@did-btcr2/method 0.32.0 → 0.34.0

package/dist/cjs/index.js

@@ -40,6 +40,7 @@ __export(index_exports, {
   AggregationParticipant: () => AggregationParticipant,
   AggregationParticipantError: () => AggregationParticipantError,
   AggregationParticipantRunner: () => AggregationParticipantRunner,
+  AggregationRunner: () => AggregationRunner,
   AggregationService: () => AggregationService,
   AggregationServiceError: () => AggregationServiceError,
   AggregationServiceRunner: () => AggregationServiceRunner,
@@ -47,7 +48,6 @@ __export(index_exports, {
   BECH32M_CHARS: () => BECH32M_CHARS,
   BTCR2_DID_DOCUMENT_CONTEXT: () => BTCR2_DID_DOCUMENT_CONTEXT,
   BaseMessage: () => BaseMessage,
-  Beacon: () => Beacon,
   BeaconError: () => BeaconError,
   BeaconFactory: () => BeaconFactory,
   BeaconSignalDiscovery: () => BeaconSignalDiscovery,
@@ -82,7 +82,9 @@ __export(index_exports, {
   HttpTransportError: () => HttpTransportError,
   ID_PLACEHOLDER_VALUE: () => ID_PLACEHOLDER_VALUE,
   Identifier: () => Identifier,
+  InMemoryBus: () => InMemoryBus,
   InMemoryRateLimitStore: () => InMemoryRateLimitStore,
+  InMemoryTransport: () => InMemoryTransport,
   InboxBuffer: () => InboxBuffer,
   NONCE_CONTRIBUTION: () => NONCE_CONTRIBUTION,
   NonceCache: () => NonceCache,
@@ -104,6 +106,7 @@ __export(index_exports, {
   ServiceCohortPhase: () => ServiceCohortPhase,
   SigningSessionError: () => SigningSessionError,
   SigningSessionPhase: () => SigningSessionPhase,
+  SinglePartyBeacon: () => SinglePartyBeacon,
   SingletonBeacon: () => SingletonBeacon,
   SingletonBeaconError: () => SingletonBeaconError,
   StaticFeeEstimator: () => StaticFeeEstimator,
@@ -197,12 +200,12 @@ var SMT_STRATEGY = {
     const smtProof = body.smtProof;
     if (!smtProof?.updateId || !smtProof?.nonce) return { matches: false };
     const canonicalBytes = new TextEncoder().encode((0, import_common.canonicalize)(submittedUpdate));
-    const expectedUpdateId = (0, import_smt.hashToHex)((0, import_smt.blockHash)(canonicalBytes));
+    const expectedUpdateId = (0, import_smt.hashToBase64Url)((0, import_smt.blockHash)(canonicalBytes));
     if (smtProof.updateId !== expectedUpdateId) {
       return { matches: false, smtProof };
     }
     const index = (0, import_smt.didToIndex)(participantDid);
-    const candidateHash = (0, import_smt.blockHash)((0, import_smt.blockHash)((0, import_smt.hexToHash)(smtProof.nonce)), (0, import_smt.hexToHash)(smtProof.updateId));
+    const candidateHash = (0, import_smt.blockHash)((0, import_smt.blockHash)((0, import_smt.base64UrlToHash)(smtProof.nonce)), (0, import_smt.base64UrlToHash)(smtProof.updateId));
     return {
       matches: (0, import_smt.verifySerializedProof)(smtProof, index, candidateHash),
       smtProof
@@ -3641,6 +3644,119 @@ var TransportFactory = class {
   }
 };
 
+// src/core/aggregation/transport/in-memory.ts
+var import_utils7 = require("@noble/hashes/utils");
+var InMemoryBus = class {
+  #transports = /* @__PURE__ */ new Set();
+  /** Attach a transport to this bus. Called by the transport's constructor. */
+  register(transport) {
+    this.#transports.add(transport);
+  }
+  /** Detach a transport from this bus. */
+  unregister(transport) {
+    this.#transports.delete(transport);
+  }
+  /**
+   * Deliver a message. With no `recipient` the message is broadcast to every
+   * actor on the bus; otherwise it is routed to the single transport that owns
+   * the recipient DID.
+   */
+  async deliver(message, _sender, recipient) {
+    const type = message.type;
+    if (!type) return;
+    const replacer = (_k, v) => v instanceof Uint8Array ? { __bytes: (0, import_utils7.bytesToHex)(v) } : v;
+    const reviver = (_k, v) => v && typeof v === "object" && "__bytes" in v ? (0, import_utils7.hexToBytes)(v.__bytes) : v;
+    const raw = JSON.parse(JSON.stringify(message, replacer), reviver);
+    const serialized = { ...raw, ...raw.body ?? {} };
+    if (!recipient) {
+      for (const t of this.#transports) {
+        await t.dispatchBroadcast(type, serialized);
+      }
+      return;
+    }
+    for (const t of this.#transports) {
+      if (t.hasActor(recipient)) {
+        await t.dispatchDirected(recipient, type, serialized);
+        return;
+      }
+    }
+  }
+};
+var InMemoryTransport = class {
+  name = "in-memory";
+  bus;
+  #actors = /* @__PURE__ */ new Map();
+  #peers = /* @__PURE__ */ new Map();
+  /** @param bus Shared bus. Pass the same bus to connect multiple transports. */
+  constructor(bus = new InMemoryBus()) {
+    this.bus = bus;
+    this.bus.register(this);
+  }
+  start() {
+  }
+  registerActor(did, keys) {
+    this.#actors.set(did, { keys, handlers: /* @__PURE__ */ new Map() });
+  }
+  getActorPk(did) {
+    return this.#actors.get(did)?.keys.publicKey.compressed;
+  }
+  /** True if `did` is registered on this transport. Used by the bus for routing. */
+  hasActor(did) {
+    return this.#actors.has(did);
+  }
+  registerPeer(did, communicationPk) {
+    this.#peers.set(did, communicationPk);
+  }
+  getPeerPk(did) {
+    return this.#peers.get(did);
+  }
+  registerMessageHandler(actorDid, messageType, handler) {
+    const actor = this.#actors.get(actorDid);
+    if (actor) actor.handlers.set(messageType, handler);
+  }
+  unregisterMessageHandler(actorDid, messageType) {
+    const actor = this.#actors.get(actorDid);
+    if (actor) actor.handlers.delete(messageType);
+  }
+  unregisterActor(did) {
+    const actor = this.#actors.get(did);
+    if (!actor) return;
+    actor.handlers.clear();
+    this.#actors.delete(did);
+    this.#peers.delete(did);
+  }
+  async sendMessage(message, sender, recipient) {
+    await this.bus.deliver(message, sender, recipient);
+  }
+  publishRepeating(message, sender, intervalMs, recipient) {
+    let stopped = false;
+    void this.sendMessage(message, sender, recipient).catch(() => {
+    });
+    const timer = setInterval(() => {
+      if (stopped) return;
+      void this.sendMessage(message, sender, recipient).catch(() => {
+      });
+    }, intervalMs);
+    return () => {
+      if (stopped) return;
+      stopped = true;
+      clearInterval(timer);
+    };
+  }
+  /** Deliver a broadcast message to every actor on this transport that handles `type`. */
+  async dispatchBroadcast(type, message) {
+    for (const actor of this.#actors.values()) {
+      const handler = actor.handlers.get(type);
+      if (handler) await handler(message);
+    }
+  }
+  /** Deliver a directed message to the recipient actor's handler for `type`. */
+  async dispatchDirected(recipientDid, type, message) {
+    const handler = this.#actors.get(recipientDid)?.handlers.get(type);
+    if (handler) await handler(message);
+  }
+};
+
 // src/core/aggregation/transport/didcomm.ts
 var import_common11 = require("@did-btcr2/common");
 var DidCommTransport = class {
@@ -4368,8 +4484,64 @@ var AggregationParticipantRunner = class _AggregationParticipantRunner extends T
   }
 };
 
+// src/core/aggregation/runner/aggregation-runner.ts
+var AggregationRunner = class {
+  /**
+   * Run a cohort of ONE participant entirely in-process and return the
+   * aggregated MuSig2 result.
+   *
+   * One party plays both the coordinating service and the lone participant,
+   * connected over an {@link InMemoryTransport} (no relay or HTTP server). This
+   * makes the single-participant aggregate-beacon path — the N=1 corner of the
+   * two-axis beacon matrix (see ADR 037) — first-class, useful for generating
+   * and reproducing single-participant aggregate test vectors.
+   *
+   * The service advertises a cohort with `minParticipants: 1`; the participant
+   * joins, submits its update, and the two complete keygen, data distribution,
+   * validation, and a one-signer MuSig2 P2TR key-path signing round.
+   *
+   * @param options Service + participant identities, cohort config, and the
+   *   update / tx-data callbacks.
+   * @returns The {@link AggregationResult} (cohort id, aggregated signature, signed tx).
+   */
+  static async solo(options) {
+    const transport = new InMemoryTransport(new InMemoryBus());
+    transport.registerActor(options.service.did, options.service.keys);
+    transport.registerActor(options.participant.did, options.participant.keys);
+    transport.registerPeer(options.participant.did, options.participant.keys.publicKey.compressed);
+    transport.registerPeer(options.service.did, options.service.keys.publicKey.compressed);
+    transport.start();
+    const service = new AggregationServiceRunner({
+      transport,
+      did: options.service.did,
+      keys: options.service.keys,
+      config: { minParticipants: 1, network: options.config.network, beaconType: options.config.beaconType },
+      onProvideTxData: options.onProvideTxData,
+      cohortTtlMs: options.cohortTtlMs,
+      phaseTimeoutMs: options.phaseTimeoutMs,
+      // In-process bus with the participant already listening: a single advert
+      // suffices, so disable the republish loop (no dangling interval).
+      advertRepeatIntervalMs: 0
+    });
+    const participant = new AggregationParticipantRunner({
+      transport,
+      did: options.participant.did,
+      keys: options.participant.keys,
+      shouldJoin: async () => true,
+      onProvideUpdate: options.onProvideUpdate
+    });
+    await participant.start();
+    try {
+      return await service.run();
+    } finally {
+      participant.stop();
+      service.stop();
+    }
+  }
+};
+
 // src/core/beacon/beacon.ts
-var import_utils7 = require("@noble/hashes/utils.js");
+var import_utils8 = require("@noble/hashes/utils.js");
 var import_btc_signer4 = require("@scure/btc-signer");
 
 // src/core/beacon/error.ts
@@ -4467,7 +4639,7 @@ async function fetchSpendableUtxo(bitcoinAddress, bitcoin) {
     );
   }
   const prevTxHex = await bitcoin.rest.transaction.getHex(utxo.txid);
-  return { utxo, prevTxBytes: (0, import_utils7.hexToBytes)(prevTxHex) };
+  return { utxo, prevTxBytes: (0, import_utils8.hexToBytes)(prevTxHex) };
 }
 async function buildAggregationBeaconTx(opts) {
   const feeEstimator = opts.feeEstimator ?? DEFAULT_FEE_ESTIMATOR;
@@ -4508,7 +4680,7 @@ async function signSingletonInput(tx, inputIdx, kind, signer, prevOutScript, amo
     const sighashType = import_btc_signer4.SigHash.ALL;
     const sighash2 = tx.preimageLegacy(inputIdx, prevOutScript, sighashType);
     const sig2 = signer.sign(sighash2, "ecdsa");
-    const sigWithType = (0, import_utils7.concatBytes)(sig2, new Uint8Array([sighashType]));
+    const sigWithType = (0, import_utils8.concatBytes)(sig2, new Uint8Array([sighashType]));
     tx.updateInput(inputIdx, { partialSig: [[pubkey, sigWithType]] }, true);
     tx.finalize();
     return tx.hex;
@@ -4526,7 +4698,7 @@ async function signSingletonInput(tx, inputIdx, kind, signer, prevOutScript, amo
     const sighashType = import_btc_signer4.SigHash.ALL;
     const sighash2 = tx.preimageWitnessV0(inputIdx, sighashScript, sighashType, amount);
     const sig2 = signer.sign(sighash2, "ecdsa");
-    const sigWithType = (0, import_utils7.concatBytes)(sig2, new Uint8Array([sighashType]));
+    const sigWithType = (0, import_utils8.concatBytes)(sig2, new Uint8Array([sighashType]));
     tx.updateInput(inputIdx, { partialSig: [[pubkey, sigWithType]] }, true);
     tx.finalize();
     return tx.hex;
@@ -4537,7 +4709,7 @@ async function signSingletonInput(tx, inputIdx, kind, signer, prevOutScript, amo
   tx.finalize();
   return tx.hex;
 }
-var Beacon = class {
+var SinglePartyBeacon = class {
   /**
    * The Beacon service configuration parsed from the DID Document.
    */
@@ -4674,7 +4846,7 @@ var Beacon = class {
 
 // src/core/beacon/cas-beacon.ts
 var import_common13 = require("@did-btcr2/common");
-var CASBeacon = class extends Beacon {
+var CASBeacon = class extends SinglePartyBeacon {
   /**
    * Creates an instance of CASBeacon.
    * @param {BeaconService} service The service of the Beacon.
@@ -4734,7 +4906,7 @@ var CASBeacon = class extends Beacon {
    * Creates a CAS Announcement mapping the DID to the update hash, broadcasts the hash of the
    * announcement via OP_RETURN, and optionally publishes the announcement off-chain via the
    * supplied `casPublish` callback. UTXO selection, PSBT construction, fee estimation, signing,
-   * and broadcast are delegated to {@link Beacon.buildSignAndBroadcast}.
+   * and broadcast are delegated to {@link SinglePartyBeacon.buildSignAndBroadcast}.
    *
    * @param {SignedBTCR2Update} signedUpdate The signed BTCR2 update to broadcast.
    * @param {Signer} signer Signer that produces the ECDSA signature for the Bitcoin transaction.
@@ -4762,7 +4934,7 @@ var import_common16 = require("@did-btcr2/common");
 
 // src/core/beacon/singleton-beacon.ts
 var import_common14 = require("@did-btcr2/common");
-var SingletonBeacon = class extends Beacon {
+var SingletonBeacon = class extends SinglePartyBeacon {
   /**
    * Creates an instance of SingletonBeacon.
    * @param {BeaconService} service The BeaconService object representing the funded beacon to announce the update to.
@@ -4799,7 +4971,7 @@ var SingletonBeacon = class extends Beacon {
    *
    * The signal bytes embedded in OP_RETURN are the SHA-256 canonical hash of the signed update.
    * UTXO selection, PSBT construction, fee estimation, signing, and broadcast are delegated to
-   * {@link Beacon.buildSignAndBroadcast}.
+   * {@link SinglePartyBeacon.buildSignAndBroadcast}.
    *
    * @param {SignedBTCR2Update} signedUpdate The signed BTCR2 update to broadcast.
    * @param {Signer} signer Signer that produces the ECDSA signature for the Bitcoin transaction.
@@ -4818,8 +4990,8 @@ var SingletonBeacon = class extends Beacon {
 // src/core/beacon/smt-beacon.ts
 var import_common15 = require("@did-btcr2/common");
 var import_smt3 = require("@did-btcr2/smt");
-var import_utils8 = require("@noble/hashes/utils");
-var SMTBeacon = class extends Beacon {
+var import_utils9 = require("@noble/hashes/utils");
+var SMTBeacon = class extends SinglePartyBeacon {
   /**
    * Creates an instance of SMTBeacon.
    * @param {BeaconService} service The Beacon service.
@@ -4854,9 +5026,6 @@ var SMTBeacon = class extends Beacon {
         });
         continue;
       }
-      if (!smtProof.updateId) {
-        continue;
-      }
       if (!smtProof.nonce) {
         throw new SMTBeaconError(
           "SMT proof missing required nonce field.",
@@ -4865,7 +5034,8 @@ var SMTBeacon = class extends Beacon {
         );
       }
       const index = (0, import_smt3.didToIndex)(did);
-      const candidateHash = (0, import_smt3.blockHash)((0, import_smt3.blockHash)((0, import_smt3.hexToHash)(smtProof.nonce)), (0, import_smt3.hexToHash)(smtProof.updateId));
+      const nonceHash = (0, import_smt3.base64UrlToHash)(smtProof.nonce);
+      const candidateHash = smtProof.updateId ? (0, import_smt3.blockHash)((0, import_smt3.blockHash)(nonceHash), (0, import_smt3.base64UrlToHash)(smtProof.updateId)) : (0, import_smt3.blockHash)((0, import_smt3.blockHash)(nonceHash));
       const valid = (0, import_smt3.verifySerializedProof)(smtProof, index, candidateHash);
       if (!valid) {
         throw new SMTBeaconError(
@@ -4874,11 +5044,15 @@ var SMTBeacon = class extends Beacon {
           { smtProof, did }
         );
       }
-      const signedUpdate = sidecar.updateMap.get(smtProof.updateId);
+      if (!smtProof.updateId) {
+        continue;
+      }
+      const updateHashHex = (0, import_smt3.hashToHex)((0, import_smt3.base64UrlToHash)(smtProof.updateId));
+      const signedUpdate = sidecar.updateMap.get(updateHashHex);
       if (!signedUpdate) {
         needs.push({
           kind: "NeedSignedUpdate",
-          updateHash: smtProof.updateId,
+          updateHash: updateHashHex,
           beaconServiceId: this.service.id
         });
         continue;
@@ -4893,7 +5067,7 @@ var SMTBeacon = class extends Beacon {
    * Builds a single-entry Sparse Merkle Tree from the signed update, then broadcasts the tree's
    * root hash via OP_RETURN. For multi-party aggregation, use the {@link AggregationService}
    * subsystem directly instead of this method. UTXO selection, PSBT construction, fee estimation,
-   * signing, and broadcast are delegated to {@link Beacon.buildSignAndBroadcast}.
+   * signing, and broadcast are delegated to {@link SinglePartyBeacon.buildSignAndBroadcast}.
    *
    * @param {SignedBTCR2Update} signedUpdate The signed BTCR2 update to broadcast.
    * @param {Signer} signer Signer that produces the ECDSA signature for the Bitcoin transaction.
@@ -4905,7 +5079,7 @@ var SMTBeacon = class extends Beacon {
   async broadcastSignal(signedUpdate, signer, bitcoin, options) {
     const did = this.service.id.split("#")[0];
     const canonicalBytes = new TextEncoder().encode((0, import_common15.canonicalize)(signedUpdate));
-    const nonce = (0, import_utils8.randomBytes)(32);
+    const nonce = (0, import_utils9.randomBytes)(32);
     const tree = new import_smt3.BTCR2MerkleTree();
     tree.addEntries([{ did, nonce, signedUpdate: canonicalBytes }]);
     tree.finalize();
@@ -4919,7 +5093,7 @@ var BeaconFactory = class {
   /**
    * Establish a Beacon instance based on the provided service and optional sidecar data.
    * @param {BeaconService} service The beacon service configuration.
-   * @returns {Beacon} The established Beacon instance.
+   * @returns {SinglePartyBeacon} The established Beacon instance.
    */
   static establish(service) {
     switch (service.type) {
@@ -6276,7 +6450,7 @@ var import_cryptosuite2 = require("@did-btcr2/cryptosuite");
 var import_bitcoin3 = require("@did-btcr2/bitcoin");
 var import_common19 = require("@did-btcr2/common");
 var import_keypair5 = require("@did-btcr2/keypair");
-var import_utils10 = require("@web5/dids/utils");
+var import_utils11 = require("@web5/dids/utils");
 var import_btc_signer6 = require("@scure/btc-signer");
 var BTCR2_DID_DOCUMENT_CONTEXT = [
   "https://www.w3.org/ns/did/v1.1",
@@ -6486,7 +6660,7 @@ var DidDocument = class _DidDocument {
    * @returns {boolean} True if the services are valid.
    */
   static isValidServices(service) {
-    return Array.isArray(service) && service.every(import_utils10.isDidService);
+    return Array.isArray(service) && service.every(import_utils11.isDidService);
   }
   /**
    * Validates verification relationships (authentication, assertionMethod, capabilityInvocation, capabilityDelegation).
@@ -7066,7 +7240,7 @@ var DidBtcr2 = class {
 };
 
 // src/core/resolver.ts
-var import_utils12 = require("@noble/curves/utils.js");
+var import_utils13 = require("@noble/curves/utils.js");
 var Resolver = class _Resolver {
   // --- Immutable inputs ---
   #didComponents;
@@ -7133,7 +7307,7 @@ var Resolver = class _Resolver {
    */
   static external(didComponents, genesisDocument) {
     const genesisDocumentHash = (0, import_common22.canonicalHashBytes)(genesisDocument);
-    if (!(0, import_utils12.equalBytes)(didComponents.genesisBytes, genesisDocumentHash)) {
+    if (!(0, import_utils13.equalBytes)(didComponents.genesisBytes, genesisDocumentHash)) {
       throw new import_common22.ResolveError(
         `Initial document mismatch: genesisBytes !== genesisDocumentHash`,
         import_common22.INVALID_DID_DOCUMENT,
@@ -7168,7 +7342,7 @@ var Resolver = class _Resolver {
     const smtMap = /* @__PURE__ */ new Map();
     if (sidecar.smtProofs?.length)
       for (const proof of sidecar.smtProofs) {
-        smtMap.set(proof.id, proof);
+        smtMap.set((0, import_common22.encode)((0, import_common22.decode)(proof.id, "base64urlnopad"), "hex"), proof);
       }
     return { updateMap, casMap, smtMap };
   }
@@ -7210,7 +7384,7 @@ var Resolver = class _Resolver {
         this.confirmDuplicate(update, updateHashHistory);
       } else if (update.targetVersionId === currentVersionId + 1) {
         const sourceHashBytes = (0, import_common22.decode)(update.sourceHash, "base64urlnopad");
-        if (!(0, import_utils12.equalBytes)(sourceHashBytes, currentDocumentHash)) {
+        if (!(0, import_utils13.equalBytes)(sourceHashBytes, currentDocumentHash)) {
           throw new import_common22.ResolveError(
             `Hash mismatch: update.sourceHash !== currentDocumentHash`,
             import_common22.INVALID_DID_UPDATE,
@@ -7257,7 +7431,7 @@ var Resolver = class _Resolver {
     const { proof: _, ...unsignedUpdate } = update;
     const unsignedUpdateHash = (0, import_common22.canonicalHashBytes)(unsignedUpdate);
     const historicalUpdateHash = updateHashHistory[update.targetVersionId - 2];
-    if (!(0, import_utils12.equalBytes)(historicalUpdateHash, unsignedUpdateHash)) {
+    if (!(0, import_utils13.equalBytes)(historicalUpdateHash, unsignedUpdateHash)) {
       throw new import_common22.ResolveError(
         `Invalid duplicate: unsigned update hash does not match historical hash`,
         import_common22.LATE_PUBLISHING_ERROR,
@@ -7310,7 +7484,7 @@ var Resolver = class _Resolver {
     DidDocument.validate(updatedDocument);
     const currentDocumentHash = (0, import_common22.canonicalHashBytes)(updatedDocument);
     const updateTargetHash = (0, import_common22.decode)(update.targetHash);
-    if (!(0, import_utils12.equalBytes)(updateTargetHash, currentDocumentHash)) {
+    if (!(0, import_utils13.equalBytes)(updateTargetHash, currentDocumentHash)) {
       throw new import_common22.ResolveError(
         `Invalid update: update.targetHash !== currentDocumentHash`,
         import_common22.INVALID_DID_UPDATE,
@@ -7456,11 +7630,12 @@ var Resolver = class _Resolver {
       case "NeedSMTProof": {
         const smtNeed = need;
         const proof = data;
-        if (proof.id !== smtNeed.smtRootHash) {
+        const proofIdHex = (0, import_common22.encode)((0, import_common22.decode)(proof.id, "base64urlnopad"), "hex");
+        if (proofIdHex !== smtNeed.smtRootHash) {
           throw new import_common22.ResolveError(
-            `SMT proof root hash mismatch: expected ${smtNeed.smtRootHash}, got ${proof.id}`,
+            `SMT proof root hash mismatch: expected ${smtNeed.smtRootHash}, got ${proofIdHex}`,
             import_common22.INVALID_DID_UPDATE,
-            { expected: smtNeed.smtRootHash, actual: proof.id }
+            { expected: smtNeed.smtRootHash, actual: proofIdHex }
           );
         }
         this.#sidecarData.smtMap.set(smtNeed.smtRootHash, proof);
@@ -7536,6 +7711,7 @@ var DidDocumentBuilder = class {
   AggregationParticipant,
   AggregationParticipantError,
   AggregationParticipantRunner,
+  AggregationRunner,
   AggregationService,
   AggregationServiceError,
   AggregationServiceRunner,
@@ -7543,7 +7719,6 @@ var DidDocumentBuilder = class {
   BECH32M_CHARS,
   BTCR2_DID_DOCUMENT_CONTEXT,
   BaseMessage,
-  Beacon,
   BeaconError,
   BeaconFactory,
   BeaconSignalDiscovery,
@@ -7578,7 +7753,9 @@ var DidDocumentBuilder = class {
   HttpTransportError,
   ID_PLACEHOLDER_VALUE,
   Identifier,
+  InMemoryBus,
   InMemoryRateLimitStore,
+  InMemoryTransport,
   InboxBuffer,
   NONCE_CONTRIBUTION,
   NonceCache,
@@ -7600,6 +7777,7 @@ var DidDocumentBuilder = class {
   ServiceCohortPhase,
   SigningSessionError,
   SigningSessionPhase,
+  SinglePartyBeacon,
   SingletonBeacon,
   SingletonBeaconError,
   StaticFeeEstimator,

package/dist/esm/core/aggregation/beacon-strategy.js

@@ -1,5 +1,5 @@
 import { canonicalize } from '@did-btcr2/common';
-import { blockHash, didToIndex, hashToHex, hexToHash, verifySerializedProof } from '@did-btcr2/smt';
+import { base64UrlToHash, blockHash, didToIndex, hashToBase64Url, verifySerializedProof } from '@did-btcr2/smt';
 const CAS_STRATEGY = {
     type: 'CASBeacon',
     buildAggregatedData(cohort) {
@@ -31,15 +31,16 @@ const SMT_STRATEGY = {
         const smtProof = body.smtProof;
         if (!smtProof?.updateId || !smtProof?.nonce)
             return { matches: false };
-        // Verify updateId matches the canonicalized update hash
+        // Verify updateId matches the canonicalized update hash. Proof hash fields
+        // are base64url (no padding) per the SMT Proof spec.
         const canonicalBytes = new TextEncoder().encode(canonicalize(submittedUpdate));
-        const expectedUpdateId = hashToHex(blockHash(canonicalBytes));
+        const expectedUpdateId = hashToBase64Url(blockHash(canonicalBytes));
         if (smtProof.updateId !== expectedUpdateId) {
             return { matches: false, smtProof };
         }
         // Verify Merkle inclusion
         const index = didToIndex(participantDid);
-        const candidateHash = blockHash(blockHash(hexToHash(smtProof.nonce)), hexToHash(smtProof.updateId));
+        const candidateHash = blockHash(blockHash(base64UrlToHash(smtProof.nonce)), base64UrlToHash(smtProof.updateId));
         return {
             matches: verifySerializedProof(smtProof, index, candidateHash),
             smtProof,

package/dist/esm/core/aggregation/beacon-strategy.js.map

@@ -1 +1 @@
-{"version":3,"file":"beacon-strategy.js","sourceRoot":"","sources":["../../../../src/core/aggregation/beacon-strategy.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,MAAM,mBAAmB,CAAC;AAGjD,OAAO,EAAE,SAAS,EAAE,UAAU,EAAE,SAAS,EAAE,SAAS,EAAE,qBAAqB,EAAE,MAAM,gBAAgB,CAAC;AAqDpG,MAAM,YAAY,GAA4B;IAC5C,IAAI,EAAG,WAAW;IAElB,mBAAmB,CAAC,MAAM;QACxB,MAAM,CAAC,oBAAoB,EAAE,CAAC;IAChC,CAAC;IAED,oBAAoB,CAAC,MAAM;QACzB,OAAO,EAAE,eAAe,EAAE,MAAM,CAAC,eAAe,EAAE,CAAC;IACrD,CAAC;IAED,uBAAuB,CAAC,EAAE,cAAc,EAAE,YAAY,EAAE,IAAI,EAAE;QAC5D,MAAM,eAAe,GAAG,IAAI,CAAC,eAAe,CAAC;QAC7C,IAAG,CAAC,eAAe;YAAE,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC;QAC/C,OAAO;YACL,OAAO,EAAG,eAAe,CAAC,cAAc,CAAC,KAAK,YAAY;YAC1D,eAAe;SAChB,CAAC;IACJ,CAAC;CACF,CAAC;AAEF,MAAM,YAAY,GAA4B;IAC5C,IAAI,EAAG,WAAW;IAElB,mBAAmB,CAAC,MAAM;QACxB,MAAM,CAAC,YAAY,EAAE,CAAC;IACxB,CAAC;IAED,oBAAoB,CAAC,MAAM,EAAE,cAAc;QACzC,MAAM,KAAK,GAAG,MAAM,CAAC,SAAS,EAAE,GAAG,CAAC,cAAc,CAAC,CAAC;QACpD,OAAO,EAAE,QAAQ,EAAE,KAAuD,EAAE,CAAC;IAC/E,CAAC;IAED,uBAAuB,CAAC,EAAE,cAAc,EAAE,eAAe,EAAE,IAAI,EAAE;QAC/D,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAqD,CAAC;QAC5E,IAAG,CAAC,QAAQ,EAAE,QAAQ,IAAI,CAAC,QAAQ,EAAE,KAAK;YAAE,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC;QACtE,wDAAwD;QACxD,MAAM,cAAc,GAAG,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,YAAY,CAAC,eAAqD,CAAC,CAAC,CAAC;QACrH,MAAM,gBAAgB,GAAG,SAAS,CAAC,SAAS,CAAC,cAAc,CAAC,CAAC,CAAC;QAC9D,IAAG,QAAQ,CAAC,QAAQ,KAAK,gBAAgB,EAAE,CAAC;YAC1C,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAC;QACtC,CAAC;QACD,0BAA0B;QAC1B,MAAM,KAAK,GAAG,UAAU,CAAC,cAAc,CAAC,CAAC;QACzC,MAAM,aAAa,GAAG,SAAS,CAAC,SAAS,CAAC,SAAS,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,EAAE,SAAS,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC,CAAC;QACpG,OAAO;YACL,OAAO,EAAG,qBAAqB,CAAC,QAAQ,EAAE,KAAK,EAAE,aAAa,CAAC;YAC/D,QAAQ;SACT,CAAC;IACJ,CAAC;CACF,CAAC;AAEF,0DAA0D;AAC1D,MAAM,UAAU,GAAyC,IAAI,GAAG,CAAC;IAC/D,CAAC,YAAY,CAAC,IAAI,EAAE,YAAY,CAAC;IACjC,CAAC,YAAY,CAAC,IAAI,EAAE,YAAY,CAAC;CAClC,CAAC,CAAC;AAEH,2FAA2F;AAC3F,MAAM,UAAU,sBAAsB,CAAC,QAAiC;IACtE,UAAU,CAAC,GAAG,CAAC,QAAQ,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC;AAC1C,CAAC;AAED,oFAAoF;AACpF,MAAM,UAAU,iBAAiB,CAAC,IAAY;IAC5C,OAAO,UAAU,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;AAC9B,CAAC"}
+{"version":3,"file":"beacon-strategy.js","sourceRoot":"","sources":["../../../../src/core/aggregation/beacon-strategy.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,MAAM,mBAAmB,CAAC;AAGjD,OAAO,EAAE,eAAe,EAAE,SAAS,EAAE,UAAU,EAAE,eAAe,EAAE,qBAAqB,EAAE,MAAM,gBAAgB,CAAC;AAqDhH,MAAM,YAAY,GAA4B;IAC5C,IAAI,EAAG,WAAW;IAElB,mBAAmB,CAAC,MAAM;QACxB,MAAM,CAAC,oBAAoB,EAAE,CAAC;IAChC,CAAC;IAED,oBAAoB,CAAC,MAAM;QACzB,OAAO,EAAE,eAAe,EAAE,MAAM,CAAC,eAAe,EAAE,CAAC;IACrD,CAAC;IAED,uBAAuB,CAAC,EAAE,cAAc,EAAE,YAAY,EAAE,IAAI,EAAE;QAC5D,MAAM,eAAe,GAAG,IAAI,CAAC,eAAe,CAAC;QAC7C,IAAG,CAAC,eAAe;YAAE,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC;QAC/C,OAAO;YACL,OAAO,EAAG,eAAe,CAAC,cAAc,CAAC,KAAK,YAAY;YAC1D,eAAe;SAChB,CAAC;IACJ,CAAC;CACF,CAAC;AAEF,MAAM,YAAY,GAA4B;IAC5C,IAAI,EAAG,WAAW;IAElB,mBAAmB,CAAC,MAAM;QACxB,MAAM,CAAC,YAAY,EAAE,CAAC;IACxB,CAAC;IAED,oBAAoB,CAAC,MAAM,EAAE,cAAc;QACzC,MAAM,KAAK,GAAG,MAAM,CAAC,SAAS,EAAE,GAAG,CAAC,cAAc,CAAC,CAAC;QACpD,OAAO,EAAE,QAAQ,EAAE,KAAuD,EAAE,CAAC;IAC/E,CAAC;IAED,uBAAuB,CAAC,EAAE,cAAc,EAAE,eAAe,EAAE,IAAI,EAAE;QAC/D,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAqD,CAAC;QAC5E,IAAG,CAAC,QAAQ,EAAE,QAAQ,IAAI,CAAC,QAAQ,EAAE,KAAK;YAAE,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC;QACtE,2EAA2E;QAC3E,qDAAqD;QACrD,MAAM,cAAc,GAAG,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,YAAY,CAAC,eAAqD,CAAC,CAAC,CAAC;QACrH,MAAM,gBAAgB,GAAG,eAAe,CAAC,SAAS,CAAC,cAAc,CAAC,CAAC,CAAC;QACpE,IAAG,QAAQ,CAAC,QAAQ,KAAK,gBAAgB,EAAE,CAAC;YAC1C,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAC;QACtC,CAAC;QACD,0BAA0B;QAC1B,MAAM,KAAK,GAAG,UAAU,CAAC,cAAc,CAAC,CAAC;QACzC,MAAM,aAAa,GAAG,SAAS,CAAC,SAAS,CAAC,eAAe,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,EAAE,eAAe,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC,CAAC;QAChH,OAAO;YACL,OAAO,EAAG,qBAAqB,CAAC,QAAQ,EAAE,KAAK,EAAE,aAAa,CAAC;YAC/D,QAAQ;SACT,CAAC;IACJ,CAAC;CACF,CAAC;AAEF,0DAA0D;AAC1D,MAAM,UAAU,GAAyC,IAAI,GAAG,CAAC;IAC/D,CAAC,YAAY,CAAC,IAAI,EAAE,YAAY,CAAC;IACjC,CAAC,YAAY,CAAC,IAAI,EAAE,YAAY,CAAC;CAClC,CAAC,CAAC;AAEH,2FAA2F;AAC3F,MAAM,UAAU,sBAAsB,CAAC,QAAiC;IACtE,UAAU,CAAC,GAAG,CAAC,QAAQ,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC;AAC1C,CAAC;AAED,oFAAoF;AACpF,MAAM,UAAU,iBAAiB,CAAC,IAAY;IAC5C,OAAO,UAAU,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;AAC9B,CAAC"}

package/dist/esm/core/aggregation/runner/aggregation-runner.js

@@ -0,0 +1,66 @@
+import { InMemoryBus, InMemoryTransport } from '../transport/in-memory.js';
+import { AggregationParticipantRunner } from './participant-runner.js';
+import { AggregationServiceRunner } from './service-runner.js';
+/**
+ * High-level facades for driving an aggregation cohort to completion.
+ *
+ * @class AggregationRunner
+ */
+export class AggregationRunner {
+    /**
+     * Run a cohort of ONE participant entirely in-process and return the
+     * aggregated MuSig2 result.
+     *
+     * One party plays both the coordinating service and the lone participant,
+     * connected over an {@link InMemoryTransport} (no relay or HTTP server). This
+     * makes the single-participant aggregate-beacon path — the N=1 corner of the
+     * two-axis beacon matrix (see ADR 037) — first-class, useful for generating
+     * and reproducing single-participant aggregate test vectors.
+     *
+     * The service advertises a cohort with `minParticipants: 1`; the participant
+     * joins, submits its update, and the two complete keygen, data distribution,
+     * validation, and a one-signer MuSig2 P2TR key-path signing round.
+     *
+     * @param options Service + participant identities, cohort config, and the
+     *   update / tx-data callbacks.
+     * @returns The {@link AggregationResult} (cohort id, aggregated signature, signed tx).
+     */
+    static async solo(options) {
+        const transport = new InMemoryTransport(new InMemoryBus());
+        transport.registerActor(options.service.did, options.service.keys);
+        transport.registerActor(options.participant.did, options.participant.keys);
+        // Pre-register communication keys both ways. Production exchanges these via
+        // the protocol handshake; in-process we wire them directly.
+        transport.registerPeer(options.participant.did, options.participant.keys.publicKey.compressed);
+        transport.registerPeer(options.service.did, options.service.keys.publicKey.compressed);
+        transport.start();
+        const service = new AggregationServiceRunner({
+            transport,
+            did: options.service.did,
+            keys: options.service.keys,
+            config: { minParticipants: 1, network: options.config.network, beaconType: options.config.beaconType },
+            onProvideTxData: options.onProvideTxData,
+            cohortTtlMs: options.cohortTtlMs,
+            phaseTimeoutMs: options.phaseTimeoutMs,
+            // In-process bus with the participant already listening: a single advert
+            // suffices, so disable the republish loop (no dangling interval).
+            advertRepeatIntervalMs: 0,
+        });
+        const participant = new AggregationParticipantRunner({
+            transport,
+            did: options.participant.did,
+            keys: options.participant.keys,
+            shouldJoin: async () => true,
+            onProvideUpdate: options.onProvideUpdate,
+        });
+        await participant.start();
+        try {
+            return await service.run();
+        }
+        finally {
+            participant.stop();
+            service.stop();
+        }
+    }
+}
+//# sourceMappingURL=aggregation-runner.js.map

package/dist/esm/core/aggregation/runner/aggregation-runner.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"aggregation-runner.js","sourceRoot":"","sources":["../../../../../src/core/aggregation/runner/aggregation-runner.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,WAAW,EAAE,iBAAiB,EAAE,MAAM,2BAA2B,CAAC;AAC3E,OAAO,EAAE,4BAA4B,EAAE,MAAM,yBAAyB,CAAC;AAEvE,OAAO,EAAE,wBAAwB,EAAE,MAAM,qBAAqB,CAAC;AA2B/D;;;;GAIG;AACH,MAAM,OAAO,iBAAiB;IAC5B;;;;;;;;;;;;;;;;;OAiBG;IACH,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,OAA0B;QAC1C,MAAM,SAAS,GAAG,IAAI,iBAAiB,CAAC,IAAI,WAAW,EAAE,CAAC,CAAC;QAC3D,SAAS,CAAC,aAAa,CAAC,OAAO,CAAC,OAAO,CAAC,GAAG,EAAE,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;QACnE,SAAS,CAAC,aAAa,CAAC,OAAO,CAAC,WAAW,CAAC,GAAG,EAAE,OAAO,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC;QAC3E,4EAA4E;QAC5E,4DAA4D;QAC5D,SAAS,CAAC,YAAY,CAAC,OAAO,CAAC,WAAW,CAAC,GAAG,EAAE,OAAO,CAAC,WAAW,CAAC,IAAI,CAAC,SAAS,CAAC,UAAU,CAAC,CAAC;QAC/F,SAAS,CAAC,YAAY,CAAC,OAAO,CAAC,OAAO,CAAC,GAAG,EAAE,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,SAAS,CAAC,UAAU,CAAC,CAAC;QACvF,SAAS,CAAC,KAAK,EAAE,CAAC;QAElB,MAAM,OAAO,GAAG,IAAI,wBAAwB,CAAC;YAC3C,SAAS;YACT,GAAG,EAAsB,OAAO,CAAC,OAAO,CAAC,GAAG;YAC5C,IAAI,EAAqB,OAAO,CAAC,OAAO,CAAC,IAAI;YAC7C,MAAM,EAAmB,EAAE,eAAe,EAAE,CAAC,EAAE,OAAO,EAAE,OAAO,CAAC,MAAM,CAAC,OAAO,EAAE,UAAU,EAAE,OAAO,CAAC,MAAM,CAAC,UAAU,EAAE;YACvH,eAAe,EAAU,OAAO,CAAC,eAAe;YAChD,WAAW,EAAc,OAAO,CAAC,WAAW;YAC5C,cAAc,EAAW,OAAO,CAAC,cAAc;YAC/C,yEAAyE;YACzE,kEAAkE;YAClE,sBAAsB,EAAG,CAAC;SAC3B,CAAC,CAAC;QAEH,MAAM,WAAW,GAAG,IAAI,4BAA4B,CAAC;YACnD,SAAS;YACT,GAAG,EAAe,OAAO,CAAC,WAAW,CAAC,GAAG;YACzC,IAAI,EAAc,OAAO,CAAC,WAAW,CAAC,IAAI;YAC1C,UAAU,EAAQ,KAAK,IAAI,EAAE,CAAC,IAAI;YAClC,eAAe,EAAG,OAAO,CAAC,eAAe;SAC1C,CAAC,CAAC;QAEH,MAAM,WAAW,CAAC,KAAK,EAAE,CAAC;QAC1B,IAAI,CAAC;YACH,OAAO,MAAM,OAAO,CAAC,GAAG,EAAE,CAAC;QAC7B,CAAC;gBAAS,CAAC;YACT,WAAW,CAAC,IAAI,EAAE,CAAC;YACnB,OAAO,CAAC,IAAI,EAAE,CAAC;QACjB,CAAC;IACH,CAAC;CACF"}

package/dist/esm/core/aggregation/runner/index.js

@@ -2,4 +2,5 @@ export * from './typed-emitter.js';
 export * from './events.js';
 export * from './service-runner.js';
 export * from './participant-runner.js';
+export * from './aggregation-runner.js';
 //# sourceMappingURL=index.js.map

package/dist/esm/core/aggregation/runner/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../../../src/core/aggregation/runner/index.ts"],"names":[],"mappings":"AAAA,cAAc,oBAAoB,CAAC;AACnC,cAAc,aAAa,CAAC;AAC5B,cAAc,qBAAqB,CAAC;AACpC,cAAc,yBAAyB,CAAC"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../../../src/core/aggregation/runner/index.ts"],"names":[],"mappings":"AAAA,cAAc,oBAAoB,CAAC;AACnC,cAAc,aAAa,CAAC;AAC5B,cAAc,qBAAqB,CAAC;AACpC,cAAc,yBAAyB,CAAC;AACxC,cAAc,yBAAyB,CAAC"}