@did-btcr2/aggregation 0.1.0

package/dist/esm/participant.js

@@ -0,0 +1,588 @@
+import { canonicalHash } from '@did-btcr2/common';
+import { schnorr } from '@noble/curves/secp256k1.js';
+import { bytesToHex, hexToBytes } from '@noble/hashes/utils';
+import { Script, Transaction } from '@scure/btc-signer';
+import { getBeaconStrategy } from './beacon-strategy.js';
+import { AggregationCohort } from './cohort.js';
+import { AggregationParticipantError } from './errors.js';
+import { fallbackSighash } from './fallback-spend.js';
+import { buildFallbackLeaf } from './recovery-policy.js';
+import { isCohortAdvertMessage } from './messages/bodies.js';
+import { AGGREGATION_WIRE_VERSION } from './messages/base.js';
+import { AGGREGATED_NONCE, AUTHORIZATION_REQUEST, COHORT_ADVERT, COHORT_OPT_IN_ACCEPT, COHORT_READY, DISTRIBUTE_AGGREGATED_DATA, FALLBACK_AUTHORIZATION_REQUEST, } from './messages/constants.js';
+import { createCohortOptInMessage, createFallbackSignatureMessage, createNonceContributionMessage, createSignatureAuthorizationMessage, createSubmitNonIncludedMessage, createSubmitUpdateMessage, createValidationAckMessage, } from './messages/factories.js';
+import { ParticipantCohortPhase } from './phases.js';
+import { BeaconSigningSession } from './signing-session.js';
+/**
+ * True if `tx` has an OP_RETURN output whose payload equals the 32-byte signal
+ * `signalHex`. A member binds its fallback signature to the exact signal it
+ * validated, so a coordinator that drives the fallback output selection cannot
+ * anchor a different announcement (a stale signal, or one whose CAS/SMT root
+ * omits the member's update) under the member's signature.
+ */
+function txEmbedsSignal(tx, signalHex) {
+    let expected;
+    try {
+        expected = hexToBytes(signalHex);
+    }
+    catch {
+        return false;
+    }
+    if (expected.length === 0)
+        return false;
+    for (let i = 0; i < tx.outputsLength; i++) {
+        const script = tx.getOutput(i)?.script;
+        if (!script)
+            continue;
+        let decoded;
+        try {
+            decoded = Script.decode(script);
+        }
+        catch {
+            continue;
+        }
+        if (decoded.length === 2 && decoded[0] === 'RETURN' && decoded[1] instanceof Uint8Array) {
+            const payload = decoded[1];
+            if (payload.length === expected.length && payload.every((b, j) => b === expected[j]))
+                return true;
+        }
+    }
+    return false;
+}
+/**
+ * Sans-I/O state machine for an Aggregation Participant.
+ *
+ * Manages multiple cohorts simultaneously. The client app drives the state
+ * machine via `receive()` (for incoming messages) and explicit action methods
+ * (for user decisions). All outgoing messages are returned for the caller to
+ * send via whatever transport.
+ *
+ * @class AggregationParticipant
+ */
+export class AggregationParticipant {
+    did;
+    /** MuSig2 signing capability. The raw secret never lives as a field here. */
+    #signer;
+    /** Per-cohort state, keyed by cohortId. */
+    #cohortStates = new Map();
+    constructor({ did, signer }) {
+        this.did = did;
+        this.#signer = signer;
+    }
+    /** The participant's compressed (33-byte) MuSig2 public key. Not secret. */
+    get publicKey() {
+        return this.#signer.publicKey;
+    }
+    /**
+     * Process an incoming message. Updates internal state but never produces
+     * outgoing messages: those come exclusively from action methods.
+     */
+    receive(message) {
+        // Reject messages whose wire version doesn't match what this build speaks.
+        if (message.version === undefined || message.version !== AGGREGATION_WIRE_VERSION) {
+            return;
+        }
+        const type = message.type;
+        switch (type) {
+            case COHORT_ADVERT:
+                this.#handleCohortAdvert(message);
+                break;
+            case COHORT_OPT_IN_ACCEPT:
+                this.#handleOptInAccept(message);
+                break;
+            case COHORT_READY:
+                this.#handleCohortReady(message);
+                break;
+            case DISTRIBUTE_AGGREGATED_DATA:
+                this.#handleDistributeAggregatedData(message);
+                break;
+            case AUTHORIZATION_REQUEST:
+                this.#handleAuthorizationRequest(message);
+                break;
+            case AGGREGATED_NONCE:
+                this.#handleAggregatedNonce(message);
+                break;
+            case FALLBACK_AUTHORIZATION_REQUEST:
+                this.#handleFallbackAuthorizationRequest(message);
+                break;
+            default:
+                // Unknown message type, silently ignore
+                break;
+        }
+    }
+    /** Cohorts the participant has discovered but not yet joined. */
+    get discoveredCohorts() {
+        const map = new Map();
+        for (const [id, state] of this.#cohortStates) {
+            if (state.phase === ParticipantCohortPhase.Discovered && state.advert) {
+                map.set(id, state.advert);
+            }
+        }
+        return map;
+    }
+    #handleCohortAdvert(message) {
+        // Validate the wire shape (incl. minParticipants range) before trusting it,
+        // rather than reading fields with `?? 0` fallbacks (see ADR 039).
+        if (!isCohortAdvertMessage(message))
+            return;
+        const { cohortId, network, communicationPk, ...conditions } = message.body;
+        if (this.#cohortStates.has(cohortId))
+            return; // Already known
+        const advert = {
+            cohortId,
+            serviceDid: message.from,
+            network,
+            serviceCommunicationPk: communicationPk,
+            ...conditions,
+        };
+        this.#cohortStates.set(cohortId, {
+            phase: ParticipantCohortPhase.Discovered,
+            cohortId,
+            serviceDid: message.from,
+            advert,
+        });
+    }
+    /**
+     * User action: join a discovered cohort.
+     * Returns the opt-in message to send.
+     */
+    joinCohort(cohortId) {
+        const state = this.#cohortStates.get(cohortId);
+        if (!state || state.phase !== ParticipantCohortPhase.Discovered) {
+            throw new AggregationParticipantError(`Cannot join cohort ${cohortId}: not in Discovered phase.`, 'INVALID_PHASE', { cohortId, phase: state?.phase });
+        }
+        // Create local cohort to track our view. Carry the advertised recovery
+        // params so validateMembership recomputes the same script-tree beacon
+        // address the service derived (ADR 042); a mismatch rejects the cohort.
+        const advert = state.advert;
+        const cohort = new AggregationCohort({
+            id: cohortId,
+            serviceDid: state.serviceDid,
+            minParticipants: advert.minParticipants,
+            network: advert.network,
+            beaconType: advert.beaconType,
+            recoveryKey: advert.recoveryKey ? hexToBytes(advert.recoveryKey) : undefined,
+            recoverySequence: advert.recoverySequence,
+            fundingModel: advert.fundingModel,
+            fallbackThreshold: advert.fallbackThreshold,
+        });
+        state.cohort = cohort;
+        state.phase = ParticipantCohortPhase.OptedIn;
+        const optInMessage = createCohortOptInMessage({
+            from: this.did,
+            to: state.serviceDid,
+            cohortId,
+            participantPk: this.publicKey,
+            communicationPk: this.publicKey,
+        });
+        return [optInMessage];
+    }
+    #handleOptInAccept(message) {
+        // Acknowledgment from service, no state change needed
+        void message;
+    }
+    /** Cohorts that have been finalized: beacon address available. */
+    get joinedCohorts() {
+        const map = new Map();
+        for (const [id, state] of this.#cohortStates) {
+            if (state.cohort && state.cohort.beaconAddress) {
+                map.set(id, {
+                    cohortId: id,
+                    serviceDid: state.serviceDid,
+                    beaconAddress: state.cohort.beaconAddress,
+                    cohortKeys: state.cohort.cohortKeys,
+                });
+            }
+        }
+        return map;
+    }
+    #handleCohortReady(message) {
+        const cohortId = message.body?.cohortId;
+        if (!cohortId)
+            return;
+        const state = this.#cohortStates.get(cohortId);
+        if (!state || !state.cohort)
+            return;
+        if (state.phase !== ParticipantCohortPhase.OptedIn)
+            return;
+        const beaconAddress = message.body?.beaconAddress;
+        const cohortKeys = message.body?.cohortKeys;
+        if (!beaconAddress || !cohortKeys)
+            return;
+        const participantPkHex = bytesToHex(this.publicKey);
+        const cohortKeysHex = cohortKeys.map(k => bytesToHex(new Uint8Array(k)));
+        state.cohort.validateMembership(participantPkHex, cohortKeysHex, beaconAddress);
+        state.phase = ParticipantCohortPhase.CohortReady;
+    }
+    /**
+     * User action: submit a signed BTCR2 update for inclusion in the cohort's
+     * aggregated signal.
+     */
+    submitUpdate(cohortId, signedUpdate) {
+        const state = this.#cohortStates.get(cohortId);
+        if (!state || state.phase !== ParticipantCohortPhase.CohortReady) {
+            throw new AggregationParticipantError(`Cannot submit update to cohort ${cohortId}: not in CohortReady phase.`, 'INVALID_PHASE', { cohortId, phase: state?.phase });
+        }
+        state.submittedUpdate = signedUpdate;
+        state.included = true;
+        state.phase = ParticipantCohortPhase.UpdateSubmitted;
+        const message = createSubmitUpdateMessage({
+            from: this.did,
+            to: state.serviceDid,
+            cohortId,
+            signedUpdate: signedUpdate,
+        });
+        return [message];
+    }
+    /**
+     * User action: decline to submit an update this round (cooperative
+     * non-inclusion). The member stays in the cohort and still signs; it will be
+     * absent from the CAS Announcement Map, or carry a non-inclusion leaf in the
+     * SMT. Returns the SUBMIT_NONINCLUDED message to send.
+     */
+    declineUpdate(cohortId) {
+        const state = this.#cohortStates.get(cohortId);
+        if (!state || state.phase !== ParticipantCohortPhase.CohortReady) {
+            throw new AggregationParticipantError(`Cannot decline in cohort ${cohortId}: not in CohortReady phase.`, 'INVALID_PHASE', { cohortId, phase: state?.phase });
+        }
+        // Leave submittedUpdate unset; included=false is the load-bearing signal that
+        // the validation handler uses to validate the non-inclusion slot.
+        state.included = false;
+        state.phase = ParticipantCohortPhase.NonIncluded;
+        const message = createSubmitNonIncludedMessage({
+            from: this.did,
+            to: state.serviceDid,
+            cohortId,
+        });
+        return [message];
+    }
+    /** Aggregated data awaiting user validation. */
+    get pendingValidations() {
+        const map = new Map();
+        for (const [id, state] of this.#cohortStates) {
+            if (state.phase === ParticipantCohortPhase.AwaitingValidation && state.validation) {
+                map.set(id, state.validation);
+            }
+        }
+        return map;
+    }
+    /**
+     * The validated aggregated data retained for a cohort, regardless of phase.
+     * Unlike {@link pendingValidations} (which lists only cohorts still awaiting
+     * the validate decision), this returns the stored validation, including the
+     * participant's sidecar (the CAS Announcement map or its SMT inclusion proof),
+     * so it is still readable once the cohort reaches Complete. Returns
+     * undefined before aggregated data has been received.
+     */
+    getValidation(cohortId) {
+        return this.#cohortStates.get(cohortId)?.validation;
+    }
+    #handleDistributeAggregatedData(message) {
+        const cohortId = message.body?.cohortId;
+        if (!cohortId)
+            return;
+        const state = this.#cohortStates.get(cohortId);
+        // A submitter is in UpdateSubmitted; a decliner (cooperative non-inclusion)
+        // is in NonIncluded. Both validate their own slot in the distributed data.
+        if (!state || (state.phase !== ParticipantCohortPhase.UpdateSubmitted && state.phase !== ParticipantCohortPhase.NonIncluded))
+            return;
+        const declined = state.included === false;
+        // A submitter must have its update stored; a decliner has none by design.
+        if (!declined && !state.submittedUpdate)
+            return;
+        const beaconType = message.body?.beaconType;
+        if (!beaconType)
+            return;
+        const strategy = getBeaconStrategy(beaconType);
+        if (!strategy)
+            return;
+        const signalBytesHex = message.body?.signalBytesHex ?? '';
+        // Decliner validates its non-inclusion slot (CAS absence / SMT non-inclusion
+        // proof); submitter validates inclusion against its update hash.
+        const expectedHash = declined ? '' : canonicalHash(state.submittedUpdate);
+        const result = strategy.validateParticipantView({
+            participantDid: this.did,
+            included: !declined,
+            submittedUpdate: declined ? undefined : state.submittedUpdate,
+            expectedHash: declined ? undefined : expectedHash,
+            body: message.body,
+        });
+        state.validation = {
+            cohortId,
+            beaconType,
+            signalBytesHex,
+            expectedHash,
+            matches: result.matches,
+            casAnnouncement: result.casAnnouncement,
+            smtProof: result.smtProof,
+            included: !declined,
+        };
+        state.phase = ParticipantCohortPhase.AwaitingValidation;
+    }
+    /**
+     * User action: approve aggregated data and send validation ack.
+     */
+    approveValidation(cohortId) {
+        const state = this.#cohortStates.get(cohortId);
+        if (!state || state.phase !== ParticipantCohortPhase.AwaitingValidation) {
+            throw new AggregationParticipantError(`Cannot approve validation for cohort ${cohortId}: not in AwaitingValidation phase.`, 'INVALID_PHASE', { cohortId, phase: state?.phase });
+        }
+        state.phase = ParticipantCohortPhase.ValidationSent;
+        return [createValidationAckMessage({
+                from: this.did,
+                to: state.serviceDid,
+                cohortId,
+                approved: true,
+            })];
+    }
+    /**
+     * User action: reject aggregated data and send rejection ack.
+     */
+    rejectValidation(cohortId) {
+        const state = this.#cohortStates.get(cohortId);
+        if (!state || state.phase !== ParticipantCohortPhase.AwaitingValidation) {
+            throw new AggregationParticipantError(`Cannot reject validation for cohort ${cohortId}: not in AwaitingValidation phase.`, 'INVALID_PHASE', { cohortId, phase: state?.phase });
+        }
+        state.phase = ParticipantCohortPhase.Failed;
+        return [createValidationAckMessage({
+                from: this.did,
+                to: state.serviceDid,
+                cohortId,
+                approved: false,
+            })];
+    }
+    /** Signing requests awaiting user approval. */
+    get pendingSigningRequests() {
+        const map = new Map();
+        for (const [id, state] of this.#cohortStates) {
+            if (state.phase === ParticipantCohortPhase.AwaitingSigning && state.signingRequest) {
+                map.set(id, state.signingRequest);
+            }
+        }
+        return map;
+    }
+    #handleAuthorizationRequest(message) {
+        const cohortId = message.body?.cohortId;
+        if (!cohortId)
+            return;
+        const state = this.#cohortStates.get(cohortId);
+        if (!state || !state.cohort)
+            return;
+        if (state.phase !== ParticipantCohortPhase.ValidationSent)
+            return;
+        const sessionId = message.body?.sessionId;
+        const pendingTxHex = message.body?.pendingTx;
+        const prevOutScriptHex = message.body?.prevOutScriptHex;
+        const prevOutValue = message.body?.prevOutValue;
+        if (!sessionId || !pendingTxHex || !prevOutScriptHex || !prevOutValue)
+            return;
+        state.signingRequest = {
+            cohortId,
+            sessionId,
+            pendingTxHex,
+            prevOutScriptHex,
+            prevOutValue,
+        };
+        state.phase = ParticipantCohortPhase.AwaitingSigning;
+    }
+    /**
+     * Bind a signing approval to the announcement the member validated: a beacon
+     * transaction MUST carry an OP_RETURN with the exact 32-byte signal stored when
+     * the aggregated data was distributed. Both the optimistic nonce approval and
+     * the fallback approval sign with SIGHASH_DEFAULT (committing to every output)
+     * while the coordinator drives output selection, so without this check a
+     * coordinator could anchor a different signal under the member's signature.
+     */
+    #assertTxAnchorsValidatedSignal(cohortId, state, tx) {
+        const signalHex = state.validation?.signalBytesHex;
+        if (!signalHex) {
+            throw new AggregationParticipantError(`Cohort ${cohortId} has no validated signal to bind the signature to.`, 'MISSING_STATE', { cohortId });
+        }
+        if (!txEmbedsSignal(tx, signalHex)) {
+            throw new AggregationParticipantError(`Transaction for cohort ${cohortId} does not anchor the validated signal.`, 'SIGNAL_MISMATCH', { cohortId });
+        }
+    }
+    /**
+     * User action: approve signing and generate nonce contribution.
+     */
+    approveNonce(cohortId) {
+        const state = this.#cohortStates.get(cohortId);
+        if (!state || state.phase !== ParticipantCohortPhase.AwaitingSigning) {
+            throw new AggregationParticipantError(`Cannot approve nonce for cohort ${cohortId}: not in AwaitingSigning phase.`, 'INVALID_PHASE', { cohortId, phase: state?.phase });
+        }
+        if (!state.signingRequest || !state.cohort) {
+            throw new AggregationParticipantError(`Cohort ${cohortId} missing signing request or cohort state.`, 'MISSING_STATE', { cohortId });
+        }
+        // allowUnknownOutputs: a beacon transaction carries an OP_RETURN signal
+        // output, which scure does not classify as a known (spendable) output type;
+        // re-parsing the raw tx would otherwise throw.
+        const tx = Transaction.fromRaw(hexToBytes(state.signingRequest.pendingTxHex), { allowUnknownOutputs: true });
+        // Refuse to sign unless the tx anchors the signal this member validated.
+        this.#assertTxAnchorsValidatedSignal(cohortId, state, tx);
+        // Derive UTXO metadata for Taproot sighash (BIP-341). Use the script
+        // supplied by the service in AUTHORIZATION_REQUEST rather than reading
+        // the change output: input and change may use different scripts in future
+        // beacon designs, and the prevOutScript must be the UTXO script, not the
+        // change script.
+        const prevOutScripts = [hexToBytes(state.signingRequest.prevOutScriptHex)];
+        const prevOutValues = [BigInt(state.signingRequest.prevOutValue)];
+        const session = new BeaconSigningSession({
+            id: state.signingRequest.sessionId,
+            cohort: state.cohort,
+            pendingTx: tx,
+            prevOutScripts,
+            prevOutValues,
+        });
+        state.signingSession = session;
+        const nonceContribution = this.#signer.withSecret(secretKey => session.generateNonceContribution(this.publicKey, secretKey));
+        state.phase = ParticipantCohortPhase.NonceSent;
+        return [createNonceContributionMessage({
+                from: this.did,
+                to: state.serviceDid,
+                cohortId,
+                sessionId: session.id,
+                nonceContribution,
+            })];
+    }
+    #handleAggregatedNonce(message) {
+        const cohortId = message.body?.cohortId;
+        if (!cohortId)
+            return;
+        const state = this.#cohortStates.get(cohortId);
+        if (!state || !state.signingSession)
+            return;
+        if (state.phase !== ParticipantCohortPhase.NonceSent)
+            return;
+        const aggregatedNonce = message.body?.aggregatedNonce;
+        if (!aggregatedNonce)
+            return;
+        state.signingSession.aggregatedNonce = aggregatedNonce;
+        state.phase = ParticipantCohortPhase.AwaitingPartialSig;
+    }
+    /**
+     * User action: generate and return the partial signature.
+     * In most UIs this is automatic after AwaitingPartialSig, but exposing it
+     * as an explicit action lets the client UI confirm before signing if desired.
+     */
+    generatePartialSignature(cohortId) {
+        const state = this.#cohortStates.get(cohortId);
+        if (!state || state.phase !== ParticipantCohortPhase.AwaitingPartialSig) {
+            throw new AggregationParticipantError(`Cannot generate partial signature for cohort ${cohortId}: not in AwaitingPartialSig phase.`, 'INVALID_PHASE', { cohortId, phase: state?.phase });
+        }
+        if (!state.signingSession) {
+            throw new AggregationParticipantError(`No signing session for cohort ${cohortId}.`, 'MISSING_STATE', { cohortId });
+        }
+        const signingSession = state.signingSession;
+        const partialSig = this.#signer.withSecret(secretKey => signingSession.generatePartialSignature(secretKey));
+        state.phase = ParticipantCohortPhase.Complete;
+        return [createSignatureAuthorizationMessage({
+                from: this.did,
+                to: state.serviceDid,
+                cohortId,
+                sessionId: state.signingSession.id,
+                partialSignature: partialSig,
+            })];
+    }
+    /** Fallback signing requests awaiting user approval (UI: review the fallback spend). */
+    get pendingFallbackRequests() {
+        const map = new Map();
+        for (const [id, state] of this.#cohortStates) {
+            if (state.phase === ParticipantCohortPhase.AwaitingFallbackSig && state.fallbackRequest) {
+                map.set(id, state.fallbackRequest);
+            }
+        }
+        return map;
+    }
+    #handleFallbackAuthorizationRequest(message) {
+        const cohortId = message.body?.cohortId;
+        if (!cohortId)
+            return;
+        const state = this.#cohortStates.get(cohortId);
+        if (!state || !state.cohort)
+            return;
+        // The service can fall back at any point after the member validated. This
+        // includes the local Complete phase a member reaches the moment it sends its
+        // optimistic partial signature: the cohort has NOT finalized (the service
+        // only falls back before optimistic completion), and those members are
+        // exactly the k signers the fallback needs. Signing both the optimistic
+        // partial sig and the fallback sig is safe - both authorize the same outputs,
+        // and only one witness can ever confirm the single UTXO. A genuinely failed
+        // member is excluded. Ignore a duplicate request already being processed.
+        const acceptFrom = [
+            ParticipantCohortPhase.ValidationSent,
+            ParticipantCohortPhase.AwaitingSigning,
+            ParticipantCohortPhase.NonceSent,
+            ParticipantCohortPhase.AwaitingPartialSig,
+            ParticipantCohortPhase.Complete,
+        ];
+        if (!acceptFrom.includes(state.phase))
+            return;
+        const sessionId = message.body?.sessionId;
+        const pendingTxHex = message.body?.pendingTx;
+        const prevOutScriptHex = message.body?.prevOutScriptHex;
+        const prevOutValue = message.body?.prevOutValue;
+        const fallbackLeafScriptHex = message.body?.fallbackLeafScriptHex;
+        if (!sessionId || !pendingTxHex || !prevOutScriptHex || !prevOutValue || !fallbackLeafScriptHex)
+            return;
+        state.fallbackRequest = { cohortId, sessionId, pendingTxHex, prevOutScriptHex, prevOutValue, fallbackLeafScriptHex };
+        // The optimistic path is abandoned; wipe any retained secret nonce for it.
+        state.signingSession?.clearSecrets();
+        state.phase = ParticipantCohortPhase.AwaitingFallbackSig;
+    }
+    /**
+     * User action: authorize the fallback spend. Recomputes the k-of-n fallback
+     * leaf from the member's OWN cohort state (not the service-provided script),
+     * computes the BIP-341 script-path sighash over the requested transaction, and
+     * returns a standalone BIP-340 signature (no nonce round). The member completes
+     * once it has contributed; the service needs only k of these.
+     */
+    approveFallback(cohortId) {
+        const state = this.#cohortStates.get(cohortId);
+        if (!state || state.phase !== ParticipantCohortPhase.AwaitingFallbackSig) {
+            throw new AggregationParticipantError(`Cannot approve fallback for cohort ${cohortId}: not in AwaitingFallbackSig phase.`, 'INVALID_PHASE', { cohortId, phase: state?.phase });
+        }
+        if (!state.fallbackRequest || !state.cohort) {
+            throw new AggregationParticipantError(`Cohort ${cohortId} missing fallback request or cohort state.`, 'MISSING_STATE', { cohortId });
+        }
+        const req = state.fallbackRequest;
+        const tx = Transaction.fromRaw(hexToBytes(req.pendingTxHex), { allowUnknownOutputs: true });
+        const prevOutScript = hexToBytes(req.prevOutScriptHex);
+        const prevOutValue = BigInt(req.prevOutValue);
+        // Refuse to sign unless the fallback tx anchors the signal this member
+        // validated (the coordinator drives output selection on the fallback path).
+        this.#assertTxAnchorsValidatedSignal(cohortId, state, tx);
+        // Recompute the fallback leaf from our own cohort keys so a malicious service
+        // cannot induce a signature over a different leaf than the one the funded
+        // address commits to.
+        const fallbackLeaf = buildFallbackLeaf({
+            cohortKeys: state.cohort.cohortKeys,
+            fallbackThreshold: state.cohort.effectiveFallbackThreshold,
+        });
+        const sighash = fallbackSighash(tx, 0, prevOutScript, prevOutValue, fallbackLeaf);
+        const signature = this.#signer.withSecret(secretKey => schnorr.sign(sighash, secretKey));
+        state.phase = ParticipantCohortPhase.Complete;
+        return [createFallbackSignatureMessage({
+                from: this.did,
+                to: state.serviceDid,
+                cohortId,
+                sessionId: req.sessionId,
+                signerPk: this.publicKey.slice(1),
+                fallbackSignature: signature,
+            })];
+    }
+    getCohortPhase(cohortId) {
+        return this.#cohortStates.get(cohortId)?.phase;
+    }
+    /**
+     * Zeroize any retained MuSig2 secret nonces across all cohorts. The raw
+     * signing key is never held here (it lives behind the {@link AggregationSigner}
+     * and is wiped per-operation), but an abandoned signing session can still hold
+     * a secret nonce; call this on teardown to clear it deterministically.
+     */
+    clearSecrets() {
+        for (const state of this.#cohortStates.values()) {
+            state.signingSession?.clearSecrets();
+        }
+    }
+}
+//# sourceMappingURL=participant.js.map

package/dist/esm/participant.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"participant.js","sourceRoot":"","sources":["../../src/participant.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,aAAa,EAAE,MAAM,mBAAmB,CAAC;AAGlD,OAAO,EAAE,OAAO,EAAE,MAAM,4BAA4B,CAAC;AACrD,OAAO,EAAE,UAAU,EAAE,UAAU,EAAE,MAAM,qBAAqB,CAAC;AAC7D,OAAO,EAAE,MAAM,EAAE,WAAW,EAAE,MAAM,mBAAmB,CAAC;AACxD,OAAO,EAAE,iBAAiB,EAAE,MAAM,sBAAsB,CAAC;AACzD,OAAO,EAAE,iBAAiB,EAAE,MAAM,aAAa,CAAC;AAEhD,OAAO,EAAE,2BAA2B,EAAE,MAAM,aAAa,CAAC;AAC1D,OAAO,EAAE,eAAe,EAAE,MAAM,qBAAqB,CAAC;AACtD,OAAO,EAAE,iBAAiB,EAAE,MAAM,sBAAsB,CAAC;AAEzD,OAAO,EAAE,qBAAqB,EAAE,MAAM,sBAAsB,CAAC;AAC7D,OAAO,EAAE,wBAAwB,EAAE,MAAM,oBAAoB,CAAC;AAC9D,OAAO,EACL,gBAAgB,EAChB,qBAAqB,EACrB,aAAa,EACb,oBAAoB,EACpB,YAAY,EACZ,0BAA0B,EAC1B,8BAA8B,GAC/B,MAAM,yBAAyB,CAAC;AACjC,OAAO,EACL,wBAAwB,EACxB,8BAA8B,EAC9B,8BAA8B,EAC9B,mCAAmC,EACnC,8BAA8B,EAC9B,yBAAyB,EACzB,0BAA0B,GAC3B,MAAM,yBAAyB,CAAC;AAEjC,OAAO,EAAE,sBAAsB,EAAE,MAAM,aAAa,CAAC;AAErD,OAAO,EAAE,oBAAoB,EAAE,MAAM,sBAAsB,CAAC;AAE5D;;;;;;GAMG;AACH,SAAS,cAAc,CAAC,EAAe,EAAE,SAAiB;IACxD,IAAI,QAAoB,CAAC;IACzB,IAAI,CAAC;QAAC,QAAQ,GAAG,UAAU,CAAC,SAAS,CAAC,CAAC;IAAC,CAAC;IAAC,MAAM,CAAC;QAAC,OAAO,KAAK,CAAC;IAAC,CAAC;IACjE,IAAG,QAAQ,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC;IACvC,KAAI,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,EAAE,CAAC,aAAa,EAAE,CAAC,EAAE,EAAE,CAAC;QACzC,MAAM,MAAM,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,MAAM,CAAC;QACvC,IAAG,CAAC,MAAM;YAAE,SAAS;QACrB,IAAI,OAAmC,CAAC;QACxC,IAAI,CAAC;YAAC,OAAO,GAAG,MAAM,CAAC,MAAM,CAAC,MAAM,CAA+B,CAAC;QAAC,CAAC;QAAC,MAAM,CAAC;YAAC,SAAS;QAAC,CAAC;QAC1F,IAAG,OAAO,CAAC,MAAM,KAAK,CAAC,IAAI,OAAO,CAAC,CAAC,CAAC,KAAK,QAAQ,IAAI,OAAO,CAAC,CAAC,CAAC,YAAY,UAAU,EAAE,CAAC;YACvF,MAAM,OAAO,GAAG,OAAO,CAAC,CAAC,CAAC,CAAC;YAC3B,IAAG,OAAO,CAAC,MAAM,KAAK,QAAQ,CAAC,MAAM,IAAI,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC;gBAAE,OAAO,IAAI,CAAC;QACnG,CAAC;IACH,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AA2FD;;;;;;;;;GASG;AACH,MAAM,OAAO,sBAAsB;IACjB,GAAG,CAAS;IAE5B,6EAA6E;IACpE,OAAO,CAAoB;IAEpC,2CAA2C;IAC3C,aAAa,GAAwC,IAAI,GAAG,EAAE,CAAC;IAE/D,YAAY,EAAE,GAAG,EAAE,MAAM,EAAgC;QACvD,IAAI,CAAC,GAAG,GAAG,GAAG,CAAC;QACf,IAAI,CAAC,OAAO,GAAG,MAAM,CAAC;IACxB,CAAC;IAED,4EAA4E;IAC5E,IAAW,SAAS;QAClB,OAAO,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC;IAChC,CAAC;IAGD;;;OAGG;IACI,OAAO,CAAC,OAAoB;QACjC,2EAA2E;QAC3E,IAAG,OAAO,CAAC,OAAO,KAAK,SAAS,IAAI,OAAO,CAAC,OAAO,KAAK,wBAAwB,EAAE,CAAC;YACjF,OAAO;QACT,CAAC;QACD,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC;QAC1B,QAAO,IAAI,EAAE,CAAC;YACZ,KAAK,aAAa;gBAChB,IAAI,CAAC,mBAAmB,CAAC,OAAO,CAAC,CAAC;gBAClC,MAAM;YACR,KAAK,oBAAoB;gBACvB,IAAI,CAAC,kBAAkB,CAAC,OAAO,CAAC,CAAC;gBACjC,MAAM;YACR,KAAK,YAAY;gBACf,IAAI,CAAC,kBAAkB,CAAC,OAAO,CAAC,CAAC;gBACjC,MAAM;YACR,KAAK,0BAA0B;gBAC7B,IAAI,CAAC,+BAA+B,CAAC,OAAO,CAAC,CAAC;gBAC9C,MAAM;YACR,KAAK,qBAAqB;gBACxB,IAAI,CAAC,2BAA2B,CAAC,OAAO,CAAC,CAAC;gBAC1C,MAAM;YACR,KAAK,gBAAgB;gBACnB,IAAI,CAAC,sBAAsB,CAAC,OAAO,CAAC,CAAC;gBACrC,MAAM;YACR,KAAK,8BAA8B;gBACjC,IAAI,CAAC,mCAAmC,CAAC,OAAO,CAAC,CAAC;gBAClD,MAAM;YACR;gBACE,wCAAwC;gBACxC,MAAM;QACV,CAAC;IACH,CAAC;IAGD,iEAAiE;IACjE,IAAW,iBAAiB;QAC1B,MAAM,GAAG,GAAG,IAAI,GAAG,EAAwB,CAAC;QAC5C,KAAI,MAAM,CAAC,EAAE,EAAE,KAAK,CAAC,IAAI,IAAI,CAAC,aAAa,EAAE,CAAC;YAC5C,IAAG,KAAK,CAAC,KAAK,KAAK,sBAAsB,CAAC,UAAU,IAAI,KAAK,CAAC,MAAM,EAAE,CAAC;gBACrE,GAAG,CAAC,GAAG,CAAC,EAAE,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC;YAC5B,CAAC;QACH,CAAC;QACD,OAAO,GAAG,CAAC;IACb,CAAC;IAED,mBAAmB,CAAC,OAAoB;QACtC,4EAA4E;QAC5E,kEAAkE;QAClE,IAAG,CAAC,qBAAqB,CAAC,OAAO,CAAC;YAAE,OAAO;QAC3C,MAAM,EAAE,QAAQ,EAAE,OAAO,EAAE,eAAe,EAAE,GAAG,UAAU,EAAE,GAAG,OAAO,CAAC,IAAI,CAAC;QAC3E,IAAG,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,QAAQ,CAAC;YAAE,OAAO,CAAE,gBAAgB;QAE9D,MAAM,MAAM,GAAiB;YAC3B,QAAQ;YACR,UAAU,EAAe,OAAO,CAAC,IAAI;YACrC,OAAO;YACP,sBAAsB,EAAG,eAAe;YACxC,GAAG,UAAU;SACd,CAAC;QAEF,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,QAAQ,EAAE;YAC/B,KAAK,EAAQ,sBAAsB,CAAC,UAAU;YAC9C,QAAQ;YACR,UAAU,EAAG,OAAO,CAAC,IAAI;YACzB,MAAM;SACP,CAAC,CAAC;IACL,CAAC;IAED;;;OAGG;IACI,UAAU,CAAC,QAAgB;QAChC,MAAM,KAAK,GAAG,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;QAC/C,IAAG,CAAC,KAAK,IAAI,KAAK,CAAC,KAAK,KAAK,sBAAsB,CAAC,UAAU,EAAE,CAAC;YAC/D,MAAM,IAAI,2BAA2B,CACnC,sBAAsB,QAAQ,4BAA4B,EAC1D,eAAe,EAAE,EAAE,QAAQ,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,CACnD,CAAC;QACJ,CAAC;QAED,uEAAuE;QACvE,sEAAsE;QACtE,wEAAwE;QACxE,MAAM,MAAM,GAAG,KAAK,CAAC,MAAO,CAAC;QAC7B,MAAM,MAAM,GAAG,IAAI,iBAAiB,CAAC;YACnC,EAAE,EAAkB,QAAQ;YAC5B,UAAU,EAAU,KAAK,CAAC,UAAU;YACpC,eAAe,EAAK,MAAM,CAAC,eAAe;YAC1C,OAAO,EAAa,MAAM,CAAC,OAAO;YAClC,UAAU,EAAU,MAAM,CAAC,UAAU;YACrC,WAAW,EAAS,MAAM,CAAC,WAAW,CAAC,CAAC,CAAC,UAAU,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,SAAS;YACnF,gBAAgB,EAAI,MAAM,CAAC,gBAAgB;YAC3C,YAAY,EAAQ,MAAM,CAAC,YAAY;YACvC,iBAAiB,EAAG,MAAM,CAAC,iBAAiB;SAC7C,CAAC,CAAC;QACH,KAAK,CAAC,MAAM,GAAG,MAAM,CAAC;QACtB,KAAK,CAAC,KAAK,GAAG,sBAAsB,CAAC,OAAO,CAAC;QAE7C,MAAM,YAAY,GAAG,wBAAwB,CAAC;YAC5C,IAAI,EAAc,IAAI,CAAC,GAAG;YAC1B,EAAE,EAAgB,KAAK,CAAC,UAAU;YAClC,QAAQ;YACR,aAAa,EAAK,IAAI,CAAC,SAAS;YAChC,eAAe,EAAG,IAAI,CAAC,SAAS;SACjC,CAAC,CAAC;QAEH,OAAO,CAAC,YAAY,CAAC,CAAC;IACxB,CAAC;IAED,kBAAkB,CAAC,OAAoB;QACrC,sDAAsD;QACtD,KAAK,OAAO,CAAC;IACf,CAAC;IAGD,kEAAkE;IAClE,IAAW,aAAa;QACtB,MAAM,GAAG,GAAG,IAAI,GAAG,EAA4B,CAAC;QAChD,KAAI,MAAM,CAAC,EAAE,EAAE,KAAK,CAAC,IAAI,IAAI,CAAC,aAAa,EAAE,CAAC;YAC5C,IAAG,KAAK,CAAC,MAAM,IAAI,KAAK,CAAC,MAAM,CAAC,aAAa,EAAE,CAAC;gBAC9C,GAAG,CAAC,GAAG,CAAC,EAAE,EAAE;oBACV,QAAQ,EAAQ,EAAE;oBAClB,UAAU,EAAM,KAAK,CAAC,UAAU;oBAChC,aAAa,EAAG,KAAK,CAAC,MAAM,CAAC,aAAa;oBAC1C,UAAU,EAAM,KAAK,CAAC,MAAM,CAAC,UAAU;iBACxC,CAAC,CAAC;YACL,CAAC;QACH,CAAC;QACD,OAAO,GAAG,CAAC;IACb,CAAC;IAED,kBAAkB,CAAC,OAAoB;QACrC,MAAM,QAAQ,GAAG,OAAO,CAAC,IAAI,EAAE,QAAQ,CAAC;QACxC,IAAG,CAAC,QAAQ;YAAE,OAAO;QACrB,MAAM,KAAK,GAAG,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;QAC/C,IAAG,CAAC,KAAK,IAAI,CAAC,KAAK,CAAC,MAAM;YAAE,OAAO;QACnC,IAAG,KAAK,CAAC,KAAK,KAAK,sBAAsB,CAAC,OAAO;YAAE,OAAO;QAE1D,MAAM,aAAa,GAAG,OAAO,CAAC,IAAI,EAAE,aAAa,CAAC;QAClD,MAAM,UAAU,GAAG,OAAO,CAAC,IAAI,EAAE,UAAU,CAAC;QAC5C,IAAG,CAAC,aAAa,IAAI,CAAC,UAAU;YAAE,OAAO;QAEzC,MAAM,gBAAgB,GAAG,UAAU,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;QACpD,MAAM,aAAa,GAAG,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,UAAU,CAAC,IAAI,UAAU,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QAEzE,KAAK,CAAC,MAAM,CAAC,kBAAkB,CAAC,gBAAgB,EAAE,aAAa,EAAE,aAAa,CAAC,CAAC;QAChF,KAAK,CAAC,KAAK,GAAG,sBAAsB,CAAC,WAAW,CAAC;IACnD,CAAC;IAGD;;;OAGG;IACI,YAAY,CAAC,QAAgB,EAAE,YAA+B;QACnE,MAAM,KAAK,GAAG,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;QAC/C,IAAG,CAAC,KAAK,IAAI,KAAK,CAAC,KAAK,KAAK,sBAAsB,CAAC,WAAW,EAAE,CAAC;YAChE,MAAM,IAAI,2BAA2B,CACnC,kCAAkC,QAAQ,6BAA6B,EACvE,eAAe,EAAE,EAAE,QAAQ,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,CACnD,CAAC;QACJ,CAAC;QAED,KAAK,CAAC,eAAe,GAAG,YAAY,CAAC;QACrC,KAAK,CAAC,QAAQ,GAAG,IAAI,CAAC;QACtB,KAAK,CAAC,KAAK,GAAG,sBAAsB,CAAC,eAAe,CAAC;QAErD,MAAM,OAAO,GAAG,yBAAyB,CAAC;YACxC,IAAI,EAAW,IAAI,CAAC,GAAG;YACvB,EAAE,EAAa,KAAK,CAAC,UAAU;YAC/B,QAAQ;YACR,YAAY,EAAG,YAAkD;SAClE,CAAC,CAAC;QACH,OAAO,CAAC,OAAO,CAAC,CAAC;IACnB,CAAC;IAED;;;;;OAKG;IACI,aAAa,CAAC,QAAgB;QACnC,MAAM,KAAK,GAAG,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;QAC/C,IAAG,CAAC,KAAK,IAAI,KAAK,CAAC,KAAK,KAAK,sBAAsB,CAAC,WAAW,EAAE,CAAC;YAChE,MAAM,IAAI,2BAA2B,CACnC,4BAA4B,QAAQ,6BAA6B,EACjE,eAAe,EAAE,EAAE,QAAQ,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,CACnD,CAAC;QACJ,CAAC;QAED,8EAA8E;QAC9E,kEAAkE;QAClE,KAAK,CAAC,QAAQ,GAAG,KAAK,CAAC;QACvB,KAAK,CAAC,KAAK,GAAG,sBAAsB,CAAC,WAAW,CAAC;QAEjD,MAAM,OAAO,GAAG,8BAA8B,CAAC;YAC7C,IAAI,EAAG,IAAI,CAAC,GAAG;YACf,EAAE,EAAK,KAAK,CAAC,UAAU;YACvB,QAAQ;SACT,CAAC,CAAC;QACH,OAAO,CAAC,OAAO,CAAC,CAAC;IACnB,CAAC;IAGD,gDAAgD;IAChD,IAAW,kBAAkB;QAC3B,MAAM,GAAG,GAAG,IAAI,GAAG,EAA6B,CAAC;QACjD,KAAI,MAAM,CAAC,EAAE,EAAE,KAAK,CAAC,IAAI,IAAI,CAAC,aAAa,EAAE,CAAC;YAC5C,IAAG,KAAK,CAAC,KAAK,KAAK,sBAAsB,CAAC,kBAAkB,IAAI,KAAK,CAAC,UAAU,EAAE,CAAC;gBACjF,GAAG,CAAC,GAAG,CAAC,EAAE,EAAE,KAAK,CAAC,UAAU,CAAC,CAAC;YAChC,CAAC;QACH,CAAC;QACD,OAAO,GAAG,CAAC;IACb,CAAC;IAED;;;;;;;OAOG;IACI,aAAa,CAAC,QAAgB;QACnC,OAAO,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,UAAU,CAAC;IACtD,CAAC;IAED,+BAA+B,CAAC,OAAoB;QAClD,MAAM,QAAQ,GAAG,OAAO,CAAC,IAAI,EAAE,QAAQ,CAAC;QACxC,IAAG,CAAC,QAAQ;YAAE,OAAO;QACrB,MAAM,KAAK,GAAG,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;QAC/C,4EAA4E;QAC5E,2EAA2E;QAC3E,IAAG,CAAC,KAAK,IAAI,CAAC,KAAK,CAAC,KAAK,KAAK,sBAAsB,CAAC,eAAe,IAAI,KAAK,CAAC,KAAK,KAAK,sBAAsB,CAAC,WAAW,CAAC;YAAE,OAAO;QAEpI,MAAM,QAAQ,GAAG,KAAK,CAAC,QAAQ,KAAK,KAAK,CAAC;QAC1C,0EAA0E;QAC1E,IAAG,CAAC,QAAQ,IAAI,CAAC,KAAK,CAAC,eAAe;YAAE,OAAO;QAE/C,MAAM,UAAU,GAAG,OAAO,CAAC,IAAI,EAAE,UAAU,CAAC;QAC5C,IAAG,CAAC,UAAU;YAAE,OAAO;QACvB,MAAM,QAAQ,GAAG,iBAAiB,CAAC,UAAU,CAAC,CAAC;QAC/C,IAAG,CAAC,QAAQ;YAAE,OAAO;QAErB,MAAM,cAAc,GAAG,OAAO,CAAC,IAAI,EAAE,cAAc,IAAI,EAAE,CAAC;QAC1D,6EAA6E;QAC7E,iEAAiE;QACjE,MAAM,YAAY,GAAG,QAAQ,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,aAAa,CAAC,KAAK,CAAC,eAAgB,CAAC,CAAC;QAC3E,MAAM,MAAM,GAAG,QAAQ,CAAC,uBAAuB,CAAC;YAC9C,cAAc,EAAI,IAAI,CAAC,GAAG;YAC1B,QAAQ,EAAU,CAAC,QAAQ;YAC3B,eAAe,EAAG,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,KAAK,CAAC,eAAe;YAC9D,YAAY,EAAM,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,YAAY;YACrD,IAAI,EAAc,OAAO,CAAC,IAAK;SAChC,CAAC,CAAC;QAEH,KAAK,CAAC,UAAU,GAAG;YACjB,QAAQ;YACR,UAAU;YACV,cAAc;YACd,YAAY;YACZ,OAAO,EAAW,MAAM,CAAC,OAAO;YAChC,eAAe,EAAG,MAAM,CAAC,eAAe;YACxC,QAAQ,EAAU,MAAM,CAAC,QAAQ;YACjC,QAAQ,EAAU,CAAC,QAAQ;SAC5B,CAAC;QACF,KAAK,CAAC,KAAK,GAAG,sBAAsB,CAAC,kBAAkB,CAAC;IAC1D,CAAC;IAED;;OAEG;IACI,iBAAiB,CAAC,QAAgB;QACvC,MAAM,KAAK,GAAG,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;QAC/C,IAAG,CAAC,KAAK,IAAI,KAAK,CAAC,KAAK,KAAK,sBAAsB,CAAC,kBAAkB,EAAE,CAAC;YACvE,MAAM,IAAI,2BAA2B,CACnC,wCAAwC,QAAQ,oCAAoC,EACpF,eAAe,EAAE,EAAE,QAAQ,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,CACnD,CAAC;QACJ,CAAC;QACD,KAAK,CAAC,KAAK,GAAG,sBAAsB,CAAC,cAAc,CAAC;QACpD,OAAO,CAAC,0BAA0B,CAAC;gBACjC,IAAI,EAAO,IAAI,CAAC,GAAG;gBACnB,EAAE,EAAS,KAAK,CAAC,UAAU;gBAC3B,QAAQ;gBACR,QAAQ,EAAG,IAAI;aAChB,CAAC,CAAC,CAAC;IACN,CAAC;IAED;;OAEG;IACI,gBAAgB,CAAC,QAAgB;QACtC,MAAM,KAAK,GAAG,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;QAC/C,IAAG,CAAC,KAAK,IAAI,KAAK,CAAC,KAAK,KAAK,sBAAsB,CAAC,kBAAkB,EAAE,CAAC;YACvE,MAAM,IAAI,2BAA2B,CACnC,uCAAuC,QAAQ,oCAAoC,EACnF,eAAe,EAAE,EAAE,QAAQ,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,CACnD,CAAC;QACJ,CAAC;QACD,KAAK,CAAC,KAAK,GAAG,sBAAsB,CAAC,MAAM,CAAC;QAC5C,OAAO,CAAC,0BAA0B,CAAC;gBACjC,IAAI,EAAO,IAAI,CAAC,GAAG;gBACnB,EAAE,EAAS,KAAK,CAAC,UAAU;gBAC3B,QAAQ;gBACR,QAAQ,EAAG,KAAK;aACjB,CAAC,CAAC,CAAC;IACN,CAAC;IAGD,+CAA+C;IAC/C,IAAW,sBAAsB;QAC/B,MAAM,GAAG,GAAG,IAAI,GAAG,EAAiC,CAAC;QACrD,KAAI,MAAM,CAAC,EAAE,EAAE,KAAK,CAAC,IAAI,IAAI,CAAC,aAAa,EAAE,CAAC;YAC5C,IAAG,KAAK,CAAC,KAAK,KAAK,sBAAsB,CAAC,eAAe,IAAI,KAAK,CAAC,cAAc,EAAE,CAAC;gBAClF,GAAG,CAAC,GAAG,CAAC,EAAE,EAAE,KAAK,CAAC,cAAc,CAAC,CAAC;YACpC,CAAC;QACH,CAAC;QACD,OAAO,GAAG,CAAC;IACb,CAAC;IAED,2BAA2B,CAAC,OAAoB;QAC9C,MAAM,QAAQ,GAAG,OAAO,CAAC,IAAI,EAAE,QAAQ,CAAC;QACxC,IAAG,CAAC,QAAQ;YAAE,OAAO;QACrB,MAAM,KAAK,GAAG,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;QAC/C,IAAG,CAAC,KAAK,IAAI,CAAC,KAAK,CAAC,MAAM;YAAE,OAAO;QACnC,IAAG,KAAK,CAAC,KAAK,KAAK,sBAAsB,CAAC,cAAc;YAAE,OAAO;QAEjE,MAAM,SAAS,GAAG,OAAO,CAAC,IAAI,EAAE,SAAS,CAAC;QAC1C,MAAM,YAAY,GAAG,OAAO,CAAC,IAAI,EAAE,SAAS,CAAC;QAC7C,MAAM,gBAAgB,GAAG,OAAO,CAAC,IAAI,EAAE,gBAAgB,CAAC;QACxD,MAAM,YAAY,GAAG,OAAO,CAAC,IAAI,EAAE,YAAY,CAAC;QAChD,IAAG,CAAC,SAAS,IAAI,CAAC,YAAY,IAAI,CAAC,gBAAgB,IAAI,CAAC,YAAY;YAAE,OAAO;QAE7E,KAAK,CAAC,cAAc,GAAG;YACrB,QAAQ;YACR,SAAS;YACT,YAAY;YACZ,gBAAgB;YAChB,YAAY;SACb,CAAC;QACF,KAAK,CAAC,KAAK,GAAG,sBAAsB,CAAC,eAAe,CAAC;IACvD,CAAC;IAED;;;;;;;OAOG;IACH,+BAA+B,CAAC,QAAgB,EAAE,KAA6B,EAAE,EAAe;QAC9F,MAAM,SAAS,GAAG,KAAK,CAAC,UAAU,EAAE,cAAc,CAAC;QACnD,IAAG,CAAC,SAAS,EAAE,CAAC;YACd,MAAM,IAAI,2BAA2B,CACnC,UAAU,QAAQ,oDAAoD,EACtE,eAAe,EAAE,EAAE,QAAQ,EAAE,CAC9B,CAAC;QACJ,CAAC;QACD,IAAG,CAAC,cAAc,CAAC,EAAE,EAAE,SAAS,CAAC,EAAE,CAAC;YAClC,MAAM,IAAI,2BAA2B,CACnC,0BAA0B,QAAQ,wCAAwC,EAC1E,iBAAiB,EAAE,EAAE,QAAQ,EAAE,CAChC,CAAC;QACJ,CAAC;IACH,CAAC;IAED;;OAEG;IACI,YAAY,CAAC,QAAgB;QAClC,MAAM,KAAK,GAAG,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;QAC/C,IAAG,CAAC,KAAK,IAAI,KAAK,CAAC,KAAK,KAAK,sBAAsB,CAAC,eAAe,EAAE,CAAC;YACpE,MAAM,IAAI,2BAA2B,CACnC,mCAAmC,QAAQ,iCAAiC,EAC5E,eAAe,EAAE,EAAE,QAAQ,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,CACnD,CAAC;QACJ,CAAC;QACD,IAAG,CAAC,KAAK,CAAC,cAAc,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC;YAC1C,MAAM,IAAI,2BAA2B,CACnC,UAAU,QAAQ,2CAA2C,EAC7D,eAAe,EAAE,EAAE,QAAQ,EAAE,CAC9B,CAAC;QACJ,CAAC;QAED,wEAAwE;QACxE,4EAA4E;QAC5E,+CAA+C;QAC/C,MAAM,EAAE,GAAG,WAAW,CAAC,OAAO,CAAC,UAAU,CAAC,KAAK,CAAC,cAAc,CAAC,YAAY,CAAC,EAAE,EAAE,mBAAmB,EAAE,IAAI,EAAE,CAAC,CAAC;QAE7G,yEAAyE;QACzE,IAAI,CAAC,+BAA+B,CAAC,QAAQ,EAAE,KAAK,EAAE,EAAE,CAAC,CAAC;QAE1D,qEAAqE;QACrE,uEAAuE;QACvE,0EAA0E;QAC1E,yEAAyE;QACzE,iBAAiB;QACjB,MAAM,cAAc,GAAG,CAAC,UAAU,CAAC,KAAK,CAAC,cAAc,CAAC,gBAAgB,CAAC,CAAC,CAAC;QAC3E,MAAM,aAAa,GAAG,CAAC,MAAM,CAAC,KAAK,CAAC,cAAc,CAAC,YAAY,CAAC,CAAC,CAAC;QAElE,MAAM,OAAO,GAAG,IAAI,oBAAoB,CAAC;YACvC,EAAE,EAAU,KAAK,CAAC,cAAc,CAAC,SAAS;YAC1C,MAAM,EAAM,KAAK,CAAC,MAAM;YACxB,SAAS,EAAG,EAAE;YACd,cAAc;YACd,aAAa;SACd,CAAC,CAAC;QACH,KAAK,CAAC,cAAc,GAAG,OAAO,CAAC;QAE/B,MAAM,iBAAiB,GAAG,IAAI,CAAC,OAAO,CAAC,UAAU,CAC/C,SAAS,CAAC,EAAE,CAAC,OAAO,CAAC,yBAAyB,CAAC,IAAI,CAAC,SAAS,EAAE,SAAS,CAAC,CAC1E,CAAC;QAEF,KAAK,CAAC,KAAK,GAAG,sBAAsB,CAAC,SAAS,CAAC;QAE/C,OAAO,CAAC,8BAA8B,CAAC;gBACrC,IAAI,EAAgB,IAAI,CAAC,GAAG;gBAC5B,EAAE,EAAkB,KAAK,CAAC,UAAU;gBACpC,QAAQ;gBACR,SAAS,EAAW,OAAO,CAAC,EAAE;gBAC9B,iBAAiB;aAClB,CAAC,CAAC,CAAC;IACN,CAAC;IAED,sBAAsB,CAAC,OAAoB;QACzC,MAAM,QAAQ,GAAG,OAAO,CAAC,IAAI,EAAE,QAAQ,CAAC;QACxC,IAAG,CAAC,QAAQ;YAAE,OAAO;QACrB,MAAM,KAAK,GAAG,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;QAC/C,IAAG,CAAC,KAAK,IAAI,CAAC,KAAK,CAAC,cAAc;YAAE,OAAO;QAC3C,IAAG,KAAK,CAAC,KAAK,KAAK,sBAAsB,CAAC,SAAS;YAAE,OAAO;QAE5D,MAAM,eAAe,GAAG,OAAO,CAAC,IAAI,EAAE,eAAe,CAAC;QACtD,IAAG,CAAC,eAAe;YAAE,OAAO;QAE5B,KAAK,CAAC,cAAc,CAAC,eAAe,GAAG,eAAe,CAAC;QACvD,KAAK,CAAC,KAAK,GAAG,sBAAsB,CAAC,kBAAkB,CAAC;IAC1D,CAAC;IAED;;;;OAIG;IACI,wBAAwB,CAAC,QAAgB;QAC9C,MAAM,KAAK,GAAG,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;QAC/C,IAAG,CAAC,KAAK,IAAI,KAAK,CAAC,KAAK,KAAK,sBAAsB,CAAC,kBAAkB,EAAE,CAAC;YACvE,MAAM,IAAI,2BAA2B,CACnC,gDAAgD,QAAQ,oCAAoC,EAC5F,eAAe,EAAE,EAAE,QAAQ,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,CACnD,CAAC;QACJ,CAAC;QACD,IAAG,CAAC,KAAK,CAAC,cAAc,EAAE,CAAC;YACzB,MAAM,IAAI,2BAA2B,CACnC,iCAAiC,QAAQ,GAAG,EAC5C,eAAe,EAAE,EAAE,QAAQ,EAAE,CAC9B,CAAC;QACJ,CAAC;QAED,MAAM,cAAc,GAAG,KAAK,CAAC,cAAc,CAAC;QAC5C,MAAM,UAAU,GAAG,IAAI,CAAC,OAAO,CAAC,UAAU,CACxC,SAAS,CAAC,EAAE,CAAC,cAAc,CAAC,wBAAwB,CAAC,SAAS,CAAC,CAChE,CAAC;QACF,KAAK,CAAC,KAAK,GAAG,sBAAsB,CAAC,QAAQ,CAAC;QAE9C,OAAO,CAAC,mCAAmC,CAAC;gBAC1C,IAAI,EAAe,IAAI,CAAC,GAAG;gBAC3B,EAAE,EAAiB,KAAK,CAAC,UAAU;gBACnC,QAAQ;gBACR,SAAS,EAAU,KAAK,CAAC,cAAc,CAAC,EAAE;gBAC1C,gBAAgB,EAAG,UAAU;aAC9B,CAAC,CAAC,CAAC;IACN,CAAC;IAGD,wFAAwF;IACxF,IAAW,uBAAuB;QAChC,MAAM,GAAG,GAAG,IAAI,GAAG,EAAkC,CAAC;QACtD,KAAI,MAAM,CAAC,EAAE,EAAE,KAAK,CAAC,IAAI,IAAI,CAAC,aAAa,EAAE,CAAC;YAC5C,IAAG,KAAK,CAAC,KAAK,KAAK,sBAAsB,CAAC,mBAAmB,IAAI,KAAK,CAAC,eAAe,EAAE,CAAC;gBACvF,GAAG,CAAC,GAAG,CAAC,EAAE,EAAE,KAAK,CAAC,eAAe,CAAC,CAAC;YACrC,CAAC;QACH,CAAC;QACD,OAAO,GAAG,CAAC;IACb,CAAC;IAED,mCAAmC,CAAC,OAAoB;QACtD,MAAM,QAAQ,GAAG,OAAO,CAAC,IAAI,EAAE,QAAQ,CAAC;QACxC,IAAG,CAAC,QAAQ;YAAE,OAAO;QACrB,MAAM,KAAK,GAAG,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;QAC/C,IAAG,CAAC,KAAK,IAAI,CAAC,KAAK,CAAC,MAAM;YAAE,OAAO;QACnC,0EAA0E;QAC1E,6EAA6E;QAC7E,0EAA0E;QAC1E,uEAAuE;QACvE,wEAAwE;QACxE,8EAA8E;QAC9E,4EAA4E;QAC5E,0EAA0E;QAC1E,MAAM,UAAU,GAAiC;YAC/C,sBAAsB,CAAC,cAAc;YACrC,sBAAsB,CAAC,eAAe;YACtC,sBAAsB,CAAC,SAAS;YAChC,sBAAsB,CAAC,kBAAkB;YACzC,sBAAsB,CAAC,QAAQ;SAChC,CAAC;QACF,IAAG,CAAC,UAAU,CAAC,QAAQ,CAAC,KAAK,CAAC,KAAK,CAAC;YAAE,OAAO;QAE7C,MAAM,SAAS,GAAG,OAAO,CAAC,IAAI,EAAE,SAAS,CAAC;QAC1C,MAAM,YAAY,GAAG,OAAO,CAAC,IAAI,EAAE,SAAS,CAAC;QAC7C,MAAM,gBAAgB,GAAG,OAAO,CAAC,IAAI,EAAE,gBAAgB,CAAC;QACxD,MAAM,YAAY,GAAG,OAAO,CAAC,IAAI,EAAE,YAAY,CAAC;QAChD,MAAM,qBAAqB,GAAG,OAAO,CAAC,IAAI,EAAE,qBAAqB,CAAC;QAClE,IAAG,CAAC,SAAS,IAAI,CAAC,YAAY,IAAI,CAAC,gBAAgB,IAAI,CAAC,YAAY,IAAI,CAAC,qBAAqB;YAAE,OAAO;QAEvG,KAAK,CAAC,eAAe,GAAG,EAAE,QAAQ,EAAE,SAAS,EAAE,YAAY,EAAE,gBAAgB,EAAE,YAAY,EAAE,qBAAqB,EAAE,CAAC;QACrH,2EAA2E;QAC3E,KAAK,CAAC,cAAc,EAAE,YAAY,EAAE,CAAC;QACrC,KAAK,CAAC,KAAK,GAAG,sBAAsB,CAAC,mBAAmB,CAAC;IAC3D,CAAC;IAED;;;;;;OAMG;IACI,eAAe,CAAC,QAAgB;QACrC,MAAM,KAAK,GAAG,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;QAC/C,IAAG,CAAC,KAAK,IAAI,KAAK,CAAC,KAAK,KAAK,sBAAsB,CAAC,mBAAmB,EAAE,CAAC;YACxE,MAAM,IAAI,2BAA2B,CACnC,sCAAsC,QAAQ,qCAAqC,EACnF,eAAe,EAAE,EAAE,QAAQ,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,CACnD,CAAC;QACJ,CAAC;QACD,IAAG,CAAC,KAAK,CAAC,eAAe,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC;YAC3C,MAAM,IAAI,2BAA2B,CACnC,UAAU,QAAQ,4CAA4C,EAC9D,eAAe,EAAE,EAAE,QAAQ,EAAE,CAC9B,CAAC;QACJ,CAAC;QAED,MAAM,GAAG,GAAG,KAAK,CAAC,eAAe,CAAC;QAClC,MAAM,EAAE,GAAG,WAAW,CAAC,OAAO,CAAC,UAAU,CAAC,GAAG,CAAC,YAAY,CAAC,EAAE,EAAE,mBAAmB,EAAE,IAAI,EAAE,CAAC,CAAC;QAC5F,MAAM,aAAa,GAAG,UAAU,CAAC,GAAG,CAAC,gBAAgB,CAAC,CAAC;QACvD,MAAM,YAAY,GAAG,MAAM,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC;QAE9C,uEAAuE;QACvE,4EAA4E;QAC5E,IAAI,CAAC,+BAA+B,CAAC,QAAQ,EAAE,KAAK,EAAE,EAAE,CAAC,CAAC;QAE1D,8EAA8E;QAC9E,0EAA0E;QAC1E,sBAAsB;QACtB,MAAM,YAAY,GAAG,iBAAiB,CAAC;YACrC,UAAU,EAAU,KAAK,CAAC,MAAM,CAAC,UAAU;YAC3C,iBAAiB,EAAG,KAAK,CAAC,MAAM,CAAC,0BAA0B;SAC5D,CAAC,CAAC;QACH,MAAM,OAAO,GAAG,eAAe,CAAC,EAAE,EAAE,CAAC,EAAE,aAAa,EAAE,YAAY,EAAE,YAAY,CAAC,CAAC;QAClF,MAAM,SAAS,GAAG,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,SAAS,CAAC,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,OAAO,EAAE,SAAS,CAAC,CAAC,CAAC;QAEzF,KAAK,CAAC,KAAK,GAAG,sBAAsB,CAAC,QAAQ,CAAC;QAC9C,OAAO,CAAC,8BAA8B,CAAC;gBACrC,IAAI,EAAgB,IAAI,CAAC,GAAG;gBAC5B,EAAE,EAAkB,KAAK,CAAC,UAAU;gBACpC,QAAQ;gBACR,SAAS,EAAW,GAAG,CAAC,SAAS;gBACjC,QAAQ,EAAY,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,CAAC;gBAC3C,iBAAiB,EAAG,SAAS;aAC9B,CAAC,CAAC,CAAC;IACN,CAAC;IAGM,cAAc,CAAC,QAAgB;QACpC,OAAO,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,KAAK,CAAC;IACjD,CAAC;IAED;;;;;OAKG;IACI,YAAY;QACjB,KAAI,MAAM,KAAK,IAAI,IAAI,CAAC,aAAa,CAAC,MAAM,EAAE,EAAE,CAAC;YAC/C,KAAK,CAAC,cAAc,EAAE,YAAY,EAAE,CAAC;QACvC,CAAC;IACH,CAAC;CACF"}

package/dist/esm/phases.js

@@ -0,0 +1,45 @@
+export var ServiceCohortPhase;
+(function (ServiceCohortPhase) {
+    ServiceCohortPhase["Created"] = "Created";
+    ServiceCohortPhase["Advertised"] = "Advertised";
+    ServiceCohortPhase["CohortSet"] = "CohortSet";
+    ServiceCohortPhase["CollectingUpdates"] = "CollectingUpdates";
+    ServiceCohortPhase["UpdatesCollected"] = "UpdatesCollected";
+    ServiceCohortPhase["DataDistributed"] = "DataDistributed";
+    ServiceCohortPhase["Validated"] = "Validated";
+    ServiceCohortPhase["SigningStarted"] = "SigningStarted";
+    ServiceCohortPhase["NoncesCollected"] = "NoncesCollected";
+    ServiceCohortPhase["AwaitingPartialSigs"] = "AwaitingPartialSigs";
+    /** Optimistic n-of-n key path abandoned; collecting k-of-n fallback signatures (ADR 042). */
+    ServiceCohortPhase["FallbackRequested"] = "FallbackRequested";
+    ServiceCohortPhase["Complete"] = "Complete";
+    ServiceCohortPhase["Failed"] = "Failed";
+})(ServiceCohortPhase || (ServiceCohortPhase = {}));
+export var ParticipantCohortPhase;
+(function (ParticipantCohortPhase) {
+    ParticipantCohortPhase["Discovered"] = "Discovered";
+    ParticipantCohortPhase["OptedIn"] = "OptedIn";
+    ParticipantCohortPhase["CohortReady"] = "CohortReady";
+    ParticipantCohortPhase["UpdateSubmitted"] = "UpdateSubmitted";
+    /** Member declined to submit an update this round (cooperative non-inclusion); still signs. */
+    ParticipantCohortPhase["NonIncluded"] = "NonIncluded";
+    ParticipantCohortPhase["AwaitingValidation"] = "AwaitingValidation";
+    ParticipantCohortPhase["ValidationSent"] = "ValidationSent";
+    ParticipantCohortPhase["AwaitingSigning"] = "AwaitingSigning";
+    ParticipantCohortPhase["NonceSent"] = "NonceSent";
+    ParticipantCohortPhase["AwaitingPartialSig"] = "AwaitingPartialSig";
+    /** Service fell back to the k-of-n script path; member can sign the fallback (ADR 042). */
+    ParticipantCohortPhase["AwaitingFallbackSig"] = "AwaitingFallbackSig";
+    ParticipantCohortPhase["Complete"] = "Complete";
+    ParticipantCohortPhase["Failed"] = "Failed";
+})(ParticipantCohortPhase || (ParticipantCohortPhase = {}));
+export var SigningSessionPhase;
+(function (SigningSessionPhase) {
+    SigningSessionPhase["AwaitingNonceContributions"] = "AwaitingNonceContributions";
+    SigningSessionPhase["NonceContributionsReceived"] = "NonceContributionsReceived";
+    SigningSessionPhase["AwaitingPartialSignatures"] = "AwaitingPartialSignatures";
+    SigningSessionPhase["PartialSignaturesReceived"] = "PartialSignaturesReceived";
+    SigningSessionPhase["Complete"] = "Complete";
+    SigningSessionPhase["Failed"] = "Failed";
+})(SigningSessionPhase || (SigningSessionPhase = {}));
+//# sourceMappingURL=phases.js.map