@bcts/frost-hubert 1.0.0-alpha.22 → 1.0.0-beta.0

package/dist/finalize-BfLgzn8f.cjs

@@ -0,0 +1,303 @@
+const require_chunk = require("./chunk-CZWwpsFl.cjs");
+const require_registry_index = require("./registry/index.cjs");
+const require_common = require("./common-lKP5EzHy.cjs");
+const require_busy = require("./busy-EZU7EKr6.cjs");
+const require_parallel = require("./parallel-D1R6ZGlY.cjs");
+let _bcts_gstp = require("@bcts/gstp");
+let node_fs = require("node:fs");
+node_fs = require_chunk.__toESM(node_fs, 1);
+let node_path = require("node:path");
+node_path = require_chunk.__toESM(node_path, 1);
+//#region src/cmd/dkg/coordinator/finalize.ts
+/**
+* Copyright © 2023-2026 Blockchain Commons, LLC
+* Copyright © 2025-2026 Parity Technologies
+*
+*
+* DKG coordinator finalize command.
+*
+* Port of cmd/dkg/coordinator/finalize.rs from frost-hubert-rust.
+*
+* @module
+*/
+var finalize_exports = /* @__PURE__ */ require_chunk.__exportAll({ finalize: () => finalize });
+/**
+* Validate that the owner is the coordinator of the group.
+*
+* Port of coordinator check from finalize.rs lines 76-82.
+*/
+function validateCoordinator(groupRecord, ownerXid) {
+	if (groupRecord.coordinator().xid().urString() !== ownerXid.urString()) throw new Error(`Only the coordinator can collect finalize responses. Coordinator: ${groupRecord.coordinator().xid().urString()}, Owner: ${ownerXid.urString()}`);
+}
+/**
+* Validate envelope and extract finalize data (for parallel fetch).
+*
+* Port of `validate_and_extract_finalize_response()` from finalize.rs lines 407-466.
+*/
+function validateAndExtractFinalizeResponse(envelope, coordinatorKeys, expectedGroupId, expectedParticipant) {
+	const now = /* @__PURE__ */ new Date();
+	let sealed;
+	try {
+		sealed = _bcts_gstp.SealedResponse.tryFromEncryptedEnvelope(envelope, void 0, now, coordinatorKeys);
+	} catch (err) {
+		return { rejected: `Failed to decrypt/parse response: ${err instanceof Error ? err.message : String(err)}` };
+	}
+	if (!sealed.isOk()) try {
+		return { rejected: `Participant reported error: ${sealed.error().optionalObjectForPredicate("reason")?.extractString() ?? "unknown reason"}` };
+	} catch {
+		return { rejected: "Participant reported error: unknown reason" };
+	}
+	let result;
+	try {
+		result = sealed.result();
+	} catch {
+		return { rejected: "Finalize response has no result" };
+	}
+	try {
+		result.checkSubjectUnit();
+		result.checkType("dkgFinalizeResponse");
+	} catch (err) {
+		return { rejected: `Invalid response type: ${err instanceof Error ? err.message : String(err)}` };
+	}
+	try {
+		const groupId = require_common.parseAridUr(result.objectForPredicate("group").extractString());
+		if (groupId.urString() !== expectedGroupId.urString()) return { rejected: `Group ${groupId.urString()} does not match expected ${expectedGroupId.urString()}` };
+	} catch (err) {
+		return { rejected: `Failed to extract group: ${err instanceof Error ? err.message : String(err)}` };
+	}
+	try {
+		const participantStr = result.objectForPredicate("participant").extractString();
+		const { XID: XIDClass } = require("@bcts/components");
+		const participantXid = XIDClass.fromURString(participantStr);
+		if (participantXid.urString() !== expectedParticipant.urString()) return { rejected: `Participant ${participantXid.urString()} does not match expected ${expectedParticipant.urString()}` };
+	} catch (err) {
+		return { rejected: `Failed to extract participant: ${err instanceof Error ? err.message : String(err)}` };
+	}
+	let keyPackage;
+	let publicKeyPackage;
+	try {
+		const keyJsonStr = result.objectForPredicate("key_package").extractString();
+		keyPackage = JSON.parse(keyJsonStr);
+	} catch (err) {
+		return { rejected: `Failed to parse key_package: ${err instanceof Error ? err.message : String(err)}` };
+	}
+	try {
+		const pubJsonStr = result.objectForPredicate("public_key_package").extractString();
+		publicKeyPackage = JSON.parse(pubJsonStr);
+	} catch (err) {
+		return { rejected: `Failed to parse public_key_package: ${err instanceof Error ? err.message : String(err)}` };
+	}
+	return {
+		keyPackage,
+		publicKeyPackage
+	};
+}
+/**
+* Fetch a finalize response sequentially.
+*
+* Port of `fetch_finalize_response()` from finalize.rs lines 282-358.
+*/
+async function fetchFinalizeResponse(client, responseArid, timeout, coordinatorKeys, expectedGroup, expectedParticipant, participantName) {
+	const envelope = await require_busy.getWithIndicator(client, responseArid, participantName, timeout, require_common.isVerbose());
+	if (envelope === null || envelope === void 0) throw new Error("Finalize response not found in Hubert storage");
+	const result = validateAndExtractFinalizeResponse(envelope, coordinatorKeys, expectedGroup, expectedParticipant);
+	if ("rejected" in result) throw new Error(result.rejected);
+	return {
+		participant: expectedParticipant,
+		keyPackage: result.keyPackage,
+		publicKeyPackage: result.publicKeyPackage
+	};
+}
+/**
+* Collect finalize responses in parallel with progress display.
+*
+* Port of `collect_finalize_parallel()` from finalize.rs lines 371-404.
+*/
+async function collectFinalizeParallel(client, registry, pendingRequests, coordinatorKeys, expectedGroupId, timeout) {
+	const requests = [];
+	for (const [xid, arid] of pendingRequests.iterCollect()) {
+		const name = registry.participant(xid)?.petName() ?? xid.urString();
+		requests.push([
+			xid,
+			arid,
+			name
+		]);
+	}
+	return require_parallel.parallelFetch(client, requests, (envelope, xid) => validateAndExtractFinalizeResponse(envelope, coordinatorKeys, expectedGroupId, xid), require_parallel.parallelFetchConfigWithTimeout(timeout));
+}
+/**
+* Finalize collection results: persist, update registry, print summary.
+*
+* Port of `finalize_collection_results()` from finalize.rs lines 469-590.
+*/
+function finalizeFinalizeCollectionResults(collection, registryPath, registry, groupId) {
+	if (collection.rejections.length > 0) {
+		console.error();
+		console.error("Rejections:");
+		for (const [xid, reason] of collection.rejections) console.error(`  ${xid.urString()}: ${reason}`);
+	}
+	if (collection.errors.length > 0) {
+		console.error();
+		console.error("Errors:");
+		for (const [xid, error] of collection.errors) console.error(`  ${xid.urString()}: ${error}`);
+	}
+	if (collection.timeouts.length > 0) {
+		console.error();
+		console.error("Timeouts:");
+		for (const xid of collection.timeouts) console.error(`  ${xid.urString()}`);
+	}
+	if (!collection.allSucceeded()) throw new Error(`Finalize collection incomplete: ${collection.successes.length} succeeded, ${collection.rejections.length} rejected, ${collection.errors.length} errors, ${collection.timeouts.length} timeouts`);
+	let groupVerifyingKey;
+	for (const [xid, data] of collection.successes) {
+		const pubKeyPkg = data.publicKeyPackage;
+		if (!pubKeyPkg.verifying_key) throw new Error(`Failed to extract verifying key for ${xid.urString()}: missing verifying_key field`);
+		let signingKey;
+		try {
+			signingKey = require_common.signingKeyFromVerifying(hexToBytes(pubKeyPkg.verifying_key));
+		} catch (err) {
+			throw new Error(`Failed to extract verifying key for ${xid.urString()}: ${err instanceof Error ? err.message : String(err)}`, { cause: err });
+		}
+		if (groupVerifyingKey !== void 0) {
+			if (groupVerifyingKey.urString() !== signingKey.urString()) throw new Error(`Group verifying key mismatch for participant ${xid.urString()}`);
+		} else groupVerifyingKey = signingKey;
+	}
+	const stateDir = require_common.groupStateDir(registryPath, groupId.hex());
+	node_fs.mkdirSync(stateDir, { recursive: true });
+	const collectedPath = node_path.join(stateDir, "collected_finalize.json");
+	const root = {};
+	for (const [xid, data] of collection.successes) root[xid.urString()] = {
+		key_package: data.keyPackage,
+		public_key_package: data.publicKeyPackage
+	};
+	node_fs.writeFileSync(collectedPath, JSON.stringify(root, null, 2));
+	const groupRecord = registry.group(groupId);
+	if (groupRecord === void 0) throw new Error("Group not found in registry");
+	if (groupVerifyingKey !== void 0) groupRecord.setVerifyingKey(groupVerifyingKey);
+	groupRecord.clearPendingRequests();
+	registry.save(registryPath);
+	if (require_common.isVerbose()) {
+		console.error();
+		console.error(`Collected ${collection.successes.length} finalize responses. Saved to ${collectedPath}`);
+		if (groupVerifyingKey !== void 0) console.error(groupVerifyingKey.urString());
+	} else if (groupVerifyingKey !== void 0) console.log(groupVerifyingKey.urString());
+	return groupVerifyingKey;
+}
+/**
+* Helper to convert hex string to bytes.
+*/
+function hexToBytes(hex) {
+	const bytes = new Uint8Array(hex.length / 2);
+	for (let i = 0; i < bytes.length; i++) bytes[i] = parseInt(hex.slice(i * 2, i * 2 + 2), 16);
+	return bytes;
+}
+/**
+* Execute the DKG coordinator finalize command.
+*
+* Collects finalize responses (key/public key packages) from all participants.
+*
+* Port of `finalize()` from cmd/dkg/coordinator/finalize.rs.
+*/
+async function finalize(client, options, cwd) {
+	const registryPath = require_registry_index.resolveRegistryPath(options.registryPath, cwd);
+	const registry = require_registry_index.Registry.load(registryPath);
+	const owner = registry.owner();
+	if (owner === void 0) throw new Error("Registry owner is required");
+	const groupId = require_common.parseAridUr(options.groupId);
+	const groupRecord = registry.group(groupId);
+	if (groupRecord === void 0) throw new Error(`Group ${options.groupId} not found in registry`);
+	validateCoordinator(groupRecord, owner.xid());
+	const pendingRequests = groupRecord.pendingRequests();
+	if (pendingRequests.isEmpty()) throw new Error("No pending requests for this group. Did you run 'frost dkg coordinator finalize send'?");
+	const coordinatorKeys = owner.xidDocument().inceptionPrivateKeys();
+	if (coordinatorKeys === void 0) throw new Error("Coordinator XID document has no private keys");
+	let verifyingKey;
+	let collected;
+	let rejected = 0;
+	let errors;
+	let timeouts = 0;
+	if (options.parallel === true) {
+		const collection = await collectFinalizeParallel(client, registry, pendingRequests, coordinatorKeys, groupId, options.timeoutSeconds);
+		verifyingKey = finalizeFinalizeCollectionResults(collection, registryPath, registry, groupId);
+		collected = collection.successes.length;
+		rejected = collection.rejections.length;
+		errors = collection.errors.length;
+		timeouts = collection.timeouts.length;
+	} else {
+		const collectedEntries = [];
+		const errorEntries = [];
+		let groupVerifyingKey;
+		if (require_common.isVerbose()) console.error(`Collecting finalize responses from ${pendingRequests.len()} participants...`);
+		for (const [participantXid, collectFromArid] of pendingRequests.iterCollect()) {
+			const name = registry.participant(participantXid)?.petName() ?? participantXid.urString();
+			try {
+				const entry = await fetchFinalizeResponse(client, collectFromArid, options.timeoutSeconds, coordinatorKeys, groupId, participantXid, name);
+				const pubKeyPkg = entry.publicKeyPackage;
+				if (!pubKeyPkg.verifying_key) throw new Error("missing verifying_key field");
+				const signingKey = require_common.signingKeyFromVerifying(hexToBytes(pubKeyPkg.verifying_key));
+				if (groupVerifyingKey !== void 0) {
+					if (groupVerifyingKey.urString() !== signingKey.urString()) {
+						if (require_common.isVerbose()) console.error("error: group verifying key mismatch");
+						errorEntries.push([participantXid, "Group verifying key mismatch across responses"]);
+						continue;
+					}
+				} else groupVerifyingKey = signingKey;
+				collectedEntries.push(entry);
+			} catch (err) {
+				if (require_common.isVerbose()) console.error(`error: ${err instanceof Error ? err.message : String(err)}`);
+				errorEntries.push([participantXid, err instanceof Error ? err.message : String(err)]);
+			}
+		}
+		if (errorEntries.length > 0) {
+			if (require_common.isVerbose()) {
+				console.error();
+				console.error(`Failed to collect from ${errorEntries.length} participants:`);
+				for (const [xid, error] of errorEntries) console.error(`  ${xid.urString()}: ${error}`);
+			}
+			throw new Error(`Finalize collection incomplete: ${errorEntries.length} of ${pendingRequests.len()} responses failed`);
+		}
+		const stateDir = require_common.groupStateDir(registryPath, groupId.hex());
+		node_fs.mkdirSync(stateDir, { recursive: true });
+		const collectedPath = node_path.join(stateDir, "collected_finalize.json");
+		const root = {};
+		for (const entry of collectedEntries) root[entry.participant.urString()] = {
+			key_package: entry.keyPackage,
+			public_key_package: entry.publicKeyPackage
+		};
+		node_fs.writeFileSync(collectedPath, JSON.stringify(root, null, 2));
+		const groupRecordMut = registry.group(groupId);
+		if (groupRecordMut === void 0) throw new Error("Group not found in registry");
+		if (groupVerifyingKey !== void 0) groupRecordMut.setVerifyingKey(groupVerifyingKey);
+		groupRecordMut.clearPendingRequests();
+		registry.save(registryPath);
+		if (require_common.isVerbose()) {
+			console.error();
+			console.error(`Collected ${collectedEntries.length} finalize responses. Saved to ${collectedPath}`);
+			if (groupVerifyingKey !== void 0) console.error(groupVerifyingKey.urString());
+		} else if (groupVerifyingKey !== void 0) console.log(groupVerifyingKey.urString());
+		verifyingKey = groupVerifyingKey;
+		collected = collectedEntries.length;
+		errors = errorEntries.length;
+	}
+	return {
+		verifyingKey: verifyingKey?.urString() ?? "",
+		collected,
+		rejected,
+		errors,
+		timeouts
+	};
+}
+//#endregion
+Object.defineProperty(exports, "finalize", {
+	enumerable: true,
+	get: function() {
+		return finalize;
+	}
+});
+Object.defineProperty(exports, "finalize_exports", {
+	enumerable: true,
+	get: function() {
+		return finalize_exports;
+	}
+});
+
+//# sourceMappingURL=finalize-BfLgzn8f.cjs.map

package/dist/finalize-BfLgzn8f.cjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"finalize-BfLgzn8f.cjs","names":["SealedResponse","parseAridUr","getWithIndicator","isVerbose","parallelFetch","parallelFetchConfigWithTimeout","signingKeyFromVerifying","groupStateDir","path","resolveRegistryPath","Registry"],"sources":["../src/cmd/dkg/coordinator/finalize.ts"],"sourcesContent":["/**\n * Copyright © 2023-2026 Blockchain Commons, LLC\n * Copyright © 2025-2026 Parity Technologies\n *\n *\n * DKG coordinator finalize command.\n *\n * Port of cmd/dkg/coordinator/finalize.rs from frost-hubert-rust.\n *\n * @module\n */\n\nimport * as fs from \"node:fs\";\nimport * as path from \"node:path\";\n\nimport { type ARID, type PrivateKeys, type SigningPublicKey, type XID } from \"@bcts/components\";\nimport { type Envelope } from \"@bcts/envelope\";\nimport { SealedResponse } from \"@bcts/gstp\";\n\nimport {\n  type GroupRecord,\n  type PendingRequests,\n  Registry,\n  resolveRegistryPath,\n} from \"../../../registry/index.js\";\nimport { groupStateDir, isVerbose } from \"../../common.js\";\nimport {\n  type CollectionResult,\n  parallelFetch,\n  type ParallelFetchConfig,\n  parallelFetchConfigWithTimeout,\n} from \"../../parallel.js\";\nimport { type StorageClient } from \"../../storage.js\";\nimport { getWithIndicator } from \"../../busy.js\";\nimport { parseAridUr, signingKeyFromVerifying } from \"../common.js\";\n\n/**\n * Options for the DKG finalize command.\n */\nexport interface DkgFinalizeOptions {\n  registryPath?: string;\n  groupId: string;\n  parallel?: boolean;\n  timeoutSeconds?: number;\n  verbose?: boolean;\n}\n\n/**\n * Result of the DKG finalize command.\n */\nexport interface DkgFinalizeResult {\n  verifyingKey: string;\n  collected: number;\n  rejected: number;\n  errors: number;\n  timeouts: number;\n}\n\n/**\n * Data extracted from a successful finalize response.\n *\n * Port of `struct FinalizeResponseData` from finalize.rs.\n */\ninterface FinalizeResponseData {\n  keyPackage: unknown;\n  publicKeyPackage: unknown;\n}\n\n/**\n * Entry for a collected finalize response.\n *\n * Port of `struct FinalizeEntry` from finalize.rs.\n */\ninterface FinalizeEntry {\n  participant: XID;\n  keyPackage: unknown;\n  publicKeyPackage: unknown;\n}\n\n/**\n * Validate that the owner is the coordinator of the group.\n *\n * Port of coordinator check from finalize.rs lines 76-82.\n */\nfunction validateCoordinator(groupRecord: GroupRecord, ownerXid: XID): void {\n  if (groupRecord.coordinator().xid().urString() !== ownerXid.urString()) {\n    throw new Error(\n      `Only the coordinator can collect finalize responses. Coordinator: ${groupRecord.coordinator().xid().urString()}, Owner: ${ownerXid.urString()}`,\n    );\n  }\n}\n\n/**\n * Validate envelope and extract finalize data (for parallel fetch).\n *\n * Port of `validate_and_extract_finalize_response()` from finalize.rs lines 407-466.\n */\nfunction validateAndExtractFinalizeResponse(\n  envelope: Envelope,\n  coordinatorKeys: PrivateKeys,\n  expectedGroupId: ARID,\n  expectedParticipant: XID,\n): FinalizeResponseData | { rejected: string } {\n  const now = new Date();\n\n  let sealed: SealedResponse;\n  try {\n    sealed = SealedResponse.tryFromEncryptedEnvelope(envelope, undefined, now, coordinatorKeys);\n  } catch (err) {\n    return {\n      rejected: `Failed to decrypt/parse response: ${err instanceof Error ? err.message : String(err)}`,\n    };\n  }\n\n  // Check for error response\n  if (!sealed.isOk()) {\n    try {\n      const error = sealed.error();\n      const reasonEnv = error.optionalObjectForPredicate(\"reason\");\n      const reason = reasonEnv?.extractString() ?? \"unknown reason\";\n      return { rejected: `Participant reported error: ${reason}` };\n    } catch {\n      return { rejected: \"Participant reported error: unknown reason\" };\n    }\n  }\n\n  // Get and validate result\n  let result: Envelope;\n  try {\n    result = sealed.result();\n  } catch {\n    return { rejected: \"Finalize response has no result\" };\n  }\n\n  // Validate response type\n  try {\n    result.checkSubjectUnit();\n    result.checkType(\"dkgFinalizeResponse\");\n  } catch (err) {\n    return {\n      rejected: `Invalid response type: ${err instanceof Error ? err.message : String(err)}`,\n    };\n  }\n\n  // Validate group ID\n  try {\n    const groupEnv = result.objectForPredicate(\"group\");\n    const groupIdStr = groupEnv.extractString();\n    const groupId = parseAridUr(groupIdStr);\n    if (groupId.urString() !== expectedGroupId.urString()) {\n      return {\n        rejected: `Group ${groupId.urString()} does not match expected ${expectedGroupId.urString()}`,\n      };\n    }\n  } catch (err) {\n    return {\n      rejected: `Failed to extract group: ${err instanceof Error ? err.message : String(err)}`,\n    };\n  }\n\n  // Validate participant\n  try {\n    const participantEnv = result.objectForPredicate(\"participant\");\n    const participantStr = participantEnv.extractString();\n    // eslint-disable-next-line @typescript-eslint/no-unsafe-assignment, @typescript-eslint/no-require-imports, no-undef\n    const { XID: XIDClass } = require(\"@bcts/components\");\n    // eslint-disable-next-line @typescript-eslint/no-unsafe-call, @typescript-eslint/no-unsafe-member-access\n    const participantXid = XIDClass.fromURString(participantStr) as XID;\n    if (participantXid.urString() !== expectedParticipant.urString()) {\n      return {\n        rejected: `Participant ${participantXid.urString()} does not match expected ${expectedParticipant.urString()}`,\n      };\n    }\n  } catch (err) {\n    return {\n      rejected: `Failed to extract participant: ${err instanceof Error ? err.message : String(err)}`,\n    };\n  }\n\n  // Extract key packages\n  let keyPackage: unknown;\n  let publicKeyPackage: unknown;\n\n  try {\n    const keyJsonEnv = result.objectForPredicate(\"key_package\");\n    const keyJsonStr = keyJsonEnv.extractString();\n    keyPackage = JSON.parse(keyJsonStr);\n  } catch (err) {\n    return {\n      rejected: `Failed to parse key_package: ${err instanceof Error ? err.message : String(err)}`,\n    };\n  }\n\n  try {\n    const pubJsonEnv = result.objectForPredicate(\"public_key_package\");\n    const pubJsonStr = pubJsonEnv.extractString();\n    publicKeyPackage = JSON.parse(pubJsonStr);\n  } catch (err) {\n    return {\n      rejected: `Failed to parse public_key_package: ${err instanceof Error ? err.message : String(err)}`,\n    };\n  }\n\n  return { keyPackage, publicKeyPackage };\n}\n\n/**\n * Fetch a finalize response sequentially.\n *\n * Port of `fetch_finalize_response()` from finalize.rs lines 282-358.\n */\nasync function fetchFinalizeResponse(\n  client: StorageClient,\n  responseArid: ARID,\n  timeout: number | undefined,\n  coordinatorKeys: PrivateKeys,\n  expectedGroup: ARID,\n  expectedParticipant: XID,\n  participantName: string,\n): Promise<FinalizeEntry> {\n  const envelope = await getWithIndicator(\n    client,\n    responseArid,\n    participantName,\n    timeout,\n    isVerbose(),\n  );\n\n  if (envelope === null || envelope === undefined) {\n    throw new Error(\"Finalize response not found in Hubert storage\");\n  }\n\n  const result = validateAndExtractFinalizeResponse(\n    envelope,\n    coordinatorKeys,\n    expectedGroup,\n    expectedParticipant,\n  );\n\n  if (\"rejected\" in result) {\n    throw new Error(result.rejected);\n  }\n\n  return {\n    participant: expectedParticipant,\n    keyPackage: result.keyPackage,\n    publicKeyPackage: result.publicKeyPackage,\n  };\n}\n\n/**\n * Collect finalize responses in parallel with progress display.\n *\n * Port of `collect_finalize_parallel()` from finalize.rs lines 371-404.\n */\nasync function collectFinalizeParallel(\n  client: StorageClient,\n  registry: Registry,\n  pendingRequests: PendingRequests,\n  coordinatorKeys: PrivateKeys,\n  expectedGroupId: ARID,\n  timeout: number | undefined,\n): Promise<CollectionResult<FinalizeResponseData>> {\n  const requests: [XID, ARID, string][] = [];\n\n  for (const [xid, arid] of pendingRequests.iterCollect()) {\n    const record = registry.participant(xid);\n    const name = record?.petName() ?? xid.urString();\n    requests.push([xid, arid, name]);\n  }\n\n  const config: ParallelFetchConfig = parallelFetchConfigWithTimeout(timeout);\n\n  return parallelFetch(\n    client,\n    requests,\n    (envelope: Envelope, xid: XID) =>\n      validateAndExtractFinalizeResponse(envelope, coordinatorKeys, expectedGroupId, xid),\n    config,\n  );\n}\n\n/**\n * Finalize collection results: persist, update registry, print summary.\n *\n * Port of `finalize_collection_results()` from finalize.rs lines 469-590.\n */\nfunction finalizeFinalizeCollectionResults(\n  collection: CollectionResult<FinalizeResponseData>,\n  registryPath: string,\n  registry: Registry,\n  groupId: ARID,\n): SigningPublicKey | undefined {\n  // Report any failures\n  if (collection.rejections.length > 0) {\n    console.error();\n    console.error(\"Rejections:\");\n    for (const [xid, reason] of collection.rejections) {\n      console.error(`  ${xid.urString()}: ${reason}`);\n    }\n  }\n  if (collection.errors.length > 0) {\n    console.error();\n    console.error(\"Errors:\");\n    for (const [xid, error] of collection.errors) {\n      console.error(`  ${xid.urString()}: ${error}`);\n    }\n  }\n  if (collection.timeouts.length > 0) {\n    console.error();\n    console.error(\"Timeouts:\");\n    for (const xid of collection.timeouts) {\n      console.error(`  ${xid.urString()}`);\n    }\n  }\n\n  if (!collection.allSucceeded()) {\n    throw new Error(\n      `Finalize collection incomplete: ${collection.successes.length} succeeded, ` +\n        `${collection.rejections.length} rejected, ${collection.errors.length} errors, ` +\n        `${collection.timeouts.length} timeouts`,\n    );\n  }\n\n  // Validate group verifying key consistency\n  let groupVerifyingKey: SigningPublicKey | undefined;\n\n  for (const [xid, data] of collection.successes) {\n    // Extract verifying_key from public_key_package\n    const pubKeyPkg = data.publicKeyPackage as { verifying_key?: string };\n    if (!pubKeyPkg.verifying_key) {\n      throw new Error(\n        `Failed to extract verifying key for ${xid.urString()}: missing verifying_key field`,\n      );\n    }\n\n    // The verifying key is typically hex-encoded\n    let signingKey: SigningPublicKey;\n    try {\n      const verifyingKeyBytes = hexToBytes(pubKeyPkg.verifying_key);\n      signingKey = signingKeyFromVerifying(verifyingKeyBytes) as SigningPublicKey;\n    } catch (err) {\n      throw new Error(\n        `Failed to extract verifying key for ${xid.urString()}: ${err instanceof Error ? err.message : String(err)}`,\n        { cause: err },\n      );\n    }\n\n    if (groupVerifyingKey !== undefined) {\n      if (groupVerifyingKey.urString() !== signingKey.urString()) {\n        throw new Error(`Group verifying key mismatch for participant ${xid.urString()}`);\n      }\n    } else {\n      groupVerifyingKey = signingKey;\n    }\n  }\n\n  // Persist collected finalize data\n  const stateDir = groupStateDir(registryPath, groupId.hex());\n  fs.mkdirSync(stateDir, { recursive: true });\n\n  const collectedPath = path.join(stateDir, \"collected_finalize.json\");\n  const root: Record<string, { key_package: unknown; public_key_package: unknown }> = {};\n\n  for (const [xid, data] of collection.successes) {\n    root[xid.urString()] = {\n      key_package: data.keyPackage,\n      public_key_package: data.publicKeyPackage,\n    };\n  }\n\n  fs.writeFileSync(collectedPath, JSON.stringify(root, null, 2));\n\n  // Update registry\n  const groupRecord = registry.group(groupId);\n  if (groupRecord === undefined) {\n    throw new Error(\"Group not found in registry\");\n  }\n\n  if (groupVerifyingKey !== undefined) {\n    groupRecord.setVerifyingKey(groupVerifyingKey);\n  }\n  groupRecord.clearPendingRequests();\n  registry.save(registryPath);\n\n  if (isVerbose()) {\n    console.error();\n    console.error(\n      `Collected ${collection.successes.length} finalize responses. Saved to ${collectedPath}`,\n    );\n    if (groupVerifyingKey !== undefined) {\n      console.error(groupVerifyingKey.urString());\n    }\n  } else if (groupVerifyingKey !== undefined) {\n    console.log(groupVerifyingKey.urString());\n  }\n\n  return groupVerifyingKey;\n}\n\n/**\n * Helper to convert hex string to bytes.\n */\nfunction hexToBytes(hex: string): Uint8Array {\n  const bytes = new Uint8Array(hex.length / 2);\n  for (let i = 0; i < bytes.length; i++) {\n    bytes[i] = parseInt(hex.slice(i * 2, i * 2 + 2), 16);\n  }\n  return bytes;\n}\n\n/**\n * Execute the DKG coordinator finalize command.\n *\n * Collects finalize responses (key/public key packages) from all participants.\n *\n * Port of `finalize()` from cmd/dkg/coordinator/finalize.rs.\n */\nexport async function finalize(\n  client: StorageClient,\n  options: DkgFinalizeOptions,\n  cwd: string,\n): Promise<DkgFinalizeResult> {\n  const registryPath = resolveRegistryPath(options.registryPath, cwd);\n  const registry = Registry.load(registryPath);\n\n  const owner = registry.owner();\n  if (owner === undefined) {\n    throw new Error(\"Registry owner is required\");\n  }\n\n  const groupId = parseAridUr(options.groupId);\n  const groupRecord = registry.group(groupId);\n\n  if (groupRecord === undefined) {\n    throw new Error(`Group ${options.groupId} not found in registry`);\n  }\n\n  // Validate that owner is the coordinator\n  validateCoordinator(groupRecord, owner.xid());\n\n  const pendingRequests = groupRecord.pendingRequests();\n  if (pendingRequests.isEmpty()) {\n    throw new Error(\n      \"No pending requests for this group. Did you run 'frost dkg coordinator finalize send'?\",\n    );\n  }\n\n  const coordinatorKeys = owner.xidDocument().inceptionPrivateKeys();\n  if (coordinatorKeys === undefined) {\n    throw new Error(\"Coordinator XID document has no private keys\");\n  }\n\n  let verifyingKey: SigningPublicKey | undefined;\n  let collected: number;\n  let rejected = 0;\n  let errors: number;\n  let timeouts = 0;\n\n  if (options.parallel === true) {\n    // Parallel path with progress display\n    const collection = await collectFinalizeParallel(\n      client,\n      registry,\n      pendingRequests,\n      coordinatorKeys,\n      groupId,\n      options.timeoutSeconds,\n    );\n\n    verifyingKey = finalizeFinalizeCollectionResults(collection, registryPath, registry, groupId);\n\n    collected = collection.successes.length;\n    rejected = collection.rejections.length;\n    errors = collection.errors.length;\n    timeouts = collection.timeouts.length;\n  } else {\n    // Sequential path (original behavior)\n    const collectedEntries: FinalizeEntry[] = [];\n    const errorEntries: [XID, string][] = [];\n    let groupVerifyingKey: SigningPublicKey | undefined;\n\n    if (isVerbose()) {\n      console.error(`Collecting finalize responses from ${pendingRequests.len()} participants...`);\n    }\n\n    for (const [participantXid, collectFromArid] of pendingRequests.iterCollect()) {\n      const record = registry.participant(participantXid);\n      const name = record?.petName() ?? participantXid.urString();\n\n      try {\n        const entry = await fetchFinalizeResponse(\n          client,\n          collectFromArid,\n          options.timeoutSeconds,\n          coordinatorKeys,\n          groupId,\n          participantXid,\n          name,\n        );\n\n        // Extract verifying key from public_key_package\n        const pubKeyPkg = entry.publicKeyPackage as { verifying_key?: string };\n        if (!pubKeyPkg.verifying_key) {\n          throw new Error(\"missing verifying_key field\");\n        }\n\n        const verifyingKeyBytes = hexToBytes(pubKeyPkg.verifying_key);\n        const signingKey = signingKeyFromVerifying(verifyingKeyBytes) as SigningPublicKey;\n\n        if (groupVerifyingKey !== undefined) {\n          if (groupVerifyingKey.urString() !== signingKey.urString()) {\n            if (isVerbose()) {\n              console.error(\"error: group verifying key mismatch\");\n            }\n            errorEntries.push([participantXid, \"Group verifying key mismatch across responses\"]);\n            continue;\n          }\n        } else {\n          groupVerifyingKey = signingKey;\n        }\n\n        collectedEntries.push(entry);\n      } catch (err) {\n        if (isVerbose()) {\n          console.error(`error: ${err instanceof Error ? err.message : String(err)}`);\n        }\n        errorEntries.push([participantXid, err instanceof Error ? err.message : String(err)]);\n      }\n    }\n\n    if (errorEntries.length > 0) {\n      if (isVerbose()) {\n        console.error();\n        console.error(`Failed to collect from ${errorEntries.length} participants:`);\n        for (const [xid, error] of errorEntries) {\n          console.error(`  ${xid.urString()}: ${error}`);\n        }\n      }\n      throw new Error(\n        `Finalize collection incomplete: ${errorEntries.length} of ${pendingRequests.len()} responses failed`,\n      );\n    }\n\n    // Persist collected finalize data\n    const stateDir = groupStateDir(registryPath, groupId.hex());\n    fs.mkdirSync(stateDir, { recursive: true });\n\n    const collectedPath = path.join(stateDir, \"collected_finalize.json\");\n    const root: Record<string, { key_package: unknown; public_key_package: unknown }> = {};\n\n    for (const entry of collectedEntries) {\n      root[entry.participant.urString()] = {\n        key_package: entry.keyPackage,\n        public_key_package: entry.publicKeyPackage,\n      };\n    }\n\n    fs.writeFileSync(collectedPath, JSON.stringify(root, null, 2));\n\n    // Update registry pending requests cleared\n    const groupRecordMut = registry.group(groupId);\n    if (groupRecordMut === undefined) {\n      throw new Error(\"Group not found in registry\");\n    }\n\n    if (groupVerifyingKey !== undefined) {\n      groupRecordMut.setVerifyingKey(groupVerifyingKey);\n    }\n    groupRecordMut.clearPendingRequests();\n    registry.save(registryPath);\n\n    if (isVerbose()) {\n      console.error();\n      console.error(\n        `Collected ${collectedEntries.length} finalize responses. Saved to ${collectedPath}`,\n      );\n      if (groupVerifyingKey !== undefined) {\n        console.error(groupVerifyingKey.urString());\n      }\n    } else if (groupVerifyingKey !== undefined) {\n      console.log(groupVerifyingKey.urString());\n    }\n\n    verifyingKey = groupVerifyingKey;\n    collected = collectedEntries.length;\n    errors = errorEntries.length;\n  }\n\n  return {\n    verifyingKey: verifyingKey?.urString() ?? \"\",\n    collected,\n    rejected,\n    errors,\n    timeouts,\n  };\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;AAoFA,SAAS,oBAAoB,aAA0B,UAAqB;AAC1E,KAAI,YAAY,aAAa,CAAC,KAAK,CAAC,UAAU,KAAK,SAAS,UAAU,CACpE,OAAM,IAAI,MACR,qEAAqE,YAAY,aAAa,CAAC,KAAK,CAAC,UAAU,CAAC,WAAW,SAAS,UAAU,GAC/I;;;;;;;AASL,SAAS,mCACP,UACA,iBACA,iBACA,qBAC6C;CAC7C,MAAM,sBAAM,IAAI,MAAM;CAEtB,IAAI;AACJ,KAAI;AACF,WAASA,WAAAA,eAAe,yBAAyB,UAAU,KAAA,GAAW,KAAK,gBAAgB;UACpF,KAAK;AACZ,SAAO,EACL,UAAU,qCAAqC,eAAe,QAAQ,IAAI,UAAU,OAAO,IAAI,IAChG;;AAIH,KAAI,CAAC,OAAO,MAAM,CAChB,KAAI;AAIF,SAAO,EAAE,UAAU,+BAHL,OAAO,OACE,CAAC,2BAA2B,SAC3B,EAAE,eAAe,IAAI,oBACe;SACtD;AACN,SAAO,EAAE,UAAU,8CAA8C;;CAKrE,IAAI;AACJ,KAAI;AACF,WAAS,OAAO,QAAQ;SAClB;AACN,SAAO,EAAE,UAAU,mCAAmC;;AAIxD,KAAI;AACF,SAAO,kBAAkB;AACzB,SAAO,UAAU,sBAAsB;UAChC,KAAK;AACZ,SAAO,EACL,UAAU,0BAA0B,eAAe,QAAQ,IAAI,UAAU,OAAO,IAAI,IACrF;;AAIH,KAAI;EAGF,MAAM,UAAUC,eAAAA,YAFC,OAAO,mBAAmB,QAChB,CAAC,eACU,CAAC;AACvC,MAAI,QAAQ,UAAU,KAAK,gBAAgB,UAAU,CACnD,QAAO,EACL,UAAU,SAAS,QAAQ,UAAU,CAAC,2BAA2B,gBAAgB,UAAU,IAC5F;UAEI,KAAK;AACZ,SAAO,EACL,UAAU,4BAA4B,eAAe,QAAQ,IAAI,UAAU,OAAO,IAAI,IACvF;;AAIH,KAAI;EAEF,MAAM,iBADiB,OAAO,mBAAmB,cACZ,CAAC,eAAe;EAErD,MAAM,EAAE,KAAK,aAAa,QAAQ,mBAAmB;EAErD,MAAM,iBAAiB,SAAS,aAAa,eAAe;AAC5D,MAAI,eAAe,UAAU,KAAK,oBAAoB,UAAU,CAC9D,QAAO,EACL,UAAU,eAAe,eAAe,UAAU,CAAC,2BAA2B,oBAAoB,UAAU,IAC7G;UAEI,KAAK;AACZ,SAAO,EACL,UAAU,kCAAkC,eAAe,QAAQ,IAAI,UAAU,OAAO,IAAI,IAC7F;;CAIH,IAAI;CACJ,IAAI;AAEJ,KAAI;EAEF,MAAM,aADa,OAAO,mBAAmB,cAChB,CAAC,eAAe;AAC7C,eAAa,KAAK,MAAM,WAAW;UAC5B,KAAK;AACZ,SAAO,EACL,UAAU,gCAAgC,eAAe,QAAQ,IAAI,UAAU,OAAO,IAAI,IAC3F;;AAGH,KAAI;EAEF,MAAM,aADa,OAAO,mBAAmB,qBAChB,CAAC,eAAe;AAC7C,qBAAmB,KAAK,MAAM,WAAW;UAClC,KAAK;AACZ,SAAO,EACL,UAAU,uCAAuC,eAAe,QAAQ,IAAI,UAAU,OAAO,IAAI,IAClG;;AAGH,QAAO;EAAE;EAAY;EAAkB;;;;;;;AAQzC,eAAe,sBACb,QACA,cACA,SACA,iBACA,eACA,qBACA,iBACwB;CACxB,MAAM,WAAW,MAAMC,aAAAA,iBACrB,QACA,cACA,iBACA,SACAC,eAAAA,WAAW,CACZ;AAED,KAAI,aAAa,QAAQ,aAAa,KAAA,EACpC,OAAM,IAAI,MAAM,gDAAgD;CAGlE,MAAM,SAAS,mCACb,UACA,iBACA,eACA,oBACD;AAED,KAAI,cAAc,OAChB,OAAM,IAAI,MAAM,OAAO,SAAS;AAGlC,QAAO;EACL,aAAa;EACb,YAAY,OAAO;EACnB,kBAAkB,OAAO;EAC1B;;;;;;;AAQH,eAAe,wBACb,QACA,UACA,iBACA,iBACA,iBACA,SACiD;CACjD,MAAM,WAAkC,EAAE;AAE1C,MAAK,MAAM,CAAC,KAAK,SAAS,gBAAgB,aAAa,EAAE;EAEvD,MAAM,OADS,SAAS,YAAY,IACjB,EAAE,SAAS,IAAI,IAAI,UAAU;AAChD,WAAS,KAAK;GAAC;GAAK;GAAM;GAAK,CAAC;;AAKlC,QAAOC,iBAAAA,cACL,QACA,WACC,UAAoB,QACnB,mCAAmC,UAAU,iBAAiB,iBAAiB,IAAI,EANnDC,iBAAAA,+BAA+B,QAO3D,CACP;;;;;;;AAQH,SAAS,kCACP,YACA,cACA,UACA,SAC8B;AAE9B,KAAI,WAAW,WAAW,SAAS,GAAG;AACpC,UAAQ,OAAO;AACf,UAAQ,MAAM,cAAc;AAC5B,OAAK,MAAM,CAAC,KAAK,WAAW,WAAW,WACrC,SAAQ,MAAM,KAAK,IAAI,UAAU,CAAC,IAAI,SAAS;;AAGnD,KAAI,WAAW,OAAO,SAAS,GAAG;AAChC,UAAQ,OAAO;AACf,UAAQ,MAAM,UAAU;AACxB,OAAK,MAAM,CAAC,KAAK,UAAU,WAAW,OACpC,SAAQ,MAAM,KAAK,IAAI,UAAU,CAAC,IAAI,QAAQ;;AAGlD,KAAI,WAAW,SAAS,SAAS,GAAG;AAClC,UAAQ,OAAO;AACf,UAAQ,MAAM,YAAY;AAC1B,OAAK,MAAM,OAAO,WAAW,SAC3B,SAAQ,MAAM,KAAK,IAAI,UAAU,GAAG;;AAIxC,KAAI,CAAC,WAAW,cAAc,CAC5B,OAAM,IAAI,MACR,mCAAmC,WAAW,UAAU,OAAO,cAC1D,WAAW,WAAW,OAAO,aAAa,WAAW,OAAO,OAAO,WACnE,WAAW,SAAS,OAAO,WACjC;CAIH,IAAI;AAEJ,MAAK,MAAM,CAAC,KAAK,SAAS,WAAW,WAAW;EAE9C,MAAM,YAAY,KAAK;AACvB,MAAI,CAAC,UAAU,cACb,OAAM,IAAI,MACR,uCAAuC,IAAI,UAAU,CAAC,+BACvD;EAIH,IAAI;AACJ,MAAI;AAEF,gBAAaC,eAAAA,wBADa,WAAW,UAAU,cACO,CAAC;WAChD,KAAK;AACZ,SAAM,IAAI,MACR,uCAAuC,IAAI,UAAU,CAAC,IAAI,eAAe,QAAQ,IAAI,UAAU,OAAO,IAAI,IAC1G,EAAE,OAAO,KAAK,CACf;;AAGH,MAAI,sBAAsB,KAAA;OACpB,kBAAkB,UAAU,KAAK,WAAW,UAAU,CACxD,OAAM,IAAI,MAAM,gDAAgD,IAAI,UAAU,GAAG;QAGnF,qBAAoB;;CAKxB,MAAM,WAAWC,eAAAA,cAAc,cAAc,QAAQ,KAAK,CAAC;AAC3D,SAAG,UAAU,UAAU,EAAE,WAAW,MAAM,CAAC;CAE3C,MAAM,gBAAgBC,UAAK,KAAK,UAAU,0BAA0B;CACpE,MAAM,OAA8E,EAAE;AAEtF,MAAK,MAAM,CAAC,KAAK,SAAS,WAAW,UACnC,MAAK,IAAI,UAAU,IAAI;EACrB,aAAa,KAAK;EAClB,oBAAoB,KAAK;EAC1B;AAGH,SAAG,cAAc,eAAe,KAAK,UAAU,MAAM,MAAM,EAAE,CAAC;CAG9D,MAAM,cAAc,SAAS,MAAM,QAAQ;AAC3C,KAAI,gBAAgB,KAAA,EAClB,OAAM,IAAI,MAAM,8BAA8B;AAGhD,KAAI,sBAAsB,KAAA,EACxB,aAAY,gBAAgB,kBAAkB;AAEhD,aAAY,sBAAsB;AAClC,UAAS,KAAK,aAAa;AAE3B,KAAIL,eAAAA,WAAW,EAAE;AACf,UAAQ,OAAO;AACf,UAAQ,MACN,aAAa,WAAW,UAAU,OAAO,gCAAgC,gBAC1E;AACD,MAAI,sBAAsB,KAAA,EACxB,SAAQ,MAAM,kBAAkB,UAAU,CAAC;YAEpC,sBAAsB,KAAA,EAC/B,SAAQ,IAAI,kBAAkB,UAAU,CAAC;AAG3C,QAAO;;;;;AAMT,SAAS,WAAW,KAAyB;CAC3C,MAAM,QAAQ,IAAI,WAAW,IAAI,SAAS,EAAE;AAC5C,MAAK,IAAI,IAAI,GAAG,IAAI,MAAM,QAAQ,IAChC,OAAM,KAAK,SAAS,IAAI,MAAM,IAAI,GAAG,IAAI,IAAI,EAAE,EAAE,GAAG;AAEtD,QAAO;;;;;;;;;AAUT,eAAsB,SACpB,QACA,SACA,KAC4B;CAC5B,MAAM,eAAeM,uBAAAA,oBAAoB,QAAQ,cAAc,IAAI;CACnE,MAAM,WAAWC,uBAAAA,SAAS,KAAK,aAAa;CAE5C,MAAM,QAAQ,SAAS,OAAO;AAC9B,KAAI,UAAU,KAAA,EACZ,OAAM,IAAI,MAAM,6BAA6B;CAG/C,MAAM,UAAUT,eAAAA,YAAY,QAAQ,QAAQ;CAC5C,MAAM,cAAc,SAAS,MAAM,QAAQ;AAE3C,KAAI,gBAAgB,KAAA,EAClB,OAAM,IAAI,MAAM,SAAS,QAAQ,QAAQ,wBAAwB;AAInE,qBAAoB,aAAa,MAAM,KAAK,CAAC;CAE7C,MAAM,kBAAkB,YAAY,iBAAiB;AACrD,KAAI,gBAAgB,SAAS,CAC3B,OAAM,IAAI,MACR,yFACD;CAGH,MAAM,kBAAkB,MAAM,aAAa,CAAC,sBAAsB;AAClE,KAAI,oBAAoB,KAAA,EACtB,OAAM,IAAI,MAAM,+CAA+C;CAGjE,IAAI;CACJ,IAAI;CACJ,IAAI,WAAW;CACf,IAAI;CACJ,IAAI,WAAW;AAEf,KAAI,QAAQ,aAAa,MAAM;EAE7B,MAAM,aAAa,MAAM,wBACvB,QACA,UACA,iBACA,iBACA,SACA,QAAQ,eACT;AAED,iBAAe,kCAAkC,YAAY,cAAc,UAAU,QAAQ;AAE7F,cAAY,WAAW,UAAU;AACjC,aAAW,WAAW,WAAW;AACjC,WAAS,WAAW,OAAO;AAC3B,aAAW,WAAW,SAAS;QAC1B;EAEL,MAAM,mBAAoC,EAAE;EAC5C,MAAM,eAAgC,EAAE;EACxC,IAAI;AAEJ,MAAIE,eAAAA,WAAW,CACb,SAAQ,MAAM,sCAAsC,gBAAgB,KAAK,CAAC,kBAAkB;AAG9F,OAAK,MAAM,CAAC,gBAAgB,oBAAoB,gBAAgB,aAAa,EAAE;GAE7E,MAAM,OADS,SAAS,YAAY,eACjB,EAAE,SAAS,IAAI,eAAe,UAAU;AAE3D,OAAI;IACF,MAAM,QAAQ,MAAM,sBAClB,QACA,iBACA,QAAQ,gBACR,iBACA,SACA,gBACA,KACD;IAGD,MAAM,YAAY,MAAM;AACxB,QAAI,CAAC,UAAU,cACb,OAAM,IAAI,MAAM,8BAA8B;IAIhD,MAAM,aAAaG,eAAAA,wBADO,WAAW,UAAU,cACa,CAAC;AAE7D,QAAI,sBAAsB,KAAA;SACpB,kBAAkB,UAAU,KAAK,WAAW,UAAU,EAAE;AAC1D,UAAIH,eAAAA,WAAW,CACb,SAAQ,MAAM,sCAAsC;AAEtD,mBAAa,KAAK,CAAC,gBAAgB,gDAAgD,CAAC;AACpF;;UAGF,qBAAoB;AAGtB,qBAAiB,KAAK,MAAM;YACrB,KAAK;AACZ,QAAIA,eAAAA,WAAW,CACb,SAAQ,MAAM,UAAU,eAAe,QAAQ,IAAI,UAAU,OAAO,IAAI,GAAG;AAE7E,iBAAa,KAAK,CAAC,gBAAgB,eAAe,QAAQ,IAAI,UAAU,OAAO,IAAI,CAAC,CAAC;;;AAIzF,MAAI,aAAa,SAAS,GAAG;AAC3B,OAAIA,eAAAA,WAAW,EAAE;AACf,YAAQ,OAAO;AACf,YAAQ,MAAM,0BAA0B,aAAa,OAAO,gBAAgB;AAC5E,SAAK,MAAM,CAAC,KAAK,UAAU,aACzB,SAAQ,MAAM,KAAK,IAAI,UAAU,CAAC,IAAI,QAAQ;;AAGlD,SAAM,IAAI,MACR,mCAAmC,aAAa,OAAO,MAAM,gBAAgB,KAAK,CAAC,mBACpF;;EAIH,MAAM,WAAWI,eAAAA,cAAc,cAAc,QAAQ,KAAK,CAAC;AAC3D,UAAG,UAAU,UAAU,EAAE,WAAW,MAAM,CAAC;EAE3C,MAAM,gBAAgBC,UAAK,KAAK,UAAU,0BAA0B;EACpE,MAAM,OAA8E,EAAE;AAEtF,OAAK,MAAM,SAAS,iBAClB,MAAK,MAAM,YAAY,UAAU,IAAI;GACnC,aAAa,MAAM;GACnB,oBAAoB,MAAM;GAC3B;AAGH,UAAG,cAAc,eAAe,KAAK,UAAU,MAAM,MAAM,EAAE,CAAC;EAG9D,MAAM,iBAAiB,SAAS,MAAM,QAAQ;AAC9C,MAAI,mBAAmB,KAAA,EACrB,OAAM,IAAI,MAAM,8BAA8B;AAGhD,MAAI,sBAAsB,KAAA,EACxB,gBAAe,gBAAgB,kBAAkB;AAEnD,iBAAe,sBAAsB;AACrC,WAAS,KAAK,aAAa;AAE3B,MAAIL,eAAAA,WAAW,EAAE;AACf,WAAQ,OAAO;AACf,WAAQ,MACN,aAAa,iBAAiB,OAAO,gCAAgC,gBACtE;AACD,OAAI,sBAAsB,KAAA,EACxB,SAAQ,MAAM,kBAAkB,UAAU,CAAC;aAEpC,sBAAsB,KAAA,EAC/B,SAAQ,IAAI,kBAAkB,UAAU,CAAC;AAG3C,iBAAe;AACf,cAAY,iBAAiB;AAC7B,WAAS,aAAa;;AAGxB,QAAO;EACL,cAAc,cAAc,UAAU,IAAI;EAC1C;EACA;EACA;EACA;EACD"}