@aztec/validator-client 0.0.0-test.1 → 0.0.1-commit.017a351

package/dest/key_store/node_keystore_adapter.js

@@ -0,0 +1,330 @@
+import { KeystoreManager, loadKeystoreFile } from '@aztec/node-keystore';
+import { InvalidValidatorPrivateKeyError } from '@aztec/stdlib/validators';
+import { privateKeyToAccount } from 'viem/accounts';
+export class NodeKeystoreAdapter {
+    keystoreManager;
+    // Per-validator cache (lazy)
+    validators = new Map();
+    addressIndex = new Map();
+    constructor(keystoreManager){
+        this.keystoreManager = keystoreManager;
+    }
+    /**
+   * Create an adapter from a keystore JSON file on disk.
+   * @param keystoreFilePath Absolute or relative path to a keystore JSON file
+   * @returns A configured NodeKeystoreAdapter instance
+   * @throws Error when the file fails schema validation or cannot be read
+   */ static fromKeystoreFile(keystoreFilePath) {
+        const keystoreConfig = loadKeystoreFile(keystoreFilePath);
+        return NodeKeystoreAdapter.fromKeystoreConfig(keystoreConfig);
+    }
+    /**
+   * Create an adapter from an in-memory keystore-like object.
+   * Validates resolved duplicate attester addresses across validators and sources.
+   * @param keystoreConfig Parsed config object (typically result of loadKeystoreFile)
+   * @returns A configured NodeKeystoreAdapter instance
+   * @throws Error when resolved duplicate attester addresses are detected
+   */ static fromKeystoreConfig(keystoreConfig) {
+        const keystoreManager = new KeystoreManager(keystoreConfig);
+        // Validate resolved attester addresses (covers JSON V3 and mnemonic duplicates across validators)
+        keystoreManager.validateResolvedUniqueAttesterAddresses();
+        return new NodeKeystoreAdapter(keystoreManager);
+    }
+    /**
+   * Build an adapter directly from a list of validator private keys.
+   * Each key becomes a separate validator using the same key for attester and publisher,
+   * coinbase defaults to the derived EOA address, and feeRecipient is a 32-byte padded address.
+   * Note: Fee recipient is a temporary placeholder, replace with actual fee recipient when implemented.
+   */ static fromPrivateKeys(privateKeys) {
+        // Minimal validation: 0x + 64 hex
+        const isPk = (s)=>/^0x[0-9a-fA-F]{64}$/.test(s);
+        for (const pk of privateKeys){
+            if (!isPk(pk)) {
+                throw new InvalidValidatorPrivateKeyError();
+            }
+        }
+        const validators = privateKeys.map((pk)=>{
+            const account = privateKeyToAccount(pk);
+            const ethAddress = account.address;
+            // TODO: Temporary fee recipient, replace with actual fee recipient when implemented
+            const feeRecipient = `0x${ethAddress.slice(2).padStart(64, '0')}`;
+            return {
+                attester: pk,
+                publisher: pk,
+                coinbase: ethAddress,
+                feeRecipient
+            };
+        });
+        const cfg = {
+            schemaVersion: 1,
+            validators
+        };
+        return NodeKeystoreAdapter.fromKeystoreConfig(cfg);
+    }
+    /**
+   * Build an adapter for a Web3Signer setup by providing the signer URL and the EOA addresses.
+   * Each address becomes a separate validator; attester and publisher point to the same remote signer entry.
+   * Note: Fee recipient is a temporary placeholder, replace with actual fee recipient when implemented.
+   */ static fromWeb3Signer(web3SignerUrl, addresses) {
+        const validators = addresses.map((address)=>{
+            const ethAddress = address.toString();
+            // TODO: Temporary fee recipient, replace with actual fee recipient when implemented
+            const feeRecipient = `0x${ethAddress.slice(2).padStart(64, '0')}`;
+            return {
+                attester: {
+                    address: ethAddress,
+                    remoteSignerUrl: web3SignerUrl
+                },
+                publisher: {
+                    address: ethAddress,
+                    remoteSignerUrl: web3SignerUrl
+                },
+                coinbase: ethAddress,
+                feeRecipient
+            };
+        });
+        const cfg = {
+            schemaVersion: 1,
+            validators
+        };
+        return NodeKeystoreAdapter.fromKeystoreConfig(cfg);
+    }
+    static fromKeyStoreManager(manager) {
+        return new NodeKeystoreAdapter(manager);
+    }
+    /**
+   * Normalize address keys to lowercase hex strings for map/set usage.
+   */ static key(addr) {
+        return typeof addr === 'string' ? addr.toLowerCase() : addr.toString().toLowerCase();
+    }
+    /**
+   * Ensure per-validator signer cache exists; build it by creating
+   * attester/publisher signers and populating indices when missing.
+   * @param validatorIndex Index of the validator in the keystore
+   * @returns The cached validator entry
+   */ ensureValidator(validatorIndex) {
+        const cached = this.validators.get(validatorIndex);
+        if (cached) {
+            return cached;
+        }
+        const attesters = this.keystoreManager.createAttesterSigners(validatorIndex);
+        const publishers = this.keystoreManager.createPublisherSigners(validatorIndex);
+        // Build 'all' + indices
+        const byAddress = new Map();
+        const attesterSet = new Set();
+        for (const s of attesters){
+            const k = NodeKeystoreAdapter.key(s.address);
+            byAddress.set(k, s);
+            attesterSet.add(k);
+        }
+        for (const s of publishers){
+            const k = NodeKeystoreAdapter.key(s.address);
+            if (!byAddress.has(k)) {
+                byAddress.set(k, s);
+            }
+        }
+        const all = Array.from(byAddress.values());
+        // Populate global index
+        for (const [k, signer] of byAddress.entries()){
+            this.addressIndex.set(k, {
+                signer,
+                validatorIndex
+            });
+        }
+        const built = {
+            attesters,
+            publishers,
+            all,
+            byAddress,
+            attesterSet
+        };
+        this.validators.set(validatorIndex, built);
+        return built;
+    }
+    /**
+   * Iterate all validator indices in the keystore manager.
+   */ *validatorIndices() {
+        const n = this.keystoreManager.getValidatorCount();
+        for(let i = 0; i < n; i++){
+            yield i;
+        }
+    }
+    /**
+   * Find the validator index that contains the given attester address.
+   * @param attesterAddress Address to locate
+   * @returns Validator index
+   * @throws Error when no validator contains the attester
+   */ findValidatorIndexForAttester(attesterAddress) {
+        const key = NodeKeystoreAdapter.key(attesterAddress);
+        // Fast path: if we’ve already cached any validator that includes this as attester
+        for (const i of this.validatorIndices()){
+            const v = this.ensureValidator(i);
+            if (v.attesterSet.has(key)) {
+                return i;
+            }
+        }
+        throw new Error(`Attester address ${attesterAddress.toString()} not found in any validator configuration`);
+    }
+    /**
+   * Get attester address by flat index across all validators' attester sets.
+   * @param index Zero-based flat index across all attesters
+   * @returns EthAddress for the indexed attester
+   * @throws Error when index is out of bounds
+   */ getAddress(index) {
+        const all = this.getAddresses();
+        if (index < 0 || index >= all.length) {
+            throw new Error(`Index ${index} is out of bounds (0..${all.length - 1}).`);
+        }
+        return all[index];
+    }
+    /**
+   * Get all attester addresses across validators (legacy-compatible view).
+   */ getAddresses() {
+        const out = [];
+        for (const i of this.validatorIndices()){
+            const v = this.ensureValidator(i);
+            // attester addresses only for backward compatibility
+            for (const s of v.attesters){
+                out.push(s.address);
+            }
+        }
+        return out;
+    }
+    /**
+   * Sign typed data with all attester signers across validators.
+   * @param typedData EIP-712 typed data
+   * @param _context Signing context (ignored by NodeKeystoreAdapter, used for HA protection)
+   * @returns Array of signatures in validator order, flattened
+   */ async signTypedData(typedData, _context) {
+        const jobs = [];
+        for (const i of this.validatorIndices()){
+            const v = this.ensureValidator(i);
+            for (const s of v.attesters){
+                jobs.push(this.keystoreManager.signTypedData(s, typedData));
+            }
+        }
+        return await Promise.all(jobs);
+    }
+    /**
+   * Sign a message with all attester signers across validators.
+   * @param message 32-byte message (already hashed/padded as needed)
+   * @param _context Signing context (ignored by NodeKeystoreAdapter, used for HA protection)
+   * @returns Array of signatures in validator order, flattened
+   */ async signMessage(message, _context) {
+        const jobs = [];
+        for (const i of this.validatorIndices()){
+            const v = this.ensureValidator(i);
+            for (const s of v.attesters){
+                jobs.push(this.keystoreManager.signMessage(s, message));
+            }
+        }
+        return await Promise.all(jobs);
+    }
+    /**
+   * Sign typed data with a signer identified by address (any role).
+   * Hydrates caches on-demand when the address is first seen.
+   * @param address Address to sign with
+   * @param typedData EIP-712 typed data
+   * @param _context Signing context (ignored by NodeKeystoreAdapter, used for HA protection)
+   * @returns Signature from the signer matching the address
+   * @throws Error when no signer exists for the address
+   */ async signTypedDataWithAddress(address, typedData, _context) {
+        const entry = this.addressIndex.get(NodeKeystoreAdapter.key(address));
+        if (entry) {
+            return await this.keystoreManager.signTypedData(entry.signer, typedData);
+        }
+        // If not in global index yet, lazily hydrate all validators once and retry
+        for (const i of this.validatorIndices()){
+            this.ensureValidator(i);
+        }
+        const second = this.addressIndex.get(NodeKeystoreAdapter.key(address));
+        if (second) {
+            return await this.keystoreManager.signTypedData(second.signer, typedData);
+        }
+        throw new Error(`No signer found for address ${address.toString()}`);
+    }
+    /**
+   * Sign a message with a signer identified by address (any role).
+   * Hydrates caches on-demand when the address is first seen.
+   * @param address Address to sign with
+   * @param message 32-byte message
+   * @param _context Signing context (ignored by NodeKeystoreAdapter, used for HA protection)
+   * @returns Signature from the signer matching the address
+   * @throws Error when no signer exists for the address
+   */ async signMessageWithAddress(address, message, _context) {
+        const entry = this.addressIndex.get(NodeKeystoreAdapter.key(address));
+        if (entry) {
+            return await this.keystoreManager.signMessage(entry.signer, message);
+        }
+        for (const i of this.validatorIndices()){
+            this.ensureValidator(i);
+        }
+        const second = this.addressIndex.get(NodeKeystoreAdapter.key(address));
+        if (second) {
+            return await this.keystoreManager.signMessage(second.signer, message);
+        }
+        throw new Error(`No signer found for address ${address.toString()}`);
+    }
+    /**
+   * Get all attester addresses across validators (alias of getAddresses).
+   */ getAttesterAddresses() {
+        return this.getAddresses();
+    }
+    /**
+   * Get the effective coinbase address for the validator that contains the given attester.
+   * @param attesterAddress Address of an attester belonging to the validator
+   * @returns Coinbase EthAddress
+   */ getCoinbaseAddress(attesterAddress) {
+        const validatorIndex = this.findValidatorIndexForAttester(attesterAddress);
+        return this.keystoreManager.getCoinbaseAddress(validatorIndex, attesterAddress);
+    }
+    /**
+   * Get the publisher addresses for the validator that contains the given attester.
+   * @param attesterAddress Address of an attester belonging to the validator
+   * @returns Array of publisher addresses
+   */ getPublisherAddresses(attesterAddress) {
+        const validatorIndex = this.findValidatorIndexForAttester(attesterAddress);
+        const v = this.ensureValidator(validatorIndex);
+        return v.publishers.map((s)=>s.address);
+    }
+    getAttestorForPublisher(publisherAddress) {
+        const attestorAddresses = this.getAttesterAddresses();
+        for (const attestor of attestorAddresses){
+            const publishers = this.getPublisherAddresses(attestor);
+            const found = publishers.some((publisher)=>publisher.equals(publisherAddress));
+            if (found) {
+                return attestor;
+            }
+        }
+        // Could not find an attestor for this publisher
+        throw new Error(`Failed to find attestor for publisher ${publisherAddress.toString()}`);
+    }
+    /**
+   * Get the fee recipient for the validator that contains the given attester.
+   * @param attesterAddress Address of an attester belonging to the validator
+   * @returns Fee recipient as AztecAddress
+   */ getFeeRecipient(attesterAddress) {
+        const validatorIndex = this.findValidatorIndexForAttester(attesterAddress);
+        return this.keystoreManager.getFeeRecipient(validatorIndex);
+    }
+    /**
+   * Get the effective remote signer configuration for the attester.
+   * Precedence: account-level override > validator-level override > file-level default.
+   * Returns undefined for local signers (private key / JSON-V3 / mnemonic).
+   * @param attesterAddress Address of an attester belonging to the validator
+   * @returns Effective remote signer configuration or undefined
+   */ getRemoteSignerConfig(attesterAddress) {
+        const validatorIndex = this.findValidatorIndexForAttester(attesterAddress);
+        return this.keystoreManager.getEffectiveRemoteSignerConfig(validatorIndex, attesterAddress);
+    }
+    /**
+   * Start the key store - no-op
+   */ start() {
+        return Promise.resolve();
+    }
+    /**
+   * Stop the key store - no-op
+   */ stop() {
+        return Promise.resolve();
+    }
+}

package/dest/key_store/web3signer_key_store.d.ts

@@ -0,0 +1,66 @@
+import type { Buffer32 } from '@aztec/foundation/buffer';
+import { EthAddress } from '@aztec/foundation/eth-address';
+import { Signature } from '@aztec/foundation/eth-signature';
+import type { SigningContext } from '@aztec/validator-ha-signer/types';
+import type { TypedDataDefinition } from 'viem';
+import type { ValidatorKeyStore } from './interface.js';
+/**
+ * Web3Signer Key Store
+ *
+ * An implementation of the Key store using Web3Signer remote signing service.
+ * This implementation uses the Web3Signer JSON-RPC API for secp256k1 signatures.
+ */
+export declare class Web3SignerKeyStore implements ValidatorKeyStore {
+    private addresses;
+    private baseUrl;
+    constructor(addresses: EthAddress[], baseUrl: string);
+    /**
+     * Get the address of a signer by index
+     *
+     * @param index - The index of the signer
+     * @returns the address
+     */
+    getAddress(index: number): EthAddress;
+    /**
+     * Get all addresses
+     *
+     * @returns all addresses
+     */
+    getAddresses(): EthAddress[];
+    /**
+     * Sign EIP-712 typed data with all keystore addresses
+     * @param typedData - The complete EIP-712 typed data structure (domain, types, primaryType, message)
+     * @param _context - Signing context (ignored by Web3SignerKeyStore, used for HA protection)
+     * @return signatures
+     */
+    signTypedData(typedData: TypedDataDefinition, _context: SigningContext): Promise<Signature[]>;
+    /**
+     * Sign EIP-712 typed data with a specific address
+     * @param address - The address of the signer to use
+     * @param typedData - The complete EIP-712 typed data structure (domain, types, primaryType, message)
+     * @param _context - Signing context (ignored by Web3SignerKeyStore, used for HA protection)
+     * @returns signature for the specified address
+     * @throws Error if the address is not found in the keystore or signing fails
+     */
+    signTypedDataWithAddress(address: EthAddress, typedData: TypedDataDefinition, _context: SigningContext): Promise<Signature>;
+    /**
+     * Sign a message with all keystore addresses using EIP-191 prefix
+     *
+     * @param message - The message to sign
+     * @param _context - Signing context (ignored by Web3SignerKeyStore, used for HA protection)
+     * @return signatures
+     */
+    signMessage(message: Buffer32, _context: SigningContext): Promise<Signature[]>;
+    /**
+     * Sign a message with a specific address using EIP-191 prefix
+     * @param address - The address of the signer to use
+     * @param message - The message to sign
+     * @param _context - Signing context (ignored by Web3SignerKeyStore, used for HA protection)
+     * @returns signature for the specified address
+     * @throws Error if the address is not found in the keystore or signing fails
+     */
+    signMessageWithAddress(address: EthAddress, message: Buffer32, _context: SigningContext): Promise<Signature>;
+    private makeJsonRpcSignRequest;
+    private makeJsonRpcSignTypedDataRequest;
+}
+//# sourceMappingURL=data:application/json;base64,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

package/dest/key_store/web3signer_key_store.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"web3signer_key_store.d.ts","sourceRoot":"","sources":["../../src/key_store/web3signer_key_store.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,0BAA0B,CAAC;AAEzD,OAAO,EAAE,UAAU,EAAE,MAAM,+BAA+B,CAAC;AAC3D,OAAO,EAAE,SAAS,EAAE,MAAM,iCAAiC,CAAC;AAC5D,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,kCAAkC,CAAC;AAEvE,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,MAAM,CAAC;AAEhD,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,gBAAgB,CAAC;AAExD;;;;;GAKG;AACH,qBAAa,kBAAmB,YAAW,iBAAiB;IAExD,OAAO,CAAC,SAAS;IACjB,OAAO,CAAC,OAAO;IAFjB,YACU,SAAS,EAAE,UAAU,EAAE,EACvB,OAAO,EAAE,MAAM,EACrB;IAEJ;;;;;OAKG;IACI,UAAU,CAAC,KAAK,EAAE,MAAM,GAAG,UAAU,CAK3C;IAED;;;;OAIG;IACI,YAAY,IAAI,UAAU,EAAE,CAElC;IAED;;;;;OAKG;IACI,aAAa,CAAC,SAAS,EAAE,mBAAmB,EAAE,QAAQ,EAAE,cAAc,GAAG,OAAO,CAAC,SAAS,EAAE,CAAC,CAEnG;IAED;;;;;;;OAOG;IACU,wBAAwB,CACnC,OAAO,EAAE,UAAU,EACnB,SAAS,EAAE,mBAAmB,EAC9B,QAAQ,EAAE,cAAc,GACvB,OAAO,CAAC,SAAS,CAAC,CAMpB;IAED;;;;;;OAMG;IACI,WAAW,CAAC,OAAO,EAAE,QAAQ,EAAE,QAAQ,EAAE,cAAc,GAAG,OAAO,CAAC,SAAS,EAAE,CAAC,CAEpF;IAED;;;;;;;OAOG;IACU,sBAAsB,CACjC,OAAO,EAAE,UAAU,EACnB,OAAO,EAAE,QAAQ,EACjB,QAAQ,EAAE,cAAc,GACvB,OAAO,CAAC,SAAS,CAAC,CAKpB;YAQa,sBAAsB;YAiDtB,+BAA+B;CA6C9C"}

package/dest/key_store/web3signer_key_store.js

@@ -0,0 +1,156 @@
+import { normalizeSignature } from '@aztec/foundation/crypto/secp256k1-signer';
+import { Signature } from '@aztec/foundation/eth-signature';
+/**
+ * Web3Signer Key Store
+ *
+ * An implementation of the Key store using Web3Signer remote signing service.
+ * This implementation uses the Web3Signer JSON-RPC API for secp256k1 signatures.
+ */ export class Web3SignerKeyStore {
+    addresses;
+    baseUrl;
+    constructor(addresses, baseUrl){
+        this.addresses = addresses;
+        this.baseUrl = baseUrl;
+    }
+    /**
+   * Get the address of a signer by index
+   *
+   * @param index - The index of the signer
+   * @returns the address
+   */ getAddress(index) {
+        if (index >= this.addresses.length) {
+            throw new Error(`Index ${index} is out of bounds.`);
+        }
+        return this.addresses[index];
+    }
+    /**
+   * Get all addresses
+   *
+   * @returns all addresses
+   */ getAddresses() {
+        return this.addresses;
+    }
+    /**
+   * Sign EIP-712 typed data with all keystore addresses
+   * @param typedData - The complete EIP-712 typed data structure (domain, types, primaryType, message)
+   * @param _context - Signing context (ignored by Web3SignerKeyStore, used for HA protection)
+   * @return signatures
+   */ signTypedData(typedData, _context) {
+        return Promise.all(this.addresses.map((address)=>this.makeJsonRpcSignTypedDataRequest(address, typedData)));
+    }
+    /**
+   * Sign EIP-712 typed data with a specific address
+   * @param address - The address of the signer to use
+   * @param typedData - The complete EIP-712 typed data structure (domain, types, primaryType, message)
+   * @param _context - Signing context (ignored by Web3SignerKeyStore, used for HA protection)
+   * @returns signature for the specified address
+   * @throws Error if the address is not found in the keystore or signing fails
+   */ async signTypedDataWithAddress(address, typedData, _context) {
+        if (!this.addresses.some((addr)=>addr.equals(address))) {
+            throw new Error(`Address ${address.toString()} not found in keystore`);
+        }
+        return await this.makeJsonRpcSignTypedDataRequest(address, typedData);
+    }
+    /**
+   * Sign a message with all keystore addresses using EIP-191 prefix
+   *
+   * @param message - The message to sign
+   * @param _context - Signing context (ignored by Web3SignerKeyStore, used for HA protection)
+   * @return signatures
+   */ signMessage(message, _context) {
+        return Promise.all(this.addresses.map((address)=>this.makeJsonRpcSignRequest(address, message)));
+    }
+    /**
+   * Sign a message with a specific address using EIP-191 prefix
+   * @param address - The address of the signer to use
+   * @param message - The message to sign
+   * @param _context - Signing context (ignored by Web3SignerKeyStore, used for HA protection)
+   * @returns signature for the specified address
+   * @throws Error if the address is not found in the keystore or signing fails
+   */ async signMessageWithAddress(address, message, _context) {
+        if (!this.addresses.some((addr)=>addr.equals(address))) {
+            throw new Error(`Address ${address.toString()} not found in keystore`);
+        }
+        return await this.makeJsonRpcSignRequest(address, message);
+    }
+    /**
+   * Make a JSON-RPC sign request to Web3Signer using eth_sign
+   * @param address - The Ethereum address to sign with
+   * @param data - The data to sign
+   * @returns The signature
+   */ async makeJsonRpcSignRequest(address, data) {
+        const url = this.baseUrl;
+        // Use JSON-RPC eth_sign method which automatically applies Ethereum message prefixing
+        const body = {
+            jsonrpc: '2.0',
+            method: 'eth_sign',
+            params: [
+                address.toString(),
+                data.toString()
+            ],
+            id: 1
+        };
+        const response = await fetch(url, {
+            method: 'POST',
+            headers: {
+                'Content-Type': 'application/json'
+            },
+            body: JSON.stringify(body)
+        });
+        if (!response.ok) {
+            const errorText = await response.text();
+            throw new Error(`Web3Signer request failed: ${response.status} ${response.statusText} - ${errorText}`);
+        }
+        const result = await response.json();
+        // Handle JSON-RPC response format
+        if (result.error) {
+            throw new Error(`Web3Signer JSON-RPC error: ${result.error.code} - ${result.error.message}`);
+        }
+        if (!result.result) {
+            throw new Error('Invalid response from Web3Signer: no result found');
+        }
+        let signatureHex = result.result;
+        // Ensure the signature has the 0x prefix
+        if (!signatureHex.startsWith('0x')) {
+            signatureHex = '0x' + signatureHex;
+        }
+        // Parse the signature from the hex string
+        return normalizeSignature(Signature.fromString(signatureHex));
+    }
+    async makeJsonRpcSignTypedDataRequest(address, typedData) {
+        const url = this.baseUrl;
+        const body = {
+            jsonrpc: '2.0',
+            method: 'eth_signTypedData',
+            params: [
+                address.toString(),
+                JSON.stringify(typedData)
+            ],
+            id: 1
+        };
+        const response = await fetch(url, {
+            method: 'POST',
+            headers: {
+                'Content-Type': 'application/json'
+            },
+            body: JSON.stringify(body)
+        });
+        if (!response.ok) {
+            const errorText = await response.text();
+            throw new Error(`Web3Signer request failed: ${response.status} ${response.statusText} - ${errorText}`);
+        }
+        const result = await response.json();
+        if (result.error) {
+            throw new Error(`Web3Signer JSON-RPC error: ${result.error.code} - ${result.error.message}`);
+        }
+        if (!result.result) {
+            throw new Error('Invalid response from Web3Signer: no result found');
+        }
+        let signatureHex = result.result;
+        // Ensure the signature has the 0x prefix
+        if (!signatureHex.startsWith('0x')) {
+            signatureHex = '0x' + signatureHex;
+        }
+        return normalizeSignature(Signature.fromString(signatureHex));
+    }
+}

package/dest/metrics.d.ts

@@ -1,11 +1,31 @@
+import type { EpochNumber } from '@aztec/foundation/branded-types';
+import type { EthAddress } from '@aztec/foundation/eth-address';
 import type { BlockProposal } from '@aztec/stdlib/p2p';
 import { type TelemetryClient } from '@aztec/telemetry-client';
+import type { BlockProposalValidationFailureReason } from './proposal_handler.js';
 export declare class ValidatorMetrics {
-    private reExecutionTime;
     private failedReexecutionCounter;
+    private successfulAttestationsCount;
+    private failedAttestationsBadProposalCount;
+    private failedAttestationsNodeIssueCount;
+    private currentEpoch;
+    private attestedEpochCount;
+    private reexMana;
+    private reexTx;
+    private reexDuration;
+    private checkpointProposalToPipelinedStateDuration;
+    private checkpointProposalReceiveOffsetFromNextSlotBoundary;
     constructor(telemetryClient: TelemetryClient);
-    reExecutionTimer(): () => void;
-    recordReExecutionTime(time: number): void;
-    recordFailedReexecution(proposal: BlockProposal): Promise<void>;
+    recordReex(time: number, txs: number, mManaTotal: number): void;
+    recordCheckpointProposalToPipelinedStateDuration(durationMs: number): void;
+    recordCheckpointProposalReceiveOffsetFromNextSlotBoundary(offsetMs: number): void;
+    recordFailedReexecution(proposal: BlockProposal): void;
+    incSuccessfulAttestations(num: number): void;
+    incFailedAttestationsBadProposal(num: number, reason: BlockProposalValidationFailureReason, inCommittee: boolean): void;
+    incFailedAttestationsNodeIssue(num: number, reason: BlockProposalValidationFailureReason, inCommittee: boolean): void;
+    /** Update the gauge tracking the current epoch number (proxy for total epochs elapsed). */
+    setCurrentEpoch(epoch: EpochNumber): void;
+    /** Increment the count of epochs in which the given attester submitted at least one attestation. */
+    incAttestedEpochCount(attester: EthAddress): void;
 }
-//# sourceMappingURL=metrics.d.ts.map
+//# sourceMappingURL=data:application/json;base64,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

package/dest/metrics.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"metrics.d.ts","sourceRoot":"","sources":["../src/metrics.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,mBAAmB,CAAC;AACvD,OAAO,EAIL,KAAK,eAAe,EAGrB,MAAM,yBAAyB,CAAC;AAEjC,qBAAa,gBAAgB;IAC3B,OAAO,CAAC,eAAe,CAAQ;IAC/B,OAAO,CAAC,wBAAwB,CAAgB;gBAEpC,eAAe,EAAE,eAAe;IAgBrC,gBAAgB,IAAI,MAAM,IAAI;IAQ9B,qBAAqB,CAAC,IAAI,EAAE,MAAM;IAI5B,uBAAuB,CAAC,QAAQ,EAAE,aAAa;CAO7D"}
+{"version":3,"file":"metrics.d.ts","sourceRoot":"","sources":["../src/metrics.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,iCAAiC,CAAC;AACnE,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,+BAA+B,CAAC;AAChE,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,mBAAmB,CAAC;AACvD,OAAO,EAKL,KAAK,eAAe,EAGrB,MAAM,yBAAyB,CAAC;AAEjC,OAAO,KAAK,EAAE,oCAAoC,EAAE,MAAM,uBAAuB,CAAC;AAElF,qBAAa,gBAAgB;IAC3B,OAAO,CAAC,wBAAwB,CAAgB;IAChD,OAAO,CAAC,2BAA2B,CAAgB;IACnD,OAAO,CAAC,kCAAkC,CAAgB;IAC1D,OAAO,CAAC,gCAAgC,CAAgB;IACxD,OAAO,CAAC,YAAY,CAAQ;IAC5B,OAAO,CAAC,kBAAkB,CAAgB;IAE1C,OAAO,CAAC,QAAQ,CAAY;IAC5B,OAAO,CAAC,MAAM,CAAY;IAC1B,OAAO,CAAC,YAAY,CAAQ;IAC5B,OAAO,CAAC,0CAA0C,CAAY;IAC9D,OAAO,CAAC,mDAAmD,CAAY;IAEvE,YAAY,eAAe,EAAE,eAAe,EA0D3C;IAEM,UAAU,CAAC,IAAI,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,QAI9D;IAEM,gDAAgD,CAAC,UAAU,EAAE,MAAM,QAEzE;IAEM,yDAAyD,CAAC,QAAQ,EAAE,MAAM,QAIhF;IAEM,uBAAuB,CAAC,QAAQ,EAAE,aAAa,QAMrD;IAEM,yBAAyB,CAAC,GAAG,EAAE,MAAM,QAE3C;IAEM,gCAAgC,CACrC,GAAG,EAAE,MAAM,EACX,MAAM,EAAE,oCAAoC,EAC5C,WAAW,EAAE,OAAO,QAMrB;IAEM,8BAA8B,CACnC,GAAG,EAAE,MAAM,EACX,MAAM,EAAE,oCAAoC,EAC5C,WAAW,EAAE,OAAO,QAMrB;IAED,2FAA2F;IACpF,eAAe,CAAC,KAAK,EAAE,WAAW,QAExC;IAED,oGAAoG;IAC7F,qBAAqB,CAAC,QAAQ,EAAE,UAAU,QAEhD;CACF"}