@obolnetwork/obol-sdk 2.12.0 → 2.12.2

package/dist/cjs/src/index.js

@@ -108,12 +108,14 @@ var __yieldStar = (value) => {
 // src/index.ts
 var index_exports = {};
 __export(index_exports, {
+  ALLOWED_OBOL_API_BASE_URLS: () => ALLOWED_OBOL_API_BASE_URLS,
   AVAILABLE_SPLITTER_CHAINS: () => AVAILABLE_SPLITTER_CHAINS,
   CAPELLA_FORK_MAPPING: () => CAPELLA_FORK_MAPPING,
   CHAIN_CONFIGURATION: () => CHAIN_CONFIGURATION,
   CONFIG_VERSION: () => CONFIG_VERSION,
   CONFLICT_ERROR_MSG: () => CONFLICT_ERROR_MSG,
   Client: () => Client,
+  ClusterLockValidationTimeoutError: () => ClusterLockValidationTimeoutError,
   ConflictError: () => ConflictError,
   CreatorConfigHashSigningTypes: () => CreatorConfigHashSigningTypes,
   CreatorTypedMessage: () => CreatorTypedMessage,
@@ -139,6 +141,7 @@ __export(index_exports, {
   FORK_NAMES: () => FORK_NAMES,
   GENESIS_VALIDATOR_ROOT: () => GENESIS_VALIDATOR_ROOT,
   Incentives: () => Incentives,
+  InvalidBaseUrlError: () => InvalidBaseUrlError,
   OBOL_SDK_EMAIL: () => OBOL_SDK_EMAIL,
   ObolSplits: () => ObolSplits,
   OperatorConfigHashSigningTypes: () => OperatorConfigHashSigningTypes,
@@ -154,8 +157,12 @@ __export(index_exports, {
   TermsAndConditionsSigningTypes: () => TermsAndConditionsSigningTypes,
   UnsupportedChainError: () => UnsupportedChainError,
   blsVerify: () => blsVerify,
+  builderBlsCheck: () => builderBlsCheck,
+  builderDomainForFork: () => builderDomainForFork,
   clusterConfigOrDefinitionHash: () => clusterConfigOrDefinitionHash,
   clusterLockHash: () => clusterLockHash,
+  depositBlsCheck: () => depositBlsCheck,
+  depositDomainForFork: () => depositDomainForFork,
   hasUniqueDistributedKeys: () => hasUniqueDistributedKeys,
   isChainSupportedForSplitters: () => isChainSupportedForSplitters,
   isValidClusterLock: () => isValidClusterLock,
@@ -165,6 +172,7 @@ __export(index_exports, {
   signingRoot: () => signingRoot,
   validateAddressSignature: () => validateAddressSignature,
   validateClusterLock: () => validateClusterLock,
+  validateDepositDataStructure: () => validateDepositDataStructure,
   validateEOASignature: () => validateEOASignature,
   validateSmartContractSignature: () => validateSmartContractSignature,
   verifyBuilderRegistration: () => verifyBuilderRegistration,
@@ -177,7 +185,7 @@ var import_uuid = require("uuid");
 // package.json
 var package_default = {
   name: "@obolnetwork/obol-sdk",
-  version: "2.12.0",
+  version: "2.12.2",
   description: "A package for creating Distributed Validators using the Obol API.",
   bugs: {
     url: "https://github.com/obolnetwork/obol-sdk/issues"
@@ -255,7 +263,6 @@ var package_default = {
     "ajv-formats": "3.0.1",
     "ajv-keywords": "5.1.0",
     "cross-fetch": "4.1.0",
-    dotenv: "17.4.2",
     elliptic: "6.6.1",
     ethers: "6.16.0",
     semver: "7.7.4",
@@ -268,6 +275,7 @@ var package_default = {
     "@types/node": "24.12.2",
     "@types/semver": "7.7.1",
     "@types/uuid": "9.0.8",
+    dotenv: "17.4.2",
     "@typescript-eslint/eslint-plugin": "6.21.0",
     "@typescript-eslint/parser": "6.21.0",
     eslint: "8.57.1",
@@ -395,8 +403,6 @@ var MAINNET_SPLIT_V2_FACTORY_BYTECODE = "0x6080604090808252600480361015610015575
 var HOODI_SPLIT_V2_FACTORY_BYTECODE = "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";
 
 // src/constants.ts
-var dotenv = __toESM(require("dotenv"));
-dotenv.config();
 var CONFLICT_ERROR_MSG = "Conflict";
 var EIP712_DOMAIN_NAME = "Obol";
 var EIP712_DOMAIN_VERSION = "1";
@@ -605,27 +611,88 @@ var CAPELLA_FORK_MAPPING = {
   // Hoodi
 };
 
+// src/errors.ts
+var ConflictError = class _ConflictError extends Error {
+  constructor() {
+    super("This Cluster has been already posted.");
+    this.name = "ConflictError";
+    Object.setPrototypeOf(this, _ConflictError.prototype);
+  }
+};
+var SignerRequiredError = class _SignerRequiredError extends Error {
+  constructor(method) {
+    super(`Signer is required in ${method}`);
+    this.name = "SignerRequiredError";
+    Object.setPrototypeOf(this, _SignerRequiredError.prototype);
+  }
+};
+var UnsupportedChainError = class _UnsupportedChainError extends Error {
+  constructor(chainId, operation) {
+    super(`${operation} is not supported on chain ${chainId}`);
+    this.name = "UnsupportedChainError";
+    Object.setPrototypeOf(this, _UnsupportedChainError.prototype);
+  }
+};
+var InvalidBaseUrlError = class _InvalidBaseUrlError extends Error {
+  constructor(message2) {
+    super(message2);
+    this.name = "InvalidBaseUrlError";
+    Object.setPrototypeOf(this, _InvalidBaseUrlError.prototype);
+  }
+};
+var ClusterLockValidationTimeoutError = class _ClusterLockValidationTimeoutError extends Error {
+  /**
+   * @param timeoutMs - Same value as SDK whole-lock validation worker timeout.
+   */
+  constructor(timeoutMs) {
+    super(
+      `Cluster lock validation exceeded worker time limit (${timeoutMs} ms). Retry later; this does not imply invalid lock data.`
+    );
+    this.timeoutMs = timeoutMs;
+    this.name = "ClusterLockValidationTimeoutError";
+    Object.setPrototypeOf(this, _ClusterLockValidationTimeoutError.prototype);
+  }
+};
+
 // src/base.ts
+var ALLOWED_OBOL_API_BASE_URLS = [
+  DEFAULT_BASE_URL,
+  "https://obol-api-nonprod-dev.dev.obol.tech",
+  "https://obol-api-nonprod-qa.dev.obol.tech"
+];
+var ALLOWED_BASE_URLS = new Set(ALLOWED_OBOL_API_BASE_URLS);
+function assertAllowedBaseUrl(baseUrl) {
+  let candidate = baseUrl.trim();
+  while (candidate.endsWith("/")) {
+    candidate = candidate.slice(0, -1);
+  }
+  if (!ALLOWED_BASE_URLS.has(candidate)) {
+    throw new InvalidBaseUrlError(
+      `baseUrl must be one of: ${ALLOWED_OBOL_API_BASE_URLS.join(", ")}`
+    );
+  }
+  return candidate;
+}
 var Base = class {
   constructor({
     baseUrl = DEFAULT_BASE_URL,
     chainId = DEFAULT_CHAIN_ID
   }) {
-    this.baseUrl = baseUrl;
+    this.baseUrl = assertAllowedBaseUrl(baseUrl);
     this.chainId = chainId;
     this.fork_version = FORK_MAPPING[this.chainId];
   }
   request(endpoint, options) {
     return __async(this, null, function* () {
       const url = `${this.baseUrl}${endpoint}`;
-      const config2 = __spreadProps(__spreadValues({}, options), {
+      const config = __spreadProps(__spreadValues({}, options), {
         headers: __spreadValues({
           "Content-Type": "application/json",
           "User-Agent": `Obol-SDK/${SDK_VERSION}`
         }, options == null ? void 0 : options.headers)
       });
       try {
-        const response = yield fetch(url, config2);
+        const response = yield fetch(url, config);
         if (response.ok) {
           return yield response.json();
         } else {
@@ -639,29 +706,6 @@ var Base = class {
   }
 };
 
-// src/errors.ts
-var ConflictError = class _ConflictError extends Error {
-  constructor() {
-    super("This Cluster has been already posted.");
-    this.name = "ConflictError";
-    Object.setPrototypeOf(this, _ConflictError.prototype);
-  }
-};
-var SignerRequiredError = class _SignerRequiredError extends Error {
-  constructor(method) {
-    super(`Signer is required in ${method}`);
-    this.name = "SignerRequiredError";
-    Object.setPrototypeOf(this, _SignerRequiredError.prototype);
-  }
-};
-var UnsupportedChainError = class _UnsupportedChainError extends Error {
-  constructor(chainId, operation) {
-    super(`${operation} is not supported on chain ${chainId}`);
-    this.name = "UnsupportedChainError";
-    Object.setPrototypeOf(this, _UnsupportedChainError.prototype);
-  }
-};
-
 // src/verification/common.ts
 var import_ssz7 = require("@chainsafe/ssz");
 var import_elliptic = __toESM(require("elliptic"));
@@ -780,6 +824,9 @@ var signingRootType = new import_ssz.ContainerType({
 // src/verification/v1.6.0.ts
 var import_ssz3 = require("@chainsafe/ssz");
 
+// src/verification/parallelPool.ts
+var import_ssz2 = require("@chainsafe/ssz");
+
 // node_modules/@noble/curves/node_modules/@noble/hashes/utils.js
 function isBytes(a) {
   return a instanceof Uint8Array || ArrayBuffer.isView(a) && a.constructor.name === "Uint8Array" && "BYTES_PER_ELEMENT" in a && a.BYTES_PER_ELEMENT === 1;
@@ -4934,6 +4981,12 @@ function blsVerify(pubkey, message2, signature) {
     return false;
   }
 }
+function blsAggregatePublicKeys(pubkeys) {
+  if (pubkeys.length === 0) {
+    throw new Error("cannot aggregate empty pubkey set");
+  }
+  return ls.aggregatePublicKeys(pubkeys).toBytes();
+}
 function blsVerifyAggregate(pubkeys, message2, signature) {
   try {
     return ls.verify(
@@ -4945,6 +4998,13 @@ function blsVerifyAggregate(pubkeys, message2, signature) {
     return false;
   }
 }
+function blsVerifyWithAggregatedPubkey(aggregatedPubkey, message2, signature) {
+  try {
+    return ls.verify(signature, ls.hash(message2, ETH2_DST), aggregatedPubkey);
+  } catch (e) {
+    return false;
+  }
+}
 function blsVerifyMultiple(pubkeys, messages, signature) {
   try {
     if (pubkeys.length !== messages.length) return false;
@@ -5010,16 +5070,23 @@ function blsVerifyExtraShares(pubshares, threshold, distributedPubkey) {
 }
 
 // src/verification/parallelPool.ts
-var import_ssz2 = require("@chainsafe/ssz");
 var MIN_PARALLEL_VALIDATORS = 50;
 var MIN_PARALLEL_BATCH_PAIRS = 100;
 var MAX_WORKERS = 8;
 var MIN_VALIDATORS_PER_WORKER = 25;
 var MIN_PAIRS_PER_WORKER = 50;
+var MIN_PARALLEL_AGGREGATE_KEYS = 400;
+var MIN_KEYS_PER_WORKER_AGG = 100;
+var MIN_VALIDATORS_FOR_VALIDATION_WORKER = 50;
+var VALIDATION_WORKER_TIMEOUT_MS = 12e4;
 var WORKER_TIMEOUT_MS = 6e4;
+var MAX_CONCURRENT_WORKERS_CAP = 8;
+function maxConcurrentWorkers(numWorkers) {
+  return Math.min(numWorkers, MAX_CONCURRENT_WORKERS_CAP);
+}
 var workerThreadsCache;
 var osCache;
-var workerPathCache;
+var workerPathByFile = /* @__PURE__ */ new Map();
 function loadWorkerThreads() {
   if (workerThreadsCache !== void 0) return workerThreadsCache;
   try {
@@ -5038,18 +5105,47 @@ function loadOs() {
   }
   return osCache;
 }
-function getWorkerPath() {
-  if (workerPathCache !== void 0) return workerPathCache;
-  if (typeof __dirname === "undefined") return workerPathCache = null;
+function getWorkerPath(filename) {
+  const cached = workerPathByFile.get(filename);
+  if (cached !== void 0) return cached;
+  if (typeof __dirname === "undefined") {
+    workerPathByFile.set(filename, null);
+    return null;
+  }
   const path = require("path");
-  const candidate = path.join(__dirname, "lockWorker.js");
+  const fs = require("fs");
+  const candidates = [
+    path.join(__dirname, filename),
+    path.join(__dirname, "verification", filename)
+  ];
   try {
-    const fs = require("fs");
-    if (!fs.existsSync(candidate)) return workerPathCache = null;
+    for (const candidate of candidates) {
+      if (fs.existsSync(candidate)) {
+        workerPathByFile.set(filename, candidate);
+        return candidate;
+      }
+    }
   } catch (e) {
-    return workerPathCache = null;
   }
-  return workerPathCache = candidate;
+  workerPathByFile.set(filename, null);
+  return null;
+}
+function mapWithConcurrency(items, concurrency, fn) {
+  return __async(this, null, function* () {
+    const results = new Array(items.length);
+    let next = 0;
+    const runners = Array.from(
+      { length: Math.min(concurrency, items.length) },
+      () => __async(null, null, function* () {
+        while (next < items.length) {
+          const i = next++;
+          results[i] = yield fn(items[i], i);
+        }
+      })
+    );
+    yield Promise.all(runners);
+    return results;
+  });
 }
 function chunkArrays(arr, n) {
   const size = Math.ceil(arr.length / n);
@@ -5078,6 +5174,33 @@ function verifySharesSync(shares, distributedKeys, threshold) {
   }
   return true;
 }
+function runWorkerAggregatePubkeys(wt, workerFile, data) {
+  return __async(this, null, function* () {
+    return yield new Promise((resolve) => {
+      let settled = false;
+      const worker = new wt.Worker(workerFile, { workerData: data });
+      const finish = (result) => {
+        if (settled) return;
+        settled = true;
+        clearTimeout(timer);
+        worker.terminate();
+        resolve(result);
+      };
+      const timer = setTimeout(() => {
+        finish(null);
+      }, WORKER_TIMEOUT_MS);
+      worker.once("message", (msg) => {
+        finish(msg instanceof Uint8Array ? msg : null);
+      });
+      worker.once("error", () => {
+        finish(null);
+      });
+      worker.once("exit", (code2) => {
+        if (code2 !== 0) finish(null);
+      });
+    });
+  });
+}
 function runWorker(wt, workerFile, data) {
   return __async(this, null, function* () {
     return yield new Promise((resolve) => {
@@ -5108,8 +5231,8 @@ function runWorker(wt, workerFile, data) {
 function poolSize(itemCount, minPerWorker) {
   const wt = loadWorkerThreads();
   const os = loadOs();
-  const workerFile = getWorkerPath();
-  const numCpus = os ? os.cpus().length : 1;
+  const workerFile = getWorkerPath("lockWorker.js");
+  const numCpus = os ? Math.max(1, os.cpus().length) : 1;
   const numWorkers = Math.min(
     MAX_WORKERS,
     Math.max(1, Math.floor(itemCount / minPerWorker)),
@@ -5117,6 +5240,18 @@ function poolSize(itemCount, minPerWorker) {
   );
   return { numWorkers, wt, workerFile };
 }
+function runWorkerChunks(wt, workerFile, chunks) {
+  return __async(this, null, function* () {
+    const results = yield mapWithConcurrency(
+      chunks,
+      maxConcurrentWorkers(chunks.length),
+      (data) => __async(null, null, function* () {
+        return yield runWorker(wt, workerFile, data);
+      })
+    );
+    return results.every(Boolean);
+  });
+}
 function verifySharesBinding(shares, distributedKeys, threshold) {
   return __async(this, null, function* () {
     if (shares.length !== distributedKeys.length) return false;
@@ -5130,19 +5265,26 @@ function verifySharesBinding(shares, distributedKeys, threshold) {
     }
     const shareChunks = chunkArrays(shares, numWorkers);
     const keyChunks = chunkArrays(distributedKeys, numWorkers);
-    const results = yield Promise.all(
-      shareChunks.map(
-        (chunk, i) => __async(null, null, function* () {
-          return yield runWorker(wt, workerFile, {
-            mode: "shareBinding",
-            shares: chunk,
-            distributedKeys: keyChunks[i],
-            threshold
-          });
-        })
-      )
+    return yield runWorkerChunks(
+      wt,
+      workerFile,
+      shareChunks.map((chunk, i) => ({
+        mode: "shareBinding",
+        shares: chunk,
+        distributedKeys: keyChunks[i],
+        threshold
+      }))
+    );
+  });
+}
+function verifyBlsChecksParallel(checks) {
+  return __async(this, null, function* () {
+    if (checks.length === 0) return true;
+    return yield verifyBatchParallel(
+      checks.map((c) => c.pubkey),
+      checks.map((c) => c.message),
+      checks.map((c) => c.signature)
     );
-    return results.every(Boolean);
   });
 }
 function verifyBatchParallel(pubkeys, messages, signatures) {
@@ -5165,19 +5307,83 @@ function verifyBatchParallel(pubkeys, messages, signatures) {
     const pkChunks = chunkArrays(pubkeys, numWorkers);
     const msgChunks = chunkArrays(messages, numWorkers);
     const sigChunks = chunkArrays(signatures, numWorkers);
-    const results = yield Promise.all(
-      pkChunks.map(
-        (pks, i) => __async(null, null, function* () {
-          return yield runWorker(wt, workerFile, {
-            mode: "verifyBatch",
-            pubkeys: pks,
-            messages: msgChunks[i],
-            aggregateSignature: blsAggregateSignatures(sigChunks[i])
-          });
-        })
-      )
+    return yield runWorkerChunks(
+      wt,
+      workerFile,
+      pkChunks.map((pks, i) => ({
+        mode: "verifyBatch",
+        pubkeys: pks,
+        messages: msgChunks[i],
+        signatures: sigChunks[i]
+      }))
     );
-    return results.every(Boolean);
+  });
+}
+function verifyAggregateParallel(pubkeys, message2, signature) {
+  return __async(this, null, function* () {
+    if (pubkeys.length === 0) return false;
+    const { numWorkers, wt, workerFile } = poolSize(
+      pubkeys.length,
+      MIN_KEYS_PER_WORKER_AGG
+    );
+    if (wt === null || workerFile === null || pubkeys.length < MIN_PARALLEL_AGGREGATE_KEYS || numWorkers < 2) {
+      return blsVerifyAggregate(pubkeys, message2, signature);
+    }
+    const pkChunks = chunkArrays(pubkeys, numWorkers);
+    const partials = yield mapWithConcurrency(
+      pkChunks,
+      maxConcurrentWorkers(pkChunks.length),
+      (chunk) => __async(null, null, function* () {
+        return yield runWorkerAggregatePubkeys(wt, workerFile, {
+          mode: "aggregatePubkeys",
+          pubkeys: chunk
+        });
+      })
+    );
+    if (partials.some((p) => p === null)) return false;
+    const aggregated = blsAggregatePublicKeys(partials);
+    return blsVerifyWithAggregatedPubkey(aggregated, message2, signature);
+  });
+}
+function validateClusterLockInWorker(lock, safeRpcUrl) {
+  return __async(this, null, function* () {
+    var _a6, _b2;
+    const n = (_b2 = (_a6 = lock.distributed_validators) == null ? void 0 : _a6.length) != null ? _b2 : 0;
+    if (n < MIN_VALIDATORS_FOR_VALIDATION_WORKER) return null;
+    const wt = loadWorkerThreads();
+    const workerFile = getWorkerPath("clusterLockValidationWorker.js");
+    if (wt === null || workerFile === null) return null;
+    return yield new Promise((resolve, reject) => {
+      let settled = false;
+      const worker = new wt.Worker(workerFile, {
+        workerData: { lock, safeRpcUrl }
+      });
+      const timer = setTimeout(() => {
+        if (settled) return;
+        settled = true;
+        clearTimeout(timer);
+        void worker.terminate();
+        reject(
+          new ClusterLockValidationTimeoutError(VALIDATION_WORKER_TIMEOUT_MS)
+        );
+      }, VALIDATION_WORKER_TIMEOUT_MS);
+      const finish = (result) => {
+        if (settled) return;
+        settled = true;
+        clearTimeout(timer);
+        worker.terminate();
+        resolve(result);
+      };
+      worker.once("message", (msg) => {
+        finish(msg === true);
+      });
+      worker.once("error", () => {
+        finish(null);
+      });
+      worker.once("exit", (code2) => {
+        if (code2 !== 0) finish(null);
+      });
+    });
   });
 }
 
@@ -5282,7 +5488,6 @@ var hashClusterLockV1X6 = (cluster) => {
   return "0x" + Buffer.from(lockType.hashTreeRoot(val).buffer).toString("hex");
 };
 var verifyDVV1X6 = (clusterLock) => __async(null, null, function* () {
-  var _a6;
   const validators = clusterLock.distributed_validators;
   const operatorCount = clusterLock.cluster_definition.operators.length;
   const threshold = clusterLock.cluster_definition.threshold;
@@ -5301,9 +5506,7 @@ var verifyDVV1X6 = (clusterLock) => __async(null, null, function* () {
     return false;
   }
   const pubShares = [];
-  const pubKeys = [];
-  const builderRegistrationAndDepositDataMessages = [];
-  const blsSignatures = [];
+  const blsChecks = [];
   for (let i = 0; i < validators.length; i++) {
     const validator = validators[i];
     const validatorPublicShares = validator.public_shares;
@@ -5321,33 +5524,23 @@ var verifyDVV1X6 = (clusterLock) => __async(null, null, function* () {
     for (const share of validatorPublicSharesBytes) {
       pubShares.push(share);
     }
-    const { isValidDepositData, depositDataMsg } = verifyDepositData(
+    const depositCheck = depositBlsCheck(
       distributedPublicKey,
       validator.deposit_data,
       clusterLock.cluster_definition.validators[i].withdrawal_address,
       clusterLock.cluster_definition.fork_version
     );
-    if (!isValidDepositData) {
-      return false;
-    }
-    pubKeys.push((0, import_ssz3.fromHexString)(validator.distributed_public_key));
-    builderRegistrationAndDepositDataMessages.push(depositDataMsg);
-    blsSignatures.push(
-      (0, import_ssz3.fromHexString)((_a6 = validator.deposit_data) == null ? void 0 : _a6.signature)
-    );
+    if (!depositCheck) return false;
+    blsChecks.push(depositCheck);
   }
-  if (!(yield verifyBatchParallel(
-    pubKeys,
-    builderRegistrationAndDepositDataMessages,
-    blsSignatures
-  ))) {
+  if (!(yield verifyBlsChecksParallel(blsChecks))) {
     return false;
   }
-  if (!blsVerifyAggregate(
+  if (!(yield verifyAggregateParallel(
     pubShares,
     (0, import_ssz3.fromHexString)(clusterLock.lock_hash),
     (0, import_ssz3.fromHexString)(clusterLock.signature_aggregate)
-  )) {
+  ))) {
     return false;
   }
   return true;
@@ -5473,7 +5666,6 @@ var hashClusterLockV1X7 = (cluster) => {
   return "0x" + Buffer.from(lockType.hashTreeRoot(val).buffer).toString("hex");
 };
 var verifyDVV1X7 = (clusterLock) => __async(null, null, function* () {
-  var _a6, _b2;
   const validators = clusterLock.distributed_validators;
   const operatorCount = clusterLock.cluster_definition.operators.length;
   const threshold = clusterLock.cluster_definition.threshold;
@@ -5492,9 +5684,7 @@ var verifyDVV1X7 = (clusterLock) => __async(null, null, function* () {
     return false;
   }
   const pubShares = [];
-  const pubKeys = [];
-  const builderRegistrationAndDepositDataMessages = [];
-  const blsSignatures = [];
+  const blsChecks = [];
   for (let i = 0; i < validators.length; i++) {
     const validator = validators[i];
     const validatorPublicShares = validator.public_shares;
@@ -5512,49 +5702,33 @@ var verifyDVV1X7 = (clusterLock) => __async(null, null, function* () {
     for (const share of validatorPublicSharesBytes) {
       pubShares.push(share);
     }
-    const { isValidDepositData, depositDataMsg } = verifyDepositData(
+    const depositCheck = depositBlsCheck(
       distributedPublicKey,
       validator.deposit_data,
       clusterLock.cluster_definition.validators[i].withdrawal_address,
       clusterLock.cluster_definition.fork_version
     );
-    if (!isValidDepositData) {
-      return false;
-    }
-    pubKeys.push((0, import_ssz4.fromHexString)(distributedPublicKey));
-    builderRegistrationAndDepositDataMessages.push(depositDataMsg);
-    blsSignatures.push(
-      (0, import_ssz4.fromHexString)((_a6 = validator.deposit_data) == null ? void 0 : _a6.signature)
-    );
-    const { isValidBuilderRegistration, builderRegistrationMsg } = verifyBuilderRegistration(
+    if (!depositCheck) return false;
+    blsChecks.push(depositCheck);
+    const builderCheck = builderBlsCheck(
       validator,
       clusterLock.cluster_definition.validators[i].fee_recipient_address,
       clusterLock.cluster_definition.fork_version
     );
-    if (!isValidBuilderRegistration) {
-      return false;
-    }
-    pubKeys.push((0, import_ssz4.fromHexString)(distributedPublicKey));
-    builderRegistrationAndDepositDataMessages.push(builderRegistrationMsg);
-    blsSignatures.push(
-      (0, import_ssz4.fromHexString)((_b2 = validator.builder_registration) == null ? void 0 : _b2.signature)
-    );
+    if (!builderCheck) return false;
+    blsChecks.push(builderCheck);
   }
-  if (!(yield verifyBatchParallel(
-    pubKeys,
-    builderRegistrationAndDepositDataMessages,
-    blsSignatures
-  ))) {
+  if (!(yield verifyBlsChecksParallel(blsChecks))) {
     return false;
   }
   if (!verifyNodeSignatures(clusterLock)) {
     return false;
   }
-  if (!blsVerifyAggregate(
+  if (!(yield verifyAggregateParallel(
     pubShares,
     (0, import_ssz4.fromHexString)(clusterLock.lock_hash),
     (0, import_ssz4.fromHexString)(clusterLock.signature_aggregate)
-  )) {
+  ))) {
     return false;
   }
   return true;
@@ -14107,7 +14281,6 @@ var hashClusterLockV1X8 = (cluster) => {
   return "0x" + Buffer.from(lockType.hashTreeRoot(val).buffer).toString("hex");
 };
 var verifyDVV1X8 = (clusterLock) => __async(null, null, function* () {
-  var _a6;
   const validators = clusterLock.distributed_validators;
   const operatorCount = clusterLock.cluster_definition.operators.length;
   const threshold = clusterLock.cluster_definition.threshold;
@@ -14126,9 +14299,10 @@ var verifyDVV1X8 = (clusterLock) => __async(null, null, function* () {
     return false;
   }
   const pubShares = [];
-  const pubKeys = [];
-  const builderRegistrationAndDepositDataMessages = [];
-  const blsSignatures = [];
+  const blsChecks = [];
+  const forkVersion = clusterLock.cluster_definition.fork_version;
+  const depositDomain = depositDomainForFork(forkVersion);
+  const builderDomain = builderDomainForFork(forkVersion);
   for (let i = 0; i < validators.length; i++) {
     const validator = validators[i];
     const validatorPublicShares = validator.public_shares;
@@ -14155,51 +14329,38 @@ var verifyDVV1X8 = (clusterLock) => __async(null, null, function* () {
         return false;
       }
     }
-    for (const element of validator.partial_deposit_data) {
-      const depositData = element;
-      const { isValidDepositData, depositDataMsg } = verifyDepositData(
+    for (const depositData of validator.partial_deposit_data) {
+      const check = depositBlsCheck(
         distributedPublicKey,
         depositData,
         clusterLock.cluster_definition.validators[i].withdrawal_address,
-        clusterLock.cluster_definition.fork_version,
-        clusterLock.cluster_definition.compounding
+        forkVersion,
+        clusterLock.cluster_definition.compounding,
+        depositDomain
       );
-      if (!isValidDepositData) {
-        return false;
-      }
-      pubKeys.push((0, import_ssz5.fromHexString)(distributedPublicKey));
-      builderRegistrationAndDepositDataMessages.push(depositDataMsg);
-      blsSignatures.push((0, import_ssz5.fromHexString)(depositData == null ? void 0 : depositData.signature));
+      if (!check) return false;
+      blsChecks.push(check);
     }
-    const { isValidBuilderRegistration, builderRegistrationMsg } = verifyBuilderRegistration(
+    const builderCheck = builderBlsCheck(
       validator,
       clusterLock.cluster_definition.validators[i].fee_recipient_address,
-      clusterLock.cluster_definition.fork_version
-    );
-    if (!isValidBuilderRegistration) {
-      return false;
-    }
-    pubKeys.push((0, import_ssz5.fromHexString)(distributedPublicKey));
-    builderRegistrationAndDepositDataMessages.push(builderRegistrationMsg);
-    blsSignatures.push(
-      (0, import_ssz5.fromHexString)((_a6 = validator.builder_registration) == null ? void 0 : _a6.signature)
+      forkVersion,
+      builderDomain
     );
+    if (!builderCheck) return false;
+    blsChecks.push(builderCheck);
   }
-  if (!(yield verifyBatchParallel(
-    pubKeys,
-    builderRegistrationAndDepositDataMessages,
-    blsSignatures
-  ))) {
+  if (!(yield verifyBlsChecksParallel(blsChecks))) {
     return false;
   }
   if (!verifyNodeSignatures(clusterLock)) {
     return false;
   }
-  if (!blsVerifyAggregate(
+  if (!(yield verifyAggregateParallel(
     pubShares,
     (0, import_ssz5.fromHexString)(clusterLock.lock_hash),
     (0, import_ssz5.fromHexString)(clusterLock.signature_aggregate)
-  )) {
+  ))) {
     return false;
   }
   return true;
@@ -14601,37 +14762,62 @@ var computeDomain = (domainType, lockForkVersion, genesisValidatorsRoot = (0, im
   domain.set(forkDataRoot.subarray(0, 28), 4);
   return domain;
 };
-var verifyDepositData = (distributedPublicKey, depositData, withdrawalAddress, forkVersion, compounding) => {
-  const depositDomain = computeDomain(
-    (0, import_ssz7.fromHexString)(DOMAIN_DEPOSIT),
-    forkVersion
-  );
+var depositDomainForFork = (forkVersion) => computeDomain((0, import_ssz7.fromHexString)(DOMAIN_DEPOSIT), forkVersion);
+var builderDomainForFork = (forkVersion) => computeDomain((0, import_ssz7.fromHexString)(DOMAIN_APPLICATION_BUILDER), forkVersion);
+var validateDepositDataStructure = (distributedPublicKey, depositData, withdrawalAddress, forkVersion, compounding, precomputedDepositDomain) => {
+  const depositDomain = precomputedDepositDomain != null ? precomputedDepositDomain : computeDomain((0, import_ssz7.fromHexString)(DOMAIN_DEPOSIT), forkVersion);
   const withdrawalPrefix = compounding ? "0x02" : "0x01";
   const expectedWithdrawalCredentials = withdrawalPrefix + "0".repeat(22) + withdrawalAddress.toLowerCase().slice(2);
   if (expectedWithdrawalCredentials !== depositData.withdrawal_credentials) {
-    return { isValidDepositData: false, depositDataMsg: new Uint8Array(0) };
+    return { valid: false, message: new Uint8Array(0) };
   }
   if (distributedPublicKey !== depositData.pubkey) {
-    return { isValidDepositData: false, depositDataMsg: new Uint8Array(0) };
+    return { valid: false, message: new Uint8Array(0) };
   }
   const depositMessageBuffer = computeDepositMsgRoot(depositData);
-  const depositDataRoot = signingRoot(depositDomain, depositMessageBuffer);
+  const message2 = signingRoot(depositDomain, depositMessageBuffer);
   if (!depositData.signature) {
-    return { isValidDepositData: false, depositDataMsg: depositDataRoot };
+    return { valid: false, message: message2 };
+  }
+  return { valid: true, message: message2 };
+};
+var depositBlsCheck = (distributedPublicKey, depositData, withdrawalAddress, forkVersion, compounding, precomputedDepositDomain) => {
+  const { valid, message: message2 } = validateDepositDataStructure(
+    distributedPublicKey,
+    depositData,
+    withdrawalAddress,
+    forkVersion,
+    compounding,
+    precomputedDepositDomain
+  );
+  if (!valid || !depositData.signature || !depositData.pubkey) return null;
+  return {
+    pubkey: (0, import_ssz7.fromHexString)(depositData.pubkey),
+    message: message2,
+    signature: (0, import_ssz7.fromHexString)(depositData.signature)
+  };
+};
+var verifyDepositData = (distributedPublicKey, depositData, withdrawalAddress, forkVersion, compounding) => {
+  const { valid, message: message2 } = validateDepositDataStructure(
+    distributedPublicKey,
+    depositData,
+    withdrawalAddress,
+    forkVersion,
+    compounding
+  );
+  if (!valid || !depositData.signature || !depositData.pubkey) {
+    return { isValidDepositData: false, depositDataMsg: message2 };
   }
   const isValidDepositData = blsVerify(
     (0, import_ssz7.fromHexString)(depositData.pubkey),
-    depositDataRoot,
+    message2,
     (0, import_ssz7.fromHexString)(depositData.signature)
   );
-  return { isValidDepositData, depositDataMsg: depositDataRoot };
+  return { isValidDepositData, depositDataMsg: message2 };
 };
-var verifyBuilderRegistration = (validator, feeRecipientAddress, forkVersion) => {
+var verifyBuilderRegistration = (validator, feeRecipientAddress, forkVersion, precomputedBuilderDomain) => {
   var _a6;
-  const builderDomain = computeDomain(
-    (0, import_ssz7.fromHexString)(DOMAIN_APPLICATION_BUILDER),
-    forkVersion
-  );
+  const builderDomain = precomputedBuilderDomain != null ? precomputedBuilderDomain : computeDomain((0, import_ssz7.fromHexString)(DOMAIN_APPLICATION_BUILDER), forkVersion);
   if (validator.distributed_public_key !== ((_a6 = validator.builder_registration) == null ? void 0 : _a6.message.pubkey)) {
     return {
       isValidBuilderRegistration: false,
@@ -14656,6 +14842,22 @@ var verifyBuilderRegistration = (validator, feeRecipientAddress, forkVersion) =>
     builderRegistrationMsg: builderRegistrationMessage
   };
 };
+var builderBlsCheck = (validator, feeRecipientAddress, forkVersion, precomputedBuilderDomain) => {
+  var _a6;
+  const { isValidBuilderRegistration, builderRegistrationMsg } = verifyBuilderRegistration(
+    validator,
+    feeRecipientAddress,
+    forkVersion,
+    precomputedBuilderDomain
+  );
+  const sig = (_a6 = validator.builder_registration) == null ? void 0 : _a6.signature;
+  if (!isValidBuilderRegistration || !sig) return null;
+  return {
+    pubkey: (0, import_ssz7.fromHexString)(validator.distributed_public_key),
+    message: builderRegistrationMsg,
+    signature: (0, import_ssz7.fromHexString)(sig)
+  };
+};
 var verifyNodeSignatures = (clusterLock) => {
   const ec2 = new import_elliptic.default.ec("secp256k1");
   const nodeSignatures = clusterLock.node_signatures;
@@ -18084,11 +18286,11 @@ var encodeCreateSplitV2DeterministicTxData = (splitParams, splitOwnerAddress, sa
   );
 };
 var getChainConfig = (chainId) => {
-  const config2 = CHAIN_CONFIGURATION[chainId];
-  if (!config2) {
+  const config = CHAIN_CONFIGURATION[chainId];
+  if (!config) {
     throw new Error(`Chain configuration not found for chain ID ${chainId}`);
   }
-  return config2;
+  return config;
 };
 var requestWithdrawalFromOVM = (_0) => __async(null, [_0], function* ({
   ovmAddress,
@@ -19663,8 +19865,9 @@ var EOA = class {
 // src/services.ts
 var validateClusterLock = (lock, safeRpcUrl) => __async(null, null, function* () {
   try {
-    const isLockValid = yield isValidClusterLock(lock, safeRpcUrl);
-    return isLockValid;
+    const inWorker = yield validateClusterLockInWorker(lock, safeRpcUrl);
+    if (inWorker !== null) return inWorker;
+    return yield isValidClusterLock(lock, safeRpcUrl);
   } catch (err) {
     throw err;
   }
@@ -19677,6 +19880,7 @@ var Client = class extends Base {
    *
    * @param config - Client configuration object.
    * @param config.baseUrl - Obol API base URL. Defaults to `https://api.obol.tech`.
+   *   Must match one of {@link ALLOWED_OBOL_API_BASE_URLS} (API paths use `/v1/...` separately).
    * @param config.chainId - Target chain ID. Defaults to `560048` (Hoodi).
    *   Supported: 1 (Mainnet), 560048 (Hoodi), 100 (Gnosis), 11155111 (Sepolia).
    * @param signer - An ethers `Wallet` or `JsonRpcSigner`. Required for any
@@ -19694,8 +19898,8 @@ var Client = class extends Base {
    * const client = new Client({ chainId: 560048 }, signer);
    * ```
    */
-  constructor(config2, signer, provider) {
-    super(config2);
+  constructor(config, signer, provider) {
+    super(config);
     this.signer = signer;
     this.provider = provider != null ? provider : signer && "provider" in signer ? signer.provider : void 0;
     this.incentives = new Incentives(
@@ -20258,12 +20462,14 @@ var Client = class extends Base {
 };
 // Annotate the CommonJS export names for ESM import in node:
 0 && (module.exports = {
+  ALLOWED_OBOL_API_BASE_URLS,
   AVAILABLE_SPLITTER_CHAINS,
   CAPELLA_FORK_MAPPING,
   CHAIN_CONFIGURATION,
   CONFIG_VERSION,
   CONFLICT_ERROR_MSG,
   Client,
+  ClusterLockValidationTimeoutError,
   ConflictError,
   CreatorConfigHashSigningTypes,
   CreatorTypedMessage,
@@ -20289,6 +20495,7 @@ var Client = class extends Base {
   FORK_NAMES,
   GENESIS_VALIDATOR_ROOT,
   Incentives,
+  InvalidBaseUrlError,
   OBOL_SDK_EMAIL,
   ObolSplits,
   OperatorConfigHashSigningTypes,
@@ -20304,8 +20511,12 @@ var Client = class extends Base {
   TermsAndConditionsSigningTypes,
   UnsupportedChainError,
   blsVerify,
+  builderBlsCheck,
+  builderDomainForFork,
   clusterConfigOrDefinitionHash,
   clusterLockHash,
+  depositBlsCheck,
+  depositDomainForFork,
   hasUniqueDistributedKeys,
   isChainSupportedForSplitters,
   isValidClusterLock,
@@ -20315,6 +20526,7 @@ var Client = class extends Base {
   signingRoot,
   validateAddressSignature,
   validateClusterLock,
+  validateDepositDataStructure,
   validateEOASignature,
   validateSmartContractSignature,
   verifyBuilderRegistration,