@bcts/frost-hubert 1.0.0-alpha.23 → 1.0.0-beta.0

package/dist/receive-DA_KQEgk.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"receive-DA_KQEgk.mjs","names":[],"sources":["../src/cmd/sign/participant/receive.ts"],"sourcesContent":["/**\n * Copyright © 2023-2026 Blockchain Commons, LLC\n * Copyright © 2025-2026 Parity Technologies\n *\n *\n * Sign participant receive command.\n *\n * Port of cmd/sign/participant/receive.rs from frost-hubert-rust.\n *\n * @module\n */\n\nimport * as fs from \"node:fs\";\nimport * as path from \"node:path\";\n\nimport { type ARID, type XID } from \"@bcts/components\";\nimport { compareXidBytes } from \"../../../dkg/proposed-participant.js\";\nimport { CborDate } from \"@bcts/dcbor\";\nimport type { Envelope } from \"@bcts/envelope\";\n\nimport { Registry, resolveRegistryPath, type OwnerRecord } from \"../../../registry/index.js\";\nimport { getWithIndicator } from \"../../busy.js\";\nimport { type StorageClient, type StorageSelection } from \"../../storage.js\";\nimport { parseAridUr, parseEnvelopeUr, formatNameWithOwnerMarker } from \"../../dkg/common.js\";\nimport { signingStateDir } from \"../common.js\";\n\n/**\n * Options for the sign receive command.\n */\nexport interface SignReceiveOptions {\n  registryPath?: string;\n  /** ARID or envelope UR string */\n  request: string;\n  timeoutSeconds?: number;\n  /** Show request details only (info mode) */\n  info?: boolean;\n  /** Expected sender (XID UR or pet name) */\n  sender?: string;\n}\n\n/**\n * Result of the sign receive command.\n */\nexport interface SignReceiveResult {\n  sessionId: string;\n  groupId: string;\n  targetUr: string;\n  coordinatorName: string;\n  minSigners: number;\n  participantNames: string[];\n}\n\n/**\n * Resolve sender from XID UR or pet name in registry.\n *\n * Port of `resolve_sender()` from cmd/dkg/common.rs lines 76-94.\n */\nfunction resolveSenderFromInput(registry: Registry, input: string): { xid: () => XID } {\n  const trimmed = input.trim();\n  if (trimmed === \"\") {\n    throw new Error(\"Sender is required\");\n  }\n\n  // Try parsing as XID UR first\n  try {\n    // eslint-disable-next-line @typescript-eslint/no-unsafe-assignment, @typescript-eslint/no-require-imports, no-undef\n    const { XID: XIDClass } = require(\"@bcts/components\");\n    // eslint-disable-next-line @typescript-eslint/no-unsafe-call, @typescript-eslint/no-unsafe-member-access\n    const xid = XIDClass.fromURString(trimmed) as XID;\n    const record = registry.participant(xid);\n    if (!record) {\n      throw new Error(`Sender with XID ${xid.urString()} not found`);\n    }\n    return record.xidDocument();\n  } catch {\n    // Try looking up by pet name\n    const result = registry.participantByPetName(trimmed);\n    if (!result) {\n      throw new Error(`Sender with pet name '${trimmed}' not found`);\n    }\n    return result[1].xidDocument();\n  }\n}\n\n/**\n * Resolve sign invite from ARID or envelope UR.\n *\n * Port of `resolve_sign_request()` from cmd/sign/participant/receive.rs lines 250-284.\n */\nasync function resolveSignInviteEnvelope(\n  client: StorageClient | undefined,\n  selection: StorageSelection | undefined,\n  request: string,\n  timeout: number | undefined,\n): Promise<Envelope> {\n  if (selection !== undefined && client !== undefined) {\n    // Try to parse as ARID\n    try {\n      const arid = parseAridUr(request);\n      const envelope = await getWithIndicator(client, arid, \"Sign invite\", timeout, false);\n      if (envelope === undefined || envelope === null) {\n        throw new Error(\"signInvite request not found in Hubert storage\");\n      }\n      return envelope;\n    } catch {\n      // Not an ARID, try as envelope\n    }\n\n    if (timeout !== undefined) {\n      throw new Error(\"--timeout is only valid when retrieving requests from Hubert\");\n    }\n    return parseEnvelopeUr(request);\n  }\n\n  // No storage selection\n  try {\n    parseAridUr(request);\n    throw new Error(\"Hubert storage parameters are required to retrieve requests by ARID\");\n  } catch (e) {\n    if (e instanceof Error && e.message.includes(\"Hubert storage parameters\")) {\n      throw e;\n    }\n    // Not an ARID, parse as envelope\n  }\n  return parseEnvelopeUr(request);\n}\n\n/**\n * Get display name for sender from registry.\n *\n * Port of `resolve_sender_name()` from cmd/dkg/common.rs lines 96-116.\n */\nfunction resolveSenderName(registry: Registry, senderXid: XID): string | undefined {\n  const owner = registry.owner();\n\n  // Check if sender is the owner\n  if (owner?.xid().urString() === senderXid.urString()) {\n    const name = owner.petName() ?? senderXid.urString();\n    return formatNameWithOwnerMarker(name, true);\n  }\n\n  // Look up in participants\n  const record = registry.participant(senderXid);\n  if (record) {\n    const name = record.petName() ?? record.xid().urString();\n    return formatNameWithOwnerMarker(name, false);\n  }\n\n  return undefined;\n}\n\n/**\n * Format participant names with owner marker.\n *\n * Port of `format_participant_names()` from cmd/sign/participant/receive.rs lines 286-309.\n */\nfunction formatParticipantNames(\n  registry: Registry,\n  participants: XID[],\n  owner: OwnerRecord,\n): string[] {\n  return participants.map((xid) => {\n    const isOwner = xid.urString() === owner.xid().urString();\n    let name: string;\n\n    if (isOwner) {\n      name = owner.petName() ?? xid.urString();\n    } else {\n      const record = registry.participant(xid);\n      name = record?.petName() ?? xid.urString();\n    }\n\n    return formatNameWithOwnerMarker(name, isOwner);\n  });\n}\n\n/**\n * Execute the sign participant receive command.\n *\n * Fetches and validates a sign invite from the coordinator.\n *\n * Port of `CommandArgs::exec()` from cmd/sign/participant/receive.rs lines 56-247.\n */\nexport async function receive(\n  client: StorageClient | undefined,\n  selection: StorageSelection | undefined,\n  options: SignReceiveOptions,\n  cwd: string,\n): Promise<SignReceiveResult> {\n  // Validate timeout requires storage\n  if (selection === undefined && options.timeoutSeconds !== undefined) {\n    throw new Error(\"--timeout requires Hubert storage parameters\");\n  }\n\n  const registryPath = resolveRegistryPath(options.registryPath, cwd);\n  const registry = Registry.load(registryPath);\n  const owner = registry.owner();\n\n  if (!owner) {\n    throw new Error(\"Registry owner with private keys is required\");\n  }\n\n  // Resolve expected sender if provided\n  let expectedSender: { xid: () => XID } | undefined;\n  if (options.sender !== undefined && options.sender !== \"\") {\n    expectedSender = resolveSenderFromInput(registry, options.sender);\n  }\n\n  // Resolve the invite envelope\n  const envelope = await resolveSignInviteEnvelope(\n    client,\n    selection,\n    options.request,\n    options.timeoutSeconds,\n  );\n\n  const now: CborDate = CborDate.now();\n  const recipientKeys = owner.xidDocument().inceptionPrivateKeys();\n\n  if (recipientKeys === null || recipientKeys === undefined) {\n    throw new Error(\"Owner XID document has no inception private keys\");\n  }\n\n  // eslint-disable-next-line @typescript-eslint/no-require-imports, no-undef\n  const { SealedRequest: SealedRequestClass } = require(\"@bcts/gstp\") as {\n    SealedRequest: {\n      tryFromEnvelope: (\n        envelope: Envelope,\n        expectedSender: XID | undefined,\n        now: CborDate,\n        recipientPrivateKeys: unknown,\n      ) => SealedRequestInstance;\n    };\n  };\n\n  interface SealedRequestInstance {\n    sender: () => { xid: () => XID };\n    function: () => { equals?: (other: unknown) => boolean; toString?: () => string };\n    extractObjectForParameter: <T>(name: string) => T;\n    objectForParameter: (name: string) => Envelope;\n    objectsForParameter: (name: string) => ParticipantEntry[];\n  }\n\n  interface ParticipantEntry {\n    extractSubject: () => XID;\n    objectForPredicate: (name: string) => {\n      decryptToRecipient: (keys: unknown) => {\n        extractSubject: () => ARID;\n      };\n    };\n  }\n\n  const sealedRequest: SealedRequestInstance = SealedRequestClass.tryFromEnvelope(\n    envelope,\n    undefined,\n    now,\n    recipientKeys,\n  );\n\n  // Validate sender\n  const senderXid = sealedRequest.sender().xid();\n\n  if (expectedSender !== undefined) {\n    if (senderXid.urString() !== expectedSender.xid().urString()) {\n      throw new Error(\n        `Request sender does not match expected sender (got ${senderXid.urString()}, expected ${expectedSender.xid().urString()})`,\n      );\n    }\n  } else {\n    const knownOwner = owner.xid().urString() === senderXid.urString();\n    const knownParticipant = registry.participant(senderXid) !== undefined;\n    if (!knownOwner && !knownParticipant) {\n      throw new Error(`Request sender not found in registry: ${senderXid.urString()}`);\n    }\n  }\n\n  // eslint-disable-next-line @typescript-eslint/no-require-imports, no-undef\n  const { Function: FunctionClass } = require(\"@bcts/envelope\") as {\n    Function: { from: (name: string) => unknown };\n  };\n\n  // Validate function\n  const requestFunction = sealedRequest.function();\n  const expectedFunction = FunctionClass.from(\"signInvite\");\n  const functionMatches =\n    requestFunction.equals !== undefined\n      ? requestFunction.equals(expectedFunction)\n      : String(requestFunction) === String(expectedFunction);\n\n  if (!functionMatches) {\n    throw new Error(`Unexpected request function: ${String(requestFunction)}`);\n  }\n\n  // Extract parameters\n  const validUntil = sealedRequest.extractObjectForParameter<CborDate>(\"validUntil\");\n  if (validUntil <= now) {\n    throw new Error(\"signInvite request has expired\");\n  }\n\n  const groupId = sealedRequest.extractObjectForParameter<ARID>(\"group\");\n  const sessionId = sealedRequest.extractObjectForParameter<ARID>(\"session\");\n  const minSigners = Number(sealedRequest.extractObjectForParameter<bigint | number>(\"minSigners\"));\n\n  // Extract participants and find our response ARID\n  const participantEntries = sealedRequest.objectsForParameter(\"participant\");\n  const participants: XID[] = [];\n  let responseArid: ARID | undefined;\n\n  for (const entry of participantEntries) {\n    const xid: XID = entry.extractSubject();\n    if (xid.urString() === owner.xid().urString()) {\n      const encryptedArid = entry.objectForPredicate(\"response_arid\");\n      const aridEnv = encryptedArid.decryptToRecipient(recipientKeys);\n      responseArid = aridEnv.extractSubject();\n    }\n    participants.push(xid);\n  }\n\n  // Validations\n  if (participants.length === 0) {\n    throw new Error(\"signInvite request contains no participants\");\n  }\n  if (minSigners < 2) {\n    throw new Error(\"minSigners must be at least 2\");\n  }\n  if (minSigners > participants.length) {\n    throw new Error(\"minSigners exceeds participant count\");\n  }\n\n  const ownerInParticipants = participants.some((p) => p.urString() === owner.xid().urString());\n  if (!ownerInParticipants) {\n    throw new Error(\"signInvite request does not include this participant\");\n  }\n\n  if (responseArid === undefined) {\n    throw new Error(\"signInvite request missing response ARID\");\n  }\n\n  // Sort participants by XID byte order — mirrors Rust `XID::cmp`.\n  // The earlier port used `urString().localeCompare(...)`, which\n  // diverges from byte order for bytes ≥ 0x80 and is locale-aware.\n  participants.sort((a, b) => compareXidBytes(a.toData(), b.toData()));\n\n  const targetEnvelope = sealedRequest.objectForParameter(\"target\");\n\n  const coordinatorName = resolveSenderName(registry, senderXid) ?? senderXid.urString();\n  const participantNames = formatParticipantNames(registry, participants, owner);\n\n  // Output\n  console.log(`Group: ${groupId.urString()}`);\n  console.log(`Coordinator: ${coordinatorName}`);\n  console.log(`Min signers: ${minSigners}`);\n  console.log(`Participants: ${participantNames.join(\", \")}`);\n  console.log(\"Target:\");\n  console.log(targetEnvelope.format());\n\n  // Primary output for scripting: session ID on its own line (no header)\n  console.log(sessionId.urString());\n\n  // Persist request details for follow-up commands\n  const stateDir = signingStateDir(registryPath, groupId.hex(), sessionId.hex());\n  fs.mkdirSync(stateDir, { recursive: true });\n\n  const root: Record<string, unknown> = {\n    request_envelope: envelope.urString(),\n    group: groupId.urString(),\n    session: sessionId.urString(),\n    coordinator: senderXid.urString(),\n    min_signers: minSigners,\n    response_arid: responseArid.urString(),\n    participants: participants.map((xid) => xid.urString()),\n    target: targetEnvelope.urString(),\n  };\n\n  fs.writeFileSync(path.join(stateDir, \"sign_receive.json\"), JSON.stringify(root, null, 2));\n\n  return {\n    sessionId: sessionId.urString(),\n    groupId: groupId.urString(),\n    targetUr: targetEnvelope.urString(),\n    coordinatorName,\n    minSigners,\n    participantNames,\n  };\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;AAyDA,SAAS,uBAAuB,UAAoB,OAAmC;CACrF,MAAM,UAAU,MAAM,MAAM;AAC5B,KAAI,YAAY,GACd,OAAM,IAAI,MAAM,qBAAqB;AAIvC,KAAI;EAEF,MAAM,EAAE,KAAK,aAAA,UAAqB,mBAAmB;EAErD,MAAM,MAAM,SAAS,aAAa,QAAQ;EAC1C,MAAM,SAAS,SAAS,YAAY,IAAI;AACxC,MAAI,CAAC,OACH,OAAM,IAAI,MAAM,mBAAmB,IAAI,UAAU,CAAC,YAAY;AAEhE,SAAO,OAAO,aAAa;SACrB;EAEN,MAAM,SAAS,SAAS,qBAAqB,QAAQ;AACrD,MAAI,CAAC,OACH,OAAM,IAAI,MAAM,yBAAyB,QAAQ,aAAa;AAEhE,SAAO,OAAO,GAAG,aAAa;;;;;;;;AASlC,eAAe,0BACb,QACA,WACA,SACA,SACmB;AACnB,KAAI,cAAc,KAAA,KAAa,WAAW,KAAA,GAAW;AAEnD,MAAI;GAEF,MAAM,WAAW,MAAM,iBAAiB,QAD3B,YAAY,QAC2B,EAAE,eAAe,SAAS,MAAM;AACpF,OAAI,aAAa,KAAA,KAAa,aAAa,KACzC,OAAM,IAAI,MAAM,iDAAiD;AAEnE,UAAO;UACD;AAIR,MAAI,YAAY,KAAA,EACd,OAAM,IAAI,MAAM,+DAA+D;AAEjF,SAAO,gBAAgB,QAAQ;;AAIjC,KAAI;AACF,cAAY,QAAQ;AACpB,QAAM,IAAI,MAAM,sEAAsE;UAC/E,GAAG;AACV,MAAI,aAAa,SAAS,EAAE,QAAQ,SAAS,4BAA4B,CACvE,OAAM;;AAIV,QAAO,gBAAgB,QAAQ;;;;;;;AAQjC,SAAS,kBAAkB,UAAoB,WAAoC;CACjF,MAAM,QAAQ,SAAS,OAAO;AAG9B,KAAI,OAAO,KAAK,CAAC,UAAU,KAAK,UAAU,UAAU,CAElD,QAAO,0BADM,MAAM,SAAS,IAAI,UAAU,UAAU,EACb,KAAK;CAI9C,MAAM,SAAS,SAAS,YAAY,UAAU;AAC9C,KAAI,OAEF,QAAO,0BADM,OAAO,SAAS,IAAI,OAAO,KAAK,CAAC,UAAU,EACjB,MAAM;;;;;;;AAWjD,SAAS,uBACP,UACA,cACA,OACU;AACV,QAAO,aAAa,KAAK,QAAQ;EAC/B,MAAM,UAAU,IAAI,UAAU,KAAK,MAAM,KAAK,CAAC,UAAU;EACzD,IAAI;AAEJ,MAAI,QACF,QAAO,MAAM,SAAS,IAAI,IAAI,UAAU;MAGxC,QADe,SAAS,YAAY,IACvB,EAAE,SAAS,IAAI,IAAI,UAAU;AAG5C,SAAO,0BAA0B,MAAM,QAAQ;GAC/C;;;;;;;;;AAUJ,eAAsB,QACpB,QACA,WACA,SACA,KAC4B;AAE5B,KAAI,cAAc,KAAA,KAAa,QAAQ,mBAAmB,KAAA,EACxD,OAAM,IAAI,MAAM,+CAA+C;CAGjE,MAAM,eAAe,oBAAoB,QAAQ,cAAc,IAAI;CACnE,MAAM,WAAW,SAAS,KAAK,aAAa;CAC5C,MAAM,QAAQ,SAAS,OAAO;AAE9B,KAAI,CAAC,MACH,OAAM,IAAI,MAAM,+CAA+C;CAIjE,IAAI;AACJ,KAAI,QAAQ,WAAW,KAAA,KAAa,QAAQ,WAAW,GACrD,kBAAiB,uBAAuB,UAAU,QAAQ,OAAO;CAInE,MAAM,WAAW,MAAM,0BACrB,QACA,WACA,QAAQ,SACR,QAAQ,eACT;CAED,MAAM,MAAgB,SAAS,KAAK;CACpC,MAAM,gBAAgB,MAAM,aAAa,CAAC,sBAAsB;AAEhE,KAAI,kBAAkB,QAAQ,kBAAkB,KAAA,EAC9C,OAAM,IAAI,MAAM,mDAAmD;CAIrE,MAAM,EAAE,eAAe,uBAAA,UAA+B,aAAa;CA4BnE,MAAM,gBAAuC,mBAAmB,gBAC9D,UACA,KAAA,GACA,KACA,cACD;CAGD,MAAM,YAAY,cAAc,QAAQ,CAAC,KAAK;AAE9C,KAAI,mBAAmB,KAAA;MACjB,UAAU,UAAU,KAAK,eAAe,KAAK,CAAC,UAAU,CAC1D,OAAM,IAAI,MACR,sDAAsD,UAAU,UAAU,CAAC,aAAa,eAAe,KAAK,CAAC,UAAU,CAAC,GACzH;QAEE;EACL,MAAM,aAAa,MAAM,KAAK,CAAC,UAAU,KAAK,UAAU,UAAU;EAClE,MAAM,mBAAmB,SAAS,YAAY,UAAU,KAAK,KAAA;AAC7D,MAAI,CAAC,cAAc,CAAC,iBAClB,OAAM,IAAI,MAAM,yCAAyC,UAAU,UAAU,GAAG;;CAKpF,MAAM,EAAE,UAAU,kBAAA,UAA0B,iBAAiB;CAK7D,MAAM,kBAAkB,cAAc,UAAU;CAChD,MAAM,mBAAmB,cAAc,KAAK,aAAa;AAMzD,KAAI,EAJF,gBAAgB,WAAW,KAAA,IACvB,gBAAgB,OAAO,iBAAiB,GACxC,OAAO,gBAAgB,KAAK,OAAO,iBAAiB,EAGxD,OAAM,IAAI,MAAM,gCAAgC,OAAO,gBAAgB,GAAG;AAK5E,KADmB,cAAc,0BAAoC,aACvD,IAAI,IAChB,OAAM,IAAI,MAAM,iCAAiC;CAGnD,MAAM,UAAU,cAAc,0BAAgC,QAAQ;CACtE,MAAM,YAAY,cAAc,0BAAgC,UAAU;CAC1E,MAAM,aAAa,OAAO,cAAc,0BAA2C,aAAa,CAAC;CAGjG,MAAM,qBAAqB,cAAc,oBAAoB,cAAc;CAC3E,MAAM,eAAsB,EAAE;CAC9B,IAAI;AAEJ,MAAK,MAAM,SAAS,oBAAoB;EACtC,MAAM,MAAW,MAAM,gBAAgB;AACvC,MAAI,IAAI,UAAU,KAAK,MAAM,KAAK,CAAC,UAAU,CAG3C,gBAFsB,MAAM,mBAAmB,gBAClB,CAAC,mBAAmB,cAC3B,CAAC,gBAAgB;AAEzC,eAAa,KAAK,IAAI;;AAIxB,KAAI,aAAa,WAAW,EAC1B,OAAM,IAAI,MAAM,8CAA8C;AAEhE,KAAI,aAAa,EACf,OAAM,IAAI,MAAM,gCAAgC;AAElD,KAAI,aAAa,aAAa,OAC5B,OAAM,IAAI,MAAM,uCAAuC;AAIzD,KAAI,CADwB,aAAa,MAAM,MAAM,EAAE,UAAU,KAAK,MAAM,KAAK,CAAC,UAAU,CACpE,CACtB,OAAM,IAAI,MAAM,uDAAuD;AAGzE,KAAI,iBAAiB,KAAA,EACnB,OAAM,IAAI,MAAM,2CAA2C;AAM7D,cAAa,MAAM,GAAG,MAAM,gBAAgB,EAAE,QAAQ,EAAE,EAAE,QAAQ,CAAC,CAAC;CAEpE,MAAM,iBAAiB,cAAc,mBAAmB,SAAS;CAEjE,MAAM,kBAAkB,kBAAkB,UAAU,UAAU,IAAI,UAAU,UAAU;CACtF,MAAM,mBAAmB,uBAAuB,UAAU,cAAc,MAAM;AAG9E,SAAQ,IAAI,UAAU,QAAQ,UAAU,GAAG;AAC3C,SAAQ,IAAI,gBAAgB,kBAAkB;AAC9C,SAAQ,IAAI,gBAAgB,aAAa;AACzC,SAAQ,IAAI,iBAAiB,iBAAiB,KAAK,KAAK,GAAG;AAC3D,SAAQ,IAAI,UAAU;AACtB,SAAQ,IAAI,eAAe,QAAQ,CAAC;AAGpC,SAAQ,IAAI,UAAU,UAAU,CAAC;CAGjC,MAAM,WAAW,gBAAgB,cAAc,QAAQ,KAAK,EAAE,UAAU,KAAK,CAAC;AAC9E,IAAG,UAAU,UAAU,EAAE,WAAW,MAAM,CAAC;CAE3C,MAAM,OAAgC;EACpC,kBAAkB,SAAS,UAAU;EACrC,OAAO,QAAQ,UAAU;EACzB,SAAS,UAAU,UAAU;EAC7B,aAAa,UAAU,UAAU;EACjC,aAAa;EACb,eAAe,aAAa,UAAU;EACtC,cAAc,aAAa,KAAK,QAAQ,IAAI,UAAU,CAAC;EACvD,QAAQ,eAAe,UAAU;EAClC;AAED,IAAG,cAAc,KAAK,KAAK,UAAU,oBAAoB,EAAE,KAAK,UAAU,MAAM,MAAM,EAAE,CAAC;AAEzF,QAAO;EACL,WAAW,UAAU,UAAU;EAC/B,SAAS,QAAQ,UAAU;EAC3B,UAAU,eAAe,UAAU;EACnC;EACA;EACA;EACD"}

package/dist/receive-kZMsXhbK.cjs

@@ -0,0 +1,190 @@
+const require_chunk = require("./chunk-CZWwpsFl.cjs");
+const require_proposed_participant = require("./proposed-participant-Dm1Eq6mX.cjs");
+const require_registry_index = require("./registry/index.cjs");
+const require_common = require("./common-lKP5EzHy.cjs");
+const require_busy = require("./busy-EZU7EKr6.cjs");
+const require_common$1 = require("./common-lThIvJmZ.cjs");
+let _bcts_dcbor = require("@bcts/dcbor");
+let node_fs = require("node:fs");
+node_fs = require_chunk.__toESM(node_fs, 1);
+let node_path = require("node:path");
+node_path = require_chunk.__toESM(node_path, 1);
+//#region src/cmd/sign/participant/receive.ts
+/**
+* Copyright © 2023-2026 Blockchain Commons, LLC
+* Copyright © 2025-2026 Parity Technologies
+*
+*
+* Sign participant receive command.
+*
+* Port of cmd/sign/participant/receive.rs from frost-hubert-rust.
+*
+* @module
+*/
+var receive_exports = /* @__PURE__ */ require_chunk.__exportAll({ receive: () => receive });
+/**
+* Resolve sender from XID UR or pet name in registry.
+*
+* Port of `resolve_sender()` from cmd/dkg/common.rs lines 76-94.
+*/
+function resolveSenderFromInput(registry, input) {
+	const trimmed = input.trim();
+	if (trimmed === "") throw new Error("Sender is required");
+	try {
+		const { XID: XIDClass } = require("@bcts/components");
+		const xid = XIDClass.fromURString(trimmed);
+		const record = registry.participant(xid);
+		if (!record) throw new Error(`Sender with XID ${xid.urString()} not found`);
+		return record.xidDocument();
+	} catch {
+		const result = registry.participantByPetName(trimmed);
+		if (!result) throw new Error(`Sender with pet name '${trimmed}' not found`);
+		return result[1].xidDocument();
+	}
+}
+/**
+* Resolve sign invite from ARID or envelope UR.
+*
+* Port of `resolve_sign_request()` from cmd/sign/participant/receive.rs lines 250-284.
+*/
+async function resolveSignInviteEnvelope(client, selection, request, timeout) {
+	if (selection !== void 0 && client !== void 0) {
+		try {
+			const envelope = await require_busy.getWithIndicator(client, require_common.parseAridUr(request), "Sign invite", timeout, false);
+			if (envelope === void 0 || envelope === null) throw new Error("signInvite request not found in Hubert storage");
+			return envelope;
+		} catch {}
+		if (timeout !== void 0) throw new Error("--timeout is only valid when retrieving requests from Hubert");
+		return require_common.parseEnvelopeUr(request);
+	}
+	try {
+		require_common.parseAridUr(request);
+		throw new Error("Hubert storage parameters are required to retrieve requests by ARID");
+	} catch (e) {
+		if (e instanceof Error && e.message.includes("Hubert storage parameters")) throw e;
+	}
+	return require_common.parseEnvelopeUr(request);
+}
+/**
+* Get display name for sender from registry.
+*
+* Port of `resolve_sender_name()` from cmd/dkg/common.rs lines 96-116.
+*/
+function resolveSenderName(registry, senderXid) {
+	const owner = registry.owner();
+	if (owner?.xid().urString() === senderXid.urString()) return require_common.formatNameWithOwnerMarker(owner.petName() ?? senderXid.urString(), true);
+	const record = registry.participant(senderXid);
+	if (record) return require_common.formatNameWithOwnerMarker(record.petName() ?? record.xid().urString(), false);
+}
+/**
+* Format participant names with owner marker.
+*
+* Port of `format_participant_names()` from cmd/sign/participant/receive.rs lines 286-309.
+*/
+function formatParticipantNames(registry, participants, owner) {
+	return participants.map((xid) => {
+		const isOwner = xid.urString() === owner.xid().urString();
+		let name;
+		if (isOwner) name = owner.petName() ?? xid.urString();
+		else name = registry.participant(xid)?.petName() ?? xid.urString();
+		return require_common.formatNameWithOwnerMarker(name, isOwner);
+	});
+}
+/**
+* Execute the sign participant receive command.
+*
+* Fetches and validates a sign invite from the coordinator.
+*
+* Port of `CommandArgs::exec()` from cmd/sign/participant/receive.rs lines 56-247.
+*/
+async function receive(client, selection, options, cwd) {
+	if (selection === void 0 && options.timeoutSeconds !== void 0) throw new Error("--timeout requires Hubert storage parameters");
+	const registryPath = require_registry_index.resolveRegistryPath(options.registryPath, cwd);
+	const registry = require_registry_index.Registry.load(registryPath);
+	const owner = registry.owner();
+	if (!owner) throw new Error("Registry owner with private keys is required");
+	let expectedSender;
+	if (options.sender !== void 0 && options.sender !== "") expectedSender = resolveSenderFromInput(registry, options.sender);
+	const envelope = await resolveSignInviteEnvelope(client, selection, options.request, options.timeoutSeconds);
+	const now = _bcts_dcbor.CborDate.now();
+	const recipientKeys = owner.xidDocument().inceptionPrivateKeys();
+	if (recipientKeys === null || recipientKeys === void 0) throw new Error("Owner XID document has no inception private keys");
+	const { SealedRequest: SealedRequestClass } = require("@bcts/gstp");
+	const sealedRequest = SealedRequestClass.tryFromEnvelope(envelope, void 0, now, recipientKeys);
+	const senderXid = sealedRequest.sender().xid();
+	if (expectedSender !== void 0) {
+		if (senderXid.urString() !== expectedSender.xid().urString()) throw new Error(`Request sender does not match expected sender (got ${senderXid.urString()}, expected ${expectedSender.xid().urString()})`);
+	} else {
+		const knownOwner = owner.xid().urString() === senderXid.urString();
+		const knownParticipant = registry.participant(senderXid) !== void 0;
+		if (!knownOwner && !knownParticipant) throw new Error(`Request sender not found in registry: ${senderXid.urString()}`);
+	}
+	const { Function: FunctionClass } = require("@bcts/envelope");
+	const requestFunction = sealedRequest.function();
+	const expectedFunction = FunctionClass.from("signInvite");
+	if (!(requestFunction.equals !== void 0 ? requestFunction.equals(expectedFunction) : String(requestFunction) === String(expectedFunction))) throw new Error(`Unexpected request function: ${String(requestFunction)}`);
+	if (sealedRequest.extractObjectForParameter("validUntil") <= now) throw new Error("signInvite request has expired");
+	const groupId = sealedRequest.extractObjectForParameter("group");
+	const sessionId = sealedRequest.extractObjectForParameter("session");
+	const minSigners = Number(sealedRequest.extractObjectForParameter("minSigners"));
+	const participantEntries = sealedRequest.objectsForParameter("participant");
+	const participants = [];
+	let responseArid;
+	for (const entry of participantEntries) {
+		const xid = entry.extractSubject();
+		if (xid.urString() === owner.xid().urString()) responseArid = entry.objectForPredicate("response_arid").decryptToRecipient(recipientKeys).extractSubject();
+		participants.push(xid);
+	}
+	if (participants.length === 0) throw new Error("signInvite request contains no participants");
+	if (minSigners < 2) throw new Error("minSigners must be at least 2");
+	if (minSigners > participants.length) throw new Error("minSigners exceeds participant count");
+	if (!participants.some((p) => p.urString() === owner.xid().urString())) throw new Error("signInvite request does not include this participant");
+	if (responseArid === void 0) throw new Error("signInvite request missing response ARID");
+	participants.sort((a, b) => require_proposed_participant.compareXidBytes(a.toData(), b.toData()));
+	const targetEnvelope = sealedRequest.objectForParameter("target");
+	const coordinatorName = resolveSenderName(registry, senderXid) ?? senderXid.urString();
+	const participantNames = formatParticipantNames(registry, participants, owner);
+	console.log(`Group: ${groupId.urString()}`);
+	console.log(`Coordinator: ${coordinatorName}`);
+	console.log(`Min signers: ${minSigners}`);
+	console.log(`Participants: ${participantNames.join(", ")}`);
+	console.log("Target:");
+	console.log(targetEnvelope.format());
+	console.log(sessionId.urString());
+	const stateDir = require_common$1.signingStateDir(registryPath, groupId.hex(), sessionId.hex());
+	node_fs.mkdirSync(stateDir, { recursive: true });
+	const root = {
+		request_envelope: envelope.urString(),
+		group: groupId.urString(),
+		session: sessionId.urString(),
+		coordinator: senderXid.urString(),
+		min_signers: minSigners,
+		response_arid: responseArid.urString(),
+		participants: participants.map((xid) => xid.urString()),
+		target: targetEnvelope.urString()
+	};
+	node_fs.writeFileSync(node_path.join(stateDir, "sign_receive.json"), JSON.stringify(root, null, 2));
+	return {
+		sessionId: sessionId.urString(),
+		groupId: groupId.urString(),
+		targetUr: targetEnvelope.urString(),
+		coordinatorName,
+		minSigners,
+		participantNames
+	};
+}
+//#endregion
+Object.defineProperty(exports, "receive", {
+	enumerable: true,
+	get: function() {
+		return receive;
+	}
+});
+Object.defineProperty(exports, "receive_exports", {
+	enumerable: true,
+	get: function() {
+		return receive_exports;
+	}
+});
+
+//# sourceMappingURL=receive-kZMsXhbK.cjs.map

package/dist/receive-kZMsXhbK.cjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"receive-kZMsXhbK.cjs","names":["getWithIndicator","parseAridUr","parseEnvelopeUr","formatNameWithOwnerMarker","resolveRegistryPath","Registry","CborDate","compareXidBytes","signingStateDir","path"],"sources":["../src/cmd/sign/participant/receive.ts"],"sourcesContent":["/**\n * Copyright © 2023-2026 Blockchain Commons, LLC\n * Copyright © 2025-2026 Parity Technologies\n *\n *\n * Sign participant receive command.\n *\n * Port of cmd/sign/participant/receive.rs from frost-hubert-rust.\n *\n * @module\n */\n\nimport * as fs from \"node:fs\";\nimport * as path from \"node:path\";\n\nimport { type ARID, type XID } from \"@bcts/components\";\nimport { compareXidBytes } from \"../../../dkg/proposed-participant.js\";\nimport { CborDate } from \"@bcts/dcbor\";\nimport type { Envelope } from \"@bcts/envelope\";\n\nimport { Registry, resolveRegistryPath, type OwnerRecord } from \"../../../registry/index.js\";\nimport { getWithIndicator } from \"../../busy.js\";\nimport { type StorageClient, type StorageSelection } from \"../../storage.js\";\nimport { parseAridUr, parseEnvelopeUr, formatNameWithOwnerMarker } from \"../../dkg/common.js\";\nimport { signingStateDir } from \"../common.js\";\n\n/**\n * Options for the sign receive command.\n */\nexport interface SignReceiveOptions {\n  registryPath?: string;\n  /** ARID or envelope UR string */\n  request: string;\n  timeoutSeconds?: number;\n  /** Show request details only (info mode) */\n  info?: boolean;\n  /** Expected sender (XID UR or pet name) */\n  sender?: string;\n}\n\n/**\n * Result of the sign receive command.\n */\nexport interface SignReceiveResult {\n  sessionId: string;\n  groupId: string;\n  targetUr: string;\n  coordinatorName: string;\n  minSigners: number;\n  participantNames: string[];\n}\n\n/**\n * Resolve sender from XID UR or pet name in registry.\n *\n * Port of `resolve_sender()` from cmd/dkg/common.rs lines 76-94.\n */\nfunction resolveSenderFromInput(registry: Registry, input: string): { xid: () => XID } {\n  const trimmed = input.trim();\n  if (trimmed === \"\") {\n    throw new Error(\"Sender is required\");\n  }\n\n  // Try parsing as XID UR first\n  try {\n    // eslint-disable-next-line @typescript-eslint/no-unsafe-assignment, @typescript-eslint/no-require-imports, no-undef\n    const { XID: XIDClass } = require(\"@bcts/components\");\n    // eslint-disable-next-line @typescript-eslint/no-unsafe-call, @typescript-eslint/no-unsafe-member-access\n    const xid = XIDClass.fromURString(trimmed) as XID;\n    const record = registry.participant(xid);\n    if (!record) {\n      throw new Error(`Sender with XID ${xid.urString()} not found`);\n    }\n    return record.xidDocument();\n  } catch {\n    // Try looking up by pet name\n    const result = registry.participantByPetName(trimmed);\n    if (!result) {\n      throw new Error(`Sender with pet name '${trimmed}' not found`);\n    }\n    return result[1].xidDocument();\n  }\n}\n\n/**\n * Resolve sign invite from ARID or envelope UR.\n *\n * Port of `resolve_sign_request()` from cmd/sign/participant/receive.rs lines 250-284.\n */\nasync function resolveSignInviteEnvelope(\n  client: StorageClient | undefined,\n  selection: StorageSelection | undefined,\n  request: string,\n  timeout: number | undefined,\n): Promise<Envelope> {\n  if (selection !== undefined && client !== undefined) {\n    // Try to parse as ARID\n    try {\n      const arid = parseAridUr(request);\n      const envelope = await getWithIndicator(client, arid, \"Sign invite\", timeout, false);\n      if (envelope === undefined || envelope === null) {\n        throw new Error(\"signInvite request not found in Hubert storage\");\n      }\n      return envelope;\n    } catch {\n      // Not an ARID, try as envelope\n    }\n\n    if (timeout !== undefined) {\n      throw new Error(\"--timeout is only valid when retrieving requests from Hubert\");\n    }\n    return parseEnvelopeUr(request);\n  }\n\n  // No storage selection\n  try {\n    parseAridUr(request);\n    throw new Error(\"Hubert storage parameters are required to retrieve requests by ARID\");\n  } catch (e) {\n    if (e instanceof Error && e.message.includes(\"Hubert storage parameters\")) {\n      throw e;\n    }\n    // Not an ARID, parse as envelope\n  }\n  return parseEnvelopeUr(request);\n}\n\n/**\n * Get display name for sender from registry.\n *\n * Port of `resolve_sender_name()` from cmd/dkg/common.rs lines 96-116.\n */\nfunction resolveSenderName(registry: Registry, senderXid: XID): string | undefined {\n  const owner = registry.owner();\n\n  // Check if sender is the owner\n  if (owner?.xid().urString() === senderXid.urString()) {\n    const name = owner.petName() ?? senderXid.urString();\n    return formatNameWithOwnerMarker(name, true);\n  }\n\n  // Look up in participants\n  const record = registry.participant(senderXid);\n  if (record) {\n    const name = record.petName() ?? record.xid().urString();\n    return formatNameWithOwnerMarker(name, false);\n  }\n\n  return undefined;\n}\n\n/**\n * Format participant names with owner marker.\n *\n * Port of `format_participant_names()` from cmd/sign/participant/receive.rs lines 286-309.\n */\nfunction formatParticipantNames(\n  registry: Registry,\n  participants: XID[],\n  owner: OwnerRecord,\n): string[] {\n  return participants.map((xid) => {\n    const isOwner = xid.urString() === owner.xid().urString();\n    let name: string;\n\n    if (isOwner) {\n      name = owner.petName() ?? xid.urString();\n    } else {\n      const record = registry.participant(xid);\n      name = record?.petName() ?? xid.urString();\n    }\n\n    return formatNameWithOwnerMarker(name, isOwner);\n  });\n}\n\n/**\n * Execute the sign participant receive command.\n *\n * Fetches and validates a sign invite from the coordinator.\n *\n * Port of `CommandArgs::exec()` from cmd/sign/participant/receive.rs lines 56-247.\n */\nexport async function receive(\n  client: StorageClient | undefined,\n  selection: StorageSelection | undefined,\n  options: SignReceiveOptions,\n  cwd: string,\n): Promise<SignReceiveResult> {\n  // Validate timeout requires storage\n  if (selection === undefined && options.timeoutSeconds !== undefined) {\n    throw new Error(\"--timeout requires Hubert storage parameters\");\n  }\n\n  const registryPath = resolveRegistryPath(options.registryPath, cwd);\n  const registry = Registry.load(registryPath);\n  const owner = registry.owner();\n\n  if (!owner) {\n    throw new Error(\"Registry owner with private keys is required\");\n  }\n\n  // Resolve expected sender if provided\n  let expectedSender: { xid: () => XID } | undefined;\n  if (options.sender !== undefined && options.sender !== \"\") {\n    expectedSender = resolveSenderFromInput(registry, options.sender);\n  }\n\n  // Resolve the invite envelope\n  const envelope = await resolveSignInviteEnvelope(\n    client,\n    selection,\n    options.request,\n    options.timeoutSeconds,\n  );\n\n  const now: CborDate = CborDate.now();\n  const recipientKeys = owner.xidDocument().inceptionPrivateKeys();\n\n  if (recipientKeys === null || recipientKeys === undefined) {\n    throw new Error(\"Owner XID document has no inception private keys\");\n  }\n\n  // eslint-disable-next-line @typescript-eslint/no-require-imports, no-undef\n  const { SealedRequest: SealedRequestClass } = require(\"@bcts/gstp\") as {\n    SealedRequest: {\n      tryFromEnvelope: (\n        envelope: Envelope,\n        expectedSender: XID | undefined,\n        now: CborDate,\n        recipientPrivateKeys: unknown,\n      ) => SealedRequestInstance;\n    };\n  };\n\n  interface SealedRequestInstance {\n    sender: () => { xid: () => XID };\n    function: () => { equals?: (other: unknown) => boolean; toString?: () => string };\n    extractObjectForParameter: <T>(name: string) => T;\n    objectForParameter: (name: string) => Envelope;\n    objectsForParameter: (name: string) => ParticipantEntry[];\n  }\n\n  interface ParticipantEntry {\n    extractSubject: () => XID;\n    objectForPredicate: (name: string) => {\n      decryptToRecipient: (keys: unknown) => {\n        extractSubject: () => ARID;\n      };\n    };\n  }\n\n  const sealedRequest: SealedRequestInstance = SealedRequestClass.tryFromEnvelope(\n    envelope,\n    undefined,\n    now,\n    recipientKeys,\n  );\n\n  // Validate sender\n  const senderXid = sealedRequest.sender().xid();\n\n  if (expectedSender !== undefined) {\n    if (senderXid.urString() !== expectedSender.xid().urString()) {\n      throw new Error(\n        `Request sender does not match expected sender (got ${senderXid.urString()}, expected ${expectedSender.xid().urString()})`,\n      );\n    }\n  } else {\n    const knownOwner = owner.xid().urString() === senderXid.urString();\n    const knownParticipant = registry.participant(senderXid) !== undefined;\n    if (!knownOwner && !knownParticipant) {\n      throw new Error(`Request sender not found in registry: ${senderXid.urString()}`);\n    }\n  }\n\n  // eslint-disable-next-line @typescript-eslint/no-require-imports, no-undef\n  const { Function: FunctionClass } = require(\"@bcts/envelope\") as {\n    Function: { from: (name: string) => unknown };\n  };\n\n  // Validate function\n  const requestFunction = sealedRequest.function();\n  const expectedFunction = FunctionClass.from(\"signInvite\");\n  const functionMatches =\n    requestFunction.equals !== undefined\n      ? requestFunction.equals(expectedFunction)\n      : String(requestFunction) === String(expectedFunction);\n\n  if (!functionMatches) {\n    throw new Error(`Unexpected request function: ${String(requestFunction)}`);\n  }\n\n  // Extract parameters\n  const validUntil = sealedRequest.extractObjectForParameter<CborDate>(\"validUntil\");\n  if (validUntil <= now) {\n    throw new Error(\"signInvite request has expired\");\n  }\n\n  const groupId = sealedRequest.extractObjectForParameter<ARID>(\"group\");\n  const sessionId = sealedRequest.extractObjectForParameter<ARID>(\"session\");\n  const minSigners = Number(sealedRequest.extractObjectForParameter<bigint | number>(\"minSigners\"));\n\n  // Extract participants and find our response ARID\n  const participantEntries = sealedRequest.objectsForParameter(\"participant\");\n  const participants: XID[] = [];\n  let responseArid: ARID | undefined;\n\n  for (const entry of participantEntries) {\n    const xid: XID = entry.extractSubject();\n    if (xid.urString() === owner.xid().urString()) {\n      const encryptedArid = entry.objectForPredicate(\"response_arid\");\n      const aridEnv = encryptedArid.decryptToRecipient(recipientKeys);\n      responseArid = aridEnv.extractSubject();\n    }\n    participants.push(xid);\n  }\n\n  // Validations\n  if (participants.length === 0) {\n    throw new Error(\"signInvite request contains no participants\");\n  }\n  if (minSigners < 2) {\n    throw new Error(\"minSigners must be at least 2\");\n  }\n  if (minSigners > participants.length) {\n    throw new Error(\"minSigners exceeds participant count\");\n  }\n\n  const ownerInParticipants = participants.some((p) => p.urString() === owner.xid().urString());\n  if (!ownerInParticipants) {\n    throw new Error(\"signInvite request does not include this participant\");\n  }\n\n  if (responseArid === undefined) {\n    throw new Error(\"signInvite request missing response ARID\");\n  }\n\n  // Sort participants by XID byte order — mirrors Rust `XID::cmp`.\n  // The earlier port used `urString().localeCompare(...)`, which\n  // diverges from byte order for bytes ≥ 0x80 and is locale-aware.\n  participants.sort((a, b) => compareXidBytes(a.toData(), b.toData()));\n\n  const targetEnvelope = sealedRequest.objectForParameter(\"target\");\n\n  const coordinatorName = resolveSenderName(registry, senderXid) ?? senderXid.urString();\n  const participantNames = formatParticipantNames(registry, participants, owner);\n\n  // Output\n  console.log(`Group: ${groupId.urString()}`);\n  console.log(`Coordinator: ${coordinatorName}`);\n  console.log(`Min signers: ${minSigners}`);\n  console.log(`Participants: ${participantNames.join(\", \")}`);\n  console.log(\"Target:\");\n  console.log(targetEnvelope.format());\n\n  // Primary output for scripting: session ID on its own line (no header)\n  console.log(sessionId.urString());\n\n  // Persist request details for follow-up commands\n  const stateDir = signingStateDir(registryPath, groupId.hex(), sessionId.hex());\n  fs.mkdirSync(stateDir, { recursive: true });\n\n  const root: Record<string, unknown> = {\n    request_envelope: envelope.urString(),\n    group: groupId.urString(),\n    session: sessionId.urString(),\n    coordinator: senderXid.urString(),\n    min_signers: minSigners,\n    response_arid: responseArid.urString(),\n    participants: participants.map((xid) => xid.urString()),\n    target: targetEnvelope.urString(),\n  };\n\n  fs.writeFileSync(path.join(stateDir, \"sign_receive.json\"), JSON.stringify(root, null, 2));\n\n  return {\n    sessionId: sessionId.urString(),\n    groupId: groupId.urString(),\n    targetUr: targetEnvelope.urString(),\n    coordinatorName,\n    minSigners,\n    participantNames,\n  };\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAyDA,SAAS,uBAAuB,UAAoB,OAAmC;CACrF,MAAM,UAAU,MAAM,MAAM;AAC5B,KAAI,YAAY,GACd,OAAM,IAAI,MAAM,qBAAqB;AAIvC,KAAI;EAEF,MAAM,EAAE,KAAK,aAAa,QAAQ,mBAAmB;EAErD,MAAM,MAAM,SAAS,aAAa,QAAQ;EAC1C,MAAM,SAAS,SAAS,YAAY,IAAI;AACxC,MAAI,CAAC,OACH,OAAM,IAAI,MAAM,mBAAmB,IAAI,UAAU,CAAC,YAAY;AAEhE,SAAO,OAAO,aAAa;SACrB;EAEN,MAAM,SAAS,SAAS,qBAAqB,QAAQ;AACrD,MAAI,CAAC,OACH,OAAM,IAAI,MAAM,yBAAyB,QAAQ,aAAa;AAEhE,SAAO,OAAO,GAAG,aAAa;;;;;;;;AASlC,eAAe,0BACb,QACA,WACA,SACA,SACmB;AACnB,KAAI,cAAc,KAAA,KAAa,WAAW,KAAA,GAAW;AAEnD,MAAI;GAEF,MAAM,WAAW,MAAMA,aAAAA,iBAAiB,QAD3BC,eAAAA,YAAY,QAC2B,EAAE,eAAe,SAAS,MAAM;AACpF,OAAI,aAAa,KAAA,KAAa,aAAa,KACzC,OAAM,IAAI,MAAM,iDAAiD;AAEnE,UAAO;UACD;AAIR,MAAI,YAAY,KAAA,EACd,OAAM,IAAI,MAAM,+DAA+D;AAEjF,SAAOC,eAAAA,gBAAgB,QAAQ;;AAIjC,KAAI;AACF,iBAAA,YAAY,QAAQ;AACpB,QAAM,IAAI,MAAM,sEAAsE;UAC/E,GAAG;AACV,MAAI,aAAa,SAAS,EAAE,QAAQ,SAAS,4BAA4B,CACvE,OAAM;;AAIV,QAAOA,eAAAA,gBAAgB,QAAQ;;;;;;;AAQjC,SAAS,kBAAkB,UAAoB,WAAoC;CACjF,MAAM,QAAQ,SAAS,OAAO;AAG9B,KAAI,OAAO,KAAK,CAAC,UAAU,KAAK,UAAU,UAAU,CAElD,QAAOC,eAAAA,0BADM,MAAM,SAAS,IAAI,UAAU,UAAU,EACb,KAAK;CAI9C,MAAM,SAAS,SAAS,YAAY,UAAU;AAC9C,KAAI,OAEF,QAAOA,eAAAA,0BADM,OAAO,SAAS,IAAI,OAAO,KAAK,CAAC,UAAU,EACjB,MAAM;;;;;;;AAWjD,SAAS,uBACP,UACA,cACA,OACU;AACV,QAAO,aAAa,KAAK,QAAQ;EAC/B,MAAM,UAAU,IAAI,UAAU,KAAK,MAAM,KAAK,CAAC,UAAU;EACzD,IAAI;AAEJ,MAAI,QACF,QAAO,MAAM,SAAS,IAAI,IAAI,UAAU;MAGxC,QADe,SAAS,YAAY,IACvB,EAAE,SAAS,IAAI,IAAI,UAAU;AAG5C,SAAOA,eAAAA,0BAA0B,MAAM,QAAQ;GAC/C;;;;;;;;;AAUJ,eAAsB,QACpB,QACA,WACA,SACA,KAC4B;AAE5B,KAAI,cAAc,KAAA,KAAa,QAAQ,mBAAmB,KAAA,EACxD,OAAM,IAAI,MAAM,+CAA+C;CAGjE,MAAM,eAAeC,uBAAAA,oBAAoB,QAAQ,cAAc,IAAI;CACnE,MAAM,WAAWC,uBAAAA,SAAS,KAAK,aAAa;CAC5C,MAAM,QAAQ,SAAS,OAAO;AAE9B,KAAI,CAAC,MACH,OAAM,IAAI,MAAM,+CAA+C;CAIjE,IAAI;AACJ,KAAI,QAAQ,WAAW,KAAA,KAAa,QAAQ,WAAW,GACrD,kBAAiB,uBAAuB,UAAU,QAAQ,OAAO;CAInE,MAAM,WAAW,MAAM,0BACrB,QACA,WACA,QAAQ,SACR,QAAQ,eACT;CAED,MAAM,MAAgBC,YAAAA,SAAS,KAAK;CACpC,MAAM,gBAAgB,MAAM,aAAa,CAAC,sBAAsB;AAEhE,KAAI,kBAAkB,QAAQ,kBAAkB,KAAA,EAC9C,OAAM,IAAI,MAAM,mDAAmD;CAIrE,MAAM,EAAE,eAAe,uBAAuB,QAAQ,aAAa;CA4BnE,MAAM,gBAAuC,mBAAmB,gBAC9D,UACA,KAAA,GACA,KACA,cACD;CAGD,MAAM,YAAY,cAAc,QAAQ,CAAC,KAAK;AAE9C,KAAI,mBAAmB,KAAA;MACjB,UAAU,UAAU,KAAK,eAAe,KAAK,CAAC,UAAU,CAC1D,OAAM,IAAI,MACR,sDAAsD,UAAU,UAAU,CAAC,aAAa,eAAe,KAAK,CAAC,UAAU,CAAC,GACzH;QAEE;EACL,MAAM,aAAa,MAAM,KAAK,CAAC,UAAU,KAAK,UAAU,UAAU;EAClE,MAAM,mBAAmB,SAAS,YAAY,UAAU,KAAK,KAAA;AAC7D,MAAI,CAAC,cAAc,CAAC,iBAClB,OAAM,IAAI,MAAM,yCAAyC,UAAU,UAAU,GAAG;;CAKpF,MAAM,EAAE,UAAU,kBAAkB,QAAQ,iBAAiB;CAK7D,MAAM,kBAAkB,cAAc,UAAU;CAChD,MAAM,mBAAmB,cAAc,KAAK,aAAa;AAMzD,KAAI,EAJF,gBAAgB,WAAW,KAAA,IACvB,gBAAgB,OAAO,iBAAiB,GACxC,OAAO,gBAAgB,KAAK,OAAO,iBAAiB,EAGxD,OAAM,IAAI,MAAM,gCAAgC,OAAO,gBAAgB,GAAG;AAK5E,KADmB,cAAc,0BAAoC,aACvD,IAAI,IAChB,OAAM,IAAI,MAAM,iCAAiC;CAGnD,MAAM,UAAU,cAAc,0BAAgC,QAAQ;CACtE,MAAM,YAAY,cAAc,0BAAgC,UAAU;CAC1E,MAAM,aAAa,OAAO,cAAc,0BAA2C,aAAa,CAAC;CAGjG,MAAM,qBAAqB,cAAc,oBAAoB,cAAc;CAC3E,MAAM,eAAsB,EAAE;CAC9B,IAAI;AAEJ,MAAK,MAAM,SAAS,oBAAoB;EACtC,MAAM,MAAW,MAAM,gBAAgB;AACvC,MAAI,IAAI,UAAU,KAAK,MAAM,KAAK,CAAC,UAAU,CAG3C,gBAFsB,MAAM,mBAAmB,gBAClB,CAAC,mBAAmB,cAC3B,CAAC,gBAAgB;AAEzC,eAAa,KAAK,IAAI;;AAIxB,KAAI,aAAa,WAAW,EAC1B,OAAM,IAAI,MAAM,8CAA8C;AAEhE,KAAI,aAAa,EACf,OAAM,IAAI,MAAM,gCAAgC;AAElD,KAAI,aAAa,aAAa,OAC5B,OAAM,IAAI,MAAM,uCAAuC;AAIzD,KAAI,CADwB,aAAa,MAAM,MAAM,EAAE,UAAU,KAAK,MAAM,KAAK,CAAC,UAAU,CACpE,CACtB,OAAM,IAAI,MAAM,uDAAuD;AAGzE,KAAI,iBAAiB,KAAA,EACnB,OAAM,IAAI,MAAM,2CAA2C;AAM7D,cAAa,MAAM,GAAG,MAAMC,6BAAAA,gBAAgB,EAAE,QAAQ,EAAE,EAAE,QAAQ,CAAC,CAAC;CAEpE,MAAM,iBAAiB,cAAc,mBAAmB,SAAS;CAEjE,MAAM,kBAAkB,kBAAkB,UAAU,UAAU,IAAI,UAAU,UAAU;CACtF,MAAM,mBAAmB,uBAAuB,UAAU,cAAc,MAAM;AAG9E,SAAQ,IAAI,UAAU,QAAQ,UAAU,GAAG;AAC3C,SAAQ,IAAI,gBAAgB,kBAAkB;AAC9C,SAAQ,IAAI,gBAAgB,aAAa;AACzC,SAAQ,IAAI,iBAAiB,iBAAiB,KAAK,KAAK,GAAG;AAC3D,SAAQ,IAAI,UAAU;AACtB,SAAQ,IAAI,eAAe,QAAQ,CAAC;AAGpC,SAAQ,IAAI,UAAU,UAAU,CAAC;CAGjC,MAAM,WAAWC,iBAAAA,gBAAgB,cAAc,QAAQ,KAAK,EAAE,UAAU,KAAK,CAAC;AAC9E,SAAG,UAAU,UAAU,EAAE,WAAW,MAAM,CAAC;CAE3C,MAAM,OAAgC;EACpC,kBAAkB,SAAS,UAAU;EACrC,OAAO,QAAQ,UAAU;EACzB,SAAS,UAAU,UAAU;EAC7B,aAAa,UAAU,UAAU;EACjC,aAAa;EACb,eAAe,aAAa,UAAU;EACtC,cAAc,aAAa,KAAK,QAAQ,IAAI,UAAU,CAAC;EACvD,QAAQ,eAAe,UAAU;EAClC;AAED,SAAG,cAAcC,UAAK,KAAK,UAAU,oBAAoB,EAAE,KAAK,UAAU,MAAM,MAAM,EAAE,CAAC;AAEzF,QAAO;EACL,WAAW,UAAU,UAAU;EAC/B,SAAS,QAAQ,UAAU;EAC3B,UAAU,eAAe,UAAU;EACnC;EACA;EACA;EACD"}

package/dist/registry/index.cjs

@@ -375,8 +375,16 @@ var OwnerRecord = class OwnerRecord {
 	}
 	/**
 	* Deserialize from JSON object.
+	*
+	* Mirrors Rust's `#[serde(deny_unknown_fields)]` derive on
+	* `OwnerRecord` (`owner_record.rs:13-17`) — any field not in
+	* `{xid_document, pet_name}` causes Rust's `serde_json::from_str`
+	* to error with `unknown field`, and we mirror that here so a
+	* registry file produced by a future Rust version with extra
+	* fields is rejected explicitly rather than silently lossy.
 	*/
 	static fromJSON(json) {
+		for (const key of Object.keys(json)) if (key !== "xid_document" && key !== "pet_name") throw new Error(`unknown field \`${key}\`, expected \`xid_document\` or \`pet_name\``);
 		const xidDocumentUr = json["xid_document"];
 		const petName = json["pet_name"];
 		return OwnerRecord.fromSignedXidUr(xidDocumentUr, petName);
@@ -506,8 +514,17 @@ var ParticipantRecord = class ParticipantRecord {
 	}
 	/**
 	* Deserialize from JSON object.
+	*
+	* Mirrors Rust's `#[serde(deny_unknown_fields)]` derive on
+	* `ParticipantRecord` (`participant_record.rs:12-17`) — Rust's
+	* `serde_json::from_str` errors with `unknown field` for any
+	* field outside `{xid_document, pet_name}`. We mirror that
+	* behaviour so a registry file produced by a future Rust
+	* version with extra fields is rejected explicitly rather than
+	* silently lossy.
 	*/
 	static fromJSON(json) {
+		for (const key of Object.keys(json)) if (key !== "xid_document" && key !== "pet_name") throw new Error(`unknown field \`${key}\`, expected \`xid_document\` or \`pet_name\``);
 		const xidDocumentUr = json["xid_document"];
 		const petName = json["pet_name"];
 		return ParticipantRecord.recreateFromSerialized(xidDocumentUr, petName);
@@ -527,9 +544,19 @@ function parseSignedXidDocument(xidDocumentUr) {
 	try {
 		envelope = _bcts_envelope.Envelope.fromTaggedCbor(envelopeCbor);
 	} catch {
-		envelope = _bcts_envelope.Envelope.fromUntaggedCbor(envelopeCbor);
+		try {
+			envelope = _bcts_envelope.Envelope.fromUntaggedCbor(envelopeCbor);
+		} catch (e) {
+			throw new Error(`Unable to decode XID document envelope: ${e.message ?? String(e)}`, { cause: e });
+		}
+	}
+	let document;
+	try {
+		document = _bcts_xid.XIDDocument.fromEnvelope(envelope, void 0, _bcts_xid.XIDVerifySignature.Inception);
+	} catch (e) {
+		throw new Error(`XID document must be signed by its inception key: ${e.message ?? String(e)}`, { cause: e });
 	}
-	return [sanitized, _bcts_xid.XIDDocument.fromEnvelope(envelope, void 0, _bcts_xid.XIDVerifySignature.Inception)];
+	return [sanitized, document];
 }
 /**
 * Sanitize XID UR input.
@@ -652,13 +679,43 @@ var Registry = class Registry {
 	/**
 	* Add a participant.
 	*
-	* Returns the outcome indicating whether the participant was already present or newly inserted.
+	* Mirrors Rust `Registry::add_participant`
+	* (`registry_impl.rs:83-124`):
+	*
+	* 1. If `record.pet_name()` is already used by some other XID,
+	*    bail with `"Pet name '{name}' already used by another
+	*    participant"`.
+	* 2. If `record.pet_name()` matches an existing record under the
+	*    *same* XID and the public keys also match, return
+	*    `AlreadyPresent`.
+	* 3. If the pet name matches the same XID but public keys don't,
+	*    bail with `"Participant already exists with a different pet
+	*    name"`.
+	* 4. Otherwise look up by XID. If present and public-keys + pet-name
+	*    both match, return `AlreadyPresent`; if XID is present but
+	*    anything differs, bail. If XID is new, insert and return
+	*    `Inserted`.
+	*
+	* The earlier port short-circuited on `participants.has(xidUr)` and
+	* always returned `AlreadyPresent` — silently allowing re-adds with
+	* a different pet name or different public keys, which Rust
+	* correctly forbids.
 	*/
 	addParticipant(xid, record) {
 		const xidUr = xid.urString();
-		if (this._participants.has(xidUr)) return "already_present";
 		const petName = record.petName();
-		if (petName !== void 0 && this.petNameExists(petName)) throw new Error(`Pet name "${petName}" is already used by another participant`);
+		if (petName !== void 0) {
+			for (const [existingXidUr, existingRecord] of this._participants) if (existingRecord.petName() === petName) {
+				if (existingXidUr !== xidUr) throw new Error(`Pet name '${petName}' already used by another participant`);
+				if (publicKeysEqual(existingRecord.publicKeys(), record.publicKeys())) return "already_present";
+				throw new Error("Participant already exists with a different pet name");
+			}
+		}
+		const existing = this._participants.get(xidUr);
+		if (existing !== void 0) {
+			if (publicKeysEqual(existing.publicKeys(), record.publicKeys()) && existing.petName() === record.petName()) return "already_present";
+			throw new Error("Participant already exists with a different pet name");
+		}
 		this._participants.set(xidUr, record);
 		return "inserted";
 	}
@@ -748,17 +805,25 @@ var Registry = class Registry {
 	}
 	/**
 	* Serialize to JSON object.
+	*
+	* Mirrors Rust `Registry`'s field declaration order
+	* (`registry_impl.rs:8-14` — `owner, participants, groups`). JSON
+	* object member order is not semantically significant, but
+	* `serde_json::to_string_pretty` emits keys in declaration order,
+	* so for byte-equal `registry.json` (used by the integration tests
+	* as a string assertion) the TS port must match Rust's order.
+	* Empty `owner` is omitted via `Option::None` skip in Rust; we
+	* reproduce that by only setting the key when the owner exists.
 	*/
 	toJSON() {
+		const obj = {};
+		if (this._owner !== void 0) obj["owner"] = this._owner.toJSON();
 		const participants = {};
 		for (const [xidUr, record] of this._participants) participants[xidUr] = record.toJSON();
+		obj["participants"] = participants;
 		const groups = {};
 		for (const [aridHex, record] of this._groups) groups[aridHex] = record.toJSON();
-		const obj = {
-			groups,
-			participants
-		};
-		if (this._owner !== void 0) obj["owner"] = this._owner.toJSON();
+		obj["groups"] = groups;
 		return obj;
 	}
 	/**
@@ -791,6 +856,16 @@ function resolveRegistryPath(registryArg, cwd) {
 	if (!registryArg.includes("/") && !registryArg.includes(node_path.sep)) return node_path.join(cwd, registryArg);
 	return node_path.resolve(cwd, registryArg);
 }
+/**
+* Structural equality on `PublicKeys`, mirroring Rust's
+* `PartialEq::eq` derive (per-component comparison of the signing
+* and encapsulation public keys).
+*
+* @internal
+*/
+function publicKeysEqual(a, b) {
+	return a.equals(b);
+}
 //#endregion
 exports.AddOutcome = AddOutcome;
 exports.ContributionPaths = ContributionPaths;