Merge remote-tracking branch 'origin/main' into bernhard-cleanup-inner-forest-for-main

Author: drahnr

CHANGELOG.md

@@ -1,5 +1,13 @@
 # Changelog
 
+## v0.13.7 (2026-02-25)
+
+- Updated `SyncAccountStorageMaps` and `SyncAccountVault` to allow all accounts with public state, including network accounts ([#1711](https://github.com/0xMiden/node/pull/1711)).
+
+## v0.13.6 (2026-02-25)
+
+- Fixed CORS headers missing from version-rejection responses ([#1707](https://github.com/0xMiden/node/pull/1707)).
+
 ## v0.13.5 (2026-02-19)
 
 - OpenTelemetry traces are now flushed before program termination on panic ([#1643](https://github.com/0xMiden/miden-node/pull/1643)).

Cargo.lock

@@ -28,7 +28,7 @@ license      = "MIT"
 readme       = "README.md"
 repository   = "https://github.com/0xMiden/miden-node"
 rust-version = "1.90"
-version      = "0.13.5"
+version      = "0.13.7"
 
 # Optimize the cryptography for faster tests involving account creation.
 [profile.test.package.miden-crypto]

Cargo.toml

@@ -1,8 +1,8 @@
 # Miden node
 
 [![LICENSE](https://img.shields.io/badge/license-MIT-blue.svg)](https://github.com/0xMiden/miden-node/blob/main/LICENSE)
-[![test](https://github.com/0xMiden/miden-node/actions/workflows/test.yml/badge.svg)](https://github.com/0xMiden/miden-node/actions/workflows/test.yml)
-[![RUST_VERSION](https://img.shields.io/badge/rustc-1.89+-lightgray.svg)](https://www.rust-lang.org/tools/install)
+[![CI](https://github.com/0xMiden/node/actions/workflows/ci.yml/badge.svg)](https://github.com/0xMiden/node/actions/workflows/ci.yml)
+[![RUST_VERSION](https://img.shields.io/badge/rustc-1.90+-lightgray.svg)](https://www.rust-lang.org/tools/install)
 [![crates.io](https://img.shields.io/crates/v/miden-node)](https://crates.io/crates/miden-node)
 
 Welcome to the Miden node implementation :) This software is used to operate a Miden ZK-rollup network by

README.md

@@ -84,12 +84,15 @@ impl Rpc {
             .layer(CatchPanicLayer::custom(catch_panic_layer_fn))
             .layer(TraceLayer::new_for_grpc().make_span_with(grpc_trace_fn))
             .layer(HealthCheckLayer)
+            // Note: must come before the accept layer, as otherwise accept rejections
+            // do _not_ get CORS headers applied, masking the accept error in
+            // web-clients (which would experience CORS rejection).
+            .layer(cors_for_grpc_web_layer())
             .layer(
                 AcceptHeaderLayer::new(&rpc_version, genesis.commitment())
                     .with_genesis_enforced_method("SubmitProvenTransaction")
                     .with_genesis_enforced_method("SubmitProvenBatch"),
             )
-            .layer(cors_for_grpc_web_layer())
             // Enables gRPC-web support.
             .layer(GrpcWebLayer::new())
             .add_service(api_service)

crates/rpc/src/server/mod.rs

@@ -370,7 +370,7 @@ pub(crate) fn select_account_vault_assets(
     const ROW_OVERHEAD_BYTES: usize = 2 * size_of::<Word>() + size_of::<u32>(); // key + asset + block_num
     const MAX_ROWS: usize = MAX_RESPONSE_PAYLOAD_BYTES / ROW_OVERHEAD_BYTES;
 
-    if !account_id.is_public() {
+    if !account_id.has_public_state() {
         return Err(DatabaseError::AccountNotPublic(account_id));
     }
 
@@ -661,7 +661,7 @@ pub(crate) fn select_account_storage_map_values_paged(
 ) -> Result<StorageMapValuesPage, DatabaseError> {
     use schema::account_storage_map_values as t;
 
-    if !account_id.is_public() {
+    if !account_id.has_public_state() {
         return Err(DatabaseError::AccountNotPublic(account_id));
     }
 

crates/store/src/db/models/queries/accounts.rs

@@ -1227,6 +1227,42 @@ fn select_storage_map_sync_values() {
     assert_eq!(page.values, expected, "should return latest values ordered by key");
 }
 
+#[test]
+fn select_storage_map_sync_values_for_network_account() {
+    let mut conn = create_db();
+    let block_num = BlockNumber::from(1);
+    create_block(&mut conn, block_num);
+
+    let (account_id, _) =
+        make_account_and_note(&mut conn, block_num, [42u8; 32], AccountStorageMode::Network);
+    let slot_name = StorageSlotName::mock(7);
+    let key = num_to_word(1);
+    let value = num_to_word(10);
+
+    queries::insert_account_storage_map_value(
+        &mut conn,
+        account_id,
+        block_num,
+        slot_name.clone(),
+        key,
+        value,
+    )
+    .unwrap();
+
+    let page = queries::select_account_storage_map_values(
+        &mut conn,
+        account_id,
+        BlockNumber::GENESIS..=block_num,
+    )
+    .unwrap();
+
+    assert_eq!(
+        page.values,
+        vec![StorageMapValue { block_num, slot_name, key, value }],
+        "network accounts with public state should be accepted",
+    );
+}
+
 #[test]
 fn select_storage_map_sync_values_paginates_until_last_block() {
     let mut conn = create_db();

crates/store/src/db/tests.rs

@@ -266,7 +266,7 @@ impl rpc_server::Rpc for StoreApi {
 
         let account_id: AccountId = read_account_id::<SyncAccountVaultError>(request.account_id)?;
 
-        if !account_id.is_public() {
+        if !account_id.has_public_state() {
             return Err(SyncAccountVaultError::AccountNotPublic(account_id).into());
         }
 
@@ -314,7 +314,7 @@ impl rpc_server::Rpc for StoreApi {
 
         let account_id = read_account_id::<SyncAccountStorageMapsError>(request.account_id)?;
 
-        if !account_id.is_public() {
+        if !account_id.has_public_state() {
             Err(SyncAccountStorageMapsError::AccountNotPublic(account_id))?;
         }