@obolnetwork/obol-sdk 2.12.1 → 2.12.4

package/dist/esm/src/index.js

@@ -57,14 +57,16 @@ import {
   verifyBuilderRegistration,
   verifyDepositData,
   verifyNodeSignatures
-} from "./chunk-5ASVONSJ.js";
+} from "./chunk-YZWJJHPO.js";
 import {
+  ClusterLockValidationBusyError,
   ClusterLockValidationTimeoutError,
   ConflictError,
+  InvalidBaseUrlError,
   SignerRequiredError,
   UnsupportedChainError,
   validateClusterLockInWorker
-} from "./chunk-RYTIXFRX.js";
+} from "./chunk-FGMJVLIN.js";
 import {
   __async,
   __spreadProps,
@@ -77,12 +79,30 @@ import {
 import { v4 as uuidv4 } from "uuid";
 
 // src/base.ts
+var ALLOWED_OBOL_API_BASE_URLS = [
+  DEFAULT_BASE_URL,
+  "https://obol-api-nonprod-dev.dev.obol.tech",
+  "https://obol-api-nonprod-qa.dev.obol.tech"
+];
+var ALLOWED_BASE_URLS = new Set(ALLOWED_OBOL_API_BASE_URLS);
+function assertAllowedBaseUrl(baseUrl) {
+  let candidate = baseUrl.trim();
+  while (candidate.endsWith("/")) {
+    candidate = candidate.slice(0, -1);
+  }
+  if (!ALLOWED_BASE_URLS.has(candidate)) {
+    throw new InvalidBaseUrlError(
+      `baseUrl must be one of: ${ALLOWED_OBOL_API_BASE_URLS.join(", ")}`
+    );
+  }
+  return candidate;
+}
 var Base = class {
   constructor({
     baseUrl = DEFAULT_BASE_URL,
     chainId = DEFAULT_CHAIN_ID
   }) {
-    this.baseUrl = baseUrl;
+    this.baseUrl = assertAllowedBaseUrl(baseUrl);
     this.chainId = chainId;
     this.fork_version = FORK_MAPPING[this.chainId];
   }
@@ -5046,15 +5066,40 @@ var EOA = class {
   }
 };
 
+// src/verification/validationConcurrency.ts
+function getMaxConcurrentLockValidations() {
+  const raw = process.env.OBOL_SDK_MAX_CONCURRENT_LOCK_VALIDATIONS;
+  if (raw === "0") return 0;
+  if (raw !== void 0 && raw !== "") {
+    const n = Number.parseInt(raw, 10);
+    if (Number.isFinite(n) && n > 0) return n;
+  }
+  return 2;
+}
+var activeValidations = 0;
+function withLockValidationConcurrency(fn) {
+  return __async(this, null, function* () {
+    const max = getMaxConcurrentLockValidations();
+    if (max === 0) return yield fn();
+    if (activeValidations >= max) {
+      throw new ClusterLockValidationBusyError(max);
+    }
+    activeValidations++;
+    try {
+      return yield fn();
+    } finally {
+      activeValidations--;
+    }
+  });
+}
+
 // src/services.ts
 var validateClusterLock = (lock, safeRpcUrl) => __async(null, null, function* () {
-  try {
+  return yield withLockValidationConcurrency(() => __async(null, null, function* () {
     const inWorker = yield validateClusterLockInWorker(lock, safeRpcUrl);
     if (inWorker !== null) return inWorker;
     return yield isValidClusterLock(lock, safeRpcUrl);
-  } catch (err) {
-    throw err;
-  }
+  }));
 });
 
 // src/index.ts
@@ -5064,6 +5109,7 @@ var Client = class extends Base {
    *
    * @param config - Client configuration object.
    * @param config.baseUrl - Obol API base URL. Defaults to `https://api.obol.tech`.
+   *   Must match one of {@link ALLOWED_OBOL_API_BASE_URLS} (API paths use `/v1/...` separately).
    * @param config.chainId - Target chain ID. Defaults to `560048` (Hoodi).
    *   Supported: 1 (Mainnet), 560048 (Hoodi), 100 (Gnosis), 11155111 (Sepolia).
    * @param signer - An ethers `Wallet` or `JsonRpcSigner`. Required for any
@@ -5644,12 +5690,14 @@ var Client = class extends Base {
   }
 };
 export {
+  ALLOWED_OBOL_API_BASE_URLS,
   AVAILABLE_SPLITTER_CHAINS,
   CAPELLA_FORK_MAPPING,
   CHAIN_CONFIGURATION,
   CONFIG_VERSION,
   CONFLICT_ERROR_MSG,
   Client,
+  ClusterLockValidationBusyError,
   ClusterLockValidationTimeoutError,
   ConflictError,
   CreatorConfigHashSigningTypes,
@@ -5676,6 +5724,7 @@ export {
   FORK_NAMES,
   GENESIS_VALIDATOR_ROOT,
   Incentives,
+  InvalidBaseUrlError,
   OBOL_SDK_EMAIL,
   ObolSplits,
   OperatorConfigHashSigningTypes,