keri-ts 0.11.0 → 2.0.0

package/types/app/multisig/grouping.d.ts

@@ -0,0 +1,317 @@
+/**
+ * KERIpy-shaped multisig exchange coordination.
+ *
+ * This module owns the `/multisig/*` EXN family used to coordinate group
+ * registry, credential, reply, and wrapped business EXN proposals. It does not
+ * own group key-event counseling; local group habitat state still lives under
+ * `Habery.makeGroupHab(...)`, `Baser.habs`, and the keeper member stores.
+ */
+import { type CesrFrame, type Kind, Serder, SerderACDC, SerderKERI, type Versionage } from "cesr-ts";
+import { type Operation } from "effection";
+import type { RegistryObserver } from "../../acdc/observing.js";
+import { type RegistryEvent } from "../../acdc/regeventing.js";
+import type { RegistryStore } from "../../acdc/registering.js";
+import { Kevery } from "../../core/kel/eventing.js";
+import { Revery } from "../../core/routing.js";
+import { Exchanger, type ExchangeRouteHandler, type ExchangeRouteVerification } from "../exchanges/exchanging.js";
+import type { Hab, Habery } from "../identity/habbing.js";
+import type { Notifier } from "../notifications/notifying.js";
+/** KERIpy multisig route constants. */
+export declare const MULTISIG_ICP_ROUTE = "/multisig/icp";
+export declare const MULTISIG_ROT_ROUTE = "/multisig/rot";
+export declare const MULTISIG_IXN_ROUTE = "/multisig/ixn";
+export declare const MULTISIG_RIP_ROUTE = "/multisig/rip";
+export declare const MULTISIG_BUP_ROUTE = "/multisig/bup";
+export declare const MULTISIG_VCP_ROUTE = "/multisig/vcp";
+export declare const MULTISIG_ISS_ROUTE = "/multisig/iss";
+export declare const MULTISIG_REV_ROUTE = "/multisig/rev";
+export declare const MULTISIG_EXN_ROUTE = "/multisig/exn";
+export declare const MULTISIG_RPY_ROUTE = "/multisig/rpy";
+/** Local v2 coordination profile routes, as in KERIpy core; not upstream KERI or #1740 routes. */
+export declare const MULTISIG_QRY_ROUTE = "/multisig/qry";
+export declare const MULTISIG_IPEX_PROOF_ROUTE = "/multisig/ipex-proof";
+/** Ordered route list used for handler registration. */
+export declare const MULTISIG_ROUTES: readonly ["/multisig/rip", "/multisig/bup", "/multisig/icp", "/multisig/rot", "/multisig/ixn", "/multisig/vcp", "/multisig/iss", "/multisig/rev", "/multisig/exn", "/multisig/rpy", "/multisig/qry", "/multisig/ipex-proof"];
+export type MultisigRoute = typeof MULTISIG_ROUTES[number];
+/** Event proposal input; each supported route requires its own attributes. Child commitments are derived. */
+export type MultisigEventProposal = {
+    route: typeof MULTISIG_ICP_ROUTE;
+    attrs: {
+        smids: readonly string[];
+        rmids: readonly string[];
+        delegator?: string;
+    };
+} | {
+    route: typeof MULTISIG_ROT_ROUTE;
+    attrs: {
+        gid: string;
+        smids: readonly string[];
+        rmids: readonly string[];
+    };
+} | {
+    route: typeof MULTISIG_IXN_ROUTE;
+    attrs: {
+        gid: string;
+        smids: readonly string[];
+    };
+} | {
+    route: typeof MULTISIG_RPY_ROUTE;
+    attrs: {
+        gid: string;
+    };
+} | {
+    route: typeof MULTISIG_EXN_ROUTE;
+    attrs: {
+        gid: string;
+    };
+} | {
+    route: typeof MULTISIG_QRY_ROUTE;
+    attrs: {
+        gid: string;
+    };
+} | {
+    route: typeof MULTISIG_IPEX_PROOF_ROUTE;
+    attrs: {
+        gid: string;
+    };
+};
+/** Legacy registry proposals require their own named evidence, not arbitrary embed bags. */
+export type MultisigVdrProposal = {
+    route: typeof MULTISIG_VCP_ROUTE;
+    attrs: {
+        gid: string;
+        usage?: string;
+        cgvrsn?: readonly [number, number];
+    };
+    embeds: {
+        vcp: Uint8Array;
+        anc: Uint8Array;
+    };
+} | {
+    route: typeof MULTISIG_ISS_ROUTE;
+    attrs: {
+        gid: string;
+        cgvrsn?: readonly [number, number];
+    };
+    embeds: {
+        acdc: Uint8Array;
+        iss: Uint8Array;
+        anc: Uint8Array;
+    };
+} | {
+    route: typeof MULTISIG_REV_ROUTE;
+    attrs: {
+        gid: string;
+        said: string;
+        cgvrsn?: readonly [number, number];
+    };
+    embeds: {
+        rev: Uint8Array;
+        anc: Uint8Array;
+    };
+};
+/** Build an unsigned legacy VDR wrapper with its required named children. */
+export declare function prepareMultisigVdrExn(sender: string, proposal: MultisigVdrProposal, options?: MultisigBuilderOptions): MultisigMessage;
+interface RawMessage {
+    readonly raw: Uint8Array;
+}
+export interface MultisigBuilderOptions {
+    /** Destination bound into a recipient-specific proposal wrapper. */
+    recipient?: string;
+    /** Explicit attachment genus when a legacy child body does not declare it. */
+    childGvrsn?: Versionage;
+    stamp?: string;
+    date?: string;
+    version?: Versionage;
+    pvrsn?: Versionage;
+    gvrsn?: Versionage | null;
+    kind?: Kind;
+}
+/** Unsigned wrapper plus supplemental path/child bytes; enclose these with parent signatures when sending v2. */
+export type MultisigMessage = readonly [serder: SerderKERI, attachments: Uint8Array];
+export type MultisigDecision = {
+    kind: "accept" | "duplicate";
+    said: string;
+    embeddedSaid: string;
+    route: string;
+    sender: string;
+} | {
+    kind: "reject";
+    said: string;
+    reason: string;
+};
+export interface MultisigHandlerOptions {
+    mux?: Multiplexor;
+    notifier?: Notifier | null;
+    registry?: RegistryObserver | null;
+    messageKevery?: Kevery;
+}
+/** Validate public TEL linkage before proposing or signing an anchor; no state is inferred from b. */
+export declare function registryProposalEvent(tel: SerderACDC, gid: string, store: RegistryStore | null): RegistryEvent | null;
+/** Exact authenticated consent may share an anchor index with unrelated v2 TEL proposals. */
+export declare function sameRegistryProposal(left: SerderKERI, right: SerderKERI): boolean;
+/** Validate both child commitments and every supplied source coordinate without writing evidence. */
+export declare function acdcV2RegistryProposal(wrapper: SerderKERI, nests: readonly CesrFrame[], store: RegistryStore | null): {
+    tel: SerderACDC;
+    anchor: SerderKERI;
+} | null;
+/** Commit one exact ACDC v2 registry/anchor pair using the ordinary nested-wire serializer. */
+export declare function prepareAcdcV2RegistryExn(sender: string, tel: Uint8Array, anchor: Uint8Array, store: RegistryStore | null, options?: MultisigBuilderOptions): Operation<MultisigMessage>;
+/** Coordinate one proposed group inception event. */
+export declare function multisigInceptExn(member: Hab, smids: readonly string[], rmids: readonly string[] | null, icp: Uint8Array | RawMessage, delegator?: string | null, options?: MultisigBuilderOptions): Operation<MultisigMessage>;
+/** Coordinate one proposed group rotation event. */
+export declare function multisigRotateExn(group: string | Hab, member: Hab, smids: readonly string[], rmids: readonly string[], rot: Uint8Array | RawMessage, options?: MultisigBuilderOptions): Operation<MultisigMessage>;
+/** Coordinate one proposed group interaction event. */
+export declare function multisigInteractExn(group: string | Hab, member: Hab, aids: readonly string[], ixn: Uint8Array | RawMessage, options?: MultisigBuilderOptions): Operation<MultisigMessage>;
+/** Coordinate one proposed multisig credential-registry inception. */
+export declare function multisigRegistryInceptExn(group: string | Hab, member: Hab, usage: string, vcp: Uint8Array | RawMessage, anc: Uint8Array | RawMessage, options?: MultisigBuilderOptions): MultisigMessage;
+/** Coordinate one proposed multisig credential issuance. */
+export declare function multisigIssueExn(group: string | Hab, member: Hab, acdc: Uint8Array | RawMessage, iss: Uint8Array | RawMessage, anc: Uint8Array | RawMessage, options?: MultisigBuilderOptions): MultisigMessage;
+/** Coordinate one proposed multisig credential revocation. */
+export declare function multisigRevokeExn(group: string | Hab, member: Hab, said: string, rev: Uint8Array | RawMessage, anc: Uint8Array | RawMessage, options?: MultisigBuilderOptions): MultisigMessage;
+/** Coordinate one proposed multisig reply event. */
+export declare function multisigRpyExn(group: string | Hab, member: Hab, rpy: Uint8Array | RawMessage, options?: MultisigBuilderOptions): Operation<MultisigMessage>;
+/**
+ * Propose one exact signed v2 query authored by the group to its members.
+ *
+ * KERIpy `multisigQueryExn`: local v2 coordination profile route `/multisig/qry`
+ * whose `a` is `{gid, qry}` and whose single nested substream is the query stream.
+ */
+export declare function multisigQueryExn(group: string | Hab, member: Hab, qry: Uint8Array | RawMessage, options?: Omit<MultisigBuilderOptions, "version" | "pvrsn">): Operation<MultisigMessage>;
+/**
+ * Share one exact v2 IPEX Grant stream, with its proofs, with group members.
+ *
+ * KERIpy `multisigIpexProofExn`: local v2 coordination profile route
+ * `/multisig/ipex-proof` whose `a` is `{gid, grant}` and whose single nested
+ * substream is the complete Grant stream, authored by or addressed to the group.
+ */
+export declare function multisigIpexProofExn(group: string | Hab, member: Hab, grant: Uint8Array | RawMessage, options?: Omit<MultisigBuilderOptions, "version" | "pvrsn">): Operation<MultisigMessage>;
+/** Wrap one business EXN, such as `/ipex/grant`, for group approval. */
+export declare function multisigExn(group: string | Hab, member: Hab, exn: Uint8Array | RawMessage, options?: MultisigBuilderOptions): MultisigMessage;
+/**
+ * Construct only the v2 parent body from an already parsed KERI child.
+ * This synchronous boundary checks the route/ilk and commits the child's SAID;
+ * it neither authenticates child proofs nor reads, adopts, or disposes any payload.
+ * Callers with a CesrFrame borrow its wire through nestedPayload(frame, Vrsn_2_0).
+ */
+export declare function multisigExnBody(sender: string, proposal: MultisigEventProposal, child: SerderKERI, options?: Omit<MultisigBuilderOptions, "childGvrsn">): SerderKERI;
+/** Signed replay hint for a legacy child whose attachments use a different genus. */
+export declare function multisigChildGenusAttrs(child: Serder, genus: Versionage): {
+    cgvrsn?: readonly [number, number];
+};
+/**
+ * Prepare finite child input, construct the parent and serialize its nested evidence.
+ * KEL (icp/rot/ixn) and reply proposals default to KERIpy's form for both v1 and v2
+ * groups: a v1 wrapper with a named `e` embed and pathed child attachments in the
+ * child's own genus. The group's version is the child KEL/reply version; the wrapper
+ * is only the coordination envelope. Other routes default to v2 nested wrappers, and
+ * an explicit `version`/`pvrsn` selects either form. The v1 pathed path retains
+ * its established encoding; v2 delegates parsing to parseBytes
+ * once and borrows the resulting child only until nestedPayload has been fully consumed.
+ * Parsed child evidence consists of ordinary values; serialization observes cancellation.
+ * Sending v2 requires enclosing these bytes and the parent's signatures together.
+ */
+export declare function prepareMultisigEventExn(sender: string, proposal: MultisigEventProposal, wire: Uint8Array, options?: MultisigBuilderOptions): Operation<MultisigMessage>;
+/** Route handler that forwards accepted multisig EXNs to the `Multiplexor`. */
+export declare class MultisigNotificationHandler implements ExchangeRouteHandler {
+    readonly resource: MultisigRoute;
+    private readonly mux;
+    /** Bind one registered route to its shared approval coordinator. */
+    constructor(resource: MultisigRoute, mux: Multiplexor);
+    /** Only supported nested multisig routes have child consumers. */
+    get acceptsNests(): boolean;
+    /**
+     * Authenticate the signed child relationship before exchange evidence is published.
+     * A child handler registered with `Multiplexor.addChildHandler` for this route and
+     * the nested child's route owns verification instead.
+     */
+    verify(args: Parameters<NonNullable<ExchangeRouteHandler["verify"]>>[0]): ExchangeRouteVerification;
+    /** Borrow persisted children until approval replay and coordination indexing finish. */
+    handle(args: Parameters<ExchangeRouteHandler["handle"]>[0]): Operation<void>;
+}
+/** Register the KERIpy multisig route family with one exchanger. */
+export declare function loadMultisigHandlers(hby: Habery, exchanger: Exchanger, options?: MultisigHandlerOptions): Multiplexor;
+/**
+ * KERIpy `Multiplexor` analogue.
+ *
+ * The `meids.` and `maids.` indexes group proposals by embedded payload SAID so
+ * later approval/completion logic can find all submitters for the same payload.
+ */
+export declare class Multiplexor {
+    readonly hby: Habery;
+    readonly notifier: Notifier | null;
+    /** Approval replay owns separate processors, as in frozen KERIpy Multiplexor. */
+    readonly kvy: Kevery;
+    readonly rvy: Revery;
+    private readonly replay;
+    private readonly exchanger?;
+    private readonly registry?;
+    private readonly messageKevery;
+    /** Owners sharing one registered wrapper route, keyed by wrapper and nested child route. */
+    private readonly childHandlers;
+    /** Reuse durable group membership and separate child processors without sharing parent proof state. */
+    constructor(hby: Habery, { notifier, exchanger, registry, messageKevery }?: {
+        notifier?: Notifier | null;
+        exchanger?: Exchanger;
+        registry?: RegistryObserver;
+        messageKevery?: Kevery;
+    });
+    /**
+     * Delegate one wrapper route's v2 children with route `child` to `handler`.
+     *
+     * KERIpy `Multiplexor.addChildHandler`: several owners share one registered
+     * `/multisig/*` Exchanger route without replacing `Exchanger.routes` entries.
+     * The delegate's `verify` and `handle` own all validation, indexing and
+     * notification for those children; the Multiplexor performs none of them.
+     * Registering a key twice is refused.
+     */
+    addChildHandler(route: string, child: string, handler: ExchangeRouteHandler): void;
+    /**
+     * Release a finite owner's delegation. A TypeScript runtime can outlive one
+     * command phase, unlike KERIpy's per-process CLI owners; the shared route stays.
+     */
+    removeChildHandler(route: string, child: string, handler: ExchangeRouteHandler): void;
+    /** Return the delegate for this v2 wrapper's single child route, if any. */
+    childHandlerFor(serder: SerderKERI, nests?: readonly CesrFrame[]): ExchangeRouteHandler | null;
+    /** V2 child replay borrows the caller's configured IPEX, registry, reply and KRAM owners. */
+    private v2IpexOwners;
+    /** Index an authenticated proposal; child acceptance still requires local approval and its own proofs. */
+    add(serder: SerderKERI, nests?: readonly CesrFrame[]): Operation<MultisigDecision>;
+    /** Return true when this wrapper can be accepted for local group work. */
+    verify(serder: SerderKERI, nests?: readonly CesrFrame[]): boolean;
+    /** Process only the approved direct child; arbitrary descendants remain guarded. */
+    private processApproved;
+    /** Replay v1 children with their own stored proofs and signed attachment genus, as KERIpy does. */
+    private processLegacyApproved;
+    /** Reopen stored evidence and revalidate it before approved protocol processing. */
+    private replayApproved;
+    /** Check route, child body commitment, and membership without mutating durable state. */
+    private inspect;
+    /** Return all stored wrapper EXNs for one embedded payload SAID. */
+    get(embeddedSaid: string): Array<{
+        exn: Record<string, unknown>;
+        paths: Record<string, string>;
+    }>;
+    /** Apply local habitat membership to an already decoded request. */
+    private verifyMembership;
+    private isLocalHab;
+}
+/** Extract the embedded business EXN SAD from a `/multisig/exn` wrapper. */
+export declare function embeddedBusinessExnSAD(serder: SerderKERI): Record<string, unknown> | null;
+/** Decoded v1 child and its own proof bytes; the signed hint cannot override a body's explicit genus. */
+export interface MultisigChild {
+    event: SerderKERI;
+    attachment: Uint8Array;
+    genus: Versionage;
+}
+/** Read one stored v1 child at the wire boundary, without authenticating its independent proof. */
+export declare function multisigChild(hby: Habery, wrapper: SerderKERI, label: string): MultisigChild | null;
+/** Resolve the stored proof and signed genus independently of the child protocol. */
+export declare function multisigChildEvidence(hby: Habery, wrapper: SerderKERI, label: string, child: Serder): {
+    attachment: Uint8Array;
+    genus: Versionage;
+};
+/** Extract raw attachment bytes for one label from a stored multisig wrapper. */
+export declare function multisigPathedAttachment(hby: Habery, wrapperSaid: string, label: string): Uint8Array;
+export {};
+//# sourceMappingURL=grouping.d.ts.map

package/types/app/multisig/grouping.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"grouping.d.ts","sourceRoot":"","sources":["../../../src/app/multisig/grouping.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AACH,OAAO,EACL,KAAK,SAAS,EAId,KAAK,IAAI,EAOT,MAAM,EACN,UAAU,EACV,UAAU,EACV,KAAK,UAAU,EAGhB,MAAM,SAAS,CAAC;AACjB,OAAO,EAAgB,KAAK,SAAS,EAAE,MAAM,WAAW,CAAC;AACzD,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,yBAAyB,CAAC;AAChE,OAAO,EAAE,KAAK,aAAa,EAA+B,MAAM,2BAA2B,CAAC;AAC5F,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,2BAA2B,CAAC;AAU/D,OAAO,EAAE,MAAM,EAAE,MAAM,4BAA4B,CAAC;AACpD,OAAO,EAA0B,MAAM,EAAU,MAAM,uBAAuB,CAAC;AAC/E,OAAO,EAAE,SAAS,EAAE,KAAK,oBAAoB,EAAE,KAAK,yBAAyB,EAAE,MAAM,4BAA4B,CAAC;AAClH,OAAO,KAAK,EAAE,GAAG,EAAE,MAAM,EAAE,MAAM,wBAAwB,CAAC;AAE1D,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,+BAA+B,CAAC;AAM9D,uCAAuC;AACvC,eAAO,MAAM,kBAAkB,kBAAkB,CAAC;AAClD,eAAO,MAAM,kBAAkB,kBAAkB,CAAC;AAClD,eAAO,MAAM,kBAAkB,kBAAkB,CAAC;AAClD,eAAO,MAAM,kBAAkB,kBAAkB,CAAC;AAClD,eAAO,MAAM,kBAAkB,kBAAkB,CAAC;AAClD,eAAO,MAAM,kBAAkB,kBAAkB,CAAC;AAClD,eAAO,MAAM,kBAAkB,kBAAkB,CAAC;AAClD,eAAO,MAAM,kBAAkB,kBAAkB,CAAC;AAClD,eAAO,MAAM,kBAAkB,kBAAkB,CAAC;AAClD,eAAO,MAAM,kBAAkB,kBAAkB,CAAC;AAClD,kGAAkG;AAClG,eAAO,MAAM,kBAAkB,kBAAkB,CAAC;AAClD,eAAO,MAAM,yBAAyB,yBAAyB,CAAC;AAEhE,wDAAwD;AACxD,eAAO,MAAM,eAAe,8NAalB,CAAC;AAKX,MAAM,MAAM,aAAa,GAAG,OAAO,eAAe,CAAC,MAAM,CAAC,CAAC;AAE3D,6GAA6G;AAC7G,MAAM,MAAM,qBAAqB,GAC7B;IACA,KAAK,EAAE,OAAO,kBAAkB,CAAC;IACjC,KAAK,EAAE;QAAE,KAAK,EAAE,SAAS,MAAM,EAAE,CAAC;QAAC,KAAK,EAAE,SAAS,MAAM,EAAE,CAAC;QAAC,SAAS,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC;CACnF,GACC;IACA,KAAK,EAAE,OAAO,kBAAkB,CAAC;IACjC,KAAK,EAAE;QAAE,GAAG,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,SAAS,MAAM,EAAE,CAAC;QAAC,KAAK,EAAE,SAAS,MAAM,EAAE,CAAA;KAAE,CAAC;CAC5E,GACC;IACA,KAAK,EAAE,OAAO,kBAAkB,CAAC;IACjC,KAAK,EAAE;QAAE,GAAG,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,SAAS,MAAM,EAAE,CAAA;KAAE,CAAC;CAClD,GACC;IAAE,KAAK,EAAE,OAAO,kBAAkB,CAAC;IAAC,KAAK,EAAE;QAAE,GAAG,EAAE,MAAM,CAAA;KAAE,CAAA;CAAE,GAC5D;IAAE,KAAK,EAAE,OAAO,kBAAkB,CAAC;IAAC,KAAK,EAAE;QAAE,GAAG,EAAE,MAAM,CAAA;KAAE,CAAA;CAAE,GAC5D;IAAE,KAAK,EAAE,OAAO,kBAAkB,CAAC;IAAC,KAAK,EAAE;QAAE,GAAG,EAAE,MAAM,CAAA;KAAE,CAAA;CAAE,GAC5D;IAAE,KAAK,EAAE,OAAO,yBAAyB,CAAC;IAAC,KAAK,EAAE;QAAE,GAAG,EAAE,MAAM,CAAA;KAAE,CAAA;CAAE,CAAC;AAExE,4FAA4F;AAC5F,MAAM,MAAM,mBAAmB,GAC3B;IACA,KAAK,EAAE,OAAO,kBAAkB,CAAC;IACjC,KAAK,EAAE;QAAE,GAAG,EAAE,MAAM,CAAC;QAAC,KAAK,CAAC,EAAE,MAAM,CAAC;QAAC,MAAM,CAAC,EAAE,SAAS,CAAC,MAAM,EAAE,MAAM,CAAC,CAAA;KAAE,CAAC;IAC3E,MAAM,EAAE;QAAE,GAAG,EAAE,UAAU,CAAC;QAAC,GAAG,EAAE,UAAU,CAAA;KAAE,CAAC;CAC9C,GACC;IACA,KAAK,EAAE,OAAO,kBAAkB,CAAC;IACjC,KAAK,EAAE;QAAE,GAAG,EAAE,MAAM,CAAC;QAAC,MAAM,CAAC,EAAE,SAAS,CAAC,MAAM,EAAE,MAAM,CAAC,CAAA;KAAE,CAAC;IAC3D,MAAM,EAAE;QAAE,IAAI,EAAE,UAAU,CAAC;QAAC,GAAG,EAAE,UAAU,CAAC;QAAC,GAAG,EAAE,UAAU,CAAA;KAAE,CAAC;CAChE,GACC;IACA,KAAK,EAAE,OAAO,kBAAkB,CAAC;IACjC,KAAK,EAAE;QAAE,GAAG,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAC;QAAC,MAAM,CAAC,EAAE,SAAS,CAAC,MAAM,EAAE,MAAM,CAAC,CAAA;KAAE,CAAC;IACzE,MAAM,EAAE;QAAE,GAAG,EAAE,UAAU,CAAC;QAAC,GAAG,EAAE,UAAU,CAAA;KAAE,CAAC;CAC9C,CAAC;AAEJ,6EAA6E;AAC7E,wBAAgB,qBAAqB,CACnC,MAAM,EAAE,MAAM,EACd,QAAQ,EAAE,mBAAmB,EAC7B,OAAO,GAAE,sBAA2B,GACnC,eAAe,CAEjB;AAED,UAAU,UAAU;IAClB,QAAQ,CAAC,GAAG,EAAE,UAAU,CAAC;CAC1B;AAED,MAAM,WAAW,sBAAsB;IACrC,oEAAoE;IACpE,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,8EAA8E;IAC9E,UAAU,CAAC,EAAE,UAAU,CAAC;IACxB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,OAAO,CAAC,EAAE,UAAU,CAAC;IACrB,KAAK,CAAC,EAAE,UAAU,CAAC;IACnB,KAAK,CAAC,EAAE,UAAU,GAAG,IAAI,CAAC;IAC1B,IAAI,CAAC,EAAE,IAAI,CAAC;CACb;AAED,iHAAiH;AACjH,MAAM,MAAM,eAAe,GAAG,SAAS,CAAC,MAAM,EAAE,UAAU,EAAE,WAAW,EAAE,UAAU,CAAC,CAAC;AAErF,MAAM,MAAM,gBAAgB,GACxB;IACA,IAAI,EAAE,QAAQ,GAAG,WAAW,CAAC;IAC7B,IAAI,EAAE,MAAM,CAAC;IACb,YAAY,EAAE,MAAM,CAAC;IACrB,KAAK,EAAE,MAAM,CAAC;IACd,MAAM,EAAE,MAAM,CAAC;CAChB,GACC;IACA,IAAI,EAAE,QAAQ,CAAC;IACf,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,EAAE,MAAM,CAAC;CAChB,CAAC;AAsBJ,MAAM,WAAW,sBAAsB;IACrC,GAAG,CAAC,EAAE,WAAW,CAAC;IAClB,QAAQ,CAAC,EAAE,QAAQ,GAAG,IAAI,CAAC;IAC3B,QAAQ,CAAC,EAAE,gBAAgB,GAAG,IAAI,CAAC;IACnC,aAAa,CAAC,EAAE,MAAM,CAAC;CACxB;AAED,sGAAsG;AACtG,wBAAgB,qBAAqB,CAAC,GAAG,EAAE,UAAU,EAAE,GAAG,EAAE,MAAM,EAAE,KAAK,EAAE,aAAa,GAAG,IAAI,GAAG,aAAa,GAAG,IAAI,CAwBrH;AAED,6FAA6F;AAC7F,wBAAgB,oBAAoB,CAAC,IAAI,EAAE,UAAU,EAAE,KAAK,EAAE,UAAU,GAAG,OAAO,CAKjF;AAED,qGAAqG;AACrG,wBAAgB,sBAAsB,CAAC,OAAO,EAAE,UAAU,EAAE,KAAK,EAAE,SAAS,SAAS,EAAE,EAAE,KAAK,EAAE,aAAa,GAAG,IAAI;;;SAsCnH;AAOD,+FAA+F;AAC/F,wBAAiB,wBAAwB,CACvC,MAAM,EAAE,MAAM,EACd,GAAG,EAAE,UAAU,EACf,MAAM,EAAE,UAAU,EAClB,KAAK,EAAE,aAAa,GAAG,IAAI,EAC3B,OAAO,GAAE,sBAA2B,GACnC,SAAS,CAAC,eAAe,CAAC,CAqB5B;AAED,qDAAqD;AACrD,wBAAiB,iBAAiB,CAChC,MAAM,EAAE,GAAG,EACX,KAAK,EAAE,SAAS,MAAM,EAAE,EACxB,KAAK,EAAE,SAAS,MAAM,EAAE,GAAG,IAAI,EAC/B,GAAG,EAAE,UAAU,GAAG,UAAU,EAC5B,SAAS,CAAC,EAAE,MAAM,GAAG,IAAI,EACzB,OAAO,GAAE,sBAA2B,GACnC,SAAS,CAAC,eAAe,CAAC,CAc5B;AAED,oDAAoD;AACpD,wBAAiB,iBAAiB,CAChC,KAAK,EAAE,MAAM,GAAG,GAAG,EACnB,MAAM,EAAE,GAAG,EACX,KAAK,EAAE,SAAS,MAAM,EAAE,EACxB,KAAK,EAAE,SAAS,MAAM,EAAE,EACxB,GAAG,EAAE,UAAU,GAAG,UAAU,EAC5B,OAAO,GAAE,sBAA2B,GACnC,SAAS,CAAC,eAAe,CAAC,CAc5B;AAED,uDAAuD;AACvD,wBAAiB,mBAAmB,CAClC,KAAK,EAAE,MAAM,GAAG,GAAG,EACnB,MAAM,EAAE,GAAG,EACX,IAAI,EAAE,SAAS,MAAM,EAAE,EACvB,GAAG,EAAE,UAAU,GAAG,UAAU,EAC5B,OAAO,GAAE,sBAA2B,GACnC,SAAS,CAAC,eAAe,CAAC,CAa5B;AAED,sEAAsE;AACtE,wBAAgB,yBAAyB,CACvC,KAAK,EAAE,MAAM,GAAG,GAAG,EACnB,MAAM,EAAE,GAAG,EACX,KAAK,EAAE,MAAM,EACb,GAAG,EAAE,UAAU,GAAG,UAAU,EAC5B,GAAG,EAAE,UAAU,GAAG,UAAU,EAC5B,OAAO,GAAE,sBAA2B,GACnC,eAAe,CAMjB;AAED,4DAA4D;AAC5D,wBAAgB,gBAAgB,CAC9B,KAAK,EAAE,MAAM,GAAG,GAAG,EACnB,MAAM,EAAE,GAAG,EACX,IAAI,EAAE,UAAU,GAAG,UAAU,EAC7B,GAAG,EAAE,UAAU,GAAG,UAAU,EAC5B,GAAG,EAAE,UAAU,GAAG,UAAU,EAC5B,OAAO,GAAE,sBAA2B,GACnC,eAAe,CAMjB;AAED,8DAA8D;AAC9D,wBAAgB,iBAAiB,CAC/B,KAAK,EAAE,MAAM,GAAG,GAAG,EACnB,MAAM,EAAE,GAAG,EACX,IAAI,EAAE,MAAM,EACZ,GAAG,EAAE,UAAU,GAAG,UAAU,EAC5B,GAAG,EAAE,UAAU,GAAG,UAAU,EAC5B,OAAO,GAAE,sBAA2B,GACnC,eAAe,CAMjB;AAED,oDAAoD;AACpD,wBAAiB,cAAc,CAC7B,KAAK,EAAE,MAAM,GAAG,GAAG,EACnB,MAAM,EAAE,GAAG,EACX,GAAG,EAAE,UAAU,GAAG,UAAU,EAC5B,OAAO,GAAE,sBAA2B,GACnC,SAAS,CAAC,eAAe,CAAC,CAY5B;AAED;;;;;GAKG;AACH,wBAAiB,gBAAgB,CAC/B,KAAK,EAAE,MAAM,GAAG,GAAG,EACnB,MAAM,EAAE,GAAG,EACX,GAAG,EAAE,UAAU,GAAG,UAAU,EAC5B,OAAO,GAAE,IAAI,CAAC,sBAAsB,EAAE,SAAS,GAAG,OAAO,CAAM,GAC9D,SAAS,CAAC,eAAe,CAAC,CAO5B;AAED;;;;;;GAMG;AACH,wBAAiB,oBAAoB,CACnC,KAAK,EAAE,MAAM,GAAG,GAAG,EACnB,MAAM,EAAE,GAAG,EACX,KAAK,EAAE,UAAU,GAAG,UAAU,EAC9B,OAAO,GAAE,IAAI,CAAC,sBAAsB,EAAE,SAAS,GAAG,OAAO,CAAM,GAC9D,SAAS,CAAC,eAAe,CAAC,CAO5B;AAED,wEAAwE;AACxE,wBAAgB,WAAW,CACzB,KAAK,EAAE,MAAM,GAAG,GAAG,EACnB,MAAM,EAAE,GAAG,EACX,GAAG,EAAE,UAAU,GAAG,UAAU,EAC5B,OAAO,GAAE,sBAA2B,GACnC,eAAe,CAOjB;AACD;;;;;GAKG;AACH,wBAAgB,eAAe,CAC7B,MAAM,EAAE,MAAM,EACd,QAAQ,EAAE,qBAAqB,EAC/B,KAAK,EAAE,UAAU,EACjB,OAAO,GAAE,IAAI,CAAC,sBAAsB,EAAE,YAAY,CAAM,GACvD,UAAU,CAiBZ;AA2BD,qFAAqF;AACrF,wBAAgB,uBAAuB,CACrC,KAAK,EAAE,MAAM,EACb,KAAK,EAAE,UAAU,GAChB;IAAE,MAAM,CAAC,EAAE,SAAS,CAAC,MAAM,EAAE,MAAM,CAAC,CAAA;CAAE,CAIxC;AACD;;;;;;;;;;;GAWG;AACH,wBAAiB,uBAAuB,CACtC,MAAM,EAAE,MAAM,EACd,QAAQ,EAAE,qBAAqB,EAC/B,IAAI,EAAE,UAAU,EAChB,OAAO,GAAE,sBAA2B,GACnC,SAAS,CAAC,eAAe,CAAC,CAkC5B;AAeD,+EAA+E;AAC/E,qBAAa,2BAA4B,YAAW,oBAAoB;IACtE,QAAQ,CAAC,QAAQ,EAAE,aAAa,CAAC;IACjC,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAc;IAElC,oEAAoE;gBACxD,QAAQ,EAAE,aAAa,EAAE,GAAG,EAAE,WAAW;IAKrD,kEAAkE;IAClE,IAAI,YAAY,IAAI,OAAO,CAE1B;IAED;;;;OAIG;IACH,MAAM,CAAC,IAAI,EAAE,UAAU,CAAC,WAAW,CAAC,oBAAoB,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,yBAAyB;IAMnG,wFAAwF;IACvF,MAAM,CAAC,IAAI,EAAE,UAAU,CAAC,oBAAoB,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,SAAS,CAAC,IAAI,CAAC;CAS9E;AAED,oEAAoE;AACpE,wBAAgB,oBAAoB,CAClC,GAAG,EAAE,MAAM,EACX,SAAS,EAAE,SAAS,EACpB,OAAO,GAAE,sBAA2B,GACnC,WAAW,CAYb;AACD;;;;;GAKG;AACH,qBAAa,WAAW;IACtB,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;IACrB,QAAQ,CAAC,QAAQ,EAAE,QAAQ,GAAG,IAAI,CAAC;IACnC,iFAAiF;IACjF,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;IACrB,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;IACrB,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAY;IACnC,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAY;IACvC,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAmB;IAC7C,OAAO,CAAC,QAAQ,CAAC,aAAa,CAAS;IACvC,4FAA4F;IAC5F,OAAO,CAAC,QAAQ,CAAC,aAAa,CAA2C;IAEzE,uGAAuG;gBAErG,GAAG,EAAE,MAAM,EACX,EAAE,QAAQ,EAAE,SAAS,EAAE,QAAQ,EAAE,aAAa,EAAE,GAAE;QAChD,QAAQ,CAAC,EAAE,QAAQ,GAAG,IAAI,CAAC;QAC3B,SAAS,CAAC,EAAE,SAAS,CAAC;QACtB,QAAQ,CAAC,EAAE,gBAAgB,CAAC;QAC5B,aAAa,CAAC,EAAE,MAAM,CAAC;KACnB;IAiBR;;;;;;;;OAQG;IACH,eAAe,CAAC,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,OAAO,EAAE,oBAAoB,GAAG,IAAI;IAQlF;;;OAGG;IACH,kBAAkB,CAAC,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,OAAO,EAAE,oBAAoB,GAAG,IAAI;IAKrF,4EAA4E;IAC5E,eAAe,CAAC,MAAM,EAAE,UAAU,EAAE,KAAK,GAAE,SAAS,SAAS,EAAO,GAAG,oBAAoB,GAAG,IAAI;IAOlG,6FAA6F;IAC7F,OAAO,CAAC,YAAY;IAUpB,0GAA0G;IACzG,GAAG,CAAC,MAAM,EAAE,UAAU,EAAE,KAAK,GAAE,SAAS,SAAS,EAAO,GAAG,SAAS,CAAC,gBAAgB,CAAC;IAiEvF,0EAA0E;IAC1E,MAAM,CAAC,MAAM,EAAE,UAAU,EAAE,KAAK,GAAE,SAAS,SAAS,EAAO,GAAG,OAAO;IAIrE,oFAAoF;IACpF,OAAO,CAAE,eAAe;IAoBxB,mGAAmG;IACnG,OAAO,CAAE,qBAAqB;IAwB9B,oFAAoF;IACpF,OAAO,CAAC,cAAc;IAiDtB,yFAAyF;IACzF,OAAO,CAAC,OAAO;IA8Ff,oEAAoE;IACpE,GAAG,CAAC,YAAY,EAAE,MAAM,GAAG,KAAK,CAAC;QAAE,GAAG,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;QAAC,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAA;KAAE,CAAC;IAejG,oEAAoE;IACpE,OAAO,CAAC,gBAAgB;IAcxB,OAAO,CAAC,UAAU;CAGnB;AAED,4EAA4E;AAC5E,wBAAgB,sBAAsB,CAAC,MAAM,EAAE,UAAU,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI,CAIzF;AAED,yGAAyG;AACzG,MAAM,WAAW,aAAa;IAC5B,KAAK,EAAE,UAAU,CAAC;IAClB,UAAU,EAAE,UAAU,CAAC;IACvB,KAAK,EAAE,UAAU,CAAC;CACnB;AACD,mGAAmG;AACnG,wBAAgB,aAAa,CAAC,GAAG,EAAE,MAAM,EAAE,OAAO,EAAE,UAAU,EAAE,KAAK,EAAE,MAAM,GAAG,aAAa,GAAG,IAAI,CAOnG;AAED,qFAAqF;AACrF,wBAAgB,qBAAqB,CACnC,GAAG,EAAE,MAAM,EACX,OAAO,EAAE,UAAU,EACnB,KAAK,EAAE,MAAM,EACb,KAAK,EAAE,MAAM,GACZ;IAAE,UAAU,EAAE,UAAU,CAAC;IAAC,KAAK,EAAE,UAAU,CAAA;CAAE,CAI/C;AAED,iFAAiF;AACjF,wBAAgB,wBAAwB,CACtC,GAAG,EAAE,MAAM,EACX,WAAW,EAAE,MAAM,EACnB,KAAK,EAAE,MAAM,GACZ,UAAU,CASZ"}

package/types/app/multisig/multisig-messaging.d.ts

@@ -0,0 +1,97 @@
+/**
+ * Common signing, exact local admission and sending for multisig coordination.
+ * KERI workflows own proposal/approval policy; Tufa projects returned facts into
+ * CLI output. This module neither formats output nor starts a delivery worker.
+ *
+ * The outer EXN is recipient-specific. Its exnSaid is the join --said selector;
+ * payloadSaid identifies the Multiplexor aggregation shared by contributions.
+ * Neither completed transport nor collection of these identities proves group
+ * acceptance. Callers must check their own accepted KEL/RPY/TEL/credential state.
+ */
+import { type SerderKERI } from "cesr-ts";
+import type { Operation } from "effection";
+import type { Baser } from "../../db/basing.js";
+import type { Poster } from "../delivery/forwarding.js";
+import type { Exchanger } from "../exchanges/exchanging.js";
+import type { Hab, Habery } from "../identity/habbing.js";
+import type { Reactor } from "../protocol/reactor.js";
+import type { MultisigMessage } from "./grouping.js";
+/** Recipient-specific wrapper identity and its shared Multiplexor proposal index key. */
+export interface GroupMessageRef {
+    /** Intended participant AID; this is not a resolved transport URL. */
+    recipient: string;
+    /** Outer multisig coordination EXN SAID; also selected by join --said. */
+    exnSaid: string;
+    /** Multiplexor key: v1 embedded-bundle SAID or supported v2 signed-child SAID. */
+    payloadSaid: string;
+}
+/** Complete signed proposal ready for local admission or concrete transmission. */
+export interface SignedGroupMessage extends GroupMessageRef {
+    src: string;
+    message: Uint8Array;
+}
+/** Completed transport destinations, not participant approval or group acceptance. */
+export interface GroupDelivery extends GroupMessageRef {
+    /** Successful transport destinations reported by this one concrete Poster admission. */
+    deliveries: string[];
+}
+/** Public publication facts for exact selection, without treating transport as approval. */
+export interface GroupSendResult {
+    /** Recipient-specific outer/aggregate identities, in completed send order. */
+    messages: GroupMessageRef[];
+    /** Flattened completed destinations, preserving order and any repeats across messages. */
+    deliveries: string[];
+}
+/** Select unique remote member AIDs, preserving the supplied member order. */
+export declare function remoteGroupMembers(hby: Habery, member: Hab, recipients: readonly string[]): string[];
+/**
+ * Read the proposal index identity without authenticating its evidence.
+ * V1 commits the embedded bundle; v2 signs one child SAID. Multiplexor verifies
+ * those commitments and owns accepted proposal/submitter indexes separately.
+ */
+export declare function multisigPayloadSaid(serder: SerderKERI): string | null;
+/** Read the legacy embedded bundle using the same shape as Multiplexor verification. */
+export declare function multisigEmbeddedSection(ked: Record<string, unknown>): Record<string, unknown> | null;
+/**
+ * Find an accepted local contribution in the ordinary Multiplexor index.
+ * An optional destination selects its original recipient-specific wrapper.
+ * The index locates evidence; accepted sender, route and payload must all agree.
+ */
+export declare function storedGroupMessage(db: Baser, member: string, proposal: SerderKERI, recipient?: string): SerderKERI | null;
+/**
+ * Reconstruct an existing recipient wrapper, or sign its first publication.
+ * Replay validates retained authentication and preserves the original EXN SAID;
+ * a retry never replaces an already recorded wrapper with a new timestamp/nonce.
+ * Missing fanout destinations can still receive the same approved child in a
+ * newly signed outer wrapper. No group-event signature is made here.
+ */
+export declare function prepareGroupMessage(exchanger: Exchanger, member: Hab, recipient: string, prepared: MultisigMessage): Operation<SignedGroupMessage>;
+/**
+ * Endorse one prepared outer EXN once, retaining its accompanying child evidence.
+ * Extracting payloadSaid here checks shape, not authentication or approval;
+ * Multiplexor validates the commitment during normal protocol intake.
+ * The prepared tuple supplies the EXN Serder and accompanying child attachments.
+ *
+ * @param member Local participant signing Hab, distinct from the group AID.
+ * @param recipient Intended remote participant, already resolved by the workflow.
+ * @returns One signed packet reused for local admission and remote publication.
+ */
+export declare function signGroupMessage(member: Hab, recipient: string, [serder, attachments]: MultisigMessage): SignedGroupMessage;
+/**
+ * Publish prepared bytes on the multisig topic and await this admission's outcome.
+ * The caller must run Poster.deliverDo concurrently and keep its stores alive.
+ * A failed outcome throws its original error; earlier successful fanout is not
+ * rolled back. Cancellation stops observation, not already admitted delivery.
+ * Returning reports completed destinations, never participant approval.
+ */
+export declare function sendGroupMessage(postman: Poster, prepared: SignedGroupMessage): Operation<GroupDelivery>;
+/** Collect successful recipient outcomes into message identities and completed target URLs. */
+export declare function groupSendResult(outcomes: readonly GroupDelivery[]): GroupSendResult;
+/**
+ * Process the exact signed local contribution before admitting remote delivery,
+ * so an immediate peer reply cannot outrun local Multiplexor evidence. Await
+ * normal intake, then send the same bytes without signing again. Intake or send
+ * failures propagate; no cross-store/network transaction is implied.
+ */
+export declare function admitAndSendGroupMessage(input: Reactor, postman: Poster, prepared: SignedGroupMessage): Operation<GroupDelivery>;
+//# sourceMappingURL=multisig-messaging.d.ts.map

package/types/app/multisig/multisig-messaging.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"multisig-messaging.d.ts","sourceRoot":"","sources":["../../../src/app/multisig/multisig-messaging.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AACH,OAAO,EAAwB,KAAK,UAAU,EAAY,MAAM,SAAS,CAAC;AAC1E,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,WAAW,CAAC;AAE3C,OAAO,KAAK,EAAE,KAAK,EAAE,MAAM,oBAAoB,CAAC;AAChD,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,2BAA2B,CAAC;AACxD,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,4BAA4B,CAAC;AAC5D,OAAO,KAAK,EAAE,GAAG,EAAE,MAAM,EAAE,MAAM,wBAAwB,CAAC;AAC1D,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,wBAAwB,CAAC;AAItD,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,eAAe,CAAC;AAErD,yFAAyF;AACzF,MAAM,WAAW,eAAe;IAC9B,sEAAsE;IACtE,SAAS,EAAE,MAAM,CAAC;IAClB,0EAA0E;IAC1E,OAAO,EAAE,MAAM,CAAC;IAChB,kFAAkF;IAClF,WAAW,EAAE,MAAM,CAAC;CACrB;AAED,mFAAmF;AACnF,MAAM,WAAW,kBAAmB,SAAQ,eAAe;IACzD,GAAG,EAAE,MAAM,CAAC;IACZ,OAAO,EAAE,UAAU,CAAC;CACrB;AAED,sFAAsF;AACtF,MAAM,WAAW,aAAc,SAAQ,eAAe;IACpD,wFAAwF;IACxF,UAAU,EAAE,MAAM,EAAE,CAAC;CACtB;AAED,4FAA4F;AAC5F,MAAM,WAAW,eAAe;IAC9B,8EAA8E;IAC9E,QAAQ,EAAE,eAAe,EAAE,CAAC;IAC5B,0FAA0F;IAC1F,UAAU,EAAE,MAAM,EAAE,CAAC;CACtB;AAED,8EAA8E;AAC9E,wBAAgB,kBAAkB,CAAC,GAAG,EAAE,MAAM,EAAE,MAAM,EAAE,GAAG,EAAE,UAAU,EAAE,SAAS,MAAM,EAAE,GAAG,MAAM,EAAE,CAEpG;AAED;;;;GAIG;AACH,wBAAgB,mBAAmB,CAAC,MAAM,EAAE,UAAU,GAAG,MAAM,GAAG,IAAI,CAUrE;AAED,wFAAwF;AACxF,wBAAgB,uBAAuB,CAAC,GAAG,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI,CAMpG;AAYD;;;;GAIG;AACH,wBAAgB,kBAAkB,CAChC,EAAE,EAAE,KAAK,EACT,MAAM,EAAE,MAAM,EACd,QAAQ,EAAE,UAAU,EACpB,SAAS,CAAC,EAAE,MAAM,GACjB,UAAU,GAAG,IAAI,CAcnB;AAED;;;;;;GAMG;AACH,wBAAiB,mBAAmB,CAClC,SAAS,EAAE,SAAS,EACpB,MAAM,EAAE,GAAG,EACX,SAAS,EAAE,MAAM,EACjB,QAAQ,EAAE,eAAe,GACxB,SAAS,CAAC,kBAAkB,CAAC,CAW/B;AAED;;;;;;;;;GASG;AACH,wBAAgB,gBAAgB,CAC9B,MAAM,EAAE,GAAG,EACX,SAAS,EAAE,MAAM,EACjB,CAAC,MAAM,EAAE,WAAW,CAAC,EAAE,eAAe,GACrC,kBAAkB,CAqBpB;AAED;;;;;;GAMG;AACH,wBAAiB,gBAAgB,CAC/B,OAAO,EAAE,MAAM,EACf,QAAQ,EAAE,kBAAkB,GAC3B,SAAS,CAAC,aAAa,CAAC,CAe1B;AAED,+FAA+F;AAC/F,wBAAgB,eAAe,CAAC,QAAQ,EAAE,SAAS,aAAa,EAAE,GAAG,eAAe,CAKnF;AAED;;;;;GAKG;AACH,wBAAiB,wBAAwB,CACvC,KAAK,EAAE,OAAO,EACd,OAAO,EAAE,MAAM,EACf,QAAQ,EAAE,kBAAkB,GAC3B,SAAS,CAAC,aAAa,CAAC,CAG1B"}

package/types/app/multisig/multisig-workflows.d.ts

@@ -0,0 +1,85 @@
+/**
+ * Multisig proposal and approval workflows.
+ *
+ * CLI orchestration owns timed waits, worker lifetimes, prompts and output.
+ * This module publishes proposals and approves stored KEL/RPY/VDR proposals
+ * without starting or driving background workers.
+ */
+import { SerderACDC, SerderKERI, type Versionage } from "cesr-ts";
+import { type Operation } from "effection";
+import { type RegistryDisclosure } from "../../acdc/regeventing.js";
+import { type AgentRuntime } from "../runtime/agent-runtime.js";
+import type { Poster } from "../delivery/forwarding.js";
+import type { Hab, Habery } from "../identity/habbing.js";
+import type { ProtocolProcessor } from "../protocol/protocol-processing.js";
+import { MULTISIG_BUP_ROUTE, MULTISIG_ICP_ROUTE, MULTISIG_ISS_ROUTE, MULTISIG_IXN_ROUTE, MULTISIG_REV_ROUTE, MULTISIG_RIP_ROUTE, MULTISIG_ROT_ROUTE, MULTISIG_RPY_ROUTE, MULTISIG_VCP_ROUTE, type MultisigEventProposal, type MultisigMessage } from "./grouping.js";
+import { type GroupSendResult } from "./multisig-messaging.js";
+/** Approve one exact ACDC v2 TEL/anchor through existing member signing and ordinary processors.
+ * A returned wrapper records consent, not quorum/witness/TEL completion; retry the accepted-state owners.
+ */
+export declare function approveAcdcV2Registry(hby: Habery, protocol: ProtocolProcessor, group: Hab, event: SerderACDC, { anchor, opening }?: {
+    anchor?: SerderKERI;
+    opening?: RegistryDisclosure;
+}): Operation<MultisigMessage>;
+/** Publish this member's exact approved TEL/anchor wrapper; the caller runs and joins delivery. */
+export declare function publishAcdcV2Registry(hby: Habery, postman: Poster, group: Hab, approval: MultisigMessage): Operation<GroupSendResult>;
+export type MultisigKelRoute = typeof MULTISIG_ICP_ROUTE | typeof MULTISIG_ROT_ROUTE | typeof MULTISIG_IXN_ROUTE;
+export type MultisigVdrRoute = typeof MULTISIG_VCP_ROUTE | typeof MULTISIG_ISS_ROUTE | typeof MULTISIG_REV_ROUTE;
+export type MultisigRpyRoute = typeof MULTISIG_RPY_ROUTE;
+export type MultisigProposalRoute = MultisigKelRoute | MultisigVdrRoute | MultisigRpyRoute | typeof MULTISIG_RIP_ROUTE | typeof MULTISIG_BUP_ROUTE;
+export interface ApprovalResult extends GroupSendResult {
+    /** Present for VCP/ISS/REV: exact TEL coordinates and local publication, separate from business acceptance and member delivery. */
+    tel?: {
+        pre: string;
+        sn: number;
+        publicationComplete: boolean;
+    };
+    route: MultisigProposalRoute;
+    said: string;
+    embedded: string;
+    group: string;
+    accepted: boolean;
+}
+export interface ApprovalPromptContext {
+    route: string;
+    group: string;
+    embedded: string;
+}
+export interface MultisigApprovalCallbacks {
+    approveProposal(context: ApprovalPromptContext): boolean;
+    chooseGroupAlias(groupPre: string): string;
+    chooseRegistryName(regk: string): string;
+}
+export interface MultisigApprovalOptions {
+    group?: string;
+    said?: string;
+    callbacks: MultisigApprovalCallbacks;
+}
+/**
+ * Publish a route-correlated event proposal; grouping owns child identity and label derivation.
+ *
+ * @param hby Borrowed group identities and accepted state.
+ * @param protocol Shared semantic owner; this publication owns its byte-input context.
+ * @param postman Borrowed delivery owner; the caller runs and joins its worker.
+ * @param member Local member signing habitat, distinct from the group AID.
+ * @param recipients Member AIDs; local recipients are skipped.
+ * @param proposal Route-correlated group proposal with its named business fields.
+ * @param embeddedMessage Signed child wire to include under the route-derived label.
+ * @param childGvrsn Optional explicit attachment genus for the child.
+ * @returns Stable proposal/wrapper identities and completed deliveries, independent of group acceptance.
+ */
+export declare function publishProposal(hby: Habery, protocol: ProtocolProcessor, postman: Poster, member: Hab, recipients: readonly string[], proposal: MultisigEventProposal, embeddedMessage: Uint8Array, childGvrsn?: Versionage): Operation<GroupSendResult>;
+/** True when a KEL event is accepted locally. */
+/**
+ * Commit the members of a locally accepted group establishment event.
+ *
+ * Only the current latest establishment event commits; replaying an older
+ * approval must not restore historical group membership. Returns whether the
+ * members were committed.
+ */
+export declare function commitAcceptedGroupMembers(hby: Habery, serder: SerderKERI, smids: readonly string[], rmids: readonly string[]): boolean;
+export declare function eventAccepted(hby: Habery, serder: SerderKERI): boolean;
+export declare function routeForKelEvent(serder: SerderKERI): MultisigKelRoute | null;
+/** Approve matching stored evidence; host progress and deadlines belong to the caller. */
+export declare function approvePendingMultisigProposal(hby: Habery, runtime: AgentRuntime, options: MultisigApprovalOptions): Operation<ApprovalResult | null>;
+//# sourceMappingURL=multisig-workflows.d.ts.map

package/types/app/multisig/multisig-workflows.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"multisig-workflows.d.ts","sourceRoot":"","sources":["../../../src/app/multisig/multisig-workflows.ts"],"names":[],"mappings":"AACA;;;;;;GAMG;AACH,OAAO,EAWL,UAAU,EACV,UAAU,EAEV,KAAK,UAAU,EAEhB,MAAM,SAAS,CAAC;AACjB,OAAO,EAAE,KAAK,SAAS,EAAE,MAAM,WAAW,CAAC;AAC3C,OAAO,EACL,KAAK,kBAAkB,EAGxB,MAAM,2BAA2B,CAAC;AAUnC,OAAO,EAAE,KAAK,YAAY,EAAE,MAAM,6BAA6B,CAAC;AAWhE,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,2BAA2B,CAAC;AASxD,OAAO,KAAK,EAAE,GAAG,EAAE,MAAM,EAAE,MAAM,wBAAwB,CAAC;AAC1D,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,oCAAoC,CAAC;AAK5E,OAAO,EAEL,kBAAkB,EAClB,kBAAkB,EAClB,kBAAkB,EAClB,kBAAkB,EAClB,kBAAkB,EAClB,kBAAkB,EAClB,kBAAkB,EAClB,kBAAkB,EAClB,kBAAkB,EAKlB,KAAK,qBAAqB,EAC1B,KAAK,eAAe,EAMrB,MAAM,eAAe,CAAC;AACvB,OAAO,EAGL,KAAK,eAAe,EAOrB,MAAM,yBAAyB,CAAC;AAEjC;;GAEG;AACH,wBAAiB,qBAAqB,CACpC,GAAG,EAAE,MAAM,EACX,QAAQ,EAAE,iBAAiB,EAC3B,KAAK,EAAE,GAAG,EACV,KAAK,EAAE,UAAU,EACjB,EAAE,MAAM,EAAE,OAAO,EAAE,GAAE;IAAE,MAAM,CAAC,EAAE,UAAU,CAAC;IAAC,OAAO,CAAC,EAAE,kBAAkB,CAAA;CAAO,GAC9E,SAAS,CAAC,eAAe,CAAC,CA4G5B;AAED,mGAAmG;AACnG,wBAAiB,qBAAqB,CACpC,GAAG,EAAE,MAAM,EACX,OAAO,EAAE,MAAM,EACf,KAAK,EAAE,GAAG,EACV,QAAQ,EAAE,eAAe,GACxB,SAAS,CAAC,eAAe,CAAC,CAiB5B;AAED,MAAM,MAAM,gBAAgB,GACxB,OAAO,kBAAkB,GACzB,OAAO,kBAAkB,GACzB,OAAO,kBAAkB,CAAC;AAC9B,MAAM,MAAM,gBAAgB,GAAG,OAAO,kBAAkB,GAAG,OAAO,kBAAkB,GAAG,OAAO,kBAAkB,CAAC;AACjH,MAAM,MAAM,gBAAgB,GAAG,OAAO,kBAAkB,CAAC;AACzD,MAAM,MAAM,qBAAqB,GAC7B,gBAAgB,GAChB,gBAAgB,GAChB,gBAAgB,GAChB,OAAO,kBAAkB,GACzB,OAAO,kBAAkB,CAAC;AAQ9B,MAAM,WAAW,cAAe,SAAQ,eAAe;IACrD,mIAAmI;IACnI,GAAG,CAAC,EAAE;QAAE,GAAG,EAAE,MAAM,CAAC;QAAC,EAAE,EAAE,MAAM,CAAC;QAAC,mBAAmB,EAAE,OAAO,CAAA;KAAE,CAAC;IAChE,KAAK,EAAE,qBAAqB,CAAC;IAC7B,IAAI,EAAE,MAAM,CAAC;IACb,QAAQ,EAAE,MAAM,CAAC;IACjB,KAAK,EAAE,MAAM,CAAC;IACd,QAAQ,EAAE,OAAO,CAAC;CACnB;AAED,MAAM,WAAW,qBAAqB;IACpC,KAAK,EAAE,MAAM,CAAC;IACd,KAAK,EAAE,MAAM,CAAC;IACd,QAAQ,EAAE,MAAM,CAAC;CAClB;AAED,MAAM,WAAW,yBAAyB;IACxC,eAAe,CAAC,OAAO,EAAE,qBAAqB,GAAG,OAAO,CAAC;IACzD,gBAAgB,CAAC,QAAQ,EAAE,MAAM,GAAG,MAAM,CAAC;IAC3C,kBAAkB,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAAC;CAC1C;AAED,MAAM,WAAW,uBAAuB;IACtC,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,SAAS,EAAE,yBAAyB,CAAC;CACtC;AAOD;;;;;;;;;;;;GAYG;AACH,wBAAiB,eAAe,CAC9B,GAAG,EAAE,MAAM,EACX,QAAQ,EAAE,iBAAiB,EAC3B,OAAO,EAAE,MAAM,EACf,MAAM,EAAE,GAAG,EACX,UAAU,EAAE,SAAS,MAAM,EAAE,EAC7B,QAAQ,EAAE,qBAAqB,EAC/B,eAAe,EAAE,UAAU,EAC3B,UAAU,CAAC,EAAE,UAAU,GACtB,SAAS,CAAC,eAAe,CAAC,CAa5B;AAsBD,iDAAiD;AACjD;;;;;;GAMG;AACH,wBAAgB,0BAA0B,CACxC,GAAG,EAAE,MAAM,EACX,MAAM,EAAE,UAAU,EAClB,KAAK,EAAE,SAAS,MAAM,EAAE,EACxB,KAAK,EAAE,SAAS,MAAM,EAAE,GACvB,OAAO,CAOT;AAED,wBAAgB,aAAa,CAAC,GAAG,EAAE,MAAM,EAAE,MAAM,EAAE,UAAU,GAAG,OAAO,CAQtE;AAED,wBAAgB,gBAAgB,CAAC,MAAM,EAAE,UAAU,GAAG,gBAAgB,GAAG,IAAI,CAa5E;AA4CD,0FAA0F;AAC1F,wBAAiB,8BAA8B,CAC7C,GAAG,EAAE,MAAM,EACX,OAAO,EAAE,YAAY,EACrB,OAAO,EAAE,uBAAuB,GAC/B,SAAS,CAAC,cAAc,GAAG,IAAI,CAAC,CAsDlC"}

package/types/app/{notifying.d.ts → notifications/notifying.d.ts}

@@ -1,6 +1,6 @@
 import { type Operation } from "effection";
-import { type Noter, type NoterOptions, Notice, type NoticeAttrs } from "../db/noting.js";
-import type { Habery } from "./habbing.js";
+import { type Noter, type NoterOptions, Notice, type NoticeAttrs } from "../../db/noting.js";
+import type { Habery, Signator } from "../identity/habbing.js";
 import { Signaler } from "./signaling.js";
 export declare function notice<T extends NoticeAttrs = NoticeAttrs>(attrs: T, options?: {
     dt?: string | Date;
@@ -18,11 +18,11 @@ export declare function openNoterForHabery(hby: Habery, options?: Partial<NoterO
  * application-specific maps.
  */
 export declare class Notifier {
-    readonly hby: Habery;
+    readonly signator: Signator;
     readonly noter: Noter;
     readonly signaler: Signaler;
     private readonly ownsSignaler;
-    constructor(hby: Habery, { noter, signaler, }: {
+    constructor(signator: Signator, { noter, signaler, }: {
         noter: Noter;
         signaler?: Signaler;
     });
@@ -38,9 +38,8 @@ export declare class Notifier {
     markRead(rid: string): boolean;
     /** Remove one verified notice and emit a transient remove signal. */
     remove(rid: string): boolean;
-    private prepareSignal;
+    private publishSignal;
     private requireNoticePair;
     private requireVerifiedNotice;
-    private requireSignator;
 }
 //# sourceMappingURL=notifying.d.ts.map

package/types/app/notifications/notifying.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"notifying.d.ts","sourceRoot":"","sources":["../../../src/app/notifications/notifying.ts"],"names":[],"mappings":"AAaA,OAAO,EAAE,KAAK,SAAS,EAAE,MAAM,WAAW,CAAC;AAE3C,OAAO,EAAe,KAAK,KAAK,EAAE,KAAK,YAAY,EAAE,MAAM,EAAE,KAAK,WAAW,EAAE,MAAM,oBAAoB,CAAC;AAC1G,OAAO,KAAK,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,wBAAwB,CAAC;AAC/D,OAAO,EAAE,QAAQ,EAAE,MAAM,gBAAgB,CAAC;AAE1C,wBAAgB,MAAM,CAAC,CAAC,SAAS,WAAW,GAAG,WAAW,EACxD,KAAK,EAAE,CAAC,EACR,OAAO,GAAE;IACP,EAAE,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACnB,IAAI,CAAC,EAAE,OAAO,CAAC;CACX,GACL,MAAM,CAAC,CAAC,CAAC,CAYX;AAED,iFAAiF;AACjF,wBAAgB,qBAAqB,CACnC,GAAG,EAAE,MAAM,EACX,OAAO,GAAE,OAAO,CAAC,YAAY,CAAM,GAClC,YAAY,CAWd;AAED,kEAAkE;AAClE,wBAAiB,kBAAkB,CACjC,GAAG,EAAE,MAAM,EACX,OAAO,GAAE,OAAO,CAAC,YAAY,CAAM,GAClC,SAAS,CAAC,KAAK,CAAC,CAElB;AAED;;;;;;GAMG;AACH,qBAAa,QAAQ;IACnB,QAAQ,CAAC,QAAQ,EAAE,QAAQ,CAAC;IAC5B,QAAQ,CAAC,KAAK,EAAE,KAAK,CAAC;IACtB,QAAQ,CAAC,QAAQ,EAAE,QAAQ,CAAC;IAC5B,OAAO,CAAC,QAAQ,CAAC,YAAY,CAAU;gBAGrC,QAAQ,EAAE,QAAQ,EAClB,EACE,KAAK,EACL,QAAQ,GACT,EAAE;QACD,KAAK,EAAE,KAAK,CAAC;QACb,QAAQ,CAAC,EAAE,QAAQ,CAAC;KACrB;IAQH,oEAAoE;IACpE,GAAG,CAAC,CAAC,SAAS,WAAW,GAAG,WAAW,EAAE,KAAK,EAAE,CAAC,GAAG,OAAO;IAS3D,mGAAmG;IACnG,KAAK,IAAI,IAAI;IAIb,uDAAuD;IACvD,IAAI,CAAC,CAAC,SAAS,WAAW,GAAG,WAAW,EACtC,KAAK,SAAI,EACT,KAAK,SAAK,GACT,MAAM,CAAC,CAAC,CAAC,EAAE;IAMd,4DAA4D;IAC5D,KAAK,IAAI,MAAM;IAIf,wDAAwD;IACxD,QAAQ,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO;IAc9B,qEAAqE;IACrE,MAAM,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO;IAO5B,OAAO,CAAC,aAAa;IAQrB,OAAO,CAAC,iBAAiB;IASzB,OAAO,CAAC,qBAAqB;CAY9B"}

package/types/app/notifications/signaling.d.ts

@@ -0,0 +1,68 @@
+import { type Operation } from "effection";
+export type SignalAttrs = Record<string, unknown>;
+export interface SignalPad<T extends SignalAttrs = SignalAttrs> {
+    i: string;
+    dt: string;
+    r: string;
+    a: T;
+}
+/**
+ * Transient host signal matching the KERIpy `Signal` pad shape.
+ *
+ * Unlike `Notice`, this is not durably stored. Hosts use it as a reload hint.
+ */
+export declare class Signal<T extends SignalAttrs = SignalAttrs> {
+    #private;
+    constructor(init: {
+        raw: Uint8Array;
+        ckey?: string;
+    } | {
+        pad: Omit<Partial<SignalPad<T>>, "a" | "r"> & {
+            a: T;
+            r: string;
+        };
+        ckey?: string;
+    });
+    get raw(): Uint8Array;
+    set raw(raw: Uint8Array);
+    get pad(): SignalPad<T>;
+    set pad(pad: Omit<Partial<SignalPad<T>>, "a" | "r"> & {
+        a: T;
+        r: string;
+    });
+    get rid(): string;
+    get datetime(): string;
+    get topic(): string;
+    get attrs(): T;
+    get ckey(): string | undefined;
+    asDict(): SignalPad<T>;
+}
+export declare function signal<T extends SignalAttrs = SignalAttrs>(attrs: T, topic: string, options?: {
+    ckey?: string;
+    dt?: string | Date;
+}): Signal<T>;
+/** Transient reload hints with KERIpy-style collapse keys and expiry. */
+export declare class Signaler {
+    static readonly SignalTimeoutMs: number;
+    readonly signalTimeoutMs: number;
+    readonly signals: Signal[];
+    private closed;
+    constructor({ signals, signalTimeoutMs }?: {
+        signals?: readonly Signal[];
+        signalTimeoutMs?: number;
+    });
+    /** Replace the first matching collapse key in place, otherwise append. */
+    push<T extends SignalAttrs>(attrs: T, topic: string, options?: {
+        ckey?: string;
+        dt?: string | Date;
+    }): Signal<T>;
+    list(): Signal[];
+    count(): number;
+    processOnce(now?: number): number;
+    /** Drop transient wakeups without changing durable notices. */
+    clear(): void;
+    /** Stop this producer and discard its queued wakeups. */
+    close(): void;
+    signalDo(): Operation<never>;
+}
+//# sourceMappingURL=signaling.d.ts.map

package/types/app/notifications/signaling.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"signaling.d.ts","sourceRoot":"","sources":["../../../src/app/notifications/signaling.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,KAAK,SAAS,EAAE,MAAM,WAAW,CAAC;AAM3C,MAAM,MAAM,WAAW,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;AAElD,MAAM,WAAW,SAAS,CAAC,CAAC,SAAS,WAAW,GAAG,WAAW;IAC5D,CAAC,EAAE,MAAM,CAAC;IACV,EAAE,EAAE,MAAM,CAAC;IACX,CAAC,EAAE,MAAM,CAAC;IACV,CAAC,EAAE,CAAC,CAAC;CACN;AAeD;;;;GAIG;AACH,qBAAa,MAAM,CAAC,CAAC,SAAS,WAAW,GAAG,WAAW;;gBAMnD,IAAI,EACA;QAAE,GAAG,EAAE,UAAU,CAAC;QAAC,IAAI,CAAC,EAAE,MAAM,CAAA;KAAE,GAClC;QACA,GAAG,EAAE,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,EAAE,GAAG,GAAG,GAAG,CAAC,GAAG;YAAE,CAAC,EAAE,CAAC,CAAC;YAAC,CAAC,EAAE,MAAM,CAAA;SAAE,CAAC;QAClE,IAAI,CAAC,EAAE,MAAM,CAAC;KACf;IAWL,IAAI,GAAG,IAAI,UAAU,CAEpB;IAED,IAAI,GAAG,CAAC,GAAG,EAAE,UAAU,EAEtB;IAED,IAAI,GAAG,IAAI,SAAS,CAAC,CAAC,CAAC,CAKtB;IAED,IAAI,GAAG,CACL,GAAG,EAAE,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,EAAE,GAAG,GAAG,GAAG,CAAC,GAAG;QAAE,CAAC,EAAE,CAAC,CAAC;QAAC,CAAC,EAAE,MAAM,CAAA;KAAE,EAYlE;IAED,IAAI,GAAG,IAAI,MAAM,CAEhB;IAED,IAAI,QAAQ,IAAI,MAAM,CAErB;IAED,IAAI,KAAK,IAAI,MAAM,CAElB;IAED,IAAI,KAAK,IAAI,CAAC,CAEb;IAED,IAAI,IAAI,IAAI,MAAM,GAAG,SAAS,CAE7B;IAED,MAAM,IAAI,SAAS,CAAC,CAAC,CAAC;CAGvB;AAED,wBAAgB,MAAM,CAAC,CAAC,SAAS,WAAW,GAAG,WAAW,EACxD,KAAK,EAAE,CAAC,EACR,KAAK,EAAE,MAAM,EACb,OAAO,GAAE;IACP,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,EAAE,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;CACf,GACL,MAAM,CAAC,CAAC,CAAC,CAaX;AAED,yEAAyE;AACzE,qBAAa,QAAQ;IACnB,MAAM,CAAC,QAAQ,CAAC,eAAe,SAAkB;IACjD,QAAQ,CAAC,eAAe,EAAE,MAAM,CAAC;IACjC,QAAQ,CAAC,OAAO,EAAE,MAAM,EAAE,CAAC;IAC3B,OAAO,CAAC,MAAM,CAAS;gBAEX,EAAE,OAAY,EAAE,eAA0C,EAAE,GAAE;QACxE,OAAO,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;QAC5B,eAAe,CAAC,EAAE,MAAM,CAAC;KACrB;IAMN,0EAA0E;IAC1E,IAAI,CAAC,CAAC,SAAS,WAAW,EAAE,KAAK,EAAE,CAAC,EAAE,KAAK,EAAE,MAAM,EAAE,OAAO,GAAE;QAAE,IAAI,CAAC,EAAE,MAAM,CAAC;QAAC,EAAE,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;KAAO,GAAG,MAAM,CAAC,CAAC,CAAC;IASpH,IAAI,IAAI,MAAM,EAAE;IAGhB,KAAK,IAAI,MAAM;IAIf,WAAW,CAAC,GAAG,SAAa,GAAG,MAAM;IASrC,+DAA+D;IAC/D,KAAK,IAAI,IAAI;IAGb,yDAAyD;IACzD,KAAK,IAAI,IAAI;IAKZ,QAAQ,IAAI,SAAS,CAAC,KAAK,CAAC;CAM9B"}