keri-ts 1.0.0 → 2.0.0

package/types/acdc/scheming.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"scheming.d.ts","sourceRoot":"","sources":["../../src/acdc/scheming.ts"],"names":[],"mappings":"AAAA,qGAAqG;AACrG,OAAO,EAA6B,KAAK,UAAU,EAAE,MAAM,SAAS,CAAC;AAErE,OAAO,EAAE,eAAe,EAAE,MAAM,mBAAmB,CAAC;AAEpD,OAAO,KAAK,EAAE,KAAK,EAAE,MAAM,iBAAiB,CAAC;AAE7C,6FAA6F;AAC7F,MAAM,MAAM,gBAAgB,GAAG;IAAE,IAAI,EAAE,OAAO,CAAA;CAAE,GAAG;IAAE,IAAI,EAAE,SAAS,CAAC;IAAC,IAAI,EAAE,MAAM,CAAA;CAAE,GAAG;IACrF,IAAI,EAAE,SAAS,CAAC;IAChB,OAAO,EAAE,QAAQ,GAAG,YAAY,CAAC;IACjC,MAAM,EAAE,MAAM,CAAC;CAChB,CAAC;AACF,4FAA4F;AAC5F,qBAAa,kBAAmB,SAAQ,eAAe;IACzC,QAAQ,CAAC,MAAM,EAAE,MAAM;gBAAd,MAAM,EAAE,MAAM;CAGpC;AACD,uFAAuF;AACvF,qBAAa,2BAA4B,SAAQ,eAAe;CAAG;AAGnE,KAAK,MAAM,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;AAkItC,oHAAoH;AACpH,wBAAgB,cAAc,CAAC,IAAI,EAAE,UAAU,EAAE,EAAE,EAAE,KAAK,EAAE,QAAQ,CAAC,EAAE,MAAM,GAAG,QAAQ,CAAC,MAAM,CAAC,GAAG,gBAAgB,CAuHlH"}
+{"version":3,"file":"scheming.d.ts","sourceRoot":"","sources":["../../src/acdc/scheming.ts"],"names":[],"mappings":"AAAA,qGAAqG;AACrG,OAAO,EAA6B,KAAK,UAAU,EAAE,MAAM,SAAS,CAAC;AAErE,OAAO,EAAE,eAAe,EAAE,MAAM,mBAAmB,CAAC;AAEpD,OAAO,KAAK,EAAE,KAAK,EAAE,MAAM,iBAAiB,CAAC;AAE7C,6FAA6F;AAC7F,MAAM,MAAM,gBAAgB,GAAG;IAAE,IAAI,EAAE,OAAO,CAAA;CAAE,GAAG;IAAE,IAAI,EAAE,SAAS,CAAC;IAAC,IAAI,EAAE,MAAM,CAAA;CAAE,GAAG;IACrF,IAAI,EAAE,SAAS,CAAC;IAChB,OAAO,EAAE,QAAQ,GAAG,YAAY,CAAC;IACjC,MAAM,EAAE,MAAM,CAAC;CAChB,CAAC;AACF,4FAA4F;AAC5F,qBAAa,kBAAmB,SAAQ,eAAe;IACzC,QAAQ,CAAC,MAAM,EAAE,MAAM;gBAAd,MAAM,EAAE,MAAM;CAGpC;AACD,uFAAuF;AACvF,qBAAa,2BAA4B,SAAQ,eAAe;CAAG;AAGnE,KAAK,MAAM,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;AAgNtC,oHAAoH;AACpH,wBAAgB,cAAc,CAAC,IAAI,EAAE,UAAU,EAAE,EAAE,EAAE,KAAK,EAAE,QAAQ,CAAC,EAAE,MAAM,GAAG,QAAQ,CAAC,MAAM,CAAC,GAAG,gBAAgB,CA8DlH"}

package/types/acdc/unblinding.d.ts

@@ -0,0 +1,150 @@
+/**
+ * Explicitly approved IPEX Unblind, following Python's local query/reply profile.
+ * Only event openings cross this boundary. Roots, application state vocabulary,
+ * transport and final Admit remain with their existing owners.
+ */
+import { type Cigar, Diger, type SerderKERI } from "cesr-ts";
+import type { Operation } from "effection";
+import type { ExchangeDecision, Exchanger } from "../app/exchanges/exchanging.js";
+import { Hab } from "../app/identity/habbing.js";
+import { type AuxiliaryQueryProcessor, type MessageDropDecision } from "../app/protocol/parsering.js";
+import { Deck } from "../core/deck.js";
+import { type KeriDispatchEnvelope, TransIdxSigGroup } from "../core/dispatch.js";
+import { type ReplyProcessDecision, type Revery } from "../core/routing.js";
+import type { RegistryObserver } from "./observing.js";
+import { type RegistryDisclosure } from "./regeventing.js";
+/** Member signing proposals or elected delivery of full aggregates; all bytes are process-local. */
+export interface UnblindOutgoing {
+    kin: "sign" | "query" | "reply";
+    dest: string;
+    msg: Uint8Array;
+}
+/**
+ * One presentation's explicit proof-release consent. Inject as qvy
+ * and register Route on the habitat's existing Revery Router. Wire intake cannot
+ * approve work; a fresh owner cannot resume an unfinished operation. Group members
+ * sign exact proposals under that approval. Ordinary thresholds elect delivery
+ * from the completed aggregate; neither contribution nor delivery requires a root.
+ */
+export declare class Unblind implements AuxiliaryQueryProcessor {
+    static readonly Route = "/ipex/unblind";
+    readonly resource = "/ipex/unblind";
+    readonly outgoing: Deck<UnblindOutgoing>;
+    private readonly pendingQueries;
+    private readonly now;
+    private readonly operations;
+    readonly hab: Hab;
+    readonly exc: Exchanger;
+    readonly rvy: Revery;
+    readonly registry: RegistryObserver;
+    readonly states: readonly string[];
+    readonly group: boolean;
+    /** Bind the exact Grant verifier's store and an explicit ordinary-state vocabulary. */
+    constructor({ hab, exc, registry, states, rvy, now }: {
+        hab: Hab;
+        exc: Exchanger;
+        registry: RegistryObserver;
+        states: readonly string[];
+        rvy?: Revery;
+        now?: () => number;
+    });
+    /** Freeze one authenticated live Grant's exact bodies, parties and authorized registry scope. */
+    approve(grant: string): string;
+    /** Freeze a signed disclosee query over the missing accepted public suffix. */
+    start(grant: string): Uint8Array;
+    /**
+     * Re-sign this disclosee's started individual query for delivery now.
+     *
+     * KERIpy `Unblind.requery` (kentbull/keripy#159): a queued query can age past
+     * the discloser's KRAM timeliness window before transport begins. The renewal
+     * keeps the approved Grant, the frozen requested events and their nested
+     * public evidence; only the query's own `dt`, SAID and signatures change, and
+     * it becomes the outstanding query. A newer registry head still needs a new
+     * operation, and the Grant's deadline is never extended. Groups cannot renew here.
+     */
+    requery(xid: string): Uint8Array;
+    /**
+     * Contribute to one exact group proposal under the existing local approval.
+     * Validate every member signature and the public suffix/minimum openings before
+     * signing. A rootless member signs the supplied proof, never derives a root.
+     */
+    contribute(xid: string, proposal: Uint8Array): Uint8Array;
+    /** Authenticate the full peer threshold before public evidence intake or proof release. */
+    processQuery(envelope: KeriDispatchEnvelope): {
+        kind: "accept";
+    } | MessageDropDecision;
+    /** Schedule responder work only after the selected live operation authenticates its peer query. */
+    hasPeerQuery(xid: string): boolean;
+    /** Retry a previously authenticated request locally when held proofs become available. */
+    respond(xid: string): Uint8Array;
+    /** Independently vet openings before caching them; Revery owns signature threshold and BADA. */
+    processReply({ serder, diger, route, cigars, tsgs, attachments }: {
+        serder: SerderKERI;
+        diger: Diger;
+        route: string;
+        cigars?: Cigar[];
+        tsgs?: TransIdxSigGroup[];
+        attachments?: KeriDispatchEnvelope;
+    }): ReplyProcessDecision;
+    /** Authenticated reply readiness only: neither credential-state acceptance nor Admit. */
+    complete(xid: string): boolean;
+    /**
+     * Return the verified openings an authenticated reply selected.
+     *
+     * KERIpy `Unblind.openings` (kentbull/keripy#156): a read-only accessor for a
+     * group member forwarding the completed reply, with its proofs, to the other
+     * members. It requires the same readiness as `complete` (local approval, live
+     * original Grant, an authenticated reply or frozen own group reply). Each
+     * opening was checked against its accepted event and the approved disclosure
+     * when the reply arrived. It is not a credential-state verdict and authorizes
+     * neither Admit nor retention; `finish` owns that.
+     *
+     * @returns registry event SAID to opening, in the reply's selected order; a copy.
+     */
+    openings(xid: string): Map<string, RegistryDisclosure>;
+    /** Retry this exact Grant, or atomically update only its live accepted proof view. */
+    finish(xid: string): Operation<ExchangeDecision>;
+    /** Discard approved work and unsent replies; delivered bytes remain caller-owned. */
+    abandon(xid: string): void;
+    /** Select the exact missing public suffix without signing or changing registry state. */
+    private request;
+    /** Release all process-local approvals, opening references and retry bytes without changing stores. */
+    close(): void;
+    /** Hold one authenticated public suffix for explicit release consent; never import events here. */
+    private retainQuery;
+    /** Expired evidence cannot survive another owner interaction. */
+    private pruneQueries;
+    /** Consume the first authenticated request only after explicit approval; never renew either clock. */
+    private replayQuery;
+    /** Bound process-local public evidence by the original query and accepted Grant lifetimes. */
+    private retainUntil;
+    private operation;
+    private live;
+    private current;
+    /** Decode the exact query/reply body before applying consent and event scope. */
+    private parameters;
+    /** Keep selected event identities distinct and inside the authenticated Grant's registry scope. */
+    private selection;
+    private preflight;
+    /** Encode the endorsed finite body and explicit counted evidence in one attachment enclosure. */
+    private signed;
+    /** Reconstruct only allowed finite public event children; credentials never pass this encoder. */
+    private publicEvents;
+    /** Local group signatures cover exactly the suffix selected from this member's accepted state. */
+    private queryEvidence;
+    /** Freeze a complete aggregate, then elect delivery from its own historical signing indices. */
+    private groupMessage;
+    /** Reject foreign evidence families, including unknown raw attachment groups. */
+    private attachments;
+    private events;
+    /** Vet every supplied suffix before any ordinary TEL intake changes the accepted prefix. */
+    private validateEvents;
+    private receiveEvents;
+    private checkOpening;
+    private carried;
+    private held;
+    private minimum;
+    private opening;
+    private replyOpenings;
+}
+//# sourceMappingURL=unblinding.d.ts.map

package/types/acdc/unblinding.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"unblinding.d.ts","sourceRoot":"","sources":["../../src/acdc/unblinding.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AACH,OAAO,EAGL,KAAK,KAAK,EAGV,KAAK,EAQL,KAAK,UAAU,EAGhB,MAAM,SAAS,CAAC;AACjB,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,WAAW,CAAC;AAC3C,OAAO,KAAK,EAAE,gBAAgB,EAAE,SAAS,EAAqB,MAAM,gCAAgC,CAAC;AACrG,OAAO,EAAE,GAAG,EAAE,MAAM,4BAA4B,CAAC;AAGjD,OAAO,EACL,KAAK,uBAAuB,EAG5B,KAAK,mBAAmB,EACzB,MAAM,8BAA8B,CAAC;AAEtC,OAAO,EAAE,IAAI,EAAE,MAAM,iBAAiB,CAAC;AACvC,OAAO,EAAE,KAAK,oBAAoB,EAAE,gBAAgB,EAAE,MAAM,qBAAqB,CAAC;AAMlF,OAAO,EAAmB,KAAK,oBAAoB,EAAE,KAAK,MAAM,EAA2B,MAAM,oBAAoB,CAAC;AAGtH,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,gBAAgB,CAAC;AACvD,OAAO,EACL,KAAK,kBAAkB,EAMxB,MAAM,kBAAkB,CAAC;AAwB1B,oGAAoG;AACpG,MAAM,WAAW,eAAe;IAC9B,GAAG,EAAE,MAAM,GAAG,OAAO,GAAG,OAAO,CAAC;IAChC,IAAI,EAAE,MAAM,CAAC;IACb,GAAG,EAAE,UAAU,CAAC;CACjB;AAwBD;;;;;;GAMG;AACH,qBAAa,OAAQ,YAAW,uBAAuB;IACrD,MAAM,CAAC,QAAQ,CAAC,KAAK,mBAAmB;IACxC,QAAQ,CAAC,QAAQ,mBAAiB;IAClC,QAAQ,CAAC,QAAQ,wBAA+B;IAChD,OAAO,CAAC,QAAQ,CAAC,cAAc,CAG3B;IACJ,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAe;IACnC,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAuC;IAClE,QAAQ,CAAC,GAAG,EAAE,GAAG,CAAC;IAClB,QAAQ,CAAC,GAAG,EAAE,SAAS,CAAC;IACxB,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;IACrB,QAAQ,CAAC,QAAQ,EAAE,gBAAgB,CAAC;IACpC,QAAQ,CAAC,MAAM,EAAE,SAAS,MAAM,EAAE,CAAC;IACnC,QAAQ,CAAC,KAAK,EAAE,OAAO,CAAC;IAExB,uFAAuF;gBAC3E,EAAE,GAAG,EAAE,GAAG,EAAE,QAAQ,EAAE,MAAM,EAAE,GAAa,EAAE,GAAc,EAAE,EAAE;QACzE,GAAG,EAAE,GAAG,CAAC;QACT,GAAG,EAAE,SAAS,CAAC;QACf,QAAQ,EAAE,gBAAgB,CAAC;QAC3B,MAAM,EAAE,SAAS,MAAM,EAAE,CAAC;QAC1B,GAAG,CAAC,EAAE,MAAM,CAAC;QACb,GAAG,CAAC,EAAE,MAAM,MAAM,CAAC;KACpB;IAoBD,iGAAiG;IACjG,OAAO,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM;IA6C9B,+EAA+E;IAC/E,KAAK,CAAC,KAAK,EAAE,MAAM,GAAG,UAAU;IAuBhC;;;;;;;;;OASG;IACH,OAAO,CAAC,GAAG,EAAE,MAAM,GAAG,UAAU;IAoBhC;;;;OAIG;IACH,UAAU,CAAC,GAAG,EAAE,MAAM,EAAE,QAAQ,EAAE,UAAU,GAAG,UAAU;IA+EzD,2FAA2F;IAC3F,YAAY,CAAC,QAAQ,EAAE,oBAAoB,GAAG;QAAE,IAAI,EAAE,QAAQ,CAAA;KAAE,GAAG,mBAAmB;IAsDtF,mGAAmG;IACnG,YAAY,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO;IAQlC,0FAA0F;IAC1F,OAAO,CAAC,GAAG,EAAE,MAAM,GAAG,UAAU;IAyBhC,gGAAgG;IAChG,YAAY,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,KAAK,EAAE,MAAW,EAAE,IAAS,EAAE,WAAW,EAAE,EAAE;QAC1E,MAAM,EAAE,UAAU,CAAC;QACnB,KAAK,EAAE,KAAK,CAAC;QACb,KAAK,EAAE,MAAM,CAAC;QACd,MAAM,CAAC,EAAE,KAAK,EAAE,CAAC;QACjB,IAAI,CAAC,EAAE,gBAAgB,EAAE,CAAC;QAC1B,WAAW,CAAC,EAAE,oBAAoB,CAAC;KACpC,GAAG,oBAAoB;IAyDxB,yFAAyF;IACzF,QAAQ,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO;IAO9B;;;;;;;;;;;;OAYG;IACH,QAAQ,CAAC,GAAG,EAAE,MAAM,GAAG,GAAG,CAAC,MAAM,EAAE,kBAAkB,CAAC;IAYtD,sFAAsF;IACrF,MAAM,CAAC,GAAG,EAAE,MAAM,GAAG,SAAS,CAAC,gBAAgB,CAAC;IAqEjD,qFAAqF;IACrF,OAAO,CAAC,GAAG,EAAE,MAAM,GAAG,IAAI;IAkB1B,yFAAyF;IACzF,OAAO,CAAC,OAAO;IAmCf,uGAAuG;IACvG,KAAK,IAAI,IAAI;IAOb,mGAAmG;IACnG,OAAO,CAAC,WAAW;IA4BnB,iEAAiE;IACjE,OAAO,CAAC,YAAY;IAMpB,sGAAsG;IACtG,OAAO,CAAC,WAAW;IASnB,8FAA8F;IAC9F,OAAO,CAAC,WAAW;IAmBnB,OAAO,CAAC,SAAS;IAMjB,OAAO,CAAC,IAAI;IAgBZ,OAAO,CAAC,OAAO;IAQf,iFAAiF;IACjF,OAAO,CAAC,UAAU;IAWlB,mGAAmG;IACnG,OAAO,CAAC,SAAS;IAejB,OAAO,CAAC,SAAS;IAUjB,iGAAiG;IACjG,OAAO,CAAC,MAAM;IAcd,kGAAkG;IAClG,OAAO,CAAC,YAAY;IAapB,kGAAkG;IAClG,OAAO,CAAC,aAAa;IAWrB,gGAAgG;IAChG,OAAO,CAAC,YAAY;IA4BpB,iFAAiF;IACjF,OAAO,CAAC,WAAW;IA0CnB,OAAO,CAAC,MAAM;IAYd,4FAA4F;IAC5F,OAAO,CAAC,cAAc;IAoDtB,OAAO,CAAC,aAAa;IAcrB,OAAO,CAAC,YAAY;IAoBpB,OAAO,CAAC,OAAO;IAkBf,OAAO,CAAC,IAAI;IA4BZ,OAAO,CAAC,OAAO;IA8Bf,OAAO,CAAC,OAAO;IAMf,OAAO,CAAC,aAAa;CA4BtB"}

package/types/app/bootstrap/authenticating.d.ts

@@ -0,0 +1,54 @@
+import { type Operation } from "effection";
+import type { Baser } from "../../db/basing.js";
+import type { Habery } from "../identity/habbing.js";
+import type { HttpClient } from "../transport/http-client.js";
+/**
+ * Return true when a well-known URL has been authorized into `wkas.`.
+ *
+ * @param db Borrowed authentication records; this read acquires no runtime or I/O lifetime.
+ * @param url Exact requested OOBI/well-known URL whose durable state is inspected.
+ * @returns Whether the documented authentication/convergence predicate currently holds.
+ */
+export declare function hasWellKnownAuth(db: Baser, url: string): boolean;
+/**
+ * Well-known OOBI authenticator for one `Habery`.
+ *
+ * KERIpy correspondence:
+ * - mirrors the `Authenticator` flow that advances `woobi.` -> `mfa.` ->
+ *   `rmfa.` and writes `wkas.`
+ *
+ * Ownership model:
+ * - `woobi.` holds queued well-known auth work
+ * - `mfa.` holds one pending HTTP authorization request
+ * - `rmfa.` holds terminal well-known auth results
+ * - `wkas.` records successful `(cid, url)` authorizations
+ */
+export declare class Authenticator {
+    /** Borrowed local identities and durable well-known authentication records. */
+    readonly hby: Habery;
+    /** HTTP implementation selected when this authenticator is composed. */
+    readonly http: HttpClient;
+    /**
+     * Bind the local authentication store and its configured HTTP dependency.
+     *
+     * @param hby Borrowed local identities and accepted-state stores.
+     * @param http Borrowed HTTP implementation selected by composition.
+     */
+    constructor(hby: Habery, http: HttpClient);
+    /** Process one bounded auth step if queued well-known work exists. */
+    processOnce(): Operation<void>;
+    /** Continuous auth doer for long-lived runtime hosts. */
+    authDo(): Operation<never>;
+    /** Promote one eligible `woobi.` record into the fetchable `mfa.` queue. */
+    private promoteQueuedWellKnown;
+    /** Return the next pending `mfa.` auth record, if any. */
+    private nextPendingAuth;
+    /**
+     * Fetch one `mfa.` record and persist the terminal auth result.
+     *
+     * @param url Exact pending well-known authentication URL.
+     * @param record Durable mfa record retained until response handling and cleanup establish terminal state.
+     */
+    private processPendingAuth;
+}
+//# sourceMappingURL=authenticating.d.ts.map

package/types/app/bootstrap/authenticating.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"authenticating.d.ts","sourceRoot":"","sources":["../../../src/app/bootstrap/authenticating.ts"],"names":[],"mappings":"AAAA,OAAO,EAAQ,KAAK,SAAS,EAAU,MAAM,WAAW,CAAC;AAEzD,OAAO,KAAK,EAAE,KAAK,EAAE,MAAM,oBAAoB,CAAC;AAChD,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,wBAAwB,CAAC;AAGrD,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,6BAA6B,CAAC;AAG9D;;;;;;GAMG;AACH,wBAAgB,gBAAgB,CAC9B,EAAE,EAAE,KAAK,EACT,GAAG,EAAE,MAAM,GACV,OAAO,CAMT;AAED;;;;;;;;;;;;GAYG;AACH,qBAAa,aAAa;IACxB,+EAA+E;IAC/E,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;IACrB,wEAAwE;IACxE,QAAQ,CAAC,IAAI,EAAE,UAAU,CAAC;IAE1B;;;;;OAKG;gBACS,GAAG,EAAE,MAAM,EAAE,IAAI,EAAE,UAAU;IAKzC,sEAAsE;IACrE,WAAW,IAAI,SAAS,CAAC,IAAI,CAAC;IAe/B,yDAAyD;IACxD,MAAM,IAAI,SAAS,CAAC,KAAK,CAAC;IAO3B,4EAA4E;IAC5E,OAAO,CAAC,sBAAsB;IAsC9B,0DAA0D;IAC1D,OAAO,CAAC,eAAe;IAYvB;;;;;OAKG;IACH,OAAO,CAAE,kBAAkB;CAgC5B"}

package/types/app/bootstrap/bootstrapping.d.ts

@@ -0,0 +1,45 @@
+/** Finite introduction/authentication composition shared by environment creation and inception. */
+import { type Operation } from "effection";
+import type { Habery } from "../identity/habbing.js";
+import type { HttpClient } from "../transport/http-client.js";
+/** Expected remote outcomes; infrastructure and cleanup failures still propagate. */
+export type BootstrapResult = {
+    kind: "complete";
+} | {
+    kind: "failed";
+    failures: {
+        url: string;
+        state: string;
+    }[];
+} | {
+    kind: "timeout";
+    pending: string[];
+};
+/**
+ * Resolve this command's pending introductions and well-known authentication.
+ *
+ * The command is the sole OOBI/authentication worker owner for its borrowed Habery.
+ * Select existing oobis/coobi/moobi and woobi/mfa rows, then include children and
+ * introductions queued by processing them. Old terminal rows alone select no work.
+ * Surviving coobi/mfa/moobi rows resume through their ordinary component owners.
+ * A queued attempt takes precedence over any older terminal/authorization row.
+ * The actual table family selects its terminal evidence: a well-known URL may
+ * be an ordinary introduction, a separate authentication, or both.
+ *
+ * Like KERIpy init, compose Oobiery and Authenticator directly. Resolution means
+ * that Oobiery processed the response, not that all its protocol evidence was
+ * accepted. KEL/reply escrow processing lets evidence arriving in separate
+ * responses unlock introductions and authentication's required controller state.
+ * Escrow contents never determine bootstrap completion. Later operations must
+ * check the accepted evidence they actually require.
+ *
+ * @param hby Borrowed identities/configuration/Baser; kept open through cleanup.
+ * @param http Borrowed request implementation used by OOBIs and authentication.
+ * @param options Finite positive elapsed deadline, default 30 seconds.
+ * @returns Selected terminal success, refusal or deadline after all children/I/O join.
+ * @throws Invariant, parser, storage, transport and cleanup failures propagate unchanged.
+ */
+export declare function resolveBootstrap(hby: Habery, http: HttpClient, { timeoutMs }?: {
+    timeoutMs?: number;
+}): Operation<BootstrapResult>;
+//# sourceMappingURL=bootstrapping.d.ts.map

package/types/app/bootstrap/bootstrapping.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"bootstrapping.d.ts","sourceRoot":"","sources":["../../../src/app/bootstrap/bootstrapping.ts"],"names":[],"mappings":"AAAA,mGAAmG;AACnG,OAAO,EAAE,KAAK,SAAS,EAAiB,MAAM,WAAW,CAAC;AAE1D,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,wBAAwB,CAAC;AAGrD,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,6BAA6B,CAAC;AAI9D,qFAAqF;AACrF,MAAM,MAAM,eAAe,GACvB;IAAE,IAAI,EAAE,UAAU,CAAA;CAAE,GACpB;IAAE,IAAI,EAAE,QAAQ,CAAC;IAAC,QAAQ,EAAE;QAAE,GAAG,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,CAAA;KAAE,EAAE,CAAA;CAAE,GAC9D;IAAE,IAAI,EAAE,SAAS,CAAC;IAAC,OAAO,EAAE,MAAM,EAAE,CAAA;CAAE,CAAC;AAQ3C;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AACH,wBAAgB,gBAAgB,CAC9B,GAAG,EAAE,MAAM,EACX,IAAI,EAAE,UAAU,EAChB,EAAE,SAAkB,EAAE,GAAE;IAAE,SAAS,CAAC,EAAE,MAAM,CAAA;CAAO,GAClD,SAAS,CAAC,eAAe,CAAC,CAuC5B"}

package/types/app/{oobi-replies.d.ts → bootstrap/oobi-replies.d.ts}

@@ -1,4 +1,4 @@
-import type { Hab } from "./habbing.js";
+import type { Hab } from "../identity/habbing.js";
 /**
  * Capture primitive descriptors, then emit finite messages in the established OOBI order.
  * Selector inputs are borrowed and must stay immutable until acquisition under the caller's owner.

package/types/app/bootstrap/oobi-replies.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"oobi-replies.d.ts","sourceRoot":"","sources":["../../../src/app/bootstrap/oobi-replies.ts"],"names":[],"mappings":"AAOA,OAAO,KAAK,EAAE,GAAG,EAAE,MAAM,wBAAwB,CAAC;AAQlD;;;;GAIG;AACH,wBAAgB,iBAAiB,CAC/B,GAAG,EAAE,GAAG,EACR,GAAG,EAAE,MAAM,EACX,IAAI,EAAE,MAAM,GAAG,SAAS,EACxB,IAAI,EAAE,SAAS,MAAM,EAAE,EACvB,MAAM,EAAE,MAAM,EACd,YAAY,EAAE,OAAO,GACpB,QAAQ,CAAC,UAAU,CAAC,CAuFtB"}

package/types/app/{oobiery.d.ts → bootstrap/oobiery.d.ts}

@@ -1,16 +1,20 @@
 import { type Cigar, Diger, SerderKERI } from "cesr-ts";
 import { type Operation } from "effection";
-import type { AgentCue } from "../core/cues.js";
-import { Deck } from "../core/deck.js";
-import { type TransIdxSigGroup } from "../core/dispatch.js";
-import { OOBI_MAILBOX_TOPIC } from "../core/mailbox-topics.js";
-import { type Role } from "../core/roles.js";
-import { type ReplyProcessDecision } from "../core/routing.js";
-import type { Exchanger, ExchangeRouteHandler } from "./exchanging.js";
-import type { Hab, Habery } from "./habbing.js";
-import type { Notifier } from "./notifying.js";
-import type { Reactor } from "./reactor.js";
-import { type RuntimeServices } from "./runtime-services.js";
+import type { AgentCue } from "../../core/cues.js";
+import { Deck } from "../../core/deck.js";
+import { type TransIdxSigGroup } from "../../core/dispatch.js";
+import type { Kevery } from "../../core/kel/eventing.js";
+import { OOBI_MAILBOX_TOPIC } from "../../core/mailbox/mailbox-topics.js";
+import type { OobiRecord } from "../../core/records.js";
+import { type Role } from "../../core/roles.js";
+import type { Revery } from "../../core/routing.js";
+import { type ReplyProcessDecision } from "../../core/routing.js";
+import type { Baser } from "../../db/basing.js";
+import type { Exchanger, ExchangeRouteHandler } from "../exchanges/exchanging.js";
+import type { Hab, Habery } from "../identity/habbing.js";
+import type { Notifier } from "../notifications/notifying.js";
+import type { ProtocolProcessor } from "../protocol/protocol-processing.js";
+import type { HttpClient } from "../transport/http-client.js";
 export declare const OOBI_REQUEST_ROUTE = "/oobis";
 /**
  * Runtime-tracked OOBI resolution job.
@@ -28,10 +32,34 @@ export interface OobiJob {
     said?: string;
     state?: string;
 }
-interface OobieryOptions {
-    cues?: Deck<AgentCue>;
-    services?: RuntimeServices;
+/**
+ * Projection of one requested URL's durable terminal OOBI/authentication row.
+ */
+export interface OobiTerminalState {
+    /**
+     * Pending until a terminal row exists; resolved/failed reflects that row.
+     */
+    status: "pending" | "resolved" | "failed";
+    /**
+     * Database family supplying the terminal row, or none.
+     */
+    via: "none" | "roobi" | "eoobi" | "rmfa";
+    /**
+     * Borrowed terminal row, or null while pending.
+     */
+    record: OobiRecord | null;
 }
+/**
+ * Return the current terminal state projection for one requested OOBI URL.
+ *
+ * @param db Borrowed OOBI/authentication records; this read starts no workers or I/O.
+ * @param url Exact requested OOBI/well-known URL whose durable state is inspected.
+ * @param kind Actual queued family; ordinary CLI resolution infers it from the URL.
+ * Configuration may put the same well-known URL in introduction and auth queues.
+ * @returns Current durable terminal projection for that family.
+ */
+export declare function oobiTerminalState(db: Baser, url: string, kind?: OobiQueueKind): OobiTerminalState;
+type OobiQueueKind = "oobis" | "woobi";
 /**
  * Durable OOBI processing component for one `Habery`.
  *
@@ -46,14 +74,37 @@ interface OobieryOptions {
  *   leak back to the `AgentRuntime` root
  */
 export declare class Oobiery {
+    private readonly protocol;
+    /** Borrowed reply verifier; route installation and proof writes share this owner. */
+    private readonly rvy;
+    /** Borrowed local identities and durable OOBI job stores. */
     readonly hby: Habery;
-    readonly reactor: Reactor;
+    /** Input-specific KEL policy sharing accepted state and the composed reply verifier. */
+    readonly kvy: Kevery;
+    /** OOBI completion/query observations consumed by the composed application flow. */
     readonly cues: Deck<AgentCue>;
-    readonly services: RuntimeServices;
+    /** Borrowed HTTP client; no network service is discovered through ingress. */
+    readonly http: HttpClient;
+    /** Prevent overlapping passes over this owner's durable job queue. */
     private active;
-    constructor(hby: Habery, reactor: Reactor, options?: OobieryOptions);
-    /** Register `/introduce` on the shared reply router. */
-    registerReplyRoutes(router?: import("../core/routing.js").Router): void;
+    /**
+     * Bind byte intake and the actual reply verifier used by OOBI proof persistence.
+     *
+     * @param hby Borrowed local identities and accepted-state stores.
+     * @param protocol Borrowed shared semantic owner; this component owns its fetched byte-input context.
+     * @param rvy Actual shared reply verifier used for OOBI reply proof persistence.
+     * @param http Borrowed HTTP implementation selected by composition.
+     * @param cues Required application result Deck supplied by composition.
+     */
+    constructor(hby: Habery, protocol: ProtocolProcessor, 
+    /** Borrowed reply verifier; route installation and proof writes share this owner. */
+    rvy: Revery, http: HttpClient, cues: Deck<AgentCue>);
+    /**
+     * Register `/introduce` on the shared reply router.
+     *
+     * @param router Shared reply router on which /introduce is registered.
+     */
+    registerReplyRoutes(router?: import("../../core/routing.js").Router): void;
     /**
      * Queue one OOBI for durable later processing.
      *
@@ -66,9 +117,9 @@ export declare class Oobiery {
      * Process one queued durable OOBI record, if any.
      *
      * Behavior:
-     * - reads the next queued `oobis.` / `woobi.` record
+     * - reads the next queued `oobis.` record or resumes a surviving `coobi.` row
      * - fetches it under Effection cancellation control
-     * - routes any returned KERI bytes through `Reactor`
+     * - parses fetched KERI bytes through this owner's Kevery and shared semantic handlers
      * - transitions the durable record into `eoobi.` or `roobi.`
      */
     processOnce(): Operation<void>;
@@ -81,9 +132,9 @@ export declare class Oobiery {
      * doer rather than root-owned queue plumbing.
      */
     oobiDo(): Operation<never>;
-    /** Return the next queued durable OOBI record, if any. */
+    /** Select queued work, including a surviving in-flight row whose former process is gone. */
     private nextQueued;
-    /** Return one multi-OOBI parent whose child URLs have all settled. */
+    /** Select a parent only after its current child attempts, including authentication, settle. */
     private nextReadyMoobi;
     /**
      * Resolve one queued OOBI record through fetch -> parse -> route -> persist.
@@ -93,11 +144,31 @@ export declare class Oobiery {
      * - `coobi.` while a fetched response is being processed
      * - `eoobi.` on HTTP failure
      * - `roobi.` after parser/routing success
+     *
+     * @param kind Durable OOBI queue family identifying the job path.
+     * @param url Exact OOBI URL used as the durable job key.
+     * @param record Pending durable job; retained through failure and joined cleanup.
      */
     private processJob;
-    /** Consume one owned response; queued ownership ends only after a terminal result is persisted. */
+    /**
+     * Consume one owned response; queued ownership ends only after a terminal result is persisted.
+     *
+     * @param kind Durable OOBI queue family identifying the job path.
+     * @param url Exact OOBI URL used as the durable job key.
+     * @param queuedRecord Original durable job metadata retained until terminal publication.
+     * @param meta Parsed OOBI URL metadata selecting the response interpretation.
+     * @param response Borrowed scoped HTTP response; complete processing precedes terminal state.
+     */
     private processResponse;
-    /** Mark an OOBI resolved only after its complete CESR response has been dispatched. */
+    /**
+     * Mark an OOBI resolved only after its complete CESR response has been dispatched.
+     *
+     * @param kind Durable OOBI queue family identifying the job path.
+     * @param url Exact OOBI URL used as the durable job key.
+     * @param queuedRecord Original durable job metadata retained until terminal publication.
+     * @param meta Parsed OOBI URL metadata selecting the response interpretation.
+     * @param response Borrowed scoped HTTP response; complete processing precedes terminal state.
+     */
     private resolveCesrOobiResponse;
     /** Handle schema data-OOBIs before generic JSON reply handling. */
     private processSchemaOobiResponse;
@@ -118,6 +189,8 @@ export declare class Oobiery {
     /**
      * Process one `/introduce` reply and enqueue the introduced OOBI into the
      * ordinary durable resolver path.
+     *
+     * @param args Verified reply route input and signature evidence used to persist introduction results.
      */
     processReply(args: {
         serder: SerderKERI;

package/types/app/bootstrap/oobiery.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"oobiery.d.ts","sourceRoot":"","sources":["../../../src/app/bootstrap/oobiery.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,KAAK,EAAE,KAAK,EAAkB,UAAU,EAAE,MAAM,SAAS,CAAC;AACxE,OAAO,EAAQ,KAAK,SAAS,EAAoB,MAAM,WAAW,CAAC;AACnE,OAAO,KAAK,EAAE,QAAQ,EAAmB,MAAM,oBAAoB,CAAC;AACpE,OAAO,EAAE,IAAI,EAAE,MAAM,oBAAoB,CAAC;AAC1C,OAAO,EAAE,KAAK,gBAAgB,EAAE,MAAM,wBAAwB,CAAC;AAG/D,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,4BAA4B,CAAC;AACzD,OAAO,EAAE,kBAAkB,EAAE,MAAM,sCAAsC,CAAC;AAC1E,OAAO,KAAK,EAAE,UAAU,EAAmB,MAAM,uBAAuB,CAAC;AACzE,OAAO,EAAE,KAAK,IAAI,EAAS,MAAM,qBAAqB,CAAC;AACvD,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,uBAAuB,CAAC;AACpD,OAAO,EAAuB,KAAK,oBAAoB,EAA2B,MAAM,uBAAuB,CAAC;AAEhH,OAAO,KAAK,EAAE,KAAK,EAAE,MAAM,oBAAoB,CAAC;AAChD,OAAO,KAAK,EAAE,SAAS,EAAE,oBAAoB,EAAE,MAAM,4BAA4B,CAAC;AAClF,OAAO,KAAK,EAAE,GAAG,EAAE,MAAM,EAAE,MAAM,wBAAwB,CAAC;AAE1D,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,+BAA+B,CAAC;AAC9D,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,oCAAoC,CAAC;AAK5E,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,6BAA6B,CAAC;AAG9D,eAAO,MAAM,kBAAkB,WAAW,CAAC;AAE3C;;;;;;GAMG;AACH,MAAM,WAAW,OAAO;IACtB,GAAG,EAAE,MAAM,CAAC;IACZ,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,IAAI,CAAC,EAAE,IAAI,GAAG,MAAM,CAAC;IACrB,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAED;;GAEG;AACH,MAAM,WAAW,iBAAiB;IAChC;;OAEG;IACH,MAAM,EAAE,SAAS,GAAG,UAAU,GAAG,QAAQ,CAAC;IAC1C;;OAEG;IACH,GAAG,EAAE,MAAM,GAAG,OAAO,GAAG,OAAO,GAAG,MAAM,CAAC;IACzC;;OAEG;IACH,MAAM,EAAE,UAAU,GAAG,IAAI,CAAC;CAC3B;AAED;;;;;;;;GAQG;AACH,wBAAgB,iBAAiB,CAC/B,EAAE,EAAE,KAAK,EACT,GAAG,EAAE,MAAM,EACX,IAAI,GAAE,aAAiC,GACtC,iBAAiB,CA4BnB;AAED,KAAK,aAAa,GAAG,OAAO,GAAG,OAAO,CAAC;AAEvC;;;;;;;;;;;;GAYG;AACH,qBAAa,OAAO;IAuBhB,OAAO,CAAC,QAAQ,CAAC,QAAQ;IACzB,qFAAqF;IACrF,OAAO,CAAC,QAAQ,CAAC,GAAG;IAxBtB,6DAA6D;IAC7D,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;IACrB,wFAAwF;IACxF,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;IACrB,oFAAoF;IACpF,QAAQ,CAAC,IAAI,EAAE,IAAI,CAAC,QAAQ,CAAC,CAAC;IAC9B,8EAA8E;IAC9E,QAAQ,CAAC,IAAI,EAAE,UAAU,CAAC;IAC1B,sEAAsE;IACtE,OAAO,CAAC,MAAM,CAAS;IAEvB;;;;;;;;OAQG;gBAED,GAAG,EAAE,MAAM,EACM,QAAQ,EAAE,iBAAiB;IAC5C,qFAAqF;IACpE,GAAG,EAAE,MAAM,EAC5B,IAAI,EAAE,UAAU,EAChB,IAAI,EAAE,IAAI,CAAC,QAAQ,CAAC;IAWtB;;;;OAIG;IACH,mBAAmB,CAAC,MAAM,yCAAe,GAAG,IAAI;IAIhD;;;;;;OAMG;IACH,OAAO,CAAC,GAAG,EAAE,MAAM,EAAE,KAAK,CAAC,EAAE,MAAM,GAAG,IAAI;IAS1C;;;;;;;;OAQG;IACF,WAAW,IAAI,SAAS,CAAC,IAAI,CAAC;IAgB/B,qGAAqG;IACrG,OAAO,CAAC,aAAa;IAsBrB;;;;;OAKG;IACF,MAAM,IAAI,SAAS,CAAC,KAAK,CAAC;IAO3B,4FAA4F;IAC5F,OAAO,CAAC,UAAU;IAUlB,+FAA+F;IAC/F,OAAO,CAAC,cAAc;IAWtB;;;;;;;;;;;;OAYG;IACH,OAAO,CAAE,UAAU;IAiDnB;;;;;;;;OAQG;IACH,OAAO,CAAE,eAAe;IAwCxB;;;;;;;;OAQG;IACH,OAAO,CAAE,uBAAuB;IAwBhC,mEAAmE;IACnE,OAAO,CAAC,yBAAyB;IA8BjC,kFAAkF;IAClF,OAAO,CAAC,uBAAuB;IA0B/B,0FAA0F;IAC1F,OAAO,CAAC,qBAAqB;IAqC7B,oFAAoF;IACpF,OAAO,CAAC,iBAAiB;IA+BzB,+EAA+E;IAC/E,OAAO,CAAC,eAAe;IAavB,iEAAiE;IACjE,OAAO,CAAC,aAAa;IASrB,gEAAgE;IAChE,OAAO,CAAC,aAAa;IAKrB,iEAAiE;IACjE,OAAO,CAAC,YAAY;IAYpB;;;;;OAKG;IACH,YAAY,CAAC,IAAI,EAAE;QACjB,MAAM,EAAE,UAAU,CAAC;QACnB,KAAK,EAAE,KAAK,CAAC;QACb,KAAK,EAAE,MAAM,CAAC;QACd,MAAM,CAAC,EAAE,KAAK,EAAE,CAAC;QACjB,IAAI,CAAC,EAAE,gBAAgB,EAAE,CAAC;KAC3B,GAAG,oBAAoB;CAwDzB;AAED,wBAAgB,gBAAgB,CAC9B,GAAG,EAAE,MAAM,EACX,SAAS,EAAE,SAAS,EACpB,QAAQ,GAAE,QAAQ,GAAG,IAAW,GAC/B,IAAI,CAEN;AAED;;;;;;;;;;;;;;;;;;;GAmBG;AACH,qBAAa,kBAAmB,YAAW,oBAAoB;IAC7D,MAAM,CAAC,QAAQ,CAAC,QAAQ,YAAsB;IAC9C,QAAQ,CAAC,QAAQ,YAA+B;IAChD,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;IACrB,QAAQ,CAAC,QAAQ,EAAE,QAAQ,GAAG,IAAI,CAAC;gBAGjC,GAAG,EAAE,MAAM,EACX,QAAQ,GAAE,QAAQ,GAAG,IAAW;IAMlC,MAAM,CAAC,IAAI,EAAE;QACX,MAAM,EAAE,UAAU,CAAC;KACpB,GAAG,OAAO;IAaX,MAAM,CAAC,IAAI,EAAE;QACX,MAAM,EAAE,UAAU,CAAC;KACpB,GAAG,IAAI;CA6BT;AAED,wBAAgB,cAAc,CAC5B,GAAG,EAAE,GAAG,EACR,IAAI,EAAE,MAAM,EACZ,IAAI,EAAE,MAAM,GACX,UAAU,CAQZ;AAED;;;;;;;;;;GAUG;AACH,wBAAgB,YAAY,CAAC,GAAG,EAAE,MAAM,EAAE,KAAK,CAAC,EAAE,MAAM,GAAG,OAAO,CA+BjE;AAED,wEAAwE;AACxE,wBAAgB,kBAAkB,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAIvD;AAgCD,OAAO,EAAE,kBAAkB,EAAE,CAAC"}

package/types/app/credentials/credential-importing.d.ts

@@ -0,0 +1,29 @@
+import { type Operation } from "effection";
+import type { Reger } from "../../db/reger.js";
+import type { ProtocolProcessor } from "../protocol/protocol-processing.js";
+import type { RuntimeClock } from "../runtime/runtime-clock.js";
+/** Acceptance observed after finite input cleanup and any needed local escrow recovery. */
+export interface CredentialImportResult {
+    /** Newly saved raw credential SAIDs from this input; imported grant children and unrelated recoveries are excluded. */
+    saved: string[];
+    /** Whether this input's observed credential, KEL/TEL and EXN records are accepted, not validation of every occurrence. */
+    complete: boolean;
+    /** Deduplicated input SAIDs without their normal accepted records, in first-seen order. */
+    unaccepted: string[];
+}
+/**
+ * Dispatch each frame once, then recover local dependencies through their existing escrow owners.
+ * This operation owns its parser/Kevery and starts no network, mailbox or host workers.
+ * Later input failures preserve earlier accepted state. Receipts, replies and other messages still
+ * use normal dispatch; absence of an importer acceptance lookup is not an additional refusal policy.
+ *
+ * @param protocol Borrowed protocol dispatcher, sharing reger with its TEL/credential handlers.
+ * @param reger Borrowed credential/TEL store whose accepted records establish the result.
+ * @param bytes Borrowed finite CESR bundle; parser chunks are copied during intake.
+ * @param clock Borrowed timer implementation for the deadline and cooperative yields between sweeps.
+ * @param timeoutMs Positive finite post-EOF settlement limit in milliseconds, default 5000; floored with a one-millisecond minimum before intake.
+ * @returns Accepted-record observations after joined input/handler cleanup. Settlement stops when all observed records are accepted, or the deadline expires.
+ * @throws Parser, storage, handler and cleanup failures propagate with partial accepted state intact. Cancellation joins active work; a deadline cannot interrupt synchronous owner work mid-sweep.
+ */
+export declare function importCredentialStream(protocol: ProtocolProcessor, reger: Reger, bytes: Uint8Array, clock: RuntimeClock, timeoutMs?: number): Operation<CredentialImportResult>;
+//# sourceMappingURL=credential-importing.d.ts.map

package/types/app/credentials/credential-importing.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"credential-importing.d.ts","sourceRoot":"","sources":["../../../src/app/credentials/credential-importing.ts"],"names":[],"mappings":"AAEA,OAAO,EAAwB,KAAK,SAAS,EAAQ,MAAM,WAAW,CAAC;AAGvE,OAAO,KAAK,EAAE,KAAK,EAAE,MAAM,mBAAmB,CAAC;AAC/C,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,oCAAoC,CAAC;AAE5E,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,6BAA6B,CAAC;AAGhE,2FAA2F;AAC3F,MAAM,WAAW,sBAAsB;IACrC,uHAAuH;IACvH,KAAK,EAAE,MAAM,EAAE,CAAC;IAChB,0HAA0H;IAC1H,QAAQ,EAAE,OAAO,CAAC;IAClB,2FAA2F;IAC3F,UAAU,EAAE,MAAM,EAAE,CAAC;CACtB;AA6BD;;;;;;;;;;;;;GAaG;AACH,wBAAiB,sBAAsB,CACrC,QAAQ,EAAE,iBAAiB,EAC3B,KAAK,EAAE,KAAK,EACZ,KAAK,EAAE,UAAU,EACjB,KAAK,EAAE,YAAY,EACnB,SAAS,SAAQ,GAChB,SAAS,CAAC,sBAAsB,CAAC,CA+CnC"}

package/types/app/credentials/credential-proposals.d.ts

@@ -0,0 +1,27 @@
+/** Read-only legacy credential proposal checks performed before member approval/signing. */
+import { type SerderACDC, type SerderKERI, type Versionage } from "cesr-ts";
+import type { Reger } from "../../db/reger.js";
+import { type Regery } from "../../vdr/credentialing.js";
+import type { Habery } from "../identity/habbing.js";
+/** Refuse a blank or conflicting local registry alias before signing its anchor. */
+export declare function validateRegistryName(reger: Reger, name: string, regk?: string): void;
+/**
+ * Require known group KEL authority before adding a fresh anchor signature.
+ * A future predecessor stays pending. An accepted historical anchor can use the
+ * current keys only while no intervening establishment event has changed them;
+ * recorded approval instead reuses its original contribution.
+ */
+export declare function groupCredentialAnchorReady(hby: Habery, issuer: string, anchor: SerderKERI): boolean;
+/** Validate the signed VCP policy and its exact issuer anchor without accepting either event. */
+export declare function validateRegistryProposal(issuer: string, event: SerderKERI, anchor: SerderKERI): void;
+/**
+ * Validate issuer/registry/credential/TEL bindings and the cached credential schema.
+ * Missing accepted registry or schema remains pending. Malformed business evidence
+ * is refused without changing KEL, TEL, wallet or alias state; storage faults propagate.
+ */
+export declare function validateCredentialIssueProposal(rgy: Regery, issuer: string, creder: SerderACDC, event: SerderKERI, anchor?: SerderKERI): boolean;
+/** Require saved issuer/registry/issuance authority and the exact REV anchor before approving. */
+export declare function validateCredentialRevocationProposal(rgy: Regery, issuer: string, credentialSaid: string, event: SerderKERI, anchor: SerderKERI): boolean;
+/** Check the ACDC's actual CESR source triple, independently of the coordinating parent's signatures. */
+export declare function validateCredentialSource(creder: SerderACDC, issuance: SerderKERI, attachment: Uint8Array, genus: Versionage): void;
+//# sourceMappingURL=credential-proposals.d.ts.map

package/types/app/credentials/credential-proposals.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"credential-proposals.d.ts","sourceRoot":"","sources":["../../../src/app/credentials/credential-proposals.ts"],"names":[],"mappings":"AAAA,4FAA4F;AAC5F,OAAO,EAKL,KAAK,UAAU,EACf,KAAK,UAAU,EAEf,KAAK,UAAU,EAChB,MAAM,SAAS,CAAC;AAEjB,OAAO,KAAK,EAAE,KAAK,EAAE,MAAM,mBAAmB,CAAC;AAC/C,OAAO,EAAgB,KAAK,MAAM,EAAE,MAAM,4BAA4B,CAAC;AAIvE,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,wBAAwB,CAAC;AAIrD,oFAAoF;AACpF,wBAAgB,oBAAoB,CAAC,KAAK,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,MAAM,GAAG,IAAI,CAMpF;AAED;;;;;GAKG;AACH,wBAAgB,0BAA0B,CAAC,GAAG,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,UAAU,GAAG,OAAO,CAmBnG;AAED,iGAAiG;AACjG,wBAAgB,wBAAwB,CAAC,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,UAAU,EAAE,MAAM,EAAE,UAAU,GAAG,IAAI,CAKpG;AAED;;;;GAIG;AACH,wBAAgB,+BAA+B,CAC7C,GAAG,EAAE,MAAM,EACX,MAAM,EAAE,MAAM,EACd,MAAM,EAAE,UAAU,EAClB,KAAK,EAAE,UAAU,EACjB,MAAM,CAAC,EAAE,UAAU,GAClB,OAAO,CAsBT;AAED,kGAAkG;AAClG,wBAAgB,oCAAoC,CAClD,GAAG,EAAE,MAAM,EACX,MAAM,EAAE,MAAM,EACd,cAAc,EAAE,MAAM,EACtB,KAAK,EAAE,UAAU,EACjB,MAAM,EAAE,UAAU,GACjB,OAAO,CAMT;AAED,yGAAyG;AACzG,wBAAgB,wBAAwB,CACtC,MAAM,EAAE,UAAU,EAClB,QAAQ,EAAE,UAAU,EACpB,UAAU,EAAE,UAAU,EACtB,KAAK,EAAE,UAAU,GAChB,IAAI,CASN"}

package/types/app/credentials/credential-revoking.d.ts

@@ -0,0 +1,44 @@
+/** Legacy NoBackers revocation, member fanout and explicit delivery of completed evidence. */
+import { type SerderACDC } from "cesr-ts";
+import type { Operation } from "effection";
+import type { Regery } from "../../vdr/credentialing.js";
+import type { TelProcessDecision } from "../../vdr/eventing.js";
+import type { Poster } from "../delivery/forwarding.js";
+import { MULTISIG_REV_ROUTE } from "../multisig/grouping.js";
+import type { GroupSendResult } from "../multisig/multisig-messaging.js";
+import type { Reactor } from "../protocol/reactor.js";
+export interface CredentialRevokeOptions {
+    registryName: string;
+    credentialSaid: string;
+}
+/** Local TEL and publication facts; member transmission does not establish either. */
+export interface CredentialRevokeResult {
+    creder: SerderACDC;
+    said: string;
+    tel: string;
+    status: TelProcessDecision["kind"];
+    accepted: boolean;
+    publicationComplete: boolean;
+    /** Actual external transport destinations, populated by a completed delivery operation. */
+    deliveries: string[];
+    group?: GroupSendResult & {
+        route: typeof MULTISIG_REV_ROUTE;
+    };
+}
+/**
+ * Revoke once or resume the original event. Group issuers author a partial anchor,
+ * retain ordinary protocol evidence, then admit/fan out the exact coordination
+ * wrapper. This operation neither waits for peer approval nor delivers pending
+ * evidence to business recipients. The caller runs the host and owns its deadline.
+ */
+export declare function revokeCredential(rgy: Regery, input: Reactor, postman: Poster, options: CredentialRevokeOptions): Operation<CredentialRevokeResult>;
+/**
+ * Send only accepted, publication-complete REV evidence. Elect the lowest verified
+ * historical anchor signer for a group; another member returns no deliveries.
+ * Poster completion means local transport, not remote protocol acknowledgement.
+ * An explicit repeat may resend; there is no durable delivery ledger or retry worker.
+ */
+export declare function deliverCredentialRevocation(rgy: Regery, postman: Poster, credentialSaid: string, recipients: readonly string[]): Operation<string[]>;
+/** Resolve explicit destinations and the caller's choice to notify a disclosed issuee. */
+export declare function revocationRecipients(creder: SerderACDC, explicit: readonly string[], includeIssuee: boolean): string[];
+//# sourceMappingURL=credential-revoking.d.ts.map

package/types/app/credentials/credential-revoking.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"credential-revoking.d.ts","sourceRoot":"","sources":["../../../src/app/credentials/credential-revoking.ts"],"names":[],"mappings":"AAAA,8FAA8F;AAC9F,OAAO,EAAe,KAAK,UAAU,EAAqC,MAAM,SAAS,CAAC;AAC1F,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,WAAW,CAAC;AAK3C,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,4BAA4B,CAAC;AACzD,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,uBAAuB,CAAC;AAEhE,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,2BAA2B,CAAC;AAIxD,OAAO,EAAE,kBAAkB,EAAE,MAAM,yBAAyB,CAAC;AAC7D,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,mCAAmC,CAAC;AACzE,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,wBAAwB,CAAC;AAGtD,MAAM,WAAW,uBAAuB;IACtC,YAAY,EAAE,MAAM,CAAC;IACrB,cAAc,EAAE,MAAM,CAAC;CACxB;AAED,sFAAsF;AACtF,MAAM,WAAW,sBAAsB;IACrC,MAAM,EAAE,UAAU,CAAC;IACnB,IAAI,EAAE,MAAM,CAAC;IACb,GAAG,EAAE,MAAM,CAAC;IACZ,MAAM,EAAE,kBAAkB,CAAC,MAAM,CAAC,CAAC;IACnC,QAAQ,EAAE,OAAO,CAAC;IAClB,mBAAmB,EAAE,OAAO,CAAC;IAC7B,2FAA2F;IAC3F,UAAU,EAAE,MAAM,EAAE,CAAC;IACrB,KAAK,CAAC,EAAE,eAAe,GAAG;QAAE,KAAK,EAAE,OAAO,kBAAkB,CAAA;KAAE,CAAC;CAChE;AAED;;;;;GAKG;AACH,wBAAiB,gBAAgB,CAC/B,GAAG,EAAE,MAAM,EACX,KAAK,EAAE,OAAO,EACd,OAAO,EAAE,MAAM,EACf,OAAO,EAAE,uBAAuB,GAC/B,SAAS,CAAC,sBAAsB,CAAC,CAoDnC;AAED;;;;;GAKG;AACH,wBAAiB,2BAA2B,CAC1C,GAAG,EAAE,MAAM,EACX,OAAO,EAAE,MAAM,EACf,cAAc,EAAE,MAAM,EACtB,UAAU,EAAE,SAAS,MAAM,EAAE,GAC5B,SAAS,CAAC,MAAM,EAAE,CAAC,CAsCrB;AAED,0FAA0F;AAC1F,wBAAgB,oBAAoB,CAClC,MAAM,EAAE,UAAU,EAClB,QAAQ,EAAE,SAAS,MAAM,EAAE,EAC3B,aAAa,EAAE,OAAO,GACrB,MAAM,EAAE,CAGV"}