crypto-aio 0.0.3 → 0.1.0

package/dist/core/signing/local.js

@@ -0,0 +1,190 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.LocalSigner = void 0;
+exports.curveOfScheme = curveOfScheme;
+exports.tweakPrivateKey = tweakPrivateKey;
+exports.localSigner = localSigner;
+const modular_1 = require("@noble/curves/abstract/modular");
+const utils_1 = require("@noble/curves/abstract/utils");
+const ed25519_1 = require("@noble/curves/ed25519");
+const secp256k1_1 = require("@noble/curves/secp256k1");
+const error_1 = require("../errors/error");
+const secret_1 = require("../secret/secret");
+const bytes_1 = require("../util/bytes");
+const hd_1 = require("./hd");
+const SCHEME_CURVE = {
+    'secp256k1-ecdsa': 'secp256k1',
+    'secp256k1-schnorr': 'secp256k1',
+    ed25519: 'ed25519',
+};
+const CURVE_SCHEMES = {
+    secp256k1: ['secp256k1-ecdsa', 'secp256k1-schnorr'],
+    ed25519: ['ed25519'],
+};
+function curveOfScheme(scheme) {
+    return SCHEME_CURVE[scheme];
+}
+/** In-process signer. Keys live only in private fields and are never serialized. */
+class LocalSigner {
+    id;
+    schemes;
+    #keys;
+    #exportable;
+    constructor(id, curves, keys, exportable) {
+        this.id = id;
+        this.schemes = curves.flatMap((curve) => CURVE_SCHEMES[curve]);
+        this.#keys = keys;
+        this.#exportable = exportable;
+    }
+    async getPublicKey(scheme, keyRef) {
+        return publicKeyFor(scheme, this.#key(scheme, keyRef));
+    }
+    async sign(requests, _ctx) {
+        const signatures = requests.map((request) => signOne(request, this.#key(request.scheme, request.keyRef)));
+        return { status: 'signed', signatures };
+    }
+    async exportKey(scheme, keyRef) {
+        if (!this.#exportable) {
+            throw new error_1.SigningError('KEY_NOT_EXPORTABLE', `signer '${this.id}' was not created as exportable`);
+        }
+        return (0, secret_1.secret)(Uint8Array.from(this.#key(scheme, keyRef)));
+    }
+    toJSON() {
+        return { id: this.id, schemes: this.schemes };
+    }
+    #key(scheme, keyRef) {
+        const curve = SCHEME_CURVE[scheme];
+        if (!curve || !this.schemes.includes(scheme)) {
+            throw new error_1.SigningError('SIGNER_UNAVAILABLE', `signer '${this.id}' does not support scheme '${scheme}'`);
+        }
+        return this.#keys(curve, keyRef);
+    }
+}
+exports.LocalSigner = LocalSigner;
+function publicKeyFor(scheme, key) {
+    if (scheme === 'secp256k1-ecdsa')
+        return secp256k1_1.secp256k1.getPublicKey(key, true);
+    if (scheme === 'secp256k1-schnorr')
+        return secp256k1_1.schnorr.getPublicKey(key);
+    return ed25519_1.ed25519.getPublicKey(key);
+}
+function assertOwnKey(request, publicKey) {
+    if (!(0, bytes_1.equalBytes)(request.publicKey, publicKey)) {
+        throw new error_1.SigningError('SIGNING_FAILED', `request '${request.id}': public key does not belong to this signer`);
+    }
+}
+function assertDigest(request) {
+    if (request.payload.length !== 32) {
+        throw new error_1.SigningError('SIGNING_FAILED', `request '${request.id}': ${request.scheme} signs 32-byte digests`);
+    }
+}
+function signOne(request, key) {
+    if (request.scheme === 'secp256k1-ecdsa') {
+        assertOwnKey(request, secp256k1_1.secp256k1.getPublicKey(key, true));
+        assertDigest(request);
+        const signature = secp256k1_1.secp256k1.sign(request.payload, key, { lowS: true });
+        return {
+            requestId: request.id,
+            bytes: signature.toCompactRawBytes(),
+            recovery: signature.recovery,
+        };
+    }
+    if (request.scheme === 'secp256k1-schnorr') {
+        const signingKey = request.params?.tweak
+            ? tweakPrivateKey(key, request.params.tweak)
+            : key;
+        assertOwnKey(request, secp256k1_1.schnorr.getPublicKey(signingKey));
+        assertDigest(request);
+        return { requestId: request.id, bytes: secp256k1_1.schnorr.sign(request.payload, signingKey) };
+    }
+    assertOwnKey(request, ed25519_1.ed25519.getPublicKey(key));
+    return { requestId: request.id, bytes: ed25519_1.ed25519.sign(request.payload, key) };
+}
+/** BIP341 key-path tweak: negate for odd Y, then add the tweak modulo n. */
+function tweakPrivateKey(key, tweak) {
+    const n = secp256k1_1.secp256k1.CURVE.n;
+    const t = (0, utils_1.bytesToNumberBE)(tweak);
+    if (tweak.length !== 32 || t >= n)
+        throw new error_1.SigningError('SIGNING_FAILED', 'invalid taproot tweak');
+    let d = (0, utils_1.bytesToNumberBE)(key);
+    if (!secp256k1_1.secp256k1.ProjectivePoint.fromPrivateKey(key).hasEvenY())
+        d = n - d;
+    const tweaked = (0, modular_1.mod)(d + t, n);
+    if (tweaked === 0n)
+        throw new error_1.SigningError('SIGNING_FAILED', 'tweaked key is zero');
+    return (0, utils_1.numberToBytesBE)(tweaked, 32);
+}
+function parseKey(input, curve) {
+    const raw = (0, secret_1.reveal)(input);
+    let bytes;
+    try {
+        bytes = typeof raw === 'string' ? (0, bytes_1.fromHex)(raw.trim()) : Uint8Array.from(raw);
+    }
+    catch {
+        throw new error_1.ConfigError('CONFIG_INVALID', `${curve} private key is not valid hex`);
+    }
+    if (bytes.length !== 32)
+        throw new error_1.ConfigError('CONFIG_INVALID', `${curve} private key must be 32 bytes`);
+    if (curve === 'secp256k1' && !secp256k1_1.secp256k1.utils.isValidPrivateKey(bytes)) {
+        throw new error_1.ConfigError('CONFIG_INVALID', 'secp256k1 private key is out of range');
+    }
+    return bytes;
+}
+function fromKeys(id, keys, exportable) {
+    const curves = ['secp256k1', 'ed25519'].filter((curve) => keys[curve]);
+    if (curves.length === 0)
+        throw new error_1.ConfigError('CONFIG_INVALID', 'localSigner needs at least one key');
+    return new LocalSigner(id, curves, (curve) => {
+        const key = keys[curve];
+        if (!key)
+            throw new error_1.SigningError('SIGNER_UNAVAILABLE', `signer '${id}' holds no ${curve} key`);
+        return key;
+    }, exportable);
+}
+function localSigner(options) {
+    const keys = {};
+    if (options.secp256k1)
+        keys.secp256k1 = parseKey(options.secp256k1, 'secp256k1');
+    if (options.ed25519)
+        keys.ed25519 = parseKey(options.ed25519, 'ed25519');
+    return fromKeys(options.id ?? 'local', keys, options.exportable ?? false);
+}
+localSigner.generate = function generate(options) {
+    const keys = {};
+    const publicKeys = {};
+    for (const curve of options.curves) {
+        if (curve === 'secp256k1') {
+            keys.secp256k1 = secp256k1_1.secp256k1.utils.randomPrivateKey();
+            publicKeys.secp256k1 = secp256k1_1.secp256k1.getPublicKey(keys.secp256k1, true);
+        }
+        else {
+            keys.ed25519 = ed25519_1.ed25519.utils.randomPrivateKey();
+            publicKeys.ed25519 = ed25519_1.ed25519.getPublicKey(keys.ed25519);
+        }
+    }
+    return {
+        signer: fromKeys(options.id ?? 'local', keys, options.exportable ?? false),
+        publicKeys,
+    };
+};
+/** BIP39 mnemonic signer; keys are derived per request from `keyRef.path` and cached in memory. */
+localSigner.fromMnemonic = function fromMnemonic(phrase, options = {}) {
+    const seed = (0, hd_1.mnemonicToSeed)((0, secret_1.reveal)(phrase), options.passphrase ? (0, secret_1.reveal)(options.passphrase) : '');
+    const cache = new Map();
+    const source = (curve, keyRef) => {
+        const path = keyRef?.path;
+        if (!path) {
+            throw new error_1.ConfigError('CONFIG_INVALID', 'mnemonic signers need keyRef.path (set keyRef on the wallet)');
+        }
+        const cacheKey = `${curve}:${path}`;
+        let key = cache.get(cacheKey);
+        if (!key) {
+            key =
+                curve === 'secp256k1' ? (0, hd_1.deriveSecp256k1)(seed, path) : (0, hd_1.deriveEd25519)(seed, path);
+            cache.set(cacheKey, key);
+        }
+        return key;
+    };
+    return new LocalSigner(options.id ?? 'mnemonic', options.curves ?? ['secp256k1', 'ed25519'], source, options.exportable ?? false);
+};
+//# sourceMappingURL=local.js.map

package/dist/core/signing/local.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"local.js","sourceRoot":"","sources":["../../../src/core/signing/local.ts"],"names":[],"mappings":";;;AA8BA,sCAEC;AA6GD,0CAUC;AA6DD,kCAKC;AAzND,4DAAqD;AACrD,wDAAgF;AAChF,mDAAgD;AAChD,uDAA6D;AAC7D,2CAA4D;AAC5D,6CAA+D;AAC/D,yCAAoD;AACpD,6BAAsE;AAatE,MAAM,YAAY,GAAoC;IACpD,iBAAiB,EAAE,WAAW;IAC9B,mBAAmB,EAAE,WAAW;IAChC,OAAO,EAAE,SAAS;CACnB,CAAC;AACF,MAAM,aAAa,GAA+C;IAChE,SAAS,EAAE,CAAC,iBAAiB,EAAE,mBAAmB,CAAC;IACnD,OAAO,EAAE,CAAC,SAAS,CAAC;CACrB,CAAC;AAEF,SAAgB,aAAa,CAAC,MAAc;IAC1C,OAAO,YAAY,CAAC,MAAM,CAAC,CAAC;AAC9B,CAAC;AAED,oFAAoF;AACpF,MAAa,WAAW;IACb,EAAE,CAAS;IACX,OAAO,CAAoB;IAC3B,KAAK,CAAY;IACjB,WAAW,CAAU;IAE9B,YACE,EAAU,EACV,MAAwB,EACxB,IAAe,EACf,UAAmB;QAEnB,IAAI,CAAC,EAAE,GAAG,EAAE,CAAC;QACb,IAAI,CAAC,OAAO,GAAG,MAAM,CAAC,OAAO,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,aAAa,CAAC,KAAK,CAAC,CAAC,CAAC;QAC/D,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC;QAClB,IAAI,CAAC,WAAW,GAAG,UAAU,CAAC;IAChC,CAAC;IAED,KAAK,CAAC,YAAY,CAAC,MAAc,EAAE,MAAe;QAChD,OAAO,YAAY,CAAC,MAAM,EAAE,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC;IACzD,CAAC;IAED,KAAK,CAAC,IAAI,CACR,QAAmC,EACnC,IAAoB;QAEpB,MAAM,UAAU,GAAsB,QAAQ,CAAC,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE,CAC7D,OAAO,CAAC,OAAO,EAAE,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,OAAO,CAAC,MAAM,CAAC,CAAC,CAC5D,CAAC;QACF,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,UAAU,EAAE,CAAC;IAC1C,CAAC;IAED,KAAK,CAAC,SAAS,CAAC,MAAc,EAAE,MAAe;QAC7C,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC;YACtB,MAAM,IAAI,oBAAY,CACpB,oBAAoB,EACpB,WAAW,IAAI,CAAC,EAAE,iCAAiC,CACpD,CAAC;QACJ,CAAC;QACD,OAAO,IAAA,eAAM,EAAC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC;IAC5D,CAAC;IAED,MAAM;QACJ,OAAO,EAAE,EAAE,EAAE,IAAI,CAAC,EAAE,EAAE,OAAO,EAAE,IAAI,CAAC,OAAO,EAAE,CAAC;IAChD,CAAC;IAED,IAAI,CAAC,MAAc,EAAE,MAA0B;QAC7C,MAAM,KAAK,GAAG,YAAY,CAAC,MAAM,CAAC,CAAC;QACnC,IAAI,CAAC,KAAK,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC;YAC7C,MAAM,IAAI,oBAAY,CACpB,oBAAoB,EACpB,WAAW,IAAI,CAAC,EAAE,8BAA8B,MAAM,GAAG,CAC1D,CAAC;QACJ,CAAC;QACD,OAAO,IAAI,CAAC,KAAK,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC;IACnC,CAAC;CACF;AAxDD,kCAwDC;AAED,SAAS,YAAY,CAAC,MAAc,EAAE,GAAe;IACnD,IAAI,MAAM,KAAK,iBAAiB;QAAE,OAAO,qBAAS,CAAC,YAAY,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;IAC3E,IAAI,MAAM,KAAK,mBAAmB;QAAE,OAAO,mBAAO,CAAC,YAAY,CAAC,GAAG,CAAC,CAAC;IACrE,OAAO,iBAAO,CAAC,YAAY,CAAC,GAAG,CAAC,CAAC;AACnC,CAAC;AAED,SAAS,YAAY,CAAC,OAAuB,EAAE,SAAqB;IAClE,IAAI,CAAC,IAAA,kBAAU,EAAC,OAAO,CAAC,SAAS,EAAE,SAAS,CAAC,EAAE,CAAC;QAC9C,MAAM,IAAI,oBAAY,CACpB,gBAAgB,EAChB,YAAY,OAAO,CAAC,EAAE,8CAA8C,CACrE,CAAC;IACJ,CAAC;AACH,CAAC;AAED,SAAS,YAAY,CAAC,OAAuB;IAC3C,IAAI,OAAO,CAAC,OAAO,CAAC,MAAM,KAAK,EAAE,EAAE,CAAC;QAClC,MAAM,IAAI,oBAAY,CACpB,gBAAgB,EAChB,YAAY,OAAO,CAAC,EAAE,MAAM,OAAO,CAAC,MAAM,wBAAwB,CACnE,CAAC;IACJ,CAAC;AACH,CAAC;AAED,SAAS,OAAO,CAAC,OAAuB,EAAE,GAAe;IACvD,IAAI,OAAO,CAAC,MAAM,KAAK,iBAAiB,EAAE,CAAC;QACzC,YAAY,CAAC,OAAO,EAAE,qBAAS,CAAC,YAAY,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC,CAAC;QACzD,YAAY,CAAC,OAAO,CAAC,CAAC;QACtB,MAAM,SAAS,GAAG,qBAAS,CAAC,IAAI,CAAC,OAAO,CAAC,OAAO,EAAE,GAAG,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;QACvE,OAAO;YACL,SAAS,EAAE,OAAO,CAAC,EAAE;YACrB,KAAK,EAAE,SAAS,CAAC,iBAAiB,EAAE;YACpC,QAAQ,EAAE,SAAS,CAAC,QAAQ;SAC7B,CAAC;IACJ,CAAC;IACD,IAAI,OAAO,CAAC,MAAM,KAAK,mBAAmB,EAAE,CAAC;QAC3C,MAAM,UAAU,GAAG,OAAO,CAAC,MAAM,EAAE,KAAK;YACtC,CAAC,CAAC,eAAe,CAAC,GAAG,EAAE,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC;YAC5C,CAAC,CAAC,GAAG,CAAC;QACR,YAAY,CAAC,OAAO,EAAE,mBAAO,CAAC,YAAY,CAAC,UAAU,CAAC,CAAC,CAAC;QACxD,YAAY,CAAC,OAAO,CAAC,CAAC;QACtB,OAAO,EAAE,SAAS,EAAE,OAAO,CAAC,EAAE,EAAE,KAAK,EAAE,mBAAO,CAAC,IAAI,CAAC,OAAO,CAAC,OAAO,EAAE,UAAU,CAAC,EAAE,CAAC;IACrF,CAAC;IACD,YAAY,CAAC,OAAO,EAAE,iBAAO,CAAC,YAAY,CAAC,GAAG,CAAC,CAAC,CAAC;IACjD,OAAO,EAAE,SAAS,EAAE,OAAO,CAAC,EAAE,EAAE,KAAK,EAAE,iBAAO,CAAC,IAAI,CAAC,OAAO,CAAC,OAAO,EAAE,GAAG,CAAC,EAAE,CAAC;AAC9E,CAAC;AAED,4EAA4E;AAC5E,SAAgB,eAAe,CAAC,GAAe,EAAE,KAAiB;IAChE,MAAM,CAAC,GAAG,qBAAS,CAAC,KAAK,CAAC,CAAC,CAAC;IAC5B,MAAM,CAAC,GAAG,IAAA,uBAAe,EAAC,KAAK,CAAC,CAAC;IACjC,IAAI,KAAK,CAAC,MAAM,KAAK,EAAE,IAAI,CAAC,IAAI,CAAC;QAC/B,MAAM,IAAI,oBAAY,CAAC,gBAAgB,EAAE,uBAAuB,CAAC,CAAC;IACpE,IAAI,CAAC,GAAG,IAAA,uBAAe,EAAC,GAAG,CAAC,CAAC;IAC7B,IAAI,CAAC,qBAAS,CAAC,eAAe,CAAC,cAAc,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE;QAAE,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;IACzE,MAAM,OAAO,GAAG,IAAA,aAAG,EAAC,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC;IAC9B,IAAI,OAAO,KAAK,EAAE;QAAE,MAAM,IAAI,oBAAY,CAAC,gBAAgB,EAAE,qBAAqB,CAAC,CAAC;IACpF,OAAO,IAAA,uBAAe,EAAC,OAAO,EAAE,EAAE,CAAC,CAAC;AACtC,CAAC;AAED,SAAS,QAAQ,CAAC,KAAkC,EAAE,KAAY;IAChE,MAAM,GAAG,GAAG,IAAA,eAAM,EAAC,KAAK,CAAC,CAAC;IAC1B,IAAI,KAAiB,CAAC;IACtB,IAAI,CAAC;QACH,KAAK,GAAG,OAAO,GAAG,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAA,eAAO,EAAC,GAAG,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IAC/E,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,IAAI,mBAAW,CAAC,gBAAgB,EAAE,GAAG,KAAK,+BAA+B,CAAC,CAAC;IACnF,CAAC;IACD,IAAI,KAAK,CAAC,MAAM,KAAK,EAAE;QACrB,MAAM,IAAI,mBAAW,CAAC,gBAAgB,EAAE,GAAG,KAAK,+BAA+B,CAAC,CAAC;IACnF,IAAI,KAAK,KAAK,WAAW,IAAI,CAAC,qBAAS,CAAC,KAAK,CAAC,iBAAiB,CAAC,KAAK,CAAC,EAAE,CAAC;QACvE,MAAM,IAAI,mBAAW,CAAC,gBAAgB,EAAE,uCAAuC,CAAC,CAAC;IACnF,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAqBD,SAAS,QAAQ,CACf,EAAU,EACV,IAAwC,EACxC,UAAmB;IAEnB,MAAM,MAAM,GAAI,CAAC,WAAW,EAAE,SAAS,CAAW,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC;IAClF,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC;QACrB,MAAM,IAAI,mBAAW,CAAC,gBAAgB,EAAE,oCAAoC,CAAC,CAAC;IAChF,OAAO,IAAI,WAAW,CACpB,EAAE,EACF,MAAM,EACN,CAAC,KAAK,EAAE,EAAE;QACR,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC;QACxB,IAAI,CAAC,GAAG;YACN,MAAM,IAAI,oBAAY,CACpB,oBAAoB,EACpB,WAAW,EAAE,cAAc,KAAK,MAAM,CACvC,CAAC;QACJ,OAAO,GAAG,CAAC;IACb,CAAC,EACD,UAAU,CACX,CAAC;AACJ,CAAC;AAED,SAAgB,WAAW,CAAC,OAA2B;IACrD,MAAM,IAAI,GAAuC,EAAE,CAAC;IACpD,IAAI,OAAO,CAAC,SAAS;QAAE,IAAI,CAAC,SAAS,GAAG,QAAQ,CAAC,OAAO,CAAC,SAAS,EAAE,WAAW,CAAC,CAAC;IACjF,IAAI,OAAO,CAAC,OAAO;QAAE,IAAI,CAAC,OAAO,GAAG,QAAQ,CAAC,OAAO,CAAC,OAAO,EAAE,SAAS,CAAC,CAAC;IACzE,OAAO,QAAQ,CAAC,OAAO,CAAC,EAAE,IAAI,OAAO,EAAE,IAAI,EAAE,OAAO,CAAC,UAAU,IAAI,KAAK,CAAC,CAAC;AAC5E,CAAC;AAED,WAAW,CAAC,QAAQ,GAAG,SAAS,QAAQ,CAAC,OAAwB;IAC/D,MAAM,IAAI,GAAuC,EAAE,CAAC;IACpD,MAAM,UAAU,GAAuC,EAAE,CAAC;IAC1D,KAAK,MAAM,KAAK,IAAI,OAAO,CAAC,MAAM,EAAE,CAAC;QACnC,IAAI,KAAK,KAAK,WAAW,EAAE,CAAC;YAC1B,IAAI,CAAC,SAAS,GAAG,qBAAS,CAAC,KAAK,CAAC,gBAAgB,EAAE,CAAC;YACpD,UAAU,CAAC,SAAS,GAAG,qBAAS,CAAC,YAAY,CAAC,IAAI,CAAC,SAAS,EAAE,IAAI,CAAC,CAAC;QACtE,CAAC;aAAM,CAAC;YACN,IAAI,CAAC,OAAO,GAAG,iBAAO,CAAC,KAAK,CAAC,gBAAgB,EAAE,CAAC;YAChD,UAAU,CAAC,OAAO,GAAG,iBAAO,CAAC,YAAY,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QAC1D,CAAC;IACH,CAAC;IACD,OAAO;QACL,MAAM,EAAE,QAAQ,CAAC,OAAO,CAAC,EAAE,IAAI,OAAO,EAAE,IAAI,EAAE,OAAO,CAAC,UAAU,IAAI,KAAK,CAAC;QAC1E,UAAU;KACX,CAAC;AACJ,CAAC,CAAC;AASF,mGAAmG;AACnG,WAAW,CAAC,YAAY,GAAG,SAAS,YAAY,CAC9C,MAAsB,EACtB,UAAiC,EAAE;IAEnC,MAAM,IAAI,GAAG,IAAA,mBAAc,EACzB,IAAA,eAAM,EAAC,MAAM,CAAC,EACd,OAAO,CAAC,UAAU,CAAC,CAAC,CAAC,IAAA,eAAM,EAAC,OAAO,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,EAAE,CACrD,CAAC;IACF,MAAM,KAAK,GAAG,IAAI,GAAG,EAAsB,CAAC;IAC5C,MAAM,MAAM,GAAc,CAAC,KAAK,EAAE,MAAM,EAAE,EAAE;QAC1C,MAAM,IAAI,GAAG,MAAM,EAAE,IAAI,CAAC;QAC1B,IAAI,CAAC,IAAI,EAAE,CAAC;YACV,MAAM,IAAI,mBAAW,CACnB,gBAAgB,EAChB,8DAA8D,CAC/D,CAAC;QACJ,CAAC;QACD,MAAM,QAAQ,GAAG,GAAG,KAAK,IAAI,IAAI,EAAE,CAAC;QACpC,IAAI,GAAG,GAAG,KAAK,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;QAC9B,IAAI,CAAC,GAAG,EAAE,CAAC;YACT,GAAG;gBACD,KAAK,KAAK,WAAW,CAAC,CAAC,CAAC,IAAA,oBAAe,EAAC,IAAI,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC,IAAA,kBAAa,EAAC,IAAI,EAAE,IAAI,CAAC,CAAC;YAClF,KAAK,CAAC,GAAG,CAAC,QAAQ,EAAE,GAAG,CAAC,CAAC;QAC3B,CAAC;QACD,OAAO,GAAG,CAAC;IACb,CAAC,CAAC;IACF,OAAO,IAAI,WAAW,CACpB,OAAO,CAAC,EAAE,IAAI,UAAU,EACxB,OAAO,CAAC,MAAM,IAAI,CAAC,WAAW,EAAE,SAAS,CAAC,EAC1C,MAAM,EACN,OAAO,CAAC,UAAU,IAAI,KAAK,CAC5B,CAAC;AACJ,CAAC,CAAC","sourcesContent":["import { mod } from '@noble/curves/abstract/modular';\nimport { bytesToNumberBE, numberToBytesBE } from '@noble/curves/abstract/utils';\nimport { ed25519 } from '@noble/curves/ed25519';\nimport { schnorr, secp256k1 } from '@noble/curves/secp256k1';\nimport { ConfigError, SigningError } from '../errors/error';\nimport { reveal, secret, type Secret } from '../secret/secret';\nimport { equalBytes, fromHex } from '../util/bytes';\nimport { deriveEd25519, deriveSecp256k1, mnemonicToSeed } from './hd';\nimport type {\n  KeyRef,\n  SignatureBundle,\n  Signer,\n  SigningContext,\n  SigningRequest,\n  SigningResult,\n} from './types';\n\nexport type Curve = 'secp256k1' | 'ed25519';\nexport type KeySource = (curve: Curve, keyRef: KeyRef | undefined) => Uint8Array;\n\nconst SCHEME_CURVE: Readonly<Record<string, Curve>> = {\n  'secp256k1-ecdsa': 'secp256k1',\n  'secp256k1-schnorr': 'secp256k1',\n  ed25519: 'ed25519',\n};\nconst CURVE_SCHEMES: Readonly<Record<Curve, readonly string[]>> = {\n  secp256k1: ['secp256k1-ecdsa', 'secp256k1-schnorr'],\n  ed25519: ['ed25519'],\n};\n\nexport function curveOfScheme(scheme: string): Curve | undefined {\n  return SCHEME_CURVE[scheme];\n}\n\n/** In-process signer. Keys live only in private fields and are never serialized. */\nexport class LocalSigner implements Signer {\n  readonly id: string;\n  readonly schemes: readonly string[];\n  readonly #keys: KeySource;\n  readonly #exportable: boolean;\n\n  constructor(\n    id: string,\n    curves: readonly Curve[],\n    keys: KeySource,\n    exportable: boolean,\n  ) {\n    this.id = id;\n    this.schemes = curves.flatMap((curve) => CURVE_SCHEMES[curve]);\n    this.#keys = keys;\n    this.#exportable = exportable;\n  }\n\n  async getPublicKey(scheme: string, keyRef?: KeyRef): Promise<Uint8Array> {\n    return publicKeyFor(scheme, this.#key(scheme, keyRef));\n  }\n\n  async sign(\n    requests: readonly SigningRequest[],\n    _ctx: SigningContext,\n  ): Promise<SigningResult> {\n    const signatures: SignatureBundle[] = requests.map((request) =>\n      signOne(request, this.#key(request.scheme, request.keyRef)),\n    );\n    return { status: 'signed', signatures };\n  }\n\n  async exportKey(scheme: string, keyRef?: KeyRef): Promise<Secret<Uint8Array>> {\n    if (!this.#exportable) {\n      throw new SigningError(\n        'KEY_NOT_EXPORTABLE',\n        `signer '${this.id}' was not created as exportable`,\n      );\n    }\n    return secret(Uint8Array.from(this.#key(scheme, keyRef)));\n  }\n\n  toJSON(): { id: string; schemes: readonly string[] } {\n    return { id: this.id, schemes: this.schemes };\n  }\n\n  #key(scheme: string, keyRef: KeyRef | undefined): Uint8Array {\n    const curve = SCHEME_CURVE[scheme];\n    if (!curve || !this.schemes.includes(scheme)) {\n      throw new SigningError(\n        'SIGNER_UNAVAILABLE',\n        `signer '${this.id}' does not support scheme '${scheme}'`,\n      );\n    }\n    return this.#keys(curve, keyRef);\n  }\n}\n\nfunction publicKeyFor(scheme: string, key: Uint8Array): Uint8Array {\n  if (scheme === 'secp256k1-ecdsa') return secp256k1.getPublicKey(key, true);\n  if (scheme === 'secp256k1-schnorr') return schnorr.getPublicKey(key);\n  return ed25519.getPublicKey(key);\n}\n\nfunction assertOwnKey(request: SigningRequest, publicKey: Uint8Array): void {\n  if (!equalBytes(request.publicKey, publicKey)) {\n    throw new SigningError(\n      'SIGNING_FAILED',\n      `request '${request.id}': public key does not belong to this signer`,\n    );\n  }\n}\n\nfunction assertDigest(request: SigningRequest): void {\n  if (request.payload.length !== 32) {\n    throw new SigningError(\n      'SIGNING_FAILED',\n      `request '${request.id}': ${request.scheme} signs 32-byte digests`,\n    );\n  }\n}\n\nfunction signOne(request: SigningRequest, key: Uint8Array): SignatureBundle {\n  if (request.scheme === 'secp256k1-ecdsa') {\n    assertOwnKey(request, secp256k1.getPublicKey(key, true));\n    assertDigest(request);\n    const signature = secp256k1.sign(request.payload, key, { lowS: true });\n    return {\n      requestId: request.id,\n      bytes: signature.toCompactRawBytes(),\n      recovery: signature.recovery,\n    };\n  }\n  if (request.scheme === 'secp256k1-schnorr') {\n    const signingKey = request.params?.tweak\n      ? tweakPrivateKey(key, request.params.tweak)\n      : key;\n    assertOwnKey(request, schnorr.getPublicKey(signingKey));\n    assertDigest(request);\n    return { requestId: request.id, bytes: schnorr.sign(request.payload, signingKey) };\n  }\n  assertOwnKey(request, ed25519.getPublicKey(key));\n  return { requestId: request.id, bytes: ed25519.sign(request.payload, key) };\n}\n\n/** BIP341 key-path tweak: negate for odd Y, then add the tweak modulo n. */\nexport function tweakPrivateKey(key: Uint8Array, tweak: Uint8Array): Uint8Array {\n  const n = secp256k1.CURVE.n;\n  const t = bytesToNumberBE(tweak);\n  if (tweak.length !== 32 || t >= n)\n    throw new SigningError('SIGNING_FAILED', 'invalid taproot tweak');\n  let d = bytesToNumberBE(key);\n  if (!secp256k1.ProjectivePoint.fromPrivateKey(key).hasEvenY()) d = n - d;\n  const tweaked = mod(d + t, n);\n  if (tweaked === 0n) throw new SigningError('SIGNING_FAILED', 'tweaked key is zero');\n  return numberToBytesBE(tweaked, 32);\n}\n\nfunction parseKey(input: Secret<string | Uint8Array>, curve: Curve): Uint8Array {\n  const raw = reveal(input);\n  let bytes: Uint8Array;\n  try {\n    bytes = typeof raw === 'string' ? fromHex(raw.trim()) : Uint8Array.from(raw);\n  } catch {\n    throw new ConfigError('CONFIG_INVALID', `${curve} private key is not valid hex`);\n  }\n  if (bytes.length !== 32)\n    throw new ConfigError('CONFIG_INVALID', `${curve} private key must be 32 bytes`);\n  if (curve === 'secp256k1' && !secp256k1.utils.isValidPrivateKey(bytes)) {\n    throw new ConfigError('CONFIG_INVALID', 'secp256k1 private key is out of range');\n  }\n  return bytes;\n}\n\nexport interface LocalSignerOptions {\n  readonly id?: string;\n  readonly secp256k1?: Secret<string | Uint8Array>;\n  readonly ed25519?: Secret<string | Uint8Array>;\n  readonly exportable?: boolean;\n}\n\nexport interface GenerateOptions {\n  readonly id?: string;\n  readonly curves: readonly Curve[];\n  readonly exportable?: boolean;\n}\n\nexport interface GeneratedSigner {\n  readonly signer: Signer;\n  /** secp256k1: 33-byte compressed; ed25519: 32 bytes. */\n  readonly publicKeys: Readonly<Partial<Record<Curve, Uint8Array>>>;\n}\n\nfunction fromKeys(\n  id: string,\n  keys: Partial<Record<Curve, Uint8Array>>,\n  exportable: boolean,\n): LocalSigner {\n  const curves = (['secp256k1', 'ed25519'] as const).filter((curve) => keys[curve]);\n  if (curves.length === 0)\n    throw new ConfigError('CONFIG_INVALID', 'localSigner needs at least one key');\n  return new LocalSigner(\n    id,\n    curves,\n    (curve) => {\n      const key = keys[curve];\n      if (!key)\n        throw new SigningError(\n          'SIGNER_UNAVAILABLE',\n          `signer '${id}' holds no ${curve} key`,\n        );\n      return key;\n    },\n    exportable,\n  );\n}\n\nexport function localSigner(options: LocalSignerOptions): Signer {\n  const keys: Partial<Record<Curve, Uint8Array>> = {};\n  if (options.secp256k1) keys.secp256k1 = parseKey(options.secp256k1, 'secp256k1');\n  if (options.ed25519) keys.ed25519 = parseKey(options.ed25519, 'ed25519');\n  return fromKeys(options.id ?? 'local', keys, options.exportable ?? false);\n}\n\nlocalSigner.generate = function generate(options: GenerateOptions): GeneratedSigner {\n  const keys: Partial<Record<Curve, Uint8Array>> = {};\n  const publicKeys: Partial<Record<Curve, Uint8Array>> = {};\n  for (const curve of options.curves) {\n    if (curve === 'secp256k1') {\n      keys.secp256k1 = secp256k1.utils.randomPrivateKey();\n      publicKeys.secp256k1 = secp256k1.getPublicKey(keys.secp256k1, true);\n    } else {\n      keys.ed25519 = ed25519.utils.randomPrivateKey();\n      publicKeys.ed25519 = ed25519.getPublicKey(keys.ed25519);\n    }\n  }\n  return {\n    signer: fromKeys(options.id ?? 'local', keys, options.exportable ?? false),\n    publicKeys,\n  };\n};\n\nexport interface MnemonicSignerOptions {\n  readonly id?: string;\n  readonly passphrase?: Secret<string>;\n  readonly exportable?: boolean;\n  readonly curves?: readonly Curve[];\n}\n\n/** BIP39 mnemonic signer; keys are derived per request from `keyRef.path` and cached in memory. */\nlocalSigner.fromMnemonic = function fromMnemonic(\n  phrase: Secret<string>,\n  options: MnemonicSignerOptions = {},\n): Signer {\n  const seed = mnemonicToSeed(\n    reveal(phrase),\n    options.passphrase ? reveal(options.passphrase) : '',\n  );\n  const cache = new Map<string, Uint8Array>();\n  const source: KeySource = (curve, keyRef) => {\n    const path = keyRef?.path;\n    if (!path) {\n      throw new ConfigError(\n        'CONFIG_INVALID',\n        'mnemonic signers need keyRef.path (set keyRef on the wallet)',\n      );\n    }\n    const cacheKey = `${curve}:${path}`;\n    let key = cache.get(cacheKey);\n    if (!key) {\n      key =\n        curve === 'secp256k1' ? deriveSecp256k1(seed, path) : deriveEd25519(seed, path);\n      cache.set(cacheKey, key);\n    }\n    return key;\n  };\n  return new LocalSigner(\n    options.id ?? 'mnemonic',\n    options.curves ?? ['secp256k1', 'ed25519'],\n    source,\n    options.exportable ?? false,\n  );\n};\n"]}

package/dist/core/signing/orchestrator.d.ts

@@ -0,0 +1,40 @@
+import type { Hooks } from '../config/types';
+import type { EventBus } from '../events/bus';
+import type { SchemeCatalog } from '../registry/schemes';
+import type { Clock } from '../util/clock';
+import type { SignatureBundle, SignerTicket, SigningContext, SigningRequest } from './types';
+import type { ResolvedWallet } from './wallet';
+export type OrchestratedResult = {
+    readonly status: 'signed';
+    readonly signatures: readonly SignatureBundle[];
+} | {
+    readonly status: 'pending';
+    /** One entry per pending signer that issued a ticket. */
+    readonly tickets: readonly SignerTicket[];
+    readonly signatures: readonly SignatureBundle[];
+};
+export interface OrchestratorDeps {
+    readonly schemes: () => SchemeCatalog;
+    readonly events: EventBus;
+    readonly clock: Clock;
+    readonly hooks: () => Hooks;
+}
+export declare class SigningOrchestrator {
+    #private;
+    private readonly deps;
+    constructor(deps: OrchestratorDeps);
+    /** Runs the `beforeSign` policy hook; any throw is a veto. */
+    authorize(ctx: SigningContext): Promise<void>;
+    /**
+     * Signs requests not covered by `existing`, batching per signer and verifying every
+     * signature. Each `existing` entry for one of `requests` is shape-checked, copied and
+     * re-verified first (SIGNATURE_MISMATCH otherwise); entries for other ids are ignored.
+     */
+    sign(wallet: ResolvedWallet, callerRequests: readonly SigningRequest[], ctx: SigningContext, existing?: readonly SignatureBundle[]): Promise<OrchestratedResult>;
+    verify(request: SigningRequest, signature: SignatureBundle): void;
+    /**
+     * Merges externally produced signatures (cold/offline/MPC) after verifying each one, and
+     * re-verifies `existing` the same way `sign()` does.
+     */
+    accept(requests: readonly SigningRequest[], provided: readonly SignatureBundle[], existing: readonly SignatureBundle[]): SignatureBundle[];
+}

package/dist/core/signing/orchestrator.js

@@ -0,0 +1,300 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.SigningOrchestrator = void 0;
+const error_1 = require("../errors/error");
+const redact_1 = require("../secret/redact");
+const guard_1 = require("./guard");
+/** Validates one signature bundle and returns a copy its producer cannot mutate later. */
+function checkBundle(value, reject) {
+    if (typeof value !== 'object' || value === null)
+        reject('is not an object');
+    const { requestId, bytes, recovery } = value;
+    if (typeof requestId !== 'string')
+        reject('has no string requestId');
+    if (!(bytes instanceof Uint8Array))
+        reject('has bytes that are not a Uint8Array');
+    if (recovery !== undefined) {
+        if (typeof recovery !== 'number' || !Number.isInteger(recovery)) {
+            reject('has a recovery that is not an integer');
+        }
+        if (recovery < 0 || recovery > 3)
+            reject('has a recovery outside 0..3');
+    }
+    return {
+        requestId,
+        bytes: new Uint8Array(bytes),
+        ...(recovery !== undefined ? { recovery } : {}),
+    };
+}
+function checkResult(value, reject) {
+    if (typeof value !== 'object' || value === null)
+        reject('result is not an object');
+    const { status, signatures, ticket } = value;
+    if (status === 'pending') {
+        if (ticket !== undefined && typeof ticket !== 'string')
+            reject('ticket is not a string');
+        return ticket === undefined ? { status } : { status, ticket };
+    }
+    if (status !== 'signed')
+        reject('status is neither signed nor pending');
+    if (!Array.isArray(signatures))
+        reject('signatures is not an array');
+    // An index loop, not `.map`: an own `map` property on the array cannot skip the checks.
+    const checked = [];
+    for (let index = 0; index < signatures.length; index++) {
+        const entry = signatures[index];
+        checked.push(checkBundle(entry, (problem) => reject(`signature #${index} ${problem}`)));
+    }
+    return { status, signatures: checked };
+}
+/** Copies a request's bytes (and keyRef/params) so its holder cannot change the original. */
+function snapshotRequest(request) {
+    const { keyRef, params } = request;
+    return {
+        id: request.id,
+        scheme: request.scheme,
+        payload: new Uint8Array(request.payload),
+        payloadKind: request.payloadKind,
+        publicKey: new Uint8Array(request.publicKey),
+        ...(keyRef ? { keyRef: { ...keyRef } } : {}),
+        ...(params
+            ? {
+                params: {
+                    ...params,
+                    ...(params.tweak ? { tweak: new Uint8Array(params.tweak) } : {}),
+                },
+            }
+            : {}),
+    };
+}
+/** Cancels one ticket; false when the signer cannot cancel or its cancellation failed. */
+async function cancelTicket(signer, ticket) {
+    try {
+        if (typeof signer?.cancelRequest !== 'function')
+            return false;
+        await signer.cancelRequest(ticket);
+        return true;
+    }
+    catch {
+        return false;
+    }
+}
+class SigningOrchestrator {
+    deps;
+    constructor(deps) {
+        this.deps = deps;
+    }
+    /** Runs the `beforeSign` policy hook; any throw is a veto. */
+    async authorize(ctx) {
+        const hook = this.deps.hooks().beforeSign;
+        if (!hook)
+            return;
+        try {
+            await hook(ctx);
+        }
+        catch (error) {
+            if ((0, error_1.isCryptoAioError)(error, 'POLICY_REJECTED'))
+                throw error;
+            const cause = (0, redact_1.sanitizeError)(error);
+            throw new error_1.SigningError('POLICY_REJECTED', error instanceof Error ? cause.message : 'signing vetoed by policy', { cause, context: { operationId: ctx.operationId } });
+        }
+    }
+    /**
+     * Signs requests not covered by `existing`, batching per signer and verifying every
+     * signature. Each `existing` entry for one of `requests` is shape-checked, copied and
+     * re-verified first (SIGNATURE_MISMATCH otherwise); entries for other ids are ignored.
+     */
+    async sign(wallet, callerRequests, ctx, existing = []) {
+        // Private snapshots: neither the caller nor a signer can change what gets verified.
+        const requests = callerRequests.map(snapshotRequest);
+        const done = this.#adopt(existing, new Map(requests.map((r) => [r.id, r])));
+        const groups = new Map();
+        for (const request of requests) {
+            if (done.has(request.id))
+                continue;
+            const route = this.#route(wallet, request, { operationId: ctx.operationId });
+            const group = groups.get(route.id) ?? { signer: route.signer, requests: [] };
+            group.requests.push(request);
+            groups.set(route.id, group);
+        }
+        let pending = false;
+        const tickets = [];
+        for (const [signerId, group] of groups) {
+            let result;
+            try {
+                result = await this.#signGroup(signerId, group.signer, group.requests, ctx, done);
+            }
+            catch (error) {
+                throw await this.#withdraw(error, tickets, groups);
+            }
+            if (result.status === 'pending') {
+                pending = true;
+                if (result.ticket !== undefined)
+                    tickets.push({ signerId, ticket: result.ticket });
+            }
+        }
+        const signatures = requests
+            .map((request) => done.get(request.id))
+            .filter((s) => s !== undefined);
+        return pending
+            ? { status: 'pending', tickets, signatures }
+            : { status: 'signed', signatures };
+    }
+    verify(request, signature) {
+        const valid = this.deps
+            .schemes()
+            .get(request.scheme)
+            .verify({
+            publicKey: request.publicKey,
+            payload: request.payload,
+            signature: signature.bytes,
+            ...(signature.recovery !== undefined ? { recovery: signature.recovery } : {}),
+            ...(request.params ? { params: request.params } : {}),
+        });
+        if (!valid) {
+            throw new error_1.SigningError('SIGNATURE_MISMATCH', `signature for request '${request.id}' does not verify against the expected public key`);
+        }
+    }
+    /**
+     * Merges externally produced signatures (cold/offline/MPC) after verifying each one, and
+     * re-verifies `existing` the same way `sign()` does.
+     */
+    accept(requests, provided, existing) {
+        if (!Array.isArray(provided)) {
+            throw new error_1.ValidationError('INVALID_INTENT', 'external signatures must be an array');
+        }
+        const byId = new Map(requests.map((r) => [r.id, r]));
+        const merged = this.#adopt(existing, byId);
+        for (const [index, entry] of provided.entries()) {
+            const signature = checkBundle(entry, (problem) => {
+                throw new error_1.ValidationError('INVALID_INTENT', `external signature #${index} ${problem}`);
+            });
+            const request = byId.get(signature.requestId);
+            if (!request) {
+                throw new error_1.ValidationError('INVALID_INTENT', `unknown signing request '${signature.requestId}'`);
+            }
+            this.verify(request, signature);
+            merged.set(signature.requestId, signature);
+        }
+        return requests
+            .map((r) => merged.get(r.id))
+            .filter((s) => s !== undefined);
+    }
+    /** Picks the signer for a request; the routing reads are guarded like signer calls. */
+    #route(wallet, request, context) {
+        const unavailable = `no signer of wallet '${wallet.name}' can sign request '${request.id}' (${request.scheme})`;
+        let route;
+        try {
+            route = wallet.signerFor(request.keyRef);
+        }
+        catch (error) {
+            throw (0, guard_1.signerFailure)(error, 'SIGNER_UNAVAILABLE', unavailable, context);
+        }
+        if (!route ||
+            !(0, guard_1.signerSchemes)(route.id, route.signer, context).includes(request.scheme)) {
+            throw new error_1.SigningError('SIGNER_UNAVAILABLE', unavailable, { context });
+        }
+        return route;
+    }
+    /**
+     * Re-checks previously collected signatures before trusting them: each entry whose
+     * `requestId` names one of `byId` is shape-checked, copied and verified; others are ignored.
+     */
+    #adopt(existing, byId) {
+        const adopted = new Map();
+        for (let index = 0; index < existing.length; index++) {
+            const entry = existing[index];
+            const id = typeof entry === 'object' && entry !== null
+                ? entry.requestId
+                : undefined;
+            if (typeof id !== 'string' || !byId.has(id))
+                continue;
+            const signature = checkBundle(entry, (problem) => {
+                throw new error_1.SigningError('SIGNATURE_MISMATCH', `existing signature for request '${id}' ${problem}`);
+            });
+            const request = byId.get(signature.requestId);
+            if (!request)
+                continue;
+            this.verify(request, signature);
+            adopted.set(request.id, signature);
+        }
+        return adopted;
+    }
+    /**
+     * Asks one signer for its batch. The signer gets fresh copies; its signatures are verified
+     * against `requests` (the orchestrator's snapshots) and land in `done`.
+     */
+    async #signGroup(signerId, signer, requests, ctx, done) {
+        const started = this.deps.clock.now();
+        this.deps.events.emit('signer.requested', {
+            namespace: ctx.namespace,
+            operationId: ctx.operationId,
+            signerId,
+            requests: requests.length,
+        });
+        try {
+            const result = await this.#request(signerId, signer, requests.map(snapshotRequest), ctx);
+            if (result.status === 'signed') {
+                for (const request of requests) {
+                    const signature = result.signatures.find((s) => s.requestId === request.id);
+                    if (!signature) {
+                        throw new error_1.SigningError('SIGNING_FAILED', `signer '${signerId}' returned no signature for request '${request.id}'`, { context: { operationId: ctx.operationId } });
+                    }
+                    this.verify(request, signature);
+                    done.set(request.id, signature);
+                }
+            }
+            this.#completed(ctx, signerId, result.status, started);
+            return result;
+        }
+        catch (error) {
+            this.#completed(ctx, signerId, 'error', started);
+            throw error;
+        }
+    }
+    /**
+     * Before a failure escapes `sign()`, cancels (best effort) every ticket issued earlier
+     * in the same call through the signer that issued it. A ticket that could not be cancelled
+     * (no `cancelRequest`, or it threw) is counted in `details.cancelFailures`.
+     */
+    async #withdraw(error, tickets, groups) {
+        if (tickets.length === 0)
+            return error;
+        let cancelFailures = 0;
+        for (const { signerId, ticket } of tickets) {
+            if (!(await cancelTicket(groups.get(signerId)?.signer, ticket)))
+                cancelFailures += 1;
+        }
+        if (!(0, error_1.isCryptoAioError)(error))
+            return error;
+        return (0, error_1.withContext)(error, {}, { details: { ...error.details, cancelFailures } });
+    }
+    /**
+     * Calls one signer and validates what it returns. A non-CryptoAioError failure (including
+     * a malformed result that cannot even be read) becomes SIGNING_FAILED with a sanitized
+     * cause: custody backends put URLs and credentials in their messages.
+     */
+    async #request(signerId, signer, requests, ctx) {
+        const context = { operationId: ctx.operationId };
+        try {
+            const raw = await signer.sign(requests, ctx);
+            return checkResult(raw, (problem) => {
+                throw new error_1.SigningError('SIGNING_FAILED', `signer '${signerId}' returned a malformed result: ${problem}`, { context });
+            });
+        }
+        catch (error) {
+            throw (0, guard_1.signerFailure)(error, 'SIGNING_FAILED', `signer '${signerId}' failed`, context);
+        }
+    }
+    #completed(ctx, signerId, status, started) {
+        this.deps.events.emit('signer.completed', {
+            namespace: ctx.namespace,
+            operationId: ctx.operationId,
+            signerId,
+            status,
+            latencyMs: this.deps.clock.now() - started,
+        });
+    }
+}
+exports.SigningOrchestrator = SigningOrchestrator;
+//# sourceMappingURL=orchestrator.js.map

package/dist/core/signing/orchestrator.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"orchestrator.js","sourceRoot":"","sources":["../../../src/core/signing/orchestrator.ts"],"names":[],"mappings":";;;AACA,2CAMyB;AAGzB,6CAAiD;AASjD,mCAAuD;AA0BvD,0FAA0F;AAC1F,SAAS,WAAW,CAAC,KAAc,EAAE,MAAc;IACjD,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI;QAAE,MAAM,CAAC,kBAAkB,CAAC,CAAC;IAC5E,MAAM,EAAE,SAAS,EAAE,KAAK,EAAE,QAAQ,EAAE,GAAG,KAAgC,CAAC;IACxE,IAAI,OAAO,SAAS,KAAK,QAAQ;QAAE,MAAM,CAAC,yBAAyB,CAAC,CAAC;IACrE,IAAI,CAAC,CAAC,KAAK,YAAY,UAAU,CAAC;QAAE,MAAM,CAAC,qCAAqC,CAAC,CAAC;IAClF,IAAI,QAAQ,KAAK,SAAS,EAAE,CAAC;QAC3B,IAAI,OAAO,QAAQ,KAAK,QAAQ,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,QAAQ,CAAC,EAAE,CAAC;YAChE,MAAM,CAAC,uCAAuC,CAAC,CAAC;QAClD,CAAC;QACD,IAAI,QAAQ,GAAG,CAAC,IAAI,QAAQ,GAAG,CAAC;YAAE,MAAM,CAAC,6BAA6B,CAAC,CAAC;IAC1E,CAAC;IACD,OAAO;QACL,SAAS;QACT,KAAK,EAAE,IAAI,UAAU,CAAC,KAAK,CAAC;QAC5B,GAAG,CAAC,QAAQ,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KAChD,CAAC;AACJ,CAAC;AAED,SAAS,WAAW,CAAC,KAAc,EAAE,MAAc;IACjD,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI;QAAE,MAAM,CAAC,yBAAyB,CAAC,CAAC;IACnF,MAAM,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,EAAE,GAAG,KAAgC,CAAC;IACxE,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;QACzB,IAAI,MAAM,KAAK,SAAS,IAAI,OAAO,MAAM,KAAK,QAAQ;YACpD,MAAM,CAAC,wBAAwB,CAAC,CAAC;QACnC,OAAO,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC;IAChE,CAAC;IACD,IAAI,MAAM,KAAK,QAAQ;QAAE,MAAM,CAAC,sCAAsC,CAAC,CAAC;IACxE,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,UAAU,CAAC;QAAE,MAAM,CAAC,4BAA4B,CAAC,CAAC;IACrE,wFAAwF;IACxF,MAAM,OAAO,GAAsB,EAAE,CAAC;IACtC,KAAK,IAAI,KAAK,GAAG,CAAC,EAAE,KAAK,GAAG,UAAU,CAAC,MAAM,EAAE,KAAK,EAAE,EAAE,CAAC;QACvD,MAAM,KAAK,GAAY,UAAU,CAAC,KAAK,CAAC,CAAC;QACzC,OAAO,CAAC,IAAI,CACV,WAAW,CAAC,KAAK,EAAE,CAAC,OAAO,EAAE,EAAE,CAAC,MAAM,CAAC,cAAc,KAAK,IAAI,OAAO,EAAE,CAAC,CAAC,CAC1E,CAAC;IACJ,CAAC;IACD,OAAO,EAAE,MAAM,EAAE,UAAU,EAAE,OAAO,EAAE,CAAC;AACzC,CAAC;AAED,6FAA6F;AAC7F,SAAS,eAAe,CAAC,OAAuB;IAC9C,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,GAAG,OAAO,CAAC;IACnC,OAAO;QACL,EAAE,EAAE,OAAO,CAAC,EAAE;QACd,MAAM,EAAE,OAAO,CAAC,MAAM;QACtB,OAAO,EAAE,IAAI,UAAU,CAAC,OAAO,CAAC,OAAO,CAAC;QACxC,WAAW,EAAE,OAAO,CAAC,WAAW;QAChC,SAAS,EAAE,IAAI,UAAU,CAAC,OAAO,CAAC,SAAS,CAAC;QAC5C,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,EAAE,GAAG,MAAM,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC5C,GAAG,CAAC,MAAM;YACR,CAAC,CAAC;gBACE,MAAM,EAAE;oBACN,GAAG,MAAM;oBACT,GAAG,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,IAAI,UAAU,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;iBACjE;aACF;YACH,CAAC,CAAC,EAAE,CAAC;KACR,CAAC;AACJ,CAAC;AAED,0FAA0F;AAC1F,KAAK,UAAU,YAAY,CACzB,MAA0B,EAC1B,MAAc;IAEd,IAAI,CAAC;QACH,IAAI,OAAO,MAAM,EAAE,aAAa,KAAK,UAAU;YAAE,OAAO,KAAK,CAAC;QAC9D,MAAM,MAAM,CAAC,aAAa,CAAC,MAAM,CAAC,CAAC;QACnC,OAAO,IAAI,CAAC;IACd,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC;AAED,MAAa,mBAAmB;IACD;IAA7B,YAA6B,IAAsB;QAAtB,SAAI,GAAJ,IAAI,CAAkB;IAAG,CAAC;IAEvD,8DAA8D;IAC9D,KAAK,CAAC,SAAS,CAAC,GAAmB;QACjC,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC,KAAK,EAAE,CAAC,UAAU,CAAC;QAC1C,IAAI,CAAC,IAAI;YAAE,OAAO;QAClB,IAAI,CAAC;YACH,MAAM,IAAI,CAAC,GAAG,CAAC,CAAC;QAClB,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,IAAA,wBAAgB,EAAC,KAAK,EAAE,iBAAiB,CAAC;gBAAE,MAAM,KAAK,CAAC;YAC5D,MAAM,KAAK,GAAG,IAAA,sBAAa,EAAC,KAAK,CAAC,CAAC;YACnC,MAAM,IAAI,oBAAY,CACpB,iBAAiB,EACjB,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,0BAA0B,EACnE,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE,WAAW,EAAE,GAAG,CAAC,WAAW,EAAE,EAAE,CACrD,CAAC;QACJ,CAAC;IACH,CAAC;IAED;;;;OAIG;IACH,KAAK,CAAC,IAAI,CACR,MAAsB,EACtB,cAAyC,EACzC,GAAmB,EACnB,WAAuC,EAAE;QAEzC,oFAAoF;QACpF,MAAM,QAAQ,GAAG,cAAc,CAAC,GAAG,CAAC,eAAe,CAAC,CAAC;QACrD,MAAM,IAAI,GAAG,IAAI,CAAC,MAAM,CAAC,QAAQ,EAAE,IAAI,GAAG,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QAC5E,MAAM,MAAM,GAAG,IAAI,GAAG,EAA0D,CAAC;QACjF,KAAK,MAAM,OAAO,IAAI,QAAQ,EAAE,CAAC;YAC/B,IAAI,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,CAAC;gBAAE,SAAS;YACnC,MAAM,KAAK,GAAG,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,EAAE,EAAE,WAAW,EAAE,GAAG,CAAC,WAAW,EAAE,CAAC,CAAC;YAC7E,MAAM,KAAK,GAAG,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC,IAAI,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE,QAAQ,EAAE,EAAE,EAAE,CAAC;YAC7E,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;YAC7B,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,EAAE,KAAK,CAAC,CAAC;QAC9B,CAAC;QACD,IAAI,OAAO,GAAG,KAAK,CAAC;QACpB,MAAM,OAAO,GAAmB,EAAE,CAAC;QACnC,KAAK,MAAM,CAAC,QAAQ,EAAE,KAAK,CAAC,IAAI,MAAM,EAAE,CAAC;YACvC,IAAI,MAAqB,CAAC;YAC1B,IAAI,CAAC;gBACH,MAAM,GAAG,MAAM,IAAI,CAAC,UAAU,CAAC,QAAQ,EAAE,KAAK,CAAC,MAAM,EAAE,KAAK,CAAC,QAAQ,EAAE,GAAG,EAAE,IAAI,CAAC,CAAC;YACpF,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,MAAM,MAAM,IAAI,CAAC,SAAS,CAAC,KAAK,EAAE,OAAO,EAAE,MAAM,CAAC,CAAC;YACrD,CAAC;YACD,IAAI,MAAM,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;gBAChC,OAAO,GAAG,IAAI,CAAC;gBACf,IAAI,MAAM,CAAC,MAAM,KAAK,SAAS;oBAC7B,OAAO,CAAC,IAAI,CAAC,EAAE,QAAQ,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC;YACtD,CAAC;QACH,CAAC;QACD,MAAM,UAAU,GAAG,QAAQ;aACxB,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;aACtC,MAAM,CAAC,CAAC,CAAC,EAAwB,EAAE,CAAC,CAAC,KAAK,SAAS,CAAC,CAAC;QACxD,OAAO,OAAO;YACZ,CAAC,CAAC,EAAE,MAAM,EAAE,SAAS,EAAE,OAAO,EAAE,UAAU,EAAE;YAC5C,CAAC,CAAC,EAAE,MAAM,EAAE,QAAQ,EAAE,UAAU,EAAE,CAAC;IACvC,CAAC;IAED,MAAM,CAAC,OAAuB,EAAE,SAA0B;QACxD,MAAM,KAAK,GAAG,IAAI,CAAC,IAAI;aACpB,OAAO,EAAE;aACT,GAAG,CAAC,OAAO,CAAC,MAAM,CAAC;aACnB,MAAM,CAAC;YACN,SAAS,EAAE,OAAO,CAAC,SAAS;YAC5B,OAAO,EAAE,OAAO,CAAC,OAAO;YACxB,SAAS,EAAE,SAAS,CAAC,KAAK;YAC1B,GAAG,CAAC,SAAS,CAAC,QAAQ,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,SAAS,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAC7E,GAAG,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SACtD,CAAC,CAAC;QACL,IAAI,CAAC,KAAK,EAAE,CAAC;YACX,MAAM,IAAI,oBAAY,CACpB,oBAAoB,EACpB,0BAA0B,OAAO,CAAC,EAAE,mDAAmD,CACxF,CAAC;QACJ,CAAC;IACH,CAAC;IAED;;;OAGG;IACH,MAAM,CACJ,QAAmC,EACnC,QAAoC,EACpC,QAAoC;QAEpC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,CAAC;YAC7B,MAAM,IAAI,uBAAe,CAAC,gBAAgB,EAAE,sCAAsC,CAAC,CAAC;QACtF,CAAC;QACD,MAAM,IAAI,GAAG,IAAI,GAAG,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;QACrD,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC;QAC3C,KAAK,MAAM,CAAC,KAAK,EAAE,KAAK,CAAC,IAAI,QAAQ,CAAC,OAAO,EAAE,EAAE,CAAC;YAChD,MAAM,SAAS,GAAG,WAAW,CAAC,KAAK,EAAE,CAAC,OAAO,EAAE,EAAE;gBAC/C,MAAM,IAAI,uBAAe,CACvB,gBAAgB,EAChB,uBAAuB,KAAK,IAAI,OAAO,EAAE,CAC1C,CAAC;YACJ,CAAC,CAAC,CAAC;YACH,MAAM,OAAO,GAAG,IAAI,CAAC,GAAG,CAAC,SAAS,CAAC,SAAS,CAAC,CAAC;YAC9C,IAAI,CAAC,OAAO,EAAE,CAAC;gBACb,MAAM,IAAI,uBAAe,CACvB,gBAAgB,EAChB,4BAA4B,SAAS,CAAC,SAAS,GAAG,CACnD,CAAC;YACJ,CAAC;YACD,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,SAAS,CAAC,CAAC;YAChC,MAAM,CAAC,GAAG,CAAC,SAAS,CAAC,SAAS,EAAE,SAAS,CAAC,CAAC;QAC7C,CAAC;QACD,OAAO,QAAQ;aACZ,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;aAC5B,MAAM,CAAC,CAAC,CAAC,EAAwB,EAAE,CAAC,CAAC,KAAK,SAAS,CAAC,CAAC;IAC1D,CAAC;IAED,uFAAuF;IACvF,MAAM,CACJ,MAAsB,EACtB,OAAuB,EACvB,OAAqB;QAErB,MAAM,WAAW,GAAG,wBAAwB,MAAM,CAAC,IAAI,uBAAuB,OAAO,CAAC,EAAE,MAAM,OAAO,CAAC,MAAM,GAAG,CAAC;QAChH,IAAI,KAAmE,CAAC;QACxE,IAAI,CAAC;YACH,KAAK,GAAG,MAAM,CAAC,SAAS,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;QAC3C,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,IAAA,qBAAa,EAAC,KAAK,EAAE,oBAAoB,EAAE,WAAW,EAAE,OAAO,CAAC,CAAC;QACzE,CAAC;QACD,IACE,CAAC,KAAK;YACN,CAAC,IAAA,qBAAa,EAAC,KAAK,CAAC,EAAE,EAAE,KAAK,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,MAAM,CAAC,EACxE,CAAC;YACD,MAAM,IAAI,oBAAY,CAAC,oBAAoB,EAAE,WAAW,EAAE,EAAE,OAAO,EAAE,CAAC,CAAC;QACzE,CAAC;QACD,OAAO,KAAK,CAAC;IACf,CAAC;IAED;;;OAGG;IACH,MAAM,CACJ,QAAoC,EACpC,IAAyC;QAEzC,MAAM,OAAO,GAAG,IAAI,GAAG,EAA2B,CAAC;QACnD,KAAK,IAAI,KAAK,GAAG,CAAC,EAAE,KAAK,GAAG,QAAQ,CAAC,MAAM,EAAE,KAAK,EAAE,EAAE,CAAC;YACrD,MAAM,KAAK,GAAY,QAAQ,CAAC,KAAK,CAAC,CAAC;YACvC,MAAM,EAAE,GACN,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI;gBACzC,CAAC,CAAE,KAAiC,CAAC,SAAS;gBAC9C,CAAC,CAAC,SAAS,CAAC;YAChB,IAAI,OAAO,EAAE,KAAK,QAAQ,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;gBAAE,SAAS;YACtD,MAAM,SAAS,GAAG,WAAW,CAAC,KAAK,EAAE,CAAC,OAAO,EAAE,EAAE;gBAC/C,MAAM,IAAI,oBAAY,CACpB,oBAAoB,EACpB,mCAAmC,EAAE,KAAK,OAAO,EAAE,CACpD,CAAC;YACJ,CAAC,CAAC,CAAC;YACH,MAAM,OAAO,GAAG,IAAI,CAAC,GAAG,CAAC,SAAS,CAAC,SAAS,CAAC,CAAC;YAC9C,IAAI,CAAC,OAAO;gBAAE,SAAS;YACvB,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,SAAS,CAAC,CAAC;YAChC,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,EAAE,SAAS,CAAC,CAAC;QACrC,CAAC;QACD,OAAO,OAAO,CAAC;IACjB,CAAC;IAED;;;OAGG;IACH,KAAK,CAAC,UAAU,CACd,QAAgB,EAChB,MAAc,EACd,QAAmC,EACnC,GAAmB,EACnB,IAAkC;QAElC,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC;QACtC,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,kBAAkB,EAAE;YACxC,SAAS,EAAE,GAAG,CAAC,SAAS;YACxB,WAAW,EAAE,GAAG,CAAC,WAAW;YAC5B,QAAQ;YACR,QAAQ,EAAE,QAAQ,CAAC,MAAM;SAC1B,CAAC,CAAC;QACH,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,QAAQ,CAChC,QAAQ,EACR,MAAM,EACN,QAAQ,CAAC,GAAG,CAAC,eAAe,CAAC,EAC7B,GAAG,CACJ,CAAC;YACF,IAAI,MAAM,CAAC,MAAM,KAAK,QAAQ,EAAE,CAAC;gBAC/B,KAAK,MAAM,OAAO,IAAI,QAAQ,EAAE,CAAC;oBAC/B,MAAM,SAAS,GAAG,MAAM,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,SAAS,KAAK,OAAO,CAAC,EAAE,CAAC,CAAC;oBAC5E,IAAI,CAAC,SAAS,EAAE,CAAC;wBACf,MAAM,IAAI,oBAAY,CACpB,gBAAgB,EAChB,WAAW,QAAQ,wCAAwC,OAAO,CAAC,EAAE,GAAG,EACxE,EAAE,OAAO,EAAE,EAAE,WAAW,EAAE,GAAG,CAAC,WAAW,EAAE,EAAE,CAC9C,CAAC;oBACJ,CAAC;oBACD,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,SAAS,CAAC,CAAC;oBAChC,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,EAAE,SAAS,CAAC,CAAC;gBAClC,CAAC;YACH,CAAC;YACD,IAAI,CAAC,UAAU,CAAC,GAAG,EAAE,QAAQ,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;YACvD,OAAO,MAAM,CAAC;QAChB,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,CAAC,UAAU,CAAC,GAAG,EAAE,QAAQ,EAAE,OAAO,EAAE,OAAO,CAAC,CAAC;YACjD,MAAM,KAAK,CAAC;QACd,CAAC;IACH,CAAC;IAED;;;;OAIG;IACH,KAAK,CAAC,SAAS,CACb,KAAc,EACd,OAAgC,EAChC,MAAwD;QAExD,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO,KAAK,CAAC;QACvC,IAAI,cAAc,GAAG,CAAC,CAAC;QACvB,KAAK,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,IAAI,OAAO,EAAE,CAAC;YAC3C,IAAI,CAAC,CAAC,MAAM,YAAY,CAAC,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,MAAM,EAAE,MAAM,CAAC,CAAC;gBAC7D,cAAc,IAAI,CAAC,CAAC;QACxB,CAAC;QACD,IAAI,CAAC,IAAA,wBAAgB,EAAC,KAAK,CAAC;YAAE,OAAO,KAAK,CAAC;QAC3C,OAAO,IAAA,mBAAW,EAAC,KAAK,EAAE,EAAE,EAAE,EAAE,OAAO,EAAE,EAAE,GAAG,KAAK,CAAC,OAAO,EAAE,cAAc,EAAE,EAAE,CAAC,CAAC;IACnF,CAAC;IAED;;;;OAIG;IACH,KAAK,CAAC,QAAQ,CACZ,QAAgB,EAChB,MAAc,EACd,QAAmC,EACnC,GAAmB;QAEnB,MAAM,OAAO,GAAG,EAAE,WAAW,EAAE,GAAG,CAAC,WAAW,EAAE,CAAC;QACjD,IAAI,CAAC;YACH,MAAM,GAAG,GAAY,MAAM,MAAM,CAAC,IAAI,CAAC,QAAQ,EAAE,GAAG,CAAC,CAAC;YACtD,OAAO,WAAW,CAAC,GAAG,EAAE,CAAC,OAAO,EAAE,EAAE;gBAClC,MAAM,IAAI,oBAAY,CACpB,gBAAgB,EAChB,WAAW,QAAQ,kCAAkC,OAAO,EAAE,EAC9D,EAAE,OAAO,EAAE,CACZ,CAAC;YACJ,CAAC,CAAC,CAAC;QACL,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,IAAA,qBAAa,EACjB,KAAK,EACL,gBAAgB,EAChB,WAAW,QAAQ,UAAU,EAC7B,OAAO,CACR,CAAC;QACJ,CAAC;IACH,CAAC;IAED,UAAU,CACR,GAAmB,EACnB,QAAgB,EAChB,MAAsC,EACtC,OAAe;QAEf,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,kBAAkB,EAAE;YACxC,SAAS,EAAE,GAAG,CAAC,SAAS;YACxB,WAAW,EAAE,GAAG,CAAC,WAAW;YAC5B,QAAQ;YACR,MAAM;YACN,SAAS,EAAE,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,EAAE,GAAG,OAAO;SAC3C,CAAC,CAAC;IACL,CAAC;CACF;AA5RD,kDA4RC","sourcesContent":["import type { Hooks } from '../config/types';\nimport {\n  SigningError,\n  ValidationError,\n  isCryptoAioError,\n  withContext,\n  type ErrorContext,\n} from '../errors/error';\nimport type { EventBus } from '../events/bus';\nimport type { SchemeCatalog } from '../registry/schemes';\nimport { sanitizeError } from '../secret/redact';\nimport type { Clock } from '../util/clock';\nimport type {\n  SignatureBundle,\n  Signer,\n  SignerTicket,\n  SigningContext,\n  SigningRequest,\n} from './types';\nimport { signerFailure, signerSchemes } from './guard';\nimport type { ResolvedWallet } from './wallet';\n\nexport type OrchestratedResult =\n  | { readonly status: 'signed'; readonly signatures: readonly SignatureBundle[] }\n  | {\n      readonly status: 'pending';\n      /** One entry per pending signer that issued a ticket. */\n      readonly tickets: readonly SignerTicket[];\n      readonly signatures: readonly SignatureBundle[];\n    };\n\nexport interface OrchestratorDeps {\n  readonly schemes: () => SchemeCatalog;\n  readonly events: EventBus;\n  readonly clock: Clock;\n  readonly hooks: () => Hooks;\n}\n\n/** A signer's `SigningResult` after shape validation, holding the orchestrator's own copies. */\ntype CheckedResult =\n  | { readonly status: 'signed'; readonly signatures: readonly SignatureBundle[] }\n  | { readonly status: 'pending'; readonly ticket?: string };\n\ntype Reject = (problem: string) => never;\n\n/** Validates one signature bundle and returns a copy its producer cannot mutate later. */\nfunction checkBundle(value: unknown, reject: Reject): SignatureBundle {\n  if (typeof value !== 'object' || value === null) reject('is not an object');\n  const { requestId, bytes, recovery } = value as Record<string, unknown>;\n  if (typeof requestId !== 'string') reject('has no string requestId');\n  if (!(bytes instanceof Uint8Array)) reject('has bytes that are not a Uint8Array');\n  if (recovery !== undefined) {\n    if (typeof recovery !== 'number' || !Number.isInteger(recovery)) {\n      reject('has a recovery that is not an integer');\n    }\n    if (recovery < 0 || recovery > 3) reject('has a recovery outside 0..3');\n  }\n  return {\n    requestId,\n    bytes: new Uint8Array(bytes),\n    ...(recovery !== undefined ? { recovery } : {}),\n  };\n}\n\nfunction checkResult(value: unknown, reject: Reject): CheckedResult {\n  if (typeof value !== 'object' || value === null) reject('result is not an object');\n  const { status, signatures, ticket } = value as Record<string, unknown>;\n  if (status === 'pending') {\n    if (ticket !== undefined && typeof ticket !== 'string')\n      reject('ticket is not a string');\n    return ticket === undefined ? { status } : { status, ticket };\n  }\n  if (status !== 'signed') reject('status is neither signed nor pending');\n  if (!Array.isArray(signatures)) reject('signatures is not an array');\n  // An index loop, not `.map`: an own `map` property on the array cannot skip the checks.\n  const checked: SignatureBundle[] = [];\n  for (let index = 0; index < signatures.length; index++) {\n    const entry: unknown = signatures[index];\n    checked.push(\n      checkBundle(entry, (problem) => reject(`signature #${index} ${problem}`)),\n    );\n  }\n  return { status, signatures: checked };\n}\n\n/** Copies a request's bytes (and keyRef/params) so its holder cannot change the original. */\nfunction snapshotRequest(request: SigningRequest): SigningRequest {\n  const { keyRef, params } = request;\n  return {\n    id: request.id,\n    scheme: request.scheme,\n    payload: new Uint8Array(request.payload),\n    payloadKind: request.payloadKind,\n    publicKey: new Uint8Array(request.publicKey),\n    ...(keyRef ? { keyRef: { ...keyRef } } : {}),\n    ...(params\n      ? {\n          params: {\n            ...params,\n            ...(params.tweak ? { tweak: new Uint8Array(params.tweak) } : {}),\n          },\n        }\n      : {}),\n  };\n}\n\n/** Cancels one ticket; false when the signer cannot cancel or its cancellation failed. */\nasync function cancelTicket(\n  signer: Signer | undefined,\n  ticket: string,\n): Promise<boolean> {\n  try {\n    if (typeof signer?.cancelRequest !== 'function') return false;\n    await signer.cancelRequest(ticket);\n    return true;\n  } catch {\n    return false;\n  }\n}\n\nexport class SigningOrchestrator {\n  constructor(private readonly deps: OrchestratorDeps) {}\n\n  /** Runs the `beforeSign` policy hook; any throw is a veto. */\n  async authorize(ctx: SigningContext): Promise<void> {\n    const hook = this.deps.hooks().beforeSign;\n    if (!hook) return;\n    try {\n      await hook(ctx);\n    } catch (error) {\n      if (isCryptoAioError(error, 'POLICY_REJECTED')) throw error;\n      const cause = sanitizeError(error);\n      throw new SigningError(\n        'POLICY_REJECTED',\n        error instanceof Error ? cause.message : 'signing vetoed by policy',\n        { cause, context: { operationId: ctx.operationId } },\n      );\n    }\n  }\n\n  /**\n   * Signs requests not covered by `existing`, batching per signer and verifying every\n   * signature. Each `existing` entry for one of `requests` is shape-checked, copied and\n   * re-verified first (SIGNATURE_MISMATCH otherwise); entries for other ids are ignored.\n   */\n  async sign(\n    wallet: ResolvedWallet,\n    callerRequests: readonly SigningRequest[],\n    ctx: SigningContext,\n    existing: readonly SignatureBundle[] = [],\n  ): Promise<OrchestratedResult> {\n    // Private snapshots: neither the caller nor a signer can change what gets verified.\n    const requests = callerRequests.map(snapshotRequest);\n    const done = this.#adopt(existing, new Map(requests.map((r) => [r.id, r])));\n    const groups = new Map<string, { signer: Signer; requests: SigningRequest[] }>();\n    for (const request of requests) {\n      if (done.has(request.id)) continue;\n      const route = this.#route(wallet, request, { operationId: ctx.operationId });\n      const group = groups.get(route.id) ?? { signer: route.signer, requests: [] };\n      group.requests.push(request);\n      groups.set(route.id, group);\n    }\n    let pending = false;\n    const tickets: SignerTicket[] = [];\n    for (const [signerId, group] of groups) {\n      let result: CheckedResult;\n      try {\n        result = await this.#signGroup(signerId, group.signer, group.requests, ctx, done);\n      } catch (error) {\n        throw await this.#withdraw(error, tickets, groups);\n      }\n      if (result.status === 'pending') {\n        pending = true;\n        if (result.ticket !== undefined)\n          tickets.push({ signerId, ticket: result.ticket });\n      }\n    }\n    const signatures = requests\n      .map((request) => done.get(request.id))\n      .filter((s): s is SignatureBundle => s !== undefined);\n    return pending\n      ? { status: 'pending', tickets, signatures }\n      : { status: 'signed', signatures };\n  }\n\n  verify(request: SigningRequest, signature: SignatureBundle): void {\n    const valid = this.deps\n      .schemes()\n      .get(request.scheme)\n      .verify({\n        publicKey: request.publicKey,\n        payload: request.payload,\n        signature: signature.bytes,\n        ...(signature.recovery !== undefined ? { recovery: signature.recovery } : {}),\n        ...(request.params ? { params: request.params } : {}),\n      });\n    if (!valid) {\n      throw new SigningError(\n        'SIGNATURE_MISMATCH',\n        `signature for request '${request.id}' does not verify against the expected public key`,\n      );\n    }\n  }\n\n  /**\n   * Merges externally produced signatures (cold/offline/MPC) after verifying each one, and\n   * re-verifies `existing` the same way `sign()` does.\n   */\n  accept(\n    requests: readonly SigningRequest[],\n    provided: readonly SignatureBundle[],\n    existing: readonly SignatureBundle[],\n  ): SignatureBundle[] {\n    if (!Array.isArray(provided)) {\n      throw new ValidationError('INVALID_INTENT', 'external signatures must be an array');\n    }\n    const byId = new Map(requests.map((r) => [r.id, r]));\n    const merged = this.#adopt(existing, byId);\n    for (const [index, entry] of provided.entries()) {\n      const signature = checkBundle(entry, (problem) => {\n        throw new ValidationError(\n          'INVALID_INTENT',\n          `external signature #${index} ${problem}`,\n        );\n      });\n      const request = byId.get(signature.requestId);\n      if (!request) {\n        throw new ValidationError(\n          'INVALID_INTENT',\n          `unknown signing request '${signature.requestId}'`,\n        );\n      }\n      this.verify(request, signature);\n      merged.set(signature.requestId, signature);\n    }\n    return requests\n      .map((r) => merged.get(r.id))\n      .filter((s): s is SignatureBundle => s !== undefined);\n  }\n\n  /** Picks the signer for a request; the routing reads are guarded like signer calls. */\n  #route(\n    wallet: ResolvedWallet,\n    request: SigningRequest,\n    context: ErrorContext,\n  ): { readonly id: string; readonly signer: Signer } {\n    const unavailable = `no signer of wallet '${wallet.name}' can sign request '${request.id}' (${request.scheme})`;\n    let route: { readonly id: string; readonly signer: Signer } | undefined;\n    try {\n      route = wallet.signerFor(request.keyRef);\n    } catch (error) {\n      throw signerFailure(error, 'SIGNER_UNAVAILABLE', unavailable, context);\n    }\n    if (\n      !route ||\n      !signerSchemes(route.id, route.signer, context).includes(request.scheme)\n    ) {\n      throw new SigningError('SIGNER_UNAVAILABLE', unavailable, { context });\n    }\n    return route;\n  }\n\n  /**\n   * Re-checks previously collected signatures before trusting them: each entry whose\n   * `requestId` names one of `byId` is shape-checked, copied and verified; others are ignored.\n   */\n  #adopt(\n    existing: readonly SignatureBundle[],\n    byId: ReadonlyMap<string, SigningRequest>,\n  ): Map<string, SignatureBundle> {\n    const adopted = new Map<string, SignatureBundle>();\n    for (let index = 0; index < existing.length; index++) {\n      const entry: unknown = existing[index];\n      const id =\n        typeof entry === 'object' && entry !== null\n          ? (entry as { requestId?: unknown }).requestId\n          : undefined;\n      if (typeof id !== 'string' || !byId.has(id)) continue;\n      const signature = checkBundle(entry, (problem) => {\n        throw new SigningError(\n          'SIGNATURE_MISMATCH',\n          `existing signature for request '${id}' ${problem}`,\n        );\n      });\n      const request = byId.get(signature.requestId);\n      if (!request) continue;\n      this.verify(request, signature);\n      adopted.set(request.id, signature);\n    }\n    return adopted;\n  }\n\n  /**\n   * Asks one signer for its batch. The signer gets fresh copies; its signatures are verified\n   * against `requests` (the orchestrator's snapshots) and land in `done`.\n   */\n  async #signGroup(\n    signerId: string,\n    signer: Signer,\n    requests: readonly SigningRequest[],\n    ctx: SigningContext,\n    done: Map<string, SignatureBundle>,\n  ): Promise<CheckedResult> {\n    const started = this.deps.clock.now();\n    this.deps.events.emit('signer.requested', {\n      namespace: ctx.namespace,\n      operationId: ctx.operationId,\n      signerId,\n      requests: requests.length,\n    });\n    try {\n      const result = await this.#request(\n        signerId,\n        signer,\n        requests.map(snapshotRequest),\n        ctx,\n      );\n      if (result.status === 'signed') {\n        for (const request of requests) {\n          const signature = result.signatures.find((s) => s.requestId === request.id);\n          if (!signature) {\n            throw new SigningError(\n              'SIGNING_FAILED',\n              `signer '${signerId}' returned no signature for request '${request.id}'`,\n              { context: { operationId: ctx.operationId } },\n            );\n          }\n          this.verify(request, signature);\n          done.set(request.id, signature);\n        }\n      }\n      this.#completed(ctx, signerId, result.status, started);\n      return result;\n    } catch (error) {\n      this.#completed(ctx, signerId, 'error', started);\n      throw error;\n    }\n  }\n\n  /**\n   * Before a failure escapes `sign()`, cancels (best effort) every ticket issued earlier\n   * in the same call through the signer that issued it. A ticket that could not be cancelled\n   * (no `cancelRequest`, or it threw) is counted in `details.cancelFailures`.\n   */\n  async #withdraw(\n    error: unknown,\n    tickets: readonly SignerTicket[],\n    groups: ReadonlyMap<string, { readonly signer: Signer }>,\n  ): Promise<unknown> {\n    if (tickets.length === 0) return error;\n    let cancelFailures = 0;\n    for (const { signerId, ticket } of tickets) {\n      if (!(await cancelTicket(groups.get(signerId)?.signer, ticket)))\n        cancelFailures += 1;\n    }\n    if (!isCryptoAioError(error)) return error;\n    return withContext(error, {}, { details: { ...error.details, cancelFailures } });\n  }\n\n  /**\n   * Calls one signer and validates what it returns. A non-CryptoAioError failure (including\n   * a malformed result that cannot even be read) becomes SIGNING_FAILED with a sanitized\n   * cause: custody backends put URLs and credentials in their messages.\n   */\n  async #request(\n    signerId: string,\n    signer: Signer,\n    requests: readonly SigningRequest[],\n    ctx: SigningContext,\n  ): Promise<CheckedResult> {\n    const context = { operationId: ctx.operationId };\n    try {\n      const raw: unknown = await signer.sign(requests, ctx);\n      return checkResult(raw, (problem) => {\n        throw new SigningError(\n          'SIGNING_FAILED',\n          `signer '${signerId}' returned a malformed result: ${problem}`,\n          { context },\n        );\n      });\n    } catch (error) {\n      throw signerFailure(\n        error,\n        'SIGNING_FAILED',\n        `signer '${signerId}' failed`,\n        context,\n      );\n    }\n  }\n\n  #completed(\n    ctx: SigningContext,\n    signerId: string,\n    status: 'signed' | 'pending' | 'error',\n    started: number,\n  ): void {\n    this.deps.events.emit('signer.completed', {\n      namespace: ctx.namespace,\n      operationId: ctx.operationId,\n      signerId,\n      status,\n      latencyMs: this.deps.clock.now() - started,\n    });\n  }\n}\n"]}