enable_accumulators = false;
5219        self.feature_flags.enable_address_balance_gas_payments = false;
5220    }
5221
5222    pub fn enable_coin_reservation_for_testing(&mut self) {
5223        self.feature_flags.enable_coin_reservation_obj_refs = true;
5224        self.feature_flags
5225            .convert_withdrawal_compatibility_ptb_arguments = true;
5226        // Ensure execution_version >= 4 so new_vm_enabled() returns true,
5227        // which is required for enable_coin_reservation_obj_refs() to return true.
5228        self.execution_version = Some(self.execution_version.map_or(4, |v| v.max(4)));
5229    }
5230
5231    pub fn disable_coin_reservation_for_testing(&mut self) {
5232        self.feature_flags.enable_coin_reservation_obj_refs = false;
5233        self.feature_flags
5234            .convert_withdrawal_compatibility_ptb_arguments = false;
5235    }
5236
5237    pub fn create_root_accumulator_object_for_testing(&mut self) {
5238        self.feature_flags.create_root_accumulator_object = true;
5239    }
5240
5241    pub fn disable_create_root_accumulator_object_for_testing(&mut self) {
5242        self.feature_flags.create_root_accumulator_object = false;
5243    }
5244
5245    pub fn enable_address_balance_gas_payments_for_testing(&mut self) {
5246        self.feature_flags.enable_accumulators = true;
5247        self.feature_flags.allow_private_accumulator_entrypoints = true;
5248        self.feature_flags.enable_address_balance_gas_payments = true;
5249        self.feature_flags.address_balance_gas_check_rgp_at_signing = true;
5250        self.feature_flags.address_balance_gas_reject_gas_coin_arg = false;
5251        self.execution_version = Some(self.execution_version.map_or(4, |v| v.max(4)))
5252    }
5253
5254    pub fn disable_address_balance_gas_payments_for_testing(&mut self) {
5255        self.feature_flags.enable_address_balance_gas_payments = false;
5256    }
5257
5258    pub fn enable_gasless_for_testing(&mut self) {
5259        self.enable_address_balance_gas_payments_for_testing();
5260        self.feature_flags.enable_gasless = true;
5261        self.feature_flags.gasless_verify_remaining_balance = true;
5262        self.gasless_max_computation_units = Some(5_000);
5263        self.gasless_allowed_token_types = Some(vec![]);
5264        self.gasless_max_tps = Some(1000);
5265        self.gasless_max_tx_size_bytes = Some(16 * 1024);
5266    }
5267
5268    pub fn disable_gasless_for_testing(&mut self) {
5269        self.feature_flags.enable_gasless = false;
5270        self.gasless_max_computation_units = None;
5271        self.gasless_allowed_token_types = None;
5272    }
5273
5274    pub fn set_gasless_allowed_token_types_for_testing(&mut self, types: Vec<(String, u64)>) {
5275        self.gasless_allowed_token_types = Some(types);
5276    }
5277
5278    pub fn enable_multi_epoch_transaction_expiration_for_testing(&mut self) {
5279        self.feature_flags.enable_multi_epoch_transaction_expiration = true;
5280    }
5281
5282    pub fn enable_authenticated_event_streams_for_testing(&mut self) {
5283        self.enable_accumulators_for_testing();
5284        self.feature_flags.enable_authenticated_event_streams = true;
5285        self.feature_flags
5286            .include_checkpoint_artifacts_digest_in_summary = true;
5287        self.feature_flags.split_checkpoints_in_consensus_handler = true;
5288    }
5289
5290    pub fn disable_authenticated_event_streams_for_testing(&mut self) {
5291        self.feature_flags.enable_authenticated_event_streams = false;
5292    }
5293
5294    pub fn disable_randomize_checkpoint_tx_limit_for_testing(&mut self) {
5295        self.feature_flags.randomize_checkpoint_tx_limit_in_tests = false;
5296    }
5297
5298    pub fn enable_non_exclusive_writes_for_testing(&mut self) {
5299        self.feature_flags.enable_non_exclusive_writes = true;
5300    }
5301
5302    pub fn set_relax_valid_during_for_owned_inputs_for_testing(&mut self, val: bool) {
5303        self.feature_flags.relax_valid_during_for_owned_inputs = val;
5304    }
5305
5306    pub fn set_ignore_execution_time_observations_after_certs_closed_for_testing(
5307        &mut self,
5308        val: bool,
5309    ) {
5310        self.feature_flags
5311            .ignore_execution_time_observations_after_certs_closed = val;
5312    }
5313
5314    pub fn set_consensus_checkpoint_signature_key_includes_digest_for_testing(
5315        &mut self,
5316        val: bool,
5317    ) {
5318        self.feature_flags
5319            .consensus_checkpoint_signature_key_includes_digest = val;
5320    }
5321
5322    pub fn set_cancel_for_failed_dkg_early_for_testing(&mut self, val: bool) {
5323        self.feature_flags.cancel_for_failed_dkg_early = val;
5324    }
5325
5326    pub fn set_use_mfp_txns_in_load_initial_object_debts_for_testing(&mut self, val: bool) {
5327        self.feature_flags.use_mfp_txns_in_load_initial_object_debts = val;
5328    }
5329
5330    pub fn set_authority_capabilities_v2_for_testing(&mut self, val: bool) {
5331        self.feature_flags.authority_capabilities_v2 = val;
5332    }
5333
5334    pub fn allow_references_in_ptbs_for_testing(&mut self) {
5335        self.feature_flags.allow_references_in_ptbs = true;
5336    }
5337
5338    pub fn set_consensus_skip_gced_accept_votes_for_testing(&mut self, val: bool) {
5339        self.feature_flags.consensus_skip_gced_accept_votes = val;
5340    }
5341
5342    pub fn set_enable_object_funds_withdraw_for_testing(&mut self, val: bool) {
5343        self.feature_flags.enable_object_funds_withdraw = val;
5344    }
5345
5346    pub fn set_split_checkpoints_in_consensus_handler_for_testing(&mut self, val: bool) {
5347        self.feature_flags.split_checkpoints_in_consensus_handler = val;
5348    }
5349
5350    pub fn set_merge_randomness_into_checkpoint_for_testing(&mut self, val: bool) {
5351        self.feature_flags.merge_randomness_into_checkpoint = val;
5352    }
5353}
5354
5355#[cfg(not(msim))]
5356type OverrideFn = dyn Fn(ProtocolVersion, ProtocolConfig) -> ProtocolConfig + Send + Sync;
5357
5358#[cfg(not(msim))]
5359static CONFIG_OVERRIDE: Mutex<Option<Box<OverrideFn>>> = Mutex::new(None);
5360
5361#[cfg(msim)]
5362type OverrideFn = dyn Fn(ProtocolVersion, ProtocolConfig) -> ProtocolConfig + Send;
5363
5364#[cfg(msim)]
5365thread_local! {
5366    static CONFIG_OVERRIDE: RefCell<Option<Box<OverrideFn>>> = RefCell::new(None);
5367}
5368
5369#[must_use]
5370pub struct OverrideGuard;
5371
5372#[cfg(not(msim))]
5373impl Drop for OverrideGuard {
5374    fn drop(&mut self) {
5375        info!("restoring override fn");
5376        *CONFIG_OVERRIDE.lock().unwrap() = None;
5377    }
5378}
5379
5380#[cfg(msim)]
5381impl Drop for OverrideGuard {
5382    fn drop(&mut self) {
5383        info!("restoring override fn");
5384        CONFIG_OVERRIDE.with(|ovr| {
5385            *ovr.borrow_mut() = None;
5386        });
5387    }
5388}
5389
5390/// Defines which limit got crossed.
5391/// The value which crossed the limit and value of the limit crossed are embedded
5392#[derive(PartialEq, Eq)]
5393pub enum LimitThresholdCrossed {
5394    None,
5395    Soft(u128, u128),
5396    Hard(u128, u128),
5397}
5398
5399/// Convenience function for comparing limit ranges
5400/// V::MAX must be at >= U::MAX and T::MAX
5401pub fn check_limit_in_range<T: Into<V>, U: Into<V>, V: PartialOrd + Into<u128>>(
5402    x: T,
5403    soft_limit: U,
5404    hard_limit: V,
5405) -> LimitThresholdCrossed {
5406    let x: V = x.into();
5407    let soft_limit: V = soft_limit.into();
5408
5409    debug_assert!(soft_limit <= hard_limit);
5410
5411    // It is important to preserve this comparison order because if soft_limit == hard_limit
5412    // we want LimitThresholdCrossed::Hard
5413    if x >= hard_limit {
5414        LimitThresholdCrossed::Hard(x.into(), hard_limit.into())
5415    } else if x < soft_limit {
5416        LimitThresholdCrossed::None
5417    } else {
5418        LimitThresholdCrossed::Soft(x.into(), soft_limit.into())
5419    }
5420}
5421
5422#[macro_export]
5423macro_rules! check_limit {
5424    ($x:expr, $hard:expr) => {
5425        check_limit!($x, $hard, $hard)
5426    };
5427    ($x:expr, $soft:expr, $hard:expr) => {
5428        check_limit_in_range($x as u64, $soft, $hard)
5429    };
5430}
5431
5432/// Used to check which limits were crossed if the TX is metered (not system tx)
5433/// Args are: is_metered, value_to_check, metered_limit, unmetered_limit
5434/// metered_limit is always less than or equal to unmetered_hard_limit
5435#[macro_export]
5436macro_rules! check_limit_by_meter {
5437    ($is_metered:expr, $x:expr, $metered_limit:expr, $unmetered_hard_limit:expr, $metric:expr) => {{
5438        // If this is metered, we use the metered_limit limit as the upper bound
5439        let (h, metered_str) = if $is_metered {
5440            ($metered_limit, "metered")
5441        } else {
5442            // Unmetered gets more headroom
5443            ($unmetered_hard_limit, "unmetered")
5444        };
5445        use sui_protocol_config::check_limit_in_range;
5446        let result = check_limit_in_range($x as u64, $metered_limit, h);
5447        match result {
5448            LimitThresholdCrossed::None => {}
5449            LimitThresholdCrossed::Soft(_, _) => {
5450                $metric.with_label_values(&[metered_str, "soft"]).inc();
5451            }
5452            LimitThresholdCrossed::Hard(_, _) => {
5453                $metric.with_label_values(&[metered_str, "hard"]).inc();
5454            }
5455        };
5456        result
5457    }};
5458}
5459
5460// Amendments tables
5461
5462pub type Amendments = BTreeMap<AccountAddress, BTreeMap<AccountAddress, AccountAddress>>;
5463
5464static MAINNET_LINKAGE_AMENDMENTS: LazyLock<Arc<Amendments>> =
5465    LazyLock::new(|| parse_amendments(include_str!("mainnet_amendments.json")));
5466
5467static TESTNET_LINKAGE_AMENDMENTS: LazyLock<Arc<Amendments>> =
5468    LazyLock::new(|| parse_amendments(include_str!("testnet_amendments.json")));
5469
5470fn parse_amendments(json: &str) -> Arc<Amendments> {
5471    #[derive(serde::Deserialize)]
5472    struct AmendmentEntry {
5473        root: String,
5474        deps: Vec<DepEntry>,
5475    }
5476
5477    #[derive(serde::Deserialize)]
5478    struct DepEntry {
5479        original_id: String,
5480        version_id: String,
5481    }
5482
5483    let entries: Vec<AmendmentEntry> =
5484        serde_json::from_str(json).expect("Failed to parse amendments JSON");
5485    let mut amendments = BTreeMap::new();
5486    for entry in entries {
5487        let root_id = AccountAddress::from_hex_literal(&entry.root).unwrap();
5488        let mut dep_ids = BTreeMap::new();
5489        for dep in entry.deps {
5490            let orig_id = AccountAddress::from_hex_literal(&dep.original_id).unwrap();
5491            let upgraded_id = AccountAddress::from_hex_literal(&dep.version_id).unwrap();
5492            assert!(
5493                dep_ids.insert(orig_id, upgraded_id).is_none(),
5494                "Duplicate original ID in amendments table"
5495            );
5496        }
5497        assert!(
5498            amendments.insert(root_id, dep_ids).is_none(),
5499            "Duplicate root ID in amendments table"
5500        );
5501    }
5502    Arc::new(amendments)
5503}
5504
5505#[cfg(all(test, not(msim)))]
5506mod test {
5507    use insta::assert_yaml_snapshot;
5508
5509    use super::*;
5510
5511    #[test]
5512    fn snapshot_tests() {
5513        println!("\n============================================================================");
5514        println!("!                                                                          !");
5515        println!("! IMPORTANT: never update snapshots from this test. only add new versions! !");
5516        println!("!                                                                          !");
5517        println!("============================================================================\n");
5518        for chain_id in &[Chain::Unknown, Chain::Mainnet, Chain::Testnet] {
5519            // make Chain::Unknown snapshots compatible with pre-chain-id snapshots so that we
5520            // don't break the release-time compatibility tests. Once Chain Id configs have been
5521            // released everywhere, we can remove this and only test Mainnet and Testnet
5522            let chain_str = match chain_id {
5523                Chain::Unknown => "".to_string(),
5524                _ => format!("{:?}_", chain_id),
5525            };
5526            for i in MIN_PROTOCOL_VERSION..=MAX_PROTOCOL_VERSION {
5527                let cur = ProtocolVersion::new(i);
5528                assert_yaml_snapshot!(
5529                    format!("{}version_{}", chain_str, cur.as_u64()),
5530                    ProtocolConfig::get_for_version(cur, *chain_id)
5531                );
5532            }
5533        }
5534    }
5535
5536    #[test]
5537    fn test_getters() {
5538        let prot: ProtocolConfig =
5539            ProtocolConfig::get_for_version(ProtocolVersion::new(1), Chain::Unknown);
5540        assert_eq!(
5541            prot.max_arguments(),
5542            prot.max_arguments_as_option().unwrap()
5543        );
5544    }
5545
5546    #[test]
5547    fn test_setters() {
5548        let mut prot: ProtocolConfig =
5549            ProtocolConfig::get_for_version(ProtocolVersion::new(1), Chain::Unknown);
5550        prot.set_max_arguments_for_testing(123);
5551        assert_eq!(prot.max_arguments(), 123);
5552
5553        prot.set_max_arguments_from_str_for_testing("321".to_string());
5554        assert_eq!(prot.max_arguments(), 321);
5555
5556        prot.disable_max_arguments_for_testing();
5557        assert_eq!(prot.max_arguments_as_option(), None);
5558
5559        prot.set_attr_for_testing("max_arguments".to_string(), "456".to_string());
5560        assert_eq!(prot.max_arguments(), 456);
5561    }
5562
5563    #[test]
5564    fn test_get_for_version_if_supported_applies_test_overrides() {
5565        let before =
5566            ProtocolConfig::get_for_version_if_supported(ProtocolVersion::new(1), Chain::Unknown)
5567                .unwrap();
5568
5569        assert!(!before.enable_coin_reservation_obj_refs());
5570
5571        let _guard = ProtocolConfig::apply_overrides_for_testing(|_, mut cfg| {
5572            cfg.enable_coin_reservation_for_testing();
5573            cfg
5574        });
5575
5576        let after =
5577            ProtocolConfig::get_for_version_if_supported(ProtocolVersion::new(1), Chain::Unknown)
5578                .unwrap();
5579
5580        assert!(after.enable_coin_reservation_obj_refs());
5581    }
5582
5583    #[test]
5584    #[should_panic(expected = "unsupported version")]
5585    fn max_version_test() {
5586        // When this does not panic, version higher than MAX_PROTOCOL_VERSION exists.
5587        // To fix, bump MAX_PROTOCOL_VERSION or disable this check for the version.
5588        let _ = ProtocolConfig::get_for_version_impl(
5589            ProtocolVersion::new(MAX_PROTOCOL_VERSION + 1),
5590            Chain::Unknown,
5591        );
5592    }
5593
5594    #[test]
5595    fn lookup_by_string_test() {
5596        let prot: ProtocolConfig =
5597            ProtocolConfig::get_for_version(ProtocolVersion::new(1), Chain::Unknown);
5598        // Does not exist
5599        assert!(prot.lookup_attr("some random string".to_string()).is_none());
5600
5601        assert!(
5602            prot.lookup_attr("max_arguments".to_string())
5603                == Some(ProtocolConfigValue::u32(prot.max_arguments())),
5604        );
5605
5606        // We didnt have this in version 1
5607        assert!(
5608            prot.lookup_attr("max_move_identifier_len".to_string())
5609                .is_none()
5610        );
5611
5612        // But we did in version 9
5613        let prot: ProtocolConfig =
5614            ProtocolConfig::get_for_version(ProtocolVersion::new(9), Chain::Unknown);
5615        assert!(
5616            prot.lookup_attr("max_move_identifier_len".to_string())
5617                == Some(ProtocolConfigValue::u64(prot.max_move_identifier_len()))
5618        );
5619
5620        let prot: ProtocolConfig =
5621            ProtocolConfig::get_for_version(ProtocolVersion::new(1), Chain::Unknown);
5622        // We didnt have this in version 1
5623        assert!(
5624            prot.attr_map()
5625                .get("max_move_identifier_len")
5626                .unwrap()
5627                .is_none()
5628        );
5629        // We had this in version 1
5630        assert!(
5631            prot.attr_map().get("max_arguments").unwrap()
5632                == &Some(ProtocolConfigValue::u32(prot.max_arguments()))
5633        );
5634
5635        // Check feature flags
5636        let prot: ProtocolConfig =
5637            ProtocolConfig::get_for_version(ProtocolVersion::new(1), Chain::Unknown);
5638        // Does not exist
5639        assert!(
5640            prot.feature_flags
5641                .lookup_attr("some random string".to_owned())
5642                .is_none()
5643        );
5644        assert!(
5645            !prot
5646                .feature_flags
5647                .attr_map()
5648                .contains_key("some random string")
5649        );
5650
5651        // Was false in v1
5652        assert!(
5653            prot.feature_flags
5654                .lookup_attr("package_upgrades".to_owned())
5655                == Some(false)
5656        );
5657        assert!(
5658            prot.feature_flags
5659                .attr_map()
5660                .get("package_upgrades")
5661                .unwrap()
5662                == &false
5663        );
5664        let prot: ProtocolConfig =
5665            ProtocolConfig::get_for_version(ProtocolVersion::new(4), Chain::Unknown);
5666        // Was true from v3 and up
5667        assert!(
5668            prot.feature_flags
5669                .lookup_attr("package_upgrades".to_owned())
5670                == Some(true)
5671        );
5672        assert!(
5673            prot.feature_flags
5674                .attr_map()
5675                .get("package_upgrades")
5676                .unwrap()
5677                == &true
5678        );
5679    }
5680
5681    #[test]
5682    fn limit_range_fn_test() {
5683        let low = 100u32;
5684        let high = 10000u64;
5685
5686        assert!(check_limit!(1u8, low, high) == LimitThresholdCrossed::None);
5687        assert!(matches!(
5688            check_limit!(255u16, low, high),
5689            LimitThresholdCrossed::Soft(255u128, 100)
5690        ));
5691        // This wont compile because lossy
5692        //assert!(check_limit!(100000000u128, low, high) == LimitThresholdCrossed::None);
5693        // This wont compile because lossy
5694        //assert!(check_limit!(100000000usize, low, high) == LimitThresholdCrossed::None);
5695
5696        assert!(matches!(
5697            check_limit!(2550000u64, low, high),
5698            LimitThresholdCrossed::Hard(2550000, 10000)
5699        ));
5700
5701        assert!(matches!(
5702            check_limit!(2550000u64, high, high),
5703            LimitThresholdCrossed::Hard(2550000, 10000)
5704        ));
5705
5706        assert!(matches!(
5707            check_limit!(1u8, high),
5708            LimitThresholdCrossed::None
5709        ));
5710
5711        assert!(check_limit!(255u16, high) == LimitThresholdCrossed::None);
5712
5713        assert!(matches!(
5714            check_limit!(2550000u64, high),
5715            LimitThresholdCrossed::Hard(2550000, 10000)
5716        ));
5717    }
5718
5719    #[test]
5720    fn linkage_amendments_load() {
5721        let mainnet = LazyLock::force(&MAINNET_LINKAGE_AMENDMENTS);
5722        let testnet = LazyLock::force(&TESTNET_LINKAGE_AMENDMENTS);
5723        assert!(!mainnet.is_empty(), "mainnet amendments must not be empty");
5724        assert!(!testnet.is_empty(), "testnet amendments must not be empty");
5725    }
5726}