@atlasauth/pca-mpc 0.3.0 → 0.4.1

package/dist/net/gadget.js

@@ -0,0 +1,102 @@
+"use strict";
+/**
+ * Agreement on the joint choice-bit gadget seeds (R3-16): a signed commit-reveal with an echo round, so that ONE
+ * corrupt party cannot make the honest parties derive different gadgets and then blame each other.
+ *
+ * The plain commit-reveal (`gd-c` / `gd-o`) leaves each party's message to each peer unauthenticated beyond the TLS link,
+ * so a corrupt party can send a different commitment and seed to each honest peer. The honest parties then compute different
+ * gadgets, the triple sacrifice fails, and the forensic audit (which uses each verifier's OWN gadget) makes honest parties
+ * accuse each other while the corrupt one goes unnamed.
+ *
+ * Here every commitment and every opening is SIGNED by its sender with the sender's pinned TLS identity key. After the
+ * reveal each party echoes, to every peer, the signed values it received from each third party (`gd-e`). A receiver then
+ * checks each echoed statement against what it received directly:
+ *
+ *   - an echoed signature that does not verify is a forgery by the echoer: blame the echoer (first-hand: I can verify
+ *     the signature myself, and I need no one's word);
+ *   - an echoed statement that verifies but differs from the one I received directly from the same signer means the signer
+ *     signed two different values for the same round: blame the signer, with both signed statements as TRANSFERABLE evidence
+ *     (any third party can verify both against the signer's pinned certificate). An honest party signs one value per
+ *     round, so it can never be framed this way, and a corrupt echoer can only relay values the signer really signed.
+ *
+ * If every check passes, all honest parties hold identical seeds and so identical gadgets. A party that is silent, late
+ * or malformed is blamed by the existing receive deadline / schema checks (a local observation, see `NetAbort.deadlineMs`).
+ * With n = 2 there is no third party to equivocate towards, so the echo round is skipped.
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.gadgetStatement = exports.gadgetCommit = void 0;
+exports.agreeGadgetSeeds = agreeGadgetSeeds;
+const node_crypto_1 = require("node:crypto");
+const wire_1 = require("./wire");
+const HEX64 = /^[0-9a-f]{64}$/;
+const HEXSIG = /^[0-9a-f]{16,200}$/;
+const gadgetCommit = (sessionId, party, seed) => (0, node_crypto_1.createHash)('sha256').update('atlas-pca-mpc/gadget-commit').update(sessionId).update(String(party)).update(seed).digest('hex');
+exports.gadgetCommit = gadgetCommit;
+/** The exact bytes a party signs: domain, session, round, signer and value, length-unambiguous via JSON. */
+const gadgetStatement = (sessionId, round, signer, value) => Buffer.from(JSON.stringify(['atlas-pca-mpc/gadget-sig/v1', sessionId, round, signer, value]), 'utf8');
+exports.gadgetStatement = gadgetStatement;
+const isSigned = (x, valueRe) => typeof x === 'object' && x !== null && typeof x.v === 'string' && valueRe.test(x.v) && typeof x.s === 'string' && HEXSIG.test(x.s);
+/**
+ * Run the signed commit / reveal / echo and return every party's seed in party order (mine included).
+ * `mySeed` is injectable for tests; production passes nothing.
+ */
+async function agreeGadgetSeeds(net, n, io, mySeed = (0, node_crypto_1.randomBytes)(32)) {
+    const id = net.selfId;
+    const sid = net.sessionId;
+    const sign = (round, value) => ({ v: value, s: Buffer.from(net.sign((0, exports.gadgetStatement)(sid, round, id, value))).toString('hex') });
+    const check = (signer, round, m) => net.verify(signer, (0, exports.gadgetStatement)(sid, round, signer, m.v), Buffer.from(m.s, 'hex'));
+    const myCommit = (0, exports.gadgetCommit)(sid, id, mySeed);
+    const commits = await io.exchange('gd-c', () => sign('gd-c', myCommit), (p, raw) => {
+        if (!isSigned(raw, HEX64))
+            return io.bad(p, 'bad gadget commitment');
+        if (!check(p, 'gd-c', raw))
+            return io.bad(p, 'gadget commitment signature does not verify');
+        return raw;
+    });
+    const mySeedHex = Buffer.from(mySeed).toString('hex');
+    const opens = await io.exchange('gd-o', () => sign('gd-o', mySeedHex), (p, raw) => {
+        if (!isSigned(raw, HEX64))
+            return io.bad(p, 'bad gadget seed');
+        if (!check(p, 'gd-o', raw))
+            return io.bad(p, 'gadget seed signature does not verify');
+        if ((0, exports.gadgetCommit)(sid, p, Buffer.from(raw.v, 'hex')) !== commits.get(p).v) {
+            throw new wire_1.NetAbort('commitment', p, id, `party ${p} opened a gadget seed that does not match its commitment`);
+        }
+        return raw;
+    });
+    if (n >= 3) {
+        const others = [];
+        for (let i = 0; i < n; i++)
+            if (i !== id)
+                others.push(i);
+        await io.exchange('gd-e', (peer) => others.filter((j) => j !== peer).map((j) => ({ j, c: commits.get(j), o: opens.get(j) })), (p, raw) => {
+            const expect = others.filter((j) => j !== p);
+            if (!Array.isArray(raw) || raw.length !== expect.length)
+                return io.bad(p, 'bad gadget echo');
+            for (let k = 0; k < expect.length; k++) {
+                const e = raw[k];
+                const j = expect[k];
+                if (e === null || typeof e !== 'object' || e.j !== j || !isSigned(e.c, HEX64) || !isSigned(e.o, HEX64))
+                    return io.bad(p, 'bad gadget echo entry');
+                // a statement that does not verify under j's pinned key was forged by the echoer p
+                if (!check(j, 'gd-c', e.c) || !check(j, 'gd-o', e.o))
+                    return io.bad(p, `gadget echo carries a statement that party ${j} did not sign`);
+                const mineC = commits.get(j);
+                const mineO = opens.get(j);
+                if (e.c.v !== mineC.v || e.o.v !== mineO.v) {
+                    // both statements verify under j's key and differ: j signed two values for one round
+                    throw new wire_1.NetAbort('equivocation', j, id, `party ${j} signed different gadget ${e.c.v !== mineC.v ? 'commitments' : 'seeds'} for different parties (shown by party ${p}'s echo)`, undefined, undefined, {
+                        evidence: {
+                            signer: j,
+                            round: e.c.v !== mineC.v ? 'gd-c' : 'gd-o',
+                            statements: e.c.v !== mineC.v ? [mineC, e.c] : [mineO, e.o],
+                        },
+                    });
+                }
+            }
+            return true;
+        });
+    }
+    return Array.from({ length: n }, (_, p) => (p === id ? Uint8Array.from(mySeed) : Uint8Array.from(Buffer.from(opens.get(p).v, 'hex'))));
+}
+//# sourceMappingURL=gadget.js.map

package/dist/net/gadget.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"gadget.js","sourceRoot":"","sources":["../../src/net/gadget.ts"],"names":[],"mappings":";AAAA;;;;;;;;;;;;;;;;;;;;;;;GAuBG;;;AAyCH,4CAuEC;AA9GD,6CAAsD;AACtD,iCAAkC;AAgBlC,MAAM,KAAK,GAAG,gBAAgB,CAAC;AAC/B,MAAM,MAAM,GAAG,oBAAoB,CAAC;AAE7B,MAAM,YAAY,GAAG,CAAC,SAAiB,EAAE,KAAa,EAAE,IAAgB,EAAU,EAAE,CACzF,IAAA,wBAAU,EAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,6BAA6B,CAAC,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AADnH,QAAA,YAAY,gBACuG;AAEhI,4GAA4G;AACrG,MAAM,eAAe,GAAG,CAAC,SAAiB,EAAE,KAAsB,EAAE,MAAc,EAAE,KAAa,EAAc,EAAE,CACtH,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,6BAA6B,EAAE,SAAS,EAAE,KAAK,EAAE,MAAM,EAAE,KAAK,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC;AAD3F,QAAA,eAAe,mBAC4E;AAOxG,MAAM,QAAQ,GAAG,CAAC,CAAU,EAAE,OAAe,EAAe,EAAE,CAC5D,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC,KAAK,IAAI,IAAI,OAAQ,CAAY,CAAC,CAAC,KAAK,QAAQ,IAAI,OAAO,CAAC,IAAI,CAAE,CAAY,CAAC,CAAC,CAAC,IAAI,OAAQ,CAAY,CAAC,CAAC,KAAK,QAAQ,IAAI,MAAM,CAAC,IAAI,CAAE,CAAY,CAAC,CAAC,CAAC,CAAC;AAErL;;;GAGG;AACI,KAAK,UAAU,gBAAgB,CAAC,GAAc,EAAE,CAAS,EAAE,EAAY,EAAE,SAAqB,IAAA,yBAAW,EAAC,EAAE,CAAC;IAClH,MAAM,EAAE,GAAG,GAAG,CAAC,MAAM,CAAC;IACtB,MAAM,GAAG,GAAG,GAAG,CAAC,SAAS,CAAC;IAC1B,MAAM,IAAI,GAAG,CAAC,KAAsB,EAAE,KAAa,EAAU,EAAE,CAAC,CAAC,EAAE,CAAC,EAAE,KAAK,EAAE,CAAC,EAAE,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,IAAA,uBAAe,EAAC,GAAG,EAAE,KAAK,EAAE,EAAE,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;IACjK,MAAM,KAAK,GAAG,CAAC,MAAc,EAAE,KAAsB,EAAE,CAAS,EAAW,EAAE,CAAC,GAAG,CAAC,MAAM,CAAC,MAAM,EAAE,IAAA,uBAAe,EAAC,GAAG,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC,CAAC;IAEpK,MAAM,QAAQ,GAAG,IAAA,oBAAY,EAAC,GAAG,EAAE,EAAE,EAAE,MAAM,CAAC,CAAC;IAC/C,MAAM,OAAO,GAAG,MAAM,EAAE,CAAC,QAAQ,CAC/B,MAAM,EACN,GAAG,EAAE,CAAC,IAAI,CAAC,MAAM,EAAE,QAAQ,CAAC,EAC5B,CAAC,CAAC,EAAE,GAAG,EAAE,EAAE;QACT,IAAI,CAAC,QAAQ,CAAC,GAAG,EAAE,KAAK,CAAC;YAAE,OAAO,EAAE,CAAC,GAAG,CAAC,CAAC,EAAE,uBAAuB,CAAC,CAAC;QACrE,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,MAAM,EAAE,GAAG,CAAC;YAAE,OAAO,EAAE,CAAC,GAAG,CAAC,CAAC,EAAE,6CAA6C,CAAC,CAAC;QAC5F,OAAO,GAAG,CAAC;IACb,CAAC,CACF,CAAC;IACF,MAAM,SAAS,GAAG,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;IACtD,MAAM,KAAK,GAAG,MAAM,EAAE,CAAC,QAAQ,CAC7B,MAAM,EACN,GAAG,EAAE,CAAC,IAAI,CAAC,MAAM,EAAE,SAAS,CAAC,EAC7B,CAAC,CAAC,EAAE,GAAG,EAAE,EAAE;QACT,IAAI,CAAC,QAAQ,CAAC,GAAG,EAAE,KAAK,CAAC;YAAE,OAAO,EAAE,CAAC,GAAG,CAAC,CAAC,EAAE,iBAAiB,CAAC,CAAC;QAC/D,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,MAAM,EAAE,GAAG,CAAC;YAAE,OAAO,EAAE,CAAC,GAAG,CAAC,CAAC,EAAE,uCAAuC,CAAC,CAAC;QACtF,IAAI,IAAA,oBAAY,EAAC,GAAG,EAAE,CAAC,EAAE,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC,KAAK,OAAO,CAAC,GAAG,CAAC,CAAC,CAAE,CAAC,CAAC,EAAE,CAAC;YAC1E,MAAM,IAAI,eAAQ,CAAC,YAAY,EAAE,CAAC,EAAE,EAAE,EAAE,SAAS,CAAC,0DAA0D,CAAC,CAAC;QAChH,CAAC;QACD,OAAO,GAAG,CAAC;IACb,CAAC,CACF,CAAC;IAEF,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;QACX,MAAM,MAAM,GAAa,EAAE,CAAC;QAC5B,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE;YAAE,IAAI,CAAC,KAAK,EAAE;gBAAE,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QACzD,MAAM,EAAE,CAAC,QAAQ,CACf,MAAM,EACN,CAAC,IAAI,EAAE,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,OAAO,CAAC,GAAG,CAAC,CAAC,CAAE,EAAE,CAAC,EAAE,KAAK,CAAC,GAAG,CAAC,CAAC,CAAE,EAAE,CAAC,CAAC,EACpG,CAAC,CAAC,EAAE,GAAG,EAAE,EAAE;YACT,MAAM,MAAM,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC;YAC7C,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,GAAG,CAAC,MAAM,KAAK,MAAM,CAAC,MAAM;gBAAE,OAAO,EAAE,CAAC,GAAG,CAAC,CAAC,EAAE,iBAAiB,CAAC,CAAC;YAC7F,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,MAAM,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;gBACvC,MAAM,CAAC,GAAG,GAAG,CAAC,CAAC,CAAqD,CAAC;gBACrE,MAAM,CAAC,GAAG,MAAM,CAAC,CAAC,CAAE,CAAC;gBACrB,IAAI,CAAC,KAAK,IAAI,IAAI,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,EAAE,KAAK,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,EAAE,KAAK,CAAC;oBAAE,OAAO,EAAE,CAAC,GAAG,CAAC,CAAC,EAAE,uBAAuB,CAAC,CAAC;gBAClJ,mFAAmF;gBACnF,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC,CAAC;oBAAE,OAAO,EAAE,CAAC,GAAG,CAAC,CAAC,EAAE,8CAA8C,CAAC,eAAe,CAAC,CAAC;gBACvI,MAAM,KAAK,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC,CAAE,CAAC;gBAC9B,MAAM,KAAK,GAAG,KAAK,CAAC,GAAG,CAAC,CAAC,CAAE,CAAC;gBAC5B,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,KAAK,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,KAAK,CAAC,CAAC,EAAE,CAAC;oBAC3C,qFAAqF;oBACrF,MAAM,IAAI,eAAQ,CAChB,cAAc,EACd,CAAC,EACD,EAAE,EACF,SAAS,CAAC,4BAA4B,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,OAAO,0CAA0C,CAAC,UAAU,EACtI,SAAS,EACT,SAAS,EACT;wBACE,QAAQ,EAAE;4BACR,MAAM,EAAE,CAAC;4BACT,KAAK,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM;4BAC1C,UAAU,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,CAAC;yBAC5D;qBACF,CACF,CAAC;gBACJ,CAAC;YACH,CAAC;YACD,OAAO,IAAI,CAAC;QACd,CAAC,CACF,CAAC;IACJ,CAAC;IACD,OAAO,KAAK,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,UAAU,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAE,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;AAC1I,CAAC"}

package/dist/net/index.d.ts

@@ -0,0 +1,11 @@
+/**
+ * Networked runner for `@atlasauth/pca-mpc` (research prototype): mutual-TLS mesh, the distributed
+ * malicious-with-abort protocol (parties + trusted dealer), pairwise base-OT over the wire, and the
+ * multi-process launcher / fault-injection helpers used by the tests and the multi-host run.
+ */
+export * from './wire';
+export * from './certs';
+export * from './mesh';
+export * from './protocol';
+export * from './faults';
+export * from './launch-local';

package/dist/net/index.js

@@ -0,0 +1,28 @@
+"use strict";
+/**
+ * Networked runner for `@atlasauth/pca-mpc` (research prototype): mutual-TLS mesh, the distributed
+ * malicious-with-abort protocol (parties + trusted dealer), pairwise base-OT over the wire, and the
+ * multi-process launcher / fault-injection helpers used by the tests and the multi-host run.
+ */
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __exportStar = (this && this.__exportStar) || function(m, exports) {
+    for (var p in m) if (p !== "default" && !Object.prototype.hasOwnProperty.call(exports, p)) __createBinding(exports, m, p);
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+__exportStar(require("./wire"), exports);
+__exportStar(require("./certs"), exports);
+__exportStar(require("./mesh"), exports);
+__exportStar(require("./protocol"), exports);
+__exportStar(require("./faults"), exports);
+__exportStar(require("./launch-local"), exports);
+//# sourceMappingURL=index.js.map

package/dist/net/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/net/index.ts"],"names":[],"mappings":";AAAA;;;;GAIG;;;;;;;;;;;;;;;;AAEH,yCAAuB;AACvB,0CAAwB;AACxB,yCAAuB;AACvB,6CAA2B;AAC3B,2CAAyB;AACzB,iDAA+B"}

package/dist/net/launch-local.d.ts

@@ -0,0 +1,53 @@
+/**
+ * Multi-process launcher: spawns the dealer and each party as its own OS process (`party-main.js`) on
+ * localhost, generates a fresh per-run identity for each, optionally routes one link through a
+ * `FaultProxy`, and collects each node's one-line JSON verdict. Used by the tests and the demo script;
+ * the real multi-host run uses the same `party-main.js` with a config per host.
+ */
+import { type WireFault } from './faults';
+import type { NodeConfig } from './party-main';
+import type { DecisionVector } from '../party';
+export interface NodeOutput {
+    id: number;
+    role: 'party' | 'dealer';
+    exitCode: number | null;
+    json: any;
+    stderr: string;
+}
+export interface LaunchOptions {
+    n: number;
+    Q?: number;
+    vectors: DecisionVector[];
+    /** Path to the compiled `party-main.js`. */
+    mainJs: string;
+    recvTimeoutMs?: number;
+    /** Hard wall-clock cap for the whole run (kills stragglers; a hang is a test failure). */
+    killAfterMs?: number;
+    overrides?: Record<number, Partial<NodeConfig>>;
+    /** Route the connection `dialer -> target` through a faulty TCP proxy. */
+    wireFault?: {
+        dialer: number;
+        target: number;
+        fault: WireFault;
+    };
+    dealerSeed?: string;
+    /** `trusted-dealer` (default; spawns a dealer process) or `no-dealer` (the parties run the OT offline phase). */
+    offline?: 'trusted-dealer' | 'no-dealer';
+}
+export declare function freePort(): Promise<number>;
+export declare function launchLocal(o: LaunchOptions): Promise<{
+    outputs: NodeOutput[];
+    wallMs: number;
+    proxyLog: string[];
+}>;
+/** Two-process base-OT run (sender = node 0, receiver = node 1) over mutual TLS on localhost. */
+export declare function launchOtLocal(o: {
+    kind: 'ec' | 'lwe';
+    count: number;
+    mainJs: string;
+    recvTimeoutMs?: number;
+    killAfterMs?: number;
+}): Promise<{
+    outputs: NodeOutput[];
+    wallMs: number;
+}>;

package/dist/net/launch-local.js

@@ -0,0 +1,190 @@
+"use strict";
+/**
+ * Multi-process launcher: spawns the dealer and each party as its own OS process (`party-main.js`) on
+ * localhost, generates a fresh per-run identity for each, optionally routes one link through a
+ * `FaultProxy`, and collects each node's one-line JSON verdict. Used by the tests and the demo script;
+ * the real multi-host run uses the same `party-main.js` with a config per host.
+ */
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || (function () {
+    var ownKeys = function(o) {
+        ownKeys = Object.getOwnPropertyNames || function (o) {
+            var ar = [];
+            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
+            return ar;
+        };
+        return ownKeys(o);
+    };
+    return function (mod) {
+        if (mod && mod.__esModule) return mod;
+        var result = {};
+        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
+        __setModuleDefault(result, mod);
+        return result;
+    };
+})();
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.freePort = freePort;
+exports.launchLocal = launchLocal;
+exports.launchOtLocal = launchOtLocal;
+const node_child_process_1 = require("node:child_process");
+const node_fs_1 = require("node:fs");
+const net = __importStar(require("node:net"));
+const node_os_1 = require("node:os");
+const node_path_1 = require("node:path");
+const node_crypto_1 = require("node:crypto");
+const certs_1 = require("./certs");
+const faults_1 = require("./faults");
+const launch_support_1 = require("./launch-support");
+async function freePort() {
+    return new Promise((res, rej) => {
+        const s = net.createServer();
+        s.listen(0, '127.0.0.1', () => {
+            const p = s.address().port;
+            s.close(() => res(p));
+        });
+        s.on('error', rej);
+    });
+}
+async function launchLocal(o) {
+    const n = o.n;
+    const noDealer = o.offline === 'no-dealer';
+    const nodeCount = noDealer ? n : n + 1;
+    const dir = (0, node_fs_1.mkdtempSync)((0, node_path_1.join)((0, node_os_1.tmpdir)(), 'pca-mpc-net-'));
+    const sessionId = (0, node_crypto_1.randomBytes)(8).toString('hex');
+    const ports = await (0, launch_support_1.reservePorts)(nodeCount + 1); // distinct, held together; the last one is for the optional fault proxy
+    const ids = [];
+    for (let i = 0; i < nodeCount; i++)
+        ids.push((0, certs_1.generateIdentity)((0, node_path_1.join)(dir, `node${i}`), `mpc-node-${i}`));
+    let proxy = null;
+    let proxyPort = 0;
+    if (o.wireFault) {
+        proxyPort = ports[nodeCount];
+        proxy = new faults_1.FaultProxy(proxyPort, { host: '127.0.0.1', port: ports[o.wireFault.target] }, { ...o.wireFault.fault, ...(o.wireFault.fault.ms !== undefined ? { ms: (0, launch_support_1.T)(o.wireFault.fault.ms) } : {}) });
+        await proxy.listen();
+    }
+    const t0 = Date.now();
+    const procs = Array.from({ length: nodeCount }, (_, id) => {
+        const nodes = ids.map((x, j) => ({
+            id: j,
+            host: '127.0.0.1',
+            port: o.wireFault && id === o.wireFault.dialer && j === o.wireFault.target ? proxyPort : ports[j],
+            certPath: x.certPath,
+        }));
+        const cfg = {
+            role: !noDealer && id === n ? 'dealer' : 'party',
+            id,
+            n,
+            Q: o.Q,
+            offline: o.offline,
+            sessionId,
+            input: id < n ? o.vectors[id] : undefined,
+            listenHost: '127.0.0.1',
+            nodes,
+            keyPath: ids[id].keyPath,
+            certPath: ids[id].certPath,
+            recvTimeoutMs: (0, launch_support_1.T)(o.recvTimeoutMs ?? 30_000),
+            connectTimeoutMs: (0, launch_support_1.T)(120_000),
+            dealerSeed: id === n ? o.dealerSeed : undefined,
+            ...(o.overrides?.[id] ?? {}),
+        };
+        const hooks = cfg.behavior !== undefined || cfg.frameFault !== undefined || cfg.dealerFault !== undefined;
+        if (hooks)
+            cfg.unsafeTestHooks = true;
+        const cfgPath = (0, node_path_1.join)(dir, `cfg${id}.json`);
+        (0, node_fs_1.writeFileSync)(cfgPath, JSON.stringify(cfg));
+        const child = (0, node_child_process_1.spawn)(process.execPath, [o.mainJs, cfgPath], {
+            stdio: ['ignore', 'pipe', 'pipe'],
+            env: hooks ? { ...process.env, PCA_MPC_UNSAFE_TEST_HOOKS: '1' } : { ...process.env, PCA_MPC_UNSAFE_TEST_HOOKS: undefined },
+        });
+        let so = '';
+        let se = '';
+        child.stdout.on('data', (d) => (so += d));
+        child.stderr.on('data', (d) => (se += d));
+        return new Promise((resolve) => {
+            child.on('close', (code) => {
+                const line = so.trim().split('\n').filter(Boolean).pop();
+                let json = null; // eslint-disable-line @typescript-eslint/no-explicit-any
+                try {
+                    json = line ? JSON.parse(line) : null;
+                }
+                catch {
+                    /* leave null */
+                }
+                resolve({ id, role: !noDealer && id === n ? 'dealer' : 'party', exitCode: code, json, stderr: se.slice(0, 2000) });
+            });
+            const killer = setTimeout(() => child.kill('SIGKILL'), (0, launch_support_1.T)(o.killAfterMs ?? 120_000));
+            child.on('close', () => clearTimeout(killer));
+        });
+    });
+    const outputs = await Promise.all(procs);
+    proxy?.close();
+    const proxyLog = proxy?.log ?? [];
+    (0, node_fs_1.rmSync)(dir, { recursive: true, force: true });
+    return { outputs, wallMs: Date.now() - t0, proxyLog };
+}
+/** Two-process base-OT run (sender = node 0, receiver = node 1) over mutual TLS on localhost. */
+async function launchOtLocal(o) {
+    const dir = (0, node_fs_1.mkdtempSync)((0, node_path_1.join)((0, node_os_1.tmpdir)(), 'pca-mpc-ot-'));
+    const sessionId = (0, node_crypto_1.randomBytes)(8).toString('hex');
+    const ports = await (0, launch_support_1.reservePorts)(2);
+    const ids = [0, 1].map((i) => (0, certs_1.generateIdentity)((0, node_path_1.join)(dir, `node${i}`), `mpc-ot-${i}`));
+    const nodes = ids.map((x, j) => ({ id: j, host: '127.0.0.1', port: ports[j], certPath: x.certPath }));
+    const t0 = Date.now();
+    const procs = [0, 1].map((id) => {
+        const cfg = {
+            role: id === 0 ? 'ot-sender' : 'ot-receiver',
+            id,
+            n: 2,
+            sessionId,
+            listenHost: '127.0.0.1',
+            nodes,
+            keyPath: ids[id].keyPath,
+            certPath: ids[id].certPath,
+            recvTimeoutMs: (0, launch_support_1.T)(o.recvTimeoutMs ?? 30_000),
+            connectTimeoutMs: (0, launch_support_1.T)(120_000),
+            ot: { kind: o.kind, count: o.count },
+        };
+        const cfgPath = (0, node_path_1.join)(dir, `cfg${id}.json`);
+        (0, node_fs_1.writeFileSync)(cfgPath, JSON.stringify(cfg));
+        const child = (0, node_child_process_1.spawn)(process.execPath, [o.mainJs, cfgPath], { stdio: ['ignore', 'pipe', 'pipe'] });
+        let so = '';
+        let se = '';
+        child.stdout.on('data', (d) => (so += d));
+        child.stderr.on('data', (d) => (se += d));
+        return new Promise((resolve) => {
+            const killer = setTimeout(() => child.kill('SIGKILL'), (0, launch_support_1.T)(o.killAfterMs ?? 120_000));
+            child.on('close', (code) => {
+                clearTimeout(killer);
+                const line = so.trim().split('\n').filter(Boolean).pop();
+                let json = null; // eslint-disable-line @typescript-eslint/no-explicit-any
+                try {
+                    json = line ? JSON.parse(line) : null;
+                }
+                catch {
+                    /* leave null */
+                }
+                resolve({ id, role: id === 0 ? 'dealer' : 'party', exitCode: code, json, stderr: se.slice(0, 2000) });
+            });
+        });
+    });
+    const outputs = await Promise.all(procs);
+    (0, node_fs_1.rmSync)(dir, { recursive: true, force: true });
+    return { outputs, wallMs: Date.now() - t0 };
+}
+//# sourceMappingURL=launch-local.js.map

package/dist/net/launch-local.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"launch-local.js","sourceRoot":"","sources":["../../src/net/launch-local.ts"],"names":[],"mappings":";AAAA;;;;;GAKG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAuCH,4BASC;AAED,kCAyEC;AAGD,sCAoDC;AAhLD,2DAA2C;AAC3C,qCAA6D;AAC7D,8CAAgC;AAChC,qCAAiC;AACjC,yCAAiC;AACjC,6CAA0C;AAC1C,mCAA2C;AAC3C,qCAAsD;AAGtD,qDAAmD;AA2B5C,KAAK,UAAU,QAAQ;IAC5B,OAAO,IAAI,OAAO,CAAC,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE;QAC9B,MAAM,CAAC,GAAG,GAAG,CAAC,YAAY,EAAE,CAAC;QAC7B,CAAC,CAAC,MAAM,CAAC,CAAC,EAAE,WAAW,EAAE,GAAG,EAAE;YAC5B,MAAM,CAAC,GAAI,CAAC,CAAC,OAAO,EAAsB,CAAC,IAAI,CAAC;YAChD,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;QACxB,CAAC,CAAC,CAAC;QACH,CAAC,CAAC,EAAE,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC;IACrB,CAAC,CAAC,CAAC;AACL,CAAC;AAEM,KAAK,UAAU,WAAW,CAAC,CAAgB;IAChD,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;IACd,MAAM,QAAQ,GAAG,CAAC,CAAC,OAAO,KAAK,WAAW,CAAC;IAC3C,MAAM,SAAS,GAAG,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC;IACvC,MAAM,GAAG,GAAG,IAAA,qBAAW,EAAC,IAAA,gBAAI,EAAC,IAAA,gBAAM,GAAE,EAAE,cAAc,CAAC,CAAC,CAAC;IACxD,MAAM,SAAS,GAAG,IAAA,yBAAW,EAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;IACjD,MAAM,KAAK,GAAG,MAAM,IAAA,6BAAY,EAAC,SAAS,GAAG,CAAC,CAAC,CAAC,CAAC,wEAAwE;IACzH,MAAM,GAAG,GAA4C,EAAE,CAAC;IACxD,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,SAAS,EAAE,CAAC,EAAE;QAAE,GAAG,CAAC,IAAI,CAAC,IAAA,wBAAgB,EAAC,IAAA,gBAAI,EAAC,GAAG,EAAE,OAAO,CAAC,EAAE,CAAC,EAAE,YAAY,CAAC,EAAE,CAAC,CAAC,CAAC;IACvG,IAAI,KAAK,GAAsB,IAAI,CAAC;IACpC,IAAI,SAAS,GAAG,CAAC,CAAC;IAClB,IAAI,CAAC,CAAC,SAAS,EAAE,CAAC;QAChB,SAAS,GAAG,KAAK,CAAC,SAAS,CAAE,CAAC;QAC9B,KAAK,GAAG,IAAI,mBAAU,CAAC,SAAS,EAAE,EAAE,IAAI,EAAE,WAAW,EAAE,IAAI,EAAE,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC,MAAM,CAAE,EAAE,EAAE,EAAE,GAAG,CAAC,CAAC,SAAS,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC,CAAC,SAAS,CAAC,KAAK,CAAC,EAAE,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,EAAE,EAAE,IAAA,kBAAC,EAAC,CAAC,CAAC,SAAS,CAAC,KAAK,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC;QACrM,MAAM,KAAK,CAAC,MAAM,EAAE,CAAC;IACvB,CAAC;IACD,MAAM,EAAE,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IACtB,MAAM,KAAK,GAAG,KAAK,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,SAAS,EAAE,EAAE,CAAC,CAAC,EAAE,EAAE,EAAE,EAAE;QACxD,MAAM,KAAK,GAAG,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC;YAC/B,EAAE,EAAE,CAAC;YACL,IAAI,EAAE,WAAW;YACjB,IAAI,EAAE,CAAC,CAAC,SAAS,IAAI,EAAE,KAAK,CAAC,CAAC,SAAS,CAAC,MAAM,IAAI,CAAC,KAAK,CAAC,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAE;YAClG,QAAQ,EAAE,CAAC,CAAC,QAAQ;SACrB,CAAC,CAAC,CAAC;QACJ,MAAM,GAAG,GAAe;YACtB,IAAI,EAAE,CAAC,QAAQ,IAAI,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,OAAO;YAChD,EAAE;YACF,CAAC;YACD,CAAC,EAAE,CAAC,CAAC,CAAC;YACN,OAAO,EAAE,CAAC,CAAC,OAAO;YAClB,SAAS;YACT,KAAK,EAAE,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,SAAS;YACzC,UAAU,EAAE,WAAW;YACvB,KAAK;YACL,OAAO,EAAE,GAAG,CAAC,EAAE,CAAE,CAAC,OAAO;YACzB,QAAQ,EAAE,GAAG,CAAC,EAAE,CAAE,CAAC,QAAQ;YAC3B,aAAa,EAAE,IAAA,kBAAC,EAAC,CAAC,CAAC,aAAa,IAAI,MAAM,CAAC;YAC3C,gBAAgB,EAAE,IAAA,kBAAC,EAAC,OAAO,CAAC;YAC5B,UAAU,EAAE,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,SAAS;YAC/C,GAAG,CAAC,CAAC,CAAC,SAAS,EAAE,CAAC,EAAE,CAAC,IAAI,EAAE,CAAC;SAC7B,CAAC;QACF,MAAM,KAAK,GAAG,GAAG,CAAC,QAAQ,KAAK,SAAS,IAAI,GAAG,CAAC,UAAU,KAAK,SAAS,IAAI,GAAG,CAAC,WAAW,KAAK,SAAS,CAAC;QAC1G,IAAI,KAAK;YAAE,GAAG,CAAC,eAAe,GAAG,IAAI,CAAC;QACtC,MAAM,OAAO,GAAG,IAAA,gBAAI,EAAC,GAAG,EAAE,MAAM,EAAE,OAAO,CAAC,CAAC;QAC3C,IAAA,uBAAa,EAAC,OAAO,EAAE,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC;QAC5C,MAAM,KAAK,GAAG,IAAA,0BAAK,EAAC,OAAO,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,MAAM,EAAE,OAAO,CAAC,EAAE;YACzD,KAAK,EAAE,CAAC,QAAQ,EAAE,MAAM,EAAE,MAAM,CAAC;YACjC,GAAG,EAAE,KAAK,CAAC,CAAC,CAAC,EAAE,GAAG,OAAO,CAAC,GAAG,EAAE,yBAAyB,EAAE,GAAG,EAAE,CAAC,CAAC,CAAC,EAAE,GAAG,OAAO,CAAC,GAAG,EAAE,yBAAyB,EAAE,SAAS,EAAE;SAC3H,CAAC,CAAC;QACH,IAAI,EAAE,GAAG,EAAE,CAAC;QACZ,IAAI,EAAE,GAAG,EAAE,CAAC;QACZ,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC;QAC1C,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC;QAC1C,OAAO,IAAI,OAAO,CAAa,CAAC,OAAO,EAAE,EAAE;YACzC,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,IAAI,EAAE,EAAE;gBACzB,MAAM,IAAI,GAAG,EAAE,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,GAAG,EAAE,CAAC;gBACzD,IAAI,IAAI,GAAQ,IAAI,CAAC,CAAC,yDAAyD;gBAC/E,IAAI,CAAC;oBACH,IAAI,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;gBACxC,CAAC;gBAAC,MAAM,CAAC;oBACP,gBAAgB;gBAClB,CAAC;gBACD,OAAO,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC,QAAQ,IAAI,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,OAAO,EAAE,QAAQ,EAAE,IAAI,EAAE,IAAI,EAAE,MAAM,EAAE,EAAE,CAAC,KAAK,CAAC,CAAC,EAAE,IAAI,CAAC,EAAE,CAAC,CAAC;YACrH,CAAC,CAAC,CAAC;YACH,MAAM,MAAM,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,IAAA,kBAAC,EAAC,CAAC,CAAC,WAAW,IAAI,OAAO,CAAC,CAAC,CAAC;YACpF,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,GAAG,EAAE,CAAC,YAAY,CAAC,MAAM,CAAC,CAAC,CAAC;QAChD,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IACH,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;IACzC,KAAK,EAAE,KAAK,EAAE,CAAC;IACf,MAAM,QAAQ,GAAG,KAAK,EAAE,GAAG,IAAI,EAAE,CAAC;IAClC,IAAA,gBAAM,EAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;IAC9C,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,QAAQ,EAAE,CAAC;AACxD,CAAC;AAED,iGAAiG;AAC1F,KAAK,UAAU,aAAa,CAAC,CAMnC;IACC,MAAM,GAAG,GAAG,IAAA,qBAAW,EAAC,IAAA,gBAAI,EAAC,IAAA,gBAAM,GAAE,EAAE,aAAa,CAAC,CAAC,CAAC;IACvD,MAAM,SAAS,GAAG,IAAA,yBAAW,EAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;IACjD,MAAM,KAAK,GAAG,MAAM,IAAA,6BAAY,EAAC,CAAC,CAAC,CAAC;IACpC,MAAM,GAAG,GAAG,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAA,wBAAgB,EAAC,IAAA,gBAAI,EAAC,GAAG,EAAE,OAAO,CAAC,EAAE,CAAC,EAAE,UAAU,CAAC,EAAE,CAAC,CAAC,CAAC;IACtF,MAAM,KAAK,GAAG,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,EAAE,IAAI,EAAE,WAAW,EAAE,IAAI,EAAE,KAAK,CAAC,CAAC,CAAE,EAAE,QAAQ,EAAE,CAAC,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC;IACvG,MAAM,EAAE,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IACtB,MAAM,KAAK,GAAG,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,EAAE,EAAE,EAAE;QAC9B,MAAM,GAAG,GAAe;YACtB,IAAI,EAAE,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,aAAa;YAC5C,EAAE;YACF,CAAC,EAAE,CAAC;YACJ,SAAS;YACT,UAAU,EAAE,WAAW;YACvB,KAAK;YACL,OAAO,EAAE,GAAG,CAAC,EAAE,CAAE,CAAC,OAAO;YACzB,QAAQ,EAAE,GAAG,CAAC,EAAE,CAAE,CAAC,QAAQ;YAC3B,aAAa,EAAE,IAAA,kBAAC,EAAC,CAAC,CAAC,aAAa,IAAI,MAAM,CAAC;YAC3C,gBAAgB,EAAE,IAAA,kBAAC,EAAC,OAAO,CAAC;YAC5B,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC,KAAK,EAAE;SACrC,CAAC;QACF,MAAM,OAAO,GAAG,IAAA,gBAAI,EAAC,GAAG,EAAE,MAAM,EAAE,OAAO,CAAC,CAAC;QAC3C,IAAA,uBAAa,EAAC,OAAO,EAAE,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC;QAC5C,MAAM,KAAK,GAAG,IAAA,0BAAK,EAAC,OAAO,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,MAAM,EAAE,OAAO,CAAC,EAAE,EAAE,KAAK,EAAE,CAAC,QAAQ,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,CAAC,CAAC;QAClG,IAAI,EAAE,GAAG,EAAE,CAAC;QACZ,IAAI,EAAE,GAAG,EAAE,CAAC;QACZ,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC;QAC1C,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC;QAC1C,OAAO,IAAI,OAAO,CAAa,CAAC,OAAO,EAAE,EAAE;YACzC,MAAM,MAAM,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,IAAA,kBAAC,EAAC,CAAC,CAAC,WAAW,IAAI,OAAO,CAAC,CAAC,CAAC;YACpF,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,IAAI,EAAE,EAAE;gBACzB,YAAY,CAAC,MAAM,CAAC,CAAC;gBACrB,MAAM,IAAI,GAAG,EAAE,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,GAAG,EAAE,CAAC;gBACzD,IAAI,IAAI,GAAQ,IAAI,CAAC,CAAC,yDAAyD;gBAC/E,IAAI,CAAC;oBACH,IAAI,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;gBACxC,CAAC;gBAAC,MAAM,CAAC;oBACP,gBAAgB;gBAClB,CAAC;gBACD,OAAO,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,OAAO,EAAE,QAAQ,EAAE,IAAI,EAAE,IAAI,EAAE,MAAM,EAAE,EAAE,CAAC,KAAK,CAAC,CAAC,EAAE,IAAI,CAAC,EAAE,CAAC,CAAC;YACxG,CAAC,CAAC,CAAC;QACL,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IACH,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;IACzC,IAAA,gBAAM,EAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;IAC9C,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,CAAC;AAC9C,CAAC"}

package/dist/net/launch-support.d.ts

@@ -0,0 +1,6 @@
+/** Multiplier for every launcher/test timeout, from `PCA_MPC_TEST_TIMEOUT_SCALE` (default 1; raise it on a slow machine). */
+export declare const TIMEOUT_SCALE: number;
+/** Scale a duration (ms) by the one timeout knob. */
+export declare const T: (ms: number) => number;
+/** `count` DISTINCT free ephemeral ports, all held open at the same time (so they cannot collide with each other) and released together. */
+export declare function reservePorts(count: number): Promise<number[]>;

package/dist/net/launch-support.js

@@ -0,0 +1,65 @@
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || (function () {
+    var ownKeys = function(o) {
+        ownKeys = Object.getOwnPropertyNames || function (o) {
+            var ar = [];
+            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
+            return ar;
+        };
+        return ownKeys(o);
+    };
+    return function (mod) {
+        if (mod && mod.__esModule) return mod;
+        var result = {};
+        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
+        __setModuleDefault(result, mod);
+        return result;
+    };
+})();
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.T = exports.TIMEOUT_SCALE = void 0;
+exports.reservePorts = reservePorts;
+/**
+ * Small helpers the local multi-process launcher (`launch-local.ts`) shares with the tests: the one timeout-scale knob and
+ * distinct free loopback ports.
+ */
+const net = __importStar(require("node:net"));
+const parsed = Number(process.env['PCA_MPC_TEST_TIMEOUT_SCALE'] ?? '1');
+/** Multiplier for every launcher/test timeout, from `PCA_MPC_TEST_TIMEOUT_SCALE` (default 1; raise it on a slow machine). */
+exports.TIMEOUT_SCALE = Number.isFinite(parsed) && parsed > 0 ? parsed : 1;
+/** Scale a duration (ms) by the one timeout knob. */
+const T = (ms) => Math.ceil(ms * exports.TIMEOUT_SCALE);
+exports.T = T;
+/** `count` DISTINCT free ephemeral ports, all held open at the same time (so they cannot collide with each other) and released together. */
+async function reservePorts(count) {
+    const servers = [];
+    const ports = [];
+    for (let i = 0; i < count; i++) {
+        const s = net.createServer();
+        await new Promise((res, rej) => {
+            s.once('error', rej);
+            s.listen(0, '127.0.0.1', () => res());
+        });
+        servers.push(s);
+        ports.push(s.address().port);
+    }
+    await Promise.all(servers.map((s) => new Promise((r) => s.close(() => r()))));
+    return ports;
+}
+//# sourceMappingURL=launch-support.js.map

package/dist/net/launch-support.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"launch-support.js","sourceRoot":"","sources":["../../src/net/launch-support.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAcA,oCAcC;AA5BD;;;GAGG;AACH,8CAAgC;AAEhC,MAAM,MAAM,GAAG,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,4BAA4B,CAAC,IAAI,GAAG,CAAC,CAAC;AACxE,6HAA6H;AAChH,QAAA,aAAa,GAAG,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC;AAEhF,qDAAqD;AAC9C,MAAM,CAAC,GAAG,CAAC,EAAU,EAAU,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,GAAG,qBAAa,CAAC,CAAC;AAA1D,QAAA,CAAC,KAAyD;AAEvE,4IAA4I;AACrI,KAAK,UAAU,YAAY,CAAC,KAAa;IAC9C,MAAM,OAAO,GAAiB,EAAE,CAAC;IACjC,MAAM,KAAK,GAAa,EAAE,CAAC;IAC3B,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,KAAK,EAAE,CAAC,EAAE,EAAE,CAAC;QAC/B,MAAM,CAAC,GAAG,GAAG,CAAC,YAAY,EAAE,CAAC;QAC7B,MAAM,IAAI,OAAO,CAAO,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE;YACnC,CAAC,CAAC,IAAI,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC;YACrB,CAAC,CAAC,MAAM,CAAC,CAAC,EAAE,WAAW,EAAE,GAAG,EAAE,CAAC,GAAG,EAAE,CAAC,CAAC;QACxC,CAAC,CAAC,CAAC;QACH,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAChB,KAAK,CAAC,IAAI,CAAE,CAAC,CAAC,OAAO,EAAsB,CAAC,IAAI,CAAC,CAAC;IACpD,CAAC;IACD,MAAM,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,OAAO,CAAO,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;IACpF,OAAO,KAAK,CAAC;AACf,CAAC"}

package/dist/net/mesh.d.ts

@@ -0,0 +1,135 @@
+/**
+ * Authenticated, confidential, fail-closed point-to-point mesh over TLS 1.3 (research prototype).
+ *
+ *  - MUTUAL TLS with PINNED self-signed certificates (generated per run by `certs.ts`). A peer is
+ *    identified by the SHA-256 fingerprint of its certificate, never by anything it claims; the claimed
+ *    id in the hello frame must agree with the pinned fingerprint.
+ *  - Strict framing + per-link sequence numbers. A malformed frame, a duplicate / replayed frame, a
+ *    skipped (out-of-order) frame, a frame for the wrong round or session, or an oversize length
+ *    prefix aborts the whole run with an ATTRIBUTABLE `NetAbort` naming the sender.
+ *  - Timeouts on every receive (no hangs); a silent peer is blamed after `recvTimeoutMs`.
+ *  - ABORT PROPAGATION: the first failure poisons the mesh, wakes every pending receive, best-effort
+ *    sends an `abort` frame to every peer (so they stop immediately and learn who we blame), then
+ *    closes the sockets. Once failed, nothing further is sent as protocol data (fail closed).
+ *
+ * Network faults (drop, truncate, bit-flip, reorder, duplicate at the TCP level) are all caught by TLS
+ * record authentication and surface as `disconnect` on that link. Application-level misbehaviour
+ * (replay, skipped sequence, garbage, wrong round) is caught by the framing checks here. See the tests.
+ */
+import { type Frame, NetAbort } from './wire';
+export interface NodeAddr {
+    id: number;
+    host: string;
+    port: number;
+    /** The node's PUBLIC certificate (PEM): pinned trust anchor + identity. */
+    certPem: string;
+}
+/**
+ * Time source for every DECISION the mesh makes by time (receive deadlines, connect deadline, dial retry). The default is the
+ * wall clock; tests inject a virtual clock so an outcome never depends on how loaded the machine is. A deadline is always a
+ * parameter (`timeoutMs`) and is recorded on the resulting `NetAbort` (`deadlineMs`).
+ */
+export interface MeshClock {
+    now(): number;
+    /** Schedule `fn` after `ms` of clock time; returns a handle for `clearTimer`. */
+    setTimer(fn: () => void, ms: number): unknown;
+    clearTimer(handle: unknown): void;
+}
+export declare const wallClock: MeshClock;
+export interface MeshConfig {
+    /** Time source for deadlines (default: wall clock). */
+    clock?: MeshClock;
+    selfId: number;
+    /** Every node in the session (including self). Only nodes in `linkTo` get a connection. */
+    nodes: NodeAddr[];
+    /** Node ids this node maintains a link to (default: all others). */
+    linkTo?: number[];
+    keyPem: string;
+    certPem: string;
+    sessionId: string;
+    listenHost?: string;
+    connectTimeoutMs?: number;
+    recvTimeoutMs?: number;
+    /**
+     * TEST HOOK: a (malicious) sender rewriting its own outgoing frames. Refused unless `unsafeTestHooks` is
+     * also `true`; the production entry point (`party-main`) only sets that from an explicit test environment.
+     */
+    tamper?: (ev: TamperEvent) => Buffer[];
+    /** Explicit opt-in required for `tamper`. Leave unset in production. */
+    unsafeTestHooks?: boolean;
+    /** Most unread frames queued per link before the sender is blamed with `flood` (default 1024). */
+    maxInboxFrames?: number;
+    /** Most unread frame bytes queued per link before the sender is blamed with `flood` (default 32 MiB). */
+    maxInboxBytes?: number;
+}
+/** Most non-fatal observations kept in `Mesh.events`; further ones are only counted. */
+export declare const MAX_MESH_EVENTS = 64;
+export interface TamperEvent {
+    to: number;
+    frame: Frame;
+    /** The honest encoding of the frame. */
+    raw: Buffer;
+}
+export interface LinkStats {
+    peer: number;
+    appBytesOut: number;
+    appBytesIn: number;
+    framesOut: number;
+    framesIn: number;
+    tlsBytesWritten: number;
+    tlsBytesRead: number;
+}
+export declare class Mesh {
+    readonly selfId: number;
+    private readonly cfg;
+    private readonly links;
+    private readonly pinned;
+    private readonly ev;
+    private server;
+    private failure;
+    private finished;
+    private readonly clock;
+    private readonly recvTimeoutMs;
+    private readonly connectTimeoutMs;
+    /** Non-fatal observations (e.g. a TLS client rejected at the door) for evidence logs. */
+    readonly events: string[];
+    /** Observations beyond `MAX_MESH_EVENTS` that were counted but not stored. */
+    eventsDropped: number;
+    private readonly maxInboxFrames;
+    private readonly maxInboxBytes;
+    constructor(cfg: MeshConfig);
+    private note;
+    /** The session id every frame on this mesh carries (used to bind sub-protocols to this session). */
+    get sessionId(): string;
+    get peers(): number[];
+    get failed(): NetAbort | null;
+    /** Listen, dial every lower-numbered link target, and wait until all links are authenticated. */
+    connect(): Promise<void>;
+    private dial;
+    private onIncoming;
+    private attach;
+    private onData;
+    private onClosed;
+    private sendFrame;
+    /** Send a protocol message to one peer. Throws the mesh failure if already aborted (fail closed). */
+    send(to: number, round: string, payload: unknown): void;
+    broadcast(round: string, payload: unknown, to?: readonly number[]): void;
+    /** ECDSA-P256/SHA-256 signature over `data` with this node's TLS identity key (transferable: verifiable against the pinned certificate). */
+    sign(data: Uint8Array): Buffer;
+    /** Verify `sig` over `data` against the PINNED certificate of node `peer`. False on any failure (never throws). */
+    verify(peer: number, data: Uint8Array, sig: Uint8Array): boolean;
+    /** Receive the next message from `from`, which must belong to `round`. Times out; never hangs. */
+    recv(from: number, round: string, timeoutMs?: number): Promise<unknown>;
+    /** Receive `round` from every peer in `from` concurrently. A failure on any link rejects the whole call. */
+    collect(round: string, from?: readonly number[], timeoutMs?: number): Promise<Map<number, unknown>>;
+    /**
+     * Poison the mesh: record the first failure, tell EVERY peer except `skipPeer` (the one that just told us;
+     * forwarding the original accusation so an innocent bystander is never blamed for merely closing), close all.
+     */
+    fail(err: NetAbort, skipPeer?: number): void;
+    private sendFrameRaw;
+    /** Normal completion: flush and close. Peers that are still reading will see EOF only after our data. */
+    finish(): Promise<void>;
+    private closeAll;
+    stats(): LinkStats[];
+}