@lidofinance/next-pages 0.46.0 → 0.48.0

package/README.md

@@ -4,7 +4,7 @@ Common API and UI next pages.
 
 ## Installation
 
-* React 17 || 18
+- React 17 || 18
 
 ```bash
 yarn add @lidofinance/next-pages
@@ -20,47 +20,45 @@ yarn add next@^12.3.0 prom-client@^14.0.0 @lidofinance/api-logger@^0.36.0 @lidof
 #### Health
 
 ```ts
-import { health } from '@lidofinance/next-pages';
+import { health } from '@lidofinance/next-pages'
 // or import { health } from '@lidofinance/next-pages/api';
 
-export default health;
+export default health
 ```
 
 #### Metrics
 
 ```ts
-import { registry } from 'utilsApi/metrics';
-import { metricsFactory } from '@lidofinance/next-pages';
+import { registry } from 'utilsApi/metrics'
+import { metricsFactory } from '@lidofinance/next-pages'
 // or import { metricsFactory } from '@lidofinance/next-pages/api';
 
 const metrics = metricsFactory({
   registry,
-});
+})
 
-export default metrics;
+export default metrics
 ```
 
 #### RPC
 
 ```ts
-import getConfig from 'next/config';
-import { rpcFactory } from '@lidofinance/api-pages';
+import getConfig from 'next/config'
+import { rpcFactory } from '@lidofinance/api-pages'
 // or import { rpcFactory } from '@lidofinance/next-pages/api';
-import { fetchRPC, serverLogger } from 'utilsApi';
-import { registry } from 'utilsApi/metrics';
-import { METRICS_PREFIX } from '../../config';
+import { fetchRPC, serverLogger } from 'utilsApi'
+import { registry } from 'utilsApi/metrics'
+import { METRICS_PREFIX } from '../../config'
 
-const { publicRuntimeConfig, serverRuntimeConfig } = getConfig();
-const { defaultChain } = publicRuntimeConfig;
-const { infuraApiKey, alchemyApiKey } = serverRuntimeConfig;
+const { publicRuntimeConfig, serverRuntimeConfig } = getConfig()
+const { defaultChain } = publicRuntimeConfig
+const { infuraApiKey, alchemyApiKey } = serverRuntimeConfig
 
-// Should be a separate file
 export const enum CHAINS {
   Mainnet = 1,
   Goerli = 5,
 }
 
-// Should be a separate file 
 export const providers: Record<CHAINS, [string, ...string[]]> = {
   [CHAINS.Mainnet]: [
     `https://mainnet.infura.io/v3/${infuraApiKey}`,
@@ -70,24 +68,87 @@ export const providers: Record<CHAINS, [string, ...string[]]> = {
     `https://goerli.infura.io/v3/${infuraApiKey}`,
     `https://eth-goerli.alchemyapi.io/v2/${alchemyApiKey}`,
   ],
-};
+}
+
+const allowedCallAddresses: Record<string, string[]> = {
+  /* Mapping of chainIds to array of addresses permitted for eth_getLogs */
+}
+
+const allowedLogsAddresses: Record<string, string[]> = {
+  /* Mapping of chainIds to array of addresses permitted for eth_call */
+}
+
+// example
+const allowedRPCMethods = [
+  'test',
+  'eth_call',
+  'eth_gasPrice',
+  'eth_getCode',
+  'eth_estimateGas',
+  'eth_getBlockByNumber',
+  'eth_feeHistory',
+  'eth_maxPriorityFeePerGas',
+  'eth_getBalance',
+  'eth_blockNumber',
+  'eth_getTransactionByHash',
+  'eth_getTransactionReceipt',
+  'eth_getTransactionCount',
+  'eth_sendRawTransaction',
+  'eth_getLogs',
+  'eth_chainId',
+  'net_version',
+]
 
 const rpc = rpcFactory({
-  fetchRPC,
+  fetchRPC: trackedFetchRpcFactory({
+    registry: Metrics.registry,
+    prefix: METRICS_PREFIX,
+  }),
   metrics: {
     prefix: METRICS_PREFIX,
-    registry,
+    registry: Metrics.registry,
   },
-  allowedRPCMethods: [
-    'eth_call',
-    'eth_gasPrice',
-    // ...
-  ],
   defaultChain,
-  providers,
-});
+  providers: {
+    [CHAINS.Mainnet]: secretConfig.rpcUrls_1,
+    [CHAINS.Holesky]: secretConfig.rpcUrls_17000,
+  },
+  // optional validation options to protect from misuse of public endpoints
+  // Strongly recommended to use all of them
+  validation: {
+    // !!! IMPORTANT, MUST HAVE !!!
+    // allowed JSON RPC methods
+    allowedRPCMethods,
+
+    // !!! IMPORTANT, MUST HAVE !!!
+    // mapping chainId - addresses fro eth_call, put only contracts you dapp interacts with
+    // no entry for chainId or empty array will prevent method for this chainId
+    allowedCallAddresses,
+
+    // !!! IMPORTANT, MUST HAVE !!!
+    // mapping chainId - addresses fro eth_getLogs put only contracts here if you need to fetch events from them
+    // no entry for chainId or empty array will prevent method for this chainId
+    allowedLogsAddresses,
+
+    // max JSON-RPC batch size
+    maxBatchCount: 20, // DEFAULT
+
+    // prevents empty `address` param for eth_getLogs, that can results in massive queries
+    blockEmptyAddressGetLogs: true, // DEFAULT
+
+    // only 20k blocks size historical queries for eth_getLogs
+    // fetches and caches current block to compare with ambiguous blockTags(e.g. "latest")
+    maxGetLogsRange: 20_000, // DEFAULT
+
+    /// cache TTL for maxGetLogsRange
+    currentBlockTTLms: 60_000; // DEFAULT
+
+    //  1mb max response after which data stream is interrupted and 413 is returned
+    maxResponseSize: 1_000_000, // DEFAULT
+  },
+})
 
-export default rpc;
+export default rpc
 ```
 
 ### UI pages
@@ -98,17 +159,19 @@ export default rpc;
 - **Page500**
 
 Example for `pages/404.tsx`
+
 ```tsx
-import { Page404 } from '@lidofinance/next-ui-pages/ui';
+import { Page404 } from '@lidofinance/next-ui-pages/ui'
 
-export default Page404;
+export default Page404
 ```
 
 Example for `pages/500.tsx`
+
 ```tsx
-import { Page500 } from '@lidofinance/next-ui-pages/ui';
+import { Page500 } from '@lidofinance/next-ui-pages/ui'
 
-export default Page500;
+export default Page500
 ```
 
 #### Error page as generic component
@@ -116,10 +179,10 @@ export default Page500;
 Example for `pages/404.tsx`
 
 ```tsx
-import { FC } from 'react';
-import { PageError } from '@lidofinance/next-ui-pages/ui';
+import { FC } from 'react'
+import { PageError } from '@lidofinance/next-ui-pages/ui'
 
-const Page404: FC = () => <PageError title="404" content="Page Not Found" />;
+const Page404: FC = () => <PageError title="404" content="Page Not Found" />
 
-export default Page404;
+export default Page404
 ```

package/dist/api/index.d.ts

@@ -1,4 +1,4 @@
 export { health } from './health';
 export { type MetricsFactoryParameters, metricsFactory } from './metricsFactory';
-export { type RpcProviders, DEFAULT_API_ERROR_MESSAGE, HEALTHY_RPC_SERVICES_ARE_OVER, UnsupportedChainIdError, UnsupportedHTTPMethodError, type RPCFactoryParams, rpcFactory, } from './rpcFactory';
+export { type RPCFactoryParams, type RPCFactoryValidationParams, type RpcProviders, rpcFactory } from './rpcFactory';
 //# sourceMappingURL=index.d.ts.map

package/dist/api/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/api/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,EAAE,MAAM,UAAU,CAAA;AACjC,OAAO,EAAE,KAAK,wBAAwB,EAAE,cAAc,EAAE,MAAM,kBAAkB,CAAA;AAChF,OAAO,EACL,KAAK,YAAY,EACjB,yBAAyB,EACzB,6BAA6B,EAC7B,uBAAuB,EACvB,0BAA0B,EAC1B,KAAK,gBAAgB,EACrB,UAAU,GACX,MAAM,cAAc,CAAA"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/api/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,EAAE,MAAM,UAAU,CAAA;AACjC,OAAO,EAAE,KAAK,wBAAwB,EAAE,cAAc,EAAE,MAAM,kBAAkB,CAAA;AAChF,OAAO,EAAE,KAAK,gBAAgB,EAAE,KAAK,0BAA0B,EAAE,KAAK,YAAY,EAAE,UAAU,EAAE,MAAM,cAAc,CAAA"}

package/dist/api/index.js

@@ -1,6 +1,8 @@
-import {Transform as $FgOCV$Transform, Readable as $FgOCV$Readable} from "node:stream";
+import {Readable as $FgOCV$Readable, Transform as $FgOCV$Transform} from "node:stream";
+import {pipeline as $FgOCV$pipeline} from "node:stream/promises";
 import {Counter as $FgOCV$Counter} from "prom-client";
 import {iterateUrls as $FgOCV$iterateUrls} from "@lidofinance/rpc";
+import {Cache as $FgOCV$Cache} from "memory-cache";
 
 const $6ad1ea13f08e3d24$export$f0784a54fb0af903 = (_req, res)=>{
     res.status(200).send({
@@ -18,140 +20,230 @@ const $29c7c52f2735c037$export$fc20b1372f40c2c5 = ({ registry: registry })=>asyn
 
 
 
-const $7d34ac0315ec4c05$export$c982278a0ddc4dbe = "Something went wrong. Sorry, try again later :(";
-const $7d34ac0315ec4c05$export$56a189db5508cdcb = "Healthy RPC services are over!";
-class $7d34ac0315ec4c05$export$bb8c263ad32caa8 extends Error {
+
+const $09f9daeda4842558$export$c982278a0ddc4dbe = "Something went wrong. Sorry, try again later :(";
+const $09f9daeda4842558$export$56a189db5508cdcb = "Healthy RPC services are over!";
+class $09f9daeda4842558$export$bb8c263ad32caa8 extends Error {
 }
-class $7d34ac0315ec4c05$export$fc97cac2ba066ec7 extends $7d34ac0315ec4c05$export$bb8c263ad32caa8 {
+class $09f9daeda4842558$export$fc97cac2ba066ec7 extends $09f9daeda4842558$export$bb8c263ad32caa8 {
     constructor(message){
         super(message || "Unsupported chainId");
     }
 }
-class $7d34ac0315ec4c05$export$2dfa2d8949b43fdc extends $7d34ac0315ec4c05$export$bb8c263ad32caa8 {
+class $09f9daeda4842558$export$2dfa2d8949b43fdc extends $09f9daeda4842558$export$bb8c263ad32caa8 {
     constructor(message){
         super(message || "Unsupported HTTP method");
     }
 }
-class $7d34ac0315ec4c05$export$2adbfa76b71ba748 extends $7d34ac0315ec4c05$export$bb8c263ad32caa8 {
+class $09f9daeda4842558$export$2adbfa76b71ba748 extends $09f9daeda4842558$export$bb8c263ad32caa8 {
     constructor(message){
         super(message || "Invalid Request");
     }
 }
-class $7d34ac0315ec4c05$export$e224c1080d950012 extends $7d34ac0315ec4c05$export$bb8c263ad32caa8 {
+class $09f9daeda4842558$export$e224c1080d950012 extends $09f9daeda4842558$export$bb8c263ad32caa8 {
     constructor(message){
-        super(message || "Invalid Request");
+        super(message || "Response size too large");
     }
 }
-const $7d34ac0315ec4c05$var$createSizeLogger = (MAX_SIZE)=>{
-    let bytesWritten = 0;
-    const logSizeStream = new (0, $FgOCV$Transform)({
-        transform (chunk, _encoding, callback) {
-            bytesWritten += chunk.length;
-            if (bytesWritten > MAX_SIZE) // Emit an error if size exceeds MAX_SIZE
-            return callback(new $7d34ac0315ec4c05$export$e224c1080d950012(`Stream size exceeds the maximum limit of ${MAX_SIZE} bytes`));
-            return callback(null, chunk) // Pass the chunk through
-            ;
-        },
-        flush (callback) {
-            callback();
+
+
+
+
+
+// validation factories
+const $5a404da009e373d8$var$zeroBN = BigInt(0);
+const $5a404da009e373d8$export$564dd6c0fb12e680 = (defaultChain, providers, maxBatchSize)=>{
+    return (req)=>{
+        if (req.method !== "POST") // We don't care about tracking blocked requests here
+        throw new (0, $09f9daeda4842558$export$2dfa2d8949b43fdc)();
+        const chainId = Number(req.query.chainId || defaultChain);
+        // Allow only chainId of specified chains
+        if (providers[chainId] == null) // We don't care about tracking blocked requests here
+        throw new (0, $09f9daeda4842558$export$fc97cac2ba066ec7)();
+        const requests = Array.isArray(req.body) ? req.body : [
+            req.body
+        ];
+        if (typeof maxBatchSize === "number" && requests.length > maxBatchSize) throw new (0, $09f9daeda4842558$export$2adbfa76b71ba748)(`Too many batched requests`);
+        return {
+            chainId: chainId,
+            requests: requests
+        };
+    };
+};
+const $5a404da009e373d8$export$bd57dbd3bc9a1cc6 = (allowedMethods)=>{
+    const methodsMap = new Set(allowedMethods ?? []);
+    return (request, context)=>{
+        const method = request.method;
+        if (typeof method !== "string") throw new (0, $09f9daeda4842558$export$2adbfa76b71ba748)(`RPC method isn't string`);
+        if (allowedMethods && !methodsMap.has(request.method)) {
+            context.rpcRequestBlocked.inc({
+                reason: "method not allowed"
+            });
+            throw new (0, $09f9daeda4842558$export$2adbfa76b71ba748)(`RPC method ${method} not allowed`);
         }
-    });
-    return logSizeStream;
+    };
+};
+const $5a404da009e373d8$export$b724143801441d66 = (allowedAddress)=>{
+    const allowedCallAddressMap = $5a404da009e373d8$var$createAllowedAddressMap(allowedAddress);
+    return (request, { chainId: chainId, rpcRequestBlocked: rpcRequestBlocked })=>{
+        const { params: params } = request;
+        if (Array.isArray(params) && params[0] && typeof params[0] === "object" && "to" in params[0] && typeof params[0].to === "string") {
+            if (!allowedCallAddressMap[chainId]?.has(params[0].to.toLowerCase())) {
+                rpcRequestBlocked.inc({
+                    reason: "address not allowed for eth_call"
+                });
+                throw new (0, $09f9daeda4842558$export$2adbfa76b71ba748)(`Address not allowed for eth_call`);
+            }
+        } else throw new (0, $09f9daeda4842558$export$2adbfa76b71ba748)(`RPC method eth_call is invalid`);
+    };
+};
+const $5a404da009e373d8$export$5d8ee2232a9cb21a = (allowedAddress, blockEmptyAddressGetLogs, maxBlockRange, currentBlockTTL = 60000)=>{
+    const allowedAddressMap = $5a404da009e373d8$var$createAllowedAddressMap(allowedAddress ?? {});
+    const maxBlockRangeBN = maxBlockRange ? BigInt(maxBlockRange) : $5a404da009e373d8$var$zeroBN;
+    const currentBlock = new (0, $FgOCV$Cache)();
+    return async (request, { chainId: chainId, rpcRequestBlocked: rpcRequestBlocked, requestRPC: requestRPC })=>{
+        try {
+            const params = request.params[0];
+            const fromBlock = params.fromBlock;
+            const toBlock = params.toBlock ?? "latest";
+            if (blockEmptyAddressGetLogs || allowedAddress) {
+                // address validation
+                const address = params.address;
+                if (blockEmptyAddressGetLogs && !address) throw new (0, $09f9daeda4842558$export$2adbfa76b71ba748)(`RPC method eth_getLogs address is invalid`);
+                const addresses = Array.isArray(address) ? address : [
+                    address
+                ];
+                if (blockEmptyAddressGetLogs && addresses.length === 0) throw new (0, $09f9daeda4842558$export$2adbfa76b71ba748)(`RPC method eth_getLogs address is invalid`);
+                if (allowedAddress && addresses.some((eventAddress)=>// needs this check before toLowerCase
+                    typeof eventAddress !== "string" || !allowedAddressMap[chainId]?.has(eventAddress.toLowerCase()))) {
+                    rpcRequestBlocked.inc({
+                        reason: "address not allowed for eth_getLogs"
+                    });
+                    throw new (0, $09f9daeda4842558$export$2adbfa76b71ba748)(`Address not allowed for eth_getLogs`);
+                }
+            }
+            // block range validation
+            if (maxBlockRange) {
+                if (fromBlock === "earliest") throw new (0, $09f9daeda4842558$export$2adbfa76b71ba748)(`RPC method eth_getLogs fromBlock is invalid`);
+                const shouldValidateBlockDistance = fromBlock.startsWith("0x");
+                if (shouldValidateBlockDistance) {
+                    const normalizedFromBlock = BigInt(fromBlock);
+                    let normalizedToBlock;
+                    if (toBlock.startsWith("0x")) normalizedToBlock = BigInt(toBlock);
+                    else {
+                        const cached = currentBlock.get(chainId);
+                        if (cached) normalizedToBlock = cached;
+                        else {
+                            normalizedToBlock = await requestRPC(chainId, {
+                                id: 1,
+                                jsonrpc: "2.0",
+                                method: "eth_blockNumber"
+                            }).then((res)=>res.json()).then((res)=>BigInt(res.result));
+                            currentBlock.put(chainId, normalizedToBlock, currentBlockTTL);
+                        }
+                    }
+                    const range = normalizedToBlock - normalizedFromBlock;
+                    if (range < $5a404da009e373d8$var$zeroBN || range > maxBlockRangeBN) {
+                        rpcRequestBlocked.inc({
+                            reason: "eth_getLogs range is invalid"
+                        });
+                        throw new (0, $09f9daeda4842558$export$2adbfa76b71ba748)(`RPC method eth_getLogs range is invalid`);
+                    }
+                }
+            }
+        } catch (error) {
+            if (error instanceof (0, $09f9daeda4842558$export$bb8c263ad32caa8)) throw error;
+            throw new (0, $09f9daeda4842558$export$2adbfa76b71ba748)(`RPC method eth_getLogs is invalid`);
+        }
+    };
 };
-const $7d34ac0315ec4c05$export$9bfcc39f106ad871 = ({ metrics: { prefix: prefix, registry: registry }, providers: providers, fetchRPC: fetchRPC, defaultChain: defaultChain, allowedRPCMethods: allowedRPCMethods, allowedCallAddresses: allowedCallAddresses = {}, allowedLogsAddresses: allowedLogsAddresses = {}, maxBatchCount: maxBatchCount, maxResponseSize: maxResponseSize = 1000000, disallowEmptyAddressGetLogs: disallowEmptyAddressGetLogs = false })=>{
+const $5a404da009e373d8$export$7c5a2292697deb4b = (MAX_SIZE)=>(context)=>{
+        let bytesWritten = 0;
+        return new (0, $FgOCV$Transform)({
+            transform (chunk, _encoding, callback) {
+                bytesWritten += chunk.length;
+                if (bytesWritten > MAX_SIZE) {
+                    // Emit an error if size exceeds MAX_SIZE
+                    context.rpcRequestBlocked.inc({
+                        reason: "response too large"
+                    });
+                    return callback(new (0, $09f9daeda4842558$export$e224c1080d950012)(`Stream size exceeds the maximum limit of ${MAX_SIZE} bytes`));
+                }
+                return callback(null, chunk) // Pass the chunk through
+                ;
+            },
+            flush (callback) {
+                callback();
+            }
+        });
+    };
+const $5a404da009e373d8$export$e67f820dcb2fefda = (method, allowedRPCMethods)=>!allowedRPCMethods || allowedRPCMethods.includes(method);
+const $5a404da009e373d8$var$createAllowedAddressMap = (allowedAddress)=>{
+    return Object.entries(allowedAddress).reduce((acc, [chainId, addresses])=>{
+        acc[chainId] = new Set(addresses.map((a)=>a.toLowerCase()));
+        return acc;
+    }, {});
+};
+
+
+const $3f76f1f6d2274759$export$9bfcc39f106ad871 = ({ metrics: metrics, providers: providers, fetchRPC: fetchRPC, defaultChain: defaultChain, validation: validation })=>{
+    const { allowedRPCMethods: allowedRPCMethods, allowedCallAddresses: allowedCallAddresses, allowedLogsAddresses: allowedLogsAddresses, maxResponseSize: maxResponseSize = 1000000, maxBatchCount: maxBatchCount = 20, currentBlockTTLms: currentBlockTTLms = 60000, maxGetLogsRange: maxGetLogsRange = 20000, blockEmptyAddressGetLogs: blockEmptyAddressGetLogs = true } = validation;
+    // optional metrics
+    const { registry: registry, prefix: prefix = "" } = metrics ?? {};
     const rpcRequestBlocked = new (0, $FgOCV$Counter)({
         name: prefix + "rpc_service_request_blocked",
         help: "RPC service request blocked",
-        labelNames: [],
+        labelNames: [
+            "reason"
+        ],
         registers: []
     });
-    registry.registerMetric(rpcRequestBlocked);
-    const allowedCallAddressMap = Object.entries(allowedCallAddresses).reduce((acc, [chainId, addresses])=>{
-        acc[chainId] = new Set(addresses.map((a)=>a.toLowerCase()));
-        return acc;
-    }, {});
-    const allowedLogsAddressMap = Object.entries(allowedLogsAddresses).reduce((acc, [chainId, addresses])=>{
-        acc[chainId] = new Set(addresses.map((a)=>a.toLowerCase()));
-        return acc;
-    }, {});
+    registry?.registerMetric(rpcRequestBlocked);
+    const validateBaseRequest = (0, $5a404da009e373d8$export$564dd6c0fb12e680)(defaultChain, providers, maxBatchCount);
+    const validateRpcMethod = (0, $5a404da009e373d8$export$bd57dbd3bc9a1cc6)(allowedRPCMethods);
+    const validateEthCall = allowedCallAddresses && (0, $5a404da009e373d8$export$e67f820dcb2fefda)("eth_call", allowedRPCMethods) ? (0, $5a404da009e373d8$export$b724143801441d66)(allowedCallAddresses) : undefined;
+    const validateEthGetLogs = (allowedLogsAddresses || blockEmptyAddressGetLogs) && (0, $5a404da009e373d8$export$e67f820dcb2fefda)("eth_getLogs", allowedRPCMethods) ? (0, $5a404da009e373d8$export$5d8ee2232a9cb21a)(allowedLogsAddresses, blockEmptyAddressGetLogs, maxGetLogsRange, currentBlockTTLms) : undefined;
+    const validateMaxSteamSize = (0, $5a404da009e373d8$export$7c5a2292697deb4b)(maxResponseSize);
+    const requestRPC = (chainId, body)=>(0, $FgOCV$iterateUrls)(providers[chainId], // TODO: consider adding verification that body is actually matches FetchRpcInitBody
+        (url)=>fetchRPC(url, {
+                body: body
+            }, {
+                chainId: chainId
+            }), // eslint-disable-next-line @typescript-eslint/unbound-method
+        console.error);
     return async (req, res)=>{
+        const abortController = new AbortController();
         try {
-            // Accept only POST requests
-            if (req.method !== "POST") // We don't care about tracking blocked requests here
-            throw new $7d34ac0315ec4c05$export$2dfa2d8949b43fdc();
-            const chainId = Number(req.query.chainId || defaultChain);
-            // Allow only chainId of specified chains
-            if (providers[chainId] == null) // We don't care about tracking blocked requests here
-            throw new $7d34ac0315ec4c05$export$fc97cac2ba066ec7();
-            const requests = Array.isArray(req.body) ? req.body : [
-                req.body
-            ];
-            if (typeof maxBatchCount === "number" && requests.length > maxBatchCount) throw new $7d34ac0315ec4c05$export$2adbfa76b71ba748(`Too many batched requests`);
-            // Check if provided methods are allowed
+            const { chainId: chainId, requests: requests } = validateBaseRequest(req);
+            const validationContext = {
+                chainId: chainId,
+                rpcRequestBlocked: rpcRequestBlocked,
+                requestRPC: requestRPC
+            };
             // We throw HTTP error for ANY invalid RPC request out of batch
-            // because we assume that frontend must not send invalid requests
-            for (const { method: method, params: params } of requests){
-                if (typeof method !== "string") throw new $7d34ac0315ec4c05$export$2adbfa76b71ba748(`RPC method isn't string`);
-                if (!allowedRPCMethods.includes(method)) {
-                    rpcRequestBlocked.inc();
-                    throw new $7d34ac0315ec4c05$export$2adbfa76b71ba748(`RPC method ${method} isn't allowed`);
-                }
-                if (method === "eth_call" && allowedCallAddressMap[chainId]) {
-                    if (Array.isArray(params) && typeof params[0] === "object" && typeof params[0].to === "string") {
-                        if (!allowedCallAddressMap[chainId].has(params[0].to.toLowerCase())) {
-                            rpcRequestBlocked.inc();
-                            throw new $7d34ac0315ec4c05$export$2adbfa76b71ba748(`Address not allowed for eth_call`);
-                        }
-                    } else throw new $7d34ac0315ec4c05$export$2adbfa76b71ba748(`RPC method eth_call is invalid`);
-                }
-                if (method === "eth_getLogs" && (disallowEmptyAddressGetLogs || allowedLogsAddressMap[chainId])) {
-                    if (Array.isArray(params) && typeof params[0] === "object") {
-                        const address = params[0].address;
-                        if (disallowEmptyAddressGetLogs && (!address || Array.isArray(address) && address.length === 0)) {
-                            rpcRequestBlocked.inc();
-                            throw new $7d34ac0315ec4c05$export$2adbfa76b71ba748(`No empty address on eth_getLogs`);
-                        }
-                        const addresses = Array.isArray(address) ? address : [
-                            address
-                        ];
-                        if (addresses.some((eventAddress)=>// needs this check before toLowerCase
-                            typeof eventAddress !== "string" || !allowedLogsAddressMap[chainId].has(eventAddress.toLowerCase()))) {
-                            rpcRequestBlocked.inc();
-                            throw new $7d34ac0315ec4c05$export$2adbfa76b71ba748(`Address not allowed for eth_getLogs`);
-                        }
-                    } else throw new $7d34ac0315ec4c05$export$2adbfa76b71ba748(`Invalid eth_getLogs`);
-                }
+            // because we assume that frontend must not send invalid requests at all
+            for (const request of requests){
+                validateRpcMethod(request, validationContext);
+                const method = request.method;
+                if (method === "eth_call" && validateEthCall) validateEthCall(request, validationContext);
+                if (method === "eth_getLogs" && validateEthGetLogs) await validateEthGetLogs(request, validationContext);
             }
-            const requested = await (0, $FgOCV$iterateUrls)(providers[chainId], // TODO: consider adding verification that body is actually matches FetchRpcInitBody
-            (url)=>fetchRPC(url, {
-                    body: req.body
-                }, {
-                    chainId: chainId
-                }), // eslint-disable-next-line @typescript-eslint/unbound-method
-            console.error);
-            res.setHeader("Content-Type", requested.headers.get("Content-Type") ?? "application/json");
-            if (requested.body) {
-                const sizeLimit = $7d34ac0315ec4c05$var$createSizeLogger(maxResponseSize);
-                const readableStream = (0, $FgOCV$Readable).fromWeb(requested.body);
-                readableStream.pipe(sizeLimit).on("error", (error)=>{
-                    if (error instanceof $7d34ac0315ec4c05$export$e224c1080d950012) {
-                        console.warn(`[rpcFactory] RPC response too large: ${JSON.stringify(requests)}`);
-                        res.status(413).end() // Payload Too Large
-                        ;
-                    } else {
-                        res.statusCode = 500;
-                        res.end($7d34ac0315ec4c05$export$c982278a0ddc4dbe);
-                    }
-                    readableStream.destroy();
-                }).pipe(res);
-            } else res.status(requested.status).json("There are a problems with RPC provider");
+            const proxyedRPC = await requestRPC(chainId, req.body);
+            res.setHeader("Content-Type", proxyedRPC.headers.get("Content-Type") ?? "application/json");
+            if (!proxyedRPC.body) throw new Error("There are a problems with RPC provider");
+            // auto closes both Readable.fromWeb() and underlying proxyedRPC streams on error
+            await (0, $FgOCV$pipeline)((0, $FgOCV$Readable).fromWeb(proxyedRPC.body), validateMaxSteamSize(validationContext), res, {
+                signal: abortController.signal
+            });
         } catch (error) {
-            if (error instanceof $7d34ac0315ec4c05$export$bb8c263ad32caa8) res.status(400).json(error.message ?? $7d34ac0315ec4c05$export$c982278a0ddc4dbe);
+            if (error instanceof (0, $09f9daeda4842558$export$bb8c263ad32caa8)) res.status(400).json(error.message ?? (0, $09f9daeda4842558$export$c982278a0ddc4dbe));
             else if (error instanceof Error) {
-                // TODO: check if there are errors duplication with iterateUrls
-                console.error(error.message ?? $7d34ac0315ec4c05$export$c982278a0ddc4dbe);
-                res.status(500).json(error.message ?? $7d34ac0315ec4c05$export$c982278a0ddc4dbe);
-            } else res.status(500).json($7d34ac0315ec4c05$export$56a189db5508cdcb);
+                console.error("[rpcFactory]" + (error.message ?? (0, $09f9daeda4842558$export$c982278a0ddc4dbe)));
+                if (!res.headersSent) res.status(500).json(error.message ?? (0, $09f9daeda4842558$export$c982278a0ddc4dbe));
+            } else res.status(500).json((0, $09f9daeda4842558$export$56a189db5508cdcb));
+        } finally{
+            // forces pipeline closure in case of external error/abort
+            abortController.abort();
         }
     };
 };
@@ -159,5 +251,7 @@ const $7d34ac0315ec4c05$export$9bfcc39f106ad871 = ({ metrics: { prefix: prefix,
 
 
 
-export {$6ad1ea13f08e3d24$export$f0784a54fb0af903 as health, $29c7c52f2735c037$export$fc20b1372f40c2c5 as metricsFactory, $7d34ac0315ec4c05$export$c982278a0ddc4dbe as DEFAULT_API_ERROR_MESSAGE, $7d34ac0315ec4c05$export$56a189db5508cdcb as HEALTHY_RPC_SERVICES_ARE_OVER, $7d34ac0315ec4c05$export$fc97cac2ba066ec7 as UnsupportedChainIdError, $7d34ac0315ec4c05$export$2dfa2d8949b43fdc as UnsupportedHTTPMethodError, $7d34ac0315ec4c05$export$9bfcc39f106ad871 as rpcFactory};
+
+
+export {$6ad1ea13f08e3d24$export$f0784a54fb0af903 as health, $29c7c52f2735c037$export$fc20b1372f40c2c5 as metricsFactory, $3f76f1f6d2274759$export$9bfcc39f106ad871 as rpcFactory};
 //# sourceMappingURL=index.js.map

package/dist/api/index.js.map

@@ -1 +1 @@
-{"mappings":";;;;ACEO,MAAM,4CAAS,CAAC,MAAsB;IAC3C,IAAI,OAAO,KAAK,KAAK;QAAE,QAAQ;IAAK;AACtC;;;ACGO,MAAM,4CACX,CAAC,YAAE,QAAQ,EAA4B,GACvC,OAAO,MAAsB;QAC3B,MAAM,mBAAmB,MAAM,SAAS;QACxC,IAAI,KAAK;IACX;;;;;;ACFK,MAAM,4CAA4B;AAElC,MAAM,4CAAgC;AAEtC,MAAM,iDAAoB;AAAO;AACjC,MAAM,kDAAgC;IAC3C,YAAY,OAAgB,CAAE;QAC5B,KAAK,CAAC,WAAW;IACnB;AACF;AAEO,MAAM,kDAAmC;IAC9C,YAAY,OAAgB,CAAE;QAC5B,KAAK,CAAC,WAAW;IACnB;AACF;AAEO,MAAM,kDAA4B;IACvC,YAAY,OAAgB,CAAE;QAC5B,KAAK,CAAC,WAAW;IACnB;AACF;AAEO,MAAM,kDAA0B;IACrC,YAAY,OAAgB,CAAE;QAC5B,KAAK,CAAC,WAAW;IACnB;AACF;AAEA,MAAM,yCAAmB,CAAC;IACxB,IAAI,eAAe;IACnB,MAAM,gBAAgB,IAAI,CAAA,GAAA,gBAAQ,EAAE;QAClC,WAAU,KAAK,EAAE,SAAS,EAAE,QAAQ;YAClC,gBAAgB,MAAM;YACtB,IAAI,eAAe,UACjB,yCAAyC;YACzC,OAAO,SAAS,IAAI,0CAAkB,CAAC,yCAAyC,EAAE,SAAS,MAAM,CAAC;YAEpG,OAAO,SAAS,MAAM,OAAO,yBAAyB;;QACxD;QACA,OAAM,QAAQ;YACZ;QACF;IACF;IACA,OAAO;AACT;AAsBO,MAAM,4CAAa,CAAC,EACzB,SAAS,UAAE,MAAM,YAAE,QAAQ,EAAE,aAC7B,SAAS,YACT,QAAQ,gBACR,YAAY,qBACZ,iBAAiB,wBACjB,uBAAuB,CAAC,yBACxB,uBAAuB,CAAC,kBACxB,aAAa,mBACb,kBAAkB,sCAClB,8BAA8B,OACb;IACjB,MAAM,oBAAoB,IAAI,CAAA,GAAA,cAAM,EAAE;QACpC,MAAM,SAAS;QACf,MAAM;QACN,YAAY,EAAE;QACd,WAAW,EAAE;IACf;IACA,SAAS,eAAe;IAExB,MAAM,wBAAwB,OAAO,QAAQ,sBAAsB,OAAO,CAAC,KAAK,CAAC,SAAS,UAAU;QAClG,GAAG,CAAC,QAAQ,GAAG,IAAI,IAAI,UAAU,IAAI,CAAC,IAAM,EAAE;QAC9C,OAAO;IACT,GAAG,CAAC;IAEJ,MAAM,wBAAwB,OAAO,QAAQ,sBAAsB,OAAO,CAAC,KAAK,CAAC,SAAS,UAAU;QAClG,GAAG,CAAC,QAAQ,GAAG,IAAI,IAAI,UAAU,IAAI,CAAC,IAAM,EAAE;QAC9C,OAAO;IACT,GAAG,CAAC;IAEJ,OAAO,OAAO,KAAqB;QACjC,IAAI;YACF,4BAA4B;YAC5B,IAAI,IAAI,WAAW,QACjB,qDAAqD;YACrD,MAAM,IAAI;YAGZ,MAAM,UAAU,OAAO,IAAI,MAAM,WAAW;YAE5C,yCAAyC;YACzC,IAAI,SAAS,CAAC,QAAQ,IAAI,MACxB,qDAAqD;YACrD,MAAM,IAAI;YAGZ,MAAM,WAAW,MAAM,QAAQ,IAAI,QAAQ,IAAI,OAAO;gBAAC,IAAI;aAAK;YAEhE,IAAI,OAAO,kBAAkB,YAAY,SAAS,SAAS,eACzD,MAAM,IAAI,0CAAoB,CAAC,yBAAyB,CAAC;YAG3D,wCAAwC;YACxC,+DAA+D;YAC/D,iEAAiE;YACjE,KAAK,MAAM,UAAE,MAAM,UAAE,MAAM,EAAE,IAAI,SAAU;gBACzC,IAAI,OAAO,WAAW,UACpB,MAAM,IAAI,0CAAoB,CAAC,uBAAuB,CAAC;gBAEzD,IAAI,CAAC,kBAAkB,SAAS,SAAS;oBACvC,kBAAkB;oBAClB,MAAM,IAAI,0CAAoB,CAAC,WAAW,EAAE,OAAO,cAAc,CAAC;gBACpE;gBACA,IAAI,WAAW,cAAc,qBAAqB,CAAC,QAAQ,EAAE;oBAC3D,IAAI,MAAM,QAAQ,WAAW,OAAO,MAAM,CAAC,EAAE,KAAK,YAAY,OAAO,MAAM,CAAC,EAAE,CAAC,OAAO,UACpF;wBAAA,IAAI,CAAC,qBAAqB,CAAC,QAAQ,CAAC,IAAI,MAAM,CAAC,EAAE,CAAC,GAAG,gBAAgB;4BACnE,kBAAkB;4BAClB,MAAM,IAAI,0CAAoB,CAAC,gCAAgC,CAAC;wBAClE;oBAAA,OACK,MAAM,IAAI,0CAAoB,CAAC,8BAA8B,CAAC;gBACvE;gBACA,IAAI,WAAW,iBAAkB,CAAA,+BAA+B,qBAAqB,CAAC,QAAQ,AAAD,GAAI;oBAC/F,IAAI,MAAM,QAAQ,WAAW,OAAO,MAAM,CAAC,EAAE,KAAK,UAAU;wBAC1D,MAAM,UAAU,MAAM,CAAC,EAAE,CAAC;wBAC1B,IAAI,+BAAgC,CAAA,CAAC,WAAY,MAAM,QAAQ,YAAY,QAAQ,WAAW,CAAC,GAAI;4BACjG,kBAAkB;4BAClB,MAAM,IAAI,0CAAoB,CAAC,+BAA+B,CAAC;wBACjE;wBACA,MAAM,YAAY,MAAM,QAAQ,WAAW,UAAU;4BAAC;yBAAQ;wBAC9D,IACE,UAAU,KACR,CAAC,eACC,sCAAsC;4BACtC,OAAO,iBAAiB,YAAY,CAAC,qBAAqB,CAAC,QAAQ,CAAC,IAAI,aAAa,iBAEzF;4BACA,kBAAkB;4BAClB,MAAM,IAAI,0CAAoB,CAAC,mCAAmC,CAAC;wBACrE;oBACF,OAAO,MAAM,IAAI,0CAAoB,CAAC,mBAAmB,CAAC;gBAC5D;YACF;YAEA,MAAM,YAAY,MAAM,CAAA,GAAA,kBAAU,EAChC,SAAS,CAAC,QAAQ,EAClB,oFAAoF;YACpF,CAAC,MAAQ,SAAS,KAAK;oBAAE,MAAM,IAAI;gBAAyB,GAAG;6BAAE;gBAAQ,IACzE,6DAA6D;YAC7D,QAAQ;YAGV,IAAI,UAAU,gBAAgB,UAAU,QAAQ,IAAI,mBAAmB;YACvE,IAAI,UAAU,MAAM;gBAClB,MAAM,YAAY,uCAAiB;gBACnC,MAAM,iBAAiB,CAAA,GAAA,eAAO,EAAE,QAAQ,UAAU;gBAClD,eACG,KAAK,WACL,GAAG,SAAS,CAAC;oBACZ,IAAI,iBAAiB,2CAAmB;wBACtC,QAAQ,KAAK,CAAC,qCAAqC,EAAE,KAAK,UAAU,UAAU,CAAC;wBAC/E,IAAI,OAAO,KAAK,MAAM,oBAAoB;;oBAC5C,OAAO;wBACL,IAAI,aAAa;wBACjB,IAAI,IAAI;oBACV;oBACA,eAAe;gBACjB,GACC,KAAK;YACV,OACE,IAAI,OAAO,UAAU,QAAQ,KAAK;QAEtC,EAAE,OAAO,OAAO;YACd,IAAI,iBAAiB,0CACnB,IAAI,OAAO,KAAK,KAAK,MAAM,WAAW;iBACjC,IAAI,iBAAiB,OAAO;gBACjC,+DAA+D;gBAC/D,QAAQ,MAAM,MAAM,WAAW;gBAC/B,IAAI,OAAO,KAAK,KAAK,MAAM,WAAW;YACxC,OACE,IAAI,OAAO,KAAK,KAAK;QAEzB;IACF;AACF;","sources":["packages/next/pages/src/api/index.ts","packages/next/pages/src/api/health.ts","packages/next/pages/src/api/metricsFactory.ts","packages/next/pages/src/api/rpcFactory.ts"],"sourcesContent":["export { health } from './health'\nexport { type MetricsFactoryParameters, metricsFactory } from './metricsFactory'\nexport {\n  type RpcProviders,\n  DEFAULT_API_ERROR_MESSAGE,\n  HEALTHY_RPC_SERVICES_ARE_OVER,\n  UnsupportedChainIdError,\n  UnsupportedHTTPMethodError,\n  type RPCFactoryParams,\n  rpcFactory,\n} from './rpcFactory'\n","import { NextApiRequest, NextApiResponse } from 'next'\n\nexport const health = (_req: NextApiRequest, res: NextApiResponse): void => {\n  res.status(200).send({ status: 'ok' })\n}\n","import { NextApiRequest, NextApiResponse } from 'next'\nimport { Registry } from 'prom-client'\n\nexport type MetricsFactoryParameters = {\n  registry: Registry\n}\n\nexport const metricsFactory =\n  ({ registry }: MetricsFactoryParameters) =>\n  async (_req: NextApiRequest, res: NextApiResponse) => {\n    const collectedMetrics = await registry.metrics()\n    res.send(collectedMetrics)\n  }\n","import { Readable, Transform } from 'node:stream'\nimport { ReadableStream } from 'node:stream/web'\nimport type { NextApiRequest, NextApiResponse } from 'next'\nimport { Counter, Registry } from 'prom-client'\nimport type { TrackedFetchRPC } from '@lidofinance/api-rpc'\nimport type { FetchRpcInitBody } from '@lidofinance/rpc'\nimport { iterateUrls } from '@lidofinance/rpc'\n\nexport type RpcProviders = Record<string | number, [string, ...string[]]>\n\nexport const DEFAULT_API_ERROR_MESSAGE = 'Something went wrong. Sorry, try again later :('\n\nexport const HEALTHY_RPC_SERVICES_ARE_OVER = 'Healthy RPC services are over!'\n\nexport class ClientError extends Error {}\nexport class UnsupportedChainIdError extends ClientError {\n  constructor(message?: string) {\n    super(message || 'Unsupported chainId')\n  }\n}\n\nexport class UnsupportedHTTPMethodError extends ClientError {\n  constructor(message?: string) {\n    super(message || 'Unsupported HTTP method')\n  }\n}\n\nexport class InvalidRequestError extends ClientError {\n  constructor(message?: string) {\n    super(message || 'Invalid Request')\n  }\n}\n\nexport class SizeTooLargeError extends ClientError {\n  constructor(message?: string) {\n    super(message || 'Invalid Request')\n  }\n}\n\nconst createSizeLogger = (MAX_SIZE: number) => {\n  let bytesWritten = 0\n  const logSizeStream = new Transform({\n    transform(chunk, _encoding, callback) {\n      bytesWritten += chunk.length\n      if (bytesWritten > MAX_SIZE) {\n        // Emit an error if size exceeds MAX_SIZE\n        return callback(new SizeTooLargeError(`Stream size exceeds the maximum limit of ${MAX_SIZE} bytes`))\n      }\n      return callback(null, chunk) // Pass the chunk through\n    },\n    flush(callback) {\n      callback()\n    },\n  })\n  return logSizeStream\n}\n\nexport type RPCFactoryParams = {\n  metrics: {\n    prefix: string\n    registry: Registry\n  }\n  providers: RpcProviders\n  fetchRPC: TrackedFetchRPC\n  defaultChain: string | number\n  // If we don't specify allowed RPC methods, then we can't use\n  //  fetchRPC with prometheus, otherwise it will blow up, if someone will send arbitrary\n  //  methods\n  allowedRPCMethods: string[]\n  // filtration by eth_call to addresses\n  allowedCallAddresses?: Record<number, string[]>\n  allowedLogsAddresses?: Record<number, string[]>\n  disallowEmptyAddressGetLogs?: boolean\n  maxBatchCount?: number\n  maxResponseSize?: number\n}\n\nexport const rpcFactory = ({\n  metrics: { prefix, registry },\n  providers,\n  fetchRPC,\n  defaultChain,\n  allowedRPCMethods,\n  allowedCallAddresses = {},\n  allowedLogsAddresses = {},\n  maxBatchCount,\n  maxResponseSize = 1_000_000, // ~1MB,\n  disallowEmptyAddressGetLogs = false,\n}: RPCFactoryParams) => {\n  const rpcRequestBlocked = new Counter({\n    name: prefix + 'rpc_service_request_blocked',\n    help: 'RPC service request blocked',\n    labelNames: [],\n    registers: [],\n  })\n  registry.registerMetric(rpcRequestBlocked)\n\n  const allowedCallAddressMap = Object.entries(allowedCallAddresses).reduce((acc, [chainId, addresses]) => {\n    acc[chainId] = new Set(addresses.map((a) => a.toLowerCase()))\n    return acc\n  }, {} as Record<string, Set<string>>)\n\n  const allowedLogsAddressMap = Object.entries(allowedLogsAddresses).reduce((acc, [chainId, addresses]) => {\n    acc[chainId] = new Set(addresses.map((a) => a.toLowerCase()))\n    return acc\n  }, {} as Record<string, Set<string>>)\n\n  return async (req: NextApiRequest, res: NextApiResponse): Promise<void> => {\n    try {\n      // Accept only POST requests\n      if (req.method !== 'POST') {\n        // We don't care about tracking blocked requests here\n        throw new UnsupportedHTTPMethodError()\n      }\n\n      const chainId = Number(req.query.chainId || defaultChain)\n\n      // Allow only chainId of specified chains\n      if (providers[chainId] == null) {\n        // We don't care about tracking blocked requests here\n        throw new UnsupportedChainIdError()\n      }\n\n      const requests = Array.isArray(req.body) ? req.body : [req.body]\n\n      if (typeof maxBatchCount === 'number' && requests.length > maxBatchCount) {\n        throw new InvalidRequestError(`Too many batched requests`)\n      }\n\n      // Check if provided methods are allowed\n      // We throw HTTP error for ANY invalid RPC request out of batch\n      // because we assume that frontend must not send invalid requests\n      for (const { method, params } of requests) {\n        if (typeof method !== 'string') {\n          throw new InvalidRequestError(`RPC method isn't string`)\n        }\n        if (!allowedRPCMethods.includes(method)) {\n          rpcRequestBlocked.inc()\n          throw new InvalidRequestError(`RPC method ${method} isn't allowed`)\n        }\n        if (method === 'eth_call' && allowedCallAddressMap[chainId]) {\n          if (Array.isArray(params) && typeof params[0] === 'object' && typeof params[0].to === 'string') {\n            if (!allowedCallAddressMap[chainId].has(params[0].to.toLowerCase())) {\n              rpcRequestBlocked.inc()\n              throw new InvalidRequestError(`Address not allowed for eth_call`)\n            }\n          } else throw new InvalidRequestError(`RPC method eth_call is invalid`)\n        }\n        if (method === 'eth_getLogs' && (disallowEmptyAddressGetLogs || allowedLogsAddressMap[chainId])) {\n          if (Array.isArray(params) && typeof params[0] === 'object') {\n            const address = params[0].address\n            if (disallowEmptyAddressGetLogs && (!address || (Array.isArray(address) && address.length === 0))) {\n              rpcRequestBlocked.inc()\n              throw new InvalidRequestError(`No empty address on eth_getLogs`)\n            }\n            const addresses = Array.isArray(address) ? address : [address]\n            if (\n              addresses.some(\n                (eventAddress) =>\n                  // needs this check before toLowerCase\n                  typeof eventAddress !== 'string' || !allowedLogsAddressMap[chainId].has(eventAddress.toLowerCase()),\n              )\n            ) {\n              rpcRequestBlocked.inc()\n              throw new InvalidRequestError(`Address not allowed for eth_getLogs`)\n            }\n          } else throw new InvalidRequestError(`Invalid eth_getLogs`)\n        }\n      }\n\n      const requested = await iterateUrls(\n        providers[chainId],\n        // TODO: consider adding verification that body is actually matches FetchRpcInitBody\n        (url) => fetchRPC(url, { body: req.body as FetchRpcInitBody }, { chainId }),\n        // eslint-disable-next-line @typescript-eslint/unbound-method\n        console.error,\n      )\n\n      res.setHeader('Content-Type', requested.headers.get('Content-Type') ?? 'application/json')\n      if (requested.body) {\n        const sizeLimit = createSizeLogger(maxResponseSize)\n        const readableStream = Readable.fromWeb(requested.body as ReadableStream)\n        readableStream\n          .pipe(sizeLimit)\n          .on('error', (error) => {\n            if (error instanceof SizeTooLargeError) {\n              console.warn(`[rpcFactory] RPC response too large: ${JSON.stringify(requests)}`)\n              res.status(413).end() // Payload Too Large\n            } else {\n              res.statusCode = 500\n              res.end(DEFAULT_API_ERROR_MESSAGE)\n            }\n            readableStream.destroy()\n          })\n          .pipe(res)\n      } else {\n        res.status(requested.status).json('There are a problems with RPC provider')\n      }\n    } catch (error) {\n      if (error instanceof ClientError) {\n        res.status(400).json(error.message ?? DEFAULT_API_ERROR_MESSAGE)\n      } else if (error instanceof Error) {\n        // TODO: check if there are errors duplication with iterateUrls\n        console.error(error.message ?? DEFAULT_API_ERROR_MESSAGE)\n        res.status(500).json(error.message ?? DEFAULT_API_ERROR_MESSAGE)\n      } else {\n        res.status(500).json(HEALTHY_RPC_SERVICES_ARE_OVER)\n      }\n    }\n  }\n}\n"],"names":[],"version":3,"file":"index.js.map","sourceRoot":"../../../../../"}
+{"mappings":";;;;;;ACEO,MAAM,4CAAS,CAAC,MAAsB;IAC3C,IAAI,OAAO,KAAK,KAAK;QAAE,QAAQ;IAAK;AACtC;;;ACGO,MAAM,4CACX,CAAC,YAAE,QAAQ,EAA4B,GACvC,OAAO,MAAsB;QAC3B,MAAM,mBAAmB,MAAM,SAAS;QACxC,IAAI,KAAK;IACX;;;;;;;AGZK,MAAM,4CAA4B;AAElC,MAAM,4CAAgC;AAEtC,MAAM,iDAAoB;AAAO;AAEjC,MAAM,kDAAgC;IAC3C,YAAY,OAAgB,CAAE;QAC5B,KAAK,CAAC,WAAW;IACnB;AACF;AAEO,MAAM,kDAAmC;IAC9C,YAAY,OAAgB,CAAE;QAC5B,KAAK,CAAC,WAAW;IACnB;AACF;AAEO,MAAM,kDAA4B;IACvC,YAAY,OAAgB,CAAE;QAC5B,KAAK,CAAC,WAAW;IACnB;AACF;AAEO,MAAM,kDAA0B;IACrC,YAAY,OAAgB,CAAE;QAC5B,KAAK,CAAC,WAAW;IACnB;AACF;;;;;;ACbA,uBAAuB;AAEvB,MAAM,+BAAS,OAAO;AAEf,MAAM,4CAA+B,CAC1C,cACA,WACA;IAEA,OAAO,CAAC;QACN,IAAI,IAAI,WAAW,QACjB,qDAAqD;QACrD,MAAM,IAAI,CAAA,GAAA,yCAAyB;QAGrC,MAAM,UAAU,OAAO,IAAI,MAAM,WAAW;QAE5C,yCAAyC;QACzC,IAAI,SAAS,CAAC,QAAQ,IAAI,MACxB,qDAAqD;QACrD,MAAM,IAAI,CAAA,GAAA,yCAAsB;QAGlC,MAAM,WAAW,MAAM,QAAQ,IAAI,QAAQ,IAAI,OAAO;YAAC,IAAI;SAAK;QAEhE,IAAI,OAAO,iBAAiB,YAAY,SAAS,SAAS,cACxD,MAAM,IAAI,CAAA,GAAA,yCAAkB,EAAE,CAAC,yBAAyB,CAAC;QAE3D,OAAO;qBAAE;sBAAS;QAAS;IAC7B;AACF;AAEO,MAAM,4CAA8B,CAAC;IAC1C,MAAM,aAAa,IAAI,IAAI,kBAAkB,EAAE;IAE/C,OAAO,CAAC,SAAqB;QAC3B,MAAM,SAAS,QAAQ;QACvB,IAAI,OAAO,WAAW,UACpB,MAAM,IAAI,CAAA,GAAA,yCAAkB,EAAE,CAAC,uBAAuB,CAAC;QAEzD,IAAI,kBAAkB,CAAC,WAAW,IAAI,QAAQ,SAAS;YACrD,QAAQ,kBAAkB,IAAI;gBAAE,QAAQ;YAAqB;YAC7D,MAAM,IAAI,CAAA,GAAA,yCAAkB,EAAE,CAAC,WAAW,EAAE,OAAO,YAAY,CAAC;QAClE;IACF;AACF;AAEO,MAAM,4CAA2B,CAAC;IACvC,MAAM,wBAAwB,8CAAwB;IAEtD,OAAO,CAAC,SAAqB,WAAE,OAAO,qBAAE,iBAAiB,EAAqB;QAC5E,MAAM,UAAE,MAAM,EAAE,GAAG;QACnB,IACE,MAAM,QAAQ,WACd,MAAM,CAAC,EAAE,IACT,OAAO,MAAM,CAAC,EAAE,KAAK,YACrB,QAAQ,MAAM,CAAC,EAAE,IACjB,OAAO,MAAM,CAAC,EAAE,CAAC,OAAO,UAExB;YAAA,IAAI,CAAC,qBAAqB,CAAC,QAAQ,EAAE,IAAI,MAAM,CAAC,EAAE,CAAC,GAAG,gBAAgB;gBACpE,kBAAkB,IAAI;oBAAE,QAAQ;gBAAmC;gBACnE,MAAM,IAAI,CAAA,GAAA,yCAAkB,EAAE,CAAC,gCAAgC,CAAC;YAClE;QAAA,OACK,MAAM,IAAI,CAAA,GAAA,yCAAkB,EAAE,CAAC,8BAA8B,CAAC;IACvE;AACF;AAEO,MAAM,4CAA8B,CACzC,gBACA,0BACA,eACA,kBAAkB,KAAM;IAExB,MAAM,oBAAoB,8CAAwB,kBAAkB,CAAC;IAErE,MAAM,kBAAkB,gBAAgB,OAAO,iBAAiB;IAEhE,MAAM,eAAe,IAAI,CAAA,GAAA,YAAI;IAE7B,OAAO,OAAO,SAAqB,WAAE,OAAO,qBAAE,iBAAiB,cAAE,UAAU,EAAqB;QAC9F,IAAI;YACF,MAAM,SAAS,QAAQ,MAAM,CAAC,EAAE;YAChC,MAAM,YAAoB,OAAO;YACjC,MAAM,UAAkB,OAAO,WAAW;YAE1C,IAAI,4BAA4B,gBAAgB;gBAC9C,qBAAqB;gBACrB,MAAM,UAA6B,OAAO;gBAE1C,IAAI,4BAA4B,CAAC,SAC/B,MAAM,IAAI,CAAA,GAAA,yCAAkB,EAAE,CAAC,yCAAyC,CAAC;gBAE3E,MAAM,YAAY,MAAM,QAAQ,WAAW,UAAU;oBAAC;iBAAQ;gBAE9D,IAAI,4BAA4B,UAAU,WAAW,GACnD,MAAM,IAAI,CAAA,GAAA,yCAAkB,EAAE,CAAC,yCAAyC,CAAC;gBAE3E,IACE,kBACA,UAAU,KACR,CAAC,eACC,sCAAsC;oBACtC,OAAO,iBAAiB,YAAY,CAAC,iBAAiB,CAAC,QAAQ,EAAE,IAAI,aAAa,iBAEtF;oBACA,kBAAkB,IAAI;wBACpB,QAAQ;oBACV;oBACA,MAAM,IAAI,CAAA,GAAA,yCAAkB,EAAE,CAAC,mCAAmC,CAAC;gBACrE;YACF;YAEA,yBAAyB;YACzB,IAAI,eAAe;gBACjB,IAAI,cAAc,YAAY,MAAM,IAAI,CAAA,GAAA,yCAAkB,EAAE,CAAC,2CAA2C,CAAC;gBAEzG,MAAM,8BAA8B,UAAU,WAAW;gBAEzD,IAAI,6BAA6B;oBAC/B,MAAM,sBAAsB,OAAO;oBACnC,IAAI;oBACJ,IAAI,QAAQ,WAAW,OAAO,oBAAoB,OAAO;yBACpD;wBACH,MAAM,SAAS,aAAa,IAAI;wBAChC,IAAI,QACF,oBAAoB;6BACf;4BACL,oBAAoB,MAAM,WAAW,SAAS;gCAC5C,IAAI;gCACJ,SAAS;gCACT,QAAQ;4BACV,GACG,KAAK,CAAC,MAAQ,IAAI,QAClB,KAAK,CAAC,MAAQ,OAAO,IAAI;4BAC5B,aAAa,IAAI,SAAS,mBAAmB;wBAC/C;oBACF;oBACA,MAAM,QAAQ,oBAAoB;oBAElC,IAAI,QAAQ,gCAAU,QAAQ,iBAAiB;wBAC7C,kBAAkB,IAAI;4BACpB,QAAQ;wBACV;wBACA,MAAM,IAAI,CAAA,GAAA,yCAAkB,EAAE,CAAC,uCAAuC,CAAC;oBACzE;gBACF;YACF;QACF,EAAE,OAAO,OAAO;YACd,IAAI,iBAAiB,CAAA,GAAA,wCAAU,GAAG,MAAM;YACxC,MAAM,IAAI,CAAA,GAAA,yCAAkB,EAAE,CAAC,iCAAiC,CAAC;QACnE;IACF;AACF;AAEO,MAAM,4CAAiC,CAAC,WAAqB,CAAC;QACnE,IAAI,eAAe;QACnB,OAAO,IAAI,CAAA,GAAA,gBAAQ,EAAE;YACnB,WAAU,KAAK,EAAE,SAAS,EAAE,QAAQ;gBAClC,gBAAgB,MAAM;gBACtB,IAAI,eAAe,UAAU;oBAC3B,yCAAyC;oBACzC,QAAQ,kBAAkB,IAAI;wBAAE,QAAQ;oBAAqB;oBAC7D,OAAO,SAAS,IAAI,CAAA,GAAA,yCAAgB,EAAE,CAAC,yCAAyC,EAAE,SAAS,MAAM,CAAC;gBACpG;gBACA,OAAO,SAAS,MAAM,OAAO,yBAAyB;;YACxD;YACA,OAAM,QAAQ;gBACZ;YACF;QACF;IACF;AAIO,MAAM,4CAA0B,CAAC,QAAgB,oBACtD,CAAC,qBAAqB,kBAAkB,SAAS;AAEnD,MAAM,gDAA0B,CAAC;IAC/B,OAAO,OAAO,QAAQ,gBAAgB,OAAO,CAAC,KAAK,CAAC,SAAS,UAAU;QACrE,GAAG,CAAC,QAAQ,GAAG,IAAI,IAAI,UAAU,IAAI,CAAC,IAAM,EAAE;QAC9C,OAAO;IACT,GAAG,CAAC;AACN;;;AFhLO,MAAM,4CAAa,CAAC,WAAE,OAAO,aAAE,SAAS,YAAE,QAAQ,gBAAE,YAAY,cAAE,UAAU,EAAoB;IACrG,MAAM,qBACJ,iBAAiB,wBACjB,oBAAoB,wBACpB,oBAAoB,mBACpB,kBAAkB,wBAClB,gBAAgB,uBAChB,oBAAoB,wBACpB,kBAAkB,iCAClB,2BAA2B,MAC5B,GAAG;IAEJ,mBAAmB;IACnB,MAAM,YAAE,QAAQ,UAAE,SAAS,IAAI,GAAG,WAAW,CAAC;IAC9C,MAAM,oBAAoB,IAAI,CAAA,GAAA,cAAM,EAAE;QACpC,MAAM,SAAS;QACf,MAAM;QACN,YAAY;YAAC;SAAS;QACtB,WAAW,EAAE;IACf;IACA,UAAU,eAAe;IAEzB,MAAM,sBAAsB,CAAA,GAAA,yCAA2B,EAAE,cAAc,WAAW;IAElF,MAAM,oBAAoB,CAAA,GAAA,yCAA0B,EAAE;IAEtD,MAAM,kBACJ,wBAAwB,CAAA,GAAA,yCAAsB,EAAE,YAAY,qBACxD,CAAA,GAAA,yCAAuB,EAAE,wBACzB;IAEN,MAAM,qBACJ,AAAC,CAAA,wBAAwB,wBAAuB,KAAM,CAAA,GAAA,yCAAsB,EAAE,eAAe,qBACzF,CAAA,GAAA,yCAA0B,EAAE,sBAAsB,0BAA0B,iBAAiB,qBAC7F;IAEN,MAAM,uBAAuB,CAAA,GAAA,yCAA6B,EAAE;IAE5D,MAAM,aAAa,CAAC,SAAiB,OACnC,CAAA,GAAA,kBAAU,EACR,SAAS,CAAC,QAAQ,EAClB,oFAAoF;QACpF,CAAC,MAAQ,SAAS,KAAK;sBAAE;YAAK,GAAG;yBAAE;YAAQ,IAC3C,6DAA6D;QAC7D,QAAQ;IAGZ,OAAO,OAAO,KAAqB;QACjC,MAAM,kBAAkB,IAAI;QAC5B,IAAI;YACF,MAAM,WAAE,OAAO,YAAE,QAAQ,EAAE,GAAG,oBAAoB;YAElD,MAAM,oBAAoB;yBACxB;mCACA;4BACA;YACF;YAEA,+DAA+D;YAC/D,wEAAwE;YACxE,KAAK,MAAM,WAAW,SAAU;gBAC9B,kBAAkB,SAAS;gBAE3B,MAAM,SAAS,QAAQ;gBAEvB,IAAI,WAAW,cAAc,iBAC3B,gBAAgB,SAAS;gBAE3B,IAAI,WAAW,iBAAiB,oBAC9B,MAAM,mBAAmB,SAAS;YAEtC;YAEA,MAAM,aAAa,MAAM,WAAW,SAAS,IAAI;YAEjD,IAAI,UAAU,gBAAgB,WAAW,QAAQ,IAAI,mBAAmB;YACxE,IAAI,CAAC,WAAW,MACd,MAAM,IAAI,MAAM;YAGlB,iFAAiF;YACjF,MAAM,CAAA,GAAA,eAAO,EACX,CAAA,GAAA,eAAO,EAAE,QAAQ,WAAW,OAC5B,qBAAqB,oBACrB,KACA;gBACE,QAAQ,gBAAgB;YAC1B;QAEJ,EAAE,OAAO,OAAO;YACd,IAAI,iBAAiB,CAAA,GAAA,wCAAU,GAC7B,IAAI,OAAO,KAAK,KAAK,MAAM,WAAW,CAAA,GAAA,yCAAwB;iBACzD,IAAI,iBAAiB,OAAO;gBACjC,QAAQ,MAAM,iBAAkB,CAAA,MAAM,WAAW,CAAA,GAAA,yCAAwB,CAAA;gBACzE,IAAI,CAAC,IAAI,aACP,IAAI,OAAO,KAAK,KAAK,MAAM,WAAW,CAAA,GAAA,yCAAwB;YAElE,OACE,IAAI,OAAO,KAAK,KAAK,CAAA,GAAA,yCAA4B;QAErD,SAAU;YACR,0DAA0D;YAC1D,gBAAgB;QAClB;IACF;AACF;;;","sources":["packages/next/pages/src/api/index.ts","packages/next/pages/src/api/health.ts","packages/next/pages/src/api/metricsFactory.ts","packages/next/pages/src/api/rpcFactory/index.ts","packages/next/pages/src/api/rpcFactory/rpc-factory.ts","packages/next/pages/src/api/rpcFactory/errors.ts","packages/next/pages/src/api/rpcFactory/validation.ts"],"sourcesContent":["export { health } from './health'\nexport { type MetricsFactoryParameters, metricsFactory } from './metricsFactory'\nexport { type RPCFactoryParams, type RPCFactoryValidationParams, type RpcProviders, rpcFactory } from './rpcFactory'\n","import { NextApiRequest, NextApiResponse } from 'next'\n\nexport const health = (_req: NextApiRequest, res: NextApiResponse): void => {\n  res.status(200).send({ status: 'ok' })\n}\n","import { NextApiRequest, NextApiResponse } from 'next'\nimport { Registry } from 'prom-client'\n\nexport type MetricsFactoryParameters = {\n  registry: Registry\n}\n\nexport const metricsFactory =\n  ({ registry }: MetricsFactoryParameters) =>\n  async (_req: NextApiRequest, res: NextApiResponse) => {\n    const collectedMetrics = await registry.metrics()\n    res.send(collectedMetrics)\n  }\n","export { rpcFactory } from './rpc-factory'\nexport type { RPCFactoryParams, RPCFactoryValidationParams, RpcProviders } from './types'\n","import { Readable } from 'node:stream'\nimport { ReadableStream } from 'node:stream/web'\nimport { pipeline } from 'node:stream/promises'\n\nimport { Counter } from 'prom-client'\nimport { iterateUrls } from '@lidofinance/rpc'\n\nimport { DEFAULT_API_ERROR_MESSAGE, HEALTHY_RPC_SERVICES_ARE_OVER, ClientError } from './errors'\nimport {\n  baseRequestValidationFactory,\n  ethCallValidationFactory,\n  ethGetLogsValidationFactory,\n  rpcMethodsValidationFactory,\n  shouldValidateRpcMethod,\n  streamMaxSizeValidationFactory,\n} from './validation'\n\nimport type { RPCFactoryParams } from './types'\nimport type { NextApiRequest, NextApiResponse } from 'next'\nimport type { FetchRpcInitBody } from '@lidofinance/rpc'\n\nexport const rpcFactory = ({ metrics, providers, fetchRPC, defaultChain, validation }: RPCFactoryParams) => {\n  const {\n    allowedRPCMethods,\n    allowedCallAddresses,\n    allowedLogsAddresses,\n    maxResponseSize = 1_000_000,\n    maxBatchCount = 20,\n    currentBlockTTLms = 60_000,\n    maxGetLogsRange = 20_000,\n    blockEmptyAddressGetLogs = true,\n  } = validation\n\n  // optional metrics\n  const { registry, prefix = '' } = metrics ?? {}\n  const rpcRequestBlocked = new Counter({\n    name: prefix + 'rpc_service_request_blocked',\n    help: 'RPC service request blocked',\n    labelNames: ['reason'],\n    registers: [],\n  })\n  registry?.registerMetric(rpcRequestBlocked)\n\n  const validateBaseRequest = baseRequestValidationFactory(defaultChain, providers, maxBatchCount)\n\n  const validateRpcMethod = rpcMethodsValidationFactory(allowedRPCMethods)\n\n  const validateEthCall =\n    allowedCallAddresses && shouldValidateRpcMethod('eth_call', allowedRPCMethods)\n      ? ethCallValidationFactory(allowedCallAddresses)\n      : undefined\n\n  const validateEthGetLogs =\n    (allowedLogsAddresses || blockEmptyAddressGetLogs) && shouldValidateRpcMethod('eth_getLogs', allowedRPCMethods)\n      ? ethGetLogsValidationFactory(allowedLogsAddresses, blockEmptyAddressGetLogs, maxGetLogsRange, currentBlockTTLms)\n      : undefined\n\n  const validateMaxSteamSize = streamMaxSizeValidationFactory(maxResponseSize)\n\n  const requestRPC = (chainId: number, body: FetchRpcInitBody) =>\n    iterateUrls(\n      providers[chainId],\n      // TODO: consider adding verification that body is actually matches FetchRpcInitBody\n      (url) => fetchRPC(url, { body }, { chainId }),\n      // eslint-disable-next-line @typescript-eslint/unbound-method\n      console.error,\n    )\n\n  return async (req: NextApiRequest, res: NextApiResponse): Promise<void> => {\n    const abortController = new AbortController()\n    try {\n      const { chainId, requests } = validateBaseRequest(req)\n\n      const validationContext = {\n        chainId,\n        rpcRequestBlocked,\n        requestRPC,\n      }\n\n      // We throw HTTP error for ANY invalid RPC request out of batch\n      // because we assume that frontend must not send invalid requests at all\n      for (const request of requests) {\n        validateRpcMethod(request, validationContext)\n\n        const method = request.method\n\n        if (method === 'eth_call' && validateEthCall) {\n          validateEthCall(request, validationContext)\n        }\n        if (method === 'eth_getLogs' && validateEthGetLogs) {\n          await validateEthGetLogs(request, validationContext)\n        }\n      }\n\n      const proxyedRPC = await requestRPC(chainId, req.body as FetchRpcInitBody)\n\n      res.setHeader('Content-Type', proxyedRPC.headers.get('Content-Type') ?? 'application/json')\n      if (!proxyedRPC.body) {\n        throw new Error('There are a problems with RPC provider')\n      }\n\n      // auto closes both Readable.fromWeb() and underlying proxyedRPC streams on error\n      await pipeline(\n        Readable.fromWeb(proxyedRPC.body as ReadableStream),\n        validateMaxSteamSize(validationContext),\n        res,\n        {\n          signal: abortController.signal,\n        },\n      )\n    } catch (error) {\n      if (error instanceof ClientError) {\n        res.status(400).json(error.message ?? DEFAULT_API_ERROR_MESSAGE)\n      } else if (error instanceof Error) {\n        console.error('[rpcFactory]' + (error.message ?? DEFAULT_API_ERROR_MESSAGE))\n        if (!res.headersSent) {\n          res.status(500).json(error.message ?? DEFAULT_API_ERROR_MESSAGE)\n        }\n      } else {\n        res.status(500).json(HEALTHY_RPC_SERVICES_ARE_OVER)\n      }\n    } finally {\n      // forces pipeline closure in case of external error/abort\n      abortController.abort()\n    }\n  }\n}\n","export const DEFAULT_API_ERROR_MESSAGE = 'Something went wrong. Sorry, try again later :('\n\nexport const HEALTHY_RPC_SERVICES_ARE_OVER = 'Healthy RPC services are over!'\n\nexport class ClientError extends Error {}\n\nexport class UnsupportedChainIdError extends ClientError {\n  constructor(message?: string) {\n    super(message || 'Unsupported chainId')\n  }\n}\n\nexport class UnsupportedHTTPMethodError extends ClientError {\n  constructor(message?: string) {\n    super(message || 'Unsupported HTTP method')\n  }\n}\n\nexport class InvalidRequestError extends ClientError {\n  constructor(message?: string) {\n    super(message || 'Invalid Request')\n  }\n}\n\nexport class SizeTooLargeError extends ClientError {\n  constructor(message?: string) {\n    super(message || 'Response size too large')\n  }\n}\n","import { Transform } from 'node:stream'\n\nimport { Cache } from 'memory-cache'\n\nimport {\n  ClientError,\n  InvalidRequestError,\n  SizeTooLargeError,\n  UnsupportedChainIdError,\n  UnsupportedHTTPMethodError,\n} from './errors'\n\nimport type { NextApiRequest } from 'next'\nimport type { RpcRequest, ValidationContext } from './types'\n\n// validation factories\n\nconst zeroBN = BigInt(0)\n\nexport const baseRequestValidationFactory = (\n  defaultChain: number | string,\n  providers: Record<string, unknown>,\n  maxBatchSize?: number,\n) => {\n  return (req: NextApiRequest) => {\n    if (req.method !== 'POST') {\n      // We don't care about tracking blocked requests here\n      throw new UnsupportedHTTPMethodError()\n    }\n\n    const chainId = Number(req.query.chainId || defaultChain)\n\n    // Allow only chainId of specified chains\n    if (providers[chainId] == null) {\n      // We don't care about tracking blocked requests here\n      throw new UnsupportedChainIdError()\n    }\n\n    const requests = Array.isArray(req.body) ? req.body : [req.body]\n\n    if (typeof maxBatchSize === 'number' && requests.length > maxBatchSize) {\n      throw new InvalidRequestError(`Too many batched requests`)\n    }\n    return { chainId, requests }\n  }\n}\n\nexport const rpcMethodsValidationFactory = (allowedMethods?: string[]) => {\n  const methodsMap = new Set(allowedMethods ?? [])\n\n  return (request: RpcRequest, context: ValidationContext) => {\n    const method = request.method\n    if (typeof method !== 'string') {\n      throw new InvalidRequestError(`RPC method isn't string`)\n    }\n    if (allowedMethods && !methodsMap.has(request.method)) {\n      context.rpcRequestBlocked.inc({ reason: 'method not allowed' })\n      throw new InvalidRequestError(`RPC method ${method} not allowed`)\n    }\n  }\n}\n\nexport const ethCallValidationFactory = (allowedAddress: Record<number, string[]>) => {\n  const allowedCallAddressMap = createAllowedAddressMap(allowedAddress)\n\n  return (request: RpcRequest, { chainId, rpcRequestBlocked }: ValidationContext) => {\n    const { params } = request\n    if (\n      Array.isArray(params) &&\n      params[0] &&\n      typeof params[0] === 'object' &&\n      'to' in params[0] &&\n      typeof params[0].to === 'string'\n    ) {\n      if (!allowedCallAddressMap[chainId]?.has(params[0].to.toLowerCase())) {\n        rpcRequestBlocked.inc({ reason: 'address not allowed for eth_call' })\n        throw new InvalidRequestError(`Address not allowed for eth_call`)\n      }\n    } else throw new InvalidRequestError(`RPC method eth_call is invalid`)\n  }\n}\n\nexport const ethGetLogsValidationFactory = (\n  allowedAddress: Record<number, string[]> | undefined,\n  blockEmptyAddressGetLogs: boolean | undefined,\n  maxBlockRange: number | undefined,\n  currentBlockTTL = 60_000,\n) => {\n  const allowedAddressMap = createAllowedAddressMap(allowedAddress ?? {})\n\n  const maxBlockRangeBN = maxBlockRange ? BigInt(maxBlockRange) : zeroBN\n\n  const currentBlock = new Cache<number, bigint>()\n\n  return async (request: RpcRequest, { chainId, rpcRequestBlocked, requestRPC }: ValidationContext) => {\n    try {\n      const params = request.params[0] as any\n      const fromBlock: string = params.fromBlock\n      const toBlock: string = params.toBlock ?? 'latest'\n\n      if (blockEmptyAddressGetLogs || allowedAddress) {\n        // address validation\n        const address: string | string[] = params.address\n\n        if (blockEmptyAddressGetLogs && !address)\n          throw new InvalidRequestError(`RPC method eth_getLogs address is invalid`)\n\n        const addresses = Array.isArray(address) ? address : [address]\n\n        if (blockEmptyAddressGetLogs && addresses.length === 0) {\n          throw new InvalidRequestError(`RPC method eth_getLogs address is invalid`)\n        }\n        if (\n          allowedAddress &&\n          addresses.some(\n            (eventAddress) =>\n              // needs this check before toLowerCase\n              typeof eventAddress !== 'string' || !allowedAddressMap[chainId]?.has(eventAddress.toLowerCase()),\n          )\n        ) {\n          rpcRequestBlocked.inc({\n            reason: 'address not allowed for eth_getLogs',\n          })\n          throw new InvalidRequestError(`Address not allowed for eth_getLogs`)\n        }\n      }\n\n      // block range validation\n      if (maxBlockRange) {\n        if (fromBlock === 'earliest') throw new InvalidRequestError(`RPC method eth_getLogs fromBlock is invalid`)\n\n        const shouldValidateBlockDistance = fromBlock.startsWith('0x')\n\n        if (shouldValidateBlockDistance) {\n          const normalizedFromBlock = BigInt(fromBlock)\n          let normalizedToBlock: bigint\n          if (toBlock.startsWith('0x')) normalizedToBlock = BigInt(toBlock)\n          else {\n            const cached = currentBlock.get(chainId)\n            if (cached) {\n              normalizedToBlock = cached\n            } else {\n              normalizedToBlock = await requestRPC(chainId, {\n                id: 1,\n                jsonrpc: '2.0',\n                method: 'eth_blockNumber',\n              })\n                .then((res) => res.json())\n                .then((res) => BigInt(res.result))\n              currentBlock.put(chainId, normalizedToBlock, currentBlockTTL)\n            }\n          }\n          const range = normalizedToBlock - normalizedFromBlock\n\n          if (range < zeroBN || range > maxBlockRangeBN) {\n            rpcRequestBlocked.inc({\n              reason: 'eth_getLogs range is invalid',\n            })\n            throw new InvalidRequestError(`RPC method eth_getLogs range is invalid`)\n          }\n        }\n      }\n    } catch (error) {\n      if (error instanceof ClientError) throw error\n      throw new InvalidRequestError(`RPC method eth_getLogs is invalid`)\n    }\n  }\n}\n\nexport const streamMaxSizeValidationFactory = (MAX_SIZE: number) => (context: ValidationContext) => {\n  let bytesWritten = 0\n  return new Transform({\n    transform(chunk, _encoding, callback) {\n      bytesWritten += chunk.length\n      if (bytesWritten > MAX_SIZE) {\n        // Emit an error if size exceeds MAX_SIZE\n        context.rpcRequestBlocked.inc({ reason: 'response too large' })\n        return callback(new SizeTooLargeError(`Stream size exceeds the maximum limit of ${MAX_SIZE} bytes`))\n      }\n      return callback(null, chunk) // Pass the chunk through\n    },\n    flush(callback) {\n      callback()\n    },\n  })\n}\n\n// utils\n\nexport const shouldValidateRpcMethod = (method: string, allowedRPCMethods?: string[]) =>\n  !allowedRPCMethods || allowedRPCMethods.includes(method)\n\nconst createAllowedAddressMap = (allowedAddress: Record<number, string[]>) => {\n  return Object.entries(allowedAddress).reduce((acc, [chainId, addresses]) => {\n    acc[chainId] = new Set(addresses.map((a) => a.toLowerCase()))\n    return acc\n  }, {} as Record<string, Set<string>>)\n}\n"],"names":[],"version":3,"file":"index.js.map","sourceRoot":"../../../../../"}

package/dist/api/rpcFactory/errors.d.ts

@@ -0,0 +1,17 @@
+export declare const DEFAULT_API_ERROR_MESSAGE = "Something went wrong. Sorry, try again later :(";
+export declare const HEALTHY_RPC_SERVICES_ARE_OVER = "Healthy RPC services are over!";
+export declare class ClientError extends Error {
+}
+export declare class UnsupportedChainIdError extends ClientError {
+    constructor(message?: string);
+}
+export declare class UnsupportedHTTPMethodError extends ClientError {
+    constructor(message?: string);
+}
+export declare class InvalidRequestError extends ClientError {
+    constructor(message?: string);
+}
+export declare class SizeTooLargeError extends ClientError {
+    constructor(message?: string);
+}
+//# sourceMappingURL=errors.d.ts.map

package/dist/api/rpcFactory/errors.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"errors.d.ts","sourceRoot":"","sources":["../../../src/api/rpcFactory/errors.ts"],"names":[],"mappings":"AAAA,eAAO,MAAM,yBAAyB,oDAAoD,CAAA;AAE1F,eAAO,MAAM,6BAA6B,mCAAmC,CAAA;AAE7E,qBAAa,WAAY,SAAQ,KAAK;CAAG;AAEzC,qBAAa,uBAAwB,SAAQ,WAAW;gBAC1C,OAAO,CAAC,EAAE,MAAM;CAG7B;AAED,qBAAa,0BAA2B,SAAQ,WAAW;gBAC7C,OAAO,CAAC,EAAE,MAAM;CAG7B;AAED,qBAAa,mBAAoB,SAAQ,WAAW;gBACtC,OAAO,CAAC,EAAE,MAAM;CAG7B;AAED,qBAAa,iBAAkB,SAAQ,WAAW;gBACpC,OAAO,CAAC,EAAE,MAAM;CAG7B"}

package/dist/api/rpcFactory/index.d.ts

@@ -0,0 +1,3 @@
+export { rpcFactory } from './rpc-factory';
+export type { RPCFactoryParams, RPCFactoryValidationParams, RpcProviders } from './types';
+//# sourceMappingURL=index.d.ts.map

package/dist/api/rpcFactory/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/api/rpcFactory/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,eAAe,CAAA;AAC1C,YAAY,EAAE,gBAAgB,EAAE,0BAA0B,EAAE,YAAY,EAAE,MAAM,SAAS,CAAA"}

package/dist/api/rpcFactory/rpc-factory.d.ts

@@ -0,0 +1,4 @@
+import type { RPCFactoryParams } from './types';
+import type { NextApiRequest, NextApiResponse } from 'next';
+export declare const rpcFactory: ({ metrics, providers, fetchRPC, defaultChain, validation }: RPCFactoryParams) => (req: NextApiRequest, res: NextApiResponse) => Promise<void>;
+//# sourceMappingURL=rpc-factory.d.ts.map

package/dist/api/rpcFactory/rpc-factory.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"rpc-factory.d.ts","sourceRoot":"","sources":["../../../src/api/rpcFactory/rpc-factory.ts"],"names":[],"mappings":"AAiBA,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,SAAS,CAAA;AAC/C,OAAO,KAAK,EAAE,cAAc,EAAE,eAAe,EAAE,MAAM,MAAM,CAAA;AAG3D,eAAO,MAAM,UAAU,+DAAgE,gBAAgB,WA+ClF,cAAc,OAAO,eAAe,KAAG,QAAQ,IAAI,CA0DvE,CAAA"}

package/dist/api/rpcFactory/types.d.ts

@@ -0,0 +1,34 @@
+import type { TrackedFetchRPC } from '@lidofinance/api-rpc';
+import type { FetchRpcInitBody } from '@lidofinance/rpc';
+import type { Counter, Registry } from 'prom-client';
+export type RpcProviders = Record<string | number, [string, ...string[]]>;
+export type RPCFactoryValidationParams = {
+    maxBatchCount?: number;
+    maxResponseSize?: number;
+    allowedRPCMethods?: string[];
+    allowedCallAddresses?: Record<number, string[]>;
+    allowedLogsAddresses?: Record<number, string[]>;
+    blockEmptyAddressGetLogs?: boolean;
+    maxGetLogsRange?: number;
+    currentBlockTTLms?: number;
+};
+export type RPCFactoryParams = {
+    metrics?: {
+        prefix: string;
+        registry: Registry;
+    };
+    providers: RpcProviders;
+    fetchRPC: TrackedFetchRPC;
+    defaultChain: string | number;
+    validation: RPCFactoryValidationParams;
+};
+export type RpcRequest = {
+    method: string;
+    params: unknown[];
+};
+export type ValidationContext = {
+    chainId: number;
+    rpcRequestBlocked: Counter<'reason'>;
+    requestRPC: (chainId: number, body: FetchRpcInitBody) => Promise<Response>;
+};
+//# sourceMappingURL=types.d.ts.map

package/dist/api/rpcFactory/types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../../src/api/rpcFactory/types.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,sBAAsB,CAAA;AAC3D,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,kBAAkB,CAAA;AACxD,OAAO,KAAK,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,aAAa,CAAA;AAEpD,MAAM,MAAM,YAAY,GAAG,MAAM,CAAC,MAAM,GAAG,MAAM,EAAE,CAAC,MAAM,EAAE,GAAG,MAAM,EAAE,CAAC,CAAC,CAAA;AAEzE,MAAM,MAAM,0BAA0B,GAAG;IACvC,aAAa,CAAC,EAAE,MAAM,CAAA;IACtB,eAAe,CAAC,EAAE,MAAM,CAAA;IACxB,iBAAiB,CAAC,EAAE,MAAM,EAAE,CAAA;IAC5B,oBAAoB,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,EAAE,CAAC,CAAA;IAC/C,oBAAoB,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,EAAE,CAAC,CAAA;IAC/C,wBAAwB,CAAC,EAAE,OAAO,CAAA;IAClC,eAAe,CAAC,EAAE,MAAM,CAAA;IACxB,iBAAiB,CAAC,EAAE,MAAM,CAAA;CAC3B,CAAA;AAED,MAAM,MAAM,gBAAgB,GAAG;IAC7B,OAAO,CAAC,EAAE;QACR,MAAM,EAAE,MAAM,CAAA;QACd,QAAQ,EAAE,QAAQ,CAAA;KACnB,CAAA;IACD,SAAS,EAAE,YAAY,CAAA;IACvB,QAAQ,EAAE,eAAe,CAAA;IACzB,YAAY,EAAE,MAAM,GAAG,MAAM,CAAA;IAC7B,UAAU,EAAE,0BAA0B,CAAA;CACvC,CAAA;AAED,MAAM,MAAM,UAAU,GAAG;IACvB,MAAM,EAAE,MAAM,CAAA;IACd,MAAM,EAAE,OAAO,EAAE,CAAA;CAClB,CAAA;AAED,MAAM,MAAM,iBAAiB,GAAG;IAC9B,OAAO,EAAE,MAAM,CAAA;IACf,iBAAiB,EAAE,OAAO,CAAC,QAAQ,CAAC,CAAA;IACpC,UAAU,EAAE,CAAC,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,gBAAgB,KAAK,OAAO,CAAC,QAAQ,CAAC,CAAA;CAC3E,CAAA"}

package/dist/api/rpcFactory/validation.d.ts

@@ -0,0 +1,14 @@
+/// <reference types="node" />
+import { Transform } from 'node:stream';
+import type { NextApiRequest } from 'next';
+import type { RpcRequest, ValidationContext } from './types';
+export declare const baseRequestValidationFactory: (defaultChain: number | string, providers: Record<string, unknown>, maxBatchSize?: number) => (req: NextApiRequest) => {
+    chainId: number;
+    requests: any[];
+};
+export declare const rpcMethodsValidationFactory: (allowedMethods?: string[]) => (request: RpcRequest, context: ValidationContext) => void;
+export declare const ethCallValidationFactory: (allowedAddress: Record<number, string[]>) => (request: RpcRequest, { chainId, rpcRequestBlocked }: ValidationContext) => void;
+export declare const ethGetLogsValidationFactory: (allowedAddress: Record<number, string[]> | undefined, blockEmptyAddressGetLogs: boolean | undefined, maxBlockRange: number | undefined, currentBlockTTL?: number) => (request: RpcRequest, { chainId, rpcRequestBlocked, requestRPC }: ValidationContext) => Promise<void>;
+export declare const streamMaxSizeValidationFactory: (MAX_SIZE: number) => (context: ValidationContext) => Transform;
+export declare const shouldValidateRpcMethod: (method: string, allowedRPCMethods?: string[]) => boolean;
+//# sourceMappingURL=validation.d.ts.map

package/dist/api/rpcFactory/validation.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"validation.d.ts","sourceRoot":"","sources":["../../../src/api/rpcFactory/validation.ts"],"names":[],"mappings":";AAAA,OAAO,EAAE,SAAS,EAAE,MAAM,aAAa,CAAA;AAYvC,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,MAAM,CAAA;AAC1C,OAAO,KAAK,EAAE,UAAU,EAAE,iBAAiB,EAAE,MAAM,SAAS,CAAA;AAM5D,eAAO,MAAM,4BAA4B,iBACzB,MAAM,GAAG,MAAM,aAClB,OAAO,MAAM,EAAE,OAAO,CAAC,iBACnB,MAAM,WAER,cAAc;;;CAqB5B,CAAA;AAED,eAAO,MAAM,2BAA2B,oBAAqB,MAAM,EAAE,eAGlD,UAAU,WAAW,iBAAiB,SAUxD,CAAA;AAED,eAAO,MAAM,wBAAwB,mBAAoB,OAAO,MAAM,EAAE,MAAM,EAAE,CAAC,eAG9D,UAAU,kCAAkC,iBAAiB,SAe/E,CAAA;AAED,eAAO,MAAM,2BAA2B,mBACtB,OAAO,MAAM,EAAE,MAAM,EAAE,CAAC,GAAG,SAAS,4BAC1B,OAAO,GAAG,SAAS,iBAC9B,MAAM,GAAG,SAAS,yCASV,UAAU,8CAA8C,iBAAiB,kBAyEjG,CAAA;AAED,eAAO,MAAM,8BAA8B,aAAc,MAAM,eAAe,iBAAiB,cAgB9F,CAAA;AAID,eAAO,MAAM,uBAAuB,WAAY,MAAM,sBAAsB,MAAM,EAAE,YAC1B,CAAA"}

package/package.json

@@ -7,7 +7,7 @@
     "url": "https://github.com/lidofinance/warehouse/issues"
   },
   "license": "MIT",
-  "version": "0.46.0",
+  "version": "0.48.0",
   "type": "module",
   "files": [
     "dist"
@@ -58,22 +58,26 @@
     }
   },
   "peerDependencies": {
-    "@lidofinance/api-logger": "~0.46.0",
-    "@lidofinance/api-rpc": "~0.46.0",
-    "@lidofinance/rpc": "~0.46.0",
-    "@lidofinance/ui-pages": "~0.46.0",
+    "@lidofinance/api-logger": "~0.48.0",
+    "@lidofinance/api-rpc": "~0.48.0",
+    "@lidofinance/rpc": "~0.48.0",
+    "@lidofinance/ui-pages": "~0.48.0",
     "next": "12 || 13",
     "prom-client": "^14.1.0",
     "react": "17 || 18"
   },
   "devDependencies": {
-    "@lidofinance/api-logger": "~0.46.0",
-    "@lidofinance/api-rpc": "~0.46.0",
-    "@lidofinance/config-prettier": "~0.46.0",
-    "@lidofinance/rpc": "~0.46.0",
-    "@lidofinance/ui-pages": "~0.46.0",
+    "@lidofinance/api-logger": "~0.48.0",
+    "@lidofinance/api-rpc": "~0.48.0",
+    "@lidofinance/config-prettier": "~0.48.0",
+    "@lidofinance/rpc": "~0.48.0",
+    "@lidofinance/ui-pages": "~0.48.0",
+    "@types/memory-cache": "^0.2.6",
     "@types/react": "^18.0.25",
     "next": "^12.3.1",
     "prom-client": "^14.1.0"
+  },
+  "dependencies": {
+    "memory-cache": "^0.2.0"
   }
 }

package/dist/api/rpcFactory.d.ts

@@ -1,37 +0,0 @@
-import type { NextApiRequest, NextApiResponse } from 'next';
-import { Registry } from 'prom-client';
-import type { TrackedFetchRPC } from '@lidofinance/api-rpc';
-export type RpcProviders = Record<string | number, [string, ...string[]]>;
-export declare const DEFAULT_API_ERROR_MESSAGE = "Something went wrong. Sorry, try again later :(";
-export declare const HEALTHY_RPC_SERVICES_ARE_OVER = "Healthy RPC services are over!";
-export declare class ClientError extends Error {
-}
-export declare class UnsupportedChainIdError extends ClientError {
-    constructor(message?: string);
-}
-export declare class UnsupportedHTTPMethodError extends ClientError {
-    constructor(message?: string);
-}
-export declare class InvalidRequestError extends ClientError {
-    constructor(message?: string);
-}
-export declare class SizeTooLargeError extends ClientError {
-    constructor(message?: string);
-}
-export type RPCFactoryParams = {
-    metrics: {
-        prefix: string;
-        registry: Registry;
-    };
-    providers: RpcProviders;
-    fetchRPC: TrackedFetchRPC;
-    defaultChain: string | number;
-    allowedRPCMethods: string[];
-    allowedCallAddresses?: Record<number, string[]>;
-    allowedLogsAddresses?: Record<number, string[]>;
-    disallowEmptyAddressGetLogs?: boolean;
-    maxBatchCount?: number;
-    maxResponseSize?: number;
-};
-export declare const rpcFactory: ({ metrics: { prefix, registry }, providers, fetchRPC, defaultChain, allowedRPCMethods, allowedCallAddresses, allowedLogsAddresses, maxBatchCount, maxResponseSize, disallowEmptyAddressGetLogs, }: RPCFactoryParams) => (req: NextApiRequest, res: NextApiResponse) => Promise<void>;
-//# sourceMappingURL=rpcFactory.d.ts.map

package/dist/api/rpcFactory.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"rpcFactory.d.ts","sourceRoot":"","sources":["../../src/api/rpcFactory.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,cAAc,EAAE,eAAe,EAAE,MAAM,MAAM,CAAA;AAC3D,OAAO,EAAW,QAAQ,EAAE,MAAM,aAAa,CAAA;AAC/C,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,sBAAsB,CAAA;AAI3D,MAAM,MAAM,YAAY,GAAG,MAAM,CAAC,MAAM,GAAG,MAAM,EAAE,CAAC,MAAM,EAAE,GAAG,MAAM,EAAE,CAAC,CAAC,CAAA;AAEzE,eAAO,MAAM,yBAAyB,oDAAoD,CAAA;AAE1F,eAAO,MAAM,6BAA6B,mCAAmC,CAAA;AAE7E,qBAAa,WAAY,SAAQ,KAAK;CAAG;AACzC,qBAAa,uBAAwB,SAAQ,WAAW;gBAC1C,OAAO,CAAC,EAAE,MAAM;CAG7B;AAED,qBAAa,0BAA2B,SAAQ,WAAW;gBAC7C,OAAO,CAAC,EAAE,MAAM;CAG7B;AAED,qBAAa,mBAAoB,SAAQ,WAAW;gBACtC,OAAO,CAAC,EAAE,MAAM;CAG7B;AAED,qBAAa,iBAAkB,SAAQ,WAAW;gBACpC,OAAO,CAAC,EAAE,MAAM;CAG7B;AAoBD,MAAM,MAAM,gBAAgB,GAAG;IAC7B,OAAO,EAAE;QACP,MAAM,EAAE,MAAM,CAAA;QACd,QAAQ,EAAE,QAAQ,CAAA;KACnB,CAAA;IACD,SAAS,EAAE,YAAY,CAAA;IACvB,QAAQ,EAAE,eAAe,CAAA;IACzB,YAAY,EAAE,MAAM,GAAG,MAAM,CAAA;IAI7B,iBAAiB,EAAE,MAAM,EAAE,CAAA;IAE3B,oBAAoB,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,EAAE,CAAC,CAAA;IAC/C,oBAAoB,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,EAAE,CAAC,CAAA;IAC/C,2BAA2B,CAAC,EAAE,OAAO,CAAA;IACrC,aAAa,CAAC,EAAE,MAAM,CAAA;IACtB,eAAe,CAAC,EAAE,MAAM,CAAA;CACzB,CAAA;AAED,eAAO,MAAM,UAAU,sMAWpB,gBAAgB,WAmBE,cAAc,OAAO,eAAe,KAAG,QAAQ,IAAI,CAuGvE,CAAA"}