@obolnetwork/obol-sdk 2.11.12 → 2.12.0

package/dist/esm/src/verification/lockWorker.js

@@ -0,0 +1,50 @@
+import {
+  blsRecoverDistributedPubkeyFromShares,
+  blsVerifyExtraShares,
+  blsVerifyMultiple
+} from "../chunk-267HIPEB.js";
+
+// src/verification/lockWorker.ts
+import { parentPort, workerData } from "worker_threads";
+import { fromHexString } from "@chainsafe/ssz";
+function verifyShareBindingChunk(input) {
+  const { shares, distributedKeys, threshold } = input;
+  if (shares.length !== distributedKeys.length) return false;
+  for (let i = 0; i < shares.length; i++) {
+    const sharesBytes = shares[i].map((s) => fromHexString(s));
+    const dkBytes = fromHexString(distributedKeys[i]);
+    const recovered = blsRecoverDistributedPubkeyFromShares(
+      sharesBytes,
+      threshold
+    );
+    if (!recovered) return false;
+    if (recovered.length !== dkBytes.length) return false;
+    for (let j = 0; j < recovered.length; j++) {
+      if (recovered[j] !== dkBytes[j]) return false;
+    }
+    if (!blsVerifyExtraShares(sharesBytes, threshold, dkBytes)) {
+      return false;
+    }
+  }
+  return true;
+}
+function verifyBatchChunk(input) {
+  return blsVerifyMultiple(
+    input.pubkeys,
+    input.messages,
+    input.aggregateSignature
+  );
+}
+function dispatch(input) {
+  if (input.mode === "shareBinding") return verifyShareBindingChunk(input);
+  if (input.mode === "verifyBatch") return verifyBatchChunk(input);
+  return false;
+}
+if (parentPort) {
+  try {
+    parentPort.postMessage(dispatch(workerData));
+  } catch (e) {
+    parentPort.postMessage(false);
+  }
+}
+//# sourceMappingURL=lockWorker.js.map

package/dist/esm/src/verification/lockWorker.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../../../src/verification/lockWorker.ts"],"sourcesContent":["// Worker entry point loaded by parallelPool via Node's worker_threads.\n//\n// Two modes (dispatched on workerData.mode):\n//   'shareBinding' — Lagrange + extra-share verification for a validator chunk.\n//   'verifyBatch'  — blsVerifyMultiple on a (pubkeys, messages, aggregateSig)\n//                    chunk of the deposit+builder batch.\n//\n// Both modes return a simple boolean; main thread combines results.\n\nimport { parentPort, workerData } from 'node:worker_threads';\nimport { fromHexString } from '@chainsafe/ssz';\nimport {\n  blsRecoverDistributedPubkeyFromShares,\n  blsVerifyExtraShares,\n  blsVerifyMultiple,\n} from '../blsUtils.js';\n\nexport interface ShareBindingInput {\n  mode: 'shareBinding';\n  shares: string[][];\n  distributedKeys: string[];\n  threshold: number;\n}\n\nexport interface VerifyBatchInput {\n  mode: 'verifyBatch';\n  pubkeys: Uint8Array[];\n  messages: Uint8Array[];\n  aggregateSignature: Uint8Array;\n}\n\nexport type WorkerInput = ShareBindingInput | VerifyBatchInput;\n\nfunction verifyShareBindingChunk(input: ShareBindingInput): boolean {\n  const { shares, distributedKeys, threshold } = input;\n  if (shares.length !== distributedKeys.length) return false;\n\n  for (let i = 0; i < shares.length; i++) {\n    const sharesBytes = shares[i].map(s => fromHexString(s));\n    const dkBytes = fromHexString(distributedKeys[i]);\n\n    const recovered = blsRecoverDistributedPubkeyFromShares(\n      sharesBytes,\n      threshold,\n    );\n    if (!recovered) return false;\n    if (recovered.length !== dkBytes.length) return false;\n    for (let j = 0; j < recovered.length; j++) {\n      if (recovered[j] !== dkBytes[j]) return false;\n    }\n    if (!blsVerifyExtraShares(sharesBytes, threshold, dkBytes)) {\n      return false;\n    }\n  }\n  return true;\n}\n\nfunction verifyBatchChunk(input: VerifyBatchInput): boolean {\n  return blsVerifyMultiple(\n    input.pubkeys,\n    input.messages,\n    input.aggregateSignature,\n  );\n}\n\nfunction dispatch(input: WorkerInput): boolean {\n  if (input.mode === 'shareBinding') return verifyShareBindingChunk(input);\n  if (input.mode === 'verifyBatch') return verifyBatchChunk(input);\n  return false;\n}\n\nif (parentPort) {\n  try {\n    parentPort.postMessage(dispatch(workerData as WorkerInput));\n  } catch {\n    parentPort.postMessage(false);\n  }\n}\n"],"mappings":";;;;;;;AASA,SAAS,YAAY,kBAAkB;AACvC,SAAS,qBAAqB;AAuB9B,SAAS,wBAAwB,OAAmC;AAClE,QAAM,EAAE,QAAQ,iBAAiB,UAAU,IAAI;AAC/C,MAAI,OAAO,WAAW,gBAAgB,OAAQ,QAAO;AAErD,WAAS,IAAI,GAAG,IAAI,OAAO,QAAQ,KAAK;AACtC,UAAM,cAAc,OAAO,CAAC,EAAE,IAAI,OAAK,cAAc,CAAC,CAAC;AACvD,UAAM,UAAU,cAAc,gBAAgB,CAAC,CAAC;AAEhD,UAAM,YAAY;AAAA,MAChB;AAAA,MACA;AAAA,IACF;AACA,QAAI,CAAC,UAAW,QAAO;AACvB,QAAI,UAAU,WAAW,QAAQ,OAAQ,QAAO;AAChD,aAAS,IAAI,GAAG,IAAI,UAAU,QAAQ,KAAK;AACzC,UAAI,UAAU,CAAC,MAAM,QAAQ,CAAC,EAAG,QAAO;AAAA,IAC1C;AACA,QAAI,CAAC,qBAAqB,aAAa,WAAW,OAAO,GAAG;AAC1D,aAAO;AAAA,IACT;AAAA,EACF;AACA,SAAO;AACT;AAEA,SAAS,iBAAiB,OAAkC;AAC1D,SAAO;AAAA,IACL,MAAM;AAAA,IACN,MAAM;AAAA,IACN,MAAM;AAAA,EACR;AACF;AAEA,SAAS,SAAS,OAA6B;AAC7C,MAAI,MAAM,SAAS,eAAgB,QAAO,wBAAwB,KAAK;AACvE,MAAI,MAAM,SAAS,cAAe,QAAO,iBAAiB,KAAK;AAC/D,SAAO;AACT;AAEA,IAAI,YAAY;AACd,MAAI;AACF,eAAW,YAAY,SAAS,UAAyB,CAAC;AAAA,EAC5D,SAAQ;AACN,eAAW,YAAY,KAAK;AAAA,EAC9B;AACF;","names":[]}

package/dist/esm/src/verification/parallelPool.js

@@ -0,0 +1,10 @@
+import {
+  verifyBatchParallel,
+  verifySharesBinding
+} from "../chunk-OYZHSNKR.js";
+import "../chunk-267HIPEB.js";
+export {
+  verifyBatchParallel,
+  verifySharesBinding
+};
+//# sourceMappingURL=parallelPool.js.map

package/dist/esm/src/verification/parallelPool.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":[],"sourcesContent":[],"mappings":"","names":[]}

package/dist/types/src/blsUtils.d.ts

@@ -2,3 +2,5 @@ export declare function blsVerify(pubkey: Uint8Array, message: Uint8Array, signa
 export declare function blsVerifyAggregate(pubkeys: Uint8Array[], message: Uint8Array, signature: Uint8Array): boolean;
 export declare function blsVerifyMultiple(pubkeys: Uint8Array[], messages: Uint8Array[], signature: Uint8Array): boolean;
 export declare function blsAggregateSignatures(signatures: Uint8Array[]): Uint8Array;
+export declare function blsRecoverDistributedPubkeyFromShares(pubshares: Uint8Array[], threshold: number): Uint8Array | null;
+export declare function blsVerifyExtraShares(pubshares: Uint8Array[], threshold: number, distributedPubkey: Uint8Array): boolean;

package/dist/types/src/index.d.ts

@@ -15,6 +15,7 @@ export { Exit } from './exits/exit.js';
 export { ObolSplits } from './splits/splits.js';
 export { EOA } from './eoa/eoa.js';
 export { blsVerify } from './blsUtils.js';
+export { ENR } from '@chainsafe/enr';
 /**
  * Primary entrypoint for the Obol SDK. Use this class to create, manage,
  * and activate Distributed Validators via the Obol API.

package/dist/types/src/verification/common.d.ts

@@ -28,4 +28,13 @@ export declare const verifyBuilderRegistration: (validator: DistributedValidator
 };
 export declare const verifyNodeSignatures: (clusterLock: ClusterLock) => boolean;
 export declare const signingRoot: (domain: Uint8Array, messageBuffer: Buffer) => Uint8Array;
+/**
+ * Returns true iff every validator's distributed_public_key is unique across
+ * the lock. Normalizes hex case (charon emits lowercase today, but mixed-case
+ * copies shouldn't sneak through). Exported so it can be unit-tested
+ * independently of the rest of validateClusterLock — a tampered lock that
+ * trips a downstream check (signature_aggregate, node sigs) cannot isolate
+ * this branch.
+ */
+export declare const hasUniqueDistributedKeys: (clusterLock: ClusterLock) => boolean;
 export declare const isValidClusterLock: (clusterLock: ClusterLock, safeRpcUrl?: SafeRpcUrl) => Promise<boolean>;

package/dist/types/src/verification/lockWorker.d.ts

@@ -0,0 +1,13 @@
+export interface ShareBindingInput {
+    mode: 'shareBinding';
+    shares: string[][];
+    distributedKeys: string[];
+    threshold: number;
+}
+export interface VerifyBatchInput {
+    mode: 'verifyBatch';
+    pubkeys: Uint8Array[];
+    messages: Uint8Array[];
+    aggregateSignature: Uint8Array;
+}
+export type WorkerInput = ShareBindingInput | VerifyBatchInput;

package/dist/types/src/verification/parallelPool.d.ts

@@ -0,0 +1,2 @@
+export declare function verifySharesBinding(shares: string[][], distributedKeys: string[], threshold: number): Promise<boolean>;
+export declare function verifyBatchParallel(pubkeys: Uint8Array[], messages: Uint8Array[], signatures: Uint8Array[]): Promise<boolean>;

package/dist/types/test/verification/parallelPool.spec.d.ts

@@ -0,0 +1 @@
+export {};

package/dist/types/tsconfig.types.tsbuildinfo

@@ -1 +1 @@
-{"root":["../../tsup.config.ts","../../src/ajv.ts","../../src/base.ts","../../src/blsUtils.ts","../../src/bytecodes.ts","../../src/constants.ts","../../src/errors.ts","../../src/index.ts","../../src/schema.ts","../../src/services.ts","../../src/types.ts","../../src/utils.ts","../../src/abi/BatchDeposit.ts","../../src/abi/MerkleDistributorWithDeadline.ts","../../src/abi/Multicall3.ts","../../src/abi/OVM.ts","../../src/abi/OWR.ts","../../src/abi/SplitMain.ts","../../src/abi/splitV2FactoryAbi.ts","../../src/eoa/eoa.ts","../../src/eoa/eoaHelpers.ts","../../src/exits/ethUtils.ts","../../src/exits/exit.ts","../../src/exits/verificationHelpers.ts","../../src/incentives/incentiveHelpers.ts","../../src/incentives/incentives.ts","../../src/splits/splitHelpers.ts","../../src/splits/splits.ts","../../src/verification/common.ts","../../src/verification/signature-validator.ts","../../src/verification/sszTypes.ts","../../src/verification/v1.10.0.ts","../../src/verification/v1.6.0.ts","../../src/verification/v1.7.0.ts","../../src/verification/v1.8.0.ts","../../test/fixtures.ts","../../test/client/ajv.spec.ts","../../test/client/methods.spec.ts","../../test/eoa/eoa.spec.ts","../../test/exit/ethUtils.spec.ts","../../test/exit/exit.spec.ts","../../test/exit/verificationHelpers.spec.ts","../../test/incentives/incentives.spec.ts","../../test/splits/splits.spec.ts"],"version":"5.9.3"}
+{"root":["../../tsup.config.ts","../../src/ajv.ts","../../src/base.ts","../../src/blsUtils.ts","../../src/bytecodes.ts","../../src/constants.ts","../../src/errors.ts","../../src/index.ts","../../src/schema.ts","../../src/services.ts","../../src/types.ts","../../src/utils.ts","../../src/abi/BatchDeposit.ts","../../src/abi/MerkleDistributorWithDeadline.ts","../../src/abi/Multicall3.ts","../../src/abi/OVM.ts","../../src/abi/OWR.ts","../../src/abi/SplitMain.ts","../../src/abi/splitV2FactoryAbi.ts","../../src/eoa/eoa.ts","../../src/eoa/eoaHelpers.ts","../../src/exits/ethUtils.ts","../../src/exits/exit.ts","../../src/exits/verificationHelpers.ts","../../src/incentives/incentiveHelpers.ts","../../src/incentives/incentives.ts","../../src/splits/splitHelpers.ts","../../src/splits/splits.ts","../../src/verification/common.ts","../../src/verification/lockWorker.ts","../../src/verification/parallelPool.ts","../../src/verification/signature-validator.ts","../../src/verification/sszTypes.ts","../../src/verification/v1.10.0.ts","../../src/verification/v1.6.0.ts","../../src/verification/v1.7.0.ts","../../src/verification/v1.8.0.ts","../../test/fixtures.ts","../../test/client/ajv.spec.ts","../../test/client/methods.spec.ts","../../test/eoa/eoa.spec.ts","../../test/exit/ethUtils.spec.ts","../../test/exit/exit.spec.ts","../../test/exit/verificationHelpers.spec.ts","../../test/incentives/incentives.spec.ts","../../test/splits/splits.spec.ts","../../test/verification/parallelPool.spec.ts"],"version":"5.9.3"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@obolnetwork/obol-sdk",
-  "version": "2.11.12",
+  "version": "2.12.0",
   "description": "A package for creating Distributed Validators using the Obol API.",
   "bugs": {
     "url": "https://github.com/obolnetwork/obol-sdk/issues"