@cello-protocol/crypto 0.0.17 → 0.0.19

package/dist/frost/index.d.ts

@@ -6,7 +6,7 @@
  * - ThresholdSignature: result type
  * - FrostThresholdSigner: FROST/Ed25519 implementation
  * - MockThresholdSigner: test double confirming the swap point
- * - CONTEXT_SESSION_ESTABLISHMENT / CONTEXT_SEAL: domain context constants
+ * - CONTEXT_SESSION_ESTABLISHMENT / CONTEXT_SEAL / CONTEXT_PRIMARY_RELEASE: domain context constants
  *
  * Note: bootstrapKeyShares and clearTestShares are test-only — NOT exported
  * from this barrel. Test files import them directly from
@@ -18,6 +18,6 @@
  * the production package surface.
  */
 export type { IThresholdSigner, ThresholdSignature, ThresholdSignatureOk, ThresholdSignatureError, FrostThresholdSignerConfig, FrostContext, BootstrapResult, } from "./types.js";
-export { CONTEXT_SESSION_ESTABLISHMENT, CONTEXT_SEAL, } from "./types.js";
+export { CONTEXT_SESSION_ESTABLISHMENT, CONTEXT_SEAL, CONTEXT_PRIMARY_RELEASE, } from "./types.js";
 export { FrostThresholdSigner, MockThresholdSigner, } from "./frost-threshold-signer.js";
 //# sourceMappingURL=index.d.ts.map

package/dist/frost/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/frost/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;GAkBG;AAEH,YAAY,EACV,gBAAgB,EAChB,kBAAkB,EAClB,oBAAoB,EACpB,uBAAuB,EACvB,0BAA0B,EAC1B,YAAY,EACZ,eAAe,GAChB,MAAM,YAAY,CAAC;AAEpB,OAAO,EACL,6BAA6B,EAC7B,YAAY,GACb,MAAM,YAAY,CAAC;AAEpB,OAAO,EACL,oBAAoB,EACpB,mBAAmB,GACpB,MAAM,6BAA6B,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/frost/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;GAkBG;AAEH,YAAY,EACV,gBAAgB,EAChB,kBAAkB,EAClB,oBAAoB,EACpB,uBAAuB,EACvB,0BAA0B,EAC1B,YAAY,EACZ,eAAe,GAChB,MAAM,YAAY,CAAC;AAEpB,OAAO,EACL,6BAA6B,EAC7B,YAAY,EACZ,uBAAuB,GACxB,MAAM,YAAY,CAAC;AAEpB,OAAO,EACL,oBAAoB,EACpB,mBAAmB,GACpB,MAAM,6BAA6B,CAAC"}

package/dist/frost/index.js

@@ -6,7 +6,7 @@
  * - ThresholdSignature: result type
  * - FrostThresholdSigner: FROST/Ed25519 implementation
  * - MockThresholdSigner: test double confirming the swap point
- * - CONTEXT_SESSION_ESTABLISHMENT / CONTEXT_SEAL: domain context constants
+ * - CONTEXT_SESSION_ESTABLISHMENT / CONTEXT_SEAL / CONTEXT_PRIMARY_RELEASE: domain context constants
  *
  * Note: bootstrapKeyShares and clearTestShares are test-only — NOT exported
  * from this barrel. Test files import them directly from
@@ -17,6 +17,6 @@
  * directly from ./stubs.js and ./types.js to keep test infrastructure out of
  * the production package surface.
  */
-export { CONTEXT_SESSION_ESTABLISHMENT, CONTEXT_SEAL, } from "./types.js";
+export { CONTEXT_SESSION_ESTABLISHMENT, CONTEXT_SEAL, CONTEXT_PRIMARY_RELEASE, } from "./types.js";
 export { FrostThresholdSigner, MockThresholdSigner, } from "./frost-threshold-signer.js";
 //# sourceMappingURL=index.js.map

package/dist/frost/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/frost/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;GAkBG;AAYH,OAAO,EACL,6BAA6B,EAC7B,YAAY,GACb,MAAM,YAAY,CAAC;AAEpB,OAAO,EACL,oBAAoB,EACpB,mBAAmB,GACpB,MAAM,6BAA6B,CAAC"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/frost/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;GAkBG;AAYH,OAAO,EACL,6BAA6B,EAC7B,YAAY,EACZ,uBAAuB,GACxB,MAAM,YAAY,CAAC;AAEpB,OAAO,EACL,oBAAoB,EACpB,mBAAmB,GACpB,MAAM,6BAA6B,CAAC"}

package/dist/frost/types.d.ts

@@ -6,9 +6,10 @@
  * Design decisions:
  * - `IThresholdSigner` is separate from `KeyProvider`. `KeyProvider` handles K_local
  *   envelope signing; `IThresholdSigner` handles the multi-party threshold ceremony.
- * - Two domain context strings are defined (M2 only):
+ * - Domain context strings (one per message-type this ceremony machinery signs):
  *   - "cello-frost-session-establishment-v1" — session establishment TBS
  *   - "cello-frost-seal-v1"                 — conversation seal TBS
+ *   - "cello-frost-primary-release-v1"      — M8C-PRIMARY-1 device-transfer release attestation
  * - Context is prepended to the TBS before signing to achieve domain separation.
  *   FROST over ed25519 does not support a native context parameter, so we use
  *   a framed encoding: `<context>\0<tbs>`.
@@ -17,7 +18,17 @@
  */
 export declare const CONTEXT_SESSION_ESTABLISHMENT: "cello-frost-session-establishment-v1";
 export declare const CONTEXT_SEAL: "cello-frost-seal-v1";
-export type FrostContext = typeof CONTEXT_SESSION_ESTABLISHMENT | typeof CONTEXT_SEAL;
+/**
+ * M8C-PRIMARY-1: the old Primary's "share released" attestation during a device-transfer, per
+ * docs/planning/user-stories/m8c/M8C-PRIMARY-DESIGN.md (Decision 3, Pass 3). Reuses the existing
+ * ceremony machinery unchanged — only a new domain-separation string, so a signature produced for
+ * this context can never be replayed as a real seal or session-establishment signature, and vice
+ * versa. Requires the signer's OWN local FROST share to be loaded (participateInCeremony throws
+ * otherwise) — this is exactly what distinguishes a genuine old Primary (which held the share)
+ * from a Standby that received only K_local via pairing and never the share.
+ */
+export declare const CONTEXT_PRIMARY_RELEASE: "cello-frost-primary-release-v1";
+export type FrostContext = typeof CONTEXT_SESSION_ESTABLISHMENT | typeof CONTEXT_SEAL | typeof CONTEXT_PRIMARY_RELEASE;
 export type ThresholdSignatureOk = {
     readonly ok: true;
     readonly signature: Uint8Array;

package/dist/frost/types.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../src/frost/types.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;GAgBG;AAIH,eAAO,MAAM,6BAA6B,EACxC,sCAA+C,CAAC;AAClD,eAAO,MAAM,YAAY,EAAG,qBAA8B,CAAC;AAE3D,MAAM,MAAM,YAAY,GACpB,OAAO,6BAA6B,GACpC,OAAO,YAAY,CAAC;AAIxB,MAAM,MAAM,oBAAoB,GAAG;IACjC,QAAQ,CAAC,EAAE,EAAE,IAAI,CAAC;IAClB,QAAQ,CAAC,SAAS,EAAE,UAAU,CAAC;CAChC,CAAC;AAEF,MAAM,MAAM,uBAAuB,GAAG;IACpC,QAAQ,CAAC,EAAE,EAAE,KAAK,CAAC;IACnB,QAAQ,CAAC,KAAK,EAAE;QACd,QAAQ,CAAC,MAAM,EACX,2BAA2B,GAC3B,kBAAkB,GAClB,oBAAoB,CAAC;KAC1B,CAAC;CACH,CAAC;AAEF,MAAM,MAAM,kBAAkB,GAAG,oBAAoB,GAAG,uBAAuB,CAAC;AAIhF,MAAM,MAAM,qBAAqB,GAC7B;IAAE,IAAI,EAAE,kBAAkB,CAAC;IAAC,KAAK,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,MAAM,CAAA;CAAE,GAC1D;IAAE,IAAI,EAAE,uBAAuB,CAAC;IAAC,KAAK,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,MAAM,CAAA;CAAE,CAAC;AAEpE,MAAM,MAAM,wBAAwB,GAAG,CAAC,KAAK,EAAE,qBAAqB,KAAK,IAAI,CAAC;AAI9E;;;;;;;GAOG;AACH,MAAM,WAAW,gBAAgB;IAC/B;;;;;;;;;;OAUG;IACH,qBAAqB,CACnB,UAAU,EAAE,MAAM,EAClB,GAAG,EAAE,UAAU,EACf,OAAO,EAAE,YAAY,EACrB,UAAU,CAAC,EAAE,wBAAwB,GACpC,OAAO,CAAC,kBAAkB,CAAC,CAAC;IAE/B;;;;;;;;;;;OAWG;IACH,gBAAgB,IAAI,UAAU,CAAC;IAE/B;;;;;;;;;;;OAWG;IACH,eAAe,CACb,SAAS,EAAE,UAAU,EACrB,GAAG,EAAE,UAAU,EACf,OAAO,EAAE,YAAY,EACrB,SAAS,EAAE,UAAU,GACpB,OAAO,CAAC;CACZ;AAID;;;;;GAKG;AACH,MAAM,WAAW,0BAA0B;IACzC,4CAA4C;IAC5C,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,4BAA4B;IAC5B,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;IAC9B,gEAAgE;IAChE,QAAQ,CAAC,cAAc,CAAC,EAAE,MAAM,EAAE,CAAC;IACnC,0EAA0E;IAC1E,QAAQ,CAAC,kBAAkB,CAAC,EAAE,iBAAiB,EAAE,CAAC;IAClD,qEAAqE;IACrE,QAAQ,CAAC,cAAc,CAAC,EAAE,MAAM,CAAC;IACjC,0EAA0E;IAC1E,QAAQ,CAAC,iBAAiB,CAAC,EAAE,MAAM,CAAC;IACpC,qEAAqE;IACrE,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,CAAC;CAC9B;AAID;;;;;;GAMG;AACH,MAAM,WAAW,iBAAiB;IAChC,2CAA2C;IAC3C,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IAEpB;;;;OAIG;IACH,WAAW,IAAI,OAAO,CAAC;IAEvB;;;;;;;;;;OAUG;IACH,SAAS,CAAC,MAAM,EAAE,cAAc,GAAG,OAAO,CAAC,UAAU,GAAG,IAAI,CAAC,CAAC;IAE9D;;;;OAIG;IACH,kBAAkB,IAAI,OAAO,CAAC,cAAc,CAAC,CAAC;IAE9C;;;;OAIG;IACH,YAAY,CACV,MAAM,EAAE,OAAO,iCAAiC,EAAE,WAAW,EAC7D,GAAG,EAAE,OAAO,iCAAiC,EAAE,WAAW,GACzD,OAAO,CAAC,IAAI,CAAC,CAAC;CAClB;AAED,MAAM,WAAW,cAAc;IAC7B,GAAG,EAAE,OAAO,iCAAiC,EAAE,WAAW,CAAC;IAC3D,cAAc,EAAE,OAAO,iCAAiC,EAAE,gBAAgB,EAAE,CAAC;IAC7E,GAAG,EAAE,UAAU,CAAC;IAChB,gHAAgH;IAChH,UAAU,EAAE,MAAM,CAAC;CACpB;AAED,MAAM,WAAW,cAAc;IAC7B,MAAM,EAAE,MAAM,CAAC;IACf,eAAe,EAAE,OAAO,iCAAiC,EAAE,gBAAgB,CAAC;IAC5E,MAAM,EAAE,OAAO,iCAAiC,EAAE,MAAM,CAAC;CAC1D;AAID,MAAM,WAAW,eAAe;IAC9B;;;;OAIG;IACH,QAAQ,CAAC,aAAa,EAAE,UAAU,CAAC;CACpC"}
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../src/frost/types.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;GAiBG;AAIH,eAAO,MAAM,6BAA6B,EACxC,sCAA+C,CAAC;AAClD,eAAO,MAAM,YAAY,EAAG,qBAA8B,CAAC;AAC3D;;;;;;;;GAQG;AACH,eAAO,MAAM,uBAAuB,EAAG,gCAAyC,CAAC;AAEjF,MAAM,MAAM,YAAY,GACpB,OAAO,6BAA6B,GACpC,OAAO,YAAY,GACnB,OAAO,uBAAuB,CAAC;AAInC,MAAM,MAAM,oBAAoB,GAAG;IACjC,QAAQ,CAAC,EAAE,EAAE,IAAI,CAAC;IAClB,QAAQ,CAAC,SAAS,EAAE,UAAU,CAAC;CAChC,CAAC;AAEF,MAAM,MAAM,uBAAuB,GAAG;IACpC,QAAQ,CAAC,EAAE,EAAE,KAAK,CAAC;IACnB,QAAQ,CAAC,KAAK,EAAE;QACd,QAAQ,CAAC,MAAM,EACX,2BAA2B,GAC3B,kBAAkB,GAClB,oBAAoB,CAAC;KAC1B,CAAC;CACH,CAAC;AAEF,MAAM,MAAM,kBAAkB,GAAG,oBAAoB,GAAG,uBAAuB,CAAC;AAIhF,MAAM,MAAM,qBAAqB,GAC7B;IAAE,IAAI,EAAE,kBAAkB,CAAC;IAAC,KAAK,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,MAAM,CAAA;CAAE,GAC1D;IAAE,IAAI,EAAE,uBAAuB,CAAC;IAAC,KAAK,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,MAAM,CAAA;CAAE,CAAC;AAEpE,MAAM,MAAM,wBAAwB,GAAG,CAAC,KAAK,EAAE,qBAAqB,KAAK,IAAI,CAAC;AAI9E;;;;;;;GAOG;AACH,MAAM,WAAW,gBAAgB;IAC/B;;;;;;;;;;OAUG;IACH,qBAAqB,CACnB,UAAU,EAAE,MAAM,EAClB,GAAG,EAAE,UAAU,EACf,OAAO,EAAE,YAAY,EACrB,UAAU,CAAC,EAAE,wBAAwB,GACpC,OAAO,CAAC,kBAAkB,CAAC,CAAC;IAE/B;;;;;;;;;;;OAWG;IACH,gBAAgB,IAAI,UAAU,CAAC;IAE/B;;;;;;;;;;;OAWG;IACH,eAAe,CACb,SAAS,EAAE,UAAU,EACrB,GAAG,EAAE,UAAU,EACf,OAAO,EAAE,YAAY,EACrB,SAAS,EAAE,UAAU,GACpB,OAAO,CAAC;CACZ;AAID;;;;;GAKG;AACH,MAAM,WAAW,0BAA0B;IACzC,4CAA4C;IAC5C,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,4BAA4B;IAC5B,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;IAC9B,gEAAgE;IAChE,QAAQ,CAAC,cAAc,CAAC,EAAE,MAAM,EAAE,CAAC;IACnC,0EAA0E;IAC1E,QAAQ,CAAC,kBAAkB,CAAC,EAAE,iBAAiB,EAAE,CAAC;IAClD,qEAAqE;IACrE,QAAQ,CAAC,cAAc,CAAC,EAAE,MAAM,CAAC;IACjC,0EAA0E;IAC1E,QAAQ,CAAC,iBAAiB,CAAC,EAAE,MAAM,CAAC;IACpC,qEAAqE;IACrE,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,CAAC;CAC9B;AAID;;;;;;GAMG;AACH,MAAM,WAAW,iBAAiB;IAChC,2CAA2C;IAC3C,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IAEpB;;;;OAIG;IACH,WAAW,IAAI,OAAO,CAAC;IAEvB;;;;;;;;;;OAUG;IACH,SAAS,CAAC,MAAM,EAAE,cAAc,GAAG,OAAO,CAAC,UAAU,GAAG,IAAI,CAAC,CAAC;IAE9D;;;;OAIG;IACH,kBAAkB,IAAI,OAAO,CAAC,cAAc,CAAC,CAAC;IAE9C;;;;OAIG;IACH,YAAY,CACV,MAAM,EAAE,OAAO,iCAAiC,EAAE,WAAW,EAC7D,GAAG,EAAE,OAAO,iCAAiC,EAAE,WAAW,GACzD,OAAO,CAAC,IAAI,CAAC,CAAC;CAClB;AAED,MAAM,WAAW,cAAc;IAC7B,GAAG,EAAE,OAAO,iCAAiC,EAAE,WAAW,CAAC;IAC3D,cAAc,EAAE,OAAO,iCAAiC,EAAE,gBAAgB,EAAE,CAAC;IAC7E,GAAG,EAAE,UAAU,CAAC;IAChB,gHAAgH;IAChH,UAAU,EAAE,MAAM,CAAC;CACpB;AAED,MAAM,WAAW,cAAc;IAC7B,MAAM,EAAE,MAAM,CAAC;IACf,eAAe,EAAE,OAAO,iCAAiC,EAAE,gBAAgB,CAAC;IAC5E,MAAM,EAAE,OAAO,iCAAiC,EAAE,MAAM,CAAC;CAC1D;AAID,MAAM,WAAW,eAAe;IAC9B;;;;OAIG;IACH,QAAQ,CAAC,aAAa,EAAE,UAAU,CAAC;CACpC"}

package/dist/frost/types.js

@@ -6,9 +6,10 @@
  * Design decisions:
  * - `IThresholdSigner` is separate from `KeyProvider`. `KeyProvider` handles K_local
  *   envelope signing; `IThresholdSigner` handles the multi-party threshold ceremony.
- * - Two domain context strings are defined (M2 only):
+ * - Domain context strings (one per message-type this ceremony machinery signs):
  *   - "cello-frost-session-establishment-v1" — session establishment TBS
  *   - "cello-frost-seal-v1"                 — conversation seal TBS
+ *   - "cello-frost-primary-release-v1"      — M8C-PRIMARY-1 device-transfer release attestation
  * - Context is prepended to the TBS before signing to achieve domain separation.
  *   FROST over ed25519 does not support a native context parameter, so we use
  *   a framed encoding: `<context>\0<tbs>`.
@@ -18,4 +19,14 @@
 // ─── Domain context strings ──────────────────────────────────────────────────
 export const CONTEXT_SESSION_ESTABLISHMENT = "cello-frost-session-establishment-v1";
 export const CONTEXT_SEAL = "cello-frost-seal-v1";
+/**
+ * M8C-PRIMARY-1: the old Primary's "share released" attestation during a device-transfer, per
+ * docs/planning/user-stories/m8c/M8C-PRIMARY-DESIGN.md (Decision 3, Pass 3). Reuses the existing
+ * ceremony machinery unchanged — only a new domain-separation string, so a signature produced for
+ * this context can never be replayed as a real seal or session-establishment signature, and vice
+ * versa. Requires the signer's OWN local FROST share to be loaded (participateInCeremony throws
+ * otherwise) — this is exactly what distinguishes a genuine old Primary (which held the share)
+ * from a Standby that received only K_local via pairing and never the share.
+ */
+export const CONTEXT_PRIMARY_RELEASE = "cello-frost-primary-release-v1";
 //# sourceMappingURL=types.js.map

package/dist/frost/types.js.map

@@ -1 +1 @@
-{"version":3,"file":"types.js","sourceRoot":"","sources":["../../src/frost/types.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;GAgBG;AAEH,gFAAgF;AAEhF,MAAM,CAAC,MAAM,6BAA6B,GACxC,sCAA+C,CAAC;AAClD,MAAM,CAAC,MAAM,YAAY,GAAG,qBAA8B,CAAC"}
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../../src/frost/types.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;GAiBG;AAEH,gFAAgF;AAEhF,MAAM,CAAC,MAAM,6BAA6B,GACxC,sCAA+C,CAAC;AAClD,MAAM,CAAC,MAAM,YAAY,GAAG,qBAA8B,CAAC;AAC3D;;;;;;;;GAQG;AACH,MAAM,CAAC,MAAM,uBAAuB,GAAG,gCAAyC,CAAC"}

package/dist/index.d.ts

@@ -6,7 +6,7 @@ export { hash, msgLeafHash, nodeHash, ctrlLeafHash, buildRelayAckTbs } from "./h
 export type { MerkleTree, LeafInput } from "./merkle.js";
 export { buildMerkleTree, merkleRoot, inclusionProof, verifyInclusion } from "./merkle.js";
 export type { IThresholdSigner, ThresholdSignature, ThresholdSignatureOk, ThresholdSignatureError, FrostThresholdSignerConfig, FrostContext, BootstrapResult, } from "./frost/index.js";
-export { CONTEXT_SESSION_ESTABLISHMENT, CONTEXT_SEAL, FrostThresholdSigner, MockThresholdSigner, } from "./frost/index.js";
+export { CONTEXT_SESSION_ESTABLISHMENT, CONTEXT_SEAL, CONTEXT_PRIMARY_RELEASE, FrostThresholdSigner, MockThresholdSigner, } from "./frost/index.js";
 export { verifyFrostSignature } from "./frost/frost-threshold-signer.js";
 export { generateRefreshContribution, verifyRefreshContribution, applyRefresh, } from "./frost/frost-resharing.js";
 export type { RefreshContribution } from "./frost/frost-resharing.js";

package/dist/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,YAAY,EAAE,WAAW,EAAE,SAAS,EAAE,SAAS,EAAE,mBAAmB,EAAE,MAAM,YAAY,CAAC;AACzF,OAAO,EAAE,mBAAmB,EAAE,eAAe,EAAE,eAAe,EAAE,kBAAkB,EAAE,iBAAiB,EAAE,MAAM,EAAE,MAAM,cAAc,CAAC;AACpI,YAAY,EAAE,cAAc,EAAE,cAAc,EAAE,YAAY,EAAE,gBAAgB,EAAE,MAAM,aAAa,CAAC;AAClG,OAAO,EACL,wBAAwB,EACxB,oBAAoB,EACpB,WAAW,EACX,oBAAoB,EACpB,SAAS,EACT,WAAW,EACX,iBAAiB,GAClB,MAAM,aAAa,CAAC;AACrB,OAAO,EAAE,IAAI,EAAE,WAAW,EAAE,QAAQ,EAAE,YAAY,EAAE,gBAAgB,EAAE,MAAM,cAAc,CAAC;AAC3F,YAAY,EAAE,UAAU,EAAE,SAAS,EAAE,MAAM,aAAa,CAAC;AACzD,OAAO,EAAE,eAAe,EAAE,UAAU,EAAE,cAAc,EAAE,eAAe,EAAE,MAAM,aAAa,CAAC;AAC3F,YAAY,EACV,gBAAgB,EAChB,kBAAkB,EAClB,oBAAoB,EACpB,uBAAuB,EACvB,0BAA0B,EAC1B,YAAY,EACZ,eAAe,GAChB,MAAM,kBAAkB,CAAC;AAC1B,OAAO,EACL,6BAA6B,EAC7B,YAAY,EACZ,oBAAoB,EACpB,mBAAmB,GACpB,MAAM,kBAAkB,CAAC;AAG1B,OAAO,EAAE,oBAAoB,EAAE,MAAM,mCAAmC,CAAC;AAIzE,OAAO,EACL,2BAA2B,EAC3B,yBAAyB,EACzB,YAAY,GACb,MAAM,4BAA4B,CAAC;AACpC,YAAY,EAAE,mBAAmB,EAAE,MAAM,4BAA4B,CAAC;AAEtE,OAAO,EACL,wBAAwB,EACxB,sBAAsB,EACtB,iCAAiC,EACjC,wBAAwB,GACzB,MAAM,mCAAmC,CAAC;AAG3C,OAAO,EAAE,aAAa,EAAE,MAAM,0BAA0B,CAAC;AAGzD,OAAO,EAAE,kBAAkB,EAAE,qBAAqB,EAAE,MAAM,iBAAiB,CAAC;AAG5E,OAAO,EAAE,yBAAyB,EAAE,gCAAgC,EAAE,MAAM,yBAAyB,CAAC;AAGtG,OAAO,EAAE,eAAe,EAAE,UAAU,EAAE,2BAA2B,EAAE,MAAM,mBAAmB,CAAC;AAG7F,YAAY,EAAE,oBAAoB,EAAE,yBAAyB,EAAE,wBAAwB,EAAE,0BAA0B,EAAE,uBAAuB,EAAE,MAAM,eAAe,CAAC;AACpK,OAAO,EAAE,qBAAqB,EAAE,cAAc,EAAE,MAAM,eAAe,CAAC;AAEtE,YAAY,EAAE,iBAAiB,EAAE,qBAAqB,EAAE,sBAAsB,EAAE,sBAAsB,EAAE,MAAM,yBAAyB,CAAC;AACxI,OAAO,EAAE,uBAAuB,EAAE,cAAc,EAAE,gBAAgB,EAAE,gBAAgB,EAAE,gBAAgB,EAAE,MAAM,yBAAyB,CAAC;AACxI,OAAO,EACL,oBAAoB,EACpB,oBAAoB,EACpB,yBAAyB,EACzB,yBAAyB,GAC1B,MAAM,sBAAsB,CAAC;AAC9B,YAAY,EAAE,kBAAkB,EAAE,oBAAoB,EAAE,MAAM,4BAA4B,CAAC;AAC3F,OAAO,EAAE,gBAAgB,EAAE,2BAA2B,EAAE,MAAM,4BAA4B,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,YAAY,EAAE,WAAW,EAAE,SAAS,EAAE,SAAS,EAAE,mBAAmB,EAAE,MAAM,YAAY,CAAC;AACzF,OAAO,EAAE,mBAAmB,EAAE,eAAe,EAAE,eAAe,EAAE,kBAAkB,EAAE,iBAAiB,EAAE,MAAM,EAAE,MAAM,cAAc,CAAC;AACpI,YAAY,EAAE,cAAc,EAAE,cAAc,EAAE,YAAY,EAAE,gBAAgB,EAAE,MAAM,aAAa,CAAC;AAClG,OAAO,EACL,wBAAwB,EACxB,oBAAoB,EACpB,WAAW,EACX,oBAAoB,EACpB,SAAS,EACT,WAAW,EACX,iBAAiB,GAClB,MAAM,aAAa,CAAC;AACrB,OAAO,EAAE,IAAI,EAAE,WAAW,EAAE,QAAQ,EAAE,YAAY,EAAE,gBAAgB,EAAE,MAAM,cAAc,CAAC;AAC3F,YAAY,EAAE,UAAU,EAAE,SAAS,EAAE,MAAM,aAAa,CAAC;AACzD,OAAO,EAAE,eAAe,EAAE,UAAU,EAAE,cAAc,EAAE,eAAe,EAAE,MAAM,aAAa,CAAC;AAC3F,YAAY,EACV,gBAAgB,EAChB,kBAAkB,EAClB,oBAAoB,EACpB,uBAAuB,EACvB,0BAA0B,EAC1B,YAAY,EACZ,eAAe,GAChB,MAAM,kBAAkB,CAAC;AAC1B,OAAO,EACL,6BAA6B,EAC7B,YAAY,EACZ,uBAAuB,EACvB,oBAAoB,EACpB,mBAAmB,GACpB,MAAM,kBAAkB,CAAC;AAG1B,OAAO,EAAE,oBAAoB,EAAE,MAAM,mCAAmC,CAAC;AAIzE,OAAO,EACL,2BAA2B,EAC3B,yBAAyB,EACzB,YAAY,GACb,MAAM,4BAA4B,CAAC;AACpC,YAAY,EAAE,mBAAmB,EAAE,MAAM,4BAA4B,CAAC;AAEtE,OAAO,EACL,wBAAwB,EACxB,sBAAsB,EACtB,iCAAiC,EACjC,wBAAwB,GACzB,MAAM,mCAAmC,CAAC;AAG3C,OAAO,EAAE,aAAa,EAAE,MAAM,0BAA0B,CAAC;AAGzD,OAAO,EAAE,kBAAkB,EAAE,qBAAqB,EAAE,MAAM,iBAAiB,CAAC;AAG5E,OAAO,EAAE,yBAAyB,EAAE,gCAAgC,EAAE,MAAM,yBAAyB,CAAC;AAGtG,OAAO,EAAE,eAAe,EAAE,UAAU,EAAE,2BAA2B,EAAE,MAAM,mBAAmB,CAAC;AAG7F,YAAY,EAAE,oBAAoB,EAAE,yBAAyB,EAAE,wBAAwB,EAAE,0BAA0B,EAAE,uBAAuB,EAAE,MAAM,eAAe,CAAC;AACpK,OAAO,EAAE,qBAAqB,EAAE,cAAc,EAAE,MAAM,eAAe,CAAC;AAEtE,YAAY,EAAE,iBAAiB,EAAE,qBAAqB,EAAE,sBAAsB,EAAE,sBAAsB,EAAE,MAAM,yBAAyB,CAAC;AACxI,OAAO,EAAE,uBAAuB,EAAE,cAAc,EAAE,gBAAgB,EAAE,gBAAgB,EAAE,gBAAgB,EAAE,MAAM,yBAAyB,CAAC;AACxI,OAAO,EACL,oBAAoB,EACpB,oBAAoB,EACpB,yBAAyB,EACzB,yBAAyB,GAC1B,MAAM,sBAAsB,CAAC;AAC9B,YAAY,EAAE,kBAAkB,EAAE,oBAAoB,EAAE,MAAM,4BAA4B,CAAC;AAC3F,OAAO,EAAE,gBAAgB,EAAE,2BAA2B,EAAE,MAAM,4BAA4B,CAAC"}

package/dist/index.js

@@ -2,7 +2,7 @@ export { InMemoryKeyProvider, FileKeyProvider, generateKeypair, generateKLocalSe
 export { InMemoryMlDsaKeyProvider, FileMlDsaKeyProvider, mlDsaKeygen, mlDsaKeygenWithBytes, mlDsaSign, mlDsaVerify, mlDsaEnsureLoaded, } from "./ml-dsa.js";
 export { hash, msgLeafHash, nodeHash, ctrlLeafHash, buildRelayAckTbs } from "./hashing.js";
 export { buildMerkleTree, merkleRoot, inclusionProof, verifyInclusion } from "./merkle.js";
-export { CONTEXT_SESSION_ESTABLISHMENT, CONTEXT_SEAL, FrostThresholdSigner, MockThresholdSigner, } from "./frost/index.js";
+export { CONTEXT_SESSION_ESTABLISHMENT, CONTEXT_SEAL, CONTEXT_PRIMARY_RELEASE, FrostThresholdSigner, MockThresholdSigner, } from "./frost/index.js";
 // SESSION-004: standalone FROST verify (no signer instance needed — used by counterparty client)
 export { verifyFrostSignature } from "./frost/frost-threshold-signer.js";
 // M8B DOD-REFRESH-1: FROST proactive share resharing (PSS) — used by the directory (its own share) and

package/dist/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,mBAAmB,EAAE,eAAe,EAAE,eAAe,EAAE,kBAAkB,EAAE,iBAAiB,EAAE,MAAM,EAAE,MAAM,cAAc,CAAC;AAEpI,OAAO,EACL,wBAAwB,EACxB,oBAAoB,EACpB,WAAW,EACX,oBAAoB,EACpB,SAAS,EACT,WAAW,EACX,iBAAiB,GAClB,MAAM,aAAa,CAAC;AACrB,OAAO,EAAE,IAAI,EAAE,WAAW,EAAE,QAAQ,EAAE,YAAY,EAAE,gBAAgB,EAAE,MAAM,cAAc,CAAC;AAE3F,OAAO,EAAE,eAAe,EAAE,UAAU,EAAE,cAAc,EAAE,eAAe,EAAE,MAAM,aAAa,CAAC;AAU3F,OAAO,EACL,6BAA6B,EAC7B,YAAY,EACZ,oBAAoB,EACpB,mBAAmB,GACpB,MAAM,kBAAkB,CAAC;AAE1B,iGAAiG;AACjG,OAAO,EAAE,oBAAoB,EAAE,MAAM,mCAAmC,CAAC;AAEzE,uGAAuG;AACvG,0FAA0F;AAC1F,OAAO,EACL,2BAA2B,EAC3B,yBAAyB,EACzB,YAAY,GACb,MAAM,4BAA4B,CAAC;AAEpC,8FAA8F;AAC9F,OAAO,EACL,wBAAwB,EACxB,sBAAsB,EACtB,iCAAiC,EACjC,wBAAwB,GACzB,MAAM,mCAAmC,CAAC;AAE3C,iFAAiF;AACjF,OAAO,EAAE,aAAa,EAAE,MAAM,0BAA0B,CAAC;AAEzD,8EAA8E;AAC9E,OAAO,EAAE,kBAAkB,EAAE,qBAAqB,EAAE,MAAM,iBAAiB,CAAC;AAE5E,oEAAoE;AACpE,OAAO,EAAE,yBAAyB,EAAE,gCAAgC,EAAE,MAAM,yBAAyB,CAAC;AAEtG,+EAA+E;AAC/E,OAAO,EAAE,eAAe,EAAE,UAAU,EAAE,2BAA2B,EAAE,MAAM,mBAAmB,CAAC;AAI7F,OAAO,EAAE,qBAAqB,EAAE,cAAc,EAAE,MAAM,eAAe,CAAC;AAGtE,OAAO,EAAE,uBAAuB,EAAE,cAAc,EAAE,gBAAgB,EAAE,gBAAgB,EAAE,gBAAgB,EAAE,MAAM,yBAAyB,CAAC;AACxI,OAAO,EACL,oBAAoB,EACpB,oBAAoB,EACpB,yBAAyB,EACzB,yBAAyB,GAC1B,MAAM,sBAAsB,CAAC;AAE9B,OAAO,EAAE,gBAAgB,EAAE,2BAA2B,EAAE,MAAM,4BAA4B,CAAC"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,mBAAmB,EAAE,eAAe,EAAE,eAAe,EAAE,kBAAkB,EAAE,iBAAiB,EAAE,MAAM,EAAE,MAAM,cAAc,CAAC;AAEpI,OAAO,EACL,wBAAwB,EACxB,oBAAoB,EACpB,WAAW,EACX,oBAAoB,EACpB,SAAS,EACT,WAAW,EACX,iBAAiB,GAClB,MAAM,aAAa,CAAC;AACrB,OAAO,EAAE,IAAI,EAAE,WAAW,EAAE,QAAQ,EAAE,YAAY,EAAE,gBAAgB,EAAE,MAAM,cAAc,CAAC;AAE3F,OAAO,EAAE,eAAe,EAAE,UAAU,EAAE,cAAc,EAAE,eAAe,EAAE,MAAM,aAAa,CAAC;AAU3F,OAAO,EACL,6BAA6B,EAC7B,YAAY,EACZ,uBAAuB,EACvB,oBAAoB,EACpB,mBAAmB,GACpB,MAAM,kBAAkB,CAAC;AAE1B,iGAAiG;AACjG,OAAO,EAAE,oBAAoB,EAAE,MAAM,mCAAmC,CAAC;AAEzE,uGAAuG;AACvG,0FAA0F;AAC1F,OAAO,EACL,2BAA2B,EAC3B,yBAAyB,EACzB,YAAY,GACb,MAAM,4BAA4B,CAAC;AAEpC,8FAA8F;AAC9F,OAAO,EACL,wBAAwB,EACxB,sBAAsB,EACtB,iCAAiC,EACjC,wBAAwB,GACzB,MAAM,mCAAmC,CAAC;AAE3C,iFAAiF;AACjF,OAAO,EAAE,aAAa,EAAE,MAAM,0BAA0B,CAAC;AAEzD,8EAA8E;AAC9E,OAAO,EAAE,kBAAkB,EAAE,qBAAqB,EAAE,MAAM,iBAAiB,CAAC;AAE5E,oEAAoE;AACpE,OAAO,EAAE,yBAAyB,EAAE,gCAAgC,EAAE,MAAM,yBAAyB,CAAC;AAEtG,+EAA+E;AAC/E,OAAO,EAAE,eAAe,EAAE,UAAU,EAAE,2BAA2B,EAAE,MAAM,mBAAmB,CAAC;AAI7F,OAAO,EAAE,qBAAqB,EAAE,cAAc,EAAE,MAAM,eAAe,CAAC;AAGtE,OAAO,EAAE,uBAAuB,EAAE,cAAc,EAAE,gBAAgB,EAAE,gBAAgB,EAAE,gBAAgB,EAAE,MAAM,yBAAyB,CAAC;AACxI,OAAO,EACL,oBAAoB,EACpB,oBAAoB,EACpB,yBAAyB,EACzB,yBAAyB,GAC1B,MAAM,sBAAsB,CAAC;AAE9B,OAAO,EAAE,gBAAgB,EAAE,2BAA2B,EAAE,MAAM,4BAA4B,CAAC"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@cello-protocol/crypto",
-  "version": "0.0.17",
+  "version": "0.0.19",
   "private": false,
   "type": "module",
   "engines": {

package/dist/frost/stubs.d.ts

@@ -1,82 +0,0 @@
-/**
- * In-process directory node stubs for FROST tests.
- *
- * CELLO-CRYPTO-003
- *
- * These stubs mimic the behavior of a real directory node's /cello/frost/1.0.0
- * protocol handler. They exercise the same ceremony protocol logic as real nodes
- * but run in-process for fast, deterministic tests.
- *
- * Stub configuration options:
- * - Normal: responds with valid partial signatures
- * - Unreachable: node is not reachable at initiation (caught by pre-ceremony check)
- * - Unresponsive: reachable at initiation, but signRound times out (returns null)
- * - InvalidResponse: returns random bytes (simulates malformed partial sig)
- */
-import type { FrostPublic, FrostSecret } from "@noble/curves/abstract/frost.js";
-import type { DirectoryNodeStub, StubSignParams, StubCommitment } from "./types.js";
-export declare class InProcessDirectoryNodeStub implements DirectoryNodeStub {
-    #private;
-    readonly id: string;
-    constructor(id: string);
-    /**
-     * Receive a FROST signing share from the bootstrap ceremony.
-     * Called by bootstrapKeyShares during setup.
-     */
-    receiveShare(secret: FrostSecret, pub: FrostPublic): Promise<void>;
-    /**
-     * TEST-ONLY: Return the stored FROST key pair for use by external test harnesses
-     * (e.g., to inject a share into a FrostDirectoryHandler via injectShareForTest).
-     *
-     * This deliberately exposes the raw FrostSecret for test setup purposes.
-     * MUST NOT be called outside of test code.
-     */
-    getShareForTest(): {
-        secret: FrostSecret;
-        pub: FrostPublic;
-    } | null;
-    /**
-     * Mark this node as unreachable at ceremony initiation.
-     * isReachable() will return false, causing the coordinator to exclude
-     * this node before any rounds begin.
-     */
-    setUnreachable(flag: boolean): void;
-    /**
-     * Mark this node as unresponsive during signing rounds.
-     * isReachable() returns true (node is connectable) but signRound returns null
-     * (simulates a timeout after connection is established).
-     */
-    setUnresponsive(flag: boolean): void;
-    /** Make this stub return random bytes (simulate malformed partial sig) */
-    setInvalidResponse(flag: boolean): void;
-    /**
-     * Returns whether this node is reachable at ceremony initiation.
-     * The coordinator uses this for the pre-ceremony availability check:
-     * if fewer than `threshold` nodes are reachable, fail immediately
-     * with DIRECTORY_BELOW_THRESHOLD.
-     */
-    isReachable(): boolean;
-    /**
-     * Generate a nonce commitment for the next signing round.
-     * Called by the coordinator before collecting partial signatures.
-     * Caches the nonce scalars for use in signRound().
-     */
-    generateCommitment(): Promise<StubCommitment>;
-    /**
-     * Participate in a signing round.
-     *
-     * Uses the nonce cached from the preceding generateCommitment() call.
-     * Returns a never-resolving Promise to simulate timeout (the coordinator's
-     * per-node timer will fire first). Returns random bytes to simulate
-     * an invalid partial sig.
-     *
-     * @returns Partial signature bytes, or a hanging Promise (simulate timeout)
-     */
-    signRound(params: StubSignParams): Promise<Uint8Array | null>;
-}
-/**
- * Create n in-process directory node stubs.
- * Each stub has a unique deterministic ID.
- */
-export declare function createInProcessStubs(n: number): InProcessDirectoryNodeStub[];
-//# sourceMappingURL=stubs.d.ts.map

package/dist/frost/stubs.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"stubs.d.ts","sourceRoot":"","sources":["../../src/frost/stubs.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAIH,OAAO,KAAK,EACV,WAAW,EACX,WAAW,EAEZ,MAAM,iCAAiC,CAAC;AACzC,OAAO,KAAK,EACV,iBAAiB,EACjB,cAAc,EACd,cAAc,EACf,MAAM,YAAY,CAAC;AAIpB,qBAAa,0BAA2B,YAAW,iBAAiB;;IAClE,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;gBAaR,EAAE,EAAE,MAAM;IAMtB;;;OAGG;IACG,YAAY,CAAC,MAAM,EAAE,WAAW,EAAE,GAAG,EAAE,WAAW,GAAG,OAAO,CAAC,IAAI,CAAC;IAIxE;;;;;;OAMG;IACH,eAAe,IAAI;QAAE,MAAM,EAAE,WAAW,CAAC;QAAC,GAAG,EAAE,WAAW,CAAA;KAAE,GAAG,IAAI;IAMnE;;;;OAIG;IACH,cAAc,CAAC,IAAI,EAAE,OAAO,GAAG,IAAI;IAInC;;;;OAIG;IACH,eAAe,CAAC,IAAI,EAAE,OAAO,GAAG,IAAI;IAIpC,0EAA0E;IAC1E,kBAAkB,CAAC,IAAI,EAAE,OAAO,GAAG,IAAI;IAMvC;;;;;OAKG;IACH,WAAW,IAAI,OAAO;IAQtB;;;;OAIG;IACG,kBAAkB,IAAI,OAAO,CAAC,cAAc,CAAC;IAcnD;;;;;;;;;OASG;IACG,SAAS,CAAC,MAAM,EAAE,cAAc,GAAG,OAAO,CAAC,UAAU,GAAG,IAAI,CAAC;CAyCpE;AAID;;;GAGG;AACH,wBAAgB,oBAAoB,CAAC,CAAC,EAAE,MAAM,GAAG,0BAA0B,EAAE,CAM5E"}

package/dist/frost/stubs.js

@@ -1,157 +0,0 @@
-/**
- * In-process directory node stubs for FROST tests.
- *
- * CELLO-CRYPTO-003
- *
- * These stubs mimic the behavior of a real directory node's /cello/frost/1.0.0
- * protocol handler. They exercise the same ceremony protocol logic as real nodes
- * but run in-process for fast, deterministic tests.
- *
- * Stub configuration options:
- * - Normal: responds with valid partial signatures
- * - Unreachable: node is not reachable at initiation (caught by pre-ceremony check)
- * - Unresponsive: reachable at initiation, but signRound times out (returns null)
- * - InvalidResponse: returns random bytes (simulates malformed partial sig)
- */
-import { ed25519_FROST } from "@noble/curves/ed25519.js";
-import { randomBytes } from "@noble/hashes/utils.js";
-// ─── InProcessDirectoryNodeStub ───────────────────────────────────────────────
-export class InProcessDirectoryNodeStub {
-    id;
-    // Signing key — received via receiveShare() during bootstrap
-    #key = null;
-    // Behavior flags
-    // #unreachable: not reachable at initiation (isReachable() → false)
-    #unreachable = false;
-    // #unresponsive: reachable at initiation, but signRound returns null (timeout simulation)
-    #unresponsive = false;
-    // #invalidResponse: returns random bytes on signRound (malformed partial sig)
-    #invalidResponse = false;
-    constructor(id) {
-        this.id = id;
-    }
-    // ─── DirectoryNodeStub: receiveShare ─────────────────────────────────────────
-    /**
-     * Receive a FROST signing share from the bootstrap ceremony.
-     * Called by bootstrapKeyShares during setup.
-     */
-    async receiveShare(secret, pub) {
-        this.#key = { secret, pub };
-    }
-    /**
-     * TEST-ONLY: Return the stored FROST key pair for use by external test harnesses
-     * (e.g., to inject a share into a FrostDirectoryHandler via injectShareForTest).
-     *
-     * This deliberately exposes the raw FrostSecret for test setup purposes.
-     * MUST NOT be called outside of test code.
-     */
-    getShareForTest() {
-        return this.#key;
-    }
-    // ─── Test control methods ────────────────────────────────────────────────────
-    /**
-     * Mark this node as unreachable at ceremony initiation.
-     * isReachable() will return false, causing the coordinator to exclude
-     * this node before any rounds begin.
-     */
-    setUnreachable(flag) {
-        this.#unreachable = flag;
-    }
-    /**
-     * Mark this node as unresponsive during signing rounds.
-     * isReachable() returns true (node is connectable) but signRound returns null
-     * (simulates a timeout after connection is established).
-     */
-    setUnresponsive(flag) {
-        this.#unresponsive = flag;
-    }
-    /** Make this stub return random bytes (simulate malformed partial sig) */
-    setInvalidResponse(flag) {
-        this.#invalidResponse = flag;
-    }
-    // ─── DirectoryNodeStub interface ─────────────────────────────────────────────
-    /**
-     * Returns whether this node is reachable at ceremony initiation.
-     * The coordinator uses this for the pre-ceremony availability check:
-     * if fewer than `threshold` nodes are reachable, fail immediately
-     * with DIRECTORY_BELOW_THRESHOLD.
-     */
-    isReachable() {
-        return !this.#unreachable;
-    }
-    // Cache the pending nonce between generateCommitment() and signRound()
-    // Per RFC 9591: nonces are one-time-use — consumed after signRound
-    #pendingNonce = null;
-    /**
-     * Generate a nonce commitment for the next signing round.
-     * Called by the coordinator before collecting partial signatures.
-     * Caches the nonce scalars for use in signRound().
-     */
-    async generateCommitment() {
-        if (!this.#key) {
-            throw new Error(`Stub ${this.id} has no key share (not bootstrapped)`);
-        }
-        const nonce = ed25519_FROST.commit(this.#key.secret);
-        // Cache nonce scalars so signRound can use them
-        this.#pendingNonce = nonce.nonces;
-        return {
-            nodeId: this.id,
-            nonceCommitment: nonce.commitments,
-            nonces: nonce.nonces,
-        };
-    }
-    /**
-     * Participate in a signing round.
-     *
-     * Uses the nonce cached from the preceding generateCommitment() call.
-     * Returns a never-resolving Promise to simulate timeout (the coordinator's
-     * per-node timer will fire first). Returns random bytes to simulate
-     * an invalid partial sig.
-     *
-     * @returns Partial signature bytes, or a hanging Promise (simulate timeout)
-     */
-    async signRound(params) {
-        // Unresponsive: simulate a node that never responds.
-        // Return a Promise that never resolves — the coordinator's roundTimeoutMs
-        // timer will fire first, treating this as a timeout.
-        if (this.#unresponsive) {
-            return new Promise(() => {
-                // intentionally never resolve — coordinator timeout fires instead
-            });
-        }
-        if (!this.#key) {
-            return null;
-        }
-        // InvalidResponse: return random bytes (not a valid partial sig)
-        if (this.#invalidResponse) {
-            return new Uint8Array(randomBytes(32));
-        }
-        // Use the nonce cached from generateCommitment()
-        if (!this.#pendingNonce) {
-            // No pending nonce — should not happen in normal ceremony flow
-            return null;
-        }
-        const nonces = this.#pendingNonce;
-        this.#pendingNonce = null; // consume nonce (one-time use per RFC 9591)
-        try {
-            const sig = ed25519_FROST.signShare(this.#key.secret, params.pub, nonces, params.commitmentList, params.msg);
-            return sig;
-        }
-        catch {
-            return null;
-        }
-    }
-}
-// ─── createInProcessStubs ─────────────────────────────────────────────────────
-/**
- * Create n in-process directory node stubs.
- * Each stub has a unique deterministic ID.
- */
-export function createInProcessStubs(n) {
-    return Array.from({ length: n }, (_, i) => {
-        // Use a stable, deterministic ID that works as a FROST identifier input
-        const id = `cello-test-node-${i.toString().padStart(4, "0")}`;
-        return new InProcessDirectoryNodeStub(id);
-    });
-}
-//# sourceMappingURL=stubs.js.map

package/dist/frost/stubs.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"stubs.js","sourceRoot":"","sources":["../../src/frost/stubs.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAEH,OAAO,EAAE,aAAa,EAAE,MAAM,0BAA0B,CAAC;AACzD,OAAO,EAAE,WAAW,EAAE,MAAM,wBAAwB,CAAC;AAYrD,iFAAiF;AAEjF,MAAM,OAAO,0BAA0B;IAC5B,EAAE,CAAS;IAEpB,6DAA6D;IAC7D,IAAI,GAAqD,IAAI,CAAC;IAE9D,iBAAiB;IACjB,oEAAoE;IACpE,YAAY,GAAG,KAAK,CAAC;IACrB,0FAA0F;IAC1F,aAAa,GAAG,KAAK,CAAC;IACtB,8EAA8E;IAC9E,gBAAgB,GAAG,KAAK,CAAC;IAEzB,YAAY,EAAU;QACpB,IAAI,CAAC,EAAE,GAAG,EAAE,CAAC;IACf,CAAC;IAED,gFAAgF;IAEhF;;;OAGG;IACH,KAAK,CAAC,YAAY,CAAC,MAAmB,EAAE,GAAgB;QACtD,IAAI,CAAC,IAAI,GAAG,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC;IAC9B,CAAC;IAED;;;;;;OAMG;IACH,eAAe;QACb,OAAO,IAAI,CAAC,IAAI,CAAC;IACnB,CAAC;IAED,gFAAgF;IAEhF;;;;OAIG;IACH,cAAc,CAAC,IAAa;QAC1B,IAAI,CAAC,YAAY,GAAG,IAAI,CAAC;IAC3B,CAAC;IAED;;;;OAIG;IACH,eAAe,CAAC,IAAa;QAC3B,IAAI,CAAC,aAAa,GAAG,IAAI,CAAC;IAC5B,CAAC;IAED,0EAA0E;IAC1E,kBAAkB,CAAC,IAAa;QAC9B,IAAI,CAAC,gBAAgB,GAAG,IAAI,CAAC;IAC/B,CAAC;IAED,gFAAgF;IAEhF;;;;;OAKG;IACH,WAAW;QACT,OAAO,CAAC,IAAI,CAAC,YAAY,CAAC;IAC5B,CAAC;IAED,uEAAuE;IACvE,mEAAmE;IACnE,aAAa,GAAkB,IAAI,CAAC;IAEpC;;;;OAIG;IACH,KAAK,CAAC,kBAAkB;QACtB,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC;YACf,MAAM,IAAI,KAAK,CAAC,QAAQ,IAAI,CAAC,EAAE,sCAAsC,CAAC,CAAC;QACzE,CAAC;QACD,MAAM,KAAK,GAAG,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QACrD,gDAAgD;QAChD,IAAI,CAAC,aAAa,GAAG,KAAK,CAAC,MAAM,CAAC;QAClC,OAAO;YACL,MAAM,EAAE,IAAI,CAAC,EAAE;YACf,eAAe,EAAE,KAAK,CAAC,WAAW;YAClC,MAAM,EAAE,KAAK,CAAC,MAAM;SACrB,CAAC;IACJ,CAAC;IAED;;;;;;;;;OASG;IACH,KAAK,CAAC,SAAS,CAAC,MAAsB;QACpC,qDAAqD;QACrD,0EAA0E;QAC1E,qDAAqD;QACrD,IAAI,IAAI,CAAC,aAAa,EAAE,CAAC;YACvB,OAAO,IAAI,OAAO,CAAoB,GAAG,EAAE;gBACzC,kEAAkE;YACpE,CAAC,CAAC,CAAC;QACL,CAAC;QAED,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC;YACf,OAAO,IAAI,CAAC;QACd,CAAC;QAED,iEAAiE;QACjE,IAAI,IAAI,CAAC,gBAAgB,EAAE,CAAC;YAC1B,OAAO,IAAI,UAAU,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC,CAAC;QACzC,CAAC;QAED,iDAAiD;QACjD,IAAI,CAAC,IAAI,CAAC,aAAa,EAAE,CAAC;YACxB,+DAA+D;YAC/D,OAAO,IAAI,CAAC;QACd,CAAC;QAED,MAAM,MAAM,GAAG,IAAI,CAAC,aAAa,CAAC;QAClC,IAAI,CAAC,aAAa,GAAG,IAAI,CAAC,CAAC,4CAA4C;QAEvE,IAAI,CAAC;YACH,MAAM,GAAG,GAAG,aAAa,CAAC,SAAS,CACjC,IAAI,CAAC,IAAI,CAAC,MAAM,EAChB,MAAM,CAAC,GAAG,EACV,MAAM,EACN,MAAM,CAAC,cAAc,EACrB,MAAM,CAAC,GAAG,CACX,CAAC;YACF,OAAO,GAAG,CAAC;QACb,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,IAAI,CAAC;QACd,CAAC;IACH,CAAC;CACF;AAED,iFAAiF;AAEjF;;;GAGG;AACH,MAAM,UAAU,oBAAoB,CAAC,CAAS;IAC5C,OAAO,KAAK,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE;QACxC,wEAAwE;QACxE,MAAM,EAAE,GAAG,mBAAmB,CAAC,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,CAAC;QAC9D,OAAO,IAAI,0BAA0B,CAAC,EAAE,CAAC,CAAC;IAC5C,CAAC,CAAC,CAAC;AACL,CAAC"}