@aztec-labs/sequencer-client 6.0.0-nightly.20260829

package/dest/sequencer/checkpoint_proposal_job.js

@@ -0,0 +1,1961 @@
+function _ts_add_disposable_resource(env, value, async) {
+    if (value !== null && value !== void 0) {
+        if (typeof value !== "object" && typeof value !== "function") throw new TypeError("Object expected.");
+        var dispose, inner;
+        if (async) {
+            if (!Symbol.asyncDispose) throw new TypeError("Symbol.asyncDispose is not defined.");
+            dispose = value[Symbol.asyncDispose];
+        }
+        if (dispose === void 0) {
+            if (!Symbol.dispose) throw new TypeError("Symbol.dispose is not defined.");
+            dispose = value[Symbol.dispose];
+            if (async) inner = dispose;
+        }
+        if (typeof dispose !== "function") throw new TypeError("Object not disposable.");
+        if (inner) dispose = function() {
+            try {
+                inner.call(this);
+            } catch (e) {
+                return Promise.reject(e);
+            }
+        };
+        env.stack.push({
+            value: value,
+            dispose: dispose,
+            async: async
+        });
+    } else if (async) {
+        env.stack.push({
+            async: true
+        });
+    }
+    return value;
+}
+function _ts_dispose_resources(env) {
+    var _SuppressedError = typeof SuppressedError === "function" ? SuppressedError : function(error, suppressed, message) {
+        var e = new Error(message);
+        return e.name = "SuppressedError", e.error = error, e.suppressed = suppressed, e;
+    };
+    return (_ts_dispose_resources = function _ts_dispose_resources(env) {
+        function fail(e) {
+            env.error = env.hasError ? new _SuppressedError(e, env.error, "An error was suppressed during disposal.") : e;
+            env.hasError = true;
+        }
+        var r, s = 0;
+        function next() {
+            while(r = env.stack.pop()){
+                try {
+                    if (!r.async && s === 1) return s = 0, env.stack.push(r), Promise.resolve().then(next);
+                    if (r.dispose) {
+                        var result = r.dispose.call(r.value);
+                        if (r.async) return s |= 2, Promise.resolve(result).then(next, function(e) {
+                            fail(e);
+                            return next();
+                        });
+                    } else s |= 1;
+                } catch (e) {
+                    fail(e);
+                }
+            }
+            if (s === 1) return env.hasError ? Promise.reject(env.error) : Promise.resolve();
+            if (env.hasError) throw env.error;
+        }
+        return next();
+    })(env);
+}
+function applyDecs2203RFactory() {
+    function createAddInitializerMethod(initializers, decoratorFinishedRef) {
+        return function addInitializer(initializer) {
+            assertNotFinished(decoratorFinishedRef, "addInitializer");
+            assertCallable(initializer, "An initializer");
+            initializers.push(initializer);
+        };
+    }
+    function memberDec(dec, name, desc, initializers, kind, isStatic, isPrivate, metadata, value) {
+        var kindStr;
+        switch(kind){
+            case 1:
+                kindStr = "accessor";
+                break;
+            case 2:
+                kindStr = "method";
+                break;
+            case 3:
+                kindStr = "getter";
+                break;
+            case 4:
+                kindStr = "setter";
+                break;
+            default:
+                kindStr = "field";
+        }
+        var ctx = {
+            kind: kindStr,
+            name: isPrivate ? "#" + name : name,
+            static: isStatic,
+            private: isPrivate,
+            metadata: metadata
+        };
+        var decoratorFinishedRef = {
+            v: false
+        };
+        ctx.addInitializer = createAddInitializerMethod(initializers, decoratorFinishedRef);
+        var get, set;
+        if (kind === 0) {
+            if (isPrivate) {
+                get = desc.get;
+                set = desc.set;
+            } else {
+                get = function() {
+                    return this[name];
+                };
+                set = function(v) {
+                    this[name] = v;
+                };
+            }
+        } else if (kind === 2) {
+            get = function() {
+                return desc.value;
+            };
+        } else {
+            if (kind === 1 || kind === 3) {
+                get = function() {
+                    return desc.get.call(this);
+                };
+            }
+            if (kind === 1 || kind === 4) {
+                set = function(v) {
+                    desc.set.call(this, v);
+                };
+            }
+        }
+        ctx.access = get && set ? {
+            get: get,
+            set: set
+        } : get ? {
+            get: get
+        } : {
+            set: set
+        };
+        try {
+            return dec(value, ctx);
+        } finally{
+            decoratorFinishedRef.v = true;
+        }
+    }
+    function assertNotFinished(decoratorFinishedRef, fnName) {
+        if (decoratorFinishedRef.v) {
+            throw new Error("attempted to call " + fnName + " after decoration was finished");
+        }
+    }
+    function assertCallable(fn, hint) {
+        if (typeof fn !== "function") {
+            throw new TypeError(hint + " must be a function");
+        }
+    }
+    function assertValidReturnValue(kind, value) {
+        var type = typeof value;
+        if (kind === 1) {
+            if (type !== "object" || value === null) {
+                throw new TypeError("accessor decorators must return an object with get, set, or init properties or void 0");
+            }
+            if (value.get !== undefined) {
+                assertCallable(value.get, "accessor.get");
+            }
+            if (value.set !== undefined) {
+                assertCallable(value.set, "accessor.set");
+            }
+            if (value.init !== undefined) {
+                assertCallable(value.init, "accessor.init");
+            }
+        } else if (type !== "function") {
+            var hint;
+            if (kind === 0) {
+                hint = "field";
+            } else if (kind === 10) {
+                hint = "class";
+            } else {
+                hint = "method";
+            }
+            throw new TypeError(hint + " decorators must return a function or void 0");
+        }
+    }
+    function applyMemberDec(ret, base, decInfo, name, kind, isStatic, isPrivate, initializers, metadata) {
+        var decs = decInfo[0];
+        var desc, init, value;
+        if (isPrivate) {
+            if (kind === 0 || kind === 1) {
+                desc = {
+                    get: decInfo[3],
+                    set: decInfo[4]
+                };
+            } else if (kind === 3) {
+                desc = {
+                    get: decInfo[3]
+                };
+            } else if (kind === 4) {
+                desc = {
+                    set: decInfo[3]
+                };
+            } else {
+                desc = {
+                    value: decInfo[3]
+                };
+            }
+        } else if (kind !== 0) {
+            desc = Object.getOwnPropertyDescriptor(base, name);
+        }
+        if (kind === 1) {
+            value = {
+                get: desc.get,
+                set: desc.set
+            };
+        } else if (kind === 2) {
+            value = desc.value;
+        } else if (kind === 3) {
+            value = desc.get;
+        } else if (kind === 4) {
+            value = desc.set;
+        }
+        var newValue, get, set;
+        if (typeof decs === "function") {
+            newValue = memberDec(decs, name, desc, initializers, kind, isStatic, isPrivate, metadata, value);
+            if (newValue !== void 0) {
+                assertValidReturnValue(kind, newValue);
+                if (kind === 0) {
+                    init = newValue;
+                } else if (kind === 1) {
+                    init = newValue.init;
+                    get = newValue.get || value.get;
+                    set = newValue.set || value.set;
+                    value = {
+                        get: get,
+                        set: set
+                    };
+                } else {
+                    value = newValue;
+                }
+            }
+        } else {
+            for(var i = decs.length - 1; i >= 0; i--){
+                var dec = decs[i];
+                newValue = memberDec(dec, name, desc, initializers, kind, isStatic, isPrivate, metadata, value);
+                if (newValue !== void 0) {
+                    assertValidReturnValue(kind, newValue);
+                    var newInit;
+                    if (kind === 0) {
+                        newInit = newValue;
+                    } else if (kind === 1) {
+                        newInit = newValue.init;
+                        get = newValue.get || value.get;
+                        set = newValue.set || value.set;
+                        value = {
+                            get: get,
+                            set: set
+                        };
+                    } else {
+                        value = newValue;
+                    }
+                    if (newInit !== void 0) {
+                        if (init === void 0) {
+                            init = newInit;
+                        } else if (typeof init === "function") {
+                            init = [
+                                init,
+                                newInit
+                            ];
+                        } else {
+                            init.push(newInit);
+                        }
+                    }
+                }
+            }
+        }
+        if (kind === 0 || kind === 1) {
+            if (init === void 0) {
+                init = function(instance, init) {
+                    return init;
+                };
+            } else if (typeof init !== "function") {
+                var ownInitializers = init;
+                init = function(instance, init) {
+                    var value = init;
+                    for(var i = 0; i < ownInitializers.length; i++){
+                        value = ownInitializers[i].call(instance, value);
+                    }
+                    return value;
+                };
+            } else {
+                var originalInitializer = init;
+                init = function(instance, init) {
+                    return originalInitializer.call(instance, init);
+                };
+            }
+            ret.push(init);
+        }
+        if (kind !== 0) {
+            if (kind === 1) {
+                desc.get = value.get;
+                desc.set = value.set;
+            } else if (kind === 2) {
+                desc.value = value;
+            } else if (kind === 3) {
+                desc.get = value;
+            } else if (kind === 4) {
+                desc.set = value;
+            }
+            if (isPrivate) {
+                if (kind === 1) {
+                    ret.push(function(instance, args) {
+                        return value.get.call(instance, args);
+                    });
+                    ret.push(function(instance, args) {
+                        return value.set.call(instance, args);
+                    });
+                } else if (kind === 2) {
+                    ret.push(value);
+                } else {
+                    ret.push(function(instance, args) {
+                        return value.call(instance, args);
+                    });
+                }
+            } else {
+                Object.defineProperty(base, name, desc);
+            }
+        }
+    }
+    function applyMemberDecs(Class, decInfos, metadata) {
+        var ret = [];
+        var protoInitializers;
+        var staticInitializers;
+        var existingProtoNonFields = new Map();
+        var existingStaticNonFields = new Map();
+        for(var i = 0; i < decInfos.length; i++){
+            var decInfo = decInfos[i];
+            if (!Array.isArray(decInfo)) continue;
+            var kind = decInfo[1];
+            var name = decInfo[2];
+            var isPrivate = decInfo.length > 3;
+            var isStatic = kind >= 5;
+            var base;
+            var initializers;
+            if (isStatic) {
+                base = Class;
+                kind = kind - 5;
+                staticInitializers = staticInitializers || [];
+                initializers = staticInitializers;
+            } else {
+                base = Class.prototype;
+                protoInitializers = protoInitializers || [];
+                initializers = protoInitializers;
+            }
+            if (kind !== 0 && !isPrivate) {
+                var existingNonFields = isStatic ? existingStaticNonFields : existingProtoNonFields;
+                var existingKind = existingNonFields.get(name) || 0;
+                if (existingKind === true || existingKind === 3 && kind !== 4 || existingKind === 4 && kind !== 3) {
+                    throw new Error("Attempted to decorate a public method/accessor that has the same name as a previously decorated public method/accessor. This is not currently supported by the decorators plugin. Property name was: " + name);
+                } else if (!existingKind && kind > 2) {
+                    existingNonFields.set(name, kind);
+                } else {
+                    existingNonFields.set(name, true);
+                }
+            }
+            applyMemberDec(ret, base, decInfo, name, kind, isStatic, isPrivate, initializers, metadata);
+        }
+        pushInitializers(ret, protoInitializers);
+        pushInitializers(ret, staticInitializers);
+        return ret;
+    }
+    function pushInitializers(ret, initializers) {
+        if (initializers) {
+            ret.push(function(instance) {
+                for(var i = 0; i < initializers.length; i++){
+                    initializers[i].call(instance);
+                }
+                return instance;
+            });
+        }
+    }
+    function applyClassDecs(targetClass, classDecs, metadata) {
+        if (classDecs.length > 0) {
+            var initializers = [];
+            var newClass = targetClass;
+            var name = targetClass.name;
+            for(var i = classDecs.length - 1; i >= 0; i--){
+                var decoratorFinishedRef = {
+                    v: false
+                };
+                try {
+                    var nextNewClass = classDecs[i](newClass, {
+                        kind: "class",
+                        name: name,
+                        addInitializer: createAddInitializerMethod(initializers, decoratorFinishedRef),
+                        metadata
+                    });
+                } finally{
+                    decoratorFinishedRef.v = true;
+                }
+                if (nextNewClass !== undefined) {
+                    assertValidReturnValue(10, nextNewClass);
+                    newClass = nextNewClass;
+                }
+            }
+            return [
+                defineMetadata(newClass, metadata),
+                function() {
+                    for(var i = 0; i < initializers.length; i++){
+                        initializers[i].call(newClass);
+                    }
+                }
+            ];
+        }
+    }
+    function defineMetadata(Class, metadata) {
+        return Object.defineProperty(Class, Symbol.metadata || Symbol.for("Symbol.metadata"), {
+            configurable: true,
+            enumerable: true,
+            value: metadata
+        });
+    }
+    return function applyDecs2203R(targetClass, memberDecs, classDecs, parentClass) {
+        if (parentClass !== void 0) {
+            var parentMetadata = parentClass[Symbol.metadata || Symbol.for("Symbol.metadata")];
+        }
+        var metadata = Object.create(parentMetadata === void 0 ? null : parentMetadata);
+        var e = applyMemberDecs(targetClass, memberDecs, metadata);
+        if (!classDecs.length) defineMetadata(targetClass, metadata);
+        return {
+            e: e,
+            get c () {
+                return applyClassDecs(targetClass, classDecs, metadata);
+            }
+        };
+    };
+}
+function _apply_decs_2203_r(targetClass, memberDecs, classDecs, parentClass) {
+    return (_apply_decs_2203_r = applyDecs2203RFactory())(targetClass, memberDecs, classDecs, parentClass);
+}
+var _dec, _dec1, _dec2, _dec3, _dec4, _dec5, _dec6, _initProto;
+import { MAX_L1_TO_L2_MSGS_PER_BLOCK, MAX_L1_TO_L2_MSGS_PER_CHECKPOINT } from '@aztec-labs/constants';
+import { PROPOSER_PIPELINING_SLOT_OFFSET } from '@aztec-labs/epoch-cache';
+import { BlockNumber, CheckpointNumber, IndexWithinCheckpoint, SlotNumber } from '@aztec-labs/foundation/branded-types';
+import { randomInt } from '@aztec-labs/foundation/crypto/random';
+import { flipSignature, generateRecoverableSignature, generateUnrecoverableSignature } from '@aztec-labs/foundation/crypto/secp256k1-signer';
+import { InterruptError, TimeoutError } from '@aztec-labs/foundation/error';
+import { filter } from '@aztec-labs/foundation/iterator';
+import { createLogger } from '@aztec-labs/foundation/log';
+import { InterruptibleSleep } from '@aztec-labs/foundation/sleep';
+import { Timer } from '@aztec-labs/foundation/timer';
+import { isErrorClass, unfreeze } from '@aztec-labs/foundation/types';
+import { CommitteeAttestationsAndSigners, MaliciousCommitteeAttestationsAndSigners, MaliciousYParityCommitteeAttestationsAndSigners } from '@aztec-labs/stdlib/block';
+import { buildCheckpointSimulationOverridesPlan, getPreviousCheckpointInboxRollingHash, getPreviousCheckpointOutHashes, validateCheckpoint } from '@aztec-labs/stdlib/checkpoint';
+import { computeQuorum, getTimestampForSlot } from '@aztec-labs/stdlib/epoch-helpers';
+import { Gas } from '@aztec-labs/stdlib/gas';
+import { InsufficientValidTxsError } from '@aztec-labs/stdlib/interfaces/server';
+import { InboxBucketRef, getInboxCutoffTimestamp, isInboxConsumptionSufficient } from '@aztec-labs/stdlib/messaging';
+import { orderAttestations, trimAttestations } from '@aztec-labs/stdlib/p2p';
+import { MerkleTreeId } from '@aztec-labs/stdlib/trees';
+import { AttestationTimeoutError } from '@aztec-labs/stdlib/validators';
+import { Attributes, trackSpan } from '@aztec-labs/telemetry-client';
+import { DutyAlreadySignedError, SlashingProtectionError } from '@aztec-labs/validator-ha-signer/errors';
+import { CheckpointVoter } from './checkpoint_voter.js';
+import { SequencerInterruptedError } from './errors.js';
+import { selectInboxBucketForBlock } from './inbox_bucket_selector.js';
+import { SequencerState } from './utils.js';
+/** How much time to sleep while waiting for min transactions to accumulate for a block */ const TXS_POLLING_MS = 500;
+const ARCHIVER_SYNC_POLLING_MS = 200;
+_dec = trackSpan('CheckpointProposalJob.execute'), _dec1 = trackSpan('CheckpointProposalJob.proposeCheckpoint', function() {
+    return {
+        // nullish operator needed for tests
+        [Attributes.COINBASE]: this.validatorClient.getCoinbaseForAttestor(this.attestorAddress)?.toString(),
+        [Attributes.SLOT_NUMBER]: this.targetSlot
+    };
+}), _dec2 = trackSpan('CheckpointProposalJob.buildBlocksForCheckpoint'), _dec3 = trackSpan('CheckpointProposalJob.waitUntilNextSubslot'), _dec4 = trackSpan('CheckpointProposalJob.buildSingleBlock'), _dec5 = trackSpan('CheckpointProposalJob.waitForMinTxs'), _dec6 = trackSpan('CheckpointProposalJob.waitForAttestations');
+/**
+ * Handles the execution of a checkpoint proposal after the initial preparation phase.
+ * This includes building blocks, collecting attestations, and publishing the checkpoint to L1,
+ * as well as enqueueing votes for slashing and governance proposals. This class is created from
+ * the Sequencer once the check for being the proposer for the slot has succeeded.
+ */ export class CheckpointProposalJob {
+    targetSlot;
+    targetEpoch;
+    checkpointNumber;
+    syncedToBlockNumber;
+    checkpointedCheckpointNumber;
+    proposer;
+    publisher;
+    attestorAddress;
+    invalidateCheckpoint;
+    validatorClient;
+    globalsBuilder;
+    p2pClient;
+    worldState;
+    l1ToL2MessageSource;
+    l2BlockSource;
+    checkpointsBuilder;
+    blockSink;
+    l1Constants;
+    signatureContext;
+    config;
+    timetable;
+    slasherClient;
+    epochCache;
+    dateProvider;
+    metrics;
+    checkpointMetrics;
+    eventEmitter;
+    pendingRequests;
+    setStateFn;
+    tracer;
+    proposedCheckpointData;
+    static{
+        ({ e: [_initProto] } = _apply_decs_2203_r(this, [
+            [
+                _dec,
+                2,
+                "execute"
+            ],
+            [
+                _dec1,
+                2,
+                "proposeCheckpoint"
+            ],
+            [
+                _dec2,
+                2,
+                "buildBlocksForCheckpoint"
+            ],
+            [
+                _dec3,
+                2,
+                "waitUntilNextSubslot"
+            ],
+            [
+                _dec4,
+                2,
+                "buildSingleBlock"
+            ],
+            [
+                _dec5,
+                2,
+                "waitForMinTxs"
+            ],
+            [
+                _dec6,
+                2,
+                "waitForAttestations"
+            ]
+        ], []));
+    }
+    log;
+    checkpointEventLog;
+    interruptibleSleep;
+    interrupted;
+    /**
+   * Chain state overrides built once per slot in proposeCheckpoint after the checkpoint is
+   * complete. Carries the pending parent override (archive + slot + fee header) for pipelining,
+   * or the invalidation pending override when rolling back. Consumed by
+   * publisher.validateCheckpointHeader before broadcast.
+   */ checkpointSimulationOverridesPlan;
+    getSignatureContext() {
+        return this.signatureContext;
+    }
+    constructor(targetSlot, targetEpoch, checkpointNumber, syncedToBlockNumber, checkpointedCheckpointNumber, // TODO(palla/mbps): Can we remove the proposer in favor of attestorAddress? Need to check fisherman-node flows.
+    proposer, publisher, attestorAddress, invalidateCheckpoint, validatorClient, globalsBuilder, p2pClient, worldState, l1ToL2MessageSource, l2BlockSource, checkpointsBuilder, blockSink, l1Constants, signatureContext, config, timetable, slasherClient, epochCache, dateProvider, metrics, checkpointMetrics, eventEmitter, // Shared with the owning sequencer, which drains it during shutdown; the fire-and-forget L1
+    // submission this job backgrounds is tracked here rather than in a job-local tracker.
+    pendingRequests, setStateFn, tracer, bindings, proposedCheckpointData){
+        this.targetSlot = targetSlot;
+        this.targetEpoch = targetEpoch;
+        this.checkpointNumber = checkpointNumber;
+        this.syncedToBlockNumber = syncedToBlockNumber;
+        this.checkpointedCheckpointNumber = checkpointedCheckpointNumber;
+        this.proposer = proposer;
+        this.publisher = publisher;
+        this.attestorAddress = attestorAddress;
+        this.invalidateCheckpoint = invalidateCheckpoint;
+        this.validatorClient = validatorClient;
+        this.globalsBuilder = globalsBuilder;
+        this.p2pClient = p2pClient;
+        this.worldState = worldState;
+        this.l1ToL2MessageSource = l1ToL2MessageSource;
+        this.l2BlockSource = l2BlockSource;
+        this.checkpointsBuilder = checkpointsBuilder;
+        this.blockSink = blockSink;
+        this.l1Constants = l1Constants;
+        this.signatureContext = signatureContext;
+        this.config = config;
+        this.timetable = timetable;
+        this.slasherClient = slasherClient;
+        this.epochCache = epochCache;
+        this.dateProvider = dateProvider;
+        this.metrics = metrics;
+        this.checkpointMetrics = checkpointMetrics;
+        this.eventEmitter = eventEmitter;
+        this.pendingRequests = pendingRequests;
+        this.setStateFn = setStateFn;
+        this.tracer = tracer;
+        this.proposedCheckpointData = proposedCheckpointData;
+        this.interruptibleSleep = (_initProto(this), new InterruptibleSleep());
+        this.interrupted = false;
+        this.log = createLogger('sequencer:checkpoint-proposal', {
+            ...bindings,
+            instanceId: `slot-${this.getBuildSlot()}`
+        });
+        this.checkpointEventLog = createLogger('sequencer:checkpoint-events', {
+            ...bindings,
+            instanceId: `slot-${this.getBuildSlot()}`
+        });
+    }
+    /**
+   * The wall-clock slot during which this job builds, i.e. the slot one before {@link targetSlot} under
+   * proposer pipelining. Also the slot of the parent checkpoint this job builds on top of.
+   */ getBuildSlot() {
+        return SlotNumber(this.targetSlot - PROPOSER_PIPELINING_SLOT_OFFSET);
+    }
+    /**
+   * Sets the sequencer state for this job, reporting the target slot the checkpoint is being proposed for
+   * (not the wall-clock build slot). The slot is informational on the event payload/metrics; the job knows
+   * its own target slot, so callers only pass the state.
+   */ setState(state) {
+        this.setStateFn(state, this.targetSlot);
+    }
+    /** Interrupts job-owned waits, including the publisher's send-at-slot sleep, so shutdown can finish. */ interrupt() {
+        this.interrupted = true;
+        this.interruptibleSleep.interrupt(true);
+        this.publisher.interrupt();
+    }
+    async awaitInterruptibleSleep(ms) {
+        if (this.interrupted) {
+            throw new SequencerInterruptedError();
+        }
+        if (ms <= 0) {
+            return;
+        }
+        try {
+            await this.interruptibleSleep.sleep(ms);
+        } catch (err) {
+            if (err instanceof InterruptError) {
+                throw new SequencerInterruptedError();
+            }
+            throw err;
+        }
+    }
+    logCheckpointEvent(eventName, message, fields) {
+        this.checkpointEventLog.debug(message, {
+            eventName: `sequencer-checkpoint-${eventName}`,
+            ...fields
+        });
+    }
+    /**
+   * Executes the checkpoint proposal job.
+   * Builds blocks, assembles checkpoint, and broadcasts the proposal (blocking).
+   * Attestation collection, signing, and L1 submission are backgrounded so the
+   * work loop can return to IDLE immediately for consecutive slot proposals.
+   * Returns the built checkpoint if successful, undefined otherwise.
+   */ async execute() {
+        // Enqueue governance and slashing votes (returns promises that will be awaited later)
+        // In fisherman mode, we simulate slashing but don't actually publish to L1
+        // These are constant for the whole slot, so we only enqueue them once
+        const votesPromises = new CheckpointVoter(this.targetSlot, this.publisher, this.attestorAddress, this.validatorClient, this.slasherClient, this.l1Constants, this.config, this.metrics, this.log).enqueueVotes();
+        // Build blocks, assemble checkpoint, and broadcast proposal (BLOCKING).
+        // Returns after broadcast — attestation collection is deferred.
+        const broadcast = await this.proposeCheckpoint();
+        if (!broadcast) {
+            await Promise.all(votesPromises);
+            // Still submit votes even without a checkpoint.
+            // Under proposer pipelining, vote-offenses signatures are EIP-712-bound to `targetSlot`
+            // (the pipelined slot in which the multicall is expected to mine). Submitting at the
+            // wall-clock time would let the multicall mine in a different L2 slot, causing
+            // signature verification to fail silently inside Multicall3. Delay submission to the
+            // start of `targetSlot` so the tx mines in the slot the vote was signed for.
+            if (!this.config.fishermanMode) {
+                this.pendingRequests.trackRequest(this.publisher.sendRequestsAt(this.targetSlot), ()=>this.interrupt());
+            }
+            return undefined;
+        }
+        const { checkpoint } = broadcast;
+        this.metrics.recordCheckpointProposalSuccess();
+        // Do not post anything to L1 if we are fishermen, but do perform L1 fee analysis
+        if (this.config.fishermanMode) {
+            await this.handleCheckpointEndAsFisherman(checkpoint);
+            return checkpoint;
+        }
+        // Background the attestation → signing → L1 pipeline so the work loop is unblocked
+        this.pendingRequests.trackRequest(this.waitForAttestationsAndEnqueueSubmissionAsync(broadcast, votesPromises), ()=>this.interrupt());
+        // Return the built checkpoint immediately — the work loop is now unblocked
+        return checkpoint;
+    }
+    /**
+   * Background pipeline: collects attestations, signs them, enqueues the checkpoint, and submits to L1.
+   * Runs as a fire-and-forget task tracked in the sequencer's shared tracker so the work loop is unblocked.
+   */ async waitForAttestationsAndEnqueueSubmissionAsync(broadcast, votesPromises) {
+        const { checkpoint } = broadcast;
+        // The bucket the checkpoint consumed through, from the streaming cursor. Sourcing it from the held last-block
+        // proposal is wrong: when the checkpoint's final block fails to build after earlier blocks already consumed
+        // messages, no block is held, so the hint would fall back to genesis bucket 0 while the header commits to a
+        // non-genesis rolling hash, which L1 rejects with Rollup__InvalidInboxRollingHash.
+        const bucketHint = broadcast.bucketHint;
+        try {
+            // Wait for all votes actions, enqueued at the beginning, to resolve
+            await Promise.all(votesPromises);
+            // Try to collect attestations from the committee
+            const signedAttestations = await this.getSignedCommitteeAttestations(broadcast);
+            // Wait for the previous checkpoint to land on L1 before submitting, so we can check it
+            // matches the proposed checkpoint we used as parent, and has valid attestations.
+            if (signedAttestations && await this.waitForValidParentCheckpointOnL1()) {
+                await this.enqueueCheckpointForSubmission({
+                    checkpoint,
+                    ...signedAttestations,
+                    bucketHint
+                });
+            }
+            // If we failed to collect attestations, at least check if we need to issue an invalidation
+            if (!signedAttestations && await this.waitForSyncedL2SlotNumber(this.getBuildSlot())) {
+                const validationStatus = await this.l2BlockSource.getPendingChainValidationStatus();
+                if (!validationStatus.valid) {
+                    this.log.warn(`Checkpoint ${validationStatus.checkpoint.checkpointNumber} has invalid attestations, enqueuing invalidation in spite of attestation collection failure`, {
+                        checkpoint: validationStatus.checkpoint,
+                        reason: validationStatus.reason
+                    });
+                    await this.enqueueInvalidation(validationStatus);
+                }
+            }
+            // Send whatever was enqueued: votes + (propose | invalidation | nothing).
+            const l1Response = await this.publisher.sendRequestsAt(this.targetSlot);
+            const proposedAction = l1Response?.successfulActions.find((a)=>a === 'propose');
+            if (proposedAction) {
+                this.logCheckpointEvent('published', `Checkpoint published for slot ${this.targetSlot}`, {
+                    slot: this.targetSlot,
+                    checkpointNumber: this.checkpointNumber,
+                    successfulActions: l1Response?.successfulActions,
+                    sentActions: l1Response?.sentActions
+                });
+                this.eventEmitter.emit('checkpoint-published', {
+                    checkpoint: this.checkpointNumber,
+                    slot: this.targetSlot
+                });
+                const coinbase = checkpoint.header.coinbase;
+                await this.metrics.incFilledSlot(this.publisher.getSenderAddress().toString(), coinbase);
+            } else {
+                this.logCheckpointEvent('publish-failed', `Checkpoint publish failed for slot ${this.targetSlot}`, {
+                    slot: this.targetSlot,
+                    checkpointNumber: this.checkpointNumber,
+                    successfulActions: l1Response?.successfulActions,
+                    failedActions: l1Response?.failedActions,
+                    sentActions: l1Response?.sentActions,
+                    expiredActions: l1Response?.expiredActions,
+                    reason: 'propose_action_not_successful'
+                });
+                this.log.warn(`Checkpoint publish failed for slot ${this.targetSlot}`, {
+                    slot: this.targetSlot,
+                    checkpointNumber: this.checkpointNumber,
+                    successfulActions: l1Response?.successfulActions,
+                    failedActions: l1Response?.failedActions,
+                    sentActions: l1Response?.sentActions,
+                    expiredActions: l1Response?.expiredActions,
+                    reason: 'propose_action_not_successful'
+                });
+                this.eventEmitter.emit('checkpoint-publish-failed', {
+                    ...l1Response,
+                    slot: this.targetSlot
+                });
+                this.metrics.recordPipelineDiscard();
+            }
+        } catch (err) {
+            if (err instanceof SequencerInterruptedError) {
+                return;
+            }
+            this.logCheckpointEvent('publish-failed', `Checkpoint publish failed for slot ${this.targetSlot}`, {
+                slot: this.targetSlot,
+                checkpointNumber: this.checkpointNumber,
+                reason: err instanceof Error ? err.message : String(err)
+            });
+            this.log.error(`Background attestation/L1 pipeline failed for slot ${this.targetSlot}`, err, {
+                slot: this.targetSlot,
+                checkpointNumber: this.checkpointNumber,
+                reason: err instanceof Error ? err.message : String(err)
+            });
+            this.eventEmitter.emit('checkpoint-publish-failed', {
+                slot: this.targetSlot
+            });
+            this.metrics.recordPipelineDiscard();
+        }
+    }
+    /** Enqueues the checkpoint for L1 submission. Called after pipeline sleep in execute(). */ async enqueueCheckpointForSubmission(result) {
+        const { checkpoint, attestations, attestationsSignature, bucketHint } = result;
+        this.setState(SequencerState.PUBLISHING_CHECKPOINT);
+        // Latest L1 block the propose can still land in for the target slot: the last Ethereum block inside
+        // the target slot (`target_slot_start + S - E`). This is one ethereum slot later than
+        // `attestation_deadline` (= last_ethereum_block_in_target_slot - E), which bounds when validators must
+        // have signed, not when the proposer must have sent. Using the attestation deadline here is too tight:
+        // attestations are collected up to (and, when not enforcing, past) it, so the propose tx would be
+        // enqueued already expired and time out before it can mine.
+        const lastL1BlockInTargetSlot = Number(getTimestampForSlot(this.targetSlot, this.l1Constants)) + this.l1Constants.slotDuration - this.l1Constants.ethereumSlotDuration;
+        const txTimeoutAt = new Date(lastL1BlockInTargetSlot * 1000);
+        // If we have been configured to potentially skip publishing checkpoint then roll the dice here
+        if (this.config.skipPublishingCheckpointsPercent !== undefined && this.config.skipPublishingCheckpointsPercent > 0) {
+            const roll = Math.max(0, randomInt(100));
+            if (roll < this.config.skipPublishingCheckpointsPercent) {
+                this.log.warn(`Skipping publishing proposal for checkpoint ${checkpoint.number}. Configured percentage: ${this.config.skipPublishingCheckpointsPercent}, generated value: ${roll}`);
+                return;
+            }
+        }
+        await this.publisher.enqueueProposeCheckpoint(checkpoint, attestations, attestationsSignature, bucketHint, {
+            txTimeoutAt
+        });
+    }
+    /**
+   * Wait until the archiver syncs past the given L2 slot number.
+   * The deadline is the end of `this.targetSlot`, beyond which any pipelined work would miss its
+   * L1 submission window and is no longer useful.
+   */ async waitForSyncedL2SlotNumber(waitForSlot) {
+        const targetSlotStart = Number(getTimestampForSlot(this.targetSlot, this.l1Constants));
+        const targetSlotEndMs = (targetSlotStart + this.l1Constants.slotDuration) * 1000;
+        const syncDelayTolerance = this.l1Constants.ethereumSlotDuration * 2 * 1000;
+        const timeoutSeconds = Math.max(0.1, (targetSlotEndMs + syncDelayTolerance - this.dateProvider.now()) / 1000);
+        try {
+            const timer = new Timer();
+            while(true){
+                const syncedSlot = await this.l2BlockSource.getSyncedL2SlotNumber();
+                if (syncedSlot !== undefined && syncedSlot >= waitForSlot) {
+                    return true;
+                }
+                if (timeoutSeconds && timer.s() > timeoutSeconds) {
+                    throw new TimeoutError(`Timeout awaiting archiver sync past slot ${waitForSlot}`);
+                }
+                await this.awaitInterruptibleSleep(ARCHIVER_SYNC_POLLING_MS);
+            }
+        } catch (err) {
+            if (err instanceof SequencerInterruptedError) {
+                throw err;
+            }
+            this.log.warn(`Archiver did not sync L1 past slot ${waitForSlot} before slot ${this.targetSlot} expired, discarding pipelined work`, {
+                checkpointNumber: this.checkpointNumber
+            });
+            this.emitPipelinedCheckpointDiscarded('archiver-sync-timeout');
+            return false;
+        }
+    }
+    /**
+   * Waits for the parent checkpoint to land on L1 before submitting a pipelined checkpoint.
+   * Polls until the archiver has synced L1 past the parent's slot, then verifies:
+   * - If we built on a proposed parent: it must have landed on L1 with matching hash and valid attestations.
+   * - If we built without a proposed parent: no new checkpoint must have appeared for that slot.
+   * If the parent has invalid attestations, enqueues an invalidation. Returns whether to proceed with the proposal.
+   */ async waitForValidParentCheckpointOnL1() {
+        if (this.config.skipWaitForValidParentCheckpointOnL1) {
+            this.log.warn(`Skipping waitForValidParentCheckpointOnL1 due to test configuration`, {
+                checkpointNumber: this.checkpointNumber
+            });
+            return true;
+        }
+        const parentCheckpointNumber = CheckpointNumber(this.checkpointNumber - 1);
+        // Wait until archiver has synced L1 past the parent's slot (the build slot, one before targetSlot)
+        if (!await this.waitForSyncedL2SlotNumber(this.getBuildSlot())) {
+            return false;
+        }
+        const tips = await this.l2BlockSource.getL2Tips();
+        const checkpointedNumber = tips.checkpointed.checkpoint.number;
+        // We built on top of a proposed checkpoint. Verify it landed on L1 as expected.
+        if (this.proposedCheckpointData) {
+            // After syncing from L1 we see the chain tip has invalid attestations. This means the parent checkpoint was posted
+            // with invalid attestations, or it built on top of something with invalid attestations and didnt invalidate them.
+            // Either way, we thought our parent would be valid, so we have to throw away our work. But at least we'll try and
+            // invalidate on L1 so we clean up the chain for the next proposer. And we'll slash them, but that's handled elsewhere.
+            const validationStatus = await this.l2BlockSource.getPendingChainValidationStatus();
+            if (!validationStatus.valid) {
+                this.log.warn(`Parent checkpoint ${parentCheckpointNumber} has invalid attestations, discarding pipelined work`, {
+                    checkpointNumber: this.checkpointNumber,
+                    reason: validationStatus.reason
+                });
+                this.emitPipelinedCheckpointDiscarded('parent-invalid-attestations');
+                await this.enqueueInvalidation(validationStatus);
+                return false;
+            }
+            // The pending chain is valid. But did the parent checkpoint land on L1 at all?
+            if (checkpointedNumber < parentCheckpointNumber) {
+                this.log.warn(`Parent checkpoint ${parentCheckpointNumber} did not land on L1, discarding pipelined work`, {
+                    checkpointNumber: this.checkpointNumber,
+                    checkpointedNumber
+                });
+                this.emitPipelinedCheckpointDiscarded('parent-not-on-l1');
+                return false;
+            }
+            // It landed. But is it the one we were expecting?
+            const expectedHash = this.proposedCheckpointData.header.hash().toString();
+            if (tips.checkpointed.checkpoint.hash !== expectedHash) {
+                this.log.warn(`Parent checkpoint ${parentCheckpointNumber} hash mismatch on L1, discarding pipelined work`, {
+                    checkpointNumber: this.checkpointNumber,
+                    expectedHash,
+                    actualHash: tips.checkpointed.checkpoint.hash
+                });
+                this.emitPipelinedCheckpointDiscarded('parent-hash-mismatch');
+                return false;
+            }
+            return true;
+        } else {
+            // We didn't see a proposed checkpoint at build time, so we built on checkpointed parent from two slots ago.
+            // But if a new checkpoint for the previous slot appeared on L1 in the meantime, our checkpoint assumed the wrong parent,
+            // so we have to discard our work. This can happen if we're somehow cut off from p2p and fail to see the checkpoint
+            // proposal for the previous slot.
+            if (checkpointedNumber > parentCheckpointNumber) {
+                this.log.warn(`Unexpected checkpoint ${checkpointedNumber} landed on L1 after we built on top of parent ${parentCheckpointNumber}, discarding pipelined work`, {
+                    checkpointNumber: this.checkpointNumber,
+                    checkpointedNumber
+                });
+                this.emitPipelinedCheckpointDiscarded('unexpected-parent-appeared');
+                return false;
+            }
+            return true;
+        }
+    }
+    /** Emits the pipelined-checkpoint-discarded event and records the metric. */ emitPipelinedCheckpointDiscarded(reason) {
+        this.metrics.recordPipelineParentCheckpointMismatch(reason);
+        this.eventEmitter.emit('pipelined-checkpoint-discarded', {
+            slot: this.targetSlot,
+            checkpointNumber: this.checkpointNumber,
+            reason
+        });
+    }
+    /** Simulates and enqueues an invalidation request for the invalid parent checkpoint. */ async enqueueInvalidation(validationStatus) {
+        if (this.config.skipInvalidateBlockAsProposer) {
+            this.log.warn(`Skipping checkpoint invalidation as proposer due to test configuration`);
+            return;
+        }
+        const invalidateRequest = await this.publisher.simulateInvalidateCheckpoint(validationStatus);
+        if (invalidateRequest) {
+            const submissionSlotStart = Number(getTimestampForSlot(this.targetSlot, this.l1Constants));
+            const txTimeoutAt = new Date((submissionSlotStart + this.l1Constants.slotDuration) * 1000);
+            this.publisher.enqueueInvalidateCheckpoint(invalidateRequest, {
+                txTimeoutAt
+            });
+        } else {
+            this.log.info(`Invalidation simulation returned undefined, checkpoint may have been removed already`, {
+                checkpointNumber: this.checkpointNumber
+            });
+        }
+    }
+    async proposeCheckpoint() {
+        try {
+            const env = {
+                stack: [],
+                error: void 0,
+                hasError: false
+            };
+            try {
+                const now = this.dateProvider.now();
+                if (this.proposedCheckpointData) {
+                    // Measure against the wall-clock slot whose build window we are currently using.
+                    // In pipelining mode `targetSlot` is intentionally one slot ahead, which makes the
+                    // target-slot boundary a full slot away from the actual build start time.
+                    const slotBoundaryMs = Number(getTimestampForSlot(this.getBuildSlot(), this.l1Constants)) * 1000;
+                    this.checkpointMetrics.recordPipelinedCheckpointBuildStartOffsetFromSlotBoundary(now - slotBoundaryMs);
+                }
+                this.checkpointMetrics.startCheckpointTiming(now);
+                // Get operator configured coinbase and fee recipient for this attestor
+                const coinbase = this.validatorClient.getCoinbaseForAttestor(this.attestorAddress);
+                const feeRecipient = this.validatorClient.getFeeRecipientForAttestor(this.attestorAddress);
+                // Start the checkpoint
+                this.setState(SequencerState.INITIALIZING_CHECKPOINT);
+                this.logCheckpointEvent('slot-started', `Starting checkpoint proposal for slot ${this.targetSlot}`, {
+                    buildSlot: this.getBuildSlot(),
+                    submissionSlot: this.targetSlot,
+                    slot: this.targetSlot,
+                    checkpointNumber: this.checkpointNumber,
+                    proposer: this.proposer?.toString(),
+                    attestorAddress: this.attestorAddress.toString(),
+                    publisherAddress: this.publisher.getSenderAddress().toString(),
+                    coinbase: coinbase.toString()
+                });
+                this.metrics.incOpenSlot(this.targetSlot, this.proposer?.toString() ?? 'unknown');
+                // Enqueues checkpoint invalidation (constant for the whole slot)
+                if (this.invalidateCheckpoint && !this.config.skipInvalidateBlockAsProposer) {
+                    this.publisher.enqueueInvalidateCheckpoint(this.invalidateCheckpoint);
+                }
+                // Build the simulation plan for this slot. When pipelining, this overrides L1's view of
+                // pending/archive/fee-header to "as if the proposed parent had landed", so both the
+                // mana-min-fee simulation (in the globals builder) and the pre-broadcast
+                // validateCheckpointHeader see the chain tip the eventual L1 send will see.
+                this.checkpointSimulationOverridesPlan = await buildCheckpointSimulationOverridesPlan({
+                    checkpointNumber: this.checkpointNumber,
+                    proposedCheckpointData: this.proposedCheckpointData,
+                    invalidateToPendingCheckpointNumber: this.invalidateCheckpoint?.forcePendingCheckpointNumber,
+                    checkpointedCheckpointNumber: this.checkpointedCheckpointNumber,
+                    rollup: this.publisher.rollupContract,
+                    signatureContext: this.signatureContext,
+                    log: this.log
+                });
+                const checkpointGlobalVariables = await this.globalsBuilder.buildCheckpointGlobalVariables(coinbase, feeRecipient, this.targetSlot, this.checkpointSimulationOverridesPlan);
+                // Collect the out hashes of all the checkpoints before this one in the same epoch.
+                // Under pipelining the parent checkpoint may not be on L1 yet at build time, so the helper
+                // splices in the parent's checkpointOutHash from the locally-known proposed checkpoint so
+                // the resulting `epochOutHash` matches what validators (and L1) compute once the parent
+                // lands on L1.
+                const previousCheckpointOutHashes = await getPreviousCheckpointOutHashes({
+                    blockSource: this.l2BlockSource,
+                    epoch: this.targetEpoch,
+                    checkpointNumber: this.checkpointNumber,
+                    l1Constants: this.epochCache.getL1Constants(),
+                    pipeliningEnabled: true,
+                    proposedCheckpointData: this.proposedCheckpointData,
+                    log: this.log
+                });
+                // Chain start for this checkpoint's inbox rolling hash: the parent checkpoint's `inboxRollingHash`. Unlike the
+                // epoch out-hash tree, the chain is continuous across epochs, so this is always the immediately preceding
+                // checkpoint's value (or zero at genesis).
+                const previousInboxRollingHash = await getPreviousCheckpointInboxRollingHash({
+                    blockSource: this.l2BlockSource,
+                    checkpointNumber: this.checkpointNumber,
+                    proposedCheckpointData: this.proposedCheckpointData,
+                    log: this.log
+                });
+                // Anchor the modifier to the predicted parent fee header: L1 will apply it against
+                // that, not against the latest published checkpoint (which lags by one under pipelining).
+                const predictedParentEthPerFeeAssetE12 = this.checkpointSimulationOverridesPlan?.pendingCheckpointState?.feeHeader?.ethPerFeeAsset;
+                const feeAssetPriceModifier = await this.publisher.getFeeAssetPriceModifier(predictedParentEthPerFeeAssetE12);
+                const fork = _ts_add_disposable_resource(env, await this.worldState.fork(this.syncedToBlockNumber, {
+                    closeDelayMs: 12_000
+                }), true);
+                // Streaming Inbox: the consumption cursor starts at the parent state this checkpoint builds on. The fork's
+                // L1-to-L2 tree leaf count is the parent's cumulative consumed total (compact indexing), which resolves the
+                // parent's last-consumed bucket.
+                const streamingState = await this.resolveStreamingCheckpointStart(fork);
+                // Create checkpoint builder for the entire slot
+                const checkpointBuilder = await this.checkpointsBuilder.startCheckpoint(this.checkpointNumber, checkpointGlobalVariables, feeAssetPriceModifier, previousCheckpointOutHashes, previousInboxRollingHash, fork, this.log.getBindings());
+                // Options for the validator client when creating block and checkpoint proposals
+                const blockProposalOptions = {
+                    publishFullTxs: !!this.config.publishTxsWithProposals,
+                    broadcastInvalidBlockProposal: this.config.broadcastInvalidBlockProposal
+                };
+                const checkpointProposalOptions = {
+                    publishFullTxs: !!this.config.publishTxsWithProposals,
+                    broadcastInvalidCheckpointProposal: this.config.broadcastInvalidCheckpointProposalOnly || this.config.broadcastInvalidBlockProposal
+                };
+                let blocksInCheckpoint = [];
+                let blockPendingBroadcast = undefined;
+                const checkpointBuildTimer = new Timer();
+                try {
+                    // Main loop: build blocks for the checkpoint
+                    const result = await this.buildBlocksForCheckpoint(checkpointBuilder, checkpointGlobalVariables.timestamp, blockProposalOptions, streamingState);
+                    blocksInCheckpoint = result.blocksInCheckpoint;
+                    blockPendingBroadcast = result.blockPendingBroadcast;
+                } catch (err) {
+                    // These errors are expected in HA mode, so we yield and let another HA node handle the slot
+                    // The only distinction between the 2 errors is SlashingProtectionError throws when the payload is different,
+                    // which is normal for block building (may have picked different txs)
+                    if (this.handleHASigningError(err, 'Block proposal')) {
+                        return undefined;
+                    }
+                    throw err;
+                }
+                if (blocksInCheckpoint.length === 0) {
+                    this.logCheckpointEvent('build-failed', `Checkpoint build failed for slot ${this.targetSlot}`, {
+                        slot: this.targetSlot,
+                        checkpointNumber: this.checkpointNumber,
+                        reason: 'no_blocks_built'
+                    });
+                    this.log.warn(`No blocks were built for slot ${this.targetSlot}`, {
+                        slot: this.targetSlot,
+                        checkpointNumber: this.checkpointNumber,
+                        reason: 'no_blocks_built'
+                    });
+                    this.eventEmitter.emit('checkpoint-empty', {
+                        slot: this.targetSlot
+                    });
+                    return undefined;
+                }
+                const minBlocksForCheckpoint = this.config.minBlocksForCheckpoint;
+                if (minBlocksForCheckpoint !== undefined && blocksInCheckpoint.length < minBlocksForCheckpoint) {
+                    this.logCheckpointEvent('build-failed', `Checkpoint build failed for slot ${this.targetSlot}`, {
+                        slot: this.targetSlot,
+                        checkpointNumber: this.checkpointNumber,
+                        blocksBuilt: blocksInCheckpoint.length,
+                        minBlocksForCheckpoint,
+                        reason: 'min_blocks_not_met'
+                    });
+                    this.log.warn(`Checkpoint has fewer blocks than minimum (${blocksInCheckpoint.length} < ${minBlocksForCheckpoint}), skipping proposal`, {
+                        slot: this.targetSlot,
+                        checkpointNumber: this.checkpointNumber,
+                        blocksBuilt: blocksInCheckpoint.length,
+                        minBlocksForCheckpoint,
+                        reason: 'min_blocks_not_met'
+                    });
+                    return undefined;
+                }
+                // Streaming Inbox censorship floor: re-derive the mandatory-consumption verdict from the final consumed
+                // position, independently of the per-block selection that produced it. Runs before the checkpoint is assembled,
+                // so the held last block and the checkpoint proposal are both still ungossiped and the propose tx is never
+                // sent for a checkpoint L1 would revert and validators would refuse to attest.
+                const consumption = await this.checkCheckpointConsumption(streamingState);
+                if (!consumption.sufficient) {
+                    const { cutoffTimestamp, nextBucket } = consumption;
+                    const context = {
+                        slot: this.targetSlot,
+                        checkpointNumber: this.checkpointNumber,
+                        blocksBuilt: blocksInCheckpoint.length,
+                        blocksRemaining: this.config.maxBlocksPerCheckpoint - blocksInCheckpoint.length,
+                        checkpointStartTotalMsgCount: streamingState.checkpointStartTotalMsgCount,
+                        consumedBucketSeq: streamingState.parent.seq,
+                        consumedTotalMsgCount: streamingState.parent.totalMsgCount,
+                        unconsumedBucketSeq: nextBucket?.seq,
+                        unconsumedBucketTotalMsgCount: nextBucket?.totalMsgCount,
+                        cutoffTimestamp,
+                        reason: 'inbox_consumption_insufficient'
+                    };
+                    this.logCheckpointEvent('build-failed', `Checkpoint build failed for slot ${this.targetSlot}`, context);
+                    this.log.warn(`Checkpoint leaves a mandatory Inbox bucket unconsumed, skipping proposal; the streaming backlog does not ` + `fit ${this.config.maxBlocksPerCheckpoint} blocks per checkpoint`, context);
+                    this.metrics.recordCheckpointProposalFailed('inbox_consumption_insufficient');
+                    return undefined;
+                }
+                // Assemble and broadcast the checkpoint proposal, including the last block that was not
+                // broadcasted yet, and wait to collect the committee attestations.
+                this.setState(SequencerState.ASSEMBLING_CHECKPOINT);
+                const checkpoint = await checkpointBuilder.completeCheckpoint();
+                // Final validation: per-block limits are only checked if the operator set them explicitly.
+                // Otherwise, checkpoint-level budgets were already enforced by the redistribution logic.
+                try {
+                    validateCheckpoint(checkpoint, {
+                        rollupManaLimit: this.l1Constants.rollupManaLimit,
+                        maxL2BlockGas: this.config.maxL2BlockGas,
+                        maxDABlockGas: this.config.maxDABlockGas,
+                        maxTxsPerBlock: this.config.maxTxsPerBlock,
+                        maxTxsPerCheckpoint: this.config.maxTxsPerCheckpoint
+                    });
+                } catch (err) {
+                    this.logCheckpointEvent('build-failed', `Checkpoint build failed for slot ${this.targetSlot}`, {
+                        slot: this.targetSlot,
+                        checkpointNumber: this.checkpointNumber,
+                        blocksBuilt: blocksInCheckpoint.length,
+                        reason: 'invalid_checkpoint',
+                        checkpoint: checkpoint.header.toInspect()
+                    });
+                    this.log.error(`Built an invalid checkpoint at slot ${this.targetSlot} (skipping proposal)`, err, {
+                        slot: this.targetSlot,
+                        checkpointNumber: this.checkpointNumber,
+                        blocksBuilt: blocksInCheckpoint.length,
+                        reason: 'invalid_checkpoint',
+                        checkpoint: checkpoint.header.toInspect()
+                    });
+                    return undefined;
+                }
+                // Record checkpoint-level build metrics
+                this.checkpointMetrics.recordCheckpointBuild(checkpointBuildTimer.ms(), blocksInCheckpoint.length, checkpoint.getStats().txCount, Number(checkpoint.header.totalManaUsed.toBigInt()));
+                this.logCheckpointEvent('built', `Checkpoint built for slot ${this.targetSlot}`, {
+                    slot: this.targetSlot,
+                    buildSlot: this.getBuildSlot(),
+                    checkpointNumber: this.checkpointNumber,
+                    proposer: this.proposer?.toString(),
+                    attestorAddress: this.attestorAddress.toString(),
+                    publisherAddress: this.publisher.getSenderAddress().toString(),
+                    blocksBuilt: blocksInCheckpoint.length,
+                    txCount: checkpoint.getStats().txCount,
+                    totalMana: Number(checkpoint.header.totalManaUsed.toBigInt())
+                });
+                // In fisherman mode, return the checkpoint without broadcasting or collecting attestations
+                if (this.config.fishermanMode) {
+                    this.log.info(`Built checkpoint for slot ${this.targetSlot} with ${blocksInCheckpoint.length} blocks. ` + `Skipping proposal in fisherman mode.`, {
+                        slot: this.targetSlot,
+                        checkpoint: checkpoint.header.toInspect(),
+                        blocksBuilt: blocksInCheckpoint.length
+                    });
+                    this.metrics.recordCheckpointSuccess();
+                    // Return a broadcast result with a dummy proposal — fisherman mode skips attestation collection
+                    return {
+                        checkpoint,
+                        proposal: undefined,
+                        blockProposedAt: this.dateProvider.now(),
+                        bucketHint: streamingState.lastBucketRef.bucketSeq
+                    };
+                }
+                // Validate the header against L1 state before broadcasting.
+                // If this fails the slot is aborted before any gossip work; state drift between here
+                // and the eventual L1 send is caught by the bundle simulate at send time.
+                try {
+                    await this.publisher.validateCheckpointHeader(checkpoint.header, this.checkpointSimulationOverridesPlan);
+                } catch (err) {
+                    this.log.error(`Pre-broadcast header validation failed for slot ${this.targetSlot}; aborting`, err, {
+                        slot: this.targetSlot,
+                        checkpointNumber: this.checkpointNumber
+                    });
+                    this.metrics.recordCheckpointProposalFailed('header_validation_failed');
+                    this.eventEmitter.emit('header-validation-failed', {
+                        slot: this.targetSlot,
+                        checkpointNumber: this.checkpointNumber,
+                        reason: err instanceof Error ? err.message : String(err)
+                    });
+                    return undefined;
+                }
+                // Create the checkpoint proposal and broadcast it
+                const proposal = await this.validatorClient.createCheckpointProposal(checkpoint.header, checkpoint.archive.root, this.checkpointNumber, feeAssetPriceModifier, blockPendingBroadcast, this.proposer, checkpointProposalOptions);
+                // Advance our own optimistic proposed-checkpoint tip locally before gossiping. Gossipsub
+                // doesn't echo our own messages back, so this is how the proposer makes its own proposed
+                // checkpoint visible for pipelining the next slot. Built from local checkpoint data — never
+                // from the broadcast proposal archive, which may be deliberately corrupted under test flags.
+                // Fail closed: if this throws, the outer catch aborts the slot before gossiping.
+                await this.syncProposedCheckpointToArchiver(checkpoint, blocksInCheckpoint.length, feeAssetPriceModifier);
+                const blockProposedAt = this.dateProvider.now();
+                if (this.config.skipBroadcastCheckpointProposal) {
+                    // Test-only: suppress the CheckpointProposal so peers never see a proposed checkpoint for
+                    // this slot, but still broadcast the held last block standalone so peers' archivers ingest
+                    // it as a proposed-but-uncheckpointed tip — the exact orphan-block state that
+                    // pruneOrphanProposedBlocks / checkSync must handle.
+                    if (blockPendingBroadcast && !this.config.skipBroadcastProposals) {
+                        await this.p2pClient.broadcastProposal(blockPendingBroadcast);
+                    }
+                } else if (!this.config.skipBroadcastProposals) {
+                    await this.p2pClient.broadcastCheckpointProposal(proposal);
+                    this.checkpointMetrics.noteCheckpointBroadcast(this.dateProvider.now());
+                }
+                // Return immediately after broadcast — attestation collection happens in the background. The bucket hint is
+                // the streaming cursor's final consumed bucket, which matches the header's rolling hash whether or not a last
+                // block was held for broadcast.
+                return {
+                    checkpoint,
+                    proposal,
+                    blockProposedAt,
+                    bucketHint: streamingState.lastBucketRef.bucketSeq
+                };
+            } catch (e) {
+                env.error = e;
+                env.hasError = true;
+            } finally{
+                const result = _ts_dispose_resources(env);
+                if (result) await result;
+            }
+        } catch (err) {
+            if (err && (err instanceof DutyAlreadySignedError || err instanceof SlashingProtectionError)) {
+                // swallow this error. It's already been logged by a function deeper in the stack
+                return undefined;
+            }
+            this.log.error(`Error building checkpoint at slot ${this.targetSlot}`, err);
+            return undefined;
+        }
+    }
+    /**
+   * Builds blocks for a checkpoint within the current slot.
+   */ async buildBlocksForCheckpoint(checkpointBuilder, timestamp, blockProposalOptions, streamingState) {
+        const blocksInCheckpoint = [];
+        const txHashesAlreadyIncluded = new Set();
+        const initialBlockNumber = BlockNumber(this.syncedToBlockNumber + 1);
+        // Last block in the checkpoint will usually be flagged as pending broadcast, so we send it along with the checkpoint proposal
+        let blockPendingBroadcast = undefined;
+        while(true){
+            const blocksBuilt = blocksInCheckpoint.length;
+            const indexWithinCheckpoint = IndexWithinCheckpoint(blocksBuilt);
+            const blockNumber = BlockNumber(initialBlockNumber + blocksBuilt);
+            if (blocksBuilt >= this.config.maxBlocksPerCheckpoint) {
+                this.log.debug(`Reached max blocks per checkpoint`, {
+                    slot: this.targetSlot,
+                    blocksBuilt,
+                    maxBlocksPerCheckpoint: this.config.maxBlocksPerCheckpoint
+                });
+                break;
+            }
+            const nowSeconds = this.dateProvider.now() / 1000;
+            const timingInfo = this.timetable.selectNextSubslot(this.targetSlot, nowSeconds);
+            if (!timingInfo.canStart) {
+                this.log.debug(`Not enough time left in slot to start another block`, {
+                    slot: this.targetSlot,
+                    blocksBuilt,
+                    nowSeconds
+                });
+                break;
+            }
+            // Streaming Inbox: select this block's message bundle against the current (not-yet-advanced) consumption
+            // cursor. The state is only advanced once the block builds successfully, so a failed build (retried in a
+            // later sub-slot) re-derives the bundle rather than losing it. The builder inserts the bundle and rolls it
+            // back with the fork on failure. The censorship cutoff floor must apply on whichever block ends the
+            // checkpoint, which includes the block that reaches the per-checkpoint block cap, not just the timetable's
+            // last sub-slot.
+            const isCheckpointFinalBlock = timingInfo.isLastBlock || blocksBuilt + 1 >= this.config.maxBlocksPerCheckpoint;
+            const selection = streamingState ? await this.selectStreamingBundle(streamingState, isCheckpointFinalBlock, nowSeconds) : undefined;
+            // No checkpoint ending on this block can satisfy the censorship floor, so building it would only waste the
+            // sub-slot: stop here and let the post-loop consumption check abort the checkpoint before anything is gossiped.
+            if (selection?.insufficientFinalBlockCapacity) {
+                this.log.warn(`Streaming Inbox backlog does not fit the checkpoint's remaining blocks; stopping block building`, {
+                    slot: this.targetSlot,
+                    checkpointNumber: this.checkpointNumber,
+                    blocksBuilt,
+                    blockNumber
+                });
+                break;
+            }
+            const streamingBundle = streamingState ? selection && selection.consume ? selection.bundle : [] : undefined;
+            const buildResult = await this.buildSingleBlock(checkpointBuilder, {
+                // Create all blocks with the same timestamp
+                blockTimestamp: timestamp,
+                // Create an empty block if we haven't already and this is the last one
+                forceCreate: timingInfo.isLastBlock && blocksBuilt === 0 && this.config.buildCheckpointIfEmpty,
+                buildDeadline: new Date(timingInfo.deadline * 1000),
+                blockNumber,
+                indexWithinCheckpoint,
+                txHashesAlreadyIncluded,
+                l1ToL2Messages: streamingBundle
+            });
+            // If we failed to build the block due to insufficient txs, we try again if there is still time left in the slot
+            if ('failure' in buildResult) {
+                // If this was the last subslot, we're done.
+                if (timingInfo.isLastBlock) {
+                    break;
+                }
+                // Otherwise, if there is still time for more blocks, we wait until the next subslot and try again
+                await this.waitUntilNextSubslot(timingInfo.deadline);
+                continue;
+            }
+            // If there was an error building the block, we just exit the loop and give up the rest of the slot.
+            // We don't want to risk building more blocks if something went wrong.
+            if ('error' in buildResult) {
+                if (!(buildResult.error instanceof SequencerInterruptedError)) {
+                    this.log.warn(`Halting block building for slot ${this.targetSlot}`, {
+                        slot: this.targetSlot,
+                        blocksBuilt,
+                        error: buildResult.error
+                    });
+                }
+                break;
+            }
+            const { block, usedTxs } = buildResult;
+            this.checkpointMetrics.noteCheckpointBlockBuilt(this.dateProvider.now(), {
+                isFirstBlock: blocksBuilt === 0,
+                isLastBlock: timingInfo.isLastBlock
+            });
+            blocksInCheckpoint.push(block);
+            usedTxs.forEach((tx)=>txHashesAlreadyIncluded.add(tx.txHash.toString()));
+            // Streaming Inbox: the block built successfully, so advance the consumption cursor and carry this block's
+            // rolling-hash bucket reference. A block that consumed nothing reuses the parent bucket reference.
+            let blockBucketRef = undefined;
+            if (streamingState && selection) {
+                if (selection.consume) {
+                    streamingState.parent = {
+                        seq: selection.bucket.seq,
+                        totalMsgCount: selection.bucket.totalMsgCount
+                    };
+                    streamingState.lastBucketRef = InboxBucketRef.fromBucket(selection.bucket);
+                }
+                blockBucketRef = streamingState.lastBucketRef;
+            }
+            // Sign the block proposal. This will throw if HA signing fails.
+            const proposal = await this.createBlockProposal(block, usedTxs, {
+                ...blockProposalOptions,
+                broadcastInvalidBlockProposal: blockProposalOptions.broadcastInvalidBlockProposal || block.indexWithinCheckpoint === this.config.invalidBlockProposalIndexWithinCheckpoint
+            }, blockBucketRef);
+            // Sync the proposed block to the archiver to make it available, only after we've managed to sign the proposal,
+            // so we avoid polluting our archive with a block that would fail.
+            // We wait for the sync to succeed, as this helps catch consistency errors, even if it means we lose some time for block-building.
+            // If this throws, we abort the entire checkpoint.
+            await this.syncProposedBlockToArchiver(block);
+            // If this is the last block, do not broadcast it, since it will be included in the checkpoint proposal.
+            if (timingInfo.isLastBlock) {
+                this.log.verbose(`Completed final block ${blockNumber} for slot ${this.targetSlot}`, {
+                    slot: this.targetSlot,
+                    blockNumber,
+                    blocksBuilt
+                });
+                blockPendingBroadcast = proposal;
+                break;
+            }
+            // Once we have a signed proposal and the archiver agreed with our proposed block, then we broadcast it.
+            if (proposal && !this.config.skipBroadcastProposals) {
+                await this.p2pClient.broadcastProposal(proposal);
+            }
+            // Wait until the next block's start time
+            await this.waitUntilNextSubslot(timingInfo.deadline);
+        }
+        this.log.verbose(`Block building loop completed for slot ${this.targetSlot}`, {
+            slot: this.targetSlot,
+            blocksBuilt: blocksInCheckpoint.length
+        });
+        return {
+            blocksInCheckpoint,
+            blockPendingBroadcast
+        };
+    }
+    /** Creates a block proposal for a given block via the validator client (unless in fisherman mode) */ createBlockProposal(block, usedTxs, blockProposalOptions, bucketRef) {
+        if (this.config.fishermanMode) {
+            this.log.info(`Skipping block proposal for block ${block.number} in fisherman mode`);
+            return Promise.resolve(undefined);
+        }
+        return this.validatorClient.createBlockProposal(block.header, this.checkpointNumber, block.indexWithinCheckpoint, block.archive.root, usedTxs, this.proposer, blockProposalOptions, bucketRef);
+    }
+    /**
+   * Resolves where a streaming-Inbox checkpoint's consumption starts: the parent checkpoint's last-consumed bucket.
+   * The parent's cumulative consumed total is the L1-to-L2 message tree leaf count of the fork
+   * this checkpoint builds on (compact indexing makes leaf count equal cumulative message count), which resolves the
+   * parent bucket by total. Genesis is the `total = 0` case, resolving the genesis bucket 0.
+   */ async resolveStreamingCheckpointStart(fork) {
+        const parentInfo = await fork.getTreeInfo(MerkleTreeId.L1_TO_L2_MESSAGE_TREE);
+        const parentTotalMsgCount = parentInfo.size;
+        const parentBucket = await this.l1ToL2MessageSource.getInboxBucketByTotalMsgCount(parentTotalMsgCount);
+        if (parentBucket === undefined) {
+            throw new Error(`Streaming inbox: cannot resolve parent Inbox bucket for cumulative total ${parentTotalMsgCount} ` + `(checkpoint ${this.checkpointNumber}); local Inbox view has not synced it`);
+        }
+        return {
+            checkpointStartTotalMsgCount: parentTotalMsgCount,
+            parent: {
+                seq: parentBucket.seq,
+                totalMsgCount: parentBucket.totalMsgCount
+            },
+            lastBucketRef: InboxBucketRef.fromBucket(parentBucket)
+        };
+    }
+    /**
+   * Whether the checkpoint's final consumed position satisfies the streaming-Inbox censorship floor, mirroring the
+   * mandatory-consumption assert in `ProposeLib.validateInboxConsumption`: the first bucket left unconsumed must be
+   * absent, past the cutoff, or a cap-escape. The bucket and cutoff the verdict was taken against are returned for
+   * diagnostics.
+   *
+   * Derived from the consumption cursor rather than from the per-block selections that advanced it, so a selector that
+   * stops short of a mandatory bucket is caught here regardless of how it reported the shortfall.
+   */ async checkCheckpointConsumption(state) {
+        const nextBucket = await this.l1ToL2MessageSource.getInboxBucket(state.parent.seq + 1n);
+        const cutoffTimestamp = getInboxCutoffTimestamp(this.targetSlot, this.l1Constants);
+        const sufficient = isInboxConsumptionSufficient({
+            nextBucket,
+            cutoffTimestamp,
+            checkpointStartTotalMsgCount: state.checkpointStartTotalMsgCount,
+            perCheckpointCap: MAX_L1_TO_L2_MSGS_PER_CHECKPOINT
+        });
+        return {
+            sufficient,
+            nextBucket,
+            cutoffTimestamp
+        };
+    }
+    /**
+   * Selects this block's streaming-Inbox message bundle against the current consumption cursor, mirroring the L1
+   * predicate in `ProposeLib.validateInboxConsumption`. Does not mutate the cursor; the caller
+   * advances it only after the block builds successfully.
+   */ selectStreamingBundle(state, isLastBlock, nowSeconds) {
+        const cutoffTimestamp = getInboxCutoffTimestamp(this.targetSlot, this.l1Constants);
+        return selectInboxBucketForBlock({
+            messageSource: this.l1ToL2MessageSource,
+            now: BigInt(Math.floor(nowSeconds)),
+            minBucketAgeSeconds: BigInt(this.l1Constants.ethereumSlotDuration),
+            parent: state.parent,
+            checkpointStartTotalMsgCount: state.checkpointStartTotalMsgCount,
+            perBlockCap: MAX_L1_TO_L2_MSGS_PER_BLOCK,
+            perCheckpointCap: MAX_L1_TO_L2_MSGS_PER_CHECKPOINT,
+            isLastBlock,
+            cutoffTimestamp
+        });
+    }
+    /**
+   * Sleeps until it is time to produce the next block in the slot.
+   * @param nextSubslotStart - Absolute wall-clock timestamp in seconds of the previous sub-slot deadline.
+   */ async waitUntilNextSubslot(nextSubslotStart) {
+        this.setState(SequencerState.WAITING_UNTIL_NEXT_BLOCK);
+        this.log.verbose(`Waiting until time for the next block at ${nextSubslotStart}s`, {
+            slot: this.targetSlot
+        });
+        await this.awaitInterruptibleSleep(Math.max(0, nextSubslotStart * 1000 - this.dateProvider.now()));
+    }
+    /** Builds a single block. Called from the main block building loop. */ async buildSingleBlock(checkpointBuilder, opts) {
+        const { blockTimestamp, forceCreate, blockNumber, indexWithinCheckpoint, buildDeadline, txHashesAlreadyIncluded, l1ToL2Messages } = opts;
+        this.log.verbose(`Preparing block ${blockNumber} index ${indexWithinCheckpoint} at checkpoint ${this.checkpointNumber} for slot ${this.targetSlot}`, {
+            ...checkpointBuilder.getConstantData(),
+            ...opts
+        });
+        try {
+            // Wait until we have enough txs to build the block
+            const { canStartBuilding, minTxs } = await this.waitForMinTxs(opts);
+            if (!canStartBuilding) {
+                this.logCheckpointEvent('block-build-failed', `Block build failed for slot ${this.targetSlot}`, {
+                    reason: 'insufficient_txs',
+                    blockNumber,
+                    slot: this.targetSlot,
+                    checkpointNumber: this.checkpointNumber,
+                    indexWithinCheckpoint,
+                    minTxs
+                });
+                this.log.verbose(`Not enough age-eligible txs to build block ${blockNumber} at index ${indexWithinCheckpoint} in slot ${this.targetSlot} (needs ${minTxs} eligible)`, {
+                    reason: 'insufficient_txs',
+                    blockNumber,
+                    slot: this.targetSlot,
+                    checkpointNumber: this.checkpointNumber,
+                    indexWithinCheckpoint,
+                    minTxs
+                });
+                this.eventEmitter.emit('block-tx-count-check-failed', {
+                    minTxs,
+                    slot: this.targetSlot
+                });
+                this.metrics.recordBlockProposalFailed('insufficient_txs');
+                return {
+                    failure: 'insufficient-txs'
+                };
+            }
+            // Create iterator to pending txs. We filter out txs already included in previous blocks in the checkpoint
+            // just in case p2p failed to sync the provisional block and didn't get to remove those txs from the mempool yet.
+            // Block building only executes txs, so we skip loading their proofs unless these same tx objects get attached
+            // to the broadcasted proposals via publishTxsWithProposals.
+            const pendingTxs = filter(this.p2pClient.iterateEligiblePendingTxs({
+                includeProof: !!this.config.publishTxsWithProposals
+            }), (tx)=>!txHashesAlreadyIncluded.has(tx.txHash.toString()));
+            this.log.debug(`Building block ${blockNumber} at index ${indexWithinCheckpoint} for slot ${this.targetSlot}`, {
+                slot: this.targetSlot,
+                blockNumber,
+                indexWithinCheckpoint
+            });
+            this.setState(SequencerState.CREATING_BLOCK);
+            // Per-block limits are operator overrides (from SEQ_MAX_L2_BLOCK_GAS etc.) further capped
+            // by remaining checkpoint-level budgets inside CheckpointBuilder before each block is built.
+            // minValidTxs is passed into the builder so it can reject the block *before* updating state.
+            // A zero-tx block is proven by the no-txs block-root circuit at any index, but one carrying neither txs
+            // nor messages past the first block is pure padding, so the floor for minValidTxs is 1 there.
+            const configuredMinValidTxs = forceCreate ? 0 : this.config.minValidTxsPerBlock ?? minTxs;
+            const minValidTxs = indexWithinCheckpoint > 0 && (l1ToL2Messages?.length ?? 0) === 0 ? Math.max(configuredMinValidTxs, 1) : configuredMinValidTxs;
+            const blockBuilderOptions = {
+                maxTransactions: this.config.maxTxsPerBlock,
+                maxBlockGas: this.config.maxL2BlockGas !== undefined || this.config.maxDABlockGas !== undefined ? new Gas(this.config.maxDABlockGas ?? Infinity, this.config.maxL2BlockGas ?? Infinity) : undefined,
+                deadline: buildDeadline,
+                isBuildingProposal: true,
+                minValidTxs,
+                maxBlocksPerCheckpoint: this.timetable.getMaxBlocksPerCheckpoint(),
+                perBlockAllocationMultiplier: this.config.perBlockAllocationMultiplier,
+                perBlockDAAllocationMultiplier: this.config.perBlockDAAllocationMultiplier,
+                l1ToL2Messages
+            };
+            // Actually build the block by executing txs. The builder throws InsufficientValidTxsError
+            // if the number of successfully processed txs is below minValidTxs, ensuring state is not
+            // updated for blocks that will be discarded.
+            const buildResult = await this.buildSingleBlockWithCheckpointBuilder(checkpointBuilder, pendingTxs, blockNumber, blockTimestamp, blockBuilderOptions);
+            // If any txs failed during execution, drop them from the mempool so we don't pick them up again
+            await this.dropFailedTxsFromP2P(buildResult.failedTxs);
+            if (buildResult.status === 'insufficient-valid-txs') {
+                this.logCheckpointEvent('block-build-failed', `Block build failed for slot ${this.targetSlot}`, {
+                    reason: 'insufficient_valid_txs',
+                    slot: this.targetSlot,
+                    checkpointNumber: this.checkpointNumber,
+                    blockNumber,
+                    numTxs: buildResult.processedCount,
+                    indexWithinCheckpoint,
+                    minValidTxs
+                });
+                this.log.warn(`Block ${blockNumber} at index ${indexWithinCheckpoint} on slot ${this.targetSlot} has too few valid txs to be proposed`, {
+                    reason: 'insufficient_valid_txs',
+                    slot: this.targetSlot,
+                    checkpointNumber: this.checkpointNumber,
+                    blockNumber,
+                    numTxs: buildResult.processedCount,
+                    indexWithinCheckpoint,
+                    minValidTxs
+                });
+                this.eventEmitter.emit('block-build-failed', {
+                    reason: `Insufficient valid txs`,
+                    slot: this.targetSlot
+                });
+                this.metrics.recordBlockProposalFailed('insufficient_valid_txs');
+                return {
+                    failure: 'insufficient-valid-txs'
+                };
+            }
+            // Block creation succeeded, emit stats and metrics
+            const { block, publicProcessorDuration, usedTxs, blockBuildDuration, numTxs } = buildResult;
+            const blockStats = {
+                eventName: 'l2-block-built',
+                duration: blockBuildDuration,
+                publicProcessDuration: publicProcessorDuration,
+                ...block.getStats()
+            };
+            const blockHash = await block.hash();
+            const txHashes = block.body.txEffects.map((tx)=>tx.txHash);
+            const manaPerSec = block.header.totalManaUsed.toNumberUnsafe() / (blockBuildDuration / 1000);
+            this.log.info(`Built block ${block.number} at checkpoint ${this.checkpointNumber} for slot ${this.targetSlot} with ${numTxs} txs`, {
+                blockHash,
+                txHashes,
+                manaPerSec,
+                ...blockStats
+            });
+            // `slot` is the target/submission slot (may be one ahead when pipelining),
+            // `buildSlot` is the wall-clock slot during which the block was actually built.
+            this.eventEmitter.emit('block-proposed', {
+                blockNumber: block.number,
+                blockHash,
+                checkpointNumber: this.checkpointNumber,
+                indexWithinCheckpoint: block.indexWithinCheckpoint,
+                slot: this.targetSlot,
+                buildSlot: this.getBuildSlot()
+            });
+            this.metrics.recordBuiltBlock(blockBuildDuration, block.header.totalManaUsed.toNumberUnsafe(), this.targetSlot);
+            return {
+                block,
+                usedTxs
+            };
+        } catch (err) {
+            this.eventEmitter.emit('block-build-failed', {
+                reason: err.message,
+                slot: this.targetSlot
+            });
+            this.logCheckpointEvent('block-build-failed', `Block build failed for slot ${this.targetSlot}`, {
+                reason: err instanceof Error ? err.message : String(err),
+                slot: this.targetSlot,
+                checkpointNumber: this.checkpointNumber,
+                blockNumber
+            });
+            this.log.error(`Error building block`, err, {
+                reason: err instanceof Error ? err.message : String(err),
+                slot: this.targetSlot,
+                checkpointNumber: this.checkpointNumber,
+                blockNumber
+            });
+            this.metrics.recordBlockProposalFailed(err.name || 'unknown_error');
+            this.metrics.recordFailedBlock();
+            return {
+                error: err
+            };
+        }
+    }
+    /** Uses the checkpoint builder to build a block, catching InsufficientValidTxsError. */ async buildSingleBlockWithCheckpointBuilder(checkpointBuilder, pendingTxs, blockNumber, blockTimestamp, blockBuilderOptions) {
+        try {
+            const workTimer = new Timer();
+            const result = await checkpointBuilder.buildBlock(pendingTxs, blockNumber, blockTimestamp, blockBuilderOptions);
+            const blockBuildDuration = workTimer.ms();
+            return {
+                ...result,
+                blockBuildDuration,
+                status: 'success'
+            };
+        } catch (err) {
+            if (isErrorClass(err, InsufficientValidTxsError)) {
+                return {
+                    failedTxs: err.failedTxs,
+                    processedCount: err.processedCount,
+                    status: 'insufficient-valid-txs'
+                };
+            }
+            throw err;
+        }
+    }
+    /** Waits until minTxs are available on the pool for building a block. */ async waitForMinTxs(opts) {
+        const { indexWithinCheckpoint, blockNumber, buildDeadline, forceCreate } = opts;
+        // A non-empty streaming Inbox bundle is work on its own: the block must be produced even with zero txs,
+        // regardless of minTxsPerBlock, so the messages get inserted (message-only block).
+        // Without a bundle, a non-first block needs at least one tx to avoid empty filler blocks even when
+        // minTxsPerBlock is zero.
+        const hasStreamingBundle = (opts.l1ToL2Messages?.length ?? 0) > 0;
+        const minTxs = hasStreamingBundle ? 0 : indexWithinCheckpoint > 0 && this.config.minTxsPerBlock === 0 ? 1 : this.config.minTxsPerBlock;
+        // Latest time to keep waiting for txs: wait_for_txs_deadline = block_build_deadline(k) - min_block_duration.
+        const startBuildingDeadline = buildDeadline ? new Date(buildDeadline.getTime() - this.timetable.minBlockDuration * 1000) : undefined;
+        // Gate on age-eligible txs so we don't start building on txs the builder would then filter out for being
+        // too fresh. hasEligiblePendingTxs early-exits once minTxs are eligible instead of counting the whole pool.
+        while(!forceCreate && !await this.p2pClient.hasEligiblePendingTxs(minTxs)){
+            // If we're past deadline, or we have no deadline, give up
+            const now = this.dateProvider.nowAsDate();
+            if (startBuildingDeadline === undefined || now >= startBuildingDeadline) {
+                return {
+                    canStartBuilding: false,
+                    minTxs
+                };
+            }
+            // Wait a bit before checking again
+            this.setState(SequencerState.WAITING_FOR_TXS);
+            this.log.verbose(`Waiting for ${minTxs} age-eligible txs to build block ${blockNumber} at index ${indexWithinCheckpoint} in slot ${this.targetSlot}`, {
+                blockNumber,
+                slot: this.targetSlot,
+                indexWithinCheckpoint,
+                minTxs
+            });
+            await this.waitForTxsPollingInterval();
+        }
+        return {
+            canStartBuilding: true,
+            minTxs
+        };
+    }
+    async getSignedCommitteeAttestations(broadcast) {
+        const { proposal, blockProposedAt } = broadcast;
+        this.setState(SequencerState.COLLECTING_ATTESTATIONS);
+        const attestations = await this.waitForAttestations(proposal);
+        if (!attestations) {
+            return undefined;
+        }
+        this.checkpointMetrics.recordCheckpointAttestationDelay(this.dateProvider.now() - blockProposedAt);
+        // Proposer must sign over the attestations before pushing them to L1
+        const signer = this.proposer ?? this.publisher.getSenderAddress();
+        try {
+            const attestationsSignature = await this.validatorClient.signAttestationsAndSigners(attestations, signer, this.targetSlot, this.checkpointNumber);
+            return {
+                attestations,
+                attestationsSignature
+            };
+        } catch (err) {
+            if (this.handleHASigningError(err, 'Attestations signature')) {
+                return;
+            }
+            this.log.error(`Error signing attestations for checkpoint proposal at slot ${proposal.slotNumber}`, err);
+            return undefined;
+        }
+    }
+    /**
+   * Waits for enough attestations to be collected via p2p.
+   * This is run after all blocks for the checkpoint have been built.
+   */ async waitForAttestations(proposal) {
+        if (this.config.fishermanMode) {
+            this.log.debug('Skipping attestation collection in fisherman mode');
+            return CommitteeAttestationsAndSigners.empty(this.getSignatureContext());
+        }
+        const slotNumber = proposal.slotNumber;
+        const { committee, seed, epoch } = await this.epochCache.getCommittee(slotNumber);
+        if (!committee) {
+            throw new Error('No committee when collecting attestations');
+        } else if (committee.length === 0) {
+            this.log.verbose(`Attesting committee is empty`);
+            return CommitteeAttestationsAndSigners.empty(this.getSignatureContext());
+        } else {
+            this.log.debug(`Attesting committee length is ${committee.length}`, {
+                committee
+            });
+        }
+        const numberOfRequiredAttestations = computeQuorum(committee.length);
+        if (this.config.skipCollectingAttestations) {
+            this.log.warn('Skipping attestation collection as per config (attesting with own keys only)');
+            const attestations = await this.validatorClient?.collectOwnAttestations(proposal, this.checkpointNumber);
+            this.logCheckpointAttestations('collected', committee, attestations ?? [], numberOfRequiredAttestations, {
+                reason: 'collect_own_only'
+            });
+            return new CommitteeAttestationsAndSigners(orderAttestations(attestations ?? [], committee), this.getSignatureContext());
+        }
+        // Hard attestation-collection cutoff = the single consensus attestation_deadline (target_slot_start + S - 2E).
+        const attestationDeadlineSeconds = this.timetable.getAttestationDeadline(this.targetSlot);
+        const attestationDeadline = new Date(attestationDeadlineSeconds * 1000);
+        this.metrics.recordRequiredAttestations(numberOfRequiredAttestations, Math.max(0, attestationDeadline.getTime() - this.dateProvider.now()));
+        const collectAttestationsTimer = new Timer();
+        let collectedAttestationsCount = 0;
+        try {
+            const attestations = await this.validatorClient.collectAttestations(proposal, numberOfRequiredAttestations, attestationDeadline, this.checkpointNumber);
+            collectedAttestationsCount = attestations.length;
+            // Trim attestations to minimum required to save L1 calldata gas
+            const localAddresses = this.validatorClient.getValidatorAddresses();
+            const trimmed = trimAttestations(attestations, numberOfRequiredAttestations, this.attestorAddress, localAddresses);
+            if (trimmed.length < attestations.length) {
+                this.log.debug(`Trimmed attestations from ${attestations.length} to ${trimmed.length} for L1 submission`);
+            }
+            // Rollup contract requires that the signatures are provided in the order of the committee
+            const sorted = orderAttestations(trimmed, committee);
+            this.logCheckpointAttestations('collected', committee, attestations, numberOfRequiredAttestations, {
+                submittedCount: trimmed.length
+            });
+            // Manipulate the attestations if we've been configured to do so
+            if (this.config.injectFakeAttestation || this.config.injectHighSValueAttestation || this.config.injectUnrecoverableSignatureAttestation || this.config.injectYParityAttestation || this.config.shuffleAttestationOrdering) {
+                return this.manipulateAttestations(proposal.slotNumber, epoch, seed, committee, sorted);
+            }
+            return new CommitteeAttestationsAndSigners(sorted, this.getSignatureContext());
+        } catch (err) {
+            if (err && err instanceof AttestationTimeoutError) {
+                collectedAttestationsCount = err.collectedCount;
+                this.logCheckpointAttestations('failed', committee, undefined, numberOfRequiredAttestations, {
+                    collectedCount: collectedAttestationsCount,
+                    reason: 'timeout'
+                });
+                this.log.error(`Timeout while waiting for attestations for checkpoint proposal at slot ${proposal.slotNumber} (collected ${collectedAttestationsCount}/${numberOfRequiredAttestations})`, err);
+            } else {
+                this.logCheckpointAttestations('failed', committee, undefined, numberOfRequiredAttestations, {
+                    collectedCount: collectedAttestationsCount,
+                    reason: err instanceof Error ? err.message : String(err)
+                });
+                this.log.error(`Error collecting attestations for checkpoint proposal at slot ${proposal.slotNumber}`, err);
+            }
+            return undefined;
+        } finally{
+            this.metrics.recordCollectedAttestations(collectedAttestationsCount, collectAttestationsTimer.ms());
+        }
+    }
+    logCheckpointAttestations(status, committee, attestations, requiredAttestations, opts = {}) {
+        const signedValidators = attestations?.map((attestation)=>attestation.getSender()?.toString()).filter((address)=>address !== undefined) ?? [];
+        const collectedCount = opts.collectedCount ?? new Set(signedValidators).size;
+        const missingValidatorCount = status === 'failed' ? Math.max(0, requiredAttestations - collectedCount) : undefined;
+        this.logCheckpointEvent(`attestations-${status}`, `Checkpoint attestations ${status} for slot ${this.targetSlot}`, {
+            slot: this.targetSlot,
+            checkpointNumber: this.checkpointNumber,
+            committeeSize: committee.length,
+            requiredAttestations,
+            collectedAttestations: collectedCount,
+            ...opts.submittedCount !== undefined && {
+                submittedAttestations: opts.submittedCount
+            },
+            ...missingValidatorCount !== undefined && {
+                missingValidatorCount
+            },
+            ...opts.reason !== undefined && {
+                reason: opts.reason
+            }
+        });
+    }
+    /** Breaks the attestations before publishing based on attack configs */ manipulateAttestations(slotNumber, epoch, seed, committee, attestations) {
+        // Compute the proposer index in the committee, since we dont want to tweak it.
+        // Otherwise, the L1 rollup contract will reject the block outright.
+        const proposerIndex = Number(this.epochCache.computeProposerIndex(slotNumber, epoch, seed, BigInt(committee.length)));
+        if (this.config.injectFakeAttestation || this.config.injectHighSValueAttestation || this.config.injectUnrecoverableSignatureAttestation) {
+            // Find non-empty attestations that are not from the proposer
+            const nonProposerIndices = [];
+            for(let i = 0; i < attestations.length; i++){
+                if (!attestations[i].signature.isEmpty() && i !== proposerIndex) {
+                    nonProposerIndices.push(i);
+                }
+            }
+            if (nonProposerIndices.length > 0) {
+                const targetIndex = nonProposerIndices[randomInt(nonProposerIndices.length)];
+                if (this.config.injectHighSValueAttestation) {
+                    this.log.warn(`Injecting high-s value attestation in checkpoint for slot ${slotNumber} at index ${targetIndex}`);
+                    unfreeze(attestations[targetIndex]).signature = flipSignature(attestations[targetIndex].signature);
+                } else if (this.config.injectUnrecoverableSignatureAttestation) {
+                    this.log.warn(`Injecting unrecoverable signature attestation in checkpoint for slot ${slotNumber} at index ${targetIndex}`);
+                    unfreeze(attestations[targetIndex]).signature = generateUnrecoverableSignature();
+                } else {
+                    this.log.warn(`Injecting fake attestation in checkpoint for slot ${slotNumber} at index ${targetIndex}`);
+                    unfreeze(attestations[targetIndex]).signature = generateRecoverableSignature();
+                }
+            }
+            return new CommitteeAttestationsAndSigners(attestations, this.getSignatureContext());
+        }
+        if (this.config.injectYParityAttestation) {
+            // Force every non-proposer signed slot's recovery byte to yParity (v ∈ {0, 1}) form in the packed L1
+            // tuple, after packAttestations has canonicalized it. The proposer's own slot is left canonical so
+            // propose() still passes verifyProposer. Models a malicious proposer landing a checkpoint L1 accepts
+            // but that can never be proven (ECDSA.recover rejects v ∉ {27, 28}).
+            this.log.warn(`Injecting yParity attestations in checkpoint for slot ${slotNumber} (proposer #${proposerIndex})`);
+            return new MaliciousYParityCommitteeAttestationsAndSigners(attestations, proposerIndex, this.getSignatureContext());
+        }
+        if (this.config.shuffleAttestationOrdering) {
+            this.log.warn(`Shuffling attestation ordering in checkpoint for slot ${slotNumber} (proposer #${proposerIndex})`);
+            const shuffled = [
+                ...attestations
+            ];
+            // Find two non-proposer positions that both have non-empty signatures to swap.
+            // This ensures the bitmap doesn't change, so the MaliciousCommitteeAttestationsAndSigners
+            // signers array stays correctly aligned with L1's committee reconstruction.
+            const swappable = [];
+            for(let k = 0; k < shuffled.length; k++){
+                if (!shuffled[k].signature.isEmpty() && k !== proposerIndex) {
+                    swappable.push(k);
+                }
+            }
+            if (swappable.length >= 2) {
+                const [i, j] = [
+                    swappable[0],
+                    swappable[1]
+                ];
+                [shuffled[i], shuffled[j]] = [
+                    shuffled[j],
+                    shuffled[i]
+                ];
+            }
+            const signers = new CommitteeAttestationsAndSigners(attestations, this.getSignatureContext()).getSigners();
+            return new MaliciousCommitteeAttestationsAndSigners(shuffled, signers, this.getSignatureContext());
+        }
+        return new CommitteeAttestationsAndSigners(attestations, this.getSignatureContext());
+    }
+    async dropFailedTxsFromP2P(failedTxs) {
+        if (failedTxs.length === 0) {
+            return;
+        }
+        const failedTxData = failedTxs.map((fail)=>fail.tx);
+        const failedTxHashes = failedTxData.map((tx)=>tx.getTxHash());
+        const failures = failedTxs.map((fail)=>({
+                txHash: fail.tx.getTxHash().toString(),
+                reason: fail.error.message
+            }));
+        this.log.warn(`Dropping ${failedTxs.length} txs from mempool due to failures during block building for slot ${this.targetSlot}`, {
+            slot: this.targetSlot,
+            checkpointNumber: this.checkpointNumber,
+            failures
+        });
+        await this.p2pClient.handleFailedExecution(failedTxHashes);
+    }
+    /**
+   * Adds the proposed block to the archiver so it's available via P2P.
+   * Gossip doesn't echo messages back to the sender, so the proposer's archiver/world-state
+   * would never receive its own block without this explicit sync.
+   *
+   * In fisherman mode we skip this push: the fisherman builds blocks locally for validation
+   * and fee analysis only, and pushing them to the archiver causes spurious reorg cascades
+   * whenever the real proposer's block arrives from L1.
+   */ async syncProposedBlockToArchiver(block) {
+        if (this.config.skipPushProposedBlocksToArchiver || this.config.fishermanMode) {
+            this.log.warn(`Skipping push of proposed block ${block.number} to archiver`, {
+                blockNumber: block.number,
+                slot: block.header.globalVariables.slotNumber
+            });
+            return;
+        }
+        this.log.debug(`Syncing proposed block ${block.number} to archiver`, {
+            blockNumber: block.number,
+            slot: block.header.globalVariables.slotNumber
+        });
+        await this.blockSink.addBlock(block);
+    }
+    /**
+   * Adds the proposed checkpoint to the archiver so the proposer's optimistic proposed-checkpoint
+   * tip advances locally. Gossip doesn't echo our own messages back, so without this the proposer
+   * would never see its own proposed checkpoint and couldn't pipeline the next slot.
+   *
+   * Skipped whenever proposed blocks aren't pushed (`skipPushProposedBlocksToArchiver`, fisherman
+   * mode): the archiver derives the checkpoint archive from its stored blocks, so without them the
+   * push would fail. All blocks were already added (and awaited) during block building, so this
+   * needs no retry — they are guaranteed present by the time we get here.
+   */ async syncProposedCheckpointToArchiver(checkpoint, blockCount, feeAssetPriceModifier) {
+        if (this.config.skipPushProposedBlocksToArchiver || this.config.fishermanMode) {
+            return;
+        }
+        const startBlock = BlockNumber(this.syncedToBlockNumber + 1);
+        this.log.debug(`Syncing proposed checkpoint ${this.checkpointNumber} to archiver`, {
+            checkpointNumber: this.checkpointNumber,
+            slot: this.targetSlot,
+            startBlock,
+            blockCount
+        });
+        await this.blockSink.addProposedCheckpoint({
+            header: checkpoint.header,
+            checkpointNumber: this.checkpointNumber,
+            startBlock,
+            blockCount,
+            totalManaUsed: checkpoint.header.totalManaUsed.toBigInt(),
+            feeAssetPriceModifier
+        });
+    }
+    /** Runs fee analysis and logs checkpoint outcome as fisherman */ async handleCheckpointEndAsFisherman(checkpoint) {
+        // Perform L1 fee analysis before clearing requests
+        // The callback is invoked asynchronously after the next block is mined
+        const feeAnalysis = await this.publisher.analyzeL1Fees(this.targetSlot, (analysis)=>this.metrics.recordFishermanFeeAnalysis(analysis));
+        if (checkpoint) {
+            this.log.info(`Validation checkpoint building SUCCEEDED for slot ${this.targetSlot}`, {
+                ...checkpoint.toCheckpointInfo(),
+                ...checkpoint.getStats(),
+                feeAnalysisId: feeAnalysis?.id
+            });
+        } else {
+            this.log.warn(`Validation block building FAILED for slot ${this.targetSlot}`, {
+                slot: this.targetSlot,
+                feeAnalysisId: feeAnalysis?.id
+            });
+            this.metrics.recordCheckpointProposalFailed('block_build_failed');
+        }
+        this.publisher.clearPendingRequests();
+    }
+    /**
+   * Helper to handle HA double-signing errors. Returns true if the error was handled (caller should yield).
+   */ handleHASigningError(err, errorContext) {
+        if (err instanceof DutyAlreadySignedError) {
+            this.log.info(`${errorContext} for slot ${this.targetSlot} already signed by another HA node, yielding`, {
+                slot: this.targetSlot,
+                signedByNode: err.signedByNode
+            });
+            return true;
+        }
+        if (err instanceof SlashingProtectionError) {
+            this.log.info(`${errorContext} for slot ${this.targetSlot} blocked by slashing protection, yielding`, {
+                slot: this.targetSlot,
+                existingMessageHash: err.existingMessageHash,
+                attemptedMessageHash: err.attemptedMessageHash
+            });
+            return true;
+        }
+        return false;
+    }
+    /** Waits the polling interval for transactions. Extracted for test overriding. */ async waitForTxsPollingInterval() {
+        await this.awaitInterruptibleSleep(TXS_POLLING_MS);
+    }
+    getPublisher() {
+        return this.publisher;
+    }
+}