@keri-ts/wallet 0.0.0-stage → 2.0.0

package/types/src/storing.d.ts

@@ -0,0 +1,56 @@
+/** Application inventory records, separate from public KEL/TEL/exchange evidence. */
+import type { Operation } from "effection";
+import { Komer, LMDBer, type LMDBerOptions, Suber } from "keri-ts/db";
+import { RawRecord } from "keri-ts/runtime";
+/** Exact issued view and its accepted registry reference; no derivation secret. */
+export interface IssuedCredential {
+    credential: string;
+    registry: string;
+    controller: string;
+    update: string;
+    raw: string;
+    encoding: "base64";
+    /** Original bound Issuee ordinal (hex) and event digest, when supplied. */
+    bound: {
+        bn: string;
+        bd: string;
+    } | null;
+}
+/** Consent to one exact Grant/Admit pair; admitted is local time, not publication. */
+export interface AdmittedCredential {
+    credential: string;
+    grant: string;
+    admit: string;
+    holder: string;
+    admitted: string;
+}
+/** Komer hydration of issued application records. */
+export declare class IssuedRecord extends RawRecord<IssuedCredential> implements IssuedCredential {
+    credential: string;
+    registry: string;
+    controller: string;
+    update: string;
+    raw: string;
+    encoding: "base64";
+    bound: IssuedCredential["bound"];
+}
+/** Komer hydration of explicit consent records. */
+export declare class AdmittedRecord extends RawRecord<AdmittedCredential> implements AdmittedCredential {
+    credential: string;
+    grant: string;
+    admit: string;
+    holder: string;
+    admitted: string;
+}
+/** Own only wallet inventory; protocol acceptance remains in the borrowed processors. */
+export declare class WalletBaser extends LMDBer {
+    issued: Komer<IssuedRecord>;
+    admitted: Komer<AdmittedRecord>;
+    credentials: Suber;
+    constructor(options?: LMDBerOptions);
+    /** Rebind the application's ordinary typed tables on joined reopen. */
+    reopen(options?: Partial<LMDBerOptions>): Operation<boolean>;
+}
+/** Acquire a wallet environment; callers join close after all borrowed users finish. */
+export declare function createWalletBaser(options?: LMDBerOptions): Operation<WalletBaser>;
+//# sourceMappingURL=storing.d.ts.map

package/types/src/storing.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"storing.d.ts","sourceRoot":"","sources":["../../src/src/storing.ts"],"names":[],"mappings":"AAAA,qFAAqF;AACrF,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,WAAW,CAAC;AAC3C,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,KAAK,aAAa,EAAE,KAAK,EAAE,MAAM,YAAY,CAAC;AACtE,OAAO,EAAwB,SAAS,EAAE,MAAM,iBAAiB,CAAC;AAElE,mFAAmF;AACnF,MAAM,WAAW,gBAAgB;IAC/B,UAAU,EAAE,MAAM,CAAC;IACnB,QAAQ,EAAE,MAAM,CAAC;IACjB,UAAU,EAAE,MAAM,CAAC;IACnB,MAAM,EAAE,MAAM,CAAC;IACf,GAAG,EAAE,MAAM,CAAC;IACZ,QAAQ,EAAE,QAAQ,CAAC;IACnB,2EAA2E;IAC3E,KAAK,EAAE;QAAE,EAAE,EAAE,MAAM,CAAC;QAAC,EAAE,EAAE,MAAM,CAAA;KAAE,GAAG,IAAI,CAAC;CAC1C;AACD,sFAAsF;AACtF,MAAM,WAAW,kBAAkB;IACjC,UAAU,EAAE,MAAM,CAAC;IACnB,KAAK,EAAE,MAAM,CAAC;IACd,KAAK,EAAE,MAAM,CAAC;IACd,MAAM,EAAE,MAAM,CAAC;IACf,QAAQ,EAAE,MAAM,CAAC;CAClB;AACD,qDAAqD;AACrD,qBAAa,YAAa,SAAQ,SAAS,CAAC,gBAAgB,CAAE,YAAW,gBAAgB;IAC/E,UAAU,EAAE,MAAM,CAAC;IACnB,QAAQ,EAAE,MAAM,CAAC;IACjB,UAAU,EAAE,MAAM,CAAC;IACnB,MAAM,EAAE,MAAM,CAAC;IACf,GAAG,EAAE,MAAM,CAAC;IACZ,QAAQ,EAAE,QAAQ,CAAC;IACnB,KAAK,EAAE,gBAAgB,CAAC,OAAO,CAAC,CAAC;CAC1C;AACD,mDAAmD;AACnD,qBAAa,cAAe,SAAQ,SAAS,CAAC,kBAAkB,CAAE,YAAW,kBAAkB;IACrF,UAAU,EAAE,MAAM,CAAC;IACnB,KAAK,EAAE,MAAM,CAAC;IACd,KAAK,EAAE,MAAM,CAAC;IACd,MAAM,EAAE,MAAM,CAAC;IACf,QAAQ,EAAE,MAAM,CAAC;CAC1B;AACD,yFAAyF;AACzF,qBAAa,WAAY,SAAQ,MAAM;IACrC,MAAM,EAAG,KAAK,CAAC,YAAY,CAAC,CAAC;IAC7B,QAAQ,EAAG,KAAK,CAAC,cAAc,CAAC,CAAC;IACjC,WAAW,EAAG,KAAK,CAAC;gBAER,OAAO,GAAE,aAAkB;IAUvC,uEAAuE;IAC7D,MAAM,CAAC,OAAO,GAAE,OAAO,CAAC,aAAa,CAAM,GAAG,SAAS,CAAC,OAAO,CAAC;CAY3E;AACD,wFAAwF;AACxF,wBAAiB,iBAAiB,CAAC,OAAO,GAAE,aAAkB,GAAG,SAAS,CAAC,WAAW,CAAC,CAItF"}

package/types/src/wallet.d.ts

@@ -0,0 +1,77 @@
+/** Explicit ACDC inventory and consent over borrowed authenticated protocol evidence. */
+import { SerderACDC, type SerderKERI, type Versionage } from "cesr-ts";
+import { type Operation } from "effection";
+import { type RegistryStore } from "keri-ts/db";
+import { type Exchanger, type Habery, type Receiptor, type RegistryDisclosure, type WitnessAuthMap } from "keri-ts/runtime";
+import { type AdmittedCredential, type IssuedCredential, WalletBaser } from "./storing.js";
+/** Borrowed protocol owners and the application's separately owned inventory environment. */
+export interface WalletOptions {
+    hby: Habery;
+    registry: RegistryStore;
+    exc: Exchanger;
+    db: WalletBaser;
+}
+/** Exact admitted node streams; no fuller cached section replaces retained disclosure. */
+export interface HeldCredential {
+    credential: SerderACDC;
+    proof: Uint8Array;
+    artifacts: Uint8Array[];
+    grant: SerderKERI;
+    admit: string;
+}
+/** A signed response prepared after consent/current policy; intake and delivery remain caller-owned. */
+export interface PreparedAdmit {
+    admit: SerderKERI;
+    wire: Uint8Array;
+    support: Uint8Array;
+}
+/** Inventory owns consent, never protocol acceptance, current standing or custody. */
+export declare class Wallet {
+    readonly hby: Habery;
+    readonly registry: RegistryStore;
+    readonly exc: Exchanger;
+    readonly db: WalletBaser;
+    constructor({ hby, registry, exc, db }: WalletOptions);
+    /** Verify accepted local issuance, or return identical retained history without fresh proof. */
+    recordIssued(acdc: SerderACDC, update: string, { blinder }?: {
+        blinder?: RegistryDisclosure;
+    }): IssuedCredential;
+    /** Reconstruct the original serialization without asserting present registry standing. */
+    issuedCredential(said: string): SerderACDC;
+    /** Authenticate accepted outer evidence through existing replay, without current node policy. */
+    private accepted;
+    /** New use requires current node evidence and a valid root under shared issued-state policy. */
+    private graphAccepted;
+    /** Resolve only the origin actually carried by this accepted Grant. */
+    private origin;
+    /** Freeze an unsigned response only after explicit consent, exact prior authentication and current root truth. */
+    prepareAdmitBody(grant: string, holder: string, { consent, message, gvrsn }?: {
+        consent?: boolean;
+        message?: string;
+        gvrsn?: Versionage;
+    }): Operation<SerderKERI>;
+    /** Sign an individual response; group approval consumes the same unsigned body through its own exact-stream owner. */
+    prepareAdmit(grant: string, holder: string, { consent, message, gvrsn, receiptor, auths }?: {
+        consent?: boolean;
+        message?: string;
+        gvrsn?: Versionage;
+        receiptor?: Receiptor;
+        auths?: WitnessAuthMap;
+    }): Operation<PreparedAdmit>;
+    /** Record explicit local consent to one accepted, linked Grant/Admit pair. */
+    recordAdmission(grant: string, admit: string, { consent }?: {
+        consent?: boolean;
+    }): Promise<AdmittedCredential>;
+    /** Read the original admitted proof; later disclosures and current policy cannot expand it. */
+    heldCredential(grant: string, { presenterAuthorized }?: {
+        presenterAuthorized?: boolean;
+    }): Promise<HeldCredential>;
+    /** List historical references, with no current-standing or private-capability claim. */
+    inventory(): {
+        issued: IssuedCredential[];
+        held: AdmittedCredential[];
+    };
+    /** List distinct explicit disclosure admissions for the same credential. */
+    admissions(credential: string): AdmittedCredential[];
+}
+//# sourceMappingURL=wallet.d.ts.map

package/types/src/wallet.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"wallet.d.ts","sourceRoot":"","sources":["../../src/src/wallet.ts"],"names":[],"mappings":"AAAA,yFAAyF;AACzF,OAAO,EAIL,UAAU,EACV,KAAK,UAAU,EACf,KAAK,UAAU,EAEhB,MAAM,SAAS,CAAC;AACjB,OAAO,EAAQ,KAAK,SAAS,EAAE,MAAM,WAAW,CAAC;AACjD,OAAO,EAAa,KAAK,aAAa,EAAE,MAAM,YAAY,CAAC;AAC3D,OAAO,EAML,KAAK,SAAS,EACd,KAAK,MAAM,EAIX,KAAK,SAAS,EACd,KAAK,kBAAkB,EAIvB,KAAK,cAAc,EACpB,MAAM,iBAAiB,CAAC;AAGzB,OAAO,EAAE,KAAK,kBAAkB,EAAE,KAAK,gBAAgB,EAAE,WAAW,EAAE,MAAM,cAAc,CAAC;AAE3F,6FAA6F;AAC7F,MAAM,WAAW,aAAa;IAC5B,GAAG,EAAE,MAAM,CAAC;IACZ,QAAQ,EAAE,aAAa,CAAC;IACxB,GAAG,EAAE,SAAS,CAAC;IACf,EAAE,EAAE,WAAW,CAAC;CACjB;AACD,0FAA0F;AAC1F,MAAM,WAAW,cAAc;IAC7B,UAAU,EAAE,UAAU,CAAC;IACvB,KAAK,EAAE,UAAU,CAAC;IAClB,SAAS,EAAE,UAAU,EAAE,CAAC;IACxB,KAAK,EAAE,UAAU,CAAC;IAClB,KAAK,EAAE,MAAM,CAAC;CACf;AACD,wGAAwG;AACxG,MAAM,WAAW,aAAa;IAC5B,KAAK,EAAE,UAAU,CAAC;IAClB,IAAI,EAAE,UAAU,CAAC;IACjB,OAAO,EAAE,UAAU,CAAC;CACrB;AAMD,sFAAsF;AACtF,qBAAa,MAAM;IACjB,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;IACrB,QAAQ,CAAC,QAAQ,EAAE,aAAa,CAAC;IACjC,QAAQ,CAAC,GAAG,EAAE,SAAS,CAAC;IACxB,QAAQ,CAAC,EAAE,EAAE,WAAW,CAAC;gBAEb,EAAE,GAAG,EAAE,QAAQ,EAAE,GAAG,EAAE,EAAE,EAAE,EAAE,aAAa;IAQrD,gGAAgG;IAChG,YAAY,CAAC,IAAI,EAAE,UAAU,EAAE,MAAM,EAAE,MAAM,EAAE,EAAE,OAAO,EAAE,GAAE;QAAE,OAAO,CAAC,EAAE,kBAAkB,CAAA;KAAO,GAAG,gBAAgB;IA8CpH,0FAA0F;IAC1F,gBAAgB,CAAC,IAAI,EAAE,MAAM,GAAG,UAAU;IAW1C,iGAAiG;YACnF,QAAQ;IAStB,gGAAgG;IAChG,OAAO,CAAC,aAAa;IAYrB,uEAAuE;IACvE,OAAO,CAAC,MAAM;IAed,kHAAkH;IACjH,gBAAgB,CACf,KAAK,EAAE,MAAM,EACb,MAAM,EAAE,MAAM,EACd,EAAE,OAAe,EAAE,OAAY,EAAE,KAAgB,EAAE,GAAE;QACnD,OAAO,CAAC,EAAE,OAAO,CAAC;QAClB,OAAO,CAAC,EAAE,MAAM,CAAC;QACjB,KAAK,CAAC,EAAE,UAAU,CAAC;KACf,GACL,SAAS,CAAC,UAAU,CAAC;IAexB,sHAAsH;IACrH,YAAY,CACX,KAAK,EAAE,MAAM,EACb,MAAM,EAAE,MAAM,EACd,EAAE,OAAe,EAAE,OAAY,EAAE,KAAgB,EAAE,SAAS,EAAE,KAAK,EAAE,GAAE;QACrE,OAAO,CAAC,EAAE,OAAO,CAAC;QAClB,OAAO,CAAC,EAAE,MAAM,CAAC;QACjB,KAAK,CAAC,EAAE,UAAU,CAAC;QACnB,SAAS,CAAC,EAAE,SAAS,CAAC;QACtB,KAAK,CAAC,EAAE,cAAc,CAAC;KACnB,GACL,SAAS,CAAC,aAAa,CAAC;IAsB3B,8EAA8E;IACxE,eAAe,CACnB,KAAK,EAAE,MAAM,EACb,KAAK,EAAE,MAAM,EACb,EAAE,OAAe,EAAE,GAAE;QAAE,OAAO,CAAC,EAAE,OAAO,CAAA;KAAO,GAC9C,OAAO,CAAC,kBAAkB,CAAC;IA6B9B,+FAA+F;IACzF,cAAc,CAClB,KAAK,EAAE,MAAM,EACb,EAAE,mBAA2B,EAAE,GAAE;QAAE,mBAAmB,CAAC,EAAE,OAAO,CAAA;KAAO,GACtE,OAAO,CAAC,cAAc,CAAC;IA8B1B,wFAAwF;IACxF,SAAS,IAAI;QAAE,MAAM,EAAE,gBAAgB,EAAE,CAAC;QAAC,IAAI,EAAE,kBAAkB,EAAE,CAAA;KAAE;IAOvE,4EAA4E;IAC5E,UAAU,CAAC,UAAU,EAAE,MAAM,GAAG,kBAAkB,EAAE;CAGrD"}