@bcts/frost-hubert 1.0.0-alpha.22 → 1.0.0-beta.0

package/dist/round1-7v9LlE11.mjs

@@ -0,0 +1,373 @@
+import { t as __exportAll } from "./chunk-CjcI7cDX.mjs";
+import { Registry, resolveRegistryPath } from "./registry/index.mjs";
+import { c as parseAridUr, n as isVerbose } from "./common-CvH6dFvQ.mjs";
+import { f as parallelFetch, m as parallelSend } from "./parallel-D6zc6VW4.mjs";
+import { n as signingStateDir } from "./common-DUWvtc08.mjs";
+import { ARID, JSON as JSON$1, XID } from "@bcts/components";
+import { Envelope } from "@bcts/envelope";
+import { SealedRequest, SealedResponse } from "@bcts/gstp";
+import * as fs from "node:fs";
+import * as path from "node:path";
+//#region src/cmd/sign/coordinator/round1.ts
+/**
+* Copyright © 2023-2026 Blockchain Commons, LLC
+* Copyright © 2025-2026 Parity Technologies
+*
+*
+* Sign coordinator round 1 command.
+*
+* Port of cmd/sign/coordinator/round1.rs from frost-hubert-rust.
+*
+* @module
+*/
+var round1_exports = /* @__PURE__ */ __exportAll({
+	buildShareRequestForParticipant: () => buildShareRequestForParticipant,
+	collectCommitmentsParallel: () => collectCommitmentsParallel,
+	dispatchShareRequestsParallel: () => dispatchShareRequestsParallel,
+	persistCommitments: () => persistCommitments,
+	round1: () => round1,
+	updatePendingForShare: () => updatePendingForShare,
+	validateAndExtractCommitResponse: () => validateAndExtractCommitResponse
+});
+/**
+* Load the start state for a signing session.
+*
+* Port of `load_start_state()` from cmd/sign/coordinator/round1.rs.
+*/
+function loadStartState(registryPath, sessionId, groupHint) {
+	const base = path.dirname(registryPath);
+	const groupStateDir = path.join(base, "group-state");
+	const candidatePaths = [];
+	let groupDirs;
+	if (groupHint !== void 0) groupDirs = [[groupHint, path.join(groupStateDir, groupHint.hex())]];
+	else {
+		groupDirs = [];
+		if (fs.existsSync(groupStateDir)) {
+			for (const entry of fs.readdirSync(groupStateDir, { withFileTypes: true })) if (entry.isDirectory()) {
+				const dirName = entry.name;
+				if (dirName.length === 64 && /^[0-9a-fA-F]+$/.test(dirName)) {
+					const groupId = ARID.fromHex(dirName);
+					groupDirs.push([groupId, path.join(groupStateDir, dirName)]);
+				}
+			}
+		}
+	}
+	for (const [groupId, groupDir] of groupDirs) {
+		const candidate = path.join(groupDir, "signing", sessionId.hex(), "start.json");
+		if (fs.existsSync(candidate)) candidatePaths.push([groupId, candidate]);
+	}
+	if (candidatePaths.length === 0) throw new Error("No sign start state found; run `frost sign coordinator start` first");
+	if (candidatePaths.length > 1) throw new Error("Multiple signing sessions found; specify --group to disambiguate");
+	const [groupId, statePath] = candidatePaths[0];
+	const raw = JSON.parse(fs.readFileSync(statePath, "utf-8"));
+	const getStr = (key) => {
+		const value = raw[key];
+		if (typeof value !== "string") throw new Error(`Missing or invalid ${key} in start.json`);
+		return value;
+	};
+	const sessionInState = parseAridUr(getStr("session_id"));
+	const groupInState = parseAridUr(getStr("group"));
+	if (sessionInState.hex() !== sessionId.hex()) throw new Error(`start.json session ${sessionInState.urString()} does not match requested session ${sessionId.urString()}`);
+	if (groupInState.hex() !== groupId.hex()) throw new Error(`start.json group ${groupInState.urString()} does not match directory group ${groupId.urString()}`);
+	const targetUr = getStr("target");
+	const participantsVal = raw["participants"];
+	if (participantsVal === void 0 || typeof participantsVal !== "object") throw new Error("Missing participants in start.json");
+	const participants = /* @__PURE__ */ new Map();
+	for (const [xidStr, value] of Object.entries(participantsVal)) {
+		const xid = XID.fromURString(xidStr);
+		if (typeof value !== "object" || value === null) throw new Error("Participant entry is not an object in start.json");
+		const commitAridStr = value["commit_arid"];
+		const shareAridStr = value["share_arid"];
+		if (typeof commitAridStr !== "string") throw new Error("Missing commit_arid in start.json");
+		if (typeof shareAridStr !== "string") throw new Error("Missing share_arid in start.json");
+		participants.set(xid.urString(), {
+			commitArid: parseAridUr(commitAridStr),
+			shareArid: parseAridUr(shareAridStr)
+		});
+	}
+	return {
+		groupId,
+		targetUr,
+		participants
+	};
+}
+/**
+* Validate and extract data from a sign commit response.
+*
+* Port of `validate_and_extract_sign_round1_response()` from cmd/sign/coordinator/round1.rs.
+*/
+function validateAndExtractCommitResponse(envelope, coordinatorKeys, expectedSender, expectedSessionId) {
+	const now = /* @__PURE__ */ new Date();
+	const sealedResponse = SealedResponse.tryFromEncryptedEnvelope(envelope, void 0, now, coordinatorKeys);
+	if (!sealedResponse.sender().xid().equals(expectedSender)) throw new Error(`Unexpected response sender: ${sealedResponse.sender().xid().urString()} (expected ${expectedSender.urString()})`);
+	if (sealedResponse.isErr()) {
+		const errorEnvelope = sealedResponse.error();
+		let reason = "unknown reason";
+		try {
+			const reasonEnv = errorEnvelope.objectForPredicate("reason");
+			if (reasonEnv !== void 0) reason = reasonEnv.extractString();
+		} catch {}
+		throw new Error(`Participant rejected signInvite: ${reason}`);
+	}
+	const result = sealedResponse.result();
+	result.checkSubjectUnit();
+	result.checkType("signRound1Response");
+	const responseSession = result.tryObjectForPredicate("session", (cbor) => ARID.fromTaggedCbor(cbor));
+	if (responseSession.hex() !== expectedSessionId.hex()) throw new Error(`Response session ${responseSession.urString()} does not match expected ${expectedSessionId.urString()}`);
+	const commitmentsJson = result.tryObjectForPredicate("commitments", (cbor) => JSON$1.fromTaggedCbor(cbor));
+	return {
+		commitments: JSON.parse(new TextDecoder().decode(commitmentsJson.toData())),
+		nextRequestArid: result.tryObjectForPredicate("response_arid", (cbor) => ARID.fromTaggedCbor(cbor))
+	};
+}
+/**
+* Collect signing commitments in parallel.
+*
+* Port of `collect_sign_round1_parallel()` from cmd/sign/coordinator/round1.rs.
+*/
+async function collectCommitmentsParallel(client, registry, startState, coordinator, sessionId, timeout) {
+	const requests = [];
+	for (const [xidStr, state] of startState.participants) {
+		const xid = XID.fromURString(xidStr);
+		const name = registry.participant(xid)?.petName() ?? xid.urString();
+		requests.push([
+			xid,
+			state.commitArid,
+			name
+		]);
+	}
+	const coordinatorKeys = coordinator.inceptionPrivateKeys();
+	if (coordinatorKeys === void 0) throw new Error("Missing coordinator private keys");
+	return parallelFetch(client, requests, (envelope, xid) => {
+		try {
+			return validateAndExtractCommitResponse(envelope, coordinatorKeys, xid, sessionId);
+		} catch (e) {
+			return { rejected: e instanceof Error ? e.message : String(e) };
+		}
+	}, { timeoutSeconds: timeout });
+}
+/**
+* Build a sign share request for a participant.
+*
+* Port of `build_sign_share_request()` from cmd/sign/coordinator/round1.rs.
+*/
+function buildShareRequestForParticipant(sender, _groupId, sessionId, responseArid, commitments) {
+	let request = SealedRequest.new("signRound2", sessionId, sender).withParameter("session", sessionId).withParameter("response_arid", responseArid);
+	for (const [xidStr, commits] of commitments) {
+		const xid = XID.fromURString(xidStr);
+		const commitsJson = JSON$1.fromData(new TextEncoder().encode(JSON.stringify(commits)));
+		const entry = Envelope.new(xid).addAssertion("commitments", commitsJson.taggedCborData());
+		request = request.withParameter("commitment", entry);
+	}
+	return request;
+}
+/**
+* Dispatch share requests to participants in parallel.
+*
+* Port of parallel dispatch logic from cmd/sign/coordinator/round1.rs.
+*/
+async function dispatchShareRequestsParallel(client, registry, owner, startState, sessionId, collection, commitments, previewShare, verbose) {
+	const signerKeys = owner.xidDocument().inceptionPrivateKeys();
+	if (signerKeys === void 0) throw new Error("Coordinator XID document has no signing keys");
+	const validUntil = new Date(Date.now() + 3600 * 1e3);
+	const messages = [];
+	let previewPrinted = false;
+	for (const [xid, data] of collection.successes) {
+		const xidStr = xid.urString();
+		const participantState = startState.participants.get(xidStr);
+		if (participantState === void 0) throw new Error(`Participant ${xidStr} not found in start state`);
+		const participantName = registry.participant(xid)?.petName() ?? xidStr;
+		let recipientDoc;
+		if (xid.urString() === owner.xid().urString()) recipientDoc = owner.xidDocument();
+		else {
+			const record = registry.participant(xid);
+			if (record === void 0) throw new Error(`Participant ${xidStr} not found in registry`);
+			recipientDoc = record.xidDocument();
+		}
+		const request = buildShareRequestForParticipant(owner.xidDocument(), startState.groupId, sessionId, participantState.shareArid, commitments);
+		if (previewShare === true && !previewPrinted) {
+			const preview = request.toEnvelope(validUntil, signerKeys, void 0);
+			console.log(`# signRound2 preview for ${xidStr}`);
+			console.log(preview.format());
+			previewPrinted = true;
+		}
+		const sealedEnvelope = request.toEnvelopeForRecipients(validUntil, signerKeys, [recipientDoc]);
+		messages.push([
+			xid,
+			data.nextRequestArid,
+			sealedEnvelope,
+			participantName
+		]);
+	}
+	console.error();
+	return parallelSend(client, messages, verbose);
+}
+/**
+* Persist collected commitments to disk.
+*
+* Port of commitments persistence logic from cmd/sign/coordinator/round1.rs.
+*/
+function persistCommitments(registryPath, groupId, sessionId, startState, commitments) {
+	const signingDir = signingStateDir(registryPath, groupId.hex(), sessionId.hex());
+	fs.mkdirSync(signingDir, { recursive: true });
+	const commitmentsPath = path.join(signingDir, "commitments.json");
+	const commitmentsJson = {};
+	for (const [xidStr, commits] of commitments) {
+		const participantState = startState.participants.get(xidStr);
+		if (participantState === void 0) throw new Error(`Participant ${xidStr} not found in start state`);
+		commitmentsJson[xidStr] = {
+			commitments: commits,
+			share_arid: participantState.shareArid.urString()
+		};
+	}
+	const root = {
+		group: groupId.urString(),
+		session: sessionId.urString(),
+		target: startState.targetUr,
+		commitments: commitmentsJson
+	};
+	fs.writeFileSync(commitmentsPath, JSON.stringify(root, null, 2));
+	return commitmentsPath;
+}
+/**
+* Update pending requests in the registry for share phase.
+*
+* Note: In the Rust implementation, the registry doesn't track pending ARIDs
+* directly on participant records. The pending state is managed through the
+* start.json and commitments.json files in the signing state directory.
+*
+* This function is provided for API compatibility but currently does nothing.
+*/
+function updatePendingForShare(_registry, _collection, _startState) {}
+/**
+* Execute the sign coordinator round 1 command.
+*
+* Collects signing commitments from participants.
+*
+* Port of `round1()` from cmd/sign/coordinator/round1.rs.
+*/
+async function round1(client, options, cwd) {
+	const registryPath = resolveRegistryPath(options.registryPath, cwd);
+	const registry = Registry.load(registryPath);
+	const owner = registry.owner();
+	if (owner === void 0) throw new Error("Registry owner is required");
+	const sessionId = parseAridUr(options.sessionId);
+	const startState = loadStartState(registryPath, sessionId, options.groupId !== void 0 ? parseAridUr(options.groupId) : void 0);
+	const groupId = startState.groupId;
+	const groupRecord = registry.group(groupId);
+	if (groupRecord === void 0) throw new Error("Group not found in registry");
+	if (groupRecord.coordinator().xid().urString() !== owner.xid().urString()) throw new Error(`Only the coordinator can collect signInvite responses. Coordinator: ${groupRecord.coordinator().xid().urString()}, Owner: ${owner.xid().urString()}`);
+	if (options.parallel === true) {
+		const collection = await collectCommitmentsParallel(client, registry, startState, owner.xidDocument(), sessionId, options.timeoutSeconds);
+		if (collection.rejections.length > 0) {
+			console.error();
+			console.error("Rejections:");
+			for (const [xid, reason] of collection.rejections) console.error(`  ${xid.urString()}: ${reason}`);
+		}
+		if (collection.errors.length > 0) {
+			console.error();
+			console.error("Errors:");
+			for (const [xid, error] of collection.errors) console.error(`  ${xid.urString()}: ${error}`);
+		}
+		if (collection.timeouts.length > 0) {
+			console.error();
+			console.error("Timeouts:");
+			for (const xid of collection.timeouts) console.error(`  ${xid.urString()}`);
+		}
+		if (!collection.allSucceeded()) throw new Error(`Sign commit collection incomplete: ${collection.successes.length} succeeded, ${collection.rejections.length} rejected, ${collection.errors.length} errors, ${collection.timeouts.length} timeouts`);
+		const commitments = /* @__PURE__ */ new Map();
+		for (const [xid, data] of collection.successes) commitments.set(xid.urString(), data.commitments);
+		const commitmentsPath = persistCommitments(registryPath, groupId, sessionId, startState, commitments);
+		const failures = (await dispatchShareRequestsParallel(client, registry, owner, startState, sessionId, collection, commitments, options.previewShare, options.verbose)).filter(([_, err]) => err !== null);
+		if (failures.length > 0) {
+			for (const [xid, error] of failures) if (error !== null) console.error(`Failed to send to ${xid.urString()}: ${error.message}`);
+			throw new Error(`Failed to send signRound2 requests to ${failures.length} participants`);
+		}
+		const displayPath = path.relative(cwd, commitmentsPath) || commitmentsPath;
+		if (isVerbose() || options.verbose === true) {
+			console.error();
+			console.error(`Collected ${collection.successes.length} signInvite responses. Saved to ${displayPath}`);
+			console.error(`Dispatched ${collection.successes.length} signRound2 requests.`);
+		}
+		return {
+			accepted: collection.successes.length,
+			rejected: collection.rejections.length,
+			errors: collection.errors.length,
+			timeouts: collection.timeouts.length
+		};
+	} else {
+		if (isVerbose() || options.verbose === true) console.error(`Collecting signInvite responses for session ${sessionId.urString()} from ${startState.participants.size} participants...`);
+		const commitments = /* @__PURE__ */ new Map();
+		const sendToArids = /* @__PURE__ */ new Map();
+		const errors = [];
+		const coordinatorKeys = owner.xidDocument().inceptionPrivateKeys();
+		if (coordinatorKeys === void 0) throw new Error("Coordinator XID document has no inception private keys");
+		for (const [xidStr, participantState] of startState.participants) {
+			const xid = XID.fromURString(xidStr);
+			const participantName = registry.participant(xid)?.petName() ?? xidStr;
+			try {
+				const envelope = await client.get(participantState.commitArid, options.timeoutSeconds);
+				if (envelope === void 0) throw new Error("Response not found in Hubert storage");
+				const data = validateAndExtractCommitResponse(envelope, coordinatorKeys, xid, sessionId);
+				commitments.set(xidStr, data.commitments);
+				sendToArids.set(xidStr, data.nextRequestArid);
+				if (isVerbose() || options.verbose === true) console.error(`  ✓ ${participantName}`);
+			} catch (e) {
+				errors.push([xid, e instanceof Error ? e.message : String(e)]);
+				if (isVerbose() || options.verbose === true) console.error(`  ✗ ${participantName}: ${e instanceof Error ? e.message : String(e)}`);
+			}
+		}
+		if (errors.length > 0) throw new Error(`Sign commit collection incomplete: ${errors.length} of ${startState.participants.size} responses failed`);
+		if (commitments.size !== startState.participants.size) {
+			const missing = [];
+			for (const xidStr of startState.participants.keys()) if (!commitments.has(xidStr)) missing.push(xidStr);
+			throw new Error(`Missing signInvite responses from: ${missing.join(", ")}`);
+		}
+		const commitmentsPath = persistCommitments(registryPath, groupId, sessionId, startState, commitments);
+		const signerKeys = owner.xidDocument().inceptionPrivateKeys();
+		if (signerKeys === void 0) throw new Error("Owner XID document has no inception private keys");
+		const validUntil = new Date(Date.now() + 3600 * 1e3);
+		if (isVerbose() || options.verbose === true) console.error(`Dispatching signRound2 requests to ${sendToArids.size} participants...`);
+		else console.error();
+		let previewPrinted = false;
+		for (const [xidStr, sendToArid] of sendToArids) {
+			const xid = XID.fromURString(xidStr);
+			const participantState = startState.participants.get(xidStr);
+			if (participantState === void 0) throw new Error(`Participant state not found for ${xidStr}`);
+			const participantName = registry.participant(xid)?.petName() ?? xidStr;
+			let recipientDoc;
+			if (xidStr === owner.xid().urString()) recipientDoc = owner.xidDocument();
+			else {
+				const record = registry.participant(xid);
+				if (record === void 0) throw new Error(`Participant ${xidStr} not found in registry`);
+				recipientDoc = record.xidDocument();
+			}
+			const request = buildShareRequestForParticipant(owner.xidDocument(), groupId, sessionId, participantState.shareArid, commitments);
+			if (options.previewShare === true && !previewPrinted) {
+				const preview = request.toEnvelope(validUntil, signerKeys, void 0);
+				console.log(`# signRound2 preview for ${xidStr}`);
+				console.log(preview.format());
+				previewPrinted = true;
+			}
+			const sealedEnvelope = request.toEnvelopeForRecipients(validUntil, signerKeys, [recipientDoc]);
+			await client.put(sendToArid, sealedEnvelope);
+			if (isVerbose() || options.verbose === true) console.error(`  ✓ ${participantName}`);
+		}
+		const displayPath = path.relative(cwd, commitmentsPath) || commitmentsPath;
+		if (isVerbose() || options.verbose === true) {
+			console.error();
+			console.error(`Collected ${commitments.size} signInvite responses. Saved to ${displayPath}`);
+			console.error(`Dispatched ${commitments.size} signRound2 requests.`);
+		}
+		return {
+			accepted: commitments.size,
+			rejected: 0,
+			errors: errors.length,
+			timeouts: 0
+		};
+	}
+}
+//#endregion
+export { round1 as a, validateAndExtractCommitResponse as c, persistCommitments as i, collectCommitmentsParallel as n, round1_exports as o, dispatchShareRequestsParallel as r, updatePendingForShare as s, buildShareRequestForParticipant as t };
+
+//# sourceMappingURL=round1-7v9LlE11.mjs.map

package/dist/round1-7v9LlE11.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"round1-7v9LlE11.mjs","names":["ARIDClass","XIDClass","JSONClass"],"sources":["../src/cmd/sign/coordinator/round1.ts"],"sourcesContent":["/**\n * Copyright © 2023-2026 Blockchain Commons, LLC\n * Copyright © 2025-2026 Parity Technologies\n *\n *\n * Sign coordinator round 1 command.\n *\n * Port of cmd/sign/coordinator/round1.rs from frost-hubert-rust.\n *\n * @module\n */\n\nimport * as fs from \"node:fs\";\nimport * as path from \"node:path\";\n\nimport {\n  type ARID,\n  type XID,\n  ARID as ARIDClass,\n  XID as XIDClass,\n  JSON as JSONClass,\n  type PrivateKeys,\n} from \"@bcts/components\";\nimport { Envelope } from \"@bcts/envelope\";\nimport { SealedRequest, SealedResponse } from \"@bcts/gstp\";\nimport { type XIDDocument } from \"@bcts/xid\";\n\nimport { Registry, resolveRegistryPath, type OwnerRecord } from \"../../../registry/index.js\";\nimport {\n  parallelFetch,\n  parallelSend,\n  type CollectionResult,\n  type ParallelFetchConfig,\n} from \"../../parallel.js\";\nimport { type StorageClient } from \"../../storage.js\";\nimport { parseAridUr } from \"../../dkg/common.js\";\nimport { signingStateDir } from \"../common.js\";\nimport { isVerbose } from \"../../common.js\";\n\n/**\n * Options for the sign round1 command.\n */\nexport interface SignRound1Options {\n  registryPath?: string;\n  groupId?: string;\n  sessionId: string;\n  parallel?: boolean;\n  timeoutSeconds?: number;\n  verbose?: boolean;\n  previewShare?: boolean;\n}\n\n/**\n * Result of the sign round1 command.\n */\nexport interface SignRound1Result {\n  accepted: number;\n  rejected: number;\n  errors: number;\n  timeouts: number;\n}\n\n/**\n * Data extracted from a successful sign round1 response.\n *\n * Port of `struct SignRound1ResponseData` from cmd/sign/coordinator/round1.rs.\n */\nexport interface SignRound1ResponseData {\n  /** The signing commitments from this participant */\n  commitments: unknown; // frost::round1::SigningCommitments equivalent\n  /** The ARID where the participant expects the next request */\n  nextRequestArid: ARID;\n}\n\n/**\n * State for a participant in the signing session.\n *\n * Port of `struct StartParticipant` from cmd/sign/coordinator/round1.rs.\n */\nexport interface StartParticipant {\n  commitArid: ARID;\n  shareArid: ARID;\n}\n\n/**\n * Start state for a signing session.\n *\n * Port of `struct StartState` from cmd/sign/coordinator/round1.rs.\n */\nexport interface StartState {\n  groupId: ARID;\n  targetUr: string;\n  participants: Map<string, StartParticipant>; // Map by XID UR string\n}\n\n/**\n * Load the start state for a signing session.\n *\n * Port of `load_start_state()` from cmd/sign/coordinator/round1.rs.\n */\nfunction loadStartState(registryPath: string, sessionId: ARID, groupHint?: ARID): StartState {\n  const base = path.dirname(registryPath);\n  const groupStateDir = path.join(base, \"group-state\");\n\n  const candidatePaths: [ARID, string][] = [];\n  let groupDirs: [ARID, string][];\n\n  if (groupHint !== undefined) {\n    groupDirs = [[groupHint, path.join(groupStateDir, groupHint.hex())]];\n  } else {\n    groupDirs = [];\n    if (fs.existsSync(groupStateDir)) {\n      for (const entry of fs.readdirSync(groupStateDir, { withFileTypes: true })) {\n        if (entry.isDirectory()) {\n          const dirName = entry.name;\n          if (dirName.length === 64 && /^[0-9a-fA-F]+$/.test(dirName)) {\n            const groupId = ARIDClass.fromHex(dirName);\n            groupDirs.push([groupId, path.join(groupStateDir, dirName)]);\n          }\n        }\n      }\n    }\n  }\n\n  for (const [groupId, groupDir] of groupDirs) {\n    const candidate = path.join(groupDir, \"signing\", sessionId.hex(), \"start.json\");\n    if (fs.existsSync(candidate)) {\n      candidatePaths.push([groupId, candidate]);\n    }\n  }\n\n  if (candidatePaths.length === 0) {\n    throw new Error(\"No sign start state found; run `frost sign coordinator start` first\");\n  }\n  if (candidatePaths.length > 1) {\n    throw new Error(\"Multiple signing sessions found; specify --group to disambiguate\");\n  }\n\n  const [groupId, statePath] = candidatePaths[0];\n  const raw = JSON.parse(fs.readFileSync(statePath, \"utf-8\")) as Record<string, unknown>;\n\n  const getStr = (key: string): string => {\n    const value = raw[key];\n    if (typeof value !== \"string\") {\n      throw new Error(`Missing or invalid ${key} in start.json`);\n    }\n    return value;\n  };\n\n  const sessionInState = parseAridUr(getStr(\"session_id\"));\n  const groupInState = parseAridUr(getStr(\"group\"));\n\n  if (sessionInState.hex() !== sessionId.hex()) {\n    throw new Error(\n      `start.json session ${sessionInState.urString()} does not match requested session ${sessionId.urString()}`,\n    );\n  }\n  if (groupInState.hex() !== groupId.hex()) {\n    throw new Error(\n      `start.json group ${groupInState.urString()} does not match directory group ${groupId.urString()}`,\n    );\n  }\n\n  const targetUr = getStr(\"target\");\n\n  const participantsVal = raw[\"participants\"] as Record<string, Record<string, string>> | undefined;\n  if (participantsVal === undefined || typeof participantsVal !== \"object\") {\n    throw new Error(\"Missing participants in start.json\");\n  }\n\n  const participants = new Map<string, StartParticipant>();\n  for (const [xidStr, value] of Object.entries(participantsVal)) {\n    const xid = XIDClass.fromURString(xidStr);\n    if (typeof value !== \"object\" || value === null) {\n      throw new Error(\"Participant entry is not an object in start.json\");\n    }\n\n    const commitAridStr = value[\"commit_arid\"];\n    const shareAridStr = value[\"share_arid\"];\n\n    if (typeof commitAridStr !== \"string\") {\n      throw new Error(\"Missing commit_arid in start.json\");\n    }\n    if (typeof shareAridStr !== \"string\") {\n      throw new Error(\"Missing share_arid in start.json\");\n    }\n\n    participants.set(xid.urString(), {\n      commitArid: parseAridUr(commitAridStr),\n      shareArid: parseAridUr(shareAridStr),\n    });\n  }\n\n  return { groupId, targetUr, participants };\n}\n\n/**\n * Validate and extract data from a sign commit response.\n *\n * Port of `validate_and_extract_sign_round1_response()` from cmd/sign/coordinator/round1.rs.\n */\nexport function validateAndExtractCommitResponse(\n  envelope: Envelope,\n  coordinatorKeys: PrivateKeys,\n  expectedSender: XID,\n  expectedSessionId: ARID,\n): SignRound1ResponseData {\n  const now = new Date();\n  const sealedResponse = SealedResponse.tryFromEncryptedEnvelope(\n    envelope,\n    undefined,\n    now,\n    coordinatorKeys,\n  );\n\n  if (!sealedResponse.sender().xid().equals(expectedSender)) {\n    throw new Error(\n      `Unexpected response sender: ${sealedResponse.sender().xid().urString()} (expected ${expectedSender.urString()})`,\n    );\n  }\n\n  if (sealedResponse.isErr()) {\n    const errorEnvelope = sealedResponse.error();\n    let reason = \"unknown reason\";\n    try {\n      const reasonEnv = errorEnvelope.objectForPredicate(\"reason\");\n      if (reasonEnv !== undefined) {\n        reason = reasonEnv.extractString();\n      }\n    } catch {\n      // Keep default reason\n    }\n    throw new Error(`Participant rejected signInvite: ${reason}`);\n  }\n\n  const result = sealedResponse.result();\n\n  result.checkSubjectUnit();\n  result.checkType(\"signRound1Response\");\n\n  const responseSession = result.tryObjectForPredicate(\"session\", (cbor) =>\n    ARIDClass.fromTaggedCbor(cbor),\n  );\n  if (responseSession.hex() !== expectedSessionId.hex()) {\n    throw new Error(\n      `Response session ${responseSession.urString()} does not match expected ${expectedSessionId.urString()}`,\n    );\n  }\n\n  const commitmentsJson = result.tryObjectForPredicate(\"commitments\", (cbor) =>\n    JSONClass.fromTaggedCbor(cbor),\n  );\n  const commitments = JSON.parse(new TextDecoder().decode(commitmentsJson.toData())) as Record<\n    string,\n    unknown\n  >;\n\n  const nextRequestArid = result.tryObjectForPredicate(\"response_arid\", (cbor) =>\n    ARIDClass.fromTaggedCbor(cbor),\n  );\n\n  return { commitments, nextRequestArid };\n}\n\n/**\n * Collect signing commitments in parallel.\n *\n * Port of `collect_sign_round1_parallel()` from cmd/sign/coordinator/round1.rs.\n */\nexport async function collectCommitmentsParallel(\n  client: StorageClient,\n  registry: Registry,\n  startState: StartState,\n  coordinator: XIDDocument,\n  sessionId: ARID,\n  timeout?: number,\n): Promise<CollectionResult<SignRound1ResponseData>> {\n  const requests: [XID, ARID, string][] = [];\n\n  for (const [xidStr, state] of startState.participants) {\n    const xid = XIDClass.fromURString(xidStr);\n    const participant = registry.participant(xid);\n    const name = participant?.petName() ?? xid.urString();\n    requests.push([xid, state.commitArid, name]);\n  }\n\n  const coordinatorKeys = coordinator.inceptionPrivateKeys();\n  if (coordinatorKeys === undefined) {\n    throw new Error(\"Missing coordinator private keys\");\n  }\n\n  const config: ParallelFetchConfig = { timeoutSeconds: timeout };\n\n  return parallelFetch(\n    client,\n    requests,\n    (envelope: Envelope, xid: XID) => {\n      try {\n        return validateAndExtractCommitResponse(envelope, coordinatorKeys, xid, sessionId);\n      } catch (e) {\n        return { rejected: e instanceof Error ? e.message : String(e) };\n      }\n    },\n    config,\n  );\n}\n\n/**\n * Build a sign share request for a participant.\n *\n * Port of `build_sign_share_request()` from cmd/sign/coordinator/round1.rs.\n */\nexport function buildShareRequestForParticipant(\n  sender: XIDDocument,\n  _groupId: ARID,\n  sessionId: ARID,\n  responseArid: ARID,\n  commitments: Map<string, unknown>, // Map<XID UR string, commitments>\n): SealedRequest {\n  let request = SealedRequest.new(\"signRound2\", sessionId, sender)\n    .withParameter(\"session\", sessionId)\n    .withParameter(\"response_arid\", responseArid);\n\n  for (const [xidStr, commits] of commitments) {\n    const xid = XIDClass.fromURString(xidStr);\n    const commitsJson = JSONClass.fromData(new TextEncoder().encode(JSON.stringify(commits)));\n    // Create envelope with xid as subject, then add commitments assertion with JSON CBOR data\n    const entry = Envelope.new(xid).addAssertion(\"commitments\", commitsJson.taggedCborData());\n    request = request.withParameter(\"commitment\", entry);\n  }\n\n  return request;\n}\n\n/**\n * Dispatch share requests to participants in parallel.\n *\n * Port of parallel dispatch logic from cmd/sign/coordinator/round1.rs.\n */\nexport async function dispatchShareRequestsParallel(\n  client: StorageClient,\n  registry: Registry,\n  owner: OwnerRecord,\n  startState: StartState,\n  sessionId: ARID,\n  collection: CollectionResult<SignRound1ResponseData>,\n  commitments: Map<string, unknown>,\n  previewShare?: boolean,\n  verbose?: boolean,\n): Promise<[XID, Error | null][]> {\n  const signerKeys = owner.xidDocument().inceptionPrivateKeys();\n  if (signerKeys === undefined) {\n    throw new Error(\"Coordinator XID document has no signing keys\");\n  }\n\n  const validUntil = new Date(Date.now() + 60 * 60 * 1000); // 1 hour from now\n\n  const messages: [XID, ARID, Envelope, string][] = [];\n  let previewPrinted = false;\n\n  for (const [xid, data] of collection.successes) {\n    const xidStr = xid.urString();\n    const participantState = startState.participants.get(xidStr);\n    if (participantState === undefined) {\n      throw new Error(`Participant ${xidStr} not found in start state`);\n    }\n\n    const participant = registry.participant(xid);\n    const participantName = participant?.petName() ?? xidStr;\n\n    let recipientDoc: XIDDocument;\n    if (xid.urString() === owner.xid().urString()) {\n      recipientDoc = owner.xidDocument();\n    } else {\n      const record = registry.participant(xid);\n      if (record === undefined) {\n        throw new Error(`Participant ${xidStr} not found in registry`);\n      }\n      recipientDoc = record.xidDocument();\n    }\n\n    const request = buildShareRequestForParticipant(\n      owner.xidDocument(),\n      startState.groupId,\n      sessionId,\n      participantState.shareArid,\n      commitments,\n    );\n\n    if (previewShare === true && !previewPrinted) {\n      const preview = request.toEnvelope(validUntil, signerKeys, undefined);\n      console.log(`# signRound2 preview for ${xidStr}`);\n      console.log(preview.format());\n      previewPrinted = true;\n    }\n\n    const sealedEnvelope = request.toEnvelopeForRecipients(validUntil, signerKeys, [recipientDoc]);\n\n    messages.push([xid, data.nextRequestArid, sealedEnvelope, participantName]);\n  }\n\n  // Blank line to separate get phase from put phase\n  console.error();\n\n  return parallelSend(client, messages, verbose);\n}\n\n/**\n * Persist collected commitments to disk.\n *\n * Port of commitments persistence logic from cmd/sign/coordinator/round1.rs.\n */\nexport function persistCommitments(\n  registryPath: string,\n  groupId: ARID,\n  sessionId: ARID,\n  startState: StartState,\n  commitments: Map<string, unknown>,\n): string {\n  const signingDir = signingStateDir(registryPath, groupId.hex(), sessionId.hex());\n  fs.mkdirSync(signingDir, { recursive: true });\n\n  const commitmentsPath = path.join(signingDir, \"commitments.json\");\n  const commitmentsJson: Record<string, unknown> = {};\n\n  for (const [xidStr, commits] of commitments) {\n    const participantState = startState.participants.get(xidStr);\n    if (participantState === undefined) {\n      throw new Error(`Participant ${xidStr} not found in start state`);\n    }\n\n    commitmentsJson[xidStr] = {\n      commitments: commits,\n      share_arid: participantState.shareArid.urString(),\n    };\n  }\n\n  const root = {\n    group: groupId.urString(),\n    session: sessionId.urString(),\n    target: startState.targetUr,\n    commitments: commitmentsJson,\n  };\n\n  fs.writeFileSync(commitmentsPath, JSON.stringify(root, null, 2));\n\n  return commitmentsPath;\n}\n\n/**\n * Update pending requests in the registry for share phase.\n *\n * Note: In the Rust implementation, the registry doesn't track pending ARIDs\n * directly on participant records. The pending state is managed through the\n * start.json and commitments.json files in the signing state directory.\n *\n * This function is provided for API compatibility but currently does nothing.\n */\nexport function updatePendingForShare(\n  _registry: Registry,\n  _collection: CollectionResult<SignRound1ResponseData>,\n  _startState: StartState,\n): void {\n  // No-op: The Rust implementation manages pending state through files,\n  // not through the registry. The share_arid values are already stored\n  // in commitments.json and will be used for round 2 collection.\n}\n\n/**\n * Execute the sign coordinator round 1 command.\n *\n * Collects signing commitments from participants.\n *\n * Port of `round1()` from cmd/sign/coordinator/round1.rs.\n */\nexport async function round1(\n  client: StorageClient,\n  options: SignRound1Options,\n  cwd: string,\n): Promise<SignRound1Result> {\n  const registryPath = resolveRegistryPath(options.registryPath, cwd);\n  const registry = Registry.load(registryPath);\n\n  const owner = registry.owner();\n  if (owner === undefined) {\n    throw new Error(\"Registry owner is required\");\n  }\n\n  const sessionId = parseAridUr(options.sessionId);\n  const groupHint = options.groupId !== undefined ? parseAridUr(options.groupId) : undefined;\n\n  const startState = loadStartState(registryPath, sessionId, groupHint);\n  const groupId = startState.groupId;\n  const groupRecord = registry.group(groupId);\n\n  if (groupRecord === undefined) {\n    throw new Error(\"Group not found in registry\");\n  }\n\n  if (groupRecord.coordinator().xid().urString() !== owner.xid().urString()) {\n    throw new Error(\n      `Only the coordinator can collect signInvite responses. ` +\n        `Coordinator: ${groupRecord.coordinator().xid().urString()}, ` +\n        `Owner: ${owner.xid().urString()}`,\n    );\n  }\n\n  if (options.parallel === true) {\n    // Parallel path with progress display\n    const collection = await collectCommitmentsParallel(\n      client,\n      registry,\n      startState,\n      owner.xidDocument(),\n      sessionId,\n      options.timeoutSeconds,\n    );\n\n    // Report any failures\n    if (collection.rejections.length > 0) {\n      console.error();\n      console.error(\"Rejections:\");\n      for (const [xid, reason] of collection.rejections) {\n        console.error(`  ${xid.urString()}: ${reason}`);\n      }\n    }\n    if (collection.errors.length > 0) {\n      console.error();\n      console.error(\"Errors:\");\n      for (const [xid, error] of collection.errors) {\n        console.error(`  ${xid.urString()}: ${error}`);\n      }\n    }\n    if (collection.timeouts.length > 0) {\n      console.error();\n      console.error(\"Timeouts:\");\n      for (const xid of collection.timeouts) {\n        console.error(`  ${xid.urString()}`);\n      }\n    }\n\n    if (!collection.allSucceeded()) {\n      throw new Error(\n        `Sign commit collection incomplete: ${collection.successes.length} succeeded, ` +\n          `${collection.rejections.length} rejected, ${collection.errors.length} errors, ` +\n          `${collection.timeouts.length} timeouts`,\n      );\n    }\n\n    // Build commitments map\n    const commitments = new Map<string, unknown>();\n    for (const [xid, data] of collection.successes) {\n      commitments.set(xid.urString(), data.commitments);\n    }\n\n    // Persist aggregated commitments\n    const commitmentsPath = persistCommitments(\n      registryPath,\n      groupId,\n      sessionId,\n      startState,\n      commitments,\n    );\n\n    // Dispatch share requests in parallel\n    const sendResults = await dispatchShareRequestsParallel(\n      client,\n      registry,\n      owner,\n      startState,\n      sessionId,\n      collection,\n      commitments,\n      options.previewShare,\n      options.verbose,\n    );\n\n    // Check for send failures\n    const failures = sendResults.filter(([_, err]) => err !== null);\n    if (failures.length > 0) {\n      for (const [xid, error] of failures) {\n        if (error !== null) {\n          console.error(`Failed to send to ${xid.urString()}: ${error.message}`);\n        }\n      }\n      throw new Error(`Failed to send signRound2 requests to ${failures.length} participants`);\n    }\n\n    // Update registry pending requests\n    updatePendingForShare(registry, collection, startState);\n\n    const displayPath = path.relative(cwd, commitmentsPath) || commitmentsPath;\n\n    if (isVerbose() || options.verbose === true) {\n      console.error();\n      console.error(\n        `Collected ${collection.successes.length} signInvite responses. Saved to ${displayPath}`,\n      );\n      console.error(`Dispatched ${collection.successes.length} signRound2 requests.`);\n    }\n\n    return {\n      accepted: collection.successes.length,\n      rejected: collection.rejections.length,\n      errors: collection.errors.length,\n      timeouts: collection.timeouts.length,\n    };\n  } else {\n    // Sequential path (original behavior)\n    if (isVerbose() || options.verbose === true) {\n      console.error(\n        `Collecting signInvite responses for session ${sessionId.urString()} ` +\n          `from ${startState.participants.size} participants...`,\n      );\n    }\n\n    const commitments = new Map<string, unknown>();\n    const sendToArids = new Map<string, ARID>();\n    const errors: [XID, string][] = [];\n\n    const coordinatorKeys = owner.xidDocument().inceptionPrivateKeys();\n    if (coordinatorKeys === undefined) {\n      throw new Error(\"Coordinator XID document has no inception private keys\");\n    }\n\n    for (const [xidStr, participantState] of startState.participants) {\n      const xid = XIDClass.fromURString(xidStr);\n      const participant = registry.participant(xid);\n      const participantName = participant?.petName() ?? xidStr;\n\n      try {\n        const envelope = await client.get(participantState.commitArid, options.timeoutSeconds);\n\n        if (envelope === undefined) {\n          throw new Error(\"Response not found in Hubert storage\");\n        }\n\n        const data = validateAndExtractCommitResponse(envelope, coordinatorKeys, xid, sessionId);\n\n        commitments.set(xidStr, data.commitments);\n        sendToArids.set(xidStr, data.nextRequestArid);\n\n        if (isVerbose() || options.verbose === true) {\n          console.error(`  ✓ ${participantName}`);\n        }\n      } catch (e) {\n        errors.push([xid, e instanceof Error ? e.message : String(e)]);\n        if (isVerbose() || options.verbose === true) {\n          console.error(`  ✗ ${participantName}: ${e instanceof Error ? e.message : String(e)}`);\n        }\n      }\n    }\n\n    if (errors.length > 0) {\n      throw new Error(\n        `Sign commit collection incomplete: ${errors.length} of ${startState.participants.size} responses failed`,\n      );\n    }\n\n    if (commitments.size !== startState.participants.size) {\n      const missing: string[] = [];\n      for (const xidStr of startState.participants.keys()) {\n        if (!commitments.has(xidStr)) {\n          missing.push(xidStr);\n        }\n      }\n      throw new Error(`Missing signInvite responses from: ${missing.join(\", \")}`);\n    }\n\n    // Persist aggregated commitments\n    const commitmentsPath = persistCommitments(\n      registryPath,\n      groupId,\n      sessionId,\n      startState,\n      commitments,\n    );\n\n    // Build and send signRound2 requests\n    const signerKeys = owner.xidDocument().inceptionPrivateKeys();\n    if (signerKeys === undefined) {\n      throw new Error(\"Owner XID document has no inception private keys\");\n    }\n    const validUntil = new Date(Date.now() + 60 * 60 * 1000);\n\n    if (isVerbose() || options.verbose === true) {\n      console.error(`Dispatching signRound2 requests to ${sendToArids.size} participants...`);\n    } else {\n      // Blank line to separate get phase from put phase\n      console.error();\n    }\n\n    let previewPrinted = false;\n    for (const [xidStr, sendToArid] of sendToArids) {\n      const xid = XIDClass.fromURString(xidStr);\n      const participantState = startState.participants.get(xidStr);\n      if (participantState === undefined) {\n        throw new Error(`Participant state not found for ${xidStr}`);\n      }\n      const participant = registry.participant(xid);\n      const participantName = participant?.petName() ?? xidStr;\n\n      let recipientDoc: XIDDocument;\n      if (xidStr === owner.xid().urString()) {\n        recipientDoc = owner.xidDocument();\n      } else {\n        const record = registry.participant(xid);\n        if (record === undefined) {\n          throw new Error(`Participant ${xidStr} not found in registry`);\n        }\n        recipientDoc = record.xidDocument();\n      }\n\n      const request = buildShareRequestForParticipant(\n        owner.xidDocument(),\n        groupId,\n        sessionId,\n        participantState.shareArid,\n        commitments,\n      );\n\n      if (options.previewShare === true && !previewPrinted) {\n        const preview = request.toEnvelope(validUntil, signerKeys, undefined);\n        console.log(`# signRound2 preview for ${xidStr}`);\n        console.log(preview.format());\n        previewPrinted = true;\n      }\n\n      const sealedEnvelope = request.toEnvelopeForRecipients(validUntil, signerKeys, [\n        recipientDoc,\n      ]);\n\n      await client.put(sendToArid, sealedEnvelope);\n\n      if (isVerbose() || options.verbose === true) {\n        console.error(`  ✓ ${participantName}`);\n      }\n    }\n\n    const displayPath = path.relative(cwd, commitmentsPath) || commitmentsPath;\n\n    if (isVerbose() || options.verbose === true) {\n      console.error();\n      console.error(`Collected ${commitments.size} signInvite responses. Saved to ${displayPath}`);\n      console.error(`Dispatched ${commitments.size} signRound2 requests.`);\n    }\n\n    return {\n      accepted: commitments.size,\n      rejected: 0,\n      errors: errors.length,\n      timeouts: 0,\n    };\n  }\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAoGA,SAAS,eAAe,cAAsB,WAAiB,WAA8B;CAC3F,MAAM,OAAO,KAAK,QAAQ,aAAa;CACvC,MAAM,gBAAgB,KAAK,KAAK,MAAM,cAAc;CAEpD,MAAM,iBAAmC,EAAE;CAC3C,IAAI;AAEJ,KAAI,cAAc,KAAA,EAChB,aAAY,CAAC,CAAC,WAAW,KAAK,KAAK,eAAe,UAAU,KAAK,CAAC,CAAC,CAAC;MAC/D;AACL,cAAY,EAAE;AACd,MAAI,GAAG,WAAW,cAAc;QACzB,MAAM,SAAS,GAAG,YAAY,eAAe,EAAE,eAAe,MAAM,CAAC,CACxE,KAAI,MAAM,aAAa,EAAE;IACvB,MAAM,UAAU,MAAM;AACtB,QAAI,QAAQ,WAAW,MAAM,iBAAiB,KAAK,QAAQ,EAAE;KAC3D,MAAM,UAAUA,KAAU,QAAQ,QAAQ;AAC1C,eAAU,KAAK,CAAC,SAAS,KAAK,KAAK,eAAe,QAAQ,CAAC,CAAC;;;;;AAOtE,MAAK,MAAM,CAAC,SAAS,aAAa,WAAW;EAC3C,MAAM,YAAY,KAAK,KAAK,UAAU,WAAW,UAAU,KAAK,EAAE,aAAa;AAC/E,MAAI,GAAG,WAAW,UAAU,CAC1B,gBAAe,KAAK,CAAC,SAAS,UAAU,CAAC;;AAI7C,KAAI,eAAe,WAAW,EAC5B,OAAM,IAAI,MAAM,sEAAsE;AAExF,KAAI,eAAe,SAAS,EAC1B,OAAM,IAAI,MAAM,mEAAmE;CAGrF,MAAM,CAAC,SAAS,aAAa,eAAe;CAC5C,MAAM,MAAM,KAAK,MAAM,GAAG,aAAa,WAAW,QAAQ,CAAC;CAE3D,MAAM,UAAU,QAAwB;EACtC,MAAM,QAAQ,IAAI;AAClB,MAAI,OAAO,UAAU,SACnB,OAAM,IAAI,MAAM,sBAAsB,IAAI,gBAAgB;AAE5D,SAAO;;CAGT,MAAM,iBAAiB,YAAY,OAAO,aAAa,CAAC;CACxD,MAAM,eAAe,YAAY,OAAO,QAAQ,CAAC;AAEjD,KAAI,eAAe,KAAK,KAAK,UAAU,KAAK,CAC1C,OAAM,IAAI,MACR,sBAAsB,eAAe,UAAU,CAAC,oCAAoC,UAAU,UAAU,GACzG;AAEH,KAAI,aAAa,KAAK,KAAK,QAAQ,KAAK,CACtC,OAAM,IAAI,MACR,oBAAoB,aAAa,UAAU,CAAC,kCAAkC,QAAQ,UAAU,GACjG;CAGH,MAAM,WAAW,OAAO,SAAS;CAEjC,MAAM,kBAAkB,IAAI;AAC5B,KAAI,oBAAoB,KAAA,KAAa,OAAO,oBAAoB,SAC9D,OAAM,IAAI,MAAM,qCAAqC;CAGvD,MAAM,+BAAe,IAAI,KAA+B;AACxD,MAAK,MAAM,CAAC,QAAQ,UAAU,OAAO,QAAQ,gBAAgB,EAAE;EAC7D,MAAM,MAAMC,IAAS,aAAa,OAAO;AACzC,MAAI,OAAO,UAAU,YAAY,UAAU,KACzC,OAAM,IAAI,MAAM,mDAAmD;EAGrE,MAAM,gBAAgB,MAAM;EAC5B,MAAM,eAAe,MAAM;AAE3B,MAAI,OAAO,kBAAkB,SAC3B,OAAM,IAAI,MAAM,oCAAoC;AAEtD,MAAI,OAAO,iBAAiB,SAC1B,OAAM,IAAI,MAAM,mCAAmC;AAGrD,eAAa,IAAI,IAAI,UAAU,EAAE;GAC/B,YAAY,YAAY,cAAc;GACtC,WAAW,YAAY,aAAa;GACrC,CAAC;;AAGJ,QAAO;EAAE;EAAS;EAAU;EAAc;;;;;;;AAQ5C,SAAgB,iCACd,UACA,iBACA,gBACA,mBACwB;CACxB,MAAM,sBAAM,IAAI,MAAM;CACtB,MAAM,iBAAiB,eAAe,yBACpC,UACA,KAAA,GACA,KACA,gBACD;AAED,KAAI,CAAC,eAAe,QAAQ,CAAC,KAAK,CAAC,OAAO,eAAe,CACvD,OAAM,IAAI,MACR,+BAA+B,eAAe,QAAQ,CAAC,KAAK,CAAC,UAAU,CAAC,aAAa,eAAe,UAAU,CAAC,GAChH;AAGH,KAAI,eAAe,OAAO,EAAE;EAC1B,MAAM,gBAAgB,eAAe,OAAO;EAC5C,IAAI,SAAS;AACb,MAAI;GACF,MAAM,YAAY,cAAc,mBAAmB,SAAS;AAC5D,OAAI,cAAc,KAAA,EAChB,UAAS,UAAU,eAAe;UAE9B;AAGR,QAAM,IAAI,MAAM,oCAAoC,SAAS;;CAG/D,MAAM,SAAS,eAAe,QAAQ;AAEtC,QAAO,kBAAkB;AACzB,QAAO,UAAU,qBAAqB;CAEtC,MAAM,kBAAkB,OAAO,sBAAsB,YAAY,SAC/DD,KAAU,eAAe,KAAK,CAC/B;AACD,KAAI,gBAAgB,KAAK,KAAK,kBAAkB,KAAK,CACnD,OAAM,IAAI,MACR,oBAAoB,gBAAgB,UAAU,CAAC,2BAA2B,kBAAkB,UAAU,GACvG;CAGH,MAAM,kBAAkB,OAAO,sBAAsB,gBAAgB,SACnEE,OAAU,eAAe,KAAK,CAC/B;AAUD,QAAO;EAAE,aATW,KAAK,MAAM,IAAI,aAAa,CAAC,OAAO,gBAAgB,QAAQ,CAAC,CAS7D;EAAE,iBAJE,OAAO,sBAAsB,kBAAkB,SACrEF,KAAU,eAAe,KAAK,CAGK;EAAE;;;;;;;AAQzC,eAAsB,2BACpB,QACA,UACA,YACA,aACA,WACA,SACmD;CACnD,MAAM,WAAkC,EAAE;AAE1C,MAAK,MAAM,CAAC,QAAQ,UAAU,WAAW,cAAc;EACrD,MAAM,MAAMC,IAAS,aAAa,OAAO;EAEzC,MAAM,OADc,SAAS,YAAY,IACjB,EAAE,SAAS,IAAI,IAAI,UAAU;AACrD,WAAS,KAAK;GAAC;GAAK,MAAM;GAAY;GAAK,CAAC;;CAG9C,MAAM,kBAAkB,YAAY,sBAAsB;AAC1D,KAAI,oBAAoB,KAAA,EACtB,OAAM,IAAI,MAAM,mCAAmC;AAKrD,QAAO,cACL,QACA,WACC,UAAoB,QAAa;AAChC,MAAI;AACF,UAAO,iCAAiC,UAAU,iBAAiB,KAAK,UAAU;WAC3E,GAAG;AACV,UAAO,EAAE,UAAU,aAAa,QAAQ,EAAE,UAAU,OAAO,EAAE,EAAE;;IAGnE,EAZoC,gBAAgB,SAY9C,CACP;;;;;;;AAQH,SAAgB,gCACd,QACA,UACA,WACA,cACA,aACe;CACf,IAAI,UAAU,cAAc,IAAI,cAAc,WAAW,OAAO,CAC7D,cAAc,WAAW,UAAU,CACnC,cAAc,iBAAiB,aAAa;AAE/C,MAAK,MAAM,CAAC,QAAQ,YAAY,aAAa;EAC3C,MAAM,MAAMA,IAAS,aAAa,OAAO;EACzC,MAAM,cAAcC,OAAU,SAAS,IAAI,aAAa,CAAC,OAAO,KAAK,UAAU,QAAQ,CAAC,CAAC;EAEzF,MAAM,QAAQ,SAAS,IAAI,IAAI,CAAC,aAAa,eAAe,YAAY,gBAAgB,CAAC;AACzF,YAAU,QAAQ,cAAc,cAAc,MAAM;;AAGtD,QAAO;;;;;;;AAQT,eAAsB,8BACpB,QACA,UACA,OACA,YACA,WACA,YACA,aACA,cACA,SACgC;CAChC,MAAM,aAAa,MAAM,aAAa,CAAC,sBAAsB;AAC7D,KAAI,eAAe,KAAA,EACjB,OAAM,IAAI,MAAM,+CAA+C;CAGjE,MAAM,aAAa,IAAI,KAAK,KAAK,KAAK,GAAG,OAAU,IAAK;CAExD,MAAM,WAA4C,EAAE;CACpD,IAAI,iBAAiB;AAErB,MAAK,MAAM,CAAC,KAAK,SAAS,WAAW,WAAW;EAC9C,MAAM,SAAS,IAAI,UAAU;EAC7B,MAAM,mBAAmB,WAAW,aAAa,IAAI,OAAO;AAC5D,MAAI,qBAAqB,KAAA,EACvB,OAAM,IAAI,MAAM,eAAe,OAAO,2BAA2B;EAInE,MAAM,kBADc,SAAS,YAAY,IACN,EAAE,SAAS,IAAI;EAElD,IAAI;AACJ,MAAI,IAAI,UAAU,KAAK,MAAM,KAAK,CAAC,UAAU,CAC3C,gBAAe,MAAM,aAAa;OAC7B;GACL,MAAM,SAAS,SAAS,YAAY,IAAI;AACxC,OAAI,WAAW,KAAA,EACb,OAAM,IAAI,MAAM,eAAe,OAAO,wBAAwB;AAEhE,kBAAe,OAAO,aAAa;;EAGrC,MAAM,UAAU,gCACd,MAAM,aAAa,EACnB,WAAW,SACX,WACA,iBAAiB,WACjB,YACD;AAED,MAAI,iBAAiB,QAAQ,CAAC,gBAAgB;GAC5C,MAAM,UAAU,QAAQ,WAAW,YAAY,YAAY,KAAA,EAAU;AACrE,WAAQ,IAAI,4BAA4B,SAAS;AACjD,WAAQ,IAAI,QAAQ,QAAQ,CAAC;AAC7B,oBAAiB;;EAGnB,MAAM,iBAAiB,QAAQ,wBAAwB,YAAY,YAAY,CAAC,aAAa,CAAC;AAE9F,WAAS,KAAK;GAAC;GAAK,KAAK;GAAiB;GAAgB;GAAgB,CAAC;;AAI7E,SAAQ,OAAO;AAEf,QAAO,aAAa,QAAQ,UAAU,QAAQ;;;;;;;AAQhD,SAAgB,mBACd,cACA,SACA,WACA,YACA,aACQ;CACR,MAAM,aAAa,gBAAgB,cAAc,QAAQ,KAAK,EAAE,UAAU,KAAK,CAAC;AAChF,IAAG,UAAU,YAAY,EAAE,WAAW,MAAM,CAAC;CAE7C,MAAM,kBAAkB,KAAK,KAAK,YAAY,mBAAmB;CACjE,MAAM,kBAA2C,EAAE;AAEnD,MAAK,MAAM,CAAC,QAAQ,YAAY,aAAa;EAC3C,MAAM,mBAAmB,WAAW,aAAa,IAAI,OAAO;AAC5D,MAAI,qBAAqB,KAAA,EACvB,OAAM,IAAI,MAAM,eAAe,OAAO,2BAA2B;AAGnE,kBAAgB,UAAU;GACxB,aAAa;GACb,YAAY,iBAAiB,UAAU,UAAU;GAClD;;CAGH,MAAM,OAAO;EACX,OAAO,QAAQ,UAAU;EACzB,SAAS,UAAU,UAAU;EAC7B,QAAQ,WAAW;EACnB,aAAa;EACd;AAED,IAAG,cAAc,iBAAiB,KAAK,UAAU,MAAM,MAAM,EAAE,CAAC;AAEhE,QAAO;;;;;;;;;;;AAYT,SAAgB,sBACd,WACA,aACA,aACM;;;;;;;;AAaR,eAAsB,OACpB,QACA,SACA,KAC2B;CAC3B,MAAM,eAAe,oBAAoB,QAAQ,cAAc,IAAI;CACnE,MAAM,WAAW,SAAS,KAAK,aAAa;CAE5C,MAAM,QAAQ,SAAS,OAAO;AAC9B,KAAI,UAAU,KAAA,EACZ,OAAM,IAAI,MAAM,6BAA6B;CAG/C,MAAM,YAAY,YAAY,QAAQ,UAAU;CAGhD,MAAM,aAAa,eAAe,cAAc,WAF9B,QAAQ,YAAY,KAAA,IAAY,YAAY,QAAQ,QAAQ,GAAG,KAAA,EAEZ;CACrE,MAAM,UAAU,WAAW;CAC3B,MAAM,cAAc,SAAS,MAAM,QAAQ;AAE3C,KAAI,gBAAgB,KAAA,EAClB,OAAM,IAAI,MAAM,8BAA8B;AAGhD,KAAI,YAAY,aAAa,CAAC,KAAK,CAAC,UAAU,KAAK,MAAM,KAAK,CAAC,UAAU,CACvE,OAAM,IAAI,MACR,uEACkB,YAAY,aAAa,CAAC,KAAK,CAAC,UAAU,CAAC,WACjD,MAAM,KAAK,CAAC,UAAU,GACnC;AAGH,KAAI,QAAQ,aAAa,MAAM;EAE7B,MAAM,aAAa,MAAM,2BACvB,QACA,UACA,YACA,MAAM,aAAa,EACnB,WACA,QAAQ,eACT;AAGD,MAAI,WAAW,WAAW,SAAS,GAAG;AACpC,WAAQ,OAAO;AACf,WAAQ,MAAM,cAAc;AAC5B,QAAK,MAAM,CAAC,KAAK,WAAW,WAAW,WACrC,SAAQ,MAAM,KAAK,IAAI,UAAU,CAAC,IAAI,SAAS;;AAGnD,MAAI,WAAW,OAAO,SAAS,GAAG;AAChC,WAAQ,OAAO;AACf,WAAQ,MAAM,UAAU;AACxB,QAAK,MAAM,CAAC,KAAK,UAAU,WAAW,OACpC,SAAQ,MAAM,KAAK,IAAI,UAAU,CAAC,IAAI,QAAQ;;AAGlD,MAAI,WAAW,SAAS,SAAS,GAAG;AAClC,WAAQ,OAAO;AACf,WAAQ,MAAM,YAAY;AAC1B,QAAK,MAAM,OAAO,WAAW,SAC3B,SAAQ,MAAM,KAAK,IAAI,UAAU,GAAG;;AAIxC,MAAI,CAAC,WAAW,cAAc,CAC5B,OAAM,IAAI,MACR,sCAAsC,WAAW,UAAU,OAAO,cAC7D,WAAW,WAAW,OAAO,aAAa,WAAW,OAAO,OAAO,WACnE,WAAW,SAAS,OAAO,WACjC;EAIH,MAAM,8BAAc,IAAI,KAAsB;AAC9C,OAAK,MAAM,CAAC,KAAK,SAAS,WAAW,UACnC,aAAY,IAAI,IAAI,UAAU,EAAE,KAAK,YAAY;EAInD,MAAM,kBAAkB,mBACtB,cACA,SACA,WACA,YACA,YACD;EAgBD,MAAM,YAAW,MAbS,8BACxB,QACA,UACA,OACA,YACA,WACA,YACA,aACA,QAAQ,cACR,QAAQ,QACT,EAG4B,QAAQ,CAAC,GAAG,SAAS,QAAQ,KAAK;AAC/D,MAAI,SAAS,SAAS,GAAG;AACvB,QAAK,MAAM,CAAC,KAAK,UAAU,SACzB,KAAI,UAAU,KACZ,SAAQ,MAAM,qBAAqB,IAAI,UAAU,CAAC,IAAI,MAAM,UAAU;AAG1E,SAAM,IAAI,MAAM,yCAAyC,SAAS,OAAO,eAAe;;EAM1F,MAAM,cAAc,KAAK,SAAS,KAAK,gBAAgB,IAAI;AAE3D,MAAI,WAAW,IAAI,QAAQ,YAAY,MAAM;AAC3C,WAAQ,OAAO;AACf,WAAQ,MACN,aAAa,WAAW,UAAU,OAAO,kCAAkC,cAC5E;AACD,WAAQ,MAAM,cAAc,WAAW,UAAU,OAAO,uBAAuB;;AAGjF,SAAO;GACL,UAAU,WAAW,UAAU;GAC/B,UAAU,WAAW,WAAW;GAChC,QAAQ,WAAW,OAAO;GAC1B,UAAU,WAAW,SAAS;GAC/B;QACI;AAEL,MAAI,WAAW,IAAI,QAAQ,YAAY,KACrC,SAAQ,MACN,+CAA+C,UAAU,UAAU,CAAC,QAC1D,WAAW,aAAa,KAAK,kBACxC;EAGH,MAAM,8BAAc,IAAI,KAAsB;EAC9C,MAAM,8BAAc,IAAI,KAAmB;EAC3C,MAAM,SAA0B,EAAE;EAElC,MAAM,kBAAkB,MAAM,aAAa,CAAC,sBAAsB;AAClE,MAAI,oBAAoB,KAAA,EACtB,OAAM,IAAI,MAAM,yDAAyD;AAG3E,OAAK,MAAM,CAAC,QAAQ,qBAAqB,WAAW,cAAc;GAChE,MAAM,MAAMD,IAAS,aAAa,OAAO;GAEzC,MAAM,kBADc,SAAS,YAAY,IACN,EAAE,SAAS,IAAI;AAElD,OAAI;IACF,MAAM,WAAW,MAAM,OAAO,IAAI,iBAAiB,YAAY,QAAQ,eAAe;AAEtF,QAAI,aAAa,KAAA,EACf,OAAM,IAAI,MAAM,uCAAuC;IAGzD,MAAM,OAAO,iCAAiC,UAAU,iBAAiB,KAAK,UAAU;AAExF,gBAAY,IAAI,QAAQ,KAAK,YAAY;AACzC,gBAAY,IAAI,QAAQ,KAAK,gBAAgB;AAE7C,QAAI,WAAW,IAAI,QAAQ,YAAY,KACrC,SAAQ,MAAM,OAAO,kBAAkB;YAElC,GAAG;AACV,WAAO,KAAK,CAAC,KAAK,aAAa,QAAQ,EAAE,UAAU,OAAO,EAAE,CAAC,CAAC;AAC9D,QAAI,WAAW,IAAI,QAAQ,YAAY,KACrC,SAAQ,MAAM,OAAO,gBAAgB,IAAI,aAAa,QAAQ,EAAE,UAAU,OAAO,EAAE,GAAG;;;AAK5F,MAAI,OAAO,SAAS,EAClB,OAAM,IAAI,MACR,sCAAsC,OAAO,OAAO,MAAM,WAAW,aAAa,KAAK,mBACxF;AAGH,MAAI,YAAY,SAAS,WAAW,aAAa,MAAM;GACrD,MAAM,UAAoB,EAAE;AAC5B,QAAK,MAAM,UAAU,WAAW,aAAa,MAAM,CACjD,KAAI,CAAC,YAAY,IAAI,OAAO,CAC1B,SAAQ,KAAK,OAAO;AAGxB,SAAM,IAAI,MAAM,sCAAsC,QAAQ,KAAK,KAAK,GAAG;;EAI7E,MAAM,kBAAkB,mBACtB,cACA,SACA,WACA,YACA,YACD;EAGD,MAAM,aAAa,MAAM,aAAa,CAAC,sBAAsB;AAC7D,MAAI,eAAe,KAAA,EACjB,OAAM,IAAI,MAAM,mDAAmD;EAErE,MAAM,aAAa,IAAI,KAAK,KAAK,KAAK,GAAG,OAAU,IAAK;AAExD,MAAI,WAAW,IAAI,QAAQ,YAAY,KACrC,SAAQ,MAAM,sCAAsC,YAAY,KAAK,kBAAkB;MAGvF,SAAQ,OAAO;EAGjB,IAAI,iBAAiB;AACrB,OAAK,MAAM,CAAC,QAAQ,eAAe,aAAa;GAC9C,MAAM,MAAMA,IAAS,aAAa,OAAO;GACzC,MAAM,mBAAmB,WAAW,aAAa,IAAI,OAAO;AAC5D,OAAI,qBAAqB,KAAA,EACvB,OAAM,IAAI,MAAM,mCAAmC,SAAS;GAG9D,MAAM,kBADc,SAAS,YAAY,IACN,EAAE,SAAS,IAAI;GAElD,IAAI;AACJ,OAAI,WAAW,MAAM,KAAK,CAAC,UAAU,CACnC,gBAAe,MAAM,aAAa;QAC7B;IACL,MAAM,SAAS,SAAS,YAAY,IAAI;AACxC,QAAI,WAAW,KAAA,EACb,OAAM,IAAI,MAAM,eAAe,OAAO,wBAAwB;AAEhE,mBAAe,OAAO,aAAa;;GAGrC,MAAM,UAAU,gCACd,MAAM,aAAa,EACnB,SACA,WACA,iBAAiB,WACjB,YACD;AAED,OAAI,QAAQ,iBAAiB,QAAQ,CAAC,gBAAgB;IACpD,MAAM,UAAU,QAAQ,WAAW,YAAY,YAAY,KAAA,EAAU;AACrE,YAAQ,IAAI,4BAA4B,SAAS;AACjD,YAAQ,IAAI,QAAQ,QAAQ,CAAC;AAC7B,qBAAiB;;GAGnB,MAAM,iBAAiB,QAAQ,wBAAwB,YAAY,YAAY,CAC7E,aACD,CAAC;AAEF,SAAM,OAAO,IAAI,YAAY,eAAe;AAE5C,OAAI,WAAW,IAAI,QAAQ,YAAY,KACrC,SAAQ,MAAM,OAAO,kBAAkB;;EAI3C,MAAM,cAAc,KAAK,SAAS,KAAK,gBAAgB,IAAI;AAE3D,MAAI,WAAW,IAAI,QAAQ,YAAY,MAAM;AAC3C,WAAQ,OAAO;AACf,WAAQ,MAAM,aAAa,YAAY,KAAK,kCAAkC,cAAc;AAC5F,WAAQ,MAAM,cAAc,YAAY,KAAK,uBAAuB;;AAGtE,SAAO;GACL,UAAU,YAAY;GACtB,UAAU;GACV,QAAQ,OAAO;GACf,UAAU;GACX"}