@did-btcr2/method 0.34.0 → 0.35.0

package/dist/cjs/index.js

@@ -86,6 +86,7 @@ __export(index_exports, {
   InMemoryRateLimitStore: () => InMemoryRateLimitStore,
   InMemoryTransport: () => InMemoryTransport,
   InboxBuffer: () => InboxBuffer,
+  KeyPairAggregationSigner: () => KeyPairAggregationSigner,
   NONCE_CONTRIBUTION: () => NONCE_CONTRIBUTION,
   NonceCache: () => NonceCache,
   NostrTransport: () => NostrTransport,
@@ -224,6 +225,7 @@ function getBeaconStrategy(type) {
 }
 
 // src/core/aggregation/cohort.ts
+var import_bitcoin = require("@did-btcr2/bitcoin");
 var import_common3 = require("@did-btcr2/common");
 var import_smt2 = require("@did-btcr2/smt");
 var import_secp256k1 = require("@noble/curves/secp256k1.js");
@@ -325,7 +327,7 @@ var AggregationCohort = class {
     }
     const keyAggContext = (0, import_musig2.keyAggregate)(this.#cohortKeys);
     const aggPubkey = (0, import_musig2.keyAggExport)(keyAggContext);
-    const payment = (0, import_btc_signer.p2tr)(aggPubkey);
+    const payment = (0, import_btc_signer.p2tr)(aggPubkey, void 0, (0, import_bitcoin.getNetwork)(this.network));
     this.tapTweak = import_secp256k1.schnorr.utils.taggedHash("TapTweak", aggPubkey);
     if (!payment.address) {
       throw new AggregationCohortError(
@@ -596,6 +598,7 @@ var SigningSessionPhase = /* @__PURE__ */ ((SigningSessionPhase2) => {
 })(SigningSessionPhase || {});
 
 // src/core/aggregation/signing-session.ts
+var import_keypair = require("@did-btcr2/keypair");
 var import_btc_signer2 = require("@scure/btc-signer");
 var musig2 = __toESM(require("@scure/btc-signer/musig2"), 1);
 var BeaconSigningSession = class {
@@ -619,8 +622,14 @@ var BeaconSigningSession = class {
   signature;
   /** Current signing session phase. */
   phase;
-  /** Participant's secret nonce (held only by the participant during signing). */
-  secretNonce;
+  /**
+   * Participant's MuSig2 secret nonce, held only on the participant side
+   * between {@link generateNonceContribution} and {@link generatePartialSignature}.
+   * Private and cleared on every terminal path (success, failure, or teardown
+   * via {@link clearSecrets}) so a spent or abandoned nonce cannot be reused or
+   * serialized.
+   */
+  #secretNonce;
   constructor({ id, cohort, pendingTx, prevOutScripts, prevOutValues }) {
     this.id = id || crypto.randomUUID();
     this.cohort = cohort;
@@ -772,22 +781,24 @@ var BeaconSigningSession = class {
   generateNonceContribution(participantPublicKey, participantSecretKey) {
     const aggPublicKey = musig2.keyAggExport(musig2.keyAggregate(this.cohort.cohortKeys));
     const nonces = musig2.nonceGen(participantPublicKey, participantSecretKey, aggPublicKey);
-    this.secretNonce = nonces.secret;
+    this.#secretNonce = nonces.secret;
     return nonces.public;
   }
   /**
    * Generates a partial signature using the participant's secret key + secret nonce.
    * Requires the aggregated nonce to have been set first (via the service).
    *
-   * Zeros the stored `secretNonce` after use. JS cannot truly erase memory (GC
-   * and immutable strings), but overwriting the bytes shortens the exposure
-   * window and prevents accidental reuse or serialization of a spent nonce.
+   * Clears the stored secret nonce after use on every path (success or throw)
+   * via {@link clearSecrets}. JS cannot truly erase memory (GC may relocate
+   * buffers), but overwriting the bytes shortens the exposure window and
+   * prevents accidental reuse or serialization of a spent nonce - reuse of a
+   * MuSig2 nonce leaks the secret key.
    */
   generatePartialSignature(participantSecretKey) {
     if (!this.aggregatedNonce) {
       throw new SigningSessionError("Aggregated nonce not available.", "MISSING_AGGREGATED_NONCE");
     }
-    if (!this.secretNonce) {
+    if (!this.#secretNonce) {
       throw new SigningSessionError("Secret nonce not available \u2014 generateNonceContribution() must be called first.", "MISSING_SECRET_NONCE");
     }
     const session = new musig2.Session(
@@ -797,10 +808,23 @@ var BeaconSigningSession = class {
       [this.cohort.tapTweak],
       [true]
     );
-    const partialSig = session.sign(this.secretNonce, participantSecretKey);
-    this.secretNonce.fill(0);
-    this.secretNonce = void 0;
-    return partialSig;
+    try {
+      return session.sign(this.#secretNonce, participantSecretKey);
+    } finally {
+      this.clearSecrets();
+    }
+  }
+  /**
+   * Zeroize any retained secret nonce. Safe to call repeatedly and on any path
+   * (completion, failure, or teardown of an abandoned session). Callers that
+   * drop a session before it reaches a partial signature should invoke this so
+   * the secret nonce does not linger on the live object.
+   */
+  clearSecrets() {
+    if (this.#secretNonce) {
+      (0, import_keypair.wipe)(this.#secretNonce);
+      this.#secretNonce = void 0;
+    }
   }
   isComplete() {
     return this.phase === "Complete" /* Complete */;
@@ -814,13 +838,13 @@ var BeaconSigningSession = class {
 var DEFAULT_MAX_UPDATE_SIZE_BYTES = 256 * 1024;
 var AggregationService = class {
   did;
-  keys;
+  publicKey;
   maxUpdateSizeBytes;
   /** Per-cohort state, keyed by cohortId. */
   #cohortStates = /* @__PURE__ */ new Map();
-  constructor({ did, keys, maxUpdateSizeBytes }) {
+  constructor({ did, publicKey, maxUpdateSizeBytes }) {
     this.did = did;
-    this.keys = keys;
+    this.publicKey = publicKey;
     this.maxUpdateSizeBytes = maxUpdateSizeBytes ?? DEFAULT_MAX_UPDATE_SIZE_BYTES;
   }
   receive(message) {
@@ -913,7 +937,7 @@ var AggregationService = class {
       cohortSize: state.config.minParticipants,
       beaconType: state.config.beaconType,
       network: state.config.network,
-      communicationPk: this.keys.publicKey.compressed
+      communicationPk: this.publicKey.compressed
     });
     state.phase = "Advertised" /* Advertised */;
     return [message];
@@ -1325,12 +1349,17 @@ var import_utils3 = require("@noble/hashes/utils");
 var import_btc_signer3 = require("@scure/btc-signer");
 var AggregationParticipant = class {
   did;
-  keys;
+  /** MuSig2 signing capability. The raw secret never lives as a field here. */
+  #signer;
   /** Per-cohort state, keyed by cohortId. */
   #cohortStates = /* @__PURE__ */ new Map();
-  constructor({ did, keys }) {
+  constructor({ did, signer }) {
     this.did = did;
-    this.keys = keys;
+    this.#signer = signer;
+  }
+  /** The participant's compressed (33-byte) MuSig2 public key. Not secret. */
+  get publicKey() {
+    return this.#signer.publicKey;
   }
   /**
    * Process an incoming message. Updates internal state but never produces
@@ -1419,8 +1448,8 @@ var AggregationParticipant = class {
       from: this.did,
       to: state.serviceDid,
       cohortId,
-      participantPk: this.keys.publicKey.compressed,
-      communicationPk: this.keys.publicKey.compressed
+      participantPk: this.publicKey,
+      communicationPk: this.publicKey
     });
     return [optInMessage];
   }
@@ -1451,7 +1480,7 @@ var AggregationParticipant = class {
     const beaconAddress = message.body?.beaconAddress;
     const cohortKeys = message.body?.cohortKeys;
     if (!beaconAddress || !cohortKeys) return;
-    const participantPkHex = (0, import_utils3.bytesToHex)(this.keys.publicKey.compressed);
+    const participantPkHex = (0, import_utils3.bytesToHex)(this.publicKey);
     const cohortKeysHex = cohortKeys.map((k) => (0, import_utils3.bytesToHex)(new Uint8Array(k)));
     state.cohort.validateMembership(participantPkHex, cohortKeysHex, beaconAddress);
     state.phase = "CohortReady" /* CohortReady */;
@@ -1618,9 +1647,8 @@ var AggregationParticipant = class {
       prevOutValues
     });
     state.signingSession = session;
-    const nonceContribution = session.generateNonceContribution(
-      this.keys.publicKey.compressed,
-      this.keys.secretKey.bytes
+    const nonceContribution = this.#signer.withSecret(
+      (secretKey) => session.generateNonceContribution(this.publicKey, secretKey)
     );
     state.phase = "NonceSent" /* NonceSent */;
     return [createNonceContributionMessage({
@@ -1663,7 +1691,10 @@ var AggregationParticipant = class {
         { cohortId }
       );
     }
-    const partialSig = state.signingSession.generatePartialSignature(this.keys.secretKey.bytes);
+    const signingSession = state.signingSession;
+    const partialSig = this.#signer.withSecret(
+      (secretKey) => signingSession.generatePartialSignature(secretKey)
+    );
     state.phase = "Complete" /* Complete */;
     return [createSignatureAuthorizationMessage({
       from: this.did,
@@ -1676,6 +1707,37 @@ var AggregationParticipant = class {
   getCohortPhase(cohortId) {
     return this.#cohortStates.get(cohortId)?.phase;
   }
+  /**
+   * Zeroize any retained MuSig2 secret nonces across all cohorts. The raw
+   * signing key is never held here (it lives behind the {@link AggregationSigner}
+   * and is wiped per-operation), but an abandoned signing session can still hold
+   * a secret nonce; call this on teardown to clear it deterministically.
+   */
+  clearSecrets() {
+    for (const state of this.#cohortStates.values()) {
+      state.signingSession?.clearSecrets();
+    }
+  }
+};
+
+// src/core/aggregation/signer.ts
+var import_keypair2 = require("@did-btcr2/keypair");
+var KeyPairAggregationSigner = class {
+  publicKey;
+  #keys;
+  /** @param {SchnorrKeyPair} keys The keypair whose secret backs this signer. */
+  constructor(keys) {
+    this.#keys = keys;
+    this.publicKey = keys.publicKey.compressed;
+  }
+  withSecret(fn) {
+    const secretKey = this.#keys.secretKey.bytes;
+    try {
+      return fn(secretKey);
+    } finally {
+      (0, import_keypair2.wipe)(secretKey);
+    }
+  }
 };
 
 // src/core/aggregation/logger.ts
@@ -1787,11 +1849,11 @@ var TransportAdapterError = class extends import_common6.MethodError {
 var import_common10 = require("@did-btcr2/common");
 
 // src/core/aggregation/transport/http/client.ts
-var import_keypair2 = require("@did-btcr2/keypair");
+var import_keypair4 = require("@did-btcr2/keypair");
 
 // src/core/identifier.ts
 var import_common7 = require("@did-btcr2/common");
-var import_keypair = require("@did-btcr2/keypair");
+var import_keypair3 = require("@did-btcr2/keypair");
 var import_base4 = require("@scure/base");
 var Identifier = class _Identifier {
   /**
@@ -1824,7 +1886,7 @@ var Identifier = class _Identifier {
     }
     if (idType === "KEY") {
       try {
-        new import_keypair.CompressedSecp256k1PublicKey(genesisBytes);
+        new import_keypair3.CompressedSecp256k1PublicKey(genesisBytes);
       } catch {
         throw new import_common7.IdentifierError(
           'Expected "genesisBytes" to be a valid compressed secp256k1 public key',
@@ -1926,7 +1988,7 @@ var Identifier = class _Identifier {
     const genesisBytes = dataBytes.slice(byteIndex + 1);
     if (idType === "KEY") {
       try {
-        new import_keypair.CompressedSecp256k1PublicKey(genesisBytes);
+        new import_keypair3.CompressedSecp256k1PublicKey(genesisBytes);
       } catch {
         throw new import_common7.IdentifierError(`Invalid genesisBytes: ${genesisBytes}`, import_common7.INVALID_DID, { identifier });
       }
@@ -1938,7 +2000,7 @@ var Identifier = class _Identifier {
    * @returns {string} The new did:btcr2 identifier.
    */
   static generate() {
-    const keyPair = import_keypair.SchnorrKeyPair.generate();
+    const keyPair = import_keypair3.SchnorrKeyPair.generate();
     const did = this.encode(
       keyPair.publicKey.compressed,
       {
@@ -1964,7 +2026,7 @@ var Identifier = class _Identifier {
         { did, idType }
       );
     }
-    return new import_keypair.CompressedSecp256k1PublicKey(genesisBytes);
+    return new import_keypair3.CompressedSecp256k1PublicKey(genesisBytes);
   }
   /**
    * Validates a did:btcr2 identifier.
@@ -2371,7 +2433,7 @@ var HttpClientTransport = class {
   }
   registerPeer(did, communicationPk) {
     try {
-      new import_keypair2.CompressedSecp256k1PublicKey(communicationPk);
+      new import_keypair4.CompressedSecp256k1PublicKey(communicationPk);
     } catch {
       throw new HttpTransportError(
         `Invalid communication public key for peer ${did}: expected a 33-byte compressed secp256k1 key.`,
@@ -2567,14 +2629,14 @@ var HttpClientTransport = class {
     const peerBytes = this.#peers.get(did);
     if (peerBytes) {
       try {
-        return new import_keypair2.CompressedSecp256k1PublicKey(peerBytes);
+        return new import_keypair4.CompressedSecp256k1PublicKey(peerBytes);
       } catch {
       }
     }
     try {
       const components = Identifier.decode(did);
       if (components.idType === "KEY") {
-        return new import_keypair2.CompressedSecp256k1PublicKey(components.genesisBytes);
+        return new import_keypair4.CompressedSecp256k1PublicKey(components.genesisBytes);
       }
     } catch {
     }
@@ -2619,7 +2681,7 @@ function flattenMessage(msg) {
 }
 
 // src/core/aggregation/transport/http/server.ts
-var import_keypair3 = require("@did-btcr2/keypair");
+var import_keypair5 = require("@did-btcr2/keypair");
 
 // src/core/aggregation/transport/http/inbox-buffer.ts
 var InboxBuffer = class {
@@ -2784,7 +2846,7 @@ var HttpServerTransport = class {
   }
   registerPeer(did, communicationPk) {
     try {
-      new import_keypair3.CompressedSecp256k1PublicKey(communicationPk);
+      new import_keypair5.CompressedSecp256k1PublicKey(communicationPk);
     } catch {
       throw new HttpTransportError(
         `Invalid peer public key for ${did}`,
@@ -3062,14 +3124,14 @@ var HttpServerTransport = class {
     const peerBytes = this.#peers.get(did);
     if (peerBytes) {
       try {
-        return new import_keypair3.CompressedSecp256k1PublicKey(peerBytes);
+        return new import_keypair5.CompressedSecp256k1PublicKey(peerBytes);
       } catch {
       }
     }
     try {
       const components = Identifier.decode(did);
       if (components.idType === "KEY") {
-        return new import_keypair3.CompressedSecp256k1PublicKey(components.genesisBytes);
+        return new import_keypair5.CompressedSecp256k1PublicKey(components.genesisBytes);
       }
     } catch {
     }
@@ -3168,7 +3230,7 @@ function flattenMessage2(msg) {
 }
 
 // src/core/aggregation/transport/nostr.ts
-var import_keypair4 = require("@did-btcr2/keypair");
+var import_keypair6 = require("@did-btcr2/keypair");
 var import_utils6 = require("@noble/hashes/utils");
 var import_nostr_tools = require("nostr-tools");
 var import_pool = require("nostr-tools/pool");
@@ -3266,7 +3328,7 @@ var NostrTransport = class _NostrTransport {
    */
   registerPeer(did, communicationPk) {
     try {
-      new import_keypair4.CompressedSecp256k1PublicKey(communicationPk);
+      new import_keypair6.CompressedSecp256k1PublicKey(communicationPk);
     } catch {
       throw new TransportAdapterError(
         `Invalid communication public key for peer ${did}: expected a 33-byte compressed secp256k1 key.`,
@@ -3373,7 +3435,7 @@ var NostrTransport = class _NostrTransport {
     if (to) {
       const recipientPkBytes = this.#peerRegistry.get(to);
       if (recipientPkBytes) {
-        const recipientPk = new import_keypair4.CompressedSecp256k1PublicKey(recipientPkBytes);
+        const recipientPk = new import_keypair6.CompressedSecp256k1PublicKey(recipientPkBytes);
         tags.push(["p", (0, import_utils6.bytesToHex)(recipientPk.x)]);
       }
     }
@@ -3404,7 +3466,7 @@ var NostrTransport = class _NostrTransport {
           { adapter: this.name, did: to }
         );
       }
-      const recipientPk = new import_keypair4.CompressedSecp256k1PublicKey(recipientPkBytes);
+      const recipientPk = new import_keypair6.CompressedSecp256k1PublicKey(recipientPkBytes);
       const conversationKey = import_nostr_tools.nip44.v2.utils.getConversationKey(
         senderKeys.secretKey.bytes,
         (0, import_utils6.bytesToHex)(recipientPk.x)
@@ -3695,10 +3757,10 @@ var InMemoryTransport = class {
   start() {
   }
   registerActor(did, keys) {
-    this.#actors.set(did, { keys, handlers: /* @__PURE__ */ new Map() });
+    this.#actors.set(did, { publicKey: keys.publicKey.compressed, handlers: /* @__PURE__ */ new Map() });
   }
   getActorPk(did) {
-    return this.#actors.get(did)?.keys.publicKey.compressed;
+    return this.#actors.get(did)?.publicKey;
   }
   /** True if `did` is registered on this transport. Used by the bus for routing. */
   hasActor(did) {
@@ -3909,8 +3971,11 @@ var AggregationServiceRunner = class _AggregationServiceRunner extends TypedEven
     this.#phaseTimeoutMs = options.phaseTimeoutMs;
     this.#advertRepeatIntervalMs = options.advertRepeatIntervalMs ?? DEFAULT_ADVERT_REPEAT_INTERVAL_MS;
     this.session = new AggregationService({
+      // The coordinator never signs, so the state machine receives only the
+      // public half of the operator's keypair (see ADR 038). The full keypair
+      // remains the operator's transport/communication identity.
       did: options.did,
-      keys: options.keys,
+      publicKey: options.keys.publicKey,
       maxUpdateSizeBytes: options.maxUpdateSizeBytes
     });
   }
@@ -4262,7 +4327,10 @@ var AggregationParticipantRunner = class _AggregationParticipantRunner extends T
     this.#onProvideUpdate = options.onProvideUpdate;
     this.#onValidateData = options.onValidateData ?? (async (info) => ({ approved: info.matches }));
     this.#onApproveSigning = options.onApproveSigning ?? (async () => ({ approved: true }));
-    this.session = new AggregationParticipant({ did: options.did, keys: options.keys });
+    this.session = new AggregationParticipant({
+      did: options.did,
+      signer: new KeyPairAggregationSigner(options.keys)
+    });
   }
   /**
    * Start listening for cohorts. The runner stays active until {@link stop}
@@ -4275,6 +4343,7 @@ var AggregationParticipantRunner = class _AggregationParticipantRunner extends T
   stop() {
     this.#stopped = true;
     this.#unregisterHandlers();
+    this.session.clearSecrets();
   }
   /** Message types this runner listens for on the transport. */
   static #HANDLED_MESSAGE_TYPES = [
@@ -5110,11 +5179,11 @@ var BeaconFactory = class {
 };
 
 // src/core/beacon/signal-discovery.ts
-var import_bitcoin2 = require("@did-btcr2/bitcoin");
+var import_bitcoin3 = require("@did-btcr2/bitcoin");
 var import_common18 = require("@did-btcr2/common");
 
 // src/core/beacon/utils.ts
-var import_bitcoin = require("@did-btcr2/bitcoin");
+var import_bitcoin2 = require("@did-btcr2/bitcoin");
 var import_common17 = require("@did-btcr2/common");
 var import_btc_signer5 = require("@scure/btc-signer");
 
@@ -6221,7 +6290,7 @@ var BeaconUtils = class {
   static createBeaconService(did, addressType, beaconType) {
     try {
       const components = Identifier.decode(did);
-      const network = (0, import_bitcoin.getNetwork)(components.network);
+      const network = (0, import_bitcoin2.getNetwork)(components.network);
       const pubkey = components.genesisBytes;
       const id = `${did}#initial${addressType.toUpperCase()}`;
       const address = addressType === "p2tr" ? (0, import_btc_signer5.p2tr)(pubkey.slice(1, 33), void 0, network).address : addressType === "p2wpkh" ? (0, import_btc_signer5.p2wpkh)(pubkey, network).address : (0, import_btc_signer5.p2pkh)(pubkey, network).address;
@@ -6372,14 +6441,14 @@ var BeaconSignalDiscovery = class {
     console.info(`Searching for beacon signals, please wait ...`);
     while (block.height <= targetHeight) {
       for (const tx of block.tx) {
-        if (tx.txid === import_bitcoin2.GENESIS_TX_ID) {
+        if (tx.txid === import_bitcoin3.GENESIS_TX_ID) {
           continue;
         }
         for (const vin of tx.vin) {
           if (vin.coinbase) {
             continue;
           }
-          if (vin.txinwitness && vin.txinwitness.length === 1 && vin.txinwitness[0] === import_bitcoin2.TXIN_WITNESS_COINBASE) {
+          if (vin.txinwitness && vin.txinwitness.length === 1 && vin.txinwitness[0] === import_bitcoin3.TXIN_WITNESS_COINBASE) {
             continue;
           }
           if (!vin.txid) {
@@ -6433,10 +6502,10 @@ var BeaconSignalDiscovery = class {
 };
 
 // src/core/resolver.ts
-var import_bitcoin4 = require("@did-btcr2/bitcoin");
+var import_bitcoin5 = require("@did-btcr2/bitcoin");
 var import_common22 = require("@did-btcr2/common");
 var import_cryptosuite3 = require("@did-btcr2/cryptosuite");
-var import_keypair6 = require("@did-btcr2/keypair");
+var import_keypair8 = require("@did-btcr2/keypair");
 
 // src/did-btcr2.ts
 var import_common21 = require("@did-btcr2/common");
@@ -6447,9 +6516,9 @@ var import_common20 = require("@did-btcr2/common");
 var import_cryptosuite2 = require("@did-btcr2/cryptosuite");
 
 // src/utils/did-document.ts
-var import_bitcoin3 = require("@did-btcr2/bitcoin");
+var import_bitcoin4 = require("@did-btcr2/bitcoin");
 var import_common19 = require("@did-btcr2/common");
-var import_keypair5 = require("@did-btcr2/keypair");
+var import_keypair7 = require("@did-btcr2/keypair");
 var import_utils11 = require("@web5/dids/utils");
 var import_btc_signer6 = require("@scure/btc-signer");
 var BTCR2_DID_DOCUMENT_CONTEXT = [
@@ -6771,9 +6840,9 @@ var GenesisDocument = class _GenesisDocument extends DidDocument {
    * @returns {GenesisDocument} A new GenesisDocument with the placeholder ID.
    */
   static fromPublicKey(publicKey, network) {
-    const pk = new import_keypair5.CompressedSecp256k1PublicKey(publicKey);
+    const pk = new import_keypair7.CompressedSecp256k1PublicKey(publicKey);
     const id = ID_PLACEHOLDER_VALUE;
-    const address = (0, import_btc_signer6.p2pkh)(pk.compressed, (0, import_bitcoin3.getNetwork)(network)).address;
+    const address = (0, import_btc_signer6.p2pkh)(pk.compressed, (0, import_bitcoin4.getNetwork)(network)).address;
     const services = [{
       id: `${id}#service-0`,
       serviceEndpoint: `bitcoin:${address}`,
@@ -7280,11 +7349,11 @@ var Resolver = class _Resolver {
   static deterministic(didComponents) {
     const genesisBytes = didComponents.genesisBytes;
     const did = Identifier.encode(genesisBytes, didComponents);
-    const { multibase } = new import_keypair6.CompressedSecp256k1PublicKey(genesisBytes);
+    const { multibase } = new import_keypair8.CompressedSecp256k1PublicKey(genesisBytes);
     const service = BeaconUtils.generateBeaconServices({
       id: did,
       publicKey: genesisBytes,
-      network: (0, import_bitcoin4.getNetwork)(didComponents.network),
+      network: (0, import_bitcoin5.getNetwork)(didComponents.network),
       beaconType: "SingletonBeacon"
     });
     return new DidDocument({
@@ -7757,6 +7826,7 @@ var DidDocumentBuilder = class {
   InMemoryRateLimitStore,
   InMemoryTransport,
   InboxBuffer,
+  KeyPairAggregationSigner,
   NONCE_CONTRIBUTION,
   NonceCache,
   NostrTransport,

package/dist/esm/core/aggregation/cohort.js

@@ -1,3 +1,4 @@
+import { getNetwork } from '@did-btcr2/bitcoin';
 import { canonicalHash, canonicalize, hash } from '@did-btcr2/common';
 import { BTCR2MerkleTree } from '@did-btcr2/smt';
 import { schnorr } from '@noble/curves/secp256k1.js';
@@ -84,7 +85,10 @@ export class AggregationCohort {
         }
         const keyAggContext = keyAggregate(this.#cohortKeys);
         const aggPubkey = keyAggExport(keyAggContext);
-        const payment = p2tr(aggPubkey);
+        // Derive the address for the cohort's network. Without the network arg
+        // p2tr defaults to mainnet, so a mutinynet/signet/regtest cohort would
+        // otherwise advertise a `bc1p...` address that no participant can fund.
+        const payment = p2tr(aggPubkey, undefined, getNetwork(this.network));
         // BIP-341: key-path-only P2TR has no script tree. Compute the tweak:
         // taggedHash("TapTweak", internalPubkey).
         this.tapTweak = schnorr.utils.taggedHash('TapTweak', aggPubkey);

package/dist/esm/core/aggregation/cohort.js.map

@@ -1 +1 @@
-{"version":3,"file":"cohort.js","sourceRoot":"","sources":["../../../../src/core/aggregation/cohort.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,aAAa,EAAE,YAAY,EAAE,IAAI,EAAE,MAAM,mBAAmB,CAAC;AAGtE,OAAO,EAAE,eAAe,EAAE,MAAM,gBAAgB,CAAC;AACjD,OAAO,EAAE,OAAO,EAAE,MAAM,4BAA4B,CAAC;AACrD,OAAO,EAAE,UAAU,EAAE,WAAW,EAAE,MAAM,qBAAqB,CAAC;AAC9D,OAAO,EAAE,IAAI,EAAE,MAAM,mBAAmB,CAAC;AACzC,OAAO,EAAE,YAAY,EAAE,YAAY,EAAE,QAAQ,EAAE,MAAM,0BAA0B,CAAC;AAEhF,OAAO,EAAE,sBAAsB,EAAE,MAAM,aAAa,CAAC;AAUrD;;;;;;;;;;;;GAYG;AACH,MAAM,OAAO,iBAAiB;IAC5B,wCAAwC;IACxC,EAAE,CAAS;IAEX,2DAA2D;IAC3D,UAAU,CAAS;IAEnB,sEAAsE;IACtE,eAAe,CAAS;IAExB,uEAAuE;IACvE,OAAO,CAAS;IAEhB,qEAAqE;IACrE,UAAU,CAAS;IAEnB,wEAAwE;IACxE,YAAY,GAAkB,EAAE,CAAC;IAEjC;;;;;OAKG;IACH,eAAe,GAA4B,IAAI,GAAG,EAAE,CAAC;IAErD,kEAAkE;IAClE,WAAW,GAAsB,EAAE,CAAC;IAEpC;;;;OAIG;IACH,QAAQ,GAAe,IAAI,UAAU,EAAE,CAAC;IAExC,gDAAgD;IAChD,aAAa,GAAW,EAAE,CAAC;IAE3B,mEAAmE;IACnE,cAAc,GAAmC,IAAI,GAAG,EAAE,CAAC;IAE3D,qFAAqF;IACrF,eAAe,CAAmB;IAElC,yDAAyD;IACzD,SAAS,CAAmC;IAE5C,sFAAsF;IACtF,WAAW,CAAc;IAEzB,sEAAsE;IACtE,cAAc,GAAgB,IAAI,GAAG,EAAE,CAAC;IAExC,sEAAsE;IACtE,oBAAoB,GAAgB,IAAI,GAAG,EAAE,CAAC;IAE9C,YAAY,EAAE,EAAE,EAAE,eAAe,EAAE,UAAU,EAAE,OAAO,EAAE,UAAU,EAA2B;QAC3F,IAAI,CAAC,EAAE,GAAG,EAAE,IAAI,MAAM,CAAC,UAAU,EAAE,CAAC;QACpC,IAAI,CAAC,eAAe,GAAG,eAAe,IAAI,CAAC,CAAC;QAC5C,IAAI,CAAC,UAAU,GAAG,UAAU,IAAI,EAAE,CAAC;QACnC,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC;QACvB,IAAI,CAAC,UAAU,GAAG,UAAU,IAAI,WAAW,CAAC;IAC9C,CAAC;IAED,6DAA6D;IAC7D,IAAI,UAAU;QACZ,OAAO,IAAI,CAAC,WAAW,CAAC;IAC1B,CAAC;IAED,IAAI,UAAU,CAAC,IAAuB;QACpC,IAAI,CAAC,WAAW,GAAG,QAAQ,CAAC,IAAI,CAAC,CAAC;IACpC,CAAC;IAED;;;OAGG;IACI,oBAAoB;QACzB,IAAG,IAAI,CAAC,WAAW,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACjC,MAAM,IAAI,sBAAsB,CAC9B,gDAAgD,EAChD,gBAAgB,EAAE,EAAE,QAAQ,EAAE,IAAI,CAAC,EAAE,EAAE,CACxC,CAAC;QACJ,CAAC;QACD,MAAM,aAAa,GAAG,YAAY,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;QACrD,MAAM,SAAS,GAAG,YAAY,CAAC,aAAa,CAAC,CAAC;QAC9C,MAAM,OAAO,GAAG,IAAI,CAAC,SAAS,CAAC,CAAC;QAEhC,qEAAqE;QACrE,0CAA0C;QAC1C,IAAI,CAAC,QAAQ,GAAG,OAAO,CAAC,KAAK,CAAC,UAAU,CAAC,UAAU,EAAE,SAAS,CAAC,CAAC;QAEhE,IAAG,CAAC,OAAO,CAAC,OAAO,EAAE,CAAC;YACpB,MAAM,IAAI,sBAAsB,CAC9B,mCAAmC,EACnC,sBAAsB,EAAE,EAAE,QAAQ,EAAE,IAAI,CAAC,EAAE,EAAE,CAC9C,CAAC;QACJ,CAAC;QACD,IAAI,CAAC,aAAa,GAAG,OAAO,CAAC,OAAO,CAAC;QACrC,OAAO,OAAO,CAAC,OAAO,CAAC;IACzB,CAAC;IAED;;;;OAIG;IACI,kBAAkB,CACvB,gBAAwB,EACxB,aAA4B,EAC5B,qBAA6B;QAE7B,IAAG,CAAC,aAAa,CAAC,QAAQ,CAAC,gBAAgB,CAAC,EAAE,CAAC;YAC7C,MAAM,IAAI,sBAAsB,CAC9B,uCAAuC,IAAI,CAAC,EAAE,GAAG,EACjD,yBAAyB,EAAE,EAAE,QAAQ,EAAE,IAAI,CAAC,EAAE,EAAE,gBAAgB,EAAE,CACnE,CAAC;QACJ,CAAC;QACD,IAAI,CAAC,UAAU,GAAG,aAAa,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,CAAC;QACxD,MAAM,QAAQ,GAAG,IAAI,CAAC,oBAAoB,EAAE,CAAC;QAC7C,IAAG,QAAQ,KAAK,qBAAqB,EAAE,CAAC;YACtC,MAAM,IAAI,sBAAsB,CAC9B,2BAA2B,QAAQ,4BAA4B,qBAAqB,GAAG,EACvF,yBAAyB,EAAE,EAAE,QAAQ,EAAE,IAAI,CAAC,EAAE,EAAE,QAAQ,EAAE,QAAQ,EAAE,qBAAqB,EAAE,CAC5F,CAAC;QACJ,CAAC;IACH,CAAC;IAED;;;;OAIG;IACI,kBAAkB,CAAC,GAAW;QACnC,MAAM,EAAE,GAAG,IAAI,CAAC,eAAe,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QACzC,IAAG,CAAC,EAAE;YAAE,OAAO,CAAC,CAAC,CAAC;QAClB,OAAO,IAAI,CAAC,WAAW,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,CACpC,CAAC,CAAC,MAAM,KAAK,EAAE,CAAC,MAAM,IAAI,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,CAAC,CACzD,CAAC;IACJ,CAAC;IAEM,SAAS,CAAC,cAAsB,EAAE,YAA+B;QACtE,IAAG,CAAC,IAAI,CAAC,YAAY,CAAC,QAAQ,CAAC,cAAc,CAAC,EAAE,CAAC;YAC/C,MAAM,IAAI,sBAAsB,CAC9B,eAAe,cAAc,qBAAqB,IAAI,CAAC,EAAE,GAAG,EAC5D,qBAAqB,EAAE,EAAE,QAAQ,EAAE,IAAI,CAAC,EAAE,EAAE,cAAc,EAAE,CAC7D,CAAC;QACJ,CAAC;QACD,IAAI,CAAC,cAAc,CAAC,GAAG,CAAC,cAAc,EAAE,YAAY,CAAC,CAAC;IACxD,CAAC;IAEM,aAAa;QAClB,OAAO,IAAI,CAAC,cAAc,CAAC,IAAI,KAAK,IAAI,CAAC,YAAY,CAAC,MAAM,CAAC;IAC/D,CAAC;IAED;;;;OAIG;IACI,oBAAoB;QACzB,IAAG,CAAC,IAAI,CAAC,aAAa,EAAE,EAAE,CAAC;YACzB,MAAM,IAAI,sBAAsB,CAC9B,2DAA2D,EAC3D,oBAAoB,EAAE,EAAE,QAAQ,EAAE,IAAI,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,CAAC,cAAc,CAAC,IAAI,EAAE,KAAK,EAAE,IAAI,CAAC,YAAY,CAAC,MAAM,EAAE,CAClH,CAAC;QACJ,CAAC;QACD,MAAM,YAAY,GAAoB,EAAE,CAAC;QACzC,KAAI,MAAM,CAAC,GAAG,EAAE,YAAY,CAAC,IAAI,IAAI,CAAC,cAAc,EAAE,CAAC;YACrD,YAAY,CAAC,GAAG,CAAC,GAAG,aAAa,CAAC,YAAY,CAAC,CAAC;QAClD,CAAC;QACD,IAAI,CAAC,eAAe,GAAG,YAAY,CAAC;QACpC,IAAI,CAAC,WAAW,GAAG,IAAI,CAAC,YAAY,CAAC,YAAY,CAAC,CAAC,CAAC;QACpD,OAAO,YAAY,CAAC;IACtB,CAAC;IAED;;;;OAIG;IACI,YAAY;QACjB,IAAG,CAAC,IAAI,CAAC,aAAa,EAAE,EAAE,CAAC;YACzB,MAAM,IAAI,sBAAsB,CAC9B,mDAAmD,EACnD,oBAAoB,EAAE,EAAE,QAAQ,EAAE,IAAI,CAAC,EAAE,EAAE,CAC5C,CAAC;QACJ,CAAC;QACD,MAAM,IAAI,GAAG,IAAI,eAAe,EAAE,CAAC;QACnC,MAAM,OAAO,GAAgB,EAAE,CAAC;QAChC,MAAM,OAAO,GAAG,IAAI,WAAW,EAAE,CAAC;QAElC,KAAI,MAAM,CAAC,GAAG,EAAE,YAAY,CAAC,IAAI,IAAI,CAAC,cAAc,EAAE,CAAC;YACrD,MAAM,cAAc,GAAG,OAAO,CAAC,MAAM,CAAC,YAAY,CAAC,YAAY,CAAC,CAAC,CAAC;YAClE,MAAM,KAAK,GAAG,WAAW,CAAC,EAAE,CAAC,CAAC;YAC9B,OAAO,CAAC,IAAI,CAAC,EAAE,GAAG,EAAE,KAAK,EAAE,YAAY,EAAE,cAAc,EAAE,CAAC,CAAC;QAC7D,CAAC;QAED,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC;QACzB,IAAI,CAAC,QAAQ,EAAE,CAAC;QAEhB,IAAI,CAAC,WAAW,GAAG,IAAI,CAAC,QAAQ,CAAC;QACjC,IAAI,CAAC,SAAS,GAAG,IAAI,GAAG,EAAE,CAAC;QAC3B,KAAI,MAAM,CAAC,GAAG,CAAC,IAAI,IAAI,CAAC,cAAc,EAAE,CAAC;YACvC,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,GAAG,EAAE,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC;QAC3C,CAAC;QACD,OAAO,IAAI,CAAC,SAAS,CAAC;IACxB,CAAC;IAEM,aAAa,CAAC,cAAsB,EAAE,QAAiB;QAC5D,IAAG,CAAC,IAAI,CAAC,YAAY,CAAC,QAAQ,CAAC,cAAc,CAAC,EAAE,CAAC;YAC/C,MAAM,IAAI,sBAAsB,CAC9B,uBAAuB,cAAc,cAAc,IAAI,CAAC,EAAE,GAAG,EAC7D,qBAAqB,EAAE,EAAE,QAAQ,EAAE,IAAI,CAAC,EAAE,EAAE,cAAc,EAAE,CAC7D,CAAC;QACJ,CAAC;QACD,IAAG,QAAQ,EAAE,CAAC;YACZ,IAAI,CAAC,cAAc,CAAC,GAAG,CAAC,cAAc,CAAC,CAAC;QAC1C,CAAC;aAAM,CAAC;YACN,IAAI,CAAC,oBAAoB,CAAC,GAAG,CAAC,cAAc,CAAC,CAAC;QAChD,CAAC;IACH,CAAC;IAED;;OAEG;IACI,yBAAyB;QAC9B,OAAO,IAAI,CAAC,cAAc,CAAC,IAAI,GAAG,IAAI,CAAC,oBAAoB,CAAC,IAAI,KAAK,IAAI,CAAC,YAAY,CAAC,MAAM,CAAC;IAChG,CAAC;IAED;;;OAGG;IACI,gBAAgB;QACrB,OAAO,IAAI,CAAC,oBAAoB,CAAC,IAAI,KAAK,CAAC;eACtC,IAAI,CAAC,cAAc,CAAC,IAAI,KAAK,IAAI,CAAC,YAAY,CAAC,MAAM,CAAC;IAC7D,CAAC;CACF"}
+{"version":3,"file":"cohort.js","sourceRoot":"","sources":["../../../../src/core/aggregation/cohort.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,oBAAoB,CAAC;AAChD,OAAO,EAAE,aAAa,EAAE,YAAY,EAAE,IAAI,EAAE,MAAM,mBAAmB,CAAC;AAGtE,OAAO,EAAE,eAAe,EAAE,MAAM,gBAAgB,CAAC;AACjD,OAAO,EAAE,OAAO,EAAE,MAAM,4BAA4B,CAAC;AACrD,OAAO,EAAE,UAAU,EAAE,WAAW,EAAE,MAAM,qBAAqB,CAAC;AAC9D,OAAO,EAAE,IAAI,EAAE,MAAM,mBAAmB,CAAC;AACzC,OAAO,EAAE,YAAY,EAAE,YAAY,EAAE,QAAQ,EAAE,MAAM,0BAA0B,CAAC;AAEhF,OAAO,EAAE,sBAAsB,EAAE,MAAM,aAAa,CAAC;AAUrD;;;;;;;;;;;;GAYG;AACH,MAAM,OAAO,iBAAiB;IAC5B,wCAAwC;IACxC,EAAE,CAAS;IAEX,2DAA2D;IAC3D,UAAU,CAAS;IAEnB,sEAAsE;IACtE,eAAe,CAAS;IAExB,uEAAuE;IACvE,OAAO,CAAS;IAEhB,qEAAqE;IACrE,UAAU,CAAS;IAEnB,wEAAwE;IACxE,YAAY,GAAkB,EAAE,CAAC;IAEjC;;;;;OAKG;IACH,eAAe,GAA4B,IAAI,GAAG,EAAE,CAAC;IAErD,kEAAkE;IAClE,WAAW,GAAsB,EAAE,CAAC;IAEpC;;;;OAIG;IACH,QAAQ,GAAe,IAAI,UAAU,EAAE,CAAC;IAExC,gDAAgD;IAChD,aAAa,GAAW,EAAE,CAAC;IAE3B,mEAAmE;IACnE,cAAc,GAAmC,IAAI,GAAG,EAAE,CAAC;IAE3D,qFAAqF;IACrF,eAAe,CAAmB;IAElC,yDAAyD;IACzD,SAAS,CAAmC;IAE5C,sFAAsF;IACtF,WAAW,CAAc;IAEzB,sEAAsE;IACtE,cAAc,GAAgB,IAAI,GAAG,EAAE,CAAC;IAExC,sEAAsE;IACtE,oBAAoB,GAAgB,IAAI,GAAG,EAAE,CAAC;IAE9C,YAAY,EAAE,EAAE,EAAE,eAAe,EAAE,UAAU,EAAE,OAAO,EAAE,UAAU,EAA2B;QAC3F,IAAI,CAAC,EAAE,GAAG,EAAE,IAAI,MAAM,CAAC,UAAU,EAAE,CAAC;QACpC,IAAI,CAAC,eAAe,GAAG,eAAe,IAAI,CAAC,CAAC;QAC5C,IAAI,CAAC,UAAU,GAAG,UAAU,IAAI,EAAE,CAAC;QACnC,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC;QACvB,IAAI,CAAC,UAAU,GAAG,UAAU,IAAI,WAAW,CAAC;IAC9C,CAAC;IAED,6DAA6D;IAC7D,IAAI,UAAU;QACZ,OAAO,IAAI,CAAC,WAAW,CAAC;IAC1B,CAAC;IAED,IAAI,UAAU,CAAC,IAAuB;QACpC,IAAI,CAAC,WAAW,GAAG,QAAQ,CAAC,IAAI,CAAC,CAAC;IACpC,CAAC;IAED;;;OAGG;IACI,oBAAoB;QACzB,IAAG,IAAI,CAAC,WAAW,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACjC,MAAM,IAAI,sBAAsB,CAC9B,gDAAgD,EAChD,gBAAgB,EAAE,EAAE,QAAQ,EAAE,IAAI,CAAC,EAAE,EAAE,CACxC,CAAC;QACJ,CAAC;QACD,MAAM,aAAa,GAAG,YAAY,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;QACrD,MAAM,SAAS,GAAG,YAAY,CAAC,aAAa,CAAC,CAAC;QAC9C,uEAAuE;QACvE,uEAAuE;QACvE,wEAAwE;QACxE,MAAM,OAAO,GAAG,IAAI,CAAC,SAAS,EAAE,SAAS,EAAE,UAAU,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC;QAErE,qEAAqE;QACrE,0CAA0C;QAC1C,IAAI,CAAC,QAAQ,GAAG,OAAO,CAAC,KAAK,CAAC,UAAU,CAAC,UAAU,EAAE,SAAS,CAAC,CAAC;QAEhE,IAAG,CAAC,OAAO,CAAC,OAAO,EAAE,CAAC;YACpB,MAAM,IAAI,sBAAsB,CAC9B,mCAAmC,EACnC,sBAAsB,EAAE,EAAE,QAAQ,EAAE,IAAI,CAAC,EAAE,EAAE,CAC9C,CAAC;QACJ,CAAC;QACD,IAAI,CAAC,aAAa,GAAG,OAAO,CAAC,OAAO,CAAC;QACrC,OAAO,OAAO,CAAC,OAAO,CAAC;IACzB,CAAC;IAED;;;;OAIG;IACI,kBAAkB,CACvB,gBAAwB,EACxB,aAA4B,EAC5B,qBAA6B;QAE7B,IAAG,CAAC,aAAa,CAAC,QAAQ,CAAC,gBAAgB,CAAC,EAAE,CAAC;YAC7C,MAAM,IAAI,sBAAsB,CAC9B,uCAAuC,IAAI,CAAC,EAAE,GAAG,EACjD,yBAAyB,EAAE,EAAE,QAAQ,EAAE,IAAI,CAAC,EAAE,EAAE,gBAAgB,EAAE,CACnE,CAAC;QACJ,CAAC;QACD,IAAI,CAAC,UAAU,GAAG,aAAa,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,CAAC;QACxD,MAAM,QAAQ,GAAG,IAAI,CAAC,oBAAoB,EAAE,CAAC;QAC7C,IAAG,QAAQ,KAAK,qBAAqB,EAAE,CAAC;YACtC,MAAM,IAAI,sBAAsB,CAC9B,2BAA2B,QAAQ,4BAA4B,qBAAqB,GAAG,EACvF,yBAAyB,EAAE,EAAE,QAAQ,EAAE,IAAI,CAAC,EAAE,EAAE,QAAQ,EAAE,QAAQ,EAAE,qBAAqB,EAAE,CAC5F,CAAC;QACJ,CAAC;IACH,CAAC;IAED;;;;OAIG;IACI,kBAAkB,CAAC,GAAW;QACnC,MAAM,EAAE,GAAG,IAAI,CAAC,eAAe,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QACzC,IAAG,CAAC,EAAE;YAAE,OAAO,CAAC,CAAC,CAAC;QAClB,OAAO,IAAI,CAAC,WAAW,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,CACpC,CAAC,CAAC,MAAM,KAAK,EAAE,CAAC,MAAM,IAAI,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,CAAC,CACzD,CAAC;IACJ,CAAC;IAEM,SAAS,CAAC,cAAsB,EAAE,YAA+B;QACtE,IAAG,CAAC,IAAI,CAAC,YAAY,CAAC,QAAQ,CAAC,cAAc,CAAC,EAAE,CAAC;YAC/C,MAAM,IAAI,sBAAsB,CAC9B,eAAe,cAAc,qBAAqB,IAAI,CAAC,EAAE,GAAG,EAC5D,qBAAqB,EAAE,EAAE,QAAQ,EAAE,IAAI,CAAC,EAAE,EAAE,cAAc,EAAE,CAC7D,CAAC;QACJ,CAAC;QACD,IAAI,CAAC,cAAc,CAAC,GAAG,CAAC,cAAc,EAAE,YAAY,CAAC,CAAC;IACxD,CAAC;IAEM,aAAa;QAClB,OAAO,IAAI,CAAC,cAAc,CAAC,IAAI,KAAK,IAAI,CAAC,YAAY,CAAC,MAAM,CAAC;IAC/D,CAAC;IAED;;;;OAIG;IACI,oBAAoB;QACzB,IAAG,CAAC,IAAI,CAAC,aAAa,EAAE,EAAE,CAAC;YACzB,MAAM,IAAI,sBAAsB,CAC9B,2DAA2D,EAC3D,oBAAoB,EAAE,EAAE,QAAQ,EAAE,IAAI,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,CAAC,cAAc,CAAC,IAAI,EAAE,KAAK,EAAE,IAAI,CAAC,YAAY,CAAC,MAAM,EAAE,CAClH,CAAC;QACJ,CAAC;QACD,MAAM,YAAY,GAAoB,EAAE,CAAC;QACzC,KAAI,MAAM,CAAC,GAAG,EAAE,YAAY,CAAC,IAAI,IAAI,CAAC,cAAc,EAAE,CAAC;YACrD,YAAY,CAAC,GAAG,CAAC,GAAG,aAAa,CAAC,YAAY,CAAC,CAAC;QAClD,CAAC;QACD,IAAI,CAAC,eAAe,GAAG,YAAY,CAAC;QACpC,IAAI,CAAC,WAAW,GAAG,IAAI,CAAC,YAAY,CAAC,YAAY,CAAC,CAAC,CAAC;QACpD,OAAO,YAAY,CAAC;IACtB,CAAC;IAED;;;;OAIG;IACI,YAAY;QACjB,IAAG,CAAC,IAAI,CAAC,aAAa,EAAE,EAAE,CAAC;YACzB,MAAM,IAAI,sBAAsB,CAC9B,mDAAmD,EACnD,oBAAoB,EAAE,EAAE,QAAQ,EAAE,IAAI,CAAC,EAAE,EAAE,CAC5C,CAAC;QACJ,CAAC;QACD,MAAM,IAAI,GAAG,IAAI,eAAe,EAAE,CAAC;QACnC,MAAM,OAAO,GAAgB,EAAE,CAAC;QAChC,MAAM,OAAO,GAAG,IAAI,WAAW,EAAE,CAAC;QAElC,KAAI,MAAM,CAAC,GAAG,EAAE,YAAY,CAAC,IAAI,IAAI,CAAC,cAAc,EAAE,CAAC;YACrD,MAAM,cAAc,GAAG,OAAO,CAAC,MAAM,CAAC,YAAY,CAAC,YAAY,CAAC,CAAC,CAAC;YAClE,MAAM,KAAK,GAAG,WAAW,CAAC,EAAE,CAAC,CAAC;YAC9B,OAAO,CAAC,IAAI,CAAC,EAAE,GAAG,EAAE,KAAK,EAAE,YAAY,EAAE,cAAc,EAAE,CAAC,CAAC;QAC7D,CAAC;QAED,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC;QACzB,IAAI,CAAC,QAAQ,EAAE,CAAC;QAEhB,IAAI,CAAC,WAAW,GAAG,IAAI,CAAC,QAAQ,CAAC;QACjC,IAAI,CAAC,SAAS,GAAG,IAAI,GAAG,EAAE,CAAC;QAC3B,KAAI,MAAM,CAAC,GAAG,CAAC,IAAI,IAAI,CAAC,cAAc,EAAE,CAAC;YACvC,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,GAAG,EAAE,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC;QAC3C,CAAC;QACD,OAAO,IAAI,CAAC,SAAS,CAAC;IACxB,CAAC;IAEM,aAAa,CAAC,cAAsB,EAAE,QAAiB;QAC5D,IAAG,CAAC,IAAI,CAAC,YAAY,CAAC,QAAQ,CAAC,cAAc,CAAC,EAAE,CAAC;YAC/C,MAAM,IAAI,sBAAsB,CAC9B,uBAAuB,cAAc,cAAc,IAAI,CAAC,EAAE,GAAG,EAC7D,qBAAqB,EAAE,EAAE,QAAQ,EAAE,IAAI,CAAC,EAAE,EAAE,cAAc,EAAE,CAC7D,CAAC;QACJ,CAAC;QACD,IAAG,QAAQ,EAAE,CAAC;YACZ,IAAI,CAAC,cAAc,CAAC,GAAG,CAAC,cAAc,CAAC,CAAC;QAC1C,CAAC;aAAM,CAAC;YACN,IAAI,CAAC,oBAAoB,CAAC,GAAG,CAAC,cAAc,CAAC,CAAC;QAChD,CAAC;IACH,CAAC;IAED;;OAEG;IACI,yBAAyB;QAC9B,OAAO,IAAI,CAAC,cAAc,CAAC,IAAI,GAAG,IAAI,CAAC,oBAAoB,CAAC,IAAI,KAAK,IAAI,CAAC,YAAY,CAAC,MAAM,CAAC;IAChG,CAAC;IAED;;;OAGG;IACI,gBAAgB;QACrB,OAAO,IAAI,CAAC,oBAAoB,CAAC,IAAI,KAAK,CAAC;eACtC,IAAI,CAAC,cAAc,CAAC,IAAI,KAAK,IAAI,CAAC,YAAY,CAAC,MAAM,CAAC;IAC7D,CAAC;CACF"}

package/dist/esm/core/aggregation/participant.js

@@ -21,12 +21,17 @@ import { BeaconSigningSession } from './signing-session.js';
  */
 export class AggregationParticipant {
     did;
-    keys;
+    /** MuSig2 signing capability. The raw secret never lives as a field here. */
+    #signer;
     /** Per-cohort state, keyed by cohortId. */
     #cohortStates = new Map();
-    constructor({ did, keys }) {
+    constructor({ did, signer }) {
         this.did = did;
-        this.keys = keys;
+        this.#signer = signer;
+    }
+    /** The participant's compressed (33-byte) MuSig2 public key. Not secret. */
+    get publicKey() {
+        return this.#signer.publicKey;
     }
     /**
      * Process an incoming message. Updates internal state but never produces
@@ -116,8 +121,8 @@ export class AggregationParticipant {
             from: this.did,
             to: state.serviceDid,
             cohortId,
-            participantPk: this.keys.publicKey.compressed,
-            communicationPk: this.keys.publicKey.compressed,
+            participantPk: this.publicKey,
+            communicationPk: this.publicKey,
         });
         return [optInMessage];
     }
@@ -153,7 +158,7 @@ export class AggregationParticipant {
         const cohortKeys = message.body?.cohortKeys;
         if (!beaconAddress || !cohortKeys)
             return;
-        const participantPkHex = bytesToHex(this.keys.publicKey.compressed);
+        const participantPkHex = bytesToHex(this.publicKey);
         const cohortKeysHex = cohortKeys.map(k => bytesToHex(new Uint8Array(k)));
         state.cohort.validateMembership(participantPkHex, cohortKeysHex, beaconAddress);
         state.phase = ParticipantCohortPhase.CohortReady;
@@ -314,7 +319,7 @@ export class AggregationParticipant {
             prevOutValues,
         });
         state.signingSession = session;
-        const nonceContribution = session.generateNonceContribution(this.keys.publicKey.compressed, this.keys.secretKey.bytes);
+        const nonceContribution = this.#signer.withSecret(secretKey => session.generateNonceContribution(this.publicKey, secretKey));
         state.phase = ParticipantCohortPhase.NonceSent;
         return [createNonceContributionMessage({
                 from: this.did,
@@ -352,7 +357,8 @@ export class AggregationParticipant {
         if (!state.signingSession) {
             throw new AggregationParticipantError(`No signing session for cohort ${cohortId}.`, 'MISSING_STATE', { cohortId });
         }
-        const partialSig = state.signingSession.generatePartialSignature(this.keys.secretKey.bytes);
+        const signingSession = state.signingSession;
+        const partialSig = this.#signer.withSecret(secretKey => signingSession.generatePartialSignature(secretKey));
         state.phase = ParticipantCohortPhase.Complete;
         return [createSignatureAuthorizationMessage({
                 from: this.did,
@@ -365,5 +371,16 @@ export class AggregationParticipant {
     getCohortPhase(cohortId) {
         return this.#cohortStates.get(cohortId)?.phase;
     }
+    /**
+     * Zeroize any retained MuSig2 secret nonces across all cohorts. The raw
+     * signing key is never held here (it lives behind the {@link AggregationSigner}
+     * and is wiped per-operation), but an abandoned signing session can still hold
+     * a secret nonce; call this on teardown to clear it deterministically.
+     */
+    clearSecrets() {
+        for (const state of this.#cohortStates.values()) {
+            state.signingSession?.clearSecrets();
+        }
+    }
 }
 //# sourceMappingURL=participant.js.map