@bcts/frost-hubert 1.0.0-alpha.23 → 1.0.0-beta.0

package/dist/dkg/index.cjs.map

@@ -1 +1 @@
-{"version":3,"file":"index.cjs","names":["UR","Envelope","XIDDocument","XIDVerifySignature","SealedRequest","CborDate","Envelope","SealedResponse","EnvelopeFunction","XIDDocument","XIDVerifySignature","ARID"],"sources":["../../src/dkg/proposed-participant.ts","../../src/dkg/group-invite.ts"],"sourcesContent":["/**\n * Copyright © 2023-2026 Blockchain Commons, LLC\n * Copyright © 2025-2026 Parity Technologies\n *\n *\n * DKG Proposed Participant.\n *\n * Port of dkg/proposed_participant.rs from frost-hubert-rust.\n *\n * @module\n */\n\nimport { type ARID, type XID } from \"@bcts/components\";\nimport { Envelope } from \"@bcts/envelope\";\nimport { UR } from \"@bcts/uniform-resources\";\nimport { XIDDocument, XIDVerifySignature } from \"@bcts/xid\";\n\n/**\n * A proposed participant in a DKG session.\n *\n * Port of `struct DkgProposedParticipant` from proposed_participant.rs lines 8-13.\n */\nexport class DkgProposedParticipant {\n  private readonly _urString: string;\n  private readonly _envelope: Envelope;\n  private readonly _document: XIDDocument;\n  private readonly _responseArid: ARID;\n\n  private constructor(\n    urString: string,\n    envelope: Envelope,\n    document: XIDDocument,\n    responseArid: ARID,\n  ) {\n    this._urString = urString;\n    this._envelope = envelope;\n    this._document = document;\n    this._responseArid = responseArid;\n  }\n\n  /**\n   * Create a new DkgProposedParticipant from a UR string and response ARID.\n   *\n   * Port of `DkgProposedParticipant::new()` from proposed_participant.rs lines 22-26.\n   */\n  static create(urString: string, responseArid: ARID): DkgProposedParticipant {\n    const [envelope, document] = parseXidEnvelope(urString);\n    return new DkgProposedParticipant(urString, envelope, document, responseArid);\n  }\n\n  /**\n   * Get the XID of this participant.\n   *\n   * Port of `DkgProposedParticipant::xid()` from proposed_participant.rs line 28.\n   */\n  xid(): XID {\n    return this._document.xid();\n  }\n\n  /**\n   * Get the XID document of this participant.\n   *\n   * Port of `DkgProposedParticipant::xid_document()` from proposed_participant.rs line 30.\n   */\n  xidDocument(): XIDDocument {\n    return this._document;\n  }\n\n  /**\n   * Get the UR string of the XID document.\n   *\n   * Port of `DkgProposedParticipant::xid_document_ur()` from proposed_participant.rs line 32.\n   */\n  xidDocumentUr(): string {\n    return this._urString;\n  }\n\n  /**\n   * Get the envelope containing the XID document.\n   *\n   * Port of `DkgProposedParticipant::xid_document_envelope()` from proposed_participant.rs line 34.\n   */\n  xidDocumentEnvelope(): Envelope {\n    return this._envelope;\n  }\n\n  /**\n   * Get the response ARID for this participant.\n   *\n   * Port of `DkgProposedParticipant::response_arid()` from proposed_participant.rs line 36.\n   */\n  responseArid(): ARID {\n    return this._responseArid;\n  }\n\n  /**\n   * Compare participants by XID for sorting.\n   */\n  compareTo(other: DkgProposedParticipant): number {\n    const thisXid = this.xid().toString();\n    const otherXid = other.xid().toString();\n    return thisXid.localeCompare(otherXid);\n  }\n}\n\n/**\n * Parse a XID envelope from a UR string.\n *\n * Port of `parse_xid_envelope()` from proposed_participant.rs lines 39-60.\n */\nfunction parseXidEnvelope(input: string): [Envelope, XIDDocument] {\n  const trimmed = input.trim();\n  if (trimmed.length === 0) {\n    throw new Error(\"XID document is required\");\n  }\n\n  const ur = UR.fromURString(trimmed);\n  const urType = ur.urTypeStr();\n  if (urType !== \"xid\" && urType !== \"envelope\") {\n    throw new Error(`Expected a ur:xid document, found ur:${urType}`);\n  }\n\n  const envelopeCbor = ur.cbor();\n  // Try tagged CBOR first, then untagged\n  let envelope: Envelope;\n  try {\n    envelope = Envelope.fromTaggedCbor(envelopeCbor);\n  } catch {\n    envelope = Envelope.fromUntaggedCbor(envelopeCbor);\n  }\n\n  const document = XIDDocument.fromEnvelope(envelope, undefined, XIDVerifySignature.Inception);\n\n  return [envelope, document];\n}\n","/**\n * Copyright © 2023-2026 Blockchain Commons, LLC\n * Copyright © 2025-2026 Parity Technologies\n *\n *\n * DKG Group Invite structures.\n *\n * Port of dkg/group_invite.rs from frost-hubert-rust.\n *\n * @module\n */\n\nimport { ARID } from \"@bcts/components\";\nimport { CborDate } from \"@bcts/dcbor\";\nimport { Envelope, Function as EnvelopeFunction } from \"@bcts/envelope\";\nimport { SealedRequest, SealedResponse } from \"@bcts/gstp\";\nimport { XIDDocument, XIDVerifySignature } from \"@bcts/xid\";\n\nimport { DkgProposedParticipant } from \"./proposed-participant.js\";\n\n/**\n * Result of a DKG invitation.\n *\n * Port of `enum DkgInvitationResult` from group_invite.rs lines 170-173.\n */\nexport type DkgInvitationResult = { type: \"accepted\" } | { type: \"declined\"; reason: string };\n\n/**\n * Helper to create an accepted result.\n */\nexport function accepted(): DkgInvitationResult {\n  return { type: \"accepted\" };\n}\n\n/**\n * Helper to create a declined result.\n */\nexport function declined(reason: string): DkgInvitationResult {\n  return { type: \"declined\", reason };\n}\n\n/**\n * DKG Invite - represents an invitation to participate in a DKG session.\n *\n * Port of `struct DkgInvite` from group_invite.rs lines 11-27.\n */\nexport class DkgInvite {\n  private readonly _requestId: ARID;\n  private readonly _sender: XIDDocument;\n  private readonly _groupId: ARID;\n  private readonly _date: Date;\n  private readonly _validUntil: Date;\n  private readonly _minSigners: number;\n  private readonly _charter: string;\n  private readonly _orderedParticipants: DkgProposedParticipant[];\n\n  private constructor(\n    requestId: ARID,\n    sender: XIDDocument,\n    groupId: ARID,\n    date: Date,\n    validUntil: Date,\n    minSigners: number,\n    charter: string,\n    orderedParticipants: DkgProposedParticipant[],\n  ) {\n    this._requestId = requestId;\n    this._sender = sender;\n    this._groupId = groupId;\n    this._date = date;\n    this._validUntil = validUntil;\n    this._minSigners = minSigners;\n    this._charter = charter;\n    this._orderedParticipants = orderedParticipants;\n  }\n\n  /**\n   * Create a new DKG invite.\n   *\n   * Port of `DkgInvite::new()` from group_invite.rs lines 30-67.\n   */\n  static create(\n    requestId: ARID,\n    sender: XIDDocument,\n    groupId: ARID,\n    date: Date,\n    validUntil: Date,\n    minSigners: number,\n    charter: string,\n    participants: string[],\n    responseArids: ARID[],\n  ): DkgInvite {\n    if (participants.length !== responseArids.length) {\n      throw new Error(\n        `Number of participants (${participants.length}) does not match number of response ARIDs (${responseArids.length})`,\n      );\n    }\n\n    if (minSigners < 2) {\n      throw new Error(\"min_signers must be at least 2\");\n    }\n\n    const orderedParticipants = participants.map((urString, i) =>\n      DkgProposedParticipant.create(urString, responseArids[i]),\n    );\n\n    if (minSigners > orderedParticipants.length) {\n      throw new Error(\"min_signers cannot exceed number of participants\");\n    }\n\n    // Sort by XID\n    orderedParticipants.sort((a, b) => a.compareTo(b));\n\n    return new DkgInvite(\n      requestId,\n      sender,\n      groupId,\n      date,\n      validUntil,\n      minSigners,\n      charter,\n      orderedParticipants,\n    );\n  }\n\n  requestId(): ARID {\n    return this._requestId;\n  }\n\n  sender(): XIDDocument {\n    return this._sender;\n  }\n\n  groupId(): ARID {\n    return this._groupId;\n  }\n\n  date(): Date {\n    return this._date;\n  }\n\n  validUntil(): Date {\n    return this._validUntil;\n  }\n\n  minSigners(): number {\n    return this._minSigners;\n  }\n\n  charter(): string {\n    return this._charter;\n  }\n\n  participants(): DkgProposedParticipant[] {\n    return this._orderedParticipants;\n  }\n\n  /**\n   * Create a GSTP sealed request from this invite.\n   *\n   * Port of `DkgInvite::to_request()` from group_invite.rs lines 87-121.\n   */\n  toRequest(): SealedRequest {\n    let request = SealedRequest.new(\"dkgInvite\", this.requestId(), this.sender())\n      .withParameter(\"group\", this.groupId())\n      .withParameter(\"minSigners\", BigInt(this.minSigners()))\n      .withParameter(\"charter\", this.charter())\n      .withDate(this.date())\n      .withParameter(\"validUntil\", CborDate.fromDatetime(this.validUntil()));\n\n    for (const participant of this.participants()) {\n      const xidDocumentEnvelope = participant.xidDocumentEnvelope();\n      const responseArid = participant.responseArid();\n      const encryptionKey = participant.xidDocument().encryptionKey();\n\n      if (encryptionKey === undefined) {\n        throw new Error(\"Participant XID document has no encryption key\");\n      }\n\n      const encryptedResponseArid = Envelope.new(responseArid).encryptToRecipients([encryptionKey]);\n\n      const participantEnvelope = xidDocumentEnvelope\n        .wrap()\n        .addAssertion(\"response_arid\", encryptedResponseArid);\n\n      request = request.withParameter(\"participant\", participantEnvelope);\n    }\n\n    return request;\n  }\n\n  /**\n   * Creates a signed but unencrypted envelope for auditing/preview.\n   *\n   * Port of `DkgInvite::to_unsealed_envelope()` from group_invite.rs lines 124-139.\n   */\n  toUnsealedEnvelope(): Envelope {\n    const request = this.toRequest();\n    const sender = this.sender();\n    const signerPrivateKeys = sender.inceptionPrivateKeys();\n\n    if (signerPrivateKeys === undefined) {\n      throw new Error(\"Sender XID document has no inception signing key\");\n    }\n\n    return request.toEnvelope(\n      this.validUntil(),\n      signerPrivateKeys,\n      undefined, // No recipient = signed but not encrypted\n    );\n  }\n\n  /**\n   * Creates a sealed envelope encrypted to all participants.\n   *\n   * Port of `DkgInvite::to_envelope()` from group_invite.rs lines 142-166.\n   */\n  toEnvelope(): Envelope {\n    const request = this.toRequest();\n    const sender = this.sender();\n    const signerPrivateKeys = sender.inceptionPrivateKeys();\n\n    if (signerPrivateKeys === undefined) {\n      throw new Error(\"Sender XID document has no inception signing key\");\n    }\n\n    const recipients = this.participants().map((p) => p.xidDocument());\n\n    return request.toEnvelopeForRecipients(this.validUntil(), signerPrivateKeys, recipients);\n  }\n}\n\n/**\n * DKG Invitation - represents a received invitation from a participant's perspective.\n *\n * Port of `struct DkgInvitation` from group_invite.rs lines 175-186.\n */\nexport class DkgInvitation {\n  private readonly _responseArid: ARID;\n  private readonly _validUntil: Date;\n  private readonly _sender: XIDDocument;\n  private readonly _requestId: ARID;\n  private readonly _peerContinuation: Envelope | undefined;\n  private readonly _minSigners: number;\n  private readonly _charter: string;\n  private readonly _groupId: ARID;\n\n  private constructor(\n    responseArid: ARID,\n    validUntil: Date,\n    sender: XIDDocument,\n    requestId: ARID,\n    peerContinuation: Envelope | undefined,\n    minSigners: number,\n    charter: string,\n    groupId: ARID,\n  ) {\n    this._responseArid = responseArid;\n    this._validUntil = validUntil;\n    this._sender = sender;\n    this._requestId = requestId;\n    this._peerContinuation = peerContinuation;\n    this._minSigners = minSigners;\n    this._charter = charter;\n    this._groupId = groupId;\n  }\n\n  responseArid(): ARID {\n    return this._responseArid;\n  }\n\n  validUntil(): Date {\n    return this._validUntil;\n  }\n\n  sender(): XIDDocument {\n    return this._sender;\n  }\n\n  requestId(): ARID {\n    return this._requestId;\n  }\n\n  peerContinuation(): Envelope | undefined {\n    return this._peerContinuation;\n  }\n\n  minSigners(): number {\n    return this._minSigners;\n  }\n\n  charter(): string {\n    return this._charter;\n  }\n\n  groupId(): ARID {\n    return this._groupId;\n  }\n\n  /**\n   * Build a GSTP response for this invitation result.\n   *\n   * Port of `DkgInvitation::to_response()` from group_invite.rs lines 207-224.\n   */\n  toResponse(response: DkgInvitationResult, recipient: XIDDocument): SealedResponse {\n    let base: SealedResponse;\n    if (response.type === \"accepted\") {\n      base = SealedResponse.newSuccess(this.requestId(), recipient);\n    } else {\n      base = SealedResponse.newFailure(this.requestId(), recipient).withError(response.reason);\n    }\n\n    return base.withPeerContinuation(this.peerContinuation());\n  }\n\n  /**\n   * Create a signed/encrypted GSTP envelope containing the response for the coordinator.\n   *\n   * Port of `DkgInvitation::to_envelope()` from group_invite.rs lines 228-244.\n   */\n  toEnvelope(response: DkgInvitationResult, recipient: XIDDocument): Envelope {\n    const responseObj = this.toResponse(response, recipient);\n    const signerPrivateKeys = recipient.inceptionPrivateKeys();\n\n    if (signerPrivateKeys === undefined) {\n      throw new Error(\"Recipient XID document has no signing keys\");\n    }\n\n    const recipients = [this.sender()];\n\n    return responseObj.toEnvelopeForRecipients(this.validUntil(), signerPrivateKeys, recipients);\n  }\n\n  /**\n   * Parse a DKG invitation from an invite envelope.\n   *\n   * Port of `DkgInvitation::from_invite()` from group_invite.rs lines 255-344.\n   */\n  static fromInvite(\n    invite: Envelope,\n    now: Date,\n    expectedSender: XIDDocument | undefined,\n    recipient: XIDDocument,\n  ): DkgInvitation {\n    const recipientPrivateKeys = recipient.inceptionPrivateKeys();\n\n    if (recipientPrivateKeys === undefined) {\n      throw new Error(\"Recipient XID document has no inception private keys\");\n    }\n\n    const sealedRequest = SealedRequest.tryFromEnvelope(\n      invite,\n      undefined,\n      now,\n      recipientPrivateKeys,\n    );\n\n    if (expectedSender !== undefined && sealedRequest.sender().xid() !== expectedSender.xid()) {\n      throw new Error(\"Invite sender does not match expected sender\");\n    }\n\n    if (!sealedRequest.request().function().equals(EnvelopeFunction.fromString(\"dkgInvite\"))) {\n      throw new Error(\"Unexpected invite function\");\n    }\n\n    const validUntil = sealedRequest.extractObjectForParameter<Date>(\"validUntil\");\n\n    if (validUntil <= now) {\n      throw new Error(\"Invitation expired\");\n    }\n\n    const recipientXid = recipient.xid();\n    const minSigners = sealedRequest.extractObjectForParameter<number>(\"minSigners\");\n    const charter = sealedRequest.extractObjectForParameter<string>(\"charter\");\n    const groupId = sealedRequest.extractObjectForParameter<ARID>(\"group\");\n    const participantObjects = sealedRequest.objectsForParameter(\"participant\");\n\n    if (minSigners < 2) {\n      throw new Error(\"min_signers must be at least 2\");\n    }\n\n    if (minSigners > participantObjects.length) {\n      throw new Error(\"min_signers exceeds participant count\");\n    }\n\n    for (const participant of participantObjects) {\n      const xidDocumentEnvelope = participant.tryUnwrap();\n      const xidDocument = XIDDocument.fromEnvelope(\n        xidDocumentEnvelope,\n        undefined,\n        XIDVerifySignature.Inception,\n      );\n\n      if (xidDocument.xid() !== recipientXid) {\n        continue;\n      }\n\n      const encryptedResponseArid = participant.objectForPredicate(\"response_arid\");\n      const responseAridEnvelope = encryptedResponseArid.decryptToRecipient(recipientPrivateKeys);\n      const responseArid: ARID = responseAridEnvelope.extractSubject((cbor) =>\n        ARID.fromTaggedCbor(cbor),\n      );\n\n      return new DkgInvitation(\n        responseArid,\n        validUntil,\n        sealedRequest.sender(),\n        sealedRequest.request().id(),\n        sealedRequest.peerContinuation(),\n        minSigners,\n        charter,\n        groupId,\n      );\n    }\n\n    throw new Error(\"Recipient not found in invite\");\n  }\n}\n"],"mappings":";;;;;;;;;;;;;;AAsBA,IAAa,yBAAb,MAAa,uBAAuB;CAClC;CACA;CACA;CACA;CAEA,YACE,UACA,UACA,UACA,cACA;AACA,OAAK,YAAY;AACjB,OAAK,YAAY;AACjB,OAAK,YAAY;AACjB,OAAK,gBAAgB;;;;;;;CAQvB,OAAO,OAAO,UAAkB,cAA4C;EAC1E,MAAM,CAAC,UAAU,YAAY,iBAAiB,SAAS;AACvD,SAAO,IAAI,uBAAuB,UAAU,UAAU,UAAU,aAAa;;;;;;;CAQ/E,MAAW;AACT,SAAO,KAAK,UAAU,KAAK;;;;;;;CAQ7B,cAA2B;AACzB,SAAO,KAAK;;;;;;;CAQd,gBAAwB;AACtB,SAAO,KAAK;;;;;;;CAQd,sBAAgC;AAC9B,SAAO,KAAK;;;;;;;CAQd,eAAqB;AACnB,SAAO,KAAK;;;;;CAMd,UAAU,OAAuC;EAC/C,MAAM,UAAU,KAAK,KAAK,CAAC,UAAU;EACrC,MAAM,WAAW,MAAM,KAAK,CAAC,UAAU;AACvC,SAAO,QAAQ,cAAc,SAAS;;;;;;;;AAS1C,SAAS,iBAAiB,OAAwC;CAChE,MAAM,UAAU,MAAM,MAAM;AAC5B,KAAI,QAAQ,WAAW,EACrB,OAAM,IAAI,MAAM,2BAA2B;CAG7C,MAAM,KAAKA,wBAAAA,GAAG,aAAa,QAAQ;CACnC,MAAM,SAAS,GAAG,WAAW;AAC7B,KAAI,WAAW,SAAS,WAAW,WACjC,OAAM,IAAI,MAAM,wCAAwC,SAAS;CAGnE,MAAM,eAAe,GAAG,MAAM;CAE9B,IAAI;AACJ,KAAI;AACF,aAAWC,eAAAA,SAAS,eAAe,aAAa;SAC1C;AACN,aAAWA,eAAAA,SAAS,iBAAiB,aAAa;;CAGpD,MAAM,WAAWC,UAAAA,YAAY,aAAa,UAAU,KAAA,GAAWC,UAAAA,mBAAmB,UAAU;AAE5F,QAAO,CAAC,UAAU,SAAS;;;;;;;;;;;;;;;;;;ACvG7B,SAAgB,WAAgC;AAC9C,QAAO,EAAE,MAAM,YAAY;;;;;AAM7B,SAAgB,SAAS,QAAqC;AAC5D,QAAO;EAAE,MAAM;EAAY;EAAQ;;;;;;;AAQrC,IAAa,YAAb,MAAa,UAAU;CACrB;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CAEA,YACE,WACA,QACA,SACA,MACA,YACA,YACA,SACA,qBACA;AACA,OAAK,aAAa;AAClB,OAAK,UAAU;AACf,OAAK,WAAW;AAChB,OAAK,QAAQ;AACb,OAAK,cAAc;AACnB,OAAK,cAAc;AACnB,OAAK,WAAW;AAChB,OAAK,uBAAuB;;;;;;;CAQ9B,OAAO,OACL,WACA,QACA,SACA,MACA,YACA,YACA,SACA,cACA,eACW;AACX,MAAI,aAAa,WAAW,cAAc,OACxC,OAAM,IAAI,MACR,2BAA2B,aAAa,OAAO,6CAA6C,cAAc,OAAO,GAClH;AAGH,MAAI,aAAa,EACf,OAAM,IAAI,MAAM,iCAAiC;EAGnD,MAAM,sBAAsB,aAAa,KAAK,UAAU,MACtD,uBAAuB,OAAO,UAAU,cAAc,GAAG,CAC1D;AAED,MAAI,aAAa,oBAAoB,OACnC,OAAM,IAAI,MAAM,mDAAmD;AAIrE,sBAAoB,MAAM,GAAG,MAAM,EAAE,UAAU,EAAE,CAAC;AAElD,SAAO,IAAI,UACT,WACA,QACA,SACA,MACA,YACA,YACA,SACA,oBACD;;CAGH,YAAkB;AAChB,SAAO,KAAK;;CAGd,SAAsB;AACpB,SAAO,KAAK;;CAGd,UAAgB;AACd,SAAO,KAAK;;CAGd,OAAa;AACX,SAAO,KAAK;;CAGd,aAAmB;AACjB,SAAO,KAAK;;CAGd,aAAqB;AACnB,SAAO,KAAK;;CAGd,UAAkB;AAChB,SAAO,KAAK;;CAGd,eAAyC;AACvC,SAAO,KAAK;;;;;;;CAQd,YAA2B;EACzB,IAAI,UAAUC,WAAAA,cAAc,IAAI,aAAa,KAAK,WAAW,EAAE,KAAK,QAAQ,CAAC,CAC1E,cAAc,SAAS,KAAK,SAAS,CAAC,CACtC,cAAc,cAAc,OAAO,KAAK,YAAY,CAAC,CAAC,CACtD,cAAc,WAAW,KAAK,SAAS,CAAC,CACxC,SAAS,KAAK,MAAM,CAAC,CACrB,cAAc,cAAcC,YAAAA,SAAS,aAAa,KAAK,YAAY,CAAC,CAAC;AAExE,OAAK,MAAM,eAAe,KAAK,cAAc,EAAE;GAC7C,MAAM,sBAAsB,YAAY,qBAAqB;GAC7D,MAAM,eAAe,YAAY,cAAc;GAC/C,MAAM,gBAAgB,YAAY,aAAa,CAAC,eAAe;AAE/D,OAAI,kBAAkB,KAAA,EACpB,OAAM,IAAI,MAAM,iDAAiD;GAGnE,MAAM,wBAAwBC,eAAAA,SAAS,IAAI,aAAa,CAAC,oBAAoB,CAAC,cAAc,CAAC;GAE7F,MAAM,sBAAsB,oBACzB,MAAM,CACN,aAAa,iBAAiB,sBAAsB;AAEvD,aAAU,QAAQ,cAAc,eAAe,oBAAoB;;AAGrE,SAAO;;;;;;;CAQT,qBAA+B;EAC7B,MAAM,UAAU,KAAK,WAAW;EAEhC,MAAM,oBADS,KAAK,QACY,CAAC,sBAAsB;AAEvD,MAAI,sBAAsB,KAAA,EACxB,OAAM,IAAI,MAAM,mDAAmD;AAGrE,SAAO,QAAQ,WACb,KAAK,YAAY,EACjB,mBACA,KAAA,EACD;;;;;;;CAQH,aAAuB;EACrB,MAAM,UAAU,KAAK,WAAW;EAEhC,MAAM,oBADS,KAAK,QACY,CAAC,sBAAsB;AAEvD,MAAI,sBAAsB,KAAA,EACxB,OAAM,IAAI,MAAM,mDAAmD;EAGrE,MAAM,aAAa,KAAK,cAAc,CAAC,KAAK,MAAM,EAAE,aAAa,CAAC;AAElE,SAAO,QAAQ,wBAAwB,KAAK,YAAY,EAAE,mBAAmB,WAAW;;;;;;;;AAS5F,IAAa,gBAAb,MAAa,cAAc;CACzB;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CAEA,YACE,cACA,YACA,QACA,WACA,kBACA,YACA,SACA,SACA;AACA,OAAK,gBAAgB;AACrB,OAAK,cAAc;AACnB,OAAK,UAAU;AACf,OAAK,aAAa;AAClB,OAAK,oBAAoB;AACzB,OAAK,cAAc;AACnB,OAAK,WAAW;AAChB,OAAK,WAAW;;CAGlB,eAAqB;AACnB,SAAO,KAAK;;CAGd,aAAmB;AACjB,SAAO,KAAK;;CAGd,SAAsB;AACpB,SAAO,KAAK;;CAGd,YAAkB;AAChB,SAAO,KAAK;;CAGd,mBAAyC;AACvC,SAAO,KAAK;;CAGd,aAAqB;AACnB,SAAO,KAAK;;CAGd,UAAkB;AAChB,SAAO,KAAK;;CAGd,UAAgB;AACd,SAAO,KAAK;;;;;;;CAQd,WAAW,UAA+B,WAAwC;EAChF,IAAI;AACJ,MAAI,SAAS,SAAS,WACpB,QAAOC,WAAAA,eAAe,WAAW,KAAK,WAAW,EAAE,UAAU;MAE7D,QAAOA,WAAAA,eAAe,WAAW,KAAK,WAAW,EAAE,UAAU,CAAC,UAAU,SAAS,OAAO;AAG1F,SAAO,KAAK,qBAAqB,KAAK,kBAAkB,CAAC;;;;;;;CAQ3D,WAAW,UAA+B,WAAkC;EAC1E,MAAM,cAAc,KAAK,WAAW,UAAU,UAAU;EACxD,MAAM,oBAAoB,UAAU,sBAAsB;AAE1D,MAAI,sBAAsB,KAAA,EACxB,OAAM,IAAI,MAAM,6CAA6C;EAG/D,MAAM,aAAa,CAAC,KAAK,QAAQ,CAAC;AAElC,SAAO,YAAY,wBAAwB,KAAK,YAAY,EAAE,mBAAmB,WAAW;;;;;;;CAQ9F,OAAO,WACL,QACA,KACA,gBACA,WACe;EACf,MAAM,uBAAuB,UAAU,sBAAsB;AAE7D,MAAI,yBAAyB,KAAA,EAC3B,OAAM,IAAI,MAAM,uDAAuD;EAGzE,MAAM,gBAAgBH,WAAAA,cAAc,gBAClC,QACA,KAAA,GACA,KACA,qBACD;AAED,MAAI,mBAAmB,KAAA,KAAa,cAAc,QAAQ,CAAC,KAAK,KAAK,eAAe,KAAK,CACvF,OAAM,IAAI,MAAM,+CAA+C;AAGjE,MAAI,CAAC,cAAc,SAAS,CAAC,UAAU,CAAC,OAAOI,eAAAA,SAAiB,WAAW,YAAY,CAAC,CACtF,OAAM,IAAI,MAAM,6BAA6B;EAG/C,MAAM,aAAa,cAAc,0BAAgC,aAAa;AAE9E,MAAI,cAAc,IAChB,OAAM,IAAI,MAAM,qBAAqB;EAGvC,MAAM,eAAe,UAAU,KAAK;EACpC,MAAM,aAAa,cAAc,0BAAkC,aAAa;EAChF,MAAM,UAAU,cAAc,0BAAkC,UAAU;EAC1E,MAAM,UAAU,cAAc,0BAAgC,QAAQ;EACtE,MAAM,qBAAqB,cAAc,oBAAoB,cAAc;AAE3E,MAAI,aAAa,EACf,OAAM,IAAI,MAAM,iCAAiC;AAGnD,MAAI,aAAa,mBAAmB,OAClC,OAAM,IAAI,MAAM,wCAAwC;AAG1D,OAAK,MAAM,eAAe,oBAAoB;GAC5C,MAAM,sBAAsB,YAAY,WAAW;AAOnD,OANoBC,UAAAA,YAAY,aAC9B,qBACA,KAAA,GACAC,UAAAA,mBAAmB,UAGN,CAAC,KAAK,KAAK,aACxB;AASF,UAAO,IAAI,cANmB,YAAY,mBAAmB,gBACX,CAAC,mBAAmB,qBACvB,CAAC,gBAAgB,SAC9DC,iBAAAA,KAAK,eAAe,KAAK,CAIb,EACZ,YACA,cAAc,QAAQ,EACtB,cAAc,SAAS,CAAC,IAAI,EAC5B,cAAc,kBAAkB,EAChC,YACA,SACA,QACD;;AAGH,QAAM,IAAI,MAAM,gCAAgC"}
+{"version":3,"file":"index.cjs","names":["DkgProposedParticipant","SealedRequest","CborDate","Envelope","SealedResponse","EnvelopeFunction","XIDDocument","XIDVerifySignature","ARID"],"sources":["../../src/dkg/group-invite.ts"],"sourcesContent":["/**\n * Copyright © 2023-2026 Blockchain Commons, LLC\n * Copyright © 2025-2026 Parity Technologies\n *\n *\n * DKG Group Invite structures.\n *\n * Port of dkg/group_invite.rs from frost-hubert-rust.\n *\n * @module\n */\n\nimport { ARID } from \"@bcts/components\";\nimport { CborDate } from \"@bcts/dcbor\";\nimport { Envelope, Function as EnvelopeFunction } from \"@bcts/envelope\";\nimport { SealedRequest, SealedResponse } from \"@bcts/gstp\";\nimport { XIDDocument, XIDVerifySignature } from \"@bcts/xid\";\n\nimport { DkgProposedParticipant } from \"./proposed-participant.js\";\n\n/**\n * Result of a DKG invitation.\n *\n * Port of `enum DkgInvitationResult` from group_invite.rs lines 170-173.\n */\nexport type DkgInvitationResult = { type: \"accepted\" } | { type: \"declined\"; reason: string };\n\n/**\n * Helper to create an accepted result.\n */\nexport function accepted(): DkgInvitationResult {\n  return { type: \"accepted\" };\n}\n\n/**\n * Helper to create a declined result.\n */\nexport function declined(reason: string): DkgInvitationResult {\n  return { type: \"declined\", reason };\n}\n\n/**\n * DKG Invite - represents an invitation to participate in a DKG session.\n *\n * Port of `struct DkgInvite` from group_invite.rs lines 11-27.\n */\nexport class DkgInvite {\n  private readonly _requestId: ARID;\n  private readonly _sender: XIDDocument;\n  private readonly _groupId: ARID;\n  private readonly _date: Date;\n  private readonly _validUntil: Date;\n  private readonly _minSigners: number;\n  private readonly _charter: string;\n  private readonly _orderedParticipants: DkgProposedParticipant[];\n\n  private constructor(\n    requestId: ARID,\n    sender: XIDDocument,\n    groupId: ARID,\n    date: Date,\n    validUntil: Date,\n    minSigners: number,\n    charter: string,\n    orderedParticipants: DkgProposedParticipant[],\n  ) {\n    this._requestId = requestId;\n    this._sender = sender;\n    this._groupId = groupId;\n    this._date = date;\n    this._validUntil = validUntil;\n    this._minSigners = minSigners;\n    this._charter = charter;\n    this._orderedParticipants = orderedParticipants;\n  }\n\n  /**\n   * Create a new DKG invite.\n   *\n   * Port of `DkgInvite::new()` from group_invite.rs lines 30-67.\n   */\n  static create(\n    requestId: ARID,\n    sender: XIDDocument,\n    groupId: ARID,\n    date: Date,\n    validUntil: Date,\n    minSigners: number,\n    charter: string,\n    participants: string[],\n    responseArids: ARID[],\n  ): DkgInvite {\n    if (participants.length !== responseArids.length) {\n      throw new Error(\n        `Number of participants (${participants.length}) does not match number of response ARIDs (${responseArids.length})`,\n      );\n    }\n\n    if (minSigners < 2) {\n      throw new Error(\"min_signers must be at least 2\");\n    }\n\n    const orderedParticipants = participants.map((urString, i) =>\n      DkgProposedParticipant.create(urString, responseArids[i]),\n    );\n\n    if (minSigners > orderedParticipants.length) {\n      throw new Error(\"min_signers cannot exceed number of participants\");\n    }\n\n    // Sort by XID\n    orderedParticipants.sort((a, b) => a.compareTo(b));\n\n    return new DkgInvite(\n      requestId,\n      sender,\n      groupId,\n      date,\n      validUntil,\n      minSigners,\n      charter,\n      orderedParticipants,\n    );\n  }\n\n  requestId(): ARID {\n    return this._requestId;\n  }\n\n  sender(): XIDDocument {\n    return this._sender;\n  }\n\n  groupId(): ARID {\n    return this._groupId;\n  }\n\n  date(): Date {\n    return this._date;\n  }\n\n  validUntil(): Date {\n    return this._validUntil;\n  }\n\n  minSigners(): number {\n    return this._minSigners;\n  }\n\n  charter(): string {\n    return this._charter;\n  }\n\n  participants(): DkgProposedParticipant[] {\n    return this._orderedParticipants;\n  }\n\n  /**\n   * Create a GSTP sealed request from this invite.\n   *\n   * Port of `DkgInvite::to_request()` from group_invite.rs lines 87-121.\n   */\n  toRequest(): SealedRequest {\n    let request = SealedRequest.new(\"dkgInvite\", this.requestId(), this.sender())\n      .withParameter(\"group\", this.groupId())\n      .withParameter(\"minSigners\", BigInt(this.minSigners()))\n      .withParameter(\"charter\", this.charter())\n      .withDate(this.date())\n      .withParameter(\"validUntil\", CborDate.fromDatetime(this.validUntil()));\n\n    for (const participant of this.participants()) {\n      const xidDocumentEnvelope = participant.xidDocumentEnvelope();\n      const responseArid = participant.responseArid();\n      const encryptionKey = participant.xidDocument().encryptionKey();\n\n      if (encryptionKey === undefined) {\n        throw new Error(\"Participant XID document has no encryption key\");\n      }\n\n      const encryptedResponseArid = Envelope.new(responseArid).encryptToRecipients([encryptionKey]);\n\n      const participantEnvelope = xidDocumentEnvelope\n        .wrap()\n        .addAssertion(\"response_arid\", encryptedResponseArid);\n\n      request = request.withParameter(\"participant\", participantEnvelope);\n    }\n\n    return request;\n  }\n\n  /**\n   * Creates a signed but unencrypted envelope for auditing/preview.\n   *\n   * Port of `DkgInvite::to_unsealed_envelope()` from group_invite.rs lines 124-139.\n   */\n  toUnsealedEnvelope(): Envelope {\n    const request = this.toRequest();\n    const sender = this.sender();\n    const signerPrivateKeys = sender.inceptionPrivateKeys();\n\n    if (signerPrivateKeys === undefined) {\n      throw new Error(\"Sender XID document has no inception signing key\");\n    }\n\n    return request.toEnvelope(\n      this.validUntil(),\n      signerPrivateKeys,\n      undefined, // No recipient = signed but not encrypted\n    );\n  }\n\n  /**\n   * Creates a sealed envelope encrypted to all participants.\n   *\n   * Port of `DkgInvite::to_envelope()` from group_invite.rs lines 142-166.\n   */\n  toEnvelope(): Envelope {\n    const request = this.toRequest();\n    const sender = this.sender();\n    const signerPrivateKeys = sender.inceptionPrivateKeys();\n\n    if (signerPrivateKeys === undefined) {\n      throw new Error(\"Sender XID document has no inception signing key\");\n    }\n\n    const recipients = this.participants().map((p) => p.xidDocument());\n\n    return request.toEnvelopeForRecipients(this.validUntil(), signerPrivateKeys, recipients);\n  }\n}\n\n/**\n * DKG Invitation - represents a received invitation from a participant's perspective.\n *\n * Port of `struct DkgInvitation` from group_invite.rs lines 175-186.\n */\nexport class DkgInvitation {\n  private readonly _responseArid: ARID;\n  private readonly _validUntil: Date;\n  private readonly _sender: XIDDocument;\n  private readonly _requestId: ARID;\n  private readonly _peerContinuation: Envelope | undefined;\n  private readonly _minSigners: number;\n  private readonly _charter: string;\n  private readonly _groupId: ARID;\n\n  private constructor(\n    responseArid: ARID,\n    validUntil: Date,\n    sender: XIDDocument,\n    requestId: ARID,\n    peerContinuation: Envelope | undefined,\n    minSigners: number,\n    charter: string,\n    groupId: ARID,\n  ) {\n    this._responseArid = responseArid;\n    this._validUntil = validUntil;\n    this._sender = sender;\n    this._requestId = requestId;\n    this._peerContinuation = peerContinuation;\n    this._minSigners = minSigners;\n    this._charter = charter;\n    this._groupId = groupId;\n  }\n\n  responseArid(): ARID {\n    return this._responseArid;\n  }\n\n  validUntil(): Date {\n    return this._validUntil;\n  }\n\n  sender(): XIDDocument {\n    return this._sender;\n  }\n\n  requestId(): ARID {\n    return this._requestId;\n  }\n\n  peerContinuation(): Envelope | undefined {\n    return this._peerContinuation;\n  }\n\n  minSigners(): number {\n    return this._minSigners;\n  }\n\n  charter(): string {\n    return this._charter;\n  }\n\n  groupId(): ARID {\n    return this._groupId;\n  }\n\n  /**\n   * Build a GSTP response for this invitation result.\n   *\n   * Port of `DkgInvitation::to_response()` from group_invite.rs lines 207-224.\n   */\n  toResponse(response: DkgInvitationResult, recipient: XIDDocument): SealedResponse {\n    let base: SealedResponse;\n    if (response.type === \"accepted\") {\n      base = SealedResponse.newSuccess(this.requestId(), recipient);\n    } else {\n      base = SealedResponse.newFailure(this.requestId(), recipient).withError(response.reason);\n    }\n\n    return base.withPeerContinuation(this.peerContinuation());\n  }\n\n  /**\n   * Create a signed/encrypted GSTP envelope containing the response for the coordinator.\n   *\n   * Port of `DkgInvitation::to_envelope()` from group_invite.rs lines 228-244.\n   */\n  toEnvelope(response: DkgInvitationResult, recipient: XIDDocument): Envelope {\n    const responseObj = this.toResponse(response, recipient);\n    const signerPrivateKeys = recipient.inceptionPrivateKeys();\n\n    if (signerPrivateKeys === undefined) {\n      throw new Error(\"Recipient XID document has no signing keys\");\n    }\n\n    const recipients = [this.sender()];\n\n    return responseObj.toEnvelopeForRecipients(this.validUntil(), signerPrivateKeys, recipients);\n  }\n\n  /**\n   * Parse a DKG invitation from an invite envelope.\n   *\n   * Port of `DkgInvitation::from_invite()` from group_invite.rs lines 255-344.\n   */\n  static fromInvite(\n    invite: Envelope,\n    now: Date,\n    expectedSender: XIDDocument | undefined,\n    recipient: XIDDocument,\n  ): DkgInvitation {\n    const recipientPrivateKeys = recipient.inceptionPrivateKeys();\n\n    if (recipientPrivateKeys === undefined) {\n      throw new Error(\"Recipient XID document has no inception private keys\");\n    }\n\n    const sealedRequest = SealedRequest.tryFromEnvelope(\n      invite,\n      undefined,\n      now,\n      recipientPrivateKeys,\n    );\n\n    // Rust `group_invite.rs:275-279` uses `!=` on `XID`, which is the\n    // derived `PartialEq` (byte-wise compare on the 32-byte ARID). TS\n    // `!==` is reference identity — two distinct XID instances with\n    // the same bytes would fail. Compare via hex equality instead.\n    if (\n      expectedSender !== undefined &&\n      !sealedRequest.sender().xid().equals(expectedSender.xid())\n    ) {\n      throw new Error(\"Invite sender does not match expected sender\");\n    }\n\n    if (!sealedRequest.request().function().equals(EnvelopeFunction.fromString(\"dkgInvite\"))) {\n      throw new Error(\"Unexpected invite function\");\n    }\n\n    const validUntil = sealedRequest.extractObjectForParameter<Date>(\"validUntil\");\n\n    if (validUntil <= now) {\n      throw new Error(\"Invitation expired\");\n    }\n\n    const recipientXid = recipient.xid();\n    const minSigners = sealedRequest.extractObjectForParameter<number>(\"minSigners\");\n    const charter = sealedRequest.extractObjectForParameter<string>(\"charter\");\n    const groupId = sealedRequest.extractObjectForParameter<ARID>(\"group\");\n    const participantObjects = sealedRequest.objectsForParameter(\"participant\");\n\n    if (minSigners < 2) {\n      throw new Error(\"min_signers must be at least 2\");\n    }\n\n    if (minSigners > participantObjects.length) {\n      throw new Error(\"min_signers exceeds participant count\");\n    }\n\n    for (const participant of participantObjects) {\n      const xidDocumentEnvelope = participant.tryUnwrap();\n      const xidDocument = XIDDocument.fromEnvelope(\n        xidDocumentEnvelope,\n        undefined,\n        XIDVerifySignature.Inception,\n      );\n\n      // Rust `group_invite.rs` compares via `XID::PartialEq` (byte-wise).\n      // TS reference identity would never match for two distinct\n      // `XID` instances representing the same identity.\n      if (!xidDocument.xid().equals(recipientXid)) {\n        continue;\n      }\n\n      const encryptedResponseArid = participant.objectForPredicate(\"response_arid\");\n      const responseAridEnvelope = encryptedResponseArid.decryptToRecipient(recipientPrivateKeys);\n      const responseArid: ARID = responseAridEnvelope.extractSubject((cbor) =>\n        ARID.fromTaggedCbor(cbor),\n      );\n\n      return new DkgInvitation(\n        responseArid,\n        validUntil,\n        sealedRequest.sender(),\n        sealedRequest.request().id(),\n        sealedRequest.peerContinuation(),\n        minSigners,\n        charter,\n        groupId,\n      );\n    }\n\n    throw new Error(\"Recipient not found in invite\");\n  }\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;AA8BA,SAAgB,WAAgC;AAC9C,QAAO,EAAE,MAAM,YAAY;;;;;AAM7B,SAAgB,SAAS,QAAqC;AAC5D,QAAO;EAAE,MAAM;EAAY;EAAQ;;;;;;;AAQrC,IAAa,YAAb,MAAa,UAAU;CACrB;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CAEA,YACE,WACA,QACA,SACA,MACA,YACA,YACA,SACA,qBACA;AACA,OAAK,aAAa;AAClB,OAAK,UAAU;AACf,OAAK,WAAW;AAChB,OAAK,QAAQ;AACb,OAAK,cAAc;AACnB,OAAK,cAAc;AACnB,OAAK,WAAW;AAChB,OAAK,uBAAuB;;;;;;;CAQ9B,OAAO,OACL,WACA,QACA,SACA,MACA,YACA,YACA,SACA,cACA,eACW;AACX,MAAI,aAAa,WAAW,cAAc,OACxC,OAAM,IAAI,MACR,2BAA2B,aAAa,OAAO,6CAA6C,cAAc,OAAO,GAClH;AAGH,MAAI,aAAa,EACf,OAAM,IAAI,MAAM,iCAAiC;EAGnD,MAAM,sBAAsB,aAAa,KAAK,UAAU,MACtDA,6BAAAA,uBAAuB,OAAO,UAAU,cAAc,GAAG,CAC1D;AAED,MAAI,aAAa,oBAAoB,OACnC,OAAM,IAAI,MAAM,mDAAmD;AAIrE,sBAAoB,MAAM,GAAG,MAAM,EAAE,UAAU,EAAE,CAAC;AAElD,SAAO,IAAI,UACT,WACA,QACA,SACA,MACA,YACA,YACA,SACA,oBACD;;CAGH,YAAkB;AAChB,SAAO,KAAK;;CAGd,SAAsB;AACpB,SAAO,KAAK;;CAGd,UAAgB;AACd,SAAO,KAAK;;CAGd,OAAa;AACX,SAAO,KAAK;;CAGd,aAAmB;AACjB,SAAO,KAAK;;CAGd,aAAqB;AACnB,SAAO,KAAK;;CAGd,UAAkB;AAChB,SAAO,KAAK;;CAGd,eAAyC;AACvC,SAAO,KAAK;;;;;;;CAQd,YAA2B;EACzB,IAAI,UAAUC,WAAAA,cAAc,IAAI,aAAa,KAAK,WAAW,EAAE,KAAK,QAAQ,CAAC,CAC1E,cAAc,SAAS,KAAK,SAAS,CAAC,CACtC,cAAc,cAAc,OAAO,KAAK,YAAY,CAAC,CAAC,CACtD,cAAc,WAAW,KAAK,SAAS,CAAC,CACxC,SAAS,KAAK,MAAM,CAAC,CACrB,cAAc,cAAcC,YAAAA,SAAS,aAAa,KAAK,YAAY,CAAC,CAAC;AAExE,OAAK,MAAM,eAAe,KAAK,cAAc,EAAE;GAC7C,MAAM,sBAAsB,YAAY,qBAAqB;GAC7D,MAAM,eAAe,YAAY,cAAc;GAC/C,MAAM,gBAAgB,YAAY,aAAa,CAAC,eAAe;AAE/D,OAAI,kBAAkB,KAAA,EACpB,OAAM,IAAI,MAAM,iDAAiD;GAGnE,MAAM,wBAAwBC,eAAAA,SAAS,IAAI,aAAa,CAAC,oBAAoB,CAAC,cAAc,CAAC;GAE7F,MAAM,sBAAsB,oBACzB,MAAM,CACN,aAAa,iBAAiB,sBAAsB;AAEvD,aAAU,QAAQ,cAAc,eAAe,oBAAoB;;AAGrE,SAAO;;;;;;;CAQT,qBAA+B;EAC7B,MAAM,UAAU,KAAK,WAAW;EAEhC,MAAM,oBADS,KAAK,QACY,CAAC,sBAAsB;AAEvD,MAAI,sBAAsB,KAAA,EACxB,OAAM,IAAI,MAAM,mDAAmD;AAGrE,SAAO,QAAQ,WACb,KAAK,YAAY,EACjB,mBACA,KAAA,EACD;;;;;;;CAQH,aAAuB;EACrB,MAAM,UAAU,KAAK,WAAW;EAEhC,MAAM,oBADS,KAAK,QACY,CAAC,sBAAsB;AAEvD,MAAI,sBAAsB,KAAA,EACxB,OAAM,IAAI,MAAM,mDAAmD;EAGrE,MAAM,aAAa,KAAK,cAAc,CAAC,KAAK,MAAM,EAAE,aAAa,CAAC;AAElE,SAAO,QAAQ,wBAAwB,KAAK,YAAY,EAAE,mBAAmB,WAAW;;;;;;;;AAS5F,IAAa,gBAAb,MAAa,cAAc;CACzB;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CAEA,YACE,cACA,YACA,QACA,WACA,kBACA,YACA,SACA,SACA;AACA,OAAK,gBAAgB;AACrB,OAAK,cAAc;AACnB,OAAK,UAAU;AACf,OAAK,aAAa;AAClB,OAAK,oBAAoB;AACzB,OAAK,cAAc;AACnB,OAAK,WAAW;AAChB,OAAK,WAAW;;CAGlB,eAAqB;AACnB,SAAO,KAAK;;CAGd,aAAmB;AACjB,SAAO,KAAK;;CAGd,SAAsB;AACpB,SAAO,KAAK;;CAGd,YAAkB;AAChB,SAAO,KAAK;;CAGd,mBAAyC;AACvC,SAAO,KAAK;;CAGd,aAAqB;AACnB,SAAO,KAAK;;CAGd,UAAkB;AAChB,SAAO,KAAK;;CAGd,UAAgB;AACd,SAAO,KAAK;;;;;;;CAQd,WAAW,UAA+B,WAAwC;EAChF,IAAI;AACJ,MAAI,SAAS,SAAS,WACpB,QAAOC,WAAAA,eAAe,WAAW,KAAK,WAAW,EAAE,UAAU;MAE7D,QAAOA,WAAAA,eAAe,WAAW,KAAK,WAAW,EAAE,UAAU,CAAC,UAAU,SAAS,OAAO;AAG1F,SAAO,KAAK,qBAAqB,KAAK,kBAAkB,CAAC;;;;;;;CAQ3D,WAAW,UAA+B,WAAkC;EAC1E,MAAM,cAAc,KAAK,WAAW,UAAU,UAAU;EACxD,MAAM,oBAAoB,UAAU,sBAAsB;AAE1D,MAAI,sBAAsB,KAAA,EACxB,OAAM,IAAI,MAAM,6CAA6C;EAG/D,MAAM,aAAa,CAAC,KAAK,QAAQ,CAAC;AAElC,SAAO,YAAY,wBAAwB,KAAK,YAAY,EAAE,mBAAmB,WAAW;;;;;;;CAQ9F,OAAO,WACL,QACA,KACA,gBACA,WACe;EACf,MAAM,uBAAuB,UAAU,sBAAsB;AAE7D,MAAI,yBAAyB,KAAA,EAC3B,OAAM,IAAI,MAAM,uDAAuD;EAGzE,MAAM,gBAAgBH,WAAAA,cAAc,gBAClC,QACA,KAAA,GACA,KACA,qBACD;AAMD,MACE,mBAAmB,KAAA,KACnB,CAAC,cAAc,QAAQ,CAAC,KAAK,CAAC,OAAO,eAAe,KAAK,CAAC,CAE1D,OAAM,IAAI,MAAM,+CAA+C;AAGjE,MAAI,CAAC,cAAc,SAAS,CAAC,UAAU,CAAC,OAAOI,eAAAA,SAAiB,WAAW,YAAY,CAAC,CACtF,OAAM,IAAI,MAAM,6BAA6B;EAG/C,MAAM,aAAa,cAAc,0BAAgC,aAAa;AAE9E,MAAI,cAAc,IAChB,OAAM,IAAI,MAAM,qBAAqB;EAGvC,MAAM,eAAe,UAAU,KAAK;EACpC,MAAM,aAAa,cAAc,0BAAkC,aAAa;EAChF,MAAM,UAAU,cAAc,0BAAkC,UAAU;EAC1E,MAAM,UAAU,cAAc,0BAAgC,QAAQ;EACtE,MAAM,qBAAqB,cAAc,oBAAoB,cAAc;AAE3E,MAAI,aAAa,EACf,OAAM,IAAI,MAAM,iCAAiC;AAGnD,MAAI,aAAa,mBAAmB,OAClC,OAAM,IAAI,MAAM,wCAAwC;AAG1D,OAAK,MAAM,eAAe,oBAAoB;GAC5C,MAAM,sBAAsB,YAAY,WAAW;AAUnD,OAAI,CATgBC,UAAAA,YAAY,aAC9B,qBACA,KAAA,GACAC,UAAAA,mBAAmB,UAML,CAAC,KAAK,CAAC,OAAO,aAAa,CACzC;AASF,UAAO,IAAI,cANmB,YAAY,mBAAmB,gBACX,CAAC,mBAAmB,qBACvB,CAAC,gBAAgB,SAC9DC,iBAAAA,KAAK,eAAe,KAAK,CAIb,EACZ,YACA,cAAc,QAAQ,EACtB,cAAc,SAAS,CAAC,IAAI,EAC5B,cAAc,kBAAkB,EAChC,YACA,SACA,QACD;;AAGH,QAAM,IAAI,MAAM,gCAAgC"}

package/dist/dkg/index.d.cts

@@ -1,2 +1,2 @@
-import { a as declined, i as accepted, n as DkgInvitationResult, o as DkgProposedParticipant, r as DkgInvite, t as DkgInvitation } from "../index-DmxfT59Y.cjs";
-export { DkgInvitation, DkgInvitationResult, DkgInvite, DkgProposedParticipant, accepted, declined };
+import { a as declined, i as accepted, n as DkgInvitationResult, o as DkgProposedParticipant, r as DkgInvite, s as compareXidBytes, t as DkgInvitation } from "../index-B3c-80VS.cjs";
+export { DkgInvitation, DkgInvitationResult, DkgInvite, DkgProposedParticipant, accepted, compareXidBytes, declined };

package/dist/dkg/index.d.mts

@@ -1,2 +1,2 @@
-import { a as declined, i as accepted, n as DkgInvitationResult, o as DkgProposedParticipant, r as DkgInvite, t as DkgInvitation } from "../index-BkqLimZT.mjs";
-export { DkgInvitation, DkgInvitationResult, DkgInvite, DkgProposedParticipant, accepted, declined };
+import { a as declined, i as accepted, n as DkgInvitationResult, o as DkgProposedParticipant, r as DkgInvite, s as compareXidBytes, t as DkgInvitation } from "../index-D3QTWkEm.mjs";
+export { DkgInvitation, DkgInvitationResult, DkgInvite, DkgProposedParticipant, accepted, compareXidBytes, declined };

package/dist/dkg/index.mjs

@@ -1,106 +1,9 @@
+import { n as compareXidBytes, t as DkgProposedParticipant } from "../proposed-participant-cWM7iUrO.mjs";
 import { ARID } from "@bcts/components";
 import { CborDate } from "@bcts/dcbor";
 import { Envelope, Function } from "@bcts/envelope";
 import { SealedRequest, SealedResponse } from "@bcts/gstp";
 import { XIDDocument, XIDVerifySignature } from "@bcts/xid";
-import { UR } from "@bcts/uniform-resources";
-//#region src/dkg/proposed-participant.ts
-/**
-* A proposed participant in a DKG session.
-*
-* Port of `struct DkgProposedParticipant` from proposed_participant.rs lines 8-13.
-*/
-var DkgProposedParticipant = class DkgProposedParticipant {
-	_urString;
-	_envelope;
-	_document;
-	_responseArid;
-	constructor(urString, envelope, document, responseArid) {
-		this._urString = urString;
-		this._envelope = envelope;
-		this._document = document;
-		this._responseArid = responseArid;
-	}
-	/**
-	* Create a new DkgProposedParticipant from a UR string and response ARID.
-	*
-	* Port of `DkgProposedParticipant::new()` from proposed_participant.rs lines 22-26.
-	*/
-	static create(urString, responseArid) {
-		const [envelope, document] = parseXidEnvelope(urString);
-		return new DkgProposedParticipant(urString, envelope, document, responseArid);
-	}
-	/**
-	* Get the XID of this participant.
-	*
-	* Port of `DkgProposedParticipant::xid()` from proposed_participant.rs line 28.
-	*/
-	xid() {
-		return this._document.xid();
-	}
-	/**
-	* Get the XID document of this participant.
-	*
-	* Port of `DkgProposedParticipant::xid_document()` from proposed_participant.rs line 30.
-	*/
-	xidDocument() {
-		return this._document;
-	}
-	/**
-	* Get the UR string of the XID document.
-	*
-	* Port of `DkgProposedParticipant::xid_document_ur()` from proposed_participant.rs line 32.
-	*/
-	xidDocumentUr() {
-		return this._urString;
-	}
-	/**
-	* Get the envelope containing the XID document.
-	*
-	* Port of `DkgProposedParticipant::xid_document_envelope()` from proposed_participant.rs line 34.
-	*/
-	xidDocumentEnvelope() {
-		return this._envelope;
-	}
-	/**
-	* Get the response ARID for this participant.
-	*
-	* Port of `DkgProposedParticipant::response_arid()` from proposed_participant.rs line 36.
-	*/
-	responseArid() {
-		return this._responseArid;
-	}
-	/**
-	* Compare participants by XID for sorting.
-	*/
-	compareTo(other) {
-		const thisXid = this.xid().toString();
-		const otherXid = other.xid().toString();
-		return thisXid.localeCompare(otherXid);
-	}
-};
-/**
-* Parse a XID envelope from a UR string.
-*
-* Port of `parse_xid_envelope()` from proposed_participant.rs lines 39-60.
-*/
-function parseXidEnvelope(input) {
-	const trimmed = input.trim();
-	if (trimmed.length === 0) throw new Error("XID document is required");
-	const ur = UR.fromURString(trimmed);
-	const urType = ur.urTypeStr();
-	if (urType !== "xid" && urType !== "envelope") throw new Error(`Expected a ur:xid document, found ur:${urType}`);
-	const envelopeCbor = ur.cbor();
-	let envelope;
-	try {
-		envelope = Envelope.fromTaggedCbor(envelopeCbor);
-	} catch {
-		envelope = Envelope.fromUntaggedCbor(envelopeCbor);
-	}
-	const document = XIDDocument.fromEnvelope(envelope, void 0, XIDVerifySignature.Inception);
-	return [envelope, document];
-}
-//#endregion
 //#region src/dkg/group-invite.ts
 /**
 * Copyright © 2023-2026 Blockchain Commons, LLC
@@ -311,7 +214,7 @@ var DkgInvitation = class DkgInvitation {
 		const recipientPrivateKeys = recipient.inceptionPrivateKeys();
 		if (recipientPrivateKeys === void 0) throw new Error("Recipient XID document has no inception private keys");
 		const sealedRequest = SealedRequest.tryFromEnvelope(invite, void 0, now, recipientPrivateKeys);
-		if (expectedSender !== void 0 && sealedRequest.sender().xid() !== expectedSender.xid()) throw new Error("Invite sender does not match expected sender");
+		if (expectedSender !== void 0 && !sealedRequest.sender().xid().equals(expectedSender.xid())) throw new Error("Invite sender does not match expected sender");
 		if (!sealedRequest.request().function().equals(Function.fromString("dkgInvite"))) throw new Error("Unexpected invite function");
 		const validUntil = sealedRequest.extractObjectForParameter("validUntil");
 		if (validUntil <= now) throw new Error("Invitation expired");
@@ -324,13 +227,13 @@ var DkgInvitation = class DkgInvitation {
 		if (minSigners > participantObjects.length) throw new Error("min_signers exceeds participant count");
 		for (const participant of participantObjects) {
 			const xidDocumentEnvelope = participant.tryUnwrap();
-			if (XIDDocument.fromEnvelope(xidDocumentEnvelope, void 0, XIDVerifySignature.Inception).xid() !== recipientXid) continue;
+			if (!XIDDocument.fromEnvelope(xidDocumentEnvelope, void 0, XIDVerifySignature.Inception).xid().equals(recipientXid)) continue;
 			return new DkgInvitation(participant.objectForPredicate("response_arid").decryptToRecipient(recipientPrivateKeys).extractSubject((cbor) => ARID.fromTaggedCbor(cbor)), validUntil, sealedRequest.sender(), sealedRequest.request().id(), sealedRequest.peerContinuation(), minSigners, charter, groupId);
 		}
 		throw new Error("Recipient not found in invite");
 	}
 };
 //#endregion
-export { DkgInvitation, DkgInvite, DkgProposedParticipant, accepted, declined };
+export { DkgInvitation, DkgInvite, DkgProposedParticipant, accepted, compareXidBytes, declined };
 
 //# sourceMappingURL=index.mjs.map

package/dist/dkg/index.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"index.mjs","names":["EnvelopeFunction"],"sources":["../../src/dkg/proposed-participant.ts","../../src/dkg/group-invite.ts"],"sourcesContent":["/**\n * Copyright © 2023-2026 Blockchain Commons, LLC\n * Copyright © 2025-2026 Parity Technologies\n *\n *\n * DKG Proposed Participant.\n *\n * Port of dkg/proposed_participant.rs from frost-hubert-rust.\n *\n * @module\n */\n\nimport { type ARID, type XID } from \"@bcts/components\";\nimport { Envelope } from \"@bcts/envelope\";\nimport { UR } from \"@bcts/uniform-resources\";\nimport { XIDDocument, XIDVerifySignature } from \"@bcts/xid\";\n\n/**\n * A proposed participant in a DKG session.\n *\n * Port of `struct DkgProposedParticipant` from proposed_participant.rs lines 8-13.\n */\nexport class DkgProposedParticipant {\n  private readonly _urString: string;\n  private readonly _envelope: Envelope;\n  private readonly _document: XIDDocument;\n  private readonly _responseArid: ARID;\n\n  private constructor(\n    urString: string,\n    envelope: Envelope,\n    document: XIDDocument,\n    responseArid: ARID,\n  ) {\n    this._urString = urString;\n    this._envelope = envelope;\n    this._document = document;\n    this._responseArid = responseArid;\n  }\n\n  /**\n   * Create a new DkgProposedParticipant from a UR string and response ARID.\n   *\n   * Port of `DkgProposedParticipant::new()` from proposed_participant.rs lines 22-26.\n   */\n  static create(urString: string, responseArid: ARID): DkgProposedParticipant {\n    const [envelope, document] = parseXidEnvelope(urString);\n    return new DkgProposedParticipant(urString, envelope, document, responseArid);\n  }\n\n  /**\n   * Get the XID of this participant.\n   *\n   * Port of `DkgProposedParticipant::xid()` from proposed_participant.rs line 28.\n   */\n  xid(): XID {\n    return this._document.xid();\n  }\n\n  /**\n   * Get the XID document of this participant.\n   *\n   * Port of `DkgProposedParticipant::xid_document()` from proposed_participant.rs line 30.\n   */\n  xidDocument(): XIDDocument {\n    return this._document;\n  }\n\n  /**\n   * Get the UR string of the XID document.\n   *\n   * Port of `DkgProposedParticipant::xid_document_ur()` from proposed_participant.rs line 32.\n   */\n  xidDocumentUr(): string {\n    return this._urString;\n  }\n\n  /**\n   * Get the envelope containing the XID document.\n   *\n   * Port of `DkgProposedParticipant::xid_document_envelope()` from proposed_participant.rs line 34.\n   */\n  xidDocumentEnvelope(): Envelope {\n    return this._envelope;\n  }\n\n  /**\n   * Get the response ARID for this participant.\n   *\n   * Port of `DkgProposedParticipant::response_arid()` from proposed_participant.rs line 36.\n   */\n  responseArid(): ARID {\n    return this._responseArid;\n  }\n\n  /**\n   * Compare participants by XID for sorting.\n   */\n  compareTo(other: DkgProposedParticipant): number {\n    const thisXid = this.xid().toString();\n    const otherXid = other.xid().toString();\n    return thisXid.localeCompare(otherXid);\n  }\n}\n\n/**\n * Parse a XID envelope from a UR string.\n *\n * Port of `parse_xid_envelope()` from proposed_participant.rs lines 39-60.\n */\nfunction parseXidEnvelope(input: string): [Envelope, XIDDocument] {\n  const trimmed = input.trim();\n  if (trimmed.length === 0) {\n    throw new Error(\"XID document is required\");\n  }\n\n  const ur = UR.fromURString(trimmed);\n  const urType = ur.urTypeStr();\n  if (urType !== \"xid\" && urType !== \"envelope\") {\n    throw new Error(`Expected a ur:xid document, found ur:${urType}`);\n  }\n\n  const envelopeCbor = ur.cbor();\n  // Try tagged CBOR first, then untagged\n  let envelope: Envelope;\n  try {\n    envelope = Envelope.fromTaggedCbor(envelopeCbor);\n  } catch {\n    envelope = Envelope.fromUntaggedCbor(envelopeCbor);\n  }\n\n  const document = XIDDocument.fromEnvelope(envelope, undefined, XIDVerifySignature.Inception);\n\n  return [envelope, document];\n}\n","/**\n * Copyright © 2023-2026 Blockchain Commons, LLC\n * Copyright © 2025-2026 Parity Technologies\n *\n *\n * DKG Group Invite structures.\n *\n * Port of dkg/group_invite.rs from frost-hubert-rust.\n *\n * @module\n */\n\nimport { ARID } from \"@bcts/components\";\nimport { CborDate } from \"@bcts/dcbor\";\nimport { Envelope, Function as EnvelopeFunction } from \"@bcts/envelope\";\nimport { SealedRequest, SealedResponse } from \"@bcts/gstp\";\nimport { XIDDocument, XIDVerifySignature } from \"@bcts/xid\";\n\nimport { DkgProposedParticipant } from \"./proposed-participant.js\";\n\n/**\n * Result of a DKG invitation.\n *\n * Port of `enum DkgInvitationResult` from group_invite.rs lines 170-173.\n */\nexport type DkgInvitationResult = { type: \"accepted\" } | { type: \"declined\"; reason: string };\n\n/**\n * Helper to create an accepted result.\n */\nexport function accepted(): DkgInvitationResult {\n  return { type: \"accepted\" };\n}\n\n/**\n * Helper to create a declined result.\n */\nexport function declined(reason: string): DkgInvitationResult {\n  return { type: \"declined\", reason };\n}\n\n/**\n * DKG Invite - represents an invitation to participate in a DKG session.\n *\n * Port of `struct DkgInvite` from group_invite.rs lines 11-27.\n */\nexport class DkgInvite {\n  private readonly _requestId: ARID;\n  private readonly _sender: XIDDocument;\n  private readonly _groupId: ARID;\n  private readonly _date: Date;\n  private readonly _validUntil: Date;\n  private readonly _minSigners: number;\n  private readonly _charter: string;\n  private readonly _orderedParticipants: DkgProposedParticipant[];\n\n  private constructor(\n    requestId: ARID,\n    sender: XIDDocument,\n    groupId: ARID,\n    date: Date,\n    validUntil: Date,\n    minSigners: number,\n    charter: string,\n    orderedParticipants: DkgProposedParticipant[],\n  ) {\n    this._requestId = requestId;\n    this._sender = sender;\n    this._groupId = groupId;\n    this._date = date;\n    this._validUntil = validUntil;\n    this._minSigners = minSigners;\n    this._charter = charter;\n    this._orderedParticipants = orderedParticipants;\n  }\n\n  /**\n   * Create a new DKG invite.\n   *\n   * Port of `DkgInvite::new()` from group_invite.rs lines 30-67.\n   */\n  static create(\n    requestId: ARID,\n    sender: XIDDocument,\n    groupId: ARID,\n    date: Date,\n    validUntil: Date,\n    minSigners: number,\n    charter: string,\n    participants: string[],\n    responseArids: ARID[],\n  ): DkgInvite {\n    if (participants.length !== responseArids.length) {\n      throw new Error(\n        `Number of participants (${participants.length}) does not match number of response ARIDs (${responseArids.length})`,\n      );\n    }\n\n    if (minSigners < 2) {\n      throw new Error(\"min_signers must be at least 2\");\n    }\n\n    const orderedParticipants = participants.map((urString, i) =>\n      DkgProposedParticipant.create(urString, responseArids[i]),\n    );\n\n    if (minSigners > orderedParticipants.length) {\n      throw new Error(\"min_signers cannot exceed number of participants\");\n    }\n\n    // Sort by XID\n    orderedParticipants.sort((a, b) => a.compareTo(b));\n\n    return new DkgInvite(\n      requestId,\n      sender,\n      groupId,\n      date,\n      validUntil,\n      minSigners,\n      charter,\n      orderedParticipants,\n    );\n  }\n\n  requestId(): ARID {\n    return this._requestId;\n  }\n\n  sender(): XIDDocument {\n    return this._sender;\n  }\n\n  groupId(): ARID {\n    return this._groupId;\n  }\n\n  date(): Date {\n    return this._date;\n  }\n\n  validUntil(): Date {\n    return this._validUntil;\n  }\n\n  minSigners(): number {\n    return this._minSigners;\n  }\n\n  charter(): string {\n    return this._charter;\n  }\n\n  participants(): DkgProposedParticipant[] {\n    return this._orderedParticipants;\n  }\n\n  /**\n   * Create a GSTP sealed request from this invite.\n   *\n   * Port of `DkgInvite::to_request()` from group_invite.rs lines 87-121.\n   */\n  toRequest(): SealedRequest {\n    let request = SealedRequest.new(\"dkgInvite\", this.requestId(), this.sender())\n      .withParameter(\"group\", this.groupId())\n      .withParameter(\"minSigners\", BigInt(this.minSigners()))\n      .withParameter(\"charter\", this.charter())\n      .withDate(this.date())\n      .withParameter(\"validUntil\", CborDate.fromDatetime(this.validUntil()));\n\n    for (const participant of this.participants()) {\n      const xidDocumentEnvelope = participant.xidDocumentEnvelope();\n      const responseArid = participant.responseArid();\n      const encryptionKey = participant.xidDocument().encryptionKey();\n\n      if (encryptionKey === undefined) {\n        throw new Error(\"Participant XID document has no encryption key\");\n      }\n\n      const encryptedResponseArid = Envelope.new(responseArid).encryptToRecipients([encryptionKey]);\n\n      const participantEnvelope = xidDocumentEnvelope\n        .wrap()\n        .addAssertion(\"response_arid\", encryptedResponseArid);\n\n      request = request.withParameter(\"participant\", participantEnvelope);\n    }\n\n    return request;\n  }\n\n  /**\n   * Creates a signed but unencrypted envelope for auditing/preview.\n   *\n   * Port of `DkgInvite::to_unsealed_envelope()` from group_invite.rs lines 124-139.\n   */\n  toUnsealedEnvelope(): Envelope {\n    const request = this.toRequest();\n    const sender = this.sender();\n    const signerPrivateKeys = sender.inceptionPrivateKeys();\n\n    if (signerPrivateKeys === undefined) {\n      throw new Error(\"Sender XID document has no inception signing key\");\n    }\n\n    return request.toEnvelope(\n      this.validUntil(),\n      signerPrivateKeys,\n      undefined, // No recipient = signed but not encrypted\n    );\n  }\n\n  /**\n   * Creates a sealed envelope encrypted to all participants.\n   *\n   * Port of `DkgInvite::to_envelope()` from group_invite.rs lines 142-166.\n   */\n  toEnvelope(): Envelope {\n    const request = this.toRequest();\n    const sender = this.sender();\n    const signerPrivateKeys = sender.inceptionPrivateKeys();\n\n    if (signerPrivateKeys === undefined) {\n      throw new Error(\"Sender XID document has no inception signing key\");\n    }\n\n    const recipients = this.participants().map((p) => p.xidDocument());\n\n    return request.toEnvelopeForRecipients(this.validUntil(), signerPrivateKeys, recipients);\n  }\n}\n\n/**\n * DKG Invitation - represents a received invitation from a participant's perspective.\n *\n * Port of `struct DkgInvitation` from group_invite.rs lines 175-186.\n */\nexport class DkgInvitation {\n  private readonly _responseArid: ARID;\n  private readonly _validUntil: Date;\n  private readonly _sender: XIDDocument;\n  private readonly _requestId: ARID;\n  private readonly _peerContinuation: Envelope | undefined;\n  private readonly _minSigners: number;\n  private readonly _charter: string;\n  private readonly _groupId: ARID;\n\n  private constructor(\n    responseArid: ARID,\n    validUntil: Date,\n    sender: XIDDocument,\n    requestId: ARID,\n    peerContinuation: Envelope | undefined,\n    minSigners: number,\n    charter: string,\n    groupId: ARID,\n  ) {\n    this._responseArid = responseArid;\n    this._validUntil = validUntil;\n    this._sender = sender;\n    this._requestId = requestId;\n    this._peerContinuation = peerContinuation;\n    this._minSigners = minSigners;\n    this._charter = charter;\n    this._groupId = groupId;\n  }\n\n  responseArid(): ARID {\n    return this._responseArid;\n  }\n\n  validUntil(): Date {\n    return this._validUntil;\n  }\n\n  sender(): XIDDocument {\n    return this._sender;\n  }\n\n  requestId(): ARID {\n    return this._requestId;\n  }\n\n  peerContinuation(): Envelope | undefined {\n    return this._peerContinuation;\n  }\n\n  minSigners(): number {\n    return this._minSigners;\n  }\n\n  charter(): string {\n    return this._charter;\n  }\n\n  groupId(): ARID {\n    return this._groupId;\n  }\n\n  /**\n   * Build a GSTP response for this invitation result.\n   *\n   * Port of `DkgInvitation::to_response()` from group_invite.rs lines 207-224.\n   */\n  toResponse(response: DkgInvitationResult, recipient: XIDDocument): SealedResponse {\n    let base: SealedResponse;\n    if (response.type === \"accepted\") {\n      base = SealedResponse.newSuccess(this.requestId(), recipient);\n    } else {\n      base = SealedResponse.newFailure(this.requestId(), recipient).withError(response.reason);\n    }\n\n    return base.withPeerContinuation(this.peerContinuation());\n  }\n\n  /**\n   * Create a signed/encrypted GSTP envelope containing the response for the coordinator.\n   *\n   * Port of `DkgInvitation::to_envelope()` from group_invite.rs lines 228-244.\n   */\n  toEnvelope(response: DkgInvitationResult, recipient: XIDDocument): Envelope {\n    const responseObj = this.toResponse(response, recipient);\n    const signerPrivateKeys = recipient.inceptionPrivateKeys();\n\n    if (signerPrivateKeys === undefined) {\n      throw new Error(\"Recipient XID document has no signing keys\");\n    }\n\n    const recipients = [this.sender()];\n\n    return responseObj.toEnvelopeForRecipients(this.validUntil(), signerPrivateKeys, recipients);\n  }\n\n  /**\n   * Parse a DKG invitation from an invite envelope.\n   *\n   * Port of `DkgInvitation::from_invite()` from group_invite.rs lines 255-344.\n   */\n  static fromInvite(\n    invite: Envelope,\n    now: Date,\n    expectedSender: XIDDocument | undefined,\n    recipient: XIDDocument,\n  ): DkgInvitation {\n    const recipientPrivateKeys = recipient.inceptionPrivateKeys();\n\n    if (recipientPrivateKeys === undefined) {\n      throw new Error(\"Recipient XID document has no inception private keys\");\n    }\n\n    const sealedRequest = SealedRequest.tryFromEnvelope(\n      invite,\n      undefined,\n      now,\n      recipientPrivateKeys,\n    );\n\n    if (expectedSender !== undefined && sealedRequest.sender().xid() !== expectedSender.xid()) {\n      throw new Error(\"Invite sender does not match expected sender\");\n    }\n\n    if (!sealedRequest.request().function().equals(EnvelopeFunction.fromString(\"dkgInvite\"))) {\n      throw new Error(\"Unexpected invite function\");\n    }\n\n    const validUntil = sealedRequest.extractObjectForParameter<Date>(\"validUntil\");\n\n    if (validUntil <= now) {\n      throw new Error(\"Invitation expired\");\n    }\n\n    const recipientXid = recipient.xid();\n    const minSigners = sealedRequest.extractObjectForParameter<number>(\"minSigners\");\n    const charter = sealedRequest.extractObjectForParameter<string>(\"charter\");\n    const groupId = sealedRequest.extractObjectForParameter<ARID>(\"group\");\n    const participantObjects = sealedRequest.objectsForParameter(\"participant\");\n\n    if (minSigners < 2) {\n      throw new Error(\"min_signers must be at least 2\");\n    }\n\n    if (minSigners > participantObjects.length) {\n      throw new Error(\"min_signers exceeds participant count\");\n    }\n\n    for (const participant of participantObjects) {\n      const xidDocumentEnvelope = participant.tryUnwrap();\n      const xidDocument = XIDDocument.fromEnvelope(\n        xidDocumentEnvelope,\n        undefined,\n        XIDVerifySignature.Inception,\n      );\n\n      if (xidDocument.xid() !== recipientXid) {\n        continue;\n      }\n\n      const encryptedResponseArid = participant.objectForPredicate(\"response_arid\");\n      const responseAridEnvelope = encryptedResponseArid.decryptToRecipient(recipientPrivateKeys);\n      const responseArid: ARID = responseAridEnvelope.extractSubject((cbor) =>\n        ARID.fromTaggedCbor(cbor),\n      );\n\n      return new DkgInvitation(\n        responseArid,\n        validUntil,\n        sealedRequest.sender(),\n        sealedRequest.request().id(),\n        sealedRequest.peerContinuation(),\n        minSigners,\n        charter,\n        groupId,\n      );\n    }\n\n    throw new Error(\"Recipient not found in invite\");\n  }\n}\n"],"mappings":";;;;;;;;;;;;AAsBA,IAAa,yBAAb,MAAa,uBAAuB;CAClC;CACA;CACA;CACA;CAEA,YACE,UACA,UACA,UACA,cACA;AACA,OAAK,YAAY;AACjB,OAAK,YAAY;AACjB,OAAK,YAAY;AACjB,OAAK,gBAAgB;;;;;;;CAQvB,OAAO,OAAO,UAAkB,cAA4C;EAC1E,MAAM,CAAC,UAAU,YAAY,iBAAiB,SAAS;AACvD,SAAO,IAAI,uBAAuB,UAAU,UAAU,UAAU,aAAa;;;;;;;CAQ/E,MAAW;AACT,SAAO,KAAK,UAAU,KAAK;;;;;;;CAQ7B,cAA2B;AACzB,SAAO,KAAK;;;;;;;CAQd,gBAAwB;AACtB,SAAO,KAAK;;;;;;;CAQd,sBAAgC;AAC9B,SAAO,KAAK;;;;;;;CAQd,eAAqB;AACnB,SAAO,KAAK;;;;;CAMd,UAAU,OAAuC;EAC/C,MAAM,UAAU,KAAK,KAAK,CAAC,UAAU;EACrC,MAAM,WAAW,MAAM,KAAK,CAAC,UAAU;AACvC,SAAO,QAAQ,cAAc,SAAS;;;;;;;;AAS1C,SAAS,iBAAiB,OAAwC;CAChE,MAAM,UAAU,MAAM,MAAM;AAC5B,KAAI,QAAQ,WAAW,EACrB,OAAM,IAAI,MAAM,2BAA2B;CAG7C,MAAM,KAAK,GAAG,aAAa,QAAQ;CACnC,MAAM,SAAS,GAAG,WAAW;AAC7B,KAAI,WAAW,SAAS,WAAW,WACjC,OAAM,IAAI,MAAM,wCAAwC,SAAS;CAGnE,MAAM,eAAe,GAAG,MAAM;CAE9B,IAAI;AACJ,KAAI;AACF,aAAW,SAAS,eAAe,aAAa;SAC1C;AACN,aAAW,SAAS,iBAAiB,aAAa;;CAGpD,MAAM,WAAW,YAAY,aAAa,UAAU,KAAA,GAAW,mBAAmB,UAAU;AAE5F,QAAO,CAAC,UAAU,SAAS;;;;;;;;;;;;;;;;;;ACvG7B,SAAgB,WAAgC;AAC9C,QAAO,EAAE,MAAM,YAAY;;;;;AAM7B,SAAgB,SAAS,QAAqC;AAC5D,QAAO;EAAE,MAAM;EAAY;EAAQ;;;;;;;AAQrC,IAAa,YAAb,MAAa,UAAU;CACrB;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CAEA,YACE,WACA,QACA,SACA,MACA,YACA,YACA,SACA,qBACA;AACA,OAAK,aAAa;AAClB,OAAK,UAAU;AACf,OAAK,WAAW;AAChB,OAAK,QAAQ;AACb,OAAK,cAAc;AACnB,OAAK,cAAc;AACnB,OAAK,WAAW;AAChB,OAAK,uBAAuB;;;;;;;CAQ9B,OAAO,OACL,WACA,QACA,SACA,MACA,YACA,YACA,SACA,cACA,eACW;AACX,MAAI,aAAa,WAAW,cAAc,OACxC,OAAM,IAAI,MACR,2BAA2B,aAAa,OAAO,6CAA6C,cAAc,OAAO,GAClH;AAGH,MAAI,aAAa,EACf,OAAM,IAAI,MAAM,iCAAiC;EAGnD,MAAM,sBAAsB,aAAa,KAAK,UAAU,MACtD,uBAAuB,OAAO,UAAU,cAAc,GAAG,CAC1D;AAED,MAAI,aAAa,oBAAoB,OACnC,OAAM,IAAI,MAAM,mDAAmD;AAIrE,sBAAoB,MAAM,GAAG,MAAM,EAAE,UAAU,EAAE,CAAC;AAElD,SAAO,IAAI,UACT,WACA,QACA,SACA,MACA,YACA,YACA,SACA,oBACD;;CAGH,YAAkB;AAChB,SAAO,KAAK;;CAGd,SAAsB;AACpB,SAAO,KAAK;;CAGd,UAAgB;AACd,SAAO,KAAK;;CAGd,OAAa;AACX,SAAO,KAAK;;CAGd,aAAmB;AACjB,SAAO,KAAK;;CAGd,aAAqB;AACnB,SAAO,KAAK;;CAGd,UAAkB;AAChB,SAAO,KAAK;;CAGd,eAAyC;AACvC,SAAO,KAAK;;;;;;;CAQd,YAA2B;EACzB,IAAI,UAAU,cAAc,IAAI,aAAa,KAAK,WAAW,EAAE,KAAK,QAAQ,CAAC,CAC1E,cAAc,SAAS,KAAK,SAAS,CAAC,CACtC,cAAc,cAAc,OAAO,KAAK,YAAY,CAAC,CAAC,CACtD,cAAc,WAAW,KAAK,SAAS,CAAC,CACxC,SAAS,KAAK,MAAM,CAAC,CACrB,cAAc,cAAc,SAAS,aAAa,KAAK,YAAY,CAAC,CAAC;AAExE,OAAK,MAAM,eAAe,KAAK,cAAc,EAAE;GAC7C,MAAM,sBAAsB,YAAY,qBAAqB;GAC7D,MAAM,eAAe,YAAY,cAAc;GAC/C,MAAM,gBAAgB,YAAY,aAAa,CAAC,eAAe;AAE/D,OAAI,kBAAkB,KAAA,EACpB,OAAM,IAAI,MAAM,iDAAiD;GAGnE,MAAM,wBAAwB,SAAS,IAAI,aAAa,CAAC,oBAAoB,CAAC,cAAc,CAAC;GAE7F,MAAM,sBAAsB,oBACzB,MAAM,CACN,aAAa,iBAAiB,sBAAsB;AAEvD,aAAU,QAAQ,cAAc,eAAe,oBAAoB;;AAGrE,SAAO;;;;;;;CAQT,qBAA+B;EAC7B,MAAM,UAAU,KAAK,WAAW;EAEhC,MAAM,oBADS,KAAK,QACY,CAAC,sBAAsB;AAEvD,MAAI,sBAAsB,KAAA,EACxB,OAAM,IAAI,MAAM,mDAAmD;AAGrE,SAAO,QAAQ,WACb,KAAK,YAAY,EACjB,mBACA,KAAA,EACD;;;;;;;CAQH,aAAuB;EACrB,MAAM,UAAU,KAAK,WAAW;EAEhC,MAAM,oBADS,KAAK,QACY,CAAC,sBAAsB;AAEvD,MAAI,sBAAsB,KAAA,EACxB,OAAM,IAAI,MAAM,mDAAmD;EAGrE,MAAM,aAAa,KAAK,cAAc,CAAC,KAAK,MAAM,EAAE,aAAa,CAAC;AAElE,SAAO,QAAQ,wBAAwB,KAAK,YAAY,EAAE,mBAAmB,WAAW;;;;;;;;AAS5F,IAAa,gBAAb,MAAa,cAAc;CACzB;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CAEA,YACE,cACA,YACA,QACA,WACA,kBACA,YACA,SACA,SACA;AACA,OAAK,gBAAgB;AACrB,OAAK,cAAc;AACnB,OAAK,UAAU;AACf,OAAK,aAAa;AAClB,OAAK,oBAAoB;AACzB,OAAK,cAAc;AACnB,OAAK,WAAW;AAChB,OAAK,WAAW;;CAGlB,eAAqB;AACnB,SAAO,KAAK;;CAGd,aAAmB;AACjB,SAAO,KAAK;;CAGd,SAAsB;AACpB,SAAO,KAAK;;CAGd,YAAkB;AAChB,SAAO,KAAK;;CAGd,mBAAyC;AACvC,SAAO,KAAK;;CAGd,aAAqB;AACnB,SAAO,KAAK;;CAGd,UAAkB;AAChB,SAAO,KAAK;;CAGd,UAAgB;AACd,SAAO,KAAK;;;;;;;CAQd,WAAW,UAA+B,WAAwC;EAChF,IAAI;AACJ,MAAI,SAAS,SAAS,WACpB,QAAO,eAAe,WAAW,KAAK,WAAW,EAAE,UAAU;MAE7D,QAAO,eAAe,WAAW,KAAK,WAAW,EAAE,UAAU,CAAC,UAAU,SAAS,OAAO;AAG1F,SAAO,KAAK,qBAAqB,KAAK,kBAAkB,CAAC;;;;;;;CAQ3D,WAAW,UAA+B,WAAkC;EAC1E,MAAM,cAAc,KAAK,WAAW,UAAU,UAAU;EACxD,MAAM,oBAAoB,UAAU,sBAAsB;AAE1D,MAAI,sBAAsB,KAAA,EACxB,OAAM,IAAI,MAAM,6CAA6C;EAG/D,MAAM,aAAa,CAAC,KAAK,QAAQ,CAAC;AAElC,SAAO,YAAY,wBAAwB,KAAK,YAAY,EAAE,mBAAmB,WAAW;;;;;;;CAQ9F,OAAO,WACL,QACA,KACA,gBACA,WACe;EACf,MAAM,uBAAuB,UAAU,sBAAsB;AAE7D,MAAI,yBAAyB,KAAA,EAC3B,OAAM,IAAI,MAAM,uDAAuD;EAGzE,MAAM,gBAAgB,cAAc,gBAClC,QACA,KAAA,GACA,KACA,qBACD;AAED,MAAI,mBAAmB,KAAA,KAAa,cAAc,QAAQ,CAAC,KAAK,KAAK,eAAe,KAAK,CACvF,OAAM,IAAI,MAAM,+CAA+C;AAGjE,MAAI,CAAC,cAAc,SAAS,CAAC,UAAU,CAAC,OAAOA,SAAiB,WAAW,YAAY,CAAC,CACtF,OAAM,IAAI,MAAM,6BAA6B;EAG/C,MAAM,aAAa,cAAc,0BAAgC,aAAa;AAE9E,MAAI,cAAc,IAChB,OAAM,IAAI,MAAM,qBAAqB;EAGvC,MAAM,eAAe,UAAU,KAAK;EACpC,MAAM,aAAa,cAAc,0BAAkC,aAAa;EAChF,MAAM,UAAU,cAAc,0BAAkC,UAAU;EAC1E,MAAM,UAAU,cAAc,0BAAgC,QAAQ;EACtE,MAAM,qBAAqB,cAAc,oBAAoB,cAAc;AAE3E,MAAI,aAAa,EACf,OAAM,IAAI,MAAM,iCAAiC;AAGnD,MAAI,aAAa,mBAAmB,OAClC,OAAM,IAAI,MAAM,wCAAwC;AAG1D,OAAK,MAAM,eAAe,oBAAoB;GAC5C,MAAM,sBAAsB,YAAY,WAAW;AAOnD,OANoB,YAAY,aAC9B,qBACA,KAAA,GACA,mBAAmB,UAGN,CAAC,KAAK,KAAK,aACxB;AASF,UAAO,IAAI,cANmB,YAAY,mBAAmB,gBACX,CAAC,mBAAmB,qBACvB,CAAC,gBAAgB,SAC9D,KAAK,eAAe,KAAK,CAIb,EACZ,YACA,cAAc,QAAQ,EACtB,cAAc,SAAS,CAAC,IAAI,EAC5B,cAAc,kBAAkB,EAChC,YACA,SACA,QACD;;AAGH,QAAM,IAAI,MAAM,gCAAgC"}
+{"version":3,"file":"index.mjs","names":["EnvelopeFunction"],"sources":["../../src/dkg/group-invite.ts"],"sourcesContent":["/**\n * Copyright © 2023-2026 Blockchain Commons, LLC\n * Copyright © 2025-2026 Parity Technologies\n *\n *\n * DKG Group Invite structures.\n *\n * Port of dkg/group_invite.rs from frost-hubert-rust.\n *\n * @module\n */\n\nimport { ARID } from \"@bcts/components\";\nimport { CborDate } from \"@bcts/dcbor\";\nimport { Envelope, Function as EnvelopeFunction } from \"@bcts/envelope\";\nimport { SealedRequest, SealedResponse } from \"@bcts/gstp\";\nimport { XIDDocument, XIDVerifySignature } from \"@bcts/xid\";\n\nimport { DkgProposedParticipant } from \"./proposed-participant.js\";\n\n/**\n * Result of a DKG invitation.\n *\n * Port of `enum DkgInvitationResult` from group_invite.rs lines 170-173.\n */\nexport type DkgInvitationResult = { type: \"accepted\" } | { type: \"declined\"; reason: string };\n\n/**\n * Helper to create an accepted result.\n */\nexport function accepted(): DkgInvitationResult {\n  return { type: \"accepted\" };\n}\n\n/**\n * Helper to create a declined result.\n */\nexport function declined(reason: string): DkgInvitationResult {\n  return { type: \"declined\", reason };\n}\n\n/**\n * DKG Invite - represents an invitation to participate in a DKG session.\n *\n * Port of `struct DkgInvite` from group_invite.rs lines 11-27.\n */\nexport class DkgInvite {\n  private readonly _requestId: ARID;\n  private readonly _sender: XIDDocument;\n  private readonly _groupId: ARID;\n  private readonly _date: Date;\n  private readonly _validUntil: Date;\n  private readonly _minSigners: number;\n  private readonly _charter: string;\n  private readonly _orderedParticipants: DkgProposedParticipant[];\n\n  private constructor(\n    requestId: ARID,\n    sender: XIDDocument,\n    groupId: ARID,\n    date: Date,\n    validUntil: Date,\n    minSigners: number,\n    charter: string,\n    orderedParticipants: DkgProposedParticipant[],\n  ) {\n    this._requestId = requestId;\n    this._sender = sender;\n    this._groupId = groupId;\n    this._date = date;\n    this._validUntil = validUntil;\n    this._minSigners = minSigners;\n    this._charter = charter;\n    this._orderedParticipants = orderedParticipants;\n  }\n\n  /**\n   * Create a new DKG invite.\n   *\n   * Port of `DkgInvite::new()` from group_invite.rs lines 30-67.\n   */\n  static create(\n    requestId: ARID,\n    sender: XIDDocument,\n    groupId: ARID,\n    date: Date,\n    validUntil: Date,\n    minSigners: number,\n    charter: string,\n    participants: string[],\n    responseArids: ARID[],\n  ): DkgInvite {\n    if (participants.length !== responseArids.length) {\n      throw new Error(\n        `Number of participants (${participants.length}) does not match number of response ARIDs (${responseArids.length})`,\n      );\n    }\n\n    if (minSigners < 2) {\n      throw new Error(\"min_signers must be at least 2\");\n    }\n\n    const orderedParticipants = participants.map((urString, i) =>\n      DkgProposedParticipant.create(urString, responseArids[i]),\n    );\n\n    if (minSigners > orderedParticipants.length) {\n      throw new Error(\"min_signers cannot exceed number of participants\");\n    }\n\n    // Sort by XID\n    orderedParticipants.sort((a, b) => a.compareTo(b));\n\n    return new DkgInvite(\n      requestId,\n      sender,\n      groupId,\n      date,\n      validUntil,\n      minSigners,\n      charter,\n      orderedParticipants,\n    );\n  }\n\n  requestId(): ARID {\n    return this._requestId;\n  }\n\n  sender(): XIDDocument {\n    return this._sender;\n  }\n\n  groupId(): ARID {\n    return this._groupId;\n  }\n\n  date(): Date {\n    return this._date;\n  }\n\n  validUntil(): Date {\n    return this._validUntil;\n  }\n\n  minSigners(): number {\n    return this._minSigners;\n  }\n\n  charter(): string {\n    return this._charter;\n  }\n\n  participants(): DkgProposedParticipant[] {\n    return this._orderedParticipants;\n  }\n\n  /**\n   * Create a GSTP sealed request from this invite.\n   *\n   * Port of `DkgInvite::to_request()` from group_invite.rs lines 87-121.\n   */\n  toRequest(): SealedRequest {\n    let request = SealedRequest.new(\"dkgInvite\", this.requestId(), this.sender())\n      .withParameter(\"group\", this.groupId())\n      .withParameter(\"minSigners\", BigInt(this.minSigners()))\n      .withParameter(\"charter\", this.charter())\n      .withDate(this.date())\n      .withParameter(\"validUntil\", CborDate.fromDatetime(this.validUntil()));\n\n    for (const participant of this.participants()) {\n      const xidDocumentEnvelope = participant.xidDocumentEnvelope();\n      const responseArid = participant.responseArid();\n      const encryptionKey = participant.xidDocument().encryptionKey();\n\n      if (encryptionKey === undefined) {\n        throw new Error(\"Participant XID document has no encryption key\");\n      }\n\n      const encryptedResponseArid = Envelope.new(responseArid).encryptToRecipients([encryptionKey]);\n\n      const participantEnvelope = xidDocumentEnvelope\n        .wrap()\n        .addAssertion(\"response_arid\", encryptedResponseArid);\n\n      request = request.withParameter(\"participant\", participantEnvelope);\n    }\n\n    return request;\n  }\n\n  /**\n   * Creates a signed but unencrypted envelope for auditing/preview.\n   *\n   * Port of `DkgInvite::to_unsealed_envelope()` from group_invite.rs lines 124-139.\n   */\n  toUnsealedEnvelope(): Envelope {\n    const request = this.toRequest();\n    const sender = this.sender();\n    const signerPrivateKeys = sender.inceptionPrivateKeys();\n\n    if (signerPrivateKeys === undefined) {\n      throw new Error(\"Sender XID document has no inception signing key\");\n    }\n\n    return request.toEnvelope(\n      this.validUntil(),\n      signerPrivateKeys,\n      undefined, // No recipient = signed but not encrypted\n    );\n  }\n\n  /**\n   * Creates a sealed envelope encrypted to all participants.\n   *\n   * Port of `DkgInvite::to_envelope()` from group_invite.rs lines 142-166.\n   */\n  toEnvelope(): Envelope {\n    const request = this.toRequest();\n    const sender = this.sender();\n    const signerPrivateKeys = sender.inceptionPrivateKeys();\n\n    if (signerPrivateKeys === undefined) {\n      throw new Error(\"Sender XID document has no inception signing key\");\n    }\n\n    const recipients = this.participants().map((p) => p.xidDocument());\n\n    return request.toEnvelopeForRecipients(this.validUntil(), signerPrivateKeys, recipients);\n  }\n}\n\n/**\n * DKG Invitation - represents a received invitation from a participant's perspective.\n *\n * Port of `struct DkgInvitation` from group_invite.rs lines 175-186.\n */\nexport class DkgInvitation {\n  private readonly _responseArid: ARID;\n  private readonly _validUntil: Date;\n  private readonly _sender: XIDDocument;\n  private readonly _requestId: ARID;\n  private readonly _peerContinuation: Envelope | undefined;\n  private readonly _minSigners: number;\n  private readonly _charter: string;\n  private readonly _groupId: ARID;\n\n  private constructor(\n    responseArid: ARID,\n    validUntil: Date,\n    sender: XIDDocument,\n    requestId: ARID,\n    peerContinuation: Envelope | undefined,\n    minSigners: number,\n    charter: string,\n    groupId: ARID,\n  ) {\n    this._responseArid = responseArid;\n    this._validUntil = validUntil;\n    this._sender = sender;\n    this._requestId = requestId;\n    this._peerContinuation = peerContinuation;\n    this._minSigners = minSigners;\n    this._charter = charter;\n    this._groupId = groupId;\n  }\n\n  responseArid(): ARID {\n    return this._responseArid;\n  }\n\n  validUntil(): Date {\n    return this._validUntil;\n  }\n\n  sender(): XIDDocument {\n    return this._sender;\n  }\n\n  requestId(): ARID {\n    return this._requestId;\n  }\n\n  peerContinuation(): Envelope | undefined {\n    return this._peerContinuation;\n  }\n\n  minSigners(): number {\n    return this._minSigners;\n  }\n\n  charter(): string {\n    return this._charter;\n  }\n\n  groupId(): ARID {\n    return this._groupId;\n  }\n\n  /**\n   * Build a GSTP response for this invitation result.\n   *\n   * Port of `DkgInvitation::to_response()` from group_invite.rs lines 207-224.\n   */\n  toResponse(response: DkgInvitationResult, recipient: XIDDocument): SealedResponse {\n    let base: SealedResponse;\n    if (response.type === \"accepted\") {\n      base = SealedResponse.newSuccess(this.requestId(), recipient);\n    } else {\n      base = SealedResponse.newFailure(this.requestId(), recipient).withError(response.reason);\n    }\n\n    return base.withPeerContinuation(this.peerContinuation());\n  }\n\n  /**\n   * Create a signed/encrypted GSTP envelope containing the response for the coordinator.\n   *\n   * Port of `DkgInvitation::to_envelope()` from group_invite.rs lines 228-244.\n   */\n  toEnvelope(response: DkgInvitationResult, recipient: XIDDocument): Envelope {\n    const responseObj = this.toResponse(response, recipient);\n    const signerPrivateKeys = recipient.inceptionPrivateKeys();\n\n    if (signerPrivateKeys === undefined) {\n      throw new Error(\"Recipient XID document has no signing keys\");\n    }\n\n    const recipients = [this.sender()];\n\n    return responseObj.toEnvelopeForRecipients(this.validUntil(), signerPrivateKeys, recipients);\n  }\n\n  /**\n   * Parse a DKG invitation from an invite envelope.\n   *\n   * Port of `DkgInvitation::from_invite()` from group_invite.rs lines 255-344.\n   */\n  static fromInvite(\n    invite: Envelope,\n    now: Date,\n    expectedSender: XIDDocument | undefined,\n    recipient: XIDDocument,\n  ): DkgInvitation {\n    const recipientPrivateKeys = recipient.inceptionPrivateKeys();\n\n    if (recipientPrivateKeys === undefined) {\n      throw new Error(\"Recipient XID document has no inception private keys\");\n    }\n\n    const sealedRequest = SealedRequest.tryFromEnvelope(\n      invite,\n      undefined,\n      now,\n      recipientPrivateKeys,\n    );\n\n    // Rust `group_invite.rs:275-279` uses `!=` on `XID`, which is the\n    // derived `PartialEq` (byte-wise compare on the 32-byte ARID). TS\n    // `!==` is reference identity — two distinct XID instances with\n    // the same bytes would fail. Compare via hex equality instead.\n    if (\n      expectedSender !== undefined &&\n      !sealedRequest.sender().xid().equals(expectedSender.xid())\n    ) {\n      throw new Error(\"Invite sender does not match expected sender\");\n    }\n\n    if (!sealedRequest.request().function().equals(EnvelopeFunction.fromString(\"dkgInvite\"))) {\n      throw new Error(\"Unexpected invite function\");\n    }\n\n    const validUntil = sealedRequest.extractObjectForParameter<Date>(\"validUntil\");\n\n    if (validUntil <= now) {\n      throw new Error(\"Invitation expired\");\n    }\n\n    const recipientXid = recipient.xid();\n    const minSigners = sealedRequest.extractObjectForParameter<number>(\"minSigners\");\n    const charter = sealedRequest.extractObjectForParameter<string>(\"charter\");\n    const groupId = sealedRequest.extractObjectForParameter<ARID>(\"group\");\n    const participantObjects = sealedRequest.objectsForParameter(\"participant\");\n\n    if (minSigners < 2) {\n      throw new Error(\"min_signers must be at least 2\");\n    }\n\n    if (minSigners > participantObjects.length) {\n      throw new Error(\"min_signers exceeds participant count\");\n    }\n\n    for (const participant of participantObjects) {\n      const xidDocumentEnvelope = participant.tryUnwrap();\n      const xidDocument = XIDDocument.fromEnvelope(\n        xidDocumentEnvelope,\n        undefined,\n        XIDVerifySignature.Inception,\n      );\n\n      // Rust `group_invite.rs` compares via `XID::PartialEq` (byte-wise).\n      // TS reference identity would never match for two distinct\n      // `XID` instances representing the same identity.\n      if (!xidDocument.xid().equals(recipientXid)) {\n        continue;\n      }\n\n      const encryptedResponseArid = participant.objectForPredicate(\"response_arid\");\n      const responseAridEnvelope = encryptedResponseArid.decryptToRecipient(recipientPrivateKeys);\n      const responseArid: ARID = responseAridEnvelope.extractSubject((cbor) =>\n        ARID.fromTaggedCbor(cbor),\n      );\n\n      return new DkgInvitation(\n        responseArid,\n        validUntil,\n        sealedRequest.sender(),\n        sealedRequest.request().id(),\n        sealedRequest.peerContinuation(),\n        minSigners,\n        charter,\n        groupId,\n      );\n    }\n\n    throw new Error(\"Recipient not found in invite\");\n  }\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;AA8BA,SAAgB,WAAgC;AAC9C,QAAO,EAAE,MAAM,YAAY;;;;;AAM7B,SAAgB,SAAS,QAAqC;AAC5D,QAAO;EAAE,MAAM;EAAY;EAAQ;;;;;;;AAQrC,IAAa,YAAb,MAAa,UAAU;CACrB;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CAEA,YACE,WACA,QACA,SACA,MACA,YACA,YACA,SACA,qBACA;AACA,OAAK,aAAa;AAClB,OAAK,UAAU;AACf,OAAK,WAAW;AAChB,OAAK,QAAQ;AACb,OAAK,cAAc;AACnB,OAAK,cAAc;AACnB,OAAK,WAAW;AAChB,OAAK,uBAAuB;;;;;;;CAQ9B,OAAO,OACL,WACA,QACA,SACA,MACA,YACA,YACA,SACA,cACA,eACW;AACX,MAAI,aAAa,WAAW,cAAc,OACxC,OAAM,IAAI,MACR,2BAA2B,aAAa,OAAO,6CAA6C,cAAc,OAAO,GAClH;AAGH,MAAI,aAAa,EACf,OAAM,IAAI,MAAM,iCAAiC;EAGnD,MAAM,sBAAsB,aAAa,KAAK,UAAU,MACtD,uBAAuB,OAAO,UAAU,cAAc,GAAG,CAC1D;AAED,MAAI,aAAa,oBAAoB,OACnC,OAAM,IAAI,MAAM,mDAAmD;AAIrE,sBAAoB,MAAM,GAAG,MAAM,EAAE,UAAU,EAAE,CAAC;AAElD,SAAO,IAAI,UACT,WACA,QACA,SACA,MACA,YACA,YACA,SACA,oBACD;;CAGH,YAAkB;AAChB,SAAO,KAAK;;CAGd,SAAsB;AACpB,SAAO,KAAK;;CAGd,UAAgB;AACd,SAAO,KAAK;;CAGd,OAAa;AACX,SAAO,KAAK;;CAGd,aAAmB;AACjB,SAAO,KAAK;;CAGd,aAAqB;AACnB,SAAO,KAAK;;CAGd,UAAkB;AAChB,SAAO,KAAK;;CAGd,eAAyC;AACvC,SAAO,KAAK;;;;;;;CAQd,YAA2B;EACzB,IAAI,UAAU,cAAc,IAAI,aAAa,KAAK,WAAW,EAAE,KAAK,QAAQ,CAAC,CAC1E,cAAc,SAAS,KAAK,SAAS,CAAC,CACtC,cAAc,cAAc,OAAO,KAAK,YAAY,CAAC,CAAC,CACtD,cAAc,WAAW,KAAK,SAAS,CAAC,CACxC,SAAS,KAAK,MAAM,CAAC,CACrB,cAAc,cAAc,SAAS,aAAa,KAAK,YAAY,CAAC,CAAC;AAExE,OAAK,MAAM,eAAe,KAAK,cAAc,EAAE;GAC7C,MAAM,sBAAsB,YAAY,qBAAqB;GAC7D,MAAM,eAAe,YAAY,cAAc;GAC/C,MAAM,gBAAgB,YAAY,aAAa,CAAC,eAAe;AAE/D,OAAI,kBAAkB,KAAA,EACpB,OAAM,IAAI,MAAM,iDAAiD;GAGnE,MAAM,wBAAwB,SAAS,IAAI,aAAa,CAAC,oBAAoB,CAAC,cAAc,CAAC;GAE7F,MAAM,sBAAsB,oBACzB,MAAM,CACN,aAAa,iBAAiB,sBAAsB;AAEvD,aAAU,QAAQ,cAAc,eAAe,oBAAoB;;AAGrE,SAAO;;;;;;;CAQT,qBAA+B;EAC7B,MAAM,UAAU,KAAK,WAAW;EAEhC,MAAM,oBADS,KAAK,QACY,CAAC,sBAAsB;AAEvD,MAAI,sBAAsB,KAAA,EACxB,OAAM,IAAI,MAAM,mDAAmD;AAGrE,SAAO,QAAQ,WACb,KAAK,YAAY,EACjB,mBACA,KAAA,EACD;;;;;;;CAQH,aAAuB;EACrB,MAAM,UAAU,KAAK,WAAW;EAEhC,MAAM,oBADS,KAAK,QACY,CAAC,sBAAsB;AAEvD,MAAI,sBAAsB,KAAA,EACxB,OAAM,IAAI,MAAM,mDAAmD;EAGrE,MAAM,aAAa,KAAK,cAAc,CAAC,KAAK,MAAM,EAAE,aAAa,CAAC;AAElE,SAAO,QAAQ,wBAAwB,KAAK,YAAY,EAAE,mBAAmB,WAAW;;;;;;;;AAS5F,IAAa,gBAAb,MAAa,cAAc;CACzB;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CAEA,YACE,cACA,YACA,QACA,WACA,kBACA,YACA,SACA,SACA;AACA,OAAK,gBAAgB;AACrB,OAAK,cAAc;AACnB,OAAK,UAAU;AACf,OAAK,aAAa;AAClB,OAAK,oBAAoB;AACzB,OAAK,cAAc;AACnB,OAAK,WAAW;AAChB,OAAK,WAAW;;CAGlB,eAAqB;AACnB,SAAO,KAAK;;CAGd,aAAmB;AACjB,SAAO,KAAK;;CAGd,SAAsB;AACpB,SAAO,KAAK;;CAGd,YAAkB;AAChB,SAAO,KAAK;;CAGd,mBAAyC;AACvC,SAAO,KAAK;;CAGd,aAAqB;AACnB,SAAO,KAAK;;CAGd,UAAkB;AAChB,SAAO,KAAK;;CAGd,UAAgB;AACd,SAAO,KAAK;;;;;;;CAQd,WAAW,UAA+B,WAAwC;EAChF,IAAI;AACJ,MAAI,SAAS,SAAS,WACpB,QAAO,eAAe,WAAW,KAAK,WAAW,EAAE,UAAU;MAE7D,QAAO,eAAe,WAAW,KAAK,WAAW,EAAE,UAAU,CAAC,UAAU,SAAS,OAAO;AAG1F,SAAO,KAAK,qBAAqB,KAAK,kBAAkB,CAAC;;;;;;;CAQ3D,WAAW,UAA+B,WAAkC;EAC1E,MAAM,cAAc,KAAK,WAAW,UAAU,UAAU;EACxD,MAAM,oBAAoB,UAAU,sBAAsB;AAE1D,MAAI,sBAAsB,KAAA,EACxB,OAAM,IAAI,MAAM,6CAA6C;EAG/D,MAAM,aAAa,CAAC,KAAK,QAAQ,CAAC;AAElC,SAAO,YAAY,wBAAwB,KAAK,YAAY,EAAE,mBAAmB,WAAW;;;;;;;CAQ9F,OAAO,WACL,QACA,KACA,gBACA,WACe;EACf,MAAM,uBAAuB,UAAU,sBAAsB;AAE7D,MAAI,yBAAyB,KAAA,EAC3B,OAAM,IAAI,MAAM,uDAAuD;EAGzE,MAAM,gBAAgB,cAAc,gBAClC,QACA,KAAA,GACA,KACA,qBACD;AAMD,MACE,mBAAmB,KAAA,KACnB,CAAC,cAAc,QAAQ,CAAC,KAAK,CAAC,OAAO,eAAe,KAAK,CAAC,CAE1D,OAAM,IAAI,MAAM,+CAA+C;AAGjE,MAAI,CAAC,cAAc,SAAS,CAAC,UAAU,CAAC,OAAOA,SAAiB,WAAW,YAAY,CAAC,CACtF,OAAM,IAAI,MAAM,6BAA6B;EAG/C,MAAM,aAAa,cAAc,0BAAgC,aAAa;AAE9E,MAAI,cAAc,IAChB,OAAM,IAAI,MAAM,qBAAqB;EAGvC,MAAM,eAAe,UAAU,KAAK;EACpC,MAAM,aAAa,cAAc,0BAAkC,aAAa;EAChF,MAAM,UAAU,cAAc,0BAAkC,UAAU;EAC1E,MAAM,UAAU,cAAc,0BAAgC,QAAQ;EACtE,MAAM,qBAAqB,cAAc,oBAAoB,cAAc;AAE3E,MAAI,aAAa,EACf,OAAM,IAAI,MAAM,iCAAiC;AAGnD,MAAI,aAAa,mBAAmB,OAClC,OAAM,IAAI,MAAM,wCAAwC;AAG1D,OAAK,MAAM,eAAe,oBAAoB;GAC5C,MAAM,sBAAsB,YAAY,WAAW;AAUnD,OAAI,CATgB,YAAY,aAC9B,qBACA,KAAA,GACA,mBAAmB,UAML,CAAC,KAAK,CAAC,OAAO,aAAa,CACzC;AASF,UAAO,IAAI,cANmB,YAAY,mBAAmB,gBACX,CAAC,mBAAmB,qBACvB,CAAC,gBAAgB,SAC9D,KAAK,eAAe,KAAK,CAIb,EACZ,YACA,cAAc,QAAQ,EACtB,cAAc,SAAS,CAAC,IAAI,EAC5B,cAAc,kBAAkB,EAChC,YACA,SACA,QACD;;AAGH,QAAM,IAAI,MAAM,gCAAgC"}