@bcts/frost-hubert 1.0.0-alpha.22 → 1.0.0-beta.0

package/dist/round2-DOA3rnV-.mjs

@@ -0,0 +1,280 @@
+import { t as __exportAll } from "./chunk-CjcI7cDX.mjs";
+import { n as compareXidBytes } from "./proposed-participant-cWM7iUrO.mjs";
+import { Registry, resolveRegistryPath } from "./registry/index.mjs";
+import { c as parseAridUr, n as isVerbose, t as groupStateDir } from "./common-CvH6dFvQ.mjs";
+import { n as putWithIndicator, t as getWithIndicator } from "./busy-DkM2jAIZ.mjs";
+import { t as createStorageClient } from "./storage-Bkkliz0K.mjs";
+import { bytesToHex, dkgPart2, hexToBytes, identifierFromU16, identifierToHex, serializeDkgRound2Package } from "./frost/index.mjs";
+import { ARID, JSON as JSON$1, XID } from "@bcts/components";
+import { CborDate } from "@bcts/dcbor";
+import { Envelope, Function } from "@bcts/envelope";
+import { SealedRequest, SealedResponse } from "@bcts/gstp";
+import * as fs from "node:fs";
+import * as path from "node:path";
+import { Ed25519Sha512, serde } from "@frosts/ed25519";
+import { CoefficientCommitment, VerifiableSecretSharingCommitment, round1 } from "@frosts/core";
+//#region src/cmd/dkg/participant/round2.ts
+/**
+* Copyright © 2023-2026 Blockchain Commons, LLC
+* Copyright © 2025-2026 Parity Technologies
+*
+*
+* DKG participant round 2 command.
+*
+* Port of cmd/dkg/participant/round2.rs from frost-hubert-rust.
+*
+* @module
+*/
+var round2_exports = /* @__PURE__ */ __exportAll({ round2: () => round2$1 });
+/**
+* Load persisted round 1 state from disk.
+*
+* Port of round1_secret loading from cmd/dkg/participant/round2.rs lines 86-97.
+*/
+function loadRound1State(registryPath, groupId) {
+	const packagesDir = groupStateDir(registryPath, groupId.hex());
+	const round1SecretPath = path.join(packagesDir, "round1_secret.json");
+	if (!fs.existsSync(round1SecretPath)) throw new Error(`Round 1 secret not found at ${round1SecretPath}. Did you respond to the invite?`);
+	const secretJson = JSON.parse(fs.readFileSync(round1SecretPath, "utf-8"));
+	const coefficients = secretJson.coefficients.map((hex) => Ed25519Sha512.deserializeScalar(hexToBytes(hex)));
+	const commitment = new VerifiableSecretSharingCommitment(Ed25519Sha512, secretJson.commitment.map((hex) => CoefficientCommitment.deserialize(Ed25519Sha512, hexToBytes(hex))));
+	const idBytes = hexToBytes(secretJson.identifier);
+	let identifierU16 = 1;
+	if (idBytes.length >= 2) identifierU16 = idBytes[0] | idBytes[1] << 8;
+	if (identifierU16 === 0) identifierU16 = 1;
+	const parsedIdentifier = identifierFromU16(identifierU16);
+	const secretPackage = new round1.SecretPackage(Ed25519Sha512, parsedIdentifier, coefficients, commitment, secretJson.min_signers, secretJson.max_signers);
+	const round1PackagePath = path.join(packagesDir, "round1_package.json");
+	const packageJson = JSON.parse(fs.readFileSync(round1PackagePath, "utf-8"));
+	return {
+		secretPackage,
+		ourRound1Package: serde.round1PackageFromJson(packageJson)
+	};
+}
+/**
+* Validate the round 2 request from the coordinator.
+*
+* Port of request validation from cmd/dkg/participant/round2.rs lines 118-158.
+*/
+function validateRound2Request(sealedRequest, groupId, expectedCoordinator) {
+	if (!sealedRequest.function().equals(Function.fromString("dkgRound2"))) throw new Error(`Unexpected request function: ${sealedRequest.function().toString()}`);
+	if (sealedRequest.sender().xid().urString() !== expectedCoordinator.urString()) throw new Error(`Unexpected request sender: ${sealedRequest.sender().xid().urString()} (expected coordinator ${expectedCoordinator.urString()})`);
+	const requestGroupIdEnvelope = sealedRequest.objectForParameter("group");
+	if (requestGroupIdEnvelope === void 0) throw new Error("Request missing group parameter");
+	const requestGroupId = requestGroupIdEnvelope.extractSubject((cbor) => ARID.fromTaggedCbor(cbor));
+	if (requestGroupId.urString() !== groupId.urString()) throw new Error(`Request group ID ${requestGroupId.urString()} does not match expected ${groupId.urString()}`);
+	const responseAridEnvelope = sealedRequest.objectForParameter("responseArid");
+	if (responseAridEnvelope === void 0) throw new Error("Request missing responseArid parameter");
+	return responseAridEnvelope.extractSubject((cbor) => ARID.fromTaggedCbor(cbor));
+}
+/**
+* Extract round 1 packages from the request and convert to Map<Identifier, Package>.
+*
+* Port of `extract_round1_packages()` from cmd/dkg/participant/round2.rs lines 291-366.
+*/
+function extractRound1Packages(request, groupRecord, ownerXid) {
+	const sortedXids = groupRecord.participants().map((p) => p.xid());
+	const ownerUrString = ownerXid.urString();
+	if (!sortedXids.some((xid) => xid.urString() === ownerUrString)) sortedXids.push(ownerXid);
+	sortedXids.sort((a, b) => compareXidBytes(a.toData(), b.toData()));
+	const deduped = [];
+	for (const xid of sortedXids) if (deduped.length === 0 || deduped[deduped.length - 1].urString() !== xid.urString()) deduped.push(xid);
+	const xidToIdentifier = /* @__PURE__ */ new Map();
+	for (let i = 0; i < deduped.length; i++) {
+		const identifier = identifierFromU16(i + 1);
+		xidToIdentifier.set(deduped[i].urString(), identifier);
+	}
+	const myXidStr = ownerXid.urString();
+	const packages = /* @__PURE__ */ new Map();
+	const packagesByXid = [];
+	const packageEnvelopes = request.objectsForParameter("round1Package");
+	for (const packageEnvelope of packageEnvelopes) {
+		const participantEnvelope = packageEnvelope.objectForPredicate("participant");
+		if (participantEnvelope === void 0) throw new Error("round1Package missing participant predicate");
+		const participantXid = participantEnvelope.extractSubject((cbor) => XID.fromTaggedCbor(cbor));
+		if (participantXid.urString() === myXidStr) continue;
+		const packageJson = packageEnvelope.extractSubject((cbor) => JSON$1.fromTaggedCbor(cbor));
+		const packageData = JSON.parse(new TextDecoder().decode(packageJson.toData()));
+		const pkg = serde.round1PackageFromJson(packageData);
+		const identifier = xidToIdentifier.get(participantXid.urString());
+		if (identifier === void 0) throw new Error(`Unknown participant XID in round1Package: ${participantXid.urString()}`);
+		packages.set(identifier, pkg);
+		packagesByXid.push([participantXid, pkg]);
+	}
+	const expectedPackages = xidToIdentifier.size - 1;
+	if (packages.size !== expectedPackages) throw new Error(`Expected ${expectedPackages} Round 1 packages, found ${packages.size}`);
+	return [packages, packagesByXid];
+}
+/**
+* Build the response body containing Round 2 packages.
+*
+* Port of `build_response_body()` from cmd/dkg/participant/round2.rs lines 373-425.
+*/
+function buildResponseBody(groupId, participantXid, responseArid, round2Packages, groupRecord) {
+	const sortedXids = groupRecord.participants().map((p) => p.xid());
+	const participantUrString = participantXid.urString();
+	if (!sortedXids.some((xid) => xid.urString() === participantUrString)) sortedXids.push(participantXid);
+	sortedXids.sort((a, b) => compareXidBytes(a.toData(), b.toData()));
+	const deduped = [];
+	for (const xid of sortedXids) if (deduped.length === 0 || deduped[deduped.length - 1].urString() !== xid.urString()) deduped.push(xid);
+	const identifierToXid = /* @__PURE__ */ new Map();
+	for (let i = 0; i < deduped.length; i++) {
+		const identifier = identifierFromU16(i + 1);
+		identifierToXid.set(identifierToHex(identifier), deduped[i]);
+	}
+	let envelope = Envelope.unit().addType("dkgRound2Response").addAssertion("group", groupId).addAssertion("participant", participantXid).addAssertion("response_arid", responseArid);
+	for (const [identifier, pkg] of round2Packages) {
+		const idHex = identifierToHex(identifier);
+		const recipientXid = identifierToXid.get(idHex);
+		if (recipientXid === void 0) throw new Error("Unknown identifier in round2_packages");
+		const serialized = serializeDkgRound2Package(pkg);
+		const jsonStr = JSON.stringify(serialized);
+		const jsonBytes = new TextEncoder().encode(jsonStr);
+		const jsonWrapper = JSON$1.fromData(jsonBytes);
+		const packageEnvelope = Envelope.new(jsonWrapper).addAssertion("recipient", recipientXid);
+		envelope = envelope.addAssertion("round2Package", packageEnvelope);
+	}
+	return envelope;
+}
+/**
+* Serialize round 2 secret package to JSON format for persistence.
+*
+* Mirrors the on-disk shape produced by Rust
+* `serde_json::to_vec_pretty(&frost::keys::dkg::round2::SecretPackage)`
+* (see `frost-rust/frost-core/src/keys/dkg.rs:269-287`):
+*
+* ```json
+* {
+*   "identifier": "<lowercase hex scalar>",
+*   "commitment": ["<hex>", "<hex>", ...],
+*   "secret_share": "<hex>",
+*   "min_signers": <u16>,
+*   "max_signers": <u16>
+* }
+* ```
+*
+* `frost::keys::dkg::round2::SecretPackage` is
+* `#[serde(deny_unknown_fields)]`. The earlier port emitted
+* camelCase keys (`secretShare`, `minSigners`, `maxSigners`), a
+* nested `commitment.coefficients` shape, and a numeric
+* `identifier` — all of which Rust's standard derive would
+* reject and which had no chance of round-tripping with Rust.
+*
+* `participantIndex` is unused now that the identifier comes
+* directly from `secret.identifier.serialize()`; we keep it in the
+* signature for source-level parity with the call sites.
+*/
+function serializeRound2SecretPackage(secret, _participantIndex) {
+	const commitmentCoefficients = secret.commitment.serialize().map((c) => bytesToHex(c));
+	const secretShare = bytesToHex(Ed25519Sha512.serializeScalar(secret.secretShare()));
+	return {
+		identifier: bytesToHex(secret.identifier.serialize()),
+		commitment: commitmentCoefficients,
+		secret_share: secretShare,
+		min_signers: secret.minSigners,
+		max_signers: secret.maxSigners
+	};
+}
+/**
+* Persist round 2 state to disk.
+*
+* Port of round 2 secret persistence from cmd/dkg/participant/round2.rs lines 229-251.
+*/
+function persistRound2State(registryPath, groupId, round2Secret, round1PackagesByXid, participantIndex) {
+	const packagesDir = groupStateDir(registryPath, groupId.hex());
+	fs.mkdirSync(packagesDir, { recursive: true });
+	const round2SecretPath = path.join(packagesDir, "round2_secret.json");
+	const round2SecretJson = serializeRound2SecretPackage(round2Secret, participantIndex);
+	fs.writeFileSync(round2SecretPath, JSON.stringify(round2SecretJson, null, 2));
+	const round1PackagesPath = path.join(packagesDir, "collected_round1.json");
+	const round1Json = {};
+	for (const [xid, pkg] of round1PackagesByXid) {
+		const packageJson = serde.round1PackageToJson(pkg);
+		round1Json[xid.urString()] = packageJson;
+	}
+	fs.writeFileSync(round1PackagesPath, JSON.stringify(round1Json, null, 2));
+	return round2SecretPath;
+}
+/**
+* Execute the DKG participant round 2 command.
+*
+* Responds to the Round 2 request from the coordinator, runs FROST DKG part2
+* to generate Round 2 packages, and posts the response back.
+*
+* Port of `CommandArgs::exec()` from cmd/dkg/participant/round2.rs lines 55-288.
+*/
+async function round2$1(_client, options, cwd) {
+	if (options.storageSelection === void 0) throw new Error("Hubert storage is required for round2");
+	const registryPath = resolveRegistryPath(options.registryPath, cwd);
+	const registry = Registry.load(registryPath);
+	const owner = registry.owner();
+	if (owner === void 0) throw new Error("Registry owner is required");
+	const groupId = parseAridUr(options.groupId);
+	const groupRecord = registry.group(groupId);
+	if (groupRecord === void 0) throw new Error("Group not found in registry");
+	const listeningAtArid = groupRecord.listeningAtArid();
+	if (listeningAtArid === void 0) throw new Error("No listening ARID for this group. Did you respond to the invite?");
+	const round1State = loadRound1State(registryPath, groupId);
+	if (isVerbose() || options.verbose === true) console.error("Fetching Round 2 request from Hubert...");
+	const client = await createStorageClient(options.storageSelection);
+	const requestEnvelope = await getWithIndicator(client, listeningAtArid, "Round 2 request", options.timeoutSeconds, options.verbose ?? false);
+	if (requestEnvelope === null || requestEnvelope === void 0) throw new Error("Round 2 request not found in Hubert storage");
+	const ownerPrivateKeys = owner.xidDocument().inceptionPrivateKeys();
+	if (ownerPrivateKeys === void 0) throw new Error("Owner XID document has no private keys");
+	const now = CborDate.now().datetime();
+	const sealedRequest = SealedRequest.tryFromEnvelope(requestEnvelope, void 0, now, ownerPrivateKeys);
+	const responseArid = validateRound2Request(sealedRequest, groupId, groupRecord.coordinator().xid());
+	const [round1Packages, round1PackagesByXid] = extractRound1Packages(sealedRequest, groupRecord, owner.xid());
+	if (isVerbose() || options.verbose === true) console.error(`Received ${round1Packages.size} Round 1 packages. Running DKG part2...`);
+	const nextResponseArid = ARID.new();
+	const round1PackagesHex = /* @__PURE__ */ new Map();
+	for (const [id, pkg] of round1Packages) round1PackagesHex.set(identifierToHex(id), pkg);
+	const [round2Secret, round2Packages] = dkgPart2(round1State.secretPackage, round1PackagesHex);
+	if (isVerbose() || options.verbose === true) console.error(`Generated ${round2Packages.size} Round 2 packages.`);
+	const round2PackagesById = /* @__PURE__ */ new Map();
+	for (const [idHex, pkg] of round2Packages) for (const [id] of round1Packages) if (identifierToHex(id) === idHex) {
+		round2PackagesById.set(id, pkg);
+		break;
+	}
+	const responseBody = buildResponseBody(groupId, owner.xid(), nextResponseArid, round2PackagesById, groupRecord);
+	const signerPrivateKeys = owner.xidDocument().inceptionPrivateKeys();
+	if (signerPrivateKeys === void 0) throw new Error("Owner XID document has no signing keys");
+	const coordinatorXid = groupRecord.coordinator().xid();
+	const coordinatorRecord = registry.participant(coordinatorXid);
+	let coordinatorDoc;
+	if (coordinatorRecord !== void 0) coordinatorDoc = coordinatorRecord.xidDocument();
+	else if (owner.xid().urString() === coordinatorXid.urString()) coordinatorDoc = owner.xidDocument();
+	else throw new Error(`Coordinator ${coordinatorXid.urString()} not found in registry`);
+	const peerContinuation = sealedRequest.peerContinuation();
+	let sealed = SealedResponse.newSuccess(sealedRequest.id(), owner.xidDocument()).withResult(responseBody);
+	if (peerContinuation !== void 0) sealed = sealed.withPeerContinuation(peerContinuation);
+	if (options.preview === true) {
+		const envelopeUr = sealed.toEnvelope(void 0, signerPrivateKeys, void 0).urString();
+		console.log(envelopeUr);
+		return {
+			listeningArid: nextResponseArid.urString(),
+			envelopeUr
+		};
+	}
+	const sortedParticipantXids = groupRecord.participants().map((p) => p.xid());
+	const ownerXid = owner.xid();
+	const ownerXidStr = ownerXid.urString();
+	if (!sortedParticipantXids.some((x) => x.urString() === ownerXidStr)) sortedParticipantXids.push(ownerXid);
+	sortedParticipantXids.sort((a, b) => compareXidBytes(a.toData(), b.toData()));
+	const round2SecretPath = persistRound2State(registryPath, groupId, round2Secret, round1PackagesByXid, sortedParticipantXids.findIndex((x) => x.urString() === ownerXidStr) + 1);
+	await putWithIndicator(client, responseArid, sealed.toEnvelope(void 0, signerPrivateKeys, coordinatorDoc), "Round 2 Response", options.verbose ?? false);
+	const updatedGroupRecord = registry.group(groupId);
+	if (updatedGroupRecord !== void 0) {
+		const contributions = updatedGroupRecord.contributions();
+		contributions.round2Secret = round2SecretPath;
+		updatedGroupRecord.setContributions(contributions);
+		updatedGroupRecord.setListeningAtArid(nextResponseArid);
+		registry.save(registryPath);
+	}
+	if (isVerbose() || options.verbose === true) console.error(`Posted Round 2 response to ${responseArid.urString()}`);
+	return { listeningArid: nextResponseArid.urString() };
+}
+//#endregion
+export { round2_exports as n, round2$1 as t };
+
+//# sourceMappingURL=round2-DOA3rnV-.mjs.map

package/dist/round2-DOA3rnV-.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"round2-DOA3rnV-.mjs","names":["EnvelopeFunction","JSONWrapper","round2"],"sources":["../src/cmd/dkg/participant/round2.ts"],"sourcesContent":["/**\n * Copyright © 2023-2026 Blockchain Commons, LLC\n * Copyright © 2025-2026 Parity Technologies\n *\n *\n * DKG participant round 2 command.\n *\n * Port of cmd/dkg/participant/round2.rs from frost-hubert-rust.\n *\n * @module\n */\n\nimport * as fs from \"node:fs\";\nimport * as path from \"node:path\";\n\nimport { ARID, JSON as JSONWrapper, XID } from \"@bcts/components\";\nimport { compareXidBytes } from \"../../../dkg/proposed-participant.js\";\nimport { CborDate } from \"@bcts/dcbor\";\nimport { Envelope, Function as EnvelopeFunction } from \"@bcts/envelope\";\nimport { SealedRequest, SealedResponse } from \"@bcts/gstp\";\nimport type { XIDDocument } from \"@bcts/xid\";\n\nimport { type GroupRecord, Registry, resolveRegistryPath } from \"../../../registry/index.js\";\nimport { getWithIndicator, putWithIndicator } from \"../../busy.js\";\nimport { groupStateDir, isVerbose } from \"../../common.js\";\nimport { createStorageClient, type StorageClient, type StorageSelection } from \"../../storage.js\";\nimport { parseAridUr } from \"../common.js\";\nimport {\n  dkgPart2,\n  serializeDkgRound2Package,\n  identifierFromU16,\n  identifierToHex,\n  hexToBytes,\n  bytesToHex,\n  type DkgRound1Package,\n  type DkgRound1SecretPackage,\n  type DkgRound2SecretPackage,\n  type FrostIdentifier,\n} from \"../../../frost/index.js\";\nimport { Ed25519Sha512, serde } from \"@frosts/ed25519\";\nimport { round1, CoefficientCommitment, VerifiableSecretSharingCommitment } from \"@frosts/core\";\n\n/**\n * Options for the DKG round2 command.\n */\nexport interface DkgRound2Options {\n  registryPath?: string;\n  groupId: string;\n  timeoutSeconds?: number;\n  preview?: boolean;\n  storageSelection?: StorageSelection;\n  verbose?: boolean;\n}\n\n/**\n * Result of the DKG round2 command.\n */\nexport interface DkgRound2Result {\n  listeningArid: string;\n  envelopeUr?: string;\n}\n\n/**\n * Persisted round 1 state loaded from disk.\n */\ninterface Round1State {\n  secretPackage: DkgRound1SecretPackage;\n  ourRound1Package: DkgRound1Package;\n}\n\n/**\n * Extracted round 1 packages from coordinator request.\n */\ntype Round1Packages = [Map<FrostIdentifier, DkgRound1Package>, [XID, DkgRound1Package][]];\n\n/**\n * Load persisted round 1 state from disk.\n *\n * Port of round1_secret loading from cmd/dkg/participant/round2.rs lines 86-97.\n */\nfunction loadRound1State(registryPath: string, groupId: ARID): Round1State {\n  const packagesDir = groupStateDir(registryPath, groupId.hex());\n  const round1SecretPath = path.join(packagesDir, \"round1_secret.json\");\n\n  if (!fs.existsSync(round1SecretPath)) {\n    throw new Error(\n      `Round 1 secret not found at ${round1SecretPath}. Did you respond to the invite?`,\n    );\n  }\n\n  // Mirrors Rust `frost::keys::dkg::round1::SecretPackage` JSON\n  // (`frost-rust/frost-core/src/keys/dkg.rs:120-139`): no `header`,\n  // snake_case `min_signers` / `max_signers`, identifier and\n  // coefficients as lowercase hex strings, commitment as a flat array\n  // of hex strings.\n  const secretJson = JSON.parse(fs.readFileSync(round1SecretPath, \"utf-8\")) as {\n    identifier: string;\n    coefficients: string[];\n    commitment: string[];\n    min_signers: number;\n    max_signers: number;\n  };\n\n  // Deserialize coefficients (scalars)\n  const coefficients = secretJson.coefficients.map((hex) =>\n    Ed25519Sha512.deserializeScalar(hexToBytes(hex)),\n  );\n\n  // Deserialize commitment (coefficient commitments)\n  const coefficientCommitments = secretJson.commitment.map((hex) =>\n    CoefficientCommitment.deserialize(Ed25519Sha512, hexToBytes(hex)),\n  );\n\n  const commitment = new VerifiableSecretSharingCommitment(Ed25519Sha512, coefficientCommitments);\n\n  // Create the secret package\n  // Need to find the actual identifier u16 value from the coefficients array length or saved state\n  // The identifier is typically serialized as a scalar, but we need the u16 value\n  // Parse it from the hex string - first 2 bytes as little-endian u16\n  const idBytes = hexToBytes(secretJson.identifier);\n  let identifierU16 = 1;\n  if (idBytes.length >= 2) {\n    identifierU16 = idBytes[0] | (idBytes[1] << 8);\n  }\n  if (identifierU16 === 0) {\n    identifierU16 = 1; // Default to 1 if parsing failed\n  }\n\n  const parsedIdentifier = identifierFromU16(identifierU16);\n\n  const secretPackage: DkgRound1SecretPackage = new round1.SecretPackage(\n    Ed25519Sha512,\n    parsedIdentifier,\n    coefficients,\n    commitment,\n    secretJson.min_signers,\n    secretJson.max_signers,\n  );\n\n  // Load the round 1 package as well\n  const round1PackagePath = path.join(packagesDir, \"round1_package.json\");\n  const packageJson = JSON.parse(fs.readFileSync(round1PackagePath, \"utf-8\")) as {\n    header: { version: number; ciphersuite: string };\n    commitment: string[];\n    proof_of_knowledge: string;\n  };\n\n  const ourRound1Package = serde.round1PackageFromJson(packageJson);\n\n  return { secretPackage, ourRound1Package };\n}\n\n/**\n * Validate the round 2 request from the coordinator.\n *\n * Port of request validation from cmd/dkg/participant/round2.rs lines 118-158.\n */\nfunction validateRound2Request(\n  sealedRequest: SealedRequest,\n  groupId: ARID,\n  expectedCoordinator: XID,\n): ARID {\n  // Validate the request function\n  if (!sealedRequest.function().equals(EnvelopeFunction.fromString(\"dkgRound2\"))) {\n    throw new Error(`Unexpected request function: ${sealedRequest.function().toString()}`);\n  }\n\n  // Validate the sender is the expected coordinator\n  if (sealedRequest.sender().xid().urString() !== expectedCoordinator.urString()) {\n    throw new Error(\n      `Unexpected request sender: ${sealedRequest.sender().xid().urString()} ` +\n        `(expected coordinator ${expectedCoordinator.urString()})`,\n    );\n  }\n\n  // Validate the group ID matches\n  const requestGroupIdEnvelope = sealedRequest.objectForParameter(\"group\");\n  if (requestGroupIdEnvelope === undefined) {\n    throw new Error(\"Request missing group parameter\");\n  }\n  const requestGroupId = requestGroupIdEnvelope.extractSubject((cbor) => ARID.fromTaggedCbor(cbor));\n  if (requestGroupId.urString() !== groupId.urString()) {\n    throw new Error(\n      `Request group ID ${requestGroupId.urString()} does not match expected ${groupId.urString()}`,\n    );\n  }\n\n  // Extract where we should post our response\n  const responseAridEnvelope = sealedRequest.objectForParameter(\"responseArid\");\n  if (responseAridEnvelope === undefined) {\n    throw new Error(\"Request missing responseArid parameter\");\n  }\n  const responseArid = responseAridEnvelope.extractSubject((cbor) => ARID.fromTaggedCbor(cbor));\n\n  return responseArid;\n}\n\n/**\n * Extract round 1 packages from the request and convert to Map<Identifier, Package>.\n *\n * Port of `extract_round1_packages()` from cmd/dkg/participant/round2.rs lines 291-366.\n */\nfunction extractRound1Packages(\n  request: SealedRequest,\n  groupRecord: GroupRecord,\n  ownerXid: XID,\n): Round1Packages {\n  // Build XID -> Identifier mapping based on sorted participant order\n  const sortedXids: XID[] = groupRecord.participants().map((p) => p.xid());\n\n  // Add owner if not already in list\n  const ownerUrString = ownerXid.urString();\n  if (!sortedXids.some((xid) => xid.urString() === ownerUrString)) {\n    sortedXids.push(ownerXid);\n  }\n\n  // Sort by XID byte order — mirrors Rust `XID::cmp` (raw 32-byte\n  // lex compare). The earlier port used `urString().localeCompare(...)`,\n  // which differs from byte order for any byte ≥ 0x80 and is locale-\n  // aware, producing different FROST identifier assignments than Rust.\n  sortedXids.sort((a, b) => compareXidBytes(a.toData(), b.toData()));\n\n  // Deduplicate\n  const deduped: XID[] = [];\n  for (const xid of sortedXids) {\n    if (deduped.length === 0 || deduped[deduped.length - 1].urString() !== xid.urString()) {\n      deduped.push(xid);\n    }\n  }\n\n  // Build XID -> Identifier mapping (1-indexed)\n  const xidToIdentifier = new Map<string, FrostIdentifier>();\n  for (let i = 0; i < deduped.length; i++) {\n    const identifier = identifierFromU16(i + 1);\n    xidToIdentifier.set(deduped[i].urString(), identifier);\n  }\n\n  const myXidStr = ownerXid.urString();\n\n  // Extract all round1Package parameters\n  const packages = new Map<FrostIdentifier, DkgRound1Package>();\n  const packagesByXid: [XID, DkgRound1Package][] = [];\n\n  const packageEnvelopes = request.objectsForParameter(\"round1Package\");\n  for (const packageEnvelope of packageEnvelopes) {\n    // Extract participant XID from the envelope\n    const participantEnvelope = packageEnvelope.objectForPredicate(\"participant\");\n    if (participantEnvelope === undefined) {\n      throw new Error(\"round1Package missing participant predicate\");\n    }\n    const participantXid = participantEnvelope.extractSubject((cbor) => XID.fromTaggedCbor(cbor));\n\n    // Skip our own package\n    if (participantXid.urString() === myXidStr) {\n      continue;\n    }\n\n    // Extract the package bytes (stored as JSON tag)\n    const packageJson = packageEnvelope.extractSubject((cbor) => JSONWrapper.fromTaggedCbor(cbor));\n    const packageData = JSON.parse(new TextDecoder().decode(packageJson.toData())) as {\n      header: { version: number; ciphersuite: string };\n      commitment: string[];\n      proof_of_knowledge: string;\n    };\n\n    const pkg = serde.round1PackageFromJson(packageData);\n\n    // Get the identifier for this participant\n    const identifier = xidToIdentifier.get(participantXid.urString());\n    if (identifier === undefined) {\n      throw new Error(`Unknown participant XID in round1Package: ${participantXid.urString()}`);\n    }\n\n    packages.set(identifier, pkg);\n    packagesByXid.push([participantXid, pkg]);\n  }\n\n  // Validate we have the expected number of packages\n  const expectedPackages = xidToIdentifier.size - 1; // Exclude ourselves\n  if (packages.size !== expectedPackages) {\n    throw new Error(`Expected ${expectedPackages} Round 1 packages, found ${packages.size}`);\n  }\n\n  return [packages, packagesByXid];\n}\n\n/**\n * Build the response body containing Round 2 packages.\n *\n * Port of `build_response_body()` from cmd/dkg/participant/round2.rs lines 373-425.\n */\nfunction buildResponseBody(\n  groupId: ARID,\n  participantXid: XID,\n  responseArid: ARID,\n  round2Packages: Map<FrostIdentifier, unknown>,\n  groupRecord: GroupRecord,\n): Envelope {\n  // Build Identifier -> XID mapping\n  const sortedXids: XID[] = groupRecord.participants().map((p) => p.xid());\n\n  // Add participant if not already in list\n  const participantUrString = participantXid.urString();\n  if (!sortedXids.some((xid) => xid.urString() === participantUrString)) {\n    sortedXids.push(participantXid);\n  }\n\n  // Sort by XID byte order — mirrors Rust `XID::cmp` (raw 32-byte\n  // lex compare). The earlier port used `urString().localeCompare(...)`,\n  // which differs from byte order for any byte ≥ 0x80 and is locale-\n  // aware, producing different FROST identifier assignments than Rust.\n  sortedXids.sort((a, b) => compareXidBytes(a.toData(), b.toData()));\n\n  // Deduplicate\n  const deduped: XID[] = [];\n  for (const xid of sortedXids) {\n    if (deduped.length === 0 || deduped[deduped.length - 1].urString() !== xid.urString()) {\n      deduped.push(xid);\n    }\n  }\n\n  // Build Identifier -> XID mapping (1-indexed)\n  const identifierToXid = new Map<string, XID>();\n  for (let i = 0; i < deduped.length; i++) {\n    const identifier = identifierFromU16(i + 1);\n    identifierToXid.set(identifierToHex(identifier), deduped[i]);\n  }\n\n  let envelope = Envelope.unit()\n    .addType(\"dkgRound2Response\")\n    .addAssertion(\"group\", groupId)\n    .addAssertion(\"participant\", participantXid)\n    .addAssertion(\"response_arid\", responseArid);\n\n  // Add each Round 2 package with the recipient's XID\n  for (const [identifier, pkg] of round2Packages) {\n    const idHex = identifierToHex(identifier);\n    const recipientXid = identifierToXid.get(idHex);\n    if (recipientXid === undefined) {\n      throw new Error(\"Unknown identifier in round2_packages\");\n    }\n\n    // Serialize package to JSON and wrap in CBOR JSON tag\n    const serialized = serializeDkgRound2Package(\n      pkg as Parameters<typeof serializeDkgRound2Package>[0],\n    );\n    const jsonStr = JSON.stringify(serialized);\n    const jsonBytes = new TextEncoder().encode(jsonStr);\n    const jsonWrapper = JSONWrapper.fromData(jsonBytes);\n\n    const packageEnvelope = Envelope.new(jsonWrapper).addAssertion(\"recipient\", recipientXid);\n\n    envelope = envelope.addAssertion(\"round2Package\", packageEnvelope);\n  }\n\n  return envelope;\n}\n\n/**\n * Serialize round 2 secret package to JSON format for persistence.\n *\n * Mirrors the on-disk shape produced by Rust\n * `serde_json::to_vec_pretty(&frost::keys::dkg::round2::SecretPackage)`\n * (see `frost-rust/frost-core/src/keys/dkg.rs:269-287`):\n *\n * ```json\n * {\n *   \"identifier\": \"<lowercase hex scalar>\",\n *   \"commitment\": [\"<hex>\", \"<hex>\", ...],\n *   \"secret_share\": \"<hex>\",\n *   \"min_signers\": <u16>,\n *   \"max_signers\": <u16>\n * }\n * ```\n *\n * `frost::keys::dkg::round2::SecretPackage` is\n * `#[serde(deny_unknown_fields)]`. The earlier port emitted\n * camelCase keys (`secretShare`, `minSigners`, `maxSigners`), a\n * nested `commitment.coefficients` shape, and a numeric\n * `identifier` — all of which Rust's standard derive would\n * reject and which had no chance of round-tripping with Rust.\n *\n * `participantIndex` is unused now that the identifier comes\n * directly from `secret.identifier.serialize()`; we keep it in the\n * signature for source-level parity with the call sites.\n */\nfunction serializeRound2SecretPackage(\n  secret: DkgRound2SecretPackage,\n  _participantIndex: number,\n): Record<string, unknown> {\n  const commitment = secret.commitment;\n  const commitmentCoefficients = commitment.serialize().map((c: Uint8Array) => bytesToHex(c));\n  const secretShare = bytesToHex(Ed25519Sha512.serializeScalar(secret.secretShare()));\n\n  return {\n    identifier: bytesToHex(secret.identifier.serialize()),\n    commitment: commitmentCoefficients,\n    secret_share: secretShare,\n    min_signers: secret.minSigners,\n    max_signers: secret.maxSigners,\n  };\n}\n\n/**\n * Persist round 2 state to disk.\n *\n * Port of round 2 secret persistence from cmd/dkg/participant/round2.rs lines 229-251.\n */\nfunction persistRound2State(\n  registryPath: string,\n  groupId: ARID,\n  round2Secret: DkgRound2SecretPackage,\n  round1PackagesByXid: [XID, DkgRound1Package][],\n  participantIndex: number,\n): string {\n  const packagesDir = groupStateDir(registryPath, groupId.hex());\n  fs.mkdirSync(packagesDir, { recursive: true });\n\n  // Persist Round 2 secret\n  const round2SecretPath = path.join(packagesDir, \"round2_secret.json\");\n  const round2SecretJson = serializeRound2SecretPackage(round2Secret, participantIndex);\n  fs.writeFileSync(round2SecretPath, JSON.stringify(round2SecretJson, null, 2));\n\n  // Persist received Round 1 packages for finalize phase\n  const round1PackagesPath = path.join(packagesDir, \"collected_round1.json\");\n  const round1Json: Record<string, unknown> = {};\n  for (const [xid, pkg] of round1PackagesByXid) {\n    const packageJson = serde.round1PackageToJson(pkg);\n    round1Json[xid.urString()] = packageJson;\n  }\n  fs.writeFileSync(round1PackagesPath, JSON.stringify(round1Json, null, 2));\n\n  return round2SecretPath;\n}\n\n/**\n * Execute the DKG participant round 2 command.\n *\n * Responds to the Round 2 request from the coordinator, runs FROST DKG part2\n * to generate Round 2 packages, and posts the response back.\n *\n * Port of `CommandArgs::exec()` from cmd/dkg/participant/round2.rs lines 55-288.\n */\nexport async function round2(\n  _client: StorageClient | undefined,\n  options: DkgRound2Options,\n  cwd: string,\n): Promise<DkgRound2Result> {\n  if (options.storageSelection === undefined) {\n    throw new Error(\"Hubert storage is required for round2\");\n  }\n\n  const registryPath = resolveRegistryPath(options.registryPath, cwd);\n  const registry = Registry.load(registryPath);\n\n  const owner = registry.owner();\n  if (owner === undefined) {\n    throw new Error(\"Registry owner is required\");\n  }\n\n  const groupId = parseAridUr(options.groupId);\n  const groupRecord = registry.group(groupId);\n  if (groupRecord === undefined) {\n    throw new Error(\"Group not found in registry\");\n  }\n\n  // Get the ARID where we're listening for the Round 2 request\n  const listeningAtArid = groupRecord.listeningAtArid();\n  if (listeningAtArid === undefined) {\n    throw new Error(\"No listening ARID for this group. Did you respond to the invite?\");\n  }\n\n  // Load our Round 1 secret\n  const round1State = loadRound1State(registryPath, groupId);\n\n  if (isVerbose() || options.verbose === true) {\n    console.error(\"Fetching Round 2 request from Hubert...\");\n  }\n\n  const client = await createStorageClient(options.storageSelection);\n\n  // Fetch the Round 2 request from where we're listening\n  const requestEnvelope = await getWithIndicator(\n    client,\n    listeningAtArid,\n    \"Round 2 request\",\n    options.timeoutSeconds,\n    options.verbose ?? false,\n  );\n\n  if (requestEnvelope === null || requestEnvelope === undefined) {\n    throw new Error(\"Round 2 request not found in Hubert storage\");\n  }\n\n  // Decrypt and validate the request\n  const ownerPrivateKeys = owner.xidDocument().inceptionPrivateKeys();\n  if (ownerPrivateKeys === undefined) {\n    throw new Error(\"Owner XID document has no private keys\");\n  }\n\n  const now = CborDate.now().datetime();\n  const sealedRequest = SealedRequest.tryFromEnvelope(\n    requestEnvelope,\n    undefined,\n    now,\n    ownerPrivateKeys,\n  );\n\n  // Validate the request and extract response ARID\n  const expectedCoordinator = groupRecord.coordinator().xid();\n  const responseArid = validateRound2Request(sealedRequest, groupId, expectedCoordinator);\n\n  // Extract Round 1 packages from the request\n  const [round1Packages, round1PackagesByXid] = extractRound1Packages(\n    sealedRequest,\n    groupRecord,\n    owner.xid(),\n  );\n\n  if (isVerbose() || options.verbose === true) {\n    console.error(`Received ${round1Packages.size} Round 1 packages. Running DKG part2...`);\n  }\n\n  // Allocate next response ARID for the finalize phase\n  const nextResponseArid = ARID.new();\n\n  // Run FROST DKG part2\n  // Convert Map<Identifier, Package> to Map<string, Package> for dkgPart2\n  const round1PackagesHex = new Map<string, DkgRound1Package>();\n  for (const [id, pkg] of round1Packages) {\n    round1PackagesHex.set(identifierToHex(id), pkg);\n  }\n\n  const [round2Secret, round2Packages] = dkgPart2(round1State.secretPackage, round1PackagesHex);\n\n  if (isVerbose() || options.verbose === true) {\n    console.error(`Generated ${round2Packages.size} Round 2 packages.`);\n  }\n\n  // Convert round2Packages back to use Identifier keys for buildResponseBody\n  const round2PackagesById = new Map<FrostIdentifier, unknown>();\n  for (const [idHex, pkg] of round2Packages) {\n    // Find the identifier that matches this hex\n    for (const [id] of round1Packages) {\n      if (identifierToHex(id) === idHex) {\n        round2PackagesById.set(id, pkg);\n        break;\n      }\n    }\n  }\n\n  // Build response with Round 2 packages\n  const responseBody = buildResponseBody(\n    groupId,\n    owner.xid(),\n    nextResponseArid,\n    round2PackagesById,\n    groupRecord,\n  );\n\n  const signerPrivateKeys = owner.xidDocument().inceptionPrivateKeys();\n  if (signerPrivateKeys === undefined) {\n    throw new Error(\"Owner XID document has no signing keys\");\n  }\n\n  // Get coordinator's XID document for encryption\n  const coordinatorXid = groupRecord.coordinator().xid();\n  const coordinatorRecord = registry.participant(coordinatorXid);\n  let coordinatorDoc: XIDDocument;\n  if (coordinatorRecord !== undefined) {\n    coordinatorDoc = coordinatorRecord.xidDocument();\n  } else {\n    // Check if coordinator is the owner\n    if (owner.xid().urString() === coordinatorXid.urString()) {\n      coordinatorDoc = owner.xidDocument();\n    } else {\n      throw new Error(`Coordinator ${coordinatorXid.urString()} not found in registry`);\n    }\n  }\n\n  // Get peer continuation from the request\n  const peerContinuation = sealedRequest.peerContinuation();\n\n  let sealed = SealedResponse.newSuccess(sealedRequest.id(), owner.xidDocument()).withResult(\n    responseBody,\n  );\n\n  if (peerContinuation !== undefined) {\n    sealed = sealed.withPeerContinuation(peerContinuation);\n  }\n\n  if (options.preview === true) {\n    // Show the response envelope structure without encryption\n    const unsealedEnvelope = sealed.toEnvelope(\n      undefined, // No expiration for responses\n      signerPrivateKeys,\n      undefined,\n    );\n    const envelopeUr = unsealedEnvelope.urString();\n    console.log(envelopeUr);\n\n    return {\n      listeningArid: nextResponseArid.urString(),\n      envelopeUr,\n    };\n  }\n\n  // Calculate participant index for serialization. Sort by XID byte\n  // order (mirrors Rust `XID::cmp`) so the 1-indexed position matches\n  // what the coordinator used when assigning FROST identifiers. The\n  // earlier port sorted by UR string via `Array.sort()` (default JS\n  // string compare), which diverges from Rust byte order for any\n  // byte ≥ 0x80.\n  const sortedParticipantXids: XID[] = groupRecord.participants().map((p) => p.xid());\n  const ownerXid = owner.xid();\n  const ownerXidStr = ownerXid.urString();\n  if (!sortedParticipantXids.some((x) => x.urString() === ownerXidStr)) {\n    sortedParticipantXids.push(ownerXid);\n  }\n  sortedParticipantXids.sort((a, b) => compareXidBytes(a.toData(), b.toData()));\n  const participantIndex = sortedParticipantXids.findIndex((x) => x.urString() === ownerXidStr) + 1; // 1-indexed\n\n  // Persist Round 2 secret and collected round1 packages\n  const round2SecretPath = persistRound2State(\n    registryPath,\n    groupId,\n    round2Secret,\n    round1PackagesByXid,\n    participantIndex,\n  );\n\n  const responseEnvelope = sealed.toEnvelope(\n    undefined, // No expiration for responses\n    signerPrivateKeys,\n    coordinatorDoc,\n  );\n\n  // Post the response\n  await putWithIndicator(\n    client,\n    responseArid,\n    responseEnvelope,\n    \"Round 2 Response\",\n    options.verbose ?? false,\n  );\n\n  // Update contributions in registry\n  const updatedGroupRecord = registry.group(groupId);\n  if (updatedGroupRecord !== undefined) {\n    const contributions = updatedGroupRecord.contributions();\n    contributions.round2Secret = round2SecretPath;\n    updatedGroupRecord.setContributions(contributions);\n    // Set new listening ARID for finalize phase\n    updatedGroupRecord.setListeningAtArid(nextResponseArid);\n    registry.save(registryPath);\n  }\n\n  if (isVerbose() || options.verbose === true) {\n    console.error(`Posted Round 2 response to ${responseArid.urString()}`);\n  }\n\n  return {\n    listeningArid: nextResponseArid.urString(),\n  };\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAgFA,SAAS,gBAAgB,cAAsB,SAA4B;CACzE,MAAM,cAAc,cAAc,cAAc,QAAQ,KAAK,CAAC;CAC9D,MAAM,mBAAmB,KAAK,KAAK,aAAa,qBAAqB;AAErE,KAAI,CAAC,GAAG,WAAW,iBAAiB,CAClC,OAAM,IAAI,MACR,+BAA+B,iBAAiB,kCACjD;CAQH,MAAM,aAAa,KAAK,MAAM,GAAG,aAAa,kBAAkB,QAAQ,CAAC;CASzE,MAAM,eAAe,WAAW,aAAa,KAAK,QAChD,cAAc,kBAAkB,WAAW,IAAI,CAAC,CACjD;CAOD,MAAM,aAAa,IAAI,kCAAkC,eAJ1B,WAAW,WAAW,KAAK,QACxD,sBAAsB,YAAY,eAAe,WAAW,IAAI,CAAC,CAG2B,CAAC;CAM/F,MAAM,UAAU,WAAW,WAAW,WAAW;CACjD,IAAI,gBAAgB;AACpB,KAAI,QAAQ,UAAU,EACpB,iBAAgB,QAAQ,KAAM,QAAQ,MAAM;AAE9C,KAAI,kBAAkB,EACpB,iBAAgB;CAGlB,MAAM,mBAAmB,kBAAkB,cAAc;CAEzD,MAAM,gBAAwC,IAAI,OAAO,cACvD,eACA,kBACA,cACA,YACA,WAAW,aACX,WAAW,YACZ;CAGD,MAAM,oBAAoB,KAAK,KAAK,aAAa,sBAAsB;CACvE,MAAM,cAAc,KAAK,MAAM,GAAG,aAAa,mBAAmB,QAAQ,CAAC;AAQ3E,QAAO;EAAE;EAAe,kBAFC,MAAM,sBAAsB,YAEb;EAAE;;;;;;;AAQ5C,SAAS,sBACP,eACA,SACA,qBACM;AAEN,KAAI,CAAC,cAAc,UAAU,CAAC,OAAOA,SAAiB,WAAW,YAAY,CAAC,CAC5E,OAAM,IAAI,MAAM,gCAAgC,cAAc,UAAU,CAAC,UAAU,GAAG;AAIxF,KAAI,cAAc,QAAQ,CAAC,KAAK,CAAC,UAAU,KAAK,oBAAoB,UAAU,CAC5E,OAAM,IAAI,MACR,8BAA8B,cAAc,QAAQ,CAAC,KAAK,CAAC,UAAU,CAAC,yBAC3C,oBAAoB,UAAU,CAAC,GAC3D;CAIH,MAAM,yBAAyB,cAAc,mBAAmB,QAAQ;AACxE,KAAI,2BAA2B,KAAA,EAC7B,OAAM,IAAI,MAAM,kCAAkC;CAEpD,MAAM,iBAAiB,uBAAuB,gBAAgB,SAAS,KAAK,eAAe,KAAK,CAAC;AACjG,KAAI,eAAe,UAAU,KAAK,QAAQ,UAAU,CAClD,OAAM,IAAI,MACR,oBAAoB,eAAe,UAAU,CAAC,2BAA2B,QAAQ,UAAU,GAC5F;CAIH,MAAM,uBAAuB,cAAc,mBAAmB,eAAe;AAC7E,KAAI,yBAAyB,KAAA,EAC3B,OAAM,IAAI,MAAM,yCAAyC;AAI3D,QAFqB,qBAAqB,gBAAgB,SAAS,KAAK,eAAe,KAAK,CAEzE;;;;;;;AAQrB,SAAS,sBACP,SACA,aACA,UACgB;CAEhB,MAAM,aAAoB,YAAY,cAAc,CAAC,KAAK,MAAM,EAAE,KAAK,CAAC;CAGxE,MAAM,gBAAgB,SAAS,UAAU;AACzC,KAAI,CAAC,WAAW,MAAM,QAAQ,IAAI,UAAU,KAAK,cAAc,CAC7D,YAAW,KAAK,SAAS;AAO3B,YAAW,MAAM,GAAG,MAAM,gBAAgB,EAAE,QAAQ,EAAE,EAAE,QAAQ,CAAC,CAAC;CAGlE,MAAM,UAAiB,EAAE;AACzB,MAAK,MAAM,OAAO,WAChB,KAAI,QAAQ,WAAW,KAAK,QAAQ,QAAQ,SAAS,GAAG,UAAU,KAAK,IAAI,UAAU,CACnF,SAAQ,KAAK,IAAI;CAKrB,MAAM,kCAAkB,IAAI,KAA8B;AAC1D,MAAK,IAAI,IAAI,GAAG,IAAI,QAAQ,QAAQ,KAAK;EACvC,MAAM,aAAa,kBAAkB,IAAI,EAAE;AAC3C,kBAAgB,IAAI,QAAQ,GAAG,UAAU,EAAE,WAAW;;CAGxD,MAAM,WAAW,SAAS,UAAU;CAGpC,MAAM,2BAAW,IAAI,KAAwC;CAC7D,MAAM,gBAA2C,EAAE;CAEnD,MAAM,mBAAmB,QAAQ,oBAAoB,gBAAgB;AACrE,MAAK,MAAM,mBAAmB,kBAAkB;EAE9C,MAAM,sBAAsB,gBAAgB,mBAAmB,cAAc;AAC7E,MAAI,wBAAwB,KAAA,EAC1B,OAAM,IAAI,MAAM,8CAA8C;EAEhE,MAAM,iBAAiB,oBAAoB,gBAAgB,SAAS,IAAI,eAAe,KAAK,CAAC;AAG7F,MAAI,eAAe,UAAU,KAAK,SAChC;EAIF,MAAM,cAAc,gBAAgB,gBAAgB,SAASC,OAAY,eAAe,KAAK,CAAC;EAC9F,MAAM,cAAc,KAAK,MAAM,IAAI,aAAa,CAAC,OAAO,YAAY,QAAQ,CAAC,CAAC;EAM9E,MAAM,MAAM,MAAM,sBAAsB,YAAY;EAGpD,MAAM,aAAa,gBAAgB,IAAI,eAAe,UAAU,CAAC;AACjE,MAAI,eAAe,KAAA,EACjB,OAAM,IAAI,MAAM,6CAA6C,eAAe,UAAU,GAAG;AAG3F,WAAS,IAAI,YAAY,IAAI;AAC7B,gBAAc,KAAK,CAAC,gBAAgB,IAAI,CAAC;;CAI3C,MAAM,mBAAmB,gBAAgB,OAAO;AAChD,KAAI,SAAS,SAAS,iBACpB,OAAM,IAAI,MAAM,YAAY,iBAAiB,2BAA2B,SAAS,OAAO;AAG1F,QAAO,CAAC,UAAU,cAAc;;;;;;;AAQlC,SAAS,kBACP,SACA,gBACA,cACA,gBACA,aACU;CAEV,MAAM,aAAoB,YAAY,cAAc,CAAC,KAAK,MAAM,EAAE,KAAK,CAAC;CAGxE,MAAM,sBAAsB,eAAe,UAAU;AACrD,KAAI,CAAC,WAAW,MAAM,QAAQ,IAAI,UAAU,KAAK,oBAAoB,CACnE,YAAW,KAAK,eAAe;AAOjC,YAAW,MAAM,GAAG,MAAM,gBAAgB,EAAE,QAAQ,EAAE,EAAE,QAAQ,CAAC,CAAC;CAGlE,MAAM,UAAiB,EAAE;AACzB,MAAK,MAAM,OAAO,WAChB,KAAI,QAAQ,WAAW,KAAK,QAAQ,QAAQ,SAAS,GAAG,UAAU,KAAK,IAAI,UAAU,CACnF,SAAQ,KAAK,IAAI;CAKrB,MAAM,kCAAkB,IAAI,KAAkB;AAC9C,MAAK,IAAI,IAAI,GAAG,IAAI,QAAQ,QAAQ,KAAK;EACvC,MAAM,aAAa,kBAAkB,IAAI,EAAE;AAC3C,kBAAgB,IAAI,gBAAgB,WAAW,EAAE,QAAQ,GAAG;;CAG9D,IAAI,WAAW,SAAS,MAAM,CAC3B,QAAQ,oBAAoB,CAC5B,aAAa,SAAS,QAAQ,CAC9B,aAAa,eAAe,eAAe,CAC3C,aAAa,iBAAiB,aAAa;AAG9C,MAAK,MAAM,CAAC,YAAY,QAAQ,gBAAgB;EAC9C,MAAM,QAAQ,gBAAgB,WAAW;EACzC,MAAM,eAAe,gBAAgB,IAAI,MAAM;AAC/C,MAAI,iBAAiB,KAAA,EACnB,OAAM,IAAI,MAAM,wCAAwC;EAI1D,MAAM,aAAa,0BACjB,IACD;EACD,MAAM,UAAU,KAAK,UAAU,WAAW;EAC1C,MAAM,YAAY,IAAI,aAAa,CAAC,OAAO,QAAQ;EACnD,MAAM,cAAcA,OAAY,SAAS,UAAU;EAEnD,MAAM,kBAAkB,SAAS,IAAI,YAAY,CAAC,aAAa,aAAa,aAAa;AAEzF,aAAW,SAAS,aAAa,iBAAiB,gBAAgB;;AAGpE,QAAO;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AA+BT,SAAS,6BACP,QACA,mBACyB;CAEzB,MAAM,yBADa,OAAO,WACgB,WAAW,CAAC,KAAK,MAAkB,WAAW,EAAE,CAAC;CAC3F,MAAM,cAAc,WAAW,cAAc,gBAAgB,OAAO,aAAa,CAAC,CAAC;AAEnF,QAAO;EACL,YAAY,WAAW,OAAO,WAAW,WAAW,CAAC;EACrD,YAAY;EACZ,cAAc;EACd,aAAa,OAAO;EACpB,aAAa,OAAO;EACrB;;;;;;;AAQH,SAAS,mBACP,cACA,SACA,cACA,qBACA,kBACQ;CACR,MAAM,cAAc,cAAc,cAAc,QAAQ,KAAK,CAAC;AAC9D,IAAG,UAAU,aAAa,EAAE,WAAW,MAAM,CAAC;CAG9C,MAAM,mBAAmB,KAAK,KAAK,aAAa,qBAAqB;CACrE,MAAM,mBAAmB,6BAA6B,cAAc,iBAAiB;AACrF,IAAG,cAAc,kBAAkB,KAAK,UAAU,kBAAkB,MAAM,EAAE,CAAC;CAG7E,MAAM,qBAAqB,KAAK,KAAK,aAAa,wBAAwB;CAC1E,MAAM,aAAsC,EAAE;AAC9C,MAAK,MAAM,CAAC,KAAK,QAAQ,qBAAqB;EAC5C,MAAM,cAAc,MAAM,oBAAoB,IAAI;AAClD,aAAW,IAAI,UAAU,IAAI;;AAE/B,IAAG,cAAc,oBAAoB,KAAK,UAAU,YAAY,MAAM,EAAE,CAAC;AAEzE,QAAO;;;;;;;;;;AAWT,eAAsBC,SACpB,SACA,SACA,KAC0B;AAC1B,KAAI,QAAQ,qBAAqB,KAAA,EAC/B,OAAM,IAAI,MAAM,wCAAwC;CAG1D,MAAM,eAAe,oBAAoB,QAAQ,cAAc,IAAI;CACnE,MAAM,WAAW,SAAS,KAAK,aAAa;CAE5C,MAAM,QAAQ,SAAS,OAAO;AAC9B,KAAI,UAAU,KAAA,EACZ,OAAM,IAAI,MAAM,6BAA6B;CAG/C,MAAM,UAAU,YAAY,QAAQ,QAAQ;CAC5C,MAAM,cAAc,SAAS,MAAM,QAAQ;AAC3C,KAAI,gBAAgB,KAAA,EAClB,OAAM,IAAI,MAAM,8BAA8B;CAIhD,MAAM,kBAAkB,YAAY,iBAAiB;AACrD,KAAI,oBAAoB,KAAA,EACtB,OAAM,IAAI,MAAM,mEAAmE;CAIrF,MAAM,cAAc,gBAAgB,cAAc,QAAQ;AAE1D,KAAI,WAAW,IAAI,QAAQ,YAAY,KACrC,SAAQ,MAAM,0CAA0C;CAG1D,MAAM,SAAS,MAAM,oBAAoB,QAAQ,iBAAiB;CAGlE,MAAM,kBAAkB,MAAM,iBAC5B,QACA,iBACA,mBACA,QAAQ,gBACR,QAAQ,WAAW,MACpB;AAED,KAAI,oBAAoB,QAAQ,oBAAoB,KAAA,EAClD,OAAM,IAAI,MAAM,8CAA8C;CAIhE,MAAM,mBAAmB,MAAM,aAAa,CAAC,sBAAsB;AACnE,KAAI,qBAAqB,KAAA,EACvB,OAAM,IAAI,MAAM,yCAAyC;CAG3D,MAAM,MAAM,SAAS,KAAK,CAAC,UAAU;CACrC,MAAM,gBAAgB,cAAc,gBAClC,iBACA,KAAA,GACA,KACA,iBACD;CAID,MAAM,eAAe,sBAAsB,eAAe,SAD9B,YAAY,aAAa,CAAC,KACgC,CAAC;CAGvF,MAAM,CAAC,gBAAgB,uBAAuB,sBAC5C,eACA,aACA,MAAM,KAAK,CACZ;AAED,KAAI,WAAW,IAAI,QAAQ,YAAY,KACrC,SAAQ,MAAM,YAAY,eAAe,KAAK,yCAAyC;CAIzF,MAAM,mBAAmB,KAAK,KAAK;CAInC,MAAM,oCAAoB,IAAI,KAA+B;AAC7D,MAAK,MAAM,CAAC,IAAI,QAAQ,eACtB,mBAAkB,IAAI,gBAAgB,GAAG,EAAE,IAAI;CAGjD,MAAM,CAAC,cAAc,kBAAkB,SAAS,YAAY,eAAe,kBAAkB;AAE7F,KAAI,WAAW,IAAI,QAAQ,YAAY,KACrC,SAAQ,MAAM,aAAa,eAAe,KAAK,oBAAoB;CAIrE,MAAM,qCAAqB,IAAI,KAA+B;AAC9D,MAAK,MAAM,CAAC,OAAO,QAAQ,eAEzB,MAAK,MAAM,CAAC,OAAO,eACjB,KAAI,gBAAgB,GAAG,KAAK,OAAO;AACjC,qBAAmB,IAAI,IAAI,IAAI;AAC/B;;CAMN,MAAM,eAAe,kBACnB,SACA,MAAM,KAAK,EACX,kBACA,oBACA,YACD;CAED,MAAM,oBAAoB,MAAM,aAAa,CAAC,sBAAsB;AACpE,KAAI,sBAAsB,KAAA,EACxB,OAAM,IAAI,MAAM,yCAAyC;CAI3D,MAAM,iBAAiB,YAAY,aAAa,CAAC,KAAK;CACtD,MAAM,oBAAoB,SAAS,YAAY,eAAe;CAC9D,IAAI;AACJ,KAAI,sBAAsB,KAAA,EACxB,kBAAiB,kBAAkB,aAAa;UAG5C,MAAM,KAAK,CAAC,UAAU,KAAK,eAAe,UAAU,CACtD,kBAAiB,MAAM,aAAa;KAEpC,OAAM,IAAI,MAAM,eAAe,eAAe,UAAU,CAAC,wBAAwB;CAKrF,MAAM,mBAAmB,cAAc,kBAAkB;CAEzD,IAAI,SAAS,eAAe,WAAW,cAAc,IAAI,EAAE,MAAM,aAAa,CAAC,CAAC,WAC9E,aACD;AAED,KAAI,qBAAqB,KAAA,EACvB,UAAS,OAAO,qBAAqB,iBAAiB;AAGxD,KAAI,QAAQ,YAAY,MAAM;EAO5B,MAAM,aALmB,OAAO,WAC9B,KAAA,GACA,mBACA,KAAA,EAEiC,CAAC,UAAU;AAC9C,UAAQ,IAAI,WAAW;AAEvB,SAAO;GACL,eAAe,iBAAiB,UAAU;GAC1C;GACD;;CASH,MAAM,wBAA+B,YAAY,cAAc,CAAC,KAAK,MAAM,EAAE,KAAK,CAAC;CACnF,MAAM,WAAW,MAAM,KAAK;CAC5B,MAAM,cAAc,SAAS,UAAU;AACvC,KAAI,CAAC,sBAAsB,MAAM,MAAM,EAAE,UAAU,KAAK,YAAY,CAClE,uBAAsB,KAAK,SAAS;AAEtC,uBAAsB,MAAM,GAAG,MAAM,gBAAgB,EAAE,QAAQ,EAAE,EAAE,QAAQ,CAAC,CAAC;CAI7E,MAAM,mBAAmB,mBACvB,cACA,SACA,cACA,qBAPuB,sBAAsB,WAAW,MAAM,EAAE,UAAU,KAAK,YAAY,GAAG,EAS/F;AASD,OAAM,iBACJ,QACA,cATuB,OAAO,WAC9B,KAAA,GACA,mBACA,eAOgB,EAChB,oBACA,QAAQ,WAAW,MACpB;CAGD,MAAM,qBAAqB,SAAS,MAAM,QAAQ;AAClD,KAAI,uBAAuB,KAAA,GAAW;EACpC,MAAM,gBAAgB,mBAAmB,eAAe;AACxD,gBAAc,eAAe;AAC7B,qBAAmB,iBAAiB,cAAc;AAElD,qBAAmB,mBAAmB,iBAAiB;AACvD,WAAS,KAAK,aAAa;;AAG7B,KAAI,WAAW,IAAI,QAAQ,YAAY,KACrC,SAAQ,MAAM,8BAA8B,aAAa,UAAU,GAAG;AAGxE,QAAO,EACL,eAAe,iBAAiB,UAAU,EAC3C"}