@obolnetwork/obol-sdk 2.12.0 → 2.12.1

package/dist/esm/src/verification/clusterLockValidationWorker.js

@@ -0,0 +1,18 @@
+import {
+  isValidClusterLock
+} from "../chunk-5ASVONSJ.js";
+import "../chunk-RYTIXFRX.js";
+import "../chunk-LOSYOJC3.js";
+
+// src/verification/clusterLockValidationWorker.ts
+import { parentPort, workerData } from "worker_threads";
+var input = workerData;
+if (parentPort) {
+  const port = parentPort;
+  void isValidClusterLock(input.lock, input.safeRpcUrl).then((ok) => {
+    port.postMessage(ok);
+  }).catch(() => {
+    port.postMessage(false);
+  });
+}
+//# sourceMappingURL=clusterLockValidationWorker.js.map

package/dist/esm/src/verification/clusterLockValidationWorker.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../../../src/verification/clusterLockValidationWorker.ts"],"sourcesContent":["// Runs isValidClusterLock in a worker thread so obol-api's main thread stays responsive.\nimport { parentPort, workerData } from 'node:worker_threads';\nimport type { ClusterLock, SafeRpcUrl } from '../types.js';\nimport { isValidClusterLock } from './common.js';\n\nconst input = workerData as {\n  lock: ClusterLock;\n  safeRpcUrl?: SafeRpcUrl;\n};\n\nif (parentPort) {\n  const port = parentPort;\n  void isValidClusterLock(input.lock, input.safeRpcUrl)\n    .then(ok => {\n      port.postMessage(ok);\n    })\n    .catch(() => {\n      port.postMessage(false);\n    });\n}\n"],"mappings":";;;;;;;AACA,SAAS,YAAY,kBAAkB;AAIvC,IAAM,QAAQ;AAKd,IAAI,YAAY;AACd,QAAM,OAAO;AACb,OAAK,mBAAmB,MAAM,MAAM,MAAM,UAAU,EACjD,KAAK,QAAM;AACV,SAAK,YAAY,EAAE;AAAA,EACrB,CAAC,EACA,MAAM,MAAM;AACX,SAAK,YAAY,KAAK;AAAA,EACxB,CAAC;AACL;","names":[]}

package/dist/esm/src/verification/lockWorker.js

@@ -1,8 +1,10 @@
 import {
+  blsAggregatePublicKeys,
+  blsAggregateSignatures,
   blsRecoverDistributedPubkeyFromShares,
   blsVerifyExtraShares,
   blsVerifyMultiple
-} from "../chunk-267HIPEB.js";
+} from "../chunk-LOSYOJC3.js";
 
 // src/verification/lockWorker.ts
 import { parentPort, workerData } from "worker_threads";
@@ -32,12 +34,15 @@ function verifyBatchChunk(input) {
   return blsVerifyMultiple(
     input.pubkeys,
     input.messages,
-    input.aggregateSignature
+    blsAggregateSignatures(input.signatures)
   );
 }
 function dispatch(input) {
   if (input.mode === "shareBinding") return verifyShareBindingChunk(input);
   if (input.mode === "verifyBatch") return verifyBatchChunk(input);
+  if (input.mode === "aggregatePubkeys") {
+    return blsAggregatePublicKeys(input.pubkeys);
+  }
   return false;
 }
 if (parentPort) {

package/dist/esm/src/verification/lockWorker.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../../../../src/verification/lockWorker.ts"],"sourcesContent":["// Worker entry point loaded by parallelPool via Node's worker_threads.\n//\n// Two modes (dispatched on workerData.mode):\n//   'shareBinding' — Lagrange + extra-share verification for a validator chunk.\n//   'verifyBatch'  — blsVerifyMultiple on a (pubkeys, messages, aggregateSig)\n//                    chunk of the deposit+builder batch.\n//\n// Both modes return a simple boolean; main thread combines results.\n\nimport { parentPort, workerData } from 'node:worker_threads';\nimport { fromHexString } from '@chainsafe/ssz';\nimport {\n  blsRecoverDistributedPubkeyFromShares,\n  blsVerifyExtraShares,\n  blsVerifyMultiple,\n} from '../blsUtils.js';\n\nexport interface ShareBindingInput {\n  mode: 'shareBinding';\n  shares: string[][];\n  distributedKeys: string[];\n  threshold: number;\n}\n\nexport interface VerifyBatchInput {\n  mode: 'verifyBatch';\n  pubkeys: Uint8Array[];\n  messages: Uint8Array[];\n  aggregateSignature: Uint8Array;\n}\n\nexport type WorkerInput = ShareBindingInput | VerifyBatchInput;\n\nfunction verifyShareBindingChunk(input: ShareBindingInput): boolean {\n  const { shares, distributedKeys, threshold } = input;\n  if (shares.length !== distributedKeys.length) return false;\n\n  for (let i = 0; i < shares.length; i++) {\n    const sharesBytes = shares[i].map(s => fromHexString(s));\n    const dkBytes = fromHexString(distributedKeys[i]);\n\n    const recovered = blsRecoverDistributedPubkeyFromShares(\n      sharesBytes,\n      threshold,\n    );\n    if (!recovered) return false;\n    if (recovered.length !== dkBytes.length) return false;\n    for (let j = 0; j < recovered.length; j++) {\n      if (recovered[j] !== dkBytes[j]) return false;\n    }\n    if (!blsVerifyExtraShares(sharesBytes, threshold, dkBytes)) {\n      return false;\n    }\n  }\n  return true;\n}\n\nfunction verifyBatchChunk(input: VerifyBatchInput): boolean {\n  return blsVerifyMultiple(\n    input.pubkeys,\n    input.messages,\n    input.aggregateSignature,\n  );\n}\n\nfunction dispatch(input: WorkerInput): boolean {\n  if (input.mode === 'shareBinding') return verifyShareBindingChunk(input);\n  if (input.mode === 'verifyBatch') return verifyBatchChunk(input);\n  return false;\n}\n\nif (parentPort) {\n  try {\n    parentPort.postMessage(dispatch(workerData as WorkerInput));\n  } catch {\n    parentPort.postMessage(false);\n  }\n}\n"],"mappings":";;;;;;;AASA,SAAS,YAAY,kBAAkB;AACvC,SAAS,qBAAqB;AAuB9B,SAAS,wBAAwB,OAAmC;AAClE,QAAM,EAAE,QAAQ,iBAAiB,UAAU,IAAI;AAC/C,MAAI,OAAO,WAAW,gBAAgB,OAAQ,QAAO;AAErD,WAAS,IAAI,GAAG,IAAI,OAAO,QAAQ,KAAK;AACtC,UAAM,cAAc,OAAO,CAAC,EAAE,IAAI,OAAK,cAAc,CAAC,CAAC;AACvD,UAAM,UAAU,cAAc,gBAAgB,CAAC,CAAC;AAEhD,UAAM,YAAY;AAAA,MAChB;AAAA,MACA;AAAA,IACF;AACA,QAAI,CAAC,UAAW,QAAO;AACvB,QAAI,UAAU,WAAW,QAAQ,OAAQ,QAAO;AAChD,aAAS,IAAI,GAAG,IAAI,UAAU,QAAQ,KAAK;AACzC,UAAI,UAAU,CAAC,MAAM,QAAQ,CAAC,EAAG,QAAO;AAAA,IAC1C;AACA,QAAI,CAAC,qBAAqB,aAAa,WAAW,OAAO,GAAG;AAC1D,aAAO;AAAA,IACT;AAAA,EACF;AACA,SAAO;AACT;AAEA,SAAS,iBAAiB,OAAkC;AAC1D,SAAO;AAAA,IACL,MAAM;AAAA,IACN,MAAM;AAAA,IACN,MAAM;AAAA,EACR;AACF;AAEA,SAAS,SAAS,OAA6B;AAC7C,MAAI,MAAM,SAAS,eAAgB,QAAO,wBAAwB,KAAK;AACvE,MAAI,MAAM,SAAS,cAAe,QAAO,iBAAiB,KAAK;AAC/D,SAAO;AACT;AAEA,IAAI,YAAY;AACd,MAAI;AACF,eAAW,YAAY,SAAS,UAAyB,CAAC;AAAA,EAC5D,SAAQ;AACN,eAAW,YAAY,KAAK;AAAA,EAC9B;AACF;","names":[]}
+{"version":3,"sources":["../../../../src/verification/lockWorker.ts"],"sourcesContent":["// Worker entry point loaded by parallelPool via Node's worker_threads.\n//\n// Two modes (dispatched on workerData.mode):\n//   'shareBinding' — Lagrange + extra-share verification for a validator chunk.\n//   'verifyBatch'  — blsVerifyMultiple on a (pubkeys, messages, aggregateSig)\n//                    chunk of the deposit+builder batch.\n//   'aggregatePubkeys' — partial G1 aggregate of a pubkey chunk (for lock sig).\n//\n// shareBinding / verifyBatch return boolean; aggregatePubkeys returns bytes.\n\nimport { parentPort, workerData } from 'node:worker_threads';\nimport { fromHexString } from '@chainsafe/ssz';\nimport {\n  blsAggregatePublicKeys,\n  blsAggregateSignatures,\n  blsRecoverDistributedPubkeyFromShares,\n  blsVerifyExtraShares,\n  blsVerifyMultiple,\n} from '../blsUtils.js';\n\nexport interface ShareBindingInput {\n  mode: 'shareBinding';\n  shares: string[][];\n  distributedKeys: string[];\n  threshold: number;\n}\n\nexport interface VerifyBatchInput {\n  mode: 'verifyBatch';\n  pubkeys: Uint8Array[];\n  messages: Uint8Array[];\n  signatures: Uint8Array[];\n}\n\nexport interface AggregatePubkeysInput {\n  mode: 'aggregatePubkeys';\n  pubkeys: Uint8Array[];\n}\n\nexport type WorkerInput =\n  | ShareBindingInput\n  | VerifyBatchInput\n  | AggregatePubkeysInput;\n\nexport type WorkerResult = boolean | Uint8Array;\n\nfunction verifyShareBindingChunk(input: ShareBindingInput): boolean {\n  const { shares, distributedKeys, threshold } = input;\n  if (shares.length !== distributedKeys.length) return false;\n\n  for (let i = 0; i < shares.length; i++) {\n    const sharesBytes = shares[i].map(s => fromHexString(s));\n    const dkBytes = fromHexString(distributedKeys[i]);\n\n    const recovered = blsRecoverDistributedPubkeyFromShares(\n      sharesBytes,\n      threshold,\n    );\n    if (!recovered) return false;\n    if (recovered.length !== dkBytes.length) return false;\n    for (let j = 0; j < recovered.length; j++) {\n      if (recovered[j] !== dkBytes[j]) return false;\n    }\n    if (!blsVerifyExtraShares(sharesBytes, threshold, dkBytes)) {\n      return false;\n    }\n  }\n  return true;\n}\n\nfunction verifyBatchChunk(input: VerifyBatchInput): boolean {\n  return blsVerifyMultiple(\n    input.pubkeys,\n    input.messages,\n    blsAggregateSignatures(input.signatures),\n  );\n}\n\nfunction dispatch(input: WorkerInput): WorkerResult {\n  if (input.mode === 'shareBinding') return verifyShareBindingChunk(input);\n  if (input.mode === 'verifyBatch') return verifyBatchChunk(input);\n  if (input.mode === 'aggregatePubkeys') {\n    return blsAggregatePublicKeys(input.pubkeys);\n  }\n  return false;\n}\n\nif (parentPort) {\n  try {\n    parentPort.postMessage(dispatch(workerData as WorkerInput));\n  } catch {\n    parentPort.postMessage(false);\n  }\n}\n"],"mappings":";;;;;;;;;AAUA,SAAS,YAAY,kBAAkB;AACvC,SAAS,qBAAqB;AAmC9B,SAAS,wBAAwB,OAAmC;AAClE,QAAM,EAAE,QAAQ,iBAAiB,UAAU,IAAI;AAC/C,MAAI,OAAO,WAAW,gBAAgB,OAAQ,QAAO;AAErD,WAAS,IAAI,GAAG,IAAI,OAAO,QAAQ,KAAK;AACtC,UAAM,cAAc,OAAO,CAAC,EAAE,IAAI,OAAK,cAAc,CAAC,CAAC;AACvD,UAAM,UAAU,cAAc,gBAAgB,CAAC,CAAC;AAEhD,UAAM,YAAY;AAAA,MAChB;AAAA,MACA;AAAA,IACF;AACA,QAAI,CAAC,UAAW,QAAO;AACvB,QAAI,UAAU,WAAW,QAAQ,OAAQ,QAAO;AAChD,aAAS,IAAI,GAAG,IAAI,UAAU,QAAQ,KAAK;AACzC,UAAI,UAAU,CAAC,MAAM,QAAQ,CAAC,EAAG,QAAO;AAAA,IAC1C;AACA,QAAI,CAAC,qBAAqB,aAAa,WAAW,OAAO,GAAG;AAC1D,aAAO;AAAA,IACT;AAAA,EACF;AACA,SAAO;AACT;AAEA,SAAS,iBAAiB,OAAkC;AAC1D,SAAO;AAAA,IACL,MAAM;AAAA,IACN,MAAM;AAAA,IACN,uBAAuB,MAAM,UAAU;AAAA,EACzC;AACF;AAEA,SAAS,SAAS,OAAkC;AAClD,MAAI,MAAM,SAAS,eAAgB,QAAO,wBAAwB,KAAK;AACvE,MAAI,MAAM,SAAS,cAAe,QAAO,iBAAiB,KAAK;AAC/D,MAAI,MAAM,SAAS,oBAAoB;AACrC,WAAO,uBAAuB,MAAM,OAAO;AAAA,EAC7C;AACA,SAAO;AACT;AAEA,IAAI,YAAY;AACd,MAAI;AACF,eAAW,YAAY,SAAS,UAAyB,CAAC;AAAA,EAC5D,SAAQ;AACN,eAAW,YAAY,KAAK;AAAA,EAC9B;AACF;","names":[]}

package/dist/esm/src/verification/parallelPool.js

@@ -1,10 +1,16 @@
 import {
+  validateClusterLockInWorker,
+  verifyAggregateParallel,
   verifyBatchParallel,
+  verifyBlsChecksParallel,
   verifySharesBinding
-} from "../chunk-OYZHSNKR.js";
-import "../chunk-267HIPEB.js";
+} from "../chunk-RYTIXFRX.js";
+import "../chunk-LOSYOJC3.js";
 export {
+  validateClusterLockInWorker,
+  verifyAggregateParallel,
   verifyBatchParallel,
+  verifyBlsChecksParallel,
   verifySharesBinding
 };
 //# sourceMappingURL=parallelPool.js.map

package/dist/types/src/blsUtils.d.ts

@@ -1,5 +1,8 @@
 export declare function blsVerify(pubkey: Uint8Array, message: Uint8Array, signature: Uint8Array): boolean;
+export declare function blsAggregatePublicKeys(pubkeys: Uint8Array[]): Uint8Array;
 export declare function blsVerifyAggregate(pubkeys: Uint8Array[], message: Uint8Array, signature: Uint8Array): boolean;
+/** Verify when the pubkey set is already aggregated to a single G1 key. */
+export declare function blsVerifyWithAggregatedPubkey(aggregatedPubkey: Uint8Array, message: Uint8Array, signature: Uint8Array): boolean;
 export declare function blsVerifyMultiple(pubkeys: Uint8Array[], messages: Uint8Array[], signature: Uint8Array): boolean;
 export declare function blsAggregateSignatures(signatures: Uint8Array[]): Uint8Array;
 export declare function blsRecoverDistributedPubkeyFromShares(pubshares: Uint8Array[], threshold: number): Uint8Array | null;

package/dist/types/src/errors.d.ts

@@ -25,3 +25,16 @@ export declare class UnsupportedChainError extends Error {
     name: string;
     constructor(chainId: number, operation: string);
 }
+/**
+ * Thrown when full lock validation (`validateClusterLock` worker path) exceeds
+ * the worker time limit (large clusters). HTTP gateways should respond with
+ * **504**; this is distinct from cryptographic failure (**false** → **400**).
+ */
+export declare class ClusterLockValidationTimeoutError extends Error {
+    readonly timeoutMs: number;
+    name: string;
+    /**
+     * @param timeoutMs - Same value as SDK whole-lock validation worker timeout.
+     */
+    constructor(timeoutMs: number);
+}

package/dist/types/src/index.d.ts

@@ -9,7 +9,7 @@ export * from './services.js';
 export * from './verification/signature-validator.js';
 export * from './verification/common.js';
 export * from './constants.js';
-export { ConflictError, SignerRequiredError, UnsupportedChainError, } from './errors.js';
+export { ConflictError, ClusterLockValidationTimeoutError, SignerRequiredError, UnsupportedChainError, } from './errors.js';
 export { Incentives } from './incentives/incentives.js';
 export { Exit } from './exits/exit.js';
 export { ObolSplits } from './splits/splits.js';

package/dist/types/src/services.d.ts

@@ -16,7 +16,10 @@ import { type SafeRpcUrl, type ClusterLock } from './types.js';
  * @param safeRpcUrl - Optional RPC URL for Safe Wallet signature verification.
  *   If omitted, falls back to the `RPC_MAINNET` / `RPC_HOODI` / etc. env vars.
  * @returns `true` if the lock is cryptographically valid; `false` if invalid
- *   (e.g. missing keys, invalid signatures, hash mismatches) or on any error.
+ *   (e.g. missing keys, invalid signatures, hash mismatches).
+ * @throws `ClusterLockValidationTimeoutError` when whole-lock validation
+ *   exceeds the SDK worker deadline (typically large clusters). HTTP APIs should map
+ *   this to **504 Gateway Timeout**.
  *
  * @example
  * ```typescript

package/dist/types/src/types.d.ts

@@ -241,6 +241,12 @@ export type BuilderRegistration = {
     /** BLS signature of the builder registration message. */
     signature: string;
 };
+/** Pubkey + message + signature checked together in batch BLS verification. */
+export type BlsSignatureCheck = {
+    pubkey: Uint8Array;
+    message: Uint8Array;
+    signature: Uint8Array;
+};
 /**
  * Required deposit data for validator activation
  */

package/dist/types/src/verification/clusterLockValidationWorker.d.ts

@@ -0,0 +1 @@
+export {};

package/dist/types/src/verification/common.d.ts

@@ -1,4 +1,4 @@
-import { type ClusterDefinition, type ClusterLock, type DepositData, type DistributedValidator, type SafeRpcUrl } from '../types.js';
+import { type BlsSignatureCheck, type ClusterDefinition, type ClusterLock, type DepositData, type DistributedValidator, type SafeRpcUrl } from '../types.js';
 /**
  * @param cluster The cluster configuration or the cluster definition
  * @param configOnly a boolean to indicate config hash or definition hash
@@ -11,21 +11,31 @@ export declare const clusterConfigOrDefinitionHash: (cluster: ClusterDefinition,
  * @returns The cluster lock hash in of the corresponding cluster lock
  */
 export declare const clusterLockHash: (clusterLock: ClusterLock) => string;
+export declare const depositDomainForFork: (forkVersion: string) => Uint8Array;
+export declare const builderDomainForFork: (forkVersion: string) => Uint8Array;
 /**
- * Verify deposit data withdrawal credintials and signature
- * @param {string} forkVersion - fork version in definition file.
- * @param {DistributedValidatorDto} validator - distributed validator.
- * @param {string} withdrawalAddress - withdrawal address in definition file.
- * @returns {boolean} - return if deposit data is valid.
+ * Structural deposit checks + signing root (no BLS). Used before batch BLS verify.
+ */
+export declare const validateDepositDataStructure: (distributedPublicKey: string, depositData: Partial<DepositData>, withdrawalAddress: string, forkVersion: string, compounding?: boolean, precomputedDepositDomain?: Uint8Array) => {
+    valid: boolean;
+    message: Uint8Array;
+};
+/** Deposit fields + BLS triple for batch verification. Returns null if structure is invalid. */
+export declare const depositBlsCheck: (distributedPublicKey: string, depositData: Partial<DepositData>, withdrawalAddress: string, forkVersion: string, compounding?: boolean, precomputedDepositDomain?: Uint8Array) => BlsSignatureCheck | null;
+/**
+ * Verify deposit data withdrawal credintials and signature (structure + BLS in one call).
+ * Prefer `depositBlsCheck` + batch verify in lock validation for large locks.
  */
 export declare const verifyDepositData: (distributedPublicKey: string, depositData: Partial<DepositData>, withdrawalAddress: string, forkVersion: string, compounding?: boolean) => {
     isValidDepositData: boolean;
     depositDataMsg: Uint8Array;
 };
-export declare const verifyBuilderRegistration: (validator: DistributedValidator, feeRecipientAddress: string, forkVersion: string) => {
+export declare const verifyBuilderRegistration: (validator: DistributedValidator, feeRecipientAddress: string, forkVersion: string, precomputedBuilderDomain?: Uint8Array) => {
     isValidBuilderRegistration: boolean;
     builderRegistrationMsg: Uint8Array;
 };
+/** Builder registration BLS triple for batch verification. Returns null if structure is invalid. */
+export declare const builderBlsCheck: (validator: DistributedValidator, feeRecipientAddress: string, forkVersion: string, precomputedBuilderDomain?: Uint8Array) => BlsSignatureCheck | null;
 export declare const verifyNodeSignatures: (clusterLock: ClusterLock) => boolean;
 export declare const signingRoot: (domain: Uint8Array, messageBuffer: Buffer) => Uint8Array;
 /**

package/dist/types/src/verification/lockWorker.d.ts

@@ -8,6 +8,11 @@ export interface VerifyBatchInput {
     mode: 'verifyBatch';
     pubkeys: Uint8Array[];
     messages: Uint8Array[];
-    aggregateSignature: Uint8Array;
+    signatures: Uint8Array[];
 }
-export type WorkerInput = ShareBindingInput | VerifyBatchInput;
+export interface AggregatePubkeysInput {
+    mode: 'aggregatePubkeys';
+    pubkeys: Uint8Array[];
+}
+export type WorkerInput = ShareBindingInput | VerifyBatchInput | AggregatePubkeysInput;
+export type WorkerResult = boolean | Uint8Array;

package/dist/types/src/verification/parallelPool.d.ts

@@ -1,2 +1,11 @@
+import type { BlsSignatureCheck, ClusterLock, SafeRpcUrl } from '../types.js';
 export declare function verifySharesBinding(shares: string[][], distributedKeys: string[], threshold: number): Promise<boolean>;
+/** Verify deposit + builder BLS signatures collected from `depositBlsCheck` / `builderBlsCheck`. */
+export declare function verifyBlsChecksParallel(checks: BlsSignatureCheck[]): Promise<boolean>;
 export declare function verifyBatchParallel(pubkeys: Uint8Array[], messages: Uint8Array[], signatures: Uint8Array[]): Promise<boolean>;
+export declare function verifyAggregateParallel(pubkeys: Uint8Array[], message: Uint8Array, signature: Uint8Array): Promise<boolean>;
+/**
+ * Large locks: run full validation off the main thread (obol-api stays responsive).
+ * Returns null when workers are unavailable — caller should use sync validation.
+ */
+export declare function validateClusterLockInWorker(lock: ClusterLock, safeRpcUrl?: SafeRpcUrl): Promise<boolean | null>;

package/dist/types/tsconfig.types.tsbuildinfo

@@ -1 +1 @@
-{"root":["../../tsup.config.ts","../../src/ajv.ts","../../src/base.ts","../../src/blsUtils.ts","../../src/bytecodes.ts","../../src/constants.ts","../../src/errors.ts","../../src/index.ts","../../src/schema.ts","../../src/services.ts","../../src/types.ts","../../src/utils.ts","../../src/abi/BatchDeposit.ts","../../src/abi/MerkleDistributorWithDeadline.ts","../../src/abi/Multicall3.ts","../../src/abi/OVM.ts","../../src/abi/OWR.ts","../../src/abi/SplitMain.ts","../../src/abi/splitV2FactoryAbi.ts","../../src/eoa/eoa.ts","../../src/eoa/eoaHelpers.ts","../../src/exits/ethUtils.ts","../../src/exits/exit.ts","../../src/exits/verificationHelpers.ts","../../src/incentives/incentiveHelpers.ts","../../src/incentives/incentives.ts","../../src/splits/splitHelpers.ts","../../src/splits/splits.ts","../../src/verification/common.ts","../../src/verification/lockWorker.ts","../../src/verification/parallelPool.ts","../../src/verification/signature-validator.ts","../../src/verification/sszTypes.ts","../../src/verification/v1.10.0.ts","../../src/verification/v1.6.0.ts","../../src/verification/v1.7.0.ts","../../src/verification/v1.8.0.ts","../../test/fixtures.ts","../../test/client/ajv.spec.ts","../../test/client/methods.spec.ts","../../test/eoa/eoa.spec.ts","../../test/exit/ethUtils.spec.ts","../../test/exit/exit.spec.ts","../../test/exit/verificationHelpers.spec.ts","../../test/incentives/incentives.spec.ts","../../test/splits/splits.spec.ts","../../test/verification/parallelPool.spec.ts"],"version":"5.9.3"}
+{"root":["../../tsup.config.ts","../../src/ajv.ts","../../src/base.ts","../../src/blsUtils.ts","../../src/bytecodes.ts","../../src/constants.ts","../../src/errors.ts","../../src/index.ts","../../src/schema.ts","../../src/services.ts","../../src/types.ts","../../src/utils.ts","../../src/abi/BatchDeposit.ts","../../src/abi/MerkleDistributorWithDeadline.ts","../../src/abi/Multicall3.ts","../../src/abi/OVM.ts","../../src/abi/OWR.ts","../../src/abi/SplitMain.ts","../../src/abi/splitV2FactoryAbi.ts","../../src/eoa/eoa.ts","../../src/eoa/eoaHelpers.ts","../../src/exits/ethUtils.ts","../../src/exits/exit.ts","../../src/exits/verificationHelpers.ts","../../src/incentives/incentiveHelpers.ts","../../src/incentives/incentives.ts","../../src/splits/splitHelpers.ts","../../src/splits/splits.ts","../../src/verification/clusterLockValidationWorker.ts","../../src/verification/common.ts","../../src/verification/lockWorker.ts","../../src/verification/parallelPool.ts","../../src/verification/signature-validator.ts","../../src/verification/sszTypes.ts","../../src/verification/v1.10.0.ts","../../src/verification/v1.6.0.ts","../../src/verification/v1.7.0.ts","../../src/verification/v1.8.0.ts","../../test/fixtures.ts","../../test/client/ajv.spec.ts","../../test/client/methods.spec.ts","../../test/eoa/eoa.spec.ts","../../test/exit/ethUtils.spec.ts","../../test/exit/exit.spec.ts","../../test/exit/verificationHelpers.spec.ts","../../test/incentives/incentives.spec.ts","../../test/splits/splits.spec.ts","../../test/verification/parallelPool.spec.ts"],"version":"5.9.3"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@obolnetwork/obol-sdk",
-  "version": "2.12.0",
+  "version": "2.12.1",
   "description": "A package for creating Distributed Validators using the Obol API.",
   "bugs": {
     "url": "https://github.com/obolnetwork/obol-sdk/issues"

package/dist/esm/src/chunk-OYZHSNKR.js

@@ -1,186 +0,0 @@
-import {
-  __async,
-  __require,
-  blsAggregateSignatures,
-  blsRecoverDistributedPubkeyFromShares,
-  blsVerifyExtraShares,
-  blsVerifyMultiple
-} from "./chunk-267HIPEB.js";
-
-// src/verification/parallelPool.ts
-import { fromHexString } from "@chainsafe/ssz";
-var MIN_PARALLEL_VALIDATORS = 50;
-var MIN_PARALLEL_BATCH_PAIRS = 100;
-var MAX_WORKERS = 8;
-var MIN_VALIDATORS_PER_WORKER = 25;
-var MIN_PAIRS_PER_WORKER = 50;
-var WORKER_TIMEOUT_MS = 6e4;
-var workerThreadsCache;
-var osCache;
-var workerPathCache;
-function loadWorkerThreads() {
-  if (workerThreadsCache !== void 0) return workerThreadsCache;
-  try {
-    workerThreadsCache = __require("worker_threads");
-  } catch (e) {
-    workerThreadsCache = null;
-  }
-  return workerThreadsCache;
-}
-function loadOs() {
-  if (osCache !== void 0) return osCache;
-  try {
-    osCache = __require("os");
-  } catch (e) {
-    osCache = null;
-  }
-  return osCache;
-}
-function getWorkerPath() {
-  if (workerPathCache !== void 0) return workerPathCache;
-  if (typeof __dirname === "undefined") return workerPathCache = null;
-  const path = __require("path");
-  const candidate = path.join(__dirname, "lockWorker.js");
-  try {
-    const fs = __require("fs");
-    if (!fs.existsSync(candidate)) return workerPathCache = null;
-  } catch (e) {
-    return workerPathCache = null;
-  }
-  return workerPathCache = candidate;
-}
-function chunkArrays(arr, n) {
-  const size = Math.ceil(arr.length / n);
-  const out = [];
-  for (let i = 0; i < arr.length; i += size) {
-    out.push(arr.slice(i, i + size));
-  }
-  return out;
-}
-function verifySharesSync(shares, distributedKeys, threshold) {
-  for (let i = 0; i < shares.length; i++) {
-    const sharesBytes = shares[i].map((s) => fromHexString(s));
-    const dkBytes = fromHexString(distributedKeys[i]);
-    const recovered = blsRecoverDistributedPubkeyFromShares(
-      sharesBytes,
-      threshold
-    );
-    if (!recovered) return false;
-    if (recovered.length !== dkBytes.length) return false;
-    for (let j = 0; j < recovered.length; j++) {
-      if (recovered[j] !== dkBytes[j]) return false;
-    }
-    if (!blsVerifyExtraShares(sharesBytes, threshold, dkBytes)) {
-      return false;
-    }
-  }
-  return true;
-}
-function runWorker(wt, workerFile, data) {
-  return __async(this, null, function* () {
-    return yield new Promise((resolve) => {
-      let settled = false;
-      const worker = new wt.Worker(workerFile, { workerData: data });
-      const finish = (result) => {
-        if (settled) return;
-        settled = true;
-        clearTimeout(timer);
-        worker.terminate();
-        resolve(result);
-      };
-      const timer = setTimeout(() => {
-        finish(false);
-      }, WORKER_TIMEOUT_MS);
-      worker.once("message", (msg) => {
-        finish(msg === true);
-      });
-      worker.once("error", () => {
-        finish(false);
-      });
-      worker.once("exit", (code) => {
-        if (code !== 0) finish(false);
-      });
-    });
-  });
-}
-function poolSize(itemCount, minPerWorker) {
-  const wt = loadWorkerThreads();
-  const os = loadOs();
-  const workerFile = getWorkerPath();
-  const numCpus = os ? os.cpus().length : 1;
-  const numWorkers = Math.min(
-    MAX_WORKERS,
-    Math.max(1, Math.floor(itemCount / minPerWorker)),
-    numCpus
-  );
-  return { numWorkers, wt, workerFile };
-}
-function verifySharesBinding(shares, distributedKeys, threshold) {
-  return __async(this, null, function* () {
-    if (shares.length !== distributedKeys.length) return false;
-    if (shares.length === 0) return true;
-    const { numWorkers, wt, workerFile } = poolSize(
-      shares.length,
-      MIN_VALIDATORS_PER_WORKER
-    );
-    if (wt === null || workerFile === null || shares.length < MIN_PARALLEL_VALIDATORS || numWorkers < 2) {
-      return verifySharesSync(shares, distributedKeys, threshold);
-    }
-    const shareChunks = chunkArrays(shares, numWorkers);
-    const keyChunks = chunkArrays(distributedKeys, numWorkers);
-    const results = yield Promise.all(
-      shareChunks.map(
-        (chunk, i) => __async(null, null, function* () {
-          return yield runWorker(wt, workerFile, {
-            mode: "shareBinding",
-            shares: chunk,
-            distributedKeys: keyChunks[i],
-            threshold
-          });
-        })
-      )
-    );
-    return results.every(Boolean);
-  });
-}
-function verifyBatchParallel(pubkeys, messages, signatures) {
-  return __async(this, null, function* () {
-    if (pubkeys.length !== messages.length || pubkeys.length !== signatures.length) {
-      return false;
-    }
-    if (pubkeys.length === 0) return true;
-    const { numWorkers, wt, workerFile } = poolSize(
-      pubkeys.length,
-      MIN_PAIRS_PER_WORKER
-    );
-    if (wt === null || workerFile === null || pubkeys.length < MIN_PARALLEL_BATCH_PAIRS || numWorkers < 2) {
-      return blsVerifyMultiple(
-        pubkeys,
-        messages,
-        blsAggregateSignatures(signatures)
-      );
-    }
-    const pkChunks = chunkArrays(pubkeys, numWorkers);
-    const msgChunks = chunkArrays(messages, numWorkers);
-    const sigChunks = chunkArrays(signatures, numWorkers);
-    const results = yield Promise.all(
-      pkChunks.map(
-        (pks, i) => __async(null, null, function* () {
-          return yield runWorker(wt, workerFile, {
-            mode: "verifyBatch",
-            pubkeys: pks,
-            messages: msgChunks[i],
-            aggregateSignature: blsAggregateSignatures(sigChunks[i])
-          });
-        })
-      )
-    );
-    return results.every(Boolean);
-  });
-}
-
-export {
-  verifySharesBinding,
-  verifyBatchParallel
-};
-//# sourceMappingURL=chunk-OYZHSNKR.js.map

package/dist/esm/src/chunk-OYZHSNKR.js.map

@@ -1 +0,0 @@
-{"version":3,"sources":["../../../src/verification/parallelPool.ts"],"sourcesContent":["// Parallel BLS verification via Node worker_threads.\n//\n// IMPORTANT: only the CJS build actually runs in parallel. ESM Node and\n// browser bundles transparently fall back to sync. See the matrix in\n// PARALLEL_VALIDATION_PLAN.md. The main consumer flow (charon DKG ->\n// obol-api NestJS handler -> SDK CJS) is CJS, so it gets the speedup.\n//\n// Strategy:\n// - Look up the worker file via __dirname (CJS only). If undefined or the\n//   file isn't where we expect (ESM, browser, source-mode tsx/jest), return\n//   undefined and fall back to sync.\n// - Below MIN_PARALLEL_* thresholds, sync wins (worker spin-up dominates).\n// - Spawn one worker per chunk, await all, collapse to a single boolean.\n\nimport { fromHexString } from '@chainsafe/ssz';\nimport {\n  blsAggregateSignatures,\n  blsRecoverDistributedPubkeyFromShares,\n  blsVerifyExtraShares,\n  blsVerifyMultiple,\n} from '../blsUtils.js';\n// Type-only imports — erased at compile time, so they don't pull node:*\n// modules into the browser bundle.\nimport type * as WTNs from 'node:worker_threads';\nimport type * as OsNs from 'node:os';\nimport type * as PathNs from 'node:path';\nimport type * as FsNs from 'node:fs';\nimport type { WorkerInput } from './lockWorker.js';\n\nconst MIN_PARALLEL_VALIDATORS = 50;\nconst MIN_PARALLEL_BATCH_PAIRS = 100;\nconst MAX_WORKERS = 8;\nconst MIN_VALIDATORS_PER_WORKER = 25;\nconst MIN_PAIRS_PER_WORKER = 50;\n// Hard ceiling so a stuck worker can't leak past obol-api's HTTP timeout.\n// Biggest legitimate batch (~1000 pairs) finishes in ~3s on the bench; 60s\n// is conservative enough to never false-trip on real input.\nconst WORKER_TIMEOUT_MS = 60_000;\n\ntype WorkerThreads = typeof WTNs;\ntype NodeOs = typeof OsNs;\n\nlet workerThreadsCache: WorkerThreads | null | undefined;\nlet osCache: NodeOs | null | undefined;\n// Tri-state: undefined = uncached, null = checked & unavailable, string = path.\nlet workerPathCache: string | null | undefined;\n\nfunction loadWorkerThreads(): WorkerThreads | null {\n  if (workerThreadsCache !== undefined) return workerThreadsCache;\n  try {\n    // eslint-disable-next-line @typescript-eslint/no-require-imports, @typescript-eslint/no-var-requires\n    workerThreadsCache = require('node:worker_threads') as WorkerThreads;\n  } catch {\n    workerThreadsCache = null;\n  }\n  return workerThreadsCache;\n}\n\nfunction loadOs(): NodeOs | null {\n  if (osCache !== undefined) return osCache;\n  try {\n    // eslint-disable-next-line @typescript-eslint/no-require-imports, @typescript-eslint/no-var-requires\n    osCache = require('node:os') as NodeOs;\n  } catch {\n    osCache = null;\n  }\n  return osCache;\n}\n\nfunction getWorkerPath(): string | null {\n  if (workerPathCache !== undefined) return workerPathCache;\n  // CJS only. In ESM and browser builds __dirname is undefined, so this\n  // memoizes null and the caller falls back to sync. See plan for the\n  // full coverage matrix.\n  if (typeof __dirname === 'undefined') return (workerPathCache = null);\n  // eslint-disable-next-line @typescript-eslint/no-require-imports, @typescript-eslint/no-var-requires\n  const path = require('node:path') as typeof PathNs;\n  const candidate = path.join(__dirname, 'lockWorker.js');\n  // Sanity check: running from source (tsx, ts-node, jest without a build)\n  // also hits the CJS branch but the .js file isn't there yet. Without\n  // memoizing null we'd re-run existsSync on every call.\n  try {\n    // eslint-disable-next-line @typescript-eslint/no-require-imports, @typescript-eslint/no-var-requires\n    const fs = require('node:fs') as typeof FsNs;\n    if (!fs.existsSync(candidate)) return (workerPathCache = null);\n  } catch {\n    return (workerPathCache = null);\n  }\n  return (workerPathCache = candidate);\n}\n\nfunction chunkArrays<T>(arr: T[], n: number): T[][] {\n  const size = Math.ceil(arr.length / n);\n  const out: T[][] = [];\n  for (let i = 0; i < arr.length; i += size) {\n    out.push(arr.slice(i, i + size));\n  }\n  return out;\n}\n\nfunction verifySharesSync(\n  shares: string[][],\n  distributedKeys: string[],\n  threshold: number,\n): boolean {\n  for (let i = 0; i < shares.length; i++) {\n    const sharesBytes = shares[i].map(s => fromHexString(s));\n    const dkBytes = fromHexString(distributedKeys[i]);\n    const recovered = blsRecoverDistributedPubkeyFromShares(\n      sharesBytes,\n      threshold,\n    );\n    if (!recovered) return false;\n    if (recovered.length !== dkBytes.length) return false;\n    for (let j = 0; j < recovered.length; j++) {\n      if (recovered[j] !== dkBytes[j]) return false;\n    }\n    if (!blsVerifyExtraShares(sharesBytes, threshold, dkBytes)) {\n      return false;\n    }\n  }\n  return true;\n}\n\nasync function runWorker(\n  wt: WorkerThreads,\n  workerFile: string,\n  data: WorkerInput,\n): Promise<boolean> {\n  return await new Promise(resolve => {\n    let settled = false;\n    const worker = new wt.Worker(workerFile, { workerData: data });\n    const finish = (result: boolean): void => {\n      if (settled) return;\n      settled = true;\n      clearTimeout(timer);\n      // eslint-disable-next-line @typescript-eslint/no-floating-promises\n      worker.terminate();\n      resolve(result);\n    };\n    const timer = setTimeout(() => {\n      finish(false);\n    }, WORKER_TIMEOUT_MS);\n    worker.once('message', (msg: unknown) => {\n      finish(msg === true);\n    });\n    worker.once('error', () => {\n      finish(false);\n    });\n    worker.once('exit', code => {\n      if (code !== 0) finish(false);\n    });\n  });\n}\n\nfunction poolSize(\n  itemCount: number,\n  minPerWorker: number,\n): {\n  numWorkers: number;\n  wt: WorkerThreads | null;\n  workerFile: string | null;\n} {\n  const wt = loadWorkerThreads();\n  const os = loadOs();\n  const workerFile = getWorkerPath();\n  const numCpus = os ? os.cpus().length : 1;\n  const numWorkers = Math.min(\n    MAX_WORKERS,\n    Math.max(1, Math.floor(itemCount / minPerWorker)),\n    numCpus,\n  );\n  return { numWorkers, wt, workerFile };\n}\n\nexport async function verifySharesBinding(\n  shares: string[][],\n  distributedKeys: string[],\n  threshold: number,\n): Promise<boolean> {\n  if (shares.length !== distributedKeys.length) return false;\n  if (shares.length === 0) return true;\n\n  const { numWorkers, wt, workerFile } = poolSize(\n    shares.length,\n    MIN_VALIDATORS_PER_WORKER,\n  );\n\n  // Inline the guard so TS narrows wt/workerFile for the parallel path below\n  // (avoids non-null assertions).\n  if (\n    wt === null ||\n    workerFile === null ||\n    shares.length < MIN_PARALLEL_VALIDATORS ||\n    numWorkers < 2\n  ) {\n    return verifySharesSync(shares, distributedKeys, threshold);\n  }\n\n  const shareChunks = chunkArrays(shares, numWorkers);\n  const keyChunks = chunkArrays(distributedKeys, numWorkers);\n\n  const results = await Promise.all(\n    shareChunks.map(\n      async (chunk, i) =>\n        await runWorker(wt, workerFile, {\n          mode: 'shareBinding',\n          shares: chunk,\n          distributedKeys: keyChunks[i],\n          threshold,\n        }),\n    ),\n  );\n  return results.every(Boolean);\n}\n\n// Verify a batch of (pubkey, message, individual signature) triples.\n// Sync path aggregates all sigs and runs blsVerifyMultiple once (matches the\n// previous behavior). Parallel path splits into chunks; each chunk's sigs are\n// aggregated and verified independently — same total pairing count, K× wall\n// time speedup.\nexport async function verifyBatchParallel(\n  pubkeys: Uint8Array[],\n  messages: Uint8Array[],\n  signatures: Uint8Array[],\n): Promise<boolean> {\n  if (\n    pubkeys.length !== messages.length ||\n    pubkeys.length !== signatures.length\n  ) {\n    return false;\n  }\n  if (pubkeys.length === 0) return true;\n\n  const { numWorkers, wt, workerFile } = poolSize(\n    pubkeys.length,\n    MIN_PAIRS_PER_WORKER,\n  );\n\n  if (\n    wt === null ||\n    workerFile === null ||\n    pubkeys.length < MIN_PARALLEL_BATCH_PAIRS ||\n    numWorkers < 2\n  ) {\n    return blsVerifyMultiple(\n      pubkeys,\n      messages,\n      blsAggregateSignatures(signatures),\n    );\n  }\n\n  const pkChunks = chunkArrays(pubkeys, numWorkers);\n  const msgChunks = chunkArrays(messages, numWorkers);\n  const sigChunks = chunkArrays(signatures, numWorkers);\n\n  const results = await Promise.all(\n    pkChunks.map(\n      async (pks, i) =>\n        await runWorker(wt, workerFile, {\n          mode: 'verifyBatch',\n          pubkeys: pks,\n          messages: msgChunks[i],\n          aggregateSignature: blsAggregateSignatures(sigChunks[i]),\n        }),\n    ),\n  );\n  return results.every(Boolean);\n}\n"],"mappings":";;;;;;;;;;AAcA,SAAS,qBAAqB;AAe9B,IAAM,0BAA0B;AAChC,IAAM,2BAA2B;AACjC,IAAM,cAAc;AACpB,IAAM,4BAA4B;AAClC,IAAM,uBAAuB;AAI7B,IAAM,oBAAoB;AAK1B,IAAI;AACJ,IAAI;AAEJ,IAAI;AAEJ,SAAS,oBAA0C;AACjD,MAAI,uBAAuB,OAAW,QAAO;AAC7C,MAAI;AAEF,yBAAqB,UAAQ,gBAAqB;AAAA,EACpD,SAAQ;AACN,yBAAqB;AAAA,EACvB;AACA,SAAO;AACT;AAEA,SAAS,SAAwB;AAC/B,MAAI,YAAY,OAAW,QAAO;AAClC,MAAI;AAEF,cAAU,UAAQ,IAAS;AAAA,EAC7B,SAAQ;AACN,cAAU;AAAA,EACZ;AACA,SAAO;AACT;AAEA,SAAS,gBAA+B;AACtC,MAAI,oBAAoB,OAAW,QAAO;AAI1C,MAAI,OAAO,cAAc,YAAa,QAAQ,kBAAkB;AAEhE,QAAM,OAAO,UAAQ,MAAW;AAChC,QAAM,YAAY,KAAK,KAAK,WAAW,eAAe;AAItD,MAAI;AAEF,UAAM,KAAK,UAAQ,IAAS;AAC5B,QAAI,CAAC,GAAG,WAAW,SAAS,EAAG,QAAQ,kBAAkB;AAAA,EAC3D,SAAQ;AACN,WAAQ,kBAAkB;AAAA,EAC5B;AACA,SAAQ,kBAAkB;AAC5B;AAEA,SAAS,YAAe,KAAU,GAAkB;AAClD,QAAM,OAAO,KAAK,KAAK,IAAI,SAAS,CAAC;AACrC,QAAM,MAAa,CAAC;AACpB,WAAS,IAAI,GAAG,IAAI,IAAI,QAAQ,KAAK,MAAM;AACzC,QAAI,KAAK,IAAI,MAAM,GAAG,IAAI,IAAI,CAAC;AAAA,EACjC;AACA,SAAO;AACT;AAEA,SAAS,iBACP,QACA,iBACA,WACS;AACT,WAAS,IAAI,GAAG,IAAI,OAAO,QAAQ,KAAK;AACtC,UAAM,cAAc,OAAO,CAAC,EAAE,IAAI,OAAK,cAAc,CAAC,CAAC;AACvD,UAAM,UAAU,cAAc,gBAAgB,CAAC,CAAC;AAChD,UAAM,YAAY;AAAA,MAChB;AAAA,MACA;AAAA,IACF;AACA,QAAI,CAAC,UAAW,QAAO;AACvB,QAAI,UAAU,WAAW,QAAQ,OAAQ,QAAO;AAChD,aAAS,IAAI,GAAG,IAAI,UAAU,QAAQ,KAAK;AACzC,UAAI,UAAU,CAAC,MAAM,QAAQ,CAAC,EAAG,QAAO;AAAA,IAC1C;AACA,QAAI,CAAC,qBAAqB,aAAa,WAAW,OAAO,GAAG;AAC1D,aAAO;AAAA,IACT;AAAA,EACF;AACA,SAAO;AACT;AAEA,SAAe,UACb,IACA,YACA,MACkB;AAAA;AAClB,WAAO,MAAM,IAAI,QAAQ,aAAW;AAClC,UAAI,UAAU;AACd,YAAM,SAAS,IAAI,GAAG,OAAO,YAAY,EAAE,YAAY,KAAK,CAAC;AAC7D,YAAM,SAAS,CAAC,WAA0B;AACxC,YAAI,QAAS;AACb,kBAAU;AACV,qBAAa,KAAK;AAElB,eAAO,UAAU;AACjB,gBAAQ,MAAM;AAAA,MAChB;AACA,YAAM,QAAQ,WAAW,MAAM;AAC7B,eAAO,KAAK;AAAA,MACd,GAAG,iBAAiB;AACpB,aAAO,KAAK,WAAW,CAAC,QAAiB;AACvC,eAAO,QAAQ,IAAI;AAAA,MACrB,CAAC;AACD,aAAO,KAAK,SAAS,MAAM;AACzB,eAAO,KAAK;AAAA,MACd,CAAC;AACD,aAAO,KAAK,QAAQ,UAAQ;AAC1B,YAAI,SAAS,EAAG,QAAO,KAAK;AAAA,MAC9B,CAAC;AAAA,IACH,CAAC;AAAA,EACH;AAAA;AAEA,SAAS,SACP,WACA,cAKA;AACA,QAAM,KAAK,kBAAkB;AAC7B,QAAM,KAAK,OAAO;AAClB,QAAM,aAAa,cAAc;AACjC,QAAM,UAAU,KAAK,GAAG,KAAK,EAAE,SAAS;AACxC,QAAM,aAAa,KAAK;AAAA,IACtB;AAAA,IACA,KAAK,IAAI,GAAG,KAAK,MAAM,YAAY,YAAY,CAAC;AAAA,IAChD;AAAA,EACF;AACA,SAAO,EAAE,YAAY,IAAI,WAAW;AACtC;AAEA,SAAsB,oBACpB,QACA,iBACA,WACkB;AAAA;AAClB,QAAI,OAAO,WAAW,gBAAgB,OAAQ,QAAO;AACrD,QAAI,OAAO,WAAW,EAAG,QAAO;AAEhC,UAAM,EAAE,YAAY,IAAI,WAAW,IAAI;AAAA,MACrC,OAAO;AAAA,MACP;AAAA,IACF;AAIA,QACE,OAAO,QACP,eAAe,QACf,OAAO,SAAS,2BAChB,aAAa,GACb;AACA,aAAO,iBAAiB,QAAQ,iBAAiB,SAAS;AAAA,IAC5D;AAEA,UAAM,cAAc,YAAY,QAAQ,UAAU;AAClD,UAAM,YAAY,YAAY,iBAAiB,UAAU;AAEzD,UAAM,UAAU,MAAM,QAAQ;AAAA,MAC5B,YAAY;AAAA,QACV,CAAO,OAAO,MAAG;AACf,uBAAM,UAAU,IAAI,YAAY;AAAA,YAC9B,MAAM;AAAA,YACN,QAAQ;AAAA,YACR,iBAAiB,UAAU,CAAC;AAAA,YAC5B;AAAA,UACF,CAAC;AAAA;AAAA,MACL;AAAA,IACF;AACA,WAAO,QAAQ,MAAM,OAAO;AAAA,EAC9B;AAAA;AAOA,SAAsB,oBACpB,SACA,UACA,YACkB;AAAA;AAClB,QACE,QAAQ,WAAW,SAAS,UAC5B,QAAQ,WAAW,WAAW,QAC9B;AACA,aAAO;AAAA,IACT;AACA,QAAI,QAAQ,WAAW,EAAG,QAAO;AAEjC,UAAM,EAAE,YAAY,IAAI,WAAW,IAAI;AAAA,MACrC,QAAQ;AAAA,MACR;AAAA,IACF;AAEA,QACE,OAAO,QACP,eAAe,QACf,QAAQ,SAAS,4BACjB,aAAa,GACb;AACA,aAAO;AAAA,QACL;AAAA,QACA;AAAA,QACA,uBAAuB,UAAU;AAAA,MACnC;AAAA,IACF;AAEA,UAAM,WAAW,YAAY,SAAS,UAAU;AAChD,UAAM,YAAY,YAAY,UAAU,UAAU;AAClD,UAAM,YAAY,YAAY,YAAY,UAAU;AAEpD,UAAM,UAAU,MAAM,QAAQ;AAAA,MAC5B,SAAS;AAAA,QACP,CAAO,KAAK,MAAG;AACb,uBAAM,UAAU,IAAI,YAAY;AAAA,YAC9B,MAAM;AAAA,YACN,SAAS;AAAA,YACT,UAAU,UAAU,CAAC;AAAA,YACrB,oBAAoB,uBAAuB,UAAU,CAAC,CAAC;AAAA,UACzD,CAAC;AAAA;AAAA,MACL;AAAA,IACF;AACA,WAAO,QAAQ,MAAM,OAAO;AAAA,EAC9B;AAAA;","names":[]}