@cello-protocol/client 0.0.21 → 0.0.23

package/dist/registration-manager.js

@@ -0,0 +1,249 @@
+/**
+ * RegistrationManager — REG-001, ML-DSA keygen, DKG
+ *
+ * Extracted from CelloClientImpl. Owns registration domain state:
+ *   #registrationState, #mlDsaProvider.
+ */
+import { Encoder } from "cbor-x";
+import * as lp from "it-length-prefixed";
+import { mlDsaKeygen, mlDsaKeygenWithBytes, FileMlDsaKeyProvider } from "@cello-protocol/crypto";
+import { NetworkDirectoryNode, runNetworkDkg } from "./network-directory-node.js";
+const CBOR_ENC = new Encoder({ tagUint8Array: false });
+export class RegistrationManager {
+    #ctx;
+    // Registration state owned by this manager
+    #registrationState = null;
+    #mlDsaProvider = null;
+    constructor(ctx) {
+        this.#ctx = ctx;
+    }
+    // ─── Public state accessors ──────────────────────────────────────────────────
+    getRegistrationState() {
+        return this.#registrationState;
+    }
+    setRegistrationState(state) {
+        this.#registrationState = state;
+    }
+    getMlDsaProvider() {
+        return this.#mlDsaProvider;
+    }
+    setMlDsaProvider(provider) {
+        this.#mlDsaProvider = provider;
+    }
+    /**
+     * Register this agent with the directory.
+     * REG-001: ML-DSA keygen → signaling stream → register_request → DKG → register_success.
+     */
+    async register(phoneStub = "", preAuthToken) {
+        // Step 1: already registered
+        if (this.#registrationState) {
+            return { error: "already_registered" };
+        }
+        // Step 2: generate or load ML-DSA-44 keypair
+        let mlDsaProvider;
+        let mlDsaSecretKeyBlob = null;
+        if (this.#ctx.mlDsaKeyFile) {
+            mlDsaProvider = await FileMlDsaKeyProvider.load(this.#ctx.mlDsaKeyFile);
+        }
+        else if (this.#ctx.persistence) {
+            const { provider, secretKeyBlob } = await mlDsaKeygenWithBytes();
+            mlDsaProvider = provider;
+            mlDsaSecretKeyBlob = secretKeyBlob;
+        }
+        else {
+            mlDsaProvider = await mlDsaKeygen();
+        }
+        const mlDsaPubkey = await mlDsaProvider.getPublicKey();
+        const mlDsaPubkeyHex = Buffer.from(mlDsaPubkey).toString("hex");
+        // Step 3: open persistent signaling stream
+        const opened = await this.#ctx.openPersistentSignalingStream();
+        if (!opened || !this.#ctx.getPersistentSignalingStream()) {
+            return { error: "directory_unreachable" };
+        }
+        // Step 4: get K_local pubkey hex
+        if (!this.#ctx.getMyPubkeyHex()) {
+            const pubkey = await this.#ctx.keyProvider.getPublicKey();
+            this.#ctx.setMyPubkeyHex(Buffer.from(pubkey).toString("hex"));
+        }
+        const kLocalPubkeyHex = this.#ctx.getMyPubkeyHex();
+        // Step 5: send register_request
+        const regRequestFrame = CBOR_ENC.encode({
+            type: "register_request",
+            phone_stub: phoneStub,
+            k_local_pubkey: kLocalPubkeyHex,
+            ml_dsa_pubkey: mlDsaPubkeyHex,
+        });
+        this.#ctx.getPersistentSignalingStream().send(lp.encode.single(regRequestFrame));
+        // Step 5a: await dkg_ready
+        const DKG_READY_TIMEOUT_MS = 15_000;
+        let dkgReadyTimeoutHandle;
+        const dkgReadyFrame = await Promise.race([
+            new Promise((resolve) => {
+                this.#ctx.setPendingDkgReadyResolve(resolve);
+            }),
+            new Promise((resolve) => {
+                dkgReadyTimeoutHandle = setTimeout(() => {
+                    this.#ctx.setPendingDkgReadyResolve(null);
+                    resolve({ type: "register_error", reason: "timeout" });
+                }, DKG_READY_TIMEOUT_MS);
+            }),
+        ]);
+        clearTimeout(dkgReadyTimeoutHandle);
+        if (dkgReadyFrame["type"] !== "dkg_ready") {
+            const reason = dkgReadyFrame["reason"] ?? "unknown";
+            if (reason === "already_registered" &&
+                dkgReadyFrame["agent_id"] &&
+                dkgReadyFrame["primary_pubkey"]) {
+                const state = {
+                    agent_id: dkgReadyFrame["agent_id"],
+                    primary_pubkey: dkgReadyFrame["primary_pubkey"],
+                    ml_dsa_pubkey: dkgReadyFrame["ml_dsa_pubkey"] ?? mlDsaPubkeyHex,
+                    registered_at: Date.now(),
+                    status: "active",
+                };
+                this.#registrationState = state;
+                this.#mlDsaProvider = mlDsaProvider;
+                if (this.#ctx.persistence && mlDsaSecretKeyBlob) {
+                    void this.#ctx.persistence.persistMlDsaKeypair({
+                        mlDsaPubkey: mlDsaPubkeyHex,
+                        secretKeyBlob: mlDsaSecretKeyBlob,
+                    });
+                    void this.#ctx.persistence.persistRegistrationState({
+                        agentId: state.agent_id,
+                        primaryPubkey: state.primary_pubkey,
+                        mlDsaPubkey: state.ml_dsa_pubkey,
+                        registeredAt: state.registered_at,
+                    });
+                }
+                return state;
+            }
+            return { error: reason };
+        }
+        // Step 5b: run real FROST DKG
+        const epochId = dkgReadyFrame["epochId"];
+        const participants = dkgReadyFrame["participants"];
+        const threshold = dkgReadyFrame["threshold"];
+        const directoryEndpoint = this.#ctx.getDirectoryEndpoint();
+        if (!directoryEndpoint) {
+            return { error: "directory_unreachable" };
+        }
+        const dirNode = new NetworkDirectoryNode({
+            id: directoryEndpoint.peer_id,
+            node: this.#ctx.node,
+            directoryPeerId: directoryEndpoint.peer_id,
+            directoryMultiaddrs: directoryEndpoint.multiaddrs,
+            logger: this.#ctx.logger,
+        });
+        void epochId;
+        const kLocalPubkeyBytes = Buffer.from(kLocalPubkeyHex, "hex");
+        let dkgPrimaryPubkeyHex;
+        try {
+            const dkgResult = await runNetworkDkg(kLocalPubkeyBytes, {
+                threshold,
+                participants,
+                directoryNodes: [dirNode],
+                preAuthToken,
+            });
+            dkgPrimaryPubkeyHex = Buffer.from(dkgResult.primaryPubkey).toString("hex");
+            this.#ctx.setThresholdSigner(dkgResult.signer);
+            this.#ctx.setMyPrimaryPubkey(new Uint8Array(dkgResult.primaryPubkey));
+            if (this.#ctx.persistence) {
+                const commitmentsCbor = CBOR_ENC.encode(dkgResult.commitments);
+                const verifyingSharesCbor = CBOR_ENC.encode(dkgResult.verifyingShares);
+                void this.#ctx.persistence.persistFrostKeyShare({
+                    epochId,
+                    primaryPubkey: dkgPrimaryPubkeyHex,
+                    identifier: dkgResult.identifier,
+                    signingShare: dkgResult.signingShare,
+                    threshold: dkgResult.threshold,
+                    participants: dkgResult.participants,
+                    commitmentsCbor,
+                    verifyingSharesCbor,
+                    dkgMethod: "network_dkg",
+                });
+            }
+        }
+        catch {
+            return { error: "dkg_failed" };
+        }
+        // Step 5c: send dkg_complete
+        const dkgCompleteFrame = CBOR_ENC.encode({
+            type: "dkg_complete",
+            primary_pubkey: dkgPrimaryPubkeyHex,
+        });
+        this.#ctx.getPersistentSignalingStream().send(lp.encode.single(dkgCompleteFrame));
+        // Step 6: await register_success or register_error
+        const REGISTER_TIMEOUT_MS = 15_000;
+        let timeoutHandle;
+        const responseWithTimeout = await Promise.race([
+            new Promise((resolve) => {
+                this.#ctx.setPendingRegisterResolve(resolve);
+            }),
+            new Promise((resolve) => {
+                timeoutHandle = setTimeout(() => {
+                    this.#ctx.setPendingRegisterResolve(null);
+                    resolve({ type: "register_error", reason: "timeout" });
+                }, REGISTER_TIMEOUT_MS);
+            }),
+        ]);
+        clearTimeout(timeoutHandle);
+        if (responseWithTimeout["type"] !== "register_success") {
+            const reason = responseWithTimeout["reason"] ?? "unknown";
+            if (reason === "already_registered" &&
+                responseWithTimeout["agent_id"] &&
+                responseWithTimeout["primary_pubkey"]) {
+                const state = {
+                    agent_id: responseWithTimeout["agent_id"],
+                    primary_pubkey: responseWithTimeout["primary_pubkey"],
+                    ml_dsa_pubkey: responseWithTimeout["ml_dsa_pubkey"] ?? mlDsaPubkeyHex,
+                    registered_at: Date.now(),
+                    status: "active",
+                };
+                this.#registrationState = state;
+                this.#mlDsaProvider = mlDsaProvider;
+                if (this.#ctx.persistence && mlDsaSecretKeyBlob) {
+                    void this.#ctx.persistence.persistMlDsaKeypair({
+                        mlDsaPubkey: mlDsaPubkeyHex,
+                        secretKeyBlob: mlDsaSecretKeyBlob,
+                    });
+                    void this.#ctx.persistence.persistRegistrationState({
+                        agentId: state.agent_id,
+                        primaryPubkey: state.primary_pubkey,
+                        mlDsaPubkey: state.ml_dsa_pubkey,
+                        registeredAt: state.registered_at,
+                    });
+                }
+                return state;
+            }
+            return { error: reason };
+        }
+        // Step 7: build RegistrationState and cache
+        const agentId = responseWithTimeout["agent_id"];
+        const primaryPubkey = responseWithTimeout["primary_pubkey"];
+        const state = {
+            agent_id: agentId,
+            primary_pubkey: primaryPubkey,
+            ml_dsa_pubkey: mlDsaPubkeyHex,
+            registered_at: Date.now(),
+            status: "active",
+        };
+        this.#registrationState = state;
+        this.#mlDsaProvider = mlDsaProvider;
+        if (this.#ctx.persistence && mlDsaSecretKeyBlob) {
+            void this.#ctx.persistence.persistMlDsaKeypair({
+                mlDsaPubkey: mlDsaPubkeyHex,
+                secretKeyBlob: mlDsaSecretKeyBlob,
+            });
+        }
+        if (this.#ctx.persistence) {
+            void this.#ctx.persistence.persistRegistrationState({
+                agentId: state.agent_id,
+                primaryPubkey: state.primary_pubkey,
+                mlDsaPubkey: state.ml_dsa_pubkey,
+                registeredAt: state.registered_at,
+            });
+        }
+        return state;
+    }
+}
+//# sourceMappingURL=registration-manager.js.map

package/dist/registration-manager.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"registration-manager.js","sourceRoot":"","sources":["../src/registration-manager.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,EAAE,OAAO,EAAE,MAAM,QAAQ,CAAC;AACjC,OAAO,KAAK,EAAE,MAAM,oBAAoB,CAAC;AACzC,OAAO,EAAE,WAAW,EAAE,oBAAoB,EAAE,oBAAoB,EAAE,MAAM,wBAAwB,CAAC;AAIjG,OAAO,EAAE,oBAAoB,EAAE,aAAa,EAAE,MAAM,6BAA6B,CAAC;AAMlF,MAAM,QAAQ,GAAG,IAAI,OAAO,CAAC,EAAE,aAAa,EAAE,KAAK,EAAE,CAAC,CAAC;AAyBvD,MAAM,OAAO,mBAAmB;IACrB,IAAI,CAAsB;IAEnC,2CAA2C;IAC3C,kBAAkB,GAA6B,IAAI,CAAC;IACpD,cAAc,GAA4B,IAAI,CAAC;IAE/C,YAAY,GAAwB;QAClC,IAAI,CAAC,IAAI,GAAG,GAAG,CAAC;IAClB,CAAC;IAED,gFAAgF;IAEhF,oBAAoB;QAClB,OAAO,IAAI,CAAC,kBAAkB,CAAC;IACjC,CAAC;IAED,oBAAoB,CAAC,KAA+B;QAClD,IAAI,CAAC,kBAAkB,GAAG,KAAK,CAAC;IAClC,CAAC;IAED,gBAAgB;QACd,OAAO,IAAI,CAAC,cAAc,CAAC;IAC7B,CAAC;IAED,gBAAgB,CAAC,QAAiC;QAChD,IAAI,CAAC,cAAc,GAAG,QAAQ,CAAC;IACjC,CAAC;IAED;;;OAGG;IACH,KAAK,CAAC,QAAQ,CAAC,YAAoB,EAAE,EAAE,YAAqB;QAC1D,6BAA6B;QAC7B,IAAI,IAAI,CAAC,kBAAkB,EAAE,CAAC;YAC5B,OAAO,EAAE,KAAK,EAAE,oBAAoB,EAAE,CAAC;QACzC,CAAC;QAED,6CAA6C;QAC7C,IAAI,aAA+B,CAAC;QACpC,IAAI,kBAAkB,GAAsB,IAAI,CAAC;QACjD,IAAI,IAAI,CAAC,IAAI,CAAC,YAAY,EAAE,CAAC;YAC3B,aAAa,GAAG,MAAM,oBAAoB,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;QAC1E,CAAC;aAAM,IAAI,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC;YACjC,MAAM,EAAE,QAAQ,EAAE,aAAa,EAAE,GAAG,MAAM,oBAAoB,EAAE,CAAC;YACjE,aAAa,GAAG,QAAQ,CAAC;YACzB,kBAAkB,GAAG,aAAa,CAAC;QACrC,CAAC;aAAM,CAAC;YACN,aAAa,GAAG,MAAM,WAAW,EAAE,CAAC;QACtC,CAAC;QACD,MAAM,WAAW,GAAG,MAAM,aAAa,CAAC,YAAY,EAAE,CAAC;QACvD,MAAM,cAAc,GAAG,MAAM,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;QAEhE,2CAA2C;QAC3C,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,6BAA6B,EAAE,CAAC;QAC/D,IAAI,CAAC,MAAM,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,4BAA4B,EAAE,EAAE,CAAC;YACzD,OAAO,EAAE,KAAK,EAAE,uBAAuB,EAAE,CAAC;QAC5C,CAAC;QAED,iCAAiC;QACjC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,cAAc,EAAE,EAAE,CAAC;YAChC,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,WAAW,CAAC,YAAY,EAAE,CAAC;YAC1D,IAAI,CAAC,IAAI,CAAC,cAAc,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC;QAChE,CAAC;QACD,MAAM,eAAe,GAAG,IAAI,CAAC,IAAI,CAAC,cAAc,EAAG,CAAC;QAEpD,gCAAgC;QAChC,MAAM,eAAe,GAAG,QAAQ,CAAC,MAAM,CAAC;YACtC,IAAI,EAAE,kBAAkB;YACxB,UAAU,EAAE,SAAS;YACrB,cAAc,EAAE,eAAe;YAC/B,aAAa,EAAE,cAAc;SAC9B,CAAe,CAAC;QACjB,IAAI,CAAC,IAAI,CAAC,4BAA4B,EAAG,CAAC,IAAI,CAAC,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC,eAAe,CAAC,CAAC,CAAC;QAElF,2BAA2B;QAC3B,MAAM,oBAAoB,GAAG,MAAM,CAAC;QACpC,IAAI,qBAAgE,CAAC;QACrE,MAAM,aAAa,GAAG,MAAM,OAAO,CAAC,IAAI,CAA0B;YAChE,IAAI,OAAO,CAA0B,CAAC,OAAO,EAAE,EAAE;gBAC/C,IAAI,CAAC,IAAI,CAAC,yBAAyB,CAAC,OAAO,CAAC,CAAC;YAC/C,CAAC,CAAC;YACF,IAAI,OAAO,CAA0B,CAAC,OAAO,EAAE,EAAE;gBAC/C,qBAAqB,GAAG,UAAU,CAAC,GAAG,EAAE;oBACtC,IAAI,CAAC,IAAI,CAAC,yBAAyB,CAAC,IAAI,CAAC,CAAC;oBAC1C,OAAO,CAAC,EAAE,IAAI,EAAE,gBAAgB,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC,CAAC;gBACzD,CAAC,EAAE,oBAAoB,CAAC,CAAC;YAC3B,CAAC,CAAC;SACH,CAAC,CAAC;QACH,YAAY,CAAC,qBAAqB,CAAC,CAAC;QAEpC,IAAI,aAAa,CAAC,MAAM,CAAC,KAAK,WAAW,EAAE,CAAC;YAC1C,MAAM,MAAM,GAAI,aAAa,CAAC,QAAQ,CAAwB,IAAI,SAAS,CAAC;YAC5E,IACE,MAAM,KAAK,oBAAoB;gBAC/B,aAAa,CAAC,UAAU,CAAC;gBACzB,aAAa,CAAC,gBAAgB,CAAC,EAC/B,CAAC;gBACD,MAAM,KAAK,GAAsB;oBAC/B,QAAQ,EAAE,aAAa,CAAC,UAAU,CAAW;oBAC7C,cAAc,EAAE,aAAa,CAAC,gBAAgB,CAAW;oBACzD,aAAa,EAAG,aAAa,CAAC,eAAe,CAAwB,IAAI,cAAc;oBACvF,aAAa,EAAE,IAAI,CAAC,GAAG,EAAE;oBACzB,MAAM,EAAE,QAAQ;iBACjB,CAAC;gBACF,IAAI,CAAC,kBAAkB,GAAG,KAAK,CAAC;gBAChC,IAAI,CAAC,cAAc,GAAG,aAAa,CAAC;gBACpC,IAAI,IAAI,CAAC,IAAI,CAAC,WAAW,IAAI,kBAAkB,EAAE,CAAC;oBAChD,KAAK,IAAI,CAAC,IAAI,CAAC,WAAW,CAAC,mBAAmB,CAAC;wBAC7C,WAAW,EAAE,cAAc;wBAC3B,aAAa,EAAE,kBAAkB;qBAClC,CAAC,CAAC;oBACH,KAAK,IAAI,CAAC,IAAI,CAAC,WAAW,CAAC,wBAAwB,CAAC;wBAClD,OAAO,EAAE,KAAK,CAAC,QAAQ;wBACvB,aAAa,EAAE,KAAK,CAAC,cAAc;wBACnC,WAAW,EAAE,KAAK,CAAC,aAAa;wBAChC,YAAY,EAAE,KAAK,CAAC,aAAa;qBAClC,CAAC,CAAC;gBACL,CAAC;gBACD,OAAO,KAAK,CAAC;YACf,CAAC;YACD,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC;QAC3B,CAAC;QAED,8BAA8B;QAC9B,MAAM,OAAO,GAAG,aAAa,CAAC,SAAS,CAAW,CAAC;QACnD,MAAM,YAAY,GAAG,aAAa,CAAC,cAAc,CAAW,CAAC;QAC7D,MAAM,SAAS,GAAG,aAAa,CAAC,WAAW,CAAW,CAAC;QACvD,MAAM,iBAAiB,GAAG,IAAI,CAAC,IAAI,CAAC,oBAAoB,EAAE,CAAC;QAC3D,IAAI,CAAC,iBAAiB,EAAE,CAAC;YACvB,OAAO,EAAE,KAAK,EAAE,uBAAuB,EAAE,CAAC;QAC5C,CAAC;QACD,MAAM,OAAO,GAAG,IAAI,oBAAoB,CAAC;YACvC,EAAE,EAAE,iBAAiB,CAAC,OAAO;YAC7B,IAAI,EAAE,IAAI,CAAC,IAAI,CAAC,IAAI;YACpB,eAAe,EAAE,iBAAiB,CAAC,OAAO;YAC1C,mBAAmB,EAAE,iBAAiB,CAAC,UAAU;YACjD,MAAM,EAAE,IAAI,CAAC,IAAI,CAAC,MAAM;SACzB,CAAC,CAAC;QACH,KAAK,OAAO,CAAC;QACb,MAAM,iBAAiB,GAAG,MAAM,CAAC,IAAI,CAAC,eAAe,EAAE,KAAK,CAAC,CAAC;QAC9D,IAAI,mBAA2B,CAAC;QAChC,IAAI,CAAC;YACH,MAAM,SAAS,GAAG,MAAM,aAAa,CAAC,iBAAiB,EAAE;gBACvD,SAAS;gBACT,YAAY;gBACZ,cAAc,EAAE,CAAC,OAAO,CAAC;gBACzB,YAAY;aACb,CAAC,CAAC;YACH,mBAAmB,GAAG,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,aAAa,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;YAC3E,IAAI,CAAC,IAAI,CAAC,kBAAkB,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC;YAC/C,IAAI,CAAC,IAAI,CAAC,kBAAkB,CAAC,IAAI,UAAU,CAAC,SAAS,CAAC,aAAa,CAAC,CAAC,CAAC;YACtE,IAAI,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC;gBAC1B,MAAM,eAAe,GAAG,QAAQ,CAAC,MAAM,CAAC,SAAS,CAAC,WAAW,CAAe,CAAC;gBAC7E,MAAM,mBAAmB,GAAG,QAAQ,CAAC,MAAM,CAAC,SAAS,CAAC,eAAe,CAAe,CAAC;gBACrF,KAAK,IAAI,CAAC,IAAI,CAAC,WAAW,CAAC,oBAAoB,CAAC;oBAC9C,OAAO;oBACP,aAAa,EAAE,mBAAmB;oBAClC,UAAU,EAAE,SAAS,CAAC,UAAU;oBAChC,YAAY,EAAE,SAAS,CAAC,YAAY;oBACpC,SAAS,EAAE,SAAS,CAAC,SAAS;oBAC9B,YAAY,EAAE,SAAS,CAAC,YAAY;oBACpC,eAAe;oBACf,mBAAmB;oBACnB,SAAS,EAAE,aAAa;iBACzB,CAAC,CAAC;YACL,CAAC;QACH,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,EAAE,KAAK,EAAE,YAAY,EAAE,CAAC;QACjC,CAAC;QAED,6BAA6B;QAC7B,MAAM,gBAAgB,GAAG,QAAQ,CAAC,MAAM,CAAC;YACvC,IAAI,EAAE,cAAc;YACpB,cAAc,EAAE,mBAAmB;SACpC,CAAe,CAAC;QACjB,IAAI,CAAC,IAAI,CAAC,4BAA4B,EAAG,CAAC,IAAI,CAAC,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC,gBAAgB,CAAC,CAAC,CAAC;QAEnF,mDAAmD;QACnD,MAAM,mBAAmB,GAAG,MAAM,CAAC;QACnC,IAAI,aAAwD,CAAC;QAC7D,MAAM,mBAAmB,GAAG,MAAM,OAAO,CAAC,IAAI,CAA0B;YACtE,IAAI,OAAO,CAA0B,CAAC,OAAO,EAAE,EAAE;gBAC/C,IAAI,CAAC,IAAI,CAAC,yBAAyB,CAAC,OAAO,CAAC,CAAC;YAC/C,CAAC,CAAC;YACF,IAAI,OAAO,CAA0B,CAAC,OAAO,EAAE,EAAE;gBAC/C,aAAa,GAAG,UAAU,CAAC,GAAG,EAAE;oBAC9B,IAAI,CAAC,IAAI,CAAC,yBAAyB,CAAC,IAAI,CAAC,CAAC;oBAC1C,OAAO,CAAC,EAAE,IAAI,EAAE,gBAAgB,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC,CAAC;gBACzD,CAAC,EAAE,mBAAmB,CAAC,CAAC;YAC1B,CAAC,CAAC;SACH,CAAC,CAAC;QACH,YAAY,CAAC,aAAa,CAAC,CAAC;QAE5B,IAAI,mBAAmB,CAAC,MAAM,CAAC,KAAK,kBAAkB,EAAE,CAAC;YACvD,MAAM,MAAM,GAAI,mBAAmB,CAAC,QAAQ,CAAwB,IAAI,SAAS,CAAC;YAClF,IACE,MAAM,KAAK,oBAAoB;gBAC/B,mBAAmB,CAAC,UAAU,CAAC;gBAC/B,mBAAmB,CAAC,gBAAgB,CAAC,EACrC,CAAC;gBACD,MAAM,KAAK,GAAsB;oBAC/B,QAAQ,EAAE,mBAAmB,CAAC,UAAU,CAAW;oBACnD,cAAc,EAAE,mBAAmB,CAAC,gBAAgB,CAAW;oBAC/D,aAAa,EAAG,mBAAmB,CAAC,eAAe,CAAwB,IAAI,cAAc;oBAC7F,aAAa,EAAE,IAAI,CAAC,GAAG,EAAE;oBACzB,MAAM,EAAE,QAAQ;iBACjB,CAAC;gBACF,IAAI,CAAC,kBAAkB,GAAG,KAAK,CAAC;gBAChC,IAAI,CAAC,cAAc,GAAG,aAAa,CAAC;gBACpC,IAAI,IAAI,CAAC,IAAI,CAAC,WAAW,IAAI,kBAAkB,EAAE,CAAC;oBAChD,KAAK,IAAI,CAAC,IAAI,CAAC,WAAW,CAAC,mBAAmB,CAAC;wBAC7C,WAAW,EAAE,cAAc;wBAC3B,aAAa,EAAE,kBAAkB;qBAClC,CAAC,CAAC;oBACH,KAAK,IAAI,CAAC,IAAI,CAAC,WAAW,CAAC,wBAAwB,CAAC;wBAClD,OAAO,EAAE,KAAK,CAAC,QAAQ;wBACvB,aAAa,EAAE,KAAK,CAAC,cAAc;wBACnC,WAAW,EAAE,KAAK,CAAC,aAAa;wBAChC,YAAY,EAAE,KAAK,CAAC,aAAa;qBAClC,CAAC,CAAC;gBACL,CAAC;gBACD,OAAO,KAAK,CAAC;YACf,CAAC;YACD,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC;QAC3B,CAAC;QAED,4CAA4C;QAC5C,MAAM,OAAO,GAAG,mBAAmB,CAAC,UAAU,CAAW,CAAC;QAC1D,MAAM,aAAa,GAAG,mBAAmB,CAAC,gBAAgB,CAAW,CAAC;QAEtE,MAAM,KAAK,GAAsB;YAC/B,QAAQ,EAAE,OAAO;YACjB,cAAc,EAAE,aAAa;YAC7B,aAAa,EAAE,cAAc;YAC7B,aAAa,EAAE,IAAI,CAAC,GAAG,EAAE;YACzB,MAAM,EAAE,QAAQ;SACjB,CAAC;QACF,IAAI,CAAC,kBAAkB,GAAG,KAAK,CAAC;QAChC,IAAI,CAAC,cAAc,GAAG,aAAa,CAAC;QACpC,IAAI,IAAI,CAAC,IAAI,CAAC,WAAW,IAAI,kBAAkB,EAAE,CAAC;YAChD,KAAK,IAAI,CAAC,IAAI,CAAC,WAAW,CAAC,mBAAmB,CAAC;gBAC7C,WAAW,EAAE,cAAc;gBAC3B,aAAa,EAAE,kBAAkB;aAClC,CAAC,CAAC;QACL,CAAC;QACD,IAAI,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC;YAC1B,KAAK,IAAI,CAAC,IAAI,CAAC,WAAW,CAAC,wBAAwB,CAAC;gBAClD,OAAO,EAAE,KAAK,CAAC,QAAQ;gBACvB,aAAa,EAAE,KAAK,CAAC,cAAc;gBACnC,WAAW,EAAE,KAAK,CAAC,aAAa;gBAChC,YAAY,EAAE,KAAK,CAAC,aAAa;aAClC,CAAC,CAAC;QACL,CAAC;QACD,OAAO,KAAK,CAAC;IACf,CAAC;CACF"}

package/dist/relay-stream-manager.d.ts

@@ -0,0 +1,136 @@
+/**
+ * RelayStreamManager — relay reader loop, reconnect logic, cross-check, content frame handling.
+ *
+ * Extracted from CelloClientImpl. Handles MSG-004 relay stream lifecycle:
+ * - #runRelayStreamReader: reads leaf_deliver, hash_submit_ack/error, gap_fill frames
+ * - #reconnectRelayStream: SESSION-006 exponential backoff reconnect
+ * - #handleInboundLeafDeliver: S2 decode, sequence/signature checks, cross-check pairing
+ * - #handleContentStream: content path receiver, cross-check trigger
+ * - #crossCheckDelivery / #drainReadyQueue: in-order delivery with prevRoot check
+ * - #desync: session desynchronization
+ * - #performRelayAuth: challenge-response auth
+ * - #performGapFillReconciliation: PERSIST-014 gap fill
+ * - #handleGapFillResponse
+ *
+ * State owned here (not in facade):
+ *   - #relayStreams, #relayRecvSeq, #reconnectInProgress
+ *   - #readyQueue, #pendingS2, #pendingContent
+ *   - #tamperedContentClaims, #pendingGapFillResolvers
+ *   - #directoryStreams
+ */
+import type { CelloNode } from "@cello-protocol/transport";
+import type { Stream } from "@libp2p/interface";
+import type { Structure2 } from "@cello-protocol/protocol-types";
+import type { Logger } from "@cello-protocol/interfaces";
+import type { KeyProvider } from "@cello-protocol/crypto";
+import type { ClientStatePersistence } from "./client-state-persistence.js";
+import type { SessionRecord, ReceivedMessage } from "./types.js";
+import type { AgentHashQueue } from "./agent-hash-queue.js";
+declare const DEFAULT_RECONNECT_TIMEOUT_MS = 60000;
+interface Structure1Fields {
+    last_seen_seq: number;
+    timestamp: number | bigint;
+}
+interface PendingS2Entry {
+    s2: Structure2;
+    s2_cbor: Uint8Array;
+    s1_fields: Structure1Fields;
+    leaf_kind: number;
+    sequence_number: number;
+    content_hash: Uint8Array;
+    is_own_send: boolean;
+    arrived_at: number;
+    timer_handle: ReturnType<typeof setTimeout>;
+    echo_resolve?: () => void;
+}
+interface PendingContentEntry {
+    content_bytes: Uint8Array;
+    arrived_at: number;
+}
+interface ReadyEntry {
+    s2: Structure2;
+    s2_cbor: Uint8Array;
+    s1_fields: Structure1Fields;
+    leaf_kind: number;
+    content_bytes: Uint8Array;
+    is_own_send: boolean;
+    echo_resolve?: () => void;
+}
+/**
+ * Narrow interface exposing only what RelayStreamManager needs from external managers.
+ * State owned by RelayStreamManager is no longer in this interface.
+ */
+export interface RelayStreamContext {
+    readonly node: CelloNode;
+    readonly keyProvider: KeyProvider;
+    readonly logger: Logger;
+    readonly persistence: ClientStatePersistence | null;
+    readonly contentGraceMs: number;
+    readonly reconnectTimeoutMs: number;
+    readonly hashQueue: AgentHashQueue | null;
+    getMyPubkeyHex(): string | null;
+    getSession(sessionIdHex: string): SessionRecord | undefined;
+    getSessions(): Map<string, SessionRecord>;
+    getPendingAckResolver(sessionIdHex: string): ((v: {
+        ok: true;
+        sequence_number: number;
+    } | {
+        ok: false;
+        reason: string;
+    }) => void) | undefined;
+    setPendingAckResolver(sessionIdHex: string, resolve: (v: {
+        ok: true;
+        sequence_number: number;
+    } | {
+        ok: false;
+        reason: string;
+    }) => void): void;
+    deletePendingAckResolver(sessionIdHex: string): void;
+    getOwnPendingContent(sessionIdHex: string): Map<string, {
+        content_bytes: Uint8Array;
+        arrived_at: number;
+    }> | undefined;
+    getOwnEchoResolvers(sessionIdHex: string): Map<number, () => void> | undefined;
+    getOutboundQueue(sessionIdHex: string): Promise<void> | undefined;
+    enqueueReceivedMessage(sessionIdHex: string, message: ReceivedMessage): void;
+    wakeReceiveWaiters(sessionIdHex: string): void;
+    enqueueSessionSealedEvent(sessionIdHex: string, sealedRoot: Uint8Array, closeTimestamp: number): void;
+    handleSealVerified(sessionIdHex: string, frame: Record<string, unknown>): void;
+    handleSessionFrostSealed(sessionIdHex: string, frame: Record<string, unknown>): void;
+    handleSealRejectedTreeMismatch(sessionIdHex: string, frame: Record<string, unknown>): void;
+    handleSealUnilateralConfirmed(sessionIdHex: string, frame: Record<string, unknown>): void;
+    handleSealUnilateralNotification(sessionIdHex: string, frame: Record<string, unknown>): void;
+    handleDirectorySessionSealed(sessionIdHex: string, frame: Record<string, unknown>, directoryPubkey: Uint8Array): void;
+    handleDirectorySessionSealRejected(sessionIdHex: string, frame: Record<string, unknown>): void;
+    onRelayDisconnected(sessionIdHex: string, myPubkeyHex: string): void;
+}
+export type { ReadyEntry, PendingS2Entry, PendingContentEntry, Structure1Fields };
+export declare class RelayStreamManager {
+    #private;
+    constructor(ctx: RelayStreamContext);
+    getRelayStream(sessionIdHex: string): Stream | undefined;
+    setRelayStream(sessionIdHex: string, stream: Stream): void;
+    deleteRelayStream(sessionIdHex: string): void;
+    getDirectoryStream(sessionIdHex: string): Stream | undefined;
+    setDirectoryStream(sessionIdHex: string, stream: Stream): void;
+    deleteDirectoryStream(sessionIdHex: string): void;
+    /** Called by SessionManager.receiveSessionAssignment to initialize per-session relay state. */
+    initSession(sessionIdHex: string): void;
+    /** Called by facade.closeSession to tear down per-session relay state. */
+    closeSession(sessionIdHex: string): void;
+    injectLeafDeliver(sessionIdHex: string, frame: Record<string, unknown>): void;
+    injectRelayDisconnect(sessionIdHex: string): void;
+    runRelayStreamReader(sessionIdHex: string, stream: Stream, myPubkeyHex: string, iter?: AsyncIterator<Uint8Array>): void;
+    reconnectRelayStream(sessionIdHex: string, myPubkeyHex: string): Promise<void>;
+    handleContentStream(stream: Stream): Promise<void>;
+    performRelayAuth(stream: Stream, myPubkey: Uint8Array): Promise<{
+        ok: true;
+        iter: AsyncIterator<Uint8Array>;
+    } | {
+        ok: false;
+        reason: "relay_auth_failed" | "relay_auth_error";
+    }>;
+    performGapFillReconciliation(sessionIdHex: string, fromSeq: number, toSeq: number, correlationId: string): Promise<void>;
+}
+export { DEFAULT_RECONNECT_TIMEOUT_MS };
+//# sourceMappingURL=relay-stream-manager.d.ts.map

package/dist/relay-stream-manager.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"relay-stream-manager.d.ts","sourceRoot":"","sources":["../src/relay-stream-manager.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;GAmBG;AAOH,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,2BAA2B,CAAC;AAC3D,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,mBAAmB,CAAC;AAChD,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,gCAAgC,CAAC;AACjE,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,4BAA4B,CAAC;AACzD,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,wBAAwB,CAAC;AAC1D,OAAO,KAAK,EAAE,sBAAsB,EAAE,MAAM,+BAA+B,CAAC;AAC5E,OAAO,KAAK,EAAE,aAAa,EAAE,eAAe,EAAE,MAAM,YAAY,CAAC;AACjE,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,uBAAuB,CAAC;AAM5D,QAAA,MAAM,4BAA4B,QAAS,CAAC;AAgC5C,UAAU,gBAAgB;IACxB,aAAa,EAAE,MAAM,CAAC;IACtB,SAAS,EAAE,MAAM,GAAG,MAAM,CAAC;CAC5B;AAED,UAAU,cAAc;IACtB,EAAE,EAAE,UAAU,CAAC;IACf,OAAO,EAAE,UAAU,CAAC;IACpB,SAAS,EAAE,gBAAgB,CAAC;IAC5B,SAAS,EAAE,MAAM,CAAC;IAClB,eAAe,EAAE,MAAM,CAAC;IACxB,YAAY,EAAE,UAAU,CAAC;IACzB,WAAW,EAAE,OAAO,CAAC;IACrB,UAAU,EAAE,MAAM,CAAC;IACnB,YAAY,EAAE,UAAU,CAAC,OAAO,UAAU,CAAC,CAAC;IAC5C,YAAY,CAAC,EAAE,MAAM,IAAI,CAAC;CAC3B;AAED,UAAU,mBAAmB;IAC3B,aAAa,EAAE,UAAU,CAAC;IAC1B,UAAU,EAAE,MAAM,CAAC;CACpB;AAED,UAAU,UAAU;IAClB,EAAE,EAAE,UAAU,CAAC;IACf,OAAO,EAAE,UAAU,CAAC;IACpB,SAAS,EAAE,gBAAgB,CAAC;IAC5B,SAAS,EAAE,MAAM,CAAC;IAClB,aAAa,EAAE,UAAU,CAAC;IAC1B,WAAW,EAAE,OAAO,CAAC;IACrB,YAAY,CAAC,EAAE,MAAM,IAAI,CAAC;CAC3B;AAED;;;GAGG;AACH,MAAM,WAAW,kBAAkB;IACjC,QAAQ,CAAC,IAAI,EAAE,SAAS,CAAC;IACzB,QAAQ,CAAC,WAAW,EAAE,WAAW,CAAC;IAClC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,WAAW,EAAE,sBAAsB,GAAG,IAAI,CAAC;IACpD,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAC;IAChC,QAAQ,CAAC,kBAAkB,EAAE,MAAM,CAAC;IACpC,QAAQ,CAAC,SAAS,EAAE,cAAc,GAAG,IAAI,CAAC;IAC1C,cAAc,IAAI,MAAM,GAAG,IAAI,CAAC;IAEhC,UAAU,CAAC,YAAY,EAAE,MAAM,GAAG,aAAa,GAAG,SAAS,CAAC;IAC5D,WAAW,IAAI,GAAG,CAAC,MAAM,EAAE,aAAa,CAAC,CAAC;IAC1C,qBAAqB,CAAC,YAAY,EAAE,MAAM,GAAG,CAAC,CAAC,CAAC,EAAE;QAAE,EAAE,EAAE,IAAI,CAAC;QAAC,eAAe,EAAE,MAAM,CAAA;KAAE,GAAG;QAAE,EAAE,EAAE,KAAK,CAAC;QAAC,MAAM,EAAE,MAAM,CAAA;KAAE,KAAK,IAAI,CAAC,GAAG,SAAS,CAAC;IAC9I,qBAAqB,CAAC,YAAY,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC,CAAC,EAAE;QAAE,EAAE,EAAE,IAAI,CAAC;QAAC,eAAe,EAAE,MAAM,CAAA;KAAE,GAAG;QAAE,EAAE,EAAE,KAAK,CAAC;QAAC,MAAM,EAAE,MAAM,CAAA;KAAE,KAAK,IAAI,GAAG,IAAI,CAAC;IAC/I,wBAAwB,CAAC,YAAY,EAAE,MAAM,GAAG,IAAI,CAAC;IACrD,oBAAoB,CAAC,YAAY,EAAE,MAAM,GAAG,GAAG,CAAC,MAAM,EAAE;QAAE,aAAa,EAAE,UAAU,CAAC;QAAC,UAAU,EAAE,MAAM,CAAA;KAAE,CAAC,GAAG,SAAS,CAAC;IACvH,mBAAmB,CAAC,YAAY,EAAE,MAAM,GAAG,GAAG,CAAC,MAAM,EAAE,MAAM,IAAI,CAAC,GAAG,SAAS,CAAC;IAC/E,gBAAgB,CAAC,YAAY,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,GAAG,SAAS,CAAC;IAElE,sBAAsB,CAAC,YAAY,EAAE,MAAM,EAAE,OAAO,EAAE,eAAe,GAAG,IAAI,CAAC;IAC7E,kBAAkB,CAAC,YAAY,EAAE,MAAM,GAAG,IAAI,CAAC;IAC/C,yBAAyB,CAAC,YAAY,EAAE,MAAM,EAAE,UAAU,EAAE,UAAU,EAAE,cAAc,EAAE,MAAM,GAAG,IAAI,CAAC;IAEtG,kBAAkB,CAAC,YAAY,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI,CAAC;IAC/E,wBAAwB,CAAC,YAAY,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI,CAAC;IACrF,8BAA8B,CAAC,YAAY,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI,CAAC;IAC3F,6BAA6B,CAAC,YAAY,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI,CAAC;IAC1F,gCAAgC,CAAC,YAAY,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI,CAAC;IAC7F,4BAA4B,CAAC,YAAY,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAAE,eAAe,EAAE,UAAU,GAAG,IAAI,CAAC;IACtH,kCAAkC,CAAC,YAAY,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI,CAAC;IAE/F,mBAAmB,CAAC,YAAY,EAAE,MAAM,EAAE,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;CACtE;AAED,YAAY,EAAE,UAAU,EAAE,cAAc,EAAE,mBAAmB,EAAE,gBAAgB,EAAE,CAAC;AAElF,qBAAa,kBAAkB;;gBAgCjB,GAAG,EAAE,kBAAkB;IAMnC,cAAc,CAAC,YAAY,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS;IAIxD,cAAc,CAAC,YAAY,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,IAAI;IAI1D,iBAAiB,CAAC,YAAY,EAAE,MAAM,GAAG,IAAI;IAI7C,kBAAkB,CAAC,YAAY,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS;IAI5D,kBAAkB,CAAC,YAAY,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,IAAI;IAI9D,qBAAqB,CAAC,YAAY,EAAE,MAAM,GAAG,IAAI;IAIjD,+FAA+F;IAC/F,WAAW,CAAC,YAAY,EAAE,MAAM,GAAG,IAAI;IAQvC,0EAA0E;IAC1E,YAAY,CAAC,YAAY,EAAE,MAAM,GAAG,IAAI;IA2BxC,iBAAiB,CAAC,YAAY,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI;IAM7E,qBAAqB,CAAC,YAAY,EAAE,MAAM,GAAG,IAAI;IAajD,oBAAoB,CAClB,YAAY,EAAE,MAAM,EACpB,MAAM,EAAE,MAAM,EACd,WAAW,EAAE,MAAM,EACnB,IAAI,CAAC,EAAE,aAAa,CAAC,UAAU,CAAC,GAC/B,IAAI;IAqED,oBAAoB,CAAC,YAAY,EAAE,MAAM,EAAE,WAAW,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IA0E9E,mBAAmB,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IA6GlD,gBAAgB,CACpB,MAAM,EAAE,MAAM,EACd,QAAQ,EAAE,UAAU,GACnB,OAAO,CAAC;QAAE,EAAE,EAAE,IAAI,CAAC;QAAC,IAAI,EAAE,aAAa,CAAC,UAAU,CAAC,CAAA;KAAE,GAAG;QAAE,EAAE,EAAE,KAAK,CAAC;QAAC,MAAM,EAAE,mBAAmB,GAAG,kBAAkB,CAAA;KAAE,CAAC;IAmUrH,4BAA4B,CAChC,YAAY,EAAE,MAAM,EACpB,OAAO,EAAE,MAAM,EACf,KAAK,EAAE,MAAM,EACb,aAAa,EAAE,MAAM,GACpB,OAAO,CAAC,IAAI,CAAC;CAqIjB;AAED,OAAO,EAAE,4BAA4B,EAAE,CAAC"}