@bcts/frost-hubert 1.0.0-beta.2 → 1.0.0-beta.3
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/dist/bin/frost.mjs +16 -16
- package/dist/cmd/index.mjs +3 -3
- package/dist/{cmd-ChW3eHA8.mjs → cmd-BOzLt8T8.mjs} +20 -20
- package/dist/{cmd-ChW3eHA8.mjs.map → cmd-BOzLt8T8.mjs.map} +1 -1
- package/dist/{common--IfAHVkl.mjs → common-DCyUSYkT.mjs} +2 -2
- package/dist/{common--IfAHVkl.mjs.map → common-DCyUSYkT.mjs.map} +1 -1
- package/dist/{common-4spC1kNw.mjs → common-k2QC6AST.mjs} +2 -2
- package/dist/{common-4spC1kNw.mjs.map → common-k2QC6AST.mjs.map} +1 -1
- package/dist/{finalize-BAwtGCQW.mjs → finalize-BVOveyol.mjs} +4 -4
- package/dist/{finalize-BAwtGCQW.mjs.map → finalize-BVOveyol.mjs.map} +1 -1
- package/dist/{finalize-Bm5RZIox.mjs → finalize-Bg0-BYxV.mjs} +3 -3
- package/dist/{finalize-Bm5RZIox.mjs.map → finalize-Bg0-BYxV.mjs.map} +1 -1
- package/dist/{finalize-CELJsR4C.mjs → finalize-f9hvnJ2R.mjs} +4 -4
- package/dist/{finalize-CELJsR4C.mjs.map → finalize-f9hvnJ2R.mjs.map} +1 -1
- package/dist/frost/index.mjs +1 -1
- package/dist/index.mjs +3 -3
- package/dist/{invite-vRv9LMEE.mjs → invite-B4pfTK_5.mjs} +3 -3
- package/dist/{invite-vRv9LMEE.mjs.map → invite-B4pfTK_5.mjs.map} +1 -1
- package/dist/{invite-DNlTkwzM.mjs → invite-CPLnWY7c.mjs} +4 -4
- package/dist/{invite-DNlTkwzM.mjs.map → invite-CPLnWY7c.mjs.map} +1 -1
- package/dist/{receive-C2Dwb_FQ.mjs → receive-Bl_utFpz.mjs} +4 -4
- package/dist/{receive-C2Dwb_FQ.mjs.map → receive-Bl_utFpz.mjs.map} +1 -1
- package/dist/{receive-Bzn87ahI.mjs → receive-CYmQ_x3S.mjs} +4 -4
- package/dist/{receive-Bzn87ahI.mjs.map → receive-CYmQ_x3S.mjs.map} +1 -1
- package/dist/{registry-ycylEdoc.mjs → registry-DkhElxx1.mjs} +2 -2
- package/dist/{registry-ycylEdoc.mjs.map → registry-DkhElxx1.mjs.map} +1 -1
- package/dist/{rolldown-runtime-z9aeyW2b.mjs → rolldown-runtime-BhDjJH2R.mjs} +1 -1
- package/dist/{round1-BRgDPU4Y.mjs → round1-5RsoUTsC.mjs} +4 -4
- package/dist/{round1-BRgDPU4Y.mjs.map → round1-5RsoUTsC.mjs.map} +1 -1
- package/dist/{round1-_fHip4H1.mjs → round1-B0j_4sJq.mjs} +5 -5
- package/dist/{round1-_fHip4H1.mjs.map → round1-B0j_4sJq.mjs.map} +1 -1
- package/dist/{round1-DSaOFCar.mjs → round1-DC5LcN2C.mjs} +3 -3
- package/dist/{round1-DSaOFCar.mjs.map → round1-DC5LcN2C.mjs.map} +1 -1
- package/dist/{round1-DL4N2QJ5.mjs → round1-I9T20net.mjs} +5 -5
- package/dist/{round1-DL4N2QJ5.mjs.map → round1-I9T20net.mjs.map} +1 -1
- package/dist/{round2-DmQvJDVj.mjs → round2-BmpKBQwi.mjs} +4 -4
- package/dist/{round2-DmQvJDVj.mjs.map → round2-BmpKBQwi.mjs.map} +1 -1
- package/dist/{round2-Cq2SD6F8.mjs → round2-C0SsEt1J.mjs} +3 -3
- package/dist/{round2-Cq2SD6F8.mjs.map → round2-C0SsEt1J.mjs.map} +1 -1
- package/dist/{round2-CU-yTXHT.mjs → round2-CXkgjjyf.mjs} +4 -4
- package/dist/{round2-CU-yTXHT.mjs.map → round2-CXkgjjyf.mjs.map} +1 -1
- package/dist/{round2-BLOgZeAo.mjs → round2-DrZDN8Tt.mjs} +4 -4
- package/dist/{round2-BLOgZeAo.mjs.map → round2-DrZDN8Tt.mjs.map} +1 -1
- package/package.json +10 -10
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"round1-DSaOFCar.mjs","names":["JSONWrapper"],"sources":["../src/cmd/dkg/coordinator/round1.ts"],"sourcesContent":["/**\n * Copyright © 2023-2026 Blockchain Commons, LLC\n * Copyright © 2025-2026 Parity Technologies\n *\n *\n * DKG coordinator round 1 command.\n *\n * Port of cmd/dkg/coordinator/round1.rs from frost-hubert-rust.\n *\n * @module\n */\n\nimport * as fs from \"node:fs\";\nimport * as path from \"node:path\";\n\nimport { ARID, JSON as JSONWrapper, type PrivateKeys, type XID } from \"@bcts/components\";\nimport { CborDate } from \"@bcts/dcbor\";\nimport { Envelope } from \"@bcts/envelope\";\nimport { SealedRequest, SealedResponse } from \"@bcts/gstp\";\nimport type { XIDDocument } from \"@bcts/xid\";\n\nimport {\n type GroupRecord,\n type OwnerRecord,\n PendingRequests,\n Registry,\n resolveRegistryPath,\n} from \"../../../registry/index.js\";\nimport { getWithIndicator, putWithIndicator } from \"../../busy.js\";\nimport { groupStateDir, isVerbose } from \"../../common.js\";\nimport {\n type CollectionResult,\n parallelFetch,\n parallelSend,\n type ParallelFetchConfig,\n} from \"../../parallel.js\";\nimport { type StorageClient } from \"../../storage.js\";\nimport { parseAridUr } from \"../common.js\";\nimport { type DkgRound1Package } from \"../../../frost/index.js\";\nimport { serde } from \"@frosts/ed25519\";\n\n/**\n * Options for the DKG round1 command.\n */\nexport interface DkgRound1Options {\n registryPath?: string;\n groupId: string;\n parallel?: boolean;\n timeoutSeconds?: number;\n preview?: boolean;\n verbose?: boolean;\n}\n\n/**\n * Result of the DKG round1 command.\n */\nexport interface DkgRound1Result {\n accepted: number;\n rejected: number;\n errors: number;\n timeouts: number;\n}\n\n// -----------------------------------------------------------------------------\n// Context and result types\n// -----------------------------------------------------------------------------\n\n/**\n * Context for round 1 collection operations.\n */\ninterface Round1Context {\n client: StorageClient;\n registryPath: string;\n registry: Registry;\n ownerDoc: XIDDocument;\n groupId: ARID;\n}\n\n/**\n * Type alias for a round 1 package entry.\n */\ntype Round1Package = [XID, DkgRound1Package];\n\n/**\n * Type alias for next response ARID entry.\n */\ntype NextResponseArid = [XID, ARID];\n\n/**\n * Result of collecting round 1 responses.\n */\ninterface Round1Collection {\n packages: Round1Package[];\n nextResponseArids: NextResponseArid[];\n displayPath: string;\n}\n\n/**\n * Data extracted from a successful Round 1 response.\n */\ninterface Round1ResponseData {\n package: DkgRound1Package;\n nextResponseArid: ARID;\n}\n\n// -----------------------------------------------------------------------------\n// Validation\n// -----------------------------------------------------------------------------\n\n/**\n * Validate that the owner is the coordinator for this group.\n *\n * Port of `validate_coordinator()` from cmd/dkg/coordinator/round1.rs lines 201-214.\n */\nfunction validateCoordinator(groupRecord: GroupRecord, owner: OwnerRecord): void {\n if (groupRecord.coordinator().xid().urString() !== owner.xid().urString()) {\n throw new Error(\n `Only the coordinator can collect and send Round 2 requests. ` +\n `Coordinator: ${groupRecord.coordinator().xid().urString()}, ` +\n `Owner: ${owner.xid().urString()}`,\n );\n }\n}\n\n// -----------------------------------------------------------------------------\n// Sequential fetch implementation\n// -----------------------------------------------------------------------------\n\n/**\n * Fetch a single round 1 response from storage.\n *\n * Port of `fetch_and_validate_response()` from cmd/dkg/coordinator/round1.rs lines 512-566.\n */\nasync function fetchRound1Response(\n client: StorageClient,\n responseArid: ARID,\n timeout: number | undefined,\n coordinator: XIDDocument,\n expectedGroupId: ARID,\n participantName: string,\n): Promise<[DkgRound1Package, ARID]> {\n const envelope = await getWithIndicator(\n client,\n responseArid,\n participantName,\n timeout,\n isVerbose(),\n );\n\n if (envelope === undefined) {\n throw new Error(\"Response not found in Hubert storage\");\n }\n\n const coordinatorPrivateKeys = coordinator.inceptionPrivateKeys();\n if (coordinatorPrivateKeys === undefined) {\n throw new Error(\"Coordinator XID document has no inception private keys\");\n }\n\n const now = CborDate.now().datetime();\n const sealedResponse = SealedResponse.tryFromEncryptedEnvelope(\n envelope,\n undefined,\n now,\n coordinatorPrivateKeys,\n );\n\n if (sealedResponse.isErr()) {\n const error = sealedResponse.error();\n const reasonEnvelope = error.objectForPredicate(\"reason\");\n const reason =\n reasonEnvelope !== undefined\n ? reasonEnvelope.extractSubject((cbor) => cbor.toText())\n : \"unknown reason\";\n throw new Error(`Participant rejected invite: ${reason}`);\n }\n\n const result = sealedResponse.result();\n validateRound1Response(result, expectedGroupId);\n\n const nextResponseArid = result.tryObjectForPredicate<ARID>(\"response_arid\", (cbor) => {\n return ARID.fromTaggedCbor(cbor);\n });\n\n const round1Package = extractRound1Package(result);\n\n return [round1Package, nextResponseArid];\n}\n\n/**\n * Validate a round 1 response envelope.\n *\n * Port of `validate_round1_response()` from cmd/dkg/coordinator/round1.rs lines 568-586.\n */\nfunction validateRound1Response(result: Envelope, expectedGroupId: ARID): void {\n result.checkSubjectUnit();\n result.checkType(\"dkgRound1Response\");\n\n const groupId = result.tryObjectForPredicate<ARID>(\"group\", (cbor) => {\n return ARID.fromTaggedCbor(cbor);\n });\n\n if (groupId.urString() !== expectedGroupId.urString()) {\n throw new Error(\n `Response group ID ${groupId.urString()} does not match expected ${expectedGroupId.urString()}`,\n );\n }\n}\n\n/**\n * Extract a round 1 package from a response envelope.\n *\n * Port of `extract_round1_package()` from cmd/dkg/coordinator/round1.rs lines 588-598.\n */\nfunction extractRound1Package(result: Envelope): DkgRound1Package {\n const round1Envelope = result.objectForPredicate(\"round1_package\");\n if (round1Envelope === undefined) {\n throw new Error(\"round1_package missing from response\");\n }\n\n const round1Json = round1Envelope.extractSubject<JSONWrapper>((cbor) => {\n return JSONWrapper.fromTaggedCbor(cbor);\n });\n\n const jsonStr = new TextDecoder().decode(round1Json.asBytes());\n const jsonObj = globalThis.JSON.parse(jsonStr) as Record<string, unknown>;\n return serde.round1PackageFromJson(jsonObj);\n}\n\n/**\n * Validate and extract data from a round 1 response (for parallel fetch).\n *\n * Port of `validate_and_extract_round1_response()` from cmd/dkg/coordinator/round1.rs lines 674-707.\n */\nfunction validateAndExtractRound1Response(\n envelope: Envelope,\n coordinatorKeys: PrivateKeys,\n expectedGroupId: ARID,\n): Round1ResponseData | { rejected: string } {\n const now = CborDate.now().datetime();\n const sealedResponse = SealedResponse.tryFromEncryptedEnvelope(\n envelope,\n undefined,\n now,\n coordinatorKeys,\n );\n\n if (sealedResponse.isErr()) {\n const error = sealedResponse.error();\n const reasonEnvelope = error.objectForPredicate(\"reason\");\n const reason =\n reasonEnvelope !== undefined\n ? reasonEnvelope.extractSubject((cbor) => cbor.toText())\n : \"unknown reason\";\n return { rejected: `Participant rejected invite: ${reason}` };\n }\n\n const result = sealedResponse.result();\n validateRound1Response(result, expectedGroupId);\n\n const nextResponseArid = result.tryObjectForPredicate<ARID>(\"response_arid\", (cbor) => {\n return ARID.fromTaggedCbor(cbor);\n });\n\n const pkg = extractRound1Package(result);\n\n return { package: pkg, nextResponseArid };\n}\n\n// -----------------------------------------------------------------------------\n// Parallel collection\n// -----------------------------------------------------------------------------\n\n/**\n * Collect Round 1 responses in parallel with progress display.\n *\n * Port of `collect_round1_responses_parallel()` from cmd/dkg/coordinator/round1.rs lines 636-671.\n */\nasync function collectRound1Parallel(\n client: StorageClient,\n registry: Registry,\n pendingRequests: PendingRequests,\n coordinator: XIDDocument,\n expectedGroupId: ARID,\n timeout: number | undefined,\n): Promise<CollectionResult<Round1ResponseData>> {\n const requests: [XID, ARID, string][] = [];\n for (const [xid, arid] of pendingRequests.iterCollect()) {\n const participant = registry.participant(xid);\n const name = participant?.petName() ?? xid.urString();\n requests.push([xid, arid, name]);\n }\n\n const coordinatorKeys = coordinator.inceptionPrivateKeys();\n if (coordinatorKeys === undefined) {\n throw new Error(\"Missing coordinator private keys\");\n }\n\n const config: ParallelFetchConfig = { timeoutSeconds: timeout };\n const groupId = expectedGroupId;\n\n return parallelFetch(\n client,\n requests,\n (envelope: Envelope, _xid: XID) => {\n return validateAndExtractRound1Response(envelope, coordinatorKeys, groupId);\n },\n config,\n );\n}\n\n// -----------------------------------------------------------------------------\n// Round 2 request building\n// -----------------------------------------------------------------------------\n\n/**\n * Build a Round 2 request for a single participant.\n *\n * Port of `build_round2_request_for_participant()` from cmd/dkg/coordinator/round1.rs lines 604-623.\n */\nfunction buildRound2RequestForParticipant(\n sender: XIDDocument,\n groupId: ARID,\n round1Packages: Round1Package[],\n responseArid: ARID,\n): SealedRequest {\n let request = SealedRequest.new(\"dkgRound2\", ARID.new(), sender)\n .withParameter(\"group\", groupId)\n .withParameter(\"responseArid\", responseArid);\n\n for (const [xid, pkg] of round1Packages) {\n const packageJson = serde.round1PackageToJson(pkg);\n const jsonStr = globalThis.JSON.stringify(packageJson);\n const jsonBytes = new TextEncoder().encode(jsonStr);\n const jsonWrapper = JSONWrapper.fromData(jsonBytes);\n const packageEnvelope = Envelope.new(jsonWrapper).addAssertion(\"participant\", xid);\n request = request.withParameter(\"round1Package\", packageEnvelope);\n }\n\n return request;\n}\n\n/**\n * Dispatch Round 2 requests in parallel.\n *\n * Port of `dispatch_round2_requests_parallel()` from cmd/dkg/coordinator/round1.rs lines 729-844.\n */\nasync function dispatchRound2RequestsParallel(\n client: StorageClient,\n registry: Registry,\n registryPath: string,\n coordinator: XIDDocument,\n groupId: ARID,\n successes: [XID, Round1ResponseData][],\n preview: boolean,\n): Promise<[string, string] | undefined> {\n const signerPrivateKeys = coordinator.inceptionPrivateKeys();\n if (signerPrivateKeys === undefined) {\n throw new Error(\"Coordinator XID document has no signing keys\");\n }\n\n const validUntil = new Date(Date.now() + 60 * 60 * 1000); // 1 hour from now\n\n // Build round1 packages list for request building\n const round1Packages: Round1Package[] = successes.map(([xid, data]) => [xid, data.package]);\n\n // Build participant info and messages\n const messages: [XID, ARID, Envelope, string][] = [];\n const collectArids: [XID, ARID][] = [];\n let previewOutput: [string, string] | undefined;\n\n for (const [xid, data] of successes) {\n const participant = registry.participant(xid);\n if (participant === undefined) {\n throw new Error(`Participant ${xid.urString()} not found in registry`);\n }\n const recipientDoc = participant.xidDocument();\n const participantName = participant.petName() ?? xid.urString();\n\n const collectFromArid = ARID.new();\n collectArids.push([xid, collectFromArid]);\n\n const request = buildRound2RequestForParticipant(\n coordinator,\n groupId,\n round1Packages,\n collectFromArid,\n );\n\n if (preview && previewOutput === undefined) {\n const unsealedEnvelope = request.toEnvelope(validUntil, signerPrivateKeys, undefined);\n previewOutput = [participantName, unsealedEnvelope.urString()];\n }\n\n const sealedEnvelope = request.toEnvelope(validUntil, signerPrivateKeys, recipientDoc);\n\n messages.push([xid, data.nextResponseArid, sealedEnvelope, participantName]);\n }\n\n // Blank line to separate get phase from put phase\n console.error();\n\n // Send all messages in parallel\n const sendResults = await parallelSend(client, messages, isVerbose());\n\n // Check for send failures\n const failures: [XID, string][] = [];\n for (const [xid, err] of sendResults) {\n if (err !== null) {\n failures.push([xid, err.message]);\n }\n }\n\n if (failures.length > 0) {\n for (const [xid, error] of failures) {\n console.error(`Failed to send to ${xid.urString()}: ${error}`);\n }\n throw new Error(`Failed to send Round 2 requests to ${failures.length} participants`);\n }\n\n // Update pending requests for Round 2 collection\n const newPendingRequests = new PendingRequests();\n for (const [xid, collectFromArid] of collectArids) {\n newPendingRequests.addCollectOnly(xid, collectFromArid);\n }\n const groupRecord = registry.groupMut(groupId);\n if (groupRecord === undefined) {\n throw new Error(\"Group not found in registry\");\n }\n groupRecord.setPendingRequests(newPendingRequests);\n registry.save(registryPath);\n\n return previewOutput;\n}\n\n// -----------------------------------------------------------------------------\n// Pending request updates\n// -----------------------------------------------------------------------------\n\n/**\n * Update pending requests from parallel collection results.\n *\n * Port of `update_pending_for_round2_from_collection()` from cmd/dkg/coordinator/round1.rs lines 710-726.\n */\nfunction updatePendingForRound2FromCollection(\n registry: Registry,\n registryPath: string,\n groupId: ARID,\n successes: [XID, Round1ResponseData][],\n): void {\n const newPending = new PendingRequests();\n for (const [xid, data] of successes) {\n newPending.addSendOnly(xid, data.nextResponseArid);\n }\n const groupRecord = registry.groupMut(groupId);\n if (groupRecord === undefined) {\n throw new Error(\"Group not found in registry\");\n }\n groupRecord.setPendingRequests(newPending);\n registry.save(registryPath);\n}\n\n// -----------------------------------------------------------------------------\n// Persistence\n// -----------------------------------------------------------------------------\n\n/**\n * Persist collected round 1 packages to disk.\n *\n * Port of `persist_round1_packages()` from cmd/dkg/coordinator/round1.rs lines 301-340.\n */\nfunction persistRound1Packages(\n registryPath: string,\n groupId: ARID,\n packages: Round1Package[],\n): string {\n const packagesDir = groupStateDir(registryPath, groupId.hex());\n fs.mkdirSync(packagesDir, { recursive: true });\n\n const round1PackagesPath = path.join(packagesDir, \"collected_round1.json\");\n const packagesJson: Record<string, unknown> = {};\n\n for (const [xid, pkg] of packages) {\n packagesJson[xid.urString()] = serde.round1PackageToJson(pkg);\n }\n\n fs.writeFileSync(round1PackagesPath, globalThis.JSON.stringify(packagesJson, null, 2));\n\n // Return display path (relative to cwd if possible)\n const cwd = process.cwd();\n if (round1PackagesPath.startsWith(cwd)) {\n return round1PackagesPath.slice(cwd.length + 1);\n }\n return round1PackagesPath;\n}\n\n// -----------------------------------------------------------------------------\n// Sequential collection\n// -----------------------------------------------------------------------------\n\n/**\n * Fetch all round 1 packages sequentially.\n *\n * Port of `fetch_all_round1_packages()` from cmd/dkg/coordinator/round1.rs lines 243-299.\n */\nasync function fetchAllRound1Packages(\n ctx: Round1Context,\n pendingRequests: PendingRequests,\n timeout: number | undefined,\n): Promise<[Round1Package[], NextResponseArid[]]> {\n const round1Packages: Round1Package[] = [];\n const nextResponseArids: NextResponseArid[] = [];\n const errors: [XID, string][] = [];\n\n for (const [participantXid, collectFromArid] of pendingRequests.iterCollect()) {\n const participant = ctx.registry.participant(participantXid);\n const participantName = participant?.petName() ?? participantXid.urString();\n\n try {\n const [pkg, nextArid] = await fetchRound1Response(\n ctx.client,\n collectFromArid,\n timeout,\n ctx.ownerDoc,\n ctx.groupId,\n participantName,\n );\n round1Packages.push([participantXid, pkg]);\n nextResponseArids.push([participantXid, nextArid]);\n } catch (e) {\n errors.push([participantXid, e instanceof Error ? e.message : String(e)]);\n }\n }\n\n if (errors.length > 0) {\n if (isVerbose()) {\n console.error();\n console.error(`Failed to collect from ${errors.length} participants:`);\n }\n for (const [xid, error] of errors) {\n console.error(` ${xid.urString()}: ${error}`);\n }\n throw new Error(\n `Round 1 collection incomplete: ${errors.length} of ${pendingRequests.len()} responses failed`,\n );\n }\n\n return [round1Packages, nextResponseArids];\n}\n\n/**\n * Collect round 1 responses sequentially.\n *\n * Port of `collect_round1_responses()` from cmd/dkg/coordinator/round1.rs lines 220-241.\n */\nasync function collectRound1Responses(\n ctx: Round1Context,\n pendingRequests: PendingRequests,\n timeout: number | undefined,\n): Promise<Round1Collection> {\n if (isVerbose()) {\n console.error(`Collecting Round 1 responses from ${pendingRequests.len()} participants...`);\n }\n\n const [packages, nextResponseArids] = await fetchAllRound1Packages(ctx, pendingRequests, timeout);\n\n const displayPath = persistRound1Packages(ctx.registryPath, ctx.groupId, packages);\n\n updatePendingForRound2(ctx, nextResponseArids);\n\n return { packages, nextResponseArids, displayPath };\n}\n\n/**\n * Update pending requests for round 2 (sequential path).\n *\n * Port of `update_pending_for_round2()` from cmd/dkg/coordinator/round1.rs lines 342-357.\n */\nfunction updatePendingForRound2(ctx: Round1Context, nextResponseArids: NextResponseArid[]): void {\n const newPending = new PendingRequests();\n for (const [xid, sendToArid] of nextResponseArids) {\n newPending.addSendOnly(xid, sendToArid);\n }\n const groupRecord = ctx.registry.groupMut(ctx.groupId);\n if (groupRecord === undefined) {\n throw new Error(\"Group not found in registry\");\n }\n groupRecord.setPendingRequests(newPending);\n ctx.registry.save(ctx.registryPath);\n}\n\n// -----------------------------------------------------------------------------\n// Round 2 dispatch (sequential)\n// -----------------------------------------------------------------------------\n\n/**\n * Build participant info for round 2 dispatch.\n *\n * Port of `build_round2_participant_info()` from cmd/dkg/coordinator/round1.rs lines 438-458.\n */\nfunction buildRound2ParticipantInfo(\n registry: Registry,\n nextResponseArids: NextResponseArid[],\n): [XID, XIDDocument, ARID, ARID][] {\n return nextResponseArids.map(([xid, sendToArid]) => {\n const participant = registry.participant(xid);\n if (participant === undefined) {\n throw new Error(`Participant ${xid.urString()} not found in registry`);\n }\n const doc = participant.xidDocument();\n const collectFromArid = ARID.new();\n return [xid, doc, sendToArid, collectFromArid];\n });\n}\n\n/**\n * Update pending for round 2 collection (sequential path).\n *\n * Port of `update_pending_for_round2_collection()` from cmd/dkg/coordinator/round1.rs lines 460-475.\n */\nfunction updatePendingForRound2Collection(\n ctx: Round1Context,\n participantInfo: [XID, XIDDocument, ARID, ARID][],\n): void {\n const newPendingRequests = new PendingRequests();\n for (const [xid, , , collectFromArid] of participantInfo) {\n newPendingRequests.addCollectOnly(xid, collectFromArid);\n }\n const groupRecord = ctx.registry.groupMut(ctx.groupId);\n if (groupRecord === undefined) {\n throw new Error(\"Group not found in registry\");\n }\n groupRecord.setPendingRequests(newPendingRequests);\n ctx.registry.save(ctx.registryPath);\n}\n\n/**\n * Dispatch Round 2 requests sequentially.\n *\n * Port of `dispatch_round2_requests()` from cmd/dkg/coordinator/round1.rs lines 363-436.\n */\nasync function dispatchRound2Requests(\n ctx: Round1Context,\n collection: Round1Collection,\n preview: boolean,\n): Promise<[string, string] | undefined> {\n const signerPrivateKeys = ctx.ownerDoc.inceptionPrivateKeys();\n if (signerPrivateKeys === undefined) {\n throw new Error(\"Coordinator XID document has no signing keys\");\n }\n\n const validUntil = new Date(Date.now() + 60 * 60 * 1000); // 1 hour from now\n\n const participantInfo = buildRound2ParticipantInfo(ctx.registry, collection.nextResponseArids);\n\n if (isVerbose()) {\n console.error(`Sending Round 2 requests to ${participantInfo.length} participants...`);\n } else {\n // Blank line to separate get phase from put phase\n console.error();\n }\n\n let previewOutput: [string, string] | undefined;\n\n for (const [xid, recipientDoc, sendToArid, collectFromArid] of participantInfo) {\n const participant = ctx.registry.participant(xid);\n const participantName = participant?.petName() ?? xid.urString();\n\n const request = buildRound2RequestForParticipant(\n ctx.ownerDoc,\n ctx.groupId,\n collection.packages,\n collectFromArid,\n );\n\n if (preview && previewOutput === undefined) {\n const unsealedEnvelope = request.toEnvelope(validUntil, signerPrivateKeys, undefined);\n previewOutput = [participantName, unsealedEnvelope.urString()];\n }\n\n const sealedEnvelope = request.toEnvelope(validUntil, signerPrivateKeys, recipientDoc);\n\n await putWithIndicator(ctx.client, sendToArid, sealedEnvelope, participantName, isVerbose());\n }\n\n updatePendingForRound2Collection(ctx, participantInfo);\n\n return previewOutput;\n}\n\n// -----------------------------------------------------------------------------\n// Output\n// -----------------------------------------------------------------------------\n\n/**\n * Print summary for sequential collection.\n *\n * Port of `print_summary()` from cmd/dkg/coordinator/round1.rs lines 481-506.\n */\nfunction printSummary(collection: Round1Collection, preview: [string, string] | undefined): void {\n if (preview !== undefined) {\n const [participantName, ur] = preview;\n if (isVerbose()) {\n console.error(`# Round 2 preview for ${participantName}`);\n console.error();\n }\n console.error(\n `Collected ${collection.packages.length} Round 1 packages to ${collection.displayPath} ` +\n `and sent ${collection.nextResponseArids.length} Round 2 requests.`,\n );\n console.log(ur);\n } else if (isVerbose()) {\n console.error();\n console.error(\n `Collected ${collection.packages.length} Round 1 packages to ${collection.displayPath} ` +\n `and sent ${collection.nextResponseArids.length} Round 2 requests.`,\n );\n }\n}\n\n/**\n * Print summary for parallel collection.\n *\n * Port of `print_summary_parallel()` from cmd/dkg/coordinator/round1.rs lines 847-901.\n */\nfunction printSummaryParallel(\n collection: CollectionResult<Round1ResponseData>,\n displayPath: string,\n preview: [string, string] | undefined,\n): void {\n // Report any failures\n if (collection.rejections.length > 0) {\n console.error();\n console.error(\"Rejections:\");\n for (const [xid, reason] of collection.rejections) {\n console.error(` ${xid.urString()}: ${reason}`);\n }\n }\n if (collection.errors.length > 0) {\n console.error();\n console.error(\"Errors:\");\n for (const [xid, error] of collection.errors) {\n console.error(` ${xid.urString()}: ${error}`);\n }\n }\n if (collection.timeouts.length > 0) {\n console.error();\n console.error(\"Timeouts:\");\n for (const xid of collection.timeouts) {\n console.error(` ${xid.urString()}`);\n }\n }\n\n if (!collection.allSucceeded()) {\n console.error();\n bailWithCollectionSummary(collection);\n }\n\n if (preview !== undefined) {\n const [participantName, ur] = preview;\n if (isVerbose()) {\n console.error(`# Round 2 preview for ${participantName}`);\n console.error();\n }\n console.error(\n `Collected ${collection.successes.length} Round 1 packages to ${displayPath} ` +\n `and sent ${collection.successes.length} Round 2 requests.`,\n );\n console.log(ur);\n } else if (isVerbose()) {\n console.error();\n console.error(\n `Collected ${collection.successes.length} Round 1 packages to ${displayPath} ` +\n `and sent ${collection.successes.length} Round 2 requests.`,\n );\n }\n}\n\n/**\n * Print collection summary and throw error.\n *\n * Port of `bail_with_collection_summary()` from cmd/dkg/coordinator/round1.rs lines 903-913.\n */\nfunction bailWithCollectionSummary(collection: CollectionResult<Round1ResponseData>): never {\n const msg =\n `Round 1 collection incomplete: ${collection.successes.length} succeeded, ` +\n `${collection.rejections.length} rejected, ${collection.errors.length} errors, ` +\n `${collection.timeouts.length} timeouts`;\n console.error(msg);\n throw new Error(msg);\n}\n\n// -----------------------------------------------------------------------------\n// Main entry point\n// -----------------------------------------------------------------------------\n\n/**\n * Execute the DKG coordinator round 1 command.\n *\n * Collects commitment packages from participants.\n *\n * Port of `CommandArgs::exec()` from cmd/dkg/coordinator/round1.rs lines 59-173.\n */\nexport async function round1(\n client: StorageClient,\n options: DkgRound1Options,\n cwd: string,\n): Promise<DkgRound1Result> {\n const registryPath = resolveRegistryPath(options.registryPath, cwd);\n const registry = Registry.load(registryPath);\n\n const owner = registry.owner();\n if (owner === undefined) {\n throw new Error(\"Registry owner is required\");\n }\n const ownerDoc = owner.xidDocument();\n\n const groupId = parseAridUr(options.groupId);\n const groupRecord = registry.group(groupId);\n\n if (groupRecord === undefined) {\n throw new Error(`Group ${options.groupId} not found in registry`);\n }\n\n validateCoordinator(groupRecord, owner);\n\n const pendingRequests = groupRecord.pendingRequests();\n if (pendingRequests.isEmpty()) {\n throw new Error(\"No pending requests for this group. Round 1 may already be collected.\");\n }\n\n if (options.parallel === true) {\n // Parallel path with progress display\n const collection = await collectRound1Parallel(\n client,\n registry,\n pendingRequests,\n ownerDoc,\n groupId,\n options.timeoutSeconds,\n );\n\n // Extract packages for persistence\n const packages: Round1Package[] = collection.successes.map(([xid, data]) => [\n xid,\n data.package,\n ]);\n\n const displayPath = persistRound1Packages(registryPath, groupId, packages);\n\n updatePendingForRound2FromCollection(registry, registryPath, groupId, collection.successes);\n\n const preview = await dispatchRound2RequestsParallel(\n client,\n registry,\n registryPath,\n ownerDoc,\n groupId,\n collection.successes,\n options.preview ?? false,\n );\n\n printSummaryParallel(collection, displayPath, preview);\n\n return {\n accepted: collection.successes.length,\n rejected: collection.rejections.length,\n errors: collection.errors.length,\n timeouts: collection.timeouts.length,\n };\n } else {\n // Sequential path (original behavior)\n const ctx: Round1Context = {\n client,\n registryPath,\n registry,\n ownerDoc,\n groupId,\n };\n\n const collection = await collectRound1Responses(ctx, pendingRequests, options.timeoutSeconds);\n\n const preview = await dispatchRound2Requests(ctx, collection, options.preview ?? false);\n\n printSummary(collection, preview);\n\n return {\n accepted: collection.packages.length,\n rejected: 0,\n errors: 0,\n timeouts: 0,\n };\n }\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAkHA,SAAS,oBAAoB,aAA0B,OAA0B;CAC/E,IAAI,YAAY,YAAY,CAAC,CAAC,IAAI,CAAC,CAAC,SAAS,MAAM,MAAM,IAAI,CAAC,CAAC,SAAS,GACtE,MAAM,IAAI,MACR,4EACkB,YAAY,YAAY,CAAC,CAAC,IAAI,CAAC,CAAC,SAAS,EAAE,WACjD,MAAM,IAAI,CAAC,CAAC,SAAS,GACnC;AAEJ;;;;;;AAWA,eAAe,oBACb,QACA,cACA,SACA,aACA,iBACA,iBACmC;CACnC,MAAM,WAAW,MAAM,iBACrB,QACA,cACA,iBACA,SACA,UAAU,CACZ;CAEA,IAAI,aAAa,KAAA,GACf,MAAM,IAAI,MAAM,sCAAsC;CAGxD,MAAM,yBAAyB,YAAY,qBAAqB;CAChE,IAAI,2BAA2B,KAAA,GAC7B,MAAM,IAAI,MAAM,wDAAwD;CAG1E,MAAM,MAAM,SAAS,IAAI,CAAC,CAAC,SAAS;CACpC,MAAM,iBAAiB,eAAe,yBACpC,UACA,KAAA,GACA,KACA,sBACF;CAEA,IAAI,eAAe,MAAM,GAAG;EAE1B,MAAM,iBADQ,eAAe,MACF,CAAC,CAAC,mBAAmB,QAAQ;EACxD,MAAM,SACJ,mBAAmB,KAAA,IACf,eAAe,gBAAgB,SAAS,KAAK,OAAO,CAAC,IACrD;EACN,MAAM,IAAI,MAAM,gCAAgC,QAAQ;CAC1D;CAEA,MAAM,SAAS,eAAe,OAAO;CACrC,uBAAuB,QAAQ,eAAe;CAE9C,MAAM,mBAAmB,OAAO,sBAA4B,kBAAkB,SAAS;EACrF,OAAO,KAAK,eAAe,IAAI;CACjC,CAAC;CAID,OAAO,CAFe,qBAAqB,MAEvB,GAAG,gBAAgB;AACzC;;;;;;AAOA,SAAS,uBAAuB,QAAkB,iBAA6B;CAC7E,OAAO,iBAAiB;CACxB,OAAO,UAAU,mBAAmB;CAEpC,MAAM,UAAU,OAAO,sBAA4B,UAAU,SAAS;EACpE,OAAO,KAAK,eAAe,IAAI;CACjC,CAAC;CAED,IAAI,QAAQ,SAAS,MAAM,gBAAgB,SAAS,GAClD,MAAM,IAAI,MACR,qBAAqB,QAAQ,SAAS,EAAE,2BAA2B,gBAAgB,SAAS,GAC9F;AAEJ;;;;;;AAOA,SAAS,qBAAqB,QAAoC;CAChE,MAAM,iBAAiB,OAAO,mBAAmB,gBAAgB;CACjE,IAAI,mBAAmB,KAAA,GACrB,MAAM,IAAI,MAAM,sCAAsC;CAGxD,MAAM,aAAa,eAAe,gBAA6B,SAAS;EACtE,OAAOA,KAAY,eAAe,IAAI;CACxC,CAAC;CAED,MAAM,UAAU,IAAI,YAAY,CAAC,CAAC,OAAO,WAAW,QAAQ,CAAC;CAC7D,MAAM,UAAU,WAAW,KAAK,MAAM,OAAO;CAC7C,OAAO,MAAM,sBAAsB,OAAO;AAC5C;;;;;;AAOA,SAAS,iCACP,UACA,iBACA,iBAC2C;CAC3C,MAAM,MAAM,SAAS,IAAI,CAAC,CAAC,SAAS;CACpC,MAAM,iBAAiB,eAAe,yBACpC,UACA,KAAA,GACA,KACA,eACF;CAEA,IAAI,eAAe,MAAM,GAAG;EAE1B,MAAM,iBADQ,eAAe,MACF,CAAC,CAAC,mBAAmB,QAAQ;EAKxD,OAAO,EAAE,UAAU,gCAHjB,mBAAmB,KAAA,IACf,eAAe,gBAAgB,SAAS,KAAK,OAAO,CAAC,IACrD,mBACsD;CAC9D;CAEA,MAAM,SAAS,eAAe,OAAO;CACrC,uBAAuB,QAAQ,eAAe;CAE9C,MAAM,mBAAmB,OAAO,sBAA4B,kBAAkB,SAAS;EACrF,OAAO,KAAK,eAAe,IAAI;CACjC,CAAC;CAID,OAAO;EAAE,SAFG,qBAAqB,MAEb;EAAG;CAAiB;AAC1C;;;;;;AAWA,eAAe,sBACb,QACA,UACA,iBACA,aACA,iBACA,SAC+C;CAC/C,MAAM,WAAkC,CAAC;CACzC,KAAK,MAAM,CAAC,KAAK,SAAS,gBAAgB,YAAY,GAAG;EAEvD,MAAM,OADc,SAAS,YAAY,GAClB,CAAC,EAAE,QAAQ,KAAK,IAAI,SAAS;EACpD,SAAS,KAAK;GAAC;GAAK;GAAM;EAAI,CAAC;CACjC;CAEA,MAAM,kBAAkB,YAAY,qBAAqB;CACzD,IAAI,oBAAoB,KAAA,GACtB,MAAM,IAAI,MAAM,kCAAkC;CAGpD,MAAM,SAA8B,EAAE,gBAAgB,QAAQ;CAC9D,MAAM,UAAU;CAEhB,OAAO,cACL,QACA,WACC,UAAoB,SAAc;EACjC,OAAO,iCAAiC,UAAU,iBAAiB,OAAO;CAC5E,GACA,MACF;AACF;;;;;;AAWA,SAAS,iCACP,QACA,SACA,gBACA,cACe;CACf,IAAI,UAAU,cAAc,IAAI,aAAa,KAAK,IAAI,GAAG,MAAM,CAAC,CAC7D,cAAc,SAAS,OAAO,CAAC,CAC/B,cAAc,gBAAgB,YAAY;CAE7C,KAAK,MAAM,CAAC,KAAK,QAAQ,gBAAgB;EACvC,MAAM,cAAc,MAAM,oBAAoB,GAAG;EACjD,MAAM,UAAU,WAAW,KAAK,UAAU,WAAW;EACrD,MAAM,YAAY,IAAI,YAAY,CAAC,CAAC,OAAO,OAAO;EAClD,MAAM,cAAcA,KAAY,SAAS,SAAS;EAClD,MAAM,kBAAkB,SAAS,IAAI,WAAW,CAAC,CAAC,aAAa,eAAe,GAAG;EACjF,UAAU,QAAQ,cAAc,iBAAiB,eAAe;CAClE;CAEA,OAAO;AACT;;;;;;AAOA,eAAe,+BACb,QACA,UACA,cACA,aACA,SACA,WACA,SACuC;CACvC,MAAM,oBAAoB,YAAY,qBAAqB;CAC3D,IAAI,sBAAsB,KAAA,GACxB,MAAM,IAAI,MAAM,8CAA8C;CAGhE,MAAM,aAAa,IAAI,KAAK,KAAK,IAAI,IAAI,OAAU,GAAI;CAGvD,MAAM,iBAAkC,UAAU,KAAK,CAAC,KAAK,UAAU,CAAC,KAAK,KAAK,OAAO,CAAC;CAG1F,MAAM,WAA4C,CAAC;CACnD,MAAM,eAA8B,CAAC;CACrC,IAAI;CAEJ,KAAK,MAAM,CAAC,KAAK,SAAS,WAAW;EACnC,MAAM,cAAc,SAAS,YAAY,GAAG;EAC5C,IAAI,gBAAgB,KAAA,GAClB,MAAM,IAAI,MAAM,eAAe,IAAI,SAAS,EAAE,uBAAuB;EAEvE,MAAM,eAAe,YAAY,YAAY;EAC7C,MAAM,kBAAkB,YAAY,QAAQ,KAAK,IAAI,SAAS;EAE9D,MAAM,kBAAkB,KAAK,IAAI;EACjC,aAAa,KAAK,CAAC,KAAK,eAAe,CAAC;EAExC,MAAM,UAAU,iCACd,aACA,SACA,gBACA,eACF;EAEA,IAAI,WAAW,kBAAkB,KAAA,GAE/B,gBAAgB,CAAC,iBADQ,QAAQ,WAAW,YAAY,mBAAmB,KAAA,CAC1B,CAAC,CAAC,SAAS,CAAC;EAG/D,MAAM,iBAAiB,QAAQ,WAAW,YAAY,mBAAmB,YAAY;EAErF,SAAS,KAAK;GAAC;GAAK,KAAK;GAAkB;GAAgB;EAAe,CAAC;CAC7E;CAGA,QAAQ,MAAM;CAGd,MAAM,cAAc,MAAM,aAAa,QAAQ,UAAU,UAAU,CAAC;CAGpE,MAAM,WAA4B,CAAC;CACnC,KAAK,MAAM,CAAC,KAAK,QAAQ,aACvB,IAAI,QAAQ,MACV,SAAS,KAAK,CAAC,KAAK,IAAI,OAAO,CAAC;CAIpC,IAAI,SAAS,SAAS,GAAG;EACvB,KAAK,MAAM,CAAC,KAAK,UAAU,UACzB,QAAQ,MAAM,qBAAqB,IAAI,SAAS,EAAE,IAAI,OAAO;EAE/D,MAAM,IAAI,MAAM,sCAAsC,SAAS,OAAO,cAAc;CACtF;CAGA,MAAM,qBAAqB,IAAI,gBAAgB;CAC/C,KAAK,MAAM,CAAC,KAAK,oBAAoB,cACnC,mBAAmB,eAAe,KAAK,eAAe;CAExD,MAAM,cAAc,SAAS,SAAS,OAAO;CAC7C,IAAI,gBAAgB,KAAA,GAClB,MAAM,IAAI,MAAM,6BAA6B;CAE/C,YAAY,mBAAmB,kBAAkB;CACjD,SAAS,KAAK,YAAY;CAE1B,OAAO;AACT;;;;;;AAWA,SAAS,qCACP,UACA,cACA,SACA,WACM;CACN,MAAM,aAAa,IAAI,gBAAgB;CACvC,KAAK,MAAM,CAAC,KAAK,SAAS,WACxB,WAAW,YAAY,KAAK,KAAK,gBAAgB;CAEnD,MAAM,cAAc,SAAS,SAAS,OAAO;CAC7C,IAAI,gBAAgB,KAAA,GAClB,MAAM,IAAI,MAAM,6BAA6B;CAE/C,YAAY,mBAAmB,UAAU;CACzC,SAAS,KAAK,YAAY;AAC5B;;;;;;AAWA,SAAS,sBACP,cACA,SACA,UACQ;CACR,MAAM,cAAc,cAAc,cAAc,QAAQ,IAAI,CAAC;CAC7D,GAAG,UAAU,aAAa,EAAE,WAAW,KAAK,CAAC;CAE7C,MAAM,qBAAqB,KAAK,KAAK,aAAa,uBAAuB;CACzE,MAAM,eAAwC,CAAC;CAE/C,KAAK,MAAM,CAAC,KAAK,QAAQ,UACvB,aAAa,IAAI,SAAS,KAAK,MAAM,oBAAoB,GAAG;CAG9D,GAAG,cAAc,oBAAoB,WAAW,KAAK,UAAU,cAAc,MAAM,CAAC,CAAC;CAGrF,MAAM,MAAM,QAAQ,IAAI;CACxB,IAAI,mBAAmB,WAAW,GAAG,GACnC,OAAO,mBAAmB,MAAM,IAAI,SAAS,CAAC;CAEhD,OAAO;AACT;;;;;;AAWA,eAAe,uBACb,KACA,iBACA,SACgD;CAChD,MAAM,iBAAkC,CAAC;CACzC,MAAM,oBAAwC,CAAC;CAC/C,MAAM,SAA0B,CAAC;CAEjC,KAAK,MAAM,CAAC,gBAAgB,oBAAoB,gBAAgB,YAAY,GAAG;EAE7E,MAAM,kBADc,IAAI,SAAS,YAAY,cACX,CAAC,EAAE,QAAQ,KAAK,eAAe,SAAS;EAE1E,IAAI;GACF,MAAM,CAAC,KAAK,YAAY,MAAM,oBAC5B,IAAI,QACJ,iBACA,SACA,IAAI,UACJ,IAAI,SACJ,eACF;GACA,eAAe,KAAK,CAAC,gBAAgB,GAAG,CAAC;GACzC,kBAAkB,KAAK,CAAC,gBAAgB,QAAQ,CAAC;EACnD,SAAS,GAAG;GACV,OAAO,KAAK,CAAC,gBAAgB,aAAa,QAAQ,EAAE,UAAU,OAAO,CAAC,CAAC,CAAC;EAC1E;CACF;CAEA,IAAI,OAAO,SAAS,GAAG;EACrB,IAAI,UAAU,GAAG;GACf,QAAQ,MAAM;GACd,QAAQ,MAAM,0BAA0B,OAAO,OAAO,eAAe;EACvE;EACA,KAAK,MAAM,CAAC,KAAK,UAAU,QACzB,QAAQ,MAAM,KAAK,IAAI,SAAS,EAAE,IAAI,OAAO;EAE/C,MAAM,IAAI,MACR,kCAAkC,OAAO,OAAO,MAAM,gBAAgB,IAAI,EAAE,kBAC9E;CACF;CAEA,OAAO,CAAC,gBAAgB,iBAAiB;AAC3C;;;;;;AAOA,eAAe,uBACb,KACA,iBACA,SAC2B;CAC3B,IAAI,UAAU,GACZ,QAAQ,MAAM,qCAAqC,gBAAgB,IAAI,EAAE,iBAAiB;CAG5F,MAAM,CAAC,UAAU,qBAAqB,MAAM,uBAAuB,KAAK,iBAAiB,OAAO;CAEhG,MAAM,cAAc,sBAAsB,IAAI,cAAc,IAAI,SAAS,QAAQ;CAEjF,uBAAuB,KAAK,iBAAiB;CAE7C,OAAO;EAAE;EAAU;EAAmB;CAAY;AACpD;;;;;;AAOA,SAAS,uBAAuB,KAAoB,mBAA6C;CAC/F,MAAM,aAAa,IAAI,gBAAgB;CACvC,KAAK,MAAM,CAAC,KAAK,eAAe,mBAC9B,WAAW,YAAY,KAAK,UAAU;CAExC,MAAM,cAAc,IAAI,SAAS,SAAS,IAAI,OAAO;CACrD,IAAI,gBAAgB,KAAA,GAClB,MAAM,IAAI,MAAM,6BAA6B;CAE/C,YAAY,mBAAmB,UAAU;CACzC,IAAI,SAAS,KAAK,IAAI,YAAY;AACpC;;;;;;AAWA,SAAS,2BACP,UACA,mBACkC;CAClC,OAAO,kBAAkB,KAAK,CAAC,KAAK,gBAAgB;EAClD,MAAM,cAAc,SAAS,YAAY,GAAG;EAC5C,IAAI,gBAAgB,KAAA,GAClB,MAAM,IAAI,MAAM,eAAe,IAAI,SAAS,EAAE,uBAAuB;EAIvE,OAAO;GAAC;GAFI,YAAY,YAET;GAAG;GADM,KAAK,IACe;EAAC;CAC/C,CAAC;AACH;;;;;;AAOA,SAAS,iCACP,KACA,iBACM;CACN,MAAM,qBAAqB,IAAI,gBAAgB;CAC/C,KAAK,MAAM,CAAC,SAAS,oBAAoB,iBACvC,mBAAmB,eAAe,KAAK,eAAe;CAExD,MAAM,cAAc,IAAI,SAAS,SAAS,IAAI,OAAO;CACrD,IAAI,gBAAgB,KAAA,GAClB,MAAM,IAAI,MAAM,6BAA6B;CAE/C,YAAY,mBAAmB,kBAAkB;CACjD,IAAI,SAAS,KAAK,IAAI,YAAY;AACpC;;;;;;AAOA,eAAe,uBACb,KACA,YACA,SACuC;CACvC,MAAM,oBAAoB,IAAI,SAAS,qBAAqB;CAC5D,IAAI,sBAAsB,KAAA,GACxB,MAAM,IAAI,MAAM,8CAA8C;CAGhE,MAAM,aAAa,IAAI,KAAK,KAAK,IAAI,IAAI,OAAU,GAAI;CAEvD,MAAM,kBAAkB,2BAA2B,IAAI,UAAU,WAAW,iBAAiB;CAE7F,IAAI,UAAU,GACZ,QAAQ,MAAM,+BAA+B,gBAAgB,OAAO,iBAAiB;MAGrF,QAAQ,MAAM;CAGhB,IAAI;CAEJ,KAAK,MAAM,CAAC,KAAK,cAAc,YAAY,oBAAoB,iBAAiB;EAE9E,MAAM,kBADc,IAAI,SAAS,YAAY,GACX,CAAC,EAAE,QAAQ,KAAK,IAAI,SAAS;EAE/D,MAAM,UAAU,iCACd,IAAI,UACJ,IAAI,SACJ,WAAW,UACX,eACF;EAEA,IAAI,WAAW,kBAAkB,KAAA,GAE/B,gBAAgB,CAAC,iBADQ,QAAQ,WAAW,YAAY,mBAAmB,KAAA,CAC1B,CAAC,CAAC,SAAS,CAAC;EAG/D,MAAM,iBAAiB,QAAQ,WAAW,YAAY,mBAAmB,YAAY;EAErF,MAAM,iBAAiB,IAAI,QAAQ,YAAY,gBAAgB,iBAAiB,UAAU,CAAC;CAC7F;CAEA,iCAAiC,KAAK,eAAe;CAErD,OAAO;AACT;;;;;;AAWA,SAAS,aAAa,YAA8B,SAA6C;CAC/F,IAAI,YAAY,KAAA,GAAW;EACzB,MAAM,CAAC,iBAAiB,MAAM;EAC9B,IAAI,UAAU,GAAG;GACf,QAAQ,MAAM,yBAAyB,iBAAiB;GACxD,QAAQ,MAAM;EAChB;EACA,QAAQ,MACN,aAAa,WAAW,SAAS,OAAO,uBAAuB,WAAW,YAAY,YACxE,WAAW,kBAAkB,OAAO,mBACpD;EACA,QAAQ,IAAI,EAAE;CAChB,OAAO,IAAI,UAAU,GAAG;EACtB,QAAQ,MAAM;EACd,QAAQ,MACN,aAAa,WAAW,SAAS,OAAO,uBAAuB,WAAW,YAAY,YACxE,WAAW,kBAAkB,OAAO,mBACpD;CACF;AACF;;;;;;AAOA,SAAS,qBACP,YACA,aACA,SACM;CAEN,IAAI,WAAW,WAAW,SAAS,GAAG;EACpC,QAAQ,MAAM;EACd,QAAQ,MAAM,aAAa;EAC3B,KAAK,MAAM,CAAC,KAAK,WAAW,WAAW,YACrC,QAAQ,MAAM,KAAK,IAAI,SAAS,EAAE,IAAI,QAAQ;CAElD;CACA,IAAI,WAAW,OAAO,SAAS,GAAG;EAChC,QAAQ,MAAM;EACd,QAAQ,MAAM,SAAS;EACvB,KAAK,MAAM,CAAC,KAAK,UAAU,WAAW,QACpC,QAAQ,MAAM,KAAK,IAAI,SAAS,EAAE,IAAI,OAAO;CAEjD;CACA,IAAI,WAAW,SAAS,SAAS,GAAG;EAClC,QAAQ,MAAM;EACd,QAAQ,MAAM,WAAW;EACzB,KAAK,MAAM,OAAO,WAAW,UAC3B,QAAQ,MAAM,KAAK,IAAI,SAAS,GAAG;CAEvC;CAEA,IAAI,CAAC,WAAW,aAAa,GAAG;EAC9B,QAAQ,MAAM;EACd,0BAA0B,UAAU;CACtC;CAEA,IAAI,YAAY,KAAA,GAAW;EACzB,MAAM,CAAC,iBAAiB,MAAM;EAC9B,IAAI,UAAU,GAAG;GACf,QAAQ,MAAM,yBAAyB,iBAAiB;GACxD,QAAQ,MAAM;EAChB;EACA,QAAQ,MACN,aAAa,WAAW,UAAU,OAAO,uBAAuB,YAAY,YAC9D,WAAW,UAAU,OAAO,mBAC5C;EACA,QAAQ,IAAI,EAAE;CAChB,OAAO,IAAI,UAAU,GAAG;EACtB,QAAQ,MAAM;EACd,QAAQ,MACN,aAAa,WAAW,UAAU,OAAO,uBAAuB,YAAY,YAC9D,WAAW,UAAU,OAAO,mBAC5C;CACF;AACF;;;;;;AAOA,SAAS,0BAA0B,YAAyD;CAC1F,MAAM,MACJ,kCAAkC,WAAW,UAAU,OAAO,cAC3D,WAAW,WAAW,OAAO,aAAa,WAAW,OAAO,OAAO,WACnE,WAAW,SAAS,OAAO;CAChC,QAAQ,MAAM,GAAG;CACjB,MAAM,IAAI,MAAM,GAAG;AACrB;;;;;;;;AAaA,eAAsB,OACpB,QACA,SACA,KAC0B;CAC1B,MAAM,eAAe,oBAAoB,QAAQ,cAAc,GAAG;CAClE,MAAM,WAAW,SAAS,KAAK,YAAY;CAE3C,MAAM,QAAQ,SAAS,MAAM;CAC7B,IAAI,UAAU,KAAA,GACZ,MAAM,IAAI,MAAM,4BAA4B;CAE9C,MAAM,WAAW,MAAM,YAAY;CAEnC,MAAM,UAAU,YAAY,QAAQ,OAAO;CAC3C,MAAM,cAAc,SAAS,MAAM,OAAO;CAE1C,IAAI,gBAAgB,KAAA,GAClB,MAAM,IAAI,MAAM,SAAS,QAAQ,QAAQ,uBAAuB;CAGlE,oBAAoB,aAAa,KAAK;CAEtC,MAAM,kBAAkB,YAAY,gBAAgB;CACpD,IAAI,gBAAgB,QAAQ,GAC1B,MAAM,IAAI,MAAM,uEAAuE;CAGzF,IAAI,QAAQ,aAAa,MAAM;EAE7B,MAAM,aAAa,MAAM,sBACvB,QACA,UACA,iBACA,UACA,SACA,QAAQ,cACV;EAQA,MAAM,cAAc,sBAAsB,cAAc,SALtB,WAAW,UAAU,KAAK,CAAC,KAAK,UAAU,CAC1E,KACA,KAAK,OACP,CAEwE,CAAC;EAEzE,qCAAqC,UAAU,cAAc,SAAS,WAAW,SAAS;EAY1F,qBAAqB,YAAY,aAAa,MAVxB,+BACpB,QACA,UACA,cACA,UACA,SACA,WAAW,WACX,QAAQ,WAAW,KACrB,CAEqD;EAErD,OAAO;GACL,UAAU,WAAW,UAAU;GAC/B,UAAU,WAAW,WAAW;GAChC,QAAQ,WAAW,OAAO;GAC1B,UAAU,WAAW,SAAS;EAChC;CACF,OAAO;EAEL,MAAM,MAAqB;GACzB;GACA;GACA;GACA;GACA;EACF;EAEA,MAAM,aAAa,MAAM,uBAAuB,KAAK,iBAAiB,QAAQ,cAAc;EAI5F,aAAa,YAAY,MAFH,uBAAuB,KAAK,YAAY,QAAQ,WAAW,KAAK,CAEtD;EAEhC,OAAO;GACL,UAAU,WAAW,SAAS;GAC9B,UAAU;GACV,QAAQ;GACR,UAAU;EACZ;CACF;AACF"}
|
|
1
|
+
{"version":3,"file":"round1-DC5LcN2C.mjs","names":["JSONWrapper"],"sources":["../src/cmd/dkg/coordinator/round1.ts"],"sourcesContent":["/**\n * Copyright © 2023-2026 Blockchain Commons, LLC\n * Copyright © 2025-2026 Parity Technologies\n *\n *\n * DKG coordinator round 1 command.\n *\n * Port of cmd/dkg/coordinator/round1.rs from frost-hubert-rust.\n *\n * @module\n */\n\nimport * as fs from \"node:fs\";\nimport * as path from \"node:path\";\n\nimport { ARID, JSON as JSONWrapper, type PrivateKeys, type XID } from \"@bcts/components\";\nimport { CborDate } from \"@bcts/dcbor\";\nimport { Envelope } from \"@bcts/envelope\";\nimport { SealedRequest, SealedResponse } from \"@bcts/gstp\";\nimport type { XIDDocument } from \"@bcts/xid\";\n\nimport {\n type GroupRecord,\n type OwnerRecord,\n PendingRequests,\n Registry,\n resolveRegistryPath,\n} from \"../../../registry/index.js\";\nimport { getWithIndicator, putWithIndicator } from \"../../busy.js\";\nimport { groupStateDir, isVerbose } from \"../../common.js\";\nimport {\n type CollectionResult,\n parallelFetch,\n parallelSend,\n type ParallelFetchConfig,\n} from \"../../parallel.js\";\nimport { type StorageClient } from \"../../storage.js\";\nimport { parseAridUr } from \"../common.js\";\nimport { type DkgRound1Package } from \"../../../frost/index.js\";\nimport { serde } from \"@frosts/ed25519\";\n\n/**\n * Options for the DKG round1 command.\n */\nexport interface DkgRound1Options {\n registryPath?: string;\n groupId: string;\n parallel?: boolean;\n timeoutSeconds?: number;\n preview?: boolean;\n verbose?: boolean;\n}\n\n/**\n * Result of the DKG round1 command.\n */\nexport interface DkgRound1Result {\n accepted: number;\n rejected: number;\n errors: number;\n timeouts: number;\n}\n\n// -----------------------------------------------------------------------------\n// Context and result types\n// -----------------------------------------------------------------------------\n\n/**\n * Context for round 1 collection operations.\n */\ninterface Round1Context {\n client: StorageClient;\n registryPath: string;\n registry: Registry;\n ownerDoc: XIDDocument;\n groupId: ARID;\n}\n\n/**\n * Type alias for a round 1 package entry.\n */\ntype Round1Package = [XID, DkgRound1Package];\n\n/**\n * Type alias for next response ARID entry.\n */\ntype NextResponseArid = [XID, ARID];\n\n/**\n * Result of collecting round 1 responses.\n */\ninterface Round1Collection {\n packages: Round1Package[];\n nextResponseArids: NextResponseArid[];\n displayPath: string;\n}\n\n/**\n * Data extracted from a successful Round 1 response.\n */\ninterface Round1ResponseData {\n package: DkgRound1Package;\n nextResponseArid: ARID;\n}\n\n// -----------------------------------------------------------------------------\n// Validation\n// -----------------------------------------------------------------------------\n\n/**\n * Validate that the owner is the coordinator for this group.\n *\n * Port of `validate_coordinator()` from cmd/dkg/coordinator/round1.rs lines 201-214.\n */\nfunction validateCoordinator(groupRecord: GroupRecord, owner: OwnerRecord): void {\n if (groupRecord.coordinator().xid().urString() !== owner.xid().urString()) {\n throw new Error(\n `Only the coordinator can collect and send Round 2 requests. ` +\n `Coordinator: ${groupRecord.coordinator().xid().urString()}, ` +\n `Owner: ${owner.xid().urString()}`,\n );\n }\n}\n\n// -----------------------------------------------------------------------------\n// Sequential fetch implementation\n// -----------------------------------------------------------------------------\n\n/**\n * Fetch a single round 1 response from storage.\n *\n * Port of `fetch_and_validate_response()` from cmd/dkg/coordinator/round1.rs lines 512-566.\n */\nasync function fetchRound1Response(\n client: StorageClient,\n responseArid: ARID,\n timeout: number | undefined,\n coordinator: XIDDocument,\n expectedGroupId: ARID,\n participantName: string,\n): Promise<[DkgRound1Package, ARID]> {\n const envelope = await getWithIndicator(\n client,\n responseArid,\n participantName,\n timeout,\n isVerbose(),\n );\n\n if (envelope === undefined) {\n throw new Error(\"Response not found in Hubert storage\");\n }\n\n const coordinatorPrivateKeys = coordinator.inceptionPrivateKeys();\n if (coordinatorPrivateKeys === undefined) {\n throw new Error(\"Coordinator XID document has no inception private keys\");\n }\n\n const now = CborDate.now().datetime();\n const sealedResponse = SealedResponse.tryFromEncryptedEnvelope(\n envelope,\n undefined,\n now,\n coordinatorPrivateKeys,\n );\n\n if (sealedResponse.isErr()) {\n const error = sealedResponse.error();\n const reasonEnvelope = error.objectForPredicate(\"reason\");\n const reason =\n reasonEnvelope !== undefined\n ? reasonEnvelope.extractSubject((cbor) => cbor.toText())\n : \"unknown reason\";\n throw new Error(`Participant rejected invite: ${reason}`);\n }\n\n const result = sealedResponse.result();\n validateRound1Response(result, expectedGroupId);\n\n const nextResponseArid = result.tryObjectForPredicate<ARID>(\"response_arid\", (cbor) => {\n return ARID.fromTaggedCbor(cbor);\n });\n\n const round1Package = extractRound1Package(result);\n\n return [round1Package, nextResponseArid];\n}\n\n/**\n * Validate a round 1 response envelope.\n *\n * Port of `validate_round1_response()` from cmd/dkg/coordinator/round1.rs lines 568-586.\n */\nfunction validateRound1Response(result: Envelope, expectedGroupId: ARID): void {\n result.checkSubjectUnit();\n result.checkType(\"dkgRound1Response\");\n\n const groupId = result.tryObjectForPredicate<ARID>(\"group\", (cbor) => {\n return ARID.fromTaggedCbor(cbor);\n });\n\n if (groupId.urString() !== expectedGroupId.urString()) {\n throw new Error(\n `Response group ID ${groupId.urString()} does not match expected ${expectedGroupId.urString()}`,\n );\n }\n}\n\n/**\n * Extract a round 1 package from a response envelope.\n *\n * Port of `extract_round1_package()` from cmd/dkg/coordinator/round1.rs lines 588-598.\n */\nfunction extractRound1Package(result: Envelope): DkgRound1Package {\n const round1Envelope = result.objectForPredicate(\"round1_package\");\n if (round1Envelope === undefined) {\n throw new Error(\"round1_package missing from response\");\n }\n\n const round1Json = round1Envelope.extractSubject<JSONWrapper>((cbor) => {\n return JSONWrapper.fromTaggedCbor(cbor);\n });\n\n const jsonStr = new TextDecoder().decode(round1Json.asBytes());\n const jsonObj = globalThis.JSON.parse(jsonStr) as Record<string, unknown>;\n return serde.round1PackageFromJson(jsonObj);\n}\n\n/**\n * Validate and extract data from a round 1 response (for parallel fetch).\n *\n * Port of `validate_and_extract_round1_response()` from cmd/dkg/coordinator/round1.rs lines 674-707.\n */\nfunction validateAndExtractRound1Response(\n envelope: Envelope,\n coordinatorKeys: PrivateKeys,\n expectedGroupId: ARID,\n): Round1ResponseData | { rejected: string } {\n const now = CborDate.now().datetime();\n const sealedResponse = SealedResponse.tryFromEncryptedEnvelope(\n envelope,\n undefined,\n now,\n coordinatorKeys,\n );\n\n if (sealedResponse.isErr()) {\n const error = sealedResponse.error();\n const reasonEnvelope = error.objectForPredicate(\"reason\");\n const reason =\n reasonEnvelope !== undefined\n ? reasonEnvelope.extractSubject((cbor) => cbor.toText())\n : \"unknown reason\";\n return { rejected: `Participant rejected invite: ${reason}` };\n }\n\n const result = sealedResponse.result();\n validateRound1Response(result, expectedGroupId);\n\n const nextResponseArid = result.tryObjectForPredicate<ARID>(\"response_arid\", (cbor) => {\n return ARID.fromTaggedCbor(cbor);\n });\n\n const pkg = extractRound1Package(result);\n\n return { package: pkg, nextResponseArid };\n}\n\n// -----------------------------------------------------------------------------\n// Parallel collection\n// -----------------------------------------------------------------------------\n\n/**\n * Collect Round 1 responses in parallel with progress display.\n *\n * Port of `collect_round1_responses_parallel()` from cmd/dkg/coordinator/round1.rs lines 636-671.\n */\nasync function collectRound1Parallel(\n client: StorageClient,\n registry: Registry,\n pendingRequests: PendingRequests,\n coordinator: XIDDocument,\n expectedGroupId: ARID,\n timeout: number | undefined,\n): Promise<CollectionResult<Round1ResponseData>> {\n const requests: [XID, ARID, string][] = [];\n for (const [xid, arid] of pendingRequests.iterCollect()) {\n const participant = registry.participant(xid);\n const name = participant?.petName() ?? xid.urString();\n requests.push([xid, arid, name]);\n }\n\n const coordinatorKeys = coordinator.inceptionPrivateKeys();\n if (coordinatorKeys === undefined) {\n throw new Error(\"Missing coordinator private keys\");\n }\n\n const config: ParallelFetchConfig = { timeoutSeconds: timeout };\n const groupId = expectedGroupId;\n\n return parallelFetch(\n client,\n requests,\n (envelope: Envelope, _xid: XID) => {\n return validateAndExtractRound1Response(envelope, coordinatorKeys, groupId);\n },\n config,\n );\n}\n\n// -----------------------------------------------------------------------------\n// Round 2 request building\n// -----------------------------------------------------------------------------\n\n/**\n * Build a Round 2 request for a single participant.\n *\n * Port of `build_round2_request_for_participant()` from cmd/dkg/coordinator/round1.rs lines 604-623.\n */\nfunction buildRound2RequestForParticipant(\n sender: XIDDocument,\n groupId: ARID,\n round1Packages: Round1Package[],\n responseArid: ARID,\n): SealedRequest {\n let request = SealedRequest.new(\"dkgRound2\", ARID.new(), sender)\n .withParameter(\"group\", groupId)\n .withParameter(\"responseArid\", responseArid);\n\n for (const [xid, pkg] of round1Packages) {\n const packageJson = serde.round1PackageToJson(pkg);\n const jsonStr = globalThis.JSON.stringify(packageJson);\n const jsonBytes = new TextEncoder().encode(jsonStr);\n const jsonWrapper = JSONWrapper.fromData(jsonBytes);\n const packageEnvelope = Envelope.new(jsonWrapper).addAssertion(\"participant\", xid);\n request = request.withParameter(\"round1Package\", packageEnvelope);\n }\n\n return request;\n}\n\n/**\n * Dispatch Round 2 requests in parallel.\n *\n * Port of `dispatch_round2_requests_parallel()` from cmd/dkg/coordinator/round1.rs lines 729-844.\n */\nasync function dispatchRound2RequestsParallel(\n client: StorageClient,\n registry: Registry,\n registryPath: string,\n coordinator: XIDDocument,\n groupId: ARID,\n successes: [XID, Round1ResponseData][],\n preview: boolean,\n): Promise<[string, string] | undefined> {\n const signerPrivateKeys = coordinator.inceptionPrivateKeys();\n if (signerPrivateKeys === undefined) {\n throw new Error(\"Coordinator XID document has no signing keys\");\n }\n\n const validUntil = new Date(Date.now() + 60 * 60 * 1000); // 1 hour from now\n\n // Build round1 packages list for request building\n const round1Packages: Round1Package[] = successes.map(([xid, data]) => [xid, data.package]);\n\n // Build participant info and messages\n const messages: [XID, ARID, Envelope, string][] = [];\n const collectArids: [XID, ARID][] = [];\n let previewOutput: [string, string] | undefined;\n\n for (const [xid, data] of successes) {\n const participant = registry.participant(xid);\n if (participant === undefined) {\n throw new Error(`Participant ${xid.urString()} not found in registry`);\n }\n const recipientDoc = participant.xidDocument();\n const participantName = participant.petName() ?? xid.urString();\n\n const collectFromArid = ARID.new();\n collectArids.push([xid, collectFromArid]);\n\n const request = buildRound2RequestForParticipant(\n coordinator,\n groupId,\n round1Packages,\n collectFromArid,\n );\n\n if (preview && previewOutput === undefined) {\n const unsealedEnvelope = request.toEnvelope(validUntil, signerPrivateKeys, undefined);\n previewOutput = [participantName, unsealedEnvelope.urString()];\n }\n\n const sealedEnvelope = request.toEnvelope(validUntil, signerPrivateKeys, recipientDoc);\n\n messages.push([xid, data.nextResponseArid, sealedEnvelope, participantName]);\n }\n\n // Blank line to separate get phase from put phase\n console.error();\n\n // Send all messages in parallel\n const sendResults = await parallelSend(client, messages, isVerbose());\n\n // Check for send failures\n const failures: [XID, string][] = [];\n for (const [xid, err] of sendResults) {\n if (err !== null) {\n failures.push([xid, err.message]);\n }\n }\n\n if (failures.length > 0) {\n for (const [xid, error] of failures) {\n console.error(`Failed to send to ${xid.urString()}: ${error}`);\n }\n throw new Error(`Failed to send Round 2 requests to ${failures.length} participants`);\n }\n\n // Update pending requests for Round 2 collection\n const newPendingRequests = new PendingRequests();\n for (const [xid, collectFromArid] of collectArids) {\n newPendingRequests.addCollectOnly(xid, collectFromArid);\n }\n const groupRecord = registry.groupMut(groupId);\n if (groupRecord === undefined) {\n throw new Error(\"Group not found in registry\");\n }\n groupRecord.setPendingRequests(newPendingRequests);\n registry.save(registryPath);\n\n return previewOutput;\n}\n\n// -----------------------------------------------------------------------------\n// Pending request updates\n// -----------------------------------------------------------------------------\n\n/**\n * Update pending requests from parallel collection results.\n *\n * Port of `update_pending_for_round2_from_collection()` from cmd/dkg/coordinator/round1.rs lines 710-726.\n */\nfunction updatePendingForRound2FromCollection(\n registry: Registry,\n registryPath: string,\n groupId: ARID,\n successes: [XID, Round1ResponseData][],\n): void {\n const newPending = new PendingRequests();\n for (const [xid, data] of successes) {\n newPending.addSendOnly(xid, data.nextResponseArid);\n }\n const groupRecord = registry.groupMut(groupId);\n if (groupRecord === undefined) {\n throw new Error(\"Group not found in registry\");\n }\n groupRecord.setPendingRequests(newPending);\n registry.save(registryPath);\n}\n\n// -----------------------------------------------------------------------------\n// Persistence\n// -----------------------------------------------------------------------------\n\n/**\n * Persist collected round 1 packages to disk.\n *\n * Port of `persist_round1_packages()` from cmd/dkg/coordinator/round1.rs lines 301-340.\n */\nfunction persistRound1Packages(\n registryPath: string,\n groupId: ARID,\n packages: Round1Package[],\n): string {\n const packagesDir = groupStateDir(registryPath, groupId.hex());\n fs.mkdirSync(packagesDir, { recursive: true });\n\n const round1PackagesPath = path.join(packagesDir, \"collected_round1.json\");\n const packagesJson: Record<string, unknown> = {};\n\n for (const [xid, pkg] of packages) {\n packagesJson[xid.urString()] = serde.round1PackageToJson(pkg);\n }\n\n fs.writeFileSync(round1PackagesPath, globalThis.JSON.stringify(packagesJson, null, 2));\n\n // Return display path (relative to cwd if possible)\n const cwd = process.cwd();\n if (round1PackagesPath.startsWith(cwd)) {\n return round1PackagesPath.slice(cwd.length + 1);\n }\n return round1PackagesPath;\n}\n\n// -----------------------------------------------------------------------------\n// Sequential collection\n// -----------------------------------------------------------------------------\n\n/**\n * Fetch all round 1 packages sequentially.\n *\n * Port of `fetch_all_round1_packages()` from cmd/dkg/coordinator/round1.rs lines 243-299.\n */\nasync function fetchAllRound1Packages(\n ctx: Round1Context,\n pendingRequests: PendingRequests,\n timeout: number | undefined,\n): Promise<[Round1Package[], NextResponseArid[]]> {\n const round1Packages: Round1Package[] = [];\n const nextResponseArids: NextResponseArid[] = [];\n const errors: [XID, string][] = [];\n\n for (const [participantXid, collectFromArid] of pendingRequests.iterCollect()) {\n const participant = ctx.registry.participant(participantXid);\n const participantName = participant?.petName() ?? participantXid.urString();\n\n try {\n const [pkg, nextArid] = await fetchRound1Response(\n ctx.client,\n collectFromArid,\n timeout,\n ctx.ownerDoc,\n ctx.groupId,\n participantName,\n );\n round1Packages.push([participantXid, pkg]);\n nextResponseArids.push([participantXid, nextArid]);\n } catch (e) {\n errors.push([participantXid, e instanceof Error ? e.message : String(e)]);\n }\n }\n\n if (errors.length > 0) {\n if (isVerbose()) {\n console.error();\n console.error(`Failed to collect from ${errors.length} participants:`);\n }\n for (const [xid, error] of errors) {\n console.error(` ${xid.urString()}: ${error}`);\n }\n throw new Error(\n `Round 1 collection incomplete: ${errors.length} of ${pendingRequests.len()} responses failed`,\n );\n }\n\n return [round1Packages, nextResponseArids];\n}\n\n/**\n * Collect round 1 responses sequentially.\n *\n * Port of `collect_round1_responses()` from cmd/dkg/coordinator/round1.rs lines 220-241.\n */\nasync function collectRound1Responses(\n ctx: Round1Context,\n pendingRequests: PendingRequests,\n timeout: number | undefined,\n): Promise<Round1Collection> {\n if (isVerbose()) {\n console.error(`Collecting Round 1 responses from ${pendingRequests.len()} participants...`);\n }\n\n const [packages, nextResponseArids] = await fetchAllRound1Packages(ctx, pendingRequests, timeout);\n\n const displayPath = persistRound1Packages(ctx.registryPath, ctx.groupId, packages);\n\n updatePendingForRound2(ctx, nextResponseArids);\n\n return { packages, nextResponseArids, displayPath };\n}\n\n/**\n * Update pending requests for round 2 (sequential path).\n *\n * Port of `update_pending_for_round2()` from cmd/dkg/coordinator/round1.rs lines 342-357.\n */\nfunction updatePendingForRound2(ctx: Round1Context, nextResponseArids: NextResponseArid[]): void {\n const newPending = new PendingRequests();\n for (const [xid, sendToArid] of nextResponseArids) {\n newPending.addSendOnly(xid, sendToArid);\n }\n const groupRecord = ctx.registry.groupMut(ctx.groupId);\n if (groupRecord === undefined) {\n throw new Error(\"Group not found in registry\");\n }\n groupRecord.setPendingRequests(newPending);\n ctx.registry.save(ctx.registryPath);\n}\n\n// -----------------------------------------------------------------------------\n// Round 2 dispatch (sequential)\n// -----------------------------------------------------------------------------\n\n/**\n * Build participant info for round 2 dispatch.\n *\n * Port of `build_round2_participant_info()` from cmd/dkg/coordinator/round1.rs lines 438-458.\n */\nfunction buildRound2ParticipantInfo(\n registry: Registry,\n nextResponseArids: NextResponseArid[],\n): [XID, XIDDocument, ARID, ARID][] {\n return nextResponseArids.map(([xid, sendToArid]) => {\n const participant = registry.participant(xid);\n if (participant === undefined) {\n throw new Error(`Participant ${xid.urString()} not found in registry`);\n }\n const doc = participant.xidDocument();\n const collectFromArid = ARID.new();\n return [xid, doc, sendToArid, collectFromArid];\n });\n}\n\n/**\n * Update pending for round 2 collection (sequential path).\n *\n * Port of `update_pending_for_round2_collection()` from cmd/dkg/coordinator/round1.rs lines 460-475.\n */\nfunction updatePendingForRound2Collection(\n ctx: Round1Context,\n participantInfo: [XID, XIDDocument, ARID, ARID][],\n): void {\n const newPendingRequests = new PendingRequests();\n for (const [xid, , , collectFromArid] of participantInfo) {\n newPendingRequests.addCollectOnly(xid, collectFromArid);\n }\n const groupRecord = ctx.registry.groupMut(ctx.groupId);\n if (groupRecord === undefined) {\n throw new Error(\"Group not found in registry\");\n }\n groupRecord.setPendingRequests(newPendingRequests);\n ctx.registry.save(ctx.registryPath);\n}\n\n/**\n * Dispatch Round 2 requests sequentially.\n *\n * Port of `dispatch_round2_requests()` from cmd/dkg/coordinator/round1.rs lines 363-436.\n */\nasync function dispatchRound2Requests(\n ctx: Round1Context,\n collection: Round1Collection,\n preview: boolean,\n): Promise<[string, string] | undefined> {\n const signerPrivateKeys = ctx.ownerDoc.inceptionPrivateKeys();\n if (signerPrivateKeys === undefined) {\n throw new Error(\"Coordinator XID document has no signing keys\");\n }\n\n const validUntil = new Date(Date.now() + 60 * 60 * 1000); // 1 hour from now\n\n const participantInfo = buildRound2ParticipantInfo(ctx.registry, collection.nextResponseArids);\n\n if (isVerbose()) {\n console.error(`Sending Round 2 requests to ${participantInfo.length} participants...`);\n } else {\n // Blank line to separate get phase from put phase\n console.error();\n }\n\n let previewOutput: [string, string] | undefined;\n\n for (const [xid, recipientDoc, sendToArid, collectFromArid] of participantInfo) {\n const participant = ctx.registry.participant(xid);\n const participantName = participant?.petName() ?? xid.urString();\n\n const request = buildRound2RequestForParticipant(\n ctx.ownerDoc,\n ctx.groupId,\n collection.packages,\n collectFromArid,\n );\n\n if (preview && previewOutput === undefined) {\n const unsealedEnvelope = request.toEnvelope(validUntil, signerPrivateKeys, undefined);\n previewOutput = [participantName, unsealedEnvelope.urString()];\n }\n\n const sealedEnvelope = request.toEnvelope(validUntil, signerPrivateKeys, recipientDoc);\n\n await putWithIndicator(ctx.client, sendToArid, sealedEnvelope, participantName, isVerbose());\n }\n\n updatePendingForRound2Collection(ctx, participantInfo);\n\n return previewOutput;\n}\n\n// -----------------------------------------------------------------------------\n// Output\n// -----------------------------------------------------------------------------\n\n/**\n * Print summary for sequential collection.\n *\n * Port of `print_summary()` from cmd/dkg/coordinator/round1.rs lines 481-506.\n */\nfunction printSummary(collection: Round1Collection, preview: [string, string] | undefined): void {\n if (preview !== undefined) {\n const [participantName, ur] = preview;\n if (isVerbose()) {\n console.error(`# Round 2 preview for ${participantName}`);\n console.error();\n }\n console.error(\n `Collected ${collection.packages.length} Round 1 packages to ${collection.displayPath} ` +\n `and sent ${collection.nextResponseArids.length} Round 2 requests.`,\n );\n console.log(ur);\n } else if (isVerbose()) {\n console.error();\n console.error(\n `Collected ${collection.packages.length} Round 1 packages to ${collection.displayPath} ` +\n `and sent ${collection.nextResponseArids.length} Round 2 requests.`,\n );\n }\n}\n\n/**\n * Print summary for parallel collection.\n *\n * Port of `print_summary_parallel()` from cmd/dkg/coordinator/round1.rs lines 847-901.\n */\nfunction printSummaryParallel(\n collection: CollectionResult<Round1ResponseData>,\n displayPath: string,\n preview: [string, string] | undefined,\n): void {\n // Report any failures\n if (collection.rejections.length > 0) {\n console.error();\n console.error(\"Rejections:\");\n for (const [xid, reason] of collection.rejections) {\n console.error(` ${xid.urString()}: ${reason}`);\n }\n }\n if (collection.errors.length > 0) {\n console.error();\n console.error(\"Errors:\");\n for (const [xid, error] of collection.errors) {\n console.error(` ${xid.urString()}: ${error}`);\n }\n }\n if (collection.timeouts.length > 0) {\n console.error();\n console.error(\"Timeouts:\");\n for (const xid of collection.timeouts) {\n console.error(` ${xid.urString()}`);\n }\n }\n\n if (!collection.allSucceeded()) {\n console.error();\n bailWithCollectionSummary(collection);\n }\n\n if (preview !== undefined) {\n const [participantName, ur] = preview;\n if (isVerbose()) {\n console.error(`# Round 2 preview for ${participantName}`);\n console.error();\n }\n console.error(\n `Collected ${collection.successes.length} Round 1 packages to ${displayPath} ` +\n `and sent ${collection.successes.length} Round 2 requests.`,\n );\n console.log(ur);\n } else if (isVerbose()) {\n console.error();\n console.error(\n `Collected ${collection.successes.length} Round 1 packages to ${displayPath} ` +\n `and sent ${collection.successes.length} Round 2 requests.`,\n );\n }\n}\n\n/**\n * Print collection summary and throw error.\n *\n * Port of `bail_with_collection_summary()` from cmd/dkg/coordinator/round1.rs lines 903-913.\n */\nfunction bailWithCollectionSummary(collection: CollectionResult<Round1ResponseData>): never {\n const msg =\n `Round 1 collection incomplete: ${collection.successes.length} succeeded, ` +\n `${collection.rejections.length} rejected, ${collection.errors.length} errors, ` +\n `${collection.timeouts.length} timeouts`;\n console.error(msg);\n throw new Error(msg);\n}\n\n// -----------------------------------------------------------------------------\n// Main entry point\n// -----------------------------------------------------------------------------\n\n/**\n * Execute the DKG coordinator round 1 command.\n *\n * Collects commitment packages from participants.\n *\n * Port of `CommandArgs::exec()` from cmd/dkg/coordinator/round1.rs lines 59-173.\n */\nexport async function round1(\n client: StorageClient,\n options: DkgRound1Options,\n cwd: string,\n): Promise<DkgRound1Result> {\n const registryPath = resolveRegistryPath(options.registryPath, cwd);\n const registry = Registry.load(registryPath);\n\n const owner = registry.owner();\n if (owner === undefined) {\n throw new Error(\"Registry owner is required\");\n }\n const ownerDoc = owner.xidDocument();\n\n const groupId = parseAridUr(options.groupId);\n const groupRecord = registry.group(groupId);\n\n if (groupRecord === undefined) {\n throw new Error(`Group ${options.groupId} not found in registry`);\n }\n\n validateCoordinator(groupRecord, owner);\n\n const pendingRequests = groupRecord.pendingRequests();\n if (pendingRequests.isEmpty()) {\n throw new Error(\"No pending requests for this group. Round 1 may already be collected.\");\n }\n\n if (options.parallel === true) {\n // Parallel path with progress display\n const collection = await collectRound1Parallel(\n client,\n registry,\n pendingRequests,\n ownerDoc,\n groupId,\n options.timeoutSeconds,\n );\n\n // Extract packages for persistence\n const packages: Round1Package[] = collection.successes.map(([xid, data]) => [\n xid,\n data.package,\n ]);\n\n const displayPath = persistRound1Packages(registryPath, groupId, packages);\n\n updatePendingForRound2FromCollection(registry, registryPath, groupId, collection.successes);\n\n const preview = await dispatchRound2RequestsParallel(\n client,\n registry,\n registryPath,\n ownerDoc,\n groupId,\n collection.successes,\n options.preview ?? false,\n );\n\n printSummaryParallel(collection, displayPath, preview);\n\n return {\n accepted: collection.successes.length,\n rejected: collection.rejections.length,\n errors: collection.errors.length,\n timeouts: collection.timeouts.length,\n };\n } else {\n // Sequential path (original behavior)\n const ctx: Round1Context = {\n client,\n registryPath,\n registry,\n ownerDoc,\n groupId,\n };\n\n const collection = await collectRound1Responses(ctx, pendingRequests, options.timeoutSeconds);\n\n const preview = await dispatchRound2Requests(ctx, collection, options.preview ?? false);\n\n printSummary(collection, preview);\n\n return {\n accepted: collection.packages.length,\n rejected: 0,\n errors: 0,\n timeouts: 0,\n };\n }\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAkHA,SAAS,oBAAoB,aAA0B,OAA0B;CAC/E,IAAI,YAAY,YAAY,CAAC,CAAC,IAAI,CAAC,CAAC,SAAS,MAAM,MAAM,IAAI,CAAC,CAAC,SAAS,GACtE,MAAM,IAAI,MACR,4EACkB,YAAY,YAAY,CAAC,CAAC,IAAI,CAAC,CAAC,SAAS,EAAE,WACjD,MAAM,IAAI,CAAC,CAAC,SAAS,GACnC;AAEJ;;;;;;AAWA,eAAe,oBACb,QACA,cACA,SACA,aACA,iBACA,iBACmC;CACnC,MAAM,WAAW,MAAM,iBACrB,QACA,cACA,iBACA,SACA,UAAU,CACZ;CAEA,IAAI,aAAa,KAAA,GACf,MAAM,IAAI,MAAM,sCAAsC;CAGxD,MAAM,yBAAyB,YAAY,qBAAqB;CAChE,IAAI,2BAA2B,KAAA,GAC7B,MAAM,IAAI,MAAM,wDAAwD;CAG1E,MAAM,MAAM,SAAS,IAAI,CAAC,CAAC,SAAS;CACpC,MAAM,iBAAiB,eAAe,yBACpC,UACA,KAAA,GACA,KACA,sBACF;CAEA,IAAI,eAAe,MAAM,GAAG;EAE1B,MAAM,iBADQ,eAAe,MACF,CAAC,CAAC,mBAAmB,QAAQ;EACxD,MAAM,SACJ,mBAAmB,KAAA,IACf,eAAe,gBAAgB,SAAS,KAAK,OAAO,CAAC,IACrD;EACN,MAAM,IAAI,MAAM,gCAAgC,QAAQ;CAC1D;CAEA,MAAM,SAAS,eAAe,OAAO;CACrC,uBAAuB,QAAQ,eAAe;CAE9C,MAAM,mBAAmB,OAAO,sBAA4B,kBAAkB,SAAS;EACrF,OAAO,KAAK,eAAe,IAAI;CACjC,CAAC;CAID,OAAO,CAFe,qBAAqB,MAEvB,GAAG,gBAAgB;AACzC;;;;;;AAOA,SAAS,uBAAuB,QAAkB,iBAA6B;CAC7E,OAAO,iBAAiB;CACxB,OAAO,UAAU,mBAAmB;CAEpC,MAAM,UAAU,OAAO,sBAA4B,UAAU,SAAS;EACpE,OAAO,KAAK,eAAe,IAAI;CACjC,CAAC;CAED,IAAI,QAAQ,SAAS,MAAM,gBAAgB,SAAS,GAClD,MAAM,IAAI,MACR,qBAAqB,QAAQ,SAAS,EAAE,2BAA2B,gBAAgB,SAAS,GAC9F;AAEJ;;;;;;AAOA,SAAS,qBAAqB,QAAoC;CAChE,MAAM,iBAAiB,OAAO,mBAAmB,gBAAgB;CACjE,IAAI,mBAAmB,KAAA,GACrB,MAAM,IAAI,MAAM,sCAAsC;CAGxD,MAAM,aAAa,eAAe,gBAA6B,SAAS;EACtE,OAAOA,KAAY,eAAe,IAAI;CACxC,CAAC;CAED,MAAM,UAAU,IAAI,YAAY,CAAC,CAAC,OAAO,WAAW,QAAQ,CAAC;CAC7D,MAAM,UAAU,WAAW,KAAK,MAAM,OAAO;CAC7C,OAAO,MAAM,sBAAsB,OAAO;AAC5C;;;;;;AAOA,SAAS,iCACP,UACA,iBACA,iBAC2C;CAC3C,MAAM,MAAM,SAAS,IAAI,CAAC,CAAC,SAAS;CACpC,MAAM,iBAAiB,eAAe,yBACpC,UACA,KAAA,GACA,KACA,eACF;CAEA,IAAI,eAAe,MAAM,GAAG;EAE1B,MAAM,iBADQ,eAAe,MACF,CAAC,CAAC,mBAAmB,QAAQ;EAKxD,OAAO,EAAE,UAAU,gCAHjB,mBAAmB,KAAA,IACf,eAAe,gBAAgB,SAAS,KAAK,OAAO,CAAC,IACrD,mBACsD;CAC9D;CAEA,MAAM,SAAS,eAAe,OAAO;CACrC,uBAAuB,QAAQ,eAAe;CAE9C,MAAM,mBAAmB,OAAO,sBAA4B,kBAAkB,SAAS;EACrF,OAAO,KAAK,eAAe,IAAI;CACjC,CAAC;CAID,OAAO;EAAE,SAFG,qBAAqB,MAEb;EAAG;CAAiB;AAC1C;;;;;;AAWA,eAAe,sBACb,QACA,UACA,iBACA,aACA,iBACA,SAC+C;CAC/C,MAAM,WAAkC,CAAC;CACzC,KAAK,MAAM,CAAC,KAAK,SAAS,gBAAgB,YAAY,GAAG;EAEvD,MAAM,OADc,SAAS,YAAY,GAClB,CAAC,EAAE,QAAQ,KAAK,IAAI,SAAS;EACpD,SAAS,KAAK;GAAC;GAAK;GAAM;EAAI,CAAC;CACjC;CAEA,MAAM,kBAAkB,YAAY,qBAAqB;CACzD,IAAI,oBAAoB,KAAA,GACtB,MAAM,IAAI,MAAM,kCAAkC;CAGpD,MAAM,SAA8B,EAAE,gBAAgB,QAAQ;CAC9D,MAAM,UAAU;CAEhB,OAAO,cACL,QACA,WACC,UAAoB,SAAc;EACjC,OAAO,iCAAiC,UAAU,iBAAiB,OAAO;CAC5E,GACA,MACF;AACF;;;;;;AAWA,SAAS,iCACP,QACA,SACA,gBACA,cACe;CACf,IAAI,UAAU,cAAc,IAAI,aAAa,KAAK,IAAI,GAAG,MAAM,CAAC,CAC7D,cAAc,SAAS,OAAO,CAAC,CAC/B,cAAc,gBAAgB,YAAY;CAE7C,KAAK,MAAM,CAAC,KAAK,QAAQ,gBAAgB;EACvC,MAAM,cAAc,MAAM,oBAAoB,GAAG;EACjD,MAAM,UAAU,WAAW,KAAK,UAAU,WAAW;EACrD,MAAM,YAAY,IAAI,YAAY,CAAC,CAAC,OAAO,OAAO;EAClD,MAAM,cAAcA,KAAY,SAAS,SAAS;EAClD,MAAM,kBAAkB,SAAS,IAAI,WAAW,CAAC,CAAC,aAAa,eAAe,GAAG;EACjF,UAAU,QAAQ,cAAc,iBAAiB,eAAe;CAClE;CAEA,OAAO;AACT;;;;;;AAOA,eAAe,+BACb,QACA,UACA,cACA,aACA,SACA,WACA,SACuC;CACvC,MAAM,oBAAoB,YAAY,qBAAqB;CAC3D,IAAI,sBAAsB,KAAA,GACxB,MAAM,IAAI,MAAM,8CAA8C;CAGhE,MAAM,aAAa,IAAI,KAAK,KAAK,IAAI,IAAI,OAAU,GAAI;CAGvD,MAAM,iBAAkC,UAAU,KAAK,CAAC,KAAK,UAAU,CAAC,KAAK,KAAK,OAAO,CAAC;CAG1F,MAAM,WAA4C,CAAC;CACnD,MAAM,eAA8B,CAAC;CACrC,IAAI;CAEJ,KAAK,MAAM,CAAC,KAAK,SAAS,WAAW;EACnC,MAAM,cAAc,SAAS,YAAY,GAAG;EAC5C,IAAI,gBAAgB,KAAA,GAClB,MAAM,IAAI,MAAM,eAAe,IAAI,SAAS,EAAE,uBAAuB;EAEvE,MAAM,eAAe,YAAY,YAAY;EAC7C,MAAM,kBAAkB,YAAY,QAAQ,KAAK,IAAI,SAAS;EAE9D,MAAM,kBAAkB,KAAK,IAAI;EACjC,aAAa,KAAK,CAAC,KAAK,eAAe,CAAC;EAExC,MAAM,UAAU,iCACd,aACA,SACA,gBACA,eACF;EAEA,IAAI,WAAW,kBAAkB,KAAA,GAE/B,gBAAgB,CAAC,iBADQ,QAAQ,WAAW,YAAY,mBAAmB,KAAA,CAC1B,CAAC,CAAC,SAAS,CAAC;EAG/D,MAAM,iBAAiB,QAAQ,WAAW,YAAY,mBAAmB,YAAY;EAErF,SAAS,KAAK;GAAC;GAAK,KAAK;GAAkB;GAAgB;EAAe,CAAC;CAC7E;CAGA,QAAQ,MAAM;CAGd,MAAM,cAAc,MAAM,aAAa,QAAQ,UAAU,UAAU,CAAC;CAGpE,MAAM,WAA4B,CAAC;CACnC,KAAK,MAAM,CAAC,KAAK,QAAQ,aACvB,IAAI,QAAQ,MACV,SAAS,KAAK,CAAC,KAAK,IAAI,OAAO,CAAC;CAIpC,IAAI,SAAS,SAAS,GAAG;EACvB,KAAK,MAAM,CAAC,KAAK,UAAU,UACzB,QAAQ,MAAM,qBAAqB,IAAI,SAAS,EAAE,IAAI,OAAO;EAE/D,MAAM,IAAI,MAAM,sCAAsC,SAAS,OAAO,cAAc;CACtF;CAGA,MAAM,qBAAqB,IAAI,gBAAgB;CAC/C,KAAK,MAAM,CAAC,KAAK,oBAAoB,cACnC,mBAAmB,eAAe,KAAK,eAAe;CAExD,MAAM,cAAc,SAAS,SAAS,OAAO;CAC7C,IAAI,gBAAgB,KAAA,GAClB,MAAM,IAAI,MAAM,6BAA6B;CAE/C,YAAY,mBAAmB,kBAAkB;CACjD,SAAS,KAAK,YAAY;CAE1B,OAAO;AACT;;;;;;AAWA,SAAS,qCACP,UACA,cACA,SACA,WACM;CACN,MAAM,aAAa,IAAI,gBAAgB;CACvC,KAAK,MAAM,CAAC,KAAK,SAAS,WACxB,WAAW,YAAY,KAAK,KAAK,gBAAgB;CAEnD,MAAM,cAAc,SAAS,SAAS,OAAO;CAC7C,IAAI,gBAAgB,KAAA,GAClB,MAAM,IAAI,MAAM,6BAA6B;CAE/C,YAAY,mBAAmB,UAAU;CACzC,SAAS,KAAK,YAAY;AAC5B;;;;;;AAWA,SAAS,sBACP,cACA,SACA,UACQ;CACR,MAAM,cAAc,cAAc,cAAc,QAAQ,IAAI,CAAC;CAC7D,GAAG,UAAU,aAAa,EAAE,WAAW,KAAK,CAAC;CAE7C,MAAM,qBAAqB,KAAK,KAAK,aAAa,uBAAuB;CACzE,MAAM,eAAwC,CAAC;CAE/C,KAAK,MAAM,CAAC,KAAK,QAAQ,UACvB,aAAa,IAAI,SAAS,KAAK,MAAM,oBAAoB,GAAG;CAG9D,GAAG,cAAc,oBAAoB,WAAW,KAAK,UAAU,cAAc,MAAM,CAAC,CAAC;CAGrF,MAAM,MAAM,QAAQ,IAAI;CACxB,IAAI,mBAAmB,WAAW,GAAG,GACnC,OAAO,mBAAmB,MAAM,IAAI,SAAS,CAAC;CAEhD,OAAO;AACT;;;;;;AAWA,eAAe,uBACb,KACA,iBACA,SACgD;CAChD,MAAM,iBAAkC,CAAC;CACzC,MAAM,oBAAwC,CAAC;CAC/C,MAAM,SAA0B,CAAC;CAEjC,KAAK,MAAM,CAAC,gBAAgB,oBAAoB,gBAAgB,YAAY,GAAG;EAE7E,MAAM,kBADc,IAAI,SAAS,YAAY,cACX,CAAC,EAAE,QAAQ,KAAK,eAAe,SAAS;EAE1E,IAAI;GACF,MAAM,CAAC,KAAK,YAAY,MAAM,oBAC5B,IAAI,QACJ,iBACA,SACA,IAAI,UACJ,IAAI,SACJ,eACF;GACA,eAAe,KAAK,CAAC,gBAAgB,GAAG,CAAC;GACzC,kBAAkB,KAAK,CAAC,gBAAgB,QAAQ,CAAC;EACnD,SAAS,GAAG;GACV,OAAO,KAAK,CAAC,gBAAgB,aAAa,QAAQ,EAAE,UAAU,OAAO,CAAC,CAAC,CAAC;EAC1E;CACF;CAEA,IAAI,OAAO,SAAS,GAAG;EACrB,IAAI,UAAU,GAAG;GACf,QAAQ,MAAM;GACd,QAAQ,MAAM,0BAA0B,OAAO,OAAO,eAAe;EACvE;EACA,KAAK,MAAM,CAAC,KAAK,UAAU,QACzB,QAAQ,MAAM,KAAK,IAAI,SAAS,EAAE,IAAI,OAAO;EAE/C,MAAM,IAAI,MACR,kCAAkC,OAAO,OAAO,MAAM,gBAAgB,IAAI,EAAE,kBAC9E;CACF;CAEA,OAAO,CAAC,gBAAgB,iBAAiB;AAC3C;;;;;;AAOA,eAAe,uBACb,KACA,iBACA,SAC2B;CAC3B,IAAI,UAAU,GACZ,QAAQ,MAAM,qCAAqC,gBAAgB,IAAI,EAAE,iBAAiB;CAG5F,MAAM,CAAC,UAAU,qBAAqB,MAAM,uBAAuB,KAAK,iBAAiB,OAAO;CAEhG,MAAM,cAAc,sBAAsB,IAAI,cAAc,IAAI,SAAS,QAAQ;CAEjF,uBAAuB,KAAK,iBAAiB;CAE7C,OAAO;EAAE;EAAU;EAAmB;CAAY;AACpD;;;;;;AAOA,SAAS,uBAAuB,KAAoB,mBAA6C;CAC/F,MAAM,aAAa,IAAI,gBAAgB;CACvC,KAAK,MAAM,CAAC,KAAK,eAAe,mBAC9B,WAAW,YAAY,KAAK,UAAU;CAExC,MAAM,cAAc,IAAI,SAAS,SAAS,IAAI,OAAO;CACrD,IAAI,gBAAgB,KAAA,GAClB,MAAM,IAAI,MAAM,6BAA6B;CAE/C,YAAY,mBAAmB,UAAU;CACzC,IAAI,SAAS,KAAK,IAAI,YAAY;AACpC;;;;;;AAWA,SAAS,2BACP,UACA,mBACkC;CAClC,OAAO,kBAAkB,KAAK,CAAC,KAAK,gBAAgB;EAClD,MAAM,cAAc,SAAS,YAAY,GAAG;EAC5C,IAAI,gBAAgB,KAAA,GAClB,MAAM,IAAI,MAAM,eAAe,IAAI,SAAS,EAAE,uBAAuB;EAIvE,OAAO;GAAC;GAFI,YAAY,YAET;GAAG;GADM,KAAK,IACe;EAAC;CAC/C,CAAC;AACH;;;;;;AAOA,SAAS,iCACP,KACA,iBACM;CACN,MAAM,qBAAqB,IAAI,gBAAgB;CAC/C,KAAK,MAAM,CAAC,SAAS,oBAAoB,iBACvC,mBAAmB,eAAe,KAAK,eAAe;CAExD,MAAM,cAAc,IAAI,SAAS,SAAS,IAAI,OAAO;CACrD,IAAI,gBAAgB,KAAA,GAClB,MAAM,IAAI,MAAM,6BAA6B;CAE/C,YAAY,mBAAmB,kBAAkB;CACjD,IAAI,SAAS,KAAK,IAAI,YAAY;AACpC;;;;;;AAOA,eAAe,uBACb,KACA,YACA,SACuC;CACvC,MAAM,oBAAoB,IAAI,SAAS,qBAAqB;CAC5D,IAAI,sBAAsB,KAAA,GACxB,MAAM,IAAI,MAAM,8CAA8C;CAGhE,MAAM,aAAa,IAAI,KAAK,KAAK,IAAI,IAAI,OAAU,GAAI;CAEvD,MAAM,kBAAkB,2BAA2B,IAAI,UAAU,WAAW,iBAAiB;CAE7F,IAAI,UAAU,GACZ,QAAQ,MAAM,+BAA+B,gBAAgB,OAAO,iBAAiB;MAGrF,QAAQ,MAAM;CAGhB,IAAI;CAEJ,KAAK,MAAM,CAAC,KAAK,cAAc,YAAY,oBAAoB,iBAAiB;EAE9E,MAAM,kBADc,IAAI,SAAS,YAAY,GACX,CAAC,EAAE,QAAQ,KAAK,IAAI,SAAS;EAE/D,MAAM,UAAU,iCACd,IAAI,UACJ,IAAI,SACJ,WAAW,UACX,eACF;EAEA,IAAI,WAAW,kBAAkB,KAAA,GAE/B,gBAAgB,CAAC,iBADQ,QAAQ,WAAW,YAAY,mBAAmB,KAAA,CAC1B,CAAC,CAAC,SAAS,CAAC;EAG/D,MAAM,iBAAiB,QAAQ,WAAW,YAAY,mBAAmB,YAAY;EAErF,MAAM,iBAAiB,IAAI,QAAQ,YAAY,gBAAgB,iBAAiB,UAAU,CAAC;CAC7F;CAEA,iCAAiC,KAAK,eAAe;CAErD,OAAO;AACT;;;;;;AAWA,SAAS,aAAa,YAA8B,SAA6C;CAC/F,IAAI,YAAY,KAAA,GAAW;EACzB,MAAM,CAAC,iBAAiB,MAAM;EAC9B,IAAI,UAAU,GAAG;GACf,QAAQ,MAAM,yBAAyB,iBAAiB;GACxD,QAAQ,MAAM;EAChB;EACA,QAAQ,MACN,aAAa,WAAW,SAAS,OAAO,uBAAuB,WAAW,YAAY,YACxE,WAAW,kBAAkB,OAAO,mBACpD;EACA,QAAQ,IAAI,EAAE;CAChB,OAAO,IAAI,UAAU,GAAG;EACtB,QAAQ,MAAM;EACd,QAAQ,MACN,aAAa,WAAW,SAAS,OAAO,uBAAuB,WAAW,YAAY,YACxE,WAAW,kBAAkB,OAAO,mBACpD;CACF;AACF;;;;;;AAOA,SAAS,qBACP,YACA,aACA,SACM;CAEN,IAAI,WAAW,WAAW,SAAS,GAAG;EACpC,QAAQ,MAAM;EACd,QAAQ,MAAM,aAAa;EAC3B,KAAK,MAAM,CAAC,KAAK,WAAW,WAAW,YACrC,QAAQ,MAAM,KAAK,IAAI,SAAS,EAAE,IAAI,QAAQ;CAElD;CACA,IAAI,WAAW,OAAO,SAAS,GAAG;EAChC,QAAQ,MAAM;EACd,QAAQ,MAAM,SAAS;EACvB,KAAK,MAAM,CAAC,KAAK,UAAU,WAAW,QACpC,QAAQ,MAAM,KAAK,IAAI,SAAS,EAAE,IAAI,OAAO;CAEjD;CACA,IAAI,WAAW,SAAS,SAAS,GAAG;EAClC,QAAQ,MAAM;EACd,QAAQ,MAAM,WAAW;EACzB,KAAK,MAAM,OAAO,WAAW,UAC3B,QAAQ,MAAM,KAAK,IAAI,SAAS,GAAG;CAEvC;CAEA,IAAI,CAAC,WAAW,aAAa,GAAG;EAC9B,QAAQ,MAAM;EACd,0BAA0B,UAAU;CACtC;CAEA,IAAI,YAAY,KAAA,GAAW;EACzB,MAAM,CAAC,iBAAiB,MAAM;EAC9B,IAAI,UAAU,GAAG;GACf,QAAQ,MAAM,yBAAyB,iBAAiB;GACxD,QAAQ,MAAM;EAChB;EACA,QAAQ,MACN,aAAa,WAAW,UAAU,OAAO,uBAAuB,YAAY,YAC9D,WAAW,UAAU,OAAO,mBAC5C;EACA,QAAQ,IAAI,EAAE;CAChB,OAAO,IAAI,UAAU,GAAG;EACtB,QAAQ,MAAM;EACd,QAAQ,MACN,aAAa,WAAW,UAAU,OAAO,uBAAuB,YAAY,YAC9D,WAAW,UAAU,OAAO,mBAC5C;CACF;AACF;;;;;;AAOA,SAAS,0BAA0B,YAAyD;CAC1F,MAAM,MACJ,kCAAkC,WAAW,UAAU,OAAO,cAC3D,WAAW,WAAW,OAAO,aAAa,WAAW,OAAO,OAAO,WACnE,WAAW,SAAS,OAAO;CAChC,QAAQ,MAAM,GAAG;CACjB,MAAM,IAAI,MAAM,GAAG;AACrB;;;;;;;;AAaA,eAAsB,OACpB,QACA,SACA,KAC0B;CAC1B,MAAM,eAAe,oBAAoB,QAAQ,cAAc,GAAG;CAClE,MAAM,WAAW,SAAS,KAAK,YAAY;CAE3C,MAAM,QAAQ,SAAS,MAAM;CAC7B,IAAI,UAAU,KAAA,GACZ,MAAM,IAAI,MAAM,4BAA4B;CAE9C,MAAM,WAAW,MAAM,YAAY;CAEnC,MAAM,UAAU,YAAY,QAAQ,OAAO;CAC3C,MAAM,cAAc,SAAS,MAAM,OAAO;CAE1C,IAAI,gBAAgB,KAAA,GAClB,MAAM,IAAI,MAAM,SAAS,QAAQ,QAAQ,uBAAuB;CAGlE,oBAAoB,aAAa,KAAK;CAEtC,MAAM,kBAAkB,YAAY,gBAAgB;CACpD,IAAI,gBAAgB,QAAQ,GAC1B,MAAM,IAAI,MAAM,uEAAuE;CAGzF,IAAI,QAAQ,aAAa,MAAM;EAE7B,MAAM,aAAa,MAAM,sBACvB,QACA,UACA,iBACA,UACA,SACA,QAAQ,cACV;EAQA,MAAM,cAAc,sBAAsB,cAAc,SALtB,WAAW,UAAU,KAAK,CAAC,KAAK,UAAU,CAC1E,KACA,KAAK,OACP,CAEwE,CAAC;EAEzE,qCAAqC,UAAU,cAAc,SAAS,WAAW,SAAS;EAY1F,qBAAqB,YAAY,aAAa,MAVxB,+BACpB,QACA,UACA,cACA,UACA,SACA,WAAW,WACX,QAAQ,WAAW,KACrB,CAEqD;EAErD,OAAO;GACL,UAAU,WAAW,UAAU;GAC/B,UAAU,WAAW,WAAW;GAChC,QAAQ,WAAW,OAAO;GAC1B,UAAU,WAAW,SAAS;EAChC;CACF,OAAO;EAEL,MAAM,MAAqB;GACzB;GACA;GACA;GACA;GACA;EACF;EAEA,MAAM,aAAa,MAAM,uBAAuB,KAAK,iBAAiB,QAAQ,cAAc;EAI5F,aAAa,YAAY,MAFH,uBAAuB,KAAK,YAAY,QAAQ,WAAW,KAAK,CAEtD;EAEhC,OAAO;GACL,UAAU,WAAW,SAAS;GAC9B,UAAU;GACV,QAAQ;GACR,UAAU;EACZ;CACF;AACF"}
|
|
@@ -1,10 +1,10 @@
|
|
|
1
|
-
import { t as __exportAll } from "./rolldown-runtime-
|
|
1
|
+
import { t as __exportAll } from "./rolldown-runtime-BhDjJH2R.mjs";
|
|
2
2
|
import { Registry, resolveRegistryPath } from "./registry/index.mjs";
|
|
3
|
-
import { c as parseAridUr } from "./common-
|
|
3
|
+
import { c as parseAridUr } from "./common-k2QC6AST.mjs";
|
|
4
4
|
import { n as putWithIndicator } from "./busy-BlU8_pS2.mjs";
|
|
5
|
-
import { i as createStorageClient } from "./registry-
|
|
5
|
+
import { i as createStorageClient } from "./registry-DkhElxx1.mjs";
|
|
6
6
|
import { createRng, deserializeKeyPackage, serializeSigningCommitments, serializeSigningNonces, signingRound1 } from "./frost/index.mjs";
|
|
7
|
-
import { n as signingStateDir } from "./common
|
|
7
|
+
import { n as signingStateDir } from "./common-DCyUSYkT.mjs";
|
|
8
8
|
import { ARID, JSON as JSON$1, XID } from "@bcts/components";
|
|
9
9
|
import { CborDate } from "@bcts/dcbor";
|
|
10
10
|
import { Envelope, Function } from "@bcts/envelope";
|
|
@@ -205,4 +205,4 @@ async function round1(_client, options, cwd) {
|
|
|
205
205
|
//#endregion
|
|
206
206
|
export { round1_exports as n, round1 as t };
|
|
207
207
|
|
|
208
|
-
//# sourceMappingURL=round1-
|
|
208
|
+
//# sourceMappingURL=round1-I9T20net.mjs.map
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"round1-DL4N2QJ5.mjs","names":["EnvelopeFunction","JSONWrapper"],"sources":["../src/cmd/sign/participant/round1.ts"],"sourcesContent":["/**\n * Copyright © 2023-2026 Blockchain Commons, LLC\n * Copyright © 2025-2026 Parity Technologies\n *\n *\n * Sign participant round 1 command.\n *\n * Port of cmd/sign/participant/round1.rs from frost-hubert-rust.\n *\n * @module\n */\n\nimport * as fs from \"node:fs\";\nimport * as path from \"node:path\";\n\nimport { ARID, JSON as JSONWrapper, type PrivateKeys, XID } from \"@bcts/components\";\nimport { CborDate } from \"@bcts/dcbor\";\nimport { Envelope, Function as EnvelopeFunction } from \"@bcts/envelope\";\nimport { SealedRequest, SealedResponse } from \"@bcts/gstp\";\nimport type { XIDDocument } from \"@bcts/xid\";\n\nimport { Registry, resolveRegistryPath } from \"../../../registry/index.js\";\nimport { putWithIndicator } from \"../../busy.js\";\nimport { createStorageClient, type StorageClient, type StorageSelection } from \"../../storage.js\";\nimport { parseAridUr } from \"../../dkg/common.js\";\nimport { signingStateDir } from \"../common.js\";\nimport {\n signingRound1,\n deserializeKeyPackage,\n serializeSigningNonces,\n serializeSigningCommitments,\n createRng,\n type SerializedKeyPackage,\n type SerializedSigningNonces,\n type SerializedSigningCommitments,\n type Ed25519SigningNonces,\n type Ed25519SigningCommitments,\n} from \"../../../frost/index.js\";\n\n/**\n * Options for the sign round1 command.\n */\nexport interface SignRound1Options {\n registryPath?: string;\n sessionId: string;\n groupId?: string;\n preview?: boolean;\n rejectReason?: string;\n storageSelection?: StorageSelection;\n verbose?: boolean;\n}\n\n/**\n * Result of the sign round1 command.\n */\nexport interface SignRound1Result {\n accepted: boolean;\n listeningArid?: string;\n envelopeUr?: string;\n}\n\n/**\n * Persisted receive state from sign_receive.json.\n *\n * Port of `struct ReceiveState` from cmd/sign/participant/round1.rs.\n */\ninterface ReceiveState {\n groupId: ARID;\n coordinatorDoc: XIDDocument;\n responseArid: ARID;\n targetUr: string;\n participants: XID[];\n requestEnvelope: Envelope;\n}\n\n/**\n * Load receive state from persisted sign_receive.json.\n *\n * Port of `load_receive_state()` from cmd/sign/participant/round1.rs lines 285-411.\n */\nfunction loadReceiveState(\n registryPath: string,\n sessionId: ARID,\n groupHint: ARID | undefined,\n registry: Registry,\n): ReceiveState {\n const base = path.dirname(registryPath);\n const groupStateDir = path.join(base, \"group-state\");\n\n // Collect candidate directories\n let groupDirs: [ARID, string][];\n if (groupHint !== undefined) {\n groupDirs = [[groupHint, path.join(groupStateDir, groupHint.hex())]];\n } else {\n groupDirs = [];\n if (fs.existsSync(groupStateDir)) {\n for (const entry of fs.readdirSync(groupStateDir, { withFileTypes: true })) {\n if (entry.isDirectory()) {\n const dirName = entry.name;\n // Check if it's a 64-character hex string (ARID hex)\n if (dirName.length === 64 && /^[0-9a-fA-F]+$/.test(dirName)) {\n const groupId = ARID.fromHex(dirName);\n groupDirs.push([groupId, path.join(groupStateDir, dirName)]);\n }\n }\n }\n }\n }\n\n // Search for sign_receive.json\n const candidates: [ARID, string][] = [];\n for (const [groupId, groupDir] of groupDirs) {\n const candidate = path.join(groupDir, \"signing\", sessionId.hex(), \"sign_receive.json\");\n if (fs.existsSync(candidate)) {\n candidates.push([groupId, candidate]);\n }\n }\n\n if (candidates.length === 0) {\n throw new Error(\n \"No sign_receive.json found for this session; run `frost sign participant receive` first\",\n );\n }\n if (candidates.length > 1) {\n throw new Error(\"Multiple groups contain this session; use --group to disambiguate\");\n }\n\n const [groupId, filePath] = candidates[0];\n\n // Parse the JSON file\n interface SignReceiveJson {\n session: string;\n group: string;\n response_arid: string;\n target: string;\n coordinator: string;\n participants: string[];\n request_envelope: string;\n }\n\n const raw = JSON.parse(fs.readFileSync(filePath, \"utf-8\")) as SignReceiveJson;\n\n // Validate session matches\n const sessionInState = parseAridUr(raw.session);\n if (sessionInState.urString() !== sessionId.urString()) {\n throw new Error(\n `Session ${sessionInState.urString()} in sign_receive.json does not match requested session ${sessionId.urString()}`,\n );\n }\n\n const responseArid = parseAridUr(raw.response_arid);\n const targetUr = raw.target;\n const coordinatorUr = raw.coordinator;\n const coordinatorXid = XID.fromURString(coordinatorUr);\n\n // Resolve coordinator document from registry\n let coordinatorDoc: XIDDocument;\n const participantRecord = registry.participant(coordinatorXid);\n if (participantRecord !== null && participantRecord !== undefined) {\n coordinatorDoc = participantRecord.xidDocument();\n } else {\n const owner = registry.owner();\n if (owner?.xid().urString() === coordinatorXid.urString()) {\n coordinatorDoc = owner.xidDocument();\n } else {\n throw new Error(\n `Coordinator ${coordinatorXid.urString()} not found in registry and cannot resolve encryption key`,\n );\n }\n }\n\n // Parse request envelope\n const requestEnvelope = Envelope.fromURString(raw.request_envelope);\n\n // Parse participants\n const participants: XID[] = raw.participants.map((s: string) => XID.fromURString(s));\n\n return {\n groupId,\n coordinatorDoc,\n responseArid,\n targetUr,\n participants,\n requestEnvelope,\n };\n}\n\n/**\n * Validate the commit request from persisted state.\n *\n * Port of request validation in `CommandArgs::exec()` from cmd/sign/participant/round1.rs lines 100-138.\n */\nfunction validateCommitRequest(\n receiveState: ReceiveState,\n sessionId: ARID,\n ownerXid: XID,\n ownerPrivateKeys: PrivateKeys,\n): SealedRequest {\n const now = CborDate.now();\n\n // Decrypt and parse the request\n const sealedRequest = SealedRequest.tryFromEnvelope(\n receiveState.requestEnvelope,\n undefined,\n now.datetime(),\n ownerPrivateKeys,\n );\n\n // Validate function\n if (!sealedRequest.request().function().equals(EnvelopeFunction.fromString(\"signInvite\"))) {\n throw new Error(`Unexpected request function: ${String(sealedRequest.request().function())}`);\n }\n\n // Validate session ID\n if (sealedRequest.request().id().urString() !== sessionId.urString()) {\n throw new Error(\n `Session ID mismatch (state ${sessionId.urString()}, request ${sealedRequest.request().id().urString()})`,\n );\n }\n\n // Validate group ID\n const requestGroup = sealedRequest.extractObjectForParameter<ARID>(\"group\");\n if (requestGroup.urString() !== receiveState.groupId.urString()) {\n throw new Error(\n `Group ID mismatch (state ${receiveState.groupId.urString()}, request ${requestGroup.urString()})`,\n );\n }\n\n // Validate participant is included\n const participantUrStrings = receiveState.participants.map((p) => p.urString());\n if (!participantUrStrings.includes(ownerXid.urString())) {\n throw new Error(\"Persisted signInvite request does not include this participant\");\n }\n\n return sealedRequest;\n}\n\n/**\n * Build the response body envelope.\n *\n * Port of response body building from cmd/sign/participant/round1.rs lines 191-195.\n */\nfunction buildResponseBody(\n sessionId: ARID,\n commitments: Ed25519SigningCommitments,\n responseArid: ARID,\n): Envelope {\n // Serialize commitments to JSON and wrap as CBOR JSON\n const serializedCommitments = serializeSigningCommitments(commitments);\n const jsonStr = JSON.stringify(serializedCommitments);\n const jsonBytes = new TextEncoder().encode(jsonStr);\n const commitmentsJson = JSONWrapper.fromData(jsonBytes);\n\n // Build response body: unit subject with type and assertions\n return Envelope.unit()\n .addType(\"signRound1Response\")\n .addAssertion(\"session\", sessionId)\n .addAssertion(\"commitments\", commitmentsJson.taggedCborData())\n .addAssertion(\"response_arid\", responseArid);\n}\n\n/**\n * Persist commit state (nonces and commitments) to disk.\n *\n * Port of `persist_commit_state()` from cmd/sign/participant/round1.rs lines 413-461.\n */\nfunction persistCommitState(\n registryPath: string,\n groupId: ARID,\n sessionId: ARID,\n receiveState: ReceiveState,\n signingNonces: Ed25519SigningNonces,\n signingCommitments: Ed25519SigningCommitments,\n targetEnvelope: Envelope,\n nextShareArid: ARID,\n): void {\n const dir = signingStateDir(registryPath, groupId.hex(), sessionId.hex());\n fs.mkdirSync(dir, { recursive: true });\n\n // Serialize nonces and commitments\n const serializedNonces = serializeSigningNonces(signingNonces);\n const serializedCommitments = serializeSigningCommitments(signingCommitments);\n\n // Build commit state JSON\n const commitState: {\n session: string;\n response_arid: string;\n next_share_arid: string;\n target: string;\n signing_nonces: SerializedSigningNonces;\n signing_commitments: SerializedSigningCommitments;\n } = {\n session: sessionId.urString(),\n response_arid: receiveState.responseArid.urString(),\n next_share_arid: nextShareArid.urString(),\n target: targetEnvelope.urString(),\n signing_nonces: serializedNonces,\n signing_commitments: serializedCommitments,\n };\n\n fs.writeFileSync(path.join(dir, \"commit.json\"), JSON.stringify(commitState, null, 2));\n}\n\n/**\n * Execute the sign participant round 1 command.\n *\n * Responds to the sign invite with signing commitments.\n *\n * Port of `CommandArgs::exec()` from cmd/sign/participant/round1.rs lines 58-273.\n */\nexport async function round1(\n _client: StorageClient | undefined,\n options: SignRound1Options,\n cwd: string,\n): Promise<SignRound1Result> {\n // Validate options\n if (options.storageSelection === undefined && options.preview !== true) {\n throw new Error(\"Hubert storage is required for sign commit\");\n }\n if (options.storageSelection !== undefined && options.preview === true) {\n throw new Error(\"--preview cannot be used with Hubert storage options\");\n }\n\n const registryPath = resolveRegistryPath(options.registryPath, cwd);\n const registry = Registry.load(registryPath);\n\n const owner = registry.owner();\n if (!owner) {\n throw new Error(\"Registry owner is required\");\n }\n\n const sessionId = parseAridUr(options.sessionId);\n const groupHint = options.groupId !== undefined ? parseAridUr(options.groupId) : undefined;\n\n // Load receive state\n const receiveState = loadReceiveState(registryPath, sessionId, groupHint, registry);\n const groupId = receiveState.groupId;\n\n // Get group record\n const groupRecord = registry.group(groupId);\n if (groupRecord === null || groupRecord === undefined) {\n throw new Error(\"Group not found in registry\");\n }\n\n // Get owner private keys\n const ownerKeys = owner.xidDocument().inceptionPrivateKeys();\n if (ownerKeys === undefined) {\n throw new Error(\"Owner XID document has no private keys\");\n }\n\n // Validate the commit request\n const sealedRequest = validateCommitRequest(receiveState, sessionId, owner.xid(), ownerKeys);\n\n // Load key package\n const contributions = groupRecord.contributions();\n if (contributions === null || contributions === undefined) {\n throw new Error(\"Key package path not found; did you finish DKG?\");\n }\n const keyPackagePath = contributions.keyPackage;\n if (keyPackagePath === undefined) {\n throw new Error(\"Key package path not found; did you finish DKG?\");\n }\n\n interface KeyPackageFile {\n group: string;\n key_package: SerializedKeyPackage;\n }\n\n const keyPackageFile = JSON.parse(fs.readFileSync(keyPackagePath, \"utf-8\")) as KeyPackageFile;\n const keyPackage = deserializeKeyPackage(keyPackageFile.key_package);\n\n // Parse target envelope\n const targetEnvelope = Envelope.fromURString(receiveState.targetUr);\n\n const signerPrivateKeys = owner.xidDocument().inceptionPrivateKeys();\n if (signerPrivateKeys === undefined) {\n throw new Error(\"Owner XID document has no signing keys\");\n }\n\n let sealedResponse: SealedResponse;\n let nextShareArid: ARID | undefined;\n\n if (options.rejectReason !== undefined) {\n // Build rejection response\n const errorBody = Envelope.new(\"signCommitReject\")\n .addAssertion(\"group\", groupId)\n .addAssertion(\"session\", sessionId)\n .addAssertion(\"reason\", options.rejectReason);\n\n sealedResponse = SealedResponse.newFailure(sealedRequest.request().id(), owner.xidDocument())\n .withError(errorBody)\n .withPeerContinuation(sealedRequest.peerContinuation());\n } else {\n // Run signing round 1 - generate nonces and commitments\n const rng = createRng();\n const [signingNonces, signingCommitments] = signingRound1(keyPackage, rng);\n\n const nextShare = ARID.new();\n nextShareArid = nextShare;\n\n // Build response body\n const responseBody = buildResponseBody(sessionId, signingCommitments, nextShare);\n\n // Persist commit state (unless preview mode)\n if (options.preview !== true) {\n persistCommitState(\n registryPath,\n groupId,\n sessionId,\n receiveState,\n signingNonces,\n signingCommitments,\n targetEnvelope,\n nextShare,\n );\n\n // Update listening ARID for next request\n const groupRecordMut = registry.group(groupId);\n if (groupRecordMut !== null && groupRecordMut !== undefined) {\n groupRecordMut.setListeningAtArid(nextShare);\n registry.save(registryPath);\n }\n }\n\n sealedResponse = SealedResponse.newSuccess(sealedRequest.request().id(), owner.xidDocument())\n .withResult(responseBody)\n .withPeerContinuation(sealedRequest.peerContinuation());\n }\n\n // Handle preview mode\n if (options.preview === true) {\n const unsealed = sealedResponse.toEnvelope(undefined, signerPrivateKeys, undefined);\n const envelopeUr = unsealed.urString();\n console.log(envelopeUr);\n return {\n accepted: options.rejectReason === undefined,\n envelopeUr,\n };\n }\n\n // Build encrypted response envelope\n const validUntil = new Date(Date.now() + 60 * 60 * 1000); // 1 hour from now\n const responseEnvelope = sealedResponse.toEnvelope(\n validUntil,\n signerPrivateKeys,\n receiveState.coordinatorDoc,\n );\n\n // Post response to Hubert storage\n if (options.storageSelection === undefined) {\n throw new Error(\"Storage selection is required to post response\");\n }\n const client = await createStorageClient(options.storageSelection);\n\n if (options.verbose === true) {\n console.error(`Posting signInvite response to ${receiveState.responseArid.urString()}`);\n }\n\n await putWithIndicator(\n client,\n receiveState.responseArid,\n responseEnvelope,\n \"Commitments\",\n options.verbose ?? false,\n );\n\n // On reject, clear listening ARID\n if (options.rejectReason !== undefined) {\n const groupRecordMut = registry.group(groupId);\n if (groupRecordMut !== null && groupRecordMut !== undefined) {\n groupRecordMut.clearListeningAtArid();\n registry.save(registryPath);\n }\n }\n\n const result: SignRound1Result = {\n accepted: options.rejectReason === undefined,\n };\n if (nextShareArid !== undefined) {\n result.listeningArid = nextShareArid.urString();\n }\n return result;\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAgFA,SAAS,iBACP,cACA,WACA,WACA,UACc;CACd,MAAM,OAAO,KAAK,QAAQ,YAAY;CACtC,MAAM,gBAAgB,KAAK,KAAK,MAAM,aAAa;CAGnD,IAAI;CACJ,IAAI,cAAc,KAAA,GAChB,YAAY,CAAC,CAAC,WAAW,KAAK,KAAK,eAAe,UAAU,IAAI,CAAC,CAAC,CAAC;MAC9D;EACL,YAAY,CAAC;EACb,IAAI,GAAG,WAAW,aAAa;QACxB,MAAM,SAAS,GAAG,YAAY,eAAe,EAAE,eAAe,KAAK,CAAC,GACvE,IAAI,MAAM,YAAY,GAAG;IACvB,MAAM,UAAU,MAAM;IAEtB,IAAI,QAAQ,WAAW,MAAM,iBAAiB,KAAK,OAAO,GAAG;KAC3D,MAAM,UAAU,KAAK,QAAQ,OAAO;KACpC,UAAU,KAAK,CAAC,SAAS,KAAK,KAAK,eAAe,OAAO,CAAC,CAAC;IAC7D;GACF;;CAGN;CAGA,MAAM,aAA+B,CAAC;CACtC,KAAK,MAAM,CAAC,SAAS,aAAa,WAAW;EAC3C,MAAM,YAAY,KAAK,KAAK,UAAU,WAAW,UAAU,IAAI,GAAG,mBAAmB;EACrF,IAAI,GAAG,WAAW,SAAS,GACzB,WAAW,KAAK,CAAC,SAAS,SAAS,CAAC;CAExC;CAEA,IAAI,WAAW,WAAW,GACxB,MAAM,IAAI,MACR,yFACF;CAEF,IAAI,WAAW,SAAS,GACtB,MAAM,IAAI,MAAM,mEAAmE;CAGrF,MAAM,CAAC,SAAS,YAAY,WAAW;CAavC,MAAM,MAAM,KAAK,MAAM,GAAG,aAAa,UAAU,OAAO,CAAC;CAGzD,MAAM,iBAAiB,YAAY,IAAI,OAAO;CAC9C,IAAI,eAAe,SAAS,MAAM,UAAU,SAAS,GACnD,MAAM,IAAI,MACR,WAAW,eAAe,SAAS,EAAE,yDAAyD,UAAU,SAAS,GACnH;CAGF,MAAM,eAAe,YAAY,IAAI,aAAa;CAClD,MAAM,WAAW,IAAI;CACrB,MAAM,gBAAgB,IAAI;CAC1B,MAAM,iBAAiB,IAAI,aAAa,aAAa;CAGrD,IAAI;CACJ,MAAM,oBAAoB,SAAS,YAAY,cAAc;CAC7D,IAAI,sBAAsB,QAAQ,sBAAsB,KAAA,GACtD,iBAAiB,kBAAkB,YAAY;MAC1C;EACL,MAAM,QAAQ,SAAS,MAAM;EAC7B,IAAI,OAAO,IAAI,CAAC,CAAC,SAAS,MAAM,eAAe,SAAS,GACtD,iBAAiB,MAAM,YAAY;OAEnC,MAAM,IAAI,MACR,eAAe,eAAe,SAAS,EAAE,yDAC3C;CAEJ;CAGA,MAAM,kBAAkB,SAAS,aAAa,IAAI,gBAAgB;CAGlE,MAAM,eAAsB,IAAI,aAAa,KAAK,MAAc,IAAI,aAAa,CAAC,CAAC;CAEnF,OAAO;EACL;EACA;EACA;EACA;EACA;EACA;CACF;AACF;;;;;;AAOA,SAAS,sBACP,cACA,WACA,UACA,kBACe;CACf,MAAM,MAAM,SAAS,IAAI;CAGzB,MAAM,gBAAgB,cAAc,gBAClC,aAAa,iBACb,KAAA,GACA,IAAI,SAAS,GACb,gBACF;CAGA,IAAI,CAAC,cAAc,QAAQ,CAAC,CAAC,SAAS,CAAC,CAAC,OAAOA,SAAiB,WAAW,YAAY,CAAC,GACtF,MAAM,IAAI,MAAM,gCAAgC,OAAO,cAAc,QAAQ,CAAC,CAAC,SAAS,CAAC,GAAG;CAI9F,IAAI,cAAc,QAAQ,CAAC,CAAC,GAAG,CAAC,CAAC,SAAS,MAAM,UAAU,SAAS,GACjE,MAAM,IAAI,MACR,8BAA8B,UAAU,SAAS,EAAE,YAAY,cAAc,QAAQ,CAAC,CAAC,GAAG,CAAC,CAAC,SAAS,EAAE,EACzG;CAIF,MAAM,eAAe,cAAc,0BAAgC,OAAO;CAC1E,IAAI,aAAa,SAAS,MAAM,aAAa,QAAQ,SAAS,GAC5D,MAAM,IAAI,MACR,4BAA4B,aAAa,QAAQ,SAAS,EAAE,YAAY,aAAa,SAAS,EAAE,EAClG;CAKF,IAAI,CADyB,aAAa,aAAa,KAAK,MAAM,EAAE,SAAS,CACrD,CAAC,CAAC,SAAS,SAAS,SAAS,CAAC,GACpD,MAAM,IAAI,MAAM,gEAAgE;CAGlF,OAAO;AACT;;;;;;AAOA,SAAS,kBACP,WACA,aACA,cACU;CAEV,MAAM,wBAAwB,4BAA4B,WAAW;CACrE,MAAM,UAAU,KAAK,UAAU,qBAAqB;CACpD,MAAM,YAAY,IAAI,YAAY,CAAC,CAAC,OAAO,OAAO;CAClD,MAAM,kBAAkBC,OAAY,SAAS,SAAS;CAGtD,OAAO,SAAS,KAAK,CAAC,CACnB,QAAQ,oBAAoB,CAAC,CAC7B,aAAa,WAAW,SAAS,CAAC,CAClC,aAAa,eAAe,gBAAgB,eAAe,CAAC,CAAC,CAC7D,aAAa,iBAAiB,YAAY;AAC/C;;;;;;AAOA,SAAS,mBACP,cACA,SACA,WACA,cACA,eACA,oBACA,gBACA,eACM;CACN,MAAM,MAAM,gBAAgB,cAAc,QAAQ,IAAI,GAAG,UAAU,IAAI,CAAC;CACxE,GAAG,UAAU,KAAK,EAAE,WAAW,KAAK,CAAC;CAGrC,MAAM,mBAAmB,uBAAuB,aAAa;CAC7D,MAAM,wBAAwB,4BAA4B,kBAAkB;CAG5E,MAAM,cAOF;EACF,SAAS,UAAU,SAAS;EAC5B,eAAe,aAAa,aAAa,SAAS;EAClD,iBAAiB,cAAc,SAAS;EACxC,QAAQ,eAAe,SAAS;EAChC,gBAAgB;EAChB,qBAAqB;CACvB;CAEA,GAAG,cAAc,KAAK,KAAK,KAAK,aAAa,GAAG,KAAK,UAAU,aAAa,MAAM,CAAC,CAAC;AACtF;;;;;;;;AASA,eAAsB,OACpB,SACA,SACA,KAC2B;CAE3B,IAAI,QAAQ,qBAAqB,KAAA,KAAa,QAAQ,YAAY,MAChE,MAAM,IAAI,MAAM,4CAA4C;CAE9D,IAAI,QAAQ,qBAAqB,KAAA,KAAa,QAAQ,YAAY,MAChE,MAAM,IAAI,MAAM,sDAAsD;CAGxE,MAAM,eAAe,oBAAoB,QAAQ,cAAc,GAAG;CAClE,MAAM,WAAW,SAAS,KAAK,YAAY;CAE3C,MAAM,QAAQ,SAAS,MAAM;CAC7B,IAAI,CAAC,OACH,MAAM,IAAI,MAAM,4BAA4B;CAG9C,MAAM,YAAY,YAAY,QAAQ,SAAS;CAI/C,MAAM,eAAe,iBAAiB,cAAc,WAHlC,QAAQ,YAAY,KAAA,IAAY,YAAY,QAAQ,OAAO,IAAI,KAAA,GAGP,QAAQ;CAClF,MAAM,UAAU,aAAa;CAG7B,MAAM,cAAc,SAAS,MAAM,OAAO;CAC1C,IAAI,gBAAgB,QAAQ,gBAAgB,KAAA,GAC1C,MAAM,IAAI,MAAM,6BAA6B;CAI/C,MAAM,YAAY,MAAM,YAAY,CAAC,CAAC,qBAAqB;CAC3D,IAAI,cAAc,KAAA,GAChB,MAAM,IAAI,MAAM,wCAAwC;CAI1D,MAAM,gBAAgB,sBAAsB,cAAc,WAAW,MAAM,IAAI,GAAG,SAAS;CAG3F,MAAM,gBAAgB,YAAY,cAAc;CAChD,IAAI,kBAAkB,QAAQ,kBAAkB,KAAA,GAC9C,MAAM,IAAI,MAAM,iDAAiD;CAEnE,MAAM,iBAAiB,cAAc;CACrC,IAAI,mBAAmB,KAAA,GACrB,MAAM,IAAI,MAAM,iDAAiD;CASnE,MAAM,aAAa,sBADI,KAAK,MAAM,GAAG,aAAa,gBAAgB,OAAO,CACnB,CAAC,CAAC,WAAW;CAGnE,MAAM,iBAAiB,SAAS,aAAa,aAAa,QAAQ;CAElE,MAAM,oBAAoB,MAAM,YAAY,CAAC,CAAC,qBAAqB;CACnE,IAAI,sBAAsB,KAAA,GACxB,MAAM,IAAI,MAAM,wCAAwC;CAG1D,IAAI;CACJ,IAAI;CAEJ,IAAI,QAAQ,iBAAiB,KAAA,GAAW;EAEtC,MAAM,YAAY,SAAS,IAAI,kBAAkB,CAAC,CAC/C,aAAa,SAAS,OAAO,CAAC,CAC9B,aAAa,WAAW,SAAS,CAAC,CAClC,aAAa,UAAU,QAAQ,YAAY;EAE9C,iBAAiB,eAAe,WAAW,cAAc,QAAQ,CAAC,CAAC,GAAG,GAAG,MAAM,YAAY,CAAC,CAAC,CAC1F,UAAU,SAAS,CAAC,CACpB,qBAAqB,cAAc,iBAAiB,CAAC;CAC1D,OAAO;EAGL,MAAM,CAAC,eAAe,sBAAsB,cAAc,YAD9C,UAC4D,CAAC;EAEzE,MAAM,YAAY,KAAK,IAAI;EAC3B,gBAAgB;EAGhB,MAAM,eAAe,kBAAkB,WAAW,oBAAoB,SAAS;EAG/E,IAAI,QAAQ,YAAY,MAAM;GAC5B,mBACE,cACA,SACA,WACA,cACA,eACA,oBACA,gBACA,SACF;GAGA,MAAM,iBAAiB,SAAS,MAAM,OAAO;GAC7C,IAAI,mBAAmB,QAAQ,mBAAmB,KAAA,GAAW;IAC3D,eAAe,mBAAmB,SAAS;IAC3C,SAAS,KAAK,YAAY;GAC5B;EACF;EAEA,iBAAiB,eAAe,WAAW,cAAc,QAAQ,CAAC,CAAC,GAAG,GAAG,MAAM,YAAY,CAAC,CAAC,CAC1F,WAAW,YAAY,CAAC,CACxB,qBAAqB,cAAc,iBAAiB,CAAC;CAC1D;CAGA,IAAI,QAAQ,YAAY,MAAM;EAE5B,MAAM,aADW,eAAe,WAAW,KAAA,GAAW,mBAAmB,KAAA,CAC/C,CAAC,CAAC,SAAS;EACrC,QAAQ,IAAI,UAAU;EACtB,OAAO;GACL,UAAU,QAAQ,iBAAiB,KAAA;GACnC;EACF;CACF;CAGA,MAAM,aAAa,IAAI,KAAK,KAAK,IAAI,IAAI,OAAU,GAAI;CACvD,MAAM,mBAAmB,eAAe,WACtC,YACA,mBACA,aAAa,cACf;CAGA,IAAI,QAAQ,qBAAqB,KAAA,GAC/B,MAAM,IAAI,MAAM,gDAAgD;CAElE,MAAM,SAAS,MAAM,oBAAoB,QAAQ,gBAAgB;CAEjE,IAAI,QAAQ,YAAY,MACtB,QAAQ,MAAM,kCAAkC,aAAa,aAAa,SAAS,GAAG;CAGxF,MAAM,iBACJ,QACA,aAAa,cACb,kBACA,eACA,QAAQ,WAAW,KACrB;CAGA,IAAI,QAAQ,iBAAiB,KAAA,GAAW;EACtC,MAAM,iBAAiB,SAAS,MAAM,OAAO;EAC7C,IAAI,mBAAmB,QAAQ,mBAAmB,KAAA,GAAW;GAC3D,eAAe,qBAAqB;GACpC,SAAS,KAAK,YAAY;EAC5B;CACF;CAEA,MAAM,SAA2B,EAC/B,UAAU,QAAQ,iBAAiB,KAAA,EACrC;CACA,IAAI,kBAAkB,KAAA,GACpB,OAAO,gBAAgB,cAAc,SAAS;CAEhD,OAAO;AACT"}
|
|
1
|
+
{"version":3,"file":"round1-I9T20net.mjs","names":["EnvelopeFunction","JSONWrapper"],"sources":["../src/cmd/sign/participant/round1.ts"],"sourcesContent":["/**\n * Copyright © 2023-2026 Blockchain Commons, LLC\n * Copyright © 2025-2026 Parity Technologies\n *\n *\n * Sign participant round 1 command.\n *\n * Port of cmd/sign/participant/round1.rs from frost-hubert-rust.\n *\n * @module\n */\n\nimport * as fs from \"node:fs\";\nimport * as path from \"node:path\";\n\nimport { ARID, JSON as JSONWrapper, type PrivateKeys, XID } from \"@bcts/components\";\nimport { CborDate } from \"@bcts/dcbor\";\nimport { Envelope, Function as EnvelopeFunction } from \"@bcts/envelope\";\nimport { SealedRequest, SealedResponse } from \"@bcts/gstp\";\nimport type { XIDDocument } from \"@bcts/xid\";\n\nimport { Registry, resolveRegistryPath } from \"../../../registry/index.js\";\nimport { putWithIndicator } from \"../../busy.js\";\nimport { createStorageClient, type StorageClient, type StorageSelection } from \"../../storage.js\";\nimport { parseAridUr } from \"../../dkg/common.js\";\nimport { signingStateDir } from \"../common.js\";\nimport {\n signingRound1,\n deserializeKeyPackage,\n serializeSigningNonces,\n serializeSigningCommitments,\n createRng,\n type SerializedKeyPackage,\n type SerializedSigningNonces,\n type SerializedSigningCommitments,\n type Ed25519SigningNonces,\n type Ed25519SigningCommitments,\n} from \"../../../frost/index.js\";\n\n/**\n * Options for the sign round1 command.\n */\nexport interface SignRound1Options {\n registryPath?: string;\n sessionId: string;\n groupId?: string;\n preview?: boolean;\n rejectReason?: string;\n storageSelection?: StorageSelection;\n verbose?: boolean;\n}\n\n/**\n * Result of the sign round1 command.\n */\nexport interface SignRound1Result {\n accepted: boolean;\n listeningArid?: string;\n envelopeUr?: string;\n}\n\n/**\n * Persisted receive state from sign_receive.json.\n *\n * Port of `struct ReceiveState` from cmd/sign/participant/round1.rs.\n */\ninterface ReceiveState {\n groupId: ARID;\n coordinatorDoc: XIDDocument;\n responseArid: ARID;\n targetUr: string;\n participants: XID[];\n requestEnvelope: Envelope;\n}\n\n/**\n * Load receive state from persisted sign_receive.json.\n *\n * Port of `load_receive_state()` from cmd/sign/participant/round1.rs lines 285-411.\n */\nfunction loadReceiveState(\n registryPath: string,\n sessionId: ARID,\n groupHint: ARID | undefined,\n registry: Registry,\n): ReceiveState {\n const base = path.dirname(registryPath);\n const groupStateDir = path.join(base, \"group-state\");\n\n // Collect candidate directories\n let groupDirs: [ARID, string][];\n if (groupHint !== undefined) {\n groupDirs = [[groupHint, path.join(groupStateDir, groupHint.hex())]];\n } else {\n groupDirs = [];\n if (fs.existsSync(groupStateDir)) {\n for (const entry of fs.readdirSync(groupStateDir, { withFileTypes: true })) {\n if (entry.isDirectory()) {\n const dirName = entry.name;\n // Check if it's a 64-character hex string (ARID hex)\n if (dirName.length === 64 && /^[0-9a-fA-F]+$/.test(dirName)) {\n const groupId = ARID.fromHex(dirName);\n groupDirs.push([groupId, path.join(groupStateDir, dirName)]);\n }\n }\n }\n }\n }\n\n // Search for sign_receive.json\n const candidates: [ARID, string][] = [];\n for (const [groupId, groupDir] of groupDirs) {\n const candidate = path.join(groupDir, \"signing\", sessionId.hex(), \"sign_receive.json\");\n if (fs.existsSync(candidate)) {\n candidates.push([groupId, candidate]);\n }\n }\n\n if (candidates.length === 0) {\n throw new Error(\n \"No sign_receive.json found for this session; run `frost sign participant receive` first\",\n );\n }\n if (candidates.length > 1) {\n throw new Error(\"Multiple groups contain this session; use --group to disambiguate\");\n }\n\n const [groupId, filePath] = candidates[0];\n\n // Parse the JSON file\n interface SignReceiveJson {\n session: string;\n group: string;\n response_arid: string;\n target: string;\n coordinator: string;\n participants: string[];\n request_envelope: string;\n }\n\n const raw = JSON.parse(fs.readFileSync(filePath, \"utf-8\")) as SignReceiveJson;\n\n // Validate session matches\n const sessionInState = parseAridUr(raw.session);\n if (sessionInState.urString() !== sessionId.urString()) {\n throw new Error(\n `Session ${sessionInState.urString()} in sign_receive.json does not match requested session ${sessionId.urString()}`,\n );\n }\n\n const responseArid = parseAridUr(raw.response_arid);\n const targetUr = raw.target;\n const coordinatorUr = raw.coordinator;\n const coordinatorXid = XID.fromURString(coordinatorUr);\n\n // Resolve coordinator document from registry\n let coordinatorDoc: XIDDocument;\n const participantRecord = registry.participant(coordinatorXid);\n if (participantRecord !== null && participantRecord !== undefined) {\n coordinatorDoc = participantRecord.xidDocument();\n } else {\n const owner = registry.owner();\n if (owner?.xid().urString() === coordinatorXid.urString()) {\n coordinatorDoc = owner.xidDocument();\n } else {\n throw new Error(\n `Coordinator ${coordinatorXid.urString()} not found in registry and cannot resolve encryption key`,\n );\n }\n }\n\n // Parse request envelope\n const requestEnvelope = Envelope.fromURString(raw.request_envelope);\n\n // Parse participants\n const participants: XID[] = raw.participants.map((s: string) => XID.fromURString(s));\n\n return {\n groupId,\n coordinatorDoc,\n responseArid,\n targetUr,\n participants,\n requestEnvelope,\n };\n}\n\n/**\n * Validate the commit request from persisted state.\n *\n * Port of request validation in `CommandArgs::exec()` from cmd/sign/participant/round1.rs lines 100-138.\n */\nfunction validateCommitRequest(\n receiveState: ReceiveState,\n sessionId: ARID,\n ownerXid: XID,\n ownerPrivateKeys: PrivateKeys,\n): SealedRequest {\n const now = CborDate.now();\n\n // Decrypt and parse the request\n const sealedRequest = SealedRequest.tryFromEnvelope(\n receiveState.requestEnvelope,\n undefined,\n now.datetime(),\n ownerPrivateKeys,\n );\n\n // Validate function\n if (!sealedRequest.request().function().equals(EnvelopeFunction.fromString(\"signInvite\"))) {\n throw new Error(`Unexpected request function: ${String(sealedRequest.request().function())}`);\n }\n\n // Validate session ID\n if (sealedRequest.request().id().urString() !== sessionId.urString()) {\n throw new Error(\n `Session ID mismatch (state ${sessionId.urString()}, request ${sealedRequest.request().id().urString()})`,\n );\n }\n\n // Validate group ID\n const requestGroup = sealedRequest.extractObjectForParameter<ARID>(\"group\");\n if (requestGroup.urString() !== receiveState.groupId.urString()) {\n throw new Error(\n `Group ID mismatch (state ${receiveState.groupId.urString()}, request ${requestGroup.urString()})`,\n );\n }\n\n // Validate participant is included\n const participantUrStrings = receiveState.participants.map((p) => p.urString());\n if (!participantUrStrings.includes(ownerXid.urString())) {\n throw new Error(\"Persisted signInvite request does not include this participant\");\n }\n\n return sealedRequest;\n}\n\n/**\n * Build the response body envelope.\n *\n * Port of response body building from cmd/sign/participant/round1.rs lines 191-195.\n */\nfunction buildResponseBody(\n sessionId: ARID,\n commitments: Ed25519SigningCommitments,\n responseArid: ARID,\n): Envelope {\n // Serialize commitments to JSON and wrap as CBOR JSON\n const serializedCommitments = serializeSigningCommitments(commitments);\n const jsonStr = JSON.stringify(serializedCommitments);\n const jsonBytes = new TextEncoder().encode(jsonStr);\n const commitmentsJson = JSONWrapper.fromData(jsonBytes);\n\n // Build response body: unit subject with type and assertions\n return Envelope.unit()\n .addType(\"signRound1Response\")\n .addAssertion(\"session\", sessionId)\n .addAssertion(\"commitments\", commitmentsJson.taggedCborData())\n .addAssertion(\"response_arid\", responseArid);\n}\n\n/**\n * Persist commit state (nonces and commitments) to disk.\n *\n * Port of `persist_commit_state()` from cmd/sign/participant/round1.rs lines 413-461.\n */\nfunction persistCommitState(\n registryPath: string,\n groupId: ARID,\n sessionId: ARID,\n receiveState: ReceiveState,\n signingNonces: Ed25519SigningNonces,\n signingCommitments: Ed25519SigningCommitments,\n targetEnvelope: Envelope,\n nextShareArid: ARID,\n): void {\n const dir = signingStateDir(registryPath, groupId.hex(), sessionId.hex());\n fs.mkdirSync(dir, { recursive: true });\n\n // Serialize nonces and commitments\n const serializedNonces = serializeSigningNonces(signingNonces);\n const serializedCommitments = serializeSigningCommitments(signingCommitments);\n\n // Build commit state JSON\n const commitState: {\n session: string;\n response_arid: string;\n next_share_arid: string;\n target: string;\n signing_nonces: SerializedSigningNonces;\n signing_commitments: SerializedSigningCommitments;\n } = {\n session: sessionId.urString(),\n response_arid: receiveState.responseArid.urString(),\n next_share_arid: nextShareArid.urString(),\n target: targetEnvelope.urString(),\n signing_nonces: serializedNonces,\n signing_commitments: serializedCommitments,\n };\n\n fs.writeFileSync(path.join(dir, \"commit.json\"), JSON.stringify(commitState, null, 2));\n}\n\n/**\n * Execute the sign participant round 1 command.\n *\n * Responds to the sign invite with signing commitments.\n *\n * Port of `CommandArgs::exec()` from cmd/sign/participant/round1.rs lines 58-273.\n */\nexport async function round1(\n _client: StorageClient | undefined,\n options: SignRound1Options,\n cwd: string,\n): Promise<SignRound1Result> {\n // Validate options\n if (options.storageSelection === undefined && options.preview !== true) {\n throw new Error(\"Hubert storage is required for sign commit\");\n }\n if (options.storageSelection !== undefined && options.preview === true) {\n throw new Error(\"--preview cannot be used with Hubert storage options\");\n }\n\n const registryPath = resolveRegistryPath(options.registryPath, cwd);\n const registry = Registry.load(registryPath);\n\n const owner = registry.owner();\n if (!owner) {\n throw new Error(\"Registry owner is required\");\n }\n\n const sessionId = parseAridUr(options.sessionId);\n const groupHint = options.groupId !== undefined ? parseAridUr(options.groupId) : undefined;\n\n // Load receive state\n const receiveState = loadReceiveState(registryPath, sessionId, groupHint, registry);\n const groupId = receiveState.groupId;\n\n // Get group record\n const groupRecord = registry.group(groupId);\n if (groupRecord === null || groupRecord === undefined) {\n throw new Error(\"Group not found in registry\");\n }\n\n // Get owner private keys\n const ownerKeys = owner.xidDocument().inceptionPrivateKeys();\n if (ownerKeys === undefined) {\n throw new Error(\"Owner XID document has no private keys\");\n }\n\n // Validate the commit request\n const sealedRequest = validateCommitRequest(receiveState, sessionId, owner.xid(), ownerKeys);\n\n // Load key package\n const contributions = groupRecord.contributions();\n if (contributions === null || contributions === undefined) {\n throw new Error(\"Key package path not found; did you finish DKG?\");\n }\n const keyPackagePath = contributions.keyPackage;\n if (keyPackagePath === undefined) {\n throw new Error(\"Key package path not found; did you finish DKG?\");\n }\n\n interface KeyPackageFile {\n group: string;\n key_package: SerializedKeyPackage;\n }\n\n const keyPackageFile = JSON.parse(fs.readFileSync(keyPackagePath, \"utf-8\")) as KeyPackageFile;\n const keyPackage = deserializeKeyPackage(keyPackageFile.key_package);\n\n // Parse target envelope\n const targetEnvelope = Envelope.fromURString(receiveState.targetUr);\n\n const signerPrivateKeys = owner.xidDocument().inceptionPrivateKeys();\n if (signerPrivateKeys === undefined) {\n throw new Error(\"Owner XID document has no signing keys\");\n }\n\n let sealedResponse: SealedResponse;\n let nextShareArid: ARID | undefined;\n\n if (options.rejectReason !== undefined) {\n // Build rejection response\n const errorBody = Envelope.new(\"signCommitReject\")\n .addAssertion(\"group\", groupId)\n .addAssertion(\"session\", sessionId)\n .addAssertion(\"reason\", options.rejectReason);\n\n sealedResponse = SealedResponse.newFailure(sealedRequest.request().id(), owner.xidDocument())\n .withError(errorBody)\n .withPeerContinuation(sealedRequest.peerContinuation());\n } else {\n // Run signing round 1 - generate nonces and commitments\n const rng = createRng();\n const [signingNonces, signingCommitments] = signingRound1(keyPackage, rng);\n\n const nextShare = ARID.new();\n nextShareArid = nextShare;\n\n // Build response body\n const responseBody = buildResponseBody(sessionId, signingCommitments, nextShare);\n\n // Persist commit state (unless preview mode)\n if (options.preview !== true) {\n persistCommitState(\n registryPath,\n groupId,\n sessionId,\n receiveState,\n signingNonces,\n signingCommitments,\n targetEnvelope,\n nextShare,\n );\n\n // Update listening ARID for next request\n const groupRecordMut = registry.group(groupId);\n if (groupRecordMut !== null && groupRecordMut !== undefined) {\n groupRecordMut.setListeningAtArid(nextShare);\n registry.save(registryPath);\n }\n }\n\n sealedResponse = SealedResponse.newSuccess(sealedRequest.request().id(), owner.xidDocument())\n .withResult(responseBody)\n .withPeerContinuation(sealedRequest.peerContinuation());\n }\n\n // Handle preview mode\n if (options.preview === true) {\n const unsealed = sealedResponse.toEnvelope(undefined, signerPrivateKeys, undefined);\n const envelopeUr = unsealed.urString();\n console.log(envelopeUr);\n return {\n accepted: options.rejectReason === undefined,\n envelopeUr,\n };\n }\n\n // Build encrypted response envelope\n const validUntil = new Date(Date.now() + 60 * 60 * 1000); // 1 hour from now\n const responseEnvelope = sealedResponse.toEnvelope(\n validUntil,\n signerPrivateKeys,\n receiveState.coordinatorDoc,\n );\n\n // Post response to Hubert storage\n if (options.storageSelection === undefined) {\n throw new Error(\"Storage selection is required to post response\");\n }\n const client = await createStorageClient(options.storageSelection);\n\n if (options.verbose === true) {\n console.error(`Posting signInvite response to ${receiveState.responseArid.urString()}`);\n }\n\n await putWithIndicator(\n client,\n receiveState.responseArid,\n responseEnvelope,\n \"Commitments\",\n options.verbose ?? false,\n );\n\n // On reject, clear listening ARID\n if (options.rejectReason !== undefined) {\n const groupRecordMut = registry.group(groupId);\n if (groupRecordMut !== null && groupRecordMut !== undefined) {\n groupRecordMut.clearListeningAtArid();\n registry.save(registryPath);\n }\n }\n\n const result: SignRound1Result = {\n accepted: options.rejectReason === undefined,\n };\n if (nextShareArid !== undefined) {\n result.listeningArid = nextShareArid.urString();\n }\n return result;\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAgFA,SAAS,iBACP,cACA,WACA,WACA,UACc;CACd,MAAM,OAAO,KAAK,QAAQ,YAAY;CACtC,MAAM,gBAAgB,KAAK,KAAK,MAAM,aAAa;CAGnD,IAAI;CACJ,IAAI,cAAc,KAAA,GAChB,YAAY,CAAC,CAAC,WAAW,KAAK,KAAK,eAAe,UAAU,IAAI,CAAC,CAAC,CAAC;MAC9D;EACL,YAAY,CAAC;EACb,IAAI,GAAG,WAAW,aAAa;QACxB,MAAM,SAAS,GAAG,YAAY,eAAe,EAAE,eAAe,KAAK,CAAC,GACvE,IAAI,MAAM,YAAY,GAAG;IACvB,MAAM,UAAU,MAAM;IAEtB,IAAI,QAAQ,WAAW,MAAM,iBAAiB,KAAK,OAAO,GAAG;KAC3D,MAAM,UAAU,KAAK,QAAQ,OAAO;KACpC,UAAU,KAAK,CAAC,SAAS,KAAK,KAAK,eAAe,OAAO,CAAC,CAAC;IAC7D;GACF;;CAGN;CAGA,MAAM,aAA+B,CAAC;CACtC,KAAK,MAAM,CAAC,SAAS,aAAa,WAAW;EAC3C,MAAM,YAAY,KAAK,KAAK,UAAU,WAAW,UAAU,IAAI,GAAG,mBAAmB;EACrF,IAAI,GAAG,WAAW,SAAS,GACzB,WAAW,KAAK,CAAC,SAAS,SAAS,CAAC;CAExC;CAEA,IAAI,WAAW,WAAW,GACxB,MAAM,IAAI,MACR,yFACF;CAEF,IAAI,WAAW,SAAS,GACtB,MAAM,IAAI,MAAM,mEAAmE;CAGrF,MAAM,CAAC,SAAS,YAAY,WAAW;CAavC,MAAM,MAAM,KAAK,MAAM,GAAG,aAAa,UAAU,OAAO,CAAC;CAGzD,MAAM,iBAAiB,YAAY,IAAI,OAAO;CAC9C,IAAI,eAAe,SAAS,MAAM,UAAU,SAAS,GACnD,MAAM,IAAI,MACR,WAAW,eAAe,SAAS,EAAE,yDAAyD,UAAU,SAAS,GACnH;CAGF,MAAM,eAAe,YAAY,IAAI,aAAa;CAClD,MAAM,WAAW,IAAI;CACrB,MAAM,gBAAgB,IAAI;CAC1B,MAAM,iBAAiB,IAAI,aAAa,aAAa;CAGrD,IAAI;CACJ,MAAM,oBAAoB,SAAS,YAAY,cAAc;CAC7D,IAAI,sBAAsB,QAAQ,sBAAsB,KAAA,GACtD,iBAAiB,kBAAkB,YAAY;MAC1C;EACL,MAAM,QAAQ,SAAS,MAAM;EAC7B,IAAI,OAAO,IAAI,CAAC,CAAC,SAAS,MAAM,eAAe,SAAS,GACtD,iBAAiB,MAAM,YAAY;OAEnC,MAAM,IAAI,MACR,eAAe,eAAe,SAAS,EAAE,yDAC3C;CAEJ;CAGA,MAAM,kBAAkB,SAAS,aAAa,IAAI,gBAAgB;CAGlE,MAAM,eAAsB,IAAI,aAAa,KAAK,MAAc,IAAI,aAAa,CAAC,CAAC;CAEnF,OAAO;EACL;EACA;EACA;EACA;EACA;EACA;CACF;AACF;;;;;;AAOA,SAAS,sBACP,cACA,WACA,UACA,kBACe;CACf,MAAM,MAAM,SAAS,IAAI;CAGzB,MAAM,gBAAgB,cAAc,gBAClC,aAAa,iBACb,KAAA,GACA,IAAI,SAAS,GACb,gBACF;CAGA,IAAI,CAAC,cAAc,QAAQ,CAAC,CAAC,SAAS,CAAC,CAAC,OAAOA,SAAiB,WAAW,YAAY,CAAC,GACtF,MAAM,IAAI,MAAM,gCAAgC,OAAO,cAAc,QAAQ,CAAC,CAAC,SAAS,CAAC,GAAG;CAI9F,IAAI,cAAc,QAAQ,CAAC,CAAC,GAAG,CAAC,CAAC,SAAS,MAAM,UAAU,SAAS,GACjE,MAAM,IAAI,MACR,8BAA8B,UAAU,SAAS,EAAE,YAAY,cAAc,QAAQ,CAAC,CAAC,GAAG,CAAC,CAAC,SAAS,EAAE,EACzG;CAIF,MAAM,eAAe,cAAc,0BAAgC,OAAO;CAC1E,IAAI,aAAa,SAAS,MAAM,aAAa,QAAQ,SAAS,GAC5D,MAAM,IAAI,MACR,4BAA4B,aAAa,QAAQ,SAAS,EAAE,YAAY,aAAa,SAAS,EAAE,EAClG;CAKF,IAAI,CADyB,aAAa,aAAa,KAAK,MAAM,EAAE,SAAS,CACrD,CAAC,CAAC,SAAS,SAAS,SAAS,CAAC,GACpD,MAAM,IAAI,MAAM,gEAAgE;CAGlF,OAAO;AACT;;;;;;AAOA,SAAS,kBACP,WACA,aACA,cACU;CAEV,MAAM,wBAAwB,4BAA4B,WAAW;CACrE,MAAM,UAAU,KAAK,UAAU,qBAAqB;CACpD,MAAM,YAAY,IAAI,YAAY,CAAC,CAAC,OAAO,OAAO;CAClD,MAAM,kBAAkBC,OAAY,SAAS,SAAS;CAGtD,OAAO,SAAS,KAAK,CAAC,CACnB,QAAQ,oBAAoB,CAAC,CAC7B,aAAa,WAAW,SAAS,CAAC,CAClC,aAAa,eAAe,gBAAgB,eAAe,CAAC,CAAC,CAC7D,aAAa,iBAAiB,YAAY;AAC/C;;;;;;AAOA,SAAS,mBACP,cACA,SACA,WACA,cACA,eACA,oBACA,gBACA,eACM;CACN,MAAM,MAAM,gBAAgB,cAAc,QAAQ,IAAI,GAAG,UAAU,IAAI,CAAC;CACxE,GAAG,UAAU,KAAK,EAAE,WAAW,KAAK,CAAC;CAGrC,MAAM,mBAAmB,uBAAuB,aAAa;CAC7D,MAAM,wBAAwB,4BAA4B,kBAAkB;CAG5E,MAAM,cAOF;EACF,SAAS,UAAU,SAAS;EAC5B,eAAe,aAAa,aAAa,SAAS;EAClD,iBAAiB,cAAc,SAAS;EACxC,QAAQ,eAAe,SAAS;EAChC,gBAAgB;EAChB,qBAAqB;CACvB;CAEA,GAAG,cAAc,KAAK,KAAK,KAAK,aAAa,GAAG,KAAK,UAAU,aAAa,MAAM,CAAC,CAAC;AACtF;;;;;;;;AASA,eAAsB,OACpB,SACA,SACA,KAC2B;CAE3B,IAAI,QAAQ,qBAAqB,KAAA,KAAa,QAAQ,YAAY,MAChE,MAAM,IAAI,MAAM,4CAA4C;CAE9D,IAAI,QAAQ,qBAAqB,KAAA,KAAa,QAAQ,YAAY,MAChE,MAAM,IAAI,MAAM,sDAAsD;CAGxE,MAAM,eAAe,oBAAoB,QAAQ,cAAc,GAAG;CAClE,MAAM,WAAW,SAAS,KAAK,YAAY;CAE3C,MAAM,QAAQ,SAAS,MAAM;CAC7B,IAAI,CAAC,OACH,MAAM,IAAI,MAAM,4BAA4B;CAG9C,MAAM,YAAY,YAAY,QAAQ,SAAS;CAI/C,MAAM,eAAe,iBAAiB,cAAc,WAHlC,QAAQ,YAAY,KAAA,IAAY,YAAY,QAAQ,OAAO,IAAI,KAAA,GAGP,QAAQ;CAClF,MAAM,UAAU,aAAa;CAG7B,MAAM,cAAc,SAAS,MAAM,OAAO;CAC1C,IAAI,gBAAgB,QAAQ,gBAAgB,KAAA,GAC1C,MAAM,IAAI,MAAM,6BAA6B;CAI/C,MAAM,YAAY,MAAM,YAAY,CAAC,CAAC,qBAAqB;CAC3D,IAAI,cAAc,KAAA,GAChB,MAAM,IAAI,MAAM,wCAAwC;CAI1D,MAAM,gBAAgB,sBAAsB,cAAc,WAAW,MAAM,IAAI,GAAG,SAAS;CAG3F,MAAM,gBAAgB,YAAY,cAAc;CAChD,IAAI,kBAAkB,QAAQ,kBAAkB,KAAA,GAC9C,MAAM,IAAI,MAAM,iDAAiD;CAEnE,MAAM,iBAAiB,cAAc;CACrC,IAAI,mBAAmB,KAAA,GACrB,MAAM,IAAI,MAAM,iDAAiD;CASnE,MAAM,aAAa,sBADI,KAAK,MAAM,GAAG,aAAa,gBAAgB,OAAO,CACnB,CAAC,CAAC,WAAW;CAGnE,MAAM,iBAAiB,SAAS,aAAa,aAAa,QAAQ;CAElE,MAAM,oBAAoB,MAAM,YAAY,CAAC,CAAC,qBAAqB;CACnE,IAAI,sBAAsB,KAAA,GACxB,MAAM,IAAI,MAAM,wCAAwC;CAG1D,IAAI;CACJ,IAAI;CAEJ,IAAI,QAAQ,iBAAiB,KAAA,GAAW;EAEtC,MAAM,YAAY,SAAS,IAAI,kBAAkB,CAAC,CAC/C,aAAa,SAAS,OAAO,CAAC,CAC9B,aAAa,WAAW,SAAS,CAAC,CAClC,aAAa,UAAU,QAAQ,YAAY;EAE9C,iBAAiB,eAAe,WAAW,cAAc,QAAQ,CAAC,CAAC,GAAG,GAAG,MAAM,YAAY,CAAC,CAAC,CAC1F,UAAU,SAAS,CAAC,CACpB,qBAAqB,cAAc,iBAAiB,CAAC;CAC1D,OAAO;EAGL,MAAM,CAAC,eAAe,sBAAsB,cAAc,YAD9C,UAC4D,CAAC;EAEzE,MAAM,YAAY,KAAK,IAAI;EAC3B,gBAAgB;EAGhB,MAAM,eAAe,kBAAkB,WAAW,oBAAoB,SAAS;EAG/E,IAAI,QAAQ,YAAY,MAAM;GAC5B,mBACE,cACA,SACA,WACA,cACA,eACA,oBACA,gBACA,SACF;GAGA,MAAM,iBAAiB,SAAS,MAAM,OAAO;GAC7C,IAAI,mBAAmB,QAAQ,mBAAmB,KAAA,GAAW;IAC3D,eAAe,mBAAmB,SAAS;IAC3C,SAAS,KAAK,YAAY;GAC5B;EACF;EAEA,iBAAiB,eAAe,WAAW,cAAc,QAAQ,CAAC,CAAC,GAAG,GAAG,MAAM,YAAY,CAAC,CAAC,CAC1F,WAAW,YAAY,CAAC,CACxB,qBAAqB,cAAc,iBAAiB,CAAC;CAC1D;CAGA,IAAI,QAAQ,YAAY,MAAM;EAE5B,MAAM,aADW,eAAe,WAAW,KAAA,GAAW,mBAAmB,KAAA,CAC/C,CAAC,CAAC,SAAS;EACrC,QAAQ,IAAI,UAAU;EACtB,OAAO;GACL,UAAU,QAAQ,iBAAiB,KAAA;GACnC;EACF;CACF;CAGA,MAAM,aAAa,IAAI,KAAK,KAAK,IAAI,IAAI,OAAU,GAAI;CACvD,MAAM,mBAAmB,eAAe,WACtC,YACA,mBACA,aAAa,cACf;CAGA,IAAI,QAAQ,qBAAqB,KAAA,GAC/B,MAAM,IAAI,MAAM,gDAAgD;CAElE,MAAM,SAAS,MAAM,oBAAoB,QAAQ,gBAAgB;CAEjE,IAAI,QAAQ,YAAY,MACtB,QAAQ,MAAM,kCAAkC,aAAa,aAAa,SAAS,GAAG;CAGxF,MAAM,iBACJ,QACA,aAAa,cACb,kBACA,eACA,QAAQ,WAAW,KACrB;CAGA,IAAI,QAAQ,iBAAiB,KAAA,GAAW;EACtC,MAAM,iBAAiB,SAAS,MAAM,OAAO;EAC7C,IAAI,mBAAmB,QAAQ,mBAAmB,KAAA,GAAW;GAC3D,eAAe,qBAAqB;GACpC,SAAS,KAAK,YAAY;EAC5B;CACF;CAEA,MAAM,SAA2B,EAC/B,UAAU,QAAQ,iBAAiB,KAAA,EACrC;CACA,IAAI,kBAAkB,KAAA,GACpB,OAAO,gBAAgB,cAAc,SAAS;CAEhD,OAAO;AACT"}
|
|
@@ -1,11 +1,11 @@
|
|
|
1
|
-
import { t as __exportAll } from "./rolldown-runtime-
|
|
1
|
+
import { t as __exportAll } from "./rolldown-runtime-BhDjJH2R.mjs";
|
|
2
2
|
import { n as compareXidBytes } from "./proposed-participant-Detb823_.mjs";
|
|
3
3
|
import { Registry, resolveRegistryPath } from "./registry/index.mjs";
|
|
4
|
-
import { c as parseAridUr, h as signingKeyFromVerifying } from "./common-
|
|
4
|
+
import { c as parseAridUr, h as signingKeyFromVerifying } from "./common-k2QC6AST.mjs";
|
|
5
5
|
import { n as putWithIndicator } from "./busy-BlU8_pS2.mjs";
|
|
6
6
|
import { f as parallelFetch, m as parallelSend } from "./parallel-PZiwHZT8.mjs";
|
|
7
7
|
import { aggregateSignatures, createSigningPackage, deserializePublicKeyPackage, deserializeSignatureShare, deserializeSigningCommitments, identifierFromU16, serializeSignature, serializeSignatureShare } from "./frost/index.mjs";
|
|
8
|
-
import { n as signingStateDir, t as SignFinalizeContent } from "./common
|
|
8
|
+
import { n as signingStateDir, t as SignFinalizeContent } from "./common-DCyUSYkT.mjs";
|
|
9
9
|
import { ARID, JSON as JSON$1, Signature, XID } from "@bcts/components";
|
|
10
10
|
import { Envelope } from "@bcts/envelope";
|
|
11
11
|
import * as fs from "node:fs";
|
|
@@ -394,4 +394,4 @@ async function round2(client, options, cwd) {
|
|
|
394
394
|
//#endregion
|
|
395
395
|
export { round2_exports as n, round2 as t };
|
|
396
396
|
|
|
397
|
-
//# sourceMappingURL=round2-
|
|
397
|
+
//# sourceMappingURL=round2-BmpKBQwi.mjs.map
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"round2-DmQvJDVj.mjs","names":["ARIDClass","XIDClass","JSONComponent"],"sources":["../src/cmd/sign/coordinator/round2.ts"],"sourcesContent":["/**\n * Copyright © 2023-2026 Blockchain Commons, LLC\n * Copyright © 2025-2026 Parity Technologies\n *\n *\n * Sign coordinator round 2 command.\n *\n * Port of cmd/sign/coordinator/round2.rs from frost-hubert-rust.\n *\n * @module\n */\n\n/* eslint-disable @typescript-eslint/no-unsafe-call */\n\nimport * as fs from \"node:fs\";\nimport * as path from \"node:path\";\n\nimport {\n type ARID,\n type XID,\n XID as XIDClass,\n ARID as ARIDClass,\n Signature,\n type PrivateKeys,\n JSON as JSONComponent,\n} from \"@bcts/components\";\nimport { Envelope } from \"@bcts/envelope\";\nimport { compareXidBytes } from \"../../../dkg/proposed-participant.js\";\nimport { type XIDDocument } from \"@bcts/xid\";\n\nimport { Registry, resolveRegistryPath } from \"../../../registry/index.js\";\nimport { parallelFetch, parallelSend, type CollectionResult } from \"../../parallel.js\";\nimport { type StorageClient } from \"../../storage.js\";\nimport { parseAridUr, signingKeyFromVerifying } from \"../../dkg/common.js\";\nimport { signingStateDir, SignFinalizeContent } from \"../common.js\";\nimport { putWithIndicator } from \"../../busy.js\";\nimport {\n aggregateSignatures,\n createSigningPackage,\n deserializeSigningCommitments,\n deserializeSignatureShare,\n deserializePublicKeyPackage,\n identifierFromU16,\n serializeSignature,\n serializeSignatureShare,\n type SerializedPublicKeyPackage,\n type SerializedSigningCommitments,\n type FrostIdentifier,\n type Ed25519SigningCommitments,\n type Ed25519SignatureShare,\n type FrostPublicKeyPackage,\n} from \"../../../frost/index.js\";\n\n/**\n * Options for the sign round2 command.\n */\nexport interface SignRound2Options {\n registryPath?: string;\n groupId?: string;\n sessionId: string;\n parallel?: boolean;\n timeoutSeconds?: number;\n previewFinalize?: boolean;\n verbose?: boolean;\n}\n\n/**\n * Result of the sign round2 command.\n */\nexport interface SignRound2Result {\n signature: string;\n signedEnvelope: string;\n accepted: number;\n rejected: number;\n errors: number;\n timeouts: number;\n}\n\n/**\n * Data extracted from a successful signature share response.\n *\n * Port of `struct SignRound2ResponseData` from cmd/sign/coordinator/round2.rs.\n */\ninterface SignRound2ResponseData {\n signatureShare: Ed25519SignatureShare;\n finalizeArid: ARID;\n}\n\n/**\n * State loaded from start.json.\n *\n * Port of `struct StartState` from cmd/sign/coordinator/round2.rs.\n */\ninterface StartState {\n groupId: ARID;\n minSigners: number;\n participants: XID[];\n targetUr: string;\n}\n\n/**\n * Individual participant's commitment data.\n *\n * Port of `struct ParticipantCommitment` from cmd/sign/coordinator/round2.rs.\n */\ninterface ParticipantCommitment {\n commitments: Ed25519SigningCommitments;\n shareArid: ARID;\n}\n\n/**\n * State loaded from commitments.json.\n *\n * Port of `struct CommitmentsState` from cmd/sign/coordinator/round2.rs.\n */\ninterface CommitmentsState {\n commitments: Map<string, ParticipantCommitment>; // XID UR string -> commitment\n}\n\n/**\n * Validate envelope and extract signature share data (for parallel fetch).\n *\n * Port of `validate_and_extract_share_response()` from cmd/sign/coordinator/round2.rs.\n */\nfunction validateAndExtractShareResponse(\n envelope: Envelope,\n _coordinatorKeys: PrivateKeys,\n expectedSender: XID,\n expectedSessionId: ARID,\n): SignRound2ResponseData | { rejected: string } {\n // In the full implementation, we would decrypt the sealed response here\n // For now, we extract the data from the envelope directly\n\n try {\n // Check the response type\n envelope.checkSubjectUnit();\n envelope.checkType(\"signRound2Response\");\n\n // Extract session ID using objectsForPredicate and then extract subjects\n const sessionObjects = envelope.objectsForPredicate(\"session\");\n if (sessionObjects.length === 0) {\n return { rejected: \"Missing session in response\" };\n }\n const responseSession = ARIDClass.fromTaggedCbor(sessionObjects[0].subject().tryLeaf());\n if (responseSession.urString() !== expectedSessionId.urString()) {\n return {\n rejected: `Response session ${responseSession.urString()} does not match expected ${expectedSessionId.urString()}`,\n };\n }\n\n // Extract participant XID (sender check)\n const participantObjects = envelope.objectsForPredicate(\"participant\");\n if (participantObjects.length === 0) {\n return { rejected: \"Missing participant in response\" };\n }\n const participantXid = XIDClass.fromTaggedCbor(participantObjects[0].subject().tryLeaf());\n if (participantXid.urString() !== expectedSender.urString()) {\n return {\n rejected: `Unexpected response sender: ${participantXid.urString()} (expected ${expectedSender.urString()})`,\n };\n }\n\n // Extract signature share (JSON-serialized)\n const shareObjects = envelope.objectsForPredicate(\"signature_share\");\n if (shareObjects.length === 0) {\n return { rejected: \"Missing signature_share in response\" };\n }\n const signatureShareJson = JSONComponent.fromTaggedCbor(shareObjects[0].subject().tryLeaf());\n const signatureShareData = JSON.parse(signatureShareJson.toString()) as { share: string };\n const signatureShare = deserializeSignatureShare(signatureShareData.share);\n\n // Extract finalize ARID (response_arid)\n const responseAridObjects = envelope.objectsForPredicate(\"response_arid\");\n if (responseAridObjects.length === 0) {\n return { rejected: \"Missing response_arid in response\" };\n }\n const finalizeArid = ARIDClass.fromTaggedCbor(responseAridObjects[0].subject().tryLeaf());\n\n return { signatureShare, finalizeArid };\n } catch (error) {\n const message = error instanceof Error ? error.message : String(error);\n return { rejected: `Failed to parse response: ${message}` };\n }\n}\n\n/**\n * Collect signature shares in parallel with progress display.\n *\n * Port of `collect_shares_parallel()` from cmd/sign/coordinator/round2.rs.\n */\nasync function collectSharesParallel(\n client: StorageClient,\n registry: Registry,\n commitmentsState: CommitmentsState,\n coordinator: XIDDocument,\n sessionId: ARID,\n timeoutSeconds?: number,\n): Promise<CollectionResult<SignRound2ResponseData>> {\n // Build requests from commitments\n const requests: [XID, ARID, string][] = [];\n\n for (const [xidUr, entry] of commitmentsState.commitments) {\n const xid = XIDClass.fromURString(xidUr);\n const participant = registry.participant(xid);\n const name = participant?.petName() ?? xid.urString();\n requests.push([xid, entry.shareArid, name]);\n }\n\n const coordinatorKeys = coordinator.inceptionPrivateKeys();\n if (!coordinatorKeys) {\n throw new Error(\"Coordinator XID document has no inception private keys\");\n }\n\n const session = sessionId;\n\n return parallelFetch(\n client,\n requests,\n (envelope: Envelope, xid: XID) => {\n return validateAndExtractShareResponse(envelope, coordinatorKeys, xid, session);\n },\n {\n timeoutSeconds,\n verbose: false,\n },\n );\n}\n\n/**\n * Build a finalize event containing all signature shares.\n *\n * Port of `build_finalize_event()` from cmd/sign/coordinator/round2.rs.\n */\nfunction buildFinalizeEvent(\n _sender: XIDDocument,\n sessionId: ARID,\n signatureSharesByXid: Map<string, Ed25519SignatureShare>,\n): SignFinalizeContent {\n // Build the content with session and all signature shares\n let content = SignFinalizeContent.new().addAssertion(\"session\", sessionId);\n\n for (const [xidUr, share] of signatureSharesByXid) {\n const xid = XIDClass.fromURString(xidUr);\n const shareHex = serializeSignatureShare(share);\n const shareJson = JSONComponent.fromString(JSON.stringify({ share: shareHex }));\n const entry = Envelope.new(xid).addAssertion(\"share\", shareJson);\n content = content.addAssertion(\"signature_share\", entry);\n }\n\n return content;\n}\n\n/**\n * Aggregate signature shares and verify the result.\n *\n * Port of signature aggregation logic from cmd/sign/coordinator/round2.rs.\n */\nfunction aggregateAndVerifySignature(\n signingCommitments: Map<FrostIdentifier, Ed25519SigningCommitments>,\n signatureSharesByIdentifier: Map<FrostIdentifier, Ed25519SignatureShare>,\n publicKeyPackage: FrostPublicKeyPackage,\n targetDigest: Uint8Array,\n): { signature: Signature; signatureUr: string } {\n // Create signing package\n const signingPackage = createSigningPackage(signingCommitments, targetDigest);\n\n // Aggregate signature shares\n const aggregatedSignature = aggregateSignatures(\n signingPackage,\n signatureSharesByIdentifier,\n publicKeyPackage,\n );\n\n // Serialize the aggregated signature\n const signatureBytes = serializeSignature(aggregatedSignature);\n\n // Verify the signature is 64 bytes\n if (signatureBytes.length !== 64) {\n throw new Error(\"Aggregated signature is not 64 bytes\");\n }\n\n // Create bc-components Signature\n const signature = Signature.ed25519FromData(signatureBytes);\n const signatureUr = signature.urString();\n\n return { signature, signatureUr };\n}\n\n/**\n * Persist final signing state to disk.\n *\n * Port of `persist_final_state()` from cmd/sign/coordinator/round2.rs.\n */\nfunction persistSigningState(\n registryPath: string,\n groupId: ARID,\n sessionId: ARID,\n signature: Signature,\n signatureSharesByXid: Map<string, Ed25519SignatureShare>,\n finalizeArids: Map<string, ARID>,\n): void {\n const dir = signingStateDir(registryPath, groupId.hex(), sessionId.hex());\n fs.mkdirSync(dir, { recursive: true });\n\n // Build signature shares JSON object\n const sharesJson: Record<string, unknown> = {};\n for (const [xidUr, share] of signatureSharesByXid) {\n sharesJson[xidUr] = { share: serializeSignatureShare(share) };\n }\n\n // Build finalize ARIDs JSON object\n const finalizeJson: Record<string, string> = {};\n for (const [xidUr, arid] of finalizeArids) {\n finalizeJson[xidUr] = arid.urString();\n }\n\n // Build root JSON object\n const root = {\n group: groupId.urString(),\n session: sessionId.urString(),\n signature: signature.urString(),\n signature_shares: sharesJson,\n finalize_arids: finalizeJson,\n };\n\n fs.writeFileSync(path.join(dir, \"final.json\"), JSON.stringify(root, null, 2));\n}\n\n/**\n * Load start state from disk.\n *\n * Port of `load_start_state()` from cmd/sign/coordinator/round2.rs.\n */\nfunction loadStartState(registryPath: string, sessionId: ARID, groupHint?: ARID): StartState {\n const base = path.dirname(registryPath);\n const groupStateDir = path.join(base, \"group-state\");\n\n // Find candidate paths\n const candidatePaths: [ARID, string][] = [];\n let groupDirs: [ARID, string][];\n\n if (groupHint) {\n groupDirs = [[groupHint, path.join(groupStateDir, groupHint.hex())]];\n } else {\n groupDirs = [];\n if (fs.existsSync(groupStateDir)) {\n for (const entry of fs.readdirSync(groupStateDir, { withFileTypes: true })) {\n if (entry.isDirectory() && entry.name.length === 64 && /^[0-9a-f]+$/i.test(entry.name)) {\n const groupId = ARIDClass.fromHex(entry.name);\n groupDirs.push([groupId, path.join(groupStateDir, entry.name)]);\n }\n }\n }\n }\n\n for (const [groupId, groupDir] of groupDirs) {\n const candidate = path.join(groupDir, \"signing\", sessionId.hex(), \"start.json\");\n if (fs.existsSync(candidate)) {\n candidatePaths.push([groupId, candidate]);\n }\n }\n\n if (candidatePaths.length === 0) {\n throw new Error(\"No sign start state found; run `frost sign coordinator start` first\");\n }\n if (candidatePaths.length > 1) {\n throw new Error(\"Multiple signing sessions found; specify --group to disambiguate\");\n }\n\n const [groupId, statePath] = candidatePaths[0];\n const raw = JSON.parse(fs.readFileSync(statePath, \"utf-8\")) as Record<string, unknown>;\n\n const getStr = (key: string): string => {\n const value = raw[key];\n if (typeof value !== \"string\") {\n throw new Error(`Missing or invalid ${key} in start.json`);\n }\n return value;\n };\n\n const sessionInState = parseAridUr(getStr(\"session_id\"));\n const groupInState = parseAridUr(getStr(\"group\"));\n\n if (sessionInState.urString() !== sessionId.urString()) {\n throw new Error(\n `start.json session ${sessionInState.urString()} does not match requested session ${sessionId.urString()}`,\n );\n }\n if (groupInState.urString() !== groupId.urString()) {\n throw new Error(\n `start.json group ${groupInState.urString()} does not match directory group ${groupId.urString()}`,\n );\n }\n\n const minSigners = raw[\"min_signers\"];\n if (typeof minSigners !== \"number\") {\n throw new Error(\"Missing min_signers in start.json\");\n }\n\n const participantsVal = raw[\"participants\"] as Record<string, unknown> | undefined;\n if (!participantsVal || typeof participantsVal !== \"object\") {\n throw new Error(\"Missing participants in start.json\");\n }\n\n const participants: XID[] = [];\n for (const xidStr of Object.keys(participantsVal)) {\n participants.push(XIDClass.fromURString(xidStr));\n }\n // Sort by XID byte order — mirrors Rust `XID::cmp` (raw 32-byte\n // lex compare). The earlier port used\n // `urString().localeCompare(...)`, which diverges for bytes ≥ 0x80.\n participants.sort((a, b) => compareXidBytes(a.toData(), b.toData()));\n\n const targetUr = getStr(\"target\");\n\n return { groupId, minSigners, participants, targetUr };\n}\n\n/**\n * Load commitments state from disk.\n *\n * Port of `load_commitments_state()` from cmd/sign/coordinator/round2.rs.\n */\nfunction loadCommitmentsState(\n registryPath: string,\n groupId: ARID,\n sessionId: ARID,\n): CommitmentsState {\n const dir = signingStateDir(registryPath, groupId.hex(), sessionId.hex());\n const statePath = path.join(dir, \"commitments.json\");\n\n if (!fs.existsSync(statePath)) {\n throw new Error(\n `Commitments not found at ${statePath}. Run \\`frost sign coordinator collect\\` first`,\n );\n }\n\n const raw = JSON.parse(fs.readFileSync(statePath, \"utf-8\")) as Record<string, unknown>;\n\n const getStr = (key: string): string => {\n const value = raw[key];\n if (typeof value !== \"string\") {\n throw new Error(`Missing or invalid ${key} in commitments.json`);\n }\n return value;\n };\n\n const sessionInState = parseAridUr(getStr(\"session\"));\n if (sessionInState.urString() !== sessionId.urString()) {\n throw new Error(\n `commitments.json session ${sessionInState.urString()} does not match requested session ${sessionId.urString()}`,\n );\n }\n\n const commitmentsVal = raw[\"commitments\"] as Record<string, unknown> | undefined;\n if (!commitmentsVal || typeof commitmentsVal !== \"object\") {\n throw new Error(\"Missing commitments map in commitments.json\");\n }\n\n const commitments = new Map<string, ParticipantCommitment>();\n\n for (const [xidStr, value] of Object.entries(commitmentsVal)) {\n const obj = value as Record<string, unknown>;\n const commitValue = obj[\"commitments\"] as SerializedSigningCommitments | undefined;\n if (!commitValue) {\n throw new Error(\"Missing commitments value in commitments.json\");\n }\n const commitmentsDeserialized = deserializeSigningCommitments(commitValue);\n\n const shareAridRaw = obj[\"share_arid\"];\n if (typeof shareAridRaw !== \"string\") {\n throw new Error(\"Missing share_arid in commitments.json\");\n }\n const shareArid = parseAridUr(shareAridRaw);\n\n commitments.set(xidStr, {\n commitments: commitmentsDeserialized,\n shareArid,\n });\n }\n\n return { commitments };\n}\n\n/**\n * Load public key package from collected_finalize.json.\n *\n * Port of `load_public_key_package()` from cmd/sign/coordinator/round2.rs.\n */\nfunction loadPublicKeyPackage(registryPath: string, groupId: ARID): FrostPublicKeyPackage {\n const base = path.dirname(registryPath);\n const pkgPath = path.join(base, \"group-state\", groupId.hex(), \"collected_finalize.json\");\n\n if (!fs.existsSync(pkgPath)) {\n throw new Error(\n `collected_finalize.json not found at ${pkgPath}. Run \\`frost dkg coordinator finalize collect\\` first`,\n );\n }\n\n const raw = JSON.parse(fs.readFileSync(pkgPath, \"utf-8\")) as Record<string, unknown>;\n const firstEntry = Object.values(raw)[0] as Record<string, unknown> | undefined;\n\n if (!firstEntry) {\n throw new Error(\"collected_finalize.json is empty\");\n }\n\n const publicKeyValue = firstEntry[\"public_key_package\"] as SerializedPublicKeyPackage | undefined;\n if (!publicKeyValue) {\n throw new Error(\"public_key_package missing in collected_finalize.json\");\n }\n\n return deserializePublicKeyPackage(publicKeyValue);\n}\n\n/**\n * Build a map from XID to FROST identifier.\n *\n * Port of `xid_identifier_map()` from cmd/sign/coordinator/round2.rs.\n */\nfunction xidIdentifierMap(participants: XID[]): Map<string, FrostIdentifier> {\n const map = new Map<string, FrostIdentifier>();\n for (let i = 0; i < participants.length; i++) {\n const identifier = identifierFromU16(i + 1);\n map.set(participants[i].urString(), identifier);\n }\n return map;\n}\n\n/**\n * Build signing commitments with identifiers.\n *\n * Port of `commitments_with_identifiers()` from cmd/sign/coordinator/round2.rs.\n */\nfunction commitmentsWithIdentifiers(\n commitments: Map<string, ParticipantCommitment>,\n xidToIdentifier: Map<string, FrostIdentifier>,\n): Map<FrostIdentifier, Ed25519SigningCommitments> {\n const mapped = new Map<FrostIdentifier, Ed25519SigningCommitments>();\n for (const [xidUr, entry] of commitments) {\n const identifier = xidToIdentifier.get(xidUr);\n if (!identifier) {\n throw new Error(`Unknown participant ${xidUr}`);\n }\n mapped.set(identifier, entry.commitments);\n }\n return mapped;\n}\n\n/**\n * Execute the sign coordinator round 2 command.\n *\n * Collects signature shares, aggregates the signature, and posts finalize packages.\n *\n * Port of `CommandArgs::exec()` from cmd/sign/coordinator/round2.rs.\n */\nexport async function round2(\n client: StorageClient,\n options: SignRound2Options,\n cwd: string,\n): Promise<SignRound2Result> {\n const registryPath = resolveRegistryPath(options.registryPath, cwd);\n const registry = Registry.load(registryPath);\n\n const owner = registry.owner();\n if (!owner) {\n throw new Error(\"Registry owner is required\");\n }\n\n const sessionId = parseAridUr(options.sessionId);\n const groupHint = options.groupId ? parseAridUr(options.groupId) : undefined;\n\n // Load start state (finds group automatically if not specified)\n const startState = loadStartState(registryPath, sessionId, groupHint);\n const groupId = startState.groupId;\n\n const groupRecord = registry.group(groupId);\n if (!groupRecord) {\n throw new Error(\"Group not found in registry\");\n }\n\n // Verify coordinator ownership\n if (groupRecord.coordinator().xid().urString() !== owner.xid().urString()) {\n throw new Error(\n `Only the coordinator can finalize signing. Coordinator: ${groupRecord.coordinator().xid().urString()}, Owner: ${owner.xid().urString()}`,\n );\n }\n\n // Load commitments state\n const commitmentsState = loadCommitmentsState(registryPath, groupId, sessionId);\n\n // Build XID to identifier map\n const xidToIdentifier = xidIdentifierMap(startState.participants);\n\n // Collect signature shares\n let signatureSharesByIdentifier: Map<FrostIdentifier, Ed25519SignatureShare>;\n let signatureSharesByXid: Map<string, Ed25519SignatureShare>;\n let finalizeArids: Map<string, ARID>;\n\n if (options.parallel === true) {\n // Parallel collection path\n const collection = await collectSharesParallel(\n client,\n registry,\n commitmentsState,\n owner.xidDocument(),\n sessionId,\n options.timeoutSeconds,\n );\n\n if (!collection.allSucceeded()) {\n // Report failures\n if (collection.rejections.length > 0) {\n console.error(\"\\nRejections:\");\n for (const [xid, reason] of collection.rejections) {\n console.error(` ${xid.urString()}: ${reason}`);\n }\n }\n if (collection.errors.length > 0) {\n console.error(\"\\nErrors:\");\n for (const [xid, error] of collection.errors) {\n console.error(` ${xid.urString()}: ${error}`);\n }\n }\n if (collection.timeouts.length > 0) {\n console.error(\"\\nTimeouts:\");\n for (const xid of collection.timeouts) {\n console.error(` ${xid.urString()}`);\n }\n }\n throw new Error(\n `Signature share collection incomplete: ${collection.successes.length} succeeded, ` +\n `${collection.rejections.length} rejected, ${collection.errors.length} errors, ` +\n `${collection.timeouts.length} timeouts`,\n );\n }\n\n // Convert collection to maps\n signatureSharesByIdentifier = new Map();\n signatureSharesByXid = new Map();\n finalizeArids = new Map();\n\n for (const [xid, data] of collection.successes) {\n const xidUr = xid.urString();\n const identifier = xidToIdentifier.get(xidUr);\n if (!identifier) {\n throw new Error(\"Identifier mapping missing for participant\");\n }\n signatureSharesByIdentifier.set(identifier, data.signatureShare);\n signatureSharesByXid.set(xidUr, data.signatureShare);\n finalizeArids.set(xidUr, data.finalizeArid);\n }\n } else {\n // Sequential collection path\n if (options.verbose === true) {\n console.error(\n `Collecting signature shares for session ${sessionId.urString()} from ${commitmentsState.commitments.size} participants...`,\n );\n }\n\n signatureSharesByIdentifier = new Map();\n signatureSharesByXid = new Map();\n finalizeArids = new Map();\n\n for (const [xidUr, entry] of commitmentsState.commitments) {\n const xid = XIDClass.fromURString(xidUr);\n const participant = registry.participant(xid);\n const participantName = participant?.petName() ?? xid.urString();\n\n const identifier = xidToIdentifier.get(xidUr);\n if (!identifier) {\n throw new Error(\"Identifier mapping missing for participant\");\n }\n\n // Fetch the response\n const envelope = await client.get(entry.shareArid, options.timeoutSeconds);\n if (!envelope) {\n throw new Error(`Signature share response not found for ${participantName}`);\n }\n\n const coordinatorKeys = owner.xidDocument().inceptionPrivateKeys();\n if (!coordinatorKeys) {\n throw new Error(\"Coordinator XID document has no inception private keys\");\n }\n\n const result = validateAndExtractShareResponse(envelope, coordinatorKeys, xid, sessionId);\n if (\"rejected\" in result) {\n throw new Error(`Participant rejected signRound2: ${result.rejected}`);\n }\n\n signatureSharesByIdentifier.set(identifier, result.signatureShare);\n signatureSharesByXid.set(xidUr, result.signatureShare);\n finalizeArids.set(xidUr, result.finalizeArid);\n }\n }\n\n // Verify we have enough shares\n if (signatureSharesByIdentifier.size < startState.minSigners) {\n throw new Error(\n `Only collected ${signatureSharesByIdentifier.size} signature shares, need at least ${startState.minSigners}`,\n );\n }\n\n // Build signing commitments with identifiers\n const signingCommitments = commitmentsWithIdentifiers(\n commitmentsState.commitments,\n xidToIdentifier,\n );\n\n // Get target digest\n const targetEnvelope = Envelope.fromURString(startState.targetUr);\n const targetDigest = targetEnvelope.subject().digest().data();\n\n // Load public key package\n const publicKeyPackage = loadPublicKeyPackage(registryPath, groupId);\n const verifyingKey = signingKeyFromVerifying(publicKeyPackage.verifyingKey);\n\n // Aggregate and verify signature\n const { signature, signatureUr } = aggregateAndVerifySignature(\n signingCommitments,\n signatureSharesByIdentifier,\n publicKeyPackage,\n targetDigest,\n );\n\n // Verify signature against target digest\n // @ts-expect-error - verifyingKey type mismatch\n if (verifyingKey.verify(signature, targetDigest) !== true) {\n throw new Error(\"Aggregated signature failed verification against target digest\");\n }\n\n // Attach signature to target and verify\n\n const signedEnvelope = Envelope.fromURString(startState.targetUr).addAssertion(\n \"signed\",\n signature,\n );\n const signedEnvelopeUr = signedEnvelope.urString();\n\n // Persist final state\n persistSigningState(\n registryPath,\n groupId,\n sessionId,\n signature,\n signatureSharesByXid,\n finalizeArids,\n );\n\n if (options.verbose === true) {\n console.error();\n console.error(\n `Aggregated signature for session ${sessionId.urString()} and prepared ${finalizeArids.size} finalize packages.`,\n );\n console.error(\"Signature verified against target and group key.\");\n }\n\n // Dispatch finalize events to participants\n const signerKeys = owner.xidDocument().inceptionPrivateKeys();\n if (!signerKeys) {\n throw new Error(\"Coordinator XID document has no signing keys\");\n }\n\n if (options.verbose === true) {\n console.error(`Dispatching finalize packages to ${finalizeArids.size} participants...`);\n } else {\n // Blank line to separate get phase from put phase\n console.error();\n }\n\n // Build finalize messages\n const messages: [XID, ARID, Envelope, string][] = [];\n let previewPrinted = false;\n\n for (const [xidUr, finalizeArid] of finalizeArids) {\n const participantXid = XIDClass.fromURString(xidUr);\n const participant = registry.participant(participantXid);\n const participantName = participant?.petName() ?? xidUr;\n\n const recipientDoc =\n xidUr === owner.xid().urString() ? owner.xidDocument() : participant?.xidDocument();\n\n if (!recipientDoc) {\n throw new Error(`Participant ${xidUr} not found in registry`);\n }\n\n const event = buildFinalizeEvent(owner.xidDocument(), sessionId, signatureSharesByXid);\n\n if (options.previewFinalize === true && !previewPrinted) {\n // Preview as unsigned, unencrypted envelope\n console.log(`# signFinalize preview for ${participantXid.urString()}`);\n console.log(event.envelope().format());\n previewPrinted = true;\n }\n\n // For now, use the plain envelope (GSTP sealing would be applied in full implementation)\n const sealed = event.envelope();\n\n messages.push([participantXid, finalizeArid, sealed, participantName]);\n }\n\n // Dispatch messages\n if (options.parallel === true) {\n // Parallel send\n console.error();\n const results = await parallelSend(client, messages, options.verbose === true);\n\n // Check for errors\n const errors: string[] = [];\n for (const [xid, result] of results) {\n if (result !== null) {\n const participant = registry.participant(xid);\n const name = participant?.petName() ?? xid.urString();\n errors.push(`${name}: ${result.message}`);\n }\n }\n if (errors.length > 0) {\n throw new Error(`Failed to send finalize packages: ${errors.join(\"; \")}`);\n }\n } else {\n // Sequential send\n for (const [_xid, finalizeArid, sealed, participantName] of messages) {\n await putWithIndicator(\n client,\n finalizeArid,\n sealed,\n participantName,\n options.verbose ?? false,\n );\n }\n }\n\n // Print final signature and signed envelope UR\n console.log(signatureUr);\n console.log(signedEnvelopeUr);\n\n return {\n signature: signatureUr,\n signedEnvelope: signedEnvelopeUr,\n accepted: signatureSharesByIdentifier.size,\n rejected: 0,\n errors: 0,\n timeouts: 0,\n };\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AA4HA,SAAS,gCACP,UACA,kBACA,gBACA,mBAC+C;CAI/C,IAAI;EAEF,SAAS,iBAAiB;EAC1B,SAAS,UAAU,oBAAoB;EAGvC,MAAM,iBAAiB,SAAS,oBAAoB,SAAS;EAC7D,IAAI,eAAe,WAAW,GAC5B,OAAO,EAAE,UAAU,8BAA8B;EAEnD,MAAM,kBAAkBA,KAAU,eAAe,eAAe,EAAE,CAAC,QAAQ,CAAC,CAAC,QAAQ,CAAC;EACtF,IAAI,gBAAgB,SAAS,MAAM,kBAAkB,SAAS,GAC5D,OAAO,EACL,UAAU,oBAAoB,gBAAgB,SAAS,EAAE,2BAA2B,kBAAkB,SAAS,IACjH;EAIF,MAAM,qBAAqB,SAAS,oBAAoB,aAAa;EACrE,IAAI,mBAAmB,WAAW,GAChC,OAAO,EAAE,UAAU,kCAAkC;EAEvD,MAAM,iBAAiBC,IAAS,eAAe,mBAAmB,EAAE,CAAC,QAAQ,CAAC,CAAC,QAAQ,CAAC;EACxF,IAAI,eAAe,SAAS,MAAM,eAAe,SAAS,GACxD,OAAO,EACL,UAAU,+BAA+B,eAAe,SAAS,EAAE,aAAa,eAAe,SAAS,EAAE,GAC5G;EAIF,MAAM,eAAe,SAAS,oBAAoB,iBAAiB;EACnE,IAAI,aAAa,WAAW,GAC1B,OAAO,EAAE,UAAU,sCAAsC;EAE3D,MAAM,qBAAqBC,OAAc,eAAe,aAAa,EAAE,CAAC,QAAQ,CAAC,CAAC,QAAQ,CAAC;EAE3F,MAAM,iBAAiB,0BADI,KAAK,MAAM,mBAAmB,SAAS,CACA,CAAC,CAAC,KAAK;EAGzE,MAAM,sBAAsB,SAAS,oBAAoB,eAAe;EACxE,IAAI,oBAAoB,WAAW,GACjC,OAAO,EAAE,UAAU,oCAAoC;EAIzD,OAAO;GAAE;GAAgB,cAFJF,KAAU,eAAe,oBAAoB,EAAE,CAAC,QAAQ,CAAC,CAAC,QAAQ,CAEnD;EAAE;CACxC,SAAS,OAAO;EAEd,OAAO,EAAE,UAAU,6BADH,iBAAiB,QAAQ,MAAM,UAAU,OAAO,KAAK,IACX;CAC5D;AACF;;;;;;AAOA,eAAe,sBACb,QACA,UACA,kBACA,aACA,WACA,gBACmD;CAEnD,MAAM,WAAkC,CAAC;CAEzC,KAAK,MAAM,CAAC,OAAO,UAAU,iBAAiB,aAAa;EACzD,MAAM,MAAMC,IAAS,aAAa,KAAK;EAEvC,MAAM,OADc,SAAS,YAAY,GAClB,CAAC,EAAE,QAAQ,KAAK,IAAI,SAAS;EACpD,SAAS,KAAK;GAAC;GAAK,MAAM;GAAW;EAAI,CAAC;CAC5C;CAEA,MAAM,kBAAkB,YAAY,qBAAqB;CACzD,IAAI,CAAC,iBACH,MAAM,IAAI,MAAM,wDAAwD;CAG1E,MAAM,UAAU;CAEhB,OAAO,cACL,QACA,WACC,UAAoB,QAAa;EAChC,OAAO,gCAAgC,UAAU,iBAAiB,KAAK,OAAO;CAChF,GACA;EACE;EACA,SAAS;CACX,CACF;AACF;;;;;;AAOA,SAAS,mBACP,SACA,WACA,sBACqB;CAErB,IAAI,UAAU,oBAAoB,IAAI,CAAC,CAAC,aAAa,WAAW,SAAS;CAEzE,KAAK,MAAM,CAAC,OAAO,UAAU,sBAAsB;EACjD,MAAM,MAAMA,IAAS,aAAa,KAAK;EACvC,MAAM,WAAW,wBAAwB,KAAK;EAC9C,MAAM,YAAYC,OAAc,WAAW,KAAK,UAAU,EAAE,OAAO,SAAS,CAAC,CAAC;EAC9E,MAAM,QAAQ,SAAS,IAAI,GAAG,CAAC,CAAC,aAAa,SAAS,SAAS;EAC/D,UAAU,QAAQ,aAAa,mBAAmB,KAAK;CACzD;CAEA,OAAO;AACT;;;;;;AAOA,SAAS,4BACP,oBACA,6BACA,kBACA,cAC+C;CAY/C,MAAM,iBAAiB,mBAPK,oBAHL,qBAAqB,oBAAoB,YAIjD,GACb,6BACA,gBAI0D,CAAC;CAG7D,IAAI,eAAe,WAAW,IAC5B,MAAM,IAAI,MAAM,sCAAsC;CAIxD,MAAM,YAAY,UAAU,gBAAgB,cAAc;CAG1D,OAAO;EAAE;EAAW,aAFA,UAAU,SAEA;CAAE;AAClC;;;;;;AAOA,SAAS,oBACP,cACA,SACA,WACA,WACA,sBACA,eACM;CACN,MAAM,MAAM,gBAAgB,cAAc,QAAQ,IAAI,GAAG,UAAU,IAAI,CAAC;CACxE,GAAG,UAAU,KAAK,EAAE,WAAW,KAAK,CAAC;CAGrC,MAAM,aAAsC,CAAC;CAC7C,KAAK,MAAM,CAAC,OAAO,UAAU,sBAC3B,WAAW,SAAS,EAAE,OAAO,wBAAwB,KAAK,EAAE;CAI9D,MAAM,eAAuC,CAAC;CAC9C,KAAK,MAAM,CAAC,OAAO,SAAS,eAC1B,aAAa,SAAS,KAAK,SAAS;CAItC,MAAM,OAAO;EACX,OAAO,QAAQ,SAAS;EACxB,SAAS,UAAU,SAAS;EAC5B,WAAW,UAAU,SAAS;EAC9B,kBAAkB;EAClB,gBAAgB;CAClB;CAEA,GAAG,cAAc,KAAK,KAAK,KAAK,YAAY,GAAG,KAAK,UAAU,MAAM,MAAM,CAAC,CAAC;AAC9E;;;;;;AAOA,SAAS,eAAe,cAAsB,WAAiB,WAA8B;CAC3F,MAAM,OAAO,KAAK,QAAQ,YAAY;CACtC,MAAM,gBAAgB,KAAK,KAAK,MAAM,aAAa;CAGnD,MAAM,iBAAmC,CAAC;CAC1C,IAAI;CAEJ,IAAI,WACF,YAAY,CAAC,CAAC,WAAW,KAAK,KAAK,eAAe,UAAU,IAAI,CAAC,CAAC,CAAC;MAC9D;EACL,YAAY,CAAC;EACb,IAAI,GAAG,WAAW,aAAa;QACxB,MAAM,SAAS,GAAG,YAAY,eAAe,EAAE,eAAe,KAAK,CAAC,GACvE,IAAI,MAAM,YAAY,KAAK,MAAM,KAAK,WAAW,MAAM,eAAe,KAAK,MAAM,IAAI,GAAG;IACtF,MAAM,UAAUF,KAAU,QAAQ,MAAM,IAAI;IAC5C,UAAU,KAAK,CAAC,SAAS,KAAK,KAAK,eAAe,MAAM,IAAI,CAAC,CAAC;GAChE;;CAGN;CAEA,KAAK,MAAM,CAAC,SAAS,aAAa,WAAW;EAC3C,MAAM,YAAY,KAAK,KAAK,UAAU,WAAW,UAAU,IAAI,GAAG,YAAY;EAC9E,IAAI,GAAG,WAAW,SAAS,GACzB,eAAe,KAAK,CAAC,SAAS,SAAS,CAAC;CAE5C;CAEA,IAAI,eAAe,WAAW,GAC5B,MAAM,IAAI,MAAM,qEAAqE;CAEvF,IAAI,eAAe,SAAS,GAC1B,MAAM,IAAI,MAAM,kEAAkE;CAGpF,MAAM,CAAC,SAAS,aAAa,eAAe;CAC5C,MAAM,MAAM,KAAK,MAAM,GAAG,aAAa,WAAW,OAAO,CAAC;CAE1D,MAAM,UAAU,QAAwB;EACtC,MAAM,QAAQ,IAAI;EAClB,IAAI,OAAO,UAAU,UACnB,MAAM,IAAI,MAAM,sBAAsB,IAAI,eAAe;EAE3D,OAAO;CACT;CAEA,MAAM,iBAAiB,YAAY,OAAO,YAAY,CAAC;CACvD,MAAM,eAAe,YAAY,OAAO,OAAO,CAAC;CAEhD,IAAI,eAAe,SAAS,MAAM,UAAU,SAAS,GACnD,MAAM,IAAI,MACR,sBAAsB,eAAe,SAAS,EAAE,oCAAoC,UAAU,SAAS,GACzG;CAEF,IAAI,aAAa,SAAS,MAAM,QAAQ,SAAS,GAC/C,MAAM,IAAI,MACR,oBAAoB,aAAa,SAAS,EAAE,kCAAkC,QAAQ,SAAS,GACjG;CAGF,MAAM,aAAa,IAAI;CACvB,IAAI,OAAO,eAAe,UACxB,MAAM,IAAI,MAAM,mCAAmC;CAGrD,MAAM,kBAAkB,IAAI;CAC5B,IAAI,CAAC,mBAAmB,OAAO,oBAAoB,UACjD,MAAM,IAAI,MAAM,oCAAoC;CAGtD,MAAM,eAAsB,CAAC;CAC7B,KAAK,MAAM,UAAU,OAAO,KAAK,eAAe,GAC9C,aAAa,KAAKC,IAAS,aAAa,MAAM,CAAC;CAKjD,aAAa,MAAM,GAAG,MAAM,gBAAgB,EAAE,OAAO,GAAG,EAAE,OAAO,CAAC,CAAC;CAInE,OAAO;EAAE;EAAS;EAAY;EAAc,UAF3B,OAAO,QAE2B;CAAE;AACvD;;;;;;AAOA,SAAS,qBACP,cACA,SACA,WACkB;CAClB,MAAM,MAAM,gBAAgB,cAAc,QAAQ,IAAI,GAAG,UAAU,IAAI,CAAC;CACxE,MAAM,YAAY,KAAK,KAAK,KAAK,kBAAkB;CAEnD,IAAI,CAAC,GAAG,WAAW,SAAS,GAC1B,MAAM,IAAI,MACR,4BAA4B,UAAU,+CACxC;CAGF,MAAM,MAAM,KAAK,MAAM,GAAG,aAAa,WAAW,OAAO,CAAC;CAE1D,MAAM,UAAU,QAAwB;EACtC,MAAM,QAAQ,IAAI;EAClB,IAAI,OAAO,UAAU,UACnB,MAAM,IAAI,MAAM,sBAAsB,IAAI,qBAAqB;EAEjE,OAAO;CACT;CAEA,MAAM,iBAAiB,YAAY,OAAO,SAAS,CAAC;CACpD,IAAI,eAAe,SAAS,MAAM,UAAU,SAAS,GACnD,MAAM,IAAI,MACR,4BAA4B,eAAe,SAAS,EAAE,oCAAoC,UAAU,SAAS,GAC/G;CAGF,MAAM,iBAAiB,IAAI;CAC3B,IAAI,CAAC,kBAAkB,OAAO,mBAAmB,UAC/C,MAAM,IAAI,MAAM,6CAA6C;CAG/D,MAAM,8BAAc,IAAI,IAAmC;CAE3D,KAAK,MAAM,CAAC,QAAQ,UAAU,OAAO,QAAQ,cAAc,GAAG;EAC5D,MAAM,MAAM;EACZ,MAAM,cAAc,IAAI;EACxB,IAAI,CAAC,aACH,MAAM,IAAI,MAAM,+CAA+C;EAEjE,MAAM,0BAA0B,8BAA8B,WAAW;EAEzE,MAAM,eAAe,IAAI;EACzB,IAAI,OAAO,iBAAiB,UAC1B,MAAM,IAAI,MAAM,wCAAwC;EAE1D,MAAM,YAAY,YAAY,YAAY;EAE1C,YAAY,IAAI,QAAQ;GACtB,aAAa;GACb;EACF,CAAC;CACH;CAEA,OAAO,EAAE,YAAY;AACvB;;;;;;AAOA,SAAS,qBAAqB,cAAsB,SAAsC;CACxF,MAAM,OAAO,KAAK,QAAQ,YAAY;CACtC,MAAM,UAAU,KAAK,KAAK,MAAM,eAAe,QAAQ,IAAI,GAAG,yBAAyB;CAEvF,IAAI,CAAC,GAAG,WAAW,OAAO,GACxB,MAAM,IAAI,MACR,wCAAwC,QAAQ,uDAClD;CAGF,MAAM,MAAM,KAAK,MAAM,GAAG,aAAa,SAAS,OAAO,CAAC;CACxD,MAAM,aAAa,OAAO,OAAO,GAAG,CAAC,CAAC;CAEtC,IAAI,CAAC,YACH,MAAM,IAAI,MAAM,kCAAkC;CAGpD,MAAM,iBAAiB,WAAW;CAClC,IAAI,CAAC,gBACH,MAAM,IAAI,MAAM,uDAAuD;CAGzE,OAAO,4BAA4B,cAAc;AACnD;;;;;;AAOA,SAAS,iBAAiB,cAAmD;CAC3E,MAAM,sBAAM,IAAI,IAA6B;CAC7C,KAAK,IAAI,IAAI,GAAG,IAAI,aAAa,QAAQ,KAAK;EAC5C,MAAM,aAAa,kBAAkB,IAAI,CAAC;EAC1C,IAAI,IAAI,aAAa,EAAE,CAAC,SAAS,GAAG,UAAU;CAChD;CACA,OAAO;AACT;;;;;;AAOA,SAAS,2BACP,aACA,iBACiD;CACjD,MAAM,yBAAS,IAAI,IAAgD;CACnE,KAAK,MAAM,CAAC,OAAO,UAAU,aAAa;EACxC,MAAM,aAAa,gBAAgB,IAAI,KAAK;EAC5C,IAAI,CAAC,YACH,MAAM,IAAI,MAAM,uBAAuB,OAAO;EAEhD,OAAO,IAAI,YAAY,MAAM,WAAW;CAC1C;CACA,OAAO;AACT;;;;;;;;AASA,eAAsB,OACpB,QACA,SACA,KAC2B;CAC3B,MAAM,eAAe,oBAAoB,QAAQ,cAAc,GAAG;CAClE,MAAM,WAAW,SAAS,KAAK,YAAY;CAE3C,MAAM,QAAQ,SAAS,MAAM;CAC7B,IAAI,CAAC,OACH,MAAM,IAAI,MAAM,4BAA4B;CAG9C,MAAM,YAAY,YAAY,QAAQ,SAAS;CAI/C,MAAM,aAAa,eAAe,cAAc,WAH9B,QAAQ,UAAU,YAAY,QAAQ,OAAO,IAAI,KAAA,CAGC;CACpE,MAAM,UAAU,WAAW;CAE3B,MAAM,cAAc,SAAS,MAAM,OAAO;CAC1C,IAAI,CAAC,aACH,MAAM,IAAI,MAAM,6BAA6B;CAI/C,IAAI,YAAY,YAAY,CAAC,CAAC,IAAI,CAAC,CAAC,SAAS,MAAM,MAAM,IAAI,CAAC,CAAC,SAAS,GACtE,MAAM,IAAI,MACR,2DAA2D,YAAY,YAAY,CAAC,CAAC,IAAI,CAAC,CAAC,SAAS,EAAE,WAAW,MAAM,IAAI,CAAC,CAAC,SAAS,GACxI;CAIF,MAAM,mBAAmB,qBAAqB,cAAc,SAAS,SAAS;CAG9E,MAAM,kBAAkB,iBAAiB,WAAW,YAAY;CAGhE,IAAI;CACJ,IAAI;CACJ,IAAI;CAEJ,IAAI,QAAQ,aAAa,MAAM;EAE7B,MAAM,aAAa,MAAM,sBACvB,QACA,UACA,kBACA,MAAM,YAAY,GAClB,WACA,QAAQ,cACV;EAEA,IAAI,CAAC,WAAW,aAAa,GAAG;GAE9B,IAAI,WAAW,WAAW,SAAS,GAAG;IACpC,QAAQ,MAAM,eAAe;IAC7B,KAAK,MAAM,CAAC,KAAK,WAAW,WAAW,YACrC,QAAQ,MAAM,KAAK,IAAI,SAAS,EAAE,IAAI,QAAQ;GAElD;GACA,IAAI,WAAW,OAAO,SAAS,GAAG;IAChC,QAAQ,MAAM,WAAW;IACzB,KAAK,MAAM,CAAC,KAAK,UAAU,WAAW,QACpC,QAAQ,MAAM,KAAK,IAAI,SAAS,EAAE,IAAI,OAAO;GAEjD;GACA,IAAI,WAAW,SAAS,SAAS,GAAG;IAClC,QAAQ,MAAM,aAAa;IAC3B,KAAK,MAAM,OAAO,WAAW,UAC3B,QAAQ,MAAM,KAAK,IAAI,SAAS,GAAG;GAEvC;GACA,MAAM,IAAI,MACR,0CAA0C,WAAW,UAAU,OAAO,cACjE,WAAW,WAAW,OAAO,aAAa,WAAW,OAAO,OAAO,WACnE,WAAW,SAAS,OAAO,UAClC;EACF;EAGA,8CAA8B,IAAI,IAAI;EACtC,uCAAuB,IAAI,IAAI;EAC/B,gCAAgB,IAAI,IAAI;EAExB,KAAK,MAAM,CAAC,KAAK,SAAS,WAAW,WAAW;GAC9C,MAAM,QAAQ,IAAI,SAAS;GAC3B,MAAM,aAAa,gBAAgB,IAAI,KAAK;GAC5C,IAAI,CAAC,YACH,MAAM,IAAI,MAAM,4CAA4C;GAE9D,4BAA4B,IAAI,YAAY,KAAK,cAAc;GAC/D,qBAAqB,IAAI,OAAO,KAAK,cAAc;GACnD,cAAc,IAAI,OAAO,KAAK,YAAY;EAC5C;CACF,OAAO;EAEL,IAAI,QAAQ,YAAY,MACtB,QAAQ,MACN,2CAA2C,UAAU,SAAS,EAAE,QAAQ,iBAAiB,YAAY,KAAK,iBAC5G;EAGF,8CAA8B,IAAI,IAAI;EACtC,uCAAuB,IAAI,IAAI;EAC/B,gCAAgB,IAAI,IAAI;EAExB,KAAK,MAAM,CAAC,OAAO,UAAU,iBAAiB,aAAa;GACzD,MAAM,MAAMA,IAAS,aAAa,KAAK;GAEvC,MAAM,kBADc,SAAS,YAAY,GACP,CAAC,EAAE,QAAQ,KAAK,IAAI,SAAS;GAE/D,MAAM,aAAa,gBAAgB,IAAI,KAAK;GAC5C,IAAI,CAAC,YACH,MAAM,IAAI,MAAM,4CAA4C;GAI9D,MAAM,WAAW,MAAM,OAAO,IAAI,MAAM,WAAW,QAAQ,cAAc;GACzE,IAAI,CAAC,UACH,MAAM,IAAI,MAAM,0CAA0C,iBAAiB;GAG7E,MAAM,kBAAkB,MAAM,YAAY,CAAC,CAAC,qBAAqB;GACjE,IAAI,CAAC,iBACH,MAAM,IAAI,MAAM,wDAAwD;GAG1E,MAAM,SAAS,gCAAgC,UAAU,iBAAiB,KAAK,SAAS;GACxF,IAAI,cAAc,QAChB,MAAM,IAAI,MAAM,oCAAoC,OAAO,UAAU;GAGvE,4BAA4B,IAAI,YAAY,OAAO,cAAc;GACjE,qBAAqB,IAAI,OAAO,OAAO,cAAc;GACrD,cAAc,IAAI,OAAO,OAAO,YAAY;EAC9C;CACF;CAGA,IAAI,4BAA4B,OAAO,WAAW,YAChD,MAAM,IAAI,MACR,kBAAkB,4BAA4B,KAAK,mCAAmC,WAAW,YACnG;CAIF,MAAM,qBAAqB,2BACzB,iBAAiB,aACjB,eACF;CAIA,MAAM,eADiB,SAAS,aAAa,WAAW,QACtB,CAAC,CAAC,QAAQ,CAAC,CAAC,OAAO,CAAC,CAAC,KAAK;CAG5D,MAAM,mBAAmB,qBAAqB,cAAc,OAAO;CACnE,MAAM,eAAe,wBAAwB,iBAAiB,YAAY;CAG1E,MAAM,EAAE,WAAW,gBAAgB,4BACjC,oBACA,6BACA,kBACA,YACF;CAIA,IAAI,aAAa,OAAO,WAAW,YAAY,MAAM,MACnD,MAAM,IAAI,MAAM,gEAAgE;CASlF,MAAM,mBAJiB,SAAS,aAAa,WAAW,QAAQ,CAAC,CAAC,aAChE,UACA,SAEoC,CAAC,CAAC,SAAS;CAGjD,oBACE,cACA,SACA,WACA,WACA,sBACA,aACF;CAEA,IAAI,QAAQ,YAAY,MAAM;EAC5B,QAAQ,MAAM;EACd,QAAQ,MACN,oCAAoC,UAAU,SAAS,EAAE,gBAAgB,cAAc,KAAK,oBAC9F;EACA,QAAQ,MAAM,kDAAkD;CAClE;CAIA,IAAI,CADe,MAAM,YAAY,CAAC,CAAC,qBACzB,GACZ,MAAM,IAAI,MAAM,8CAA8C;CAGhE,IAAI,QAAQ,YAAY,MACtB,QAAQ,MAAM,oCAAoC,cAAc,KAAK,iBAAiB;MAGtF,QAAQ,MAAM;CAIhB,MAAM,WAA4C,CAAC;CACnD,IAAI,iBAAiB;CAErB,KAAK,MAAM,CAAC,OAAO,iBAAiB,eAAe;EACjD,MAAM,iBAAiBA,IAAS,aAAa,KAAK;EAClD,MAAM,cAAc,SAAS,YAAY,cAAc;EACvD,MAAM,kBAAkB,aAAa,QAAQ,KAAK;EAKlD,IAAI,EAFF,UAAU,MAAM,IAAI,CAAC,CAAC,SAAS,IAAI,MAAM,YAAY,IAAI,aAAa,YAAY,IAGlF,MAAM,IAAI,MAAM,eAAe,MAAM,uBAAuB;EAG9D,MAAM,QAAQ,mBAAmB,MAAM,YAAY,GAAG,WAAW,oBAAoB;EAErF,IAAI,QAAQ,oBAAoB,QAAQ,CAAC,gBAAgB;GAEvD,QAAQ,IAAI,8BAA8B,eAAe,SAAS,GAAG;GACrE,QAAQ,IAAI,MAAM,SAAS,CAAC,CAAC,OAAO,CAAC;GACrC,iBAAiB;EACnB;EAGA,MAAM,SAAS,MAAM,SAAS;EAE9B,SAAS,KAAK;GAAC;GAAgB;GAAc;GAAQ;EAAe,CAAC;CACvE;CAGA,IAAI,QAAQ,aAAa,MAAM;EAE7B,QAAQ,MAAM;EACd,MAAM,UAAU,MAAM,aAAa,QAAQ,UAAU,QAAQ,YAAY,IAAI;EAG7E,MAAM,SAAmB,CAAC;EAC1B,KAAK,MAAM,CAAC,KAAK,WAAW,SAC1B,IAAI,WAAW,MAAM;GAEnB,MAAM,OADc,SAAS,YAAY,GAClB,CAAC,EAAE,QAAQ,KAAK,IAAI,SAAS;GACpD,OAAO,KAAK,GAAG,KAAK,IAAI,OAAO,SAAS;EAC1C;EAEF,IAAI,OAAO,SAAS,GAClB,MAAM,IAAI,MAAM,qCAAqC,OAAO,KAAK,IAAI,GAAG;CAE5E,OAEE,KAAK,MAAM,CAAC,MAAM,cAAc,QAAQ,oBAAoB,UAC1D,MAAM,iBACJ,QACA,cACA,QACA,iBACA,QAAQ,WAAW,KACrB;CAKJ,QAAQ,IAAI,WAAW;CACvB,QAAQ,IAAI,gBAAgB;CAE5B,OAAO;EACL,WAAW;EACX,gBAAgB;EAChB,UAAU,4BAA4B;EACtC,UAAU;EACV,QAAQ;EACR,UAAU;CACZ;AACF"}
|
|
1
|
+
{"version":3,"file":"round2-BmpKBQwi.mjs","names":["ARIDClass","XIDClass","JSONComponent"],"sources":["../src/cmd/sign/coordinator/round2.ts"],"sourcesContent":["/**\n * Copyright © 2023-2026 Blockchain Commons, LLC\n * Copyright © 2025-2026 Parity Technologies\n *\n *\n * Sign coordinator round 2 command.\n *\n * Port of cmd/sign/coordinator/round2.rs from frost-hubert-rust.\n *\n * @module\n */\n\n/* eslint-disable @typescript-eslint/no-unsafe-call */\n\nimport * as fs from \"node:fs\";\nimport * as path from \"node:path\";\n\nimport {\n type ARID,\n type XID,\n XID as XIDClass,\n ARID as ARIDClass,\n Signature,\n type PrivateKeys,\n JSON as JSONComponent,\n} from \"@bcts/components\";\nimport { Envelope } from \"@bcts/envelope\";\nimport { compareXidBytes } from \"../../../dkg/proposed-participant.js\";\nimport { type XIDDocument } from \"@bcts/xid\";\n\nimport { Registry, resolveRegistryPath } from \"../../../registry/index.js\";\nimport { parallelFetch, parallelSend, type CollectionResult } from \"../../parallel.js\";\nimport { type StorageClient } from \"../../storage.js\";\nimport { parseAridUr, signingKeyFromVerifying } from \"../../dkg/common.js\";\nimport { signingStateDir, SignFinalizeContent } from \"../common.js\";\nimport { putWithIndicator } from \"../../busy.js\";\nimport {\n aggregateSignatures,\n createSigningPackage,\n deserializeSigningCommitments,\n deserializeSignatureShare,\n deserializePublicKeyPackage,\n identifierFromU16,\n serializeSignature,\n serializeSignatureShare,\n type SerializedPublicKeyPackage,\n type SerializedSigningCommitments,\n type FrostIdentifier,\n type Ed25519SigningCommitments,\n type Ed25519SignatureShare,\n type FrostPublicKeyPackage,\n} from \"../../../frost/index.js\";\n\n/**\n * Options for the sign round2 command.\n */\nexport interface SignRound2Options {\n registryPath?: string;\n groupId?: string;\n sessionId: string;\n parallel?: boolean;\n timeoutSeconds?: number;\n previewFinalize?: boolean;\n verbose?: boolean;\n}\n\n/**\n * Result of the sign round2 command.\n */\nexport interface SignRound2Result {\n signature: string;\n signedEnvelope: string;\n accepted: number;\n rejected: number;\n errors: number;\n timeouts: number;\n}\n\n/**\n * Data extracted from a successful signature share response.\n *\n * Port of `struct SignRound2ResponseData` from cmd/sign/coordinator/round2.rs.\n */\ninterface SignRound2ResponseData {\n signatureShare: Ed25519SignatureShare;\n finalizeArid: ARID;\n}\n\n/**\n * State loaded from start.json.\n *\n * Port of `struct StartState` from cmd/sign/coordinator/round2.rs.\n */\ninterface StartState {\n groupId: ARID;\n minSigners: number;\n participants: XID[];\n targetUr: string;\n}\n\n/**\n * Individual participant's commitment data.\n *\n * Port of `struct ParticipantCommitment` from cmd/sign/coordinator/round2.rs.\n */\ninterface ParticipantCommitment {\n commitments: Ed25519SigningCommitments;\n shareArid: ARID;\n}\n\n/**\n * State loaded from commitments.json.\n *\n * Port of `struct CommitmentsState` from cmd/sign/coordinator/round2.rs.\n */\ninterface CommitmentsState {\n commitments: Map<string, ParticipantCommitment>; // XID UR string -> commitment\n}\n\n/**\n * Validate envelope and extract signature share data (for parallel fetch).\n *\n * Port of `validate_and_extract_share_response()` from cmd/sign/coordinator/round2.rs.\n */\nfunction validateAndExtractShareResponse(\n envelope: Envelope,\n _coordinatorKeys: PrivateKeys,\n expectedSender: XID,\n expectedSessionId: ARID,\n): SignRound2ResponseData | { rejected: string } {\n // In the full implementation, we would decrypt the sealed response here\n // For now, we extract the data from the envelope directly\n\n try {\n // Check the response type\n envelope.checkSubjectUnit();\n envelope.checkType(\"signRound2Response\");\n\n // Extract session ID using objectsForPredicate and then extract subjects\n const sessionObjects = envelope.objectsForPredicate(\"session\");\n if (sessionObjects.length === 0) {\n return { rejected: \"Missing session in response\" };\n }\n const responseSession = ARIDClass.fromTaggedCbor(sessionObjects[0].subject().tryLeaf());\n if (responseSession.urString() !== expectedSessionId.urString()) {\n return {\n rejected: `Response session ${responseSession.urString()} does not match expected ${expectedSessionId.urString()}`,\n };\n }\n\n // Extract participant XID (sender check)\n const participantObjects = envelope.objectsForPredicate(\"participant\");\n if (participantObjects.length === 0) {\n return { rejected: \"Missing participant in response\" };\n }\n const participantXid = XIDClass.fromTaggedCbor(participantObjects[0].subject().tryLeaf());\n if (participantXid.urString() !== expectedSender.urString()) {\n return {\n rejected: `Unexpected response sender: ${participantXid.urString()} (expected ${expectedSender.urString()})`,\n };\n }\n\n // Extract signature share (JSON-serialized)\n const shareObjects = envelope.objectsForPredicate(\"signature_share\");\n if (shareObjects.length === 0) {\n return { rejected: \"Missing signature_share in response\" };\n }\n const signatureShareJson = JSONComponent.fromTaggedCbor(shareObjects[0].subject().tryLeaf());\n const signatureShareData = JSON.parse(signatureShareJson.toString()) as { share: string };\n const signatureShare = deserializeSignatureShare(signatureShareData.share);\n\n // Extract finalize ARID (response_arid)\n const responseAridObjects = envelope.objectsForPredicate(\"response_arid\");\n if (responseAridObjects.length === 0) {\n return { rejected: \"Missing response_arid in response\" };\n }\n const finalizeArid = ARIDClass.fromTaggedCbor(responseAridObjects[0].subject().tryLeaf());\n\n return { signatureShare, finalizeArid };\n } catch (error) {\n const message = error instanceof Error ? error.message : String(error);\n return { rejected: `Failed to parse response: ${message}` };\n }\n}\n\n/**\n * Collect signature shares in parallel with progress display.\n *\n * Port of `collect_shares_parallel()` from cmd/sign/coordinator/round2.rs.\n */\nasync function collectSharesParallel(\n client: StorageClient,\n registry: Registry,\n commitmentsState: CommitmentsState,\n coordinator: XIDDocument,\n sessionId: ARID,\n timeoutSeconds?: number,\n): Promise<CollectionResult<SignRound2ResponseData>> {\n // Build requests from commitments\n const requests: [XID, ARID, string][] = [];\n\n for (const [xidUr, entry] of commitmentsState.commitments) {\n const xid = XIDClass.fromURString(xidUr);\n const participant = registry.participant(xid);\n const name = participant?.petName() ?? xid.urString();\n requests.push([xid, entry.shareArid, name]);\n }\n\n const coordinatorKeys = coordinator.inceptionPrivateKeys();\n if (!coordinatorKeys) {\n throw new Error(\"Coordinator XID document has no inception private keys\");\n }\n\n const session = sessionId;\n\n return parallelFetch(\n client,\n requests,\n (envelope: Envelope, xid: XID) => {\n return validateAndExtractShareResponse(envelope, coordinatorKeys, xid, session);\n },\n {\n timeoutSeconds,\n verbose: false,\n },\n );\n}\n\n/**\n * Build a finalize event containing all signature shares.\n *\n * Port of `build_finalize_event()` from cmd/sign/coordinator/round2.rs.\n */\nfunction buildFinalizeEvent(\n _sender: XIDDocument,\n sessionId: ARID,\n signatureSharesByXid: Map<string, Ed25519SignatureShare>,\n): SignFinalizeContent {\n // Build the content with session and all signature shares\n let content = SignFinalizeContent.new().addAssertion(\"session\", sessionId);\n\n for (const [xidUr, share] of signatureSharesByXid) {\n const xid = XIDClass.fromURString(xidUr);\n const shareHex = serializeSignatureShare(share);\n const shareJson = JSONComponent.fromString(JSON.stringify({ share: shareHex }));\n const entry = Envelope.new(xid).addAssertion(\"share\", shareJson);\n content = content.addAssertion(\"signature_share\", entry);\n }\n\n return content;\n}\n\n/**\n * Aggregate signature shares and verify the result.\n *\n * Port of signature aggregation logic from cmd/sign/coordinator/round2.rs.\n */\nfunction aggregateAndVerifySignature(\n signingCommitments: Map<FrostIdentifier, Ed25519SigningCommitments>,\n signatureSharesByIdentifier: Map<FrostIdentifier, Ed25519SignatureShare>,\n publicKeyPackage: FrostPublicKeyPackage,\n targetDigest: Uint8Array,\n): { signature: Signature; signatureUr: string } {\n // Create signing package\n const signingPackage = createSigningPackage(signingCommitments, targetDigest);\n\n // Aggregate signature shares\n const aggregatedSignature = aggregateSignatures(\n signingPackage,\n signatureSharesByIdentifier,\n publicKeyPackage,\n );\n\n // Serialize the aggregated signature\n const signatureBytes = serializeSignature(aggregatedSignature);\n\n // Verify the signature is 64 bytes\n if (signatureBytes.length !== 64) {\n throw new Error(\"Aggregated signature is not 64 bytes\");\n }\n\n // Create bc-components Signature\n const signature = Signature.ed25519FromData(signatureBytes);\n const signatureUr = signature.urString();\n\n return { signature, signatureUr };\n}\n\n/**\n * Persist final signing state to disk.\n *\n * Port of `persist_final_state()` from cmd/sign/coordinator/round2.rs.\n */\nfunction persistSigningState(\n registryPath: string,\n groupId: ARID,\n sessionId: ARID,\n signature: Signature,\n signatureSharesByXid: Map<string, Ed25519SignatureShare>,\n finalizeArids: Map<string, ARID>,\n): void {\n const dir = signingStateDir(registryPath, groupId.hex(), sessionId.hex());\n fs.mkdirSync(dir, { recursive: true });\n\n // Build signature shares JSON object\n const sharesJson: Record<string, unknown> = {};\n for (const [xidUr, share] of signatureSharesByXid) {\n sharesJson[xidUr] = { share: serializeSignatureShare(share) };\n }\n\n // Build finalize ARIDs JSON object\n const finalizeJson: Record<string, string> = {};\n for (const [xidUr, arid] of finalizeArids) {\n finalizeJson[xidUr] = arid.urString();\n }\n\n // Build root JSON object\n const root = {\n group: groupId.urString(),\n session: sessionId.urString(),\n signature: signature.urString(),\n signature_shares: sharesJson,\n finalize_arids: finalizeJson,\n };\n\n fs.writeFileSync(path.join(dir, \"final.json\"), JSON.stringify(root, null, 2));\n}\n\n/**\n * Load start state from disk.\n *\n * Port of `load_start_state()` from cmd/sign/coordinator/round2.rs.\n */\nfunction loadStartState(registryPath: string, sessionId: ARID, groupHint?: ARID): StartState {\n const base = path.dirname(registryPath);\n const groupStateDir = path.join(base, \"group-state\");\n\n // Find candidate paths\n const candidatePaths: [ARID, string][] = [];\n let groupDirs: [ARID, string][];\n\n if (groupHint) {\n groupDirs = [[groupHint, path.join(groupStateDir, groupHint.hex())]];\n } else {\n groupDirs = [];\n if (fs.existsSync(groupStateDir)) {\n for (const entry of fs.readdirSync(groupStateDir, { withFileTypes: true })) {\n if (entry.isDirectory() && entry.name.length === 64 && /^[0-9a-f]+$/i.test(entry.name)) {\n const groupId = ARIDClass.fromHex(entry.name);\n groupDirs.push([groupId, path.join(groupStateDir, entry.name)]);\n }\n }\n }\n }\n\n for (const [groupId, groupDir] of groupDirs) {\n const candidate = path.join(groupDir, \"signing\", sessionId.hex(), \"start.json\");\n if (fs.existsSync(candidate)) {\n candidatePaths.push([groupId, candidate]);\n }\n }\n\n if (candidatePaths.length === 0) {\n throw new Error(\"No sign start state found; run `frost sign coordinator start` first\");\n }\n if (candidatePaths.length > 1) {\n throw new Error(\"Multiple signing sessions found; specify --group to disambiguate\");\n }\n\n const [groupId, statePath] = candidatePaths[0];\n const raw = JSON.parse(fs.readFileSync(statePath, \"utf-8\")) as Record<string, unknown>;\n\n const getStr = (key: string): string => {\n const value = raw[key];\n if (typeof value !== \"string\") {\n throw new Error(`Missing or invalid ${key} in start.json`);\n }\n return value;\n };\n\n const sessionInState = parseAridUr(getStr(\"session_id\"));\n const groupInState = parseAridUr(getStr(\"group\"));\n\n if (sessionInState.urString() !== sessionId.urString()) {\n throw new Error(\n `start.json session ${sessionInState.urString()} does not match requested session ${sessionId.urString()}`,\n );\n }\n if (groupInState.urString() !== groupId.urString()) {\n throw new Error(\n `start.json group ${groupInState.urString()} does not match directory group ${groupId.urString()}`,\n );\n }\n\n const minSigners = raw[\"min_signers\"];\n if (typeof minSigners !== \"number\") {\n throw new Error(\"Missing min_signers in start.json\");\n }\n\n const participantsVal = raw[\"participants\"] as Record<string, unknown> | undefined;\n if (!participantsVal || typeof participantsVal !== \"object\") {\n throw new Error(\"Missing participants in start.json\");\n }\n\n const participants: XID[] = [];\n for (const xidStr of Object.keys(participantsVal)) {\n participants.push(XIDClass.fromURString(xidStr));\n }\n // Sort by XID byte order — mirrors Rust `XID::cmp` (raw 32-byte\n // lex compare). The earlier port used\n // `urString().localeCompare(...)`, which diverges for bytes ≥ 0x80.\n participants.sort((a, b) => compareXidBytes(a.toData(), b.toData()));\n\n const targetUr = getStr(\"target\");\n\n return { groupId, minSigners, participants, targetUr };\n}\n\n/**\n * Load commitments state from disk.\n *\n * Port of `load_commitments_state()` from cmd/sign/coordinator/round2.rs.\n */\nfunction loadCommitmentsState(\n registryPath: string,\n groupId: ARID,\n sessionId: ARID,\n): CommitmentsState {\n const dir = signingStateDir(registryPath, groupId.hex(), sessionId.hex());\n const statePath = path.join(dir, \"commitments.json\");\n\n if (!fs.existsSync(statePath)) {\n throw new Error(\n `Commitments not found at ${statePath}. Run \\`frost sign coordinator collect\\` first`,\n );\n }\n\n const raw = JSON.parse(fs.readFileSync(statePath, \"utf-8\")) as Record<string, unknown>;\n\n const getStr = (key: string): string => {\n const value = raw[key];\n if (typeof value !== \"string\") {\n throw new Error(`Missing or invalid ${key} in commitments.json`);\n }\n return value;\n };\n\n const sessionInState = parseAridUr(getStr(\"session\"));\n if (sessionInState.urString() !== sessionId.urString()) {\n throw new Error(\n `commitments.json session ${sessionInState.urString()} does not match requested session ${sessionId.urString()}`,\n );\n }\n\n const commitmentsVal = raw[\"commitments\"] as Record<string, unknown> | undefined;\n if (!commitmentsVal || typeof commitmentsVal !== \"object\") {\n throw new Error(\"Missing commitments map in commitments.json\");\n }\n\n const commitments = new Map<string, ParticipantCommitment>();\n\n for (const [xidStr, value] of Object.entries(commitmentsVal)) {\n const obj = value as Record<string, unknown>;\n const commitValue = obj[\"commitments\"] as SerializedSigningCommitments | undefined;\n if (!commitValue) {\n throw new Error(\"Missing commitments value in commitments.json\");\n }\n const commitmentsDeserialized = deserializeSigningCommitments(commitValue);\n\n const shareAridRaw = obj[\"share_arid\"];\n if (typeof shareAridRaw !== \"string\") {\n throw new Error(\"Missing share_arid in commitments.json\");\n }\n const shareArid = parseAridUr(shareAridRaw);\n\n commitments.set(xidStr, {\n commitments: commitmentsDeserialized,\n shareArid,\n });\n }\n\n return { commitments };\n}\n\n/**\n * Load public key package from collected_finalize.json.\n *\n * Port of `load_public_key_package()` from cmd/sign/coordinator/round2.rs.\n */\nfunction loadPublicKeyPackage(registryPath: string, groupId: ARID): FrostPublicKeyPackage {\n const base = path.dirname(registryPath);\n const pkgPath = path.join(base, \"group-state\", groupId.hex(), \"collected_finalize.json\");\n\n if (!fs.existsSync(pkgPath)) {\n throw new Error(\n `collected_finalize.json not found at ${pkgPath}. Run \\`frost dkg coordinator finalize collect\\` first`,\n );\n }\n\n const raw = JSON.parse(fs.readFileSync(pkgPath, \"utf-8\")) as Record<string, unknown>;\n const firstEntry = Object.values(raw)[0] as Record<string, unknown> | undefined;\n\n if (!firstEntry) {\n throw new Error(\"collected_finalize.json is empty\");\n }\n\n const publicKeyValue = firstEntry[\"public_key_package\"] as SerializedPublicKeyPackage | undefined;\n if (!publicKeyValue) {\n throw new Error(\"public_key_package missing in collected_finalize.json\");\n }\n\n return deserializePublicKeyPackage(publicKeyValue);\n}\n\n/**\n * Build a map from XID to FROST identifier.\n *\n * Port of `xid_identifier_map()` from cmd/sign/coordinator/round2.rs.\n */\nfunction xidIdentifierMap(participants: XID[]): Map<string, FrostIdentifier> {\n const map = new Map<string, FrostIdentifier>();\n for (let i = 0; i < participants.length; i++) {\n const identifier = identifierFromU16(i + 1);\n map.set(participants[i].urString(), identifier);\n }\n return map;\n}\n\n/**\n * Build signing commitments with identifiers.\n *\n * Port of `commitments_with_identifiers()` from cmd/sign/coordinator/round2.rs.\n */\nfunction commitmentsWithIdentifiers(\n commitments: Map<string, ParticipantCommitment>,\n xidToIdentifier: Map<string, FrostIdentifier>,\n): Map<FrostIdentifier, Ed25519SigningCommitments> {\n const mapped = new Map<FrostIdentifier, Ed25519SigningCommitments>();\n for (const [xidUr, entry] of commitments) {\n const identifier = xidToIdentifier.get(xidUr);\n if (!identifier) {\n throw new Error(`Unknown participant ${xidUr}`);\n }\n mapped.set(identifier, entry.commitments);\n }\n return mapped;\n}\n\n/**\n * Execute the sign coordinator round 2 command.\n *\n * Collects signature shares, aggregates the signature, and posts finalize packages.\n *\n * Port of `CommandArgs::exec()` from cmd/sign/coordinator/round2.rs.\n */\nexport async function round2(\n client: StorageClient,\n options: SignRound2Options,\n cwd: string,\n): Promise<SignRound2Result> {\n const registryPath = resolveRegistryPath(options.registryPath, cwd);\n const registry = Registry.load(registryPath);\n\n const owner = registry.owner();\n if (!owner) {\n throw new Error(\"Registry owner is required\");\n }\n\n const sessionId = parseAridUr(options.sessionId);\n const groupHint = options.groupId ? parseAridUr(options.groupId) : undefined;\n\n // Load start state (finds group automatically if not specified)\n const startState = loadStartState(registryPath, sessionId, groupHint);\n const groupId = startState.groupId;\n\n const groupRecord = registry.group(groupId);\n if (!groupRecord) {\n throw new Error(\"Group not found in registry\");\n }\n\n // Verify coordinator ownership\n if (groupRecord.coordinator().xid().urString() !== owner.xid().urString()) {\n throw new Error(\n `Only the coordinator can finalize signing. Coordinator: ${groupRecord.coordinator().xid().urString()}, Owner: ${owner.xid().urString()}`,\n );\n }\n\n // Load commitments state\n const commitmentsState = loadCommitmentsState(registryPath, groupId, sessionId);\n\n // Build XID to identifier map\n const xidToIdentifier = xidIdentifierMap(startState.participants);\n\n // Collect signature shares\n let signatureSharesByIdentifier: Map<FrostIdentifier, Ed25519SignatureShare>;\n let signatureSharesByXid: Map<string, Ed25519SignatureShare>;\n let finalizeArids: Map<string, ARID>;\n\n if (options.parallel === true) {\n // Parallel collection path\n const collection = await collectSharesParallel(\n client,\n registry,\n commitmentsState,\n owner.xidDocument(),\n sessionId,\n options.timeoutSeconds,\n );\n\n if (!collection.allSucceeded()) {\n // Report failures\n if (collection.rejections.length > 0) {\n console.error(\"\\nRejections:\");\n for (const [xid, reason] of collection.rejections) {\n console.error(` ${xid.urString()}: ${reason}`);\n }\n }\n if (collection.errors.length > 0) {\n console.error(\"\\nErrors:\");\n for (const [xid, error] of collection.errors) {\n console.error(` ${xid.urString()}: ${error}`);\n }\n }\n if (collection.timeouts.length > 0) {\n console.error(\"\\nTimeouts:\");\n for (const xid of collection.timeouts) {\n console.error(` ${xid.urString()}`);\n }\n }\n throw new Error(\n `Signature share collection incomplete: ${collection.successes.length} succeeded, ` +\n `${collection.rejections.length} rejected, ${collection.errors.length} errors, ` +\n `${collection.timeouts.length} timeouts`,\n );\n }\n\n // Convert collection to maps\n signatureSharesByIdentifier = new Map();\n signatureSharesByXid = new Map();\n finalizeArids = new Map();\n\n for (const [xid, data] of collection.successes) {\n const xidUr = xid.urString();\n const identifier = xidToIdentifier.get(xidUr);\n if (!identifier) {\n throw new Error(\"Identifier mapping missing for participant\");\n }\n signatureSharesByIdentifier.set(identifier, data.signatureShare);\n signatureSharesByXid.set(xidUr, data.signatureShare);\n finalizeArids.set(xidUr, data.finalizeArid);\n }\n } else {\n // Sequential collection path\n if (options.verbose === true) {\n console.error(\n `Collecting signature shares for session ${sessionId.urString()} from ${commitmentsState.commitments.size} participants...`,\n );\n }\n\n signatureSharesByIdentifier = new Map();\n signatureSharesByXid = new Map();\n finalizeArids = new Map();\n\n for (const [xidUr, entry] of commitmentsState.commitments) {\n const xid = XIDClass.fromURString(xidUr);\n const participant = registry.participant(xid);\n const participantName = participant?.petName() ?? xid.urString();\n\n const identifier = xidToIdentifier.get(xidUr);\n if (!identifier) {\n throw new Error(\"Identifier mapping missing for participant\");\n }\n\n // Fetch the response\n const envelope = await client.get(entry.shareArid, options.timeoutSeconds);\n if (!envelope) {\n throw new Error(`Signature share response not found for ${participantName}`);\n }\n\n const coordinatorKeys = owner.xidDocument().inceptionPrivateKeys();\n if (!coordinatorKeys) {\n throw new Error(\"Coordinator XID document has no inception private keys\");\n }\n\n const result = validateAndExtractShareResponse(envelope, coordinatorKeys, xid, sessionId);\n if (\"rejected\" in result) {\n throw new Error(`Participant rejected signRound2: ${result.rejected}`);\n }\n\n signatureSharesByIdentifier.set(identifier, result.signatureShare);\n signatureSharesByXid.set(xidUr, result.signatureShare);\n finalizeArids.set(xidUr, result.finalizeArid);\n }\n }\n\n // Verify we have enough shares\n if (signatureSharesByIdentifier.size < startState.minSigners) {\n throw new Error(\n `Only collected ${signatureSharesByIdentifier.size} signature shares, need at least ${startState.minSigners}`,\n );\n }\n\n // Build signing commitments with identifiers\n const signingCommitments = commitmentsWithIdentifiers(\n commitmentsState.commitments,\n xidToIdentifier,\n );\n\n // Get target digest\n const targetEnvelope = Envelope.fromURString(startState.targetUr);\n const targetDigest = targetEnvelope.subject().digest().data();\n\n // Load public key package\n const publicKeyPackage = loadPublicKeyPackage(registryPath, groupId);\n const verifyingKey = signingKeyFromVerifying(publicKeyPackage.verifyingKey);\n\n // Aggregate and verify signature\n const { signature, signatureUr } = aggregateAndVerifySignature(\n signingCommitments,\n signatureSharesByIdentifier,\n publicKeyPackage,\n targetDigest,\n );\n\n // Verify signature against target digest\n // @ts-expect-error - verifyingKey type mismatch\n if (verifyingKey.verify(signature, targetDigest) !== true) {\n throw new Error(\"Aggregated signature failed verification against target digest\");\n }\n\n // Attach signature to target and verify\n\n const signedEnvelope = Envelope.fromURString(startState.targetUr).addAssertion(\n \"signed\",\n signature,\n );\n const signedEnvelopeUr = signedEnvelope.urString();\n\n // Persist final state\n persistSigningState(\n registryPath,\n groupId,\n sessionId,\n signature,\n signatureSharesByXid,\n finalizeArids,\n );\n\n if (options.verbose === true) {\n console.error();\n console.error(\n `Aggregated signature for session ${sessionId.urString()} and prepared ${finalizeArids.size} finalize packages.`,\n );\n console.error(\"Signature verified against target and group key.\");\n }\n\n // Dispatch finalize events to participants\n const signerKeys = owner.xidDocument().inceptionPrivateKeys();\n if (!signerKeys) {\n throw new Error(\"Coordinator XID document has no signing keys\");\n }\n\n if (options.verbose === true) {\n console.error(`Dispatching finalize packages to ${finalizeArids.size} participants...`);\n } else {\n // Blank line to separate get phase from put phase\n console.error();\n }\n\n // Build finalize messages\n const messages: [XID, ARID, Envelope, string][] = [];\n let previewPrinted = false;\n\n for (const [xidUr, finalizeArid] of finalizeArids) {\n const participantXid = XIDClass.fromURString(xidUr);\n const participant = registry.participant(participantXid);\n const participantName = participant?.petName() ?? xidUr;\n\n const recipientDoc =\n xidUr === owner.xid().urString() ? owner.xidDocument() : participant?.xidDocument();\n\n if (!recipientDoc) {\n throw new Error(`Participant ${xidUr} not found in registry`);\n }\n\n const event = buildFinalizeEvent(owner.xidDocument(), sessionId, signatureSharesByXid);\n\n if (options.previewFinalize === true && !previewPrinted) {\n // Preview as unsigned, unencrypted envelope\n console.log(`# signFinalize preview for ${participantXid.urString()}`);\n console.log(event.envelope().format());\n previewPrinted = true;\n }\n\n // For now, use the plain envelope (GSTP sealing would be applied in full implementation)\n const sealed = event.envelope();\n\n messages.push([participantXid, finalizeArid, sealed, participantName]);\n }\n\n // Dispatch messages\n if (options.parallel === true) {\n // Parallel send\n console.error();\n const results = await parallelSend(client, messages, options.verbose === true);\n\n // Check for errors\n const errors: string[] = [];\n for (const [xid, result] of results) {\n if (result !== null) {\n const participant = registry.participant(xid);\n const name = participant?.petName() ?? xid.urString();\n errors.push(`${name}: ${result.message}`);\n }\n }\n if (errors.length > 0) {\n throw new Error(`Failed to send finalize packages: ${errors.join(\"; \")}`);\n }\n } else {\n // Sequential send\n for (const [_xid, finalizeArid, sealed, participantName] of messages) {\n await putWithIndicator(\n client,\n finalizeArid,\n sealed,\n participantName,\n options.verbose ?? false,\n );\n }\n }\n\n // Print final signature and signed envelope UR\n console.log(signatureUr);\n console.log(signedEnvelopeUr);\n\n return {\n signature: signatureUr,\n signedEnvelope: signedEnvelopeUr,\n accepted: signatureSharesByIdentifier.size,\n rejected: 0,\n errors: 0,\n timeouts: 0,\n };\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AA4HA,SAAS,gCACP,UACA,kBACA,gBACA,mBAC+C;CAI/C,IAAI;EAEF,SAAS,iBAAiB;EAC1B,SAAS,UAAU,oBAAoB;EAGvC,MAAM,iBAAiB,SAAS,oBAAoB,SAAS;EAC7D,IAAI,eAAe,WAAW,GAC5B,OAAO,EAAE,UAAU,8BAA8B;EAEnD,MAAM,kBAAkBA,KAAU,eAAe,eAAe,EAAE,CAAC,QAAQ,CAAC,CAAC,QAAQ,CAAC;EACtF,IAAI,gBAAgB,SAAS,MAAM,kBAAkB,SAAS,GAC5D,OAAO,EACL,UAAU,oBAAoB,gBAAgB,SAAS,EAAE,2BAA2B,kBAAkB,SAAS,IACjH;EAIF,MAAM,qBAAqB,SAAS,oBAAoB,aAAa;EACrE,IAAI,mBAAmB,WAAW,GAChC,OAAO,EAAE,UAAU,kCAAkC;EAEvD,MAAM,iBAAiBC,IAAS,eAAe,mBAAmB,EAAE,CAAC,QAAQ,CAAC,CAAC,QAAQ,CAAC;EACxF,IAAI,eAAe,SAAS,MAAM,eAAe,SAAS,GACxD,OAAO,EACL,UAAU,+BAA+B,eAAe,SAAS,EAAE,aAAa,eAAe,SAAS,EAAE,GAC5G;EAIF,MAAM,eAAe,SAAS,oBAAoB,iBAAiB;EACnE,IAAI,aAAa,WAAW,GAC1B,OAAO,EAAE,UAAU,sCAAsC;EAE3D,MAAM,qBAAqBC,OAAc,eAAe,aAAa,EAAE,CAAC,QAAQ,CAAC,CAAC,QAAQ,CAAC;EAE3F,MAAM,iBAAiB,0BADI,KAAK,MAAM,mBAAmB,SAAS,CACA,CAAC,CAAC,KAAK;EAGzE,MAAM,sBAAsB,SAAS,oBAAoB,eAAe;EACxE,IAAI,oBAAoB,WAAW,GACjC,OAAO,EAAE,UAAU,oCAAoC;EAIzD,OAAO;GAAE;GAAgB,cAFJF,KAAU,eAAe,oBAAoB,EAAE,CAAC,QAAQ,CAAC,CAAC,QAAQ,CAEnD;EAAE;CACxC,SAAS,OAAO;EAEd,OAAO,EAAE,UAAU,6BADH,iBAAiB,QAAQ,MAAM,UAAU,OAAO,KAAK,IACX;CAC5D;AACF;;;;;;AAOA,eAAe,sBACb,QACA,UACA,kBACA,aACA,WACA,gBACmD;CAEnD,MAAM,WAAkC,CAAC;CAEzC,KAAK,MAAM,CAAC,OAAO,UAAU,iBAAiB,aAAa;EACzD,MAAM,MAAMC,IAAS,aAAa,KAAK;EAEvC,MAAM,OADc,SAAS,YAAY,GAClB,CAAC,EAAE,QAAQ,KAAK,IAAI,SAAS;EACpD,SAAS,KAAK;GAAC;GAAK,MAAM;GAAW;EAAI,CAAC;CAC5C;CAEA,MAAM,kBAAkB,YAAY,qBAAqB;CACzD,IAAI,CAAC,iBACH,MAAM,IAAI,MAAM,wDAAwD;CAG1E,MAAM,UAAU;CAEhB,OAAO,cACL,QACA,WACC,UAAoB,QAAa;EAChC,OAAO,gCAAgC,UAAU,iBAAiB,KAAK,OAAO;CAChF,GACA;EACE;EACA,SAAS;CACX,CACF;AACF;;;;;;AAOA,SAAS,mBACP,SACA,WACA,sBACqB;CAErB,IAAI,UAAU,oBAAoB,IAAI,CAAC,CAAC,aAAa,WAAW,SAAS;CAEzE,KAAK,MAAM,CAAC,OAAO,UAAU,sBAAsB;EACjD,MAAM,MAAMA,IAAS,aAAa,KAAK;EACvC,MAAM,WAAW,wBAAwB,KAAK;EAC9C,MAAM,YAAYC,OAAc,WAAW,KAAK,UAAU,EAAE,OAAO,SAAS,CAAC,CAAC;EAC9E,MAAM,QAAQ,SAAS,IAAI,GAAG,CAAC,CAAC,aAAa,SAAS,SAAS;EAC/D,UAAU,QAAQ,aAAa,mBAAmB,KAAK;CACzD;CAEA,OAAO;AACT;;;;;;AAOA,SAAS,4BACP,oBACA,6BACA,kBACA,cAC+C;CAY/C,MAAM,iBAAiB,mBAPK,oBAHL,qBAAqB,oBAAoB,YAIjD,GACb,6BACA,gBAI0D,CAAC;CAG7D,IAAI,eAAe,WAAW,IAC5B,MAAM,IAAI,MAAM,sCAAsC;CAIxD,MAAM,YAAY,UAAU,gBAAgB,cAAc;CAG1D,OAAO;EAAE;EAAW,aAFA,UAAU,SAEA;CAAE;AAClC;;;;;;AAOA,SAAS,oBACP,cACA,SACA,WACA,WACA,sBACA,eACM;CACN,MAAM,MAAM,gBAAgB,cAAc,QAAQ,IAAI,GAAG,UAAU,IAAI,CAAC;CACxE,GAAG,UAAU,KAAK,EAAE,WAAW,KAAK,CAAC;CAGrC,MAAM,aAAsC,CAAC;CAC7C,KAAK,MAAM,CAAC,OAAO,UAAU,sBAC3B,WAAW,SAAS,EAAE,OAAO,wBAAwB,KAAK,EAAE;CAI9D,MAAM,eAAuC,CAAC;CAC9C,KAAK,MAAM,CAAC,OAAO,SAAS,eAC1B,aAAa,SAAS,KAAK,SAAS;CAItC,MAAM,OAAO;EACX,OAAO,QAAQ,SAAS;EACxB,SAAS,UAAU,SAAS;EAC5B,WAAW,UAAU,SAAS;EAC9B,kBAAkB;EAClB,gBAAgB;CAClB;CAEA,GAAG,cAAc,KAAK,KAAK,KAAK,YAAY,GAAG,KAAK,UAAU,MAAM,MAAM,CAAC,CAAC;AAC9E;;;;;;AAOA,SAAS,eAAe,cAAsB,WAAiB,WAA8B;CAC3F,MAAM,OAAO,KAAK,QAAQ,YAAY;CACtC,MAAM,gBAAgB,KAAK,KAAK,MAAM,aAAa;CAGnD,MAAM,iBAAmC,CAAC;CAC1C,IAAI;CAEJ,IAAI,WACF,YAAY,CAAC,CAAC,WAAW,KAAK,KAAK,eAAe,UAAU,IAAI,CAAC,CAAC,CAAC;MAC9D;EACL,YAAY,CAAC;EACb,IAAI,GAAG,WAAW,aAAa;QACxB,MAAM,SAAS,GAAG,YAAY,eAAe,EAAE,eAAe,KAAK,CAAC,GACvE,IAAI,MAAM,YAAY,KAAK,MAAM,KAAK,WAAW,MAAM,eAAe,KAAK,MAAM,IAAI,GAAG;IACtF,MAAM,UAAUF,KAAU,QAAQ,MAAM,IAAI;IAC5C,UAAU,KAAK,CAAC,SAAS,KAAK,KAAK,eAAe,MAAM,IAAI,CAAC,CAAC;GAChE;;CAGN;CAEA,KAAK,MAAM,CAAC,SAAS,aAAa,WAAW;EAC3C,MAAM,YAAY,KAAK,KAAK,UAAU,WAAW,UAAU,IAAI,GAAG,YAAY;EAC9E,IAAI,GAAG,WAAW,SAAS,GACzB,eAAe,KAAK,CAAC,SAAS,SAAS,CAAC;CAE5C;CAEA,IAAI,eAAe,WAAW,GAC5B,MAAM,IAAI,MAAM,qEAAqE;CAEvF,IAAI,eAAe,SAAS,GAC1B,MAAM,IAAI,MAAM,kEAAkE;CAGpF,MAAM,CAAC,SAAS,aAAa,eAAe;CAC5C,MAAM,MAAM,KAAK,MAAM,GAAG,aAAa,WAAW,OAAO,CAAC;CAE1D,MAAM,UAAU,QAAwB;EACtC,MAAM,QAAQ,IAAI;EAClB,IAAI,OAAO,UAAU,UACnB,MAAM,IAAI,MAAM,sBAAsB,IAAI,eAAe;EAE3D,OAAO;CACT;CAEA,MAAM,iBAAiB,YAAY,OAAO,YAAY,CAAC;CACvD,MAAM,eAAe,YAAY,OAAO,OAAO,CAAC;CAEhD,IAAI,eAAe,SAAS,MAAM,UAAU,SAAS,GACnD,MAAM,IAAI,MACR,sBAAsB,eAAe,SAAS,EAAE,oCAAoC,UAAU,SAAS,GACzG;CAEF,IAAI,aAAa,SAAS,MAAM,QAAQ,SAAS,GAC/C,MAAM,IAAI,MACR,oBAAoB,aAAa,SAAS,EAAE,kCAAkC,QAAQ,SAAS,GACjG;CAGF,MAAM,aAAa,IAAI;CACvB,IAAI,OAAO,eAAe,UACxB,MAAM,IAAI,MAAM,mCAAmC;CAGrD,MAAM,kBAAkB,IAAI;CAC5B,IAAI,CAAC,mBAAmB,OAAO,oBAAoB,UACjD,MAAM,IAAI,MAAM,oCAAoC;CAGtD,MAAM,eAAsB,CAAC;CAC7B,KAAK,MAAM,UAAU,OAAO,KAAK,eAAe,GAC9C,aAAa,KAAKC,IAAS,aAAa,MAAM,CAAC;CAKjD,aAAa,MAAM,GAAG,MAAM,gBAAgB,EAAE,OAAO,GAAG,EAAE,OAAO,CAAC,CAAC;CAInE,OAAO;EAAE;EAAS;EAAY;EAAc,UAF3B,OAAO,QAE2B;CAAE;AACvD;;;;;;AAOA,SAAS,qBACP,cACA,SACA,WACkB;CAClB,MAAM,MAAM,gBAAgB,cAAc,QAAQ,IAAI,GAAG,UAAU,IAAI,CAAC;CACxE,MAAM,YAAY,KAAK,KAAK,KAAK,kBAAkB;CAEnD,IAAI,CAAC,GAAG,WAAW,SAAS,GAC1B,MAAM,IAAI,MACR,4BAA4B,UAAU,+CACxC;CAGF,MAAM,MAAM,KAAK,MAAM,GAAG,aAAa,WAAW,OAAO,CAAC;CAE1D,MAAM,UAAU,QAAwB;EACtC,MAAM,QAAQ,IAAI;EAClB,IAAI,OAAO,UAAU,UACnB,MAAM,IAAI,MAAM,sBAAsB,IAAI,qBAAqB;EAEjE,OAAO;CACT;CAEA,MAAM,iBAAiB,YAAY,OAAO,SAAS,CAAC;CACpD,IAAI,eAAe,SAAS,MAAM,UAAU,SAAS,GACnD,MAAM,IAAI,MACR,4BAA4B,eAAe,SAAS,EAAE,oCAAoC,UAAU,SAAS,GAC/G;CAGF,MAAM,iBAAiB,IAAI;CAC3B,IAAI,CAAC,kBAAkB,OAAO,mBAAmB,UAC/C,MAAM,IAAI,MAAM,6CAA6C;CAG/D,MAAM,8BAAc,IAAI,IAAmC;CAE3D,KAAK,MAAM,CAAC,QAAQ,UAAU,OAAO,QAAQ,cAAc,GAAG;EAC5D,MAAM,MAAM;EACZ,MAAM,cAAc,IAAI;EACxB,IAAI,CAAC,aACH,MAAM,IAAI,MAAM,+CAA+C;EAEjE,MAAM,0BAA0B,8BAA8B,WAAW;EAEzE,MAAM,eAAe,IAAI;EACzB,IAAI,OAAO,iBAAiB,UAC1B,MAAM,IAAI,MAAM,wCAAwC;EAE1D,MAAM,YAAY,YAAY,YAAY;EAE1C,YAAY,IAAI,QAAQ;GACtB,aAAa;GACb;EACF,CAAC;CACH;CAEA,OAAO,EAAE,YAAY;AACvB;;;;;;AAOA,SAAS,qBAAqB,cAAsB,SAAsC;CACxF,MAAM,OAAO,KAAK,QAAQ,YAAY;CACtC,MAAM,UAAU,KAAK,KAAK,MAAM,eAAe,QAAQ,IAAI,GAAG,yBAAyB;CAEvF,IAAI,CAAC,GAAG,WAAW,OAAO,GACxB,MAAM,IAAI,MACR,wCAAwC,QAAQ,uDAClD;CAGF,MAAM,MAAM,KAAK,MAAM,GAAG,aAAa,SAAS,OAAO,CAAC;CACxD,MAAM,aAAa,OAAO,OAAO,GAAG,CAAC,CAAC;CAEtC,IAAI,CAAC,YACH,MAAM,IAAI,MAAM,kCAAkC;CAGpD,MAAM,iBAAiB,WAAW;CAClC,IAAI,CAAC,gBACH,MAAM,IAAI,MAAM,uDAAuD;CAGzE,OAAO,4BAA4B,cAAc;AACnD;;;;;;AAOA,SAAS,iBAAiB,cAAmD;CAC3E,MAAM,sBAAM,IAAI,IAA6B;CAC7C,KAAK,IAAI,IAAI,GAAG,IAAI,aAAa,QAAQ,KAAK;EAC5C,MAAM,aAAa,kBAAkB,IAAI,CAAC;EAC1C,IAAI,IAAI,aAAa,EAAE,CAAC,SAAS,GAAG,UAAU;CAChD;CACA,OAAO;AACT;;;;;;AAOA,SAAS,2BACP,aACA,iBACiD;CACjD,MAAM,yBAAS,IAAI,IAAgD;CACnE,KAAK,MAAM,CAAC,OAAO,UAAU,aAAa;EACxC,MAAM,aAAa,gBAAgB,IAAI,KAAK;EAC5C,IAAI,CAAC,YACH,MAAM,IAAI,MAAM,uBAAuB,OAAO;EAEhD,OAAO,IAAI,YAAY,MAAM,WAAW;CAC1C;CACA,OAAO;AACT;;;;;;;;AASA,eAAsB,OACpB,QACA,SACA,KAC2B;CAC3B,MAAM,eAAe,oBAAoB,QAAQ,cAAc,GAAG;CAClE,MAAM,WAAW,SAAS,KAAK,YAAY;CAE3C,MAAM,QAAQ,SAAS,MAAM;CAC7B,IAAI,CAAC,OACH,MAAM,IAAI,MAAM,4BAA4B;CAG9C,MAAM,YAAY,YAAY,QAAQ,SAAS;CAI/C,MAAM,aAAa,eAAe,cAAc,WAH9B,QAAQ,UAAU,YAAY,QAAQ,OAAO,IAAI,KAAA,CAGC;CACpE,MAAM,UAAU,WAAW;CAE3B,MAAM,cAAc,SAAS,MAAM,OAAO;CAC1C,IAAI,CAAC,aACH,MAAM,IAAI,MAAM,6BAA6B;CAI/C,IAAI,YAAY,YAAY,CAAC,CAAC,IAAI,CAAC,CAAC,SAAS,MAAM,MAAM,IAAI,CAAC,CAAC,SAAS,GACtE,MAAM,IAAI,MACR,2DAA2D,YAAY,YAAY,CAAC,CAAC,IAAI,CAAC,CAAC,SAAS,EAAE,WAAW,MAAM,IAAI,CAAC,CAAC,SAAS,GACxI;CAIF,MAAM,mBAAmB,qBAAqB,cAAc,SAAS,SAAS;CAG9E,MAAM,kBAAkB,iBAAiB,WAAW,YAAY;CAGhE,IAAI;CACJ,IAAI;CACJ,IAAI;CAEJ,IAAI,QAAQ,aAAa,MAAM;EAE7B,MAAM,aAAa,MAAM,sBACvB,QACA,UACA,kBACA,MAAM,YAAY,GAClB,WACA,QAAQ,cACV;EAEA,IAAI,CAAC,WAAW,aAAa,GAAG;GAE9B,IAAI,WAAW,WAAW,SAAS,GAAG;IACpC,QAAQ,MAAM,eAAe;IAC7B,KAAK,MAAM,CAAC,KAAK,WAAW,WAAW,YACrC,QAAQ,MAAM,KAAK,IAAI,SAAS,EAAE,IAAI,QAAQ;GAElD;GACA,IAAI,WAAW,OAAO,SAAS,GAAG;IAChC,QAAQ,MAAM,WAAW;IACzB,KAAK,MAAM,CAAC,KAAK,UAAU,WAAW,QACpC,QAAQ,MAAM,KAAK,IAAI,SAAS,EAAE,IAAI,OAAO;GAEjD;GACA,IAAI,WAAW,SAAS,SAAS,GAAG;IAClC,QAAQ,MAAM,aAAa;IAC3B,KAAK,MAAM,OAAO,WAAW,UAC3B,QAAQ,MAAM,KAAK,IAAI,SAAS,GAAG;GAEvC;GACA,MAAM,IAAI,MACR,0CAA0C,WAAW,UAAU,OAAO,cACjE,WAAW,WAAW,OAAO,aAAa,WAAW,OAAO,OAAO,WACnE,WAAW,SAAS,OAAO,UAClC;EACF;EAGA,8CAA8B,IAAI,IAAI;EACtC,uCAAuB,IAAI,IAAI;EAC/B,gCAAgB,IAAI,IAAI;EAExB,KAAK,MAAM,CAAC,KAAK,SAAS,WAAW,WAAW;GAC9C,MAAM,QAAQ,IAAI,SAAS;GAC3B,MAAM,aAAa,gBAAgB,IAAI,KAAK;GAC5C,IAAI,CAAC,YACH,MAAM,IAAI,MAAM,4CAA4C;GAE9D,4BAA4B,IAAI,YAAY,KAAK,cAAc;GAC/D,qBAAqB,IAAI,OAAO,KAAK,cAAc;GACnD,cAAc,IAAI,OAAO,KAAK,YAAY;EAC5C;CACF,OAAO;EAEL,IAAI,QAAQ,YAAY,MACtB,QAAQ,MACN,2CAA2C,UAAU,SAAS,EAAE,QAAQ,iBAAiB,YAAY,KAAK,iBAC5G;EAGF,8CAA8B,IAAI,IAAI;EACtC,uCAAuB,IAAI,IAAI;EAC/B,gCAAgB,IAAI,IAAI;EAExB,KAAK,MAAM,CAAC,OAAO,UAAU,iBAAiB,aAAa;GACzD,MAAM,MAAMA,IAAS,aAAa,KAAK;GAEvC,MAAM,kBADc,SAAS,YAAY,GACP,CAAC,EAAE,QAAQ,KAAK,IAAI,SAAS;GAE/D,MAAM,aAAa,gBAAgB,IAAI,KAAK;GAC5C,IAAI,CAAC,YACH,MAAM,IAAI,MAAM,4CAA4C;GAI9D,MAAM,WAAW,MAAM,OAAO,IAAI,MAAM,WAAW,QAAQ,cAAc;GACzE,IAAI,CAAC,UACH,MAAM,IAAI,MAAM,0CAA0C,iBAAiB;GAG7E,MAAM,kBAAkB,MAAM,YAAY,CAAC,CAAC,qBAAqB;GACjE,IAAI,CAAC,iBACH,MAAM,IAAI,MAAM,wDAAwD;GAG1E,MAAM,SAAS,gCAAgC,UAAU,iBAAiB,KAAK,SAAS;GACxF,IAAI,cAAc,QAChB,MAAM,IAAI,MAAM,oCAAoC,OAAO,UAAU;GAGvE,4BAA4B,IAAI,YAAY,OAAO,cAAc;GACjE,qBAAqB,IAAI,OAAO,OAAO,cAAc;GACrD,cAAc,IAAI,OAAO,OAAO,YAAY;EAC9C;CACF;CAGA,IAAI,4BAA4B,OAAO,WAAW,YAChD,MAAM,IAAI,MACR,kBAAkB,4BAA4B,KAAK,mCAAmC,WAAW,YACnG;CAIF,MAAM,qBAAqB,2BACzB,iBAAiB,aACjB,eACF;CAIA,MAAM,eADiB,SAAS,aAAa,WAAW,QACtB,CAAC,CAAC,QAAQ,CAAC,CAAC,OAAO,CAAC,CAAC,KAAK;CAG5D,MAAM,mBAAmB,qBAAqB,cAAc,OAAO;CACnE,MAAM,eAAe,wBAAwB,iBAAiB,YAAY;CAG1E,MAAM,EAAE,WAAW,gBAAgB,4BACjC,oBACA,6BACA,kBACA,YACF;CAIA,IAAI,aAAa,OAAO,WAAW,YAAY,MAAM,MACnD,MAAM,IAAI,MAAM,gEAAgE;CASlF,MAAM,mBAJiB,SAAS,aAAa,WAAW,QAAQ,CAAC,CAAC,aAChE,UACA,SAEoC,CAAC,CAAC,SAAS;CAGjD,oBACE,cACA,SACA,WACA,WACA,sBACA,aACF;CAEA,IAAI,QAAQ,YAAY,MAAM;EAC5B,QAAQ,MAAM;EACd,QAAQ,MACN,oCAAoC,UAAU,SAAS,EAAE,gBAAgB,cAAc,KAAK,oBAC9F;EACA,QAAQ,MAAM,kDAAkD;CAClE;CAIA,IAAI,CADe,MAAM,YAAY,CAAC,CAAC,qBACzB,GACZ,MAAM,IAAI,MAAM,8CAA8C;CAGhE,IAAI,QAAQ,YAAY,MACtB,QAAQ,MAAM,oCAAoC,cAAc,KAAK,iBAAiB;MAGtF,QAAQ,MAAM;CAIhB,MAAM,WAA4C,CAAC;CACnD,IAAI,iBAAiB;CAErB,KAAK,MAAM,CAAC,OAAO,iBAAiB,eAAe;EACjD,MAAM,iBAAiBA,IAAS,aAAa,KAAK;EAClD,MAAM,cAAc,SAAS,YAAY,cAAc;EACvD,MAAM,kBAAkB,aAAa,QAAQ,KAAK;EAKlD,IAAI,EAFF,UAAU,MAAM,IAAI,CAAC,CAAC,SAAS,IAAI,MAAM,YAAY,IAAI,aAAa,YAAY,IAGlF,MAAM,IAAI,MAAM,eAAe,MAAM,uBAAuB;EAG9D,MAAM,QAAQ,mBAAmB,MAAM,YAAY,GAAG,WAAW,oBAAoB;EAErF,IAAI,QAAQ,oBAAoB,QAAQ,CAAC,gBAAgB;GAEvD,QAAQ,IAAI,8BAA8B,eAAe,SAAS,GAAG;GACrE,QAAQ,IAAI,MAAM,SAAS,CAAC,CAAC,OAAO,CAAC;GACrC,iBAAiB;EACnB;EAGA,MAAM,SAAS,MAAM,SAAS;EAE9B,SAAS,KAAK;GAAC;GAAgB;GAAc;GAAQ;EAAe,CAAC;CACvE;CAGA,IAAI,QAAQ,aAAa,MAAM;EAE7B,QAAQ,MAAM;EACd,MAAM,UAAU,MAAM,aAAa,QAAQ,UAAU,QAAQ,YAAY,IAAI;EAG7E,MAAM,SAAmB,CAAC;EAC1B,KAAK,MAAM,CAAC,KAAK,WAAW,SAC1B,IAAI,WAAW,MAAM;GAEnB,MAAM,OADc,SAAS,YAAY,GAClB,CAAC,EAAE,QAAQ,KAAK,IAAI,SAAS;GACpD,OAAO,KAAK,GAAG,KAAK,IAAI,OAAO,SAAS;EAC1C;EAEF,IAAI,OAAO,SAAS,GAClB,MAAM,IAAI,MAAM,qCAAqC,OAAO,KAAK,IAAI,GAAG;CAE5E,OAEE,KAAK,MAAM,CAAC,MAAM,cAAc,QAAQ,oBAAoB,UAC1D,MAAM,iBACJ,QACA,cACA,QACA,iBACA,QAAQ,WAAW,KACrB;CAKJ,QAAQ,IAAI,WAAW;CACvB,QAAQ,IAAI,gBAAgB;CAE5B,OAAO;EACL,WAAW;EACX,gBAAgB;EAChB,UAAU,4BAA4B;EACtC,UAAU;EACV,QAAQ;EACR,UAAU;CACZ;AACF"}
|
|
@@ -1,6 +1,6 @@
|
|
|
1
|
-
import { n as __require, t as __exportAll } from "./rolldown-runtime-
|
|
1
|
+
import { n as __require, t as __exportAll } from "./rolldown-runtime-BhDjJH2R.mjs";
|
|
2
2
|
import { PendingRequests, Registry, resolveRegistryPath } from "./registry/index.mjs";
|
|
3
|
-
import { c as parseAridUr, n as isVerbose, t as groupStateDir } from "./common-
|
|
3
|
+
import { c as parseAridUr, n as isVerbose, t as groupStateDir } from "./common-k2QC6AST.mjs";
|
|
4
4
|
import { n as putWithIndicator, t as getWithIndicator } from "./busy-BlU8_pS2.mjs";
|
|
5
5
|
import { f as parallelFetch, m as parallelSend, p as parallelFetchConfigWithTimeout } from "./parallel-PZiwHZT8.mjs";
|
|
6
6
|
import { ARID, XID } from "@bcts/components";
|
|
@@ -447,4 +447,4 @@ async function round2(client, options, cwd) {
|
|
|
447
447
|
//#endregion
|
|
448
448
|
export { round2 as a, validateAndExtractRound2Response as c, persistRound2Packages as i, collectRound2Parallel as n, round2_exports as o, dispatchFinalizeRequestsParallel as r, updatePendingForFinalizeFromCollection as s, buildFinalizeRequestForParticipant as t };
|
|
449
449
|
|
|
450
|
-
//# sourceMappingURL=round2-
|
|
450
|
+
//# sourceMappingURL=round2-C0SsEt1J.mjs.map
|