@digitaldefiance/ecies-lib 4.17.1 → 4.17.3

package/src/lib/voting/threshold/guardian-registry.d.ts

@@ -0,0 +1,120 @@
+/**
+ * Guardian Registry
+ *
+ * Manages Guardian registration, status tracking, and backup designation
+ * for threshold voting. Guardians are trusted key holders who possess
+ * shares of the threshold decryption key.
+ *
+ * @module voting/threshold
+ */
+import type { PlatformID } from '../../../interfaces/platform-id';
+import { GuardianStatus } from './enumerations/guardian-status';
+import type { Guardian } from './interfaces/guardian';
+import type { GuardianStatusChangeEvent } from './interfaces/guardian-status-change-event';
+import type { IGuardianRegistry } from './interfaces/guardian-registry';
+/**
+ * Error thrown when attempting to register a Guardian with a duplicate ID.
+ */
+export declare class GuardianAlreadyRegisteredError extends Error {
+    constructor(message: string);
+}
+/**
+ * Error thrown when a Guardian is not found.
+ */
+export declare class GuardianNotFoundError extends Error {
+    constructor(message: string);
+}
+/**
+ * Error thrown when a share index is invalid or already taken.
+ */
+export declare class InvalidShareIndexError extends Error {
+    constructor(message: string);
+}
+/**
+ * Error thrown when the registry is full (n Guardians already registered).
+ */
+export declare class RegistryFullError extends Error {
+    constructor(message: string);
+}
+/**
+ * Registry for managing Guardians in a threshold voting system.
+ *
+ * Enforces that:
+ * - Total registered Guardians equals n (totalShares)
+ * - Each Guardian has a unique ID and share index in [1, n]
+ * - Status changes emit events for monitoring
+ * - Backup Guardians can be designated for unavailable Guardians
+ *
+ * @example
+ * ```typescript
+ * const registry = new GuardianRegistry(5); // 5 total shares
+ * registry.register({
+ *   id: new Uint8Array([1]),
+ *   name: 'Guardian 1',
+ *   shareIndex: 1,
+ *   verificationKey: vk1,
+ *   status: GuardianStatus.Registered,
+ * });
+ * ```
+ */
+export declare class GuardianRegistry<TID extends PlatformID = Uint8Array> implements IGuardianRegistry<TID> {
+    private readonly _guardians;
+    private readonly _indexMap;
+    private readonly _statusListeners;
+    private readonly _totalShares;
+    /**
+     * Create a new GuardianRegistry.
+     * @param totalShares The total number of key shares (n). The registry
+     *   enforces that exactly n Guardians can be registered.
+     */
+    constructor(totalShares: number);
+    /** Total number of shares this registry manages */
+    get totalShares(): number;
+    /** Number of currently registered Guardians */
+    get count(): number;
+    /**
+     * Register a new Guardian.
+     *
+     * Validates:
+     * - Registry is not full (count < n)
+     * - Guardian ID is unique
+     * - Share index is in range [1, n] and not already taken
+     */
+    register(guardian: Guardian<TID>): void;
+    /**
+     * Get a Guardian by ID.
+     */
+    getGuardian(id: TID): Guardian<TID> | undefined;
+    /**
+     * Get a Guardian by share index.
+     */
+    getGuardianByIndex(index: number): Guardian<TID> | undefined;
+    /**
+     * Get all registered Guardians.
+     */
+    getAllGuardians(): readonly Guardian<TID>[];
+    /**
+     * Get all Guardians with Online status.
+     */
+    getOnlineGuardians(): readonly Guardian<TID>[];
+    /**
+     * Update a Guardian's status and emit a status change event.
+     *
+     * @throws GuardianNotFoundError if the Guardian is not registered
+     */
+    updateStatus(id: TID, status: GuardianStatus): void;
+    /**
+     * Designate a backup Guardian for a primary Guardian.
+     *
+     * The backup Guardian must already be registered. This creates a
+     * one-way link from the primary to the backup.
+     *
+     * @throws GuardianNotFoundError if either Guardian is not registered
+     */
+    designateBackup(guardianId: TID, backupId: TID): void;
+    /**
+     * Subscribe to Guardian status change events.
+     */
+    onStatusChange(callback: (event: GuardianStatusChangeEvent<TID>) => void): void;
+}
+//# sourceMappingURL=guardian-registry.d.ts.map

package/src/lib/voting/threshold/guardian-registry.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"guardian-registry.d.ts","sourceRoot":"","sources":["../../../../../../../packages/digitaldefiance-ecies-lib/src/lib/voting/threshold/guardian-registry.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAEH,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,iCAAiC,CAAC;AAClE,OAAO,EAAE,cAAc,EAAE,MAAM,gCAAgC,CAAC;AAChE,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,uBAAuB,CAAC;AACtD,OAAO,KAAK,EAAE,yBAAyB,EAAE,MAAM,2CAA2C,CAAC;AAC3F,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,gCAAgC,CAAC;AAExE;;GAEG;AACH,qBAAa,8BAA+B,SAAQ,KAAK;gBAC3C,OAAO,EAAE,MAAM;CAI5B;AAED;;GAEG;AACH,qBAAa,qBAAsB,SAAQ,KAAK;gBAClC,OAAO,EAAE,MAAM;CAI5B;AAED;;GAEG;AACH,qBAAa,sBAAuB,SAAQ,KAAK;gBACnC,OAAO,EAAE,MAAM;CAI5B;AAED;;GAEG;AACH,qBAAa,iBAAkB,SAAQ,KAAK;gBAC9B,OAAO,EAAE,MAAM;CAI5B;AAeD;;;;;;;;;;;;;;;;;;;;GAoBG;AACH,qBAAa,gBAAgB,CAAC,GAAG,SAAS,UAAU,GAAG,UAAU,CAC/D,YAAW,iBAAiB,CAAC,GAAG,CAAC;IAEjC,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAyC;IACpE,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAkC;IAC5D,OAAO,CAAC,QAAQ,CAAC,gBAAgB,CAE1B;IACP,OAAO,CAAC,QAAQ,CAAC,YAAY,CAAS;IAEtC;;;;OAIG;gBACS,WAAW,EAAE,MAAM;IAS/B,mDAAmD;IACnD,IAAI,WAAW,IAAI,MAAM,CAExB;IAED,+CAA+C;IAC/C,IAAI,KAAK,IAAI,MAAM,CAElB;IAED;;;;;;;OAOG;IACH,QAAQ,CAAC,QAAQ,EAAE,QAAQ,CAAC,GAAG,CAAC,GAAG,IAAI;IAqCvC;;OAEG;IACH,WAAW,CAAC,EAAE,EAAE,GAAG,GAAG,QAAQ,CAAC,GAAG,CAAC,GAAG,SAAS;IAI/C;;OAEG;IACH,kBAAkB,CAAC,KAAK,EAAE,MAAM,GAAG,QAAQ,CAAC,GAAG,CAAC,GAAG,SAAS;IAM5D;;OAEG;IACH,eAAe,IAAI,SAAS,QAAQ,CAAC,GAAG,CAAC,EAAE;IAI3C;;OAEG;IACH,kBAAkB,IAAI,SAAS,QAAQ,CAAC,GAAG,CAAC,EAAE;IAM9C;;;;OAIG;IACH,YAAY,CAAC,EAAE,EAAE,GAAG,EAAE,MAAM,EAAE,cAAc,GAAG,IAAI;IA0BnD;;;;;;;OAOG;IACH,eAAe,CAAC,UAAU,EAAE,GAAG,EAAE,QAAQ,EAAE,GAAG,GAAG,IAAI;IA2BrD;;OAEG;IACH,cAAc,CACZ,QAAQ,EAAE,CAAC,KAAK,EAAE,yBAAyB,CAAC,GAAG,CAAC,KAAK,IAAI,GACxD,IAAI;CAGR"}

package/src/lib/voting/threshold/guardian-registry.js

@@ -0,0 +1,227 @@
+"use strict";
+/**
+ * Guardian Registry
+ *
+ * Manages Guardian registration, status tracking, and backup designation
+ * for threshold voting. Guardians are trusted key holders who possess
+ * shares of the threshold decryption key.
+ *
+ * @module voting/threshold
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.GuardianRegistry = exports.RegistryFullError = exports.InvalidShareIndexError = exports.GuardianNotFoundError = exports.GuardianAlreadyRegisteredError = void 0;
+const guardian_status_1 = require("./enumerations/guardian-status");
+/**
+ * Error thrown when attempting to register a Guardian with a duplicate ID.
+ */
+class GuardianAlreadyRegisteredError extends Error {
+    constructor(message) {
+        super(message);
+        this.name = 'GuardianAlreadyRegisteredError';
+    }
+}
+exports.GuardianAlreadyRegisteredError = GuardianAlreadyRegisteredError;
+/**
+ * Error thrown when a Guardian is not found.
+ */
+class GuardianNotFoundError extends Error {
+    constructor(message) {
+        super(message);
+        this.name = 'GuardianNotFoundError';
+    }
+}
+exports.GuardianNotFoundError = GuardianNotFoundError;
+/**
+ * Error thrown when a share index is invalid or already taken.
+ */
+class InvalidShareIndexError extends Error {
+    constructor(message) {
+        super(message);
+        this.name = 'InvalidShareIndexError';
+    }
+}
+exports.InvalidShareIndexError = InvalidShareIndexError;
+/**
+ * Error thrown when the registry is full (n Guardians already registered).
+ */
+class RegistryFullError extends Error {
+    constructor(message) {
+        super(message);
+        this.name = 'RegistryFullError';
+    }
+}
+exports.RegistryFullError = RegistryFullError;
+/**
+ * Converts a PlatformID to a string key for Map lookups.
+ * Handles Uint8Array (hex encoding), string, and objects with toString().
+ */
+function toKey(id) {
+    if (id instanceof Uint8Array) {
+        return Array.from(id)
+            .map((b) => b.toString(16).padStart(2, '0'))
+            .join('');
+    }
+    return String(id);
+}
+/**
+ * Registry for managing Guardians in a threshold voting system.
+ *
+ * Enforces that:
+ * - Total registered Guardians equals n (totalShares)
+ * - Each Guardian has a unique ID and share index in [1, n]
+ * - Status changes emit events for monitoring
+ * - Backup Guardians can be designated for unavailable Guardians
+ *
+ * @example
+ * ```typescript
+ * const registry = new GuardianRegistry(5); // 5 total shares
+ * registry.register({
+ *   id: new Uint8Array([1]),
+ *   name: 'Guardian 1',
+ *   shareIndex: 1,
+ *   verificationKey: vk1,
+ *   status: GuardianStatus.Registered,
+ * });
+ * ```
+ */
+class GuardianRegistry {
+    _guardians = new Map();
+    _indexMap = new Map();
+    _statusListeners = [];
+    _totalShares;
+    /**
+     * Create a new GuardianRegistry.
+     * @param totalShares The total number of key shares (n). The registry
+     *   enforces that exactly n Guardians can be registered.
+     */
+    constructor(totalShares) {
+        if (totalShares < 2 || !Number.isInteger(totalShares)) {
+            throw new Error(`totalShares must be an integer >= 2, got ${totalShares}`);
+        }
+        this._totalShares = totalShares;
+    }
+    /** Total number of shares this registry manages */
+    get totalShares() {
+        return this._totalShares;
+    }
+    /** Number of currently registered Guardians */
+    get count() {
+        return this._guardians.size;
+    }
+    /**
+     * Register a new Guardian.
+     *
+     * Validates:
+     * - Registry is not full (count < n)
+     * - Guardian ID is unique
+     * - Share index is in range [1, n] and not already taken
+     */
+    register(guardian) {
+        const key = toKey(guardian.id);
+        if (this._guardians.size >= this._totalShares) {
+            throw new RegistryFullError(`Registry is full: ${this._guardians.size}/${this._totalShares} Guardians registered`);
+        }
+        if (this._guardians.has(key)) {
+            throw new GuardianAlreadyRegisteredError(`Guardian with ID '${key}' is already registered`);
+        }
+        if (guardian.shareIndex < 1 ||
+            guardian.shareIndex > this._totalShares ||
+            !Number.isInteger(guardian.shareIndex)) {
+            throw new InvalidShareIndexError(`Share index must be an integer in [1, ${this._totalShares}], got ${guardian.shareIndex}`);
+        }
+        if (this._indexMap.has(guardian.shareIndex)) {
+            throw new InvalidShareIndexError(`Share index ${guardian.shareIndex} is already assigned to another Guardian`);
+        }
+        // Store a shallow copy to avoid external mutation of internal state
+        const stored = { ...guardian };
+        this._guardians.set(key, stored);
+        this._indexMap.set(guardian.shareIndex, key);
+    }
+    /**
+     * Get a Guardian by ID.
+     */
+    getGuardian(id) {
+        return this._guardians.get(toKey(id));
+    }
+    /**
+     * Get a Guardian by share index.
+     */
+    getGuardianByIndex(index) {
+        const key = this._indexMap.get(index);
+        if (key === undefined)
+            return undefined;
+        return this._guardians.get(key);
+    }
+    /**
+     * Get all registered Guardians.
+     */
+    getAllGuardians() {
+        return Array.from(this._guardians.values());
+    }
+    /**
+     * Get all Guardians with Online status.
+     */
+    getOnlineGuardians() {
+        return Array.from(this._guardians.values()).filter((g) => g.status === guardian_status_1.GuardianStatus.Online);
+    }
+    /**
+     * Update a Guardian's status and emit a status change event.
+     *
+     * @throws GuardianNotFoundError if the Guardian is not registered
+     */
+    updateStatus(id, status) {
+        const key = toKey(id);
+        const guardian = this._guardians.get(key);
+        if (!guardian) {
+            throw new GuardianNotFoundError(`Guardian with ID '${key}' is not registered`);
+        }
+        const previousStatus = guardian.status;
+        if (previousStatus === status)
+            return;
+        guardian.status = status;
+        const event = {
+            guardianId: guardian.id,
+            previousStatus,
+            newStatus: status,
+            timestamp: Date.now(),
+        };
+        for (const listener of this._statusListeners) {
+            listener(event);
+        }
+    }
+    /**
+     * Designate a backup Guardian for a primary Guardian.
+     *
+     * The backup Guardian must already be registered. This creates a
+     * one-way link from the primary to the backup.
+     *
+     * @throws GuardianNotFoundError if either Guardian is not registered
+     */
+    designateBackup(guardianId, backupId) {
+        const primaryKey = toKey(guardianId);
+        const backupKey = toKey(backupId);
+        const primary = this._guardians.get(primaryKey);
+        if (!primary) {
+            throw new GuardianNotFoundError(`Primary Guardian with ID '${primaryKey}' is not registered`);
+        }
+        const backup = this._guardians.get(backupKey);
+        if (!backup) {
+            throw new GuardianNotFoundError(`Backup Guardian with ID '${backupKey}' is not registered`);
+        }
+        // Replace the guardian entry with updated backupGuardianId
+        // Using object spread to create a new object with the readonly property set
+        const updated = {
+            ...primary,
+            backupGuardianId: backupId,
+        };
+        this._guardians.set(primaryKey, updated);
+    }
+    /**
+     * Subscribe to Guardian status change events.
+     */
+    onStatusChange(callback) {
+        this._statusListeners.push(callback);
+    }
+}
+exports.GuardianRegistry = GuardianRegistry;
+//# sourceMappingURL=guardian-registry.js.map

package/src/lib/voting/threshold/guardian-registry.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"guardian-registry.js","sourceRoot":"","sources":["../../../../../../../packages/digitaldefiance-ecies-lib/src/lib/voting/threshold/guardian-registry.ts"],"names":[],"mappings":";AAAA;;;;;;;;GAQG;;;AAGH,oEAAgE;AAKhE;;GAEG;AACH,MAAa,8BAA+B,SAAQ,KAAK;IACvD,YAAY,OAAe;QACzB,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,IAAI,CAAC,IAAI,GAAG,gCAAgC,CAAC;IAC/C,CAAC;CACF;AALD,wEAKC;AAED;;GAEG;AACH,MAAa,qBAAsB,SAAQ,KAAK;IAC9C,YAAY,OAAe;QACzB,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,IAAI,CAAC,IAAI,GAAG,uBAAuB,CAAC;IACtC,CAAC;CACF;AALD,sDAKC;AAED;;GAEG;AACH,MAAa,sBAAuB,SAAQ,KAAK;IAC/C,YAAY,OAAe;QACzB,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,IAAI,CAAC,IAAI,GAAG,wBAAwB,CAAC;IACvC,CAAC;CACF;AALD,wDAKC;AAED;;GAEG;AACH,MAAa,iBAAkB,SAAQ,KAAK;IAC1C,YAAY,OAAe;QACzB,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,IAAI,CAAC,IAAI,GAAG,mBAAmB,CAAC;IAClC,CAAC;CACF;AALD,8CAKC;AAED;;;GAGG;AACH,SAAS,KAAK,CAAyB,EAAO;IAC5C,IAAI,EAAE,YAAY,UAAU,EAAE,CAAC;QAC7B,OAAO,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC;aAClB,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;aAC3C,IAAI,CAAC,EAAE,CAAC,CAAC;IACd,CAAC;IACD,OAAO,MAAM,CAAC,EAAE,CAAC,CAAC;AACpB,CAAC;AAED;;;;;;;;;;;;;;;;;;;;GAoBG;AACH,MAAa,gBAAgB;IAGV,UAAU,GAA+B,IAAI,GAAG,EAAE,CAAC;IACnD,SAAS,GAAwB,IAAI,GAAG,EAAE,CAAC;IAC3C,gBAAgB,GAE7B,EAAE,CAAC;IACU,YAAY,CAAS;IAEtC;;;;OAIG;IACH,YAAY,WAAmB;QAC7B,IAAI,WAAW,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,WAAW,CAAC,EAAE,CAAC;YACtD,MAAM,IAAI,KAAK,CACb,4CAA4C,WAAW,EAAE,CAC1D,CAAC;QACJ,CAAC;QACD,IAAI,CAAC,YAAY,GAAG,WAAW,CAAC;IAClC,CAAC;IAED,mDAAmD;IACnD,IAAI,WAAW;QACb,OAAO,IAAI,CAAC,YAAY,CAAC;IAC3B,CAAC;IAED,+CAA+C;IAC/C,IAAI,KAAK;QACP,OAAO,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC;IAC9B,CAAC;IAED;;;;;;;OAOG;IACH,QAAQ,CAAC,QAAuB;QAC9B,MAAM,GAAG,GAAG,KAAK,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC;QAE/B,IAAI,IAAI,CAAC,UAAU,CAAC,IAAI,IAAI,IAAI,CAAC,YAAY,EAAE,CAAC;YAC9C,MAAM,IAAI,iBAAiB,CACzB,qBAAqB,IAAI,CAAC,UAAU,CAAC,IAAI,IAAI,IAAI,CAAC,YAAY,uBAAuB,CACtF,CAAC;QACJ,CAAC;QAED,IAAI,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC;YAC7B,MAAM,IAAI,8BAA8B,CACtC,qBAAqB,GAAG,yBAAyB,CAClD,CAAC;QACJ,CAAC;QAED,IACE,QAAQ,CAAC,UAAU,GAAG,CAAC;YACvB,QAAQ,CAAC,UAAU,GAAG,IAAI,CAAC,YAAY;YACvC,CAAC,MAAM,CAAC,SAAS,CAAC,QAAQ,CAAC,UAAU,CAAC,EACtC,CAAC;YACD,MAAM,IAAI,sBAAsB,CAC9B,yCAAyC,IAAI,CAAC,YAAY,UAAU,QAAQ,CAAC,UAAU,EAAE,CAC1F,CAAC;QACJ,CAAC;QAED,IAAI,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,QAAQ,CAAC,UAAU,CAAC,EAAE,CAAC;YAC5C,MAAM,IAAI,sBAAsB,CAC9B,eAAe,QAAQ,CAAC,UAAU,0CAA0C,CAC7E,CAAC;QACJ,CAAC;QAED,oEAAoE;QACpE,MAAM,MAAM,GAAkB,EAAE,GAAG,QAAQ,EAAE,CAAC;QAC9C,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;QACjC,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,QAAQ,CAAC,UAAU,EAAE,GAAG,CAAC,CAAC;IAC/C,CAAC;IAED;;OAEG;IACH,WAAW,CAAC,EAAO;QACjB,OAAO,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,CAAC;IACxC,CAAC;IAED;;OAEG;IACH,kBAAkB,CAAC,KAAa;QAC9B,MAAM,GAAG,GAAG,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;QACtC,IAAI,GAAG,KAAK,SAAS;YAAE,OAAO,SAAS,CAAC;QACxC,OAAO,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;IAClC,CAAC;IAED;;OAEG;IACH,eAAe;QACb,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,MAAM,EAAE,CAAC,CAAC;IAC9C,CAAC;IAED;;OAEG;IACH,kBAAkB;QAChB,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,MAAM,EAAE,CAAC,CAAC,MAAM,CAChD,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,gCAAc,CAAC,MAAM,CAC1C,CAAC;IACJ,CAAC;IAED;;;;OAIG;IACH,YAAY,CAAC,EAAO,EAAE,MAAsB;QAC1C,MAAM,GAAG,GAAG,KAAK,CAAC,EAAE,CAAC,CAAC;QACtB,MAAM,QAAQ,GAAG,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QAC1C,IAAI,CAAC,QAAQ,EAAE,CAAC;YACd,MAAM,IAAI,qBAAqB,CAC7B,qBAAqB,GAAG,qBAAqB,CAC9C,CAAC;QACJ,CAAC;QAED,MAAM,cAAc,GAAG,QAAQ,CAAC,MAAM,CAAC;QACvC,IAAI,cAAc,KAAK,MAAM;YAAE,OAAO;QAEtC,QAAQ,CAAC,MAAM,GAAG,MAAM,CAAC;QAEzB,MAAM,KAAK,GAAmC;YAC5C,UAAU,EAAE,QAAQ,CAAC,EAAE;YACvB,cAAc;YACd,SAAS,EAAE,MAAM;YACjB,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE;SACtB,CAAC;QAEF,KAAK,MAAM,QAAQ,IAAI,IAAI,CAAC,gBAAgB,EAAE,CAAC;YAC7C,QAAQ,CAAC,KAAK,CAAC,CAAC;QAClB,CAAC;IACH,CAAC;IAED;;;;;;;OAOG;IACH,eAAe,CAAC,UAAe,EAAE,QAAa;QAC5C,MAAM,UAAU,GAAG,KAAK,CAAC,UAAU,CAAC,CAAC;QACrC,MAAM,SAAS,GAAG,KAAK,CAAC,QAAQ,CAAC,CAAC;QAElC,MAAM,OAAO,GAAG,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;QAChD,IAAI,CAAC,OAAO,EAAE,CAAC;YACb,MAAM,IAAI,qBAAqB,CAC7B,6BAA6B,UAAU,qBAAqB,CAC7D,CAAC;QACJ,CAAC;QAED,MAAM,MAAM,GAAG,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;QAC9C,IAAI,CAAC,MAAM,EAAE,CAAC;YACZ,MAAM,IAAI,qBAAqB,CAC7B,4BAA4B,SAAS,qBAAqB,CAC3D,CAAC;QACJ,CAAC;QAED,2DAA2D;QAC3D,4EAA4E;QAC5E,MAAM,OAAO,GAAkB;YAC7B,GAAG,OAAO;YACV,gBAAgB,EAAE,QAAQ;SAC3B,CAAC;QACF,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,UAAU,EAAE,OAAO,CAAC,CAAC;IAC3C,CAAC;IAED;;OAEG;IACH,cAAc,CACZ,QAAyD;QAEzD,IAAI,CAAC,gBAAgB,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;IACvC,CAAC;CACF;AAzLD,4CAyLC"}

package/src/lib/voting/threshold/index.d.ts

@@ -0,0 +1,49 @@
+/**
+ * Threshold Voting Module
+ *
+ * Implements Real-Time Threshold Voting for secure, distributed vote tallying.
+ * Based on Damgård et al.'s "Generalization of Paillier's Public-Key System
+ * with Applications to Electronic Voting."
+ *
+ * Key features:
+ * - Threshold Paillier cryptography (k-of-n Guardians required for decryption)
+ * - Real-time interval decryption during voting
+ * - Zero-knowledge proofs for all decryption operations
+ * - Integration with hierarchical aggregation (Precinct → County → State → National)
+ * - Backward compatible with single-authority polls
+ *
+ * @example
+ * ```typescript
+ * import {
+ *   ThresholdKeyGenerator,
+ *   GuardianRegistry,
+ *   CeremonyCoordinator,
+ *   GuardianStatus,
+ * } from './voting/threshold';
+ *
+ * // Generate threshold keys (5-of-9 configuration)
+ * const keyGen = new ThresholdKeyGenerator();
+ * const keyPair = await keyGen.generate({ totalShares: 9, threshold: 5 });
+ *
+ * // Register Guardians
+ * const registry = new GuardianRegistry();
+ * keyPair.keyShares.forEach((share, i) => {
+ *   registry.register({
+ *     id: guardianIds[i],
+ *     name: `Guardian ${i + 1}`,
+ *     shareIndex: share.index,
+ *     verificationKey: share.verificationKey,
+ *     status: GuardianStatus.Online,
+ *   });
+ * });
+ *
+ * // Create threshold poll and conduct voting...
+ * ```
+ */
+export * from './enumerations';
+export type * from './interfaces';
+export { ThresholdKeyGenerator, InvalidThresholdConfigError, KeyGenerationFailedError, } from './threshold-key-generator';
+export { PartialDecryptionService, InvalidPartialProofError, DeserializationError, } from './partial-decryption-service';
+export { DecryptionCombiner, InsufficientPartialsError, InvalidPartialInCombineError, CombineFailedError, } from './decryption-combiner';
+export { GuardianRegistry, GuardianAlreadyRegisteredError, GuardianNotFoundError, InvalidShareIndexError, RegistryFullError, } from './guardian-registry';
+//# sourceMappingURL=index.d.ts.map

package/src/lib/voting/threshold/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../../../../packages/digitaldefiance-ecies-lib/src/lib/voting/threshold/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAyCG;AAGH,cAAc,gBAAgB,CAAC;AAG/B,mBAAmB,cAAc,CAAC;AAGlC,OAAO,EACL,qBAAqB,EACrB,2BAA2B,EAC3B,wBAAwB,GACzB,MAAM,2BAA2B,CAAC;AAEnC,OAAO,EACL,wBAAwB,EACxB,wBAAwB,EACxB,oBAAoB,GACrB,MAAM,8BAA8B,CAAC;AAEtC,OAAO,EACL,kBAAkB,EAClB,yBAAyB,EACzB,4BAA4B,EAC5B,kBAAkB,GACnB,MAAM,uBAAuB,CAAC;AAE/B,OAAO,EACL,gBAAgB,EAChB,8BAA8B,EAC9B,qBAAqB,EACrB,sBAAsB,EACtB,iBAAiB,GAClB,MAAM,qBAAqB,CAAC"}

package/src/lib/voting/threshold/index.js

@@ -0,0 +1,69 @@
+"use strict";
+/**
+ * Threshold Voting Module
+ *
+ * Implements Real-Time Threshold Voting for secure, distributed vote tallying.
+ * Based on Damgård et al.'s "Generalization of Paillier's Public-Key System
+ * with Applications to Electronic Voting."
+ *
+ * Key features:
+ * - Threshold Paillier cryptography (k-of-n Guardians required for decryption)
+ * - Real-time interval decryption during voting
+ * - Zero-knowledge proofs for all decryption operations
+ * - Integration with hierarchical aggregation (Precinct → County → State → National)
+ * - Backward compatible with single-authority polls
+ *
+ * @example
+ * ```typescript
+ * import {
+ *   ThresholdKeyGenerator,
+ *   GuardianRegistry,
+ *   CeremonyCoordinator,
+ *   GuardianStatus,
+ * } from './voting/threshold';
+ *
+ * // Generate threshold keys (5-of-9 configuration)
+ * const keyGen = new ThresholdKeyGenerator();
+ * const keyPair = await keyGen.generate({ totalShares: 9, threshold: 5 });
+ *
+ * // Register Guardians
+ * const registry = new GuardianRegistry();
+ * keyPair.keyShares.forEach((share, i) => {
+ *   registry.register({
+ *     id: guardianIds[i],
+ *     name: `Guardian ${i + 1}`,
+ *     shareIndex: share.index,
+ *     verificationKey: share.verificationKey,
+ *     status: GuardianStatus.Online,
+ *   });
+ * });
+ *
+ * // Create threshold poll and conduct voting...
+ * ```
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.RegistryFullError = exports.InvalidShareIndexError = exports.GuardianNotFoundError = exports.GuardianAlreadyRegisteredError = exports.GuardianRegistry = exports.CombineFailedError = exports.InvalidPartialInCombineError = exports.InsufficientPartialsError = exports.DecryptionCombiner = exports.DeserializationError = exports.InvalidPartialProofError = exports.PartialDecryptionService = exports.KeyGenerationFailedError = exports.InvalidThresholdConfigError = exports.ThresholdKeyGenerator = void 0;
+const tslib_1 = require("tslib");
+// Re-export enumerations
+tslib_1.__exportStar(require("./enumerations"), exports);
+// Re-export classes
+var threshold_key_generator_1 = require("./threshold-key-generator");
+Object.defineProperty(exports, "ThresholdKeyGenerator", { enumerable: true, get: function () { return threshold_key_generator_1.ThresholdKeyGenerator; } });
+Object.defineProperty(exports, "InvalidThresholdConfigError", { enumerable: true, get: function () { return threshold_key_generator_1.InvalidThresholdConfigError; } });
+Object.defineProperty(exports, "KeyGenerationFailedError", { enumerable: true, get: function () { return threshold_key_generator_1.KeyGenerationFailedError; } });
+var partial_decryption_service_1 = require("./partial-decryption-service");
+Object.defineProperty(exports, "PartialDecryptionService", { enumerable: true, get: function () { return partial_decryption_service_1.PartialDecryptionService; } });
+Object.defineProperty(exports, "InvalidPartialProofError", { enumerable: true, get: function () { return partial_decryption_service_1.InvalidPartialProofError; } });
+Object.defineProperty(exports, "DeserializationError", { enumerable: true, get: function () { return partial_decryption_service_1.DeserializationError; } });
+var decryption_combiner_1 = require("./decryption-combiner");
+Object.defineProperty(exports, "DecryptionCombiner", { enumerable: true, get: function () { return decryption_combiner_1.DecryptionCombiner; } });
+Object.defineProperty(exports, "InsufficientPartialsError", { enumerable: true, get: function () { return decryption_combiner_1.InsufficientPartialsError; } });
+Object.defineProperty(exports, "InvalidPartialInCombineError", { enumerable: true, get: function () { return decryption_combiner_1.InvalidPartialInCombineError; } });
+Object.defineProperty(exports, "CombineFailedError", { enumerable: true, get: function () { return decryption_combiner_1.CombineFailedError; } });
+var guardian_registry_1 = require("./guardian-registry");
+Object.defineProperty(exports, "GuardianRegistry", { enumerable: true, get: function () { return guardian_registry_1.GuardianRegistry; } });
+Object.defineProperty(exports, "GuardianAlreadyRegisteredError", { enumerable: true, get: function () { return guardian_registry_1.GuardianAlreadyRegisteredError; } });
+Object.defineProperty(exports, "GuardianNotFoundError", { enumerable: true, get: function () { return guardian_registry_1.GuardianNotFoundError; } });
+Object.defineProperty(exports, "InvalidShareIndexError", { enumerable: true, get: function () { return guardian_registry_1.InvalidShareIndexError; } });
+Object.defineProperty(exports, "RegistryFullError", { enumerable: true, get: function () { return guardian_registry_1.RegistryFullError; } });
+//# sourceMappingURL=index.js.map

package/src/lib/voting/threshold/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../../../../../packages/digitaldefiance-ecies-lib/src/lib/voting/threshold/index.ts"],"names":[],"mappings":";AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAyCG;;;;AAEH,yBAAyB;AACzB,yDAA+B;AAK/B,oBAAoB;AACpB,qEAImC;AAHjC,gIAAA,qBAAqB,OAAA;AACrB,sIAAA,2BAA2B,OAAA;AAC3B,mIAAA,wBAAwB,OAAA;AAG1B,2EAIsC;AAHpC,sIAAA,wBAAwB,OAAA;AACxB,sIAAA,wBAAwB,OAAA;AACxB,kIAAA,oBAAoB,OAAA;AAGtB,6DAK+B;AAJ7B,yHAAA,kBAAkB,OAAA;AAClB,gIAAA,yBAAyB,OAAA;AACzB,mIAAA,4BAA4B,OAAA;AAC5B,yHAAA,kBAAkB,OAAA;AAGpB,yDAM6B;AAL3B,qHAAA,gBAAgB,OAAA;AAChB,mIAAA,8BAA8B,OAAA;AAC9B,0HAAA,qBAAqB,OAAA;AACrB,2HAAA,sBAAsB,OAAA;AACtB,sHAAA,iBAAiB,OAAA"}

package/src/lib/voting/threshold/interfaces/ceremony-coordinator.d.ts

@@ -0,0 +1,19 @@
+import type { PlatformID } from '../../../../interfaces/platform-id';
+import type { Ceremony } from './ceremony';
+import type { PartialDecryption } from './partial-decryption';
+/**
+ * Interface for coordinating decryption ceremonies.
+ */
+export interface ICeremonyCoordinator<TID extends PlatformID = Uint8Array> {
+    /** Start a new decryption ceremony */
+    startCeremony(pollId: TID, intervalNumber: number, encryptedTally: bigint[]): Ceremony<TID>;
+    /** Submit a partial decryption */
+    submitPartial(ceremonyId: string, partial: PartialDecryption): boolean;
+    /** Get ceremony by ID */
+    getCeremony(ceremonyId: string): Ceremony<TID> | undefined;
+    /** Get ceremonies for a poll */
+    getCeremoniesForPoll(pollId: TID): readonly Ceremony<TID>[];
+    /** Subscribe to ceremony completion events */
+    onCeremonyComplete(callback: (ceremony: Ceremony<TID>) => void): void;
+}
+//# sourceMappingURL=ceremony-coordinator.d.ts.map

package/src/lib/voting/threshold/interfaces/ceremony-coordinator.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"ceremony-coordinator.d.ts","sourceRoot":"","sources":["../../../../../../../../packages/digitaldefiance-ecies-lib/src/lib/voting/threshold/interfaces/ceremony-coordinator.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,oCAAoC,CAAC;AACrE,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,YAAY,CAAC;AAC3C,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,sBAAsB,CAAC;AAE9D;;GAEG;AACH,MAAM,WAAW,oBAAoB,CAAC,GAAG,SAAS,UAAU,GAAG,UAAU;IACvE,sCAAsC;IACtC,aAAa,CACX,MAAM,EAAE,GAAG,EACX,cAAc,EAAE,MAAM,EACtB,cAAc,EAAE,MAAM,EAAE,GACvB,QAAQ,CAAC,GAAG,CAAC,CAAC;IAEjB,kCAAkC;IAClC,aAAa,CAAC,UAAU,EAAE,MAAM,EAAE,OAAO,EAAE,iBAAiB,GAAG,OAAO,CAAC;IAEvE,yBAAyB;IACzB,WAAW,CAAC,UAAU,EAAE,MAAM,GAAG,QAAQ,CAAC,GAAG,CAAC,GAAG,SAAS,CAAC;IAE3D,gCAAgC;IAChC,oBAAoB,CAAC,MAAM,EAAE,GAAG,GAAG,SAAS,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;IAE5D,8CAA8C;IAC9C,kBAAkB,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE,QAAQ,CAAC,GAAG,CAAC,KAAK,IAAI,GAAG,IAAI,CAAC;CACvE"}

package/src/lib/voting/threshold/interfaces/ceremony-coordinator.js

@@ -0,0 +1,3 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+//# sourceMappingURL=ceremony-coordinator.js.map

package/src/lib/voting/threshold/interfaces/ceremony-coordinator.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"ceremony-coordinator.js","sourceRoot":"","sources":["../../../../../../../../packages/digitaldefiance-ecies-lib/src/lib/voting/threshold/interfaces/ceremony-coordinator.ts"],"names":[],"mappings":""}

package/src/lib/voting/threshold/interfaces/ceremony.d.ts

@@ -0,0 +1,33 @@
+import type { PlatformID } from '../../../../interfaces/platform-id';
+import type { CeremonyStatus } from '../enumerations/ceremony-status';
+import type { CombinedDecryption } from './combined-decryption';
+import type { PartialDecryption } from './partial-decryption';
+/**
+ * A threshold decryption ceremony.
+ *
+ * Coordinates the collection of partial decryptions from Guardians
+ * to reveal an aggregate tally.
+ */
+export interface Ceremony<TID extends PlatformID = Uint8Array> {
+    /** Unique ceremony identifier */
+    readonly id: string;
+    /** Associated poll ID */
+    readonly pollId: TID;
+    /** Interval number */
+    readonly intervalNumber: number;
+    /** Ceremony-specific nonce */
+    readonly nonce: Uint8Array;
+    /** Encrypted tally to decrypt */
+    readonly encryptedTally: bigint[];
+    /** Current status */
+    status: CeremonyStatus;
+    /** Collected partial decryptions (keyed by Guardian index) */
+    readonly partials: Map<number, PartialDecryption>;
+    /** Start timestamp */
+    readonly startedAt: number;
+    /** Completion timestamp */
+    completedAt?: number;
+    /** Result (if completed) */
+    result?: CombinedDecryption;
+}
+//# sourceMappingURL=ceremony.d.ts.map

package/src/lib/voting/threshold/interfaces/ceremony.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"ceremony.d.ts","sourceRoot":"","sources":["../../../../../../../../packages/digitaldefiance-ecies-lib/src/lib/voting/threshold/interfaces/ceremony.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,oCAAoC,CAAC;AACrE,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,iCAAiC,CAAC;AACtE,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,uBAAuB,CAAC;AAChE,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,sBAAsB,CAAC;AAE9D;;;;;GAKG;AACH,MAAM,WAAW,QAAQ,CAAC,GAAG,SAAS,UAAU,GAAG,UAAU;IAC3D,iCAAiC;IACjC,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IACpB,yBAAyB;IACzB,QAAQ,CAAC,MAAM,EAAE,GAAG,CAAC;IACrB,sBAAsB;IACtB,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAC;IAChC,8BAA8B;IAC9B,QAAQ,CAAC,KAAK,EAAE,UAAU,CAAC;IAC3B,iCAAiC;IACjC,QAAQ,CAAC,cAAc,EAAE,MAAM,EAAE,CAAC;IAClC,qBAAqB;IACrB,MAAM,EAAE,cAAc,CAAC;IACvB,8DAA8D;IAC9D,QAAQ,CAAC,QAAQ,EAAE,GAAG,CAAC,MAAM,EAAE,iBAAiB,CAAC,CAAC;IAClD,sBAAsB;IACtB,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,2BAA2B;IAC3B,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,4BAA4B;IAC5B,MAAM,CAAC,EAAE,kBAAkB,CAAC;CAC7B"}

package/src/lib/voting/threshold/interfaces/ceremony.js

@@ -0,0 +1,3 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+//# sourceMappingURL=ceremony.js.map

package/src/lib/voting/threshold/interfaces/ceremony.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"ceremony.js","sourceRoot":"","sources":["../../../../../../../../packages/digitaldefiance-ecies-lib/src/lib/voting/threshold/interfaces/ceremony.ts"],"names":[],"mappings":""}

package/src/lib/voting/threshold/interfaces/combined-decryption.d.ts

@@ -0,0 +1,20 @@
+import type { CombinedZKProof } from './combined-zk-proof';
+/**
+ * Result of combining k partial decryptions.
+ *
+ * Contains the decrypted plaintext tallies along with proof
+ * that the decryption was performed correctly.
+ */
+export interface CombinedDecryption {
+    /** The decrypted plaintext tallies */
+    readonly tallies: bigint[];
+    /** Combined proof of correct decryption */
+    readonly combinedProof: CombinedZKProof;
+    /** Indices of participating Guardians */
+    readonly participatingGuardians: readonly number[];
+    /** Ceremony identifier */
+    readonly ceremonyId: string;
+    /** Timestamp of combination */
+    readonly timestamp: number;
+}
+//# sourceMappingURL=combined-decryption.d.ts.map

package/src/lib/voting/threshold/interfaces/combined-decryption.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"combined-decryption.d.ts","sourceRoot":"","sources":["../../../../../../../../packages/digitaldefiance-ecies-lib/src/lib/voting/threshold/interfaces/combined-decryption.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,qBAAqB,CAAC;AAE3D;;;;;GAKG;AACH,MAAM,WAAW,kBAAkB;IACjC,sCAAsC;IACtC,QAAQ,CAAC,OAAO,EAAE,MAAM,EAAE,CAAC;IAC3B,2CAA2C;IAC3C,QAAQ,CAAC,aAAa,EAAE,eAAe,CAAC;IACxC,yCAAyC;IACzC,QAAQ,CAAC,sBAAsB,EAAE,SAAS,MAAM,EAAE,CAAC;IACnD,0BAA0B;IAC1B,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,+BAA+B;IAC/B,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;CAC5B"}

package/src/lib/voting/threshold/interfaces/combined-decryption.js

@@ -0,0 +1,3 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+//# sourceMappingURL=combined-decryption.js.map

package/src/lib/voting/threshold/interfaces/combined-decryption.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"combined-decryption.js","sourceRoot":"","sources":["../../../../../../../../packages/digitaldefiance-ecies-lib/src/lib/voting/threshold/interfaces/combined-decryption.ts"],"names":[],"mappings":""}

package/src/lib/voting/threshold/interfaces/combined-zk-proof.d.ts

@@ -0,0 +1,16 @@
+import type { ZKProof } from './zk-proof';
+/**
+ * Combined zero-knowledge proof from multiple Guardians.
+ *
+ * Aggregates individual proofs to demonstrate that the combined
+ * decryption was performed correctly by authorized Guardians.
+ */
+export interface CombinedZKProof {
+    /** Individual proofs from each Guardian */
+    readonly partialProofs: readonly ZKProof[];
+    /** Aggregated verification data */
+    readonly aggregatedCommitment: bigint;
+    /** Hash of all inputs */
+    readonly inputHash: Uint8Array;
+}
+//# sourceMappingURL=combined-zk-proof.d.ts.map

package/src/lib/voting/threshold/interfaces/combined-zk-proof.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"combined-zk-proof.d.ts","sourceRoot":"","sources":["../../../../../../../../packages/digitaldefiance-ecies-lib/src/lib/voting/threshold/interfaces/combined-zk-proof.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,YAAY,CAAC;AAE1C;;;;;GAKG;AACH,MAAM,WAAW,eAAe;IAC9B,2CAA2C;IAC3C,QAAQ,CAAC,aAAa,EAAE,SAAS,OAAO,EAAE,CAAC;IAC3C,mCAAmC;IACnC,QAAQ,CAAC,oBAAoB,EAAE,MAAM,CAAC;IACtC,yBAAyB;IACzB,QAAQ,CAAC,SAAS,EAAE,UAAU,CAAC;CAChC"}

package/src/lib/voting/threshold/interfaces/combined-zk-proof.js

@@ -0,0 +1,3 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+//# sourceMappingURL=combined-zk-proof.js.map

package/src/lib/voting/threshold/interfaces/combined-zk-proof.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"combined-zk-proof.js","sourceRoot":"","sources":["../../../../../../../../packages/digitaldefiance-ecies-lib/src/lib/voting/threshold/interfaces/combined-zk-proof.ts"],"names":[],"mappings":""}

package/src/lib/voting/threshold/interfaces/decryption-combiner.d.ts

@@ -0,0 +1,14 @@
+import type { PublicKey } from 'paillier-bigint';
+import type { CombinedDecryption } from './combined-decryption';
+import type { PartialDecryption } from './partial-decryption';
+import type { ThresholdKeyConfig } from './threshold-key-config';
+/**
+ * Interface for combining partial decryptions.
+ */
+export interface IDecryptionCombiner {
+    /** Combine k partial decryptions into final plaintext */
+    combine(partials: readonly PartialDecryption[], encryptedTally: bigint[], publicKey: PublicKey, config: ThresholdKeyConfig): CombinedDecryption;
+    /** Verify a combined decryption */
+    verifyCombined(combined: CombinedDecryption, encryptedTally: bigint[], verificationKeys: readonly Uint8Array[], publicKey: PublicKey): boolean;
+}
+//# sourceMappingURL=decryption-combiner.d.ts.map