keri-ts 0.11.0 → 2.0.0

package/types/app/{habbing.d.ts → identity/habbing.d.ts}

@@ -12,28 +12,24 @@
  * - local bootstrap replies and events still flow through the same accepted
  *   state machinery instead of being written directly to persistent state
  */
-import { Cigar, type ResourcePolicy, SerderKERI, Siger, type ThresholdSith, type Tier, Verfer, type Versionage } from "cesr-ts";
+import { Cigar, SerderKERI, Siger, type ThresholdSith, type Tier, Verfer, type Versionage } from "cesr-ts";
 import { type Operation } from "effection";
-import type { AgentCue, CueEmission } from "../core/cues.js";
-import { Deck } from "../core/deck.js";
-import { Kevery } from "../core/eventing.js";
-import { Kever } from "../core/kever.js";
-import { type Role } from "../core/roles.js";
-import { BasicReplyRouteHandler, Revery, Router } from "../core/routing.js";
-import { type Scheme } from "../core/schemes.js";
-import { Baser } from "../db/basing.js";
-import { Keeper } from "../db/keeping.js";
-import { type OutboxerLike } from "../db/outboxing.js";
-import { type CesrBodyMode } from "./cesr-http.js";
+import type { AgentCue, QueryInstruction } from "../../core/cues.js";
+import { Deck } from "../../core/deck.js";
+import { Kevery } from "../../core/kel/eventing.js";
+import { Kever } from "../../core/kel/kever.js";
+import type { MbxTopicCursor } from "../../core/mailbox/mailbox-topics.js";
+import { type Role } from "../../core/roles.js";
+import { BasicReplyRouteHandler, Revery, Router } from "../../core/routing.js";
+import { type Scheme } from "../../core/schemes.js";
+import { Baser } from "../../db/basing.js";
+import { Keeper } from "../../db/keeping.js";
 import { Configer } from "./configing.js";
 import { Algos, Manager } from "./keeping.js";
-import { type OobiReplyLimits } from "./oobi-replies.js";
 /** Reserved alias for the local signatory habitat record. */
 export declare const SIGNER = "__signatory__";
 /** Arguments for constructing and reopening a `Habery`. */
 export interface HaberyArgs {
-    /** Install the deployment policy before Baser reopen and local construction. */
-    resources?: ResourcePolicy;
     name: string;
     base?: string;
     temp?: boolean;
@@ -49,8 +45,6 @@ export interface HaberyArgs {
     salt?: string;
     algo?: Algos;
     tier?: Tier;
-    outboxer?: "disabled" | "open" | "create";
-    cesrBodyMode?: CesrBodyMode;
 }
 /** Habitat inception options consumed by the local bootstrap `Hab.make()` flow. */
 export interface MakeHabArgs {
@@ -72,9 +66,13 @@ export interface MakeHabArgs {
     algo?: Algos;
     salt?: string;
     tier?: Tier;
+    /** KERI version of the new KEL and its proof framing; defaults to 2.0. */
+    version?: Versionage;
 }
 /** Group habitat inception options for local member-collected group creation. */
 export interface MakeGroupHabArgs {
+    /** KERI version of the new group KEL and its proof framing; defaults to 2.0. */
+    version?: Versionage;
     isith?: ThresholdSith;
     nsith?: ThresholdSith;
     toad?: number;
@@ -112,7 +110,7 @@ export interface GroupHabInteraction {
  * storage: controller indexed signatures, witness indexed signatures,
  * authorizing seals, and receipts in KERIpy `cloneEvtMsg` order.
  */
-export declare function eventReplayMessage(hby: Habery, serder: SerderKERI): Uint8Array;
+export declare function eventReplayMessage(hby: Habery, serder: SerderKERI, gvrsn?: Versionage): Uint8Array;
 /**
  * Return a stored KEL event payload with KERIpy `cloneEvtMsg` attachment order.
  *
@@ -122,7 +120,7 @@ export declare function eventReplayMessage(hby: Habery, serder: SerderKERI): Uin
  */
 export declare function eventPayloadMessage(hby: Habery, serder: SerderKERI): Uint8Array;
 /** Return the exact accepted event replay message at `(pre, sn)`. */
-export declare function acceptedEventReplayMessage(hby: Habery, pre: string, sn: number): {
+export declare function acceptedEventReplayMessage(hby: Habery, pre: string, sn: number, gvrsn?: Versionage): {
     serder: SerderKERI;
     message: Uint8Array;
 };
@@ -154,6 +152,14 @@ export declare class Hab {
     get accepted(): boolean;
     /** Return the live accepted-state `Kever` for this habitat when available. */
     get kever(): Kever | null;
+    /**
+     * KERI version of this habitat's accepted KEL.
+     *
+     * Replies and queries this habitat authors use the same version, so a stream
+     * that carries the KEL followed by its endpoint replies never mixes protocol
+     * or attachment genera.
+     */
+    get kelVersion(): Versionage;
     /**
      * Accept one locally generated event through the same `Kevery`/`Kever` path
      * used by remote processing.
@@ -180,7 +186,8 @@ export declare class Hab {
      */
     reconfigure(): boolean;
     /**
-     * Incept this habitat through the shared accepted-state path.
+     * Incept this habitat through the shared accepted-state path, as KERI v2
+     * unless `version` selects KERI v1 for v1-only peers.
      *
      * KERIpy correspondence:
      * - mirrors the pattern where local inception is signed in the habitat layer
@@ -204,6 +211,8 @@ export declare class Hab {
         cuts?: string[];
         adds?: string[];
         data?: unknown[];
+        /** Must match the accepted KEL version when given. */
+        version?: Versionage;
     }): Uint8Array;
     /**
      * Create and locally accept one interaction event for this habitat.
@@ -219,7 +228,18 @@ export declare class Hab {
      */
     interact(args?: {
         data?: unknown[];
+        /** Must match the accepted KEL version when given. */
+        version?: Versionage;
     }): Uint8Array;
+    /**
+     * Decrypt `ser` (sealed-box ciphertext, qb64 or raw) with the private keys of
+     * `verfers`, defaulting to this habitat's current accepted keys.
+     *
+     * KERIpy correspondence: `BaseHab.decrypt` delegating to `Manager.decrypt`.
+     * As there, every selected key opens the ciphertext in turn, so a
+     * multi-key habitat passes the single verfer the ciphertext was sealed to.
+     */
+    decrypt(ser: string | Uint8Array, verfers?: Verfer[]): Uint8Array;
     /**
      * Sign with accepted current keys. Group habitats use only their designated
      * member's latest single-key contribution, located in its accepted KEL.
@@ -260,7 +280,12 @@ export declare class Hab {
      * local contribution may be only a partial signature; the receiver must still
      * enforce the group's current threshold. This is not a member-query fallback.
      */
-    query(pre: string, src: string, query?: Record<string, unknown>, route?: string, stamp?: string): Uint8Array;
+    query(pre: string, src: string, instruction: QueryInstruction | {
+        route: "mbx";
+        q: {
+            topics: MbxTopicCursor;
+        };
+    }, stamp?: string): Uint8Array;
     /**
      * Create and locally accept one controller receipt for `serder`.
      *
@@ -307,7 +332,12 @@ export declare class Hab {
      *
      * Witnesses are derived from current key state as well as stored location
      * replies because witness membership is partly a KEL concern, not just an
-     * endpoint-authorization concern.
+     * endpoint-authorization concern. Empty location maps retain endpoint identity
+     * so routing can report missing locations rather than select a lower role.
+     * Unlike KERIpy 71438328, stored roles without allowed or enabled approval are excluded.
+     *
+     * @param pre Controller AID whose accepted roles and current witnesses are projected.
+     * @returns Role to endpoint AID to scheme/URL map, including empty location maps.
      */
     endsFor(pre: string): Record<string, Record<string, Record<string, string>>>;
     /**
@@ -333,41 +363,26 @@ export declare class Hab {
      */
     replyLocScheme(eid: string, scheme?: string): Uint8Array;
     /** Borrow this Hab/store through lazy role output; metadata capture starts only on iterator acquisition. */
-    replyEndRoleMessages(cid: string, role?: Role | string, eids?: readonly string[], scheme?: string, limits?: OobiReplyLimits): Iterable<Uint8Array>;
-    /** Finite role output admits each message before retaining it; large callers use the lazy source. */
+    replyEndRoleMessages(cid: string, role?: Role | string, eids?: readonly string[], scheme?: string): Iterable<Uint8Array>;
+    /** Collect finite role output; large callers use the lazy source. */
     replyEndRole(cid: string, role?: Role | string, eids?: string[], scheme?: string): Uint8Array;
     /** Lazy OOBI output preserves the top-level delegated readiness guard under the consuming owner. */
-    replyToOobiMessages(aid: string, role?: Role | string, eids?: readonly string[], limits?: OobiReplyLimits): Iterable<Uint8Array>;
+    replyToOobiMessages(aid: string, role?: Role | string, eids?: readonly string[]): Iterable<Uint8Array>;
     /** Collect explicitly finite OOBI output; incomplete delegated state still returns empty bytes. */
     replyToOobi(aid: string, role?: Role | string, eids?: string[]): Uint8Array;
     /**
-     * Resolve the witness list that governs receipts for one event.
+     * Yield signed wire messages for one finite cue pass, like KERIpy's BaseHab.
      *
-     * Preference order:
-     * - the durable event-level `wits.` projection when present
-     * - the event body's own backer list for inception events
-     * - the current accepted kever witness list as a last resort
-     */
-    private receiptedWitnesses;
-    /**
-     * Process KERI-style cues and yield structured runtime cue emissions.
-     *
-     * KERIpy correspondence:
-     * - this is the `keri-ts` equivalent of `BaseHab.processCuesIter()`
+     * A Deck is consumed through its initial extent. Other iterables are copied to
+     * a local Deck, so callers can borrow an array while retaining their source.
+     * Query, stream, and notification ownership stays with the caller; only
+     * complete query instructions produce wire output here.
      *
-     * `keri-ts` difference:
-     * - the cue identity is preserved in the yielded `CueEmission` instead of
-     *   collapsing everything immediately to raw bytes
-     *
-     * Current support:
-     * - `receipt`, `witness`, `replay`, `reply`, and complete `query` cues emit
-     *   wire messages
-     * - `stream` emits transport requests without flattening them into bytes
-     * - observer/runtime cues remain visible as notify emissions
+     * @param cues Deck to consume through its initial extent, or borrowed iterable copied into a local Deck.
+     * @returns A synchronous generator of signed wire messages, not delivery outcomes.
+     * @throws Signing/replay construction failures propagate; a supplied Deck head is already pulled when construction begins.
      */
-    processCuesIter(cues: Deck<AgentCue> | Iterable<AgentCue>): Generator<CueEmission>;
-    /** Interpret one borrowed cue synchronously; callers own queue removal and retained output. */
-    interpretCue(cue: AgentCue): CueEmission | undefined;
+    processCuesIter(cues: Deck<AgentCue> | Iterable<AgentCue>): Generator<Uint8Array>;
 }
 /**
  * Internal signatory habitat wrapper used for habery-scoped signatures.
@@ -447,8 +462,6 @@ export declare class Habery {
     readonly readonly: boolean;
     readonly db: Baser;
     readonly ks: Keeper;
-    readonly obx: OutboxerLike;
-    readonly cesrBodyMode: CesrBodyMode;
     readonly mgr: Manager;
     readonly cf?: Configer;
     readonly habs: Map<string, Hab>;
@@ -458,7 +471,7 @@ export declare class Habery {
     readonly replyRoutes: BasicReplyRouteHandler;
     readonly signator: Signator | null;
     /** Compose one habery from already-opened storage, manager, and config surfaces. */
-    constructor(name: string, base: string, temp: boolean, headDirPath: string | undefined, compat: boolean, readonly: boolean, db: Baser, ks: Keeper, obx: OutboxerLike, cesrBodyMode: CesrBodyMode, mgr: Manager, cf?: Configer, skipSignator?: boolean);
+    constructor(name: string, base: string, temp: boolean, headDirPath: string | undefined, compat: boolean, readonly: boolean, db: Baser, ks: Keeper, mgr: Manager, cf?: Configer, skipSignator?: boolean);
     /** Live config snapshot from the optional config file surface. */
     get config(): Record<string, unknown>;
     /**
@@ -468,6 +481,21 @@ export declare class Habery {
      * so `Habery.habs` only contains reopenable local habitats.
      */
     private loadHabs;
+    /**
+     * Commit the members of a local group's latest accepted establishment event
+     * when the stored record is stale (KERIpy `GroupHab.recoverAcceptedMembers`).
+     *
+     * A process that stopped after a rotation was accepted but before its live
+     * `commitAcceptedGroupMembers` leaves `smids`/`rmids` stale. Members are
+     * derived from local KELs, trying the stored members first and every AID
+     * with local key state only when they do not account for every key. They
+     * are committed only when they differ from the stored record and the local
+     * member contributes to that event; a record that does not yet include the
+     * local member is a pending join, not a stale commit. Only the latest
+     * accepted event is committed, so this never rolls members back, and
+     * repeating it changes nothing. Returns whether stale members were committed.
+     */
+    recoverAcceptedGroupMembers(pre: string): boolean;
     /** Local AID prefixes currently managed by this habery. */
     get prefixes(): string[];
     /**
@@ -505,7 +533,7 @@ export declare class Habery {
      * - it does not fabricate key state; accepted KEL state must still arrive
      *   through `Kevery.processEvent()`
      */
-    joinGroupHab(pre: string, group: string, mhab: Hab, smids: string[], rmids?: string[], ns?: string): Hab;
+    joinGroupHab(pre: string, group: string, mhab: Hab, smids: readonly string[], rmids?: readonly string[], ns?: string): Hab;
     /** Commit accepted group member metadata after the corresponding group event is accepted. */
     commitGroupHabMembers(pre: string, smids: readonly string[], rmids?: readonly string[]): void;
     /**
@@ -516,6 +544,8 @@ export declare class Habery {
      * - member AIDs should already be in the key state intended for the new
      *   group key list, matching KLI's operator workflow of rotating members
      *   before rotating the group
+     * Body and returned proof framing follow the group's accepted KEL version;
+     * a conflicting explicit `version` is refused.
      */
     rotateGroupHab(group: string, smids?: string[], rmids?: string[], args?: {
         isith?: ThresholdSith;
@@ -524,10 +554,12 @@ export declare class Habery {
         cuts?: string[];
         adds?: string[];
         data?: unknown[];
+        version?: Versionage;
     }): GroupHabRotation;
-    /** Create a locally signed group interaction event. */
+    /** Create a locally signed group interaction in the group's accepted KEL version; conflicts are refused. */
     interactGroupHab(group: string, smids?: string[], args?: {
         data?: unknown[];
+        version?: Versionage;
     }): GroupHabInteraction;
     /** Extract the single current verifier from each group signing member. */
     private extractGroupMemberKeys;

package/types/app/identity/habbing.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"habbing.d.ts","sourceRoot":"","sources":["../../../src/app/identity/habbing.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AACH,OAAO,EACL,KAAK,EASL,UAAU,EACV,KAAK,EACL,KAAK,aAAa,EAClB,KAAK,IAAI,EAET,MAAM,EACN,KAAK,UAAU,EAGhB,MAAM,SAAS,CAAC;AACjB,OAAO,EAAE,KAAK,SAAS,EAAE,MAAM,WAAW,CAAC;AAC3C,OAAO,KAAK,EAAE,QAAQ,EAAE,gBAAgB,EAAE,MAAM,oBAAoB,CAAC;AACrE,OAAO,EAAE,IAAI,EAAE,MAAM,oBAAoB,CAAC;AAG1C,OAAO,EAAE,MAAM,EAAE,MAAM,4BAA4B,CAAC;AACpD,OAAO,EAAE,KAAK,EAAE,MAAM,yBAAyB,CAAC;AAChD,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,sCAAsC,CAAC;AAW3E,OAAO,EAAE,KAAK,IAAI,EAAS,MAAM,qBAAqB,CAAC;AACvD,OAAO,EAAE,sBAAsB,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,uBAAuB,CAAC;AAC/E,OAAO,EAAE,KAAK,MAAM,EAAW,MAAM,uBAAuB,CAAC;AAC7D,OAAO,EAAE,KAAK,EAAe,MAAM,oBAAoB,CAAC;AAExD,OAAO,EAAgB,MAAM,EAAU,MAAM,qBAAqB,CAAC;AAKnE,OAAO,EAAE,QAAQ,EAAkB,MAAM,gBAAgB,CAAC;AAC1D,OAAO,EACL,KAAK,EAIL,OAAO,EAGR,MAAM,cAAc,CAAC;AAEtB,6DAA6D;AAC7D,eAAO,MAAM,MAAM,kBAAkB,CAAC;AAEtC,2DAA2D;AAC3D,MAAM,WAAW,UAAU;IACzB,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,IAAI,CAAC,EAAE,OAAO,CAAC;IACf,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,MAAM,CAAC,EAAE,OAAO,CAAC;IACjB,QAAQ,CAAC,EAAE,OAAO,CAAC;IACnB,EAAE,CAAC,EAAE,QAAQ,CAAC;IACd,UAAU,CAAC,EAAE,OAAO,CAAC;IACrB,YAAY,CAAC,EAAE,OAAO,CAAC;IACvB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,IAAI,CAAC,EAAE,KAAK,CAAC;IACb,IAAI,CAAC,EAAE,IAAI,CAAC;CACb;AAED,mFAAmF;AACnF,MAAM,WAAW,WAAW;IAC1B,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,YAAY,CAAC,EAAE,OAAO,CAAC;IACvB,KAAK,CAAC,EAAE,aAAa,CAAC;IACtB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,KAAK,CAAC,EAAE,aAAa,CAAC;IACtB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,IAAI,CAAC,EAAE,MAAM,EAAE,CAAC;IAChB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB,GAAG,CAAC,EAAE,OAAO,CAAC;IACd,MAAM,CAAC,EAAE,OAAO,CAAC;IACjB,IAAI,CAAC,EAAE,OAAO,EAAE,CAAC;IACjB,IAAI,CAAC,EAAE,KAAK,CAAC;IACb,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,IAAI,CAAC,EAAE,IAAI,CAAC;IACZ,0EAA0E;IAC1E,OAAO,CAAC,EAAE,UAAU,CAAC;CACtB;AAED,iFAAiF;AACjF,MAAM,WAAW,gBAAgB;IAC/B,gFAAgF;IAChF,OAAO,CAAC,EAAE,UAAU,CAAC;IACrB,KAAK,CAAC,EAAE,aAAa,CAAC;IACtB,KAAK,CAAC,EAAE,aAAa,CAAC;IACtB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,IAAI,CAAC,EAAE,MAAM,EAAE,CAAC;IAChB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,IAAI,CAAC,EAAE,OAAO,EAAE,CAAC;IACjB,MAAM,CAAC,EAAE,OAAO,CAAC;CAClB;AAED,0DAA0D;AAC1D,MAAM,WAAW,gBAAgB;IAC/B,GAAG,EAAE,GAAG,CAAC;IACT,MAAM,EAAE,UAAU,CAAC;IACnB,MAAM,EAAE,KAAK,EAAE,CAAC;IAChB,6GAA6G;IAC7G,OAAO,EAAE,UAAU,CAAC;CACrB;AAED,6DAA6D;AAC7D,MAAM,WAAW,gBAAgB;IAC/B,GAAG,EAAE,GAAG,CAAC;IACT,MAAM,EAAE,UAAU,CAAC;IACnB,MAAM,EAAE,KAAK,EAAE,CAAC;IAChB,OAAO,EAAE,UAAU,CAAC;CACrB;AAED,qEAAqE;AACrE,MAAM,WAAW,mBAAmB;IAClC,GAAG,EAAE,GAAG,CAAC;IACT,MAAM,EAAE,UAAU,CAAC;IACnB,MAAM,EAAE,KAAK,EAAE,CAAC;IAChB,OAAO,EAAE,UAAU,CAAC;CACrB;AAyHD;;;;;;GAMG;AACH,wBAAgB,kBAAkB,CAChC,GAAG,EAAE,MAAM,EACX,MAAM,EAAE,UAAU,EAClB,KAAK,GAAE,UAAqB,GAC3B,UAAU,CAeZ;AAED;;;;;;GAMG;AACH,wBAAgB,mBAAmB,CACjC,GAAG,EAAE,MAAM,EACX,MAAM,EAAE,UAAU,GACjB,UAAU,CAiBZ;AAED,qEAAqE;AACrE,wBAAgB,0BAA0B,CACxC,GAAG,EAAE,MAAM,EACX,GAAG,EAAE,MAAM,EACX,EAAE,EAAE,MAAM,EACV,KAAK,GAAE,UAAqB,GAC3B;IAAE,MAAM,EAAE,UAAU,CAAC;IAAC,OAAO,EAAE,UAAU,CAAA;CAAE,CAc7C;AAED;;;;;;;GAOG;AAEH,uEAAuE;AACvE,qBAAa,GAAG;IACd,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,EAAE,CAAC,EAAE,MAAM,CAAC;IACrB,QAAQ,CAAC,EAAE,EAAE,KAAK,CAAC;IACnB,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,GAAG,EAAE,OAAO,CAAC;IACtB,QAAQ,CAAC,EAAE,CAAC,EAAE,QAAQ,CAAC;IACvB,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;IACrB,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;IACrB,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;IACrB,GAAG,SAAM;IAET,+EAA+E;gBAE7E,IAAI,EAAE,MAAM,EACZ,EAAE,EAAE,KAAK,EACT,EAAE,EAAE,MAAM,EACV,GAAG,EAAE,OAAO,EACZ,EAAE,EAAE,QAAQ,GAAG,SAAS,EACxB,GAAG,EAAE,MAAM,EACX,GAAG,EAAE,MAAM,EACX,GAAG,EAAE,MAAM,EACX,EAAE,CAAC,EAAE,MAAM,EACX,GAAG,SAAK;IAcV,iEAAiE;IACjE,IAAI,MAAM,IAAI,MAAM,CAEnB;IAED,kEAAkE;IAClE,IAAI,QAAQ,IAAI,OAAO,CAEtB;IAED,8EAA8E;IAC9E,IAAI,KAAK,IAAI,KAAK,GAAG,IAAI,CAExB;IAED;;;;;;OAMG;IACH,IAAI,UAAU,IAAI,UAAU,CAI3B;IAED;;;;;;;OAOG;IACH,OAAO,CAAC,aAAa;IA0BrB,4FAA4F;IAC5F,OAAO,CAAC,WAAW;IAenB,mGAAmG;IACnG,OAAO,CAAC,iBAAiB;IAQzB,4EAA4E;IAC5E,iBAAiB,IAAI,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI;IAQnD,8EAA8E;IAC9E,gBAAgB,IAAI,OAAO;IAI3B;;;;;;OAMG;IACH,WAAW,IAAI,OAAO;IAkBtB;;;;;;;;OAQG;IACH,IAAI,CAAC,IAAI,GAAE,WAAgB,GAAG,IAAI;IAmGlC;;;;;;;OAOG;IACH,MAAM,CAAC,IAAI,GAAE;QACX,KAAK,CAAC,EAAE,aAAa,CAAC;QACtB,KAAK,CAAC,EAAE,aAAa,CAAC;QACtB,MAAM,CAAC,EAAE,MAAM,CAAC;QAChB,IAAI,CAAC,EAAE,MAAM,CAAC;QACd,IAAI,CAAC,EAAE,MAAM,EAAE,CAAC;QAChB,IAAI,CAAC,EAAE,MAAM,EAAE,CAAC;QAChB,IAAI,CAAC,EAAE,OAAO,EAAE,CAAC;QACjB,sDAAsD;QACtD,OAAO,CAAC,EAAE,UAAU,CAAC;KACjB,GAAG,UAAU;IAmFnB;;;;;;;;;;;OAWG;IACH,QAAQ,CACN,IAAI,GAAE;QACJ,IAAI,CAAC,EAAE,OAAO,EAAE,CAAC;QACjB,sDAAsD;QACtD,OAAO,CAAC,EAAE,UAAU,CAAC;KACjB,GACL,UAAU;IAsBb;;;;;;;OAOG;IACH,OAAO,CAAC,GAAG,EAAE,MAAM,GAAG,UAAU,EAAE,OAAO,CAAC,EAAE,MAAM,EAAE,GAAG,UAAU;IAQjE;;;;;OAKG;IACH,IAAI,CAAC,GAAG,EAAE,UAAU,EAAE,OAAO,EAAE,IAAI,GAAG,KAAK,EAAE;IAC7C,IAAI,CAAC,GAAG,EAAE,UAAU,EAAE,OAAO,CAAC,EAAE,KAAK,GAAG,KAAK,EAAE;IAuC/C;;;;;;;;;OASG;IACH,OAAO,CACL,MAAM,EAAE,UAAU,EAClB,OAAO,GAAE;QACP,SAAS,CAAC,EAAE,OAAO,CAAC;QACpB,KAAK,CAAC,EAAE,UAAU,CAAC;QACnB,MAAM,CAAC,EAAE,OAAO,CAAC;QACjB,QAAQ,CAAC,EAAE,OAAO,CAAC;KACf,GACL,UAAU;IA2Cb;;;;;;OAMG;IACH,KAAK,CACH,KAAK,EAAE,MAAM,EACb,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAC7B,KAAK,SAAmB,GACvB,UAAU;IAOb;;;;;;;OAOG;IACH,KAAK,CACH,GAAG,EAAE,MAAM,EACX,GAAG,EAAE,MAAM,EACX,WAAW,EAAE,gBAAgB,GAAG;QAAE,KAAK,EAAE,KAAK,CAAC;QAAC,CAAC,EAAE;YAAE,MAAM,EAAE,cAAc,CAAA;SAAE,CAAA;KAAE,EAC/E,KAAK,SAAmB,GACvB,UAAU;IAcb;;;;;;;;OAQG;IACH,OAAO,CAAC,MAAM,EAAE,UAAU,GAAG,UAAU;IA0DvC;;;;;OAKG;IACH,OAAO,CAAC,MAAM,EAAE,UAAU,GAAG,UAAU;IA2CvC;;;;;OAKG;IACH,WAAW,CACT,GAAG,EAAE,MAAM,EACX,IAAI,GAAE,IAAI,GAAG,MAAyB,EACtC,KAAK,UAAO,EACZ,KAAK,SAAmB,GACvB,UAAU;IAQb;;;;;OAKG;IACH,aAAa,CACX,GAAG,EAAE,MAAM,EACX,GAAG,SAAW,EACd,MAAM,GAAE,MAAM,GAAG,MAAqB,EACtC,KAAK,SAAmB,GACvB,UAAU;IAIb;;;;;OAKG;IACH,SAAS,CAAC,GAAG,EAAE,MAAM,EAAE,MAAM,SAAK,GAAG,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC;IAiB3D;;;;;;;;;;;;;;OAcG;IACH,OAAO,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC;IA+B5E;;;;;OAKG;IACH,WAAW,CACT,GAAG,EAAE,MAAM,EACX,GAAG,EAAE,MAAM,EACX,IAAI,GAAE,IAAI,GAAG,MAAyB,GACrC,UAAU;IASb;;;;;OAKG;IACH,aAAa,CAAC,GAAG,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,MAAM,GAAG,UAAU;IAWvD;;;;;;OAMG;IACH,cAAc,CAAC,GAAG,EAAE,MAAM,EAAE,MAAM,SAAK,GAAG,UAAU;IAUpD,4GAA4G;IAC5G,oBAAoB,CAClB,GAAG,EAAE,MAAM,EACX,IAAI,CAAC,EAAE,IAAI,GAAG,MAAM,EACpB,IAAI,GAAE,SAAS,MAAM,EAAO,EAC5B,MAAM,SAAK,GACV,QAAQ,CAAC,UAAU,CAAC;IAIvB,qEAAqE;IACrE,YAAY,CAAC,GAAG,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,IAAI,GAAG,MAAM,EAAE,IAAI,GAAE,MAAM,EAAO,EAAE,MAAM,SAAK,GAAG,UAAU;IAI7F,oGAAoG;IACpG,mBAAmB,CACjB,GAAG,EAAE,MAAM,EACX,IAAI,CAAC,EAAE,IAAI,GAAG,MAAM,EACpB,IAAI,GAAE,SAAS,MAAM,EAAO,GAC3B,QAAQ,CAAC,UAAU,CAAC;IAIvB,mGAAmG;IACnG,WAAW,CAAC,GAAG,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,IAAI,GAAG,MAAM,EAAE,IAAI,GAAE,MAAM,EAAO,GAAG,UAAU;IAI/E;;;;;;;;;;;OAWG;IACF,eAAe,CACd,IAAI,EAAE,IAAI,CAAC,QAAQ,CAAC,GAAG,QAAQ,CAAC,QAAQ,CAAC,GACxC,SAAS,CAAC,UAAU,CAAC;CA8BzB;AAED;;;;;;;;;;;;GAYG;AACH,qBAAa,QAAQ;IACnB,QAAQ,CAAC,EAAE,EAAE,KAAK,CAAC;IACnB,QAAQ,CAAC,GAAG,EAAE,GAAG,CAAC;IAClB,GAAG,EAAE,MAAM,CAAC;IAEZ,yEAAyE;gBAC7D,IAAI,EAAE;QAChB,EAAE,EAAE,KAAK,CAAC;QACV,EAAE,EAAE,MAAM,CAAC;QACX,GAAG,EAAE,OAAO,CAAC;QACb,EAAE,CAAC,EAAE,QAAQ,CAAC;QACd,GAAG,EAAE,MAAM,CAAC;QACZ,GAAG,EAAE,MAAM,CAAC;QACZ,GAAG,EAAE,MAAM,CAAC;KACb;IAqCD;;;;;;OAMG;IACH,IAAI,CAAC,GAAG,EAAE,UAAU,GAAG,KAAK;IAM5B,mFAAmF;IACnF,IAAI,MAAM,IAAI,MAAM,CAMnB;IAED,iFAAiF;IACjF,MAAM,CAAC,GAAG,EAAE,UAAU,EAAE,KAAK,EAAE,KAAK,GAAG,OAAO;CAG/C;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA4BG;AACH,qBAAa,MAAM;IACjB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,IAAI,EAAE,OAAO,CAAC;IACvB,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,MAAM,EAAE,OAAO,CAAC;IACzB,QAAQ,CAAC,QAAQ,EAAE,OAAO,CAAC;IAC3B,QAAQ,CAAC,EAAE,EAAE,KAAK,CAAC;IACnB,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,GAAG,EAAE,OAAO,CAAC;IACtB,QAAQ,CAAC,EAAE,CAAC,EAAE,QAAQ,CAAC;IACvB,QAAQ,CAAC,IAAI,mBAA0B;IACvC,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;IACrB,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;IACrB,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,WAAW,EAAE,sBAAsB,CAAC;IAC7C,QAAQ,CAAC,QAAQ,EAAE,QAAQ,GAAG,IAAI,CAAC;IAEnC,oFAAoF;gBAElF,IAAI,EAAE,MAAM,EACZ,IAAI,EAAE,MAAM,EACZ,IAAI,EAAE,OAAO,EACb,WAAW,EAAE,MAAM,GAAG,SAAS,EAC/B,MAAM,EAAE,OAAO,EACf,QAAQ,EAAE,OAAO,EACjB,EAAE,EAAE,KAAK,EACT,EAAE,EAAE,MAAM,EACV,GAAG,EAAE,OAAO,EACZ,EAAE,CAAC,EAAE,QAAQ,EACb,YAAY,UAAQ;IAyCtB,kEAAkE;IAClE,IAAI,MAAM,IAAI,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAEpC;IAED;;;;;OAKG;IACH,OAAO,CAAC,QAAQ;IAyChB;;;;;;;;;;;;;OAaG;IACH,2BAA2B,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO;IAejD,2DAA2D;IAC3D,IAAI,QAAQ,IAAI,MAAM,EAAE,CAEvB;IAED;;;;;;;;;OASG;IACH,WAAW,IAAI,IAAI;IAiBnB,0DAA0D;IAC1D,OAAO,CAAC,IAAI,EAAE,MAAM,EAAE,EAAE,CAAC,EAAE,MAAM,EAAE,IAAI,GAAE,WAAgB,GAAG,GAAG;IAoB/D;;;;;;;;;;;;OAYG;IACH,YAAY,CACV,KAAK,EAAE,MAAM,EACb,IAAI,EAAE,GAAG,EACT,KAAK,EAAE,MAAM,EAAE,EACf,KAAK,CAAC,EAAE,MAAM,EAAE,EAChB,EAAE,CAAC,EAAE,MAAM,EACX,IAAI,GAAE,gBAAqB,GAC1B,gBAAgB;IAsGnB;;;;;;;OAOG;IACH,YAAY,CACV,GAAG,EAAE,MAAM,EACX,KAAK,EAAE,MAAM,EACb,IAAI,EAAE,GAAG,EACT,KAAK,EAAE,SAAS,MAAM,EAAE,EACxB,KAAK,CAAC,EAAE,SAAS,MAAM,EAAE,EACzB,EAAE,CAAC,EAAE,MAAM,GACV,GAAG;IA+DN,6FAA6F;IAC7F,qBAAqB,CACnB,GAAG,EAAE,MAAM,EACX,KAAK,EAAE,SAAS,MAAM,EAAE,EACxB,KAAK,GAAE,SAAS,MAAM,EAAU,GAC/B,IAAI;IAuBP;;;;;;;;;;OAUG;IACH,cAAc,CACZ,KAAK,EAAE,MAAM,EACb,KAAK,CAAC,EAAE,MAAM,EAAE,EAChB,KAAK,CAAC,EAAE,MAAM,EAAE,EAChB,IAAI,GAAE;QACJ,KAAK,CAAC,EAAE,aAAa,CAAC;QACtB,KAAK,CAAC,EAAE,aAAa,CAAC;QACtB,IAAI,CAAC,EAAE,MAAM,CAAC;QACd,IAAI,CAAC,EAAE,MAAM,EAAE,CAAC;QAChB,IAAI,CAAC,EAAE,MAAM,EAAE,CAAC;QAChB,IAAI,CAAC,EAAE,OAAO,EAAE,CAAC;QACjB,OAAO,CAAC,EAAE,UAAU,CAAC;KACjB,GACL,gBAAgB;IAuEnB,4GAA4G;IAC5G,gBAAgB,CACd,KAAK,EAAE,MAAM,EACb,KAAK,CAAC,EAAE,MAAM,EAAE,EAChB,IAAI,GAAE;QAAE,IAAI,CAAC,EAAE,OAAO,EAAE,CAAC;QAAC,OAAO,CAAC,EAAE,UAAU,CAAA;KAAO,GACpD,mBAAmB;IAwDtB,0EAA0E;IAC1E,OAAO,CAAC,sBAAsB;IAqB9B,0EAA0E;IAC1E,OAAO,CAAC,6BAA6B;IAoBrC;;;;;;;;;OASG;IACH,OAAO,CAAC,8BAA8B;IA+BtC,0DAA0D;IAC1D,OAAO,CAAC,qBAAqB;IAwB7B,kEAAkE;IAClE,OAAO,CAAC,oBAAoB;IAK5B,+EAA+E;IAC/E,OAAO,CAAC,oBAAoB;IAS5B,kEAAkE;IAClE,OAAO,CAAC,iBAAiB;IASzB;;;;;;OAMG;IACH,SAAS,CAAC,IAAI,EAAE,MAAM,EAAE,EAAE,CAAC,EAAE,MAAM,GAAG,GAAG,GAAG,IAAI;IAuBhD,mEAAmE;IAClE,KAAK,CAAC,KAAK,UAAQ,GAAG,SAAS,CAAC,IAAI,CAAC;CAcvC;AAED;;;;;;GAMG;AACH,wBAAgB,cAAc,CAAC,IAAI,EAAE,MAAM,GAAG;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAA;CAAE,CAI3E;AAED;;;;;GAKG;AACH,wBAAiB,YAAY,CAAC,IAAI,EAAE,UAAU,GAAG,SAAS,CAAC,MAAM,CAAC,CAkHjE"}

package/types/app/{keeping.d.ts → identity/keeping.d.ts}

@@ -1,5 +1,5 @@
 import { Cigar, Diger, Salter, Siger, Signer, type Tier, Verfer } from "cesr-ts";
-import { Keeper } from "../db/keeping.js";
+import { Keeper } from "../../db/keeping.js";
 /**
  * Root key-creation strategy selectors stored in keeper globals.
  *
@@ -216,7 +216,7 @@ export declare class Creatory {
  * - `randy` and `salty` creator algorithms are live; `group` and `extern`
  *   remain explicit unsupported-algorithm seams
  * - AEID handling now includes real sealed-box encryption for keeper-global
- *   salt, per-prefix salts, and signer seeds, while keeping the encrypted
+ *   salt, per-prefix salts, signer seeds and registry roots, while keeping the encrypted
  *   runtime dependency local to the KERI package instead of CESR
  * - readonly opens intentionally avoid keeper mutation so visibility commands
  *   can inspect stores without side effects
@@ -281,22 +281,36 @@ export declare class Manager {
      * Re-encryption scope:
      * - keeper-global root salt in `gbls.salt`
      * - per-prefix salts in `prms.salt`
-     * - signer seeds in `pris.`
+     * - signer seeds in `pris.` and Salt128 registry roots in `rroots.`
      *
      * Behavior matrix:
      * - `current AEID -> same AEID`: validate and keep stable
      * - `current AEID -> new AEID`: decrypt with old seed, re-encrypt with new
      *   public box key
-     * - `current AEID -> empty`: decrypt and persist plaintext secrets
-     * - `empty -> new AEID`: encrypt newly managed secrets going forward
+     * - `current AEID -> empty`: refuse retained registry roots; otherwise persist plaintext secrets
+     * - `empty -> new AEID`: encrypt existing and subsequently managed secrets
      *
      * Failure model:
      * - current seed must authenticate the currently stored AEID before any
      *   secret migration is attempted
      * - new seed must authenticate the new AEID before any re-encryption is
      *   attempted
+     * - Keeper owns one synchronous native transaction for all affected rows;
+     *   refusal or failure leaves durable and live crypto state unchanged
+     * - publish encrypter/decrypter/seed only after that transaction commits;
+     *   readonly and borrowed-writer changes are refused
      */
     updateAeid(aeid: string, seed: string): void;
+    /** Require full canonical keys; local ownership is the calling operation's responsibility. */
+    private registryRootKeys;
+    /** Authenticate live policy as well as process-local crypto, refusing stale managers. */
+    private registryRootCrypto;
+    /** Assert encrypted, unlocked current policy before authorizing an operation with no root yet. */
+    requireRegistryRootAccess(): void;
+    /** Return the retained Salt128 root; absent reads require no encryption. */
+    getRegistryRoot(aid: string, regid: string): Salter | null;
+    /** Retain once, returning false for the identical root without replacing ciphertext. */
+    putRegistryRoot(aid: string, regid: string, root: Salter): boolean;
     private signerDecrypter;
     /** Load one managed signer seed by its public verifier key. */
     private getSignerByPub;

package/types/app/identity/keeping.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"keeping.d.ts","sourceRoot":"","sources":["../../../src/app/identity/keeping.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,KAAK,EAGL,KAAK,EAUL,MAAM,EACN,KAAK,EACL,MAAM,EACN,KAAK,IAAI,EAET,MAAM,EACP,MAAM,SAAS,CAAC;AAGjB,OAAO,EAAE,MAAM,EAAwE,MAAM,qBAAqB,CAAC;AAEnH;;;;;GAKG;AACH,oBAAY,KAAK;IACf,KAAK,UAAU;IACf,KAAK,UAAU;IACf,KAAK,UAAU;IACf,MAAM,WAAW;CAClB;AAED;;;;;;GAMG;AACH,MAAM,WAAW,WAAW;IAC1B,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,IAAI,CAAC,EAAE,KAAK,CAAC;IACb,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,IAAI,CAAC,EAAE,IAAI,CAAC;CACb;AAED;;;;;;;GAOG;AACH,MAAM,WAAW,iBAAiB;IAChC,MAAM,CAAC,EAAE,MAAM,EAAE,CAAC;IAClB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,MAAM,CAAC,EAAE,MAAM,EAAE,CAAC;IAClB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,IAAI,CAAC,EAAE,KAAK,CAAC;IACb,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,IAAI,CAAC,EAAE,IAAI,CAAC;IACZ,MAAM,CAAC,EAAE,OAAO,CAAC;IACjB,YAAY,CAAC,EAAE,OAAO,CAAC;IACvB,IAAI,CAAC,EAAE,OAAO,CAAC;CAChB;AAED,qFAAqF;AACrF,MAAM,WAAW,iBAAiB;IAChC,GAAG,EAAE,MAAM,CAAC;IACZ,MAAM,CAAC,EAAE,MAAM,EAAE,CAAC;IAClB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,YAAY,CAAC,EAAE,OAAO,CAAC;IACvB,IAAI,CAAC,EAAE,OAAO,CAAC;IACf,KAAK,CAAC,EAAE,OAAO,CAAC;CACjB;AAED;;;;;;;;;;;;;GAaG;AACH,MAAM,WAAW,WAAW;IAC1B,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,IAAI,EAAE,MAAM,CAAC;CACd;AAED;;;;;;;GAOG;AACH,MAAM,WAAW,eAAe;IAC9B,IAAI,CAAC,EAAE,MAAM,EAAE,CAAC;IAChB,OAAO,CAAC,EAAE,MAAM,EAAE,CAAC;IACnB,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB,OAAO,CAAC,EAAE,MAAM,EAAE,CAAC;IACnB,OAAO,CAAC,EAAE,KAAK,CAAC,MAAM,GAAG,IAAI,GAAG,SAAS,CAAC,CAAC;IAC3C,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,IAAI,CAAC,EAAE,WAAW,CAAC;CACpB;AAED,mFAAmF;AACnF,MAAM,WAAW,kBAAkB;IACjC,IAAI,CAAC,EAAE,MAAM,EAAE,CAAC;IAChB,OAAO,CAAC,EAAE,MAAM,EAAE,CAAC;CACpB;AAED;;;;;;;;GAQG;AACH,MAAM,WAAW,iBAAiB;IAChC,SAAS,EAAE,MAAM,EAAE,EAAE,CAAC;IACtB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,IAAI,CAAC,EAAE,KAAK,CAAC;IACb,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,IAAI,CAAC,EAAE,IAAI,CAAC;IACZ,MAAM,CAAC,EAAE,OAAO,CAAC;IACjB,YAAY,CAAC,EAAE,OAAO,CAAC;IACvB,IAAI,CAAC,EAAE,OAAO,CAAC;CAChB;AAED,2EAA2E;AAC3E,MAAM,WAAW,iBAAiB;IAChC,GAAG,EAAE,MAAM,CAAC;IACZ,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB,KAAK,CAAC,EAAE,OAAO,CAAC;CACjB;AAED,qFAAqF;AACrF,MAAM,WAAW,iBAAiB;IAChC,KAAK,CAAC,EAAE,MAAM,EAAE,CAAC;IACjB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,YAAY,CAAC,EAAE,OAAO,CAAC;IACvB,IAAI,CAAC,EAAE,OAAO,CAAC;CAChB;AAED,uFAAuF;AACvF,UAAU,cAAc;IACtB,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,MAAM,CAAC;CAChB;AA4CD;;;;;;;;;;GAUG;AACH,wBAAgB,WAAW,CACzB,QAAQ,EAAE,MAAM,EAChB,IAAI,EAAE,MAAM,EACZ,YAAY,EAAE,OAAO,EACrB,IAAI,EAAE,IAAI,EACV,IAAI,EAAE,OAAO,GACZ,cAAc,CAShB;AA2BD,gFAAgF;AAChF,qBAAa,OAAO;IAClB,uEAAuE;IACvE,MAAM,CAAC,KAAK,GAAE,iBAAsB,GAAG,MAAM,EAAE;IAI/C,oFAAoF;IACpF,IAAI,IAAI,IAAI,MAAM,CAEjB;IAED,6EAA6E;IAC7E,IAAI,IAAI,IAAI,MAAM,CAEjB;IAED,sEAAsE;IACtE,IAAI,IAAI,IAAI,IAAI,CAEf;CACF;AAED,2EAA2E;AAC3E,qBAAa,YAAa,SAAQ,OAAO;IAC9B,MAAM,CAAC,EACd,KAAK,EACL,KAAS,EACT,IAA0B,EAC1B,YAAmB,GACpB,GAAE,iBAAsB,GAAG,MAAM,EAAE;CAIrC;AAED,sFAAsF;AACtF,qBAAa,YAAa,SAAQ,OAAO;IACvC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAS;gBAG7B,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,GAAE;QAAE,IAAI,CAAC,EAAE,MAAM,CAAC;QAAC,IAAI,CAAC,EAAE,MAAM,CAAC;QAAC,IAAI,CAAC,EAAE,IAAI,CAAA;KAAO;IAU1E,IAAa,IAAI,IAAI,MAAM,CAE1B;IAED,IAAa,IAAI,IAAI,MAAM,CAE1B;IAED,IAAa,IAAI,IAAI,IAAI,CAExB;IAEQ,MAAM,CAAC,EACd,KAAK,EACL,KAAS,EACT,IAA0B,EAC1B,IAAQ,EACR,IAAQ,EACR,IAAQ,EACR,YAAmB,EACnB,IAAY,GACb,GAAE,iBAAsB,GAAG,MAAM,EAAE;CAarC;AAED,yDAAyD;AACzD,qBAAa,QAAQ;IACP,OAAO,CAAC,QAAQ,CAAC,IAAI;gBAAJ,IAAI,GAAE,KAAmB;IAEtD,oFAAoF;IACpF,IAAI,CACF,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,GAAE;QAAE,IAAI,CAAC,EAAE,MAAM,CAAC;QAAC,IAAI,CAAC,EAAE,MAAM,CAAC;QAAC,IAAI,CAAC,EAAE,IAAI,CAAA;KAAO,GACvE,OAAO;CASX;AA0DD;;;;;;;;;;;;;;;;;;;GAmBG;AACH,qBAAa,OAAO;IAClB,OAAO,CAAC,KAAK,CAAS;IACtB,OAAO,CAAC,GAAG,CAAS;IACpB,kFAAkF;IAClF,OAAO,CAAC,SAAS,CAA0B;IAC3C,gFAAgF;IAChF,OAAO,CAAC,SAAS,CAA0B;gBAE/B,IAAI,EAAE,WAAW;IAwB7B,IAAI,EAAE,IAAI,MAAM,CAEf;IAED,mGAAmG;IACnG,IAAI,IAAI,IAAI,MAAM,CAEjB;IAED,qFAAqF;IACrF,IAAI,IAAI,IAAI,MAAM,CAEjB;IAED,uFAAuF;IACvF,IAAI,IAAI,IAAI,MAAM,GAAG,IAAI,CAIxB;IAED,uEAAuE;IACvE,IAAI,IAAI,CAAC,IAAI,EAAE,MAAM,EAEpB;IAED,kFAAkF;IAClF,IAAI,IAAI,IAAI,KAAK,GAAG,IAAI,CAIvB;IAED,2DAA2D;IAC3D,IAAI,IAAI,CAAC,IAAI,EAAE,KAAK,EAEnB;IAED;;;;;;;;;;OAUG;IACH,IAAI,IAAI,IAAI,MAAM,GAAG,IAAI,CAQxB;IAED,IAAI,IAAI,CAAC,IAAI,EAAE,MAAM,EAOpB;IAED,IAAI,IAAI,IAAI,IAAI,GAAG,IAAI,CAGtB;IAED,kFAAkF;IAClF,IAAI,IAAI,CAAC,IAAI,EAAE,IAAI,EAElB;IAED;;;;;;;;;;;;;;;OAeG;IACH,KAAK,CAAC,IAAI,SAAK,EAAE,IAAI,SAAK,GAAG,IAAI;IAyBjC;;;;;;;;;;;;;;;;;;;;;;;;OAwBG;IACH,UAAU,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,IAAI;IAoB5C,8FAA8F;IAC9F,OAAO,CAAC,gBAAgB;IAOxB,yFAAyF;IACzF,OAAO,CAAC,kBAAkB;IAQ1B,kGAAkG;IAClG,yBAAyB,IAAI,IAAI;IAIjC,4EAA4E;IAC5E,eAAe,CAAC,GAAG,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI;IAW1D,wFAAwF;IACxF,eAAe,CAAC,GAAG,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,OAAO;IAOlE,OAAO,CAAC,eAAe;IASvB,+DAA+D;IAC/D,OAAO,CAAC,cAAc;IAQtB,kFAAkF;IAClF,OAAO,CAAC,UAAU;IAelB,yFAAyF;IACzF,OAAO,CAAC,eAAe;IAWvB;;;;;;OAMG;IACH,OAAO,CAAC,kBAAkB;IA2C1B,kFAAkF;IAClF,OAAO,CAAC,iBAAiB;IA2BzB;;;;;;OAMG;IACH,OAAO,CAAC,yBAAyB;IAsCjC;;;;;;;OAOG;IACH,OAAO,CAAC,qBAAqB;IAoD7B,+EAA+E;IAC/E,OAAO,CAAC,cAAc;IAUtB;;;;;;;;;;;;;;;;OAgBG;IACH,MAAM,CAAC,IAAI,GAAE,iBAAsB,GAAG,CAAC,MAAM,EAAE,EAAE,KAAK,EAAE,CAAC;IA8HzD;;;;;;;OAOG;IACH,IAAI,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,IAAI;IAmE1C;;;;;;;;;;;;OAYG;IACH,MAAM,CAAC,IAAI,EAAE,iBAAiB,GAAG,CAAC,MAAM,EAAE,EAAE,KAAK,EAAE,CAAC;IAiFpD;;;;;;;;;;;;;;;;;;;;;;;;OAwBG;IACH,IAAI,CAAC,GAAG,EAAE,UAAU,EAAE,IAAI,EAAE,MAAM,EAAE,EAAE,OAAO,EAAE,IAAI,GAAG,KAAK,EAAE;IAC7D,IAAI,CAAC,GAAG,EAAE,UAAU,EAAE,IAAI,EAAE,MAAM,EAAE,EAAE,OAAO,CAAC,EAAE,KAAK,GAAG,KAAK,EAAE;IAC/D,IAAI,CAAC,GAAG,EAAE,UAAU,EAAE,IAAI,EAAE,eAAe,GAAG;QAAE,OAAO,EAAE,IAAI,CAAA;KAAE,GAAG,KAAK,EAAE;IACzE,IAAI,CAAC,GAAG,EAAE,UAAU,EAAE,IAAI,CAAC,EAAE,eAAe,GAAG,KAAK,EAAE,GAAG,KAAK,EAAE;IAiDhE;;;;;;;;;;OAUG;IACH,OAAO,CACL,IAAI,EAAE,MAAM,GAAG,UAAU,EACzB,IAAI,GAAE,kBAAuB,GAC5B,UAAU;IAyBb,qGAAqG;IACrG,IAAI,CAAC,UAAU,EAAE,UAAU,EAAE,MAAM,EAAE,MAAM,GAAG,UAAU,GAAG,IAAI;IAQ/D;;;;;;;;;;;;;;;;;;;OAmBG;IACH,MAAM,CAAC,IAAI,EAAE,iBAAiB,GAAG,CAAC,MAAM,EAAE,MAAM,EAAE,EAAE,CAAC;IAwKrD;;;;;;;;;OASG;IACH,MAAM,CAAC,IAAI,EAAE,iBAAiB,GAAG,CAAC,MAAM,EAAE,EAAE,KAAK,EAAE,CAAC;CAwDrD;AAED;;;;;GAKG;AACH,wBAAgB,iBAAiB,CAAC,IAAI,CAAC,EAAE,MAAM,GAAG,MAAM,CAIvD;AAED,gFAAgF;AAChF,wBAAgB,cAAc,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAKnD;AAED,uFAAuF;AACvF,wBAAgB,eAAe,CAAC,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,MAAM,CAEnE;AAED,8EAA8E;AAC9E,wBAAgB,gBAAgB,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,CAQpD;AAED,iGAAiG;AACjG,wBAAgB,iBAAiB,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAEtD;AAED,gFAAgF;AAChF,wBAAgB,UAAU,CAAC,GAAG,EAAE,UAAU,GAAG,MAAM,CAElD;AAED,wEAAwE;AACxE,wBAAgB,YAAY,CAAC,IAAI,EAAE,MAAM,GAAG,UAAU,CAErD;AAED;;;;;;GAMG;AACH,wBAAgB,uBAAuB,IAAI,IAAI,CAE9C"}

package/types/app/{organizing.d.ts → identity/organizing.d.ts}

@@ -1,4 +1,5 @@
-import type { Habery } from "./habbing.js";
+import type { Baser } from "../../db/basing.js";
+import type { Habery, Signator } from "./habbing.js";
 export interface ContactRecord extends Record<string, unknown> {
     id: string;
 }
@@ -11,8 +12,22 @@ export interface ContactRecord extends Record<string, unknown> {
  * - no broader contact-management CLI surface yet
  */
 export declare class Organizer {
-    readonly hby: Habery;
-    constructor(hby: Habery);
+    readonly db: Baser;
+    readonly signator: Signator | null;
+    /** Borrow contact storage and its optional signing authority without owning their lifetime. */
+    constructor(db: Baser, signator: Signator | null);
+    /**
+     * Resolve one application recipient input into the actual destination prefix.
+     *
+     * Resolution order matches the mailbox CLI mental model:
+     * - exact known prefix wins
+     * - otherwise exact organizer alias lookup is required
+     *
+     * @param recipient Known AID prefix or exact organizer alias.
+     * @returns Resolved destination AID.
+     * @throws ValidationError for absent or ambiguous aliases.
+     */
+    resolveRecipient(recipient: string): string;
     /** Load one signed contact record by identifier prefix. */
     get(pre: string): ContactRecord | null;
     /**
@@ -32,5 +47,5 @@ export declare function persistResolvedContact(hby: Habery, pre: string | null |
     oobi?: string | null;
 }): void;
 /** Debug helper kept local so organizer serialization stays reviewable. */
-export declare function signedContactJson(hby: Habery, pre: string): string | null;
+export declare function signedContactJson(db: Baser, pre: string): string | null;
 //# sourceMappingURL=organizing.d.ts.map

package/types/app/identity/organizing.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"organizing.d.ts","sourceRoot":"","sources":["../../../src/app/identity/organizing.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,KAAK,EAAE,MAAM,oBAAoB,CAAC;AAChD,OAAO,KAAK,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,cAAc,CAAC;AAKrD,MAAM,WAAW,aAAc,SAAQ,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC;IAC5D,EAAE,EAAE,MAAM,CAAC;CACZ;AAED;;;;;;;GAOG;AACH,qBAAa,SAAS;IAER,QAAQ,CAAC,EAAE,EAAE,KAAK;IAAE,QAAQ,CAAC,QAAQ,EAAE,QAAQ,GAAG,IAAI;IADlE,+FAA+F;gBAC1E,EAAE,EAAE,KAAK,EAAW,QAAQ,EAAE,QAAQ,GAAG,IAAI;IAElE;;;;;;;;;;OAUG;IACH,gBAAgB,CAAC,SAAS,EAAE,MAAM,GAAG,MAAM;IAkB3C,2DAA2D;IAC3D,GAAG,CAAC,GAAG,EAAE,MAAM,GAAG,aAAa,GAAG,IAAI;IAoBtC;;;;;;OAMG;IACH,MAAM,CACJ,GAAG,EAAE,MAAM,EACX,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAC5B,IAAI;IAwBP,2EAA2E;IAC3E,SAAS,CAAC,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,aAAa,EAAE;CAezD;AAUD,6EAA6E;AAC7E,wBAAgB,sBAAsB,CACpC,GAAG,EAAE,MAAM,EACX,GAAG,EAAE,MAAM,GAAG,IAAI,GAAG,SAAS,EAC9B,IAAI,EAAE;IACJ,KAAK,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACtB,IAAI,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;CACtB,GACA,IAAI,CAiBN;AAED,2EAA2E;AAC3E,wBAAgB,iBAAiB,CAC/B,EAAE,EAAE,KAAK,EACT,GAAG,EAAE,MAAM,GACV,MAAM,GAAG,IAAI,CAGf"}

package/types/app/{ipex-building.d.ts → ipex/ipex-building.d.ts}

@@ -3,18 +3,18 @@ import { SerderACDC, type SerderKERI } from "cesr-ts";
 import type { Operation } from "effection";
 import { type DisclosurePlan } from "./ipex-graph.js";
 import type { IpexBuilderOptions, IpexMessage, IpexRoute } from "./ipexing.js";
-/** Explicit body inputs; opening a conversation requires a caller-supplied exchange id. */
+/** Explicit body inputs; openers derive their transaction identity from their XIP SAID. */
 export interface IpexV2BodyOptions extends Omit<IpexBuilderOptions, "version" | "pvrsn"> {
     message: string;
     recipient?: string;
-    xid?: string;
     prior?: SerderKERI;
     plan?: DisclosurePlan;
     anchor?: boolean;
+    /** KERIpy apply/offer/grant permit application-defined payload fields; named protocol inputs stay reserved. */
     attrs?: Record<string, unknown>;
 }
 /**
- * Construct an EXN body from parsed credential bodies, without reading or owning wire.
+ * Construct an XIP opener or EXN continuation from parsed credential bodies, without reading or owning wire.
  * The first node is the origin SAID commitment; offer callers may send just that
  * commitment or borrow the frames' nestedPayloads. A commitment authenticates no
  * child signature. Conversation storage, signing and anchoring belong to callers.
@@ -22,8 +22,8 @@ export interface IpexV2BodyOptions extends Omit<IpexBuilderOptions, "version" |
 export declare function ipexExnBody(sender: string, route: IpexRoute, nodes: readonly SerderACDC[], options: IpexV2BodyOptions): SerderKERI;
 /**
  * Parse a finite stream of direct child messages once, then consume their nested
- * wire under one collection ceiling. This operation owns every parsed frame and
- * joins disposal on success, rejection and cancellation; no lazy owner escapes.
+ * wire for the enclosing exchange. Parsed frames and Texters are ordinary values;
+ * serialization observes the operation signal.
  * Returned nested bytes must share the enclosure with the parent's own proofs.
  */
 export declare function prepareIpexExn(sender: string, route: IpexRoute, wire: Uint8Array, options: IpexV2BodyOptions): Operation<IpexMessage>;

package/types/app/ipex/ipex-building.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"ipex-building.d.ts","sourceRoot":"","sources":["../../../src/app/ipex/ipex-building.ts"],"names":[],"mappings":"AAAA,qFAAqF;AACrF,OAAO,EAA6C,UAAU,EAAE,KAAK,UAAU,EAAY,MAAM,SAAS,CAAC;AAC3G,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,WAAW,CAAC;AAG3C,OAAO,EACL,KAAK,cAAc,EAKpB,MAAM,iBAAiB,CAAC;AACzB,OAAO,KAAK,EAAE,kBAAkB,EAAE,WAAW,EAAE,SAAS,EAAE,MAAM,cAAc,CAAC;AAE/E,2FAA2F;AAC3F,MAAM,WAAW,iBAAkB,SAAQ,IAAI,CAAC,kBAAkB,EAAE,SAAS,GAAG,OAAO,CAAC;IACtF,OAAO,EAAE,MAAM,CAAC;IAChB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,KAAK,CAAC,EAAE,UAAU,CAAC;IACnB,IAAI,CAAC,EAAE,cAAc,CAAC;IACtB,MAAM,CAAC,EAAE,OAAO,CAAC;IACjB,+GAA+G;IAC/G,KAAK,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CACjC;AAED;;;;;GAKG;AACH,wBAAgB,WAAW,CACzB,MAAM,EAAE,MAAM,EACd,KAAK,EAAE,SAAS,EAChB,KAAK,EAAE,SAAS,UAAU,EAAE,EAC5B,OAAO,EAAE,iBAAiB,GACzB,UAAU,CA+GZ;AACD;;;;;GAKG;AACH,wBAAiB,cAAc,CAC7B,MAAM,EAAE,MAAM,EACd,KAAK,EAAE,SAAS,EAChB,IAAI,EAAE,UAAU,EAChB,OAAO,EAAE,iBAAiB,GACzB,SAAS,CAAC,WAAW,CAAC,CAoBxB"}

package/types/app/{ipex-credentialing.d.ts → ipex/ipex-credentialing.d.ts}

@@ -9,18 +9,23 @@ import type { Operation } from "effection";
  * - keeps registry, wallet, and verifier persistence in VDR modules
  */
 import { SerderACDC, SerderKERI, type Versionage } from "cesr-ts";
-import type { Reger } from "../db/reger.js";
-import { type Hab, type Habery } from "./habbing.js";
+import type { Reger } from "../../db/reger.js";
+import { type Hab, type Habery } from "../identity/habbing.js";
+import type { ProtocolProcessor } from "../protocol/protocol-processing.js";
 import { type IpexBuilderOptions } from "./ipexing.js";
-import type { Reactor } from "./reactor.js";
+/** Body-first embedded bytes plus the context needed to parse their attachments. */
+export interface CredentialArtifact {
+    wire: Uint8Array;
+    genus: Versionage;
+}
 /** Grant-embedded presentation streams required by KERIpy verifier import. */
 export interface CredentialPresentationArtifacts {
     /** ACDC body plus its SealSourceTriples proof attachment. */
-    acdc: Uint8Array;
+    acdc: CredentialArtifact;
     /** Credential TEL issue/revoke stream message for the presented ACDC. */
-    iss: Uint8Array;
+    iss: CredentialArtifact;
     /** Issuer KEL event that anchors `iss`. */
-    anc: Uint8Array;
+    anc: CredentialArtifact;
 }
 /** Complete `/ipex/grant` message plus credential support material. */
 export interface CredentialGrantMessage {
@@ -34,6 +39,7 @@ export interface CredentialGrantMessage {
 export interface CredentialAdmitMessage {
     admit: SerderKERI;
     attachments: Uint8Array;
+    /** Empty when group orchestration defers signing. */
     wire: Uint8Array;
 }
 /** Builder options for credential-bearing grants. */
@@ -59,6 +65,13 @@ export declare function credentialStreamMessages(hby: Habery, reger: Reger, cred
 export declare function credentialPresentationSupportMessages(hby: Habery, reger: Reger, creder: SerderACDC, recipient: string, gvrsn?: Versionage): Uint8Array[];
 /** Build grant-embedded `acdc`, `iss`, and `anc` artifacts for one credential. */
 export declare function credentialPresentationArtifacts(hby: Habery, reger: Reger, credentialSaidValue: string, gvrsn?: Versionage): CredentialPresentationArtifacts;
+/**
+ * Check a grant against this member's verified credential and accepted issuer/TEL
+ * evidence before signing. A group holder may present another issuer's credential.
+ * Optional legacy embeds/proofs may be omitted when that authority is already
+ * local; supplied bodies and source seals must agree with it. Nothing is written.
+ */
+export declare function credentialGrantReady(hby: Habery, reger: Reger, grant: SerderKERI, attachments: Uint8Array, genus: Versionage): boolean;
 /** Build a signed `/ipex/grant` message with embedded credential artifacts. */
 export declare function ipexCredentialGrant(args: {
     hby: Habery;
@@ -70,18 +83,37 @@ export declare function ipexCredentialGrant(args: {
     options?: IpexCredentialGrantOptions;
     sign?: boolean;
 }): CredentialGrantMessage;
-/** Build a signed `/ipex/admit` response for an accepted grant. */
+/**
+ * Validate a supplied accepted grant's recipient and wallet obligation before signing.
+ * Explicit no-wait authoring may skip the saved marker; it does not establish
+ * wallet acceptance. Peer approval always checks its own wallet independently.
+ */
+export declare function validateAdmitGrant(grant: SerderKERI, recipient: string, reger: Reger, requireSaved?: boolean): string;
+/** Build an admit after validating its grant; group callers defer the endorsement. */
 export declare function ipexCredentialAdmit(args: {
     hab: Hab;
     reger: Reger;
     grant: SerderKERI;
     message?: string;
     options?: IpexCredentialAdmitOptions;
+    /** Leave wire empty so group orchestration can select/reuse the member contribution. */
+    sign?: boolean;
 }): CredentialAdmitMessage;
-/** Parse grant-embedded artifacts in KERIpy admit order: `anc`, `iss`, `acdc`. */
-export declare function processCredentialPresentationArtifacts(reactor: Reactor, artifacts: CredentialPresentationArtifacts): Operation<void>;
+/**
+ * Parse grant-embedded artifacts in KERIpy admit order: `anc`, `iss`, `acdc`.
+ *
+ * @param protocol Borrowed shared protocol processor; this operation owns its parser and input-specific Kevery.
+ * @param artifacts Grant-embedded anchor, issuance and credential streams in their named fields.
+ */
+export declare function processCredentialPresentationArtifacts(protocol: ProtocolProcessor, artifacts: CredentialPresentationArtifacts): Operation<void>;
 /** Rebuild grant-embedded `anc`, `iss`, and `acdc` streams from exchange storage. */
-export declare function storedGrantArtifacts(hby: Habery, grant: SerderKERI): CredentialPresentationArtifacts;
+export declare function storedGrantArtifacts(hby: Habery, grant: SerderKERI, gvrsn?: Versionage): CredentialPresentationArtifacts;
+/**
+ * Decode the supplied grant's bodies and counted path groups without storage or
+ * admission. Approval passes the selected proposal's own evidence; stored replay
+ * passes its retained LMDB groups. Neither source can substitute for the other.
+ */
+export declare function grantPresentationArtifacts(grant: SerderKERI, pathed: readonly Uint8Array[], gvrsn?: Versionage): CredentialPresentationArtifacts;
 /** Extract the embedded credential SAID from an accepted `/ipex/grant`. */
 export declare function credentialSaidFromGrant(grant: SerderKERI): string | null;
 /** Return a raw exported credential message by SAID. */

package/types/app/ipex/ipex-credentialing.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"ipex-credentialing.d.ts","sourceRoot":"","sources":["../../../src/app/ipex/ipex-credentialing.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,WAAW,CAAC;AAC3C;;;;;;;;GAQG;AACH,OAAO,EAOL,UAAU,EACV,UAAU,EACV,KAAK,UAAU,EAEhB,MAAM,SAAS,CAAC;AAIjB,OAAO,KAAK,EAAE,KAAK,EAAE,MAAM,mBAAmB,CAAC;AAI/C,OAAO,EAA8B,KAAK,GAAG,EAAE,KAAK,MAAM,EAAE,MAAM,wBAAwB,CAAC;AAE3F,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,oCAAoC,CAAC;AAG5E,OAAO,EAAkC,KAAK,kBAAkB,EAA+B,MAAM,cAAc,CAAC;AAIpH,oFAAoF;AACpF,MAAM,WAAW,kBAAkB;IACjC,IAAI,EAAE,UAAU,CAAC;IACjB,KAAK,EAAE,UAAU,CAAC;CACnB;AAED,8EAA8E;AAC9E,MAAM,WAAW,+BAA+B;IAC9C,6DAA6D;IAC7D,IAAI,EAAE,kBAAkB,CAAC;IACzB,yEAAyE;IACzE,GAAG,EAAE,kBAAkB,CAAC;IACxB,2CAA2C;IAC3C,GAAG,EAAE,kBAAkB,CAAC;CACzB;AAED,uEAAuE;AACvE,MAAM,WAAW,sBAAsB;IACrC,KAAK,EAAE,UAAU,CAAC;IAClB,WAAW,EAAE,UAAU,CAAC;IACxB,IAAI,EAAE,UAAU,CAAC;IACjB,SAAS,EAAE,+BAA+B,CAAC;IAC3C,OAAO,EAAE,UAAU,EAAE,CAAC;CACvB;AAED,gFAAgF;AAChF,MAAM,WAAW,sBAAsB;IACrC,KAAK,EAAE,UAAU,CAAC;IAClB,WAAW,EAAE,UAAU,CAAC;IACxB,qDAAqD;IACrD,IAAI,EAAE,UAAU,CAAC;CAClB;AAED,qDAAqD;AACrD,MAAM,WAAW,0BAA2B,SAAQ,kBAAkB;IACpE,KAAK,CAAC,EAAE,UAAU,GAAG,IAAI,CAAC;CAC3B;AAED,sEAAsE;AACtE,MAAM,WAAW,0BAA2B,SAAQ,kBAAkB;IACpE,gFAAgF;IAChF,YAAY,CAAC,EAAE,OAAO,CAAC;CACxB;AAED,6EAA6E;AAC7E,wBAAgB,yBAAyB,CACvC,GAAG,EAAE,MAAM,EACX,KAAK,EAAE,KAAK,EACZ,MAAM,EAAE,UAAU,EAClB,SAAS,EAAE,MAAM,GAChB,UAAU,EAAE,CAgCd;AAED;;;;;;GAMG;AACH,wBAAgB,wBAAwB,CACtC,GAAG,EAAE,MAAM,EACX,KAAK,EAAE,KAAK,EACZ,MAAM,EAAE,UAAU,EAClB,SAAS,EAAE,MAAM,EACjB,KAAK,GAAE,UAAqB,GAC3B,UAAU,EAAE,CAWd;AAED,2EAA2E;AAC3E,wBAAgB,qCAAqC,CACnD,GAAG,EAAE,MAAM,EACX,KAAK,EAAE,KAAK,EACZ,MAAM,EAAE,UAAU,EAClB,SAAS,EAAE,MAAM,EACjB,KAAK,GAAE,UAAqB,GAC3B,UAAU,EAAE,CAYd;AAED,kFAAkF;AAClF,wBAAgB,+BAA+B,CAC7C,GAAG,EAAE,MAAM,EACX,KAAK,EAAE,KAAK,EACZ,mBAAmB,EAAE,MAAM,EAC3B,KAAK,GAAE,UAAqB,GAC3B,+BAA+B,CAsCjC;AAED;;;;;GAKG;AACH,wBAAgB,oBAAoB,CAClC,GAAG,EAAE,MAAM,EACX,KAAK,EAAE,KAAK,EACZ,KAAK,EAAE,UAAU,EACjB,WAAW,EAAE,UAAU,EACvB,KAAK,EAAE,UAAU,GAChB,OAAO,CA+CT;AAeD,+EAA+E;AAC/E,wBAAgB,mBAAmB,CAAC,IAAI,EAAE;IACxC,GAAG,EAAE,MAAM,CAAC;IACZ,GAAG,EAAE,GAAG,CAAC;IACT,KAAK,EAAE,KAAK,CAAC;IACb,SAAS,EAAE,MAAM,CAAC;IAClB,cAAc,EAAE,MAAM,CAAC;IACvB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,OAAO,CAAC,EAAE,0BAA0B,CAAC;IACrC,IAAI,CAAC,EAAE,OAAO,CAAC;CAChB,GAAG,sBAAsB,CAyCzB;AAED;;;;GAIG;AACH,wBAAgB,kBAAkB,CAAC,KAAK,EAAE,UAAU,EAAE,SAAS,EAAE,MAAM,EAAE,KAAK,EAAE,KAAK,EAAE,YAAY,UAAO,GAAG,MAAM,CAWlH;AAED,sFAAsF;AACtF,wBAAgB,mBAAmB,CAAC,IAAI,EAAE;IACxC,GAAG,EAAE,GAAG,CAAC;IACT,KAAK,EAAE,KAAK,CAAC;IACb,KAAK,EAAE,UAAU,CAAC;IAClB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,OAAO,CAAC,EAAE,0BAA0B,CAAC;IACrC,wFAAwF;IACxF,IAAI,CAAC,EAAE,OAAO,CAAC;CAChB,GAAG,sBAAsB,CAYzB;AAED;;;;;GAKG;AACH,wBAAiB,sCAAsC,CACrD,QAAQ,EAAE,iBAAiB,EAC3B,SAAS,EAAE,+BAA+B,GACzC,SAAS,CAAC,IAAI,CAAC,CASjB;AAED,qFAAqF;AACrF,wBAAgB,oBAAoB,CAClC,GAAG,EAAE,MAAM,EACX,KAAK,EAAE,UAAU,EACjB,KAAK,GAAE,UAAqB,GAC3B,+BAA+B,CAGjC;AAED;;;;GAIG;AACH,wBAAgB,0BAA0B,CACxC,KAAK,EAAE,UAAU,EACjB,MAAM,EAAE,SAAS,UAAU,EAAE,EAC7B,KAAK,GAAE,UAAqB,GAC3B,+BAA+B,CAajC;AAED,2EAA2E;AAC3E,wBAAgB,uBAAuB,CAAC,KAAK,EAAE,UAAU,GAAG,MAAM,GAAG,IAAI,CAMxE;AAED,wDAAwD;AACxD,wBAAgB,uBAAuB,CAAC,KAAK,EAAE,KAAK,EAAE,mBAAmB,EAAE,MAAM,GAAG,UAAU,CAE7F"}

package/types/app/ipex/ipex-graph.d.ts

@@ -0,0 +1,28 @@
+/** Borrowed IPEX frame DAGs, negotiated disclosure paths and traversal policy. */
+import { type CesrFrame, SerderACDC } from "cesr-ts";
+import { type AcdcGraph } from "../../acdc/chaining.js";
+/** One node selection: schema query, graph path and relative disclosure paths. */
+export type DisclosurePlan = readonly (readonly [schema: string, path: string, fields: readonly string[]])[];
+/** Graph indexes borrow the original frames and never transfer or dispose payload owners. */
+export interface IpexGraph extends AcdcGraph {
+    nodes: ReadonlyMap<string, CesrFrame & {
+        body: SerderACDC;
+    }>;
+}
+/** Empty UUID marks field-map metadata; fixed-field public credentials keep that slot empty too. */
+export declare function isIpexMetadata(node: SerderACDC): boolean;
+/** Offers carry bodies only; empty counted feet convey no child evidence. */
+export declare function hasIpexNodeAttachments(frame: CesrFrame): boolean;
+/** Validate disclosure-query shape; actual schema commitments are checked against disclosed nodes. */
+export declare function validDisclosurePlan(value: unknown): value is DisclosurePlan;
+/** Decode exactly one wire DAG without accepting the retired flat q.dp shape. */
+export declare function singleDagDisclosurePlan(value: unknown): DisclosurePlan | null;
+/**
+ * Index unique disclosed credential nodes and walk their reachable graph in BFS order.
+ * Offers may omit far nodes; grants require every referenced node. Nested ownership
+ * does not make these nodes independently accepted runtime messages.
+ */
+export declare function walkIpexGraph(origin: string, nests: readonly CesrFrame[], closed: boolean): IpexGraph | null;
+/** Select every disclosed node in exact BFS order using literal SAD paths and virtual far-node hops. */
+export declare function verifyIpexDisclosure(plan: DisclosurePlan, origin: string, graph: IpexGraph): boolean;
+//# sourceMappingURL=ipex-graph.d.ts.map

package/types/app/ipex/ipex-graph.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"ipex-graph.d.ts","sourceRoot":"","sources":["../../../src/app/ipex/ipex-graph.ts"],"names":[],"mappings":"AAAA,kFAAkF;AAClF,OAAO,EAAE,KAAK,SAAS,EAAyC,UAAU,EAAE,MAAM,SAAS,CAAC;AAC5F,OAAO,EAA4C,KAAK,SAAS,EAAmB,MAAM,wBAAwB,CAAC;AAEnH,kFAAkF;AAClF,MAAM,MAAM,cAAc,GAAG,SAAS,CAAC,SAAS,CAAC,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,SAAS,MAAM,EAAE,CAAC,CAAC,EAAE,CAAC;AAC7G,6FAA6F;AAC7F,MAAM,WAAW,SAAU,SAAQ,SAAS;IAC1C,KAAK,EAAE,WAAW,CAAC,MAAM,EAAE,SAAS,GAAG;QAAE,IAAI,EAAE,UAAU,CAAA;KAAE,CAAC,CAAC;CAC9D;AAGD,oGAAoG;AACpG,wBAAgB,cAAc,CAAC,IAAI,EAAE,UAAU,GAAG,OAAO,CAExD;AAED,6EAA6E;AAC7E,wBAAgB,sBAAsB,CAAC,KAAK,EAAE,SAAS,GAAG,OAAO,CAGhE;AAUD,sGAAsG;AACtG,wBAAgB,mBAAmB,CAAC,KAAK,EAAE,OAAO,GAAG,KAAK,IAAI,cAAc,CAyB3E;AAED,iFAAiF;AACjF,wBAAgB,uBAAuB,CAAC,KAAK,EAAE,OAAO,GAAG,cAAc,GAAG,IAAI,CAE7E;AAED;;;;GAIG;AACH,wBAAgB,aAAa,CAC3B,MAAM,EAAE,MAAM,EACd,KAAK,EAAE,SAAS,SAAS,EAAE,EAC3B,MAAM,EAAE,OAAO,GACd,SAAS,GAAG,IAAI,CAgElB;AAaD,wGAAwG;AACxG,wBAAgB,oBAAoB,CAClC,IAAI,EAAE,cAAc,EACpB,MAAM,EAAE,MAAM,EACd,KAAK,EAAE,SAAS,GACf,OAAO,CAqET"}