@bcts/frost-hubert 1.0.0-alpha.23 → 1.0.0-beta.1

package/dist/receive-dkSCSGpl.mjs

@@ -0,0 +1,188 @@
+import { t as __exportAll } from "./chunk-z9aeyW2b.mjs";
+import { DkgInvitation } from "./dkg/index.mjs";
+import { Registry, resolveRegistryPath } from "./registry/index.mjs";
+import { a as dkgStateDir, c as parseAridUr, l as parseEnvelopeUr, m as resolveSenderName, u as participantNamesFromRegistry } from "./common-Cf1UvJaP.mjs";
+import { t as getWithIndicator } from "./busy-BlU8_pS2.mjs";
+import { i as createStorageClient } from "./registry-DGjs4qDK.mjs";
+import { ARID, XID } from "@bcts/components";
+import { CborDate } from "@bcts/dcbor";
+import { Function } from "@bcts/envelope";
+import { SealedRequest } from "@bcts/gstp";
+import { XIDDocument, XIDVerifySignature } from "@bcts/xid";
+import * as fs from "node:fs";
+import * as path from "node:path";
+//#region src/cmd/dkg/participant/receive.ts
+/**
+* Copyright © 2023-2026 Blockchain Commons, LLC
+* Copyright © 2025-2026 Parity Technologies
+*
+*
+* DKG participant receive command.
+*
+* Port of cmd/dkg/participant/receive.rs from frost-hubert-rust.
+*
+* @module
+*/
+var receive_exports = /* @__PURE__ */ __exportAll({
+	decodeInviteDetails: () => decodeInviteDetails,
+	receive: () => receive,
+	resolveInviteEnvelope: () => resolveInviteEnvelope
+});
+/**
+* Resolve an invite envelope from either storage (ARID) or direct UR.
+*
+* Port of `resolve_invite_envelope()` from cmd/dkg/participant/receive.rs lines 122-152.
+*/
+async function resolveInviteEnvelope(selection, invite, timeout) {
+	if (selection !== void 0) {
+		try {
+			const arid = parseAridUr(invite);
+			const envelope = await getWithIndicator(await createStorageClient(selection), arid, "Invite", timeout, false);
+			if (envelope === null || envelope === void 0) throw new Error("Invite not found in Hubert storage");
+			return envelope;
+		} catch (e) {
+			if (e instanceof Error && e.message.includes("Invite not found in Hubert storage")) throw e;
+		}
+		if (timeout !== void 0) throw new Error("--timeout is only valid when retrieving invites from Hubert");
+		return parseEnvelopeUr(invite);
+	}
+	try {
+		parseAridUr(invite);
+		throw new Error("Hubert storage parameters are required to retrieve invites by ARID");
+	} catch (e) {
+		if (e instanceof Error && e.message.includes("Hubert storage parameters are required")) throw e;
+	}
+	return parseEnvelopeUr(invite);
+}
+/**
+* Decode and validate invite details from an envelope.
+*
+* Port of `decode_invite_details()` from cmd/dkg/participant/receive.rs lines 154-256.
+*/
+function decodeInviteDetails(invite, now, registry, recipient, expectedSender) {
+	const recipientPrivateKeys = recipient.inceptionPrivateKeys();
+	if (recipientPrivateKeys === void 0) throw new Error("Recipient XID document has no inception private keys");
+	const sealedRequest = SealedRequest.tryFromEnvelope(invite, void 0, now, recipientPrivateKeys);
+	const senderDocument = sealedRequest.sender();
+	if (expectedSender !== void 0) {
+		if (senderDocument.xid().urString() !== expectedSender.xid().urString()) throw new Error("Invite sender does not match expected sender");
+	} else {
+		const senderXid = senderDocument.xid();
+		const knownOwner = registry.owner()?.xidDocument().xid().urString() === senderXid.urString();
+		const knownParticipant = registry.participant(senderXid) !== void 0;
+		if (!knownOwner && !knownParticipant) throw new Error(`Invite sender not found in registry: ${senderXid.urString()}`);
+	}
+	if (!sealedRequest.request().function().equals(Function.fromString("dkgInvite"))) throw new Error("Unexpected invite function");
+	if (sealedRequest.extractObjectForParameter("validUntil") <= now) throw new Error("Invitation expired");
+	const minSigners = sealedRequest.extractObjectForParameter("minSigners");
+	sealedRequest.extractObjectForParameter("charter");
+	sealedRequest.extractObjectForParameter("group");
+	const participantObjects = sealedRequest.objectsForParameter("participant");
+	if (minSigners < 2) throw new Error("min_signers must be at least 2");
+	if (minSigners > participantObjects.length) throw new Error("min_signers exceeds participant count");
+	const participantDocs = [];
+	let responseArid;
+	const recipientXid = recipient.xid();
+	for (const participant of participantObjects) {
+		const xidDocumentEnvelope = participant.tryUnwrap();
+		const xidDocument = XIDDocument.fromEnvelope(xidDocumentEnvelope, void 0, XIDVerifySignature.Inception);
+		if (xidDocument.xid().urString() === recipientXid.urString()) responseArid = participant.objectForPredicate("response_arid").decryptToRecipient(recipientPrivateKeys).extractSubject((cbor) => ARID.fromTaggedCbor(cbor));
+		participantDocs.push(xidDocument);
+	}
+	const invitation = DkgInvitation.fromInvite(invite, now, expectedSender, recipient);
+	if (responseArid === void 0) throw new Error("Invite does not include a response ARID for this recipient");
+	return {
+		invitation,
+		participants: participantDocs
+	};
+}
+/**
+* Resolve a sender XID document from the registry by UR or pet name.
+*
+* Port of `resolve_sender()` usage in receive.rs for expected sender.
+*/
+function resolveSenderXidDocument(registry, raw) {
+	try {
+		const xid = XID.fromURString(raw.trim());
+		const record = registry.participant(xid);
+		if (record) return record.xidDocument();
+		const owner = registry.owner();
+		if (owner?.xid().urString() === xid.urString()) return owner.xidDocument();
+		throw new Error(`Sender with XID ${xid.urString()} not found in registry`);
+	} catch {
+		const result = registry.participantByPetName(raw.trim());
+		if (result) {
+			const [, record] = result;
+			return record.xidDocument();
+		}
+		const owner = registry.owner();
+		if (owner?.petName() === raw.trim()) return owner.xidDocument();
+		throw new Error(`Sender '${raw}' not found in registry`);
+	}
+}
+/**
+* Execute the DKG participant receive command.
+*
+* Fetches and validates a DKG invite from the coordinator.
+*
+* Port of `receive()` from cmd/dkg/participant/receive.rs.
+*/
+async function receive(_client, options, cwd) {
+	if (options.storageSelection === void 0 && options.timeoutSeconds !== void 0) throw new Error("--timeout requires Hubert storage parameters");
+	const registryPath = resolveRegistryPath(options.registryPath, cwd);
+	const registry = Registry.load(registryPath);
+	const owner = registry.owner();
+	if (!owner) throw new Error("Registry owner with private keys is required");
+	const expectedSender = options.sender ? resolveSenderXidDocument(registry, options.sender) : void 0;
+	const inviteEnvelope = await resolveInviteEnvelope(options.storageSelection, options.invite, options.timeoutSeconds);
+	const details = decodeInviteDetails(inviteEnvelope, CborDate.now().datetime(), registry, owner.xidDocument(), expectedSender);
+	const participantNames = participantNamesFromRegistry(registry, details.participants, owner.xid(), owner.petName());
+	const coordinatorName = resolveSenderName(registry, details.invitation.sender());
+	const stateDir = dkgStateDir(registryPath, details.invitation.groupId().hex());
+	fs.mkdirSync(stateDir, { recursive: true });
+	const validUntilStr = details.invitation.validUntil().toString();
+	const receiveState = {
+		group: details.invitation.groupId().urString(),
+		request_id: details.invitation.requestId().urString(),
+		response_arid: details.invitation.responseArid().urString(),
+		valid_until: validUntilStr,
+		min_signers: details.invitation.minSigners(),
+		charter: details.invitation.charter(),
+		sender: details.invitation.sender().xid().urString()
+	};
+	fs.writeFileSync(path.join(stateDir, "receive.json"), JSON.stringify(receiveState, null, 2));
+	let envelopeUr;
+	if (options.noEnvelope !== true) {
+		envelopeUr = inviteEnvelope.urString();
+		console.log(envelopeUr);
+	}
+	if (options.info === true) {
+		console.error(`Charter: ${details.invitation.charter()}`);
+		console.error(`Min signers: ${details.invitation.minSigners()}`);
+		if (coordinatorName !== void 0) console.error(`Coordinator: ${coordinatorName}`);
+		console.error(`Participants: ${participantNames.join(", ")}`);
+	}
+	if (options.verbose === true) {
+		console.log(`Group ID: ${details.invitation.groupId().urString()}`);
+		console.log(`Min signers: ${details.invitation.minSigners()}`);
+		console.log(`Charter: ${details.invitation.charter()}`);
+		console.log(`Valid until: ${String(details.invitation.validUntil())}`);
+		console.log(`Response ARID: ${details.invitation.responseArid().urString()}`);
+	}
+	const resultValidUntilStr = details.invitation.validUntil().toString();
+	return {
+		groupId: details.invitation.groupId().urString(),
+		requestId: details.invitation.requestId().urString(),
+		minSigners: details.invitation.minSigners(),
+		charter: details.invitation.charter(),
+		validUntil: resultValidUntilStr,
+		responseArid: details.invitation.responseArid().urString(),
+		envelopeUr,
+		coordinatorName,
+		participantNames
+	};
+}
+//#endregion
+export { resolveInviteEnvelope as i, receive as n, receive_exports as r, decodeInviteDetails as t };
+
+//# sourceMappingURL=receive-dkSCSGpl.mjs.map

package/dist/receive-dkSCSGpl.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"receive-dkSCSGpl.mjs","names":["EnvelopeFunction"],"sources":["../src/cmd/dkg/participant/receive.ts"],"sourcesContent":["/**\n * Copyright © 2023-2026 Blockchain Commons, LLC\n * Copyright © 2025-2026 Parity Technologies\n *\n *\n * DKG participant receive command.\n *\n * Port of cmd/dkg/participant/receive.rs from frost-hubert-rust.\n *\n * @module\n */\n\nimport * as fs from \"node:fs\";\nimport * as path from \"node:path\";\n\nimport { ARID, XID } from \"@bcts/components\";\nimport { CborDate } from \"@bcts/dcbor\";\nimport { type Envelope, Function as EnvelopeFunction } from \"@bcts/envelope\";\nimport { SealedRequest } from \"@bcts/gstp\";\nimport { XIDDocument, XIDVerifySignature } from \"@bcts/xid\";\n\nimport { DkgInvitation } from \"../../../dkg/index.js\";\nimport { Registry, resolveRegistryPath } from \"../../../registry/index.js\";\nimport { getWithIndicator } from \"../../busy.js\";\nimport { createStorageClient, type StorageClient, type StorageSelection } from \"../../storage.js\";\nimport {\n  dkgStateDir,\n  parseAridUr,\n  parseEnvelopeUr,\n  participantNamesFromRegistry,\n  resolveSenderName,\n} from \"../common.js\";\n\n/**\n * Options for the DKG receive command.\n */\nexport interface DkgReceiveOptions {\n  registryPath?: string;\n  timeoutSeconds?: number;\n  noEnvelope?: boolean;\n  info?: boolean;\n  sender?: string;\n  invite: string;\n  storageSelection?: StorageSelection;\n  verbose?: boolean;\n}\n\n/**\n * Result of the DKG receive command.\n */\nexport interface DkgReceiveResult {\n  groupId: string;\n  requestId: string;\n  minSigners: number;\n  charter: string;\n  validUntil: string;\n  responseArid: string;\n  envelopeUr?: string | undefined;\n  coordinatorName?: string | undefined;\n  participantNames?: string[] | undefined;\n}\n\n/**\n * Details extracted from a DKG invite.\n *\n * Port of `struct InviteDetails` from cmd/dkg/participant/receive.rs lines 117-120.\n */\nexport interface InviteDetails {\n  invitation: DkgInvitation;\n  participants: XIDDocument[];\n}\n\n/**\n * Resolve an invite envelope from either storage (ARID) or direct UR.\n *\n * Port of `resolve_invite_envelope()` from cmd/dkg/participant/receive.rs lines 122-152.\n */\nexport async function resolveInviteEnvelope(\n  selection: StorageSelection | undefined,\n  invite: string,\n  timeout?: number,\n): Promise<Envelope> {\n  if (selection !== undefined) {\n    // Try to parse as ARID\n    try {\n      const arid = parseAridUr(invite);\n      const client = await createStorageClient(selection);\n      const envelope = await getWithIndicator(client, arid, \"Invite\", timeout, false);\n      if (envelope === null || envelope === undefined) {\n        throw new Error(\"Invite not found in Hubert storage\");\n      }\n      return envelope;\n    } catch (e) {\n      // Not an ARID, fall through to envelope parsing\n      if (e instanceof Error && e.message.includes(\"Invite not found in Hubert storage\")) {\n        throw e;\n      }\n    }\n\n    if (timeout !== undefined) {\n      throw new Error(\"--timeout is only valid when retrieving invites from Hubert\");\n    }\n\n    return parseEnvelopeUr(invite);\n  }\n\n  // No storage selection\n  try {\n    parseAridUr(invite);\n    throw new Error(\"Hubert storage parameters are required to retrieve invites by ARID\");\n  } catch (e) {\n    // Not an ARID, parse as envelope\n    if (e instanceof Error && e.message.includes(\"Hubert storage parameters are required\")) {\n      throw e;\n    }\n  }\n\n  return parseEnvelopeUr(invite);\n}\n\n/**\n * Decode and validate invite details from an envelope.\n *\n * Port of `decode_invite_details()` from cmd/dkg/participant/receive.rs lines 154-256.\n */\nexport function decodeInviteDetails(\n  invite: Envelope,\n  now: Date,\n  registry: Registry,\n  recipient: XIDDocument,\n  expectedSender?: XIDDocument,\n): InviteDetails {\n  const recipientPrivateKeys = recipient.inceptionPrivateKeys();\n\n  if (recipientPrivateKeys === undefined) {\n    throw new Error(\"Recipient XID document has no inception private keys\");\n  }\n\n  const sealedRequest = SealedRequest.tryFromEnvelope(invite, undefined, now, recipientPrivateKeys);\n\n  const senderDocument = sealedRequest.sender();\n  if (expectedSender !== undefined) {\n    if (senderDocument.xid().urString() !== expectedSender.xid().urString()) {\n      throw new Error(\"Invite sender does not match expected sender\");\n    }\n  } else {\n    const senderXid = senderDocument.xid();\n    const owner = registry.owner();\n    const knownOwner = owner?.xidDocument().xid().urString() === senderXid.urString();\n    const knownParticipant = registry.participant(senderXid) !== undefined;\n\n    if (!knownOwner && !knownParticipant) {\n      throw new Error(`Invite sender not found in registry: ${senderXid.urString()}`);\n    }\n  }\n\n  if (!sealedRequest.request().function().equals(EnvelopeFunction.fromString(\"dkgInvite\"))) {\n    throw new Error(\"Unexpected invite function\");\n  }\n\n  const validUntil = sealedRequest.extractObjectForParameter<Date>(\"validUntil\");\n  if (validUntil <= now) {\n    throw new Error(\"Invitation expired\");\n  }\n\n  const minSigners = sealedRequest.extractObjectForParameter<number>(\"minSigners\");\n  sealedRequest.extractObjectForParameter<string>(\"charter\");\n  sealedRequest.extractObjectForParameter<ARID>(\"group\");\n  const participantObjects = sealedRequest.objectsForParameter(\"participant\");\n\n  if (minSigners < 2) {\n    throw new Error(\"min_signers must be at least 2\");\n  }\n\n  if (minSigners > participantObjects.length) {\n    throw new Error(\"min_signers exceeds participant count\");\n  }\n\n  const participantDocs: XIDDocument[] = [];\n  let responseArid: ARID | undefined;\n  const recipientXid = recipient.xid();\n\n  for (const participant of participantObjects) {\n    const xidDocumentEnvelope = participant.tryUnwrap();\n    const xidDocument = XIDDocument.fromEnvelope(\n      xidDocumentEnvelope,\n      undefined,\n      XIDVerifySignature.Inception,\n    );\n\n    if (xidDocument.xid().urString() === recipientXid.urString()) {\n      const encryptedResponseArid = participant.objectForPredicate(\"response_arid\");\n      const responseAridEnvelope = encryptedResponseArid.decryptToRecipient(recipientPrivateKeys);\n      responseArid = responseAridEnvelope.extractSubject((cbor) => ARID.fromTaggedCbor(cbor));\n    }\n\n    participantDocs.push(xidDocument);\n  }\n\n  const invitation = DkgInvitation.fromInvite(invite, now, expectedSender, recipient);\n\n  if (responseArid === undefined) {\n    throw new Error(\"Invite does not include a response ARID for this recipient\");\n  }\n\n  return { invitation, participants: participantDocs };\n}\n\n/**\n * Resolve a sender XID document from the registry by UR or pet name.\n *\n * Port of `resolve_sender()` usage in receive.rs for expected sender.\n */\nfunction resolveSenderXidDocument(registry: Registry, raw: string): XIDDocument {\n  // Try parsing as XID UR first\n  try {\n    const xid = XID.fromURString(raw.trim());\n    const record = registry.participant(xid);\n    if (record) {\n      return record.xidDocument();\n    }\n    const owner = registry.owner();\n    if (owner?.xid().urString() === xid.urString()) {\n      return owner.xidDocument();\n    }\n    throw new Error(`Sender with XID ${xid.urString()} not found in registry`);\n  } catch {\n    // Try looking up by pet name\n    const result = registry.participantByPetName(raw.trim());\n    if (result) {\n      const [, record] = result;\n      return record.xidDocument();\n    }\n    const owner = registry.owner();\n    if (owner?.petName() === raw.trim()) {\n      return owner.xidDocument();\n    }\n    throw new Error(`Sender '${raw}' not found in registry`);\n  }\n}\n\n/**\n * Execute the DKG participant receive command.\n *\n * Fetches and validates a DKG invite from the coordinator.\n *\n * Port of `receive()` from cmd/dkg/participant/receive.rs.\n */\nexport async function receive(\n  _client: StorageClient | undefined,\n  options: DkgReceiveOptions,\n  cwd: string,\n): Promise<DkgReceiveResult> {\n  if (options.storageSelection === undefined && options.timeoutSeconds !== undefined) {\n    throw new Error(\"--timeout requires Hubert storage parameters\");\n  }\n\n  const registryPath = resolveRegistryPath(options.registryPath, cwd);\n  const registry = Registry.load(registryPath);\n\n  const owner = registry.owner();\n  if (!owner) {\n    throw new Error(\"Registry owner with private keys is required\");\n  }\n\n  const expectedSender = options.sender\n    ? resolveSenderXidDocument(registry, options.sender)\n    : undefined;\n\n  const inviteEnvelope = await resolveInviteEnvelope(\n    options.storageSelection,\n    options.invite,\n    options.timeoutSeconds,\n  );\n\n  const now = CborDate.now().datetime();\n  const details = decodeInviteDetails(\n    inviteEnvelope,\n    now,\n    registry,\n    owner.xidDocument(),\n    expectedSender,\n  );\n\n  const participantNames = participantNamesFromRegistry(\n    registry,\n    details.participants,\n    owner.xid(),\n    owner.petName(),\n  );\n\n  const coordinatorName = resolveSenderName(registry, details.invitation.sender());\n\n  // Save receive state\n  const stateDir = dkgStateDir(registryPath, details.invitation.groupId().hex());\n  fs.mkdirSync(stateDir, { recursive: true });\n\n  const validUntilStr: string = (\n    details.invitation.validUntil() as { toString(): string }\n  ).toString();\n  const receiveState = {\n    group: details.invitation.groupId().urString(),\n    request_id: details.invitation.requestId().urString(),\n    response_arid: details.invitation.responseArid().urString(),\n    valid_until: validUntilStr,\n    min_signers: details.invitation.minSigners(),\n    charter: details.invitation.charter(),\n    sender: details.invitation.sender().xid().urString(),\n  };\n\n  fs.writeFileSync(path.join(stateDir, \"receive.json\"), JSON.stringify(receiveState, null, 2));\n\n  // Output based on options\n  let envelopeUr: string | undefined;\n  if (options.noEnvelope !== true) {\n    envelopeUr = inviteEnvelope.urString();\n    console.log(envelopeUr);\n  }\n\n  if (options.info === true) {\n    console.error(`Charter: ${details.invitation.charter()}`);\n    console.error(`Min signers: ${details.invitation.minSigners()}`);\n    if (coordinatorName !== undefined) {\n      console.error(`Coordinator: ${coordinatorName}`);\n    }\n    console.error(`Participants: ${participantNames.join(\", \")}`);\n  }\n\n  if (options.verbose === true) {\n    console.log(`Group ID: ${details.invitation.groupId().urString()}`);\n    console.log(`Min signers: ${details.invitation.minSigners()}`);\n    console.log(`Charter: ${details.invitation.charter()}`);\n    console.log(`Valid until: ${String(details.invitation.validUntil())}`);\n    console.log(`Response ARID: ${details.invitation.responseArid().urString()}`);\n  }\n\n  const resultValidUntilStr: string = (\n    details.invitation.validUntil() as { toString(): string }\n  ).toString();\n\n  return {\n    groupId: details.invitation.groupId().urString(),\n    requestId: details.invitation.requestId().urString(),\n    minSigners: details.invitation.minSigners(),\n    charter: details.invitation.charter(),\n    validUntil: resultValidUntilStr,\n    responseArid: details.invitation.responseArid().urString(),\n    envelopeUr,\n    coordinatorName,\n    participantNames,\n  };\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AA6EA,eAAsB,sBACpB,WACA,QACA,SACmB;CACnB,IAAI,cAAc,KAAA,GAAW;EAE3B,IAAI;GACF,MAAM,OAAO,YAAY,MAAM;GAE/B,MAAM,WAAW,MAAM,iBAAiB,MADnB,oBAAoB,SAAS,GACF,MAAM,UAAU,SAAS,KAAK;GAC9E,IAAI,aAAa,QAAQ,aAAa,KAAA,GACpC,MAAM,IAAI,MAAM,oCAAoC;GAEtD,OAAO;EACT,SAAS,GAAG;GAEV,IAAI,aAAa,SAAS,EAAE,QAAQ,SAAS,oCAAoC,GAC/E,MAAM;EAEV;EAEA,IAAI,YAAY,KAAA,GACd,MAAM,IAAI,MAAM,6DAA6D;EAG/E,OAAO,gBAAgB,MAAM;CAC/B;CAGA,IAAI;EACF,YAAY,MAAM;EAClB,MAAM,IAAI,MAAM,oEAAoE;CACtF,SAAS,GAAG;EAEV,IAAI,aAAa,SAAS,EAAE,QAAQ,SAAS,wCAAwC,GACnF,MAAM;CAEV;CAEA,OAAO,gBAAgB,MAAM;AAC/B;;;;;;AAOA,SAAgB,oBACd,QACA,KACA,UACA,WACA,gBACe;CACf,MAAM,uBAAuB,UAAU,qBAAqB;CAE5D,IAAI,yBAAyB,KAAA,GAC3B,MAAM,IAAI,MAAM,sDAAsD;CAGxE,MAAM,gBAAgB,cAAc,gBAAgB,QAAQ,KAAA,GAAW,KAAK,oBAAoB;CAEhG,MAAM,iBAAiB,cAAc,OAAO;CAC5C,IAAI,mBAAmB,KAAA;MACjB,eAAe,IAAI,EAAE,SAAS,MAAM,eAAe,IAAI,EAAE,SAAS,GACpE,MAAM,IAAI,MAAM,8CAA8C;CAAA,OAE3D;EACL,MAAM,YAAY,eAAe,IAAI;EAErC,MAAM,aADQ,SAAS,MACA,GAAG,YAAY,EAAE,IAAI,EAAE,SAAS,MAAM,UAAU,SAAS;EAChF,MAAM,mBAAmB,SAAS,YAAY,SAAS,MAAM,KAAA;EAE7D,IAAI,CAAC,cAAc,CAAC,kBAClB,MAAM,IAAI,MAAM,wCAAwC,UAAU,SAAS,GAAG;CAElF;CAEA,IAAI,CAAC,cAAc,QAAQ,EAAE,SAAS,EAAE,OAAOA,SAAiB,WAAW,WAAW,CAAC,GACrF,MAAM,IAAI,MAAM,4BAA4B;CAI9C,IADmB,cAAc,0BAAgC,YACpD,KAAK,KAChB,MAAM,IAAI,MAAM,oBAAoB;CAGtC,MAAM,aAAa,cAAc,0BAAkC,YAAY;CAC/E,cAAc,0BAAkC,SAAS;CACzD,cAAc,0BAAgC,OAAO;CACrD,MAAM,qBAAqB,cAAc,oBAAoB,aAAa;CAE1E,IAAI,aAAa,GACf,MAAM,IAAI,MAAM,gCAAgC;CAGlD,IAAI,aAAa,mBAAmB,QAClC,MAAM,IAAI,MAAM,uCAAuC;CAGzD,MAAM,kBAAiC,CAAC;CACxC,IAAI;CACJ,MAAM,eAAe,UAAU,IAAI;CAEnC,KAAK,MAAM,eAAe,oBAAoB;EAC5C,MAAM,sBAAsB,YAAY,UAAU;EAClD,MAAM,cAAc,YAAY,aAC9B,qBACA,KAAA,GACA,mBAAmB,SACrB;EAEA,IAAI,YAAY,IAAI,EAAE,SAAS,MAAM,aAAa,SAAS,GAGzD,eAF8B,YAAY,mBAAmB,eACZ,EAAE,mBAAmB,oBACpC,EAAE,gBAAgB,SAAS,KAAK,eAAe,IAAI,CAAC;EAGxF,gBAAgB,KAAK,WAAW;CAClC;CAEA,MAAM,aAAa,cAAc,WAAW,QAAQ,KAAK,gBAAgB,SAAS;CAElF,IAAI,iBAAiB,KAAA,GACnB,MAAM,IAAI,MAAM,4DAA4D;CAG9E,OAAO;EAAE;EAAY,cAAc;CAAgB;AACrD;;;;;;AAOA,SAAS,yBAAyB,UAAoB,KAA0B;CAE9E,IAAI;EACF,MAAM,MAAM,IAAI,aAAa,IAAI,KAAK,CAAC;EACvC,MAAM,SAAS,SAAS,YAAY,GAAG;EACvC,IAAI,QACF,OAAO,OAAO,YAAY;EAE5B,MAAM,QAAQ,SAAS,MAAM;EAC7B,IAAI,OAAO,IAAI,EAAE,SAAS,MAAM,IAAI,SAAS,GAC3C,OAAO,MAAM,YAAY;EAE3B,MAAM,IAAI,MAAM,mBAAmB,IAAI,SAAS,EAAE,uBAAuB;CAC3E,QAAQ;EAEN,MAAM,SAAS,SAAS,qBAAqB,IAAI,KAAK,CAAC;EACvD,IAAI,QAAQ;GACV,MAAM,GAAG,UAAU;GACnB,OAAO,OAAO,YAAY;EAC5B;EACA,MAAM,QAAQ,SAAS,MAAM;EAC7B,IAAI,OAAO,QAAQ,MAAM,IAAI,KAAK,GAChC,OAAO,MAAM,YAAY;EAE3B,MAAM,IAAI,MAAM,WAAW,IAAI,wBAAwB;CACzD;AACF;;;;;;;;AASA,eAAsB,QACpB,SACA,SACA,KAC2B;CAC3B,IAAI,QAAQ,qBAAqB,KAAA,KAAa,QAAQ,mBAAmB,KAAA,GACvE,MAAM,IAAI,MAAM,8CAA8C;CAGhE,MAAM,eAAe,oBAAoB,QAAQ,cAAc,GAAG;CAClE,MAAM,WAAW,SAAS,KAAK,YAAY;CAE3C,MAAM,QAAQ,SAAS,MAAM;CAC7B,IAAI,CAAC,OACH,MAAM,IAAI,MAAM,8CAA8C;CAGhE,MAAM,iBAAiB,QAAQ,SAC3B,yBAAyB,UAAU,QAAQ,MAAM,IACjD,KAAA;CAEJ,MAAM,iBAAiB,MAAM,sBAC3B,QAAQ,kBACR,QAAQ,QACR,QAAQ,cACV;CAGA,MAAM,UAAU,oBACd,gBAFU,SAAS,IAAI,EAAE,SAGvB,GACF,UACA,MAAM,YAAY,GAClB,cACF;CAEA,MAAM,mBAAmB,6BACvB,UACA,QAAQ,cACR,MAAM,IAAI,GACV,MAAM,QAAQ,CAChB;CAEA,MAAM,kBAAkB,kBAAkB,UAAU,QAAQ,WAAW,OAAO,CAAC;CAG/E,MAAM,WAAW,YAAY,cAAc,QAAQ,WAAW,QAAQ,EAAE,IAAI,CAAC;CAC7E,GAAG,UAAU,UAAU,EAAE,WAAW,KAAK,CAAC;CAE1C,MAAM,gBACJ,QAAQ,WAAW,WAAW,EAC9B,SAAS;CACX,MAAM,eAAe;EACnB,OAAO,QAAQ,WAAW,QAAQ,EAAE,SAAS;EAC7C,YAAY,QAAQ,WAAW,UAAU,EAAE,SAAS;EACpD,eAAe,QAAQ,WAAW,aAAa,EAAE,SAAS;EAC1D,aAAa;EACb,aAAa,QAAQ,WAAW,WAAW;EAC3C,SAAS,QAAQ,WAAW,QAAQ;EACpC,QAAQ,QAAQ,WAAW,OAAO,EAAE,IAAI,EAAE,SAAS;CACrD;CAEA,GAAG,cAAc,KAAK,KAAK,UAAU,cAAc,GAAG,KAAK,UAAU,cAAc,MAAM,CAAC,CAAC;CAG3F,IAAI;CACJ,IAAI,QAAQ,eAAe,MAAM;EAC/B,aAAa,eAAe,SAAS;EACrC,QAAQ,IAAI,UAAU;CACxB;CAEA,IAAI,QAAQ,SAAS,MAAM;EACzB,QAAQ,MAAM,YAAY,QAAQ,WAAW,QAAQ,GAAG;EACxD,QAAQ,MAAM,gBAAgB,QAAQ,WAAW,WAAW,GAAG;EAC/D,IAAI,oBAAoB,KAAA,GACtB,QAAQ,MAAM,gBAAgB,iBAAiB;EAEjD,QAAQ,MAAM,iBAAiB,iBAAiB,KAAK,IAAI,GAAG;CAC9D;CAEA,IAAI,QAAQ,YAAY,MAAM;EAC5B,QAAQ,IAAI,aAAa,QAAQ,WAAW,QAAQ,EAAE,SAAS,GAAG;EAClE,QAAQ,IAAI,gBAAgB,QAAQ,WAAW,WAAW,GAAG;EAC7D,QAAQ,IAAI,YAAY,QAAQ,WAAW,QAAQ,GAAG;EACtD,QAAQ,IAAI,gBAAgB,OAAO,QAAQ,WAAW,WAAW,CAAC,GAAG;EACrE,QAAQ,IAAI,kBAAkB,QAAQ,WAAW,aAAa,EAAE,SAAS,GAAG;CAC9E;CAEA,MAAM,sBACJ,QAAQ,WAAW,WAAW,EAC9B,SAAS;CAEX,OAAO;EACL,SAAS,QAAQ,WAAW,QAAQ,EAAE,SAAS;EAC/C,WAAW,QAAQ,WAAW,UAAU,EAAE,SAAS;EACnD,YAAY,QAAQ,WAAW,WAAW;EAC1C,SAAS,QAAQ,WAAW,QAAQ;EACpC,YAAY;EACZ,cAAc,QAAQ,WAAW,aAAa,EAAE,SAAS;EACzD;EACA;EACA;CACF;AACF"}

package/dist/receive-g8EhZF2Y.mjs

@@ -0,0 +1,177 @@
+import { n as __require, t as __exportAll } from "./chunk-z9aeyW2b.mjs";
+import { n as compareXidBytes } from "./proposed-participant-Detb823_.mjs";
+import { Registry, resolveRegistryPath } from "./registry/index.mjs";
+import { c as parseAridUr, l as parseEnvelopeUr, o as formatNameWithOwnerMarker } from "./common-Cf1UvJaP.mjs";
+import { t as getWithIndicator } from "./busy-BlU8_pS2.mjs";
+import { n as signingStateDir } from "./common-DNrD_-EI.mjs";
+import { CborDate } from "@bcts/dcbor";
+import * as fs from "node:fs";
+import * as path from "node:path";
+//#region src/cmd/sign/participant/receive.ts
+/**
+* Copyright © 2023-2026 Blockchain Commons, LLC
+* Copyright © 2025-2026 Parity Technologies
+*
+*
+* Sign participant receive command.
+*
+* Port of cmd/sign/participant/receive.rs from frost-hubert-rust.
+*
+* @module
+*/
+var receive_exports = /* @__PURE__ */ __exportAll({ receive: () => receive });
+/**
+* Resolve sender from XID UR or pet name in registry.
+*
+* Port of `resolve_sender()` from cmd/dkg/common.rs lines 76-94.
+*/
+function resolveSenderFromInput(registry, input) {
+	const trimmed = input.trim();
+	if (trimmed === "") throw new Error("Sender is required");
+	try {
+		const { XID: XIDClass } = __require("@bcts/components");
+		const xid = XIDClass.fromURString(trimmed);
+		const record = registry.participant(xid);
+		if (!record) throw new Error(`Sender with XID ${xid.urString()} not found`);
+		return record.xidDocument();
+	} catch {
+		const result = registry.participantByPetName(trimmed);
+		if (!result) throw new Error(`Sender with pet name '${trimmed}' not found`);
+		return result[1].xidDocument();
+	}
+}
+/**
+* Resolve sign invite from ARID or envelope UR.
+*
+* Port of `resolve_sign_request()` from cmd/sign/participant/receive.rs lines 250-284.
+*/
+async function resolveSignInviteEnvelope(client, selection, request, timeout) {
+	if (selection !== void 0 && client !== void 0) {
+		try {
+			const envelope = await getWithIndicator(client, parseAridUr(request), "Sign invite", timeout, false);
+			if (envelope === void 0 || envelope === null) throw new Error("signInvite request not found in Hubert storage");
+			return envelope;
+		} catch {}
+		if (timeout !== void 0) throw new Error("--timeout is only valid when retrieving requests from Hubert");
+		return parseEnvelopeUr(request);
+	}
+	try {
+		parseAridUr(request);
+		throw new Error("Hubert storage parameters are required to retrieve requests by ARID");
+	} catch (e) {
+		if (e instanceof Error && e.message.includes("Hubert storage parameters")) throw e;
+	}
+	return parseEnvelopeUr(request);
+}
+/**
+* Get display name for sender from registry.
+*
+* Port of `resolve_sender_name()` from cmd/dkg/common.rs lines 96-116.
+*/
+function resolveSenderName(registry, senderXid) {
+	const owner = registry.owner();
+	if (owner?.xid().urString() === senderXid.urString()) return formatNameWithOwnerMarker(owner.petName() ?? senderXid.urString(), true);
+	const record = registry.participant(senderXid);
+	if (record) return formatNameWithOwnerMarker(record.petName() ?? record.xid().urString(), false);
+}
+/**
+* Format participant names with owner marker.
+*
+* Port of `format_participant_names()` from cmd/sign/participant/receive.rs lines 286-309.
+*/
+function formatParticipantNames(registry, participants, owner) {
+	return participants.map((xid) => {
+		const isOwner = xid.urString() === owner.xid().urString();
+		let name;
+		if (isOwner) name = owner.petName() ?? xid.urString();
+		else name = registry.participant(xid)?.petName() ?? xid.urString();
+		return formatNameWithOwnerMarker(name, isOwner);
+	});
+}
+/**
+* Execute the sign participant receive command.
+*
+* Fetches and validates a sign invite from the coordinator.
+*
+* Port of `CommandArgs::exec()` from cmd/sign/participant/receive.rs lines 56-247.
+*/
+async function receive(client, selection, options, cwd) {
+	if (selection === void 0 && options.timeoutSeconds !== void 0) throw new Error("--timeout requires Hubert storage parameters");
+	const registryPath = resolveRegistryPath(options.registryPath, cwd);
+	const registry = Registry.load(registryPath);
+	const owner = registry.owner();
+	if (!owner) throw new Error("Registry owner with private keys is required");
+	let expectedSender;
+	if (options.sender !== void 0 && options.sender !== "") expectedSender = resolveSenderFromInput(registry, options.sender);
+	const envelope = await resolveSignInviteEnvelope(client, selection, options.request, options.timeoutSeconds);
+	const now = CborDate.now();
+	const recipientKeys = owner.xidDocument().inceptionPrivateKeys();
+	if (recipientKeys === null || recipientKeys === void 0) throw new Error("Owner XID document has no inception private keys");
+	const { SealedRequest: SealedRequestClass } = __require("@bcts/gstp");
+	const sealedRequest = SealedRequestClass.tryFromEnvelope(envelope, void 0, now, recipientKeys);
+	const senderXid = sealedRequest.sender().xid();
+	if (expectedSender !== void 0) {
+		if (senderXid.urString() !== expectedSender.xid().urString()) throw new Error(`Request sender does not match expected sender (got ${senderXid.urString()}, expected ${expectedSender.xid().urString()})`);
+	} else {
+		const knownOwner = owner.xid().urString() === senderXid.urString();
+		const knownParticipant = registry.participant(senderXid) !== void 0;
+		if (!knownOwner && !knownParticipant) throw new Error(`Request sender not found in registry: ${senderXid.urString()}`);
+	}
+	const { Function: FunctionClass } = __require("@bcts/envelope");
+	const requestFunction = sealedRequest.function();
+	const expectedFunction = FunctionClass.from("signInvite");
+	if (!(requestFunction.equals !== void 0 ? requestFunction.equals(expectedFunction) : String(requestFunction) === String(expectedFunction))) throw new Error(`Unexpected request function: ${String(requestFunction)}`);
+	if (sealedRequest.extractObjectForParameter("validUntil") <= now) throw new Error("signInvite request has expired");
+	const groupId = sealedRequest.extractObjectForParameter("group");
+	const sessionId = sealedRequest.extractObjectForParameter("session");
+	const minSigners = Number(sealedRequest.extractObjectForParameter("minSigners"));
+	const participantEntries = sealedRequest.objectsForParameter("participant");
+	const participants = [];
+	let responseArid;
+	for (const entry of participantEntries) {
+		const xid = entry.extractSubject();
+		if (xid.urString() === owner.xid().urString()) responseArid = entry.objectForPredicate("response_arid").decryptToRecipient(recipientKeys).extractSubject();
+		participants.push(xid);
+	}
+	if (participants.length === 0) throw new Error("signInvite request contains no participants");
+	if (minSigners < 2) throw new Error("minSigners must be at least 2");
+	if (minSigners > participants.length) throw new Error("minSigners exceeds participant count");
+	if (!participants.some((p) => p.urString() === owner.xid().urString())) throw new Error("signInvite request does not include this participant");
+	if (responseArid === void 0) throw new Error("signInvite request missing response ARID");
+	participants.sort((a, b) => compareXidBytes(a.toData(), b.toData()));
+	const targetEnvelope = sealedRequest.objectForParameter("target");
+	const coordinatorName = resolveSenderName(registry, senderXid) ?? senderXid.urString();
+	const participantNames = formatParticipantNames(registry, participants, owner);
+	console.log(`Group: ${groupId.urString()}`);
+	console.log(`Coordinator: ${coordinatorName}`);
+	console.log(`Min signers: ${minSigners}`);
+	console.log(`Participants: ${participantNames.join(", ")}`);
+	console.log("Target:");
+	console.log(targetEnvelope.format());
+	console.log(sessionId.urString());
+	const stateDir = signingStateDir(registryPath, groupId.hex(), sessionId.hex());
+	fs.mkdirSync(stateDir, { recursive: true });
+	const root = {
+		request_envelope: envelope.urString(),
+		group: groupId.urString(),
+		session: sessionId.urString(),
+		coordinator: senderXid.urString(),
+		min_signers: minSigners,
+		response_arid: responseArid.urString(),
+		participants: participants.map((xid) => xid.urString()),
+		target: targetEnvelope.urString()
+	};
+	fs.writeFileSync(path.join(stateDir, "sign_receive.json"), JSON.stringify(root, null, 2));
+	return {
+		sessionId: sessionId.urString(),
+		groupId: groupId.urString(),
+		targetUr: targetEnvelope.urString(),
+		coordinatorName,
+		minSigners,
+		participantNames
+	};
+}
+//#endregion
+export { receive_exports as n, receive as t };
+
+//# sourceMappingURL=receive-g8EhZF2Y.mjs.map

package/dist/receive-g8EhZF2Y.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"receive-g8EhZF2Y.mjs","names":[],"sources":["../src/cmd/sign/participant/receive.ts"],"sourcesContent":["/**\n * Copyright © 2023-2026 Blockchain Commons, LLC\n * Copyright © 2025-2026 Parity Technologies\n *\n *\n * Sign participant receive command.\n *\n * Port of cmd/sign/participant/receive.rs from frost-hubert-rust.\n *\n * @module\n */\n\nimport * as fs from \"node:fs\";\nimport * as path from \"node:path\";\n\nimport { type ARID, type XID } from \"@bcts/components\";\nimport { compareXidBytes } from \"../../../dkg/proposed-participant.js\";\nimport { CborDate } from \"@bcts/dcbor\";\nimport type { Envelope } from \"@bcts/envelope\";\n\nimport { Registry, resolveRegistryPath, type OwnerRecord } from \"../../../registry/index.js\";\nimport { getWithIndicator } from \"../../busy.js\";\nimport { type StorageClient, type StorageSelection } from \"../../storage.js\";\nimport { parseAridUr, parseEnvelopeUr, formatNameWithOwnerMarker } from \"../../dkg/common.js\";\nimport { signingStateDir } from \"../common.js\";\n\n/**\n * Options for the sign receive command.\n */\nexport interface SignReceiveOptions {\n  registryPath?: string;\n  /** ARID or envelope UR string */\n  request: string;\n  timeoutSeconds?: number;\n  /** Show request details only (info mode) */\n  info?: boolean;\n  /** Expected sender (XID UR or pet name) */\n  sender?: string;\n}\n\n/**\n * Result of the sign receive command.\n */\nexport interface SignReceiveResult {\n  sessionId: string;\n  groupId: string;\n  targetUr: string;\n  coordinatorName: string;\n  minSigners: number;\n  participantNames: string[];\n}\n\n/**\n * Resolve sender from XID UR or pet name in registry.\n *\n * Port of `resolve_sender()` from cmd/dkg/common.rs lines 76-94.\n */\nfunction resolveSenderFromInput(registry: Registry, input: string): { xid: () => XID } {\n  const trimmed = input.trim();\n  if (trimmed === \"\") {\n    throw new Error(\"Sender is required\");\n  }\n\n  // Try parsing as XID UR first\n  try {\n    // eslint-disable-next-line @typescript-eslint/no-unsafe-assignment, @typescript-eslint/no-require-imports, no-undef\n    const { XID: XIDClass } = require(\"@bcts/components\");\n    // eslint-disable-next-line @typescript-eslint/no-unsafe-call, @typescript-eslint/no-unsafe-member-access\n    const xid = XIDClass.fromURString(trimmed) as XID;\n    const record = registry.participant(xid);\n    if (!record) {\n      throw new Error(`Sender with XID ${xid.urString()} not found`);\n    }\n    return record.xidDocument();\n  } catch {\n    // Try looking up by pet name\n    const result = registry.participantByPetName(trimmed);\n    if (!result) {\n      throw new Error(`Sender with pet name '${trimmed}' not found`);\n    }\n    return result[1].xidDocument();\n  }\n}\n\n/**\n * Resolve sign invite from ARID or envelope UR.\n *\n * Port of `resolve_sign_request()` from cmd/sign/participant/receive.rs lines 250-284.\n */\nasync function resolveSignInviteEnvelope(\n  client: StorageClient | undefined,\n  selection: StorageSelection | undefined,\n  request: string,\n  timeout: number | undefined,\n): Promise<Envelope> {\n  if (selection !== undefined && client !== undefined) {\n    // Try to parse as ARID\n    try {\n      const arid = parseAridUr(request);\n      const envelope = await getWithIndicator(client, arid, \"Sign invite\", timeout, false);\n      if (envelope === undefined || envelope === null) {\n        throw new Error(\"signInvite request not found in Hubert storage\");\n      }\n      return envelope;\n    } catch {\n      // Not an ARID, try as envelope\n    }\n\n    if (timeout !== undefined) {\n      throw new Error(\"--timeout is only valid when retrieving requests from Hubert\");\n    }\n    return parseEnvelopeUr(request);\n  }\n\n  // No storage selection\n  try {\n    parseAridUr(request);\n    throw new Error(\"Hubert storage parameters are required to retrieve requests by ARID\");\n  } catch (e) {\n    if (e instanceof Error && e.message.includes(\"Hubert storage parameters\")) {\n      throw e;\n    }\n    // Not an ARID, parse as envelope\n  }\n  return parseEnvelopeUr(request);\n}\n\n/**\n * Get display name for sender from registry.\n *\n * Port of `resolve_sender_name()` from cmd/dkg/common.rs lines 96-116.\n */\nfunction resolveSenderName(registry: Registry, senderXid: XID): string | undefined {\n  const owner = registry.owner();\n\n  // Check if sender is the owner\n  if (owner?.xid().urString() === senderXid.urString()) {\n    const name = owner.petName() ?? senderXid.urString();\n    return formatNameWithOwnerMarker(name, true);\n  }\n\n  // Look up in participants\n  const record = registry.participant(senderXid);\n  if (record) {\n    const name = record.petName() ?? record.xid().urString();\n    return formatNameWithOwnerMarker(name, false);\n  }\n\n  return undefined;\n}\n\n/**\n * Format participant names with owner marker.\n *\n * Port of `format_participant_names()` from cmd/sign/participant/receive.rs lines 286-309.\n */\nfunction formatParticipantNames(\n  registry: Registry,\n  participants: XID[],\n  owner: OwnerRecord,\n): string[] {\n  return participants.map((xid) => {\n    const isOwner = xid.urString() === owner.xid().urString();\n    let name: string;\n\n    if (isOwner) {\n      name = owner.petName() ?? xid.urString();\n    } else {\n      const record = registry.participant(xid);\n      name = record?.petName() ?? xid.urString();\n    }\n\n    return formatNameWithOwnerMarker(name, isOwner);\n  });\n}\n\n/**\n * Execute the sign participant receive command.\n *\n * Fetches and validates a sign invite from the coordinator.\n *\n * Port of `CommandArgs::exec()` from cmd/sign/participant/receive.rs lines 56-247.\n */\nexport async function receive(\n  client: StorageClient | undefined,\n  selection: StorageSelection | undefined,\n  options: SignReceiveOptions,\n  cwd: string,\n): Promise<SignReceiveResult> {\n  // Validate timeout requires storage\n  if (selection === undefined && options.timeoutSeconds !== undefined) {\n    throw new Error(\"--timeout requires Hubert storage parameters\");\n  }\n\n  const registryPath = resolveRegistryPath(options.registryPath, cwd);\n  const registry = Registry.load(registryPath);\n  const owner = registry.owner();\n\n  if (!owner) {\n    throw new Error(\"Registry owner with private keys is required\");\n  }\n\n  // Resolve expected sender if provided\n  let expectedSender: { xid: () => XID } | undefined;\n  if (options.sender !== undefined && options.sender !== \"\") {\n    expectedSender = resolveSenderFromInput(registry, options.sender);\n  }\n\n  // Resolve the invite envelope\n  const envelope = await resolveSignInviteEnvelope(\n    client,\n    selection,\n    options.request,\n    options.timeoutSeconds,\n  );\n\n  const now: CborDate = CborDate.now();\n  const recipientKeys = owner.xidDocument().inceptionPrivateKeys();\n\n  if (recipientKeys === null || recipientKeys === undefined) {\n    throw new Error(\"Owner XID document has no inception private keys\");\n  }\n\n  // eslint-disable-next-line @typescript-eslint/no-require-imports, no-undef\n  const { SealedRequest: SealedRequestClass } = require(\"@bcts/gstp\") as {\n    SealedRequest: {\n      tryFromEnvelope: (\n        envelope: Envelope,\n        expectedSender: XID | undefined,\n        now: CborDate,\n        recipientPrivateKeys: unknown,\n      ) => SealedRequestInstance;\n    };\n  };\n\n  interface SealedRequestInstance {\n    sender: () => { xid: () => XID };\n    function: () => { equals?: (other: unknown) => boolean; toString?: () => string };\n    extractObjectForParameter: <T>(name: string) => T;\n    objectForParameter: (name: string) => Envelope;\n    objectsForParameter: (name: string) => ParticipantEntry[];\n  }\n\n  interface ParticipantEntry {\n    extractSubject: () => XID;\n    objectForPredicate: (name: string) => {\n      decryptToRecipient: (keys: unknown) => {\n        extractSubject: () => ARID;\n      };\n    };\n  }\n\n  const sealedRequest: SealedRequestInstance = SealedRequestClass.tryFromEnvelope(\n    envelope,\n    undefined,\n    now,\n    recipientKeys,\n  );\n\n  // Validate sender\n  const senderXid = sealedRequest.sender().xid();\n\n  if (expectedSender !== undefined) {\n    if (senderXid.urString() !== expectedSender.xid().urString()) {\n      throw new Error(\n        `Request sender does not match expected sender (got ${senderXid.urString()}, expected ${expectedSender.xid().urString()})`,\n      );\n    }\n  } else {\n    const knownOwner = owner.xid().urString() === senderXid.urString();\n    const knownParticipant = registry.participant(senderXid) !== undefined;\n    if (!knownOwner && !knownParticipant) {\n      throw new Error(`Request sender not found in registry: ${senderXid.urString()}`);\n    }\n  }\n\n  // eslint-disable-next-line @typescript-eslint/no-require-imports, no-undef\n  const { Function: FunctionClass } = require(\"@bcts/envelope\") as {\n    Function: { from: (name: string) => unknown };\n  };\n\n  // Validate function\n  const requestFunction = sealedRequest.function();\n  const expectedFunction = FunctionClass.from(\"signInvite\");\n  const functionMatches =\n    requestFunction.equals !== undefined\n      ? requestFunction.equals(expectedFunction)\n      : String(requestFunction) === String(expectedFunction);\n\n  if (!functionMatches) {\n    throw new Error(`Unexpected request function: ${String(requestFunction)}`);\n  }\n\n  // Extract parameters\n  const validUntil = sealedRequest.extractObjectForParameter<CborDate>(\"validUntil\");\n  if (validUntil <= now) {\n    throw new Error(\"signInvite request has expired\");\n  }\n\n  const groupId = sealedRequest.extractObjectForParameter<ARID>(\"group\");\n  const sessionId = sealedRequest.extractObjectForParameter<ARID>(\"session\");\n  const minSigners = Number(sealedRequest.extractObjectForParameter<bigint | number>(\"minSigners\"));\n\n  // Extract participants and find our response ARID\n  const participantEntries = sealedRequest.objectsForParameter(\"participant\");\n  const participants: XID[] = [];\n  let responseArid: ARID | undefined;\n\n  for (const entry of participantEntries) {\n    const xid: XID = entry.extractSubject();\n    if (xid.urString() === owner.xid().urString()) {\n      const encryptedArid = entry.objectForPredicate(\"response_arid\");\n      const aridEnv = encryptedArid.decryptToRecipient(recipientKeys);\n      responseArid = aridEnv.extractSubject();\n    }\n    participants.push(xid);\n  }\n\n  // Validations\n  if (participants.length === 0) {\n    throw new Error(\"signInvite request contains no participants\");\n  }\n  if (minSigners < 2) {\n    throw new Error(\"minSigners must be at least 2\");\n  }\n  if (minSigners > participants.length) {\n    throw new Error(\"minSigners exceeds participant count\");\n  }\n\n  const ownerInParticipants = participants.some((p) => p.urString() === owner.xid().urString());\n  if (!ownerInParticipants) {\n    throw new Error(\"signInvite request does not include this participant\");\n  }\n\n  if (responseArid === undefined) {\n    throw new Error(\"signInvite request missing response ARID\");\n  }\n\n  // Sort participants by XID byte order — mirrors Rust `XID::cmp`.\n  // The earlier port used `urString().localeCompare(...)`, which\n  // diverges from byte order for bytes ≥ 0x80 and is locale-aware.\n  participants.sort((a, b) => compareXidBytes(a.toData(), b.toData()));\n\n  const targetEnvelope = sealedRequest.objectForParameter(\"target\");\n\n  const coordinatorName = resolveSenderName(registry, senderXid) ?? senderXid.urString();\n  const participantNames = formatParticipantNames(registry, participants, owner);\n\n  // Output\n  console.log(`Group: ${groupId.urString()}`);\n  console.log(`Coordinator: ${coordinatorName}`);\n  console.log(`Min signers: ${minSigners}`);\n  console.log(`Participants: ${participantNames.join(\", \")}`);\n  console.log(\"Target:\");\n  console.log(targetEnvelope.format());\n\n  // Primary output for scripting: session ID on its own line (no header)\n  console.log(sessionId.urString());\n\n  // Persist request details for follow-up commands\n  const stateDir = signingStateDir(registryPath, groupId.hex(), sessionId.hex());\n  fs.mkdirSync(stateDir, { recursive: true });\n\n  const root: Record<string, unknown> = {\n    request_envelope: envelope.urString(),\n    group: groupId.urString(),\n    session: sessionId.urString(),\n    coordinator: senderXid.urString(),\n    min_signers: minSigners,\n    response_arid: responseArid.urString(),\n    participants: participants.map((xid) => xid.urString()),\n    target: targetEnvelope.urString(),\n  };\n\n  fs.writeFileSync(path.join(stateDir, \"sign_receive.json\"), JSON.stringify(root, null, 2));\n\n  return {\n    sessionId: sessionId.urString(),\n    groupId: groupId.urString(),\n    targetUr: targetEnvelope.urString(),\n    coordinatorName,\n    minSigners,\n    participantNames,\n  };\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;AAyDA,SAAS,uBAAuB,UAAoB,OAAmC;CACrF,MAAM,UAAU,MAAM,KAAK;CAC3B,IAAI,YAAY,IACd,MAAM,IAAI,MAAM,oBAAoB;CAItC,IAAI;EAEF,MAAM,EAAE,KAAK,aAAA,UAAqB,kBAAkB;EAEpD,MAAM,MAAM,SAAS,aAAa,OAAO;EACzC,MAAM,SAAS,SAAS,YAAY,GAAG;EACvC,IAAI,CAAC,QACH,MAAM,IAAI,MAAM,mBAAmB,IAAI,SAAS,EAAE,WAAW;EAE/D,OAAO,OAAO,YAAY;CAC5B,QAAQ;EAEN,MAAM,SAAS,SAAS,qBAAqB,OAAO;EACpD,IAAI,CAAC,QACH,MAAM,IAAI,MAAM,yBAAyB,QAAQ,YAAY;EAE/D,OAAO,OAAO,GAAG,YAAY;CAC/B;AACF;;;;;;AAOA,eAAe,0BACb,QACA,WACA,SACA,SACmB;CACnB,IAAI,cAAc,KAAA,KAAa,WAAW,KAAA,GAAW;EAEnD,IAAI;GAEF,MAAM,WAAW,MAAM,iBAAiB,QAD3B,YAAY,OAC0B,GAAG,eAAe,SAAS,KAAK;GACnF,IAAI,aAAa,KAAA,KAAa,aAAa,MACzC,MAAM,IAAI,MAAM,gDAAgD;GAElE,OAAO;EACT,QAAQ,CAER;EAEA,IAAI,YAAY,KAAA,GACd,MAAM,IAAI,MAAM,8DAA8D;EAEhF,OAAO,gBAAgB,OAAO;CAChC;CAGA,IAAI;EACF,YAAY,OAAO;EACnB,MAAM,IAAI,MAAM,qEAAqE;CACvF,SAAS,GAAG;EACV,IAAI,aAAa,SAAS,EAAE,QAAQ,SAAS,2BAA2B,GACtE,MAAM;CAGV;CACA,OAAO,gBAAgB,OAAO;AAChC;;;;;;AAOA,SAAS,kBAAkB,UAAoB,WAAoC;CACjF,MAAM,QAAQ,SAAS,MAAM;CAG7B,IAAI,OAAO,IAAI,EAAE,SAAS,MAAM,UAAU,SAAS,GAEjD,OAAO,0BADM,MAAM,QAAQ,KAAK,UAAU,SAAS,GACZ,IAAI;CAI7C,MAAM,SAAS,SAAS,YAAY,SAAS;CAC7C,IAAI,QAEF,OAAO,0BADM,OAAO,QAAQ,KAAK,OAAO,IAAI,EAAE,SAAS,GAChB,KAAK;AAIhD;;;;;;AAOA,SAAS,uBACP,UACA,cACA,OACU;CACV,OAAO,aAAa,KAAK,QAAQ;EAC/B,MAAM,UAAU,IAAI,SAAS,MAAM,MAAM,IAAI,EAAE,SAAS;EACxD,IAAI;EAEJ,IAAI,SACF,OAAO,MAAM,QAAQ,KAAK,IAAI,SAAS;OAGvC,OADe,SAAS,YAAY,GACxB,GAAG,QAAQ,KAAK,IAAI,SAAS;EAG3C,OAAO,0BAA0B,MAAM,OAAO;CAChD,CAAC;AACH;;;;;;;;AASA,eAAsB,QACpB,QACA,WACA,SACA,KAC4B;CAE5B,IAAI,cAAc,KAAA,KAAa,QAAQ,mBAAmB,KAAA,GACxD,MAAM,IAAI,MAAM,8CAA8C;CAGhE,MAAM,eAAe,oBAAoB,QAAQ,cAAc,GAAG;CAClE,MAAM,WAAW,SAAS,KAAK,YAAY;CAC3C,MAAM,QAAQ,SAAS,MAAM;CAE7B,IAAI,CAAC,OACH,MAAM,IAAI,MAAM,8CAA8C;CAIhE,IAAI;CACJ,IAAI,QAAQ,WAAW,KAAA,KAAa,QAAQ,WAAW,IACrD,iBAAiB,uBAAuB,UAAU,QAAQ,MAAM;CAIlE,MAAM,WAAW,MAAM,0BACrB,QACA,WACA,QAAQ,SACR,QAAQ,cACV;CAEA,MAAM,MAAgB,SAAS,IAAI;CACnC,MAAM,gBAAgB,MAAM,YAAY,EAAE,qBAAqB;CAE/D,IAAI,kBAAkB,QAAQ,kBAAkB,KAAA,GAC9C,MAAM,IAAI,MAAM,kDAAkD;CAIpE,MAAM,EAAE,eAAe,uBAAA,UAA+B,YAAY;CA4BlE,MAAM,gBAAuC,mBAAmB,gBAC9D,UACA,KAAA,GACA,KACA,aACF;CAGA,MAAM,YAAY,cAAc,OAAO,EAAE,IAAI;CAE7C,IAAI,mBAAmB,KAAA;MACjB,UAAU,SAAS,MAAM,eAAe,IAAI,EAAE,SAAS,GACzD,MAAM,IAAI,MACR,sDAAsD,UAAU,SAAS,EAAE,aAAa,eAAe,IAAI,EAAE,SAAS,EAAE,EAC1H;CAAA,OAEG;EACL,MAAM,aAAa,MAAM,IAAI,EAAE,SAAS,MAAM,UAAU,SAAS;EACjE,MAAM,mBAAmB,SAAS,YAAY,SAAS,MAAM,KAAA;EAC7D,IAAI,CAAC,cAAc,CAAC,kBAClB,MAAM,IAAI,MAAM,yCAAyC,UAAU,SAAS,GAAG;CAEnF;CAGA,MAAM,EAAE,UAAU,kBAAA,UAA0B,gBAAgB;CAK5D,MAAM,kBAAkB,cAAc,SAAS;CAC/C,MAAM,mBAAmB,cAAc,KAAK,YAAY;CAMxD,IAAI,EAJF,gBAAgB,WAAW,KAAA,IACvB,gBAAgB,OAAO,gBAAgB,IACvC,OAAO,eAAe,MAAM,OAAO,gBAAgB,IAGvD,MAAM,IAAI,MAAM,gCAAgC,OAAO,eAAe,GAAG;CAK3E,IADmB,cAAc,0BAAoC,YACxD,KAAK,KAChB,MAAM,IAAI,MAAM,gCAAgC;CAGlD,MAAM,UAAU,cAAc,0BAAgC,OAAO;CACrE,MAAM,YAAY,cAAc,0BAAgC,SAAS;CACzE,MAAM,aAAa,OAAO,cAAc,0BAA2C,YAAY,CAAC;CAGhG,MAAM,qBAAqB,cAAc,oBAAoB,aAAa;CAC1E,MAAM,eAAsB,CAAC;CAC7B,IAAI;CAEJ,KAAK,MAAM,SAAS,oBAAoB;EACtC,MAAM,MAAW,MAAM,eAAe;EACtC,IAAI,IAAI,SAAS,MAAM,MAAM,IAAI,EAAE,SAAS,GAG1C,eAFsB,MAAM,mBAAmB,eACnB,EAAE,mBAAmB,aAC5B,EAAE,eAAe;EAExC,aAAa,KAAK,GAAG;CACvB;CAGA,IAAI,aAAa,WAAW,GAC1B,MAAM,IAAI,MAAM,6CAA6C;CAE/D,IAAI,aAAa,GACf,MAAM,IAAI,MAAM,+BAA+B;CAEjD,IAAI,aAAa,aAAa,QAC5B,MAAM,IAAI,MAAM,sCAAsC;CAIxD,IAAI,CADwB,aAAa,MAAM,MAAM,EAAE,SAAS,MAAM,MAAM,IAAI,EAAE,SAAS,CACpE,GACrB,MAAM,IAAI,MAAM,sDAAsD;CAGxE,IAAI,iBAAiB,KAAA,GACnB,MAAM,IAAI,MAAM,0CAA0C;CAM5D,aAAa,MAAM,GAAG,MAAM,gBAAgB,EAAE,OAAO,GAAG,EAAE,OAAO,CAAC,CAAC;CAEnE,MAAM,iBAAiB,cAAc,mBAAmB,QAAQ;CAEhE,MAAM,kBAAkB,kBAAkB,UAAU,SAAS,KAAK,UAAU,SAAS;CACrF,MAAM,mBAAmB,uBAAuB,UAAU,cAAc,KAAK;CAG7E,QAAQ,IAAI,UAAU,QAAQ,SAAS,GAAG;CAC1C,QAAQ,IAAI,gBAAgB,iBAAiB;CAC7C,QAAQ,IAAI,gBAAgB,YAAY;CACxC,QAAQ,IAAI,iBAAiB,iBAAiB,KAAK,IAAI,GAAG;CAC1D,QAAQ,IAAI,SAAS;CACrB,QAAQ,IAAI,eAAe,OAAO,CAAC;CAGnC,QAAQ,IAAI,UAAU,SAAS,CAAC;CAGhC,MAAM,WAAW,gBAAgB,cAAc,QAAQ,IAAI,GAAG,UAAU,IAAI,CAAC;CAC7E,GAAG,UAAU,UAAU,EAAE,WAAW,KAAK,CAAC;CAE1C,MAAM,OAAgC;EACpC,kBAAkB,SAAS,SAAS;EACpC,OAAO,QAAQ,SAAS;EACxB,SAAS,UAAU,SAAS;EAC5B,aAAa,UAAU,SAAS;EAChC,aAAa;EACb,eAAe,aAAa,SAAS;EACrC,cAAc,aAAa,KAAK,QAAQ,IAAI,SAAS,CAAC;EACtD,QAAQ,eAAe,SAAS;CAClC;CAEA,GAAG,cAAc,KAAK,KAAK,UAAU,mBAAmB,GAAG,KAAK,UAAU,MAAM,MAAM,CAAC,CAAC;CAExF,OAAO;EACL,WAAW,UAAU,SAAS;EAC9B,SAAS,QAAQ,SAAS;EAC1B,UAAU,eAAe,SAAS;EAClC;EACA;EACA;CACF;AACF"}

package/dist/registry/index.cjs

@@ -1,5 +1,5 @@
 Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
-const require_chunk = require("../chunk-CZWwpsFl.cjs");
+const require_chunk = require("../chunk-DakpK96I.cjs");
 let _bcts_components = require("@bcts/components");
 let _bcts_envelope = require("@bcts/envelope");
 let _bcts_xid = require("@bcts/xid");
@@ -375,8 +375,16 @@ var OwnerRecord = class OwnerRecord {
 	}
 	/**
 	* Deserialize from JSON object.
+	*
+	* Mirrors Rust's `#[serde(deny_unknown_fields)]` derive on
+	* `OwnerRecord` (`owner_record.rs:13-17`) — any field not in
+	* `{xid_document, pet_name}` causes Rust's `serde_json::from_str`
+	* to error with `unknown field`, and we mirror that here so a
+	* registry file produced by a future Rust version with extra
+	* fields is rejected explicitly rather than silently lossy.
 	*/
 	static fromJSON(json) {
+		for (const key of Object.keys(json)) if (key !== "xid_document" && key !== "pet_name") throw new Error(`unknown field \`${key}\`, expected \`xid_document\` or \`pet_name\``);
 		const xidDocumentUr = json["xid_document"];
 		const petName = json["pet_name"];
 		return OwnerRecord.fromSignedXidUr(xidDocumentUr, petName);
@@ -506,8 +514,17 @@ var ParticipantRecord = class ParticipantRecord {
 	}
 	/**
 	* Deserialize from JSON object.
+	*
+	* Mirrors Rust's `#[serde(deny_unknown_fields)]` derive on
+	* `ParticipantRecord` (`participant_record.rs:12-17`) — Rust's
+	* `serde_json::from_str` errors with `unknown field` for any
+	* field outside `{xid_document, pet_name}`. We mirror that
+	* behaviour so a registry file produced by a future Rust
+	* version with extra fields is rejected explicitly rather than
+	* silently lossy.
 	*/
 	static fromJSON(json) {
+		for (const key of Object.keys(json)) if (key !== "xid_document" && key !== "pet_name") throw new Error(`unknown field \`${key}\`, expected \`xid_document\` or \`pet_name\``);
 		const xidDocumentUr = json["xid_document"];
 		const petName = json["pet_name"];
 		return ParticipantRecord.recreateFromSerialized(xidDocumentUr, petName);
@@ -527,9 +544,19 @@ function parseSignedXidDocument(xidDocumentUr) {
 	try {
 		envelope = _bcts_envelope.Envelope.fromTaggedCbor(envelopeCbor);
 	} catch {
-		envelope = _bcts_envelope.Envelope.fromUntaggedCbor(envelopeCbor);
+		try {
+			envelope = _bcts_envelope.Envelope.fromUntaggedCbor(envelopeCbor);
+		} catch (e) {
+			throw new Error(`Unable to decode XID document envelope: ${e.message ?? String(e)}`, { cause: e });
+		}
+	}
+	let document;
+	try {
+		document = _bcts_xid.XIDDocument.fromEnvelope(envelope, void 0, _bcts_xid.XIDVerifySignature.Inception);
+	} catch (e) {
+		throw new Error(`XID document must be signed by its inception key: ${e.message ?? String(e)}`, { cause: e });
 	}
-	return [sanitized, _bcts_xid.XIDDocument.fromEnvelope(envelope, void 0, _bcts_xid.XIDVerifySignature.Inception)];
+	return [sanitized, document];
 }
 /**
 * Sanitize XID UR input.
@@ -652,13 +679,43 @@ var Registry = class Registry {
 	/**
 	* Add a participant.
 	*
-	* Returns the outcome indicating whether the participant was already present or newly inserted.
+	* Mirrors Rust `Registry::add_participant`
+	* (`registry_impl.rs:83-124`):
+	*
+	* 1. If `record.pet_name()` is already used by some other XID,
+	*    bail with `"Pet name '{name}' already used by another
+	*    participant"`.
+	* 2. If `record.pet_name()` matches an existing record under the
+	*    *same* XID and the public keys also match, return
+	*    `AlreadyPresent`.
+	* 3. If the pet name matches the same XID but public keys don't,
+	*    bail with `"Participant already exists with a different pet
+	*    name"`.
+	* 4. Otherwise look up by XID. If present and public-keys + pet-name
+	*    both match, return `AlreadyPresent`; if XID is present but
+	*    anything differs, bail. If XID is new, insert and return
+	*    `Inserted`.
+	*
+	* The earlier port short-circuited on `participants.has(xidUr)` and
+	* always returned `AlreadyPresent` — silently allowing re-adds with
+	* a different pet name or different public keys, which Rust
+	* correctly forbids.
 	*/
 	addParticipant(xid, record) {
 		const xidUr = xid.urString();
-		if (this._participants.has(xidUr)) return "already_present";
 		const petName = record.petName();
-		if (petName !== void 0 && this.petNameExists(petName)) throw new Error(`Pet name "${petName}" is already used by another participant`);
+		if (petName !== void 0) {
+			for (const [existingXidUr, existingRecord] of this._participants) if (existingRecord.petName() === petName) {
+				if (existingXidUr !== xidUr) throw new Error(`Pet name '${petName}' already used by another participant`);
+				if (publicKeysEqual(existingRecord.publicKeys(), record.publicKeys())) return "already_present";
+				throw new Error("Participant already exists with a different pet name");
+			}
+		}
+		const existing = this._participants.get(xidUr);
+		if (existing !== void 0) {
+			if (publicKeysEqual(existing.publicKeys(), record.publicKeys()) && existing.petName() === record.petName()) return "already_present";
+			throw new Error("Participant already exists with a different pet name");
+		}
 		this._participants.set(xidUr, record);
 		return "inserted";
 	}
@@ -748,17 +805,25 @@ var Registry = class Registry {
 	}
 	/**
 	* Serialize to JSON object.
+	*
+	* Mirrors Rust `Registry`'s field declaration order
+	* (`registry_impl.rs:8-14` — `owner, participants, groups`). JSON
+	* object member order is not semantically significant, but
+	* `serde_json::to_string_pretty` emits keys in declaration order,
+	* so for byte-equal `registry.json` (used by the integration tests
+	* as a string assertion) the TS port must match Rust's order.
+	* Empty `owner` is omitted via `Option::None` skip in Rust; we
+	* reproduce that by only setting the key when the owner exists.
 	*/
 	toJSON() {
+		const obj = {};
+		if (this._owner !== void 0) obj["owner"] = this._owner.toJSON();
 		const participants = {};
 		for (const [xidUr, record] of this._participants) participants[xidUr] = record.toJSON();
+		obj["participants"] = participants;
 		const groups = {};
 		for (const [aridHex, record] of this._groups) groups[aridHex] = record.toJSON();
-		const obj = {
-			groups,
-			participants
-		};
-		if (this._owner !== void 0) obj["owner"] = this._owner.toJSON();
+		obj["groups"] = groups;
 		return obj;
 	}
 	/**
@@ -791,6 +856,16 @@ function resolveRegistryPath(registryArg, cwd) {
 	if (!registryArg.includes("/") && !registryArg.includes(node_path.sep)) return node_path.join(cwd, registryArg);
 	return node_path.resolve(cwd, registryArg);
 }
+/**
+* Structural equality on `PublicKeys`, mirroring Rust's
+* `PartialEq::eq` derive (per-component comparison of the signing
+* and encapsulation public keys).
+*
+* @internal
+*/
+function publicKeysEqual(a, b) {
+	return a.equals(b);
+}
 //#endregion
 exports.AddOutcome = AddOutcome;
 exports.ContributionPaths = ContributionPaths;