@hsuite/smart-engines-cli 1.0.0

package/dist/packages/plugin-dkg/src/crypto/tiered-threshold.service.js

@@ -0,0 +1,273 @@
+"use strict";
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var __metadata = (this && this.__metadata) || function (k, v) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+};
+var TieredThresholdService_1;
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.TieredThresholdService = exports.OperationType = void 0;
+const common_1 = require("@nestjs/common");
+var OperationType;
+(function (OperationType) {
+    OperationType["TRANSACTION_SIGNING"] = "transaction_signing";
+    OperationType["KEY_ROTATION"] = "key_rotation";
+    OperationType["VALIDATOR_ADD"] = "validator_add";
+    OperationType["VALIDATOR_REMOVE"] = "validator_remove";
+    OperationType["EMERGENCY_RECOVERY"] = "emergency_recovery";
+    OperationType["CONFIG_CHANGE"] = "config_change";
+    OperationType["PROTOCOL_UPGRADE"] = "protocol_upgrade";
+})(OperationType || (exports.OperationType = OperationType = {}));
+let TieredThresholdService = TieredThresholdService_1 = class TieredThresholdService {
+    logger = new common_1.Logger(TieredThresholdService_1.name);
+    defaultConfig = {
+        thresholds: new Map([
+            [
+                OperationType.TRANSACTION_SIGNING,
+                {
+                    operationType: OperationType.TRANSACTION_SIGNING,
+                    thresholdPercentage: 0.67,
+                    minimumAbsolute: 2,
+                    description: 'Regular transaction signing',
+                },
+            ],
+            [
+                OperationType.KEY_ROTATION,
+                {
+                    operationType: OperationType.KEY_ROTATION,
+                    thresholdPercentage: 0.75,
+                    minimumAbsolute: 2,
+                    cooldownMs: 60000,
+                    description: 'Key rotation and resharing',
+                },
+            ],
+            [
+                OperationType.VALIDATOR_ADD,
+                {
+                    operationType: OperationType.VALIDATOR_ADD,
+                    thresholdPercentage: 0.75,
+                    minimumAbsolute: 2,
+                    cooldownMs: 300000,
+                    description: 'Adding new validators',
+                },
+            ],
+            [
+                OperationType.VALIDATOR_REMOVE,
+                {
+                    operationType: OperationType.VALIDATOR_REMOVE,
+                    thresholdPercentage: 0.8,
+                    minimumAbsolute: 3,
+                    cooldownMs: 600000,
+                    description: 'Removing validators',
+                },
+            ],
+            [
+                OperationType.EMERGENCY_RECOVERY,
+                {
+                    operationType: OperationType.EMERGENCY_RECOVERY,
+                    thresholdPercentage: 1.0,
+                    minimumAbsolute: 3,
+                    requiresUnanimous: true,
+                    description: 'Emergency key recovery',
+                },
+            ],
+            [
+                OperationType.CONFIG_CHANGE,
+                {
+                    operationType: OperationType.CONFIG_CHANGE,
+                    thresholdPercentage: 0.8,
+                    minimumAbsolute: 3,
+                    cooldownMs: 300000,
+                    description: 'Configuration changes',
+                },
+            ],
+            [
+                OperationType.PROTOCOL_UPGRADE,
+                {
+                    operationType: OperationType.PROTOCOL_UPGRADE,
+                    thresholdPercentage: 0.9,
+                    minimumAbsolute: 3,
+                    cooldownMs: 3600000,
+                    description: 'Protocol upgrades',
+                },
+            ],
+        ]),
+        defaultThresholdPercentage: 0.67,
+        defaultMinimumAbsolute: 2,
+    };
+    config;
+    lastOperations = new Map();
+    constructor() {
+        this.config = this.deepCloneConfig(this.defaultConfig);
+        this.logger.log('Tiered Threshold Service initialized');
+        this.logger.log('  🔒 Operation-specific thresholds enabled');
+        this.logger.log('  🔒 Cooldown enforcement active');
+    }
+    deepCloneConfig(config) {
+        const clonedThresholds = new Map();
+        for (const [key, value] of config.thresholds.entries()) {
+            clonedThresholds.set(key, { ...value });
+        }
+        return {
+            thresholds: clonedThresholds,
+            defaultThresholdPercentage: config.defaultThresholdPercentage,
+            defaultMinimumAbsolute: config.defaultMinimumAbsolute,
+        };
+    }
+    calculateThreshold(operationType, totalValidators) {
+        if (totalValidators < 2) {
+            throw new Error('Must have at least 2 validators');
+        }
+        const thresholdConfig = this.config.thresholds.get(operationType);
+        if (!thresholdConfig) {
+            return this.calculateWithConfig({
+                operationType,
+                thresholdPercentage: this.config.defaultThresholdPercentage,
+                minimumAbsolute: this.config.defaultMinimumAbsolute,
+                description: 'Default threshold',
+            }, totalValidators);
+        }
+        return this.calculateWithConfig(thresholdConfig, totalValidators);
+    }
+    calculateWithConfig(config, totalValidators) {
+        let cappedByMinimum = false;
+        let cappedByMaximum = false;
+        let isUnanimous = false;
+        if (config.requiresUnanimous) {
+            isUnanimous = true;
+            return {
+                operationType: config.operationType,
+                threshold: totalValidators,
+                totalValidators,
+                percentage: 1.0,
+                cappedByMinimum: false,
+                cappedByMaximum: false,
+                isUnanimous: true,
+            };
+        }
+        let threshold = Math.round(totalValidators * config.thresholdPercentage);
+        if (threshold < config.minimumAbsolute) {
+            threshold = config.minimumAbsolute;
+            cappedByMinimum = true;
+        }
+        if (config.maximumAbsolute && threshold > config.maximumAbsolute) {
+            threshold = config.maximumAbsolute;
+            cappedByMaximum = true;
+        }
+        if (threshold > totalValidators) {
+            threshold = totalValidators;
+            cappedByMaximum = true;
+        }
+        return {
+            operationType: config.operationType,
+            threshold,
+            totalValidators,
+            percentage: config.thresholdPercentage,
+            cappedByMinimum,
+            cappedByMaximum,
+            isUnanimous,
+        };
+    }
+    canProceed(operationType) {
+        const thresholdConfig = this.config.thresholds.get(operationType);
+        if (!thresholdConfig || !thresholdConfig.cooldownMs) {
+            return { allowed: true };
+        }
+        const lastOperation = this.lastOperations.get(operationType);
+        if (!lastOperation) {
+            return { allowed: true };
+        }
+        const elapsed = Date.now() - lastOperation;
+        const remaining = thresholdConfig.cooldownMs - elapsed;
+        if (remaining > 0) {
+            return {
+                allowed: false,
+                reason: `Cooldown period active for ${operationType}`,
+                remainingMs: remaining,
+            };
+        }
+        return { allowed: true };
+    }
+    recordOperation(operationType) {
+        this.lastOperations.set(operationType, Date.now());
+        this.logger.debug(`Recorded operation: ${operationType}`);
+    }
+    validateSignatures(operationType, totalValidators, signatures) {
+        const result = this.calculateThreshold(operationType, totalValidators);
+        return {
+            valid: signatures >= result.threshold,
+            required: result.threshold,
+            provided: signatures,
+            deficit: Math.max(0, result.threshold - signatures),
+        };
+    }
+    getAllThresholds(totalValidators) {
+        const results = [];
+        for (const operationType of Object.values(OperationType)) {
+            results.push(this.calculateThreshold(operationType, totalValidators));
+        }
+        return results;
+    }
+    setThresholdConfig(operationType, config) {
+        const existing = this.config.thresholds.get(operationType) || {
+            operationType,
+            thresholdPercentage: this.config.defaultThresholdPercentage,
+            minimumAbsolute: this.config.defaultMinimumAbsolute,
+            description: `Custom config for ${operationType}`,
+        };
+        this.config.thresholds.set(operationType, {
+            ...existing,
+            ...config,
+            operationType,
+        });
+        this.logger.log(`Updated threshold config for ${operationType}`);
+    }
+    getThresholdConfig(operationType) {
+        return this.config.thresholds.get(operationType);
+    }
+    resetToDefaults() {
+        this.config = this.deepCloneConfig(this.defaultConfig);
+        this.lastOperations.clear();
+        this.logger.log('Reset to default threshold configuration');
+    }
+    getStats() {
+        const now = Date.now();
+        let activeCooldowns = 0;
+        for (const [opType, lastTime] of this.lastOperations.entries()) {
+            const config = this.config.thresholds.get(opType);
+            if (config?.cooldownMs && now - lastTime < config.cooldownMs) {
+                activeCooldowns++;
+            }
+        }
+        return {
+            configuredOperations: this.config.thresholds.size,
+            activeCooldowns,
+        };
+    }
+    getThresholdSummary(totalValidators) {
+        const lines = [`Tiered Thresholds for ${totalValidators} validators:`, ''];
+        for (const operationType of Object.values(OperationType)) {
+            const result = this.calculateThreshold(operationType, totalValidators);
+            const config = this.config.thresholds.get(operationType);
+            let line = `  ${operationType}: ${result.threshold}/${totalValidators}`;
+            if (result.isUnanimous) {
+                line += ' (UNANIMOUS)';
+            }
+            if (config?.cooldownMs) {
+                line += ` [${config.cooldownMs / 1000}s cooldown]`;
+            }
+            lines.push(line);
+        }
+        return lines.join('\n');
+    }
+};
+exports.TieredThresholdService = TieredThresholdService;
+exports.TieredThresholdService = TieredThresholdService = TieredThresholdService_1 = __decorate([
+    (0, common_1.Injectable)(),
+    __metadata("design:paramtypes", [])
+], TieredThresholdService);
+//# sourceMappingURL=tiered-threshold.service.js.map

package/dist/packages/plugin-dkg/src/crypto/tiered-threshold.service.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"tiered-threshold.service.js","sourceRoot":"","sources":["../../../../../../plugin-dkg/src/crypto/tiered-threshold.service.ts"],"names":[],"mappings":";;;;;;;;;;;;;AAAA,2CAAoD;AAOpD,IAAY,aAeX;AAfD,WAAY,aAAa;IAEvB,4DAA2C,CAAA;IAE3C,8CAA6B,CAAA;IAE7B,gDAA+B,CAAA;IAE/B,sDAAqC,CAAA;IAErC,0DAAyC,CAAA;IAEzC,gDAA+B,CAAA;IAE/B,sDAAqC,CAAA;AACvC,CAAC,EAfW,aAAa,6BAAb,aAAa,QAexB;AAsEM,IAAM,sBAAsB,8BAA5B,MAAM,sBAAsB;IAChB,MAAM,GAAG,IAAI,eAAM,CAAC,wBAAsB,CAAC,IAAI,CAAC,CAAC;IAGjD,aAAa,GAA2B;QACvD,UAAU,EAAE,IAAI,GAAG,CAAC;YAClB;gBACE,aAAa,CAAC,mBAAmB;gBACjC;oBACE,aAAa,EAAE,aAAa,CAAC,mBAAmB;oBAChD,mBAAmB,EAAE,IAAI;oBACzB,eAAe,EAAE,CAAC;oBAClB,WAAW,EAAE,6BAA6B;iBAC3C;aACF;YACD;gBACE,aAAa,CAAC,YAAY;gBAC1B;oBACE,aAAa,EAAE,aAAa,CAAC,YAAY;oBACzC,mBAAmB,EAAE,IAAI;oBACzB,eAAe,EAAE,CAAC;oBAClB,UAAU,EAAE,KAAK;oBACjB,WAAW,EAAE,4BAA4B;iBAC1C;aACF;YACD;gBACE,aAAa,CAAC,aAAa;gBAC3B;oBACE,aAAa,EAAE,aAAa,CAAC,aAAa;oBAC1C,mBAAmB,EAAE,IAAI;oBACzB,eAAe,EAAE,CAAC;oBAClB,UAAU,EAAE,MAAM;oBAClB,WAAW,EAAE,uBAAuB;iBACrC;aACF;YACD;gBACE,aAAa,CAAC,gBAAgB;gBAC9B;oBACE,aAAa,EAAE,aAAa,CAAC,gBAAgB;oBAC7C,mBAAmB,EAAE,GAAG;oBACxB,eAAe,EAAE,CAAC;oBAClB,UAAU,EAAE,MAAM;oBAClB,WAAW,EAAE,qBAAqB;iBACnC;aACF;YACD;gBACE,aAAa,CAAC,kBAAkB;gBAChC;oBACE,aAAa,EAAE,aAAa,CAAC,kBAAkB;oBAC/C,mBAAmB,EAAE,GAAG;oBACxB,eAAe,EAAE,CAAC;oBAClB,iBAAiB,EAAE,IAAI;oBACvB,WAAW,EAAE,wBAAwB;iBACtC;aACF;YACD;gBACE,aAAa,CAAC,aAAa;gBAC3B;oBACE,aAAa,EAAE,aAAa,CAAC,aAAa;oBAC1C,mBAAmB,EAAE,GAAG;oBACxB,eAAe,EAAE,CAAC;oBAClB,UAAU,EAAE,MAAM;oBAClB,WAAW,EAAE,uBAAuB;iBACrC;aACF;YACD;gBACE,aAAa,CAAC,gBAAgB;gBAC9B;oBACE,aAAa,EAAE,aAAa,CAAC,gBAAgB;oBAC7C,mBAAmB,EAAE,GAAG;oBACxB,eAAe,EAAE,CAAC;oBAClB,UAAU,EAAE,OAAO;oBACnB,WAAW,EAAE,mBAAmB;iBACjC;aACF;SACF,CAAC;QACF,0BAA0B,EAAE,IAAI;QAChC,sBAAsB,EAAE,CAAC;KAC1B,CAAC;IAGM,MAAM,CAAyB;IAG/B,cAAc,GAA+B,IAAI,GAAG,EAAE,CAAC;IAE/D;QAEE,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC,eAAe,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC;QACvD,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,sCAAsC,CAAC,CAAC;QACxD,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,4CAA4C,CAAC,CAAC;QAC9D,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,kCAAkC,CAAC,CAAC;IACtD,CAAC;IAKO,eAAe,CAAC,MAA8B;QACpD,MAAM,gBAAgB,GAAG,IAAI,GAAG,EAAkC,CAAC;QAEnE,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,UAAU,CAAC,OAAO,EAAE,EAAE,CAAC;YACvD,gBAAgB,CAAC,GAAG,CAAC,GAAG,EAAE,EAAE,GAAG,KAAK,EAAE,CAAC,CAAC;QAC1C,CAAC;QAED,OAAO;YACL,UAAU,EAAE,gBAAgB;YAC5B,0BAA0B,EAAE,MAAM,CAAC,0BAA0B;YAC7D,sBAAsB,EAAE,MAAM,CAAC,sBAAsB;SACtD,CAAC;IACJ,CAAC;IASD,kBAAkB,CAAC,aAA4B,EAAE,eAAuB;QACtE,IAAI,eAAe,GAAG,CAAC,EAAE,CAAC;YACxB,MAAM,IAAI,KAAK,CAAC,iCAAiC,CAAC,CAAC;QACrD,CAAC;QAED,MAAM,eAAe,GAAG,IAAI,CAAC,MAAM,CAAC,UAAU,CAAC,GAAG,CAAC,aAAa,CAAC,CAAC;QAElE,IAAI,CAAC,eAAe,EAAE,CAAC;YAErB,OAAO,IAAI,CAAC,mBAAmB,CAC7B;gBACE,aAAa;gBACb,mBAAmB,EAAE,IAAI,CAAC,MAAM,CAAC,0BAA0B;gBAC3D,eAAe,EAAE,IAAI,CAAC,MAAM,CAAC,sBAAsB;gBACnD,WAAW,EAAE,mBAAmB;aACjC,EACD,eAAe,CAChB,CAAC;QACJ,CAAC;QAED,OAAO,IAAI,CAAC,mBAAmB,CAAC,eAAe,EAAE,eAAe,CAAC,CAAC;IACpE,CAAC;IAKO,mBAAmB,CAAC,MAAuB,EAAE,eAAuB;QAC1E,IAAI,eAAe,GAAG,KAAK,CAAC;QAC5B,IAAI,eAAe,GAAG,KAAK,CAAC;QAC5B,IAAI,WAAW,GAAG,KAAK,CAAC;QAGxB,IAAI,MAAM,CAAC,iBAAiB,EAAE,CAAC;YAC7B,WAAW,GAAG,IAAI,CAAC;YACnB,OAAO;gBACL,aAAa,EAAE,MAAM,CAAC,aAAa;gBACnC,SAAS,EAAE,eAAe;gBAC1B,eAAe;gBACf,UAAU,EAAE,GAAG;gBACf,eAAe,EAAE,KAAK;gBACtB,eAAe,EAAE,KAAK;gBACtB,WAAW,EAAE,IAAI;aAClB,CAAC;QACJ,CAAC;QAKD,IAAI,SAAS,GAAG,IAAI,CAAC,KAAK,CAAC,eAAe,GAAG,MAAM,CAAC,mBAAmB,CAAC,CAAC;QAGzE,IAAI,SAAS,GAAG,MAAM,CAAC,eAAe,EAAE,CAAC;YACvC,SAAS,GAAG,MAAM,CAAC,eAAe,CAAC;YACnC,eAAe,GAAG,IAAI,CAAC;QACzB,CAAC;QAGD,IAAI,MAAM,CAAC,eAAe,IAAI,SAAS,GAAG,MAAM,CAAC,eAAe,EAAE,CAAC;YACjE,SAAS,GAAG,MAAM,CAAC,eAAe,CAAC;YACnC,eAAe,GAAG,IAAI,CAAC;QACzB,CAAC;QAGD,IAAI,SAAS,GAAG,eAAe,EAAE,CAAC;YAChC,SAAS,GAAG,eAAe,CAAC;YAC5B,eAAe,GAAG,IAAI,CAAC;QACzB,CAAC;QAED,OAAO;YACL,aAAa,EAAE,MAAM,CAAC,aAAa;YACnC,SAAS;YACT,eAAe;YACf,UAAU,EAAE,MAAM,CAAC,mBAAmB;YACtC,eAAe;YACf,eAAe;YACf,WAAW;SACZ,CAAC;IACJ,CAAC;IAQD,UAAU,CAAC,aAA4B;QAKrC,MAAM,eAAe,GAAG,IAAI,CAAC,MAAM,CAAC,UAAU,CAAC,GAAG,CAAC,aAAa,CAAC,CAAC;QAElE,IAAI,CAAC,eAAe,IAAI,CAAC,eAAe,CAAC,UAAU,EAAE,CAAC;YACpD,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;QAC3B,CAAC;QAED,MAAM,aAAa,GAAG,IAAI,CAAC,cAAc,CAAC,GAAG,CAAC,aAAa,CAAC,CAAC;QAE7D,IAAI,CAAC,aAAa,EAAE,CAAC;YACnB,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;QAC3B,CAAC;QAED,MAAM,OAAO,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,aAAa,CAAC;QAC3C,MAAM,SAAS,GAAG,eAAe,CAAC,UAAU,GAAG,OAAO,CAAC;QAEvD,IAAI,SAAS,GAAG,CAAC,EAAE,CAAC;YAClB,OAAO;gBACL,OAAO,EAAE,KAAK;gBACd,MAAM,EAAE,8BAA8B,aAAa,EAAE;gBACrD,WAAW,EAAE,SAAS;aACvB,CAAC;QACJ,CAAC;QAED,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;IAC3B,CAAC;IAOD,eAAe,CAAC,aAA4B;QAC1C,IAAI,CAAC,cAAc,CAAC,GAAG,CAAC,aAAa,EAAE,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC;QACnD,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,uBAAuB,aAAa,EAAE,CAAC,CAAC;IAC5D,CAAC;IAUD,kBAAkB,CAChB,aAA4B,EAC5B,eAAuB,EACvB,UAAkB;QAElB,MAAM,MAAM,GAAG,IAAI,CAAC,kBAAkB,CAAC,aAAa,EAAE,eAAe,CAAC,CAAC;QAEvE,OAAO;YACL,KAAK,EAAE,UAAU,IAAI,MAAM,CAAC,SAAS;YACrC,QAAQ,EAAE,MAAM,CAAC,SAAS;YAC1B,QAAQ,EAAE,UAAU;YACpB,OAAO,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,MAAM,CAAC,SAAS,GAAG,UAAU,CAAC;SACpD,CAAC;IACJ,CAAC;IAKD,gBAAgB,CAAC,eAAuB;QACtC,MAAM,OAAO,GAAsB,EAAE,CAAC;QAEtC,KAAK,MAAM,aAAa,IAAI,MAAM,CAAC,MAAM,CAAC,aAAa,CAAC,EAAE,CAAC;YACzD,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,kBAAkB,CAAC,aAAa,EAAE,eAAe,CAAC,CAAC,CAAC;QACxE,CAAC;QAED,OAAO,OAAO,CAAC;IACjB,CAAC;IAQD,kBAAkB,CAAC,aAA4B,EAAE,MAAgC;QAC/E,MAAM,QAAQ,GAAG,IAAI,CAAC,MAAM,CAAC,UAAU,CAAC,GAAG,CAAC,aAAa,CAAC,IAAI;YAC5D,aAAa;YACb,mBAAmB,EAAE,IAAI,CAAC,MAAM,CAAC,0BAA0B;YAC3D,eAAe,EAAE,IAAI,CAAC,MAAM,CAAC,sBAAsB;YACnD,WAAW,EAAE,qBAAqB,aAAa,EAAE;SAClD,CAAC;QAEF,IAAI,CAAC,MAAM,CAAC,UAAU,CAAC,GAAG,CAAC,aAAa,EAAE;YACxC,GAAG,QAAQ;YACX,GAAG,MAAM;YACT,aAAa;SACd,CAAC,CAAC;QAEH,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,gCAAgC,aAAa,EAAE,CAAC,CAAC;IACnE,CAAC;IAKD,kBAAkB,CAAC,aAA4B;QAC7C,OAAO,IAAI,CAAC,MAAM,CAAC,UAAU,CAAC,GAAG,CAAC,aAAa,CAAC,CAAC;IACnD,CAAC;IAOD,eAAe;QACb,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC,eAAe,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC;QACvD,IAAI,CAAC,cAAc,CAAC,KAAK,EAAE,CAAC;QAC5B,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,0CAA0C,CAAC,CAAC;IAC9D,CAAC;IAKD,QAAQ;QAIN,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QACvB,IAAI,eAAe,GAAG,CAAC,CAAC;QAExB,KAAK,MAAM,CAAC,MAAM,EAAE,QAAQ,CAAC,IAAI,IAAI,CAAC,cAAc,CAAC,OAAO,EAAE,EAAE,CAAC;YAC/D,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC,UAAU,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;YAClD,IAAI,MAAM,EAAE,UAAU,IAAI,GAAG,GAAG,QAAQ,GAAG,MAAM,CAAC,UAAU,EAAE,CAAC;gBAC7D,eAAe,EAAE,CAAC;YACpB,CAAC;QACH,CAAC;QAED,OAAO;YACL,oBAAoB,EAAE,IAAI,CAAC,MAAM,CAAC,UAAU,CAAC,IAAI;YACjD,eAAe;SAChB,CAAC;IACJ,CAAC;IAKD,mBAAmB,CAAC,eAAuB;QACzC,MAAM,KAAK,GAAa,CAAC,yBAAyB,eAAe,cAAc,EAAE,EAAE,CAAC,CAAC;QAErF,KAAK,MAAM,aAAa,IAAI,MAAM,CAAC,MAAM,CAAC,aAAa,CAAC,EAAE,CAAC;YACzD,MAAM,MAAM,GAAG,IAAI,CAAC,kBAAkB,CAAC,aAAa,EAAE,eAAe,CAAC,CAAC;YACvE,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC,UAAU,CAAC,GAAG,CAAC,aAAa,CAAC,CAAC;YAEzD,IAAI,IAAI,GAAG,KAAK,aAAa,KAAK,MAAM,CAAC,SAAS,IAAI,eAAe,EAAE,CAAC;YAExE,IAAI,MAAM,CAAC,WAAW,EAAE,CAAC;gBACvB,IAAI,IAAI,cAAc,CAAC;YACzB,CAAC;YAED,IAAI,MAAM,EAAE,UAAU,EAAE,CAAC;gBACvB,IAAI,IAAI,KAAK,MAAM,CAAC,UAAU,GAAG,IAAI,aAAa,CAAC;YACrD,CAAC;YAED,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACnB,CAAC;QAED,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAC1B,CAAC;CACF,CAAA;AAjXY,wDAAsB;iCAAtB,sBAAsB;IADlC,IAAA,mBAAU,GAAE;;GACA,sBAAsB,CAiXlC"}

package/dist/packages/plugin-dkg/src/dkg-plugin.module.d.ts

@@ -0,0 +1,12 @@
+import { OnModuleInit } from '@nestjs/common';
+import { DKGService } from './dkg.service';
+import { BLSDKGService } from './crypto/bls-dkg.service';
+export declare class DKGPluginModule implements OnModuleInit {
+    private readonly multiChain?;
+    private readonly dkg?;
+    private readonly blsDkg?;
+    private readonly logger;
+    constructor(multiChain?: any | undefined, dkg?: DKGService | undefined, blsDkg?: BLSDKGService | undefined);
+    onModuleInit(): Promise<void>;
+}
+//# sourceMappingURL=dkg-plugin.module.d.ts.map

package/dist/packages/plugin-dkg/src/dkg-plugin.module.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"dkg-plugin.module.d.ts","sourceRoot":"","sources":["../../../../../plugin-dkg/src/dkg-plugin.module.ts"],"names":[],"mappings":"AAAA,OAAO,EAAU,YAAY,EAA4B,MAAM,gBAAgB,CAAC;AAEhF,OAAO,EAAE,UAAU,EAAE,MAAM,eAAe,CAAC;AAC3C,OAAO,EAAE,aAAa,EAAE,MAAM,0BAA0B,CAAC;AAmBzD,qBA2Ba,eAAgB,YAAW,YAAY;IAIP,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAC;IACrE,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAC;IACrB,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAC;IAL1B,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAoC;gBAGC,UAAU,CAAC,EAAE,GAAG,YAAA,EACzD,GAAG,CAAC,EAAE,UAAU,YAAA,EAChB,MAAM,CAAC,EAAE,aAAa,YAAA;IAGnC,YAAY;CAwBnB"}

package/dist/packages/plugin-dkg/src/dkg-plugin.module.js

@@ -0,0 +1,95 @@
+"use strict";
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var __metadata = (this && this.__metadata) || function (k, v) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+};
+var __param = (this && this.__param) || function (paramIndex, decorator) {
+    return function (target, key) { decorator(target, key, paramIndex); }
+};
+var DKGPluginModule_1;
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.DKGPluginModule = void 0;
+const common_1 = require("@nestjs/common");
+const smart_engines_infrastructure_1 = require("@hsuite/smart-engines-infrastructure");
+const dkg_service_1 = require("./dkg.service");
+const bls_dkg_service_1 = require("./crypto/bls-dkg.service");
+const shamir_secret_sharing_service_1 = require("./crypto/shamir-secret-sharing.service");
+const feldman_vss_service_1 = require("./crypto/feldman-vss.service");
+const frost_threshold_signing_service_1 = require("./crypto/frost-threshold-signing.service");
+const distributed_entropy_service_1 = require("./crypto/distributed-entropy.service");
+const tiered_threshold_service_1 = require("./crypto/tiered-threshold.service");
+const post_quantum_service_1 = require("./crypto/post-quantum.service");
+const share_encryption_service_1 = require("./crypto/share-encryption.service");
+const node_identity_service_1 = require("./crypto/node-identity.service");
+let DKGPluginModule = DKGPluginModule_1 = class DKGPluginModule {
+    multiChain;
+    dkg;
+    blsDkg;
+    logger = new common_1.Logger(DKGPluginModule_1.name);
+    constructor(multiChain, dkg, blsDkg) {
+        this.multiChain = multiChain;
+        this.dkg = dkg;
+        this.blsDkg = blsDkg;
+    }
+    async onModuleInit() {
+        this.logger.log('🔒 DKG Plugin initialized with HARDENED security');
+        this.logger.log('  ✅ BLS12-381 threshold signatures');
+        this.logger.log('  ✅ Shamir Secret Sharing');
+        this.logger.log('  ✅ Feldman Verifiable Secret Sharing (VSS)');
+        this.logger.log('  ✅ FROST Threshold Signing (no key reconstruction)');
+        this.logger.log('  ✅ Distributed Entropy Generation (commit-reveal)');
+        this.logger.log('  ✅ Tiered Thresholds (operation-specific security)');
+        this.logger.log('  ✅ CRYSTALS-Dilithium post-quantum crypto');
+        this.logger.log('  ✅ ECIES share encryption (AES-256-GCM + ECDH)');
+        this.logger.log('  ✅ Cryptographically secure node IDs (no prediction)');
+        this.logger.log('  🔒 All shares encrypted before transmission');
+        this.logger.log('  🔒 Share verification via Feldman commitments');
+        this.logger.log('  🔒 Node identity verification enabled');
+        if (this.multiChain && this.dkg) {
+            this.multiChain.registerPlugin('dkg', this.dkg);
+        }
+        if (this.multiChain && this.blsDkg) {
+            this.multiChain.registerPlugin('bls-dkg', this.blsDkg);
+        }
+    }
+};
+exports.DKGPluginModule = DKGPluginModule;
+exports.DKGPluginModule = DKGPluginModule = DKGPluginModule_1 = __decorate([
+    (0, common_1.Module)({
+        imports: [smart_engines_infrastructure_1.InfrastructureModule],
+        providers: [
+            dkg_service_1.DKGService,
+            bls_dkg_service_1.BLSDKGService,
+            shamir_secret_sharing_service_1.ShamirSecretSharingService,
+            feldman_vss_service_1.FeldmanVSSService,
+            frost_threshold_signing_service_1.FROSTThresholdSigningService,
+            distributed_entropy_service_1.DistributedEntropyService,
+            tiered_threshold_service_1.TieredThresholdService,
+            post_quantum_service_1.PostQuantumCryptoService,
+            share_encryption_service_1.ShareEncryptionService,
+            node_identity_service_1.NodeIdentityService,
+        ],
+        exports: [
+            dkg_service_1.DKGService,
+            bls_dkg_service_1.BLSDKGService,
+            shamir_secret_sharing_service_1.ShamirSecretSharingService,
+            feldman_vss_service_1.FeldmanVSSService,
+            frost_threshold_signing_service_1.FROSTThresholdSigningService,
+            distributed_entropy_service_1.DistributedEntropyService,
+            tiered_threshold_service_1.TieredThresholdService,
+            post_quantum_service_1.PostQuantumCryptoService,
+            share_encryption_service_1.ShareEncryptionService,
+            node_identity_service_1.NodeIdentityService,
+        ],
+    }),
+    __param(0, (0, common_1.Optional)()),
+    __param(0, (0, common_1.Inject)('MultiChainService')),
+    __metadata("design:paramtypes", [Object, dkg_service_1.DKGService,
+        bls_dkg_service_1.BLSDKGService])
+], DKGPluginModule);
+//# sourceMappingURL=dkg-plugin.module.js.map

package/dist/packages/plugin-dkg/src/dkg-plugin.module.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"dkg-plugin.module.js","sourceRoot":"","sources":["../../../../../plugin-dkg/src/dkg-plugin.module.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;AAAA,2CAAgF;AAChF,uFAA4E;AAC5E,+CAA2C;AAC3C,8DAAyD;AACzD,0FAAoF;AACpF,sEAAiE;AACjE,8FAAwF;AACxF,sFAAiF;AACjF,gFAA2E;AAC3E,wEAAyE;AACzE,gFAA2E;AAC3E,0EAAqE;AAsC9D,IAAM,eAAe,uBAArB,MAAM,eAAe;IAIkC;IACzC;IACA;IALF,MAAM,GAAG,IAAI,eAAM,CAAC,iBAAe,CAAC,IAAI,CAAC,CAAC;IAE3D,YAC4D,UAAgB,EACzD,GAAgB,EAChB,MAAsB;QAFmB,eAAU,GAAV,UAAU,CAAM;QACzD,QAAG,GAAH,GAAG,CAAa;QAChB,WAAM,GAAN,MAAM,CAAgB;IACtC,CAAC;IAEJ,KAAK,CAAC,YAAY;QAChB,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,kDAAkD,CAAC,CAAC;QACpE,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,oCAAoC,CAAC,CAAC;QACtD,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,2BAA2B,CAAC,CAAC;QAC7C,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,6CAA6C,CAAC,CAAC;QAC/D,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,qDAAqD,CAAC,CAAC;QACvE,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,oDAAoD,CAAC,CAAC;QACtE,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,qDAAqD,CAAC,CAAC;QACvE,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,4CAA4C,CAAC,CAAC;QAC9D,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,iDAAiD,CAAC,CAAC;QACnE,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,uDAAuD,CAAC,CAAC;QACzE,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,+CAA+C,CAAC,CAAC;QACjE,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,iDAAiD,CAAC,CAAC;QACnE,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,yCAAyC,CAAC,CAAC;QAG3D,IAAI,IAAI,CAAC,UAAU,IAAI,IAAI,CAAC,GAAG,EAAE,CAAC;YAChC,IAAI,CAAC,UAAU,CAAC,cAAc,CAAC,KAAK,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC;QAClD,CAAC;QAED,IAAI,IAAI,CAAC,UAAU,IAAI,IAAI,CAAC,MAAM,EAAE,CAAC;YACnC,IAAI,CAAC,UAAU,CAAC,cAAc,CAAC,SAAS,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC;QACzD,CAAC;IACH,CAAC;CACF,CAAA;AAjCY,0CAAe;0BAAf,eAAe;IA3B3B,IAAA,eAAM,EAAC;QACN,OAAO,EAAE,CAAC,mDAAoB,CAAC;QAC/B,SAAS,EAAE;YACT,wBAAU;YACV,+BAAa;YACb,0DAA0B;YAC1B,uCAAiB;YACjB,8DAA4B;YAC5B,uDAAyB;YACzB,iDAAsB;YACtB,+CAAwB;YACxB,iDAAsB;YACtB,2CAAmB;SACpB;QACD,OAAO,EAAE;YACP,wBAAU;YACV,+BAAa;YACb,0DAA0B;YAC1B,uCAAiB;YACjB,8DAA4B;YAC5B,uDAAyB;YACzB,iDAAsB;YACtB,+CAAwB;YACxB,iDAAsB;YACtB,2CAAmB;SACpB;KACF,CAAC;IAKG,WAAA,IAAA,iBAAQ,GAAE,CAAA;IAAE,WAAA,IAAA,eAAM,EAAC,mBAAmB,CAAC,CAAA;6CACjB,wBAAU;QACP,+BAAa;GAN9B,eAAe,CAiC3B"}

package/dist/packages/plugin-dkg/src/dkg.service.d.ts

@@ -0,0 +1,54 @@
+import { EventBusService } from '@hsuite/smart-engines-infrastructure';
+export interface DKGCeremony {
+    ceremonyId: string;
+    participants: string[];
+    threshold: number;
+    status: 'initiated' | 'collecting' | 'completed' | 'failed';
+    shares: Map<string, DKGShare>;
+    publicKey?: string;
+    createdAt: Date;
+    expiresAt: Date;
+}
+export interface DKGShare {
+    participantId: string;
+    share: string;
+    publicShare: string;
+    timestamp: Date;
+}
+export interface ThresholdSignatureRequest {
+    requestId: string;
+    message: string;
+    threshold: number;
+    participants: string[];
+}
+export declare class DKGService {
+    private readonly eventBus;
+    private readonly logger;
+    private ceremonies;
+    private nodeId;
+    constructor(eventBus: EventBusService);
+    initiateDKG(participants: string[], threshold: number): Promise<string>;
+    participateInDKG(ceremonyId: string): Promise<void>;
+    generateThresholdSignature(message: string, ceremonyId: string): Promise<string>;
+    private subscribeToEvents;
+    private onCeremonyInitiated;
+    private onShareSubmitted;
+    private onSignatureRequested;
+    private onPartialSignature;
+    private generateKeyShare;
+    private derivePublicShare;
+    private generatePartialSignature;
+    getPartialSignatureForMessage(ceremonyId: string, message: string): string | null;
+    private completeCeremony;
+    private handleTimeout;
+    getCeremonyStatus(ceremonyId: string): DKGCeremony | null;
+    getStats(): {
+        totalCeremonies: number;
+        initiated: number;
+        collecting: number;
+        completed: number;
+        failed: number;
+    };
+    listCeremonies(): DKGCeremony[];
+}
+//# sourceMappingURL=dkg.service.d.ts.map

package/dist/packages/plugin-dkg/src/dkg.service.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"dkg.service.d.ts","sourceRoot":"","sources":["../../../../../plugin-dkg/src/dkg.service.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,eAAe,EAAe,MAAM,sCAAsC,CAAC;AAcpF,MAAM,WAAW,WAAW;IAC1B,UAAU,EAAE,MAAM,CAAC;IACnB,YAAY,EAAE,MAAM,EAAE,CAAC;IACvB,SAAS,EAAE,MAAM,CAAC;IAClB,MAAM,EAAE,WAAW,GAAG,YAAY,GAAG,WAAW,GAAG,QAAQ,CAAC;IAC5D,MAAM,EAAE,GAAG,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC;IAC9B,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,SAAS,EAAE,IAAI,CAAC;IAChB,SAAS,EAAE,IAAI,CAAC;CACjB;AAKD,MAAM,WAAW,QAAQ;IACvB,aAAa,EAAE,MAAM,CAAC;IACtB,KAAK,EAAE,MAAM,CAAC;IACd,WAAW,EAAE,MAAM,CAAC;IACpB,SAAS,EAAE,IAAI,CAAC;CACjB;AAKD,MAAM,WAAW,yBAAyB;IACxC,SAAS,EAAE,MAAM,CAAC;IAClB,OAAO,EAAE,MAAM,CAAC;IAChB,SAAS,EAAE,MAAM,CAAC;IAClB,YAAY,EAAE,MAAM,EAAE,CAAC;CACxB;AAaD,qBACa,UAAU;IAKT,OAAO,CAAC,QAAQ,CAAC,QAAQ;IAJrC,OAAO,CAAC,QAAQ,CAAC,MAAM,CAA+B;IACtD,OAAO,CAAC,UAAU,CAAkC;IACpD,OAAO,CAAC,MAAM,CAAS;gBAEM,QAAQ,EAAE,eAAe;IAQhD,WAAW,CAAC,YAAY,EAAE,MAAM,EAAE,EAAE,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;IA4CvE,gBAAgB,CAAC,UAAU,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAsCnD,0BAA0B,CAAC,OAAO,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;YAkDxE,iBAAiB;YAwBjB,mBAAmB;YAwBnB,gBAAgB;YA2BhB,oBAAoB;YAuBpB,kBAAkB;IAWhC,OAAO,CAAC,gBAAgB;IAYxB,OAAO,CAAC,iBAAiB;IAUzB,OAAO,CAAC,wBAAwB;IAezB,6BAA6B,CAAC,UAAU,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI;YAwB1E,gBAAgB;IA6B9B,OAAO,CAAC,aAAa;IAkBrB,iBAAiB,CAAC,UAAU,EAAE,MAAM,GAAG,WAAW,GAAG,IAAI;IAOzD,QAAQ;;;;;;;IAmBR,cAAc,IAAI,WAAW,EAAE;CAGhC"}