@bcts/frost-hubert 1.0.0-alpha.23 → 1.0.0-beta.1

package/dist/round1-CXkXoVQU.cjs

@@ -0,0 +1,208 @@
+const require_chunk = require("./chunk-DakpK96I.cjs");
+const require_proposed_participant = require("./proposed-participant-BvHNnpcZ.cjs");
+const require_registry_index = require("./registry/index.cjs");
+const require_common = require("./common-CnvAUC2b.cjs");
+const require_busy = require("./busy-B_h0bNAJ.cjs");
+const require_registry = require("./registry-CkIbA7nt.cjs");
+const require_receive = require("./receive-BR-knnGv.cjs");
+const require_frost_index = require("./frost/index.cjs");
+let _bcts_components = require("@bcts/components");
+let _bcts_dcbor = require("@bcts/dcbor");
+let _bcts_envelope = require("@bcts/envelope");
+let _bcts_gstp = require("@bcts/gstp");
+let node_fs = require("node:fs");
+node_fs = require_chunk.__toESM(node_fs, 1);
+let node_path = require("node:path");
+node_path = require_chunk.__toESM(node_path, 1);
+let _frosts_ed25519 = require("@frosts/ed25519");
+//#region src/cmd/dkg/participant/round1.ts
+/**
+* Copyright © 2023-2026 Blockchain Commons, LLC
+* Copyright © 2025-2026 Parity Technologies
+*
+*
+* DKG participant round 1 command.
+*
+* Port of cmd/dkg/participant/round1.rs from frost-hubert-rust.
+*
+* @module
+*/
+var round1_exports = /* @__PURE__ */ require_chunk.__exportAll({ round1: () => round1 });
+/**
+* Resolve an invite envelope from either storage (ARID) or direct UR.
+*
+* Port of `resolve_invite_envelope()` from cmd/dkg/participant/round1.rs lines 256-288.
+*/
+async function resolveInviteEnvelope(selection, invite, timeout) {
+	if (selection !== void 0) {
+		try {
+			const arid = require_common.parseAridUr(invite);
+			const envelope = await require_busy.getWithIndicator(await require_registry.createStorageClient(selection), arid, "Invite", timeout, false);
+			if (envelope === null || envelope === void 0) throw new Error("Invite not found in Hubert storage");
+			return envelope;
+		} catch (e) {
+			if (e instanceof Error && e.message.includes("Invite not found in Hubert storage")) throw e;
+		}
+		if (timeout !== void 0) throw new Error("--timeout is only valid when retrieving invites from Hubert");
+		return require_common.parseEnvelopeUr(invite);
+	}
+	try {
+		require_common.parseAridUr(invite);
+		throw new Error("Hubert storage parameters are required to retrieve invites by ARID");
+	} catch (e) {
+		if (e instanceof Error && e.message.includes("Hubert storage parameters are required")) throw e;
+	}
+	return require_common.parseEnvelopeUr(invite);
+}
+/**
+* Build the response body envelope.
+*
+* Port of `build_response_body()` from cmd/dkg/participant/round1.rs lines 290-308.
+*/
+function buildResponseBody(groupId, participant, responseArid, round1Package) {
+	let envelope = _bcts_envelope.Envelope.unit().addType("dkgRound1Response").addAssertion("group", groupId).addAssertion("participant", participant).addAssertion("response_arid", responseArid);
+	if (round1Package !== void 0) {
+		const packageJson = _frosts_ed25519.serde.round1PackageToJson(round1Package);
+		const jsonStr = globalThis.JSON.stringify(packageJson);
+		const jsonBytes = new TextEncoder().encode(jsonStr);
+		const jsonWrapper = _bcts_components.JSON.fromData(jsonBytes);
+		envelope = envelope.addAssertion("round1_package", jsonWrapper);
+	}
+	return envelope;
+}
+/**
+* Serialize round 1 secret package to JSON-compatible format.
+*
+* The @frosts/ed25519 serde module doesn't provide a serializer for SecretPackage,
+* so we manually serialize it here.
+*/
+function serializeRound1SecretPackage(secret) {
+	const serializedCoefficients = secret.coefficients().map((c) => require_frost_index.bytesToHex(_frosts_ed25519.Ed25519Sha512.serializeScalar(c)));
+	const commitmentCoefficients = secret.commitment.serialize().map((c) => require_frost_index.bytesToHex(c));
+	return {
+		identifier: require_frost_index.bytesToHex(secret.identifier.serialize()),
+		coefficients: serializedCoefficients,
+		commitment: commitmentCoefficients,
+		min_signers: secret.minSigners,
+		max_signers: secret.maxSigners
+	};
+}
+/**
+* Persist round 1 state to disk.
+*
+* Port of `persist_round1_state()` from cmd/dkg/participant/round1.rs lines 310-337.
+*/
+function persistRound1State(registryPath, groupId, round1Secret, round1Package) {
+	const dir = require_common.groupStateDir(registryPath, groupId.hex());
+	node_fs.mkdirSync(dir, { recursive: true });
+	const secretPath = node_path.join(dir, "round1_secret.json");
+	const packagePath = node_path.join(dir, "round1_package.json");
+	const secretJson = serializeRound1SecretPackage(round1Secret);
+	const packageJson = _frosts_ed25519.serde.round1PackageToJson(round1Package);
+	node_fs.writeFileSync(secretPath, globalThis.JSON.stringify(secretJson, null, 2));
+	node_fs.writeFileSync(packagePath, globalThis.JSON.stringify(packageJson, null, 2));
+	return new require_registry_index.ContributionPaths({
+		round1Secret: secretPath,
+		round1Package: packagePath,
+		round2Secret: void 0,
+		keyPackage: void 0
+	});
+}
+/**
+* Execute the DKG participant round 1 command.
+*
+* Responds to the DKG invite with commitment packages.
+*
+* Port of `CommandArgs::exec()` from cmd/dkg/participant/round1.rs lines 66-254.
+*/
+async function round1(_client, options, cwd) {
+	if (options.storageSelection === void 0 && options.timeoutSeconds !== void 0) throw new Error("--timeout requires Hubert storage parameters");
+	if (options.storageSelection !== void 0 && options.preview === true) throw new Error("--preview cannot be used with Hubert storage options");
+	const registryPath = require_registry_index.resolveRegistryPath(options.registryPath, cwd);
+	const registry = require_registry_index.Registry.load(registryPath);
+	const owner = registry.owner();
+	if (!owner) throw new Error("Registry owner with private keys is required");
+	let expectedSender;
+	if (options.sender !== void 0) expectedSender = require_common.resolveSender(registry, options.sender);
+	const nextResponseArid = options.responseArid !== void 0 ? require_common.parseAridUr(options.responseArid) : _bcts_components.ARID.new();
+	const details = require_receive.decodeInviteDetails(await resolveInviteEnvelope(options.storageSelection, options.invite, options.timeoutSeconds), _bcts_dcbor.CborDate.now().datetime(), registry, owner.xidDocument(), expectedSender);
+	const sortedParticipants = [...details.participants].sort((a, b) => require_proposed_participant.compareXidBytes(a.xid().toData(), b.xid().toData()));
+	const ownerIndex = sortedParticipants.findIndex((doc) => doc.xid().urString() === owner.xid().urString());
+	if (ownerIndex === -1) throw new Error("Invite does not include the registry owner");
+	const identifierIndex = ownerIndex + 1;
+	if (identifierIndex > 65535) throw new Error("Too many participants for identifiers");
+	const identifier = require_frost_index.identifierFromU16(identifierIndex);
+	const total = sortedParticipants.length;
+	if (total > 65535) throw new Error("Too many participants for FROST identifiers");
+	const minSigners = details.invitation.minSigners();
+	if (minSigners > 65535) throw new Error("min_signers does not fit into identifier space");
+	const groupParticipants = require_common.buildGroupParticipants(registry, owner, sortedParticipants);
+	const coordinator = require_common.groupParticipantFromRegistry(registry, owner, details.invitation.sender());
+	const isPosting = options.storageSelection !== void 0;
+	let responseBody;
+	let contributions;
+	if (options.rejectReason === void 0 && isPosting) {
+		const [round1Secret, round1Package] = require_frost_index.dkgPart1(identifier, total, minSigners, require_frost_index.createRng());
+		contributions = persistRound1State(registryPath, details.invitation.groupId(), round1Secret, round1Package);
+		responseBody = buildResponseBody(details.invitation.groupId(), owner.xid(), nextResponseArid, round1Package);
+		const groupRecord = new require_registry_index.GroupRecord(details.invitation.charter(), details.invitation.minSigners(), coordinator, groupParticipants);
+		groupRecord.setContributions(contributions);
+		groupRecord.setListeningAtArid(nextResponseArid);
+		registry.recordGroup(details.invitation.groupId(), groupRecord);
+		registry.save(registryPath);
+	} else if (options.rejectReason === void 0) {
+		const [, round1Package] = require_frost_index.dkgPart1(identifier, total, minSigners, require_frost_index.createRng());
+		responseBody = buildResponseBody(details.invitation.groupId(), owner.xid(), nextResponseArid, round1Package);
+	} else responseBody = buildResponseBody(details.invitation.groupId(), owner.xid(), nextResponseArid, void 0);
+	const signerPrivateKeys = owner.xidDocument().inceptionPrivateKeys();
+	if (signerPrivateKeys === void 0) throw new Error("Owner XID document has no signing keys");
+	let sealed;
+	if (options.rejectReason !== void 0) {
+		const errorBody = _bcts_envelope.Envelope.new("dkgInviteReject").addAssertion("group", details.invitation.groupId()).addAssertion("response_arid", nextResponseArid).addAssertion("reason", options.rejectReason);
+		sealed = _bcts_gstp.SealedResponse.newFailure(details.invitation.requestId(), owner.xidDocument()).withError(errorBody).withState(nextResponseArid);
+	} else sealed = _bcts_gstp.SealedResponse.newSuccess(details.invitation.requestId(), owner.xidDocument()).withResult(responseBody).withState(nextResponseArid);
+	const peerContinuation = details.invitation.peerContinuation();
+	if (peerContinuation !== void 0) sealed = sealed.withPeerContinuation(peerContinuation);
+	if (options.storageSelection !== void 0) {
+		const responseEnvelope = sealed.toEnvelope(details.invitation.validUntil(), signerPrivateKeys, details.invitation.sender());
+		const responseTarget = details.invitation.responseArid();
+		await require_busy.putWithIndicator(await require_registry.createStorageClient(options.storageSelection), responseTarget, responseEnvelope, "Round 1 Response", options.verbose ?? false);
+		if (options.verbose === true) {
+			console.log(`Sent round 1 response`);
+			console.log(`Listening at: ${nextResponseArid.urString()}`);
+		}
+		return {
+			accepted: options.rejectReason === void 0,
+			listeningArid: nextResponseArid.urString()
+		};
+	} else if (options.preview === true) {
+		const envelopeUr = sealed.toEnvelope(void 0, signerPrivateKeys, void 0).urString();
+		console.log(envelopeUr);
+		return {
+			accepted: options.rejectReason === void 0,
+			envelopeUr
+		};
+	} else {
+		const envelopeUr = sealed.toEnvelope(details.invitation.validUntil(), signerPrivateKeys, details.invitation.sender()).urString();
+		console.log(envelopeUr);
+		return {
+			accepted: options.rejectReason === void 0,
+			envelopeUr
+		};
+	}
+}
+//#endregion
+Object.defineProperty(exports, "round1", {
+	enumerable: true,
+	get: function() {
+		return round1;
+	}
+});
+Object.defineProperty(exports, "round1_exports", {
+	enumerable: true,
+	get: function() {
+		return round1_exports;
+	}
+});
+
+//# sourceMappingURL=round1-CXkXoVQU.cjs.map

package/dist/round1-CXkXoVQU.cjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"round1-CXkXoVQU.cjs","names":["parseAridUr","getWithIndicator","createStorageClient","parseEnvelopeUr","Envelope","serde","JSONWrapper","bytesToHex","Ed25519Sha512","groupStateDir","path","ContributionPaths","resolveRegistryPath","Registry","resolveSender","ARID","decodeInviteDetails","CborDate","compareXidBytes","identifierFromU16","buildGroupParticipants","groupParticipantFromRegistry","dkgPart1","createRng","GroupRecord","SealedResponse","putWithIndicator"],"sources":["../src/cmd/dkg/participant/round1.ts"],"sourcesContent":["/**\n * Copyright © 2023-2026 Blockchain Commons, LLC\n * Copyright © 2025-2026 Parity Technologies\n *\n *\n * DKG participant round 1 command.\n *\n * Port of cmd/dkg/participant/round1.rs from frost-hubert-rust.\n *\n * @module\n */\n\nimport * as fs from \"node:fs\";\nimport * as path from \"node:path\";\n\nimport { ARID, JSON as JSONWrapper, type XID } from \"@bcts/components\";\nimport { compareXidBytes } from \"../../../dkg/proposed-participant.js\";\nimport { Envelope } from \"@bcts/envelope\";\nimport { SealedResponse } from \"@bcts/gstp\";\nimport type { XIDDocument } from \"@bcts/xid\";\n\nimport {\n  ContributionPaths,\n  GroupRecord,\n  Registry,\n  resolveRegistryPath,\n} from \"../../../registry/index.js\";\nimport { getWithIndicator, putWithIndicator } from \"../../busy.js\";\nimport { createStorageClient, type StorageClient, type StorageSelection } from \"../../storage.js\";\nimport { groupStateDir } from \"../../common.js\";\nimport {\n  buildGroupParticipants,\n  groupParticipantFromRegistry,\n  parseAridUr,\n  parseEnvelopeUr,\n  resolveSender,\n} from \"../common.js\";\nimport {\n  dkgPart1,\n  identifierFromU16,\n  createRng,\n  bytesToHex,\n  type DkgRound1Package,\n  type DkgRound1SecretPackage,\n} from \"../../../frost/index.js\";\nimport { Ed25519Sha512, serde } from \"@frosts/ed25519\";\nimport { decodeInviteDetails } from \"./receive.js\";\nimport { CborDate } from \"@bcts/dcbor\";\n\n/**\n * Options for the DKG round1 command.\n */\nexport interface DkgRound1Options {\n  registryPath?: string;\n  timeoutSeconds?: number;\n  responseArid?: string;\n  preview?: boolean;\n  rejectReason?: string;\n  sender?: string;\n  invite: string;\n  storageSelection?: StorageSelection;\n  verbose?: boolean;\n}\n\n/**\n * Result of the DKG round1 command.\n */\nexport interface DkgRound1Result {\n  accepted: boolean;\n  listeningArid?: string;\n  envelopeUr?: string;\n}\n\n/**\n * Resolve an invite envelope from either storage (ARID) or direct UR.\n *\n * Port of `resolve_invite_envelope()` from cmd/dkg/participant/round1.rs lines 256-288.\n */\nasync function resolveInviteEnvelope(\n  selection: StorageSelection | undefined,\n  invite: string,\n  timeout?: number,\n): Promise<Envelope> {\n  if (selection !== undefined) {\n    // Try to parse as ARID\n    try {\n      const arid = parseAridUr(invite);\n      const client = await createStorageClient(selection);\n      const envelope = await getWithIndicator(client, arid, \"Invite\", timeout, false);\n      if (envelope === null || envelope === undefined) {\n        throw new Error(\"Invite not found in Hubert storage\");\n      }\n      return envelope;\n    } catch (e) {\n      // Not an ARID, fall through to envelope parsing\n      if (e instanceof Error && e.message.includes(\"Invite not found in Hubert storage\")) {\n        throw e;\n      }\n    }\n\n    if (timeout !== undefined) {\n      throw new Error(\"--timeout is only valid when retrieving invites from Hubert\");\n    }\n\n    return parseEnvelopeUr(invite);\n  }\n\n  // No storage selection\n  try {\n    parseAridUr(invite);\n    throw new Error(\"Hubert storage parameters are required to retrieve invites by ARID\");\n  } catch (e) {\n    // Not an ARID, parse as envelope\n    if (e instanceof Error && e.message.includes(\"Hubert storage parameters are required\")) {\n      throw e;\n    }\n  }\n\n  return parseEnvelopeUr(invite);\n}\n\n/**\n * Build the response body envelope.\n *\n * Port of `build_response_body()` from cmd/dkg/participant/round1.rs lines 290-308.\n */\nfunction buildResponseBody(\n  groupId: ARID,\n  participant: XID,\n  responseArid: ARID,\n  round1Package: DkgRound1Package | undefined,\n): Envelope {\n  let envelope = Envelope.unit()\n    .addType(\"dkgRound1Response\")\n    .addAssertion(\"group\", groupId)\n    .addAssertion(\"participant\", participant)\n    .addAssertion(\"response_arid\", responseArid);\n\n  if (round1Package !== undefined) {\n    // Serialize the package to JSON and wrap as CBOR JSON\n    const packageJson = serde.round1PackageToJson(round1Package);\n    const jsonStr = globalThis.JSON.stringify(packageJson);\n    const jsonBytes = new TextEncoder().encode(jsonStr);\n    const jsonWrapper = JSONWrapper.fromData(jsonBytes);\n    // Pass the JSONWrapper directly - it implements CborTaggedEncodable\n    envelope = envelope.addAssertion(\"round1_package\", jsonWrapper);\n  }\n\n  return envelope;\n}\n\n/**\n * Serialize round 1 secret package to JSON-compatible format.\n *\n * The @frosts/ed25519 serde module doesn't provide a serializer for SecretPackage,\n * so we manually serialize it here.\n */\nfunction serializeRound1SecretPackage(secret: DkgRound1SecretPackage): Record<string, unknown> {\n  // Mirrors the on-disk shape produced by Rust\n  // `serde_json::to_vec_pretty(&frost::keys::dkg::round1::SecretPackage)`\n  // (see `frost-rust/frost-core/src/keys/dkg.rs:120-139`):\n  //\n  //   {\n  //     \"identifier\": \"<lowercase hex scalar>\",\n  //     \"coefficients\": [\"<hex>\", \"<hex>\", ...],\n  //     \"commitment\": [\"<hex>\", \"<hex>\", ...],\n  //     \"min_signers\": <u16>,\n  //     \"max_signers\": <u16>\n  //   }\n  //\n  // `frost::keys::dkg::round1::SecretPackage` is `#[serde(deny_unknown_fields)]`\n  // and has no `header` field (the secret package is private to the\n  // participant). The earlier port emitted a top-level `header` which\n  // would fail `deny_unknown_fields` validation if Rust ever loaded\n  // the file.\n  //\n  // `Identifier`/`SerializableScalar` serialize via\n  // `serdect::array::serialize_hex_lower_or_bin` → lowercase hex for\n  // JSON, which `bytesToHex` produces.\n  const coefficients = secret.coefficients();\n  const serializedCoefficients = coefficients.map((c: unknown) =>\n    bytesToHex(\n      Ed25519Sha512.serializeScalar(c as Parameters<typeof Ed25519Sha512.serializeScalar>[0]),\n    ),\n  );\n\n  const commitment = secret.commitment;\n  const commitmentCoefficients = commitment.serialize().map((c: Uint8Array) => bytesToHex(c));\n\n  return {\n    identifier: bytesToHex(secret.identifier.serialize()),\n    coefficients: serializedCoefficients,\n    commitment: commitmentCoefficients,\n    min_signers: secret.minSigners,\n    max_signers: secret.maxSigners,\n  };\n}\n\n/**\n * Persist round 1 state to disk.\n *\n * Port of `persist_round1_state()` from cmd/dkg/participant/round1.rs lines 310-337.\n */\nfunction persistRound1State(\n  registryPath: string,\n  groupId: ARID,\n  round1Secret: DkgRound1SecretPackage,\n  round1Package: DkgRound1Package,\n): ContributionPaths {\n  const dir = groupStateDir(registryPath, groupId.hex());\n  fs.mkdirSync(dir, { recursive: true });\n\n  const secretPath = path.join(dir, \"round1_secret.json\");\n  const packagePath = path.join(dir, \"round1_package.json\");\n\n  // Serialize the secret package manually since serde doesn't provide it\n  const secretJson = serializeRound1SecretPackage(round1Secret);\n  // Serialize the public package using the standard serde function\n  const packageJson = serde.round1PackageToJson(round1Package);\n\n  fs.writeFileSync(secretPath, globalThis.JSON.stringify(secretJson, null, 2));\n  fs.writeFileSync(packagePath, globalThis.JSON.stringify(packageJson, null, 2));\n\n  return new ContributionPaths({\n    round1Secret: secretPath,\n    round1Package: packagePath,\n    round2Secret: undefined,\n    keyPackage: undefined,\n  });\n}\n\n/**\n * Execute the DKG participant round 1 command.\n *\n * Responds to the DKG invite with commitment packages.\n *\n * Port of `CommandArgs::exec()` from cmd/dkg/participant/round1.rs lines 66-254.\n */\nexport async function round1(\n  _client: StorageClient | undefined,\n  options: DkgRound1Options,\n  cwd: string,\n): Promise<DkgRound1Result> {\n  // Validate options\n  if (options.storageSelection === undefined && options.timeoutSeconds !== undefined) {\n    throw new Error(\"--timeout requires Hubert storage parameters\");\n  }\n  if (options.storageSelection !== undefined && options.preview === true) {\n    throw new Error(\"--preview cannot be used with Hubert storage options\");\n  }\n\n  const registryPath = resolveRegistryPath(options.registryPath, cwd);\n  const registry = Registry.load(registryPath);\n\n  const owner = registry.owner();\n  if (!owner) {\n    throw new Error(\"Registry owner with private keys is required\");\n  }\n\n  // Resolve expected sender if provided. Uses the shared helper from\n  // `cmd/dkg/common.ts` (mirrors Rust `resolve_sender`); the\n  // duplicated inline implementation that this previously called has\n  // been removed.\n  let expectedSender: XIDDocument | undefined;\n  if (options.sender !== undefined) {\n    expectedSender = resolveSender(registry, options.sender);\n  }\n\n  const nextResponseArid =\n    options.responseArid !== undefined ? parseAridUr(options.responseArid) : ARID.new();\n\n  // Resolve the invite envelope\n  const inviteEnvelope = await resolveInviteEnvelope(\n    options.storageSelection,\n    options.invite,\n    options.timeoutSeconds,\n  );\n\n  // Decode the invite details\n  const now = CborDate.now().datetime();\n  const details = decodeInviteDetails(\n    inviteEnvelope,\n    now,\n    registry,\n    owner.xidDocument(),\n    expectedSender,\n  );\n\n  // Sort participants by XID byte order (mirrors Rust `XID::cmp` —\n  // raw 32-byte lex compare). The earlier port used\n  // `xid.urString().localeCompare(...)`, which differs from byte\n  // order when bytes ≥ 0x80 are present and is locale-aware,\n  // producing different FROST identifier assignments and therefore\n  // different secret shares than Rust.\n  const sortedParticipants = [...details.participants].sort((a, b) =>\n    compareXidBytes(a.xid().toData(), b.xid().toData()),\n  );\n\n  const ownerIndex = sortedParticipants.findIndex(\n    (doc) => doc.xid().urString() === owner.xid().urString(),\n  );\n  if (ownerIndex === -1) {\n    throw new Error(\"Invite does not include the registry owner\");\n  }\n\n  const identifierIndex = ownerIndex + 1; // FROST uses 1-indexed identifiers\n  if (identifierIndex > 65535) {\n    throw new Error(\"Too many participants for identifiers\");\n  }\n  const identifier = identifierFromU16(identifierIndex);\n\n  const total = sortedParticipants.length;\n  if (total > 65535) {\n    throw new Error(\"Too many participants for FROST identifiers\");\n  }\n\n  const minSigners = details.invitation.minSigners();\n  if (minSigners > 65535) {\n    throw new Error(\"min_signers does not fit into identifier space\");\n  }\n\n  // Build group participants for the registry\n  const groupParticipants = buildGroupParticipants(registry, owner, sortedParticipants);\n  const coordinator = groupParticipantFromRegistry(registry, owner, details.invitation.sender());\n\n  // Check if we're posting to storage\n  const isPosting = options.storageSelection !== undefined;\n\n  // Build the response body\n  let responseBody: Envelope;\n  let contributions: ContributionPaths | undefined;\n\n  if (options.rejectReason === undefined && isPosting) {\n    // Actually posting - generate and persist round1 state\n    const [round1Secret, round1Package] = dkgPart1(identifier, total, minSigners, createRng());\n\n    contributions = persistRound1State(\n      registryPath,\n      details.invitation.groupId(),\n      round1Secret,\n      round1Package,\n    );\n\n    responseBody = buildResponseBody(\n      details.invitation.groupId(),\n      owner.xid(),\n      nextResponseArid,\n      round1Package,\n    );\n\n    // Create and save group record\n    const groupRecord = new GroupRecord(\n      details.invitation.charter(),\n      details.invitation.minSigners(),\n      coordinator,\n      groupParticipants,\n    );\n    groupRecord.setContributions(contributions);\n    groupRecord.setListeningAtArid(nextResponseArid);\n\n    registry.recordGroup(details.invitation.groupId(), groupRecord);\n    registry.save(registryPath);\n  } else if (options.rejectReason === undefined) {\n    // Preview mode - generate dummy round1 for envelope structure only\n    const [, round1Package] = dkgPart1(identifier, total, minSigners, createRng());\n\n    responseBody = buildResponseBody(\n      details.invitation.groupId(),\n      owner.xid(),\n      nextResponseArid,\n      round1Package,\n    );\n  } else {\n    // Rejecting - no round1 needed\n    responseBody = buildResponseBody(\n      details.invitation.groupId(),\n      owner.xid(),\n      nextResponseArid,\n      undefined,\n    );\n  }\n\n  // Build the sealed response\n  const signerPrivateKeys = owner.xidDocument().inceptionPrivateKeys();\n  if (signerPrivateKeys === undefined) {\n    throw new Error(\"Owner XID document has no signing keys\");\n  }\n\n  let sealed: SealedResponse;\n  if (options.rejectReason !== undefined) {\n    // Build rejection error body\n    const errorBody = Envelope.new(\"dkgInviteReject\")\n      .addAssertion(\"group\", details.invitation.groupId())\n      .addAssertion(\"response_arid\", nextResponseArid)\n      .addAssertion(\"reason\", options.rejectReason);\n\n    sealed = SealedResponse.newFailure(details.invitation.requestId(), owner.xidDocument())\n      .withError(errorBody)\n      .withState(nextResponseArid);\n  } else {\n    sealed = SealedResponse.newSuccess(details.invitation.requestId(), owner.xidDocument())\n      .withResult(responseBody)\n      .withState(nextResponseArid);\n  }\n\n  // Add peer continuation if present\n  const peerContinuation = details.invitation.peerContinuation();\n  if (peerContinuation !== undefined) {\n    sealed = sealed.withPeerContinuation(peerContinuation);\n  }\n\n  // Handle output based on storage selection\n  if (options.storageSelection !== undefined) {\n    const responseEnvelope = sealed.toEnvelope(\n      details.invitation.validUntil(),\n      signerPrivateKeys,\n      details.invitation.sender(),\n    );\n\n    const responseTarget = details.invitation.responseArid();\n    const client = await createStorageClient(options.storageSelection);\n\n    await putWithIndicator(\n      client,\n      responseTarget,\n      responseEnvelope,\n      \"Round 1 Response\",\n      options.verbose ?? false,\n    );\n\n    if (options.verbose === true) {\n      console.log(`Sent round 1 response`);\n      console.log(`Listening at: ${nextResponseArid.urString()}`);\n    }\n\n    return {\n      accepted: options.rejectReason === undefined,\n      listeningArid: nextResponseArid.urString(),\n    };\n  } else if (options.preview === true) {\n    // Show the GSTP response structure without encryption\n    const unsealedEnvelope = sealed.toEnvelope(undefined, signerPrivateKeys, undefined);\n    const envelopeUr = unsealedEnvelope.urString();\n    console.log(envelopeUr);\n\n    return {\n      accepted: options.rejectReason === undefined,\n      envelopeUr,\n    };\n  } else {\n    // Print the sealed envelope\n    const responseEnvelope = sealed.toEnvelope(\n      details.invitation.validUntil(),\n      signerPrivateKeys,\n      details.invitation.sender(),\n    );\n    const envelopeUr = responseEnvelope.urString();\n    console.log(envelopeUr);\n\n    return {\n      accepted: options.rejectReason === undefined,\n      envelopeUr,\n    };\n  }\n}\n\n// `resolveSenderXidDocument` removed — it was an inline duplicate of\n// Rust `resolve_sender(registry, input)`. The shared helper now lives\n// in `cmd/dkg/common.ts` and is imported above.\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AA8EA,eAAe,sBACb,WACA,QACA,SACmB;CACnB,IAAI,cAAc,KAAA,GAAW;EAE3B,IAAI;GACF,MAAM,OAAOA,eAAAA,YAAY,MAAM;GAE/B,MAAM,WAAW,MAAMC,aAAAA,iBAAiB,MADnBC,iBAAAA,oBAAoB,SAAS,GACF,MAAM,UAAU,SAAS,KAAK;GAC9E,IAAI,aAAa,QAAQ,aAAa,KAAA,GACpC,MAAM,IAAI,MAAM,oCAAoC;GAEtD,OAAO;EACT,SAAS,GAAG;GAEV,IAAI,aAAa,SAAS,EAAE,QAAQ,SAAS,oCAAoC,GAC/E,MAAM;EAEV;EAEA,IAAI,YAAY,KAAA,GACd,MAAM,IAAI,MAAM,6DAA6D;EAG/E,OAAOC,eAAAA,gBAAgB,MAAM;CAC/B;CAGA,IAAI;EACF,eAAA,YAAY,MAAM;EAClB,MAAM,IAAI,MAAM,oEAAoE;CACtF,SAAS,GAAG;EAEV,IAAI,aAAa,SAAS,EAAE,QAAQ,SAAS,wCAAwC,GACnF,MAAM;CAEV;CAEA,OAAOA,eAAAA,gBAAgB,MAAM;AAC/B;;;;;;AAOA,SAAS,kBACP,SACA,aACA,cACA,eACU;CACV,IAAI,WAAWC,eAAAA,SAAS,KAAK,EAC1B,QAAQ,mBAAmB,EAC3B,aAAa,SAAS,OAAO,EAC7B,aAAa,eAAe,WAAW,EACvC,aAAa,iBAAiB,YAAY;CAE7C,IAAI,kBAAkB,KAAA,GAAW;EAE/B,MAAM,cAAcC,gBAAAA,MAAM,oBAAoB,aAAa;EAC3D,MAAM,UAAU,WAAW,KAAK,UAAU,WAAW;EACrD,MAAM,YAAY,IAAI,YAAY,EAAE,OAAO,OAAO;EAClD,MAAM,cAAcC,iBAAAA,KAAY,SAAS,SAAS;EAElD,WAAW,SAAS,aAAa,kBAAkB,WAAW;CAChE;CAEA,OAAO;AACT;;;;;;;AAQA,SAAS,6BAA6B,QAAyD;CAuB7F,MAAM,yBADe,OAAO,aACc,EAAE,KAAK,MAC/CC,oBAAAA,WACEC,gBAAAA,cAAc,gBAAgB,CAAwD,CACxF,CACF;CAGA,MAAM,yBADa,OAAO,WACgB,UAAU,EAAE,KAAK,MAAkBD,oBAAAA,WAAW,CAAC,CAAC;CAE1F,OAAO;EACL,YAAYA,oBAAAA,WAAW,OAAO,WAAW,UAAU,CAAC;EACpD,cAAc;EACd,YAAY;EACZ,aAAa,OAAO;EACpB,aAAa,OAAO;CACtB;AACF;;;;;;AAOA,SAAS,mBACP,cACA,SACA,cACA,eACmB;CACnB,MAAM,MAAME,eAAAA,cAAc,cAAc,QAAQ,IAAI,CAAC;CACrD,QAAG,UAAU,KAAK,EAAE,WAAW,KAAK,CAAC;CAErC,MAAM,aAAaC,UAAK,KAAK,KAAK,oBAAoB;CACtD,MAAM,cAAcA,UAAK,KAAK,KAAK,qBAAqB;CAGxD,MAAM,aAAa,6BAA6B,YAAY;CAE5D,MAAM,cAAcL,gBAAAA,MAAM,oBAAoB,aAAa;CAE3D,QAAG,cAAc,YAAY,WAAW,KAAK,UAAU,YAAY,MAAM,CAAC,CAAC;CAC3E,QAAG,cAAc,aAAa,WAAW,KAAK,UAAU,aAAa,MAAM,CAAC,CAAC;CAE7E,OAAO,IAAIM,uBAAAA,kBAAkB;EAC3B,cAAc;EACd,eAAe;EACf,cAAc,KAAA;EACd,YAAY,KAAA;CACd,CAAC;AACH;;;;;;;;AASA,eAAsB,OACpB,SACA,SACA,KAC0B;CAE1B,IAAI,QAAQ,qBAAqB,KAAA,KAAa,QAAQ,mBAAmB,KAAA,GACvE,MAAM,IAAI,MAAM,8CAA8C;CAEhE,IAAI,QAAQ,qBAAqB,KAAA,KAAa,QAAQ,YAAY,MAChE,MAAM,IAAI,MAAM,sDAAsD;CAGxE,MAAM,eAAeC,uBAAAA,oBAAoB,QAAQ,cAAc,GAAG;CAClE,MAAM,WAAWC,uBAAAA,SAAS,KAAK,YAAY;CAE3C,MAAM,QAAQ,SAAS,MAAM;CAC7B,IAAI,CAAC,OACH,MAAM,IAAI,MAAM,8CAA8C;CAOhE,IAAI;CACJ,IAAI,QAAQ,WAAW,KAAA,GACrB,iBAAiBC,eAAAA,cAAc,UAAU,QAAQ,MAAM;CAGzD,MAAM,mBACJ,QAAQ,iBAAiB,KAAA,IAAYd,eAAAA,YAAY,QAAQ,YAAY,IAAIe,iBAAAA,KAAK,IAAI;CAWpF,MAAM,UAAUC,gBAAAA,oBACd,MAT2B,sBAC3B,QAAQ,kBACR,QAAQ,QACR,QAAQ,cACV,GAGYC,YAAAA,SAAS,IAAI,EAAE,SAGvB,GACF,UACA,MAAM,YAAY,GAClB,cACF;CAQA,MAAM,qBAAqB,CAAC,GAAG,QAAQ,YAAY,EAAE,MAAM,GAAG,MAC5DC,6BAAAA,gBAAgB,EAAE,IAAI,EAAE,OAAO,GAAG,EAAE,IAAI,EAAE,OAAO,CAAC,CACpD;CAEA,MAAM,aAAa,mBAAmB,WACnC,QAAQ,IAAI,IAAI,EAAE,SAAS,MAAM,MAAM,IAAI,EAAE,SAAS,CACzD;CACA,IAAI,eAAe,IACjB,MAAM,IAAI,MAAM,4CAA4C;CAG9D,MAAM,kBAAkB,aAAa;CACrC,IAAI,kBAAkB,OACpB,MAAM,IAAI,MAAM,uCAAuC;CAEzD,MAAM,aAAaC,oBAAAA,kBAAkB,eAAe;CAEpD,MAAM,QAAQ,mBAAmB;CACjC,IAAI,QAAQ,OACV,MAAM,IAAI,MAAM,6CAA6C;CAG/D,MAAM,aAAa,QAAQ,WAAW,WAAW;CACjD,IAAI,aAAa,OACf,MAAM,IAAI,MAAM,gDAAgD;CAIlE,MAAM,oBAAoBC,eAAAA,uBAAuB,UAAU,OAAO,kBAAkB;CACpF,MAAM,cAAcC,eAAAA,6BAA6B,UAAU,OAAO,QAAQ,WAAW,OAAO,CAAC;CAG7F,MAAM,YAAY,QAAQ,qBAAqB,KAAA;CAG/C,IAAI;CACJ,IAAI;CAEJ,IAAI,QAAQ,iBAAiB,KAAA,KAAa,WAAW;EAEnD,MAAM,CAAC,cAAc,iBAAiBC,oBAAAA,SAAS,YAAY,OAAO,YAAYC,oBAAAA,UAAU,CAAC;EAEzF,gBAAgB,mBACd,cACA,QAAQ,WAAW,QAAQ,GAC3B,cACA,aACF;EAEA,eAAe,kBACb,QAAQ,WAAW,QAAQ,GAC3B,MAAM,IAAI,GACV,kBACA,aACF;EAGA,MAAM,cAAc,IAAIC,uBAAAA,YACtB,QAAQ,WAAW,QAAQ,GAC3B,QAAQ,WAAW,WAAW,GAC9B,aACA,iBACF;EACA,YAAY,iBAAiB,aAAa;EAC1C,YAAY,mBAAmB,gBAAgB;EAE/C,SAAS,YAAY,QAAQ,WAAW,QAAQ,GAAG,WAAW;EAC9D,SAAS,KAAK,YAAY;CAC5B,OAAO,IAAI,QAAQ,iBAAiB,KAAA,GAAW;EAE7C,MAAM,GAAG,iBAAiBF,oBAAAA,SAAS,YAAY,OAAO,YAAYC,oBAAAA,UAAU,CAAC;EAE7E,eAAe,kBACb,QAAQ,WAAW,QAAQ,GAC3B,MAAM,IAAI,GACV,kBACA,aACF;CACF,OAEE,eAAe,kBACb,QAAQ,WAAW,QAAQ,GAC3B,MAAM,IAAI,GACV,kBACA,KAAA,CACF;CAIF,MAAM,oBAAoB,MAAM,YAAY,EAAE,qBAAqB;CACnE,IAAI,sBAAsB,KAAA,GACxB,MAAM,IAAI,MAAM,wCAAwC;CAG1D,IAAI;CACJ,IAAI,QAAQ,iBAAiB,KAAA,GAAW;EAEtC,MAAM,YAAYnB,eAAAA,SAAS,IAAI,iBAAiB,EAC7C,aAAa,SAAS,QAAQ,WAAW,QAAQ,CAAC,EAClD,aAAa,iBAAiB,gBAAgB,EAC9C,aAAa,UAAU,QAAQ,YAAY;EAE9C,SAASqB,WAAAA,eAAe,WAAW,QAAQ,WAAW,UAAU,GAAG,MAAM,YAAY,CAAC,EACnF,UAAU,SAAS,EACnB,UAAU,gBAAgB;CAC/B,OACE,SAASA,WAAAA,eAAe,WAAW,QAAQ,WAAW,UAAU,GAAG,MAAM,YAAY,CAAC,EACnF,WAAW,YAAY,EACvB,UAAU,gBAAgB;CAI/B,MAAM,mBAAmB,QAAQ,WAAW,iBAAiB;CAC7D,IAAI,qBAAqB,KAAA,GACvB,SAAS,OAAO,qBAAqB,gBAAgB;CAIvD,IAAI,QAAQ,qBAAqB,KAAA,GAAW;EAC1C,MAAM,mBAAmB,OAAO,WAC9B,QAAQ,WAAW,WAAW,GAC9B,mBACA,QAAQ,WAAW,OAAO,CAC5B;EAEA,MAAM,iBAAiB,QAAQ,WAAW,aAAa;EAGvD,MAAMC,aAAAA,iBACJ,MAHmBxB,iBAAAA,oBAAoB,QAAQ,gBAAgB,GAI/D,gBACA,kBACA,oBACA,QAAQ,WAAW,KACrB;EAEA,IAAI,QAAQ,YAAY,MAAM;GAC5B,QAAQ,IAAI,uBAAuB;GACnC,QAAQ,IAAI,iBAAiB,iBAAiB,SAAS,GAAG;EAC5D;EAEA,OAAO;GACL,UAAU,QAAQ,iBAAiB,KAAA;GACnC,eAAe,iBAAiB,SAAS;EAC3C;CACF,OAAO,IAAI,QAAQ,YAAY,MAAM;EAGnC,MAAM,aADmB,OAAO,WAAW,KAAA,GAAW,mBAAmB,KAAA,CACvC,EAAE,SAAS;EAC7C,QAAQ,IAAI,UAAU;EAEtB,OAAO;GACL,UAAU,QAAQ,iBAAiB,KAAA;GACnC;EACF;CACF,OAAO;EAOL,MAAM,aALmB,OAAO,WAC9B,QAAQ,WAAW,WAAW,GAC9B,mBACA,QAAQ,WAAW,OAAO,CAEM,EAAE,SAAS;EAC7C,QAAQ,IAAI,UAAU;EAEtB,OAAO;GACL,UAAU,QAAQ,iBAAiB,KAAA;GACnC;EACF;CACF;AACF"}

package/dist/round1-D8t7EzIo.mjs

@@ -0,0 +1,373 @@
+import { t as __exportAll } from "./chunk-z9aeyW2b.mjs";
+import { Registry, resolveRegistryPath } from "./registry/index.mjs";
+import { c as parseAridUr, n as isVerbose } from "./common-Cf1UvJaP.mjs";
+import { f as parallelFetch, m as parallelSend } from "./parallel-PZiwHZT8.mjs";
+import { n as signingStateDir } from "./common-DNrD_-EI.mjs";
+import { ARID, JSON as JSON$1, XID } from "@bcts/components";
+import { Envelope } from "@bcts/envelope";
+import { SealedRequest, SealedResponse } from "@bcts/gstp";
+import * as fs from "node:fs";
+import * as path from "node:path";
+//#region src/cmd/sign/coordinator/round1.ts
+/**
+* Copyright © 2023-2026 Blockchain Commons, LLC
+* Copyright © 2025-2026 Parity Technologies
+*
+*
+* Sign coordinator round 1 command.
+*
+* Port of cmd/sign/coordinator/round1.rs from frost-hubert-rust.
+*
+* @module
+*/
+var round1_exports = /* @__PURE__ */ __exportAll({
+	buildShareRequestForParticipant: () => buildShareRequestForParticipant,
+	collectCommitmentsParallel: () => collectCommitmentsParallel,
+	dispatchShareRequestsParallel: () => dispatchShareRequestsParallel,
+	persistCommitments: () => persistCommitments,
+	round1: () => round1,
+	updatePendingForShare: () => updatePendingForShare,
+	validateAndExtractCommitResponse: () => validateAndExtractCommitResponse
+});
+/**
+* Load the start state for a signing session.
+*
+* Port of `load_start_state()` from cmd/sign/coordinator/round1.rs.
+*/
+function loadStartState(registryPath, sessionId, groupHint) {
+	const base = path.dirname(registryPath);
+	const groupStateDir = path.join(base, "group-state");
+	const candidatePaths = [];
+	let groupDirs;
+	if (groupHint !== void 0) groupDirs = [[groupHint, path.join(groupStateDir, groupHint.hex())]];
+	else {
+		groupDirs = [];
+		if (fs.existsSync(groupStateDir)) {
+			for (const entry of fs.readdirSync(groupStateDir, { withFileTypes: true })) if (entry.isDirectory()) {
+				const dirName = entry.name;
+				if (dirName.length === 64 && /^[0-9a-fA-F]+$/.test(dirName)) {
+					const groupId = ARID.fromHex(dirName);
+					groupDirs.push([groupId, path.join(groupStateDir, dirName)]);
+				}
+			}
+		}
+	}
+	for (const [groupId, groupDir] of groupDirs) {
+		const candidate = path.join(groupDir, "signing", sessionId.hex(), "start.json");
+		if (fs.existsSync(candidate)) candidatePaths.push([groupId, candidate]);
+	}
+	if (candidatePaths.length === 0) throw new Error("No sign start state found; run `frost sign coordinator start` first");
+	if (candidatePaths.length > 1) throw new Error("Multiple signing sessions found; specify --group to disambiguate");
+	const [groupId, statePath] = candidatePaths[0];
+	const raw = JSON.parse(fs.readFileSync(statePath, "utf-8"));
+	const getStr = (key) => {
+		const value = raw[key];
+		if (typeof value !== "string") throw new Error(`Missing or invalid ${key} in start.json`);
+		return value;
+	};
+	const sessionInState = parseAridUr(getStr("session_id"));
+	const groupInState = parseAridUr(getStr("group"));
+	if (sessionInState.hex() !== sessionId.hex()) throw new Error(`start.json session ${sessionInState.urString()} does not match requested session ${sessionId.urString()}`);
+	if (groupInState.hex() !== groupId.hex()) throw new Error(`start.json group ${groupInState.urString()} does not match directory group ${groupId.urString()}`);
+	const targetUr = getStr("target");
+	const participantsVal = raw["participants"];
+	if (participantsVal === void 0 || typeof participantsVal !== "object") throw new Error("Missing participants in start.json");
+	const participants = /* @__PURE__ */ new Map();
+	for (const [xidStr, value] of Object.entries(participantsVal)) {
+		const xid = XID.fromURString(xidStr);
+		if (typeof value !== "object" || value === null) throw new Error("Participant entry is not an object in start.json");
+		const commitAridStr = value["commit_arid"];
+		const shareAridStr = value["share_arid"];
+		if (typeof commitAridStr !== "string") throw new Error("Missing commit_arid in start.json");
+		if (typeof shareAridStr !== "string") throw new Error("Missing share_arid in start.json");
+		participants.set(xid.urString(), {
+			commitArid: parseAridUr(commitAridStr),
+			shareArid: parseAridUr(shareAridStr)
+		});
+	}
+	return {
+		groupId,
+		targetUr,
+		participants
+	};
+}
+/**
+* Validate and extract data from a sign commit response.
+*
+* Port of `validate_and_extract_sign_round1_response()` from cmd/sign/coordinator/round1.rs.
+*/
+function validateAndExtractCommitResponse(envelope, coordinatorKeys, expectedSender, expectedSessionId) {
+	const now = /* @__PURE__ */ new Date();
+	const sealedResponse = SealedResponse.tryFromEncryptedEnvelope(envelope, void 0, now, coordinatorKeys);
+	if (!sealedResponse.sender().xid().equals(expectedSender)) throw new Error(`Unexpected response sender: ${sealedResponse.sender().xid().urString()} (expected ${expectedSender.urString()})`);
+	if (sealedResponse.isErr()) {
+		const errorEnvelope = sealedResponse.error();
+		let reason = "unknown reason";
+		try {
+			const reasonEnv = errorEnvelope.objectForPredicate("reason");
+			if (reasonEnv !== void 0) reason = reasonEnv.extractString();
+		} catch {}
+		throw new Error(`Participant rejected signInvite: ${reason}`);
+	}
+	const result = sealedResponse.result();
+	result.checkSubjectUnit();
+	result.checkType("signRound1Response");
+	const responseSession = result.tryObjectForPredicate("session", (cbor) => ARID.fromTaggedCbor(cbor));
+	if (responseSession.hex() !== expectedSessionId.hex()) throw new Error(`Response session ${responseSession.urString()} does not match expected ${expectedSessionId.urString()}`);
+	const commitmentsJson = result.tryObjectForPredicate("commitments", (cbor) => JSON$1.fromTaggedCbor(cbor));
+	return {
+		commitments: JSON.parse(new TextDecoder().decode(commitmentsJson.toData())),
+		nextRequestArid: result.tryObjectForPredicate("response_arid", (cbor) => ARID.fromTaggedCbor(cbor))
+	};
+}
+/**
+* Collect signing commitments in parallel.
+*
+* Port of `collect_sign_round1_parallel()` from cmd/sign/coordinator/round1.rs.
+*/
+async function collectCommitmentsParallel(client, registry, startState, coordinator, sessionId, timeout) {
+	const requests = [];
+	for (const [xidStr, state] of startState.participants) {
+		const xid = XID.fromURString(xidStr);
+		const name = registry.participant(xid)?.petName() ?? xid.urString();
+		requests.push([
+			xid,
+			state.commitArid,
+			name
+		]);
+	}
+	const coordinatorKeys = coordinator.inceptionPrivateKeys();
+	if (coordinatorKeys === void 0) throw new Error("Missing coordinator private keys");
+	return parallelFetch(client, requests, (envelope, xid) => {
+		try {
+			return validateAndExtractCommitResponse(envelope, coordinatorKeys, xid, sessionId);
+		} catch (e) {
+			return { rejected: e instanceof Error ? e.message : String(e) };
+		}
+	}, { timeoutSeconds: timeout });
+}
+/**
+* Build a sign share request for a participant.
+*
+* Port of `build_sign_share_request()` from cmd/sign/coordinator/round1.rs.
+*/
+function buildShareRequestForParticipant(sender, _groupId, sessionId, responseArid, commitments) {
+	let request = SealedRequest.new("signRound2", sessionId, sender).withParameter("session", sessionId).withParameter("response_arid", responseArid);
+	for (const [xidStr, commits] of commitments) {
+		const xid = XID.fromURString(xidStr);
+		const commitsJson = JSON$1.fromData(new TextEncoder().encode(JSON.stringify(commits)));
+		const entry = Envelope.new(xid).addAssertion("commitments", commitsJson.taggedCborData());
+		request = request.withParameter("commitment", entry);
+	}
+	return request;
+}
+/**
+* Dispatch share requests to participants in parallel.
+*
+* Port of parallel dispatch logic from cmd/sign/coordinator/round1.rs.
+*/
+async function dispatchShareRequestsParallel(client, registry, owner, startState, sessionId, collection, commitments, previewShare, verbose) {
+	const signerKeys = owner.xidDocument().inceptionPrivateKeys();
+	if (signerKeys === void 0) throw new Error("Coordinator XID document has no signing keys");
+	const validUntil = new Date(Date.now() + 3600 * 1e3);
+	const messages = [];
+	let previewPrinted = false;
+	for (const [xid, data] of collection.successes) {
+		const xidStr = xid.urString();
+		const participantState = startState.participants.get(xidStr);
+		if (participantState === void 0) throw new Error(`Participant ${xidStr} not found in start state`);
+		const participantName = registry.participant(xid)?.petName() ?? xidStr;
+		let recipientDoc;
+		if (xid.urString() === owner.xid().urString()) recipientDoc = owner.xidDocument();
+		else {
+			const record = registry.participant(xid);
+			if (record === void 0) throw new Error(`Participant ${xidStr} not found in registry`);
+			recipientDoc = record.xidDocument();
+		}
+		const request = buildShareRequestForParticipant(owner.xidDocument(), startState.groupId, sessionId, participantState.shareArid, commitments);
+		if (previewShare === true && !previewPrinted) {
+			const preview = request.toEnvelope(validUntil, signerKeys, void 0);
+			console.log(`# signRound2 preview for ${xidStr}`);
+			console.log(preview.format());
+			previewPrinted = true;
+		}
+		const sealedEnvelope = request.toEnvelopeForRecipients(validUntil, signerKeys, [recipientDoc]);
+		messages.push([
+			xid,
+			data.nextRequestArid,
+			sealedEnvelope,
+			participantName
+		]);
+	}
+	console.error();
+	return parallelSend(client, messages, verbose);
+}
+/**
+* Persist collected commitments to disk.
+*
+* Port of commitments persistence logic from cmd/sign/coordinator/round1.rs.
+*/
+function persistCommitments(registryPath, groupId, sessionId, startState, commitments) {
+	const signingDir = signingStateDir(registryPath, groupId.hex(), sessionId.hex());
+	fs.mkdirSync(signingDir, { recursive: true });
+	const commitmentsPath = path.join(signingDir, "commitments.json");
+	const commitmentsJson = {};
+	for (const [xidStr, commits] of commitments) {
+		const participantState = startState.participants.get(xidStr);
+		if (participantState === void 0) throw new Error(`Participant ${xidStr} not found in start state`);
+		commitmentsJson[xidStr] = {
+			commitments: commits,
+			share_arid: participantState.shareArid.urString()
+		};
+	}
+	const root = {
+		group: groupId.urString(),
+		session: sessionId.urString(),
+		target: startState.targetUr,
+		commitments: commitmentsJson
+	};
+	fs.writeFileSync(commitmentsPath, JSON.stringify(root, null, 2));
+	return commitmentsPath;
+}
+/**
+* Update pending requests in the registry for share phase.
+*
+* Note: In the Rust implementation, the registry doesn't track pending ARIDs
+* directly on participant records. The pending state is managed through the
+* start.json and commitments.json files in the signing state directory.
+*
+* This function is provided for API compatibility but currently does nothing.
+*/
+function updatePendingForShare(_registry, _collection, _startState) {}
+/**
+* Execute the sign coordinator round 1 command.
+*
+* Collects signing commitments from participants.
+*
+* Port of `round1()` from cmd/sign/coordinator/round1.rs.
+*/
+async function round1(client, options, cwd) {
+	const registryPath = resolveRegistryPath(options.registryPath, cwd);
+	const registry = Registry.load(registryPath);
+	const owner = registry.owner();
+	if (owner === void 0) throw new Error("Registry owner is required");
+	const sessionId = parseAridUr(options.sessionId);
+	const startState = loadStartState(registryPath, sessionId, options.groupId !== void 0 ? parseAridUr(options.groupId) : void 0);
+	const groupId = startState.groupId;
+	const groupRecord = registry.group(groupId);
+	if (groupRecord === void 0) throw new Error("Group not found in registry");
+	if (groupRecord.coordinator().xid().urString() !== owner.xid().urString()) throw new Error(`Only the coordinator can collect signInvite responses. Coordinator: ${groupRecord.coordinator().xid().urString()}, Owner: ${owner.xid().urString()}`);
+	if (options.parallel === true) {
+		const collection = await collectCommitmentsParallel(client, registry, startState, owner.xidDocument(), sessionId, options.timeoutSeconds);
+		if (collection.rejections.length > 0) {
+			console.error();
+			console.error("Rejections:");
+			for (const [xid, reason] of collection.rejections) console.error(`  ${xid.urString()}: ${reason}`);
+		}
+		if (collection.errors.length > 0) {
+			console.error();
+			console.error("Errors:");
+			for (const [xid, error] of collection.errors) console.error(`  ${xid.urString()}: ${error}`);
+		}
+		if (collection.timeouts.length > 0) {
+			console.error();
+			console.error("Timeouts:");
+			for (const xid of collection.timeouts) console.error(`  ${xid.urString()}`);
+		}
+		if (!collection.allSucceeded()) throw new Error(`Sign commit collection incomplete: ${collection.successes.length} succeeded, ${collection.rejections.length} rejected, ${collection.errors.length} errors, ${collection.timeouts.length} timeouts`);
+		const commitments = /* @__PURE__ */ new Map();
+		for (const [xid, data] of collection.successes) commitments.set(xid.urString(), data.commitments);
+		const commitmentsPath = persistCommitments(registryPath, groupId, sessionId, startState, commitments);
+		const failures = (await dispatchShareRequestsParallel(client, registry, owner, startState, sessionId, collection, commitments, options.previewShare, options.verbose)).filter(([_, err]) => err !== null);
+		if (failures.length > 0) {
+			for (const [xid, error] of failures) if (error !== null) console.error(`Failed to send to ${xid.urString()}: ${error.message}`);
+			throw new Error(`Failed to send signRound2 requests to ${failures.length} participants`);
+		}
+		const displayPath = path.relative(cwd, commitmentsPath) || commitmentsPath;
+		if (isVerbose() || options.verbose === true) {
+			console.error();
+			console.error(`Collected ${collection.successes.length} signInvite responses. Saved to ${displayPath}`);
+			console.error(`Dispatched ${collection.successes.length} signRound2 requests.`);
+		}
+		return {
+			accepted: collection.successes.length,
+			rejected: collection.rejections.length,
+			errors: collection.errors.length,
+			timeouts: collection.timeouts.length
+		};
+	} else {
+		if (isVerbose() || options.verbose === true) console.error(`Collecting signInvite responses for session ${sessionId.urString()} from ${startState.participants.size} participants...`);
+		const commitments = /* @__PURE__ */ new Map();
+		const sendToArids = /* @__PURE__ */ new Map();
+		const errors = [];
+		const coordinatorKeys = owner.xidDocument().inceptionPrivateKeys();
+		if (coordinatorKeys === void 0) throw new Error("Coordinator XID document has no inception private keys");
+		for (const [xidStr, participantState] of startState.participants) {
+			const xid = XID.fromURString(xidStr);
+			const participantName = registry.participant(xid)?.petName() ?? xidStr;
+			try {
+				const envelope = await client.get(participantState.commitArid, options.timeoutSeconds);
+				if (envelope === void 0) throw new Error("Response not found in Hubert storage");
+				const data = validateAndExtractCommitResponse(envelope, coordinatorKeys, xid, sessionId);
+				commitments.set(xidStr, data.commitments);
+				sendToArids.set(xidStr, data.nextRequestArid);
+				if (isVerbose() || options.verbose === true) console.error(`  ✓ ${participantName}`);
+			} catch (e) {
+				errors.push([xid, e instanceof Error ? e.message : String(e)]);
+				if (isVerbose() || options.verbose === true) console.error(`  ✗ ${participantName}: ${e instanceof Error ? e.message : String(e)}`);
+			}
+		}
+		if (errors.length > 0) throw new Error(`Sign commit collection incomplete: ${errors.length} of ${startState.participants.size} responses failed`);
+		if (commitments.size !== startState.participants.size) {
+			const missing = [];
+			for (const xidStr of startState.participants.keys()) if (!commitments.has(xidStr)) missing.push(xidStr);
+			throw new Error(`Missing signInvite responses from: ${missing.join(", ")}`);
+		}
+		const commitmentsPath = persistCommitments(registryPath, groupId, sessionId, startState, commitments);
+		const signerKeys = owner.xidDocument().inceptionPrivateKeys();
+		if (signerKeys === void 0) throw new Error("Owner XID document has no inception private keys");
+		const validUntil = new Date(Date.now() + 3600 * 1e3);
+		if (isVerbose() || options.verbose === true) console.error(`Dispatching signRound2 requests to ${sendToArids.size} participants...`);
+		else console.error();
+		let previewPrinted = false;
+		for (const [xidStr, sendToArid] of sendToArids) {
+			const xid = XID.fromURString(xidStr);
+			const participantState = startState.participants.get(xidStr);
+			if (participantState === void 0) throw new Error(`Participant state not found for ${xidStr}`);
+			const participantName = registry.participant(xid)?.petName() ?? xidStr;
+			let recipientDoc;
+			if (xidStr === owner.xid().urString()) recipientDoc = owner.xidDocument();
+			else {
+				const record = registry.participant(xid);
+				if (record === void 0) throw new Error(`Participant ${xidStr} not found in registry`);
+				recipientDoc = record.xidDocument();
+			}
+			const request = buildShareRequestForParticipant(owner.xidDocument(), groupId, sessionId, participantState.shareArid, commitments);
+			if (options.previewShare === true && !previewPrinted) {
+				const preview = request.toEnvelope(validUntil, signerKeys, void 0);
+				console.log(`# signRound2 preview for ${xidStr}`);
+				console.log(preview.format());
+				previewPrinted = true;
+			}
+			const sealedEnvelope = request.toEnvelopeForRecipients(validUntil, signerKeys, [recipientDoc]);
+			await client.put(sendToArid, sealedEnvelope);
+			if (isVerbose() || options.verbose === true) console.error(`  ✓ ${participantName}`);
+		}
+		const displayPath = path.relative(cwd, commitmentsPath) || commitmentsPath;
+		if (isVerbose() || options.verbose === true) {
+			console.error();
+			console.error(`Collected ${commitments.size} signInvite responses. Saved to ${displayPath}`);
+			console.error(`Dispatched ${commitments.size} signRound2 requests.`);
+		}
+		return {
+			accepted: commitments.size,
+			rejected: 0,
+			errors: errors.length,
+			timeouts: 0
+		};
+	}
+}
+//#endregion
+export { round1 as a, validateAndExtractCommitResponse as c, persistCommitments as i, collectCommitmentsParallel as n, round1_exports as o, dispatchShareRequestsParallel as r, updatePendingForShare as s, buildShareRequestForParticipant as t };
+
+//# sourceMappingURL=round1-D8t7EzIo.mjs.map