@bcts/frost-hubert 1.0.0-beta.0 → 1.0.0-beta.1

package/dist/{finalize-IA01t_Qq.mjs.map → finalize-DtRxHZ7H.mjs.map}

@@ -1 +1 @@
-{"version":3,"file":"finalize-IA01t_Qq.mjs","names":[],"sources":["../src/cmd/dkg/coordinator/finalize.ts"],"sourcesContent":["/**\n * Copyright © 2023-2026 Blockchain Commons, LLC\n * Copyright © 2025-2026 Parity Technologies\n *\n *\n * DKG coordinator finalize command.\n *\n * Port of cmd/dkg/coordinator/finalize.rs from frost-hubert-rust.\n *\n * @module\n */\n\nimport * as fs from \"node:fs\";\nimport * as path from \"node:path\";\n\nimport { type ARID, type PrivateKeys, type SigningPublicKey, type XID } from \"@bcts/components\";\nimport { type Envelope } from \"@bcts/envelope\";\nimport { SealedResponse } from \"@bcts/gstp\";\n\nimport {\n  type GroupRecord,\n  type PendingRequests,\n  Registry,\n  resolveRegistryPath,\n} from \"../../../registry/index.js\";\nimport { groupStateDir, isVerbose } from \"../../common.js\";\nimport {\n  type CollectionResult,\n  parallelFetch,\n  type ParallelFetchConfig,\n  parallelFetchConfigWithTimeout,\n} from \"../../parallel.js\";\nimport { type StorageClient } from \"../../storage.js\";\nimport { getWithIndicator } from \"../../busy.js\";\nimport { parseAridUr, signingKeyFromVerifying } from \"../common.js\";\n\n/**\n * Options for the DKG finalize command.\n */\nexport interface DkgFinalizeOptions {\n  registryPath?: string;\n  groupId: string;\n  parallel?: boolean;\n  timeoutSeconds?: number;\n  verbose?: boolean;\n}\n\n/**\n * Result of the DKG finalize command.\n */\nexport interface DkgFinalizeResult {\n  verifyingKey: string;\n  collected: number;\n  rejected: number;\n  errors: number;\n  timeouts: number;\n}\n\n/**\n * Data extracted from a successful finalize response.\n *\n * Port of `struct FinalizeResponseData` from finalize.rs.\n */\ninterface FinalizeResponseData {\n  keyPackage: unknown;\n  publicKeyPackage: unknown;\n}\n\n/**\n * Entry for a collected finalize response.\n *\n * Port of `struct FinalizeEntry` from finalize.rs.\n */\ninterface FinalizeEntry {\n  participant: XID;\n  keyPackage: unknown;\n  publicKeyPackage: unknown;\n}\n\n/**\n * Validate that the owner is the coordinator of the group.\n *\n * Port of coordinator check from finalize.rs lines 76-82.\n */\nfunction validateCoordinator(groupRecord: GroupRecord, ownerXid: XID): void {\n  if (groupRecord.coordinator().xid().urString() !== ownerXid.urString()) {\n    throw new Error(\n      `Only the coordinator can collect finalize responses. Coordinator: ${groupRecord.coordinator().xid().urString()}, Owner: ${ownerXid.urString()}`,\n    );\n  }\n}\n\n/**\n * Validate envelope and extract finalize data (for parallel fetch).\n *\n * Port of `validate_and_extract_finalize_response()` from finalize.rs lines 407-466.\n */\nfunction validateAndExtractFinalizeResponse(\n  envelope: Envelope,\n  coordinatorKeys: PrivateKeys,\n  expectedGroupId: ARID,\n  expectedParticipant: XID,\n): FinalizeResponseData | { rejected: string } {\n  const now = new Date();\n\n  let sealed: SealedResponse;\n  try {\n    sealed = SealedResponse.tryFromEncryptedEnvelope(envelope, undefined, now, coordinatorKeys);\n  } catch (err) {\n    return {\n      rejected: `Failed to decrypt/parse response: ${err instanceof Error ? err.message : String(err)}`,\n    };\n  }\n\n  // Check for error response\n  if (!sealed.isOk()) {\n    try {\n      const error = sealed.error();\n      const reasonEnv = error.optionalObjectForPredicate(\"reason\");\n      const reason = reasonEnv?.extractString() ?? \"unknown reason\";\n      return { rejected: `Participant reported error: ${reason}` };\n    } catch {\n      return { rejected: \"Participant reported error: unknown reason\" };\n    }\n  }\n\n  // Get and validate result\n  let result: Envelope;\n  try {\n    result = sealed.result();\n  } catch {\n    return { rejected: \"Finalize response has no result\" };\n  }\n\n  // Validate response type\n  try {\n    result.checkSubjectUnit();\n    result.checkType(\"dkgFinalizeResponse\");\n  } catch (err) {\n    return {\n      rejected: `Invalid response type: ${err instanceof Error ? err.message : String(err)}`,\n    };\n  }\n\n  // Validate group ID\n  try {\n    const groupEnv = result.objectForPredicate(\"group\");\n    const groupIdStr = groupEnv.extractString();\n    const groupId = parseAridUr(groupIdStr);\n    if (groupId.urString() !== expectedGroupId.urString()) {\n      return {\n        rejected: `Group ${groupId.urString()} does not match expected ${expectedGroupId.urString()}`,\n      };\n    }\n  } catch (err) {\n    return {\n      rejected: `Failed to extract group: ${err instanceof Error ? err.message : String(err)}`,\n    };\n  }\n\n  // Validate participant\n  try {\n    const participantEnv = result.objectForPredicate(\"participant\");\n    const participantStr = participantEnv.extractString();\n    // eslint-disable-next-line @typescript-eslint/no-unsafe-assignment, @typescript-eslint/no-require-imports, no-undef\n    const { XID: XIDClass } = require(\"@bcts/components\");\n    // eslint-disable-next-line @typescript-eslint/no-unsafe-call, @typescript-eslint/no-unsafe-member-access\n    const participantXid = XIDClass.fromURString(participantStr) as XID;\n    if (participantXid.urString() !== expectedParticipant.urString()) {\n      return {\n        rejected: `Participant ${participantXid.urString()} does not match expected ${expectedParticipant.urString()}`,\n      };\n    }\n  } catch (err) {\n    return {\n      rejected: `Failed to extract participant: ${err instanceof Error ? err.message : String(err)}`,\n    };\n  }\n\n  // Extract key packages\n  let keyPackage: unknown;\n  let publicKeyPackage: unknown;\n\n  try {\n    const keyJsonEnv = result.objectForPredicate(\"key_package\");\n    const keyJsonStr = keyJsonEnv.extractString();\n    keyPackage = JSON.parse(keyJsonStr);\n  } catch (err) {\n    return {\n      rejected: `Failed to parse key_package: ${err instanceof Error ? err.message : String(err)}`,\n    };\n  }\n\n  try {\n    const pubJsonEnv = result.objectForPredicate(\"public_key_package\");\n    const pubJsonStr = pubJsonEnv.extractString();\n    publicKeyPackage = JSON.parse(pubJsonStr);\n  } catch (err) {\n    return {\n      rejected: `Failed to parse public_key_package: ${err instanceof Error ? err.message : String(err)}`,\n    };\n  }\n\n  return { keyPackage, publicKeyPackage };\n}\n\n/**\n * Fetch a finalize response sequentially.\n *\n * Port of `fetch_finalize_response()` from finalize.rs lines 282-358.\n */\nasync function fetchFinalizeResponse(\n  client: StorageClient,\n  responseArid: ARID,\n  timeout: number | undefined,\n  coordinatorKeys: PrivateKeys,\n  expectedGroup: ARID,\n  expectedParticipant: XID,\n  participantName: string,\n): Promise<FinalizeEntry> {\n  const envelope = await getWithIndicator(\n    client,\n    responseArid,\n    participantName,\n    timeout,\n    isVerbose(),\n  );\n\n  if (envelope === null || envelope === undefined) {\n    throw new Error(\"Finalize response not found in Hubert storage\");\n  }\n\n  const result = validateAndExtractFinalizeResponse(\n    envelope,\n    coordinatorKeys,\n    expectedGroup,\n    expectedParticipant,\n  );\n\n  if (\"rejected\" in result) {\n    throw new Error(result.rejected);\n  }\n\n  return {\n    participant: expectedParticipant,\n    keyPackage: result.keyPackage,\n    publicKeyPackage: result.publicKeyPackage,\n  };\n}\n\n/**\n * Collect finalize responses in parallel with progress display.\n *\n * Port of `collect_finalize_parallel()` from finalize.rs lines 371-404.\n */\nasync function collectFinalizeParallel(\n  client: StorageClient,\n  registry: Registry,\n  pendingRequests: PendingRequests,\n  coordinatorKeys: PrivateKeys,\n  expectedGroupId: ARID,\n  timeout: number | undefined,\n): Promise<CollectionResult<FinalizeResponseData>> {\n  const requests: [XID, ARID, string][] = [];\n\n  for (const [xid, arid] of pendingRequests.iterCollect()) {\n    const record = registry.participant(xid);\n    const name = record?.petName() ?? xid.urString();\n    requests.push([xid, arid, name]);\n  }\n\n  const config: ParallelFetchConfig = parallelFetchConfigWithTimeout(timeout);\n\n  return parallelFetch(\n    client,\n    requests,\n    (envelope: Envelope, xid: XID) =>\n      validateAndExtractFinalizeResponse(envelope, coordinatorKeys, expectedGroupId, xid),\n    config,\n  );\n}\n\n/**\n * Finalize collection results: persist, update registry, print summary.\n *\n * Port of `finalize_collection_results()` from finalize.rs lines 469-590.\n */\nfunction finalizeFinalizeCollectionResults(\n  collection: CollectionResult<FinalizeResponseData>,\n  registryPath: string,\n  registry: Registry,\n  groupId: ARID,\n): SigningPublicKey | undefined {\n  // Report any failures\n  if (collection.rejections.length > 0) {\n    console.error();\n    console.error(\"Rejections:\");\n    for (const [xid, reason] of collection.rejections) {\n      console.error(`  ${xid.urString()}: ${reason}`);\n    }\n  }\n  if (collection.errors.length > 0) {\n    console.error();\n    console.error(\"Errors:\");\n    for (const [xid, error] of collection.errors) {\n      console.error(`  ${xid.urString()}: ${error}`);\n    }\n  }\n  if (collection.timeouts.length > 0) {\n    console.error();\n    console.error(\"Timeouts:\");\n    for (const xid of collection.timeouts) {\n      console.error(`  ${xid.urString()}`);\n    }\n  }\n\n  if (!collection.allSucceeded()) {\n    throw new Error(\n      `Finalize collection incomplete: ${collection.successes.length} succeeded, ` +\n        `${collection.rejections.length} rejected, ${collection.errors.length} errors, ` +\n        `${collection.timeouts.length} timeouts`,\n    );\n  }\n\n  // Validate group verifying key consistency\n  let groupVerifyingKey: SigningPublicKey | undefined;\n\n  for (const [xid, data] of collection.successes) {\n    // Extract verifying_key from public_key_package\n    const pubKeyPkg = data.publicKeyPackage as { verifying_key?: string };\n    if (!pubKeyPkg.verifying_key) {\n      throw new Error(\n        `Failed to extract verifying key for ${xid.urString()}: missing verifying_key field`,\n      );\n    }\n\n    // The verifying key is typically hex-encoded\n    let signingKey: SigningPublicKey;\n    try {\n      const verifyingKeyBytes = hexToBytes(pubKeyPkg.verifying_key);\n      signingKey = signingKeyFromVerifying(verifyingKeyBytes) as SigningPublicKey;\n    } catch (err) {\n      throw new Error(\n        `Failed to extract verifying key for ${xid.urString()}: ${err instanceof Error ? err.message : String(err)}`,\n        { cause: err },\n      );\n    }\n\n    if (groupVerifyingKey !== undefined) {\n      if (groupVerifyingKey.urString() !== signingKey.urString()) {\n        throw new Error(`Group verifying key mismatch for participant ${xid.urString()}`);\n      }\n    } else {\n      groupVerifyingKey = signingKey;\n    }\n  }\n\n  // Persist collected finalize data\n  const stateDir = groupStateDir(registryPath, groupId.hex());\n  fs.mkdirSync(stateDir, { recursive: true });\n\n  const collectedPath = path.join(stateDir, \"collected_finalize.json\");\n  const root: Record<string, { key_package: unknown; public_key_package: unknown }> = {};\n\n  for (const [xid, data] of collection.successes) {\n    root[xid.urString()] = {\n      key_package: data.keyPackage,\n      public_key_package: data.publicKeyPackage,\n    };\n  }\n\n  fs.writeFileSync(collectedPath, JSON.stringify(root, null, 2));\n\n  // Update registry\n  const groupRecord = registry.group(groupId);\n  if (groupRecord === undefined) {\n    throw new Error(\"Group not found in registry\");\n  }\n\n  if (groupVerifyingKey !== undefined) {\n    groupRecord.setVerifyingKey(groupVerifyingKey);\n  }\n  groupRecord.clearPendingRequests();\n  registry.save(registryPath);\n\n  if (isVerbose()) {\n    console.error();\n    console.error(\n      `Collected ${collection.successes.length} finalize responses. Saved to ${collectedPath}`,\n    );\n    if (groupVerifyingKey !== undefined) {\n      console.error(groupVerifyingKey.urString());\n    }\n  } else if (groupVerifyingKey !== undefined) {\n    console.log(groupVerifyingKey.urString());\n  }\n\n  return groupVerifyingKey;\n}\n\n/**\n * Helper to convert hex string to bytes.\n */\nfunction hexToBytes(hex: string): Uint8Array {\n  const bytes = new Uint8Array(hex.length / 2);\n  for (let i = 0; i < bytes.length; i++) {\n    bytes[i] = parseInt(hex.slice(i * 2, i * 2 + 2), 16);\n  }\n  return bytes;\n}\n\n/**\n * Execute the DKG coordinator finalize command.\n *\n * Collects finalize responses (key/public key packages) from all participants.\n *\n * Port of `finalize()` from cmd/dkg/coordinator/finalize.rs.\n */\nexport async function finalize(\n  client: StorageClient,\n  options: DkgFinalizeOptions,\n  cwd: string,\n): Promise<DkgFinalizeResult> {\n  const registryPath = resolveRegistryPath(options.registryPath, cwd);\n  const registry = Registry.load(registryPath);\n\n  const owner = registry.owner();\n  if (owner === undefined) {\n    throw new Error(\"Registry owner is required\");\n  }\n\n  const groupId = parseAridUr(options.groupId);\n  const groupRecord = registry.group(groupId);\n\n  if (groupRecord === undefined) {\n    throw new Error(`Group ${options.groupId} not found in registry`);\n  }\n\n  // Validate that owner is the coordinator\n  validateCoordinator(groupRecord, owner.xid());\n\n  const pendingRequests = groupRecord.pendingRequests();\n  if (pendingRequests.isEmpty()) {\n    throw new Error(\n      \"No pending requests for this group. Did you run 'frost dkg coordinator finalize send'?\",\n    );\n  }\n\n  const coordinatorKeys = owner.xidDocument().inceptionPrivateKeys();\n  if (coordinatorKeys === undefined) {\n    throw new Error(\"Coordinator XID document has no private keys\");\n  }\n\n  let verifyingKey: SigningPublicKey | undefined;\n  let collected: number;\n  let rejected = 0;\n  let errors: number;\n  let timeouts = 0;\n\n  if (options.parallel === true) {\n    // Parallel path with progress display\n    const collection = await collectFinalizeParallel(\n      client,\n      registry,\n      pendingRequests,\n      coordinatorKeys,\n      groupId,\n      options.timeoutSeconds,\n    );\n\n    verifyingKey = finalizeFinalizeCollectionResults(collection, registryPath, registry, groupId);\n\n    collected = collection.successes.length;\n    rejected = collection.rejections.length;\n    errors = collection.errors.length;\n    timeouts = collection.timeouts.length;\n  } else {\n    // Sequential path (original behavior)\n    const collectedEntries: FinalizeEntry[] = [];\n    const errorEntries: [XID, string][] = [];\n    let groupVerifyingKey: SigningPublicKey | undefined;\n\n    if (isVerbose()) {\n      console.error(`Collecting finalize responses from ${pendingRequests.len()} participants...`);\n    }\n\n    for (const [participantXid, collectFromArid] of pendingRequests.iterCollect()) {\n      const record = registry.participant(participantXid);\n      const name = record?.petName() ?? participantXid.urString();\n\n      try {\n        const entry = await fetchFinalizeResponse(\n          client,\n          collectFromArid,\n          options.timeoutSeconds,\n          coordinatorKeys,\n          groupId,\n          participantXid,\n          name,\n        );\n\n        // Extract verifying key from public_key_package\n        const pubKeyPkg = entry.publicKeyPackage as { verifying_key?: string };\n        if (!pubKeyPkg.verifying_key) {\n          throw new Error(\"missing verifying_key field\");\n        }\n\n        const verifyingKeyBytes = hexToBytes(pubKeyPkg.verifying_key);\n        const signingKey = signingKeyFromVerifying(verifyingKeyBytes) as SigningPublicKey;\n\n        if (groupVerifyingKey !== undefined) {\n          if (groupVerifyingKey.urString() !== signingKey.urString()) {\n            if (isVerbose()) {\n              console.error(\"error: group verifying key mismatch\");\n            }\n            errorEntries.push([participantXid, \"Group verifying key mismatch across responses\"]);\n            continue;\n          }\n        } else {\n          groupVerifyingKey = signingKey;\n        }\n\n        collectedEntries.push(entry);\n      } catch (err) {\n        if (isVerbose()) {\n          console.error(`error: ${err instanceof Error ? err.message : String(err)}`);\n        }\n        errorEntries.push([participantXid, err instanceof Error ? err.message : String(err)]);\n      }\n    }\n\n    if (errorEntries.length > 0) {\n      if (isVerbose()) {\n        console.error();\n        console.error(`Failed to collect from ${errorEntries.length} participants:`);\n        for (const [xid, error] of errorEntries) {\n          console.error(`  ${xid.urString()}: ${error}`);\n        }\n      }\n      throw new Error(\n        `Finalize collection incomplete: ${errorEntries.length} of ${pendingRequests.len()} responses failed`,\n      );\n    }\n\n    // Persist collected finalize data\n    const stateDir = groupStateDir(registryPath, groupId.hex());\n    fs.mkdirSync(stateDir, { recursive: true });\n\n    const collectedPath = path.join(stateDir, \"collected_finalize.json\");\n    const root: Record<string, { key_package: unknown; public_key_package: unknown }> = {};\n\n    for (const entry of collectedEntries) {\n      root[entry.participant.urString()] = {\n        key_package: entry.keyPackage,\n        public_key_package: entry.publicKeyPackage,\n      };\n    }\n\n    fs.writeFileSync(collectedPath, JSON.stringify(root, null, 2));\n\n    // Update registry pending requests cleared\n    const groupRecordMut = registry.group(groupId);\n    if (groupRecordMut === undefined) {\n      throw new Error(\"Group not found in registry\");\n    }\n\n    if (groupVerifyingKey !== undefined) {\n      groupRecordMut.setVerifyingKey(groupVerifyingKey);\n    }\n    groupRecordMut.clearPendingRequests();\n    registry.save(registryPath);\n\n    if (isVerbose()) {\n      console.error();\n      console.error(\n        `Collected ${collectedEntries.length} finalize responses. Saved to ${collectedPath}`,\n      );\n      if (groupVerifyingKey !== undefined) {\n        console.error(groupVerifyingKey.urString());\n      }\n    } else if (groupVerifyingKey !== undefined) {\n      console.log(groupVerifyingKey.urString());\n    }\n\n    verifyingKey = groupVerifyingKey;\n    collected = collectedEntries.length;\n    errors = errorEntries.length;\n  }\n\n  return {\n    verifyingKey: verifyingKey?.urString() ?? \"\",\n    collected,\n    rejected,\n    errors,\n    timeouts,\n  };\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;AAoFA,SAAS,oBAAoB,aAA0B,UAAqB;AAC1E,KAAI,YAAY,aAAa,CAAC,KAAK,CAAC,UAAU,KAAK,SAAS,UAAU,CACpE,OAAM,IAAI,MACR,qEAAqE,YAAY,aAAa,CAAC,KAAK,CAAC,UAAU,CAAC,WAAW,SAAS,UAAU,GAC/I;;;;;;;AASL,SAAS,mCACP,UACA,iBACA,iBACA,qBAC6C;CAC7C,MAAM,sBAAM,IAAI,MAAM;CAEtB,IAAI;AACJ,KAAI;AACF,WAAS,eAAe,yBAAyB,UAAU,KAAA,GAAW,KAAK,gBAAgB;UACpF,KAAK;AACZ,SAAO,EACL,UAAU,qCAAqC,eAAe,QAAQ,IAAI,UAAU,OAAO,IAAI,IAChG;;AAIH,KAAI,CAAC,OAAO,MAAM,CAChB,KAAI;AAIF,SAAO,EAAE,UAAU,+BAHL,OAAO,OACE,CAAC,2BAA2B,SAC3B,EAAE,eAAe,IAAI,oBACe;SACtD;AACN,SAAO,EAAE,UAAU,8CAA8C;;CAKrE,IAAI;AACJ,KAAI;AACF,WAAS,OAAO,QAAQ;SAClB;AACN,SAAO,EAAE,UAAU,mCAAmC;;AAIxD,KAAI;AACF,SAAO,kBAAkB;AACzB,SAAO,UAAU,sBAAsB;UAChC,KAAK;AACZ,SAAO,EACL,UAAU,0BAA0B,eAAe,QAAQ,IAAI,UAAU,OAAO,IAAI,IACrF;;AAIH,KAAI;EAGF,MAAM,UAAU,YAFC,OAAO,mBAAmB,QAChB,CAAC,eACU,CAAC;AACvC,MAAI,QAAQ,UAAU,KAAK,gBAAgB,UAAU,CACnD,QAAO,EACL,UAAU,SAAS,QAAQ,UAAU,CAAC,2BAA2B,gBAAgB,UAAU,IAC5F;UAEI,KAAK;AACZ,SAAO,EACL,UAAU,4BAA4B,eAAe,QAAQ,IAAI,UAAU,OAAO,IAAI,IACvF;;AAIH,KAAI;EAEF,MAAM,iBADiB,OAAO,mBAAmB,cACZ,CAAC,eAAe;EAErD,MAAM,EAAE,KAAK,aAAA,UAAqB,mBAAmB;EAErD,MAAM,iBAAiB,SAAS,aAAa,eAAe;AAC5D,MAAI,eAAe,UAAU,KAAK,oBAAoB,UAAU,CAC9D,QAAO,EACL,UAAU,eAAe,eAAe,UAAU,CAAC,2BAA2B,oBAAoB,UAAU,IAC7G;UAEI,KAAK;AACZ,SAAO,EACL,UAAU,kCAAkC,eAAe,QAAQ,IAAI,UAAU,OAAO,IAAI,IAC7F;;CAIH,IAAI;CACJ,IAAI;AAEJ,KAAI;EAEF,MAAM,aADa,OAAO,mBAAmB,cAChB,CAAC,eAAe;AAC7C,eAAa,KAAK,MAAM,WAAW;UAC5B,KAAK;AACZ,SAAO,EACL,UAAU,gCAAgC,eAAe,QAAQ,IAAI,UAAU,OAAO,IAAI,IAC3F;;AAGH,KAAI;EAEF,MAAM,aADa,OAAO,mBAAmB,qBAChB,CAAC,eAAe;AAC7C,qBAAmB,KAAK,MAAM,WAAW;UAClC,KAAK;AACZ,SAAO,EACL,UAAU,uCAAuC,eAAe,QAAQ,IAAI,UAAU,OAAO,IAAI,IAClG;;AAGH,QAAO;EAAE;EAAY;EAAkB;;;;;;;AAQzC,eAAe,sBACb,QACA,cACA,SACA,iBACA,eACA,qBACA,iBACwB;CACxB,MAAM,WAAW,MAAM,iBACrB,QACA,cACA,iBACA,SACA,WAAW,CACZ;AAED,KAAI,aAAa,QAAQ,aAAa,KAAA,EACpC,OAAM,IAAI,MAAM,gDAAgD;CAGlE,MAAM,SAAS,mCACb,UACA,iBACA,eACA,oBACD;AAED,KAAI,cAAc,OAChB,OAAM,IAAI,MAAM,OAAO,SAAS;AAGlC,QAAO;EACL,aAAa;EACb,YAAY,OAAO;EACnB,kBAAkB,OAAO;EAC1B;;;;;;;AAQH,eAAe,wBACb,QACA,UACA,iBACA,iBACA,iBACA,SACiD;CACjD,MAAM,WAAkC,EAAE;AAE1C,MAAK,MAAM,CAAC,KAAK,SAAS,gBAAgB,aAAa,EAAE;EAEvD,MAAM,OADS,SAAS,YAAY,IACjB,EAAE,SAAS,IAAI,IAAI,UAAU;AAChD,WAAS,KAAK;GAAC;GAAK;GAAM;GAAK,CAAC;;AAKlC,QAAO,cACL,QACA,WACC,UAAoB,QACnB,mCAAmC,UAAU,iBAAiB,iBAAiB,IAAI,EANnD,+BAA+B,QAO3D,CACP;;;;;;;AAQH,SAAS,kCACP,YACA,cACA,UACA,SAC8B;AAE9B,KAAI,WAAW,WAAW,SAAS,GAAG;AACpC,UAAQ,OAAO;AACf,UAAQ,MAAM,cAAc;AAC5B,OAAK,MAAM,CAAC,KAAK,WAAW,WAAW,WACrC,SAAQ,MAAM,KAAK,IAAI,UAAU,CAAC,IAAI,SAAS;;AAGnD,KAAI,WAAW,OAAO,SAAS,GAAG;AAChC,UAAQ,OAAO;AACf,UAAQ,MAAM,UAAU;AACxB,OAAK,MAAM,CAAC,KAAK,UAAU,WAAW,OACpC,SAAQ,MAAM,KAAK,IAAI,UAAU,CAAC,IAAI,QAAQ;;AAGlD,KAAI,WAAW,SAAS,SAAS,GAAG;AAClC,UAAQ,OAAO;AACf,UAAQ,MAAM,YAAY;AAC1B,OAAK,MAAM,OAAO,WAAW,SAC3B,SAAQ,MAAM,KAAK,IAAI,UAAU,GAAG;;AAIxC,KAAI,CAAC,WAAW,cAAc,CAC5B,OAAM,IAAI,MACR,mCAAmC,WAAW,UAAU,OAAO,cAC1D,WAAW,WAAW,OAAO,aAAa,WAAW,OAAO,OAAO,WACnE,WAAW,SAAS,OAAO,WACjC;CAIH,IAAI;AAEJ,MAAK,MAAM,CAAC,KAAK,SAAS,WAAW,WAAW;EAE9C,MAAM,YAAY,KAAK;AACvB,MAAI,CAAC,UAAU,cACb,OAAM,IAAI,MACR,uCAAuC,IAAI,UAAU,CAAC,+BACvD;EAIH,IAAI;AACJ,MAAI;AAEF,gBAAa,wBADa,WAAW,UAAU,cACO,CAAC;WAChD,KAAK;AACZ,SAAM,IAAI,MACR,uCAAuC,IAAI,UAAU,CAAC,IAAI,eAAe,QAAQ,IAAI,UAAU,OAAO,IAAI,IAC1G,EAAE,OAAO,KAAK,CACf;;AAGH,MAAI,sBAAsB,KAAA;OACpB,kBAAkB,UAAU,KAAK,WAAW,UAAU,CACxD,OAAM,IAAI,MAAM,gDAAgD,IAAI,UAAU,GAAG;QAGnF,qBAAoB;;CAKxB,MAAM,WAAW,cAAc,cAAc,QAAQ,KAAK,CAAC;AAC3D,IAAG,UAAU,UAAU,EAAE,WAAW,MAAM,CAAC;CAE3C,MAAM,gBAAgB,KAAK,KAAK,UAAU,0BAA0B;CACpE,MAAM,OAA8E,EAAE;AAEtF,MAAK,MAAM,CAAC,KAAK,SAAS,WAAW,UACnC,MAAK,IAAI,UAAU,IAAI;EACrB,aAAa,KAAK;EAClB,oBAAoB,KAAK;EAC1B;AAGH,IAAG,cAAc,eAAe,KAAK,UAAU,MAAM,MAAM,EAAE,CAAC;CAG9D,MAAM,cAAc,SAAS,MAAM,QAAQ;AAC3C,KAAI,gBAAgB,KAAA,EAClB,OAAM,IAAI,MAAM,8BAA8B;AAGhD,KAAI,sBAAsB,KAAA,EACxB,aAAY,gBAAgB,kBAAkB;AAEhD,aAAY,sBAAsB;AAClC,UAAS,KAAK,aAAa;AAE3B,KAAI,WAAW,EAAE;AACf,UAAQ,OAAO;AACf,UAAQ,MACN,aAAa,WAAW,UAAU,OAAO,gCAAgC,gBAC1E;AACD,MAAI,sBAAsB,KAAA,EACxB,SAAQ,MAAM,kBAAkB,UAAU,CAAC;YAEpC,sBAAsB,KAAA,EAC/B,SAAQ,IAAI,kBAAkB,UAAU,CAAC;AAG3C,QAAO;;;;;AAMT,SAAS,WAAW,KAAyB;CAC3C,MAAM,QAAQ,IAAI,WAAW,IAAI,SAAS,EAAE;AAC5C,MAAK,IAAI,IAAI,GAAG,IAAI,MAAM,QAAQ,IAChC,OAAM,KAAK,SAAS,IAAI,MAAM,IAAI,GAAG,IAAI,IAAI,EAAE,EAAE,GAAG;AAEtD,QAAO;;;;;;;;;AAUT,eAAsB,SACpB,QACA,SACA,KAC4B;CAC5B,MAAM,eAAe,oBAAoB,QAAQ,cAAc,IAAI;CACnE,MAAM,WAAW,SAAS,KAAK,aAAa;CAE5C,MAAM,QAAQ,SAAS,OAAO;AAC9B,KAAI,UAAU,KAAA,EACZ,OAAM,IAAI,MAAM,6BAA6B;CAG/C,MAAM,UAAU,YAAY,QAAQ,QAAQ;CAC5C,MAAM,cAAc,SAAS,MAAM,QAAQ;AAE3C,KAAI,gBAAgB,KAAA,EAClB,OAAM,IAAI,MAAM,SAAS,QAAQ,QAAQ,wBAAwB;AAInE,qBAAoB,aAAa,MAAM,KAAK,CAAC;CAE7C,MAAM,kBAAkB,YAAY,iBAAiB;AACrD,KAAI,gBAAgB,SAAS,CAC3B,OAAM,IAAI,MACR,yFACD;CAGH,MAAM,kBAAkB,MAAM,aAAa,CAAC,sBAAsB;AAClE,KAAI,oBAAoB,KAAA,EACtB,OAAM,IAAI,MAAM,+CAA+C;CAGjE,IAAI;CACJ,IAAI;CACJ,IAAI,WAAW;CACf,IAAI;CACJ,IAAI,WAAW;AAEf,KAAI,QAAQ,aAAa,MAAM;EAE7B,MAAM,aAAa,MAAM,wBACvB,QACA,UACA,iBACA,iBACA,SACA,QAAQ,eACT;AAED,iBAAe,kCAAkC,YAAY,cAAc,UAAU,QAAQ;AAE7F,cAAY,WAAW,UAAU;AACjC,aAAW,WAAW,WAAW;AACjC,WAAS,WAAW,OAAO;AAC3B,aAAW,WAAW,SAAS;QAC1B;EAEL,MAAM,mBAAoC,EAAE;EAC5C,MAAM,eAAgC,EAAE;EACxC,IAAI;AAEJ,MAAI,WAAW,CACb,SAAQ,MAAM,sCAAsC,gBAAgB,KAAK,CAAC,kBAAkB;AAG9F,OAAK,MAAM,CAAC,gBAAgB,oBAAoB,gBAAgB,aAAa,EAAE;GAE7E,MAAM,OADS,SAAS,YAAY,eACjB,EAAE,SAAS,IAAI,eAAe,UAAU;AAE3D,OAAI;IACF,MAAM,QAAQ,MAAM,sBAClB,QACA,iBACA,QAAQ,gBACR,iBACA,SACA,gBACA,KACD;IAGD,MAAM,YAAY,MAAM;AACxB,QAAI,CAAC,UAAU,cACb,OAAM,IAAI,MAAM,8BAA8B;IAIhD,MAAM,aAAa,wBADO,WAAW,UAAU,cACa,CAAC;AAE7D,QAAI,sBAAsB,KAAA;SACpB,kBAAkB,UAAU,KAAK,WAAW,UAAU,EAAE;AAC1D,UAAI,WAAW,CACb,SAAQ,MAAM,sCAAsC;AAEtD,mBAAa,KAAK,CAAC,gBAAgB,gDAAgD,CAAC;AACpF;;UAGF,qBAAoB;AAGtB,qBAAiB,KAAK,MAAM;YACrB,KAAK;AACZ,QAAI,WAAW,CACb,SAAQ,MAAM,UAAU,eAAe,QAAQ,IAAI,UAAU,OAAO,IAAI,GAAG;AAE7E,iBAAa,KAAK,CAAC,gBAAgB,eAAe,QAAQ,IAAI,UAAU,OAAO,IAAI,CAAC,CAAC;;;AAIzF,MAAI,aAAa,SAAS,GAAG;AAC3B,OAAI,WAAW,EAAE;AACf,YAAQ,OAAO;AACf,YAAQ,MAAM,0BAA0B,aAAa,OAAO,gBAAgB;AAC5E,SAAK,MAAM,CAAC,KAAK,UAAU,aACzB,SAAQ,MAAM,KAAK,IAAI,UAAU,CAAC,IAAI,QAAQ;;AAGlD,SAAM,IAAI,MACR,mCAAmC,aAAa,OAAO,MAAM,gBAAgB,KAAK,CAAC,mBACpF;;EAIH,MAAM,WAAW,cAAc,cAAc,QAAQ,KAAK,CAAC;AAC3D,KAAG,UAAU,UAAU,EAAE,WAAW,MAAM,CAAC;EAE3C,MAAM,gBAAgB,KAAK,KAAK,UAAU,0BAA0B;EACpE,MAAM,OAA8E,EAAE;AAEtF,OAAK,MAAM,SAAS,iBAClB,MAAK,MAAM,YAAY,UAAU,IAAI;GACnC,aAAa,MAAM;GACnB,oBAAoB,MAAM;GAC3B;AAGH,KAAG,cAAc,eAAe,KAAK,UAAU,MAAM,MAAM,EAAE,CAAC;EAG9D,MAAM,iBAAiB,SAAS,MAAM,QAAQ;AAC9C,MAAI,mBAAmB,KAAA,EACrB,OAAM,IAAI,MAAM,8BAA8B;AAGhD,MAAI,sBAAsB,KAAA,EACxB,gBAAe,gBAAgB,kBAAkB;AAEnD,iBAAe,sBAAsB;AACrC,WAAS,KAAK,aAAa;AAE3B,MAAI,WAAW,EAAE;AACf,WAAQ,OAAO;AACf,WAAQ,MACN,aAAa,iBAAiB,OAAO,gCAAgC,gBACtE;AACD,OAAI,sBAAsB,KAAA,EACxB,SAAQ,MAAM,kBAAkB,UAAU,CAAC;aAEpC,sBAAsB,KAAA,EAC/B,SAAQ,IAAI,kBAAkB,UAAU,CAAC;AAG3C,iBAAe;AACf,cAAY,iBAAiB;AAC7B,WAAS,aAAa;;AAGxB,QAAO;EACL,cAAc,cAAc,UAAU,IAAI;EAC1C;EACA;EACA;EACA;EACD"}
+{"version":3,"file":"finalize-DtRxHZ7H.mjs","names":[],"sources":["../src/cmd/dkg/coordinator/finalize.ts"],"sourcesContent":["/**\n * Copyright © 2023-2026 Blockchain Commons, LLC\n * Copyright © 2025-2026 Parity Technologies\n *\n *\n * DKG coordinator finalize command.\n *\n * Port of cmd/dkg/coordinator/finalize.rs from frost-hubert-rust.\n *\n * @module\n */\n\nimport * as fs from \"node:fs\";\nimport * as path from \"node:path\";\n\nimport { type ARID, type PrivateKeys, type SigningPublicKey, type XID } from \"@bcts/components\";\nimport { type Envelope } from \"@bcts/envelope\";\nimport { SealedResponse } from \"@bcts/gstp\";\n\nimport {\n  type GroupRecord,\n  type PendingRequests,\n  Registry,\n  resolveRegistryPath,\n} from \"../../../registry/index.js\";\nimport { groupStateDir, isVerbose } from \"../../common.js\";\nimport {\n  type CollectionResult,\n  parallelFetch,\n  type ParallelFetchConfig,\n  parallelFetchConfigWithTimeout,\n} from \"../../parallel.js\";\nimport { type StorageClient } from \"../../storage.js\";\nimport { getWithIndicator } from \"../../busy.js\";\nimport { parseAridUr, signingKeyFromVerifying } from \"../common.js\";\n\n/**\n * Options for the DKG finalize command.\n */\nexport interface DkgFinalizeOptions {\n  registryPath?: string;\n  groupId: string;\n  parallel?: boolean;\n  timeoutSeconds?: number;\n  verbose?: boolean;\n}\n\n/**\n * Result of the DKG finalize command.\n */\nexport interface DkgFinalizeResult {\n  verifyingKey: string;\n  collected: number;\n  rejected: number;\n  errors: number;\n  timeouts: number;\n}\n\n/**\n * Data extracted from a successful finalize response.\n *\n * Port of `struct FinalizeResponseData` from finalize.rs.\n */\ninterface FinalizeResponseData {\n  keyPackage: unknown;\n  publicKeyPackage: unknown;\n}\n\n/**\n * Entry for a collected finalize response.\n *\n * Port of `struct FinalizeEntry` from finalize.rs.\n */\ninterface FinalizeEntry {\n  participant: XID;\n  keyPackage: unknown;\n  publicKeyPackage: unknown;\n}\n\n/**\n * Validate that the owner is the coordinator of the group.\n *\n * Port of coordinator check from finalize.rs lines 76-82.\n */\nfunction validateCoordinator(groupRecord: GroupRecord, ownerXid: XID): void {\n  if (groupRecord.coordinator().xid().urString() !== ownerXid.urString()) {\n    throw new Error(\n      `Only the coordinator can collect finalize responses. Coordinator: ${groupRecord.coordinator().xid().urString()}, Owner: ${ownerXid.urString()}`,\n    );\n  }\n}\n\n/**\n * Validate envelope and extract finalize data (for parallel fetch).\n *\n * Port of `validate_and_extract_finalize_response()` from finalize.rs lines 407-466.\n */\nfunction validateAndExtractFinalizeResponse(\n  envelope: Envelope,\n  coordinatorKeys: PrivateKeys,\n  expectedGroupId: ARID,\n  expectedParticipant: XID,\n): FinalizeResponseData | { rejected: string } {\n  const now = new Date();\n\n  let sealed: SealedResponse;\n  try {\n    sealed = SealedResponse.tryFromEncryptedEnvelope(envelope, undefined, now, coordinatorKeys);\n  } catch (err) {\n    return {\n      rejected: `Failed to decrypt/parse response: ${err instanceof Error ? err.message : String(err)}`,\n    };\n  }\n\n  // Check for error response\n  if (!sealed.isOk()) {\n    try {\n      const error = sealed.error();\n      const reasonEnv = error.optionalObjectForPredicate(\"reason\");\n      const reason = reasonEnv?.extractString() ?? \"unknown reason\";\n      return { rejected: `Participant reported error: ${reason}` };\n    } catch {\n      return { rejected: \"Participant reported error: unknown reason\" };\n    }\n  }\n\n  // Get and validate result\n  let result: Envelope;\n  try {\n    result = sealed.result();\n  } catch {\n    return { rejected: \"Finalize response has no result\" };\n  }\n\n  // Validate response type\n  try {\n    result.checkSubjectUnit();\n    result.checkType(\"dkgFinalizeResponse\");\n  } catch (err) {\n    return {\n      rejected: `Invalid response type: ${err instanceof Error ? err.message : String(err)}`,\n    };\n  }\n\n  // Validate group ID\n  try {\n    const groupEnv = result.objectForPredicate(\"group\");\n    const groupIdStr = groupEnv.extractString();\n    const groupId = parseAridUr(groupIdStr);\n    if (groupId.urString() !== expectedGroupId.urString()) {\n      return {\n        rejected: `Group ${groupId.urString()} does not match expected ${expectedGroupId.urString()}`,\n      };\n    }\n  } catch (err) {\n    return {\n      rejected: `Failed to extract group: ${err instanceof Error ? err.message : String(err)}`,\n    };\n  }\n\n  // Validate participant\n  try {\n    const participantEnv = result.objectForPredicate(\"participant\");\n    const participantStr = participantEnv.extractString();\n    // eslint-disable-next-line @typescript-eslint/no-unsafe-assignment, @typescript-eslint/no-require-imports, no-undef\n    const { XID: XIDClass } = require(\"@bcts/components\");\n    // eslint-disable-next-line @typescript-eslint/no-unsafe-call, @typescript-eslint/no-unsafe-member-access\n    const participantXid = XIDClass.fromURString(participantStr) as XID;\n    if (participantXid.urString() !== expectedParticipant.urString()) {\n      return {\n        rejected: `Participant ${participantXid.urString()} does not match expected ${expectedParticipant.urString()}`,\n      };\n    }\n  } catch (err) {\n    return {\n      rejected: `Failed to extract participant: ${err instanceof Error ? err.message : String(err)}`,\n    };\n  }\n\n  // Extract key packages\n  let keyPackage: unknown;\n  let publicKeyPackage: unknown;\n\n  try {\n    const keyJsonEnv = result.objectForPredicate(\"key_package\");\n    const keyJsonStr = keyJsonEnv.extractString();\n    keyPackage = JSON.parse(keyJsonStr);\n  } catch (err) {\n    return {\n      rejected: `Failed to parse key_package: ${err instanceof Error ? err.message : String(err)}`,\n    };\n  }\n\n  try {\n    const pubJsonEnv = result.objectForPredicate(\"public_key_package\");\n    const pubJsonStr = pubJsonEnv.extractString();\n    publicKeyPackage = JSON.parse(pubJsonStr);\n  } catch (err) {\n    return {\n      rejected: `Failed to parse public_key_package: ${err instanceof Error ? err.message : String(err)}`,\n    };\n  }\n\n  return { keyPackage, publicKeyPackage };\n}\n\n/**\n * Fetch a finalize response sequentially.\n *\n * Port of `fetch_finalize_response()` from finalize.rs lines 282-358.\n */\nasync function fetchFinalizeResponse(\n  client: StorageClient,\n  responseArid: ARID,\n  timeout: number | undefined,\n  coordinatorKeys: PrivateKeys,\n  expectedGroup: ARID,\n  expectedParticipant: XID,\n  participantName: string,\n): Promise<FinalizeEntry> {\n  const envelope = await getWithIndicator(\n    client,\n    responseArid,\n    participantName,\n    timeout,\n    isVerbose(),\n  );\n\n  if (envelope === null || envelope === undefined) {\n    throw new Error(\"Finalize response not found in Hubert storage\");\n  }\n\n  const result = validateAndExtractFinalizeResponse(\n    envelope,\n    coordinatorKeys,\n    expectedGroup,\n    expectedParticipant,\n  );\n\n  if (\"rejected\" in result) {\n    throw new Error(result.rejected);\n  }\n\n  return {\n    participant: expectedParticipant,\n    keyPackage: result.keyPackage,\n    publicKeyPackage: result.publicKeyPackage,\n  };\n}\n\n/**\n * Collect finalize responses in parallel with progress display.\n *\n * Port of `collect_finalize_parallel()` from finalize.rs lines 371-404.\n */\nasync function collectFinalizeParallel(\n  client: StorageClient,\n  registry: Registry,\n  pendingRequests: PendingRequests,\n  coordinatorKeys: PrivateKeys,\n  expectedGroupId: ARID,\n  timeout: number | undefined,\n): Promise<CollectionResult<FinalizeResponseData>> {\n  const requests: [XID, ARID, string][] = [];\n\n  for (const [xid, arid] of pendingRequests.iterCollect()) {\n    const record = registry.participant(xid);\n    const name = record?.petName() ?? xid.urString();\n    requests.push([xid, arid, name]);\n  }\n\n  const config: ParallelFetchConfig = parallelFetchConfigWithTimeout(timeout);\n\n  return parallelFetch(\n    client,\n    requests,\n    (envelope: Envelope, xid: XID) =>\n      validateAndExtractFinalizeResponse(envelope, coordinatorKeys, expectedGroupId, xid),\n    config,\n  );\n}\n\n/**\n * Finalize collection results: persist, update registry, print summary.\n *\n * Port of `finalize_collection_results()` from finalize.rs lines 469-590.\n */\nfunction finalizeFinalizeCollectionResults(\n  collection: CollectionResult<FinalizeResponseData>,\n  registryPath: string,\n  registry: Registry,\n  groupId: ARID,\n): SigningPublicKey | undefined {\n  // Report any failures\n  if (collection.rejections.length > 0) {\n    console.error();\n    console.error(\"Rejections:\");\n    for (const [xid, reason] of collection.rejections) {\n      console.error(`  ${xid.urString()}: ${reason}`);\n    }\n  }\n  if (collection.errors.length > 0) {\n    console.error();\n    console.error(\"Errors:\");\n    for (const [xid, error] of collection.errors) {\n      console.error(`  ${xid.urString()}: ${error}`);\n    }\n  }\n  if (collection.timeouts.length > 0) {\n    console.error();\n    console.error(\"Timeouts:\");\n    for (const xid of collection.timeouts) {\n      console.error(`  ${xid.urString()}`);\n    }\n  }\n\n  if (!collection.allSucceeded()) {\n    throw new Error(\n      `Finalize collection incomplete: ${collection.successes.length} succeeded, ` +\n        `${collection.rejections.length} rejected, ${collection.errors.length} errors, ` +\n        `${collection.timeouts.length} timeouts`,\n    );\n  }\n\n  // Validate group verifying key consistency\n  let groupVerifyingKey: SigningPublicKey | undefined;\n\n  for (const [xid, data] of collection.successes) {\n    // Extract verifying_key from public_key_package\n    const pubKeyPkg = data.publicKeyPackage as { verifying_key?: string };\n    if (!pubKeyPkg.verifying_key) {\n      throw new Error(\n        `Failed to extract verifying key for ${xid.urString()}: missing verifying_key field`,\n      );\n    }\n\n    // The verifying key is typically hex-encoded\n    let signingKey: SigningPublicKey;\n    try {\n      const verifyingKeyBytes = hexToBytes(pubKeyPkg.verifying_key);\n      signingKey = signingKeyFromVerifying(verifyingKeyBytes) as SigningPublicKey;\n    } catch (err) {\n      throw new Error(\n        `Failed to extract verifying key for ${xid.urString()}: ${err instanceof Error ? err.message : String(err)}`,\n        { cause: err },\n      );\n    }\n\n    if (groupVerifyingKey !== undefined) {\n      if (groupVerifyingKey.urString() !== signingKey.urString()) {\n        throw new Error(`Group verifying key mismatch for participant ${xid.urString()}`);\n      }\n    } else {\n      groupVerifyingKey = signingKey;\n    }\n  }\n\n  // Persist collected finalize data\n  const stateDir = groupStateDir(registryPath, groupId.hex());\n  fs.mkdirSync(stateDir, { recursive: true });\n\n  const collectedPath = path.join(stateDir, \"collected_finalize.json\");\n  const root: Record<string, { key_package: unknown; public_key_package: unknown }> = {};\n\n  for (const [xid, data] of collection.successes) {\n    root[xid.urString()] = {\n      key_package: data.keyPackage,\n      public_key_package: data.publicKeyPackage,\n    };\n  }\n\n  fs.writeFileSync(collectedPath, JSON.stringify(root, null, 2));\n\n  // Update registry\n  const groupRecord = registry.group(groupId);\n  if (groupRecord === undefined) {\n    throw new Error(\"Group not found in registry\");\n  }\n\n  if (groupVerifyingKey !== undefined) {\n    groupRecord.setVerifyingKey(groupVerifyingKey);\n  }\n  groupRecord.clearPendingRequests();\n  registry.save(registryPath);\n\n  if (isVerbose()) {\n    console.error();\n    console.error(\n      `Collected ${collection.successes.length} finalize responses. Saved to ${collectedPath}`,\n    );\n    if (groupVerifyingKey !== undefined) {\n      console.error(groupVerifyingKey.urString());\n    }\n  } else if (groupVerifyingKey !== undefined) {\n    console.log(groupVerifyingKey.urString());\n  }\n\n  return groupVerifyingKey;\n}\n\n/**\n * Helper to convert hex string to bytes.\n */\nfunction hexToBytes(hex: string): Uint8Array {\n  const bytes = new Uint8Array(hex.length / 2);\n  for (let i = 0; i < bytes.length; i++) {\n    bytes[i] = parseInt(hex.slice(i * 2, i * 2 + 2), 16);\n  }\n  return bytes;\n}\n\n/**\n * Execute the DKG coordinator finalize command.\n *\n * Collects finalize responses (key/public key packages) from all participants.\n *\n * Port of `finalize()` from cmd/dkg/coordinator/finalize.rs.\n */\nexport async function finalize(\n  client: StorageClient,\n  options: DkgFinalizeOptions,\n  cwd: string,\n): Promise<DkgFinalizeResult> {\n  const registryPath = resolveRegistryPath(options.registryPath, cwd);\n  const registry = Registry.load(registryPath);\n\n  const owner = registry.owner();\n  if (owner === undefined) {\n    throw new Error(\"Registry owner is required\");\n  }\n\n  const groupId = parseAridUr(options.groupId);\n  const groupRecord = registry.group(groupId);\n\n  if (groupRecord === undefined) {\n    throw new Error(`Group ${options.groupId} not found in registry`);\n  }\n\n  // Validate that owner is the coordinator\n  validateCoordinator(groupRecord, owner.xid());\n\n  const pendingRequests = groupRecord.pendingRequests();\n  if (pendingRequests.isEmpty()) {\n    throw new Error(\n      \"No pending requests for this group. Did you run 'frost dkg coordinator finalize send'?\",\n    );\n  }\n\n  const coordinatorKeys = owner.xidDocument().inceptionPrivateKeys();\n  if (coordinatorKeys === undefined) {\n    throw new Error(\"Coordinator XID document has no private keys\");\n  }\n\n  let verifyingKey: SigningPublicKey | undefined;\n  let collected: number;\n  let rejected = 0;\n  let errors: number;\n  let timeouts = 0;\n\n  if (options.parallel === true) {\n    // Parallel path with progress display\n    const collection = await collectFinalizeParallel(\n      client,\n      registry,\n      pendingRequests,\n      coordinatorKeys,\n      groupId,\n      options.timeoutSeconds,\n    );\n\n    verifyingKey = finalizeFinalizeCollectionResults(collection, registryPath, registry, groupId);\n\n    collected = collection.successes.length;\n    rejected = collection.rejections.length;\n    errors = collection.errors.length;\n    timeouts = collection.timeouts.length;\n  } else {\n    // Sequential path (original behavior)\n    const collectedEntries: FinalizeEntry[] = [];\n    const errorEntries: [XID, string][] = [];\n    let groupVerifyingKey: SigningPublicKey | undefined;\n\n    if (isVerbose()) {\n      console.error(`Collecting finalize responses from ${pendingRequests.len()} participants...`);\n    }\n\n    for (const [participantXid, collectFromArid] of pendingRequests.iterCollect()) {\n      const record = registry.participant(participantXid);\n      const name = record?.petName() ?? participantXid.urString();\n\n      try {\n        const entry = await fetchFinalizeResponse(\n          client,\n          collectFromArid,\n          options.timeoutSeconds,\n          coordinatorKeys,\n          groupId,\n          participantXid,\n          name,\n        );\n\n        // Extract verifying key from public_key_package\n        const pubKeyPkg = entry.publicKeyPackage as { verifying_key?: string };\n        if (!pubKeyPkg.verifying_key) {\n          throw new Error(\"missing verifying_key field\");\n        }\n\n        const verifyingKeyBytes = hexToBytes(pubKeyPkg.verifying_key);\n        const signingKey = signingKeyFromVerifying(verifyingKeyBytes) as SigningPublicKey;\n\n        if (groupVerifyingKey !== undefined) {\n          if (groupVerifyingKey.urString() !== signingKey.urString()) {\n            if (isVerbose()) {\n              console.error(\"error: group verifying key mismatch\");\n            }\n            errorEntries.push([participantXid, \"Group verifying key mismatch across responses\"]);\n            continue;\n          }\n        } else {\n          groupVerifyingKey = signingKey;\n        }\n\n        collectedEntries.push(entry);\n      } catch (err) {\n        if (isVerbose()) {\n          console.error(`error: ${err instanceof Error ? err.message : String(err)}`);\n        }\n        errorEntries.push([participantXid, err instanceof Error ? err.message : String(err)]);\n      }\n    }\n\n    if (errorEntries.length > 0) {\n      if (isVerbose()) {\n        console.error();\n        console.error(`Failed to collect from ${errorEntries.length} participants:`);\n        for (const [xid, error] of errorEntries) {\n          console.error(`  ${xid.urString()}: ${error}`);\n        }\n      }\n      throw new Error(\n        `Finalize collection incomplete: ${errorEntries.length} of ${pendingRequests.len()} responses failed`,\n      );\n    }\n\n    // Persist collected finalize data\n    const stateDir = groupStateDir(registryPath, groupId.hex());\n    fs.mkdirSync(stateDir, { recursive: true });\n\n    const collectedPath = path.join(stateDir, \"collected_finalize.json\");\n    const root: Record<string, { key_package: unknown; public_key_package: unknown }> = {};\n\n    for (const entry of collectedEntries) {\n      root[entry.participant.urString()] = {\n        key_package: entry.keyPackage,\n        public_key_package: entry.publicKeyPackage,\n      };\n    }\n\n    fs.writeFileSync(collectedPath, JSON.stringify(root, null, 2));\n\n    // Update registry pending requests cleared\n    const groupRecordMut = registry.group(groupId);\n    if (groupRecordMut === undefined) {\n      throw new Error(\"Group not found in registry\");\n    }\n\n    if (groupVerifyingKey !== undefined) {\n      groupRecordMut.setVerifyingKey(groupVerifyingKey);\n    }\n    groupRecordMut.clearPendingRequests();\n    registry.save(registryPath);\n\n    if (isVerbose()) {\n      console.error();\n      console.error(\n        `Collected ${collectedEntries.length} finalize responses. Saved to ${collectedPath}`,\n      );\n      if (groupVerifyingKey !== undefined) {\n        console.error(groupVerifyingKey.urString());\n      }\n    } else if (groupVerifyingKey !== undefined) {\n      console.log(groupVerifyingKey.urString());\n    }\n\n    verifyingKey = groupVerifyingKey;\n    collected = collectedEntries.length;\n    errors = errorEntries.length;\n  }\n\n  return {\n    verifyingKey: verifyingKey?.urString() ?? \"\",\n    collected,\n    rejected,\n    errors,\n    timeouts,\n  };\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;AAoFA,SAAS,oBAAoB,aAA0B,UAAqB;CAC1E,IAAI,YAAY,YAAY,EAAE,IAAI,EAAE,SAAS,MAAM,SAAS,SAAS,GACnE,MAAM,IAAI,MACR,qEAAqE,YAAY,YAAY,EAAE,IAAI,EAAE,SAAS,EAAE,WAAW,SAAS,SAAS,GAC/I;AAEJ;;;;;;AAOA,SAAS,mCACP,UACA,iBACA,iBACA,qBAC6C;CAC7C,MAAM,sBAAM,IAAI,KAAK;CAErB,IAAI;CACJ,IAAI;EACF,SAAS,eAAe,yBAAyB,UAAU,KAAA,GAAW,KAAK,eAAe;CAC5F,SAAS,KAAK;EACZ,OAAO,EACL,UAAU,qCAAqC,eAAe,QAAQ,IAAI,UAAU,OAAO,GAAG,IAChG;CACF;CAGA,IAAI,CAAC,OAAO,KAAK,GACf,IAAI;EAIF,OAAO,EAAE,UAAU,+BAHL,OAAO,MACC,EAAE,2BAA2B,QAC5B,GAAG,cAAc,KAAK,mBACc;CAC7D,QAAQ;EACN,OAAO,EAAE,UAAU,6CAA6C;CAClE;CAIF,IAAI;CACJ,IAAI;EACF,SAAS,OAAO,OAAO;CACzB,QAAQ;EACN,OAAO,EAAE,UAAU,kCAAkC;CACvD;CAGA,IAAI;EACF,OAAO,iBAAiB;EACxB,OAAO,UAAU,qBAAqB;CACxC,SAAS,KAAK;EACZ,OAAO,EACL,UAAU,0BAA0B,eAAe,QAAQ,IAAI,UAAU,OAAO,GAAG,IACrF;CACF;CAGA,IAAI;EAGF,MAAM,UAAU,YAFC,OAAO,mBAAmB,OACjB,EAAE,cACS,CAAC;EACtC,IAAI,QAAQ,SAAS,MAAM,gBAAgB,SAAS,GAClD,OAAO,EACL,UAAU,SAAS,QAAQ,SAAS,EAAE,2BAA2B,gBAAgB,SAAS,IAC5F;CAEJ,SAAS,KAAK;EACZ,OAAO,EACL,UAAU,4BAA4B,eAAe,QAAQ,IAAI,UAAU,OAAO,GAAG,IACvF;CACF;CAGA,IAAI;EAEF,MAAM,iBADiB,OAAO,mBAAmB,aACb,EAAE,cAAc;EAEpD,MAAM,EAAE,KAAK,aAAA,UAAqB,kBAAkB;EAEpD,MAAM,iBAAiB,SAAS,aAAa,cAAc;EAC3D,IAAI,eAAe,SAAS,MAAM,oBAAoB,SAAS,GAC7D,OAAO,EACL,UAAU,eAAe,eAAe,SAAS,EAAE,2BAA2B,oBAAoB,SAAS,IAC7G;CAEJ,SAAS,KAAK;EACZ,OAAO,EACL,UAAU,kCAAkC,eAAe,QAAQ,IAAI,UAAU,OAAO,GAAG,IAC7F;CACF;CAGA,IAAI;CACJ,IAAI;CAEJ,IAAI;EAEF,MAAM,aADa,OAAO,mBAAmB,aACjB,EAAE,cAAc;EAC5C,aAAa,KAAK,MAAM,UAAU;CACpC,SAAS,KAAK;EACZ,OAAO,EACL,UAAU,gCAAgC,eAAe,QAAQ,IAAI,UAAU,OAAO,GAAG,IAC3F;CACF;CAEA,IAAI;EAEF,MAAM,aADa,OAAO,mBAAmB,oBACjB,EAAE,cAAc;EAC5C,mBAAmB,KAAK,MAAM,UAAU;CAC1C,SAAS,KAAK;EACZ,OAAO,EACL,UAAU,uCAAuC,eAAe,QAAQ,IAAI,UAAU,OAAO,GAAG,IAClG;CACF;CAEA,OAAO;EAAE;EAAY;CAAiB;AACxC;;;;;;AAOA,eAAe,sBACb,QACA,cACA,SACA,iBACA,eACA,qBACA,iBACwB;CACxB,MAAM,WAAW,MAAM,iBACrB,QACA,cACA,iBACA,SACA,UAAU,CACZ;CAEA,IAAI,aAAa,QAAQ,aAAa,KAAA,GACpC,MAAM,IAAI,MAAM,+CAA+C;CAGjE,MAAM,SAAS,mCACb,UACA,iBACA,eACA,mBACF;CAEA,IAAI,cAAc,QAChB,MAAM,IAAI,MAAM,OAAO,QAAQ;CAGjC,OAAO;EACL,aAAa;EACb,YAAY,OAAO;EACnB,kBAAkB,OAAO;CAC3B;AACF;;;;;;AAOA,eAAe,wBACb,QACA,UACA,iBACA,iBACA,iBACA,SACiD;CACjD,MAAM,WAAkC,CAAC;CAEzC,KAAK,MAAM,CAAC,KAAK,SAAS,gBAAgB,YAAY,GAAG;EAEvD,MAAM,OADS,SAAS,YAAY,GAClB,GAAG,QAAQ,KAAK,IAAI,SAAS;EAC/C,SAAS,KAAK;GAAC;GAAK;GAAM;EAAI,CAAC;CACjC;CAIA,OAAO,cACL,QACA,WACC,UAAoB,QACnB,mCAAmC,UAAU,iBAAiB,iBAAiB,GAAG,GANlD,+BAA+B,OAO5D,CACP;AACF;;;;;;AAOA,SAAS,kCACP,YACA,cACA,UACA,SAC8B;CAE9B,IAAI,WAAW,WAAW,SAAS,GAAG;EACpC,QAAQ,MAAM;EACd,QAAQ,MAAM,aAAa;EAC3B,KAAK,MAAM,CAAC,KAAK,WAAW,WAAW,YACrC,QAAQ,MAAM,KAAK,IAAI,SAAS,EAAE,IAAI,QAAQ;CAElD;CACA,IAAI,WAAW,OAAO,SAAS,GAAG;EAChC,QAAQ,MAAM;EACd,QAAQ,MAAM,SAAS;EACvB,KAAK,MAAM,CAAC,KAAK,UAAU,WAAW,QACpC,QAAQ,MAAM,KAAK,IAAI,SAAS,EAAE,IAAI,OAAO;CAEjD;CACA,IAAI,WAAW,SAAS,SAAS,GAAG;EAClC,QAAQ,MAAM;EACd,QAAQ,MAAM,WAAW;EACzB,KAAK,MAAM,OAAO,WAAW,UAC3B,QAAQ,MAAM,KAAK,IAAI,SAAS,GAAG;CAEvC;CAEA,IAAI,CAAC,WAAW,aAAa,GAC3B,MAAM,IAAI,MACR,mCAAmC,WAAW,UAAU,OAAO,cAC1D,WAAW,WAAW,OAAO,aAAa,WAAW,OAAO,OAAO,WACnE,WAAW,SAAS,OAAO,UAClC;CAIF,IAAI;CAEJ,KAAK,MAAM,CAAC,KAAK,SAAS,WAAW,WAAW;EAE9C,MAAM,YAAY,KAAK;EACvB,IAAI,CAAC,UAAU,eACb,MAAM,IAAI,MACR,uCAAuC,IAAI,SAAS,EAAE,8BACxD;EAIF,IAAI;EACJ,IAAI;GAEF,aAAa,wBADa,WAAW,UAAU,aACM,CAAC;EACxD,SAAS,KAAK;GACZ,MAAM,IAAI,MACR,uCAAuC,IAAI,SAAS,EAAE,IAAI,eAAe,QAAQ,IAAI,UAAU,OAAO,GAAG,KACzG,EAAE,OAAO,IAAI,CACf;EACF;EAEA,IAAI,sBAAsB,KAAA;OACpB,kBAAkB,SAAS,MAAM,WAAW,SAAS,GACvD,MAAM,IAAI,MAAM,gDAAgD,IAAI,SAAS,GAAG;EAAA,OAGlF,oBAAoB;CAExB;CAGA,MAAM,WAAW,cAAc,cAAc,QAAQ,IAAI,CAAC;CAC1D,GAAG,UAAU,UAAU,EAAE,WAAW,KAAK,CAAC;CAE1C,MAAM,gBAAgB,KAAK,KAAK,UAAU,yBAAyB;CACnE,MAAM,OAA8E,CAAC;CAErF,KAAK,MAAM,CAAC,KAAK,SAAS,WAAW,WACnC,KAAK,IAAI,SAAS,KAAK;EACrB,aAAa,KAAK;EAClB,oBAAoB,KAAK;CAC3B;CAGF,GAAG,cAAc,eAAe,KAAK,UAAU,MAAM,MAAM,CAAC,CAAC;CAG7D,MAAM,cAAc,SAAS,MAAM,OAAO;CAC1C,IAAI,gBAAgB,KAAA,GAClB,MAAM,IAAI,MAAM,6BAA6B;CAG/C,IAAI,sBAAsB,KAAA,GACxB,YAAY,gBAAgB,iBAAiB;CAE/C,YAAY,qBAAqB;CACjC,SAAS,KAAK,YAAY;CAE1B,IAAI,UAAU,GAAG;EACf,QAAQ,MAAM;EACd,QAAQ,MACN,aAAa,WAAW,UAAU,OAAO,gCAAgC,eAC3E;EACA,IAAI,sBAAsB,KAAA,GACxB,QAAQ,MAAM,kBAAkB,SAAS,CAAC;CAE9C,OAAO,IAAI,sBAAsB,KAAA,GAC/B,QAAQ,IAAI,kBAAkB,SAAS,CAAC;CAG1C,OAAO;AACT;;;;AAKA,SAAS,WAAW,KAAyB;CAC3C,MAAM,QAAQ,IAAI,WAAW,IAAI,SAAS,CAAC;CAC3C,KAAK,IAAI,IAAI,GAAG,IAAI,MAAM,QAAQ,KAChC,MAAM,KAAK,SAAS,IAAI,MAAM,IAAI,GAAG,IAAI,IAAI,CAAC,GAAG,EAAE;CAErD,OAAO;AACT;;;;;;;;AASA,eAAsB,SACpB,QACA,SACA,KAC4B;CAC5B,MAAM,eAAe,oBAAoB,QAAQ,cAAc,GAAG;CAClE,MAAM,WAAW,SAAS,KAAK,YAAY;CAE3C,MAAM,QAAQ,SAAS,MAAM;CAC7B,IAAI,UAAU,KAAA,GACZ,MAAM,IAAI,MAAM,4BAA4B;CAG9C,MAAM,UAAU,YAAY,QAAQ,OAAO;CAC3C,MAAM,cAAc,SAAS,MAAM,OAAO;CAE1C,IAAI,gBAAgB,KAAA,GAClB,MAAM,IAAI,MAAM,SAAS,QAAQ,QAAQ,uBAAuB;CAIlE,oBAAoB,aAAa,MAAM,IAAI,CAAC;CAE5C,MAAM,kBAAkB,YAAY,gBAAgB;CACpD,IAAI,gBAAgB,QAAQ,GAC1B,MAAM,IAAI,MACR,wFACF;CAGF,MAAM,kBAAkB,MAAM,YAAY,EAAE,qBAAqB;CACjE,IAAI,oBAAoB,KAAA,GACtB,MAAM,IAAI,MAAM,8CAA8C;CAGhE,IAAI;CACJ,IAAI;CACJ,IAAI,WAAW;CACf,IAAI;CACJ,IAAI,WAAW;CAEf,IAAI,QAAQ,aAAa,MAAM;EAE7B,MAAM,aAAa,MAAM,wBACvB,QACA,UACA,iBACA,iBACA,SACA,QAAQ,cACV;EAEA,eAAe,kCAAkC,YAAY,cAAc,UAAU,OAAO;EAE5F,YAAY,WAAW,UAAU;EACjC,WAAW,WAAW,WAAW;EACjC,SAAS,WAAW,OAAO;EAC3B,WAAW,WAAW,SAAS;CACjC,OAAO;EAEL,MAAM,mBAAoC,CAAC;EAC3C,MAAM,eAAgC,CAAC;EACvC,IAAI;EAEJ,IAAI,UAAU,GACZ,QAAQ,MAAM,sCAAsC,gBAAgB,IAAI,EAAE,iBAAiB;EAG7F,KAAK,MAAM,CAAC,gBAAgB,oBAAoB,gBAAgB,YAAY,GAAG;GAE7E,MAAM,OADS,SAAS,YAAY,cAClB,GAAG,QAAQ,KAAK,eAAe,SAAS;GAE1D,IAAI;IACF,MAAM,QAAQ,MAAM,sBAClB,QACA,iBACA,QAAQ,gBACR,iBACA,SACA,gBACA,IACF;IAGA,MAAM,YAAY,MAAM;IACxB,IAAI,CAAC,UAAU,eACb,MAAM,IAAI,MAAM,6BAA6B;IAI/C,MAAM,aAAa,wBADO,WAAW,UAAU,aACY,CAAC;IAE5D,IAAI,sBAAsB,KAAA;SACpB,kBAAkB,SAAS,MAAM,WAAW,SAAS,GAAG;MAC1D,IAAI,UAAU,GACZ,QAAQ,MAAM,qCAAqC;MAErD,aAAa,KAAK,CAAC,gBAAgB,+CAA+C,CAAC;MACnF;KACF;WAEA,oBAAoB;IAGtB,iBAAiB,KAAK,KAAK;GAC7B,SAAS,KAAK;IACZ,IAAI,UAAU,GACZ,QAAQ,MAAM,UAAU,eAAe,QAAQ,IAAI,UAAU,OAAO,GAAG,GAAG;IAE5E,aAAa,KAAK,CAAC,gBAAgB,eAAe,QAAQ,IAAI,UAAU,OAAO,GAAG,CAAC,CAAC;GACtF;EACF;EAEA,IAAI,aAAa,SAAS,GAAG;GAC3B,IAAI,UAAU,GAAG;IACf,QAAQ,MAAM;IACd,QAAQ,MAAM,0BAA0B,aAAa,OAAO,eAAe;IAC3E,KAAK,MAAM,CAAC,KAAK,UAAU,cACzB,QAAQ,MAAM,KAAK,IAAI,SAAS,EAAE,IAAI,OAAO;GAEjD;GACA,MAAM,IAAI,MACR,mCAAmC,aAAa,OAAO,MAAM,gBAAgB,IAAI,EAAE,kBACrF;EACF;EAGA,MAAM,WAAW,cAAc,cAAc,QAAQ,IAAI,CAAC;EAC1D,GAAG,UAAU,UAAU,EAAE,WAAW,KAAK,CAAC;EAE1C,MAAM,gBAAgB,KAAK,KAAK,UAAU,yBAAyB;EACnE,MAAM,OAA8E,CAAC;EAErF,KAAK,MAAM,SAAS,kBAClB,KAAK,MAAM,YAAY,SAAS,KAAK;GACnC,aAAa,MAAM;GACnB,oBAAoB,MAAM;EAC5B;EAGF,GAAG,cAAc,eAAe,KAAK,UAAU,MAAM,MAAM,CAAC,CAAC;EAG7D,MAAM,iBAAiB,SAAS,MAAM,OAAO;EAC7C,IAAI,mBAAmB,KAAA,GACrB,MAAM,IAAI,MAAM,6BAA6B;EAG/C,IAAI,sBAAsB,KAAA,GACxB,eAAe,gBAAgB,iBAAiB;EAElD,eAAe,qBAAqB;EACpC,SAAS,KAAK,YAAY;EAE1B,IAAI,UAAU,GAAG;GACf,QAAQ,MAAM;GACd,QAAQ,MACN,aAAa,iBAAiB,OAAO,gCAAgC,eACvE;GACA,IAAI,sBAAsB,KAAA,GACxB,QAAQ,MAAM,kBAAkB,SAAS,CAAC;EAE9C,OAAO,IAAI,sBAAsB,KAAA,GAC/B,QAAQ,IAAI,kBAAkB,SAAS,CAAC;EAG1C,eAAe;EACf,YAAY,iBAAiB;EAC7B,SAAS,aAAa;CACxB;CAEA,OAAO;EACL,cAAc,cAAc,SAAS,KAAK;EAC1C;EACA;EACA;EACA;CACF;AACF"}

package/dist/{finalize-EC3ikHQq.mjs → finalize-T83Ko8nG.mjs}

@@ -1,9 +1,9 @@
-import { t as __exportAll } from "./chunk-CjcI7cDX.mjs";
-import { n as compareXidBytes } from "./proposed-participant-cWM7iUrO.mjs";
+import { t as __exportAll } from "./chunk-z9aeyW2b.mjs";
+import { n as compareXidBytes } from "./proposed-participant-Detb823_.mjs";
 import { Registry, resolveRegistryPath } from "./registry/index.mjs";
-import { c as parseAridUr, h as signingKeyFromVerifying, n as isVerbose, t as groupStateDir } from "./common-CvH6dFvQ.mjs";
-import { n as putWithIndicator, t as getWithIndicator } from "./busy-DkM2jAIZ.mjs";
-import { t as createStorageClient } from "./storage-Bkkliz0K.mjs";
+import { c as parseAridUr, h as signingKeyFromVerifying, n as isVerbose, t as groupStateDir } from "./common-Cf1UvJaP.mjs";
+import { n as putWithIndicator, t as getWithIndicator } from "./busy-BlU8_pS2.mjs";
+import { i as createStorageClient } from "./registry-DGjs4qDK.mjs";
 import { bytesToHex, dkgPart3, hexToBytes, identifierFromU16, identifierToHex, serializeKeyPackage, serializePublicKeyPackage } from "./frost/index.mjs";
 import { ARID, JSON as JSON$1, XID } from "@bcts/components";
 import { CborDate } from "@bcts/dcbor";
@@ -249,4 +249,4 @@ async function finalize(_client, options, cwd) {
 //#endregion
 export { finalize_exports as n, finalize as t };
 
-//# sourceMappingURL=finalize-EC3ikHQq.mjs.map
+//# sourceMappingURL=finalize-T83Ko8nG.mjs.map

package/dist/{finalize-EC3ikHQq.mjs.map → finalize-T83Ko8nG.mjs.map}

@@ -1 +1 @@
-{"version":3,"file":"finalize-EC3ikHQq.mjs","names":["EnvelopeFunction","JSONWrapper"],"sources":["../src/cmd/dkg/participant/finalize.ts"],"sourcesContent":["/**\n * Copyright © 2023-2026 Blockchain Commons, LLC\n * Copyright © 2025-2026 Parity Technologies\n *\n *\n * DKG participant finalize command.\n *\n * Port of cmd/dkg/participant/finalize.rs from frost-hubert-rust.\n *\n * @module\n */\n\nimport * as fs from \"node:fs\";\nimport * as path from \"node:path\";\n\nimport { ARID, JSON as JSONWrapper, XID } from \"@bcts/components\";\nimport { compareXidBytes } from \"../../../dkg/proposed-participant.js\";\nimport { CborDate } from \"@bcts/dcbor\";\nimport { Envelope, Function as EnvelopeFunction } from \"@bcts/envelope\";\nimport { SealedRequest, SealedResponse } from \"@bcts/gstp\";\nimport type { XIDDocument } from \"@bcts/xid\";\n\nimport { type GroupRecord, Registry, resolveRegistryPath } from \"../../../registry/index.js\";\nimport { getWithIndicator, putWithIndicator } from \"../../busy.js\";\nimport { groupStateDir, isVerbose } from \"../../common.js\";\nimport { createStorageClient, type StorageClient, type StorageSelection } from \"../../storage.js\";\nimport { parseAridUr, signingKeyFromVerifying } from \"../common.js\";\nimport {\n  dkgPart3,\n  identifierFromU16,\n  identifierToHex,\n  hexToBytes,\n  bytesToHex,\n  serializeKeyPackage,\n  serializePublicKeyPackage,\n  type DkgRound1Package,\n  type DkgRound2Package,\n  type DkgRound2SecretPackage,\n  type FrostIdentifier,\n  type FrostKeyPackage,\n  type FrostPublicKeyPackage,\n} from \"../../../frost/index.js\";\nimport { Ed25519Sha512, serde } from \"@frosts/ed25519\";\nimport { round2, CoefficientCommitment, VerifiableSecretSharingCommitment } from \"@frosts/core\";\n\n/**\n * Options for the DKG finalize command.\n */\nexport interface DkgFinalizeOptions {\n  registryPath?: string;\n  groupId: string;\n  timeoutSeconds?: number;\n  preview?: boolean;\n  storageSelection?: StorageSelection;\n  verbose?: boolean;\n}\n\n/**\n * Result of the DKG finalize command.\n */\nexport interface DkgFinalizeResult {\n  verifyingKey: string;\n  keyPackagePath: string;\n  publicKeyPackagePath: string;\n}\n\n/**\n * Persisted round 2 state loaded from disk.\n */\ninterface Round2State {\n  secretPackage: DkgRound2SecretPackage;\n  round1Packages: Map<string, DkgRound1Package>;\n}\n\n/**\n * Load persisted round 2 state from disk.\n *\n * Port of round2_secret loading from cmd/dkg/participant/finalize.rs lines 82-106.\n */\nfunction loadRound2State(registryPath: string, groupId: ARID): Round2State {\n  const stateDir = groupStateDir(registryPath, groupId.hex());\n\n  // Load Round 2 secret\n  const round2SecretPath = path.join(stateDir, \"round2_secret.json\");\n  if (!fs.existsSync(round2SecretPath)) {\n    throw new Error(`Round 2 secret not found at ${round2SecretPath}. Did you run round2?`);\n  }\n\n  // Mirrors Rust `frost::keys::dkg::round2::SecretPackage` JSON\n  // (`frost-rust/frost-core/src/keys/dkg.rs:269-287`):\n  //\n  //   {\n  //     \"identifier\": \"<lowercase hex scalar>\",\n  //     \"commitment\": [\"<hex>\", \"<hex>\", ...],\n  //     \"secret_share\": \"<hex>\",\n  //     \"min_signers\": <u16>,\n  //     \"max_signers\": <u16>\n  //   }\n  //\n  // The struct is `#[serde(deny_unknown_fields)]` and the\n  // `commitment` is a `VerifiableSecretSharingCommitment` (a\n  // single-field tuple struct over `Vec<CoefficientCommitment>`),\n  // which serde flattens to a bare JSON array. The earlier port\n  // emitted camelCase keys plus a nested `commitment.coefficients`\n  // shape and a numeric `identifier`, which Rust would reject and\n  // which had no chance of being read by Rust's standard derive.\n  const secretJson = JSON.parse(fs.readFileSync(round2SecretPath, \"utf-8\")) as {\n    identifier: string;\n    commitment: string[];\n    secret_share: string;\n    min_signers: number;\n    max_signers: number;\n  };\n\n  // Identifier hex → little-endian u16 (the FROST 1-indexed\n  // participant position). The scalar bytes are 32-LE for Ed25519, so\n  // the first two bytes hold the u16 value when the identifier is in\n  // the small-integer range (1..=N) used by the DKG.\n  const idBytes = hexToBytes(secretJson.identifier);\n  let identifierU16 = 1;\n  if (idBytes.length >= 2) {\n    identifierU16 = idBytes[0] | (idBytes[1] << 8);\n  }\n  if (identifierU16 === 0) {\n    identifierU16 = 1;\n  }\n  const identifier = identifierFromU16(identifierU16);\n\n  const coefficientCommitments = secretJson.commitment.map((hex) =>\n    CoefficientCommitment.deserialize(Ed25519Sha512, hexToBytes(hex)),\n  );\n\n  const commitment = new VerifiableSecretSharingCommitment(Ed25519Sha512, coefficientCommitments);\n\n  const secretShareScalar = Ed25519Sha512.deserializeScalar(hexToBytes(secretJson.secret_share));\n\n  const secretPackage: DkgRound2SecretPackage = new round2.SecretPackage(\n    Ed25519Sha512,\n    identifier,\n    commitment,\n    secretShareScalar,\n    secretJson.min_signers,\n    secretJson.max_signers,\n  );\n\n  // Load collected Round 1 packages (from round2 phase)\n  const round1Path = path.join(stateDir, \"collected_round1.json\");\n  if (!fs.existsSync(round1Path)) {\n    throw new Error(`Round 1 packages not found at ${round1Path}. Did you receive earlier phases?`);\n  }\n\n  const round1Json = JSON.parse(fs.readFileSync(round1Path, \"utf-8\")) as Record<string, unknown>;\n\n  // Convert to Map<string, DkgRound1Package> - keyed by XID UR string\n  const round1Packages = new Map<string, DkgRound1Package>();\n  for (const [xidStr, value] of Object.entries(round1Json)) {\n    const packageJson = value as {\n      header: { version: number; ciphersuite: string };\n      commitment: string[];\n      proof_of_knowledge: string;\n    };\n    const pkg = serde.round1PackageFromJson(packageJson);\n    round1Packages.set(xidStr, pkg);\n  }\n\n  return { secretPackage, round1Packages };\n}\n\n/**\n * Validate the finalize request from the coordinator.\n *\n * Port of request validation from cmd/dkg/participant/finalize.rs lines 139-161.\n */\nfunction validateFinalizeRequest(\n  sealedRequest: SealedRequest,\n  groupId: ARID,\n  expectedCoordinator: XID,\n): ARID {\n  // Validate the request function\n  if (!sealedRequest.function().equals(EnvelopeFunction.fromString(\"dkgFinalize\"))) {\n    throw new Error(`Unexpected request function: ${sealedRequest.function().toString()}`);\n  }\n\n  // Validate the sender is the expected coordinator\n  if (sealedRequest.sender().xid().urString() !== expectedCoordinator.urString()) {\n    throw new Error(\n      `Unexpected request sender: ${sealedRequest.sender().xid().urString()} ` +\n        `(expected coordinator ${expectedCoordinator.urString()})`,\n    );\n  }\n\n  // Validate the group ID matches\n  const requestGroupIdEnvelope = sealedRequest.objectForParameter(\"group\");\n  if (requestGroupIdEnvelope === undefined) {\n    throw new Error(\"Request missing group parameter\");\n  }\n  const requestGroupId = requestGroupIdEnvelope.extractSubject((cbor) => ARID.fromTaggedCbor(cbor));\n  if (requestGroupId.urString() !== groupId.urString()) {\n    throw new Error(\n      `Request group ID ${requestGroupId.urString()} does not match expected ${groupId.urString()}`,\n    );\n  }\n\n  // Extract where we should post our response\n  const responseAridEnvelope = sealedRequest.objectForParameter(\"responseArid\");\n  if (responseAridEnvelope === undefined) {\n    throw new Error(\"Request missing responseArid parameter\");\n  }\n  const responseArid = responseAridEnvelope.extractSubject((cbor) => ARID.fromTaggedCbor(cbor));\n\n  return responseArid;\n}\n\n/**\n * Extract round 2 packages from the finalize request.\n *\n * Port of round2 package extraction from cmd/dkg/participant/finalize.rs lines 209-229.\n */\nfunction extractFinalizePackages(\n  request: SealedRequest,\n  groupRecord: GroupRecord,\n  ownerXid: XID,\n): Map<string, DkgRound2Package> {\n  // Build XID -> Identifier mapping based on sorted participant order\n  const sortedXids: XID[] = groupRecord.participants().map((p) => p.xid());\n\n  // Add owner if not already in list\n  const ownerUrString = ownerXid.urString();\n  if (!sortedXids.some((xid) => xid.urString() === ownerUrString)) {\n    sortedXids.push(ownerXid);\n  }\n\n  // Sort by XID byte order — mirrors Rust `XID::cmp` (raw 32-byte\n  // lex compare). The earlier port used `urString().localeCompare(...)`,\n  // which differs from byte order for any byte ≥ 0x80 and is locale-\n  // aware, producing different FROST identifier assignments than Rust.\n  sortedXids.sort((a, b) => compareXidBytes(a.toData(), b.toData()));\n\n  // Deduplicate\n  const deduped: XID[] = [];\n  for (const xid of sortedXids) {\n    if (deduped.length === 0 || deduped[deduped.length - 1].urString() !== xid.urString()) {\n      deduped.push(xid);\n    }\n  }\n\n  // Build XID -> Identifier mapping (1-indexed)\n  const xidToIdentifier = new Map<string, FrostIdentifier>();\n  for (let i = 0; i < deduped.length; i++) {\n    const identifier = identifierFromU16(i + 1);\n    xidToIdentifier.set(deduped[i].urString(), identifier);\n  }\n\n  const myXidStr = ownerXid.urString();\n\n  // Extract all round2Package parameters\n  const packages = new Map<string, DkgRound2Package>();\n\n  const packageEnvelopes = request.objectsForParameter(\"round2Package\");\n  for (const packageEnvelope of packageEnvelopes) {\n    // Extract sender XID from the envelope\n    const senderEnvelope = packageEnvelope.objectForPredicate(\"sender\");\n    if (senderEnvelope === undefined) {\n      throw new Error(\"round2Package missing sender predicate\");\n    }\n    const senderXid = senderEnvelope.extractSubject((cbor) => XID.fromTaggedCbor(cbor));\n\n    // Skip our own package\n    if (senderXid.urString() === myXidStr) {\n      continue;\n    }\n\n    // Get the identifier for this sender\n    const identifier = xidToIdentifier.get(senderXid.urString());\n    if (identifier === undefined) {\n      throw new Error(`Unknown sender XID in round2Package: ${senderXid.urString()}`);\n    }\n\n    // Extract the package bytes (stored as JSON tag)\n    const packageJson = packageEnvelope.extractSubject((cbor) => JSONWrapper.fromTaggedCbor(cbor));\n    const packageData = JSON.parse(new TextDecoder().decode(packageJson.toData())) as {\n      header: { version: number; ciphersuite: string };\n      signing_share: string;\n    };\n\n    const pkg = serde.round2PackageFromJson(packageData);\n    packages.set(identifierToHex(identifier), pkg);\n  }\n\n  return packages;\n}\n\n/**\n * Build the response body for the finalize response.\n *\n * Port of `build_response_body()` from cmd/dkg/participant/finalize.rs lines 344-359.\n */\nfunction buildResponseBody(\n  groupId: ARID,\n  participantXid: XID,\n  keyPackage: FrostKeyPackage,\n  publicKeyPackage: FrostPublicKeyPackage,\n): Envelope {\n  // Serialize key packages to JSON\n  const keyPackageJson = serializeKeyPackage(keyPackage);\n  const publicKeyPackageJson = serializePublicKeyPackage(publicKeyPackage);\n\n  const keyJsonBytes = new TextEncoder().encode(JSON.stringify(keyPackageJson));\n  const keyJsonWrapper = JSONWrapper.fromData(keyJsonBytes);\n\n  const pubJsonBytes = new TextEncoder().encode(JSON.stringify(publicKeyPackageJson));\n  const pubJsonWrapper = JSONWrapper.fromData(pubJsonBytes);\n\n  return Envelope.unit()\n    .addType(\"dkgFinalizeResponse\")\n    .addAssertion(\"group\", groupId)\n    .addAssertion(\"participant\", participantXid)\n    .addAssertion(\"key_package\", keyJsonWrapper)\n    .addAssertion(\"public_key_package\", pubJsonWrapper);\n}\n\n/**\n * Persist finalize state (key packages) to disk.\n *\n * Port of key package persistence from cmd/dkg/participant/finalize.rs lines 251-257.\n */\nfunction persistFinalizeState(\n  registryPath: string,\n  groupId: ARID,\n  keyPackage: FrostKeyPackage,\n  publicKeyPackage: FrostPublicKeyPackage,\n): { keyPackagePath: string; publicKeyPackagePath: string } {\n  const stateDir = groupStateDir(registryPath, groupId.hex());\n  fs.mkdirSync(stateDir, { recursive: true });\n\n  // Serialize and save key package\n  const serializedKeyPackage = serializeKeyPackage(keyPackage);\n  const keyPackagePath = path.join(stateDir, \"key_package.json\");\n  fs.writeFileSync(keyPackagePath, JSON.stringify(serializedKeyPackage, null, 2));\n\n  // Serialize and save public key package\n  const serializedPublicKeyPackage = serializePublicKeyPackage(publicKeyPackage);\n  const publicKeyPackagePath = path.join(stateDir, \"public_key_package.json\");\n  fs.writeFileSync(publicKeyPackagePath, JSON.stringify(serializedPublicKeyPackage, null, 2));\n\n  return { keyPackagePath, publicKeyPackagePath };\n}\n\n/**\n * Execute the DKG participant finalize command.\n *\n * Responds to the finalize request from the coordinator, runs FROST DKG part3\n * to generate the final key package, and posts the response back.\n *\n * Port of `CommandArgs::exec()` from cmd/dkg/participant/finalize.rs lines 52-341.\n */\nexport async function finalize(\n  _client: StorageClient | undefined,\n  options: DkgFinalizeOptions,\n  cwd: string,\n): Promise<DkgFinalizeResult> {\n  if (options.storageSelection === undefined) {\n    throw new Error(\"Hubert storage is required for finalize respond\");\n  }\n\n  const registryPath = resolveRegistryPath(options.registryPath, cwd);\n  const registry = Registry.load(registryPath);\n\n  const owner = registry.owner();\n  if (owner === undefined) {\n    throw new Error(\"Registry owner is required\");\n  }\n\n  const groupId = parseAridUr(options.groupId);\n  const groupRecord = registry.group(groupId);\n  if (groupRecord === undefined) {\n    throw new Error(\"Group not found in registry\");\n  }\n\n  // Get the ARID where we're listening for the finalize request\n  const listeningAtArid = groupRecord.listeningAtArid();\n  if (listeningAtArid === undefined) {\n    throw new Error(\"No listening ARID for this group. Did you receive finalize send?\");\n  }\n\n  // Load Round 2 state (secret and collected round1 packages)\n  const round2State = loadRound2State(registryPath, groupId);\n\n  if (isVerbose() || options.verbose === true) {\n    console.error(\"Fetching finalize request from Hubert...\");\n  }\n\n  const client = await createStorageClient(options.storageSelection);\n\n  // Fetch the finalize request from where we're listening\n  const requestEnvelope = await getWithIndicator(\n    client,\n    listeningAtArid,\n    \"Finalize request\",\n    options.timeoutSeconds,\n    options.verbose ?? false,\n  );\n\n  if (requestEnvelope === null || requestEnvelope === undefined) {\n    throw new Error(\"Finalize request not found in Hubert storage\");\n  }\n\n  // Decrypt and validate the request\n  const ownerPrivateKeys = owner.xidDocument().inceptionPrivateKeys();\n  if (ownerPrivateKeys === undefined) {\n    throw new Error(\"Owner XID document has no private keys\");\n  }\n\n  const now = CborDate.now().datetime();\n  const sealedRequest = SealedRequest.tryFromEnvelope(\n    requestEnvelope,\n    undefined,\n    now,\n    ownerPrivateKeys,\n  );\n\n  // Validate the request and extract response ARID\n  const expectedCoordinator = groupRecord.coordinator().xid();\n  const responseArid = validateFinalizeRequest(sealedRequest, groupId, expectedCoordinator);\n\n  // Build identifier mapping for round1 packages (XID UR -> Identifier hex)\n  const sortedXids: XID[] = groupRecord.participants().map((p) => p.xid());\n\n  // Add owner if not already in list\n  const ownerUrString = owner.xid().urString();\n  if (!sortedXids.some((xid) => xid.urString() === ownerUrString)) {\n    sortedXids.push(owner.xid());\n  }\n\n  // Sort by XID byte order — mirrors Rust `XID::cmp` (raw 32-byte\n  // lex compare). The earlier port used `urString().localeCompare(...)`,\n  // which differs from byte order for any byte ≥ 0x80 and is locale-\n  // aware, producing different FROST identifier assignments than Rust.\n  sortedXids.sort((a, b) => compareXidBytes(a.toData(), b.toData()));\n\n  // Deduplicate\n  const deduped: XID[] = [];\n  for (const xid of sortedXids) {\n    if (deduped.length === 0 || deduped[deduped.length - 1].urString() !== xid.urString()) {\n      deduped.push(xid);\n    }\n  }\n\n  // Build XID -> Identifier mapping (1-indexed)\n  const xidToIdentifier = new Map<string, FrostIdentifier>();\n  for (let i = 0; i < deduped.length; i++) {\n    const identifier = identifierFromU16(i + 1);\n    xidToIdentifier.set(deduped[i].urString(), identifier);\n  }\n\n  // Convert round1 packages from XID-keyed to identifier-keyed (exclude self)\n  const round1PackagesById = new Map<string, DkgRound1Package>();\n  for (const [xidStr, pkg] of round2State.round1Packages) {\n    if (xidStr === ownerUrString) {\n      continue;\n    }\n    const identifier = xidToIdentifier.get(xidStr);\n    if (identifier === undefined) {\n      throw new Error(`Unknown participant XID ${xidStr}`);\n    }\n    round1PackagesById.set(identifierToHex(identifier), pkg);\n  }\n\n  // Extract Round 2 packages from the request (exclude self)\n  const round2PackagesById = extractFinalizePackages(sealedRequest, groupRecord, owner.xid());\n\n  if (isVerbose() || options.verbose === true) {\n    console.error(`Received ${round2PackagesById.size} Round 2 packages. Running DKG part3...`);\n  }\n\n  // Run FROST DKG part3 (finalize)\n  const [keyPackage, publicKeyPackage] = await dkgPart3(\n    round2State.secretPackage,\n    round1PackagesById,\n    round2PackagesById,\n  );\n\n  // Get the group verifying key\n  const verifyingKeyBytes = publicKeyPackage.verifyingKey;\n  const groupVerifyingKey = signingKeyFromVerifying(verifyingKeyBytes);\n\n  if (isVerbose() || options.verbose === true) {\n    console.error(\"Generated key package and public key package.\");\n  }\n\n  // Persist key packages\n  const { keyPackagePath, publicKeyPackagePath } = persistFinalizeState(\n    registryPath,\n    groupId,\n    keyPackage,\n    publicKeyPackage,\n  );\n\n  // Build response body\n  const responseBody = buildResponseBody(groupId, owner.xid(), keyPackage, publicKeyPackage);\n\n  const signerPrivateKeys = owner.xidDocument().inceptionPrivateKeys();\n  if (signerPrivateKeys === undefined) {\n    throw new Error(\"Owner XID document has no signing keys\");\n  }\n\n  // Get coordinator's XID document for encryption\n  const coordinatorXid = groupRecord.coordinator().xid();\n  const coordinatorRecord = registry.participant(coordinatorXid);\n  let coordinatorDoc: XIDDocument;\n  if (coordinatorRecord !== undefined) {\n    coordinatorDoc = coordinatorRecord.xidDocument();\n  } else {\n    // Check if coordinator is the owner\n    if (owner.xid().urString() === coordinatorXid.urString()) {\n      coordinatorDoc = owner.xidDocument();\n    } else {\n      throw new Error(`Coordinator ${coordinatorXid.urString()} not found in registry`);\n    }\n  }\n\n  // Get peer continuation from the request\n  const peerContinuation = sealedRequest.peerContinuation();\n\n  let sealed = SealedResponse.newSuccess(sealedRequest.id(), owner.xidDocument()).withResult(\n    responseBody,\n  );\n\n  if (peerContinuation !== undefined) {\n    sealed = sealed.withPeerContinuation(peerContinuation);\n  }\n\n  if (options.preview === true) {\n    // Show the response envelope structure without encryption\n    if (isVerbose() || options.verbose === true) {\n      // Cast to access urString method\n      const verifyingKeyWithUrString = groupVerifyingKey as { urString?: () => string };\n      if (typeof verifyingKeyWithUrString.urString === \"function\") {\n        console.error(verifyingKeyWithUrString.urString());\n      }\n    }\n    const unsealedEnvelope = sealed.toEnvelope(\n      undefined, // No expiration for responses\n      signerPrivateKeys,\n      undefined,\n    );\n    console.log(unsealedEnvelope.urString());\n\n    return {\n      verifyingKey: bytesToHex(verifyingKeyBytes),\n      keyPackagePath,\n      publicKeyPackagePath,\n    };\n  }\n\n  const responseEnvelope = sealed.toEnvelope(\n    undefined, // No expiration for responses\n    signerPrivateKeys,\n    coordinatorDoc,\n  );\n\n  // Post the response\n  await putWithIndicator(\n    client,\n    responseArid,\n    responseEnvelope,\n    \"Finalize Response\",\n    options.verbose ?? false,\n  );\n\n  // Update registry: contributions and verifying key\n  const updatedGroupRecord = registry.group(groupId);\n  if (updatedGroupRecord !== undefined) {\n    const contributions = updatedGroupRecord.contributions();\n    contributions.keyPackage = keyPackagePath;\n    updatedGroupRecord.setContributions(contributions);\n    updatedGroupRecord.clearListeningAtArid();\n\n    // Set verifying key if the method exists\n    const recordWithVerifyingKey = updatedGroupRecord as {\n      setVerifyingKey?: (key: unknown) => void;\n    };\n    if (typeof recordWithVerifyingKey.setVerifyingKey === \"function\") {\n      recordWithVerifyingKey.setVerifyingKey(groupVerifyingKey);\n    }\n\n    registry.save(registryPath);\n  }\n\n  // Get verifying key for output\n  const verifyingKeyHex = bytesToHex(verifyingKeyBytes);\n\n  if (isVerbose() || options.verbose === true) {\n    console.error(`Posted finalize response to ${responseArid.urString()}`);\n    // Cast to access urString method\n    const verifyingKeyWithUrString = groupVerifyingKey as { urString?: () => string };\n    if (typeof verifyingKeyWithUrString.urString === \"function\") {\n      console.error(verifyingKeyWithUrString.urString());\n    }\n  } else {\n    // Cast to access urString method\n    const verifyingKeyWithUrString = groupVerifyingKey as { urString?: () => string };\n    if (typeof verifyingKeyWithUrString.urString === \"function\") {\n      console.log(verifyingKeyWithUrString.urString());\n    }\n  }\n\n  return {\n    verifyingKey: verifyingKeyHex,\n    keyPackagePath,\n    publicKeyPackagePath,\n  };\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AA+EA,SAAS,gBAAgB,cAAsB,SAA4B;CACzE,MAAM,WAAW,cAAc,cAAc,QAAQ,KAAK,CAAC;CAG3D,MAAM,mBAAmB,KAAK,KAAK,UAAU,qBAAqB;AAClE,KAAI,CAAC,GAAG,WAAW,iBAAiB,CAClC,OAAM,IAAI,MAAM,+BAA+B,iBAAiB,uBAAuB;CAqBzF,MAAM,aAAa,KAAK,MAAM,GAAG,aAAa,kBAAkB,QAAQ,CAAC;CAYzE,MAAM,UAAU,WAAW,WAAW,WAAW;CACjD,IAAI,gBAAgB;AACpB,KAAI,QAAQ,UAAU,EACpB,iBAAgB,QAAQ,KAAM,QAAQ,MAAM;AAE9C,KAAI,kBAAkB,EACpB,iBAAgB;CAElB,MAAM,aAAa,kBAAkB,cAAc;CAMnD,MAAM,aAAa,IAAI,kCAAkC,eAJ1B,WAAW,WAAW,KAAK,QACxD,sBAAsB,YAAY,eAAe,WAAW,IAAI,CAAC,CAG2B,CAAC;CAE/F,MAAM,oBAAoB,cAAc,kBAAkB,WAAW,WAAW,aAAa,CAAC;CAE9F,MAAM,gBAAwC,IAAI,OAAO,cACvD,eACA,YACA,YACA,mBACA,WAAW,aACX,WAAW,YACZ;CAGD,MAAM,aAAa,KAAK,KAAK,UAAU,wBAAwB;AAC/D,KAAI,CAAC,GAAG,WAAW,WAAW,CAC5B,OAAM,IAAI,MAAM,iCAAiC,WAAW,mCAAmC;CAGjG,MAAM,aAAa,KAAK,MAAM,GAAG,aAAa,YAAY,QAAQ,CAAC;CAGnE,MAAM,iCAAiB,IAAI,KAA+B;AAC1D,MAAK,MAAM,CAAC,QAAQ,UAAU,OAAO,QAAQ,WAAW,EAAE;EACxD,MAAM,cAAc;EAKpB,MAAM,MAAM,MAAM,sBAAsB,YAAY;AACpD,iBAAe,IAAI,QAAQ,IAAI;;AAGjC,QAAO;EAAE;EAAe;EAAgB;;;;;;;AAQ1C,SAAS,wBACP,eACA,SACA,qBACM;AAEN,KAAI,CAAC,cAAc,UAAU,CAAC,OAAOA,SAAiB,WAAW,cAAc,CAAC,CAC9E,OAAM,IAAI,MAAM,gCAAgC,cAAc,UAAU,CAAC,UAAU,GAAG;AAIxF,KAAI,cAAc,QAAQ,CAAC,KAAK,CAAC,UAAU,KAAK,oBAAoB,UAAU,CAC5E,OAAM,IAAI,MACR,8BAA8B,cAAc,QAAQ,CAAC,KAAK,CAAC,UAAU,CAAC,yBAC3C,oBAAoB,UAAU,CAAC,GAC3D;CAIH,MAAM,yBAAyB,cAAc,mBAAmB,QAAQ;AACxE,KAAI,2BAA2B,KAAA,EAC7B,OAAM,IAAI,MAAM,kCAAkC;CAEpD,MAAM,iBAAiB,uBAAuB,gBAAgB,SAAS,KAAK,eAAe,KAAK,CAAC;AACjG,KAAI,eAAe,UAAU,KAAK,QAAQ,UAAU,CAClD,OAAM,IAAI,MACR,oBAAoB,eAAe,UAAU,CAAC,2BAA2B,QAAQ,UAAU,GAC5F;CAIH,MAAM,uBAAuB,cAAc,mBAAmB,eAAe;AAC7E,KAAI,yBAAyB,KAAA,EAC3B,OAAM,IAAI,MAAM,yCAAyC;AAI3D,QAFqB,qBAAqB,gBAAgB,SAAS,KAAK,eAAe,KAAK,CAEzE;;;;;;;AAQrB,SAAS,wBACP,SACA,aACA,UAC+B;CAE/B,MAAM,aAAoB,YAAY,cAAc,CAAC,KAAK,MAAM,EAAE,KAAK,CAAC;CAGxE,MAAM,gBAAgB,SAAS,UAAU;AACzC,KAAI,CAAC,WAAW,MAAM,QAAQ,IAAI,UAAU,KAAK,cAAc,CAC7D,YAAW,KAAK,SAAS;AAO3B,YAAW,MAAM,GAAG,MAAM,gBAAgB,EAAE,QAAQ,EAAE,EAAE,QAAQ,CAAC,CAAC;CAGlE,MAAM,UAAiB,EAAE;AACzB,MAAK,MAAM,OAAO,WAChB,KAAI,QAAQ,WAAW,KAAK,QAAQ,QAAQ,SAAS,GAAG,UAAU,KAAK,IAAI,UAAU,CACnF,SAAQ,KAAK,IAAI;CAKrB,MAAM,kCAAkB,IAAI,KAA8B;AAC1D,MAAK,IAAI,IAAI,GAAG,IAAI,QAAQ,QAAQ,KAAK;EACvC,MAAM,aAAa,kBAAkB,IAAI,EAAE;AAC3C,kBAAgB,IAAI,QAAQ,GAAG,UAAU,EAAE,WAAW;;CAGxD,MAAM,WAAW,SAAS,UAAU;CAGpC,MAAM,2BAAW,IAAI,KAA+B;CAEpD,MAAM,mBAAmB,QAAQ,oBAAoB,gBAAgB;AACrE,MAAK,MAAM,mBAAmB,kBAAkB;EAE9C,MAAM,iBAAiB,gBAAgB,mBAAmB,SAAS;AACnE,MAAI,mBAAmB,KAAA,EACrB,OAAM,IAAI,MAAM,yCAAyC;EAE3D,MAAM,YAAY,eAAe,gBAAgB,SAAS,IAAI,eAAe,KAAK,CAAC;AAGnF,MAAI,UAAU,UAAU,KAAK,SAC3B;EAIF,MAAM,aAAa,gBAAgB,IAAI,UAAU,UAAU,CAAC;AAC5D,MAAI,eAAe,KAAA,EACjB,OAAM,IAAI,MAAM,wCAAwC,UAAU,UAAU,GAAG;EAIjF,MAAM,cAAc,gBAAgB,gBAAgB,SAASC,OAAY,eAAe,KAAK,CAAC;EAC9F,MAAM,cAAc,KAAK,MAAM,IAAI,aAAa,CAAC,OAAO,YAAY,QAAQ,CAAC,CAAC;EAK9E,MAAM,MAAM,MAAM,sBAAsB,YAAY;AACpD,WAAS,IAAI,gBAAgB,WAAW,EAAE,IAAI;;AAGhD,QAAO;;;;;;;AAQT,SAAS,kBACP,SACA,gBACA,YACA,kBACU;CAEV,MAAM,iBAAiB,oBAAoB,WAAW;CACtD,MAAM,uBAAuB,0BAA0B,iBAAiB;CAExE,MAAM,eAAe,IAAI,aAAa,CAAC,OAAO,KAAK,UAAU,eAAe,CAAC;CAC7E,MAAM,iBAAiBA,OAAY,SAAS,aAAa;CAEzD,MAAM,eAAe,IAAI,aAAa,CAAC,OAAO,KAAK,UAAU,qBAAqB,CAAC;CACnF,MAAM,iBAAiBA,OAAY,SAAS,aAAa;AAEzD,QAAO,SAAS,MAAM,CACnB,QAAQ,sBAAsB,CAC9B,aAAa,SAAS,QAAQ,CAC9B,aAAa,eAAe,eAAe,CAC3C,aAAa,eAAe,eAAe,CAC3C,aAAa,sBAAsB,eAAe;;;;;;;AAQvD,SAAS,qBACP,cACA,SACA,YACA,kBAC0D;CAC1D,MAAM,WAAW,cAAc,cAAc,QAAQ,KAAK,CAAC;AAC3D,IAAG,UAAU,UAAU,EAAE,WAAW,MAAM,CAAC;CAG3C,MAAM,uBAAuB,oBAAoB,WAAW;CAC5D,MAAM,iBAAiB,KAAK,KAAK,UAAU,mBAAmB;AAC9D,IAAG,cAAc,gBAAgB,KAAK,UAAU,sBAAsB,MAAM,EAAE,CAAC;CAG/E,MAAM,6BAA6B,0BAA0B,iBAAiB;CAC9E,MAAM,uBAAuB,KAAK,KAAK,UAAU,0BAA0B;AAC3E,IAAG,cAAc,sBAAsB,KAAK,UAAU,4BAA4B,MAAM,EAAE,CAAC;AAE3F,QAAO;EAAE;EAAgB;EAAsB;;;;;;;;;;AAWjD,eAAsB,SACpB,SACA,SACA,KAC4B;AAC5B,KAAI,QAAQ,qBAAqB,KAAA,EAC/B,OAAM,IAAI,MAAM,kDAAkD;CAGpE,MAAM,eAAe,oBAAoB,QAAQ,cAAc,IAAI;CACnE,MAAM,WAAW,SAAS,KAAK,aAAa;CAE5C,MAAM,QAAQ,SAAS,OAAO;AAC9B,KAAI,UAAU,KAAA,EACZ,OAAM,IAAI,MAAM,6BAA6B;CAG/C,MAAM,UAAU,YAAY,QAAQ,QAAQ;CAC5C,MAAM,cAAc,SAAS,MAAM,QAAQ;AAC3C,KAAI,gBAAgB,KAAA,EAClB,OAAM,IAAI,MAAM,8BAA8B;CAIhD,MAAM,kBAAkB,YAAY,iBAAiB;AACrD,KAAI,oBAAoB,KAAA,EACtB,OAAM,IAAI,MAAM,mEAAmE;CAIrF,MAAM,cAAc,gBAAgB,cAAc,QAAQ;AAE1D,KAAI,WAAW,IAAI,QAAQ,YAAY,KACrC,SAAQ,MAAM,2CAA2C;CAG3D,MAAM,SAAS,MAAM,oBAAoB,QAAQ,iBAAiB;CAGlE,MAAM,kBAAkB,MAAM,iBAC5B,QACA,iBACA,oBACA,QAAQ,gBACR,QAAQ,WAAW,MACpB;AAED,KAAI,oBAAoB,QAAQ,oBAAoB,KAAA,EAClD,OAAM,IAAI,MAAM,+CAA+C;CAIjE,MAAM,mBAAmB,MAAM,aAAa,CAAC,sBAAsB;AACnE,KAAI,qBAAqB,KAAA,EACvB,OAAM,IAAI,MAAM,yCAAyC;CAG3D,MAAM,MAAM,SAAS,KAAK,CAAC,UAAU;CACrC,MAAM,gBAAgB,cAAc,gBAClC,iBACA,KAAA,GACA,KACA,iBACD;CAID,MAAM,eAAe,wBAAwB,eAAe,SADhC,YAAY,aAAa,CAAC,KACkC,CAAC;CAGzF,MAAM,aAAoB,YAAY,cAAc,CAAC,KAAK,MAAM,EAAE,KAAK,CAAC;CAGxE,MAAM,gBAAgB,MAAM,KAAK,CAAC,UAAU;AAC5C,KAAI,CAAC,WAAW,MAAM,QAAQ,IAAI,UAAU,KAAK,cAAc,CAC7D,YAAW,KAAK,MAAM,KAAK,CAAC;AAO9B,YAAW,MAAM,GAAG,MAAM,gBAAgB,EAAE,QAAQ,EAAE,EAAE,QAAQ,CAAC,CAAC;CAGlE,MAAM,UAAiB,EAAE;AACzB,MAAK,MAAM,OAAO,WAChB,KAAI,QAAQ,WAAW,KAAK,QAAQ,QAAQ,SAAS,GAAG,UAAU,KAAK,IAAI,UAAU,CACnF,SAAQ,KAAK,IAAI;CAKrB,MAAM,kCAAkB,IAAI,KAA8B;AAC1D,MAAK,IAAI,IAAI,GAAG,IAAI,QAAQ,QAAQ,KAAK;EACvC,MAAM,aAAa,kBAAkB,IAAI,EAAE;AAC3C,kBAAgB,IAAI,QAAQ,GAAG,UAAU,EAAE,WAAW;;CAIxD,MAAM,qCAAqB,IAAI,KAA+B;AAC9D,MAAK,MAAM,CAAC,QAAQ,QAAQ,YAAY,gBAAgB;AACtD,MAAI,WAAW,cACb;EAEF,MAAM,aAAa,gBAAgB,IAAI,OAAO;AAC9C,MAAI,eAAe,KAAA,EACjB,OAAM,IAAI,MAAM,2BAA2B,SAAS;AAEtD,qBAAmB,IAAI,gBAAgB,WAAW,EAAE,IAAI;;CAI1D,MAAM,qBAAqB,wBAAwB,eAAe,aAAa,MAAM,KAAK,CAAC;AAE3F,KAAI,WAAW,IAAI,QAAQ,YAAY,KACrC,SAAQ,MAAM,YAAY,mBAAmB,KAAK,yCAAyC;CAI7F,MAAM,CAAC,YAAY,oBAAoB,MAAM,SAC3C,YAAY,eACZ,oBACA,mBACD;CAGD,MAAM,oBAAoB,iBAAiB;CAC3C,MAAM,oBAAoB,wBAAwB,kBAAkB;AAEpE,KAAI,WAAW,IAAI,QAAQ,YAAY,KACrC,SAAQ,MAAM,gDAAgD;CAIhE,MAAM,EAAE,gBAAgB,yBAAyB,qBAC/C,cACA,SACA,YACA,iBACD;CAGD,MAAM,eAAe,kBAAkB,SAAS,MAAM,KAAK,EAAE,YAAY,iBAAiB;CAE1F,MAAM,oBAAoB,MAAM,aAAa,CAAC,sBAAsB;AACpE,KAAI,sBAAsB,KAAA,EACxB,OAAM,IAAI,MAAM,yCAAyC;CAI3D,MAAM,iBAAiB,YAAY,aAAa,CAAC,KAAK;CACtD,MAAM,oBAAoB,SAAS,YAAY,eAAe;CAC9D,IAAI;AACJ,KAAI,sBAAsB,KAAA,EACxB,kBAAiB,kBAAkB,aAAa;UAG5C,MAAM,KAAK,CAAC,UAAU,KAAK,eAAe,UAAU,CACtD,kBAAiB,MAAM,aAAa;KAEpC,OAAM,IAAI,MAAM,eAAe,eAAe,UAAU,CAAC,wBAAwB;CAKrF,MAAM,mBAAmB,cAAc,kBAAkB;CAEzD,IAAI,SAAS,eAAe,WAAW,cAAc,IAAI,EAAE,MAAM,aAAa,CAAC,CAAC,WAC9E,aACD;AAED,KAAI,qBAAqB,KAAA,EACvB,UAAS,OAAO,qBAAqB,iBAAiB;AAGxD,KAAI,QAAQ,YAAY,MAAM;AAE5B,MAAI,WAAW,IAAI,QAAQ,YAAY,MAAM;GAE3C,MAAM,2BAA2B;AACjC,OAAI,OAAO,yBAAyB,aAAa,WAC/C,SAAQ,MAAM,yBAAyB,UAAU,CAAC;;EAGtD,MAAM,mBAAmB,OAAO,WAC9B,KAAA,GACA,mBACA,KAAA,EACD;AACD,UAAQ,IAAI,iBAAiB,UAAU,CAAC;AAExC,SAAO;GACL,cAAc,WAAW,kBAAkB;GAC3C;GACA;GACD;;AAUH,OAAM,iBACJ,QACA,cATuB,OAAO,WAC9B,KAAA,GACA,mBACA,eAOgB,EAChB,qBACA,QAAQ,WAAW,MACpB;CAGD,MAAM,qBAAqB,SAAS,MAAM,QAAQ;AAClD,KAAI,uBAAuB,KAAA,GAAW;EACpC,MAAM,gBAAgB,mBAAmB,eAAe;AACxD,gBAAc,aAAa;AAC3B,qBAAmB,iBAAiB,cAAc;AAClD,qBAAmB,sBAAsB;EAGzC,MAAM,yBAAyB;AAG/B,MAAI,OAAO,uBAAuB,oBAAoB,WACpD,wBAAuB,gBAAgB,kBAAkB;AAG3D,WAAS,KAAK,aAAa;;CAI7B,MAAM,kBAAkB,WAAW,kBAAkB;AAErD,KAAI,WAAW,IAAI,QAAQ,YAAY,MAAM;AAC3C,UAAQ,MAAM,+BAA+B,aAAa,UAAU,GAAG;EAEvE,MAAM,2BAA2B;AACjC,MAAI,OAAO,yBAAyB,aAAa,WAC/C,SAAQ,MAAM,yBAAyB,UAAU,CAAC;QAE/C;EAEL,MAAM,2BAA2B;AACjC,MAAI,OAAO,yBAAyB,aAAa,WAC/C,SAAQ,IAAI,yBAAyB,UAAU,CAAC;;AAIpD,QAAO;EACL,cAAc;EACd;EACA;EACD"}
+{"version":3,"file":"finalize-T83Ko8nG.mjs","names":["EnvelopeFunction","JSONWrapper"],"sources":["../src/cmd/dkg/participant/finalize.ts"],"sourcesContent":["/**\n * Copyright © 2023-2026 Blockchain Commons, LLC\n * Copyright © 2025-2026 Parity Technologies\n *\n *\n * DKG participant finalize command.\n *\n * Port of cmd/dkg/participant/finalize.rs from frost-hubert-rust.\n *\n * @module\n */\n\nimport * as fs from \"node:fs\";\nimport * as path from \"node:path\";\n\nimport { ARID, JSON as JSONWrapper, XID } from \"@bcts/components\";\nimport { compareXidBytes } from \"../../../dkg/proposed-participant.js\";\nimport { CborDate } from \"@bcts/dcbor\";\nimport { Envelope, Function as EnvelopeFunction } from \"@bcts/envelope\";\nimport { SealedRequest, SealedResponse } from \"@bcts/gstp\";\nimport type { XIDDocument } from \"@bcts/xid\";\n\nimport { type GroupRecord, Registry, resolveRegistryPath } from \"../../../registry/index.js\";\nimport { getWithIndicator, putWithIndicator } from \"../../busy.js\";\nimport { groupStateDir, isVerbose } from \"../../common.js\";\nimport { createStorageClient, type StorageClient, type StorageSelection } from \"../../storage.js\";\nimport { parseAridUr, signingKeyFromVerifying } from \"../common.js\";\nimport {\n  dkgPart3,\n  identifierFromU16,\n  identifierToHex,\n  hexToBytes,\n  bytesToHex,\n  serializeKeyPackage,\n  serializePublicKeyPackage,\n  type DkgRound1Package,\n  type DkgRound2Package,\n  type DkgRound2SecretPackage,\n  type FrostIdentifier,\n  type FrostKeyPackage,\n  type FrostPublicKeyPackage,\n} from \"../../../frost/index.js\";\nimport { Ed25519Sha512, serde } from \"@frosts/ed25519\";\nimport { round2, CoefficientCommitment, VerifiableSecretSharingCommitment } from \"@frosts/core\";\n\n/**\n * Options for the DKG finalize command.\n */\nexport interface DkgFinalizeOptions {\n  registryPath?: string;\n  groupId: string;\n  timeoutSeconds?: number;\n  preview?: boolean;\n  storageSelection?: StorageSelection;\n  verbose?: boolean;\n}\n\n/**\n * Result of the DKG finalize command.\n */\nexport interface DkgFinalizeResult {\n  verifyingKey: string;\n  keyPackagePath: string;\n  publicKeyPackagePath: string;\n}\n\n/**\n * Persisted round 2 state loaded from disk.\n */\ninterface Round2State {\n  secretPackage: DkgRound2SecretPackage;\n  round1Packages: Map<string, DkgRound1Package>;\n}\n\n/**\n * Load persisted round 2 state from disk.\n *\n * Port of round2_secret loading from cmd/dkg/participant/finalize.rs lines 82-106.\n */\nfunction loadRound2State(registryPath: string, groupId: ARID): Round2State {\n  const stateDir = groupStateDir(registryPath, groupId.hex());\n\n  // Load Round 2 secret\n  const round2SecretPath = path.join(stateDir, \"round2_secret.json\");\n  if (!fs.existsSync(round2SecretPath)) {\n    throw new Error(`Round 2 secret not found at ${round2SecretPath}. Did you run round2?`);\n  }\n\n  // Mirrors Rust `frost::keys::dkg::round2::SecretPackage` JSON\n  // (`frost-rust/frost-core/src/keys/dkg.rs:269-287`):\n  //\n  //   {\n  //     \"identifier\": \"<lowercase hex scalar>\",\n  //     \"commitment\": [\"<hex>\", \"<hex>\", ...],\n  //     \"secret_share\": \"<hex>\",\n  //     \"min_signers\": <u16>,\n  //     \"max_signers\": <u16>\n  //   }\n  //\n  // The struct is `#[serde(deny_unknown_fields)]` and the\n  // `commitment` is a `VerifiableSecretSharingCommitment` (a\n  // single-field tuple struct over `Vec<CoefficientCommitment>`),\n  // which serde flattens to a bare JSON array. The earlier port\n  // emitted camelCase keys plus a nested `commitment.coefficients`\n  // shape and a numeric `identifier`, which Rust would reject and\n  // which had no chance of being read by Rust's standard derive.\n  const secretJson = JSON.parse(fs.readFileSync(round2SecretPath, \"utf-8\")) as {\n    identifier: string;\n    commitment: string[];\n    secret_share: string;\n    min_signers: number;\n    max_signers: number;\n  };\n\n  // Identifier hex → little-endian u16 (the FROST 1-indexed\n  // participant position). The scalar bytes are 32-LE for Ed25519, so\n  // the first two bytes hold the u16 value when the identifier is in\n  // the small-integer range (1..=N) used by the DKG.\n  const idBytes = hexToBytes(secretJson.identifier);\n  let identifierU16 = 1;\n  if (idBytes.length >= 2) {\n    identifierU16 = idBytes[0] | (idBytes[1] << 8);\n  }\n  if (identifierU16 === 0) {\n    identifierU16 = 1;\n  }\n  const identifier = identifierFromU16(identifierU16);\n\n  const coefficientCommitments = secretJson.commitment.map((hex) =>\n    CoefficientCommitment.deserialize(Ed25519Sha512, hexToBytes(hex)),\n  );\n\n  const commitment = new VerifiableSecretSharingCommitment(Ed25519Sha512, coefficientCommitments);\n\n  const secretShareScalar = Ed25519Sha512.deserializeScalar(hexToBytes(secretJson.secret_share));\n\n  const secretPackage: DkgRound2SecretPackage = new round2.SecretPackage(\n    Ed25519Sha512,\n    identifier,\n    commitment,\n    secretShareScalar,\n    secretJson.min_signers,\n    secretJson.max_signers,\n  );\n\n  // Load collected Round 1 packages (from round2 phase)\n  const round1Path = path.join(stateDir, \"collected_round1.json\");\n  if (!fs.existsSync(round1Path)) {\n    throw new Error(`Round 1 packages not found at ${round1Path}. Did you receive earlier phases?`);\n  }\n\n  const round1Json = JSON.parse(fs.readFileSync(round1Path, \"utf-8\")) as Record<string, unknown>;\n\n  // Convert to Map<string, DkgRound1Package> - keyed by XID UR string\n  const round1Packages = new Map<string, DkgRound1Package>();\n  for (const [xidStr, value] of Object.entries(round1Json)) {\n    const packageJson = value as {\n      header: { version: number; ciphersuite: string };\n      commitment: string[];\n      proof_of_knowledge: string;\n    };\n    const pkg = serde.round1PackageFromJson(packageJson);\n    round1Packages.set(xidStr, pkg);\n  }\n\n  return { secretPackage, round1Packages };\n}\n\n/**\n * Validate the finalize request from the coordinator.\n *\n * Port of request validation from cmd/dkg/participant/finalize.rs lines 139-161.\n */\nfunction validateFinalizeRequest(\n  sealedRequest: SealedRequest,\n  groupId: ARID,\n  expectedCoordinator: XID,\n): ARID {\n  // Validate the request function\n  if (!sealedRequest.function().equals(EnvelopeFunction.fromString(\"dkgFinalize\"))) {\n    throw new Error(`Unexpected request function: ${sealedRequest.function().toString()}`);\n  }\n\n  // Validate the sender is the expected coordinator\n  if (sealedRequest.sender().xid().urString() !== expectedCoordinator.urString()) {\n    throw new Error(\n      `Unexpected request sender: ${sealedRequest.sender().xid().urString()} ` +\n        `(expected coordinator ${expectedCoordinator.urString()})`,\n    );\n  }\n\n  // Validate the group ID matches\n  const requestGroupIdEnvelope = sealedRequest.objectForParameter(\"group\");\n  if (requestGroupIdEnvelope === undefined) {\n    throw new Error(\"Request missing group parameter\");\n  }\n  const requestGroupId = requestGroupIdEnvelope.extractSubject((cbor) => ARID.fromTaggedCbor(cbor));\n  if (requestGroupId.urString() !== groupId.urString()) {\n    throw new Error(\n      `Request group ID ${requestGroupId.urString()} does not match expected ${groupId.urString()}`,\n    );\n  }\n\n  // Extract where we should post our response\n  const responseAridEnvelope = sealedRequest.objectForParameter(\"responseArid\");\n  if (responseAridEnvelope === undefined) {\n    throw new Error(\"Request missing responseArid parameter\");\n  }\n  const responseArid = responseAridEnvelope.extractSubject((cbor) => ARID.fromTaggedCbor(cbor));\n\n  return responseArid;\n}\n\n/**\n * Extract round 2 packages from the finalize request.\n *\n * Port of round2 package extraction from cmd/dkg/participant/finalize.rs lines 209-229.\n */\nfunction extractFinalizePackages(\n  request: SealedRequest,\n  groupRecord: GroupRecord,\n  ownerXid: XID,\n): Map<string, DkgRound2Package> {\n  // Build XID -> Identifier mapping based on sorted participant order\n  const sortedXids: XID[] = groupRecord.participants().map((p) => p.xid());\n\n  // Add owner if not already in list\n  const ownerUrString = ownerXid.urString();\n  if (!sortedXids.some((xid) => xid.urString() === ownerUrString)) {\n    sortedXids.push(ownerXid);\n  }\n\n  // Sort by XID byte order — mirrors Rust `XID::cmp` (raw 32-byte\n  // lex compare). The earlier port used `urString().localeCompare(...)`,\n  // which differs from byte order for any byte ≥ 0x80 and is locale-\n  // aware, producing different FROST identifier assignments than Rust.\n  sortedXids.sort((a, b) => compareXidBytes(a.toData(), b.toData()));\n\n  // Deduplicate\n  const deduped: XID[] = [];\n  for (const xid of sortedXids) {\n    if (deduped.length === 0 || deduped[deduped.length - 1].urString() !== xid.urString()) {\n      deduped.push(xid);\n    }\n  }\n\n  // Build XID -> Identifier mapping (1-indexed)\n  const xidToIdentifier = new Map<string, FrostIdentifier>();\n  for (let i = 0; i < deduped.length; i++) {\n    const identifier = identifierFromU16(i + 1);\n    xidToIdentifier.set(deduped[i].urString(), identifier);\n  }\n\n  const myXidStr = ownerXid.urString();\n\n  // Extract all round2Package parameters\n  const packages = new Map<string, DkgRound2Package>();\n\n  const packageEnvelopes = request.objectsForParameter(\"round2Package\");\n  for (const packageEnvelope of packageEnvelopes) {\n    // Extract sender XID from the envelope\n    const senderEnvelope = packageEnvelope.objectForPredicate(\"sender\");\n    if (senderEnvelope === undefined) {\n      throw new Error(\"round2Package missing sender predicate\");\n    }\n    const senderXid = senderEnvelope.extractSubject((cbor) => XID.fromTaggedCbor(cbor));\n\n    // Skip our own package\n    if (senderXid.urString() === myXidStr) {\n      continue;\n    }\n\n    // Get the identifier for this sender\n    const identifier = xidToIdentifier.get(senderXid.urString());\n    if (identifier === undefined) {\n      throw new Error(`Unknown sender XID in round2Package: ${senderXid.urString()}`);\n    }\n\n    // Extract the package bytes (stored as JSON tag)\n    const packageJson = packageEnvelope.extractSubject((cbor) => JSONWrapper.fromTaggedCbor(cbor));\n    const packageData = JSON.parse(new TextDecoder().decode(packageJson.toData())) as {\n      header: { version: number; ciphersuite: string };\n      signing_share: string;\n    };\n\n    const pkg = serde.round2PackageFromJson(packageData);\n    packages.set(identifierToHex(identifier), pkg);\n  }\n\n  return packages;\n}\n\n/**\n * Build the response body for the finalize response.\n *\n * Port of `build_response_body()` from cmd/dkg/participant/finalize.rs lines 344-359.\n */\nfunction buildResponseBody(\n  groupId: ARID,\n  participantXid: XID,\n  keyPackage: FrostKeyPackage,\n  publicKeyPackage: FrostPublicKeyPackage,\n): Envelope {\n  // Serialize key packages to JSON\n  const keyPackageJson = serializeKeyPackage(keyPackage);\n  const publicKeyPackageJson = serializePublicKeyPackage(publicKeyPackage);\n\n  const keyJsonBytes = new TextEncoder().encode(JSON.stringify(keyPackageJson));\n  const keyJsonWrapper = JSONWrapper.fromData(keyJsonBytes);\n\n  const pubJsonBytes = new TextEncoder().encode(JSON.stringify(publicKeyPackageJson));\n  const pubJsonWrapper = JSONWrapper.fromData(pubJsonBytes);\n\n  return Envelope.unit()\n    .addType(\"dkgFinalizeResponse\")\n    .addAssertion(\"group\", groupId)\n    .addAssertion(\"participant\", participantXid)\n    .addAssertion(\"key_package\", keyJsonWrapper)\n    .addAssertion(\"public_key_package\", pubJsonWrapper);\n}\n\n/**\n * Persist finalize state (key packages) to disk.\n *\n * Port of key package persistence from cmd/dkg/participant/finalize.rs lines 251-257.\n */\nfunction persistFinalizeState(\n  registryPath: string,\n  groupId: ARID,\n  keyPackage: FrostKeyPackage,\n  publicKeyPackage: FrostPublicKeyPackage,\n): { keyPackagePath: string; publicKeyPackagePath: string } {\n  const stateDir = groupStateDir(registryPath, groupId.hex());\n  fs.mkdirSync(stateDir, { recursive: true });\n\n  // Serialize and save key package\n  const serializedKeyPackage = serializeKeyPackage(keyPackage);\n  const keyPackagePath = path.join(stateDir, \"key_package.json\");\n  fs.writeFileSync(keyPackagePath, JSON.stringify(serializedKeyPackage, null, 2));\n\n  // Serialize and save public key package\n  const serializedPublicKeyPackage = serializePublicKeyPackage(publicKeyPackage);\n  const publicKeyPackagePath = path.join(stateDir, \"public_key_package.json\");\n  fs.writeFileSync(publicKeyPackagePath, JSON.stringify(serializedPublicKeyPackage, null, 2));\n\n  return { keyPackagePath, publicKeyPackagePath };\n}\n\n/**\n * Execute the DKG participant finalize command.\n *\n * Responds to the finalize request from the coordinator, runs FROST DKG part3\n * to generate the final key package, and posts the response back.\n *\n * Port of `CommandArgs::exec()` from cmd/dkg/participant/finalize.rs lines 52-341.\n */\nexport async function finalize(\n  _client: StorageClient | undefined,\n  options: DkgFinalizeOptions,\n  cwd: string,\n): Promise<DkgFinalizeResult> {\n  if (options.storageSelection === undefined) {\n    throw new Error(\"Hubert storage is required for finalize respond\");\n  }\n\n  const registryPath = resolveRegistryPath(options.registryPath, cwd);\n  const registry = Registry.load(registryPath);\n\n  const owner = registry.owner();\n  if (owner === undefined) {\n    throw new Error(\"Registry owner is required\");\n  }\n\n  const groupId = parseAridUr(options.groupId);\n  const groupRecord = registry.group(groupId);\n  if (groupRecord === undefined) {\n    throw new Error(\"Group not found in registry\");\n  }\n\n  // Get the ARID where we're listening for the finalize request\n  const listeningAtArid = groupRecord.listeningAtArid();\n  if (listeningAtArid === undefined) {\n    throw new Error(\"No listening ARID for this group. Did you receive finalize send?\");\n  }\n\n  // Load Round 2 state (secret and collected round1 packages)\n  const round2State = loadRound2State(registryPath, groupId);\n\n  if (isVerbose() || options.verbose === true) {\n    console.error(\"Fetching finalize request from Hubert...\");\n  }\n\n  const client = await createStorageClient(options.storageSelection);\n\n  // Fetch the finalize request from where we're listening\n  const requestEnvelope = await getWithIndicator(\n    client,\n    listeningAtArid,\n    \"Finalize request\",\n    options.timeoutSeconds,\n    options.verbose ?? false,\n  );\n\n  if (requestEnvelope === null || requestEnvelope === undefined) {\n    throw new Error(\"Finalize request not found in Hubert storage\");\n  }\n\n  // Decrypt and validate the request\n  const ownerPrivateKeys = owner.xidDocument().inceptionPrivateKeys();\n  if (ownerPrivateKeys === undefined) {\n    throw new Error(\"Owner XID document has no private keys\");\n  }\n\n  const now = CborDate.now().datetime();\n  const sealedRequest = SealedRequest.tryFromEnvelope(\n    requestEnvelope,\n    undefined,\n    now,\n    ownerPrivateKeys,\n  );\n\n  // Validate the request and extract response ARID\n  const expectedCoordinator = groupRecord.coordinator().xid();\n  const responseArid = validateFinalizeRequest(sealedRequest, groupId, expectedCoordinator);\n\n  // Build identifier mapping for round1 packages (XID UR -> Identifier hex)\n  const sortedXids: XID[] = groupRecord.participants().map((p) => p.xid());\n\n  // Add owner if not already in list\n  const ownerUrString = owner.xid().urString();\n  if (!sortedXids.some((xid) => xid.urString() === ownerUrString)) {\n    sortedXids.push(owner.xid());\n  }\n\n  // Sort by XID byte order — mirrors Rust `XID::cmp` (raw 32-byte\n  // lex compare). The earlier port used `urString().localeCompare(...)`,\n  // which differs from byte order for any byte ≥ 0x80 and is locale-\n  // aware, producing different FROST identifier assignments than Rust.\n  sortedXids.sort((a, b) => compareXidBytes(a.toData(), b.toData()));\n\n  // Deduplicate\n  const deduped: XID[] = [];\n  for (const xid of sortedXids) {\n    if (deduped.length === 0 || deduped[deduped.length - 1].urString() !== xid.urString()) {\n      deduped.push(xid);\n    }\n  }\n\n  // Build XID -> Identifier mapping (1-indexed)\n  const xidToIdentifier = new Map<string, FrostIdentifier>();\n  for (let i = 0; i < deduped.length; i++) {\n    const identifier = identifierFromU16(i + 1);\n    xidToIdentifier.set(deduped[i].urString(), identifier);\n  }\n\n  // Convert round1 packages from XID-keyed to identifier-keyed (exclude self)\n  const round1PackagesById = new Map<string, DkgRound1Package>();\n  for (const [xidStr, pkg] of round2State.round1Packages) {\n    if (xidStr === ownerUrString) {\n      continue;\n    }\n    const identifier = xidToIdentifier.get(xidStr);\n    if (identifier === undefined) {\n      throw new Error(`Unknown participant XID ${xidStr}`);\n    }\n    round1PackagesById.set(identifierToHex(identifier), pkg);\n  }\n\n  // Extract Round 2 packages from the request (exclude self)\n  const round2PackagesById = extractFinalizePackages(sealedRequest, groupRecord, owner.xid());\n\n  if (isVerbose() || options.verbose === true) {\n    console.error(`Received ${round2PackagesById.size} Round 2 packages. Running DKG part3...`);\n  }\n\n  // Run FROST DKG part3 (finalize)\n  const [keyPackage, publicKeyPackage] = await dkgPart3(\n    round2State.secretPackage,\n    round1PackagesById,\n    round2PackagesById,\n  );\n\n  // Get the group verifying key\n  const verifyingKeyBytes = publicKeyPackage.verifyingKey;\n  const groupVerifyingKey = signingKeyFromVerifying(verifyingKeyBytes);\n\n  if (isVerbose() || options.verbose === true) {\n    console.error(\"Generated key package and public key package.\");\n  }\n\n  // Persist key packages\n  const { keyPackagePath, publicKeyPackagePath } = persistFinalizeState(\n    registryPath,\n    groupId,\n    keyPackage,\n    publicKeyPackage,\n  );\n\n  // Build response body\n  const responseBody = buildResponseBody(groupId, owner.xid(), keyPackage, publicKeyPackage);\n\n  const signerPrivateKeys = owner.xidDocument().inceptionPrivateKeys();\n  if (signerPrivateKeys === undefined) {\n    throw new Error(\"Owner XID document has no signing keys\");\n  }\n\n  // Get coordinator's XID document for encryption\n  const coordinatorXid = groupRecord.coordinator().xid();\n  const coordinatorRecord = registry.participant(coordinatorXid);\n  let coordinatorDoc: XIDDocument;\n  if (coordinatorRecord !== undefined) {\n    coordinatorDoc = coordinatorRecord.xidDocument();\n  } else {\n    // Check if coordinator is the owner\n    if (owner.xid().urString() === coordinatorXid.urString()) {\n      coordinatorDoc = owner.xidDocument();\n    } else {\n      throw new Error(`Coordinator ${coordinatorXid.urString()} not found in registry`);\n    }\n  }\n\n  // Get peer continuation from the request\n  const peerContinuation = sealedRequest.peerContinuation();\n\n  let sealed = SealedResponse.newSuccess(sealedRequest.id(), owner.xidDocument()).withResult(\n    responseBody,\n  );\n\n  if (peerContinuation !== undefined) {\n    sealed = sealed.withPeerContinuation(peerContinuation);\n  }\n\n  if (options.preview === true) {\n    // Show the response envelope structure without encryption\n    if (isVerbose() || options.verbose === true) {\n      // Cast to access urString method\n      const verifyingKeyWithUrString = groupVerifyingKey as { urString?: () => string };\n      if (typeof verifyingKeyWithUrString.urString === \"function\") {\n        console.error(verifyingKeyWithUrString.urString());\n      }\n    }\n    const unsealedEnvelope = sealed.toEnvelope(\n      undefined, // No expiration for responses\n      signerPrivateKeys,\n      undefined,\n    );\n    console.log(unsealedEnvelope.urString());\n\n    return {\n      verifyingKey: bytesToHex(verifyingKeyBytes),\n      keyPackagePath,\n      publicKeyPackagePath,\n    };\n  }\n\n  const responseEnvelope = sealed.toEnvelope(\n    undefined, // No expiration for responses\n    signerPrivateKeys,\n    coordinatorDoc,\n  );\n\n  // Post the response\n  await putWithIndicator(\n    client,\n    responseArid,\n    responseEnvelope,\n    \"Finalize Response\",\n    options.verbose ?? false,\n  );\n\n  // Update registry: contributions and verifying key\n  const updatedGroupRecord = registry.group(groupId);\n  if (updatedGroupRecord !== undefined) {\n    const contributions = updatedGroupRecord.contributions();\n    contributions.keyPackage = keyPackagePath;\n    updatedGroupRecord.setContributions(contributions);\n    updatedGroupRecord.clearListeningAtArid();\n\n    // Set verifying key if the method exists\n    const recordWithVerifyingKey = updatedGroupRecord as {\n      setVerifyingKey?: (key: unknown) => void;\n    };\n    if (typeof recordWithVerifyingKey.setVerifyingKey === \"function\") {\n      recordWithVerifyingKey.setVerifyingKey(groupVerifyingKey);\n    }\n\n    registry.save(registryPath);\n  }\n\n  // Get verifying key for output\n  const verifyingKeyHex = bytesToHex(verifyingKeyBytes);\n\n  if (isVerbose() || options.verbose === true) {\n    console.error(`Posted finalize response to ${responseArid.urString()}`);\n    // Cast to access urString method\n    const verifyingKeyWithUrString = groupVerifyingKey as { urString?: () => string };\n    if (typeof verifyingKeyWithUrString.urString === \"function\") {\n      console.error(verifyingKeyWithUrString.urString());\n    }\n  } else {\n    // Cast to access urString method\n    const verifyingKeyWithUrString = groupVerifyingKey as { urString?: () => string };\n    if (typeof verifyingKeyWithUrString.urString === \"function\") {\n      console.log(verifyingKeyWithUrString.urString());\n    }\n  }\n\n  return {\n    verifyingKey: verifyingKeyHex,\n    keyPackagePath,\n    publicKeyPackagePath,\n  };\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AA+EA,SAAS,gBAAgB,cAAsB,SAA4B;CACzE,MAAM,WAAW,cAAc,cAAc,QAAQ,IAAI,CAAC;CAG1D,MAAM,mBAAmB,KAAK,KAAK,UAAU,oBAAoB;CACjE,IAAI,CAAC,GAAG,WAAW,gBAAgB,GACjC,MAAM,IAAI,MAAM,+BAA+B,iBAAiB,sBAAsB;CAqBxF,MAAM,aAAa,KAAK,MAAM,GAAG,aAAa,kBAAkB,OAAO,CAAC;CAYxE,MAAM,UAAU,WAAW,WAAW,UAAU;CAChD,IAAI,gBAAgB;CACpB,IAAI,QAAQ,UAAU,GACpB,gBAAgB,QAAQ,KAAM,QAAQ,MAAM;CAE9C,IAAI,kBAAkB,GACpB,gBAAgB;CAElB,MAAM,aAAa,kBAAkB,aAAa;CAMlD,MAAM,aAAa,IAAI,kCAAkC,eAJ1B,WAAW,WAAW,KAAK,QACxD,sBAAsB,YAAY,eAAe,WAAW,GAAG,CAAC,CAG2B,CAAC;CAE9F,MAAM,oBAAoB,cAAc,kBAAkB,WAAW,WAAW,YAAY,CAAC;CAE7F,MAAM,gBAAwC,IAAI,OAAO,cACvD,eACA,YACA,YACA,mBACA,WAAW,aACX,WAAW,WACb;CAGA,MAAM,aAAa,KAAK,KAAK,UAAU,uBAAuB;CAC9D,IAAI,CAAC,GAAG,WAAW,UAAU,GAC3B,MAAM,IAAI,MAAM,iCAAiC,WAAW,kCAAkC;CAGhG,MAAM,aAAa,KAAK,MAAM,GAAG,aAAa,YAAY,OAAO,CAAC;CAGlE,MAAM,iCAAiB,IAAI,IAA8B;CACzD,KAAK,MAAM,CAAC,QAAQ,UAAU,OAAO,QAAQ,UAAU,GAAG;EACxD,MAAM,cAAc;EAKpB,MAAM,MAAM,MAAM,sBAAsB,WAAW;EACnD,eAAe,IAAI,QAAQ,GAAG;CAChC;CAEA,OAAO;EAAE;EAAe;CAAe;AACzC;;;;;;AAOA,SAAS,wBACP,eACA,SACA,qBACM;CAEN,IAAI,CAAC,cAAc,SAAS,EAAE,OAAOA,SAAiB,WAAW,aAAa,CAAC,GAC7E,MAAM,IAAI,MAAM,gCAAgC,cAAc,SAAS,EAAE,SAAS,GAAG;CAIvF,IAAI,cAAc,OAAO,EAAE,IAAI,EAAE,SAAS,MAAM,oBAAoB,SAAS,GAC3E,MAAM,IAAI,MACR,8BAA8B,cAAc,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,yBAC3C,oBAAoB,SAAS,EAAE,EAC5D;CAIF,MAAM,yBAAyB,cAAc,mBAAmB,OAAO;CACvE,IAAI,2BAA2B,KAAA,GAC7B,MAAM,IAAI,MAAM,iCAAiC;CAEnD,MAAM,iBAAiB,uBAAuB,gBAAgB,SAAS,KAAK,eAAe,IAAI,CAAC;CAChG,IAAI,eAAe,SAAS,MAAM,QAAQ,SAAS,GACjD,MAAM,IAAI,MACR,oBAAoB,eAAe,SAAS,EAAE,2BAA2B,QAAQ,SAAS,GAC5F;CAIF,MAAM,uBAAuB,cAAc,mBAAmB,cAAc;CAC5E,IAAI,yBAAyB,KAAA,GAC3B,MAAM,IAAI,MAAM,wCAAwC;CAI1D,OAFqB,qBAAqB,gBAAgB,SAAS,KAAK,eAAe,IAAI,CAEzE;AACpB;;;;;;AAOA,SAAS,wBACP,SACA,aACA,UAC+B;CAE/B,MAAM,aAAoB,YAAY,aAAa,EAAE,KAAK,MAAM,EAAE,IAAI,CAAC;CAGvE,MAAM,gBAAgB,SAAS,SAAS;CACxC,IAAI,CAAC,WAAW,MAAM,QAAQ,IAAI,SAAS,MAAM,aAAa,GAC5D,WAAW,KAAK,QAAQ;CAO1B,WAAW,MAAM,GAAG,MAAM,gBAAgB,EAAE,OAAO,GAAG,EAAE,OAAO,CAAC,CAAC;CAGjE,MAAM,UAAiB,CAAC;CACxB,KAAK,MAAM,OAAO,YAChB,IAAI,QAAQ,WAAW,KAAK,QAAQ,QAAQ,SAAS,GAAG,SAAS,MAAM,IAAI,SAAS,GAClF,QAAQ,KAAK,GAAG;CAKpB,MAAM,kCAAkB,IAAI,IAA6B;CACzD,KAAK,IAAI,IAAI,GAAG,IAAI,QAAQ,QAAQ,KAAK;EACvC,MAAM,aAAa,kBAAkB,IAAI,CAAC;EAC1C,gBAAgB,IAAI,QAAQ,GAAG,SAAS,GAAG,UAAU;CACvD;CAEA,MAAM,WAAW,SAAS,SAAS;CAGnC,MAAM,2BAAW,IAAI,IAA8B;CAEnD,MAAM,mBAAmB,QAAQ,oBAAoB,eAAe;CACpE,KAAK,MAAM,mBAAmB,kBAAkB;EAE9C,MAAM,iBAAiB,gBAAgB,mBAAmB,QAAQ;EAClE,IAAI,mBAAmB,KAAA,GACrB,MAAM,IAAI,MAAM,wCAAwC;EAE1D,MAAM,YAAY,eAAe,gBAAgB,SAAS,IAAI,eAAe,IAAI,CAAC;EAGlF,IAAI,UAAU,SAAS,MAAM,UAC3B;EAIF,MAAM,aAAa,gBAAgB,IAAI,UAAU,SAAS,CAAC;EAC3D,IAAI,eAAe,KAAA,GACjB,MAAM,IAAI,MAAM,wCAAwC,UAAU,SAAS,GAAG;EAIhF,MAAM,cAAc,gBAAgB,gBAAgB,SAASC,OAAY,eAAe,IAAI,CAAC;EAC7F,MAAM,cAAc,KAAK,MAAM,IAAI,YAAY,EAAE,OAAO,YAAY,OAAO,CAAC,CAAC;EAK7E,MAAM,MAAM,MAAM,sBAAsB,WAAW;EACnD,SAAS,IAAI,gBAAgB,UAAU,GAAG,GAAG;CAC/C;CAEA,OAAO;AACT;;;;;;AAOA,SAAS,kBACP,SACA,gBACA,YACA,kBACU;CAEV,MAAM,iBAAiB,oBAAoB,UAAU;CACrD,MAAM,uBAAuB,0BAA0B,gBAAgB;CAEvE,MAAM,eAAe,IAAI,YAAY,EAAE,OAAO,KAAK,UAAU,cAAc,CAAC;CAC5E,MAAM,iBAAiBA,OAAY,SAAS,YAAY;CAExD,MAAM,eAAe,IAAI,YAAY,EAAE,OAAO,KAAK,UAAU,oBAAoB,CAAC;CAClF,MAAM,iBAAiBA,OAAY,SAAS,YAAY;CAExD,OAAO,SAAS,KAAK,EAClB,QAAQ,qBAAqB,EAC7B,aAAa,SAAS,OAAO,EAC7B,aAAa,eAAe,cAAc,EAC1C,aAAa,eAAe,cAAc,EAC1C,aAAa,sBAAsB,cAAc;AACtD;;;;;;AAOA,SAAS,qBACP,cACA,SACA,YACA,kBAC0D;CAC1D,MAAM,WAAW,cAAc,cAAc,QAAQ,IAAI,CAAC;CAC1D,GAAG,UAAU,UAAU,EAAE,WAAW,KAAK,CAAC;CAG1C,MAAM,uBAAuB,oBAAoB,UAAU;CAC3D,MAAM,iBAAiB,KAAK,KAAK,UAAU,kBAAkB;CAC7D,GAAG,cAAc,gBAAgB,KAAK,UAAU,sBAAsB,MAAM,CAAC,CAAC;CAG9E,MAAM,6BAA6B,0BAA0B,gBAAgB;CAC7E,MAAM,uBAAuB,KAAK,KAAK,UAAU,yBAAyB;CAC1E,GAAG,cAAc,sBAAsB,KAAK,UAAU,4BAA4B,MAAM,CAAC,CAAC;CAE1F,OAAO;EAAE;EAAgB;CAAqB;AAChD;;;;;;;;;AAUA,eAAsB,SACpB,SACA,SACA,KAC4B;CAC5B,IAAI,QAAQ,qBAAqB,KAAA,GAC/B,MAAM,IAAI,MAAM,iDAAiD;CAGnE,MAAM,eAAe,oBAAoB,QAAQ,cAAc,GAAG;CAClE,MAAM,WAAW,SAAS,KAAK,YAAY;CAE3C,MAAM,QAAQ,SAAS,MAAM;CAC7B,IAAI,UAAU,KAAA,GACZ,MAAM,IAAI,MAAM,4BAA4B;CAG9C,MAAM,UAAU,YAAY,QAAQ,OAAO;CAC3C,MAAM,cAAc,SAAS,MAAM,OAAO;CAC1C,IAAI,gBAAgB,KAAA,GAClB,MAAM,IAAI,MAAM,6BAA6B;CAI/C,MAAM,kBAAkB,YAAY,gBAAgB;CACpD,IAAI,oBAAoB,KAAA,GACtB,MAAM,IAAI,MAAM,kEAAkE;CAIpF,MAAM,cAAc,gBAAgB,cAAc,OAAO;CAEzD,IAAI,UAAU,KAAK,QAAQ,YAAY,MACrC,QAAQ,MAAM,0CAA0C;CAG1D,MAAM,SAAS,MAAM,oBAAoB,QAAQ,gBAAgB;CAGjE,MAAM,kBAAkB,MAAM,iBAC5B,QACA,iBACA,oBACA,QAAQ,gBACR,QAAQ,WAAW,KACrB;CAEA,IAAI,oBAAoB,QAAQ,oBAAoB,KAAA,GAClD,MAAM,IAAI,MAAM,8CAA8C;CAIhE,MAAM,mBAAmB,MAAM,YAAY,EAAE,qBAAqB;CAClE,IAAI,qBAAqB,KAAA,GACvB,MAAM,IAAI,MAAM,wCAAwC;CAG1D,MAAM,MAAM,SAAS,IAAI,EAAE,SAAS;CACpC,MAAM,gBAAgB,cAAc,gBAClC,iBACA,KAAA,GACA,KACA,gBACF;CAIA,MAAM,eAAe,wBAAwB,eAAe,SADhC,YAAY,YAAY,EAAE,IACiC,CAAC;CAGxF,MAAM,aAAoB,YAAY,aAAa,EAAE,KAAK,MAAM,EAAE,IAAI,CAAC;CAGvE,MAAM,gBAAgB,MAAM,IAAI,EAAE,SAAS;CAC3C,IAAI,CAAC,WAAW,MAAM,QAAQ,IAAI,SAAS,MAAM,aAAa,GAC5D,WAAW,KAAK,MAAM,IAAI,CAAC;CAO7B,WAAW,MAAM,GAAG,MAAM,gBAAgB,EAAE,OAAO,GAAG,EAAE,OAAO,CAAC,CAAC;CAGjE,MAAM,UAAiB,CAAC;CACxB,KAAK,MAAM,OAAO,YAChB,IAAI,QAAQ,WAAW,KAAK,QAAQ,QAAQ,SAAS,GAAG,SAAS,MAAM,IAAI,SAAS,GAClF,QAAQ,KAAK,GAAG;CAKpB,MAAM,kCAAkB,IAAI,IAA6B;CACzD,KAAK,IAAI,IAAI,GAAG,IAAI,QAAQ,QAAQ,KAAK;EACvC,MAAM,aAAa,kBAAkB,IAAI,CAAC;EAC1C,gBAAgB,IAAI,QAAQ,GAAG,SAAS,GAAG,UAAU;CACvD;CAGA,MAAM,qCAAqB,IAAI,IAA8B;CAC7D,KAAK,MAAM,CAAC,QAAQ,QAAQ,YAAY,gBAAgB;EACtD,IAAI,WAAW,eACb;EAEF,MAAM,aAAa,gBAAgB,IAAI,MAAM;EAC7C,IAAI,eAAe,KAAA,GACjB,MAAM,IAAI,MAAM,2BAA2B,QAAQ;EAErD,mBAAmB,IAAI,gBAAgB,UAAU,GAAG,GAAG;CACzD;CAGA,MAAM,qBAAqB,wBAAwB,eAAe,aAAa,MAAM,IAAI,CAAC;CAE1F,IAAI,UAAU,KAAK,QAAQ,YAAY,MACrC,QAAQ,MAAM,YAAY,mBAAmB,KAAK,wCAAwC;CAI5F,MAAM,CAAC,YAAY,oBAAoB,MAAM,SAC3C,YAAY,eACZ,oBACA,kBACF;CAGA,MAAM,oBAAoB,iBAAiB;CAC3C,MAAM,oBAAoB,wBAAwB,iBAAiB;CAEnE,IAAI,UAAU,KAAK,QAAQ,YAAY,MACrC,QAAQ,MAAM,+CAA+C;CAI/D,MAAM,EAAE,gBAAgB,yBAAyB,qBAC/C,cACA,SACA,YACA,gBACF;CAGA,MAAM,eAAe,kBAAkB,SAAS,MAAM,IAAI,GAAG,YAAY,gBAAgB;CAEzF,MAAM,oBAAoB,MAAM,YAAY,EAAE,qBAAqB;CACnE,IAAI,sBAAsB,KAAA,GACxB,MAAM,IAAI,MAAM,wCAAwC;CAI1D,MAAM,iBAAiB,YAAY,YAAY,EAAE,IAAI;CACrD,MAAM,oBAAoB,SAAS,YAAY,cAAc;CAC7D,IAAI;CACJ,IAAI,sBAAsB,KAAA,GACxB,iBAAiB,kBAAkB,YAAY;MAG/C,IAAI,MAAM,IAAI,EAAE,SAAS,MAAM,eAAe,SAAS,GACrD,iBAAiB,MAAM,YAAY;MAEnC,MAAM,IAAI,MAAM,eAAe,eAAe,SAAS,EAAE,uBAAuB;CAKpF,MAAM,mBAAmB,cAAc,iBAAiB;CAExD,IAAI,SAAS,eAAe,WAAW,cAAc,GAAG,GAAG,MAAM,YAAY,CAAC,EAAE,WAC9E,YACF;CAEA,IAAI,qBAAqB,KAAA,GACvB,SAAS,OAAO,qBAAqB,gBAAgB;CAGvD,IAAI,QAAQ,YAAY,MAAM;EAE5B,IAAI,UAAU,KAAK,QAAQ,YAAY,MAAM;GAE3C,MAAM,2BAA2B;GACjC,IAAI,OAAO,yBAAyB,aAAa,YAC/C,QAAQ,MAAM,yBAAyB,SAAS,CAAC;EAErD;EACA,MAAM,mBAAmB,OAAO,WAC9B,KAAA,GACA,mBACA,KAAA,CACF;EACA,QAAQ,IAAI,iBAAiB,SAAS,CAAC;EAEvC,OAAO;GACL,cAAc,WAAW,iBAAiB;GAC1C;GACA;EACF;CACF;CASA,MAAM,iBACJ,QACA,cATuB,OAAO,WAC9B,KAAA,GACA,mBACA,cAOe,GACf,qBACA,QAAQ,WAAW,KACrB;CAGA,MAAM,qBAAqB,SAAS,MAAM,OAAO;CACjD,IAAI,uBAAuB,KAAA,GAAW;EACpC,MAAM,gBAAgB,mBAAmB,cAAc;EACvD,cAAc,aAAa;EAC3B,mBAAmB,iBAAiB,aAAa;EACjD,mBAAmB,qBAAqB;EAGxC,MAAM,yBAAyB;EAG/B,IAAI,OAAO,uBAAuB,oBAAoB,YACpD,uBAAuB,gBAAgB,iBAAiB;EAG1D,SAAS,KAAK,YAAY;CAC5B;CAGA,MAAM,kBAAkB,WAAW,iBAAiB;CAEpD,IAAI,UAAU,KAAK,QAAQ,YAAY,MAAM;EAC3C,QAAQ,MAAM,+BAA+B,aAAa,SAAS,GAAG;EAEtE,MAAM,2BAA2B;EACjC,IAAI,OAAO,yBAAyB,aAAa,YAC/C,QAAQ,MAAM,yBAAyB,SAAS,CAAC;CAErD,OAAO;EAEL,MAAM,2BAA2B;EACjC,IAAI,OAAO,yBAAyB,aAAa,YAC/C,QAAQ,IAAI,yBAAyB,SAAS,CAAC;CAEnD;CAEA,OAAO;EACL,cAAc;EACd;EACA;CACF;AACF"}

package/dist/frost/index.cjs

@@ -1,5 +1,5 @@
 Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
-const require_chunk = require("../chunk-CZWwpsFl.cjs");
+const require_chunk = require("../chunk-DakpK96I.cjs");
 let _frosts_ed25519 = require("@frosts/ed25519");
 let _frosts_core = require("@frosts/core");
 //#region src/frost/index.ts

package/dist/frost/index.cjs.map

@@ -1 +1 @@
-{"version":3,"file":"index.cjs","names":["Identifier","Ed25519Sha512","keys","SigningPackageImpl","serde"],"sources":["../../src/frost/index.ts"],"sourcesContent":["/**\n * Copyright © 2023-2026 Blockchain Commons, LLC\n * Copyright © 2025-2026 Parity Technologies\n *\n *\n * FROST cryptographic operations module.\n *\n * This module wraps the @frosts/ed25519 library to provide FROST\n * threshold signature operations for DKG and signing.\n *\n * @module\n */\n\nimport {\n  Ed25519Sha512,\n  Identifier,\n  keys,\n  serde,\n  commitRound1,\n  signRound2,\n  aggregate,\n  type Ed25519SigningNonces,\n  type Ed25519SigningCommitments,\n  type Ed25519SignatureShare,\n  type Ed25519Signature,\n  type KeyPackage,\n  type PublicKeyPackage,\n  type SigningShare,\n} from \"@frosts/ed25519\";\n\nimport { type SigningPackage, SigningPackageImpl, type RandomSource } from \"@frosts/core\";\n\n// Re-export types for convenience\nexport type {\n  Ed25519SigningNonces,\n  Ed25519SigningCommitments,\n  Ed25519SignatureShare,\n  Ed25519Signature,\n  KeyPackage,\n  PublicKeyPackage,\n  RandomSource,\n};\n\nexport { Ed25519Sha512, Identifier, keys };\n\n// Type aliases for frost-hubert\nexport type FrostIdentifier = Identifier<typeof Ed25519Sha512>;\nexport type FrostKeyPackage = KeyPackage<typeof Ed25519Sha512>;\nexport type FrostPublicKeyPackage = PublicKeyPackage<typeof Ed25519Sha512>;\nexport type FrostSigningPackage = SigningPackage<typeof Ed25519Sha512>;\nexport type FrostSigningShare = SigningShare<typeof Ed25519Sha512>;\n\n// DKG round types - use the namespaced types from keys.dkg\nexport type DkgRound1Package = keys.dkg.round1.Package;\nexport type DkgRound1SecretPackage = keys.dkg.round1.SecretPackage;\nexport type DkgRound2Package = keys.dkg.round2.Package;\nexport type DkgRound2SecretPackage = keys.dkg.round2.SecretPackage;\n\n/**\n * Cryptographically secure random number generator using Web Crypto API.\n */\nexport class SecureRng implements RandomSource {\n  fill(array: Uint8Array): void {\n    globalThis.crypto.getRandomValues(array as Uint8Array<ArrayBuffer>);\n  }\n}\n\n/**\n * Create a new secure random number generator.\n */\nexport function createRng(): RandomSource {\n  return new SecureRng();\n}\n\n/**\n * Create an identifier from a number (1-indexed participant ID).\n */\nexport function identifierFromU16(id: number): FrostIdentifier {\n  return Identifier.fromU16(Ed25519Sha512, id);\n}\n\n/**\n * Serialize an identifier to bytes.\n */\nexport function serializeIdentifier(id: FrostIdentifier): Uint8Array {\n  return id.serialize();\n}\n\n/**\n * Deserialize an identifier from bytes.\n */\nexport function deserializeIdentifier(bytes: Uint8Array): FrostIdentifier {\n  return Identifier.deserialize(Ed25519Sha512, bytes);\n}\n\n/**\n * Convert an identifier to a hex string for use as a map key.\n */\nexport function identifierToHex(id: FrostIdentifier): string {\n  return bytesToHex(id.serialize());\n}\n\n// =============================================================================\n// DKG Operations\n// =============================================================================\n\n/**\n * Execute DKG round 1 (part1) - Generate commitment and proof of knowledge.\n *\n * @param identifier - This participant's identifier\n * @param maxSigners - Total number of participants\n * @param minSigners - Threshold (minimum signers required)\n * @param rng - Random number generator\n * @returns Tuple of [SecretPackage, Package] where Package is broadcast to all\n */\nexport function dkgPart1(\n  identifier: FrostIdentifier,\n  maxSigners: number,\n  minSigners: number,\n  rng: RandomSource = createRng(),\n): [DkgRound1SecretPackage, DkgRound1Package] {\n  return keys.dkg.part1(Ed25519Sha512, identifier, maxSigners, minSigners, rng);\n}\n\n/**\n * Execute DKG round 2 (part2) - Process round 1 packages and generate shares.\n *\n * @param secretPackage - The secret package from part1\n * @param round1Packages - Map of identifier hex to round1 packages from other participants\n * @returns Tuple of [Round2SecretPackage, Map of round2 packages to send]\n */\nexport function dkgPart2(\n  secretPackage: DkgRound1SecretPackage,\n  round1Packages: Map<string, DkgRound1Package>,\n): [DkgRound2SecretPackage, Map<string, DkgRound2Package>] {\n  return keys.dkg.part2(Ed25519Sha512, secretPackage, round1Packages);\n}\n\n/**\n * Execute DKG round 3 (part3/finalize) - Compute final key package.\n *\n * @param round2SecretPackage - The secret package from part2\n * @param round1Packages - Map of identifier hex to round1 packages\n * @param round2Packages - Map of identifier hex to round2 packages received\n * @returns Promise of tuple [KeyPackage, PublicKeyPackage]\n */\nexport async function dkgPart3(\n  round2SecretPackage: DkgRound2SecretPackage,\n  round1Packages: Map<string, DkgRound1Package>,\n  round2Packages: Map<string, DkgRound2Package>,\n): Promise<[FrostKeyPackage, FrostPublicKeyPackage]> {\n  return keys.dkg.part3(Ed25519Sha512, round2SecretPackage, round1Packages, round2Packages);\n}\n\n// =============================================================================\n// Signing Operations\n// =============================================================================\n\n/**\n * Execute signing round 1 - Generate nonces and commitments.\n *\n * @param keyPackage - The participant's key package from DKG\n * @param rng - Random number generator\n * @returns Tuple of [SigningNonces, SigningCommitments]\n */\nexport function signingRound1(\n  keyPackage: FrostKeyPackage,\n  rng: RandomSource = createRng(),\n): [Ed25519SigningNonces, Ed25519SigningCommitments] {\n  return commitRound1(keyPackage.signingShare, rng);\n}\n\n/**\n * Create a signing package from commitments and message.\n *\n * @param commitments - Map of identifier to signing commitments\n * @param message - The message to sign\n * @returns SigningPackage for round 2\n */\nexport function createSigningPackage(\n  commitments: Map<FrostIdentifier, Ed25519SigningCommitments>,\n  message: Uint8Array,\n): FrostSigningPackage {\n  return new SigningPackageImpl(Ed25519Sha512, commitments, message);\n}\n\n/**\n * Execute signing round 2 - Generate signature share.\n *\n * @param signingPackage - The signing package with all commitments\n * @param nonces - This participant's nonces from round 1\n * @param keyPackage - This participant's key package\n * @returns Signature share\n */\nexport function signingRound2(\n  signingPackage: FrostSigningPackage,\n  nonces: Ed25519SigningNonces,\n  keyPackage: FrostKeyPackage,\n): Ed25519SignatureShare {\n  return signRound2(signingPackage, nonces, keyPackage);\n}\n\n/**\n * Aggregate signature shares into a final signature.\n *\n * @param signingPackage - The signing package used for round 2\n * @param signatureShares - Map of identifier to signature shares\n * @param publicKeyPackage - The group's public key package\n * @returns The aggregated signature\n */\nexport function aggregateSignatures(\n  signingPackage: FrostSigningPackage,\n  signatureShares: Map<FrostIdentifier, Ed25519SignatureShare>,\n  publicKeyPackage: FrostPublicKeyPackage,\n): Ed25519Signature {\n  return aggregate(signingPackage, signatureShares, publicKeyPackage);\n}\n\n// =============================================================================\n// Serialization Helpers - Using @frosts/ed25519 serde module\n// =============================================================================\n\n/**\n * Serialize a DKG round 1 package to JSON-compatible format.\n */\nexport function serializeDkgRound1Package(pkg: DkgRound1Package): SerializedDkgRound1Package {\n  const json = serde.round1PackageToJson(pkg);\n  return {\n    commitment: {\n      coefficients: json.commitment,\n    },\n    proofOfKnowledge: json.proof_of_knowledge,\n  };\n}\n\n/**\n * Deserialize a DKG round 1 package from JSON format.\n */\nexport function deserializeDkgRound1Package(data: SerializedDkgRound1Package): DkgRound1Package {\n  const json = {\n    header: serde.DEFAULT_HEADER,\n    commitment: data.commitment.coefficients,\n    proof_of_knowledge: data.proofOfKnowledge,\n  };\n  return serde.round1PackageFromJson(json);\n}\n\n/**\n * Serialize a DKG round 2 package to JSON-compatible format.\n */\nexport function serializeDkgRound2Package(pkg: DkgRound2Package): SerializedDkgRound2Package {\n  const json = serde.round2PackageToJson(pkg);\n  return {\n    signingShare: json.signing_share,\n  };\n}\n\n/**\n * Deserialize a DKG round 2 package from JSON format.\n */\nexport function deserializeDkgRound2Package(data: SerializedDkgRound2Package): DkgRound2Package {\n  const json = {\n    header: serde.DEFAULT_HEADER,\n    signing_share: data.signingShare,\n  };\n  return serde.round2PackageFromJson(json);\n}\n\n/**\n * Serialize a key package to JSON-compatible format.\n */\nexport function serializeKeyPackage(keyPackage: FrostKeyPackage): SerializedKeyPackage {\n  const json = serde.keyPackageToJson(keyPackage);\n  return {\n    identifier: json.identifier,\n    signingShare: json.signing_share,\n    verifyingShare: json.verifying_share,\n    verifyingKey: json.verifying_key,\n    minSigners: json.min_signers,\n  };\n}\n\n/**\n * Deserialize a key package from JSON format.\n */\nexport function deserializeKeyPackage(data: SerializedKeyPackage): FrostKeyPackage {\n  const json = {\n    header: serde.DEFAULT_HEADER,\n    identifier: data.identifier,\n    signing_share: data.signingShare,\n    verifying_share: data.verifyingShare,\n    verifying_key: data.verifyingKey,\n    min_signers: data.minSigners,\n  };\n  return serde.keyPackageFromJson(json);\n}\n\n/**\n * Serialize a public key package to JSON-compatible format.\n */\nexport function serializePublicKeyPackage(pkg: FrostPublicKeyPackage): SerializedPublicKeyPackage {\n  const json = serde.publicKeyPackageToJson(pkg);\n  return {\n    verifyingKey: json.verifying_key,\n    verifyingShares: json.verifying_shares,\n    // minSigners may be undefined in older packages\n    ...(json.min_signers !== undefined ? { minSigners: json.min_signers } : {}),\n  };\n}\n\n/**\n * Deserialize a public key package from JSON format.\n */\nexport function deserializePublicKeyPackage(\n  data: SerializedPublicKeyPackage,\n): FrostPublicKeyPackage {\n  const json = {\n    header: serde.DEFAULT_HEADER,\n    verifying_key: data.verifyingKey,\n    verifying_shares: data.verifyingShares,\n    min_signers: data.minSigners,\n  };\n  return serde.publicKeyPackageFromJson(json);\n}\n\n/**\n * Serialize signing nonces to JSON-compatible format.\n */\nexport function serializeSigningNonces(nonces: Ed25519SigningNonces): SerializedSigningNonces {\n  // Access the internal properties of the nonces\n  return {\n    hiding: bytesToHex(nonces.hiding.serialize()),\n    binding: bytesToHex(nonces.binding.serialize()),\n    commitments: {\n      hiding: bytesToHex(nonces.commitments.hiding.serialize()),\n      binding: bytesToHex(nonces.commitments.binding.serialize()),\n    },\n  };\n}\n\n/**\n * Serialize signing commitments to JSON-compatible format.\n */\nexport function serializeSigningCommitments(\n  commitments: Ed25519SigningCommitments,\n): SerializedSigningCommitments {\n  const json = serde.signingCommitmentsToJson(commitments);\n  return {\n    hiding: json.hiding,\n    binding: json.binding,\n  };\n}\n\n/**\n * Deserialize signing commitments from JSON format.\n */\nexport function deserializeSigningCommitments(\n  data: SerializedSigningCommitments,\n): Ed25519SigningCommitments {\n  const json = {\n    header: serde.DEFAULT_HEADER,\n    hiding: data.hiding,\n    binding: data.binding,\n  };\n  return serde.signingCommitmentsFromJson(json);\n}\n\n/**\n * Serialize a signature share to hex string.\n */\nexport function serializeSignatureShare(share: Ed25519SignatureShare): string {\n  const json = serde.signatureShareToJson(share);\n  return json.share;\n}\n\n/**\n * Deserialize a signature share from hex string.\n */\nexport function deserializeSignatureShare(hex: string): Ed25519SignatureShare {\n  const json = {\n    header: serde.DEFAULT_HEADER,\n    share: hex,\n  };\n  return serde.signatureShareFromJson(json);\n}\n\n/**\n * Serialize a signature to bytes.\n */\nexport function serializeSignature(sig: Ed25519Signature): Uint8Array {\n  return sig.serialize(Ed25519Sha512);\n}\n\n/**\n * Serialize a signature to hex string.\n */\nexport function serializeSignatureHex(sig: Ed25519Signature): string {\n  return bytesToHex(sig.serialize(Ed25519Sha512));\n}\n\n// =============================================================================\n// Serialized Type Definitions\n// =============================================================================\n\nexport interface SerializedDkgRound1Package {\n  commitment: {\n    coefficients: string[]; // hex-encoded coefficient commitments\n  };\n  proofOfKnowledge: string; // hex-encoded proof of knowledge\n}\n\nexport interface SerializedDkgRound2Package {\n  signingShare: string; // hex-encoded signing share\n}\n\nexport interface SerializedKeyPackage {\n  identifier: string;\n  signingShare: string;\n  verifyingShare: string;\n  verifyingKey: string;\n  minSigners: number;\n}\n\nexport interface SerializedPublicKeyPackage {\n  verifyingKey: string;\n  verifyingShares: Record<string, string>; // identifier hex -> verifying share hex\n  minSigners?: number;\n}\n\nexport interface SerializedSigningNonces {\n  hiding: string;\n  binding: string;\n  commitments: {\n    hiding: string;\n    binding: string;\n  };\n}\n\nexport interface SerializedSigningCommitments {\n  hiding: string;\n  binding: string;\n}\n\n// =============================================================================\n// Utility Functions - Re-export from serde\n// =============================================================================\n\n/**\n * Convert bytes to hex string.\n */\nexport function bytesToHex(bytes: Uint8Array): string {\n  return serde.bytesToHex(bytes);\n}\n\n/**\n * Convert hex string to bytes.\n */\nexport function hexToBytes(hex: string): Uint8Array {\n  return serde.hexToBytes(hex);\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AA6DA,IAAa,YAAb,MAA+C;CAC7C,KAAK,OAAyB;AAC5B,aAAW,OAAO,gBAAgB,MAAiC;;;;;;AAOvE,SAAgB,YAA0B;AACxC,QAAO,IAAI,WAAW;;;;;AAMxB,SAAgB,kBAAkB,IAA6B;AAC7D,QAAOA,gBAAAA,WAAW,QAAQC,gBAAAA,eAAe,GAAG;;;;;AAM9C,SAAgB,oBAAoB,IAAiC;AACnE,QAAO,GAAG,WAAW;;;;;AAMvB,SAAgB,sBAAsB,OAAoC;AACxE,QAAOD,gBAAAA,WAAW,YAAYC,gBAAAA,eAAe,MAAM;;;;;AAMrD,SAAgB,gBAAgB,IAA6B;AAC3D,QAAO,WAAW,GAAG,WAAW,CAAC;;;;;;;;;;;AAgBnC,SAAgB,SACd,YACA,YACA,YACA,MAAoB,WAAW,EACa;AAC5C,QAAOC,gBAAAA,KAAK,IAAI,MAAMD,gBAAAA,eAAe,YAAY,YAAY,YAAY,IAAI;;;;;;;;;AAU/E,SAAgB,SACd,eACA,gBACyD;AACzD,QAAOC,gBAAAA,KAAK,IAAI,MAAMD,gBAAAA,eAAe,eAAe,eAAe;;;;;;;;;;AAWrE,eAAsB,SACpB,qBACA,gBACA,gBACmD;AACnD,QAAOC,gBAAAA,KAAK,IAAI,MAAMD,gBAAAA,eAAe,qBAAqB,gBAAgB,eAAe;;;;;;;;;AAc3F,SAAgB,cACd,YACA,MAAoB,WAAW,EACoB;AACnD,SAAA,GAAA,gBAAA,cAAoB,WAAW,cAAc,IAAI;;;;;;;;;AAUnD,SAAgB,qBACd,aACA,SACqB;AACrB,QAAO,IAAIE,aAAAA,mBAAmBF,gBAAAA,eAAe,aAAa,QAAQ;;;;;;;;;;AAWpE,SAAgB,cACd,gBACA,QACA,YACuB;AACvB,SAAA,GAAA,gBAAA,YAAkB,gBAAgB,QAAQ,WAAW;;;;;;;;;;AAWvD,SAAgB,oBACd,gBACA,iBACA,kBACkB;AAClB,SAAA,GAAA,gBAAA,WAAiB,gBAAgB,iBAAiB,iBAAiB;;;;;AAUrE,SAAgB,0BAA0B,KAAmD;CAC3F,MAAM,OAAOG,gBAAAA,MAAM,oBAAoB,IAAI;AAC3C,QAAO;EACL,YAAY,EACV,cAAc,KAAK,YACpB;EACD,kBAAkB,KAAK;EACxB;;;;;AAMH,SAAgB,4BAA4B,MAAoD;CAC9F,MAAM,OAAO;EACX,QAAQA,gBAAAA,MAAM;EACd,YAAY,KAAK,WAAW;EAC5B,oBAAoB,KAAK;EAC1B;AACD,QAAOA,gBAAAA,MAAM,sBAAsB,KAAK;;;;;AAM1C,SAAgB,0BAA0B,KAAmD;AAE3F,QAAO,EACL,cAFWA,gBAAAA,MAAM,oBAAoB,IAEnB,CAAC,eACpB;;;;;AAMH,SAAgB,4BAA4B,MAAoD;CAC9F,MAAM,OAAO;EACX,QAAQA,gBAAAA,MAAM;EACd,eAAe,KAAK;EACrB;AACD,QAAOA,gBAAAA,MAAM,sBAAsB,KAAK;;;;;AAM1C,SAAgB,oBAAoB,YAAmD;CACrF,MAAM,OAAOA,gBAAAA,MAAM,iBAAiB,WAAW;AAC/C,QAAO;EACL,YAAY,KAAK;EACjB,cAAc,KAAK;EACnB,gBAAgB,KAAK;EACrB,cAAc,KAAK;EACnB,YAAY,KAAK;EAClB;;;;;AAMH,SAAgB,sBAAsB,MAA6C;CACjF,MAAM,OAAO;EACX,QAAQA,gBAAAA,MAAM;EACd,YAAY,KAAK;EACjB,eAAe,KAAK;EACpB,iBAAiB,KAAK;EACtB,eAAe,KAAK;EACpB,aAAa,KAAK;EACnB;AACD,QAAOA,gBAAAA,MAAM,mBAAmB,KAAK;;;;;AAMvC,SAAgB,0BAA0B,KAAwD;CAChG,MAAM,OAAOA,gBAAAA,MAAM,uBAAuB,IAAI;AAC9C,QAAO;EACL,cAAc,KAAK;EACnB,iBAAiB,KAAK;EAEtB,GAAI,KAAK,gBAAgB,KAAA,IAAY,EAAE,YAAY,KAAK,aAAa,GAAG,EAAE;EAC3E;;;;;AAMH,SAAgB,4BACd,MACuB;CACvB,MAAM,OAAO;EACX,QAAQA,gBAAAA,MAAM;EACd,eAAe,KAAK;EACpB,kBAAkB,KAAK;EACvB,aAAa,KAAK;EACnB;AACD,QAAOA,gBAAAA,MAAM,yBAAyB,KAAK;;;;;AAM7C,SAAgB,uBAAuB,QAAuD;AAE5F,QAAO;EACL,QAAQ,WAAW,OAAO,OAAO,WAAW,CAAC;EAC7C,SAAS,WAAW,OAAO,QAAQ,WAAW,CAAC;EAC/C,aAAa;GACX,QAAQ,WAAW,OAAO,YAAY,OAAO,WAAW,CAAC;GACzD,SAAS,WAAW,OAAO,YAAY,QAAQ,WAAW,CAAC;GAC5D;EACF;;;;;AAMH,SAAgB,4BACd,aAC8B;CAC9B,MAAM,OAAOA,gBAAAA,MAAM,yBAAyB,YAAY;AACxD,QAAO;EACL,QAAQ,KAAK;EACb,SAAS,KAAK;EACf;;;;;AAMH,SAAgB,8BACd,MAC2B;CAC3B,MAAM,OAAO;EACX,QAAQA,gBAAAA,MAAM;EACd,QAAQ,KAAK;EACb,SAAS,KAAK;EACf;AACD,QAAOA,gBAAAA,MAAM,2BAA2B,KAAK;;;;;AAM/C,SAAgB,wBAAwB,OAAsC;AAE5E,QADaA,gBAAAA,MAAM,qBAAqB,MAC7B,CAAC;;;;;AAMd,SAAgB,0BAA0B,KAAoC;CAC5E,MAAM,OAAO;EACX,QAAQA,gBAAAA,MAAM;EACd,OAAO;EACR;AACD,QAAOA,gBAAAA,MAAM,uBAAuB,KAAK;;;;;AAM3C,SAAgB,mBAAmB,KAAmC;AACpE,QAAO,IAAI,UAAUH,gBAAAA,cAAc;;;;;AAMrC,SAAgB,sBAAsB,KAA+B;AACnE,QAAO,WAAW,IAAI,UAAUA,gBAAAA,cAAc,CAAC;;;;;AAqDjD,SAAgB,WAAW,OAA2B;AACpD,QAAOG,gBAAAA,MAAM,WAAW,MAAM;;;;;AAMhC,SAAgB,WAAW,KAAyB;AAClD,QAAOA,gBAAAA,MAAM,WAAW,IAAI"}
+{"version":3,"file":"index.cjs","names":["Identifier","Ed25519Sha512","keys","SigningPackageImpl","serde"],"sources":["../../src/frost/index.ts"],"sourcesContent":["/**\n * Copyright © 2023-2026 Blockchain Commons, LLC\n * Copyright © 2025-2026 Parity Technologies\n *\n *\n * FROST cryptographic operations module.\n *\n * This module wraps the @frosts/ed25519 library to provide FROST\n * threshold signature operations for DKG and signing.\n *\n * @module\n */\n\nimport {\n  Ed25519Sha512,\n  Identifier,\n  keys,\n  serde,\n  commitRound1,\n  signRound2,\n  aggregate,\n  type Ed25519SigningNonces,\n  type Ed25519SigningCommitments,\n  type Ed25519SignatureShare,\n  type Ed25519Signature,\n  type KeyPackage,\n  type PublicKeyPackage,\n  type SigningShare,\n} from \"@frosts/ed25519\";\n\nimport { type SigningPackage, SigningPackageImpl, type RandomSource } from \"@frosts/core\";\n\n// Re-export types for convenience\nexport type {\n  Ed25519SigningNonces,\n  Ed25519SigningCommitments,\n  Ed25519SignatureShare,\n  Ed25519Signature,\n  KeyPackage,\n  PublicKeyPackage,\n  RandomSource,\n};\n\nexport { Ed25519Sha512, Identifier, keys };\n\n// Type aliases for frost-hubert\nexport type FrostIdentifier = Identifier<typeof Ed25519Sha512>;\nexport type FrostKeyPackage = KeyPackage<typeof Ed25519Sha512>;\nexport type FrostPublicKeyPackage = PublicKeyPackage<typeof Ed25519Sha512>;\nexport type FrostSigningPackage = SigningPackage<typeof Ed25519Sha512>;\nexport type FrostSigningShare = SigningShare<typeof Ed25519Sha512>;\n\n// DKG round types - use the namespaced types from keys.dkg\nexport type DkgRound1Package = keys.dkg.round1.Package;\nexport type DkgRound1SecretPackage = keys.dkg.round1.SecretPackage;\nexport type DkgRound2Package = keys.dkg.round2.Package;\nexport type DkgRound2SecretPackage = keys.dkg.round2.SecretPackage;\n\n/**\n * Cryptographically secure random number generator using Web Crypto API.\n */\nexport class SecureRng implements RandomSource {\n  fill(array: Uint8Array): void {\n    globalThis.crypto.getRandomValues(array as Uint8Array<ArrayBuffer>);\n  }\n}\n\n/**\n * Create a new secure random number generator.\n */\nexport function createRng(): RandomSource {\n  return new SecureRng();\n}\n\n/**\n * Create an identifier from a number (1-indexed participant ID).\n */\nexport function identifierFromU16(id: number): FrostIdentifier {\n  return Identifier.fromU16(Ed25519Sha512, id);\n}\n\n/**\n * Serialize an identifier to bytes.\n */\nexport function serializeIdentifier(id: FrostIdentifier): Uint8Array {\n  return id.serialize();\n}\n\n/**\n * Deserialize an identifier from bytes.\n */\nexport function deserializeIdentifier(bytes: Uint8Array): FrostIdentifier {\n  return Identifier.deserialize(Ed25519Sha512, bytes);\n}\n\n/**\n * Convert an identifier to a hex string for use as a map key.\n */\nexport function identifierToHex(id: FrostIdentifier): string {\n  return bytesToHex(id.serialize());\n}\n\n// =============================================================================\n// DKG Operations\n// =============================================================================\n\n/**\n * Execute DKG round 1 (part1) - Generate commitment and proof of knowledge.\n *\n * @param identifier - This participant's identifier\n * @param maxSigners - Total number of participants\n * @param minSigners - Threshold (minimum signers required)\n * @param rng - Random number generator\n * @returns Tuple of [SecretPackage, Package] where Package is broadcast to all\n */\nexport function dkgPart1(\n  identifier: FrostIdentifier,\n  maxSigners: number,\n  minSigners: number,\n  rng: RandomSource = createRng(),\n): [DkgRound1SecretPackage, DkgRound1Package] {\n  return keys.dkg.part1(Ed25519Sha512, identifier, maxSigners, minSigners, rng);\n}\n\n/**\n * Execute DKG round 2 (part2) - Process round 1 packages and generate shares.\n *\n * @param secretPackage - The secret package from part1\n * @param round1Packages - Map of identifier hex to round1 packages from other participants\n * @returns Tuple of [Round2SecretPackage, Map of round2 packages to send]\n */\nexport function dkgPart2(\n  secretPackage: DkgRound1SecretPackage,\n  round1Packages: Map<string, DkgRound1Package>,\n): [DkgRound2SecretPackage, Map<string, DkgRound2Package>] {\n  return keys.dkg.part2(Ed25519Sha512, secretPackage, round1Packages);\n}\n\n/**\n * Execute DKG round 3 (part3/finalize) - Compute final key package.\n *\n * @param round2SecretPackage - The secret package from part2\n * @param round1Packages - Map of identifier hex to round1 packages\n * @param round2Packages - Map of identifier hex to round2 packages received\n * @returns Promise of tuple [KeyPackage, PublicKeyPackage]\n */\nexport async function dkgPart3(\n  round2SecretPackage: DkgRound2SecretPackage,\n  round1Packages: Map<string, DkgRound1Package>,\n  round2Packages: Map<string, DkgRound2Package>,\n): Promise<[FrostKeyPackage, FrostPublicKeyPackage]> {\n  return keys.dkg.part3(Ed25519Sha512, round2SecretPackage, round1Packages, round2Packages);\n}\n\n// =============================================================================\n// Signing Operations\n// =============================================================================\n\n/**\n * Execute signing round 1 - Generate nonces and commitments.\n *\n * @param keyPackage - The participant's key package from DKG\n * @param rng - Random number generator\n * @returns Tuple of [SigningNonces, SigningCommitments]\n */\nexport function signingRound1(\n  keyPackage: FrostKeyPackage,\n  rng: RandomSource = createRng(),\n): [Ed25519SigningNonces, Ed25519SigningCommitments] {\n  return commitRound1(keyPackage.signingShare, rng);\n}\n\n/**\n * Create a signing package from commitments and message.\n *\n * @param commitments - Map of identifier to signing commitments\n * @param message - The message to sign\n * @returns SigningPackage for round 2\n */\nexport function createSigningPackage(\n  commitments: Map<FrostIdentifier, Ed25519SigningCommitments>,\n  message: Uint8Array,\n): FrostSigningPackage {\n  return new SigningPackageImpl(Ed25519Sha512, commitments, message);\n}\n\n/**\n * Execute signing round 2 - Generate signature share.\n *\n * @param signingPackage - The signing package with all commitments\n * @param nonces - This participant's nonces from round 1\n * @param keyPackage - This participant's key package\n * @returns Signature share\n */\nexport function signingRound2(\n  signingPackage: FrostSigningPackage,\n  nonces: Ed25519SigningNonces,\n  keyPackage: FrostKeyPackage,\n): Ed25519SignatureShare {\n  return signRound2(signingPackage, nonces, keyPackage);\n}\n\n/**\n * Aggregate signature shares into a final signature.\n *\n * @param signingPackage - The signing package used for round 2\n * @param signatureShares - Map of identifier to signature shares\n * @param publicKeyPackage - The group's public key package\n * @returns The aggregated signature\n */\nexport function aggregateSignatures(\n  signingPackage: FrostSigningPackage,\n  signatureShares: Map<FrostIdentifier, Ed25519SignatureShare>,\n  publicKeyPackage: FrostPublicKeyPackage,\n): Ed25519Signature {\n  return aggregate(signingPackage, signatureShares, publicKeyPackage);\n}\n\n// =============================================================================\n// Serialization Helpers - Using @frosts/ed25519 serde module\n// =============================================================================\n\n/**\n * Serialize a DKG round 1 package to JSON-compatible format.\n */\nexport function serializeDkgRound1Package(pkg: DkgRound1Package): SerializedDkgRound1Package {\n  const json = serde.round1PackageToJson(pkg);\n  return {\n    commitment: {\n      coefficients: json.commitment,\n    },\n    proofOfKnowledge: json.proof_of_knowledge,\n  };\n}\n\n/**\n * Deserialize a DKG round 1 package from JSON format.\n */\nexport function deserializeDkgRound1Package(data: SerializedDkgRound1Package): DkgRound1Package {\n  const json = {\n    header: serde.DEFAULT_HEADER,\n    commitment: data.commitment.coefficients,\n    proof_of_knowledge: data.proofOfKnowledge,\n  };\n  return serde.round1PackageFromJson(json);\n}\n\n/**\n * Serialize a DKG round 2 package to JSON-compatible format.\n */\nexport function serializeDkgRound2Package(pkg: DkgRound2Package): SerializedDkgRound2Package {\n  const json = serde.round2PackageToJson(pkg);\n  return {\n    signingShare: json.signing_share,\n  };\n}\n\n/**\n * Deserialize a DKG round 2 package from JSON format.\n */\nexport function deserializeDkgRound2Package(data: SerializedDkgRound2Package): DkgRound2Package {\n  const json = {\n    header: serde.DEFAULT_HEADER,\n    signing_share: data.signingShare,\n  };\n  return serde.round2PackageFromJson(json);\n}\n\n/**\n * Serialize a key package to JSON-compatible format.\n */\nexport function serializeKeyPackage(keyPackage: FrostKeyPackage): SerializedKeyPackage {\n  const json = serde.keyPackageToJson(keyPackage);\n  return {\n    identifier: json.identifier,\n    signingShare: json.signing_share,\n    verifyingShare: json.verifying_share,\n    verifyingKey: json.verifying_key,\n    minSigners: json.min_signers,\n  };\n}\n\n/**\n * Deserialize a key package from JSON format.\n */\nexport function deserializeKeyPackage(data: SerializedKeyPackage): FrostKeyPackage {\n  const json = {\n    header: serde.DEFAULT_HEADER,\n    identifier: data.identifier,\n    signing_share: data.signingShare,\n    verifying_share: data.verifyingShare,\n    verifying_key: data.verifyingKey,\n    min_signers: data.minSigners,\n  };\n  return serde.keyPackageFromJson(json);\n}\n\n/**\n * Serialize a public key package to JSON-compatible format.\n */\nexport function serializePublicKeyPackage(pkg: FrostPublicKeyPackage): SerializedPublicKeyPackage {\n  const json = serde.publicKeyPackageToJson(pkg);\n  return {\n    verifyingKey: json.verifying_key,\n    verifyingShares: json.verifying_shares,\n    // minSigners may be undefined in older packages\n    ...(json.min_signers !== undefined ? { minSigners: json.min_signers } : {}),\n  };\n}\n\n/**\n * Deserialize a public key package from JSON format.\n */\nexport function deserializePublicKeyPackage(\n  data: SerializedPublicKeyPackage,\n): FrostPublicKeyPackage {\n  const json = {\n    header: serde.DEFAULT_HEADER,\n    verifying_key: data.verifyingKey,\n    verifying_shares: data.verifyingShares,\n    min_signers: data.minSigners,\n  };\n  return serde.publicKeyPackageFromJson(json);\n}\n\n/**\n * Serialize signing nonces to JSON-compatible format.\n */\nexport function serializeSigningNonces(nonces: Ed25519SigningNonces): SerializedSigningNonces {\n  // Access the internal properties of the nonces\n  return {\n    hiding: bytesToHex(nonces.hiding.serialize()),\n    binding: bytesToHex(nonces.binding.serialize()),\n    commitments: {\n      hiding: bytesToHex(nonces.commitments.hiding.serialize()),\n      binding: bytesToHex(nonces.commitments.binding.serialize()),\n    },\n  };\n}\n\n/**\n * Serialize signing commitments to JSON-compatible format.\n */\nexport function serializeSigningCommitments(\n  commitments: Ed25519SigningCommitments,\n): SerializedSigningCommitments {\n  const json = serde.signingCommitmentsToJson(commitments);\n  return {\n    hiding: json.hiding,\n    binding: json.binding,\n  };\n}\n\n/**\n * Deserialize signing commitments from JSON format.\n */\nexport function deserializeSigningCommitments(\n  data: SerializedSigningCommitments,\n): Ed25519SigningCommitments {\n  const json = {\n    header: serde.DEFAULT_HEADER,\n    hiding: data.hiding,\n    binding: data.binding,\n  };\n  return serde.signingCommitmentsFromJson(json);\n}\n\n/**\n * Serialize a signature share to hex string.\n */\nexport function serializeSignatureShare(share: Ed25519SignatureShare): string {\n  const json = serde.signatureShareToJson(share);\n  return json.share;\n}\n\n/**\n * Deserialize a signature share from hex string.\n */\nexport function deserializeSignatureShare(hex: string): Ed25519SignatureShare {\n  const json = {\n    header: serde.DEFAULT_HEADER,\n    share: hex,\n  };\n  return serde.signatureShareFromJson(json);\n}\n\n/**\n * Serialize a signature to bytes.\n */\nexport function serializeSignature(sig: Ed25519Signature): Uint8Array {\n  return sig.serialize(Ed25519Sha512);\n}\n\n/**\n * Serialize a signature to hex string.\n */\nexport function serializeSignatureHex(sig: Ed25519Signature): string {\n  return bytesToHex(sig.serialize(Ed25519Sha512));\n}\n\n// =============================================================================\n// Serialized Type Definitions\n// =============================================================================\n\nexport interface SerializedDkgRound1Package {\n  commitment: {\n    coefficients: string[]; // hex-encoded coefficient commitments\n  };\n  proofOfKnowledge: string; // hex-encoded proof of knowledge\n}\n\nexport interface SerializedDkgRound2Package {\n  signingShare: string; // hex-encoded signing share\n}\n\nexport interface SerializedKeyPackage {\n  identifier: string;\n  signingShare: string;\n  verifyingShare: string;\n  verifyingKey: string;\n  minSigners: number;\n}\n\nexport interface SerializedPublicKeyPackage {\n  verifyingKey: string;\n  verifyingShares: Record<string, string>; // identifier hex -> verifying share hex\n  minSigners?: number;\n}\n\nexport interface SerializedSigningNonces {\n  hiding: string;\n  binding: string;\n  commitments: {\n    hiding: string;\n    binding: string;\n  };\n}\n\nexport interface SerializedSigningCommitments {\n  hiding: string;\n  binding: string;\n}\n\n// =============================================================================\n// Utility Functions - Re-export from serde\n// =============================================================================\n\n/**\n * Convert bytes to hex string.\n */\nexport function bytesToHex(bytes: Uint8Array): string {\n  return serde.bytesToHex(bytes);\n}\n\n/**\n * Convert hex string to bytes.\n */\nexport function hexToBytes(hex: string): Uint8Array {\n  return serde.hexToBytes(hex);\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AA6DA,IAAa,YAAb,MAA+C;CAC7C,KAAK,OAAyB;EAC5B,WAAW,OAAO,gBAAgB,KAAgC;CACpE;AACF;;;;AAKA,SAAgB,YAA0B;CACxC,OAAO,IAAI,UAAU;AACvB;;;;AAKA,SAAgB,kBAAkB,IAA6B;CAC7D,OAAOA,gBAAAA,WAAW,QAAQC,gBAAAA,eAAe,EAAE;AAC7C;;;;AAKA,SAAgB,oBAAoB,IAAiC;CACnE,OAAO,GAAG,UAAU;AACtB;;;;AAKA,SAAgB,sBAAsB,OAAoC;CACxE,OAAOD,gBAAAA,WAAW,YAAYC,gBAAAA,eAAe,KAAK;AACpD;;;;AAKA,SAAgB,gBAAgB,IAA6B;CAC3D,OAAO,WAAW,GAAG,UAAU,CAAC;AAClC;;;;;;;;;;AAeA,SAAgB,SACd,YACA,YACA,YACA,MAAoB,UAAU,GACc;CAC5C,OAAOC,gBAAAA,KAAK,IAAI,MAAMD,gBAAAA,eAAe,YAAY,YAAY,YAAY,GAAG;AAC9E;;;;;;;;AASA,SAAgB,SACd,eACA,gBACyD;CACzD,OAAOC,gBAAAA,KAAK,IAAI,MAAMD,gBAAAA,eAAe,eAAe,cAAc;AACpE;;;;;;;;;AAUA,eAAsB,SACpB,qBACA,gBACA,gBACmD;CACnD,OAAOC,gBAAAA,KAAK,IAAI,MAAMD,gBAAAA,eAAe,qBAAqB,gBAAgB,cAAc;AAC1F;;;;;;;;AAaA,SAAgB,cACd,YACA,MAAoB,UAAU,GACqB;CACnD,QAAA,GAAA,gBAAA,cAAoB,WAAW,cAAc,GAAG;AAClD;;;;;;;;AASA,SAAgB,qBACd,aACA,SACqB;CACrB,OAAO,IAAIE,aAAAA,mBAAmBF,gBAAAA,eAAe,aAAa,OAAO;AACnE;;;;;;;;;AAUA,SAAgB,cACd,gBACA,QACA,YACuB;CACvB,QAAA,GAAA,gBAAA,YAAkB,gBAAgB,QAAQ,UAAU;AACtD;;;;;;;;;AAUA,SAAgB,oBACd,gBACA,iBACA,kBACkB;CAClB,QAAA,GAAA,gBAAA,WAAiB,gBAAgB,iBAAiB,gBAAgB;AACpE;;;;AASA,SAAgB,0BAA0B,KAAmD;CAC3F,MAAM,OAAOG,gBAAAA,MAAM,oBAAoB,GAAG;CAC1C,OAAO;EACL,YAAY,EACV,cAAc,KAAK,WACrB;EACA,kBAAkB,KAAK;CACzB;AACF;;;;AAKA,SAAgB,4BAA4B,MAAoD;CAC9F,MAAM,OAAO;EACX,QAAQA,gBAAAA,MAAM;EACd,YAAY,KAAK,WAAW;EAC5B,oBAAoB,KAAK;CAC3B;CACA,OAAOA,gBAAAA,MAAM,sBAAsB,IAAI;AACzC;;;;AAKA,SAAgB,0BAA0B,KAAmD;CAE3F,OAAO,EACL,cAFWA,gBAAAA,MAAM,oBAAoB,GAEpB,EAAE,cACrB;AACF;;;;AAKA,SAAgB,4BAA4B,MAAoD;CAC9F,MAAM,OAAO;EACX,QAAQA,gBAAAA,MAAM;EACd,eAAe,KAAK;CACtB;CACA,OAAOA,gBAAAA,MAAM,sBAAsB,IAAI;AACzC;;;;AAKA,SAAgB,oBAAoB,YAAmD;CACrF,MAAM,OAAOA,gBAAAA,MAAM,iBAAiB,UAAU;CAC9C,OAAO;EACL,YAAY,KAAK;EACjB,cAAc,KAAK;EACnB,gBAAgB,KAAK;EACrB,cAAc,KAAK;EACnB,YAAY,KAAK;CACnB;AACF;;;;AAKA,SAAgB,sBAAsB,MAA6C;CACjF,MAAM,OAAO;EACX,QAAQA,gBAAAA,MAAM;EACd,YAAY,KAAK;EACjB,eAAe,KAAK;EACpB,iBAAiB,KAAK;EACtB,eAAe,KAAK;EACpB,aAAa,KAAK;CACpB;CACA,OAAOA,gBAAAA,MAAM,mBAAmB,IAAI;AACtC;;;;AAKA,SAAgB,0BAA0B,KAAwD;CAChG,MAAM,OAAOA,gBAAAA,MAAM,uBAAuB,GAAG;CAC7C,OAAO;EACL,cAAc,KAAK;EACnB,iBAAiB,KAAK;EAEtB,GAAI,KAAK,gBAAgB,KAAA,IAAY,EAAE,YAAY,KAAK,YAAY,IAAI,CAAC;CAC3E;AACF;;;;AAKA,SAAgB,4BACd,MACuB;CACvB,MAAM,OAAO;EACX,QAAQA,gBAAAA,MAAM;EACd,eAAe,KAAK;EACpB,kBAAkB,KAAK;EACvB,aAAa,KAAK;CACpB;CACA,OAAOA,gBAAAA,MAAM,yBAAyB,IAAI;AAC5C;;;;AAKA,SAAgB,uBAAuB,QAAuD;CAE5F,OAAO;EACL,QAAQ,WAAW,OAAO,OAAO,UAAU,CAAC;EAC5C,SAAS,WAAW,OAAO,QAAQ,UAAU,CAAC;EAC9C,aAAa;GACX,QAAQ,WAAW,OAAO,YAAY,OAAO,UAAU,CAAC;GACxD,SAAS,WAAW,OAAO,YAAY,QAAQ,UAAU,CAAC;EAC5D;CACF;AACF;;;;AAKA,SAAgB,4BACd,aAC8B;CAC9B,MAAM,OAAOA,gBAAAA,MAAM,yBAAyB,WAAW;CACvD,OAAO;EACL,QAAQ,KAAK;EACb,SAAS,KAAK;CAChB;AACF;;;;AAKA,SAAgB,8BACd,MAC2B;CAC3B,MAAM,OAAO;EACX,QAAQA,gBAAAA,MAAM;EACd,QAAQ,KAAK;EACb,SAAS,KAAK;CAChB;CACA,OAAOA,gBAAAA,MAAM,2BAA2B,IAAI;AAC9C;;;;AAKA,SAAgB,wBAAwB,OAAsC;CAE5E,OADaA,gBAAAA,MAAM,qBAAqB,KAC9B,EAAE;AACd;;;;AAKA,SAAgB,0BAA0B,KAAoC;CAC5E,MAAM,OAAO;EACX,QAAQA,gBAAAA,MAAM;EACd,OAAO;CACT;CACA,OAAOA,gBAAAA,MAAM,uBAAuB,IAAI;AAC1C;;;;AAKA,SAAgB,mBAAmB,KAAmC;CACpE,OAAO,IAAI,UAAUH,gBAAAA,aAAa;AACpC;;;;AAKA,SAAgB,sBAAsB,KAA+B;CACnE,OAAO,WAAW,IAAI,UAAUA,gBAAAA,aAAa,CAAC;AAChD;;;;AAoDA,SAAgB,WAAW,OAA2B;CACpD,OAAOG,gBAAAA,MAAM,WAAW,KAAK;AAC/B;;;;AAKA,SAAgB,WAAW,KAAyB;CAClD,OAAOA,gBAAAA,MAAM,WAAW,GAAG;AAC7B"}

package/dist/frost/index.d.cts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.cts","names":[],"sources":["../../src/frost/index.ts"],"mappings":";;;;;;;KA8CY,eAAA,GAAkB,UAAA,QAAkB,aAAA;AAAA,KACpC,eAAA,GAAkB,UAAA,QAAkB,aAAA;AAAA,KACpC,qBAAA,GAAwB,gBAAA,QAAwB,aAAA;AAAA,KAChD,mBAAA,GAAsB,cAAA,QAAsB,aAAA;AAAA,KAC5C,iBAAA,GAAoB,YAAA,QAAoB,aAAA;AAAA,KAGxC,gBAAA,GAAmB,IAAA,CAAK,GAAA,CAAI,MAAA,CAAO,OAAA;AAAA,KACnC,sBAAA,GAAyB,IAAA,CAAK,GAAA,CAAI,MAAA,CAAO,aAAA;AAAA,KACzC,gBAAA,GAAmB,IAAA,CAAK,GAAA,CAAI,MAAA,CAAO,OAAA;AAAA,KACnC,sBAAA,GAAyB,IAAA,CAAK,GAAA,CAAI,MAAA,CAAO,aAAA;;;;cAKxC,SAAA,YAAqB,YAAA;EAChC,IAAA,CAAK,KAAA,EAAO,UAAA;AAAA;;;;iBAQE,SAAA,CAAA,GAAa,YAAA;;;;iBAOb,iBAAA,CAAkB,EAAA,WAAa,eAAA;;;;iBAO/B,mBAAA,CAAoB,EAAA,EAAI,eAAA,GAAkB,UAAA;;;;iBAO1C,qBAAA,CAAsB,KAAA,EAAO,UAAA,GAAa,eAAA;;;;iBAO1C,eAAA,CAAgB,EAAA,EAAI,eAAA;;;;;;;;;;iBAiBpB,QAAA,CACd,UAAA,EAAY,eAAA,EACZ,UAAA,UACA,UAAA,UACA,GAAA,GAAK,YAAA,IACH,sBAAA,EAAwB,gBAAA;;AA1E5B;;;;;AACA;iBAoFgB,QAAA,CACd,aAAA,EAAe,sBAAA,EACf,cAAA,EAAgB,GAAA,SAAY,gBAAA,KAC1B,sBAAA,EAAwB,GAAA,SAAY,gBAAA;;;;AAtFxC;;;;;iBAkGsB,QAAA,CACpB,mBAAA,EAAqB,sBAAA,EACrB,cAAA,EAAgB,GAAA,SAAY,gBAAA,GAC5B,cAAA,EAAgB,GAAA,SAAY,gBAAA,IAC3B,OAAA,EAAS,eAAA,EAAiB,qBAAA;;;;;AApG7B;;;iBAmHgB,aAAA,CACd,UAAA,EAAY,eAAA,EACZ,GAAA,GAAK,YAAA,IACH,oBAAA,EAAsB,yBAAA;;AAnH1B;;;;;;iBA8HgB,oBAAA,CACd,WAAA,EAAa,GAAA,CAAI,eAAA,EAAiB,yBAAA,GAClC,OAAA,EAAS,UAAA,GACR,mBAAA;;;;AAhIH;;;;;iBA4IgB,aAAA,CACd,cAAA,EAAgB,mBAAA,EAChB,MAAA,EAAQ,oBAAA,EACR,UAAA,EAAY,eAAA,GACX,qBAAA;;;;;AA/IH;;;;iBA2JgB,mBAAA,CACd,cAAA,EAAgB,mBAAA,EAChB,eAAA,EAAiB,GAAA,CAAI,eAAA,EAAiB,qBAAA,GACtC,gBAAA,EAAkB,qBAAA,GACjB,gBAAA;;;;iBAWa,yBAAA,CAA0B,GAAA,EAAK,gBAAA,GAAmB,0BAAA;;AAzKlE;;iBAsLgB,2BAAA,CAA4B,IAAA,EAAM,0BAAA,GAA6B,gBAAA;;;;iBAY/D,yBAAA,CAA0B,GAAA,EAAK,gBAAA,GAAmB,0BAAA;;;;iBAUlD,2BAAA,CAA4B,IAAA,EAAM,0BAAA,GAA6B,gBAAA;;;;iBAW/D,mBAAA,CAAoB,UAAA,EAAY,eAAA,GAAkB,oBAAA;;;;iBAclD,qBAAA,CAAsB,IAAA,EAAM,oBAAA,GAAuB,eAAA;;AAvNnE;;iBAsOgB,yBAAA,CAA0B,GAAA,EAAK,qBAAA,GAAwB,0BAAA;;;AA/NvE;iBA4OgB,2BAAA,CACd,IAAA,EAAM,0BAAA,GACL,qBAAA;;;;iBAaa,sBAAA,CAAuB,MAAA,EAAQ,oBAAA,GAAuB,uBAAA;;;;iBAetD,2BAAA,CACd,WAAA,EAAa,yBAAA,GACZ,4BAAA;;;;iBAWa,6BAAA,CACd,IAAA,EAAM,4BAAA,GACL,yBAAA;AA3QH;;;AAAA,iBAuRgB,uBAAA,CAAwB,KAAA,EAAO,qBAAA;;;;iBAQ/B,yBAAA,CAA0B,GAAA,WAAc,qBAAA;;AAxRxD;;iBAmSgB,kBAAA,CAAmB,GAAA,EAAK,gBAAA,GAAmB,UAAA;;;AAlR3D;iBAyRgB,qBAAA,CAAsB,GAAA,EAAK,gBAAA;AAAA,UAQ1B,0BAAA;EACf,UAAA;IACE,YAAA;EAAA;EAEF,gBAAA;AAAA;AAAA,UAGe,0BAAA;EACf,YAAA;AAAA;AAAA,UAGe,oBAAA;EACf,UAAA;EACA,YAAA;EACA,cAAA;EACA,YAAA;EACA,UAAA;AAAA;AAAA,UAGe,0BAAA;EACf,YAAA;EACA,eAAA,EAAiB,MAAA;EACjB,UAAA;AAAA;AAAA,UAGe,uBAAA;EACf,MAAA;EACA,OAAA;EACA,WAAA;IACE,MAAA;IACA,OAAA;EAAA;AAAA;AAAA,UAIa,4BAAA;EACf,MAAA;EACA,OAAA;AAAA;;;;iBAUc,UAAA,CAAW,KAAA,EAAO,UAAA;;AAhTlC;;iBAuTgB,UAAA,CAAW,GAAA,WAAc,UAAA"}
+{"version":3,"file":"index.d.cts","names":[],"sources":["../../src/frost/index.ts"],"mappings":";;;;;;;KA8CY,eAAA,GAAkB,UAAU,QAAQ,aAAA;AAAA,KACpC,eAAA,GAAkB,UAAU,QAAQ,aAAA;AAAA,KACpC,qBAAA,GAAwB,gBAAgB,QAAQ,aAAA;AAAA,KAChD,mBAAA,GAAsB,cAAc,QAAQ,aAAA;AAAA,KAC5C,iBAAA,GAAoB,YAAY,QAAQ,aAAA;AAAA,KAGxC,gBAAA,GAAmB,IAAA,CAAK,GAAA,CAAI,MAAA,CAAO,OAAO;AAAA,KAC1C,sBAAA,GAAyB,IAAA,CAAK,GAAA,CAAI,MAAA,CAAO,aAAa;AAAA,KACtD,gBAAA,GAAmB,IAAA,CAAK,GAAA,CAAI,MAAA,CAAO,OAAO;AAAA,KAC1C,sBAAA,GAAyB,IAAA,CAAK,GAAA,CAAI,MAAA,CAAO,aAAa;;;;cAKrD,SAAA,YAAqB,YAAY;EAC5C,IAAA,CAAK,KAAA,EAAO,UAAA;AAAA;;;;iBAQE,SAAA,CAAA,GAAa,YAAY;;;;iBAOzB,iBAAA,CAAkB,EAAA,WAAa,eAAe;;;;iBAO9C,mBAAA,CAAoB,EAAA,EAAI,eAAA,GAAkB,UAAU;;;;iBAOpD,qBAAA,CAAsB,KAAA,EAAO,UAAA,GAAa,eAAe;;;;iBAOzD,eAAA,CAAgB,EAAmB,EAAf,eAAe;;;;;;;;;;iBAiBnC,QAAA,CACd,UAAA,EAAY,eAAA,EACZ,UAAA,UACA,UAAA,UACA,GAAA,GAAK,YAAA,IACH,sBAAA,EAAwB,gBAAA;;AA1E5B;;;;AAA6D;AAC7D;iBAoFgB,QAAA,CACd,aAAA,EAAe,sBAAA,EACf,cAAA,EAAgB,GAAA,SAAY,gBAAA,KAC1B,sBAAA,EAAwB,GAAA,SAAY,gBAAA;;;AAvFqB;AAC7D;;;;AAAyE;iBAkGnD,QAAA,CACpB,mBAAA,EAAqB,sBAAA,EACrB,cAAA,EAAgB,GAAA,SAAY,gBAAA,GAC5B,cAAA,EAAgB,GAAA,SAAY,gBAAA,IAC3B,OAAA,EAAS,eAAA,EAAiB,qBAAA;;;;AArGwC;AACrE;;;iBAmHgB,aAAA,CACd,UAAA,EAAY,eAAA,EACZ,GAAA,GAAK,YAAA,IACH,oBAAA,EAAsB,yBAAA;AAtHuC;AAGjE;;;;;;AAHiE,iBAiIjD,oBAAA,CACd,WAAA,EAAa,GAAA,CAAI,eAAA,EAAiB,yBAAA,GAClC,OAAA,EAAS,UAAA,GACR,mBAAA;;;AAjImD;AACtD;;;;;iBA4IgB,aAAA,CACd,cAAA,EAAgB,mBAAA,EAChB,MAAA,EAAQ,oBAAA,EACR,UAAA,EAAY,eAAA,GACX,qBAAA;;;;AAhJ+D;AAClE;;;;iBA2JgB,mBAAA,CACd,cAAA,EAAgB,mBAAA,EAChB,eAAA,EAAiB,GAAA,CAAI,eAAA,EAAiB,qBAAA,GACtC,gBAAA,EAAkB,qBAAA,GACjB,gBAAA;;;;iBAWa,yBAAA,CAA0B,GAAA,EAAK,gBAAA,GAAmB,0BAA0B;AA1KtC;AACtD;;AADsD,iBAuLtC,2BAAA,CAA4B,IAAA,EAAM,0BAAA,GAA6B,gBAAgB;;;;iBAY/E,yBAAA,CAA0B,GAAA,EAAK,gBAAA,GAAmB,0BAA0B;;;AAlM1B;iBA4MlD,2BAAA,CAA4B,IAAA,EAAM,0BAAA,GAA6B,gBAAgB;;;;iBAW/E,mBAAA,CAAoB,UAAA,EAAY,eAAA,GAAkB,oBAAoB;;;;iBActE,qBAAA,CAAsB,IAAA,EAAM,oBAAA,GAAuB,eAAe;AA/N1D;AAQxB;;AARwB,iBA8OR,yBAAA,CAA0B,GAAA,EAAK,qBAAA,GAAwB,0BAA0B;;AAtOxD;AAOzC;iBA4OgB,2BAAA,CACd,IAAA,EAAM,0BAAA,GACL,qBAAqB;;;AA9OsC;iBA2P9C,sBAAA,CAAuB,MAAA,EAAQ,oBAAA,GAAuB,uBAAuB;;;;iBAe7E,2BAAA,CACd,WAAA,EAAa,yBAAA,GACZ,4BAA4B;;;;iBAWf,6BAAA,CACd,IAAA,EAAM,4BAAA,GACL,yBAAyB;AA3Q5B;;;AAAA,iBAuRgB,uBAAA,CAAwB,KAA4B,EAArB,qBAAqB;;;;iBAQpD,yBAAA,CAA0B,GAAA,WAAc,qBAAqB;AA/RJ;AAOzE;;AAPyE,iBA0SzD,kBAAA,CAAmB,GAAA,EAAK,gBAAA,GAAmB,UAAU;;AAnSlB;AAiBnD;iBAyRgB,qBAAA,CAAsB,GAAqB,EAAhB,gBAAgB;AAAA,UAQ1C,0BAAA;EACf,UAAA;IACE,YAAA;EAAA;EAEF,gBAAA;AAAA;AAAA,UAGe,0BAAA;EACf,YAAY;AAAA;AAAA,UAGG,oBAAA;EACf,UAAA;EACA,YAAA;EACA,cAAA;EACA,YAAA;EACA,UAAA;AAAA;AAAA,UAGe,0BAAA;EACf,YAAA;EACA,eAAA,EAAiB,MAAM;EACvB,UAAA;AAAA;AAAA,UAGe,uBAAA;EACf,MAAA;EACA,OAAA;EACA,WAAA;IACE,MAAA;IACA,OAAA;EAAA;AAAA;AAAA,UAIa,4BAAA;EACf,MAAA;EACA,OAAO;AAAA;;;;iBAUO,UAAA,CAAW,KAAiB,EAAV,UAAU;AA5TY;AAYxD;;AAZwD,iBAmUxC,UAAA,CAAW,GAAA,WAAc,UAAU"}

package/dist/frost/index.d.mts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.mts","names":[],"sources":["../../src/frost/index.ts"],"mappings":";;;;;;;KA8CY,eAAA,GAAkB,UAAA,QAAkB,aAAA;AAAA,KACpC,eAAA,GAAkB,UAAA,QAAkB,aAAA;AAAA,KACpC,qBAAA,GAAwB,gBAAA,QAAwB,aAAA;AAAA,KAChD,mBAAA,GAAsB,cAAA,QAAsB,aAAA;AAAA,KAC5C,iBAAA,GAAoB,YAAA,QAAoB,aAAA;AAAA,KAGxC,gBAAA,GAAmB,IAAA,CAAK,GAAA,CAAI,MAAA,CAAO,OAAA;AAAA,KACnC,sBAAA,GAAyB,IAAA,CAAK,GAAA,CAAI,MAAA,CAAO,aAAA;AAAA,KACzC,gBAAA,GAAmB,IAAA,CAAK,GAAA,CAAI,MAAA,CAAO,OAAA;AAAA,KACnC,sBAAA,GAAyB,IAAA,CAAK,GAAA,CAAI,MAAA,CAAO,aAAA;;;;cAKxC,SAAA,YAAqB,YAAA;EAChC,IAAA,CAAK,KAAA,EAAO,UAAA;AAAA;;;;iBAQE,SAAA,CAAA,GAAa,YAAA;;;;iBAOb,iBAAA,CAAkB,EAAA,WAAa,eAAA;;;;iBAO/B,mBAAA,CAAoB,EAAA,EAAI,eAAA,GAAkB,UAAA;;;;iBAO1C,qBAAA,CAAsB,KAAA,EAAO,UAAA,GAAa,eAAA;;;;iBAO1C,eAAA,CAAgB,EAAA,EAAI,eAAA;;;;;;;;;;iBAiBpB,QAAA,CACd,UAAA,EAAY,eAAA,EACZ,UAAA,UACA,UAAA,UACA,GAAA,GAAK,YAAA,IACH,sBAAA,EAAwB,gBAAA;;AA1E5B;;;;;AACA;iBAoFgB,QAAA,CACd,aAAA,EAAe,sBAAA,EACf,cAAA,EAAgB,GAAA,SAAY,gBAAA,KAC1B,sBAAA,EAAwB,GAAA,SAAY,gBAAA;;;;AAtFxC;;;;;iBAkGsB,QAAA,CACpB,mBAAA,EAAqB,sBAAA,EACrB,cAAA,EAAgB,GAAA,SAAY,gBAAA,GAC5B,cAAA,EAAgB,GAAA,SAAY,gBAAA,IAC3B,OAAA,EAAS,eAAA,EAAiB,qBAAA;;;;;AApG7B;;;iBAmHgB,aAAA,CACd,UAAA,EAAY,eAAA,EACZ,GAAA,GAAK,YAAA,IACH,oBAAA,EAAsB,yBAAA;;AAnH1B;;;;;;iBA8HgB,oBAAA,CACd,WAAA,EAAa,GAAA,CAAI,eAAA,EAAiB,yBAAA,GAClC,OAAA,EAAS,UAAA,GACR,mBAAA;;;;AAhIH;;;;;iBA4IgB,aAAA,CACd,cAAA,EAAgB,mBAAA,EAChB,MAAA,EAAQ,oBAAA,EACR,UAAA,EAAY,eAAA,GACX,qBAAA;;;;;AA/IH;;;;iBA2JgB,mBAAA,CACd,cAAA,EAAgB,mBAAA,EAChB,eAAA,EAAiB,GAAA,CAAI,eAAA,EAAiB,qBAAA,GACtC,gBAAA,EAAkB,qBAAA,GACjB,gBAAA;;;;iBAWa,yBAAA,CAA0B,GAAA,EAAK,gBAAA,GAAmB,0BAAA;;AAzKlE;;iBAsLgB,2BAAA,CAA4B,IAAA,EAAM,0BAAA,GAA6B,gBAAA;;;;iBAY/D,yBAAA,CAA0B,GAAA,EAAK,gBAAA,GAAmB,0BAAA;;;;iBAUlD,2BAAA,CAA4B,IAAA,EAAM,0BAAA,GAA6B,gBAAA;;;;iBAW/D,mBAAA,CAAoB,UAAA,EAAY,eAAA,GAAkB,oBAAA;;;;iBAclD,qBAAA,CAAsB,IAAA,EAAM,oBAAA,GAAuB,eAAA;;AAvNnE;;iBAsOgB,yBAAA,CAA0B,GAAA,EAAK,qBAAA,GAAwB,0BAAA;;;AA/NvE;iBA4OgB,2BAAA,CACd,IAAA,EAAM,0BAAA,GACL,qBAAA;;;;iBAaa,sBAAA,CAAuB,MAAA,EAAQ,oBAAA,GAAuB,uBAAA;;;;iBAetD,2BAAA,CACd,WAAA,EAAa,yBAAA,GACZ,4BAAA;;;;iBAWa,6BAAA,CACd,IAAA,EAAM,4BAAA,GACL,yBAAA;AA3QH;;;AAAA,iBAuRgB,uBAAA,CAAwB,KAAA,EAAO,qBAAA;;;;iBAQ/B,yBAAA,CAA0B,GAAA,WAAc,qBAAA;;AAxRxD;;iBAmSgB,kBAAA,CAAmB,GAAA,EAAK,gBAAA,GAAmB,UAAA;;;AAlR3D;iBAyRgB,qBAAA,CAAsB,GAAA,EAAK,gBAAA;AAAA,UAQ1B,0BAAA;EACf,UAAA;IACE,YAAA;EAAA;EAEF,gBAAA;AAAA;AAAA,UAGe,0BAAA;EACf,YAAA;AAAA;AAAA,UAGe,oBAAA;EACf,UAAA;EACA,YAAA;EACA,cAAA;EACA,YAAA;EACA,UAAA;AAAA;AAAA,UAGe,0BAAA;EACf,YAAA;EACA,eAAA,EAAiB,MAAA;EACjB,UAAA;AAAA;AAAA,UAGe,uBAAA;EACf,MAAA;EACA,OAAA;EACA,WAAA;IACE,MAAA;IACA,OAAA;EAAA;AAAA;AAAA,UAIa,4BAAA;EACf,MAAA;EACA,OAAA;AAAA;;;;iBAUc,UAAA,CAAW,KAAA,EAAO,UAAA;;AAhTlC;;iBAuTgB,UAAA,CAAW,GAAA,WAAc,UAAA"}
+{"version":3,"file":"index.d.mts","names":[],"sources":["../../src/frost/index.ts"],"mappings":";;;;;;;KA8CY,eAAA,GAAkB,UAAU,QAAQ,aAAA;AAAA,KACpC,eAAA,GAAkB,UAAU,QAAQ,aAAA;AAAA,KACpC,qBAAA,GAAwB,gBAAgB,QAAQ,aAAA;AAAA,KAChD,mBAAA,GAAsB,cAAc,QAAQ,aAAA;AAAA,KAC5C,iBAAA,GAAoB,YAAY,QAAQ,aAAA;AAAA,KAGxC,gBAAA,GAAmB,IAAA,CAAK,GAAA,CAAI,MAAA,CAAO,OAAO;AAAA,KAC1C,sBAAA,GAAyB,IAAA,CAAK,GAAA,CAAI,MAAA,CAAO,aAAa;AAAA,KACtD,gBAAA,GAAmB,IAAA,CAAK,GAAA,CAAI,MAAA,CAAO,OAAO;AAAA,KAC1C,sBAAA,GAAyB,IAAA,CAAK,GAAA,CAAI,MAAA,CAAO,aAAa;;;;cAKrD,SAAA,YAAqB,YAAY;EAC5C,IAAA,CAAK,KAAA,EAAO,UAAA;AAAA;;;;iBAQE,SAAA,CAAA,GAAa,YAAY;;;;iBAOzB,iBAAA,CAAkB,EAAA,WAAa,eAAe;;;;iBAO9C,mBAAA,CAAoB,EAAA,EAAI,eAAA,GAAkB,UAAU;;;;iBAOpD,qBAAA,CAAsB,KAAA,EAAO,UAAA,GAAa,eAAe;;;;iBAOzD,eAAA,CAAgB,EAAmB,EAAf,eAAe;;;;;;;;;;iBAiBnC,QAAA,CACd,UAAA,EAAY,eAAA,EACZ,UAAA,UACA,UAAA,UACA,GAAA,GAAK,YAAA,IACH,sBAAA,EAAwB,gBAAA;;AA1E5B;;;;AAA6D;AAC7D;iBAoFgB,QAAA,CACd,aAAA,EAAe,sBAAA,EACf,cAAA,EAAgB,GAAA,SAAY,gBAAA,KAC1B,sBAAA,EAAwB,GAAA,SAAY,gBAAA;;;AAvFqB;AAC7D;;;;AAAyE;iBAkGnD,QAAA,CACpB,mBAAA,EAAqB,sBAAA,EACrB,cAAA,EAAgB,GAAA,SAAY,gBAAA,GAC5B,cAAA,EAAgB,GAAA,SAAY,gBAAA,IAC3B,OAAA,EAAS,eAAA,EAAiB,qBAAA;;;;AArGwC;AACrE;;;iBAmHgB,aAAA,CACd,UAAA,EAAY,eAAA,EACZ,GAAA,GAAK,YAAA,IACH,oBAAA,EAAsB,yBAAA;AAtHuC;AAGjE;;;;;;AAHiE,iBAiIjD,oBAAA,CACd,WAAA,EAAa,GAAA,CAAI,eAAA,EAAiB,yBAAA,GAClC,OAAA,EAAS,UAAA,GACR,mBAAA;;;AAjImD;AACtD;;;;;iBA4IgB,aAAA,CACd,cAAA,EAAgB,mBAAA,EAChB,MAAA,EAAQ,oBAAA,EACR,UAAA,EAAY,eAAA,GACX,qBAAA;;;;AAhJ+D;AAClE;;;;iBA2JgB,mBAAA,CACd,cAAA,EAAgB,mBAAA,EAChB,eAAA,EAAiB,GAAA,CAAI,eAAA,EAAiB,qBAAA,GACtC,gBAAA,EAAkB,qBAAA,GACjB,gBAAA;;;;iBAWa,yBAAA,CAA0B,GAAA,EAAK,gBAAA,GAAmB,0BAA0B;AA1KtC;AACtD;;AADsD,iBAuLtC,2BAAA,CAA4B,IAAA,EAAM,0BAAA,GAA6B,gBAAgB;;;;iBAY/E,yBAAA,CAA0B,GAAA,EAAK,gBAAA,GAAmB,0BAA0B;;;AAlM1B;iBA4MlD,2BAAA,CAA4B,IAAA,EAAM,0BAAA,GAA6B,gBAAgB;;;;iBAW/E,mBAAA,CAAoB,UAAA,EAAY,eAAA,GAAkB,oBAAoB;;;;iBActE,qBAAA,CAAsB,IAAA,EAAM,oBAAA,GAAuB,eAAe;AA/N1D;AAQxB;;AARwB,iBA8OR,yBAAA,CAA0B,GAAA,EAAK,qBAAA,GAAwB,0BAA0B;;AAtOxD;AAOzC;iBA4OgB,2BAAA,CACd,IAAA,EAAM,0BAAA,GACL,qBAAqB;;;AA9OsC;iBA2P9C,sBAAA,CAAuB,MAAA,EAAQ,oBAAA,GAAuB,uBAAuB;;;;iBAe7E,2BAAA,CACd,WAAA,EAAa,yBAAA,GACZ,4BAA4B;;;;iBAWf,6BAAA,CACd,IAAA,EAAM,4BAAA,GACL,yBAAyB;AA3Q5B;;;AAAA,iBAuRgB,uBAAA,CAAwB,KAA4B,EAArB,qBAAqB;;;;iBAQpD,yBAAA,CAA0B,GAAA,WAAc,qBAAqB;AA/RJ;AAOzE;;AAPyE,iBA0SzD,kBAAA,CAAmB,GAAA,EAAK,gBAAA,GAAmB,UAAU;;AAnSlB;AAiBnD;iBAyRgB,qBAAA,CAAsB,GAAqB,EAAhB,gBAAgB;AAAA,UAQ1C,0BAAA;EACf,UAAA;IACE,YAAA;EAAA;EAEF,gBAAA;AAAA;AAAA,UAGe,0BAAA;EACf,YAAY;AAAA;AAAA,UAGG,oBAAA;EACf,UAAA;EACA,YAAA;EACA,cAAA;EACA,YAAA;EACA,UAAA;AAAA;AAAA,UAGe,0BAAA;EACf,YAAA;EACA,eAAA,EAAiB,MAAM;EACvB,UAAA;AAAA;AAAA,UAGe,uBAAA;EACf,MAAA;EACA,OAAA;EACA,WAAA;IACE,MAAA;IACA,OAAA;EAAA;AAAA;AAAA,UAIa,4BAAA;EACf,MAAA;EACA,OAAO;AAAA;;;;iBAUO,UAAA,CAAW,KAAiB,EAAV,UAAU;AA5TY;AAYxD;;AAZwD,iBAmUxC,UAAA,CAAW,GAAA,WAAc,UAAU"}

package/dist/frost/index.mjs

@@ -1,4 +1,4 @@
-import { t as __exportAll } from "../chunk-CjcI7cDX.mjs";
+import { t as __exportAll } from "../chunk-z9aeyW2b.mjs";
 import { Ed25519Sha512, Identifier, aggregate, commitRound1, keys, serde, signRound2 } from "@frosts/ed25519";
 import { SigningPackageImpl } from "@frosts/core";
 //#region src/frost/index.ts

package/dist/frost/index.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"index.mjs","names":[],"sources":["../../src/frost/index.ts"],"sourcesContent":["/**\n * Copyright © 2023-2026 Blockchain Commons, LLC\n * Copyright © 2025-2026 Parity Technologies\n *\n *\n * FROST cryptographic operations module.\n *\n * This module wraps the @frosts/ed25519 library to provide FROST\n * threshold signature operations for DKG and signing.\n *\n * @module\n */\n\nimport {\n  Ed25519Sha512,\n  Identifier,\n  keys,\n  serde,\n  commitRound1,\n  signRound2,\n  aggregate,\n  type Ed25519SigningNonces,\n  type Ed25519SigningCommitments,\n  type Ed25519SignatureShare,\n  type Ed25519Signature,\n  type KeyPackage,\n  type PublicKeyPackage,\n  type SigningShare,\n} from \"@frosts/ed25519\";\n\nimport { type SigningPackage, SigningPackageImpl, type RandomSource } from \"@frosts/core\";\n\n// Re-export types for convenience\nexport type {\n  Ed25519SigningNonces,\n  Ed25519SigningCommitments,\n  Ed25519SignatureShare,\n  Ed25519Signature,\n  KeyPackage,\n  PublicKeyPackage,\n  RandomSource,\n};\n\nexport { Ed25519Sha512, Identifier, keys };\n\n// Type aliases for frost-hubert\nexport type FrostIdentifier = Identifier<typeof Ed25519Sha512>;\nexport type FrostKeyPackage = KeyPackage<typeof Ed25519Sha512>;\nexport type FrostPublicKeyPackage = PublicKeyPackage<typeof Ed25519Sha512>;\nexport type FrostSigningPackage = SigningPackage<typeof Ed25519Sha512>;\nexport type FrostSigningShare = SigningShare<typeof Ed25519Sha512>;\n\n// DKG round types - use the namespaced types from keys.dkg\nexport type DkgRound1Package = keys.dkg.round1.Package;\nexport type DkgRound1SecretPackage = keys.dkg.round1.SecretPackage;\nexport type DkgRound2Package = keys.dkg.round2.Package;\nexport type DkgRound2SecretPackage = keys.dkg.round2.SecretPackage;\n\n/**\n * Cryptographically secure random number generator using Web Crypto API.\n */\nexport class SecureRng implements RandomSource {\n  fill(array: Uint8Array): void {\n    globalThis.crypto.getRandomValues(array as Uint8Array<ArrayBuffer>);\n  }\n}\n\n/**\n * Create a new secure random number generator.\n */\nexport function createRng(): RandomSource {\n  return new SecureRng();\n}\n\n/**\n * Create an identifier from a number (1-indexed participant ID).\n */\nexport function identifierFromU16(id: number): FrostIdentifier {\n  return Identifier.fromU16(Ed25519Sha512, id);\n}\n\n/**\n * Serialize an identifier to bytes.\n */\nexport function serializeIdentifier(id: FrostIdentifier): Uint8Array {\n  return id.serialize();\n}\n\n/**\n * Deserialize an identifier from bytes.\n */\nexport function deserializeIdentifier(bytes: Uint8Array): FrostIdentifier {\n  return Identifier.deserialize(Ed25519Sha512, bytes);\n}\n\n/**\n * Convert an identifier to a hex string for use as a map key.\n */\nexport function identifierToHex(id: FrostIdentifier): string {\n  return bytesToHex(id.serialize());\n}\n\n// =============================================================================\n// DKG Operations\n// =============================================================================\n\n/**\n * Execute DKG round 1 (part1) - Generate commitment and proof of knowledge.\n *\n * @param identifier - This participant's identifier\n * @param maxSigners - Total number of participants\n * @param minSigners - Threshold (minimum signers required)\n * @param rng - Random number generator\n * @returns Tuple of [SecretPackage, Package] where Package is broadcast to all\n */\nexport function dkgPart1(\n  identifier: FrostIdentifier,\n  maxSigners: number,\n  minSigners: number,\n  rng: RandomSource = createRng(),\n): [DkgRound1SecretPackage, DkgRound1Package] {\n  return keys.dkg.part1(Ed25519Sha512, identifier, maxSigners, minSigners, rng);\n}\n\n/**\n * Execute DKG round 2 (part2) - Process round 1 packages and generate shares.\n *\n * @param secretPackage - The secret package from part1\n * @param round1Packages - Map of identifier hex to round1 packages from other participants\n * @returns Tuple of [Round2SecretPackage, Map of round2 packages to send]\n */\nexport function dkgPart2(\n  secretPackage: DkgRound1SecretPackage,\n  round1Packages: Map<string, DkgRound1Package>,\n): [DkgRound2SecretPackage, Map<string, DkgRound2Package>] {\n  return keys.dkg.part2(Ed25519Sha512, secretPackage, round1Packages);\n}\n\n/**\n * Execute DKG round 3 (part3/finalize) - Compute final key package.\n *\n * @param round2SecretPackage - The secret package from part2\n * @param round1Packages - Map of identifier hex to round1 packages\n * @param round2Packages - Map of identifier hex to round2 packages received\n * @returns Promise of tuple [KeyPackage, PublicKeyPackage]\n */\nexport async function dkgPart3(\n  round2SecretPackage: DkgRound2SecretPackage,\n  round1Packages: Map<string, DkgRound1Package>,\n  round2Packages: Map<string, DkgRound2Package>,\n): Promise<[FrostKeyPackage, FrostPublicKeyPackage]> {\n  return keys.dkg.part3(Ed25519Sha512, round2SecretPackage, round1Packages, round2Packages);\n}\n\n// =============================================================================\n// Signing Operations\n// =============================================================================\n\n/**\n * Execute signing round 1 - Generate nonces and commitments.\n *\n * @param keyPackage - The participant's key package from DKG\n * @param rng - Random number generator\n * @returns Tuple of [SigningNonces, SigningCommitments]\n */\nexport function signingRound1(\n  keyPackage: FrostKeyPackage,\n  rng: RandomSource = createRng(),\n): [Ed25519SigningNonces, Ed25519SigningCommitments] {\n  return commitRound1(keyPackage.signingShare, rng);\n}\n\n/**\n * Create a signing package from commitments and message.\n *\n * @param commitments - Map of identifier to signing commitments\n * @param message - The message to sign\n * @returns SigningPackage for round 2\n */\nexport function createSigningPackage(\n  commitments: Map<FrostIdentifier, Ed25519SigningCommitments>,\n  message: Uint8Array,\n): FrostSigningPackage {\n  return new SigningPackageImpl(Ed25519Sha512, commitments, message);\n}\n\n/**\n * Execute signing round 2 - Generate signature share.\n *\n * @param signingPackage - The signing package with all commitments\n * @param nonces - This participant's nonces from round 1\n * @param keyPackage - This participant's key package\n * @returns Signature share\n */\nexport function signingRound2(\n  signingPackage: FrostSigningPackage,\n  nonces: Ed25519SigningNonces,\n  keyPackage: FrostKeyPackage,\n): Ed25519SignatureShare {\n  return signRound2(signingPackage, nonces, keyPackage);\n}\n\n/**\n * Aggregate signature shares into a final signature.\n *\n * @param signingPackage - The signing package used for round 2\n * @param signatureShares - Map of identifier to signature shares\n * @param publicKeyPackage - The group's public key package\n * @returns The aggregated signature\n */\nexport function aggregateSignatures(\n  signingPackage: FrostSigningPackage,\n  signatureShares: Map<FrostIdentifier, Ed25519SignatureShare>,\n  publicKeyPackage: FrostPublicKeyPackage,\n): Ed25519Signature {\n  return aggregate(signingPackage, signatureShares, publicKeyPackage);\n}\n\n// =============================================================================\n// Serialization Helpers - Using @frosts/ed25519 serde module\n// =============================================================================\n\n/**\n * Serialize a DKG round 1 package to JSON-compatible format.\n */\nexport function serializeDkgRound1Package(pkg: DkgRound1Package): SerializedDkgRound1Package {\n  const json = serde.round1PackageToJson(pkg);\n  return {\n    commitment: {\n      coefficients: json.commitment,\n    },\n    proofOfKnowledge: json.proof_of_knowledge,\n  };\n}\n\n/**\n * Deserialize a DKG round 1 package from JSON format.\n */\nexport function deserializeDkgRound1Package(data: SerializedDkgRound1Package): DkgRound1Package {\n  const json = {\n    header: serde.DEFAULT_HEADER,\n    commitment: data.commitment.coefficients,\n    proof_of_knowledge: data.proofOfKnowledge,\n  };\n  return serde.round1PackageFromJson(json);\n}\n\n/**\n * Serialize a DKG round 2 package to JSON-compatible format.\n */\nexport function serializeDkgRound2Package(pkg: DkgRound2Package): SerializedDkgRound2Package {\n  const json = serde.round2PackageToJson(pkg);\n  return {\n    signingShare: json.signing_share,\n  };\n}\n\n/**\n * Deserialize a DKG round 2 package from JSON format.\n */\nexport function deserializeDkgRound2Package(data: SerializedDkgRound2Package): DkgRound2Package {\n  const json = {\n    header: serde.DEFAULT_HEADER,\n    signing_share: data.signingShare,\n  };\n  return serde.round2PackageFromJson(json);\n}\n\n/**\n * Serialize a key package to JSON-compatible format.\n */\nexport function serializeKeyPackage(keyPackage: FrostKeyPackage): SerializedKeyPackage {\n  const json = serde.keyPackageToJson(keyPackage);\n  return {\n    identifier: json.identifier,\n    signingShare: json.signing_share,\n    verifyingShare: json.verifying_share,\n    verifyingKey: json.verifying_key,\n    minSigners: json.min_signers,\n  };\n}\n\n/**\n * Deserialize a key package from JSON format.\n */\nexport function deserializeKeyPackage(data: SerializedKeyPackage): FrostKeyPackage {\n  const json = {\n    header: serde.DEFAULT_HEADER,\n    identifier: data.identifier,\n    signing_share: data.signingShare,\n    verifying_share: data.verifyingShare,\n    verifying_key: data.verifyingKey,\n    min_signers: data.minSigners,\n  };\n  return serde.keyPackageFromJson(json);\n}\n\n/**\n * Serialize a public key package to JSON-compatible format.\n */\nexport function serializePublicKeyPackage(pkg: FrostPublicKeyPackage): SerializedPublicKeyPackage {\n  const json = serde.publicKeyPackageToJson(pkg);\n  return {\n    verifyingKey: json.verifying_key,\n    verifyingShares: json.verifying_shares,\n    // minSigners may be undefined in older packages\n    ...(json.min_signers !== undefined ? { minSigners: json.min_signers } : {}),\n  };\n}\n\n/**\n * Deserialize a public key package from JSON format.\n */\nexport function deserializePublicKeyPackage(\n  data: SerializedPublicKeyPackage,\n): FrostPublicKeyPackage {\n  const json = {\n    header: serde.DEFAULT_HEADER,\n    verifying_key: data.verifyingKey,\n    verifying_shares: data.verifyingShares,\n    min_signers: data.minSigners,\n  };\n  return serde.publicKeyPackageFromJson(json);\n}\n\n/**\n * Serialize signing nonces to JSON-compatible format.\n */\nexport function serializeSigningNonces(nonces: Ed25519SigningNonces): SerializedSigningNonces {\n  // Access the internal properties of the nonces\n  return {\n    hiding: bytesToHex(nonces.hiding.serialize()),\n    binding: bytesToHex(nonces.binding.serialize()),\n    commitments: {\n      hiding: bytesToHex(nonces.commitments.hiding.serialize()),\n      binding: bytesToHex(nonces.commitments.binding.serialize()),\n    },\n  };\n}\n\n/**\n * Serialize signing commitments to JSON-compatible format.\n */\nexport function serializeSigningCommitments(\n  commitments: Ed25519SigningCommitments,\n): SerializedSigningCommitments {\n  const json = serde.signingCommitmentsToJson(commitments);\n  return {\n    hiding: json.hiding,\n    binding: json.binding,\n  };\n}\n\n/**\n * Deserialize signing commitments from JSON format.\n */\nexport function deserializeSigningCommitments(\n  data: SerializedSigningCommitments,\n): Ed25519SigningCommitments {\n  const json = {\n    header: serde.DEFAULT_HEADER,\n    hiding: data.hiding,\n    binding: data.binding,\n  };\n  return serde.signingCommitmentsFromJson(json);\n}\n\n/**\n * Serialize a signature share to hex string.\n */\nexport function serializeSignatureShare(share: Ed25519SignatureShare): string {\n  const json = serde.signatureShareToJson(share);\n  return json.share;\n}\n\n/**\n * Deserialize a signature share from hex string.\n */\nexport function deserializeSignatureShare(hex: string): Ed25519SignatureShare {\n  const json = {\n    header: serde.DEFAULT_HEADER,\n    share: hex,\n  };\n  return serde.signatureShareFromJson(json);\n}\n\n/**\n * Serialize a signature to bytes.\n */\nexport function serializeSignature(sig: Ed25519Signature): Uint8Array {\n  return sig.serialize(Ed25519Sha512);\n}\n\n/**\n * Serialize a signature to hex string.\n */\nexport function serializeSignatureHex(sig: Ed25519Signature): string {\n  return bytesToHex(sig.serialize(Ed25519Sha512));\n}\n\n// =============================================================================\n// Serialized Type Definitions\n// =============================================================================\n\nexport interface SerializedDkgRound1Package {\n  commitment: {\n    coefficients: string[]; // hex-encoded coefficient commitments\n  };\n  proofOfKnowledge: string; // hex-encoded proof of knowledge\n}\n\nexport interface SerializedDkgRound2Package {\n  signingShare: string; // hex-encoded signing share\n}\n\nexport interface SerializedKeyPackage {\n  identifier: string;\n  signingShare: string;\n  verifyingShare: string;\n  verifyingKey: string;\n  minSigners: number;\n}\n\nexport interface SerializedPublicKeyPackage {\n  verifyingKey: string;\n  verifyingShares: Record<string, string>; // identifier hex -> verifying share hex\n  minSigners?: number;\n}\n\nexport interface SerializedSigningNonces {\n  hiding: string;\n  binding: string;\n  commitments: {\n    hiding: string;\n    binding: string;\n  };\n}\n\nexport interface SerializedSigningCommitments {\n  hiding: string;\n  binding: string;\n}\n\n// =============================================================================\n// Utility Functions - Re-export from serde\n// =============================================================================\n\n/**\n * Convert bytes to hex string.\n */\nexport function bytesToHex(bytes: Uint8Array): string {\n  return serde.bytesToHex(bytes);\n}\n\n/**\n * Convert hex string to bytes.\n */\nexport function hexToBytes(hex: string): Uint8Array {\n  return serde.hexToBytes(hex);\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AA6DA,IAAa,YAAb,MAA+C;CAC7C,KAAK,OAAyB;AAC5B,aAAW,OAAO,gBAAgB,MAAiC;;;;;;AAOvE,SAAgB,YAA0B;AACxC,QAAO,IAAI,WAAW;;;;;AAMxB,SAAgB,kBAAkB,IAA6B;AAC7D,QAAO,WAAW,QAAQ,eAAe,GAAG;;;;;AAM9C,SAAgB,oBAAoB,IAAiC;AACnE,QAAO,GAAG,WAAW;;;;;AAMvB,SAAgB,sBAAsB,OAAoC;AACxE,QAAO,WAAW,YAAY,eAAe,MAAM;;;;;AAMrD,SAAgB,gBAAgB,IAA6B;AAC3D,QAAO,WAAW,GAAG,WAAW,CAAC;;;;;;;;;;;AAgBnC,SAAgB,SACd,YACA,YACA,YACA,MAAoB,WAAW,EACa;AAC5C,QAAO,KAAK,IAAI,MAAM,eAAe,YAAY,YAAY,YAAY,IAAI;;;;;;;;;AAU/E,SAAgB,SACd,eACA,gBACyD;AACzD,QAAO,KAAK,IAAI,MAAM,eAAe,eAAe,eAAe;;;;;;;;;;AAWrE,eAAsB,SACpB,qBACA,gBACA,gBACmD;AACnD,QAAO,KAAK,IAAI,MAAM,eAAe,qBAAqB,gBAAgB,eAAe;;;;;;;;;AAc3F,SAAgB,cACd,YACA,MAAoB,WAAW,EACoB;AACnD,QAAO,aAAa,WAAW,cAAc,IAAI;;;;;;;;;AAUnD,SAAgB,qBACd,aACA,SACqB;AACrB,QAAO,IAAI,mBAAmB,eAAe,aAAa,QAAQ;;;;;;;;;;AAWpE,SAAgB,cACd,gBACA,QACA,YACuB;AACvB,QAAO,WAAW,gBAAgB,QAAQ,WAAW;;;;;;;;;;AAWvD,SAAgB,oBACd,gBACA,iBACA,kBACkB;AAClB,QAAO,UAAU,gBAAgB,iBAAiB,iBAAiB;;;;;AAUrE,SAAgB,0BAA0B,KAAmD;CAC3F,MAAM,OAAO,MAAM,oBAAoB,IAAI;AAC3C,QAAO;EACL,YAAY,EACV,cAAc,KAAK,YACpB;EACD,kBAAkB,KAAK;EACxB;;;;;AAMH,SAAgB,4BAA4B,MAAoD;CAC9F,MAAM,OAAO;EACX,QAAQ,MAAM;EACd,YAAY,KAAK,WAAW;EAC5B,oBAAoB,KAAK;EAC1B;AACD,QAAO,MAAM,sBAAsB,KAAK;;;;;AAM1C,SAAgB,0BAA0B,KAAmD;AAE3F,QAAO,EACL,cAFW,MAAM,oBAAoB,IAEnB,CAAC,eACpB;;;;;AAMH,SAAgB,4BAA4B,MAAoD;CAC9F,MAAM,OAAO;EACX,QAAQ,MAAM;EACd,eAAe,KAAK;EACrB;AACD,QAAO,MAAM,sBAAsB,KAAK;;;;;AAM1C,SAAgB,oBAAoB,YAAmD;CACrF,MAAM,OAAO,MAAM,iBAAiB,WAAW;AAC/C,QAAO;EACL,YAAY,KAAK;EACjB,cAAc,KAAK;EACnB,gBAAgB,KAAK;EACrB,cAAc,KAAK;EACnB,YAAY,KAAK;EAClB;;;;;AAMH,SAAgB,sBAAsB,MAA6C;CACjF,MAAM,OAAO;EACX,QAAQ,MAAM;EACd,YAAY,KAAK;EACjB,eAAe,KAAK;EACpB,iBAAiB,KAAK;EACtB,eAAe,KAAK;EACpB,aAAa,KAAK;EACnB;AACD,QAAO,MAAM,mBAAmB,KAAK;;;;;AAMvC,SAAgB,0BAA0B,KAAwD;CAChG,MAAM,OAAO,MAAM,uBAAuB,IAAI;AAC9C,QAAO;EACL,cAAc,KAAK;EACnB,iBAAiB,KAAK;EAEtB,GAAI,KAAK,gBAAgB,KAAA,IAAY,EAAE,YAAY,KAAK,aAAa,GAAG,EAAE;EAC3E;;;;;AAMH,SAAgB,4BACd,MACuB;CACvB,MAAM,OAAO;EACX,QAAQ,MAAM;EACd,eAAe,KAAK;EACpB,kBAAkB,KAAK;EACvB,aAAa,KAAK;EACnB;AACD,QAAO,MAAM,yBAAyB,KAAK;;;;;AAM7C,SAAgB,uBAAuB,QAAuD;AAE5F,QAAO;EACL,QAAQ,WAAW,OAAO,OAAO,WAAW,CAAC;EAC7C,SAAS,WAAW,OAAO,QAAQ,WAAW,CAAC;EAC/C,aAAa;GACX,QAAQ,WAAW,OAAO,YAAY,OAAO,WAAW,CAAC;GACzD,SAAS,WAAW,OAAO,YAAY,QAAQ,WAAW,CAAC;GAC5D;EACF;;;;;AAMH,SAAgB,4BACd,aAC8B;CAC9B,MAAM,OAAO,MAAM,yBAAyB,YAAY;AACxD,QAAO;EACL,QAAQ,KAAK;EACb,SAAS,KAAK;EACf;;;;;AAMH,SAAgB,8BACd,MAC2B;CAC3B,MAAM,OAAO;EACX,QAAQ,MAAM;EACd,QAAQ,KAAK;EACb,SAAS,KAAK;EACf;AACD,QAAO,MAAM,2BAA2B,KAAK;;;;;AAM/C,SAAgB,wBAAwB,OAAsC;AAE5E,QADa,MAAM,qBAAqB,MAC7B,CAAC;;;;;AAMd,SAAgB,0BAA0B,KAAoC;CAC5E,MAAM,OAAO;EACX,QAAQ,MAAM;EACd,OAAO;EACR;AACD,QAAO,MAAM,uBAAuB,KAAK;;;;;AAM3C,SAAgB,mBAAmB,KAAmC;AACpE,QAAO,IAAI,UAAU,cAAc;;;;;AAMrC,SAAgB,sBAAsB,KAA+B;AACnE,QAAO,WAAW,IAAI,UAAU,cAAc,CAAC;;;;;AAqDjD,SAAgB,WAAW,OAA2B;AACpD,QAAO,MAAM,WAAW,MAAM;;;;;AAMhC,SAAgB,WAAW,KAAyB;AAClD,QAAO,MAAM,WAAW,IAAI"}
+{"version":3,"file":"index.mjs","names":[],"sources":["../../src/frost/index.ts"],"sourcesContent":["/**\n * Copyright © 2023-2026 Blockchain Commons, LLC\n * Copyright © 2025-2026 Parity Technologies\n *\n *\n * FROST cryptographic operations module.\n *\n * This module wraps the @frosts/ed25519 library to provide FROST\n * threshold signature operations for DKG and signing.\n *\n * @module\n */\n\nimport {\n  Ed25519Sha512,\n  Identifier,\n  keys,\n  serde,\n  commitRound1,\n  signRound2,\n  aggregate,\n  type Ed25519SigningNonces,\n  type Ed25519SigningCommitments,\n  type Ed25519SignatureShare,\n  type Ed25519Signature,\n  type KeyPackage,\n  type PublicKeyPackage,\n  type SigningShare,\n} from \"@frosts/ed25519\";\n\nimport { type SigningPackage, SigningPackageImpl, type RandomSource } from \"@frosts/core\";\n\n// Re-export types for convenience\nexport type {\n  Ed25519SigningNonces,\n  Ed25519SigningCommitments,\n  Ed25519SignatureShare,\n  Ed25519Signature,\n  KeyPackage,\n  PublicKeyPackage,\n  RandomSource,\n};\n\nexport { Ed25519Sha512, Identifier, keys };\n\n// Type aliases for frost-hubert\nexport type FrostIdentifier = Identifier<typeof Ed25519Sha512>;\nexport type FrostKeyPackage = KeyPackage<typeof Ed25519Sha512>;\nexport type FrostPublicKeyPackage = PublicKeyPackage<typeof Ed25519Sha512>;\nexport type FrostSigningPackage = SigningPackage<typeof Ed25519Sha512>;\nexport type FrostSigningShare = SigningShare<typeof Ed25519Sha512>;\n\n// DKG round types - use the namespaced types from keys.dkg\nexport type DkgRound1Package = keys.dkg.round1.Package;\nexport type DkgRound1SecretPackage = keys.dkg.round1.SecretPackage;\nexport type DkgRound2Package = keys.dkg.round2.Package;\nexport type DkgRound2SecretPackage = keys.dkg.round2.SecretPackage;\n\n/**\n * Cryptographically secure random number generator using Web Crypto API.\n */\nexport class SecureRng implements RandomSource {\n  fill(array: Uint8Array): void {\n    globalThis.crypto.getRandomValues(array as Uint8Array<ArrayBuffer>);\n  }\n}\n\n/**\n * Create a new secure random number generator.\n */\nexport function createRng(): RandomSource {\n  return new SecureRng();\n}\n\n/**\n * Create an identifier from a number (1-indexed participant ID).\n */\nexport function identifierFromU16(id: number): FrostIdentifier {\n  return Identifier.fromU16(Ed25519Sha512, id);\n}\n\n/**\n * Serialize an identifier to bytes.\n */\nexport function serializeIdentifier(id: FrostIdentifier): Uint8Array {\n  return id.serialize();\n}\n\n/**\n * Deserialize an identifier from bytes.\n */\nexport function deserializeIdentifier(bytes: Uint8Array): FrostIdentifier {\n  return Identifier.deserialize(Ed25519Sha512, bytes);\n}\n\n/**\n * Convert an identifier to a hex string for use as a map key.\n */\nexport function identifierToHex(id: FrostIdentifier): string {\n  return bytesToHex(id.serialize());\n}\n\n// =============================================================================\n// DKG Operations\n// =============================================================================\n\n/**\n * Execute DKG round 1 (part1) - Generate commitment and proof of knowledge.\n *\n * @param identifier - This participant's identifier\n * @param maxSigners - Total number of participants\n * @param minSigners - Threshold (minimum signers required)\n * @param rng - Random number generator\n * @returns Tuple of [SecretPackage, Package] where Package is broadcast to all\n */\nexport function dkgPart1(\n  identifier: FrostIdentifier,\n  maxSigners: number,\n  minSigners: number,\n  rng: RandomSource = createRng(),\n): [DkgRound1SecretPackage, DkgRound1Package] {\n  return keys.dkg.part1(Ed25519Sha512, identifier, maxSigners, minSigners, rng);\n}\n\n/**\n * Execute DKG round 2 (part2) - Process round 1 packages and generate shares.\n *\n * @param secretPackage - The secret package from part1\n * @param round1Packages - Map of identifier hex to round1 packages from other participants\n * @returns Tuple of [Round2SecretPackage, Map of round2 packages to send]\n */\nexport function dkgPart2(\n  secretPackage: DkgRound1SecretPackage,\n  round1Packages: Map<string, DkgRound1Package>,\n): [DkgRound2SecretPackage, Map<string, DkgRound2Package>] {\n  return keys.dkg.part2(Ed25519Sha512, secretPackage, round1Packages);\n}\n\n/**\n * Execute DKG round 3 (part3/finalize) - Compute final key package.\n *\n * @param round2SecretPackage - The secret package from part2\n * @param round1Packages - Map of identifier hex to round1 packages\n * @param round2Packages - Map of identifier hex to round2 packages received\n * @returns Promise of tuple [KeyPackage, PublicKeyPackage]\n */\nexport async function dkgPart3(\n  round2SecretPackage: DkgRound2SecretPackage,\n  round1Packages: Map<string, DkgRound1Package>,\n  round2Packages: Map<string, DkgRound2Package>,\n): Promise<[FrostKeyPackage, FrostPublicKeyPackage]> {\n  return keys.dkg.part3(Ed25519Sha512, round2SecretPackage, round1Packages, round2Packages);\n}\n\n// =============================================================================\n// Signing Operations\n// =============================================================================\n\n/**\n * Execute signing round 1 - Generate nonces and commitments.\n *\n * @param keyPackage - The participant's key package from DKG\n * @param rng - Random number generator\n * @returns Tuple of [SigningNonces, SigningCommitments]\n */\nexport function signingRound1(\n  keyPackage: FrostKeyPackage,\n  rng: RandomSource = createRng(),\n): [Ed25519SigningNonces, Ed25519SigningCommitments] {\n  return commitRound1(keyPackage.signingShare, rng);\n}\n\n/**\n * Create a signing package from commitments and message.\n *\n * @param commitments - Map of identifier to signing commitments\n * @param message - The message to sign\n * @returns SigningPackage for round 2\n */\nexport function createSigningPackage(\n  commitments: Map<FrostIdentifier, Ed25519SigningCommitments>,\n  message: Uint8Array,\n): FrostSigningPackage {\n  return new SigningPackageImpl(Ed25519Sha512, commitments, message);\n}\n\n/**\n * Execute signing round 2 - Generate signature share.\n *\n * @param signingPackage - The signing package with all commitments\n * @param nonces - This participant's nonces from round 1\n * @param keyPackage - This participant's key package\n * @returns Signature share\n */\nexport function signingRound2(\n  signingPackage: FrostSigningPackage,\n  nonces: Ed25519SigningNonces,\n  keyPackage: FrostKeyPackage,\n): Ed25519SignatureShare {\n  return signRound2(signingPackage, nonces, keyPackage);\n}\n\n/**\n * Aggregate signature shares into a final signature.\n *\n * @param signingPackage - The signing package used for round 2\n * @param signatureShares - Map of identifier to signature shares\n * @param publicKeyPackage - The group's public key package\n * @returns The aggregated signature\n */\nexport function aggregateSignatures(\n  signingPackage: FrostSigningPackage,\n  signatureShares: Map<FrostIdentifier, Ed25519SignatureShare>,\n  publicKeyPackage: FrostPublicKeyPackage,\n): Ed25519Signature {\n  return aggregate(signingPackage, signatureShares, publicKeyPackage);\n}\n\n// =============================================================================\n// Serialization Helpers - Using @frosts/ed25519 serde module\n// =============================================================================\n\n/**\n * Serialize a DKG round 1 package to JSON-compatible format.\n */\nexport function serializeDkgRound1Package(pkg: DkgRound1Package): SerializedDkgRound1Package {\n  const json = serde.round1PackageToJson(pkg);\n  return {\n    commitment: {\n      coefficients: json.commitment,\n    },\n    proofOfKnowledge: json.proof_of_knowledge,\n  };\n}\n\n/**\n * Deserialize a DKG round 1 package from JSON format.\n */\nexport function deserializeDkgRound1Package(data: SerializedDkgRound1Package): DkgRound1Package {\n  const json = {\n    header: serde.DEFAULT_HEADER,\n    commitment: data.commitment.coefficients,\n    proof_of_knowledge: data.proofOfKnowledge,\n  };\n  return serde.round1PackageFromJson(json);\n}\n\n/**\n * Serialize a DKG round 2 package to JSON-compatible format.\n */\nexport function serializeDkgRound2Package(pkg: DkgRound2Package): SerializedDkgRound2Package {\n  const json = serde.round2PackageToJson(pkg);\n  return {\n    signingShare: json.signing_share,\n  };\n}\n\n/**\n * Deserialize a DKG round 2 package from JSON format.\n */\nexport function deserializeDkgRound2Package(data: SerializedDkgRound2Package): DkgRound2Package {\n  const json = {\n    header: serde.DEFAULT_HEADER,\n    signing_share: data.signingShare,\n  };\n  return serde.round2PackageFromJson(json);\n}\n\n/**\n * Serialize a key package to JSON-compatible format.\n */\nexport function serializeKeyPackage(keyPackage: FrostKeyPackage): SerializedKeyPackage {\n  const json = serde.keyPackageToJson(keyPackage);\n  return {\n    identifier: json.identifier,\n    signingShare: json.signing_share,\n    verifyingShare: json.verifying_share,\n    verifyingKey: json.verifying_key,\n    minSigners: json.min_signers,\n  };\n}\n\n/**\n * Deserialize a key package from JSON format.\n */\nexport function deserializeKeyPackage(data: SerializedKeyPackage): FrostKeyPackage {\n  const json = {\n    header: serde.DEFAULT_HEADER,\n    identifier: data.identifier,\n    signing_share: data.signingShare,\n    verifying_share: data.verifyingShare,\n    verifying_key: data.verifyingKey,\n    min_signers: data.minSigners,\n  };\n  return serde.keyPackageFromJson(json);\n}\n\n/**\n * Serialize a public key package to JSON-compatible format.\n */\nexport function serializePublicKeyPackage(pkg: FrostPublicKeyPackage): SerializedPublicKeyPackage {\n  const json = serde.publicKeyPackageToJson(pkg);\n  return {\n    verifyingKey: json.verifying_key,\n    verifyingShares: json.verifying_shares,\n    // minSigners may be undefined in older packages\n    ...(json.min_signers !== undefined ? { minSigners: json.min_signers } : {}),\n  };\n}\n\n/**\n * Deserialize a public key package from JSON format.\n */\nexport function deserializePublicKeyPackage(\n  data: SerializedPublicKeyPackage,\n): FrostPublicKeyPackage {\n  const json = {\n    header: serde.DEFAULT_HEADER,\n    verifying_key: data.verifyingKey,\n    verifying_shares: data.verifyingShares,\n    min_signers: data.minSigners,\n  };\n  return serde.publicKeyPackageFromJson(json);\n}\n\n/**\n * Serialize signing nonces to JSON-compatible format.\n */\nexport function serializeSigningNonces(nonces: Ed25519SigningNonces): SerializedSigningNonces {\n  // Access the internal properties of the nonces\n  return {\n    hiding: bytesToHex(nonces.hiding.serialize()),\n    binding: bytesToHex(nonces.binding.serialize()),\n    commitments: {\n      hiding: bytesToHex(nonces.commitments.hiding.serialize()),\n      binding: bytesToHex(nonces.commitments.binding.serialize()),\n    },\n  };\n}\n\n/**\n * Serialize signing commitments to JSON-compatible format.\n */\nexport function serializeSigningCommitments(\n  commitments: Ed25519SigningCommitments,\n): SerializedSigningCommitments {\n  const json = serde.signingCommitmentsToJson(commitments);\n  return {\n    hiding: json.hiding,\n    binding: json.binding,\n  };\n}\n\n/**\n * Deserialize signing commitments from JSON format.\n */\nexport function deserializeSigningCommitments(\n  data: SerializedSigningCommitments,\n): Ed25519SigningCommitments {\n  const json = {\n    header: serde.DEFAULT_HEADER,\n    hiding: data.hiding,\n    binding: data.binding,\n  };\n  return serde.signingCommitmentsFromJson(json);\n}\n\n/**\n * Serialize a signature share to hex string.\n */\nexport function serializeSignatureShare(share: Ed25519SignatureShare): string {\n  const json = serde.signatureShareToJson(share);\n  return json.share;\n}\n\n/**\n * Deserialize a signature share from hex string.\n */\nexport function deserializeSignatureShare(hex: string): Ed25519SignatureShare {\n  const json = {\n    header: serde.DEFAULT_HEADER,\n    share: hex,\n  };\n  return serde.signatureShareFromJson(json);\n}\n\n/**\n * Serialize a signature to bytes.\n */\nexport function serializeSignature(sig: Ed25519Signature): Uint8Array {\n  return sig.serialize(Ed25519Sha512);\n}\n\n/**\n * Serialize a signature to hex string.\n */\nexport function serializeSignatureHex(sig: Ed25519Signature): string {\n  return bytesToHex(sig.serialize(Ed25519Sha512));\n}\n\n// =============================================================================\n// Serialized Type Definitions\n// =============================================================================\n\nexport interface SerializedDkgRound1Package {\n  commitment: {\n    coefficients: string[]; // hex-encoded coefficient commitments\n  };\n  proofOfKnowledge: string; // hex-encoded proof of knowledge\n}\n\nexport interface SerializedDkgRound2Package {\n  signingShare: string; // hex-encoded signing share\n}\n\nexport interface SerializedKeyPackage {\n  identifier: string;\n  signingShare: string;\n  verifyingShare: string;\n  verifyingKey: string;\n  minSigners: number;\n}\n\nexport interface SerializedPublicKeyPackage {\n  verifyingKey: string;\n  verifyingShares: Record<string, string>; // identifier hex -> verifying share hex\n  minSigners?: number;\n}\n\nexport interface SerializedSigningNonces {\n  hiding: string;\n  binding: string;\n  commitments: {\n    hiding: string;\n    binding: string;\n  };\n}\n\nexport interface SerializedSigningCommitments {\n  hiding: string;\n  binding: string;\n}\n\n// =============================================================================\n// Utility Functions - Re-export from serde\n// =============================================================================\n\n/**\n * Convert bytes to hex string.\n */\nexport function bytesToHex(bytes: Uint8Array): string {\n  return serde.bytesToHex(bytes);\n}\n\n/**\n * Convert hex string to bytes.\n */\nexport function hexToBytes(hex: string): Uint8Array {\n  return serde.hexToBytes(hex);\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AA6DA,IAAa,YAAb,MAA+C;CAC7C,KAAK,OAAyB;EAC5B,WAAW,OAAO,gBAAgB,KAAgC;CACpE;AACF;;;;AAKA,SAAgB,YAA0B;CACxC,OAAO,IAAI,UAAU;AACvB;;;;AAKA,SAAgB,kBAAkB,IAA6B;CAC7D,OAAO,WAAW,QAAQ,eAAe,EAAE;AAC7C;;;;AAKA,SAAgB,oBAAoB,IAAiC;CACnE,OAAO,GAAG,UAAU;AACtB;;;;AAKA,SAAgB,sBAAsB,OAAoC;CACxE,OAAO,WAAW,YAAY,eAAe,KAAK;AACpD;;;;AAKA,SAAgB,gBAAgB,IAA6B;CAC3D,OAAO,WAAW,GAAG,UAAU,CAAC;AAClC;;;;;;;;;;AAeA,SAAgB,SACd,YACA,YACA,YACA,MAAoB,UAAU,GACc;CAC5C,OAAO,KAAK,IAAI,MAAM,eAAe,YAAY,YAAY,YAAY,GAAG;AAC9E;;;;;;;;AASA,SAAgB,SACd,eACA,gBACyD;CACzD,OAAO,KAAK,IAAI,MAAM,eAAe,eAAe,cAAc;AACpE;;;;;;;;;AAUA,eAAsB,SACpB,qBACA,gBACA,gBACmD;CACnD,OAAO,KAAK,IAAI,MAAM,eAAe,qBAAqB,gBAAgB,cAAc;AAC1F;;;;;;;;AAaA,SAAgB,cACd,YACA,MAAoB,UAAU,GACqB;CACnD,OAAO,aAAa,WAAW,cAAc,GAAG;AAClD;;;;;;;;AASA,SAAgB,qBACd,aACA,SACqB;CACrB,OAAO,IAAI,mBAAmB,eAAe,aAAa,OAAO;AACnE;;;;;;;;;AAUA,SAAgB,cACd,gBACA,QACA,YACuB;CACvB,OAAO,WAAW,gBAAgB,QAAQ,UAAU;AACtD;;;;;;;;;AAUA,SAAgB,oBACd,gBACA,iBACA,kBACkB;CAClB,OAAO,UAAU,gBAAgB,iBAAiB,gBAAgB;AACpE;;;;AASA,SAAgB,0BAA0B,KAAmD;CAC3F,MAAM,OAAO,MAAM,oBAAoB,GAAG;CAC1C,OAAO;EACL,YAAY,EACV,cAAc,KAAK,WACrB;EACA,kBAAkB,KAAK;CACzB;AACF;;;;AAKA,SAAgB,4BAA4B,MAAoD;CAC9F,MAAM,OAAO;EACX,QAAQ,MAAM;EACd,YAAY,KAAK,WAAW;EAC5B,oBAAoB,KAAK;CAC3B;CACA,OAAO,MAAM,sBAAsB,IAAI;AACzC;;;;AAKA,SAAgB,0BAA0B,KAAmD;CAE3F,OAAO,EACL,cAFW,MAAM,oBAAoB,GAEpB,EAAE,cACrB;AACF;;;;AAKA,SAAgB,4BAA4B,MAAoD;CAC9F,MAAM,OAAO;EACX,QAAQ,MAAM;EACd,eAAe,KAAK;CACtB;CACA,OAAO,MAAM,sBAAsB,IAAI;AACzC;;;;AAKA,SAAgB,oBAAoB,YAAmD;CACrF,MAAM,OAAO,MAAM,iBAAiB,UAAU;CAC9C,OAAO;EACL,YAAY,KAAK;EACjB,cAAc,KAAK;EACnB,gBAAgB,KAAK;EACrB,cAAc,KAAK;EACnB,YAAY,KAAK;CACnB;AACF;;;;AAKA,SAAgB,sBAAsB,MAA6C;CACjF,MAAM,OAAO;EACX,QAAQ,MAAM;EACd,YAAY,KAAK;EACjB,eAAe,KAAK;EACpB,iBAAiB,KAAK;EACtB,eAAe,KAAK;EACpB,aAAa,KAAK;CACpB;CACA,OAAO,MAAM,mBAAmB,IAAI;AACtC;;;;AAKA,SAAgB,0BAA0B,KAAwD;CAChG,MAAM,OAAO,MAAM,uBAAuB,GAAG;CAC7C,OAAO;EACL,cAAc,KAAK;EACnB,iBAAiB,KAAK;EAEtB,GAAI,KAAK,gBAAgB,KAAA,IAAY,EAAE,YAAY,KAAK,YAAY,IAAI,CAAC;CAC3E;AACF;;;;AAKA,SAAgB,4BACd,MACuB;CACvB,MAAM,OAAO;EACX,QAAQ,MAAM;EACd,eAAe,KAAK;EACpB,kBAAkB,KAAK;EACvB,aAAa,KAAK;CACpB;CACA,OAAO,MAAM,yBAAyB,IAAI;AAC5C;;;;AAKA,SAAgB,uBAAuB,QAAuD;CAE5F,OAAO;EACL,QAAQ,WAAW,OAAO,OAAO,UAAU,CAAC;EAC5C,SAAS,WAAW,OAAO,QAAQ,UAAU,CAAC;EAC9C,aAAa;GACX,QAAQ,WAAW,OAAO,YAAY,OAAO,UAAU,CAAC;GACxD,SAAS,WAAW,OAAO,YAAY,QAAQ,UAAU,CAAC;EAC5D;CACF;AACF;;;;AAKA,SAAgB,4BACd,aAC8B;CAC9B,MAAM,OAAO,MAAM,yBAAyB,WAAW;CACvD,OAAO;EACL,QAAQ,KAAK;EACb,SAAS,KAAK;CAChB;AACF;;;;AAKA,SAAgB,8BACd,MAC2B;CAC3B,MAAM,OAAO;EACX,QAAQ,MAAM;EACd,QAAQ,KAAK;EACb,SAAS,KAAK;CAChB;CACA,OAAO,MAAM,2BAA2B,IAAI;AAC9C;;;;AAKA,SAAgB,wBAAwB,OAAsC;CAE5E,OADa,MAAM,qBAAqB,KAC9B,EAAE;AACd;;;;AAKA,SAAgB,0BAA0B,KAAoC;CAC5E,MAAM,OAAO;EACX,QAAQ,MAAM;EACd,OAAO;CACT;CACA,OAAO,MAAM,uBAAuB,IAAI;AAC1C;;;;AAKA,SAAgB,mBAAmB,KAAmC;CACpE,OAAO,IAAI,UAAU,aAAa;AACpC;;;;AAKA,SAAgB,sBAAsB,KAA+B;CACnE,OAAO,WAAW,IAAI,UAAU,aAAa,CAAC;AAChD;;;;AAoDA,SAAgB,WAAW,OAA2B;CACpD,OAAO,MAAM,WAAW,KAAK;AAC/B;;;;AAKA,SAAgB,WAAW,KAAyB;CAClD,OAAO,MAAM,WAAW,GAAG;AAC7B"}

package/dist/{index-F1iNEAJR.d.cts → index-BErX9AZF.d.cts}

@@ -1,5 +1,5 @@
-import { d as PendingRequests, i as Registry, l as GroupParticipant, o as ParticipantRecord, r as OwnerOutcome, s as OwnerRecord, t as AddOutcome, u as GroupRecord } from "./index-C8QeHNwa.cjs";
-import { t as DkgInvitation } from "./index-B3c-80VS.cjs";
+import { d as PendingRequests, i as Registry, l as GroupParticipant, o as ParticipantRecord, r as OwnerOutcome, s as OwnerRecord, t as AddOutcome, u as GroupRecord } from "./index-CD50Qtgw.cjs";
+import { t as DkgInvitation } from "./index-gkmZzEuD.cjs";
 import { ARID, PrivateKeys, XID } from "@bcts/components";
 import { Envelope, EnvelopeEncodableValue } from "@bcts/envelope";
 import { XIDDocument } from "@bcts/xid";
@@ -1121,4 +1121,4 @@ declare namespace index_d_exports {
 declare function participantsFilePath(registry: string | undefined, cwd: string): string;
 //#endregion
 export { signingKeyFromVerifying as A, StorageClient as C, isVerbose as D, groupStateDir as E, setVerbose as O, putWithIndicator as S, createStorageClient as T, fetchStatusTimeout as _, CollectionResult as a, parallelSend as b, FetchStatus as c, directionEmoji as d, emptyCollectionResult as f, fetchStatusSuccess as g, fetchStatusRejected as h, checkAridExists as i, parseAridUr as k, ParallelFetchConfig as l, fetchStatusPending as m, index_d_exports$1 as n, DEFAULT_TIMEOUT_SECONDS as o, fetchStatusError as p, index_d_exports$4 as r, Direction as s, index_d_exports as t, buildFetchRequests as u, parallelFetch as v, StorageSelection as w, getWithIndicator as x, parallelFetchConfigWithTimeout as y };
-//# sourceMappingURL=index-F1iNEAJR.d.cts.map
+//# sourceMappingURL=index-BErX9AZF.d.cts.map

package/dist/index-BErX9AZF.d.cts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index-BErX9AZF.d.cts","names":[],"sources":["../src/cmd/dkg/common.ts","../src/cmd/common.ts","../src/cmd/storage.ts","../src/cmd/busy.ts","../src/cmd/parallel.ts","../src/cmd/check.ts","../src/cmd/dkg/coordinator/invite.ts","../src/cmd/dkg/coordinator/round1.ts","../src/cmd/dkg/coordinator/round2.ts","../src/cmd/dkg/coordinator/finalize.ts","../src/cmd/dkg/coordinator/index.ts","../src/cmd/dkg/participant/receive.ts","../src/cmd/dkg/participant/round1.ts","../src/cmd/dkg/participant/round2.ts","../src/cmd/dkg/participant/finalize.ts","../src/cmd/dkg/participant/index.ts","../src/cmd/dkg/index.ts","../src/cmd/sign/common.ts","../src/cmd/sign/coordinator/invite.ts","../src/cmd/sign/coordinator/round1.ts","../src/cmd/sign/coordinator/round2.ts","../src/cmd/sign/coordinator/index.ts","../src/cmd/sign/participant/receive.ts","../src/cmd/sign/participant/round1.ts","../src/cmd/sign/participant/round2.ts","../src/cmd/sign/participant/finalize.ts","../src/cmd/sign/participant/index.ts","../src/cmd/sign/index.ts","../src/cmd/registry/owner/set.ts","../src/cmd/registry/participant/add.ts","../src/cmd/registry/index.ts"],"mappings":";;;;;;;;;;AA+E2D;AAsB3D;;;;;;;;AAAwE;AA4BxE;;;iBApFgB,WAAA,CAAY,QAAA,WAAmB,IAAI;;;;;;iBAkCnC,eAAA,CAAgB,QAAA,WAAmB,QAAQ;AA8F3D;;;;;;;;;AAAA,iBAxEgB,uBAAA,CAAwB,QAAA,EAAU,QAAA,GAAW,WAAW;;;;;AA2E9C;AAwD1B;;;;;;;;;AAAyE;AA6BzE;;;iBApIgB,aAAA,CAAc,QAAA,EAAU,QAAA,EAAU,KAAA,WAAgB,WAAW;;;;;;iBA4C7D,mBAAA,CACd,QAAA,EAAU,QAAA,EACV,MAAA,cACE,GAAA,EAAK,iBAAA;;;;;;iBAwDO,iBAAA,CAAkB,QAAA,EAAU,QAAA,EAAU,MAAA,EAAQ,WAAW;;AAiCtD;AASnB;;;iBAbgB,sBAAA,CACd,QAAA,EAAU,QAAA,EACV,KAAA,EAAO,WAAA,EACP,YAAA,EAAc,WAAA,KACb,gBAAA;;;;;;iBASa,4BAAA,CACd,QAAA,EAAU,QAAA,EACV,KAAA,EAAO,WAAA,EACP,QAAA,EAAU,WAAA,GACT,gBAAA;;;;;;iBAyBa,yBAAA,CAA0B,IAAA,UAAc,OAAgB;;AAzBrD;AAyBnB;;;iBASgB,4BAAA,CACd,QAAA,EAAU,QAAA,EACV,YAAA,EAAc,WAAA,IACd,QAAA,EAAU,GAAA,EACV,YAAA;AAbsE;AASxE;;;;AATwE,iBA+CxD,WAAA,CAAY,YAAA,UAAsB,UAAkB;;;;;;iBAUpD,uBAAA,CAAwB,iBAA6B,EAAV,UAAU;;;AAvOrE;;;;;AAAA,iBC5FgB,aAAA,CAAc,YAAA,UAAsB,UAAkB;;;;iBAatD,UAAA,CAAW,KAAc;AD2HzC;;;;;AAAA,iBClHgB,SAAA,CAAA;;;ADdmC;AAkCnD;;;;AAlCmD,KEzBvC,gBAAA;AFiFZ;;;;;AAAA,UE1EiB,aAAA;EF0E4C;;AAAW;EEtEtE,GAAA,CAAI,IAAA,EAAM,IAAA,EAAM,QAAA,EAAU,QAAA,GAAW,OAAA;EFkGV;;;EE7F3B,GAAA,CAAI,IAAA,EAAM,IAAA,EAAM,cAAA,YAA0B,OAAA,CAAQ,QAAA;EF6FtB;;;EExF5B,MAAA,CAAO,IAAA,EAAM,IAAA,GAAO,OAAA;AAAA;AFoItB;;;;;AAAA,iBE5HsB,mBAAA,CACpB,SAAA,EAAW,gBAAA,EACX,SAAA,YACC,OAAA,CAAQ,aAAA;;;AF2BX;;;;AAA2D;AAA3D,iBGzDsB,gBAAA,CACpB,MAAA,EAAQ,aAAA,EACR,IAAA,EAAM,IAAA,EACN,QAAA,EAAU,QAAA,EACV,OAAA,UACA,OAAA,YACC,OAAA;;;;;;iBAiBmB,gBAAA,CACpB,MAAA,EAAQ,aAAA,EACR,IAAA,EAAM,IAAA,EACN,OAAA,UACA,cAAA,sBACA,OAAA,YACC,OAAA,CAAQ,QAAA;;;;AH4BgD;AAsB3D;;;KI5EY,WAAA;EACN,IAAA;AAAA;EACA,IAAA;EAAiB,QAAA,EAAU,QAAQ;AAAA;EACnC,IAAA;EAAkB,MAAA;AAAA;EAClB,IAAA;EAAe,KAAA;AAAA;EACf,IAAA;AAAA;;AJmGuE;AA4C7E;iBI1IgB,kBAAA,CAAA,GAAsB,WAAW;;;;iBAOjC,kBAAA,CAAmB,QAAA,EAAU,QAAA,GAAW,WAAW;;;;iBAOnD,mBAAA,CAAoB,MAAA,WAAiB,WAAW;;;;iBAOhD,gBAAA,CAAiB,KAAA,WAAgB,WAAW;AJwHlC;AAwD1B;;AAxD0B,iBIjHV,kBAAA,CAAA,GAAsB,WAAW;;;;;;aASrC,SAAA;EJgK6D;EI9JvE,GAAA;EJ2LoC;EIzLpC,GAAG;AAAA;;;;;;iBAQW,cAAA,CAAe,SAAoB,EAAT,SAAS;;;;;;UAclC,mBAAA;EJuKE;EIrKjB,cAAA;EJ8Kc;EI5Kd,OAAO;AAAA;;;;cAMI,uBAAA;;;;iBAKG,8BAAA,CAA+B,cAAA,YAA0B,mBAAmB;;;;;;cAS/E,gBAAA;EJ4JM;EI1JjB,SAAA,GAAY,GAAA,EAAK,CAAA;EJmLsB;EIjLvC,UAAA,GAAa,GAAA;EJiL2B;EI/KxC,MAAA,GAAS,GAAA;EJwLK;EItLd,QAAA,EAAU,GAAA;;EJuLA;;;;;EIzKV,UAAA,CAAW,WAAA;EJyKX;;;;;EIhKA,KAAA,CAAA;EJmKgC;AAAA;AAkClC;;;EI1LE,YAAA,CAAA;AAAA;AJoMF;;;AAAA,iBI5LgB,qBAAA,GAAA,CAAA,GAA4B,gBAAgB,CAAC,CAAA;AJ4LQ;;;;ACnUrE;ADmUqE,iBInLrD,kBAAA,CACd,OAAA,EAAS,QAAA,EAAU,GAAA,EAAK,IAAA,IACxB,OAAA,GAAU,GAAA,EAAK,GAAA,eACb,GAAA,EAAK,IAAA;;;AHnJ6D;AAatE;;iBG2KsB,aAAA,GAAA,CACpB,MAAA,EAAQ,aAAA,EACR,QAAA,GAAW,GAAA,EAAK,IAAA,aAChB,QAAA,GAAW,QAAA,EAAU,QAAA,EAAU,GAAA,EAAK,GAAA,KAAQ,CAAA;EAAM,QAAA;AAAA,GAClD,MAAA,EAAQ,mBAAA,GACP,OAAA,CAAQ,gBAAA,CAAiB,CAAA;AHvK5B;;;;AAAyB;AAAzB,iBG+OsB,YAAA,CACpB,MAAA,EAAQ,aAAA,EACR,QAAA,GAAW,GAAA,EAAK,IAAA,EAAM,QAAA,aACtB,OAAA,aACC,OAAA,EAAS,GAAA,EAAK,KAAA;;;AJjQkC;AAkCnD;;;;AAlCmD,iBKxB7B,eAAA,CAAgB,MAAA,EAAQ,aAAA,EAAe,IAAA,EAAM,IAAA,GAAO,OAAA;;;ALwBvB;AAkCnD;;AAlCmD,UMblC,gBAAA;EACf,YAAA;EACA,UAAA;EACA,OAAA;EACA,SAAA;EACA,gBAAA;EACA,OAAA;AAAA;;;;UAMe,eAAA;EACf,OAAA,EAAS,IAAA;EACT,SAAA,EAAW,IAAI;EACf,UAAA;AAAA;;;;;;iBAsFoB,QAAA,CACpB,MAAA,EAAQ,aAAA,EACR,OAAA,EAAS,gBAAA,EACT,GAAA,WACC,OAAA,CAAQ,eAAA;;;;AN5FwC;AAkCnD;UOnCiB,kBAAA;EACf,YAAA;EACA,OAAA;EACA,QAAA;EACA,cAAA;EACA,OAAA;EACA,OAAA;AAAA;;;;UAMe,iBAAA;EACf,QAAA;EACA,QAAA;EACA,MAAA;EACA,QAAA;AAAA;;;;;;APqE2E;AA4C7E;iBOqnBsB,QAAA,CACpB,MAAA,EAAQ,aAAA,EACR,OAAA,EAAS,kBAAA,EACT,GAAA,WACC,OAAA,CAAQ,iBAAA;;;APvtBgD;AAsB3D;;AAtB2D,UQlC1C,kBAAA;EACf,YAAA;EACA,OAAA;EACA,QAAA;EACA,cAAA;EACA,OAAA;EACA,OAAA;AAAA;;;;UAMe,iBAAA;EACf,QAAA;EACA,QAAA;EACA,MAAA;EACA,QAAA;EACA,WAAA;AAAA;;;;;;UAQe,kBAAA;EACf,QAAA,GAAW,GAAA;EACX,gBAAA,EAAkB,IAAI;AAAA;;;;;ARwGE;iBQrDV,gCAAA,CACd,QAAA,EAAU,QAAA,EACV,eAAA,EAAiB,WAAA,EACjB,eAAA,EAAiB,IAAA,EACjB,cAAA,EAAgB,GAAA,GACf,kBAAA;EAAuB,QAAA;AAAA;;;;;;iBAmSJ,qBAAA,CACpB,MAAA,EAAQ,aAAA,EACR,QAAA,EAAU,QAAA,EACV,eAAA,EAAiB,eAAA,EACjB,eAAA,EAAiB,WAAA,EACjB,eAAA,EAAiB,IAAA,EACjB,OAAA,uBACC,OAAA,CAAQ,gBAAA,CAAiB,kBAAA;ARlM6C;AA6BzE;;;;AA7ByE,iBQ+NzD,qBAAA,CACd,YAAA,UACA,OAAA,EAAS,IAAA,EACT,SAAA,GAAY,GAAA,EAAK,kBAAA;;;;;;iBAwCH,sCAAA,CACd,QAAA,EAAU,QAAA,EACV,YAAA,UACA,OAAA,EAAS,IAAA,EACT,SAAA,GAAY,GAAA,EAAK,kBAAA;;;;;;iBAsDH,kCAAA,CACd,MAAA,EAAQ,WAAA,EACR,OAAA,EAAS,IAAA,EACT,YAAA,EAAc,IAAA,EACd,QAAA,GAAW,GAAA,eACV,aAAA;ARxSgB;AASnB;;;;AATmB,iBQyZG,gCAAA,CACpB,MAAA,EAAQ,aAAA,EACR,QAAA,EAAU,QAAA,EACV,YAAA,UACA,WAAA,EAAa,WAAA,EACb,OAAA,EAAS,IAAA,EACT,SAAA,GAAY,GAAA,EAAK,kBAAA,KACjB,OAAA,YACC,OAAA;;;;;;;;iBAgKmB,QAAA,CACpB,MAAA,EAAQ,aAAA,EACR,OAAA,EAAS,kBAAA,EACT,GAAA,WACC,OAAA,CAAQ,iBAAA;;;;ARjyBwC;AAkCnD;USxCiB,oBAAA;EACf,YAAA;EACA,OAAA;EACA,QAAA;EACA,cAAA;EACA,OAAA;AAAA;;;;UAMe,mBAAA;EACf,YAAA;EACA,SAAA;EACA,QAAA;EACA,MAAA;EACA,QAAA;AAAA;;;;;;AT0E2E;AA4C7E;iBSqPsB,UAAA,CACpB,MAAA,EAAQ,aAAA,EACR,OAAA,EAAS,oBAAA,EACT,GAAA,WACC,OAAA,CAAQ,mBAAA;AAAA;;;;;;;ATvVgD;UW3C1C,iBAAA;EACf,YAAA;EACA,cAAA;EACA,UAAA;EACA,IAAA;EACA,MAAA;EACA,MAAA;EACA,gBAAA,GAAmB,gBAAgB;EACnC,OAAA;AAAA;;;;UAMe,gBAAA;EACf,OAAA;EACA,SAAA;EACA,UAAA;EACA,OAAA;EACA,UAAA;EACA,YAAA;EACA,UAAA;EACA,eAAA;EACA,gBAAA;AAAA;;;;;;UAQe,aAAA;EACf,UAAA,EAAY,aAAA;EACZ,YAAA,EAAc,WAAW;AAAA;AX2GD;AAwD1B;;;;AAxD0B,iBWnGJ,qBAAA,CACpB,SAAA,EAAW,gBAAA,cACX,MAAA,UACA,OAAA,YACC,OAAA,CAAQ,QAAA;;;;;AXuJ8D;iBW3GzD,mBAAA,CACd,MAAA,EAAQ,QAAA,EACR,GAAA,EAAK,IAAA,EACL,QAAA,EAAU,QAAA,EACV,SAAA,EAAW,WAAA,EACX,cAAA,GAAiB,WAAA,GAChB,aAAA;;;;;;;;iBAqHmB,SAAA,CACpB,OAAA,EAAS,aAAA,cACT,OAAA,EAAS,iBAAA,EACT,GAAA,WACC,OAAA,CAAQ,gBAAA;;;;AX/MwC;AAkCnD;UY3BiB,gBAAA;EACf,YAAA;EACA,cAAA;EACA,YAAA;EACA,OAAA;EACA,YAAA;EACA,MAAA;EACA,MAAA;EACA,gBAAA,GAAmB,gBAAgB;EACnC,OAAA;AAAA;;AZwCsE;AA4BxE;UY9DiB,eAAA;EACf,QAAA;EACA,aAAA;EACA,UAAA;AAAA;;;;AZ2D2E;AA4C7E;;;iBYiEsB,QAAA,CACpB,OAAA,EAAS,aAAA,cACT,OAAA,EAAS,gBAAA,EACT,GAAA,WACC,OAAA,CAAQ,eAAA;;;;AZrMwC;AAkCnD;UalCiB,gBAAA;EACf,YAAA;EACA,OAAA;EACA,cAAA;EACA,OAAA;EACA,gBAAA,GAAmB,gBAAgB;EACnC,OAAA;AAAA;;;;UAMe,eAAA;EACf,aAAA;EACA,UAAU;AAAA;;;;;;;;AbsEiE;iBa0TvD,QAAA,CACpB,OAAA,EAAS,aAAA,cACT,OAAA,EAAS,gBAAA,EACT,GAAA,WACC,OAAA,CAAQ,eAAA;;;;AblZwC;AAkCnD;Uc/BiB,kBAAA;EACf,YAAA;EACA,OAAA;EACA,cAAA;EACA,OAAA;EACA,gBAAA,GAAmB,gBAAgB;EACnC,OAAA;AAAA;;;;UAMe,iBAAA;EACf,YAAA;EACA,cAAA;EACA,oBAAA;AAAA;;;;;;;AdkE2E;AA4C7E;iBcuLsB,UAAA,CACpB,OAAA,EAAS,aAAA,cACT,OAAA,EAAS,kBAAA,EACT,GAAA,WACC,OAAA,CAAQ,iBAAA;AAAA;;;;;;;;;Ad3TwC;AAkCnD;;;;AAA2D;iBiBxD3C,uBAAA,CAAwB,YAAA,UAAsB,UAAkB;;;;;;;;iBAWhE,eAAA,CACd,YAAA,UACA,UAAA,UACA,YAAA;AjB4FF;;;;;;;;AAAA,ciB/Ea,mBAAA;EAAA,iBACM,SAAA;EAAA,QAEV,WAAA,CAAA;EjBwH0B;;;;;EAAA,OiB/G1B,GAAA,CAAA,GAAO,mBAAA;EjBkHU;;;;;EiBxGxB,YAAA,CACE,SAAA,EAAW,sBAAA,EACX,MAAA,EAAQ,sBAAA,GACP,mBAAA;EjBqGqB;AAAA;AAwD1B;;;EiBnJE,QAAA,CAAA,GAAY,QAAA;EjBmJ8B;;;;;AAA6B;AA6BzE;EA7B4C,OiBxInC,YAAA,CAAa,QAAA,EAAU,QAAA,GAAW,mBAAA;;;;;;EAYzC,UAAA,CAAA,GAAc,QAAA;AAAA;;;;AjB7B2C;AAsB3D;;;UkBtDiB,YAAA;EACf,SAAA,EAAW,IAAA;EACX,SAAA,EAAW,IAAA;EACX,WAAA,EAAa,GAAA,SAAY,IAAA;EACzB,UAAA,EAAY,GAAA,SAAY,IAAA;AAAA;AlB8E1B;;;;;AAAA,iBkBtEgB,kBAAA,CAAmB,YAAA,EAAc,gBAAA,KAAqB,YAAY;;;;AlBsEL;AA4C7E;iBkBvFgB,mBAAA,CAAoB,WAAA,EAAa,WAAA,EAAa,KAAA,EAAO,WAAW;;;;;;iBAiBhE,wBAAA,CACd,YAAA,EAAc,gBAAA,IACd,KAAA,EAAO,WAAA,EACP,QAAA,EAAU,QAAA,GACT,WAAA;;;;;;UA4Bc,iBAAA;EACf,KAAA,EAAO,YAAA;EACP,OAAA,EAAS,IAAA;EACT,cAAA,EAAgB,QAAA;EAChB,WAAA,EAAa,WAAA;EACb,KAAA,EAAO,WAAA;EACP,QAAA,EAAU,QAAA;EACV,YAAA,EAAc,gBAAA;EACd,UAAA,EAAY,IAAA;AAAA;;AlByF2D;AA6BzE;;;iBkB9GgB,sBAAA,CAAuB,GAAA,EAAK,iBAAA,GAAoB,aAAa;;;;;;iBA2D7D,qBAAA,CACd,KAAA,EAAO,YAAA,EACP,OAAA,EAAS,IAAA,EACT,WAAA,EAAa,WAAA,EACb,YAAA,EAAc,gBAAA,IACd,cAAA,EAAgB,QAAA,GACf,MAAA;;;;;;iBAmCa,mBAAA,CAAoB,UAAA,UAAoB,SAAA,EAAW,MAAM;;AlBctD;AASnB;;;iBkBRgB,oBAAA,CAAqB,QAAA,WAAmB,QAAQ;;;;UAsB/C,iBAAA;EACf,YAAA;EACA,OAAA;EACA,UAAA;EACA,SAAA;EACA,OAAA;EACA,OAAA;AAAA;;;AlBhBiB;UkBsBF,gBAAA;EACf,SAAA;EACA,SAAS;AAAA;AlBC6D;AASxE;;;;;;AATwE,iBkBalD,MAAA,CACpB,MAAA,EAAQ,aAAA,cACR,OAAA,EAAS,iBAAA,EACT,GAAA,WACC,OAAA,CAAQ,gBAAA;;;AlBjPgD;AAsB3D;;AAtB2D,UmBrC1C,mBAAA;EACf,YAAA;EACA,OAAA;EACA,SAAA;EACA,QAAA;EACA,cAAA;EACA,OAAA;EACA,YAAA;AAAA;;;;UAMe,kBAAA;EACf,QAAA;EACA,QAAA;EACA,MAAA;EACA,QAAA;AAAA;;;;;;UAQe,sBAAA;EnB6GS;EmB3GxB,WAAA;EnByGA;EmBvGA,eAAA,EAAiB,IAAI;AAAA;;;AnByGG;AAwD1B;;UmBzJiB,gBAAA;EACf,UAAA,EAAY,IAAA;EACZ,SAAA,EAAW,IAAI;AAAA;;;;AnBuJwD;AA6BzE;UmB5KiB,UAAA;EACf,OAAA,EAAS,IAAA;EACT,QAAA;EACA,YAAA,EAAc,GAAA,SAAY,gBAAA;AAAA;;;;;;iBA6GZ,gCAAA,CACd,QAAA,EAAU,QAAA,EACV,eAAA,EAAiB,WAAA,EACjB,cAAA,EAAgB,GAAA,EAChB,iBAAA,EAAmB,IAAA,GAClB,sBAAA;;;;;;iBA+DmB,0BAAA,CACpB,MAAA,EAAQ,aAAA,EACR,QAAA,EAAU,QAAA,EACV,UAAA,EAAY,UAAA,EACZ,WAAA,EAAa,WAAA,EACb,SAAA,EAAW,IAAA,EACX,OAAA,YACC,OAAA,CAAQ,gBAAA,CAAiB,sBAAA;AnBF5B;;;;;AAAA,iBmBsCgB,+BAAA,CACd,MAAA,EAAQ,WAAA,EACR,QAAA,EAAU,IAAA,EACV,SAAA,EAAW,IAAA,EACX,YAAA,EAAc,IAAA,EACd,WAAA,EAAa,GAAA,oBACZ,aAAA;;;;;;iBAqBmB,6BAAA,CACpB,MAAA,EAAQ,aAAA,EACR,QAAA,EAAU,QAAA,EACV,KAAA,EAAO,WAAA,EACP,UAAA,EAAY,UAAA,EACZ,SAAA,EAAW,IAAA,EACX,UAAA,EAAY,gBAAA,CAAiB,sBAAA,GAC7B,WAAA,EAAa,GAAA,mBACb,YAAA,YACA,OAAA,aACC,OAAA,EAAS,GAAA,EAAK,KAAA;;;;;;iBA+DD,kBAAA,CACd,YAAA,UACA,OAAA,EAAS,IAAA,EACT,SAAA,EAAW,IAAA,EACX,UAAA,EAAY,UAAA,EACZ,WAAA,EAAa,GAAA;AnBlHf;;;;AAAwE;AASxE;;;;AATA,iBmB2JgB,qBAAA,CACd,SAAA,EAAW,QAAA,EACX,WAAA,EAAa,gBAAA,CAAiB,sBAAA,GAC9B,WAAA,EAAa,UAAA;;;;;;;;iBAcO,QAAA,CACpB,MAAA,EAAQ,aAAA,EACR,OAAA,EAAS,mBAAA,EACT,GAAA,WACC,OAAA,CAAQ,kBAAA;;;;AnBlbwC;AAkCnD;UoBvBiB,mBAAA;EACf,YAAA;EACA,OAAA;EACA,SAAA;EACA,QAAA;EACA,cAAA;EACA,eAAA;EACA,OAAA;AAAA;;;;UAMe,kBAAA;EACf,SAAA;EACA,cAAA;EACA,QAAA;EACA,QAAA;EACA,MAAA;EACA,QAAA;AAAA;;;ApBsD2E;AA4C7E;;;;iBoB8XsB,QAAA,CACpB,MAAA,EAAQ,aAAA,EACR,OAAA,EAAS,mBAAA,EACT,GAAA,WACC,OAAA,CAAQ,kBAAA;AAAA;;;;;;ApBlgBwC;AAkCnD;UsBlDiB,kBAAA;EACf,YAAA;EtBiD8B;EsB/C9B,OAAA;EACA,cAAA;EtBoEqC;EsBlErC,IAAA;EtBkEsE;EsBhEtE,MAAA;AAAA;;;AtBgEsE;UsB1DvD,iBAAA;EACf,SAAA;EACA,OAAA;EACA,QAAA;EACA,eAAA;EACA,UAAA;EACA,gBAAA;AAAA;;AtBgF2E;AA4C7E;;;;;iBsBUsB,OAAA,CACpB,MAAA,EAAQ,aAAA,cACR,SAAA,EAAW,gBAAA,cACX,OAAA,EAAS,kBAAA,EACT,GAAA,WACC,OAAA,CAAQ,iBAAA;;;;AtB/IwC;AAkCnD;UuBrCiB,iBAAA;EACf,YAAA;EACA,SAAA;EACA,OAAA;EACA,OAAA;EACA,YAAA;EACA,gBAAA,GAAmB,gBAAgB;EACnC,OAAA;AAAA;;;;UAMe,gBAAA;EACf,QAAA;EACA,aAAA;EACA,UAAA;AAAA;;;;;;AvBuE2E;AA4C7E;iBuByIsB,MAAA,CACpB,OAAA,EAAS,aAAA,cACT,OAAA,EAAS,iBAAA,EACT,GAAA,WACC,OAAA,CAAQ,gBAAA;;;;AvB7QwC;AAkCnD;UwBtBiB,iBAAA;EACf,YAAA;EACA,SAAA;EACA,OAAA;EACA,cAAA;EACA,OAAA;EACA,OAAA;AAAA;;;;UAMe,gBAAA;EACf,aAAa;AAAA;;;;;;;;iBA2YO,MAAA,CACpB,MAAA,EAAQ,aAAA,EACR,OAAA,EAAS,iBAAA,EACT,GAAA,WACC,OAAA,CAAQ,gBAAA;;;;AxBxawC;AAkCnD;UyB1BiB,mBAAA;EACf,YAAA;EACA,SAAA;EACA,OAAA;EACA,cAAA;EACA,OAAA;AAAA;;;;UAMe,kBAAA;EACf,SAAA;EACA,cAAc;AAAA;;;;;;;;iBA4pBM,QAAA,CACpB,MAAA,EAAQ,aAAA,EACR,OAAA,EAAS,mBAAA,EACT,GAAA,WACC,OAAA,CAAQ,kBAAA;AAAA;;;;;;;;;AzBrrBwC;AAkCnD;U4B7DiB,eAAA;;EAEf,WAAA;E5B2DyD;E4BzDzD,OAAA;E5B+EqC;E4B7ErC,YAAA;AAAA;;;;UAMe,cAAA;EACf,OAAA,EAAS,YAAY;AAAA;;;;;;;;iBA0BP,QAAA,CAAS,OAAA,EAAS,eAAA,EAAiB,GAAA,WAAc,cAAc;;;;A5BZ5B;AAkCnD;U6B7DiB,qBAAA;;EAEf,WAAA;E7B2DyD;E6BzDzD,OAAA;E7B+EqC;E6B7ErC,YAAA;AAAA;;;;UAMe,oBAAA;EACf,OAAA,EAAS,UAAU;AAAA;;;;;;;;iBA0BL,cAAA,CAAe,OAAA,EAAS,qBAAA,EAAuB,GAAA,WAAc,oBAAoB;AAAA;;;A7BZ9C;AAkCnD;;;;AAA2D;AAlCR,iB8BnBnC,oBAAA,CAAqB,QAAA,sBAA8B,GAAW"}

package/dist/{index-B3c-80VS.d.cts → index-BaUVw4b1.d.mts}

@@ -1,7 +1,7 @@
 import { ARID, XID } from "@bcts/components";
 import { Envelope } from "@bcts/envelope";
-import { XIDDocument } from "@bcts/xid";
 import { SealedRequest, SealedResponse } from "@bcts/gstp";
+import { XIDDocument } from "@bcts/xid";
 
 //#region src/dkg/proposed-participant.d.ts
 /**
@@ -192,4 +192,4 @@ declare class DkgInvitation {
 }
 //#endregion
 export { declined as a, accepted as i, DkgInvitationResult as n, DkgProposedParticipant as o, DkgInvite as r, compareXidBytes as s, DkgInvitation as t };
-//# sourceMappingURL=index-B3c-80VS.d.cts.map
+//# sourceMappingURL=index-BaUVw4b1.d.mts.map