@hsuite/smart-engines-cli 1.0.0

package/dist/libs/multi-chain-core/src/tss/multi-chain-key-derivation.service.js

@@ -0,0 +1,163 @@
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var __importStar = (this && this.__importStar) || (function () {
+    var ownKeys = function(o) {
+        ownKeys = Object.getOwnPropertyNames || function (o) {
+            var ar = [];
+            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
+            return ar;
+        };
+        return ownKeys(o);
+    };
+    return function (mod) {
+        if (mod && mod.__esModule) return mod;
+        var result = {};
+        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
+        __setModuleDefault(result, mod);
+        return result;
+    };
+})();
+var MultiChainKeyDerivationService_1;
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.MultiChainKeyDerivationService = exports.KeyType = void 0;
+const common_1 = require("@nestjs/common");
+const sha256_1 = require("@noble/hashes/sha256");
+const secp256k1_1 = require("@noble/curves/secp256k1");
+const crypto = __importStar(require("crypto"));
+var KeyType;
+(function (KeyType) {
+    KeyType["ED25519"] = "ed25519";
+    KeyType["SECP256K1"] = "secp256k1";
+    KeyType["BLS12_381"] = "bls12-381";
+})(KeyType || (exports.KeyType = KeyType = {}));
+let MultiChainKeyDerivationService = MultiChainKeyDerivationService_1 = class MultiChainKeyDerivationService {
+    logger = new common_1.Logger(MultiChainKeyDerivationService_1.name);
+    chainKeyTypes = {
+        hedera: KeyType.ED25519,
+        solana: KeyType.ED25519,
+        polkadot: KeyType.ED25519,
+        xrpl: KeyType.SECP256K1,
+        ethereum: KeyType.SECP256K1,
+        bitcoin: KeyType.SECP256K1,
+    };
+    deriveKeyPair(payload, signerIndex, chain) {
+        const targetChain = chain || payload.chain;
+        const keyType = this.chainKeyTypes[targetChain.toLowerCase()] || KeyType.SECP256K1;
+        this.logger.debug(`Deriving ${keyType} key for ${targetChain}, signer ${signerIndex}`);
+        const seed = this.generateDeterministicSeed(payload, signerIndex, targetChain);
+        switch (keyType) {
+            case KeyType.ED25519:
+                return this.generateEd25519(seed);
+            case KeyType.SECP256K1:
+                return this.generateSecp256k1(seed);
+            default:
+                throw new Error(`Unsupported key type: ${keyType}`);
+        }
+    }
+    generateDeterministicSeed(payload, signerIndex, chain) {
+        const payloadStr = JSON.stringify({
+            action: payload.action,
+            timestamp: payload.timestamp,
+            validatorsHash: payload.validatorsHash,
+            chain,
+        });
+        const payloadHash = (0, sha256_1.sha256)(Buffer.from(payloadStr));
+        const combinedSeed = (0, sha256_1.sha256)(Buffer.concat([
+            Buffer.from(payloadHash),
+            Buffer.from(signerIndex, 'utf-8'),
+            Buffer.from(chain, 'utf-8'),
+        ]));
+        return Buffer.from(combinedSeed);
+    }
+    generateEd25519(seed) {
+        const privateKeySeed = seed.slice(0, 32);
+        const keyObject = crypto.createPrivateKey({
+            key: Buffer.concat([
+                Buffer.from([
+                    0x30, 0x2e, 0x02, 0x01, 0x00, 0x30, 0x05, 0x06, 0x03, 0x2b, 0x65, 0x70, 0x04, 0x22, 0x04,
+                    0x20,
+                ]),
+                privateKeySeed,
+            ]),
+            format: 'der',
+            type: 'pkcs8',
+        });
+        const publicKeyDer = crypto.createPublicKey(keyObject).export({ type: 'spki', format: 'der' });
+        const publicKey = Buffer.from(publicKeyDer.slice(-32));
+        const privateKeyBigInt = BigInt('0x' + privateKeySeed.toString('hex'));
+        return {
+            keyType: KeyType.ED25519,
+            privateKey: privateKeySeed,
+            publicKey,
+            privateKeyBigInt,
+        };
+    }
+    generateSecp256k1(seed) {
+        const hash = (0, sha256_1.sha256)(seed);
+        const privateKeyBigInt = BigInt('0x' + Buffer.from(hash).toString('hex')) % secp256k1_1.secp256k1.CURVE.n;
+        if (privateKeyBigInt === BigInt(0)) {
+            throw new Error('Derived secp256k1 key is zero');
+        }
+        const publicKeyPoint = secp256k1_1.secp256k1.ProjectivePoint.BASE.multiply(privateKeyBigInt);
+        const publicKey = publicKeyPoint.toRawBytes(true);
+        const privateKey = Buffer.from(privateKeyBigInt.toString(16).padStart(64, '0'), 'hex');
+        return {
+            keyType: KeyType.SECP256K1,
+            privateKey,
+            publicKey: Buffer.from(publicKey),
+            privateKeyBigInt,
+        };
+    }
+    hashPayload(payload) {
+        const payloadStr = JSON.stringify({
+            action: payload.action,
+            timestamp: payload.timestamp,
+            validatorsHash: payload.validatorsHash,
+            chain: payload.chain,
+        });
+        return Buffer.from((0, sha256_1.sha256)(Buffer.from(payloadStr))).toString('hex');
+    }
+    createValidatorsHash(nodeIds) {
+        const sorted = [...nodeIds].sort();
+        const combined = sorted.join(',');
+        return Buffer.from((0, sha256_1.sha256)(Buffer.from(combined))).toString('hex');
+    }
+    getKeyTypeForChain(chain) {
+        return this.chainKeyTypes[chain.toLowerCase()] || KeyType.SECP256K1;
+    }
+    verifyDerivation(privateKey, payload, signerIndex, chain) {
+        try {
+            const derived = this.deriveKeyPair(payload, signerIndex, chain);
+            return derived.privateKey.equals(privateKey);
+        }
+        catch {
+            return false;
+        }
+    }
+};
+exports.MultiChainKeyDerivationService = MultiChainKeyDerivationService;
+exports.MultiChainKeyDerivationService = MultiChainKeyDerivationService = MultiChainKeyDerivationService_1 = __decorate([
+    (0, common_1.Injectable)()
+], MultiChainKeyDerivationService);
+//# sourceMappingURL=multi-chain-key-derivation.service.js.map

package/dist/libs/multi-chain-core/src/tss/multi-chain-key-derivation.service.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"multi-chain-key-derivation.service.js","sourceRoot":"","sources":["../../../../../../../libs/multi-chain-core/src/tss/multi-chain-key-derivation.service.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAAA,2CAAoD;AACpD,iDAA8C;AAC9C,uDAAoD;AACpD,+CAAiC;AAKjC,IAAY,OAIX;AAJD,WAAY,OAAO;IACjB,8BAAmB,CAAA;IACnB,kCAAuB,CAAA;IACvB,kCAAuB,CAAA;AACzB,CAAC,EAJW,OAAO,uBAAP,OAAO,QAIlB;AAwCM,IAAM,8BAA8B,sCAApC,MAAM,8BAA8B;IACxB,MAAM,GAAG,IAAI,eAAM,CAAC,gCAA8B,CAAC,IAAI,CAAC,CAAC;IAGzD,aAAa,GAA4B;QACxD,MAAM,EAAE,OAAO,CAAC,OAAO;QACvB,MAAM,EAAE,OAAO,CAAC,OAAO;QACvB,QAAQ,EAAE,OAAO,CAAC,OAAO;QACzB,IAAI,EAAE,OAAO,CAAC,SAAS;QACvB,QAAQ,EAAE,OAAO,CAAC,SAAS;QAC3B,OAAO,EAAE,OAAO,CAAC,SAAS;KAC3B,CAAC;IAUF,aAAa,CAAC,OAAsB,EAAE,WAAmB,EAAE,KAAc;QACvE,MAAM,WAAW,GAAG,KAAK,IAAI,OAAO,CAAC,KAAK,CAAC;QAC3C,MAAM,OAAO,GAAG,IAAI,CAAC,aAAa,CAAC,WAAW,CAAC,WAAW,EAAE,CAAC,IAAI,OAAO,CAAC,SAAS,CAAC;QAEnF,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,YAAY,OAAO,YAAY,WAAW,YAAY,WAAW,EAAE,CAAC,CAAC;QAGvF,MAAM,IAAI,GAAG,IAAI,CAAC,yBAAyB,CAAC,OAAO,EAAE,WAAW,EAAE,WAAW,CAAC,CAAC;QAG/E,QAAQ,OAAO,EAAE,CAAC;YAChB,KAAK,OAAO,CAAC,OAAO;gBAClB,OAAO,IAAI,CAAC,eAAe,CAAC,IAAI,CAAC,CAAC;YAEpC,KAAK,OAAO,CAAC,SAAS;gBACpB,OAAO,IAAI,CAAC,iBAAiB,CAAC,IAAI,CAAC,CAAC;YAEtC;gBACE,MAAM,IAAI,KAAK,CAAC,yBAAyB,OAAO,EAAE,CAAC,CAAC;QACxD,CAAC;IACH,CAAC;IAKO,yBAAyB,CAC/B,OAAsB,EACtB,WAAmB,EACnB,KAAa;QAEb,MAAM,UAAU,GAAG,IAAI,CAAC,SAAS,CAAC;YAChC,MAAM,EAAE,OAAO,CAAC,MAAM;YACtB,SAAS,EAAE,OAAO,CAAC,SAAS;YAC5B,cAAc,EAAE,OAAO,CAAC,cAAc;YACtC,KAAK;SACN,CAAC,CAAC;QAEH,MAAM,WAAW,GAAG,IAAA,eAAM,EAAC,MAAM,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC;QACpD,MAAM,YAAY,GAAG,IAAA,eAAM,EACzB,MAAM,CAAC,MAAM,CAAC;YACZ,MAAM,CAAC,IAAI,CAAC,WAAW,CAAC;YACxB,MAAM,CAAC,IAAI,CAAC,WAAW,EAAE,OAAO,CAAC;YACjC,MAAM,CAAC,IAAI,CAAC,KAAK,EAAE,OAAO,CAAC;SAC5B,CAAC,CACH,CAAC;QAEF,OAAO,MAAM,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;IACnC,CAAC;IAKO,eAAe,CAAC,IAAY;QAElC,MAAM,cAAc,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;QAGzC,MAAM,SAAS,GAAG,MAAM,CAAC,gBAAgB,CAAC;YACxC,GAAG,EAAE,MAAM,CAAC,MAAM,CAAC;gBAEjB,MAAM,CAAC,IAAI,CAAC;oBACV,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI;oBACxF,IAAI;iBACL,CAAC;gBACF,cAAc;aACf,CAAC;YACF,MAAM,EAAE,KAAK;YACb,IAAI,EAAE,OAAO;SACd,CAAC,CAAC;QAEH,MAAM,YAAY,GAAG,MAAM,CAAC,eAAe,CAAC,SAAS,CAAC,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,CAAC;QAC/F,MAAM,SAAS,GAAG,MAAM,CAAC,IAAI,CAAC,YAAY,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;QAGvD,MAAM,gBAAgB,GAAG,MAAM,CAAC,IAAI,GAAG,cAAc,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC;QAEvE,OAAO;YACL,OAAO,EAAE,OAAO,CAAC,OAAO;YACxB,UAAU,EAAE,cAAc;YAC1B,SAAS;YACT,gBAAgB;SACjB,CAAC;IACJ,CAAC;IAKO,iBAAiB,CAAC,IAAY;QAEpC,MAAM,IAAI,GAAG,IAAA,eAAM,EAAC,IAAI,CAAC,CAAC;QAC1B,MAAM,gBAAgB,GAAG,MAAM,CAAC,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,GAAG,qBAAS,CAAC,KAAK,CAAC,CAAC,CAAC;QAG9F,IAAI,gBAAgB,KAAK,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC;YACnC,MAAM,IAAI,KAAK,CAAC,+BAA+B,CAAC,CAAC;QACnD,CAAC;QAGD,MAAM,cAAc,GAAG,qBAAS,CAAC,eAAe,CAAC,IAAI,CAAC,QAAQ,CAAC,gBAAgB,CAAC,CAAC;QACjF,MAAM,SAAS,GAAG,cAAc,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC;QAElD,MAAM,UAAU,GAAG,MAAM,CAAC,IAAI,CAAC,gBAAgB,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,EAAE,EAAE,GAAG,CAAC,EAAE,KAAK,CAAC,CAAC;QAEvF,OAAO;YACL,OAAO,EAAE,OAAO,CAAC,SAAS;YAC1B,UAAU;YACV,SAAS,EAAE,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC;YACjC,gBAAgB;SACjB,CAAC;IACJ,CAAC;IAKD,WAAW,CAAC,OAAsB;QAChC,MAAM,UAAU,GAAG,IAAI,CAAC,SAAS,CAAC;YAChC,MAAM,EAAE,OAAO,CAAC,MAAM;YACtB,SAAS,EAAE,OAAO,CAAC,SAAS;YAC5B,cAAc,EAAE,OAAO,CAAC,cAAc;YACtC,KAAK,EAAE,OAAO,CAAC,KAAK;SACrB,CAAC,CAAC;QAEH,OAAO,MAAM,CAAC,IAAI,CAAC,IAAA,eAAM,EAAC,MAAM,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;IACtE,CAAC;IAKD,oBAAoB,CAAC,OAAiB;QACpC,MAAM,MAAM,GAAG,CAAC,GAAG,OAAO,CAAC,CAAC,IAAI,EAAE,CAAC;QACnC,MAAM,QAAQ,GAAG,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAClC,OAAO,MAAM,CAAC,IAAI,CAAC,IAAA,eAAM,EAAC,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;IACpE,CAAC;IAKD,kBAAkB,CAAC,KAAa;QAC9B,OAAO,IAAI,CAAC,aAAa,CAAC,KAAK,CAAC,WAAW,EAAE,CAAC,IAAI,OAAO,CAAC,SAAS,CAAC;IACtE,CAAC;IAWD,gBAAgB,CACd,UAAkB,EAClB,OAAsB,EACtB,WAAmB,EACnB,KAAc;QAEd,IAAI,CAAC;YACH,MAAM,OAAO,GAAG,IAAI,CAAC,aAAa,CAAC,OAAO,EAAE,WAAW,EAAE,KAAK,CAAC,CAAC;YAChE,OAAO,OAAO,CAAC,UAAU,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC;QAC/C,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,KAAK,CAAC;QACf,CAAC;IACH,CAAC;CACF,CAAA;AAxLY,wEAA8B;yCAA9B,8BAA8B;IAD1C,IAAA,mBAAU,GAAE;GACA,8BAA8B,CAwL1C"}

package/dist/libs/multi-chain-core/src/tss/multi-chain-tss-signing.service.d.ts

@@ -0,0 +1,15 @@
+import { EventBusService } from '@hsuite/smart-engines-infrastructure';
+import { ShamirSecretSharingService, SecretShare } from '@hsuite/smart-engines-plugin-dkg';
+import { MultiChainKeyDerivationService } from './multi-chain-key-derivation.service';
+export declare class MultiChainTSSSigningService {
+    private readonly keyDerivation;
+    private readonly shamir;
+    private readonly eventBus;
+    private readonly logger;
+    constructor(keyDerivation: MultiChainKeyDerivationService, shamir: ShamirSecretSharingService, eventBus: EventBusService);
+    signWithShares(_payload: any, _nodeId: string, message: Buffer, shares: SecretShare[], chain: string): Promise<Buffer>;
+    private signEd25519;
+    private signSecp256k1;
+    private subscribeToShareResponses;
+}
+//# sourceMappingURL=multi-chain-tss-signing.service.d.ts.map

package/dist/libs/multi-chain-core/src/tss/multi-chain-tss-signing.service.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"multi-chain-tss-signing.service.d.ts","sourceRoot":"","sources":["../../../../../../../libs/multi-chain-core/src/tss/multi-chain-tss-signing.service.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,eAAe,EAAE,MAAM,sCAAsC,CAAC;AACvE,OAAO,EAAE,0BAA0B,EAAE,WAAW,EAAE,MAAM,kCAAkC,CAAC;AAI3F,OAAO,EAAE,8BAA8B,EAAW,MAAM,sCAAsC,CAAC;AAqB/F,qBACa,2BAA2B;IAIpC,OAAO,CAAC,QAAQ,CAAC,aAAa;IAC9B,OAAO,CAAC,QAAQ,CAAC,MAAM;IACvB,OAAO,CAAC,QAAQ,CAAC,QAAQ;IAL3B,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAgD;gBAGpD,aAAa,EAAE,8BAA8B,EAC7C,MAAM,EAAE,0BAA0B,EAClC,QAAQ,EAAE,eAAe;IAetC,cAAc,CAClB,QAAQ,EAAE,GAAG,EACb,OAAO,EAAE,MAAM,EACf,OAAO,EAAE,MAAM,EACf,MAAM,EAAE,WAAW,EAAE,EACrB,KAAK,EAAE,MAAM,GACZ,OAAO,CAAC,MAAM,CAAC;IA0ClB,OAAO,CAAC,WAAW;IAyBnB,OAAO,CAAC,aAAa;IAcrB,OAAO,CAAC,yBAAyB;CAKlC"}

package/dist/libs/multi-chain-core/src/tss/multi-chain-tss-signing.service.js

@@ -0,0 +1,124 @@
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var __importStar = (this && this.__importStar) || (function () {
+    var ownKeys = function(o) {
+        ownKeys = Object.getOwnPropertyNames || function (o) {
+            var ar = [];
+            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
+            return ar;
+        };
+        return ownKeys(o);
+    };
+    return function (mod) {
+        if (mod && mod.__esModule) return mod;
+        var result = {};
+        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
+        __setModuleDefault(result, mod);
+        return result;
+    };
+})();
+var __metadata = (this && this.__metadata) || function (k, v) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+};
+var MultiChainTSSSigningService_1;
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.MultiChainTSSSigningService = void 0;
+const common_1 = require("@nestjs/common");
+const smart_engines_infrastructure_1 = require("@hsuite/smart-engines-infrastructure");
+const smart_engines_plugin_dkg_1 = require("@hsuite/smart-engines-plugin-dkg");
+const secp256k1_1 = require("@noble/curves/secp256k1");
+const sha256_1 = require("@noble/hashes/sha256");
+const crypto = __importStar(require("crypto"));
+const multi_chain_key_derivation_service_1 = require("./multi-chain-key-derivation.service");
+let MultiChainTSSSigningService = MultiChainTSSSigningService_1 = class MultiChainTSSSigningService {
+    keyDerivation;
+    shamir;
+    eventBus;
+    logger = new common_1.Logger(MultiChainTSSSigningService_1.name);
+    constructor(keyDerivation, shamir, eventBus) {
+        this.keyDerivation = keyDerivation;
+        this.shamir = shamir;
+        this.eventBus = eventBus;
+        this.subscribeToShareResponses();
+    }
+    async signWithShares(_payload, _nodeId, message, shares, chain) {
+        const keyType = this.keyDerivation.getKeyTypeForChain(chain);
+        this.logger.warn(`🔓 Reconstructing ${keyType} key for signing (EPHEMERAL)`);
+        try {
+            const privateKeyBigInt = this.shamir.combine(shares);
+            const privateKey = Buffer.from(privateKeyBigInt.toString(16).padStart(64, '0'), 'hex');
+            this.logger.debug(`Key reconstructed from ${shares.length} shares`);
+            let signature;
+            switch (keyType) {
+                case multi_chain_key_derivation_service_1.KeyType.ED25519:
+                    signature = this.signEd25519(message, privateKey);
+                    break;
+                case multi_chain_key_derivation_service_1.KeyType.SECP256K1:
+                    signature = this.signSecp256k1(message, privateKeyBigInt);
+                    break;
+                default:
+                    throw new Error(`Unsupported key type: ${keyType}`);
+            }
+            this.logger.log(`✅ Signed with ${keyType} (key destroyed)`);
+            return signature;
+        }
+        finally {
+            shares.length = 0;
+            this.logger.warn(`🔥 Ephemeral key destroyed after signing`);
+        }
+    }
+    signEd25519(message, privateKeySeed) {
+        const keyObject = crypto.createPrivateKey({
+            key: Buffer.concat([
+                Buffer.from([
+                    0x30, 0x2e, 0x02, 0x01, 0x00, 0x30, 0x05, 0x06, 0x03, 0x2b, 0x65, 0x70, 0x04, 0x22, 0x04,
+                    0x20,
+                ]),
+                privateKeySeed.slice(0, 32),
+            ]),
+            format: 'der',
+            type: 'pkcs8',
+        });
+        const signature = crypto.sign(null, message, keyObject);
+        this.logger.debug(`Ed25519 signature created (64 bytes)`);
+        return signature;
+    }
+    signSecp256k1(message, privateKey) {
+        const messageHash = (0, sha256_1.sha256)(message);
+        const signature = secp256k1_1.secp256k1.sign(messageHash, privateKey);
+        return Buffer.from(signature.toDERRawBytes());
+    }
+    subscribeToShareResponses() {
+        this.eventBus.subscribeToEvents('tss.share-response', async () => undefined);
+        this.logger.log('✓ Subscribed to TSS share responses');
+    }
+};
+exports.MultiChainTSSSigningService = MultiChainTSSSigningService;
+exports.MultiChainTSSSigningService = MultiChainTSSSigningService = MultiChainTSSSigningService_1 = __decorate([
+    (0, common_1.Injectable)(),
+    __metadata("design:paramtypes", [multi_chain_key_derivation_service_1.MultiChainKeyDerivationService,
+        smart_engines_plugin_dkg_1.ShamirSecretSharingService,
+        smart_engines_infrastructure_1.EventBusService])
+], MultiChainTSSSigningService);
+//# sourceMappingURL=multi-chain-tss-signing.service.js.map

package/dist/libs/multi-chain-core/src/tss/multi-chain-tss-signing.service.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"multi-chain-tss-signing.service.js","sourceRoot":"","sources":["../../../../../../../libs/multi-chain-core/src/tss/multi-chain-tss-signing.service.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAAA,2CAAoD;AACpD,uFAAuE;AACvE,+EAA2F;AAC3F,uDAAoD;AACpD,iDAA8C;AAC9C,+CAAiC;AACjC,6FAA+F;AAsBxF,IAAM,2BAA2B,mCAAjC,MAAM,2BAA2B;IAInB;IACA;IACA;IALF,MAAM,GAAG,IAAI,eAAM,CAAC,6BAA2B,CAAC,IAAI,CAAC,CAAC;IAEvE,YACmB,aAA6C,EAC7C,MAAkC,EAClC,QAAyB;QAFzB,kBAAa,GAAb,aAAa,CAAgC;QAC7C,WAAM,GAAN,MAAM,CAA4B;QAClC,aAAQ,GAAR,QAAQ,CAAiB;QAE1C,IAAI,CAAC,yBAAyB,EAAE,CAAC;IACnC,CAAC;IAYD,KAAK,CAAC,cAAc,CAClB,QAAa,EACb,OAAe,EACf,OAAe,EACf,MAAqB,EACrB,KAAa;QAEb,MAAM,OAAO,GAAG,IAAI,CAAC,aAAa,CAAC,kBAAkB,CAAC,KAAK,CAAC,CAAC;QAE7D,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,qBAAqB,OAAO,8BAA8B,CAAC,CAAC;QAE7E,IAAI,CAAC;YAEH,MAAM,gBAAgB,GAAG,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;YACrD,MAAM,UAAU,GAAG,MAAM,CAAC,IAAI,CAAC,gBAAgB,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,EAAE,EAAE,GAAG,CAAC,EAAE,KAAK,CAAC,CAAC;YAEvF,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,0BAA0B,MAAM,CAAC,MAAM,SAAS,CAAC,CAAC;YAGpE,IAAI,SAAiB,CAAC;YAEtB,QAAQ,OAAO,EAAE,CAAC;gBAChB,KAAK,4CAAO,CAAC,OAAO;oBAClB,SAAS,GAAG,IAAI,CAAC,WAAW,CAAC,OAAO,EAAE,UAAU,CAAC,CAAC;oBAClD,MAAM;gBAER,KAAK,4CAAO,CAAC,SAAS;oBACpB,SAAS,GAAG,IAAI,CAAC,aAAa,CAAC,OAAO,EAAE,gBAAgB,CAAC,CAAC;oBAC1D,MAAM;gBAER;oBACE,MAAM,IAAI,KAAK,CAAC,yBAAyB,OAAO,EAAE,CAAC,CAAC;YACxD,CAAC;YAED,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,iBAAiB,OAAO,kBAAkB,CAAC,CAAC;YAE5D,OAAO,SAAS,CAAC;QACnB,CAAC;gBAAS,CAAC;YAGT,MAAM,CAAC,MAAM,GAAG,CAAC,CAAC;YAClB,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,0CAA0C,CAAC,CAAC;QAC/D,CAAC;IACH,CAAC;IAKO,WAAW,CAAC,OAAe,EAAE,cAAsB;QAEzD,MAAM,SAAS,GAAG,MAAM,CAAC,gBAAgB,CAAC;YACxC,GAAG,EAAE,MAAM,CAAC,MAAM,CAAC;gBACjB,MAAM,CAAC,IAAI,CAAC;oBACV,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI;oBACxF,IAAI;iBACL,CAAC;gBACF,cAAc,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC;aAC5B,CAAC;YACF,MAAM,EAAE,KAAK;YACb,IAAI,EAAE,OAAO;SACd,CAAC,CAAC;QAGH,MAAM,SAAS,GAAG,MAAM,CAAC,IAAI,CAAC,IAAI,EAAE,OAAO,EAAE,SAAS,CAAC,CAAC;QAExD,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,sCAAsC,CAAC,CAAC;QAE1D,OAAO,SAAS,CAAC;IACnB,CAAC;IAKO,aAAa,CAAC,OAAe,EAAE,UAAkB;QAEvD,MAAM,WAAW,GAAG,IAAA,eAAM,EAAC,OAAO,CAAC,CAAC;QAGpC,MAAM,SAAS,GAAG,qBAAS,CAAC,IAAI,CAAC,WAAW,EAAE,UAAU,CAAC,CAAC;QAG1D,OAAO,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,aAAa,EAAE,CAAC,CAAC;IAChD,CAAC;IAKO,yBAAyB;QAC/B,IAAI,CAAC,QAAQ,CAAC,iBAAiB,CAAU,oBAAoB,EAAE,KAAK,IAAI,EAAE,CAAC,SAAS,CAAC,CAAC;QAEtF,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,qCAAqC,CAAC,CAAC;IACzD,CAAC;CACF,CAAA;AAjHY,kEAA2B;sCAA3B,2BAA2B;IADvC,IAAA,mBAAU,GAAE;qCAKuB,mEAA8B;QACrC,qDAA0B;QACxB,8CAAe;GANjC,2BAA2B,CAiHvC"}

package/dist/libs/multi-chain-core/src/tss/node-tss-cluster.service.d.ts

@@ -0,0 +1,84 @@
+import { OnModuleInit } from '@nestjs/common';
+import { Model } from 'mongoose';
+import { EventBusService, ShareEncryptionService, VaultKeyProviderService } from '@hsuite/smart-engines-infrastructure';
+import { SecretShare, FeldmanVSSService, FeldmanCommitments } from '@hsuite/smart-engines-plugin-dkg';
+import { DeterministicKeyDerivationService, EntityPayload } from './deterministic-key-derivation.service';
+export interface TSSCluster {
+    signerIndex: string;
+    ceremonyId: string;
+    participants: string[];
+    threshold: number;
+    payload: EntityPayload;
+    publicKey: Uint8Array;
+    myShare: SecretShare | null;
+    feldmanCommitments?: FeldmanCommitments;
+    shareVerified?: boolean;
+    createdAt: Date;
+}
+export interface SerializedFeldmanCommitments {
+    commitments: string[];
+    generator: string;
+    threshold: number;
+}
+export interface ShareDistributionEvent {
+    ceremonyId: string;
+    recipientId: string;
+    encryptedShare: {
+        encryptedData: string;
+        ephemeralPublicKey: string;
+        iv: string;
+        tag: string;
+    };
+    shareId: number;
+    publicKey: string;
+    senderId: string;
+    feldmanCommitments: SerializedFeldmanCommitments;
+}
+export declare class NodeTSSClusterService implements OnModuleInit {
+    private readonly keyDerivation;
+    private readonly feldmanVSS;
+    private readonly eventBus;
+    private readonly shareEncryption;
+    private readonly vaultKeyProvider?;
+    private readonly clusterModel?;
+    private readonly logger;
+    private clusters;
+    private nodeId;
+    private encryptionKey;
+    private readonly useDatabase;
+    private keyProviderMode;
+    private processedCeremonies;
+    constructor(keyDerivation: DeterministicKeyDerivationService, feldmanVSS: FeldmanVSSService, eventBus: EventBusService, shareEncryption: ShareEncryptionService, vaultKeyProvider?: VaultKeyProviderService | undefined, clusterModel?: Model<any> | undefined);
+    onModuleInit(): Promise<void>;
+    private waitForNatsAndInitialize;
+    private initializeTSSSubscriptions;
+    getKeyProviderMode(): string;
+    private validateProductionPersistence;
+    createCluster(signerIndex: string, participants: string[], threshold: number, payload: EntityPayload): Promise<TSSCluster>;
+    getCluster(ceremonyId: string): TSSCluster | null;
+    getClustersForSigner(signerIndex: string): TSSCluster[];
+    getClustersByPayloadHash(payloadHash: string): TSSCluster[];
+    setMyShare(ceremonyId: string, share: SecretShare): Promise<void>;
+    getMyShare(ceremonyId: string): SecretShare | null;
+    hasShare(ceremonyId: string): boolean;
+    deleteCluster(ceremonyId: string): void;
+    private invalidateClusterInDatabase;
+    getAllCeremonyIds(): string[];
+    getStats(): {
+        totalClusters: number;
+        clustersWithShares: number;
+        clustersWithoutShares: number;
+        averageThreshold: number;
+        averageParticipants: number;
+    };
+    private subscribeToShareDistribution;
+    private handleShareDistribution;
+    private persistCluster;
+    private loadClustersFromDatabase;
+    private deriveShareKey;
+    private encryptShareAtRest;
+    private decryptShareAtRest;
+    announcePublicKey(): Promise<void>;
+    private handlePublicKeyAnnouncement;
+}
+//# sourceMappingURL=node-tss-cluster.service.d.ts.map

package/dist/libs/multi-chain-core/src/tss/node-tss-cluster.service.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"node-tss-cluster.service.d.ts","sourceRoot":"","sources":["../../../../../../../libs/multi-chain-core/src/tss/node-tss-cluster.service.ts"],"names":[],"mappings":"AAAA,OAAO,EAAgC,YAAY,EAAE,MAAM,gBAAgB,CAAC;AAE5E,OAAO,EAAE,KAAK,EAAE,MAAM,UAAU,CAAC;AACjC,OAAO,EACL,eAAe,EACf,sBAAsB,EACtB,uBAAuB,EACxB,MAAM,sCAAsC,CAAC;AAC9C,OAAO,EAAE,WAAW,EAAE,iBAAiB,EAAE,kBAAkB,EAAE,MAAM,kCAAkC,CAAC;AAEtG,OAAO,EACL,iCAAiC,EACjC,aAAa,EACd,MAAM,wCAAwC,CAAC;AAgBhD,MAAM,WAAW,UAAU;IAEzB,WAAW,EAAE,MAAM,CAAC;IAEpB,UAAU,EAAE,MAAM,CAAC;IAEnB,YAAY,EAAE,MAAM,EAAE,CAAC;IAEvB,SAAS,EAAE,MAAM,CAAC;IAElB,OAAO,EAAE,aAAa,CAAC;IAEvB,SAAS,EAAE,UAAU,CAAC;IAEtB,OAAO,EAAE,WAAW,GAAG,IAAI,CAAC;IAE5B,kBAAkB,CAAC,EAAE,kBAAkB,CAAC;IAExC,aAAa,CAAC,EAAE,OAAO,CAAC;IAExB,SAAS,EAAE,IAAI,CAAC;CACjB;AAKD,MAAM,WAAW,4BAA4B;IAE3C,WAAW,EAAE,MAAM,EAAE,CAAC;IAEtB,SAAS,EAAE,MAAM,CAAC;IAElB,SAAS,EAAE,MAAM,CAAC;CACnB;AASD,MAAM,WAAW,sBAAsB;IACrC,UAAU,EAAE,MAAM,CAAC;IACnB,WAAW,EAAE,MAAM,CAAC;IACpB,cAAc,EAAE;QACd,aAAa,EAAE,MAAM,CAAC;QACtB,kBAAkB,EAAE,MAAM,CAAC;QAC3B,EAAE,EAAE,MAAM,CAAC;QACX,GAAG,EAAE,MAAM,CAAC;KACb,CAAC;IACF,OAAO,EAAE,MAAM,CAAC;IAChB,SAAS,EAAE,MAAM,CAAC;IAClB,QAAQ,EAAE,MAAM,CAAC;IAEjB,kBAAkB,EAAE,4BAA4B,CAAC;CAClD;AAcD,qBACa,qBAAsB,YAAW,YAAY;IAYtD,OAAO,CAAC,QAAQ,CAAC,aAAa;IAC9B,OAAO,CAAC,QAAQ,CAAC,UAAU;IAC3B,OAAO,CAAC,QAAQ,CAAC,QAAQ;IACzB,OAAO,CAAC,QAAQ,CAAC,eAAe;IACpB,OAAO,CAAC,QAAQ,CAAC,gBAAgB,CAAC;IACP,OAAO,CAAC,QAAQ,CAAC,YAAY,CAAC;IAhBvE,OAAO,CAAC,QAAQ,CAAC,MAAM,CAA0C;IACjE,OAAO,CAAC,QAAQ,CAAsC;IACtD,OAAO,CAAC,MAAM,CAAS;IACvB,OAAO,CAAC,aAAa,CAAS;IAC9B,OAAO,CAAC,QAAQ,CAAC,WAAW,CAAU;IACtC,OAAO,CAAC,eAAe,CAAiB;IAGxC,OAAO,CAAC,mBAAmB,CAA0B;gBAGlC,aAAa,EAAE,iCAAiC,EAChD,UAAU,EAAE,iBAAiB,EAC7B,QAAQ,EAAE,eAAe,EACzB,eAAe,EAAE,sBAAsB,EAC3B,gBAAgB,CAAC,EAAE,uBAAuB,YAAA,EACf,YAAY,CAAC,EAAE,KAAK,CAAC,GAAG,CAAC,YAAA;IAqB7E,YAAY,IAAI,OAAO,CAAC,IAAI,CAAC;YA+CrB,wBAAwB;IA6BtC,OAAO,CAAC,0BAA0B;IAyBlC,kBAAkB,IAAI,MAAM;IAU5B,OAAO,CAAC,6BAA6B;IAyB/B,aAAa,CACjB,WAAW,EAAE,MAAM,EACnB,YAAY,EAAE,MAAM,EAAE,EACtB,SAAS,EAAE,MAAM,EACjB,OAAO,EAAE,aAAa,GACrB,OAAO,CAAC,UAAU,CAAC;IAmHtB,UAAU,CAAC,UAAU,EAAE,MAAM,GAAG,UAAU,GAAG,IAAI;IAUjD,oBAAoB,CAAC,WAAW,EAAE,MAAM,GAAG,UAAU,EAAE;IAUvD,wBAAwB,CAAC,WAAW,EAAE,MAAM,GAAG,UAAU,EAAE;IAUrD,UAAU,CAAC,UAAU,EAAE,MAAM,EAAE,KAAK,EAAE,WAAW,GAAG,OAAO,CAAC,IAAI,CAAC;IAqBvE,UAAU,CAAC,UAAU,EAAE,MAAM,GAAG,WAAW,GAAG,IAAI;IAWlD,QAAQ,CAAC,UAAU,EAAE,MAAM,GAAG,OAAO;IAarC,aAAa,CAAC,UAAU,EAAE,MAAM,GAAG,IAAI;YA8BzB,2BAA2B;IAqBzC,iBAAiB,IAAI,MAAM,EAAE;IAS7B,QAAQ,IAAI;QACV,aAAa,EAAE,MAAM,CAAC;QACtB,kBAAkB,EAAE,MAAM,CAAC;QAC3B,qBAAqB,EAAE,MAAM,CAAC;QAC9B,gBAAgB,EAAE,MAAM,CAAC;QACzB,mBAAmB,EAAE,MAAM,CAAC;KAC7B;IAwBD,OAAO,CAAC,4BAA4B;YActB,uBAAuB;YA8JvB,cAAc;YAiDd,wBAAwB;IAkEtC,OAAO,CAAC,cAAc;IAiBtB,OAAO,CAAC,kBAAkB;IA4B1B,OAAO,CAAC,kBAAkB;IA6Bb,iBAAiB,IAAI,OAAO,CAAC,IAAI,CAAC;YAsBjC,2BAA2B;CAc1C"}