@aztec/validator-ha-signer 0.0.1-commit.8afd444 → 0.0.1-commit.8ee97c858

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (46) hide show
  1. package/README.md +10 -2
  2. package/dest/db/index.d.ts +2 -1
  3. package/dest/db/index.d.ts.map +1 -1
  4. package/dest/db/index.js +1 -0
  5. package/dest/db/lmdb.d.ts +66 -0
  6. package/dest/db/lmdb.d.ts.map +1 -0
  7. package/dest/db/lmdb.js +188 -0
  8. package/dest/db/postgres.d.ts +4 -2
  9. package/dest/db/postgres.d.ts.map +1 -1
  10. package/dest/db/postgres.js +15 -17
  11. package/dest/db/schema.d.ts +5 -4
  12. package/dest/db/schema.d.ts.map +1 -1
  13. package/dest/db/schema.js +4 -3
  14. package/dest/db/types.d.ts +37 -18
  15. package/dest/db/types.d.ts.map +1 -1
  16. package/dest/db/types.js +30 -15
  17. package/dest/factory.d.ts +39 -4
  18. package/dest/factory.d.ts.map +1 -1
  19. package/dest/factory.js +75 -5
  20. package/dest/metrics.d.ts +51 -0
  21. package/dest/metrics.d.ts.map +1 -0
  22. package/dest/metrics.js +103 -0
  23. package/dest/slashing_protection_service.d.ts +12 -3
  24. package/dest/slashing_protection_service.d.ts.map +1 -1
  25. package/dest/slashing_protection_service.js +17 -6
  26. package/dest/types.d.ts +17 -70
  27. package/dest/types.d.ts.map +1 -1
  28. package/dest/types.js +3 -20
  29. package/dest/validator_ha_signer.d.ts +12 -4
  30. package/dest/validator_ha_signer.d.ts.map +1 -1
  31. package/dest/validator_ha_signer.js +16 -8
  32. package/package.json +10 -6
  33. package/src/db/index.ts +1 -0
  34. package/src/db/lmdb.ts +264 -0
  35. package/src/db/postgres.ts +15 -15
  36. package/src/db/schema.ts +4 -3
  37. package/src/db/types.ts +61 -16
  38. package/src/factory.ts +93 -4
  39. package/src/metrics.ts +138 -0
  40. package/src/slashing_protection_service.ts +28 -7
  41. package/src/types.ts +32 -104
  42. package/src/validator_ha_signer.ts +33 -12
  43. package/dest/config.d.ts +0 -101
  44. package/dest/config.d.ts.map +0 -1
  45. package/dest/config.js +0 -92
  46. package/src/config.ts +0 -149
package/src/types.ts CHANGED
@@ -1,24 +1,27 @@
1
- import {
2
- BlockNumber,
3
- type CheckpointNumber,
4
- type IndexWithinCheckpoint,
5
- type SlotNumber,
6
- } from '@aztec/foundation/branded-types';
1
+ import { SlotNumber } from '@aztec/foundation/branded-types';
7
2
  import type { EthAddress } from '@aztec/foundation/eth-address';
3
+ import { DateProvider } from '@aztec/foundation/timer';
4
+ import {
5
+ DutyType,
6
+ type HAProtectedSigningContext,
7
+ type SigningContext,
8
+ type ValidatorHASignerConfig,
9
+ getBlockNumberFromSigningContext as getBlockNumberFromSigningContextFromStdlib,
10
+ isHAProtectedContext,
11
+ } from '@aztec/stdlib/ha-signing';
12
+ import type { TelemetryClient } from '@aztec/telemetry-client';
8
13
 
9
14
  import type { Pool } from 'pg';
10
15
 
11
- import type { ValidatorHASignerConfig } from './config.js';
12
- import {
13
- type BlockProposalDutyIdentifier,
14
- type CheckAndRecordParams,
15
- type DeleteDutyParams,
16
- type DutyIdentifier,
17
- type DutyRow,
18
- DutyType,
19
- type OtherDutyIdentifier,
20
- type RecordSuccessParams,
21
- type ValidatorDutyRecord,
16
+ import type {
17
+ BlockProposalDutyIdentifier,
18
+ CheckAndRecordParams,
19
+ DeleteDutyParams,
20
+ DutyIdentifier,
21
+ DutyRow,
22
+ OtherDutyIdentifier,
23
+ RecordSuccessParams,
24
+ ValidatorDutyRecord,
22
25
  } from './db/types.js';
23
26
 
24
27
  export type {
@@ -27,12 +30,16 @@ export type {
27
30
  DeleteDutyParams,
28
31
  DutyIdentifier,
29
32
  DutyRow,
33
+ HAProtectedSigningContext,
30
34
  OtherDutyIdentifier,
31
35
  RecordSuccessParams,
36
+ SigningContext,
32
37
  ValidatorDutyRecord,
33
38
  ValidatorHASignerConfig,
34
39
  };
35
40
  export { DutyStatus, DutyType, getBlockIndexFromDutyIdentifier, normalizeBlockIndex } from './db/types.js';
41
+ export { isHAProtectedContext };
42
+ export { getBlockNumberFromSigningContextFromStdlib as getBlockNumberFromSigningContext };
36
43
 
37
44
  /**
38
45
  * Result of tryInsertOrGetExisting operation
@@ -53,99 +60,20 @@ export interface CreateHASignerDeps {
53
60
  * If provided, databaseUrl and poolConfig are ignored
54
61
  */
55
62
  pool?: Pool;
56
- }
57
-
58
- /**
59
- * Base context for signing operations
60
- */
61
- interface BaseSigningContext {
62
- /** Slot number for this duty */
63
- slot: SlotNumber;
64
63
  /**
65
- * Block or checkpoint number for this duty.
66
- * For block proposals, this is the block number.
67
- * For checkpoint proposals, this is the checkpoint number.
64
+ * Optional telemetry client for metrics
68
65
  */
69
- blockNumber: BlockNumber | CheckpointNumber;
70
- }
71
-
72
- /**
73
- * Signing context for block proposals.
74
- * blockIndexWithinCheckpoint is REQUIRED and must be >= 0.
75
- */
76
- export interface BlockProposalSigningContext extends BaseSigningContext {
77
- /** Block index within checkpoint (0, 1, 2...). Required for block proposals. */
78
- blockIndexWithinCheckpoint: IndexWithinCheckpoint;
79
- dutyType: DutyType.BLOCK_PROPOSAL;
80
- }
81
-
82
- /**
83
- * Signing context for non-block-proposal duties that require HA protection.
84
- * blockIndexWithinCheckpoint is not applicable (internally always -1).
85
- */
86
- export interface OtherSigningContext extends BaseSigningContext {
87
- dutyType: DutyType.CHECKPOINT_PROPOSAL | DutyType.ATTESTATION | DutyType.ATTESTATIONS_AND_SIGNERS;
88
- }
89
-
90
- /**
91
- * Signing context for governance/slashing votes which only need slot for HA protection.
92
- * blockNumber is not applicable (internally always 0).
93
- */
94
- export interface VoteSigningContext {
95
- slot: SlotNumber;
96
- dutyType: DutyType.GOVERNANCE_VOTE | DutyType.SLASHING_VOTE;
97
- }
98
-
99
- /**
100
- * Signing context for duties which don't require slot/blockNumber
101
- * as they don't need HA protection (AUTH_REQUEST, TXS).
102
- */
103
- export interface NoHAProtectionSigningContext {
104
- dutyType: DutyType.AUTH_REQUEST | DutyType.TXS;
105
- }
106
-
107
- /**
108
- * Signing contexts that require HA protection (excludes AUTH_REQUEST).
109
- * Used by the HA signer's signWithProtection method.
110
- */
111
- export type HAProtectedSigningContext = BlockProposalSigningContext | OtherSigningContext | VoteSigningContext;
112
-
113
- /**
114
- * Type guard to check if a SigningContext requires HA protection.
115
- * Returns true for contexts that need HA protection, false for AUTH_REQUEST and TXS.
116
- */
117
- export function isHAProtectedContext(context: SigningContext): context is HAProtectedSigningContext {
118
- return context.dutyType !== DutyType.AUTH_REQUEST && context.dutyType !== DutyType.TXS;
119
- }
120
-
121
- /**
122
- * Gets the block number from a signing context.
123
- * - Vote duties (GOVERNANCE_VOTE, SLASHING_VOTE): returns BlockNumber(0)
124
- * - Other duties: returns the blockNumber from the context
125
- */
126
- export function getBlockNumberFromSigningContext(context: HAProtectedSigningContext): BlockNumber | CheckpointNumber {
127
- // Check for duty types that have blockNumber
128
- if (
129
- context.dutyType === DutyType.BLOCK_PROPOSAL ||
130
- context.dutyType === DutyType.CHECKPOINT_PROPOSAL ||
131
- context.dutyType === DutyType.ATTESTATION ||
132
- context.dutyType === DutyType.ATTESTATIONS_AND_SIGNERS
133
- ) {
134
- return context.blockNumber;
135
- }
136
- // Vote duties (GOVERNANCE_VOTE, SLASHING_VOTE) don't have blockNumber
137
- return BlockNumber(0);
66
+ telemetryClient?: TelemetryClient;
67
+ /**
68
+ * Optional date provider for timestamps
69
+ */
70
+ dateProvider?: DateProvider;
138
71
  }
139
72
 
140
73
  /**
141
- * Context required for slashing protection during signing operations.
142
- * Uses discriminated union to enforce type safety:
143
- * - BLOCK_PROPOSAL duties MUST have blockIndexWithinCheckpoint >= 0
144
- * - Other duty types do NOT have blockIndexWithinCheckpoint (internally -1)
145
- * - Vote duties only need slot (blockNumber is internally 0)
146
- * - AUTH_REQUEST and TXS duties don't need slot/blockNumber (no HA protection needed)
74
+ * deps for creating a local signing protection signer
147
75
  */
148
- export type SigningContext = HAProtectedSigningContext | NoHAProtectionSigningContext;
76
+ export type CreateLocalSignerWithProtectionDeps = Omit<CreateHASignerDeps, 'pool'>;
149
77
 
150
78
  /**
151
79
  * Database interface for slashing protection operations
@@ -9,15 +9,23 @@ import type { Buffer32 } from '@aztec/foundation/buffer';
9
9
  import { EthAddress } from '@aztec/foundation/eth-address';
10
10
  import type { Signature } from '@aztec/foundation/eth-signature';
11
11
  import { type Logger, createLogger } from '@aztec/foundation/log';
12
-
13
- import type { ValidatorHASignerConfig } from './config.js';
14
- import { type DutyIdentifier, DutyType } from './db/types.js';
15
- import { SlashingProtectionService } from './slashing_protection_service.js';
12
+ import type { DateProvider } from '@aztec/foundation/timer';
16
13
  import {
14
+ type BaseSignerConfig,
15
+ DutyType,
17
16
  type HAProtectedSigningContext,
18
- type SlashingProtectionDatabase,
19
17
  getBlockNumberFromSigningContext,
20
- } from './types.js';
18
+ } from '@aztec/stdlib/ha-signing';
19
+
20
+ import type { DutyIdentifier } from './db/types.js';
21
+ import type { HASignerMetrics } from './metrics.js';
22
+ import { SlashingProtectionService } from './slashing_protection_service.js';
23
+ import type { SlashingProtectionDatabase } from './types.js';
24
+
25
+ export interface ValidatorHASignerDeps {
26
+ metrics: HASignerMetrics;
27
+ dateProvider: DateProvider;
28
+ }
21
29
 
22
30
  /**
23
31
  * Validator High Availability Signer
@@ -43,22 +51,27 @@ export class ValidatorHASigner {
43
51
  private readonly slashingProtection: SlashingProtectionService;
44
52
  private readonly rollupAddress: EthAddress;
45
53
 
54
+ private readonly dateProvider: DateProvider;
55
+ private readonly metrics: HASignerMetrics;
56
+
46
57
  constructor(
47
58
  db: SlashingProtectionDatabase,
48
- private readonly config: ValidatorHASignerConfig,
59
+ private readonly config: BaseSignerConfig,
60
+ deps: ValidatorHASignerDeps,
49
61
  ) {
50
62
  this.log = createLogger('validator-ha-signer');
51
63
 
52
- if (!config.haSigningEnabled) {
53
- // this shouldn't happen, the validator should use different signer for non-HA setups
54
- throw new Error('Validator HA Signer is not enabled in config');
55
- }
64
+ this.metrics = deps.metrics;
65
+ this.dateProvider = deps.dateProvider;
56
66
 
57
67
  if (!config.nodeId || config.nodeId === '') {
58
68
  throw new Error('NODE_ID is required for high-availability setups');
59
69
  }
60
70
  this.rollupAddress = config.l1Contracts.rollupAddress;
61
- this.slashingProtection = new SlashingProtectionService(db, config);
71
+ this.slashingProtection = new SlashingProtectionService(db, config, {
72
+ metrics: deps.metrics,
73
+ dateProvider: deps.dateProvider,
74
+ });
62
75
  this.log.info('Validator HA Signer initialized with slashing protection', {
63
76
  nodeId: config.nodeId,
64
77
  rollupAddress: this.rollupAddress.toString(),
@@ -88,6 +101,9 @@ export class ValidatorHASigner {
88
101
  context: HAProtectedSigningContext,
89
102
  signFn: (messageHash: Buffer32) => Promise<Signature>,
90
103
  ): Promise<Signature> {
104
+ const startTime = this.dateProvider.now();
105
+ const dutyType = context.dutyType;
106
+
91
107
  let dutyIdentifier: DutyIdentifier;
92
108
  if (context.dutyType === DutyType.BLOCK_PROPOSAL) {
93
109
  dutyIdentifier = {
@@ -107,6 +123,7 @@ export class ValidatorHASigner {
107
123
  }
108
124
 
109
125
  // Acquire lock and get the token for ownership verification
126
+ // DutyAlreadySignedError and SlashingProtectionError may be thrown here and are recorded in the service
110
127
  const blockNumber = getBlockNumberFromSigningContext(context);
111
128
  const lockToken = await this.slashingProtection.checkAndRecord({
112
129
  ...dutyIdentifier,
@@ -122,6 +139,7 @@ export class ValidatorHASigner {
122
139
  } catch (error: any) {
123
140
  // Delete duty to allow retry (only succeeds if we own the lock)
124
141
  await this.slashingProtection.deleteDuty({ ...dutyIdentifier, lockToken });
142
+ this.metrics.recordSigningError(dutyType);
125
143
  throw error;
126
144
  }
127
145
 
@@ -133,6 +151,9 @@ export class ValidatorHASigner {
133
151
  lockToken,
134
152
  });
135
153
 
154
+ const duration = this.dateProvider.now() - startTime;
155
+ this.metrics.recordSigningSuccess(dutyType, duration);
156
+
136
157
  return signature;
137
158
  }
138
159
 
package/dest/config.d.ts DELETED
@@ -1,101 +0,0 @@
1
- import type { L1ContractAddresses } from '@aztec/ethereum/l1-contract-addresses';
2
- import { type ConfigMappingsType } from '@aztec/foundation/config';
3
- import { EthAddress } from '@aztec/foundation/eth-address';
4
- import { z } from 'zod';
5
- /**
6
- * Configuration for the Validator HA Signer
7
- *
8
- * This config is used for distributed locking and slashing protection
9
- * when running multiple validator nodes in a high-availability setup.
10
- */
11
- export interface ValidatorHASignerConfig {
12
- /** Whether HA signing / slashing protection is enabled */
13
- haSigningEnabled: boolean;
14
- /** L1 contract addresses (rollup address required) */
15
- l1Contracts: Pick<L1ContractAddresses, 'rollupAddress'>;
16
- /** Unique identifier for this node */
17
- nodeId: string;
18
- /** How long to wait between polls when a duty is being signed (ms) */
19
- pollingIntervalMs: number;
20
- /** Maximum time to wait for a duty being signed to complete (ms) */
21
- signingTimeoutMs: number;
22
- /** Maximum age of a stuck duty in ms (defaults to 2x hardcoded Aztec slot duration if not set) */
23
- maxStuckDutiesAgeMs?: number;
24
- /** Optional: clean up old duties after this many hours (disabled if not set) */
25
- cleanupOldDutiesAfterHours?: number;
26
- /**
27
- * PostgreSQL connection string
28
- * Format: postgresql://user:password@host:port/database
29
- */
30
- databaseUrl?: string;
31
- /**
32
- * PostgreSQL connection pool configuration
33
- */
34
- /** Maximum number of clients in the pool (default: 10) */
35
- poolMaxCount?: number;
36
- /** Minimum number of clients in the pool (default: 0) */
37
- poolMinCount?: number;
38
- /** Idle timeout in milliseconds (default: 10000) */
39
- poolIdleTimeoutMs?: number;
40
- /** Connection timeout in milliseconds (default: 0, no timeout) */
41
- poolConnectionTimeoutMs?: number;
42
- }
43
- export declare const validatorHASignerConfigMappings: ConfigMappingsType<ValidatorHASignerConfig>;
44
- export declare const defaultValidatorHASignerConfig: ValidatorHASignerConfig;
45
- /**
46
- * Returns the validator HA signer configuration from environment variables.
47
- * Note: If an environment variable is not set, the default value is used.
48
- * @returns The validator HA signer configuration.
49
- */
50
- export declare function getConfigEnvVars(): ValidatorHASignerConfig;
51
- export declare const ValidatorHASignerConfigSchema: z.ZodObject<{
52
- haSigningEnabled: z.ZodBoolean;
53
- l1Contracts: z.ZodObject<{
54
- rollupAddress: z.ZodType<EthAddress, z.ZodTypeDef, EthAddress>;
55
- }, "strip", z.ZodTypeAny, {
56
- rollupAddress: EthAddress;
57
- }, {
58
- rollupAddress: EthAddress;
59
- }>;
60
- nodeId: z.ZodString;
61
- pollingIntervalMs: z.ZodNumber;
62
- signingTimeoutMs: z.ZodNumber;
63
- maxStuckDutiesAgeMs: z.ZodOptional<z.ZodNumber>;
64
- cleanupOldDutiesAfterHours: z.ZodOptional<z.ZodNumber>;
65
- databaseUrl: z.ZodOptional<z.ZodString>;
66
- poolMaxCount: z.ZodOptional<z.ZodNumber>;
67
- poolMinCount: z.ZodOptional<z.ZodNumber>;
68
- poolIdleTimeoutMs: z.ZodOptional<z.ZodNumber>;
69
- poolConnectionTimeoutMs: z.ZodOptional<z.ZodNumber>;
70
- }, "strip", z.ZodTypeAny, {
71
- haSigningEnabled: boolean;
72
- l1Contracts: {
73
- rollupAddress: EthAddress;
74
- };
75
- nodeId: string;
76
- pollingIntervalMs: number;
77
- signingTimeoutMs: number;
78
- maxStuckDutiesAgeMs?: number | undefined;
79
- cleanupOldDutiesAfterHours?: number | undefined;
80
- databaseUrl?: string | undefined;
81
- poolMaxCount?: number | undefined;
82
- poolMinCount?: number | undefined;
83
- poolIdleTimeoutMs?: number | undefined;
84
- poolConnectionTimeoutMs?: number | undefined;
85
- }, {
86
- haSigningEnabled: boolean;
87
- l1Contracts: {
88
- rollupAddress: EthAddress;
89
- };
90
- nodeId: string;
91
- pollingIntervalMs: number;
92
- signingTimeoutMs: number;
93
- maxStuckDutiesAgeMs?: number | undefined;
94
- cleanupOldDutiesAfterHours?: number | undefined;
95
- databaseUrl?: string | undefined;
96
- poolMaxCount?: number | undefined;
97
- poolMinCount?: number | undefined;
98
- poolIdleTimeoutMs?: number | undefined;
99
- poolConnectionTimeoutMs?: number | undefined;
100
- }>;
101
- //# sourceMappingURL=data:application/json;base64,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
@@ -1 +0,0 @@
1
- {"version":3,"file":"config.d.ts","sourceRoot":"","sources":["../src/config.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,uCAAuC,CAAC;AACjF,OAAO,EACL,KAAK,kBAAkB,EAMxB,MAAM,0BAA0B,CAAC;AAClC,OAAO,EAAE,UAAU,EAAE,MAAM,+BAA+B,CAAC;AAG3D,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB;;;;;GAKG;AACH,MAAM,WAAW,uBAAuB;IACtC,0DAA0D;IAC1D,gBAAgB,EAAE,OAAO,CAAC;IAC1B,sDAAsD;IACtD,WAAW,EAAE,IAAI,CAAC,mBAAmB,EAAE,eAAe,CAAC,CAAC;IACxD,sCAAsC;IACtC,MAAM,EAAE,MAAM,CAAC;IACf,sEAAsE;IACtE,iBAAiB,EAAE,MAAM,CAAC;IAC1B,oEAAoE;IACpE,gBAAgB,EAAE,MAAM,CAAC;IACzB,kGAAkG;IAClG,mBAAmB,CAAC,EAAE,MAAM,CAAC;IAC7B,gFAAgF;IAChF,0BAA0B,CAAC,EAAE,MAAM,CAAC;IACpC;;;OAGG;IACH,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB;;OAEG;IACH,0DAA0D;IAC1D,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,yDAAyD;IACzD,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,oDAAoD;IACpD,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAC3B,kEAAkE;IAClE,uBAAuB,CAAC,EAAE,MAAM,CAAC;CAClC;AAED,eAAO,MAAM,+BAA+B,EAAE,kBAAkB,CAAC,uBAAuB,CAiEvF,CAAC;AAEF,eAAO,MAAM,8BAA8B,EAAE,uBAE5C,CAAC;AAEF;;;;GAIG;AACH,wBAAgB,gBAAgB,IAAI,uBAAuB,CAE1D;AAED,eAAO,MAAM,6BAA6B;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAeE,CAAC"}
package/dest/config.js DELETED
@@ -1,92 +0,0 @@
1
- import { booleanConfigHelper, getConfigFromMappings, getDefaultConfig, numberConfigHelper, optionalNumberConfigHelper } from '@aztec/foundation/config';
2
- import { EthAddress } from '@aztec/foundation/eth-address';
3
- import { z } from 'zod';
4
- export const validatorHASignerConfigMappings = {
5
- haSigningEnabled: {
6
- env: 'VALIDATOR_HA_SIGNING_ENABLED',
7
- description: 'Whether HA signing / slashing protection is enabled',
8
- ...booleanConfigHelper(false)
9
- },
10
- l1Contracts: {
11
- description: 'L1 contract addresses (rollup address required)',
12
- nested: {
13
- rollupAddress: {
14
- description: 'The Ethereum address of the rollup contract (must be set programmatically)',
15
- parseEnv: (val)=>EthAddress.fromString(val)
16
- }
17
- }
18
- },
19
- nodeId: {
20
- env: 'VALIDATOR_HA_NODE_ID',
21
- description: 'The unique identifier for this node',
22
- defaultValue: ''
23
- },
24
- pollingIntervalMs: {
25
- env: 'VALIDATOR_HA_POLLING_INTERVAL_MS',
26
- description: 'The number of ms to wait between polls when a duty is being signed',
27
- ...numberConfigHelper(100)
28
- },
29
- signingTimeoutMs: {
30
- env: 'VALIDATOR_HA_SIGNING_TIMEOUT_MS',
31
- description: 'The maximum time to wait for a duty being signed to complete',
32
- ...numberConfigHelper(3_000)
33
- },
34
- maxStuckDutiesAgeMs: {
35
- env: 'VALIDATOR_HA_MAX_STUCK_DUTIES_AGE_MS',
36
- description: 'The maximum age of a stuck duty in ms (defaults to 2x Aztec slot duration)',
37
- ...optionalNumberConfigHelper()
38
- },
39
- cleanupOldDutiesAfterHours: {
40
- env: 'VALIDATOR_HA_OLD_DUTIES_MAX_AGE_H',
41
- description: 'Optional: clean up old duties after this many hours (disabled if not set)',
42
- ...optionalNumberConfigHelper()
43
- },
44
- databaseUrl: {
45
- env: 'VALIDATOR_HA_DATABASE_URL',
46
- description: 'PostgreSQL connection string for validator HA signer (format: postgresql://user:password@host:port/database)'
47
- },
48
- poolMaxCount: {
49
- env: 'VALIDATOR_HA_POOL_MAX',
50
- description: 'Maximum number of clients in the pool',
51
- ...numberConfigHelper(10)
52
- },
53
- poolMinCount: {
54
- env: 'VALIDATOR_HA_POOL_MIN',
55
- description: 'Minimum number of clients in the pool',
56
- ...numberConfigHelper(0)
57
- },
58
- poolIdleTimeoutMs: {
59
- env: 'VALIDATOR_HA_POOL_IDLE_TIMEOUT_MS',
60
- description: 'Idle timeout in milliseconds',
61
- ...numberConfigHelper(10_000)
62
- },
63
- poolConnectionTimeoutMs: {
64
- env: 'VALIDATOR_HA_POOL_CONNECTION_TIMEOUT_MS',
65
- description: 'Connection timeout in milliseconds (0 means no timeout)',
66
- ...numberConfigHelper(0)
67
- }
68
- };
69
- export const defaultValidatorHASignerConfig = getDefaultConfig(validatorHASignerConfigMappings);
70
- /**
71
- * Returns the validator HA signer configuration from environment variables.
72
- * Note: If an environment variable is not set, the default value is used.
73
- * @returns The validator HA signer configuration.
74
- */ export function getConfigEnvVars() {
75
- return getConfigFromMappings(validatorHASignerConfigMappings);
76
- }
77
- export const ValidatorHASignerConfigSchema = z.object({
78
- haSigningEnabled: z.boolean(),
79
- l1Contracts: z.object({
80
- rollupAddress: z.instanceof(EthAddress)
81
- }),
82
- nodeId: z.string(),
83
- pollingIntervalMs: z.number().min(0),
84
- signingTimeoutMs: z.number().min(0),
85
- maxStuckDutiesAgeMs: z.number().min(0).optional(),
86
- cleanupOldDutiesAfterHours: z.number().min(0).optional(),
87
- databaseUrl: z.string().optional(),
88
- poolMaxCount: z.number().min(0).optional(),
89
- poolMinCount: z.number().min(0).optional(),
90
- poolIdleTimeoutMs: z.number().min(0).optional(),
91
- poolConnectionTimeoutMs: z.number().min(0).optional()
92
- });
package/src/config.ts DELETED
@@ -1,149 +0,0 @@
1
- import type { L1ContractAddresses } from '@aztec/ethereum/l1-contract-addresses';
2
- import {
3
- type ConfigMappingsType,
4
- booleanConfigHelper,
5
- getConfigFromMappings,
6
- getDefaultConfig,
7
- numberConfigHelper,
8
- optionalNumberConfigHelper,
9
- } from '@aztec/foundation/config';
10
- import { EthAddress } from '@aztec/foundation/eth-address';
11
- import type { ZodFor } from '@aztec/foundation/schemas';
12
-
13
- import { z } from 'zod';
14
-
15
- /**
16
- * Configuration for the Validator HA Signer
17
- *
18
- * This config is used for distributed locking and slashing protection
19
- * when running multiple validator nodes in a high-availability setup.
20
- */
21
- export interface ValidatorHASignerConfig {
22
- /** Whether HA signing / slashing protection is enabled */
23
- haSigningEnabled: boolean;
24
- /** L1 contract addresses (rollup address required) */
25
- l1Contracts: Pick<L1ContractAddresses, 'rollupAddress'>;
26
- /** Unique identifier for this node */
27
- nodeId: string;
28
- /** How long to wait between polls when a duty is being signed (ms) */
29
- pollingIntervalMs: number;
30
- /** Maximum time to wait for a duty being signed to complete (ms) */
31
- signingTimeoutMs: number;
32
- /** Maximum age of a stuck duty in ms (defaults to 2x hardcoded Aztec slot duration if not set) */
33
- maxStuckDutiesAgeMs?: number;
34
- /** Optional: clean up old duties after this many hours (disabled if not set) */
35
- cleanupOldDutiesAfterHours?: number;
36
- /**
37
- * PostgreSQL connection string
38
- * Format: postgresql://user:password@host:port/database
39
- */
40
- databaseUrl?: string;
41
- /**
42
- * PostgreSQL connection pool configuration
43
- */
44
- /** Maximum number of clients in the pool (default: 10) */
45
- poolMaxCount?: number;
46
- /** Minimum number of clients in the pool (default: 0) */
47
- poolMinCount?: number;
48
- /** Idle timeout in milliseconds (default: 10000) */
49
- poolIdleTimeoutMs?: number;
50
- /** Connection timeout in milliseconds (default: 0, no timeout) */
51
- poolConnectionTimeoutMs?: number;
52
- }
53
-
54
- export const validatorHASignerConfigMappings: ConfigMappingsType<ValidatorHASignerConfig> = {
55
- haSigningEnabled: {
56
- env: 'VALIDATOR_HA_SIGNING_ENABLED',
57
- description: 'Whether HA signing / slashing protection is enabled',
58
- ...booleanConfigHelper(false),
59
- },
60
- l1Contracts: {
61
- description: 'L1 contract addresses (rollup address required)',
62
- nested: {
63
- rollupAddress: {
64
- description: 'The Ethereum address of the rollup contract (must be set programmatically)',
65
- parseEnv: (val: string) => EthAddress.fromString(val),
66
- },
67
- },
68
- },
69
- nodeId: {
70
- env: 'VALIDATOR_HA_NODE_ID',
71
- description: 'The unique identifier for this node',
72
- defaultValue: '',
73
- },
74
- pollingIntervalMs: {
75
- env: 'VALIDATOR_HA_POLLING_INTERVAL_MS',
76
- description: 'The number of ms to wait between polls when a duty is being signed',
77
- ...numberConfigHelper(100),
78
- },
79
- signingTimeoutMs: {
80
- env: 'VALIDATOR_HA_SIGNING_TIMEOUT_MS',
81
- description: 'The maximum time to wait for a duty being signed to complete',
82
- ...numberConfigHelper(3_000),
83
- },
84
- maxStuckDutiesAgeMs: {
85
- env: 'VALIDATOR_HA_MAX_STUCK_DUTIES_AGE_MS',
86
- description: 'The maximum age of a stuck duty in ms (defaults to 2x Aztec slot duration)',
87
- ...optionalNumberConfigHelper(),
88
- },
89
- cleanupOldDutiesAfterHours: {
90
- env: 'VALIDATOR_HA_OLD_DUTIES_MAX_AGE_H',
91
- description: 'Optional: clean up old duties after this many hours (disabled if not set)',
92
- ...optionalNumberConfigHelper(),
93
- },
94
- databaseUrl: {
95
- env: 'VALIDATOR_HA_DATABASE_URL',
96
- description:
97
- 'PostgreSQL connection string for validator HA signer (format: postgresql://user:password@host:port/database)',
98
- },
99
- poolMaxCount: {
100
- env: 'VALIDATOR_HA_POOL_MAX',
101
- description: 'Maximum number of clients in the pool',
102
- ...numberConfigHelper(10),
103
- },
104
- poolMinCount: {
105
- env: 'VALIDATOR_HA_POOL_MIN',
106
- description: 'Minimum number of clients in the pool',
107
- ...numberConfigHelper(0),
108
- },
109
- poolIdleTimeoutMs: {
110
- env: 'VALIDATOR_HA_POOL_IDLE_TIMEOUT_MS',
111
- description: 'Idle timeout in milliseconds',
112
- ...numberConfigHelper(10_000),
113
- },
114
- poolConnectionTimeoutMs: {
115
- env: 'VALIDATOR_HA_POOL_CONNECTION_TIMEOUT_MS',
116
- description: 'Connection timeout in milliseconds (0 means no timeout)',
117
- ...numberConfigHelper(0),
118
- },
119
- };
120
-
121
- export const defaultValidatorHASignerConfig: ValidatorHASignerConfig = getDefaultConfig(
122
- validatorHASignerConfigMappings,
123
- );
124
-
125
- /**
126
- * Returns the validator HA signer configuration from environment variables.
127
- * Note: If an environment variable is not set, the default value is used.
128
- * @returns The validator HA signer configuration.
129
- */
130
- export function getConfigEnvVars(): ValidatorHASignerConfig {
131
- return getConfigFromMappings<ValidatorHASignerConfig>(validatorHASignerConfigMappings);
132
- }
133
-
134
- export const ValidatorHASignerConfigSchema = z.object({
135
- haSigningEnabled: z.boolean(),
136
- l1Contracts: z.object({
137
- rollupAddress: z.instanceof(EthAddress),
138
- }),
139
- nodeId: z.string(),
140
- pollingIntervalMs: z.number().min(0),
141
- signingTimeoutMs: z.number().min(0),
142
- maxStuckDutiesAgeMs: z.number().min(0).optional(),
143
- cleanupOldDutiesAfterHours: z.number().min(0).optional(),
144
- databaseUrl: z.string().optional(),
145
- poolMaxCount: z.number().min(0).optional(),
146
- poolMinCount: z.number().min(0).optional(),
147
- poolIdleTimeoutMs: z.number().min(0).optional(),
148
- poolConnectionTimeoutMs: z.number().min(0).optional(),
149
- }) satisfies ZodFor<ValidatorHASignerConfig>;