@useaccord/sdk 0.1.0 → 0.2.0

package/LICENSE

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2026 ChainSquad GmbH
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

package/dist/adapter.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"adapter.d.ts","sourceRoot":"","sources":["../src/adapter.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;GAmBG;AAWH,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,aAAa,CAAC;AAgC1C,OAAO,KAAK,EACV,kBAAkB,EAGnB,MAAM,qBAAqB,CAAC;AAE7B,OAAO,KAAK,EACV,mBAAmB,EAIpB,MAAM,sBAAsB,CAAC;AAC9B,OAAO,KAAK,EACV,qBAAqB,EAEtB,MAAM,wBAAwB,CAAC;AAChC,OAAO,KAAK,EACV,mBAAmB,EAIpB,MAAM,sBAAsB,CAAC;AAC9B,OAAO,KAAK,EACV,sBAAsB,EAGvB,MAAM,yBAAyB,CAAC;AAEjC,OAAO,KAAK,EAAE,kBAAkB,EAAE,cAAc,EAAE,MAAM,qBAAqB,CAAC;AAC9E,OAAO,KAAK,EACV,eAAe,EACf,cAAc,EACd,eAAe,EAChB,MAAM,kBAAkB,CAAC;AAE1B,kDAAkD;AAClD,MAAM,WAAW,aACf,SACE,mBAAmB,EACnB,qBAAqB,EACrB,mBAAmB,EACnB,sBAAsB,EACtB,eAAe,EACf,kBAAkB,EAClB,kBAAkB;CAAG;AAEzB;;;;GAIG;AACH,wBAAgB,mBAAmB,CAAC,MAAM,EAAE,MAAM,GAAG,aAAa,CA6YjE;AAiHD,YAAY,EAAE,cAAc,EAAE,eAAe,EAAE,cAAc,EAAE,CAAC"}
+{"version":3,"file":"adapter.d.ts","sourceRoot":"","sources":["../src/adapter.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;GAmBG;AAWH,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,aAAa,CAAC;AAiC1C,OAAO,KAAK,EACV,kBAAkB,EAGnB,MAAM,qBAAqB,CAAC;AAE7B,OAAO,KAAK,EACV,mBAAmB,EAIpB,MAAM,sBAAsB,CAAC;AAC9B,OAAO,KAAK,EACV,qBAAqB,EAEtB,MAAM,wBAAwB,CAAC;AAChC,OAAO,KAAK,EACV,mBAAmB,EAIpB,MAAM,sBAAsB,CAAC;AAC9B,OAAO,KAAK,EACV,sBAAsB,EAGvB,MAAM,yBAAyB,CAAC;AAEjC,OAAO,KAAK,EAAE,kBAAkB,EAAE,cAAc,EAAE,MAAM,qBAAqB,CAAC;AAC9E,OAAO,KAAK,EACV,eAAe,EACf,cAAc,EACd,eAAe,EAChB,MAAM,kBAAkB,CAAC;AAE1B,kDAAkD;AAClD,MAAM,WAAW,aACf,SACE,mBAAmB,EACnB,qBAAqB,EACrB,mBAAmB,EACnB,sBAAsB,EACtB,eAAe,EACf,kBAAkB,EAClB,kBAAkB;CAAG;AAEzB;;;;GAIG;AACH,wBAAgB,mBAAmB,CAAC,MAAM,EAAE,MAAM,GAAG,aAAa,CA2ZjE;AAiHD,YAAY,EAAE,cAAc,EAAE,eAAe,EAAE,cAAc,EAAE,CAAC"}

package/dist/constants.d.ts

@@ -9,6 +9,12 @@ import type { Address } from "@solana/kit";
 export declare const MAX_JURORS = 31;
 export declare const MAX_APPEALS = 3;
 export declare const MAX_OPTIONS = 8;
+/**
+ * Maximum sortition retries per seat accepted by on-chain `draw_seat`
+ * (constants.rs, L-5 review 2026-09-23). Bounded so one instruction fits the
+ * 1.4M CU cap; chains beyond it are rejected with `MaxRetriesExceeded`.
+ */
+export declare const MAX_SORTITION_RETRIES = 128;
 export declare const UPDATE_TIMELOCK_SLOTS = 432000n;
 export declare const UNPAUSE_TIMELOCK_SLOTS = 216000n;
 /** Default appeal window (ADR-0022). Per-Subaccord now; this is the

package/dist/constants.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"constants.d.ts","sourceRoot":"","sources":["../src/constants.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,aAAa,CAAC;AAE3C;;;;;;GAMG;AAIH,eAAO,MAAM,UAAU,KAAK,CAAC;AAC7B,eAAO,MAAM,WAAW,IAAI,CAAC;AAC7B,eAAO,MAAM,WAAW,IAAI,CAAC;AAI7B,eAAO,MAAM,qBAAqB,UAAW,CAAC;AAC9C,eAAO,MAAM,sBAAsB,UAAW,CAAC;AAI/C;;wEAEwE;AACxE,eAAO,MAAM,0BAA0B,UAAW,CAAC;AACnD,mEAAmE;AACnE,eAAO,MAAM,sBAAsB,QAAS,CAAC;AAI7C;;;;;;;GAOG;AACH,eAAO,MAAM,mBAAmB,KAAK,CAAC;AAEtC;;;GAGG;AACH,eAAO,MAAM,kBAAkB,KAAK,CAAC;AAIrC;;;;GAIG;AACH,eAAO,MAAM,kBAAkB,IAAI,CAAC;AACpC,eAAO,MAAM,iBAAiB,OAAQ,CAAC;AACvC,eAAO,MAAM,0BAA0B,UAAW,CAAC;AACnD,eAAO,MAAM,0BAA0B,UAAW,CAAC;AACnD,eAAO,MAAM,0BAA0B,UAAW,CAAC;AACnD,eAAO,MAAM,mBAAmB,IAAI,CAAC;AACrC;;;GAGG;AACH,eAAO,MAAM,4BAA4B,OAAQ,CAAC;AAClD,+EAA+E;AAC/E,eAAO,MAAM,iBAAiB,KAAK,CAAC;AACpC,gFAAgF;AAChF,eAAO,MAAM,yBAAyB,IAAI,CAAC;AAC3C;;;;;GAKG;AACH,eAAO,MAAM,yBAAyB,MAAM,CAAC;AAC7C,eAAO,MAAM,iBAAiB,QAAS,CAAC;AACxC,eAAO,MAAM,qBAAqB,KAAK,CAAC;AAMxC;;;;GAIG;AACH,wBAAgB,iBAAiB,CAC/B,QAAQ,EAAE,MAAM,EAChB,YAAY,GAAE,MAA2B,GACxC,MAAM,GAAG,IAAI,CAcf;AAED;;;;GAIG;AACH,wBAAgB,kBAAkB,CAChC,UAAU,EAAE,MAAM,EAClB,YAAY,GAAE,MAA2B,GACxC,MAAM,CAGR;AAWD,oEAAoE;AACpE,eAAO,MAAM,gBAAgB,EACuB,OAAO,CAAC;AAC5D,gGAAgG;AAChG,eAAO,MAAM,0BAA0B,EACa,OAAO,CAAC;AAC5D,wEAAwE;AACxE,eAAO,MAAM,qBAAqB,EACkB,OAAO,CAAC;AAC5D,oGAAoG;AACpG,eAAO,MAAM,+BAA+B,EACO,OAAO,CAAC"}
+{"version":3,"file":"constants.d.ts","sourceRoot":"","sources":["../src/constants.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,aAAa,CAAC;AAE3C;;;;;;GAMG;AAIH,eAAO,MAAM,UAAU,KAAK,CAAC;AAC7B,eAAO,MAAM,WAAW,IAAI,CAAC;AAC7B,eAAO,MAAM,WAAW,IAAI,CAAC;AAE7B;;;;GAIG;AACH,eAAO,MAAM,qBAAqB,MAAM,CAAC;AAIzC,eAAO,MAAM,qBAAqB,UAAW,CAAC;AAC9C,eAAO,MAAM,sBAAsB,UAAW,CAAC;AAI/C;;wEAEwE;AACxE,eAAO,MAAM,0BAA0B,UAAW,CAAC;AACnD,mEAAmE;AACnE,eAAO,MAAM,sBAAsB,QAAS,CAAC;AAI7C;;;;;;;GAOG;AACH,eAAO,MAAM,mBAAmB,KAAK,CAAC;AAEtC;;;GAGG;AACH,eAAO,MAAM,kBAAkB,KAAK,CAAC;AAIrC;;;;GAIG;AACH,eAAO,MAAM,kBAAkB,IAAI,CAAC;AACpC,eAAO,MAAM,iBAAiB,OAAQ,CAAC;AACvC,eAAO,MAAM,0BAA0B,UAAW,CAAC;AACnD,eAAO,MAAM,0BAA0B,UAAW,CAAC;AACnD,eAAO,MAAM,0BAA0B,UAAW,CAAC;AACnD,eAAO,MAAM,mBAAmB,IAAI,CAAC;AACrC;;;GAGG;AACH,eAAO,MAAM,4BAA4B,OAAQ,CAAC;AAClD,+EAA+E;AAC/E,eAAO,MAAM,iBAAiB,KAAK,CAAC;AACpC,gFAAgF;AAChF,eAAO,MAAM,yBAAyB,IAAI,CAAC;AAC3C;;;;;GAKG;AACH,eAAO,MAAM,yBAAyB,MAAM,CAAC;AAC7C,eAAO,MAAM,iBAAiB,QAAS,CAAC;AACxC,eAAO,MAAM,qBAAqB,KAAK,CAAC;AAMxC;;;;GAIG;AACH,wBAAgB,iBAAiB,CAC/B,QAAQ,EAAE,MAAM,EAChB,YAAY,GAAE,MAA2B,GACxC,MAAM,GAAG,IAAI,CAcf;AAED;;;;GAIG;AACH,wBAAgB,kBAAkB,CAChC,UAAU,EAAE,MAAM,EAClB,YAAY,GAAE,MAA2B,GACxC,MAAM,CAGR;AAWD,oEAAoE;AACpE,eAAO,MAAM,gBAAgB,EACuB,OAAO,CAAC;AAC5D,gGAAgG;AAChG,eAAO,MAAM,0BAA0B,EACa,OAAO,CAAC;AAC5D,wEAAwE;AACxE,eAAO,MAAM,qBAAqB,EACkB,OAAO,CAAC;AAC5D,oGAAoG;AACpG,eAAO,MAAM,+BAA+B,EACO,OAAO,CAAC"}

package/dist/evidence/base64.d.ts

@@ -0,0 +1,12 @@
+/**
+ * evidence/base64.ts — base64 codec for the daemon's JSON wire fields
+ * (internal to the evidence module; not exported from the barrel).
+ *
+ * Standard alphabet, no padding concerns for this protocol's fixed-size
+ * fields. Runs on the global `btoa`/`atob` (Node ≥16, Bun, browsers).
+ */
+/** Uint8Array → base64 string. */
+export declare function toBase64(bytes: Uint8Array): string;
+/** base64 string → Uint8Array. Throws on invalid input. */
+export declare function fromBase64(s: string): Uint8Array;
+//# sourceMappingURL=base64.d.ts.map

package/dist/evidence/base64.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"base64.d.ts","sourceRoot":"","sources":["../../src/evidence/base64.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,kCAAkC;AAClC,wBAAgB,QAAQ,CAAC,KAAK,EAAE,UAAU,GAAG,MAAM,CAMlD;AAED,2DAA2D;AAC3D,wBAAgB,UAAU,CAAC,CAAC,EAAE,MAAM,GAAG,UAAU,CAOhD"}

package/dist/evidence/delivery-key.d.ts

@@ -0,0 +1,82 @@
+/** Prefix pinning the registration message to `accord-delkey-v1` (ADR-0034). */
+export declare const DELKEY_PREFIX = "accord-delkey-v1";
+/** A juror-held X25519 Delivery Keypair. The secret never leaves origin storage. */
+export interface DeliveryKeypair {
+    /** 32-byte X25519 public key — what gets registered at the daemon. */
+    publicKey: Uint8Array;
+    /** 32-byte X25519 secret key. */
+    secretKey: Uint8Array;
+}
+/** Fresh Delivery Keypair (noble X25519; ADR-0034 custody model). */
+export declare function generateDeliveryKey(): DeliveryKeypair;
+/**
+ * The wallet-signed registration message:
+ * `accord-delkey-v1\nregistered_at:{ms}\nenc_pub:{base58}`.
+ * `registered_at` is Unix ms; the daemon rejects `registered_at <= stored`
+ * (kills replay-downgrade of an exfiltrated superseded key).
+ */
+export declare function buildDeliveryKeyMessage(encPub: Uint8Array, registeredAtMs: number): Uint8Array;
+/**
+ * Daemon-shared verification of a registration signature: Ed25519 over
+ * {@link buildDeliveryKeyMessage} by the juror's Solana key. Returns false for
+ * a bad signature OR malformed inputs (the daemon maps false → 400).
+ */
+export declare function verifyDeliveryKeyRegistration(jurorEd25519Pub: Uint8Array, encPub: Uint8Array, registeredAtMs: number, sig: Uint8Array): boolean;
+/** Wallet `signMessage` seam (app wires its wallet adapter; ADR-0015 split). */
+export type SignMessage = (message: Uint8Array) => Promise<Uint8Array>;
+export interface RegisterDeliveryKeyParams {
+    /** Daemon base URL (app-side `EVIDENCE_DAEMON_URL`). */
+    endpoint: string;
+    /** Juror's Solana address, base58. */
+    juror: string;
+    /** Delivery public key to register (32 bytes). */
+    encPub: Uint8Array;
+    /** Wallet signMessage — signs the registration message (Ed25519). */
+    signMessage: SignMessage;
+}
+/** Registration result echoed by the daemon on 201. */
+export interface RegisteredDeliveryKey {
+    encPub: Uint8Array;
+    registeredAt: number;
+}
+/**
+ * Register (or rotate) the juror's Delivery Key:
+ * `PUT /jurors/{juror}/delivery-key` {enc_pub, registered_at, sig} → 201.
+ * Throws on 400 (bad sig/body) and 409 (stale `registered_at` — retry later).
+ */
+export declare function registerDeliveryKey(params: RegisterDeliveryKeyParams): Promise<RegisteredDeliveryKey>;
+/**
+ * The currently registered Delivery Key:
+ * `GET /jurors/{juror}/delivery-key` → 200 {enc_pub, registered_at} | 404 → null.
+ */
+export declare function getRegisteredDeliveryKey(params: {
+    endpoint: string;
+    juror: string;
+}): Promise<RegisteredDeliveryKey | null>;
+/**
+ * Multi-origin self-heal (ADR-0034): compare the daemon's registered key with
+ * the local one; mismatch (or none registered — another origin rotated) ⇒
+ * re-register with one `signMessage`. Returns `"current"` when already bound,
+ * `"re-registered"` after a fresh PUT — then re-pull the delivery.
+ */
+export declare function ensureRegisteredDeliveryKey(params: RegisterDeliveryKeyParams): Promise<"current" | "re-registered">;
+/** Serialized form: `publicKey(32) ‖ secretKey(32)`. */
+export declare function encodeDeliveryKeypair(kp: DeliveryKeypair): Uint8Array;
+/** Inverse of {@link encodeDeliveryKeypair}; throws on a wrong length. */
+export declare function decodeDeliveryKeypair(bytes: Uint8Array): DeliveryKeypair;
+/**
+ * Origin-scoped storage port for the serialized keypair. Apps implement it
+ * over IndexedDB / localStorage / whatever the origin offers — the SDK owns
+ * only the codec, keeping DOM typing out of this module.
+ */
+export interface DeliveryKeyStorage {
+    get(): Promise<Uint8Array | null>;
+    set(serialized: Uint8Array): Promise<void>;
+}
+/**
+ * Load the origin's Delivery Key, generating + persisting one on first use.
+ * Generate-once semantics: every call on an empty store MUST return the same
+ * keypair — re-generating would orphan the daemon registration.
+ */
+export declare function loadOrCreateDeliveryKey(storage: DeliveryKeyStorage): Promise<DeliveryKeypair>;
+//# sourceMappingURL=delivery-key.d.ts.map

package/dist/evidence/delivery-key.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"delivery-key.d.ts","sourceRoot":"","sources":["../../src/evidence/delivery-key.ts"],"names":[],"mappings":"AAgCA,gFAAgF;AAChF,eAAO,MAAM,aAAa,qBAAqB,CAAC;AAEhD,oFAAoF;AACpF,MAAM,WAAW,eAAe;IAC9B,sEAAsE;IACtE,SAAS,EAAE,UAAU,CAAC;IACtB,iCAAiC;IACjC,SAAS,EAAE,UAAU,CAAC;CACvB;AAED,qEAAqE;AACrE,wBAAgB,mBAAmB,IAAI,eAAe,CAGrD;AAMD;;;;;GAKG;AACH,wBAAgB,uBAAuB,CACrC,MAAM,EAAE,UAAU,EAClB,cAAc,EAAE,MAAM,GACrB,UAAU,CAOZ;AAED;;;;GAIG;AACH,wBAAgB,6BAA6B,CAC3C,eAAe,EAAE,UAAU,EAC3B,MAAM,EAAE,UAAU,EAClB,cAAc,EAAE,MAAM,EACtB,GAAG,EAAE,UAAU,GACd,OAAO,CAOT;AAMD,gFAAgF;AAChF,MAAM,MAAM,WAAW,GAAG,CAAC,OAAO,EAAE,UAAU,KAAK,OAAO,CAAC,UAAU,CAAC,CAAC;AAEvE,MAAM,WAAW,yBAAyB;IACxC,wDAAwD;IACxD,QAAQ,EAAE,MAAM,CAAC;IACjB,sCAAsC;IACtC,KAAK,EAAE,MAAM,CAAC;IACd,kDAAkD;IAClD,MAAM,EAAE,UAAU,CAAC;IACnB,qEAAqE;IACrE,WAAW,EAAE,WAAW,CAAC;CAC1B;AAED,uDAAuD;AACvD,MAAM,WAAW,qBAAqB;IACpC,MAAM,EAAE,UAAU,CAAC;IACnB,YAAY,EAAE,MAAM,CAAC;CACtB;AAED;;;;GAIG;AACH,wBAAsB,mBAAmB,CACvC,MAAM,EAAE,yBAAyB,GAChC,OAAO,CAAC,qBAAqB,CAAC,CAkBhC;AAED;;;GAGG;AACH,wBAAsB,wBAAwB,CAAC,MAAM,EAAE;IACrD,QAAQ,EAAE,MAAM,CAAC;IACjB,KAAK,EAAE,MAAM,CAAC;CACf,GAAG,OAAO,CAAC,qBAAqB,GAAG,IAAI,CAAC,CASxC;AAED;;;;;GAKG;AACH,wBAAsB,2BAA2B,CAC/C,MAAM,EAAE,yBAAyB,GAChC,OAAO,CAAC,SAAS,GAAG,eAAe,CAAC,CAWtC;AAMD,wDAAwD;AACxD,wBAAgB,qBAAqB,CAAC,EAAE,EAAE,eAAe,GAAG,UAAU,CAOrE;AAED,0EAA0E;AAC1E,wBAAgB,qBAAqB,CAAC,KAAK,EAAE,UAAU,GAAG,eAAe,CAGxE;AAED;;;;GAIG;AACH,MAAM,WAAW,kBAAkB;IACjC,GAAG,IAAI,OAAO,CAAC,UAAU,GAAG,IAAI,CAAC,CAAC;IAClC,GAAG,CAAC,UAAU,EAAE,UAAU,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;CAC5C;AAED;;;;GAIG;AACH,wBAAsB,uBAAuB,CAC3C,OAAO,EAAE,kBAAkB,GAC1B,OAAO,CAAC,eAAe,CAAC,CAM1B"}

package/dist/evidence/ecies.d.ts

@@ -12,7 +12,7 @@ export interface IngestBundle {
     /** sha256(plaintext); matches the dispute's on-chain `evidence_hash`. */
     plaintext_hash: Uint8Array;
 }
-/** A bundle re-encrypted to a single drawn juror. */
+/** A bundle re-encrypted to a single drawn juror's Delivery Key (ADR-0034). */
 export interface JurorBundle {
     /** AES-GCM(k_out, plaintext) — nonce(12) prepended. */
     out: Uint8Array;
@@ -31,10 +31,10 @@ export declare function claimantEncrypt(plaintext: Uint8Array, operatorEd25519Pu
  * Callers MUST run {@link verifyIntegrity} next.
  */
 export declare function operatorDecrypt(bundle: IngestBundle, operatorEd25519SecretSeed: Uint8Array): Promise<Uint8Array>;
-/** Operator re-encrypts plaintext to a drawn juror's Ed25519 pubkey. */
-export declare function deliverToJuror(plaintext: Uint8Array, jurorEd25519Pub: Uint8Array): Promise<JurorBundle>;
-/** Juror-side decrypt of a delivered bundle → plaintext. */
-export declare function jurorDecrypt(delivered: JurorBundle, jurorEd25519SecretSeed: Uint8Array): Promise<Uint8Array>;
+/** Operator re-encrypts plaintext to the juror's registered Delivery Key (ADR-0034). */
+export declare function deliverToDeliveryKey(plaintext: Uint8Array, deliveryEncPub: Uint8Array): Promise<JurorBundle>;
+/** Juror-side decrypt of a delivered bundle with the Delivery Key secret (ADR-0034). */
+export declare function jurorDecryptDelivery(delivered: JurorBundle, deliverySecret: Uint8Array): Promise<Uint8Array>;
 /**
  * Mandatory integrity gate (SPEC §3, §Failure modes): `sha256(plaintext)` MUST
  * equal the dispute's on-chain `evidence_hash`. Both operands are public hashes,

package/dist/evidence/ecies.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"ecies.d.ts","sourceRoot":"","sources":["../../src/evidence/ecies.ts"],"names":[],"mappings":"AAgCA,kEAAkE;AAClE,eAAO,MAAM,WAAW,qBAAqB,CAAC;AAC9C,eAAO,MAAM,YAAY,sBAAsB,CAAC;AAIhD,uEAAuE;AACvE,MAAM,WAAW,YAAY;IAC3B,qDAAqD;IACrD,EAAE,EAAE,UAAU,CAAC;IACf,yDAAyD;IACzD,kBAAkB,EAAE,UAAU,CAAC;IAC/B,gDAAgD;IAChD,OAAO,EAAE,UAAU,CAAC;IACpB,yEAAyE;IACzE,cAAc,EAAE,UAAU,CAAC;CAC5B;AAED,qDAAqD;AACrD,MAAM,WAAW,WAAW;IAC1B,uDAAuD;IACvD,GAAG,EAAE,UAAU,CAAC;IAChB,2EAA2E;IAC3E,kBAAkB,EAAE,UAAU,CAAC;CAChC;AAED;;;;;GAKG;AACH,wBAAsB,eAAe,CACnC,SAAS,EAAE,UAAU,EACrB,kBAAkB,EAAE,UAAU,GAC7B,OAAO,CAAC,YAAY,CAAC,CAiBvB;AAED;;;GAGG;AACH,wBAAsB,eAAe,CACnC,MAAM,EAAE,YAAY,EACpB,yBAAyB,EAAE,UAAU,GACpC,OAAO,CAAC,UAAU,CAAC,CAMrB;AAED,wEAAwE;AACxE,wBAAsB,cAAc,CAClC,SAAS,EAAE,UAAU,EACrB,eAAe,EAAE,UAAU,GAC1B,OAAO,CAAC,WAAW,CAAC,CAOtB;AAED,4DAA4D;AAC5D,wBAAsB,YAAY,CAChC,SAAS,EAAE,WAAW,EACtB,sBAAsB,EAAE,UAAU,GACjC,OAAO,CAAC,UAAU,CAAC,CAKrB;AAED;;;;;GAKG;AACH,wBAAsB,eAAe,CACnC,SAAS,EAAE,UAAU,EACrB,YAAY,EAAE,UAAU,GACvB,OAAO,CAAC,IAAI,CAAC,CAUf"}
+{"version":3,"file":"ecies.d.ts","sourceRoot":"","sources":["../../src/evidence/ecies.ts"],"names":[],"mappings":"AAkCA,kEAAkE;AAClE,eAAO,MAAM,WAAW,qBAAqB,CAAC;AAC9C,eAAO,MAAM,YAAY,sBAAsB,CAAC;AAIhD,uEAAuE;AACvE,MAAM,WAAW,YAAY;IAC3B,qDAAqD;IACrD,EAAE,EAAE,UAAU,CAAC;IACf,yDAAyD;IACzD,kBAAkB,EAAE,UAAU,CAAC;IAC/B,gDAAgD;IAChD,OAAO,EAAE,UAAU,CAAC;IACpB,yEAAyE;IACzE,cAAc,EAAE,UAAU,CAAC;CAC5B;AACD,+EAA+E;AAC/E,MAAM,WAAW,WAAW;IAC1B,uDAAuD;IACvD,GAAG,EAAE,UAAU,CAAC;IAChB,2EAA2E;IAC3E,kBAAkB,EAAE,UAAU,CAAC;CAChC;AACD;;;;;GAKG;AACH,wBAAsB,eAAe,CACnC,SAAS,EAAE,UAAU,EACrB,kBAAkB,EAAE,UAAU,GAC7B,OAAO,CAAC,YAAY,CAAC,CAiBvB;AAED;;;GAGG;AACH,wBAAsB,eAAe,CACnC,MAAM,EAAE,YAAY,EACpB,yBAAyB,EAAE,UAAU,GACpC,OAAO,CAAC,UAAU,CAAC,CAMrB;AAED,wFAAwF;AACxF,wBAAsB,oBAAoB,CACxC,SAAS,EAAE,UAAU,EACrB,cAAc,EAAE,UAAU,GACzB,OAAO,CAAC,WAAW,CAAC,CAMtB;AAED,wFAAwF;AACxF,wBAAsB,oBAAoB,CACxC,SAAS,EAAE,WAAW,EACtB,cAAc,EAAE,UAAU,GACzB,OAAO,CAAC,UAAU,CAAC,CAIrB;AAED;;;;;GAKG;AACH,wBAAsB,eAAe,CACnC,SAAS,EAAE,UAAU,EACrB,YAAY,EAAE,UAAU,GACvB,OAAO,CAAC,IAAI,CAAC,CAUf"}

package/dist/evidence/fetch.d.ts

@@ -1,20 +1,44 @@
+import type { JurorBundle } from "./ecies.js";
+export interface FetchDeliveryParams {
+    /** Daemon base URL (app-side `EVIDENCE_DAEMON_URL`). */
+    endpoint: string;
+    /** Dispute address, base58. */
+    dispute: string;
+    /** Juror address, base58 — delivery targets their registered Delivery Key. */
+    juror: string;
+}
+/** One manifest entry's delivery status (v2 multifile derived index). */
+export interface DeliveredFile {
+    readonly path: string;
+    readonly status: "stored" | "pending" | "out_of_band";
+}
 /**
- * evidence/fetch.ts — framework-agnostic manifest fetch from the evidence daemon.
- *
- * GET {endpoint}/evidence/{subaccord}/{dispute}/{round}
- *
- * Returns the decrypted manifest (a YAML string for the `accord-evidence/v1`
- * format, or a parsed JSON object if the plaintext was JSON). `null` when no
- * bundle is stored for the round (404).
- *
- * This is the pure fetch — React apps wrap it in a `useQuery` hook
- * (see apps/app and apps/canon `useManifest.ts`).
+ * One round's delivered package: a {@link JurorBundle} plus the v2 derived
+ * per-entry index. `round` is the evidence round (or the synod party slot).
  */
+export interface DeliveredRound extends JurorBundle {
+    readonly round: number;
+    readonly files: readonly DeliveredFile[];
+    /** True iff every tracked entry is stored (always true for manifest-only). */
+    readonly complete: boolean;
+}
+/**
+ * Pull the juror-bound delivery: one re-encrypted package per non-zero
+ * evidence hash. Base64 wire fields are decoded to bytes so each round feeds
+ * straight into `jurorDecryptDelivery`. `null` when nothing is deliverable
+ * (404 — not drawn, no bundle, or no Delivery Key registered).
+ */
+export declare function fetchDelivery(params: FetchDeliveryParams): Promise<DeliveredRound[] | null>;
 export interface FetchManifestParams {
     endpoint: string;
     subaccord: string;
     dispute: string;
     round: number;
 }
+/**
+ * Fetch the decrypted manifest (a YAML string for the `accord-evidence/v1`
+ * format, or a parsed JSON object if the plaintext was JSON). `null` when no
+ * bundle is stored for the round (404).
+ */
 export declare function fetchManifest(params: FetchManifestParams): Promise<unknown>;
 //# sourceMappingURL=fetch.d.ts.map

package/dist/evidence/fetch.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"fetch.d.ts","sourceRoot":"","sources":["../../src/evidence/fetch.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AACH,MAAM,WAAW,mBAAmB;IAClC,QAAQ,EAAE,MAAM,CAAC;IACjB,SAAS,EAAE,MAAM,CAAC;IAClB,OAAO,EAAE,MAAM,CAAC;IAChB,KAAK,EAAE,MAAM,CAAC;CACf;AAED,wBAAsB,aAAa,CACjC,MAAM,EAAE,mBAAmB,GAC1B,OAAO,CAAC,OAAO,CAAC,CAQlB"}
+{"version":3,"file":"fetch.d.ts","sourceRoot":"","sources":["../../src/evidence/fetch.ts"],"names":[],"mappings":"AAWA,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,YAAY,CAAC;AAM9C,MAAM,WAAW,mBAAmB;IAClC,wDAAwD;IACxD,QAAQ,EAAE,MAAM,CAAC;IACjB,+BAA+B;IAC/B,OAAO,EAAE,MAAM,CAAC;IAChB,8EAA8E;IAC9E,KAAK,EAAE,MAAM,CAAC;CACf;AAED,yEAAyE;AACzE,MAAM,WAAW,aAAa;IAC5B,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,MAAM,EAAE,QAAQ,GAAG,SAAS,GAAG,aAAa,CAAC;CACvD;AAED;;;GAGG;AACH,MAAM,WAAW,cAAe,SAAQ,WAAW;IACjD,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,KAAK,EAAE,SAAS,aAAa,EAAE,CAAC;IACzC,8EAA8E;IAC9E,QAAQ,CAAC,QAAQ,EAAE,OAAO,CAAC;CAC5B;AAqBD;;;;;GAKG;AACH,wBAAsB,aAAa,CACjC,MAAM,EAAE,mBAAmB,GAC1B,OAAO,CAAC,cAAc,EAAE,GAAG,IAAI,CAAC,CAgBlC;AAMD,MAAM,WAAW,mBAAmB;IAClC,QAAQ,EAAE,MAAM,CAAC;IACjB,SAAS,EAAE,MAAM,CAAC;IAClB,OAAO,EAAE,MAAM,CAAC;IAChB,KAAK,EAAE,MAAM,CAAC;CACf;AAED;;;;GAIG;AACH,wBAAsB,aAAa,CACjC,MAAM,EAAE,mBAAmB,GAC1B,OAAO,CAAC,OAAO,CAAC,CAQlB"}

package/dist/evidence/index.d.ts

@@ -23,5 +23,6 @@ export * from "./manifest.js";
 export * from "./options.js";
 export * from "./parse.js";
 export * from "./publish.js";
+export * from "./delivery-key.js";
 export * from "./fetch.js";
 //# sourceMappingURL=index.d.ts.map

package/dist/evidence/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/evidence/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;GAiBG;AACH,cAAc,aAAa,CAAC;AAC5B,cAAc,WAAW,CAAC;AAC1B,cAAc,YAAY,CAAC;AAC3B,cAAc,eAAe,CAAC;AAC9B,cAAc,cAAc,CAAC;AAC7B,cAAc,YAAY,CAAC;AAC3B,cAAc,cAAc,CAAC;AAC7B,cAAc,YAAY,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/evidence/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;GAiBG;AACH,cAAc,aAAa,CAAC;AAC5B,cAAc,WAAW,CAAC;AAC1B,cAAc,YAAY,CAAC;AAC3B,cAAc,eAAe,CAAC;AAC9B,cAAc,cAAc,CAAC;AAC7B,cAAc,YAAY,CAAC;AAC3B,cAAc,cAAc,CAAC;AAC7B,cAAc,mBAAmB,CAAC;AAClC,cAAc,YAAY,CAAC"}

package/dist/evidence/index.js

@@ -116,22 +116,20 @@ async function operatorDecrypt(bundle, operatorEd25519SecretSeed) {
   return aesGcmDecrypt(dek, bundle.ct);
 }
 __name(operatorDecrypt, "operatorDecrypt");
-async function deliverToJuror(plaintext, jurorEd25519Pub) {
+async function deliverToDeliveryKey(plaintext, deliveryEncPub) {
   const ephem = newX25519KeyPair();
-  const jurorX25519Pub = ed25519ToX25519PublicKey(jurorEd25519Pub);
-  const shared = x25519SharedSecret(ephem.secret, jurorX25519Pub);
+  const shared = x25519SharedSecret(ephem.secret, deliveryEncPub);
   const kOut = await hkdfSha256(shared, te.encode(DELIVER_INFO));
   const out = await aesGcmEncrypt(kOut, plaintext);
   return { out, operator_ephem_pub: ephem.publicKey };
 }
-__name(deliverToJuror, "deliverToJuror");
-async function jurorDecrypt(delivered, jurorEd25519SecretSeed) {
-  const jurorX25519Sk = ed25519SecretToX25519(jurorEd25519SecretSeed);
-  const shared = x25519SharedSecret(jurorX25519Sk, delivered.operator_ephem_pub);
+__name(deliverToDeliveryKey, "deliverToDeliveryKey");
+async function jurorDecryptDelivery(delivered, deliverySecret) {
+  const shared = x25519SharedSecret(deliverySecret, delivered.operator_ephem_pub);
   const kOut = await hkdfSha256(shared, te.encode(DELIVER_INFO));
   return aesGcmDecrypt(kOut, delivered.out);
 }
-__name(jurorDecrypt, "jurorDecrypt");
+__name(jurorDecryptDelivery, "jurorDecryptDelivery");
 async function verifyIntegrity(plaintext, evidenceHash) {
   const h = await sha256(plaintext);
   if (h.length !== evidenceHash.length) {
@@ -227,6 +225,12 @@ async function verifyOptionHashes(salt, labels, hashes) {
 __name(verifyOptionHashes, "verifyOptionHashes");
 
 // src/evidence/parse.ts
+function scalar(item, key) {
+  const quoted = item.match(new RegExp(`${key}:\\s*"([^"]*)"`))?.[1];
+  if (quoted !== void 0) return quoted;
+  return item.match(new RegExp(`${key}:\\s*([^,}]+)`))?.[1]?.trim() ?? "";
+}
+__name(scalar, "scalar");
 function parseManifest(text) {
   const lines = text.split("\n");
   const getField = /* @__PURE__ */ __name((key) => lines.find((l) => l.startsWith(`${key}: `))?.slice(`${key}: `.length).replace(/^"(.*)"$/, "$1"), "getField");
@@ -249,14 +253,22 @@ function parseManifest(text) {
       const label = item.match(/label:\s*"([^"]*)"/)?.[1] ?? "";
       options.push({ index, label });
     } else if (section === "entries") {
-      const path = item.match(/path:\s*"([^"]*)"/)?.[1] ?? "";
-      const sha2562 = item.match(/sha256:\s*"([^"]*)"/)?.[1] ?? "";
+      const path = scalar(item, "path");
+      const sha2562 = scalar(item, "sha256");
       entries.push({ path, sha256: sha2562 });
     }
   }
   const descriptionRaw = getField("description");
-  const description = descriptionRaw ? JSON.parse(`"${descriptionRaw}"`) : "";
+  let description = descriptionRaw ?? "";
+  if (descriptionRaw) {
+    try {
+      description = JSON.parse(`"${descriptionRaw}"`);
+    } catch {
+      description = descriptionRaw;
+    }
+  }
   return {
+    schema: getField("schema") ?? "",
     title: getField("title") ?? "Untitled dispute",
     description,
     filedAt: getField("filed_at") ?? "\u2014",
@@ -289,7 +301,7 @@ function optionLabels(manifest) {
 }
 __name(optionLabels, "optionLabels");
 
-// src/evidence/publish.ts
+// src/evidence/base64.ts
 function toBase64(bytes) {
   let binary = "";
   for (let i = 0; i < bytes.length; i++) {
@@ -298,6 +310,17 @@ function toBase64(bytes) {
   return btoa(binary);
 }
 __name(toBase64, "toBase64");
+function fromBase64(s) {
+  const binary = atob(s);
+  const bytes = new Uint8Array(binary.length);
+  for (let i = 0; i < binary.length; i++) {
+    bytes[i] = binary.charCodeAt(i);
+  }
+  return bytes;
+}
+__name(fromBase64, "fromBase64");
+
+// src/evidence/publish.ts
 function equalBytes2(a, b) {
   if (a.length !== b.length) return false;
   return a.every((v, i) => v === b[i]);
@@ -349,7 +372,130 @@ async function verifyManifestHash(manifest, evidenceHash) {
 }
 __name(verifyManifestHash, "verifyManifestHash");
 
+// src/evidence/delivery-key.ts
+import { ed25519 as ed255192 } from "@noble/curves/ed25519";
+import { getBase58Decoder } from "@solana/kit";
+var te3 = new TextEncoder();
+var DELKEY_PREFIX = "accord-delkey-v1";
+function generateDeliveryKey() {
+  const pair = newX25519KeyPair();
+  return { publicKey: pair.publicKey, secretKey: pair.secret };
+}
+__name(generateDeliveryKey, "generateDeliveryKey");
+function buildDeliveryKeyMessage(encPub, registeredAtMs) {
+  requireLen2(encPub, 32, "delivery enc_pub");
+  if (!Number.isSafeInteger(registeredAtMs) || registeredAtMs < 0) {
+    throw new Error(`registered_at must be a non-negative integer (ms), got ${registeredAtMs}`);
+  }
+  const b58 = getBase58Decoder().decode(encPub);
+  return te3.encode(`${DELKEY_PREFIX}
+registered_at:${registeredAtMs}
+enc_pub:${b58}`);
+}
+__name(buildDeliveryKeyMessage, "buildDeliveryKeyMessage");
+function verifyDeliveryKeyRegistration(jurorEd25519Pub, encPub, registeredAtMs, sig) {
+  try {
+    const msg = buildDeliveryKeyMessage(encPub, registeredAtMs);
+    return ed255192.verify(sig, msg, jurorEd25519Pub);
+  } catch {
+    return false;
+  }
+}
+__name(verifyDeliveryKeyRegistration, "verifyDeliveryKeyRegistration");
+async function registerDeliveryKey(params) {
+  const { endpoint, juror, encPub, signMessage } = params;
+  const registeredAt = Date.now();
+  const sig = await signMessage(buildDeliveryKeyMessage(encPub, registeredAt));
+  const res = await fetch(`${endpoint}/jurors/${juror}/delivery-key`, {
+    method: "PUT",
+    headers: { "content-type": "application/json" },
+    body: JSON.stringify({
+      enc_pub: toBase64(encPub),
+      registered_at: registeredAt,
+      sig: toBase64(sig)
+    })
+  });
+  if (res.status !== 201) {
+    const body = await res.text().catch(() => "");
+    throw new Error(`delivery-key registration failed: ${res.status} ${body}`);
+  }
+  return { encPub, registeredAt };
+}
+__name(registerDeliveryKey, "registerDeliveryKey");
+async function getRegisteredDeliveryKey(params) {
+  const res = await fetch(`${params.endpoint}/jurors/${params.juror}/delivery-key`);
+  if (res.status === 404) return null;
+  if (!res.ok) throw new Error(`evidence daemon returned ${res.status}`);
+  const body = await res.json();
+  if (typeof body.enc_pub !== "string" || typeof body.registered_at !== "number") {
+    throw new Error("delivery-key response malformed");
+  }
+  return { encPub: fromBase64(body.enc_pub), registeredAt: body.registered_at };
+}
+__name(getRegisteredDeliveryKey, "getRegisteredDeliveryKey");
+async function ensureRegisteredDeliveryKey(params) {
+  const current = await getRegisteredDeliveryKey(params);
+  if (current !== null && current.encPub.length === params.encPub.length && current.encPub.every((b, i) => b === params.encPub[i])) {
+    return "current";
+  }
+  await registerDeliveryKey(params);
+  return "re-registered";
+}
+__name(ensureRegisteredDeliveryKey, "ensureRegisteredDeliveryKey");
+function encodeDeliveryKeypair(kp) {
+  requireLen2(kp.publicKey, 32, "delivery public key");
+  requireLen2(kp.secretKey, 32, "delivery secret key");
+  const out = new Uint8Array(64);
+  out.set(kp.publicKey, 0);
+  out.set(kp.secretKey, 32);
+  return out;
+}
+__name(encodeDeliveryKeypair, "encodeDeliveryKeypair");
+function decodeDeliveryKeypair(bytes) {
+  requireLen2(bytes, 64, "serialized delivery keypair");
+  return { publicKey: bytes.slice(0, 32), secretKey: bytes.slice(32) };
+}
+__name(decodeDeliveryKeypair, "decodeDeliveryKeypair");
+async function loadOrCreateDeliveryKey(storage) {
+  const stored = await storage.get();
+  if (stored !== null) return decodeDeliveryKeypair(stored);
+  const kp = generateDeliveryKey();
+  await storage.set(encodeDeliveryKeypair(kp));
+  return kp;
+}
+__name(loadOrCreateDeliveryKey, "loadOrCreateDeliveryKey");
+function requireLen2(b, n, what) {
+  if (b.length !== n) {
+    throw new Error(`${what} must be ${n} bytes, got ${b.length}`);
+  }
+}
+__name(requireLen2, "requireLen");
+
 // src/evidence/fetch.ts
+function isWireRound(v) {
+  if (v === null || typeof v !== "object") return false;
+  const r = v;
+  return typeof r["round"] === "number" && typeof r["out"] === "string" && typeof r["operator_ephem_pub"] === "string" && (r["files"] === void 0 || Array.isArray(r["files"])) && (r["complete"] === void 0 || typeof r["complete"] === "boolean");
+}
+__name(isWireRound, "isWireRound");
+async function fetchDelivery(params) {
+  const { endpoint, dispute, juror } = params;
+  const res = await fetch(`${endpoint}/evidence/${dispute}/for/${juror}`);
+  if (res.status === 404) return null;
+  if (!res.ok) throw new Error(`evidence daemon returned ${res.status}`);
+  const body = await res.json();
+  if (!Array.isArray(body.rounds) || !body.rounds.every(isWireRound)) {
+    throw new Error("delivery response malformed");
+  }
+  return body.rounds.map((r) => ({
+    round: r.round,
+    out: fromBase64(r.out),
+    operator_ephem_pub: fromBase64(r.operator_ephem_pub),
+    files: r.files ?? [],
+    complete: r.complete ?? true
+  }));
+}
+__name(fetchDelivery, "fetchDelivery");
 async function fetchManifest(params) {
   const { endpoint, subaccord, dispute, round } = params;
   const res = await fetch(
@@ -362,28 +508,39 @@ async function fetchManifest(params) {
 __name(fetchManifest, "fetchManifest");
 export {
   DELIVER_INFO,
+  DELKEY_PREFIX,
   INGEST_INFO,
   SHA256_ZERO,
   aesGcmDecrypt,
   aesGcmEncrypt,
+  buildDeliveryKeyMessage,
   buildManifest,
   claimantEncrypt,
-  deliverToJuror,
+  decodeDeliveryKeypair,
+  deliverToDeliveryKey,
   deriveOptionHashes,
   ed25519PublicKeyFromSeed,
   ed25519SecretToX25519,
   ed25519ToX25519PublicKey,
+  encodeDeliveryKeypair,
+  ensureRegisteredDeliveryKey,
+  fetchDelivery,
   fetchManifest,
+  generateDeliveryKey,
   generateSalt,
+  getRegisteredDeliveryKey,
   hkdfSha256,
-  jurorDecrypt,
+  jurorDecryptDelivery,
+  loadOrCreateDeliveryKey,
   newX25519KeyPair,
   operatorDecrypt,
   optionLabels,
   parseManifest,
   publishEvidence,
   publishSynodEvidence,
+  registerDeliveryKey,
   sha256,
+  verifyDeliveryKeyRegistration,
   verifyIntegrity,
   verifyManifestHash,
   verifyOptionHashes,