@aztec-labs/validator-client 6.0.0-nightly.20260829

package/dest/validator.js

@@ -0,0 +1,771 @@
+import { getBlobsPerL1Block } from '@aztec-labs/blob-lib';
+import { CheckpointNumber } from '@aztec-labs/foundation/branded-types';
+import { FifoSet } from '@aztec-labs/foundation/fifo-set';
+import { createLogger } from '@aztec-labs/foundation/log';
+import { RunningPromise } from '@aztec-labs/foundation/running-promise';
+import { sleep } from '@aztec-labs/foundation/sleep';
+import { DateProvider } from '@aztec-labs/foundation/timer';
+import { AuthRequest, AuthResponse, ReqRespSubProtocol } from '@aztec-labs/p2p';
+import { OffenseType, WANT_TO_CLEAR_SLASH_EVENT, WANT_TO_SLASH_EVENT, getOffenseTypeName } from '@aztec-labs/slasher';
+import { getEpochAtSlot } from '@aztec-labs/stdlib/epoch-helpers';
+import { ConsensusTimetable } from '@aztec-labs/stdlib/timetable';
+import { AttestationTimeoutError } from '@aztec-labs/stdlib/validators';
+import { getTelemetryClient } from '@aztec-labs/telemetry-client';
+import { createHASigner, createLocalSignerWithProtection, createSignerFromSharedDb } from '@aztec-labs/validator-ha-signer/factory';
+import { DutyType } from '@aztec-labs/validator-ha-signer/types';
+import { EventEmitter } from 'events';
+import { ValidationService } from './duties/validation_service.js';
+import { HAKeyStore } from './key_store/ha_key_store.js';
+import { NodeKeystoreAdapter } from './key_store/node_keystore_adapter.js';
+import { ValidatorMetrics } from './metrics.js';
+import { ProposalHandler, SLASHABLE_BLOCK_PROPOSAL_VALIDATION_RESULT, SLASHABLE_CHECKPOINT_PROPOSAL_VALIDATION_RESULT } from './proposal_handler.js';
+// We maintain a set of proposers who have proposed invalid blocks.
+// Just cap the set to avoid unbounded growth.
+const MAX_PROPOSERS_OF_INVALID_BLOCKS = 1000;
+const MAX_TRACKED_INVALID_CHECKPOINT_PROPOSALS = 1000;
+const MAX_TRACKED_BAD_ATTESTATIONS = 10_000;
+/**
+ * Validator Client
+ */ export class ValidatorClient extends EventEmitter {
+    keyStore;
+    epochCache;
+    p2pClient;
+    proposalHandler;
+    blockSource;
+    checkpointsBuilder;
+    worldState;
+    l1ToL2MessageSource;
+    config;
+    blobClient;
+    slashingProtectionSigner;
+    dateProvider;
+    tracer;
+    validationService;
+    metrics;
+    log;
+    // Whether it has already registered handlers on the p2p client
+    hasRegisteredHandlers;
+    /** Tracks the last block proposal we created, to detect duplicate proposal attempts. */ lastProposedBlock;
+    /** Tracks the last checkpoint proposal we created. */ lastProposedCheckpoint;
+    lastEpochForCommitteeUpdateLoop;
+    epochCacheUpdateLoop;
+    /** Tracks the last epoch in which each attester successfully submitted at least one attestation. */ lastAttestedEpochByAttester;
+    proposersOfInvalidBlocks;
+    invalidCheckpointProposalOffenseKeys;
+    oversizedProposalOffenseKeys;
+    badAttestationOffenseKeys;
+    /** Tracks the last checkpoint proposal we attested to, to prevent equivocation. */ lastAttestedProposal;
+    constructor(keyStore, epochCache, p2pClient, proposalHandler, blockSource, checkpointsBuilder, worldState, l1ToL2MessageSource, config, blobClient, slashingProtectionSigner, dateProvider = new DateProvider(), telemetry = getTelemetryClient(), log = createLogger('validator')){
+        super(), this.keyStore = keyStore, this.epochCache = epochCache, this.p2pClient = p2pClient, this.proposalHandler = proposalHandler, this.blockSource = blockSource, this.checkpointsBuilder = checkpointsBuilder, this.worldState = worldState, this.l1ToL2MessageSource = l1ToL2MessageSource, this.config = config, this.blobClient = blobClient, this.slashingProtectionSigner = slashingProtectionSigner, this.dateProvider = dateProvider, this.hasRegisteredHandlers = false, this.lastAttestedEpochByAttester = new Map(), this.proposersOfInvalidBlocks = FifoSet.withLimit(MAX_PROPOSERS_OF_INVALID_BLOCKS), this.invalidCheckpointProposalOffenseKeys = FifoSet.withLimit(MAX_TRACKED_INVALID_CHECKPOINT_PROPOSALS), this.oversizedProposalOffenseKeys = FifoSet.withLimit(MAX_TRACKED_INVALID_CHECKPOINT_PROPOSALS), this.badAttestationOffenseKeys = FifoSet.withLimit(MAX_TRACKED_BAD_ATTESTATIONS);
+        // Create child logger with fisherman prefix if in fisherman mode
+        this.log = config.fishermanMode ? log.createChild('[FISHERMAN]') : log;
+        this.tracer = telemetry.getTracer('Validator');
+        this.metrics = new ValidatorMetrics(telemetry);
+        this.validationService = new ValidationService(keyStore, this.getSignatureContext(), this.log.createChild('validation-service'));
+        this.proposalHandler.setCheckpointProposalValidationFailureCallback((proposal, result, proposalInfo)=>this.handleInvalidCheckpointProposal(proposal, result, proposalInfo));
+        // Refresh epoch cache every second to trigger alert if participation in committee changes
+        this.epochCacheUpdateLoop = new RunningPromise(this.handleEpochCommitteeUpdate.bind(this), this.log, 1000);
+        const myAddresses = this.getValidatorAddresses();
+        this.log.verbose(`Initialized validator with addresses: ${myAddresses.map((a)=>a.toString()).join(', ')}`);
+    }
+    static validateKeyStoreConfiguration(keyStoreManager, logger) {
+        const validatorKeyStore = NodeKeystoreAdapter.fromKeyStoreManager(keyStoreManager);
+        const validatorAddresses = validatorKeyStore.getAddresses();
+        // Verify that we can retrieve all required data from the key store
+        for (const address of validatorAddresses){
+            // Functions throw if required data is not available
+            let coinbase;
+            let feeRecipient;
+            try {
+                coinbase = validatorKeyStore.getCoinbaseAddress(address);
+                feeRecipient = validatorKeyStore.getFeeRecipient(address);
+            } catch (error) {
+                throw new Error(`Failed to retrieve required data for validator address ${address}, error: ${error}`);
+            }
+            const publisherAddresses = validatorKeyStore.getPublisherAddresses(address);
+            if (!publisherAddresses.length) {
+                throw new Error(`No publisher addresses found for validator address ${address}`);
+            }
+            logger?.debug(`Validator ${address.toString()} configured with coinbase ${coinbase.toString()}, feeRecipient ${feeRecipient.toString()} and publishers ${publisherAddresses.map((x)=>x.toString()).join()}`);
+        }
+    }
+    async handleEpochCommitteeUpdate() {
+        try {
+            const { committee, epoch } = await this.epochCache.getCommittee('next');
+            if (!committee) {
+                this.log.trace(`No committee found for slot`);
+                return;
+            }
+            this.metrics.setCurrentEpoch(epoch);
+            if (epoch !== this.lastEpochForCommitteeUpdateLoop) {
+                const me = this.getValidatorAddresses();
+                const committeeSet = new Set(committee.map((v)=>v.toString()));
+                const inCommittee = me.filter((a)=>committeeSet.has(a.toString()));
+                if (inCommittee.length > 0) {
+                    this.log.info(`Validators ${inCommittee.map((a)=>a.toString()).join(',')} are on the validator committee for epoch ${epoch}`);
+                } else {
+                    this.log.verbose(`Validators ${me.map((a)=>a.toString()).join(', ')} are not on the validator committee for epoch ${epoch}`);
+                }
+                this.lastEpochForCommitteeUpdateLoop = epoch;
+            }
+        } catch (err) {
+            this.log.error(`Error updating epoch committee`, err);
+        }
+    }
+    static async new(config, checkpointsBuilder, worldState, epochCache, p2pClient, blockSource, l1ToL2MessageSource, txProvider, keyStoreManager, blobClient, reexecutionTracker, dateProvider = new DateProvider(), telemetry = getTelemetryClient(), slashingProtectionDb) {
+        const metrics = new ValidatorMetrics(telemetry);
+        const consensusTimetable = new ConsensusTimetable({
+            l1Constants: epochCache.getL1Constants(),
+            blockDuration: config.blockDurationMs / 1000
+        });
+        const proposalHandler = new ProposalHandler(checkpointsBuilder, worldState, blockSource, l1ToL2MessageSource, txProvider, epochCache, consensusTimetable, config, blobClient, reexecutionTracker, metrics, dateProvider, telemetry, undefined);
+        const nodeKeystoreAdapter = NodeKeystoreAdapter.fromKeyStoreManager(keyStoreManager);
+        let slashingProtectionSigner;
+        if (slashingProtectionDb) {
+            // Shared database mode: use a pre-existing database (e.g. for testing HA setups).
+            ({ signer: slashingProtectionSigner } = createSignerFromSharedDb(slashingProtectionDb, config, {
+                telemetryClient: telemetry,
+                dateProvider
+            }));
+        } else if (config.haSigningEnabled) {
+            // Multi-node HA mode: use PostgreSQL-backed distributed locking.
+            // If maxStuckDutiesAgeMs is not explicitly set, compute it from Aztec slot duration
+            const haConfig = {
+                ...config,
+                maxStuckDutiesAgeMs: config.maxStuckDutiesAgeMs ?? epochCache.getL1Constants().slotDuration * 2 * 1000
+            };
+            ({ signer: slashingProtectionSigner } = await createHASigner(haConfig, {
+                telemetryClient: telemetry,
+                dateProvider
+            }));
+        } else {
+            // Single-node mode: use LMDB-backed local signing protection.
+            // This prevents double-signing if the node crashes and restarts mid-proposal.
+            ({ signer: slashingProtectionSigner } = await createLocalSignerWithProtection(config, {
+                telemetryClient: telemetry,
+                dateProvider
+            }));
+        }
+        const validatorKeyStore = new HAKeyStore(nodeKeystoreAdapter, slashingProtectionSigner);
+        const validator = new ValidatorClient(validatorKeyStore, epochCache, p2pClient, proposalHandler, blockSource, checkpointsBuilder, worldState, l1ToL2MessageSource, config, blobClient, slashingProtectionSigner, dateProvider, telemetry);
+        return validator;
+    }
+    getValidatorAddresses() {
+        return this.keyStore.getAddresses().filter((addr)=>!this.config.disabledValidators.some((disabled)=>disabled.equals(addr)));
+    }
+    getProposalHandler() {
+        return this.proposalHandler;
+    }
+    signWithAddress(addr, msg, context) {
+        return this.keyStore.signTypedDataWithAddress(addr, msg, context);
+    }
+    getSignatureContext() {
+        return {
+            chainId: this.config.l1ChainId,
+            rollupAddress: this.config.rollupAddress
+        };
+    }
+    getCoinbaseForAttestor(attestor) {
+        return this.keyStore.getCoinbaseAddress(attestor);
+    }
+    getFeeRecipientForAttestor(attestor) {
+        return this.keyStore.getFeeRecipient(attestor);
+    }
+    getConfig() {
+        return this.config;
+    }
+    hasProposalEquivocation(slotNumber) {
+        return this.proposalHandler.hasProposalEquivocation(slotNumber);
+    }
+    hasInvalidProposals(slotNumber) {
+        return this.proposalHandler.hasInvalidProposals(slotNumber);
+    }
+    updateConfig(config) {
+        this.config = {
+            ...this.config,
+            ...config
+        };
+        this.proposalHandler.updateConfig(config);
+    }
+    reloadKeystore(newManager) {
+        const newAdapter = NodeKeystoreAdapter.fromKeyStoreManager(newManager);
+        this.keyStore = new HAKeyStore(newAdapter, this.slashingProtectionSigner);
+        this.validationService = new ValidationService(this.keyStore, this.getSignatureContext(), this.log.createChild('validation-service'));
+    }
+    async start() {
+        if (this.epochCacheUpdateLoop.isRunning()) {
+            this.log.warn(`Validator client already started`);
+            return;
+        }
+        await this.keyStore.start();
+        await this.registerHandlers();
+        const myAddresses = this.getValidatorAddresses();
+        const inCommittee = await this.epochCache.filterInCommittee('now', myAddresses);
+        this.log.info(`Started validator with addresses: ${myAddresses.map((a)=>a.toString()).join(', ')}`);
+        if (inCommittee.length > 0) {
+            this.log.info(`Addresses in current validator committee: ${inCommittee.map((a)=>a.toString()).join(', ')}`);
+        }
+        this.epochCacheUpdateLoop.start();
+        return Promise.resolve();
+    }
+    async stop() {
+        await this.epochCacheUpdateLoop.stop();
+        await this.keyStore.stop();
+    }
+    /** Register handlers on the p2p client */ async registerHandlers() {
+        if (!this.hasRegisteredHandlers) {
+            this.hasRegisteredHandlers = true;
+            this.log.debug(`Registering validator handlers for p2p client`);
+            // Block proposal handler - validates but does NOT attest (validators only attest to checkpoints)
+            const blockHandler = (block, proposalSender)=>this.validateBlockProposal(block, proposalSender);
+            this.p2pClient.registerBlockProposalHandler(blockHandler);
+            // Checkpoint proposal handler - validates and creates attestations
+            // The checkpoint is received as CheckpointProposalCore since the lastBlock is extracted
+            // and processed separately via the block handler above.
+            const checkpointHandler = (checkpoint, proposalSender)=>this.attestToCheckpointProposal(checkpoint, proposalSender);
+            this.p2pClient.registerValidatorCheckpointProposalHandler(checkpointHandler);
+            // Duplicate proposal handler - triggers slashing for equivocation
+            this.p2pClient.registerDuplicateProposalCallback((info)=>{
+                this.handleDuplicateProposal(info);
+            });
+            // Oversized proposal handler - triggers slashing for proposals beyond the per-checkpoint block limit
+            this.p2pClient.registerOversizedProposalCallback((info)=>{
+                this.handleOversizedProposal(info);
+            });
+            // Duplicate attestation handler - triggers slashing for attestation equivocation
+            this.p2pClient.registerDuplicateAttestationCallback((info)=>{
+                this.handleDuplicateAttestation(info);
+            });
+            this.p2pClient.registerCheckpointAttestationCallback((attestation)=>{
+                this.handleCheckpointAttestation(attestation);
+            });
+            const myAddresses = this.getValidatorAddresses();
+            this.p2pClient.registerThisValidatorAddresses(myAddresses);
+            await this.p2pClient.addReqRespSubProtocol(ReqRespSubProtocol.AUTH, this.handleAuthRequest.bind(this));
+        }
+    }
+    /**
+   * Validate a block proposal from a peer.
+   * Note: Validators do NOT attest to individual blocks - attestations are only for checkpoint proposals.
+   * @returns true if the proposal is valid, false otherwise
+   */ async validateBlockProposal(proposal, proposalSender) {
+        const slotNumber = proposal.slotNumber;
+        // Note: During escape hatch, we still want to "validate" proposals for observability,
+        // but we intentionally reject them and disable slashing invalid block and attestation flow.
+        const escapeHatchOpen = await this.epochCache.isEscapeHatchOpenAtSlot(slotNumber);
+        const proposer = proposal.getSender();
+        // Reject proposals with invalid signatures
+        if (!proposer) {
+            this.log.warn(`Received block proposal with invalid signature for slot ${slotNumber}`);
+            return false;
+        }
+        // Log self-proposals from HA peers (same validator key on different nodes)
+        if (this.getValidatorAddresses().some((addr)=>addr.equals(proposer))) {
+            this.log.verbose(`Processing block proposal from HA peer for slot ${slotNumber}`, {
+                proposer: proposer.toString(),
+                slotNumber
+            });
+        }
+        // Check if we're in the committee (for metrics purposes)
+        const inCommittee = await this.epochCache.filterInCommittee(slotNumber, this.getValidatorAddresses());
+        const partOfCommittee = inCommittee.length > 0;
+        const proposalInfo = {
+            ...proposal.toBlockInfo(),
+            proposer: proposer.toString()
+        };
+        this.log.info(`Received block proposal for slot ${slotNumber}`, {
+            ...proposalInfo,
+            txHashes: proposal.txHashes.map((t)=>t.toString()),
+            fishermanMode: this.config.fishermanMode || false
+        });
+        // Reexecute outside the escape hatch so slashing observers can detect invalid proposals even when penalties are 0.
+        const validationResult = await this.proposalHandler.handleBlockProposal(proposal, proposalSender, !escapeHatchOpen);
+        if (!validationResult.isValid) {
+            const reason = validationResult.reason || 'unknown';
+            this.log.warn(`Block proposal validation failed: ${reason}`, proposalInfo);
+            // Classify failure reason: bad proposal vs node issue
+            const badProposalReasons = [
+                'invalid_proposal',
+                'state_mismatch',
+                'failed_txs',
+                'parent_block_wrong_slot',
+                'duplicate_txs',
+                'invalid_embedded_txs'
+            ];
+            if (badProposalReasons.includes(reason)) {
+                this.metrics.incFailedAttestationsBadProposal(1, reason, partOfCommittee);
+            } else {
+                // Node issues so we can't validate
+                this.metrics.incFailedAttestationsNodeIssue(1, reason, partOfCommittee);
+            }
+            if (!escapeHatchOpen && validationResult.reason && SLASHABLE_BLOCK_PROPOSAL_VALIDATION_RESULT.includes(validationResult.reason)) {
+                this.log.info(`Detected invalid block proposal offense`, {
+                    ...proposalInfo,
+                    amount: this.config.slashBroadcastedInvalidBlockPenalty,
+                    offenseType: getOffenseTypeName(OffenseType.BROADCASTED_INVALID_BLOCK_PROPOSAL)
+                });
+                this.slashInvalidBlock(proposal);
+                this.markInvalidProposalSlot(proposal.slotNumber);
+            }
+            return false;
+        }
+        this.log.info(`Validated block proposal for slot ${slotNumber}`, {
+            ...proposalInfo,
+            inCommittee: partOfCommittee,
+            fishermanMode: this.config.fishermanMode || false,
+            escapeHatchOpen
+        });
+        if (escapeHatchOpen) {
+            this.log.warn(`Escape hatch open for slot ${slotNumber}, rejecting block proposal`, proposalInfo);
+            return false;
+        }
+        return true;
+    }
+    /**
+   * Validate and attest to a checkpoint proposal from a peer.
+   * The proposal is received as CheckpointProposalCore (without lastBlock) since
+   * the lastBlock is extracted and processed separately via the block handler.
+   * @returns Checkpoint attestations if valid, undefined otherwise
+   */ async attestToCheckpointProposal(proposal, _proposalSender) {
+        const proposalSlotNumber = proposal.slotNumber;
+        const proposer = proposal.getSender();
+        // If escape hatch is open for this slot's epoch, do not attest.
+        if (await this.epochCache.isEscapeHatchOpenAtSlot(proposalSlotNumber)) {
+            this.log.warn(`Escape hatch open for slot ${proposalSlotNumber}, skipping checkpoint attestation handling`);
+            return undefined;
+        }
+        // Early-out for equivocation: refuses if we've already attested to a higher slot.
+        if (!this.shouldAttestToSlot(proposalSlotNumber)) {
+            return undefined;
+        }
+        // Ignore proposals from ourselves (may happen in HA setups)
+        if (proposer && this.getValidatorAddresses().some((addr)=>addr.equals(proposer))) {
+            this.log.debug(`Not attesting to block proposal from self for slot ${proposalSlotNumber}`, {
+                proposer: proposer.toString(),
+                proposalSlotNumber
+            });
+            return undefined;
+        }
+        // Check that I have any address in the committee where this checkpoint will land before attesting
+        const inCommittee = await this.epochCache.filterInCommittee(proposalSlotNumber, this.getValidatorAddresses());
+        const partOfCommittee = inCommittee.length > 0;
+        const proposalInfo = {
+            proposalSlotNumber,
+            archive: proposal.archive.toString(),
+            proposer: proposer?.toString()
+        };
+        this.log.info(`Received checkpoint proposal for slot ${proposalSlotNumber}`, {
+            ...proposalInfo,
+            fishermanMode: this.config.fishermanMode || false
+        });
+        // Validate the checkpoint proposal before attesting (unless skipCheckpointProposalValidation is set).
+        // Uses the cached result from the all-nodes callback if available (avoids double validation).
+        let checkpointNumber;
+        if (this.config.skipCheckpointProposalValidation) {
+            this.log.warn(`Skipping checkpoint proposal validation for slot ${proposalSlotNumber}`, proposalInfo);
+            checkpointNumber = CheckpointNumber(0);
+        } else {
+            const validationResult = await this.proposalHandler.handleCheckpointProposal(proposal, proposalInfo);
+            if (!validationResult.isValid) {
+                this.log.warn(`Checkpoint proposal validation failed: ${validationResult.reason}`, proposalInfo);
+                return undefined;
+            }
+            checkpointNumber = validationResult.checkpointNumber;
+        }
+        // Check that I have any address in current committee before attesting
+        // In fisherman mode, we still create attestations for validation even if not in committee
+        if (!partOfCommittee && !this.config.fishermanMode) {
+            this.log.verbose(`No validator in the current committee, skipping attestation`, proposalInfo);
+            return undefined;
+        }
+        // Provided all of the above checks pass, we can attest to the proposal
+        this.log.info(`${partOfCommittee ? 'Attesting to' : 'Validated'} checkpoint proposal for slot ${proposalSlotNumber}`, {
+            ...proposalInfo,
+            inCommittee: partOfCommittee,
+            fishermanMode: this.config.fishermanMode || false
+        });
+        this.metrics.incSuccessfulAttestations(inCommittee.length);
+        // Track epoch participation per attester: count each (attester, epoch) pair at most once
+        const proposalEpoch = getEpochAtSlot(proposalSlotNumber, this.epochCache.getL1Constants());
+        for (const attester of inCommittee){
+            const key = attester.toString();
+            const lastEpoch = this.lastAttestedEpochByAttester.get(key);
+            if (lastEpoch === undefined || proposalEpoch > lastEpoch) {
+                this.lastAttestedEpochByAttester.set(key, proposalEpoch);
+                this.metrics.incAttestedEpochCount(attester);
+            }
+        }
+        // Determine which validators should attest
+        let attestors;
+        if (partOfCommittee) {
+            attestors = inCommittee;
+        } else if (this.config.fishermanMode) {
+            // In fisherman mode, create attestations for validation purposes even if not in committee. These won't be broadcast.
+            attestors = this.getValidatorAddresses();
+        } else {
+            attestors = [];
+        }
+        // Only create attestations if we have attestors
+        if (attestors.length === 0) {
+            return undefined;
+        }
+        if (this.config.fishermanMode) {
+            // bail out early and don't save attestations to the pool in fisherman mode
+            this.log.info(`Creating checkpoint attestations for slot ${proposalSlotNumber}`, {
+                ...proposalInfo,
+                attestors: attestors.map((a)=>a.toString())
+            });
+            return undefined;
+        }
+        return await this.createCheckpointAttestationsFromProposal(proposal, attestors, checkpointNumber);
+    }
+    /**
+   * Checks if we should attest to a slot based on equivocation prevention rules.
+   * @returns true if we should attest, false if we should skip
+   */ shouldAttestToSlot(slotNumber) {
+        // If attestToEquivocatedProposals is true, always allow
+        if (this.config.attestToEquivocatedProposals) {
+            return true;
+        }
+        // Check if incoming slot is strictly greater than last attested
+        if (this.lastAttestedProposal && slotNumber <= this.lastAttestedProposal.slotNumber) {
+            this.log.warn(`Refusing to process a proposal for slot ${slotNumber} given we already attested to a proposal for slot ${this.lastAttestedProposal.slotNumber}`);
+            return false;
+        }
+        return true;
+    }
+    async createCheckpointAttestationsFromProposal(proposal, attestors = [], checkpointNumber) {
+        // Equivocation check: must happen right before signing to minimize the race window
+        if (!this.shouldAttestToSlot(proposal.slotNumber)) {
+            return undefined;
+        }
+        const attestations = await this.validationService.attestToCheckpointProposal(proposal, attestors, checkpointNumber);
+        // Track the proposal we attested to (to prevent equivocation)
+        this.lastAttestedProposal = proposal;
+        await this.p2pClient.addOwnCheckpointAttestations(attestations);
+        return attestations;
+    }
+    /**
+   * Uploads blobs for a checkpoint to the filestore (fire and forget).
+   */ async uploadBlobsForCheckpoint(proposal, proposalInfo) {
+        try {
+            const lastBlockHeader = (await this.blockSource.getBlockData({
+                archive: proposal.archive
+            }))?.header;
+            if (!lastBlockHeader) {
+                this.log.warn(`Failed to get last block header for blob upload`, proposalInfo);
+                return;
+            }
+            const blocks = await this.blockSource.getBlocksForSlot(proposal.slotNumber);
+            if (blocks.length === 0) {
+                this.log.warn(`No blocks found for blob upload`, proposalInfo);
+                return;
+            }
+            const blobFields = blocks.flatMap((b)=>b.toBlobFields());
+            const blobs = await getBlobsPerL1Block(blobFields);
+            await this.blobClient.sendBlobsToFilestore(blobs);
+            this.log.debug(`Uploaded ${blobs.length} blobs to filestore for checkpoint at slot ${proposal.slotNumber}`, {
+                ...proposalInfo,
+                numBlobs: blobs.length
+            });
+        } catch (err) {
+            this.log.warn(`Failed to upload blobs for checkpoint: ${err}`, proposalInfo);
+        }
+    }
+    slashInvalidBlock(proposal) {
+        const proposer = proposal.getSender();
+        // Skip if signature is invalid (shouldn't happen since we validate earlier)
+        if (!proposer) {
+            this.log.warn(`Cannot slash proposal with invalid signature`);
+            return;
+        }
+        this.proposersOfInvalidBlocks.add(proposer.toString());
+        this.emit(WANT_TO_SLASH_EVENT, [
+            {
+                validator: proposer,
+                amount: this.config.slashBroadcastedInvalidBlockPenalty,
+                offenseType: OffenseType.BROADCASTED_INVALID_BLOCK_PROPOSAL,
+                epochOrSlot: BigInt(proposal.slotNumber)
+            }
+        ]);
+    }
+    handleInvalidCheckpointProposal(proposal, result, proposalInfo) {
+        if (!SLASHABLE_CHECKPOINT_PROPOSAL_VALIDATION_RESULT[result.reason]) {
+            return;
+        }
+        // The slot is already marked invalid by the all-nodes checkpoint handler that invokes this callback,
+        // so we only emit the proposer slash event here.
+        if (this.slashInvalidCheckpointProposal(proposal)) {
+            this.log.info(`Detected invalid checkpoint proposal offense`, {
+                ...proposalInfo,
+                reason: result.reason,
+                amount: this.config.slashBroadcastedInvalidCheckpointProposalPenalty,
+                offenseType: getOffenseTypeName(OffenseType.BROADCASTED_INVALID_CHECKPOINT_PROPOSAL)
+            });
+        }
+    }
+    slashInvalidCheckpointProposal(proposal) {
+        const proposer = proposal.getSender();
+        if (!proposer) {
+            this.log.warn(`Cannot slash checkpoint proposal with invalid signature`, {
+                slotNumber: proposal.slotNumber,
+                archive: proposal.archive.toString()
+            });
+            return false;
+        }
+        const offenseType = OffenseType.BROADCASTED_INVALID_CHECKPOINT_PROPOSAL;
+        const offenseKey = `${proposer.toString()}:${offenseType}:${proposal.slotNumber}`;
+        if (!this.invalidCheckpointProposalOffenseKeys.addIfAbsent(offenseKey)) {
+            return false;
+        }
+        this.emit(WANT_TO_SLASH_EVENT, [
+            {
+                validator: proposer,
+                amount: this.config.slashBroadcastedInvalidCheckpointProposalPenalty,
+                offenseType,
+                epochOrSlot: BigInt(proposal.slotNumber)
+            }
+        ]);
+        return true;
+    }
+    markInvalidProposalSlot(slotNumber) {
+        this.proposalHandler.markInvalidProposalSlot(slotNumber);
+    }
+    handleCheckpointAttestation(attestation) {
+        const slotNumber = attestation.slotNumber;
+        if (!this.proposalHandler.hasInvalidProposals(slotNumber) || this.proposalHandler.hasProposalEquivocation(slotNumber)) {
+            return;
+        }
+        const attester = attestation.getSender();
+        if (!attester) {
+            this.log.warn(`Cannot slash checkpoint attestation with invalid signature`, {
+                slotNumber,
+                archive: attestation.archive.toString()
+            });
+            return;
+        }
+        this.slashAttestedToInvalidCheckpointProposal(slotNumber, attester);
+    }
+    slashAttestedToInvalidCheckpointProposal(slotNumber, attester) {
+        const offenseKey = `${attester.toString()}:${OffenseType.ATTESTED_TO_INVALID_CHECKPOINT_PROPOSAL}:${slotNumber}`;
+        if (!this.badAttestationOffenseKeys.addIfAbsent(offenseKey)) {
+            return;
+        }
+        this.log.info(`Detected attestation to invalid checkpoint proposal offense`, {
+            attester: attester.toString(),
+            slotNumber,
+            amount: this.config.slashAttestInvalidCheckpointProposalPenalty,
+            offenseType: getOffenseTypeName(OffenseType.ATTESTED_TO_INVALID_CHECKPOINT_PROPOSAL)
+        });
+        this.emit(WANT_TO_SLASH_EVENT, [
+            {
+                validator: attester,
+                amount: this.config.slashAttestInvalidCheckpointProposalPenalty,
+                offenseType: OffenseType.ATTESTED_TO_INVALID_CHECKPOINT_PROPOSAL,
+                epochOrSlot: BigInt(slotNumber)
+            }
+        ]);
+    }
+    /**
+   * Handle detection of an oversized block proposal: one whose index within its checkpoint lands at or
+   * beyond the consensus per-checkpoint block limit. A single signed proposal at an illegal index is
+   * self-contained evidence, so emit an invalid-block-proposal slash event for the proposer, deduped per
+   * (proposer, slot) since the p2p layer reports every oversized proposal it stores.
+   */ handleOversizedProposal(info) {
+        const { slot, proposer } = info;
+        const offenseType = OffenseType.BROADCASTED_INVALID_BLOCK_PROPOSAL;
+        if (!this.oversizedProposalOffenseKeys.addIfAbsent(`${proposer.toString()}:${offenseType}:${slot}`)) {
+            return;
+        }
+        this.log.info(`Detected oversized block proposal offense from ${proposer.toString()} at slot ${slot}`, {
+            proposer: proposer.toString(),
+            slot,
+            amount: this.config.slashBroadcastedInvalidBlockPenalty,
+            offenseType: getOffenseTypeName(offenseType)
+        });
+        this.emit(WANT_TO_SLASH_EVENT, [
+            {
+                validator: proposer,
+                amount: this.config.slashBroadcastedInvalidBlockPenalty,
+                offenseType,
+                epochOrSlot: BigInt(slot)
+            }
+        ]);
+    }
+    /**
+   * Handle detection of a duplicate proposal (equivocation).
+   * Emits a slash event when a proposer sends multiple proposals for the same position.
+   */ handleDuplicateProposal(info) {
+        const { slot, proposer, type } = info;
+        this.proposalHandler.markProposalEquivocation(slot);
+        this.log.info(`Detected duplicate ${type} proposal offense from ${proposer.toString()} at slot ${slot}`, {
+            proposer: proposer.toString(),
+            slot,
+            type,
+            amount: this.config.slashDuplicateProposalPenalty,
+            offenseType: getOffenseTypeName(OffenseType.DUPLICATE_PROPOSAL)
+        });
+        this.emit(WANT_TO_SLASH_EVENT, [
+            {
+                validator: proposer,
+                amount: this.config.slashDuplicateProposalPenalty,
+                offenseType: OffenseType.DUPLICATE_PROPOSAL,
+                epochOrSlot: BigInt(slot)
+            }
+        ]);
+        this.emit(WANT_TO_CLEAR_SLASH_EVENT, [
+            {
+                offenseType: OffenseType.ATTESTED_TO_INVALID_CHECKPOINT_PROPOSAL,
+                epochOrSlot: BigInt(slot)
+            }
+        ]);
+    }
+    /**
+   * Handle detection of a duplicate attestation (equivocation).
+   * Emits a slash event when an attester signs attestations for different proposals at the same slot.
+   */ handleDuplicateAttestation(info) {
+        const { slot, attester } = info;
+        this.log.info(`Detected duplicate attestation offense from ${attester.toString()} at slot ${slot}`, {
+            attester: attester.toString(),
+            slot,
+            amount: this.config.slashDuplicateAttestationPenalty,
+            offenseType: getOffenseTypeName(OffenseType.DUPLICATE_ATTESTATION)
+        });
+        this.emit(WANT_TO_SLASH_EVENT, [
+            {
+                validator: attester,
+                amount: this.config.slashDuplicateAttestationPenalty,
+                offenseType: OffenseType.DUPLICATE_ATTESTATION,
+                epochOrSlot: BigInt(slot)
+            }
+        ]);
+    }
+    async createBlockProposal(blockHeader, checkpointNumber, indexWithinCheckpoint, archive, txs, proposerAddress, options = {}, bucketRef) {
+        // Validate that we're not creating a proposal for an older or equal position
+        if (this.lastProposedBlock) {
+            const lastSlot = this.lastProposedBlock.slotNumber;
+            const lastIndex = this.lastProposedBlock.indexWithinCheckpoint;
+            const newSlot = blockHeader.globalVariables.slotNumber;
+            if (newSlot < lastSlot || newSlot === lastSlot && indexWithinCheckpoint <= lastIndex) {
+                throw new Error(`Cannot create block proposal for slot ${newSlot} index ${indexWithinCheckpoint}: ` + `already proposed block for slot ${lastSlot} index ${lastIndex}`);
+            }
+        }
+        this.log.info(`Assembling block proposal for block ${blockHeader.globalVariables.blockNumber} slot ${blockHeader.globalVariables.slotNumber}`);
+        const newProposal = await this.validationService.createBlockProposal(blockHeader, checkpointNumber, indexWithinCheckpoint, archive, txs, proposerAddress, {
+            ...options,
+            broadcastInvalidBlockProposal: options.broadcastInvalidBlockProposal || this.config.broadcastInvalidBlockProposal
+        }, bucketRef);
+        this.lastProposedBlock = newProposal;
+        return newProposal;
+    }
+    async createCheckpointProposal(checkpointHeader, archive, checkpointNumber, feeAssetPriceModifier, lastBlockProposal, proposerAddress, options = {}) {
+        // Validate that we're not creating a proposal for an older or equal slot
+        if (this.lastProposedCheckpoint) {
+            const lastSlot = this.lastProposedCheckpoint.slotNumber;
+            const newSlot = checkpointHeader.slotNumber;
+            if (newSlot <= lastSlot) {
+                throw new Error(`Cannot create checkpoint proposal for slot ${newSlot}: ` + `already proposed checkpoint for slot ${lastSlot}`);
+            }
+        }
+        this.log.info(`Assembling checkpoint proposal for slot ${checkpointHeader.slotNumber}`);
+        const newProposal = await this.validationService.createCheckpointProposal(checkpointHeader, archive, checkpointNumber, feeAssetPriceModifier, lastBlockProposal, proposerAddress, options);
+        this.lastProposedCheckpoint = newProposal;
+        // Self-record this slot's outcome on the re-execution tracker. Proposers don't run their
+        // own proposals through `handleCheckpointProposal`, so without this call the proposer's
+        // sentinel would see no outcome for slots it proposed and would mis-attribute itself as
+        // inactive. We pass the locally-computed `archive` (not `newProposal.archive`, which may
+        // be intentionally corrupted under test-only flags); from the proposer's local-view
+        // perspective the work it just completed is valid by definition.
+        this.proposalHandler.recordOwnCheckpointProposalAsValid(checkpointHeader.slotNumber, archive, checkpointNumber);
+        return newProposal;
+    }
+    async broadcastBlockProposal(proposal) {
+        await this.p2pClient.broadcastProposal(proposal);
+    }
+    async signAttestationsAndSigners(attestationsAndSigners, proposer, slot, checkpointNumber) {
+        return await this.validationService.signAttestationsAndSigners(attestationsAndSigners, proposer, slot, checkpointNumber);
+    }
+    async collectOwnAttestations(proposal, checkpointNumber) {
+        const slot = proposal.slotNumber;
+        const inCommittee = await this.epochCache.filterInCommittee(slot, this.getValidatorAddresses());
+        this.log.debug(`Collecting ${inCommittee.length} self-attestations for slot ${slot}`, {
+            inCommittee
+        });
+        const attestations = await this.createCheckpointAttestationsFromProposal(proposal, inCommittee, checkpointNumber);
+        if (!attestations) {
+            return [];
+        }
+        // We broadcast our own attestations to our peers so, in case our block does not get mined on L1,
+        // other nodes can see that our validators did attest to this block proposal, and do not slash us
+        // due to inactivity for missed attestations.
+        void this.p2pClient.broadcastCheckpointAttestations(attestations).catch((err)=>{
+            this.log.error(`Failed to broadcast self-attestations for slot ${slot}`, err);
+        });
+        return attestations;
+    }
+    async collectAttestations(proposal, required, deadline, checkpointNumber) {
+        // Wait and poll the p2pClient's attestation pool for this checkpoint until we have enough attestations
+        const slot = proposal.slotNumber;
+        this.log.debug(`Collecting ${required} attestations for slot ${slot} with deadline ${deadline.toISOString()}`);
+        if (+deadline < this.dateProvider.now()) {
+            this.log.error(`Deadline ${deadline.toISOString()} for collecting ${required} attestations for slot ${slot} is in the past`);
+            throw new AttestationTimeoutError(0, required, slot);
+        }
+        await this.collectOwnAttestations(proposal, checkpointNumber);
+        const proposalPayloadHash = proposal.getPayloadHash();
+        const myAddresses = this.getValidatorAddresses();
+        let attestations = [];
+        while(true){
+            // The pool already filters by proposal payload hash; if any attestation slips through with a
+            // mismatched payload hash, drop it defensively. Equivocations are emitted as separate slash
+            // events from libp2p_service.
+            const collectedAttestations = await this.p2pClient.getCheckpointAttestationsForSlot(slot, proposalPayloadHash);
+            // Log new attestations we collected
+            const oldSenders = attestations.map((attestation)=>attestation.getSender());
+            for (const collected of collectedAttestations){
+                const collectedSender = collected.getSender();
+                // Skip attestations with invalid signatures. Should not happen as we don't add invalid attestations to our pool.
+                if (!collectedSender) {
+                    this.log.warn(`Skipping attestation with invalid signature for slot ${slot}`);
+                    continue;
+                }
+                if (!myAddresses.some((address)=>address.equals(collectedSender)) && !oldSenders.some((sender)=>sender?.equals(collectedSender))) {
+                    this.log.debug(`Received attestation for slot ${slot} from ${collectedSender.toString()}`);
+                }
+            }
+            attestations = collectedAttestations;
+            if (attestations.length >= required) {
+                this.log.verbose(`Collected all ${required} attestations for slot ${slot}`);
+                return attestations;
+            }
+            if (+deadline < this.dateProvider.now()) {
+                this.log.error(`Timeout ${deadline.toISOString()} waiting for ${required} attestations for slot ${slot}`);
+                throw new AttestationTimeoutError(attestations.length, required, slot);
+            }
+            this.log.debug(`Collected ${attestations.length} of ${required} attestations so far`);
+            await sleep(this.config.attestationPollingIntervalMs);
+        }
+    }
+    async handleAuthRequest(peer, msg) {
+        const authRequest = AuthRequest.fromBuffer(msg);
+        const statusMessage = await this.p2pClient.handleAuthRequestFromPeer(authRequest, peer).catch((_)=>undefined);
+        if (statusMessage === undefined) {
+            return Buffer.alloc(0);
+        }
+        // Find a validator address that is in the set
+        const allRegisteredValidators = await this.epochCache.getRegisteredValidators();
+        const addressToUse = this.getValidatorAddresses().find((address)=>allRegisteredValidators.find((v)=>v.equals(address)) !== undefined);
+        if (addressToUse === undefined) {
+            // We don't have a registered address
+            return Buffer.alloc(0);
+        }
+        const payloadToSign = authRequest.getPayloadToSign();
+        // AUTH_REQUEST doesn't require HA protection - multiple signatures are safe
+        const context = {
+            dutyType: DutyType.AUTH_REQUEST
+        };
+        const signature = await this.keyStore.signMessageWithAddress(addressToUse, payloadToSign, context);
+        const authResponse = new AuthResponse(statusMessage, signature);
+        return authResponse.toBuffer();
+    }
+}