@cello-protocol/daemon 0.0.14 → 0.0.16
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/dist/daemon.d.ts.map +1 -1
- package/dist/daemon.js +112 -14
- package/dist/daemon.js.map +1 -1
- package/dist/directory-bootstrap.d.ts +45 -0
- package/dist/directory-bootstrap.d.ts.map +1 -1
- package/dist/directory-bootstrap.js +63 -0
- package/dist/directory-bootstrap.js.map +1 -1
- package/dist/registration-context.d.ts +3 -0
- package/dist/registration-context.d.ts.map +1 -1
- package/dist/registration-context.js +8 -0
- package/dist/registration-context.js.map +1 -1
- package/dist/registration-manager.d.ts +11 -0
- package/dist/registration-manager.d.ts.map +1 -1
- package/dist/registration-manager.js +55 -12
- package/dist/registration-manager.js.map +1 -1
- package/dist/session-category.d.ts +19 -0
- package/dist/session-category.d.ts.map +1 -0
- package/dist/session-category.js +9 -0
- package/dist/session-category.js.map +1 -0
- package/dist/session-ceremony.d.ts +9 -1
- package/dist/session-ceremony.d.ts.map +1 -1
- package/dist/session-ceremony.js +34 -8
- package/dist/session-ceremony.js.map +1 -1
- package/dist/session-node-manager.d.ts +6 -0
- package/dist/session-node-manager.d.ts.map +1 -1
- package/dist/session-node-manager.js +12 -0
- package/dist/session-node-manager.js.map +1 -1
- package/dist/types.d.ts +14 -0
- package/dist/types.d.ts.map +1 -1
- package/dist/types.js.map +1 -1
- package/package.json +4 -4
|
@@ -16,6 +16,7 @@
|
|
|
16
16
|
* reachable will connect once the bootstrap endpoint comes up (the transport
|
|
17
17
|
* SignalingManager retries connect()).
|
|
18
18
|
*/
|
|
19
|
+
import type { ConsortiumNode } from "@cello-protocol/protocol-types";
|
|
19
20
|
import type { DirectoryEndpoint } from "./signaling-connect.js";
|
|
20
21
|
import type { Logger } from "./types.js";
|
|
21
22
|
/** Production directory HTTP endpoint (ALB / Route53 — ALB terminates TLS, internal HTTP). */
|
|
@@ -35,6 +36,50 @@ export declare function fetchBootstrapMultiaddr(directoryUrl: string, fetchFn?:
|
|
|
35
36
|
* "/p2p/". Returns null if absent.
|
|
36
37
|
*/
|
|
37
38
|
export declare function parsePeerIdFromMultiaddr(multiaddr: string): string | null;
|
|
39
|
+
/** A resolved consortium directory node: its manifest identity + live dial coordinate. */
|
|
40
|
+
export interface ConsortiumEndpoint {
|
|
41
|
+
/** The node's stable consortium identifier (from the manifest). */
|
|
42
|
+
nodeId: string;
|
|
43
|
+
/** The node's Ed25519 pubkey (from the manifest) — used for step-6 identity + addressing. */
|
|
44
|
+
pubkey: string;
|
|
45
|
+
/** The libp2p peer ID resolved from the node's live /bootstrap. */
|
|
46
|
+
peerId: string;
|
|
47
|
+
/** The libp2p multiaddr resolved from the node's live /bootstrap. */
|
|
48
|
+
multiaddr: string;
|
|
49
|
+
}
|
|
50
|
+
/**
|
|
51
|
+
* Validate + normalise a manifest node `endpoint` to the HTTP(S) base used for its
|
|
52
|
+
* `/bootstrap` probe, or return `null` if it is not a usable bootstrap base.
|
|
53
|
+
*
|
|
54
|
+
* CONTRACT (M8B-DECISIONS): a manifest `endpoint` is the node's HTTP(S) `/bootstrap`
|
|
55
|
+
* base — production directories serve `/bootstrap` over plaintext HTTP behind the ALB
|
|
56
|
+
* (matching PRODUCTION_DIRECTORY_URL, which is `http://…:80`). The wss libp2p DIAL
|
|
57
|
+
* address is returned BY `/bootstrap`; it is NOT the endpoint. So we deliberately do
|
|
58
|
+
* NOT accept (or port-guess) a `wss://host:443` value — mapping that to
|
|
59
|
+
* `http://host:443` would speak plaintext to the TLS port and silently fail. Anything
|
|
60
|
+
* that is not `http(s)://` (a bare multiaddr, a wss dial address, a typo) is a config
|
|
61
|
+
* error in officer-SIGNED data: return null so the caller logs it DISTINCTLY from a
|
|
62
|
+
* transient outage and never dials a wrong port. A single trailing slash is stripped
|
|
63
|
+
* (fetchBootstrapMultiaddr appends `/bootstrap`).
|
|
64
|
+
*/
|
|
65
|
+
export declare function mapEndpointToBootstrapBase(endpoint: string): string | null;
|
|
66
|
+
export interface ManifestResolveOptions {
|
|
67
|
+
logger: Logger;
|
|
68
|
+
/** Injectable fetch for testing. */
|
|
69
|
+
fetchFn?: typeof fetch;
|
|
70
|
+
}
|
|
71
|
+
/**
|
|
72
|
+
* Resolve every consortium node in the manifest's node set to a live directory
|
|
73
|
+
* endpoint by probing each node's `/bootstrap` (in parallel, order preserved).
|
|
74
|
+
*
|
|
75
|
+
* AVAILABILITY-AWARE (CLAUDE.md redundancy invariant): a node whose bootstrap is
|
|
76
|
+
* unreachable is SKIPPED with a warning — one node down must never strand the others,
|
|
77
|
+
* because a T-of-N ceremony only needs T of the N. Returns the resolved subset
|
|
78
|
+
* (possibly empty). The CALLER decides whether the resolved count meets the threshold;
|
|
79
|
+
* this function NEVER silently substitutes the single hardcoded endpoint for a missing
|
|
80
|
+
* node — that would defeat sovereignty by masking a down/forged node as healthy.
|
|
81
|
+
*/
|
|
82
|
+
export declare function manifestNodesToEndpoints(nodes: readonly ConsortiumNode[], opts: ManifestResolveOptions): Promise<ConsortiumEndpoint[]>;
|
|
38
83
|
export interface DirectoryEndpointResolverOptions {
|
|
39
84
|
logger: Logger;
|
|
40
85
|
/** Defaults to resolveDirectoryUrl(process.env). */
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"directory-bootstrap.d.ts","sourceRoot":"","sources":["../src/directory-bootstrap.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;GAiBG;AAEH,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,wBAAwB,CAAC;AAChE,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,YAAY,CAAC;AAEzC,8FAA8F;AAC9F,eAAO,MAAM,wBAAwB,2CAA2C,CAAC;AAEjF;;;GAGG;AACH,wBAAgB,mBAAmB,CAAC,GAAG,GAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,CAAe,GAAG,MAAM,CAEjG;AAED;;;GAGG;AACH,wBAAsB,uBAAuB,CAC3C,YAAY,EAAE,MAAM,EACpB,OAAO,GAAE,OAAO,KAAa,GAC5B,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,CAiBxB;AAED;;;GAGG;AACH,wBAAgB,wBAAwB,CAAC,SAAS,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAKzE;AAED,MAAM,WAAW,gCAAgC;IAC/C,MAAM,EAAE,MAAM,CAAC;IACf,oDAAoD;IACpD,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,oCAAoC;IACpC,OAAO,CAAC,EAAE,OAAO,KAAK,CAAC;CACxB;AAED;;;;;;;;GAQG;AACH,wBAAgB,+BAA+B,CAC7C,IAAI,EAAE,gCAAgC,GACrC,MAAM,OAAO,CAAC,iBAAiB,GAAG,IAAI,CAAC,CA4BzC"}
|
|
1
|
+
{"version":3,"file":"directory-bootstrap.d.ts","sourceRoot":"","sources":["../src/directory-bootstrap.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;GAiBG;AAEH,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,gCAAgC,CAAC;AACrE,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,wBAAwB,CAAC;AAChE,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,YAAY,CAAC;AAEzC,8FAA8F;AAC9F,eAAO,MAAM,wBAAwB,2CAA2C,CAAC;AAEjF;;;GAGG;AACH,wBAAgB,mBAAmB,CAAC,GAAG,GAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,CAAe,GAAG,MAAM,CAEjG;AAED;;;GAGG;AACH,wBAAsB,uBAAuB,CAC3C,YAAY,EAAE,MAAM,EACpB,OAAO,GAAE,OAAO,KAAa,GAC5B,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,CAiBxB;AAED;;;GAGG;AACH,wBAAgB,wBAAwB,CAAC,SAAS,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAKzE;AAID,0FAA0F;AAC1F,MAAM,WAAW,kBAAkB;IACjC,mEAAmE;IACnE,MAAM,EAAE,MAAM,CAAC;IACf,6FAA6F;IAC7F,MAAM,EAAE,MAAM,CAAC;IACf,mEAAmE;IACnE,MAAM,EAAE,MAAM,CAAC;IACf,qEAAqE;IACrE,SAAS,EAAE,MAAM,CAAC;CACnB;AAED;;;;;;;;;;;;;;GAcG;AACH,wBAAgB,0BAA0B,CAAC,QAAQ,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAI1E;AAED,MAAM,WAAW,sBAAsB;IACrC,MAAM,EAAE,MAAM,CAAC;IACf,oCAAoC;IACpC,OAAO,CAAC,EAAE,OAAO,KAAK,CAAC;CACxB;AAED;;;;;;;;;;GAUG;AACH,wBAAsB,wBAAwB,CAC5C,KAAK,EAAE,SAAS,cAAc,EAAE,EAChC,IAAI,EAAE,sBAAsB,GAC3B,OAAO,CAAC,kBAAkB,EAAE,CAAC,CAgC/B;AAED,MAAM,WAAW,gCAAgC;IAC/C,MAAM,EAAE,MAAM,CAAC;IACf,oDAAoD;IACpD,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,oCAAoC;IACpC,OAAO,CAAC,EAAE,OAAO,KAAK,CAAC;CACxB;AAED;;;;;;;;GAQG;AACH,wBAAgB,+BAA+B,CAC7C,IAAI,EAAE,gCAAgC,GACrC,MAAM,OAAO,CAAC,iBAAiB,GAAG,IAAI,CAAC,CA4BzC"}
|
|
@@ -61,6 +61,69 @@ export function parsePeerIdFromMultiaddr(multiaddr) {
|
|
|
61
61
|
const peerId = multiaddr.slice(idx + "/p2p/".length).split("/")[0];
|
|
62
62
|
return peerId && peerId.length > 0 ? peerId : null;
|
|
63
63
|
}
|
|
64
|
+
/**
|
|
65
|
+
* Validate + normalise a manifest node `endpoint` to the HTTP(S) base used for its
|
|
66
|
+
* `/bootstrap` probe, or return `null` if it is not a usable bootstrap base.
|
|
67
|
+
*
|
|
68
|
+
* CONTRACT (M8B-DECISIONS): a manifest `endpoint` is the node's HTTP(S) `/bootstrap`
|
|
69
|
+
* base — production directories serve `/bootstrap` over plaintext HTTP behind the ALB
|
|
70
|
+
* (matching PRODUCTION_DIRECTORY_URL, which is `http://…:80`). The wss libp2p DIAL
|
|
71
|
+
* address is returned BY `/bootstrap`; it is NOT the endpoint. So we deliberately do
|
|
72
|
+
* NOT accept (or port-guess) a `wss://host:443` value — mapping that to
|
|
73
|
+
* `http://host:443` would speak plaintext to the TLS port and silently fail. Anything
|
|
74
|
+
* that is not `http(s)://` (a bare multiaddr, a wss dial address, a typo) is a config
|
|
75
|
+
* error in officer-SIGNED data: return null so the caller logs it DISTINCTLY from a
|
|
76
|
+
* transient outage and never dials a wrong port. A single trailing slash is stripped
|
|
77
|
+
* (fetchBootstrapMultiaddr appends `/bootstrap`).
|
|
78
|
+
*/
|
|
79
|
+
export function mapEndpointToBootstrapBase(endpoint) {
|
|
80
|
+
const noSlash = endpoint.replace(/\/$/, "");
|
|
81
|
+
if (noSlash.startsWith("http://") || noSlash.startsWith("https://"))
|
|
82
|
+
return noSlash;
|
|
83
|
+
return null;
|
|
84
|
+
}
|
|
85
|
+
/**
|
|
86
|
+
* Resolve every consortium node in the manifest's node set to a live directory
|
|
87
|
+
* endpoint by probing each node's `/bootstrap` (in parallel, order preserved).
|
|
88
|
+
*
|
|
89
|
+
* AVAILABILITY-AWARE (CLAUDE.md redundancy invariant): a node whose bootstrap is
|
|
90
|
+
* unreachable is SKIPPED with a warning — one node down must never strand the others,
|
|
91
|
+
* because a T-of-N ceremony only needs T of the N. Returns the resolved subset
|
|
92
|
+
* (possibly empty). The CALLER decides whether the resolved count meets the threshold;
|
|
93
|
+
* this function NEVER silently substitutes the single hardcoded endpoint for a missing
|
|
94
|
+
* node — that would defeat sovereignty by masking a down/forged node as healthy.
|
|
95
|
+
*/
|
|
96
|
+
export async function manifestNodesToEndpoints(nodes, opts) {
|
|
97
|
+
const fetchFn = opts.fetchFn ?? fetch;
|
|
98
|
+
const resolved = await Promise.all(nodes.map(async (node) => {
|
|
99
|
+
const base = mapEndpointToBootstrapBase(node.endpoint);
|
|
100
|
+
if (base === null) {
|
|
101
|
+
// PERMANENT config error in SIGNED manifest data — logged distinctly from a
|
|
102
|
+
// transient `unresolved` so a bad endpoint is never mistaken for a node that's
|
|
103
|
+
// merely down (fail loud, don't silently skip-as-if-outage).
|
|
104
|
+
opts.logger.error("directory.consortium.node.endpoint_invalid", {
|
|
105
|
+
nodeId: node.nodeId,
|
|
106
|
+
endpoint: node.endpoint,
|
|
107
|
+
});
|
|
108
|
+
return null;
|
|
109
|
+
}
|
|
110
|
+
const multiaddr = await fetchBootstrapMultiaddr(base, fetchFn);
|
|
111
|
+
if (!multiaddr) {
|
|
112
|
+
opts.logger.warn("directory.consortium.node.unresolved", {
|
|
113
|
+
nodeId: node.nodeId,
|
|
114
|
+
endpoint: node.endpoint,
|
|
115
|
+
});
|
|
116
|
+
return null;
|
|
117
|
+
}
|
|
118
|
+
const peerId = parsePeerIdFromMultiaddr(multiaddr);
|
|
119
|
+
if (!peerId) {
|
|
120
|
+
opts.logger.error("directory.consortium.node.no_peer_id", { nodeId: node.nodeId, multiaddr });
|
|
121
|
+
return null;
|
|
122
|
+
}
|
|
123
|
+
return { nodeId: node.nodeId, pubkey: node.pubkey, peerId, multiaddr };
|
|
124
|
+
}));
|
|
125
|
+
return resolved.filter((e) => e !== null);
|
|
126
|
+
}
|
|
64
127
|
/**
|
|
65
128
|
* Build an async `getDirectoryEndpoint` for createSignalingConnect.
|
|
66
129
|
*
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"directory-bootstrap.js","sourceRoot":"","sources":["../src/directory-bootstrap.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;GAiBG;
|
|
1
|
+
{"version":3,"file":"directory-bootstrap.js","sourceRoot":"","sources":["../src/directory-bootstrap.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;GAiBG;AAMH,8FAA8F;AAC9F,MAAM,CAAC,MAAM,wBAAwB,GAAG,wCAAwC,CAAC;AAEjF;;;GAGG;AACH,MAAM,UAAU,mBAAmB,CAAC,MAA0C,OAAO,CAAC,GAAG;IACvF,OAAO,GAAG,CAAC,qBAAqB,CAAC,IAAI,wBAAwB,CAAC;AAChE,CAAC;AAED;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,uBAAuB,CAC3C,YAAoB,EACpB,UAAwB,KAAK;IAE7B,MAAM,YAAY,GAAG,GAAG,YAAY,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,YAAY,CAAC;IACpE,MAAM,EAAE,GAAG,IAAI,eAAe,EAAE,CAAC;IACjC,MAAM,OAAO,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,EAAE,CAAC,KAAK,EAAE,EAAE,IAAI,CAAC,CAAC;IACnD,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,MAAM,OAAO,CAAC,YAAY,EAAE,EAAE,MAAM,EAAE,EAAE,CAAC,MAAM,EAAE,CAAC,CAAC;QAChE,IAAI,CAAC,IAAI,CAAC,EAAE;YAAE,OAAO,IAAI,CAAC;QAC1B,MAAM,IAAI,GAAG,CAAC,MAAM,IAAI,CAAC,IAAI,EAAE,CAA4B,CAAC;QAC5D,IAAI,OAAO,IAAI,CAAC,SAAS,KAAK,QAAQ,IAAI,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,OAAO,CAAC,EAAE,CAAC;YAC3E,OAAO,IAAI,CAAC,SAAS,CAAC;QACxB,CAAC;QACD,OAAO,IAAI,CAAC;IACd,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;YAAS,CAAC;QACT,YAAY,CAAC,OAAO,CAAC,CAAC;IACxB,CAAC;AACH,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,wBAAwB,CAAC,SAAiB;IACxD,MAAM,GAAG,GAAG,SAAS,CAAC,WAAW,CAAC,OAAO,CAAC,CAAC;IAC3C,IAAI,GAAG,KAAK,CAAC,CAAC;QAAE,OAAO,IAAI,CAAC;IAC5B,MAAM,MAAM,GAAG,SAAS,CAAC,KAAK,CAAC,GAAG,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;IACnE,OAAO,MAAM,IAAI,MAAM,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC;AACrD,CAAC;AAgBD;;;;;;;;;;;;;;GAcG;AACH,MAAM,UAAU,0BAA0B,CAAC,QAAgB;IACzD,MAAM,OAAO,GAAG,QAAQ,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;IAC5C,IAAI,OAAO,CAAC,UAAU,CAAC,SAAS,CAAC,IAAI,OAAO,CAAC,UAAU,CAAC,UAAU,CAAC;QAAE,OAAO,OAAO,CAAC;IACpF,OAAO,IAAI,CAAC;AACd,CAAC;AAQD;;;;;;;;;;GAUG;AACH,MAAM,CAAC,KAAK,UAAU,wBAAwB,CAC5C,KAAgC,EAChC,IAA4B;IAE5B,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,IAAI,KAAK,CAAC;IACtC,MAAM,QAAQ,GAAG,MAAM,OAAO,CAAC,GAAG,CAChC,KAAK,CAAC,GAAG,CAAC,KAAK,EAAE,IAAI,EAAsC,EAAE;QAC3D,MAAM,IAAI,GAAG,0BAA0B,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QACvD,IAAI,IAAI,KAAK,IAAI,EAAE,CAAC;YAClB,4EAA4E;YAC5E,+EAA+E;YAC/E,6DAA6D;YAC7D,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,4CAA4C,EAAE;gBAC9D,MAAM,EAAE,IAAI,CAAC,MAAM;gBACnB,QAAQ,EAAE,IAAI,CAAC,QAAQ;aACxB,CAAC,CAAC;YACH,OAAO,IAAI,CAAC;QACd,CAAC;QACD,MAAM,SAAS,GAAG,MAAM,uBAAuB,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;QAC/D,IAAI,CAAC,SAAS,EAAE,CAAC;YACf,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,sCAAsC,EAAE;gBACvD,MAAM,EAAE,IAAI,CAAC,MAAM;gBACnB,QAAQ,EAAE,IAAI,CAAC,QAAQ;aACxB,CAAC,CAAC;YACH,OAAO,IAAI,CAAC;QACd,CAAC;QACD,MAAM,MAAM,GAAG,wBAAwB,CAAC,SAAS,CAAC,CAAC;QACnD,IAAI,CAAC,MAAM,EAAE,CAAC;YACZ,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,sCAAsC,EAAE,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,SAAS,EAAE,CAAC,CAAC;YAC9F,OAAO,IAAI,CAAC;QACd,CAAC;QACD,OAAO,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC;IACzE,CAAC,CAAC,CACH,CAAC;IACF,OAAO,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAA2B,EAAE,CAAC,CAAC,KAAK,IAAI,CAAC,CAAC;AACrE,CAAC;AAUD;;;;;;;;GAQG;AACH,MAAM,UAAU,+BAA+B,CAC7C,IAAsC;IAEtC,MAAM,YAAY,GAAG,IAAI,CAAC,YAAY,IAAI,mBAAmB,EAAE,CAAC;IAChE,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,IAAI,KAAK,CAAC;IACtC,IAAI,QAAQ,GAA6B,IAAI,CAAC;IAE9C,OAAO,KAAK,UAAU,oBAAoB;QACxC,MAAM,SAAS,GAAG,MAAM,uBAAuB,CAAC,YAAY,EAAE,OAAO,CAAC,CAAC;QACvE,IAAI,SAAS,EAAE,CAAC;YACd,MAAM,MAAM,GAAG,wBAAwB,CAAC,SAAS,CAAC,CAAC;YACnD,IAAI,MAAM,EAAE,CAAC;gBACX,mFAAmF;gBACnF,IAAI,CAAC,QAAQ,IAAI,QAAQ,CAAC,SAAS,KAAK,SAAS,EAAE,CAAC;oBAClD,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,8BAA8B,EAAE,EAAE,YAAY,EAAE,MAAM,EAAE,CAAC,CAAC;gBAC7E,CAAC;gBACD,QAAQ,GAAG,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC;gBACjC,OAAO,QAAQ,CAAC;YAClB,CAAC;YACD,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,gCAAgC,EAAE,EAAE,YAAY,EAAE,SAAS,EAAE,CAAC,CAAC;QACnF,CAAC;aAAM,CAAC;YACN,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,iCAAiC,EAAE,EAAE,YAAY,EAAE,CAAC,CAAC;QACxE,CAAC;QACD,+EAA+E;QAC/E,IAAI,QAAQ,EAAE,CAAC;YACb,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,sCAAsC,EAAE,EAAE,YAAY,EAAE,MAAM,EAAE,QAAQ,CAAC,MAAM,EAAE,CAAC,CAAC;YACpG,OAAO,QAAQ,CAAC;QAClB,CAAC;QACD,OAAO,IAAI,CAAC;IACd,CAAC,CAAC;AACJ,CAAC"}
|
|
@@ -19,6 +19,7 @@ import type { IThresholdSigner, KeyProvider } from "@cello-protocol/crypto";
|
|
|
19
19
|
import type { Logger } from "./types.js";
|
|
20
20
|
import type { DaemonRegistrationPersistence } from "./registration-persistence.js";
|
|
21
21
|
import type { RegistrationContext, SignalingSendResult } from "./registration-manager.js";
|
|
22
|
+
import type { ConsortiumEndpoint } from "./directory-bootstrap.js";
|
|
22
23
|
/**
|
|
23
24
|
* Structural slice of SignalingManager this context needs. The real
|
|
24
25
|
* SignalingManager satisfies this (status getter; sendRaw → OperationResult,
|
|
@@ -43,6 +44,7 @@ export declare class DaemonRegistrationContext implements RegistrationContext {
|
|
|
43
44
|
peer_id: string;
|
|
44
45
|
multiaddrs: string[];
|
|
45
46
|
} | null;
|
|
47
|
+
getConsortiumEndpoints?: () => ConsortiumEndpoint[] | null;
|
|
46
48
|
keyProvider: KeyProvider;
|
|
47
49
|
persistence: DaemonRegistrationPersistence | null;
|
|
48
50
|
logger: Logger;
|
|
@@ -55,6 +57,7 @@ export declare class DaemonRegistrationContext implements RegistrationContext {
|
|
|
55
57
|
peer_id: string;
|
|
56
58
|
multiaddrs: string[];
|
|
57
59
|
} | null;
|
|
60
|
+
getConsortiumEndpoints(): ConsortiumEndpoint[] | null;
|
|
58
61
|
getThresholdSigner(): IThresholdSigner | undefined;
|
|
59
62
|
setThresholdSigner(signer: IThresholdSigner): void;
|
|
60
63
|
getMyPrimaryPubkey(): Uint8Array | null;
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"registration-context.d.ts","sourceRoot":"","sources":["../src/registration-context.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AAEH,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,2BAA2B,CAAC;AAC3D,OAAO,KAAK,EAAE,gBAAgB,EAAE,WAAW,EAAE,MAAM,wBAAwB,CAAC;AAC5E,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,YAAY,CAAC;AACzC,OAAO,KAAK,EAAE,6BAA6B,EAAE,MAAM,+BAA+B,CAAC;AACnF,OAAO,KAAK,EAAE,mBAAmB,EAAE,mBAAmB,EAAE,MAAM,2BAA2B,CAAC;
|
|
1
|
+
{"version":3,"file":"registration-context.d.ts","sourceRoot":"","sources":["../src/registration-context.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AAEH,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,2BAA2B,CAAC;AAC3D,OAAO,KAAK,EAAE,gBAAgB,EAAE,WAAW,EAAE,MAAM,wBAAwB,CAAC;AAC5E,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,YAAY,CAAC;AACzC,OAAO,KAAK,EAAE,6BAA6B,EAAE,MAAM,+BAA+B,CAAC;AACnF,OAAO,KAAK,EAAE,mBAAmB,EAAE,mBAAmB,EAAE,MAAM,2BAA2B,CAAC;AAC1F,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,0BAA0B,CAAC;AAEnE;;;;;GAKG;AACH,MAAM,WAAW,aAAa;IAC5B,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,OAAO,CAAC,KAAK,EAAE,OAAO,GAAG,OAAO,CAAC,mBAAmB,CAAC,CAAC;IACtD,sBAAsB,CAAC,OAAO,EAAE,CAAC,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,KAAK,IAAI,GAAG,MAAM,IAAI,CAAC;CACvF;AAID,qBAAa,yBAA0B,YAAW,mBAAmB;;IACnE,QAAQ,CAAC,WAAW,EAAE,WAAW,CAAC;IAClC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,WAAW,EAAE,6BAA6B,GAAG,IAAI,CAAC;IAC3D,QAAQ,CAAC,YAAY,EAAE,MAAM,GAAG,SAAS,CAAC;gBAc9B,IAAI,EAAE;QAChB,SAAS,EAAE,aAAa,CAAC;QACzB,gBAAgB,EAAE,MAAM,SAAS,GAAG,IAAI,CAAC;QACzC,oBAAoB,EAAE,MAAM;YAAE,OAAO,EAAE,MAAM,CAAC;YAAC,UAAU,EAAE,MAAM,EAAE,CAAA;SAAE,GAAG,IAAI,CAAC;QAC7E,sBAAsB,CAAC,EAAE,MAAM,kBAAkB,EAAE,GAAG,IAAI,CAAC;QAC3D,WAAW,EAAE,WAAW,CAAC;QACzB,WAAW,EAAE,6BAA6B,GAAG,IAAI,CAAC;QAClD,MAAM,EAAE,MAAM,CAAC;QACf,YAAY,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;KACnC;IAiBD,OAAO,IAAI,SAAS,GAAG,IAAI;IAI3B,cAAc,IAAI,MAAM,GAAG,IAAI;IAI/B,cAAc,CAAC,GAAG,EAAE,MAAM,GAAG,IAAI;IAIjC,oBAAoB,IAAI;QAAE,OAAO,EAAE,MAAM,CAAC;QAAC,UAAU,EAAE,MAAM,EAAE,CAAA;KAAE,GAAG,IAAI;IAIxE,sBAAsB,IAAI,kBAAkB,EAAE,GAAG,IAAI;IAIrD,kBAAkB,IAAI,gBAAgB,GAAG,SAAS;IAIlD,kBAAkB,CAAC,MAAM,EAAE,gBAAgB,GAAG,IAAI;IAIlD,kBAAkB,IAAI,UAAU,GAAG,IAAI;IAIvC,kBAAkB,CAAC,MAAM,EAAE,UAAU,GAAG,IAAI;IAM5C,oBAAoB,IAAI,OAAO;IAIzB,kBAAkB,CAAC,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,OAAO,CAAC,mBAAmB,CAAC;IAItF,yBAAyB,CAAC,OAAO,EAAE,CAAC,CAAC,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,KAAK,IAAI,CAAC,GAAG,IAAI,GAAG,IAAI;IAI3F,yBAAyB,CAAC,OAAO,EAAE,CAAC,CAAC,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,KAAK,IAAI,CAAC,GAAG,IAAI,GAAG,IAAI;IAI3F,6EAA6E;IAC7E,OAAO,IAAI,IAAI;CAuChB"}
|
|
@@ -23,6 +23,7 @@ export class DaemonRegistrationContext {
|
|
|
23
23
|
#signaling;
|
|
24
24
|
#getDirectoryNode;
|
|
25
25
|
#getDirectoryEndpoint;
|
|
26
|
+
#getConsortiumEndpoints;
|
|
26
27
|
#unregisterInbound;
|
|
27
28
|
#myPubkeyHex = null;
|
|
28
29
|
#thresholdSigner = undefined;
|
|
@@ -33,6 +34,10 @@ export class DaemonRegistrationContext {
|
|
|
33
34
|
this.#signaling = opts.signaling;
|
|
34
35
|
this.#getDirectoryNode = opts.getDirectoryNode;
|
|
35
36
|
this.#getDirectoryEndpoint = opts.getDirectoryEndpoint;
|
|
37
|
+
// Default to null → "no consortium manifest configured" → single-node DKG (back-compat for
|
|
38
|
+
// callers/tests that don't supply a roster). null (no manifest) is distinct from [] (manifest
|
|
39
|
+
// configured but unresolved → refuse) — see RegistrationContext.getConsortiumEndpoints.
|
|
40
|
+
this.#getConsortiumEndpoints = opts.getConsortiumEndpoints ?? (() => null);
|
|
36
41
|
this.keyProvider = opts.keyProvider;
|
|
37
42
|
this.persistence = opts.persistence;
|
|
38
43
|
this.logger = opts.logger;
|
|
@@ -52,6 +57,9 @@ export class DaemonRegistrationContext {
|
|
|
52
57
|
getDirectoryEndpoint() {
|
|
53
58
|
return this.#getDirectoryEndpoint();
|
|
54
59
|
}
|
|
60
|
+
getConsortiumEndpoints() {
|
|
61
|
+
return this.#getConsortiumEndpoints();
|
|
62
|
+
}
|
|
55
63
|
getThresholdSigner() {
|
|
56
64
|
return this.#thresholdSigner;
|
|
57
65
|
}
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"registration-context.js","sourceRoot":"","sources":["../src/registration-context.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;
|
|
1
|
+
{"version":3,"file":"registration-context.js","sourceRoot":"","sources":["../src/registration-context.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AAqBH,MAAM,wBAAwB,GAAG,IAAI,GAAG,CAAC,CAAC,WAAW,EAAE,kBAAkB,EAAE,gBAAgB,CAAC,CAAC,CAAC;AAE9F,MAAM,OAAO,yBAAyB;IAC3B,WAAW,CAAc;IACzB,MAAM,CAAS;IACf,WAAW,CAAuC;IAClD,YAAY,CAAqB;IAEjC,UAAU,CAAgB;IAC1B,iBAAiB,CAAyB;IAC1C,qBAAqB,CAAyD;IAC9E,uBAAuB,CAAoC;IAC3D,kBAAkB,CAAa;IAExC,YAAY,GAAkB,IAAI,CAAC;IACnC,gBAAgB,GAAiC,SAAS,CAAC;IAC3D,gBAAgB,GAAsB,IAAI,CAAC;IAC3C,gBAAgB,GAAsD,IAAI,CAAC;IAC3E,gBAAgB,GAAsD,IAAI,CAAC;IAE3E,YAAY,IASX;QACC,IAAI,CAAC,UAAU,GAAG,IAAI,CAAC,SAAS,CAAC;QACjC,IAAI,CAAC,iBAAiB,GAAG,IAAI,CAAC,gBAAgB,CAAC;QAC/C,IAAI,CAAC,qBAAqB,GAAG,IAAI,CAAC,oBAAoB,CAAC;QACvD,2FAA2F;QAC3F,8FAA8F;QAC9F,wFAAwF;QACxF,IAAI,CAAC,uBAAuB,GAAG,IAAI,CAAC,sBAAsB,IAAI,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,CAAC;QAC3E,IAAI,CAAC,WAAW,GAAG,IAAI,CAAC,WAAW,CAAC;QACpC,IAAI,CAAC,WAAW,GAAG,IAAI,CAAC,WAAW,CAAC;QACpC,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC;QAC1B,IAAI,CAAC,YAAY,GAAG,IAAI,CAAC,YAAY,CAAC;QACtC,IAAI,CAAC,kBAAkB,GAAG,IAAI,CAAC,UAAU,CAAC,sBAAsB,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC,CAAC;IACtG,CAAC;IAED,+EAA+E;IAE/E,OAAO;QACL,OAAO,IAAI,CAAC,iBAAiB,EAAE,CAAC;IAClC,CAAC;IAED,cAAc;QACZ,OAAO,IAAI,CAAC,YAAY,CAAC;IAC3B,CAAC;IAED,cAAc,CAAC,GAAW;QACxB,IAAI,CAAC,YAAY,GAAG,GAAG,CAAC;IAC1B,CAAC;IAED,oBAAoB;QAClB,OAAO,IAAI,CAAC,qBAAqB,EAAE,CAAC;IACtC,CAAC;IAED,sBAAsB;QACpB,OAAO,IAAI,CAAC,uBAAuB,EAAE,CAAC;IACxC,CAAC;IAED,kBAAkB;QAChB,OAAO,IAAI,CAAC,gBAAgB,CAAC;IAC/B,CAAC;IAED,kBAAkB,CAAC,MAAwB;QACzC,IAAI,CAAC,gBAAgB,GAAG,MAAM,CAAC;IACjC,CAAC;IAED,kBAAkB;QAChB,OAAO,IAAI,CAAC,gBAAgB,CAAC;IAC/B,CAAC;IAED,kBAAkB,CAAC,MAAkB;QACnC,IAAI,CAAC,gBAAgB,GAAG,MAAM,CAAC;IACjC,CAAC;IAED,gFAAgF;IAEhF,oBAAoB;QAClB,OAAO,IAAI,CAAC,UAAU,CAAC,MAAM,KAAK,WAAW,CAAC;IAChD,CAAC;IAED,KAAK,CAAC,kBAAkB,CAAC,KAA8B;QACrD,OAAO,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;IACxC,CAAC;IAED,yBAAyB,CAAC,OAA0D;QAClF,IAAI,CAAC,gBAAgB,GAAG,OAAO,CAAC;IAClC,CAAC;IAED,yBAAyB,CAAC,OAA0D;QAClF,IAAI,CAAC,gBAAgB,GAAG,OAAO,CAAC;IAClC,CAAC;IAED,6EAA6E;IAC7E,OAAO;QACL,IAAI,CAAC,kBAAkB,EAAE,CAAC;QAC1B,IAAI,CAAC,gBAAgB,GAAG,IAAI,CAAC;QAC7B,IAAI,CAAC,gBAAgB,GAAG,IAAI,CAAC;IAC/B,CAAC;IAED,iFAAiF;IAEjF,UAAU,CAAC,KAA8B;QACvC,MAAM,IAAI,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC;QAC3B,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,CAAC,wBAAwB,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC;YACpE,OAAO,CAAC,iEAAiE;QAC3E,CAAC;QAED,IAAI,IAAI,KAAK,WAAW,EAAE,CAAC;YACzB,MAAM,OAAO,GAAG,IAAI,CAAC,gBAAgB,CAAC;YACtC,IAAI,CAAC,gBAAgB,GAAG,IAAI,CAAC;YAC7B,OAAO,EAAE,CAAC,KAAK,CAAC,CAAC;YACjB,OAAO;QACT,CAAC;QACD,IAAI,IAAI,KAAK,kBAAkB,EAAE,CAAC;YAChC,MAAM,OAAO,GAAG,IAAI,CAAC,gBAAgB,CAAC;YACtC,IAAI,CAAC,gBAAgB,GAAG,IAAI,CAAC;YAC7B,OAAO,EAAE,CAAC,KAAK,CAAC,CAAC;YACjB,OAAO;QACT,CAAC;QAED,oEAAoE;QACpE,2DAA2D;QAC3D,IAAI,IAAI,CAAC,gBAAgB,EAAE,CAAC;YAC1B,MAAM,OAAO,GAAG,IAAI,CAAC,gBAAgB,CAAC;YACtC,IAAI,CAAC,gBAAgB,GAAG,IAAI,CAAC;YAC7B,OAAO,CAAC,KAAK,CAAC,CAAC;QACjB,CAAC;aAAM,IAAI,IAAI,CAAC,gBAAgB,EAAE,CAAC;YACjC,MAAM,OAAO,GAAG,IAAI,CAAC,gBAAgB,CAAC;YACtC,IAAI,CAAC,gBAAgB,GAAG,IAAI,CAAC;YAC7B,OAAO,CAAC,KAAK,CAAC,CAAC;QACjB,CAAC;IACH,CAAC;CACF"}
|
|
@@ -13,6 +13,7 @@
|
|
|
13
13
|
*/
|
|
14
14
|
import type { IThresholdSigner, MlDsaKeyProvider } from "@cello-protocol/crypto";
|
|
15
15
|
import type { RegistrationState } from "@cello-protocol/protocol-types";
|
|
16
|
+
import type { ConsortiumEndpoint } from "./directory-bootstrap.js";
|
|
16
17
|
import type { DaemonRegistrationPersistence } from "./registration-persistence.js";
|
|
17
18
|
import type { Logger } from "./types.js";
|
|
18
19
|
import type { CelloNode } from "@cello-protocol/transport";
|
|
@@ -43,6 +44,16 @@ export interface RegistrationContext {
|
|
|
43
44
|
peer_id: string;
|
|
44
45
|
multiaddrs: string[];
|
|
45
46
|
} | null;
|
|
47
|
+
/**
|
|
48
|
+
* DOD-MANIFEST-1/DKG-1: the consortium directory-node roster resolved from the verified
|
|
49
|
+
* manifest (one entry per resolved node), or NULL when NO consortium manifest is configured.
|
|
50
|
+
* `null` ⇒ single-node DKG against getDirectoryEndpoint() (M6/M7 back-compat). A non-null
|
|
51
|
+
* array ⇒ a consortium IS configured and the DKG must fan across exactly these nodes
|
|
52
|
+
* (T-of-N); an EMPTY array (manifest configured but the whole consortium unresolved) is NOT
|
|
53
|
+
* a fallback to single-node — it must REFUSE (the threshold gate). This null-vs-empty
|
|
54
|
+
* distinction is load-bearing (code-reviewer B1 / fallback-finder).
|
|
55
|
+
*/
|
|
56
|
+
getConsortiumEndpoints(): ConsortiumEndpoint[] | null;
|
|
46
57
|
getThresholdSigner(): IThresholdSigner | undefined;
|
|
47
58
|
setThresholdSigner(signer: IThresholdSigner): void;
|
|
48
59
|
getMyPrimaryPubkey(): Uint8Array | null;
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"registration-manager.d.ts","sourceRoot":"","sources":["../src/registration-manager.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAIH,OAAO,KAAK,EAAE,gBAAgB,EAAE,gBAAgB,EAAE,MAAM,wBAAwB,CAAC;AACjF,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,gCAAgC,CAAC;
|
|
1
|
+
{"version":3,"file":"registration-manager.d.ts","sourceRoot":"","sources":["../src/registration-manager.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAIH,OAAO,KAAK,EAAE,gBAAgB,EAAE,gBAAgB,EAAE,MAAM,wBAAwB,CAAC;AACjF,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,gCAAgC,CAAC;AAExE,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,0BAA0B,CAAC;AAKnE,OAAO,KAAK,EAAE,6BAA6B,EAAE,MAAM,+BAA+B,CAAC;AACnF,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,YAAY,CAAC;AACzC,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,2BAA2B,CAAC;AAC3D,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,wBAAwB,CAAC;AAE1D,yFAAyF;AACzF,MAAM,WAAW,mBAAmB;IAClC,EAAE,EAAE,OAAO,CAAC;IACZ,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB;AAED;;;GAGG;AACH,MAAM,WAAW,mBAAmB;IAClC,QAAQ,CAAC,WAAW,EAAE,WAAW,CAAC;IAClC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,WAAW,EAAE,6BAA6B,GAAG,IAAI,CAAC;IAC3D,QAAQ,CAAC,YAAY,EAAE,MAAM,GAAG,SAAS,CAAC;IAC1C;;;;OAIG;IACH,OAAO,IAAI,SAAS,GAAG,IAAI,CAAC;IAC5B,cAAc,IAAI,MAAM,GAAG,IAAI,CAAC;IAChC,cAAc,CAAC,GAAG,EAAE,MAAM,GAAG,IAAI,CAAC;IAClC,oBAAoB,IAAI;QAAE,OAAO,EAAE,MAAM,CAAC;QAAC,UAAU,EAAE,MAAM,EAAE,CAAA;KAAE,GAAG,IAAI,CAAC;IACzE;;;;;;;;OAQG;IACH,sBAAsB,IAAI,kBAAkB,EAAE,GAAG,IAAI,CAAC;IACtD,kBAAkB,IAAI,gBAAgB,GAAG,SAAS,CAAC;IACnD,kBAAkB,CAAC,MAAM,EAAE,gBAAgB,GAAG,IAAI,CAAC;IACnD,kBAAkB,IAAI,UAAU,GAAG,IAAI,CAAC;IACxC,kBAAkB,CAAC,MAAM,EAAE,UAAU,GAAG,IAAI,CAAC;IAC7C,yFAAyF;IACzF,oBAAoB,IAAI,OAAO,CAAC;IAChC,kFAAkF;IAClF,kBAAkB,CAAC,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,OAAO,CAAC,mBAAmB,CAAC,CAAC;IACjF,yBAAyB,CAAC,OAAO,EAAE,CAAC,CAAC,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,KAAK,IAAI,CAAC,GAAG,IAAI,GAAG,IAAI,CAAC;IAC5F,yBAAyB,CAAC,OAAO,EAAE,CAAC,CAAC,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,KAAK,IAAI,CAAC,GAAG,IAAI,GAAG,IAAI,CAAC;CAC7F;AAED,qBAAa,mBAAmB;;gBAOlB,GAAG,EAAE,mBAAmB;IAMpC,oBAAoB,IAAI,iBAAiB,GAAG,IAAI;IAIhD,oBAAoB,CAAC,KAAK,EAAE,iBAAiB,GAAG,IAAI,GAAG,IAAI;IAI3D,gBAAgB,IAAI,gBAAgB,GAAG,IAAI;IAI3C,gBAAgB,CAAC,QAAQ,EAAE,gBAAgB,GAAG,IAAI,GAAG,IAAI;IAgDzD;;;OAGG;IACG,QAAQ,CAAC,SAAS,GAAE,MAAW,EAAE,YAAY,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,iBAAiB,GAAG;QAAE,KAAK,EAAE,MAAM,CAAA;KAAE,CAAC;CA6Q9G"}
|
|
@@ -170,23 +170,66 @@ export class RegistrationManager {
|
|
|
170
170
|
const epochId = dkgReadyFrame["epochId"];
|
|
171
171
|
const participants = dkgReadyFrame["participants"];
|
|
172
172
|
const threshold = dkgReadyFrame["threshold"];
|
|
173
|
-
const directoryEndpoint = this.#ctx.getDirectoryEndpoint();
|
|
174
|
-
if (!directoryEndpoint) {
|
|
175
|
-
return { error: "directory_unreachable" };
|
|
176
|
-
}
|
|
177
173
|
// getNode() may be null even when signaling reads connected (brief
|
|
178
174
|
// stream-death window) — null-check before FROST DKG opens streams on it.
|
|
179
175
|
const dkgNode = this.#ctx.getNode();
|
|
180
176
|
if (!dkgNode) {
|
|
181
177
|
return { error: "directory_unreachable" };
|
|
182
178
|
}
|
|
183
|
-
|
|
184
|
-
|
|
185
|
-
|
|
186
|
-
|
|
187
|
-
|
|
188
|
-
|
|
189
|
-
|
|
179
|
+
// DOD-DKG-1: build the directory-node set the DKG fans across. With a verified consortium
|
|
180
|
+
// manifest the client resolved the full N-node roster (getConsortiumEndpoints) and the DKG
|
|
181
|
+
// runs across ALL of them (the generated key is T-of-N). Without a manifest the roster is
|
|
182
|
+
// empty → the single primary endpoint (single-node DKG, M6/M7 back-compat).
|
|
183
|
+
// getConsortiumEndpoints() returns the resolved roster when a consortium manifest IS
|
|
184
|
+
// configured, or NULL when none is (the M6/M7 single-node back-compat path). Branching on
|
|
185
|
+
// "manifest configured" (roster !== null) — NOT "roster non-empty" — is the load-bearing
|
|
186
|
+
// distinction (code-reviewer B1 / cello-fallback-finder HIGH): an EMPTY roster with a
|
|
187
|
+
// manifest configured (the whole consortium momentarily unreachable) must REFUSE, never
|
|
188
|
+
// silently fall back to a 2-of-2 DKG against an unverified single directory.
|
|
189
|
+
const roster = this.#ctx.getConsortiumEndpoints();
|
|
190
|
+
let directoryNodes;
|
|
191
|
+
if (roster !== null) {
|
|
192
|
+
// A consortium manifest is configured → multi-node DKG. FROST DKG (key generation) needs
|
|
193
|
+
// ALL N declared nodes present — a node absent DURING DKG receives no share, yielding a
|
|
194
|
+
// smaller/different consortium. `participants` is the N the directory derived from its OWN
|
|
195
|
+
// verified manifest (topology consensus); the resolved roster must match it EXACTLY. Fewer
|
|
196
|
+
// resolved (a node down, OR the whole consortium unreachable → roster empty) or more (a
|
|
197
|
+
// divergent/forward-skewed manifest) ⇒ REFUSE rather than silently DKG a partial/divergent
|
|
198
|
+
// consortium or downgrade to single-node. The empty case (0 !== N) is exactly what B1 fixes.
|
|
199
|
+
// NOTE (MEDIUM, parked — M8B-DECISIONS): this is a COUNT check; a same-count, different-
|
|
200
|
+
// identity manifest version skew is not caught here — closing it needs manifest-version
|
|
201
|
+
// agreement in dkg_ready. The kill-a-node tolerance is a SIGNING property (DOD-SIGN-1).
|
|
202
|
+
if (roster.length !== participants) {
|
|
203
|
+
this.#ctx.logger.warn("registration.dkg.below_threshold", {
|
|
204
|
+
resolvedNodes: roster.length,
|
|
205
|
+
declaredParticipants: participants,
|
|
206
|
+
});
|
|
207
|
+
return { error: "dkg_below_threshold" };
|
|
208
|
+
}
|
|
209
|
+
directoryNodes = roster.map((ep) => new NetworkDirectoryNode({
|
|
210
|
+
id: ep.peerId,
|
|
211
|
+
node: dkgNode,
|
|
212
|
+
directoryPeerId: ep.peerId,
|
|
213
|
+
directoryMultiaddrs: [ep.multiaddr],
|
|
214
|
+
logger: this.#ctx.logger,
|
|
215
|
+
}));
|
|
216
|
+
}
|
|
217
|
+
else {
|
|
218
|
+
// No consortium manifest configured → single-node DKG (M6/M7 back-compat).
|
|
219
|
+
const directoryEndpoint = this.#ctx.getDirectoryEndpoint();
|
|
220
|
+
if (!directoryEndpoint) {
|
|
221
|
+
return { error: "directory_unreachable" };
|
|
222
|
+
}
|
|
223
|
+
directoryNodes = [
|
|
224
|
+
new NetworkDirectoryNode({
|
|
225
|
+
id: directoryEndpoint.peer_id,
|
|
226
|
+
node: dkgNode,
|
|
227
|
+
directoryPeerId: directoryEndpoint.peer_id,
|
|
228
|
+
directoryMultiaddrs: directoryEndpoint.multiaddrs,
|
|
229
|
+
logger: this.#ctx.logger,
|
|
230
|
+
}),
|
|
231
|
+
];
|
|
232
|
+
}
|
|
190
233
|
void epochId;
|
|
191
234
|
const kLocalPubkeyBytes = Buffer.from(kLocalPubkeyHex, "hex");
|
|
192
235
|
let dkgPrimaryPubkeyHex;
|
|
@@ -197,7 +240,7 @@ export class RegistrationManager {
|
|
|
197
240
|
const dkgResult = await runNetworkDkg(kLocalPubkeyBytes, {
|
|
198
241
|
threshold,
|
|
199
242
|
participants,
|
|
200
|
-
directoryNodes
|
|
243
|
+
directoryNodes,
|
|
201
244
|
preAuthToken,
|
|
202
245
|
});
|
|
203
246
|
dkgPrimaryPubkeyHex = Buffer.from(dkgResult.primaryPubkey).toString("hex");
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"registration-manager.js","sourceRoot":"","sources":["../src/registration-manager.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAEH,OAAO,EAAE,OAAO,EAAE,MAAM,QAAQ,CAAC;AACjC,OAAO,EAAE,WAAW,EAAE,oBAAoB,EAAE,oBAAoB,EAAE,MAAM,wBAAwB,CAAC;AAGjG,OAAO,EAAE,oBAAoB,EAAE,aAAa,EAAE,MAAM,6BAA6B,CAAC;
|
|
1
|
+
{"version":3,"file":"registration-manager.js","sourceRoot":"","sources":["../src/registration-manager.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAEH,OAAO,EAAE,OAAO,EAAE,MAAM,QAAQ,CAAC;AACjC,OAAO,EAAE,WAAW,EAAE,oBAAoB,EAAE,oBAAoB,EAAE,MAAM,wBAAwB,CAAC;AAGjG,OAAO,EAAE,oBAAoB,EAAE,aAAa,EAAE,MAAM,6BAA6B,CAAC;AAGlF,wEAAwE;AACxE,0EAA0E;AAC1E,MAAM,QAAQ,GAAG,IAAI,OAAO,CAAC,EAAE,aAAa,EAAE,KAAK,EAAE,CAAC,CAAC;AAoDvD,MAAM,OAAO,mBAAmB;IACrB,IAAI,CAAsB;IAEnC,2CAA2C;IAC3C,kBAAkB,GAA6B,IAAI,CAAC;IACpD,cAAc,GAA4B,IAAI,CAAC;IAE/C,YAAY,GAAwB;QAClC,IAAI,CAAC,IAAI,GAAG,GAAG,CAAC;IAClB,CAAC;IAED,gFAAgF;IAEhF,oBAAoB;QAClB,OAAO,IAAI,CAAC,kBAAkB,CAAC;IACjC,CAAC;IAED,oBAAoB,CAAC,KAA+B;QAClD,IAAI,CAAC,kBAAkB,GAAG,KAAK,CAAC;IAClC,CAAC;IAED,gBAAgB;QACd,OAAO,IAAI,CAAC,cAAc,CAAC;IAC7B,CAAC;IAED,gBAAgB,CAAC,QAAiC;QAChD,IAAI,CAAC,cAAc,GAAG,QAAQ,CAAC;IACjC,CAAC;IAED;;;;;;OAMG;IACH,KAAK,CAAC,WAAW,CAAC,GAA+B;QAC/C,IAAI,CAAC;YACH,KAAK,MAAM,EAAE,IAAI,GAAG;gBAAE,MAAM,EAAE,EAAE,CAAC;YACjC,OAAO,IAAI,CAAC;QACd,CAAC;QAAC,OAAO,GAAY,EAAE,CAAC;YACtB,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,iCAAiC,EAAE;gBACxD,KAAK,EAAE,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC;aACxD,CAAC,CAAC;YACH,OAAO,KAAK,CAAC;QACf,CAAC;IACH,CAAC;IAED;;;;;OAKG;IACH,mBAAmB,CACjB,KAAwB,EACxB,cAAsB,EACtB,kBAAqC;QAErC,MAAM,WAAW,GAAG,IAAI,CAAC,IAAI,CAAC,WAAY,CAAC;QAC3C,MAAM,GAAG,GAA+B,EAAE,CAAC;QAC3C,IAAI,kBAAkB,EAAE,CAAC;YACvB,GAAG,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,WAAW,CAAC,mBAAmB,CAAC,EAAE,WAAW,EAAE,cAAc,EAAE,aAAa,EAAE,kBAAkB,EAAE,CAAC,CAAC,CAAC;QACtH,CAAC;QACD,GAAG,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,WAAW,CAAC,wBAAwB,CAAC;YAClD,OAAO,EAAE,KAAK,CAAC,QAAQ;YACvB,aAAa,EAAE,KAAK,CAAC,cAAc;YACnC,WAAW,EAAE,KAAK,CAAC,aAAa;YAChC,YAAY,EAAE,KAAK,CAAC,aAAa;SAClC,CAAC,CAAC,CAAC;QACJ,OAAO,GAAG,CAAC;IACb,CAAC;IAED;;;OAGG;IACH,KAAK,CAAC,QAAQ,CAAC,YAAoB,EAAE,EAAE,YAAqB;QAC1D,6BAA6B;QAC7B,IAAI,IAAI,CAAC,kBAAkB,EAAE,CAAC;YAC5B,OAAO,EAAE,KAAK,EAAE,oBAAoB,EAAE,CAAC;QACzC,CAAC;QAED,6CAA6C;QAC7C,IAAI,aAA+B,CAAC;QACpC,IAAI,kBAAkB,GAAsB,IAAI,CAAC;QACjD,IAAI,IAAI,CAAC,IAAI,CAAC,YAAY,EAAE,CAAC;YAC3B,aAAa,GAAG,MAAM,oBAAoB,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;QAC1E,CAAC;aAAM,IAAI,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC;YACjC,MAAM,EAAE,QAAQ,EAAE,aAAa,EAAE,GAAG,MAAM,oBAAoB,EAAE,CAAC;YACjE,aAAa,GAAG,QAAQ,CAAC;YACzB,kBAAkB,GAAG,aAAa,CAAC;QACrC,CAAC;aAAM,CAAC;YACN,aAAa,GAAG,MAAM,WAAW,EAAE,CAAC;QACtC,CAAC;QACD,MAAM,WAAW,GAAG,MAAM,aAAa,CAAC,YAAY,EAAE,CAAC;QACvD,MAAM,cAAc,GAAG,MAAM,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;QAEhE,kEAAkE;QAClE,+EAA+E;QAC/E,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,oBAAoB,EAAE,EAAE,CAAC;YACtC,OAAO,EAAE,KAAK,EAAE,uBAAuB,EAAE,CAAC;QAC5C,CAAC;QAED,iCAAiC;QACjC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,cAAc,EAAE,EAAE,CAAC;YAChC,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,WAAW,CAAC,YAAY,EAAE,CAAC;YAC1D,IAAI,CAAC,IAAI,CAAC,cAAc,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC;QAChE,CAAC;QACD,MAAM,eAAe,GAAG,IAAI,CAAC,IAAI,CAAC,cAAc,EAAG,CAAC;QAEpD,6EAA6E;QAC7E,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,kBAAkB,CAAC;YACjD,IAAI,EAAE,kBAAkB;YACxB,UAAU,EAAE,SAAS;YACrB,cAAc,EAAE,eAAe;YAC/B,aAAa,EAAE,cAAc;SAC9B,CAAC,CAAC;QACH,IAAI,CAAC,OAAO,CAAC,EAAE,EAAE,CAAC;YAChB,OAAO,EAAE,KAAK,EAAE,OAAO,CAAC,MAAM,IAAI,uBAAuB,EAAE,CAAC;QAC9D,CAAC;QAED,2BAA2B;QAC3B,MAAM,oBAAoB,GAAG,MAAM,CAAC;QACpC,IAAI,qBAAgE,CAAC;QACrE,MAAM,aAAa,GAAG,MAAM,OAAO,CAAC,IAAI,CAA0B;YAChE,IAAI,OAAO,CAA0B,CAAC,OAAO,EAAE,EAAE;gBAC/C,IAAI,CAAC,IAAI,CAAC,yBAAyB,CAAC,OAAO,CAAC,CAAC;YAC/C,CAAC,CAAC;YACF,IAAI,OAAO,CAA0B,CAAC,OAAO,EAAE,EAAE;gBAC/C,qBAAqB,GAAG,UAAU,CAAC,GAAG,EAAE;oBACtC,IAAI,CAAC,IAAI,CAAC,yBAAyB,CAAC,IAAI,CAAC,CAAC;oBAC1C,OAAO,CAAC,EAAE,IAAI,EAAE,gBAAgB,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC,CAAC;gBACzD,CAAC,EAAE,oBAAoB,CAAC,CAAC;YAC3B,CAAC,CAAC;SACH,CAAC,CAAC;QACH,YAAY,CAAC,qBAAqB,CAAC,CAAC;QAEpC,IAAI,aAAa,CAAC,MAAM,CAAC,KAAK,WAAW,EAAE,CAAC;YAC1C,MAAM,MAAM,GAAI,aAAa,CAAC,QAAQ,CAAwB,IAAI,SAAS,CAAC;YAC5E,IACE,MAAM,KAAK,oBAAoB;gBAC/B,aAAa,CAAC,UAAU,CAAC;gBACzB,aAAa,CAAC,gBAAgB,CAAC,EAC/B,CAAC;gBACD,MAAM,KAAK,GAAsB;oBAC/B,QAAQ,EAAE,aAAa,CAAC,UAAU,CAAW;oBAC7C,cAAc,EAAE,aAAa,CAAC,gBAAgB,CAAW;oBACzD,aAAa,EAAG,aAAa,CAAC,eAAe,CAAwB,IAAI,cAAc;oBACvF,aAAa,EAAE,IAAI,CAAC,GAAG,EAAE;oBACzB,MAAM,EAAE,QAAQ;iBACjB,CAAC;gBACF,2FAA2F;gBAC3F,6FAA6F;gBAC7F,2FAA2F;gBAC3F,wFAAwF;gBACxF,IAAI,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC;oBAC1B,MAAM,EAAE,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,mBAAmB,CAAC,KAAK,EAAE,cAAc,EAAE,kBAAkB,CAAC,CAAC,CAAC;oBACvG,IAAI,CAAC,EAAE;wBAAE,OAAO,EAAE,KAAK,EAAE,yBAAyB,EAAE,CAAC;gBACvD,CAAC;gBACD,IAAI,CAAC,kBAAkB,GAAG,KAAK,CAAC;gBAChC,IAAI,CAAC,cAAc,GAAG,aAAa,CAAC;gBACpC,OAAO,KAAK,CAAC;YACf,CAAC;YACD,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC;QAC3B,CAAC;QAED,8BAA8B;QAC9B,MAAM,OAAO,GAAG,aAAa,CAAC,SAAS,CAAW,CAAC;QACnD,MAAM,YAAY,GAAG,aAAa,CAAC,cAAc,CAAW,CAAC;QAC7D,MAAM,SAAS,GAAG,aAAa,CAAC,WAAW,CAAW,CAAC;QACvD,mEAAmE;QACnE,0EAA0E;QAC1E,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC;QACpC,IAAI,CAAC,OAAO,EAAE,CAAC;YACb,OAAO,EAAE,KAAK,EAAE,uBAAuB,EAAE,CAAC;QAC5C,CAAC;QACD,0FAA0F;QAC1F,2FAA2F;QAC3F,0FAA0F;QAC1F,4EAA4E;QAC5E,qFAAqF;QACrF,0FAA0F;QAC1F,yFAAyF;QACzF,sFAAsF;QACtF,wFAAwF;QACxF,6EAA6E;QAC7E,MAAM,MAAM,GAAG,IAAI,CAAC,IAAI,CAAC,sBAAsB,EAAE,CAAC;QAClD,IAAI,cAAsC,CAAC;QAC3C,IAAI,MAAM,KAAK,IAAI,EAAE,CAAC;YACpB,yFAAyF;YACzF,wFAAwF;YACxF,2FAA2F;YAC3F,2FAA2F;YAC3F,wFAAwF;YACxF,2FAA2F;YAC3F,6FAA6F;YAC7F,yFAAyF;YACzF,wFAAwF;YACxF,wFAAwF;YACxF,IAAI,MAAM,CAAC,MAAM,KAAK,YAAY,EAAE,CAAC;gBACnC,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,kCAAkC,EAAE;oBACxD,aAAa,EAAE,MAAM,CAAC,MAAM;oBAC5B,oBAAoB,EAAE,YAAY;iBACnC,CAAC,CAAC;gBACH,OAAO,EAAE,KAAK,EAAE,qBAAqB,EAAE,CAAC;YAC1C,CAAC;YACD,cAAc,GAAG,MAAM,CAAC,GAAG,CACzB,CAAC,EAAE,EAAE,EAAE,CACL,IAAI,oBAAoB,CAAC;gBACvB,EAAE,EAAE,EAAE,CAAC,MAAM;gBACb,IAAI,EAAE,OAAO;gBACb,eAAe,EAAE,EAAE,CAAC,MAAM;gBAC1B,mBAAmB,EAAE,CAAC,EAAE,CAAC,SAAS,CAAC;gBACnC,MAAM,EAAE,IAAI,CAAC,IAAI,CAAC,MAAM;aACzB,CAAC,CACL,CAAC;QACJ,CAAC;aAAM,CAAC;YACN,2EAA2E;YAC3E,MAAM,iBAAiB,GAAG,IAAI,CAAC,IAAI,CAAC,oBAAoB,EAAE,CAAC;YAC3D,IAAI,CAAC,iBAAiB,EAAE,CAAC;gBACvB,OAAO,EAAE,KAAK,EAAE,uBAAuB,EAAE,CAAC;YAC5C,CAAC;YACD,cAAc,GAAG;gBACf,IAAI,oBAAoB,CAAC;oBACvB,EAAE,EAAE,iBAAiB,CAAC,OAAO;oBAC7B,IAAI,EAAE,OAAO;oBACb,eAAe,EAAE,iBAAiB,CAAC,OAAO;oBAC1C,mBAAmB,EAAE,iBAAiB,CAAC,UAAU;oBACjD,MAAM,EAAE,IAAI,CAAC,IAAI,CAAC,MAAM;iBACzB,CAAC;aACH,CAAC;QACJ,CAAC;QACD,KAAK,OAAO,CAAC;QACb,MAAM,iBAAiB,GAAG,MAAM,CAAC,IAAI,CAAC,eAAe,EAAE,KAAK,CAAC,CAAC;QAC9D,IAAI,mBAA2B,CAAC;QAChC,6FAA6F;QAC7F,sFAAsF;QACtF,IAAI,cAAc,GAAgF,IAAI,CAAC;QACvG,IAAI,CAAC;YACH,MAAM,SAAS,GAAG,MAAM,aAAa,CAAC,iBAAiB,EAAE;gBACvD,SAAS;gBACT,YAAY;gBACZ,cAAc;gBACd,YAAY;aACb,CAAC,CAAC;YACH,mBAAmB,GAAG,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,aAAa,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;YAC3E,IAAI,CAAC,IAAI,CAAC,kBAAkB,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC;YAC/C,IAAI,CAAC,IAAI,CAAC,kBAAkB,CAAC,IAAI,UAAU,CAAC,SAAS,CAAC,aAAa,CAAC,CAAC,CAAC;YACtE,IAAI,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC;gBAC1B,cAAc,GAAG;oBACf,OAAO;oBACP,aAAa,EAAE,mBAAmB;oBAClC,UAAU,EAAE,SAAS,CAAC,UAAU;oBAChC,YAAY,EAAE,SAAS,CAAC,YAAY;oBACpC,SAAS,EAAE,SAAS,CAAC,SAAS;oBAC9B,YAAY,EAAE,SAAS,CAAC,YAAY;oBACpC,eAAe,EAAE,QAAQ,CAAC,MAAM,CAAC,SAAS,CAAC,WAAW,CAAe;oBACrE,mBAAmB,EAAE,QAAQ,CAAC,MAAM,CAAC,SAAS,CAAC,eAAe,CAAe;oBAC7E,SAAS,EAAE,aAAa;iBACzB,CAAC;YACJ,CAAC;QACH,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,EAAE,KAAK,EAAE,YAAY,EAAE,CAAC;QACjC,CAAC;QACD,iGAAiG;QACjG,0FAA0F;QAC1F,IAAI,cAAc,IAAI,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC;YAC5C,MAAM,WAAW,GAAG,IAAI,CAAC,IAAI,CAAC,WAAW,CAAC;YAC1C,MAAM,KAAK,GAAG,cAAc,CAAC;YAC7B,MAAM,EAAE,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC,CAAC,GAAG,EAAE,CAAC,WAAW,CAAC,oBAAoB,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;YACnF,IAAI,CAAC,EAAE;gBAAE,OAAO,EAAE,KAAK,EAAE,yBAAyB,EAAE,CAAC;QACvD,CAAC;QAED,0EAA0E;QAC1E,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,kBAAkB,CAAC;YACjD,IAAI,EAAE,cAAc;YACpB,cAAc,EAAE,mBAAmB;SACpC,CAAC,CAAC;QACH,IAAI,CAAC,OAAO,CAAC,EAAE,EAAE,CAAC;YAChB,OAAO,EAAE,KAAK,EAAE,OAAO,CAAC,MAAM,IAAI,uBAAuB,EAAE,CAAC;QAC9D,CAAC;QAED,mDAAmD;QACnD,MAAM,mBAAmB,GAAG,MAAM,CAAC;QACnC,IAAI,aAAwD,CAAC;QAC7D,MAAM,mBAAmB,GAAG,MAAM,OAAO,CAAC,IAAI,CAA0B;YACtE,IAAI,OAAO,CAA0B,CAAC,OAAO,EAAE,EAAE;gBAC/C,IAAI,CAAC,IAAI,CAAC,yBAAyB,CAAC,OAAO,CAAC,CAAC;YAC/C,CAAC,CAAC;YACF,IAAI,OAAO,CAA0B,CAAC,OAAO,EAAE,EAAE;gBAC/C,aAAa,GAAG,UAAU,CAAC,GAAG,EAAE;oBAC9B,IAAI,CAAC,IAAI,CAAC,yBAAyB,CAAC,IAAI,CAAC,CAAC;oBAC1C,OAAO,CAAC,EAAE,IAAI,EAAE,gBAAgB,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC,CAAC;gBACzD,CAAC,EAAE,mBAAmB,CAAC,CAAC;YAC1B,CAAC,CAAC;SACH,CAAC,CAAC;QACH,YAAY,CAAC,aAAa,CAAC,CAAC;QAE5B,IAAI,mBAAmB,CAAC,MAAM,CAAC,KAAK,kBAAkB,EAAE,CAAC;YACvD,MAAM,MAAM,GAAI,mBAAmB,CAAC,QAAQ,CAAwB,IAAI,SAAS,CAAC;YAClF,IACE,MAAM,KAAK,oBAAoB;gBAC/B,mBAAmB,CAAC,UAAU,CAAC;gBAC/B,mBAAmB,CAAC,gBAAgB,CAAC,EACrC,CAAC;gBACD,MAAM,KAAK,GAAsB;oBAC/B,QAAQ,EAAE,mBAAmB,CAAC,UAAU,CAAW;oBACnD,cAAc,EAAE,mBAAmB,CAAC,gBAAgB,CAAW;oBAC/D,aAAa,EAAG,mBAAmB,CAAC,eAAe,CAAwB,IAAI,cAAc;oBAC7F,aAAa,EAAE,IAAI,CAAC,GAAG,EAAE;oBACzB,MAAM,EAAE,QAAQ;iBACjB,CAAC;gBACF,kFAAkF;gBAClF,IAAI,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC;oBAC1B,MAAM,EAAE,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,mBAAmB,CAAC,KAAK,EAAE,cAAc,EAAE,kBAAkB,CAAC,CAAC,CAAC;oBACvG,IAAI,CAAC,EAAE;wBAAE,OAAO,EAAE,KAAK,EAAE,yBAAyB,EAAE,CAAC;gBACvD,CAAC;gBACD,IAAI,CAAC,kBAAkB,GAAG,KAAK,CAAC;gBAChC,IAAI,CAAC,cAAc,GAAG,aAAa,CAAC;gBACpC,OAAO,KAAK,CAAC;YACf,CAAC;YACD,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC;QAC3B,CAAC;QAED,4CAA4C;QAC5C,MAAM,OAAO,GAAG,mBAAmB,CAAC,UAAU,CAAW,CAAC;QAC1D,MAAM,aAAa,GAAG,mBAAmB,CAAC,gBAAgB,CAAW,CAAC;QAEtE,MAAM,KAAK,GAAsB;YAC/B,QAAQ,EAAE,OAAO;YACjB,cAAc,EAAE,aAAa;YAC7B,aAAa,EAAE,cAAc;YAC7B,aAAa,EAAE,IAAI,CAAC,GAAG,EAAE;YACzB,MAAM,EAAE,QAAQ;SACjB,CAAC;QACF,+FAA+F;QAC/F,uFAAuF;QACvF,IAAI,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC;YAC1B,MAAM,EAAE,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,mBAAmB,CAAC,KAAK,EAAE,cAAc,EAAE,kBAAkB,CAAC,CAAC,CAAC;YACvG,IAAI,CAAC,EAAE;gBAAE,OAAO,EAAE,KAAK,EAAE,yBAAyB,EAAE,CAAC;QACvD,CAAC;QACD,IAAI,CAAC,kBAAkB,GAAG,KAAK,CAAC;QAChC,IAAI,CAAC,cAAc,GAAG,aAAa,CAAC;QACpC,OAAO,KAAK,CAAC;IACf,CAAC;CACF"}
|
|
@@ -0,0 +1,19 @@
|
|
|
1
|
+
import type { SessionStatus } from "./types.js";
|
|
2
|
+
/**
|
|
3
|
+
* The operator-facing CATEGORY of a session, derived from its raw status + message count.
|
|
4
|
+
* The raw statuses (active / interrupted / sealed / seal_interrupted_pending) are an internal
|
|
5
|
+
* lifecycle detail; operators reason in three buckets:
|
|
6
|
+
*
|
|
7
|
+
* - open — live or resumable: an active session, OR an interrupted one that actually
|
|
8
|
+
* exchanged messages (you can pick it back up).
|
|
9
|
+
* - closed — done: sealed (or sealing — seal_interrupted_pending).
|
|
10
|
+
* - failed — a session-initiation that never exchanged a message and got cut. A dead
|
|
11
|
+
* handshake. These must NOT clutter `cello status`, and are only returned by
|
|
12
|
+
* `get-sessions --failed` (or --all).
|
|
13
|
+
*
|
|
14
|
+
* This is the single source of truth for the status filter and the get-sessions flags, so the
|
|
15
|
+
* two never drift.
|
|
16
|
+
*/
|
|
17
|
+
export type SessionCategory = "open" | "closed" | "failed";
|
|
18
|
+
export declare function classifySession(status: SessionStatus, messageCount: number): SessionCategory;
|
|
19
|
+
//# sourceMappingURL=session-category.d.ts.map
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"session-category.d.ts","sourceRoot":"","sources":["../src/session-category.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,YAAY,CAAC;AAEhD;;;;;;;;;;;;;;GAcG;AACH,MAAM,MAAM,eAAe,GAAG,MAAM,GAAG,QAAQ,GAAG,QAAQ,CAAC;AAE3D,wBAAgB,eAAe,CAAC,MAAM,EAAE,aAAa,EAAE,YAAY,EAAE,MAAM,GAAG,eAAe,CAK5F"}
|
|
@@ -0,0 +1,9 @@
|
|
|
1
|
+
export function classifySession(status, messageCount) {
|
|
2
|
+
if (status === "sealed" || status === "seal_interrupted_pending")
|
|
3
|
+
return "closed";
|
|
4
|
+
if (status === "interrupted")
|
|
5
|
+
return messageCount > 0 ? "open" : "failed";
|
|
6
|
+
// "active"
|
|
7
|
+
return "open";
|
|
8
|
+
}
|
|
9
|
+
//# sourceMappingURL=session-category.js.map
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"session-category.js","sourceRoot":"","sources":["../src/session-category.ts"],"names":[],"mappings":"AAmBA,MAAM,UAAU,eAAe,CAAC,MAAqB,EAAE,YAAoB;IACzE,IAAI,MAAM,KAAK,QAAQ,IAAI,MAAM,KAAK,0BAA0B;QAAE,OAAO,QAAQ,CAAC;IAClF,IAAI,MAAM,KAAK,aAAa;QAAE,OAAO,YAAY,GAAG,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,QAAQ,CAAC;IAC1E,WAAW;IACX,OAAO,MAAM,CAAC;AAChB,CAAC"}
|
|
@@ -20,6 +20,7 @@
|
|
|
20
20
|
import { type LegibilityForHash } from "./seal-legibility-tbs.js";
|
|
21
21
|
import type { IThresholdSigner } from "@cello-protocol/crypto";
|
|
22
22
|
import type { CelloNode } from "@cello-protocol/transport";
|
|
23
|
+
import type { ConsortiumEndpoint } from "./directory-bootstrap.js";
|
|
23
24
|
import type { DaemonRegistrationPersistence } from "./registration-persistence.js";
|
|
24
25
|
import type { SignalingSeam } from "./registration-context.js";
|
|
25
26
|
import type { Logger } from "./types.js";
|
|
@@ -51,11 +52,18 @@ export interface CeremonyWiringDeps {
|
|
|
51
52
|
agentPubkeyHex: string;
|
|
52
53
|
/** The agent's directory-connected libp2p node (the per-agent signaling node). */
|
|
53
54
|
getNode: () => CelloNode | null;
|
|
54
|
-
/** Resolve the directory endpoint to open FROST streams on. */
|
|
55
|
+
/** Resolve the directory endpoint to open FROST streams on (single-node / primary). */
|
|
55
56
|
getDirectoryEndpoint: () => Promise<{
|
|
56
57
|
peerId: string;
|
|
57
58
|
multiaddr?: string;
|
|
58
59
|
} | null>;
|
|
60
|
+
/**
|
|
61
|
+
* DOD-SIGN-1: resolve the FULL consortium directory-node roster from the verified manifest at
|
|
62
|
+
* ceremony time, or NULL when no consortium manifest is configured. A non-null roster ⇒ the
|
|
63
|
+
* threshold signer coordinates the FROST ceremony across ALL these nodes (T-of-N — it excludes
|
|
64
|
+
* a node that's down and reaches any T). Null ⇒ single-node (M6/M7 back-compat).
|
|
65
|
+
*/
|
|
66
|
+
getConsortiumEndpoints: () => Promise<ConsortiumEndpoint[] | null>;
|
|
59
67
|
/** The agent's per-agent signaling seam (where ceremony_request arrives + result is sent). */
|
|
60
68
|
signaling: SignalingSeam;
|
|
61
69
|
logger: Logger;
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"session-ceremony.d.ts","sourceRoot":"","sources":["../src/session-ceremony.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;GAkBG;AAIH,OAAO,EAAuB,KAAK,iBAAiB,EAAE,MAAM,0BAA0B,CAAC;AAIvF,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,wBAAwB,CAAC;AAE/D,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,2BAA2B,CAAC;AAE3D,OAAO,KAAK,EAAE,6BAA6B,EAAE,MAAM,+BAA+B,CAAC;AACnF,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,2BAA2B,CAAC;AAC/D,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,YAAY,CAAC;AAEzC;;;;;;;;GAQG;AACH,wBAAgB,uBAAuB,CAAC,IAAI,EAAE;IAC5C,SAAS,EAAE,MAAM,CAAC;IAClB,2BAA2B,EAAE,MAAM;QAAE,MAAM,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,EAAE,CAAA;KAAE,GAAG,IAAI,CAAC;IAC9E,SAAS,EAAE,aAAa,CAAC;IACzB,MAAM,EAAE,MAAM,CAAC;CAChB,GAAG,MAAM,IAAI,CAkCb;AAED,MAAM,WAAW,kBAAkB;IACjC,SAAS,EAAE,MAAM,CAAC;IAClB;;;OAGG;IACH,WAAW,EAAE,6BAA6B,CAAC;IAC3C,cAAc,EAAE,MAAM,CAAC;IACvB,kFAAkF;IAClF,OAAO,EAAE,MAAM,SAAS,GAAG,IAAI,CAAC;IAChC
|
|
1
|
+
{"version":3,"file":"session-ceremony.d.ts","sourceRoot":"","sources":["../src/session-ceremony.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;GAkBG;AAIH,OAAO,EAAuB,KAAK,iBAAiB,EAAE,MAAM,0BAA0B,CAAC;AAIvF,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,wBAAwB,CAAC;AAE/D,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,2BAA2B,CAAC;AAE3D,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,0BAA0B,CAAC;AACnE,OAAO,KAAK,EAAE,6BAA6B,EAAE,MAAM,+BAA+B,CAAC;AACnF,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,2BAA2B,CAAC;AAC/D,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,YAAY,CAAC;AAEzC;;;;;;;;GAQG;AACH,wBAAgB,uBAAuB,CAAC,IAAI,EAAE;IAC5C,SAAS,EAAE,MAAM,CAAC;IAClB,2BAA2B,EAAE,MAAM;QAAE,MAAM,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,EAAE,CAAA;KAAE,GAAG,IAAI,CAAC;IAC9E,SAAS,EAAE,aAAa,CAAC;IACzB,MAAM,EAAE,MAAM,CAAC;CAChB,GAAG,MAAM,IAAI,CAkCb;AAED,MAAM,WAAW,kBAAkB;IACjC,SAAS,EAAE,MAAM,CAAC;IAClB;;;OAGG;IACH,WAAW,EAAE,6BAA6B,CAAC;IAC3C,cAAc,EAAE,MAAM,CAAC;IACvB,kFAAkF;IAClF,OAAO,EAAE,MAAM,SAAS,GAAG,IAAI,CAAC;IAChC,uFAAuF;IACvF,oBAAoB,EAAE,MAAM,OAAO,CAAC;QAAE,MAAM,EAAE,MAAM,CAAC;QAAC,SAAS,CAAC,EAAE,MAAM,CAAA;KAAE,GAAG,IAAI,CAAC,CAAC;IACnF;;;;;OAKG;IACH,sBAAsB,EAAE,MAAM,OAAO,CAAC,kBAAkB,EAAE,GAAG,IAAI,CAAC,CAAC;IACnE,8FAA8F;IAC9F,SAAS,EAAE,aAAa,CAAC;IACzB,MAAM,EAAE,MAAM,CAAC;CAChB;AAED;;;;GAIG;AACH,wBAAsB,0BAA0B,CAAC,IAAI,EAAE,kBAAkB,GAAG,OAAO,CAAC,gBAAgB,GAAG,IAAI,CAAC,CA0F3G;AAED;;;;;GAKG;AACH;;;;;;;;;;;;;GAaG;AACH,wBAAgB,uBAAuB,CAAC,IAAI,EAAE,kBAAkB,GAAG,MAAM,IAAI,CAmH5E;AAED;;;;;;;;GAQG;AACH,wBAAsB,2BAA2B,CAC/C,IAAI,EAAE;IAAE,WAAW,EAAE,6BAA6B,CAAC;IAAC,cAAc,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,EAC5F,IAAI,EAAE;IACJ,SAAS,EAAE,UAAU,CAAC;IACtB,UAAU,EAAE,UAAU,CAAC;IACvB,SAAS,EAAE,MAAM,CAAC;IAClB,cAAc,EAAE,MAAM,CAAC;IACvB,cAAc,EAAE,UAAU,CAAC;IAC3B,aAAa,EAAE,OAAO,GAAG,QAAQ,CAAC;CACnC,GACA,OAAO,CAAC;IAAE,EAAE,EAAE,IAAI,CAAA;CAAE,GAAG;IAAE,EAAE,EAAE,KAAK,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,CAAC,CA8BvD;AAED;;;;;;;;;;;;;;;;;;;;;GAqBG;AACH,wBAAsB,8BAA8B,CAClD,IAAI,EAAE;IAAE,WAAW,EAAE,6BAA6B,CAAC;IAAC,cAAc,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAC;IAAC,sBAAsB,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;CAAE,EACpI,IAAI,EAAE;IACJ,SAAS,EAAE,UAAU,CAAC;IACtB,UAAU,EAAE,UAAU,CAAC;IACvB,SAAS,EAAE,MAAM,CAAC;IAClB,cAAc,EAAE,MAAM,CAAC;IACvB,cAAc,EAAE,UAAU,CAAC;IAC3B,YAAY,EAAE,UAAU,CAAC;IACzB,aAAa,EAAE,OAAO,GAAG,QAAQ,CAAC;IAClC,UAAU,EAAE,iBAAiB,GAAG,IAAI,CAAC;CACtC,GACA,OAAO,CAAC;IAAE,EAAE,EAAE,IAAI,CAAC;IAAC,QAAQ,EAAE,OAAO,CAAA;CAAE,GAAG;IAAE,EAAE,EAAE,KAAK,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,CAAC,CA0C1E;AAED,wBAAgB,0BAA0B,CAAC,IAAI,EAAE,kBAAkB,GAAG,MAAM,IAAI,CA+D/E"}
|
package/dist/session-ceremony.js
CHANGED
|
@@ -116,19 +116,45 @@ export async function reconstructThresholdSigner(deps) {
|
|
|
116
116
|
});
|
|
117
117
|
return null;
|
|
118
118
|
}
|
|
119
|
+
// DOD-SIGN-1: build a directory-node stub PER consortium node so the FROST threshold signer
|
|
120
|
+
// can run the signing ceremony across ALL N nodes (it reaches any T and excludes a node that's
|
|
121
|
+
// down — "kill a node, still signs"). With no consortium manifest configured the roster is null
|
|
122
|
+
// → the single primary endpoint (M6/M7 single-node back-compat). NOTE: the share's threshold T
|
|
123
|
+
// (from the multi-node DKG) is FIXED — a degraded roster (fewer than T reachable) makes signing
|
|
124
|
+
// FAIL, it can never forge a lower-threshold signature, so a single-stub fallback is safe.
|
|
119
125
|
let directoryNodeStubs;
|
|
120
|
-
const ep = await deps.getDirectoryEndpoint();
|
|
121
126
|
const node = deps.getNode();
|
|
122
|
-
|
|
127
|
+
const roster = await deps.getConsortiumEndpoints();
|
|
128
|
+
const epochId = `${deps.agentPubkeyHex}:epoch:1`;
|
|
129
|
+
const mkStub = (peerId, multiaddr) => {
|
|
123
130
|
const stub = new NetworkDirectoryNode({
|
|
124
|
-
id:
|
|
125
|
-
node,
|
|
126
|
-
directoryPeerId:
|
|
127
|
-
directoryMultiaddrs: [
|
|
131
|
+
id: peerId,
|
|
132
|
+
node: node,
|
|
133
|
+
directoryPeerId: peerId,
|
|
134
|
+
directoryMultiaddrs: [multiaddr],
|
|
128
135
|
logger: deps.logger,
|
|
129
136
|
});
|
|
130
|
-
stub.setBootstrapContext(deps.agentPubkeyHex,
|
|
131
|
-
|
|
137
|
+
stub.setBootstrapContext(deps.agentPubkeyHex, epochId);
|
|
138
|
+
return stub;
|
|
139
|
+
};
|
|
140
|
+
if (node && roster !== null && roster.length > 0) {
|
|
141
|
+
// Consortium configured → one stub per resolved directory node (T-of-N signing).
|
|
142
|
+
directoryNodeStubs = roster.map((ep) => mkStub(ep.peerId, ep.multiaddr));
|
|
143
|
+
}
|
|
144
|
+
else if (node) {
|
|
145
|
+
// No consortium manifest (roster null) or a configured manifest that resolved EMPTY → the single
|
|
146
|
+
// primary endpoint. INTENTIONAL asymmetry with DKG-1 (which REFUSES a configured-but-empty roster
|
|
147
|
+
// because DKG needs all N): for SIGNING the share's threshold T is FIXED, so a degraded/single
|
|
148
|
+
// stub makes participateInCeremony fail the `reachable < T-1` pre-check rather than forge a weaker
|
|
149
|
+
// seal — safe. WARN distinctly on the configured-but-unreachable case so the operator sees "your
|
|
150
|
+
// consortium was unreachable" rather than a generic below-threshold error (fallback-finder F3).
|
|
151
|
+
if (roster !== null && roster.length === 0) {
|
|
152
|
+
deps.logger.warn("session.ceremony.consortium_unreachable", { agentName: deps.agentName });
|
|
153
|
+
}
|
|
154
|
+
const ep = await deps.getDirectoryEndpoint();
|
|
155
|
+
if (ep && ep.multiaddr) {
|
|
156
|
+
directoryNodeStubs = [mkStub(ep.peerId, ep.multiaddr)];
|
|
157
|
+
}
|
|
132
158
|
}
|
|
133
159
|
return new FrostThresholdSigner({ threshold: share.threshold, participants: share.participants, directoryNodeStubs }, Buffer.from(deps.agentPubkeyHex, "hex"));
|
|
134
160
|
}
|