keri-ts 1.0.0 → 2.0.0

package/types/app/{delegating.d.ts → identity/delegating.d.ts}

@@ -14,13 +14,14 @@
  */
 import { type SerderKERI } from "cesr-ts";
 import { type Operation } from "effection";
-import type { QueryRequest } from "../core/cues.js";
-import type { ExchangeAttachment, Exchanger, ExchangeRouteHandler } from "./exchanging.js";
-import { type Poster } from "./forwarding.js";
+import type { QueryRequest } from "../../core/cues.js";
+import { type Poster } from "../delivery/forwarding.js";
+import type { ExchangeAttachment, Exchanger, ExchangeRouteHandler } from "../exchanges/exchanging.js";
+import type { Notifier } from "../notifications/notifying.js";
+import type { ProtocolProcessor } from "../protocol/protocol-processing.js";
+import type { RuntimeClock } from "../runtime/runtime-clock.js";
+import type { HttpClient } from "../transport/http-client.js";
 import { type Hab, type Habery } from "./habbing.js";
-import type { Notifier } from "./notifying.js";
-import type { Reactor } from "./reactor.js";
-import { type RuntimeServices } from "./runtime-services.js";
 export declare const DELEGATE_REQUEST_ROUTE = "/delegate/request";
 /** Durable phase for one delegated event as it moves through approval. */
 export type DelegationPhase = "waitingWitnessReceipts" | "waitingDelegatorAnchor" | "waitingWitnessPublication";
@@ -130,22 +131,41 @@ export declare class DelegateRequestHandler implements ExchangeRouteHandler {
  *   learned locally and pinned into `aess.`
  */
 export declare class Anchorer {
+    /** Borrowed identities and durable delegation escrow stores. */
     readonly hby: Habery;
-    readonly poster: Poster;
+    /** Queued delivery owner; phase transitions wait for the matching successful outcome. */
+    readonly postman: Poster;
     /** Query producer port; composition owns the consuming coordinator and its lifetime. */
     readonly querying: {
         enqueue(request: QueryRequest): void;
     };
-    readonly services: RuntimeServices;
-    readonly reactor?: Reactor;
+    /** Borrowed HTTP and clock services for witness publication. */
+    readonly http: HttpClient;
+    /** Borrowed clock for this owner's actual network deadlines. */
+    readonly clock: RuntimeClock;
+    /** Borrowed receive processing for witness sends; absent explicitly permits transmit-only delivery. */
+    readonly protocol: ProtocolProcessor | null;
+    /** Process-local proxy selection per delegated event; cleared when the workflow ends. */
     readonly communicationHabPins: Map<string, string>;
+    /** Existing query retry-pass bookkeeping; independent of Poster delivery retry. */
     readonly anchorQueryRetryPasses: Map<string, number>;
-    constructor(hby: Habery, { poster, querying, services, reactor }: {
-        poster: Poster;
-        querying: Anchorer["querying"];
-        services?: RuntimeServices;
-        reactor?: Reactor;
-    });
+    /**
+     * Bind delivery/query/protocol collaborators from the same accepted-state domain; acquire no stores.
+     *
+     * @param hby Borrowed local identities and accepted-state stores.
+     * @param postman Borrowed Poster; its delivery worker must run while this operation awaits outcomes.
+     * @param querying Borrowed query-admission owner for anchor discovery.
+     * @param protocol Same-database reply processor, or null when receive support is absent.
+     * @param http Borrowed HTTP implementation selected by composition.
+     * @param clock Borrowed clock with epoch-millisecond now and millisecond timer delays.
+     */
+    constructor(hby: Habery, postman: Poster, querying: Anchorer["querying"], protocol: ProtocolProcessor | null, http: HttpClient, clock: RuntimeClock);
+    /**
+     * Start one delegated event in witness-receipt escrow and replace any previous local proxy pin.
+     *
+     * @param serder Delegated event whose witness/approval workflow is started or reset.
+     * @param options Optional communicationHab pins a local proxy signer for this process.
+     */
     begin(serder: SerderKERI, options?: {
         communicationHab?: Hab;
     }): void;
@@ -159,15 +179,32 @@ export declare class Anchorer {
     complete(pre: string, sn: number | string): boolean;
     /** Advance delegation escrows using the protocol receiver selected at construction. */
     processAllOnce(): Operation<DelegationWorkflowResult[]>;
+    /**
+     * Require delegate receipts, deliver the approval request/event, then move to anchor discovery. Failed delivery leaves this phase retained.
+     *
+     * @param context Escrow key, event, prefix and SAID resolved from durable workflow state.
+     * @returns Current delegation phase result; failed transmission does not advance to anchor discovery.
+     */
     private processPartialWitnessEscrow;
+    /** Wait for locally accepted delegator evidence; pin its seal before completing or publishing to witnesses. */
     private processUnanchoredEscrow;
+    /** Record durable completion only after the preceding publication operation has succeeded. */
     private processWitnessPublication;
+    /** Use the pinned proxy for inception or the existing delegate for rotation; never guess an inception signer. */
     private communicationHab;
+    /** Publish the initial anchor query after successful sending and seed the existing retry-pass bookkeeping. */
     private queueDelegatorWitnessQueryNow;
     /** Retry bounded delegator-witness queries while waiting for the anchor. */
     private retryDelegatorWitnessQuery;
+    /** Retire only this event's process-local signer and query bookkeeping. */
     private clearWorkflowPins;
+    /** Choose the pinned proxy, local group member or existing communication habitat for publication. */
     private publicationTransportHab;
+    /**
+     * Send the delegation chain before the approving event, awaiting actual Poster or witness transmission outcomes.
+     *
+     * @param serder Accepted delegator event to publish after its required delegation chain.
+     */
     private publishDelegator;
 }
 //# sourceMappingURL=delegating.d.ts.map

package/types/app/identity/delegating.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"delegating.d.ts","sourceRoot":"","sources":["../../../src/app/identity/delegating.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AACH,OAAO,EAAS,KAAK,UAAU,EAAE,MAAM,SAAS,CAAC;AACjD,OAAO,EAAE,KAAK,SAAS,EAAE,MAAM,WAAW,CAAC;AAC3C,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAKvD,OAAO,EAAE,KAAK,MAAM,EAAE,MAAM,2BAA2B,CAAC;AAExD,OAAO,KAAK,EAAE,kBAAkB,EAAE,SAAS,EAAE,oBAAoB,EAAE,MAAM,4BAA4B,CAAC;AACtG,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,+BAA+B,CAAC;AAC9D,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,oCAAoC,CAAC;AAC5E,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,6BAA6B,CAAC;AAChE,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,6BAA6B,CAAC;AAE9D,OAAO,EAA2C,KAAK,GAAG,EAAE,KAAK,MAAM,EAAE,MAAM,cAAc,CAAC;AAE9F,eAAO,MAAM,sBAAsB,sBAAsB,CAAC;AAK1D,0EAA0E;AAC1E,MAAM,MAAM,eAAe,GACvB,wBAAwB,GACxB,wBAAwB,GACxB,2BAA2B,CAAC;AAEhC,8EAA8E;AAC9E,MAAM,MAAM,wBAAwB,GAChC;IACA,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,EAAE,eAAe,CAAC;IACvB,GAAG,EAAE,MAAM,CAAC;IACZ,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,EAAE,MAAM,CAAC;CAChB,GACC;IACA,IAAI,EAAE,SAAS,CAAC;IAChB,GAAG,EAAE,MAAM,CAAC;IACZ,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,eAAe,CAAC;IACtB,EAAE,EAAE,eAAe,CAAC;IACpB,MAAM,EAAE,MAAM,CAAC;CAChB,GACC;IACA,IAAI,EAAE,UAAU,CAAC;IACjB,GAAG,EAAE,MAAM,CAAC;IACZ,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,EAAE,eAAe,CAAC;IACvB,MAAM,EAAE,MAAM,CAAC;CAChB,GACC;IACA,IAAI,EAAE,MAAM,CAAC;IACb,GAAG,EAAE,MAAM,CAAC;IACZ,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,EAAE,eAAe,CAAC;IACvB,MAAM,EAAE,MAAM,CAAC;CAChB,CAAC;AAEJ,MAAM,WAAW,wBAAwB;IACvC,KAAK,EAAE,eAAe,GAAG,IAAI,CAAC;IAC9B,cAAc,EAAE,OAAO,CAAC;IACxB,QAAQ,EAAE,OAAO,CAAC;CACnB;AA4JD,wBAAgB,iCAAiC,CAC/C,GAAG,EAAE,MAAM,EACX,KAAK,CAAC,EAAE,MAAM,GACb,GAAG,GAAG,SAAS,CAcjB;AAED,yEAAyE;AACzE,wBAAgB,sBAAsB,CACpC,GAAG,EAAE,MAAM,EACX,SAAS,EAAE,SAAS,EACpB,QAAQ,GAAE,QAAQ,GAAG,IAAW,GAC/B,IAAI,CAEN;AAED;;;;;;;;;;;;;;;;;;GAkBG;AACH,qBAAa,sBAAuB,YAAW,oBAAoB;IACjE,MAAM,CAAC,QAAQ,CAAC,QAAQ,uBAA0B;IAClD,QAAQ,CAAC,QAAQ,uBAAmC;IACpD,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;IACrB,QAAQ,CAAC,QAAQ,EAAE,QAAQ,GAAG,IAAI,CAAC;gBAGjC,GAAG,EAAE,MAAM,EACX,QAAQ,GAAE,QAAQ,GAAG,IAAW;IAMlC,MAAM,CAAC,IAAI,EAAE;QACX,MAAM,EAAE,UAAU,CAAC;QACnB,WAAW,EAAE,kBAAkB,EAAE,CAAC;KACnC,GAAG,OAAO;IAQX,0FAA0F;IAC1F,MAAM,CAAC,IAAI,EAAE;QACX,MAAM,EAAE,UAAU,CAAC;QACnB,WAAW,EAAE,kBAAkB,EAAE,CAAC;KACnC,GAAG,IAAI;CAyBT;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAkCG;AACH,qBAAa,QAAQ;IACnB,gEAAgE;IAChE,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;IACrB,yFAAyF;IACzF,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,wFAAwF;IACxF,QAAQ,CAAC,QAAQ,EAAE;QAAE,OAAO,CAAC,OAAO,EAAE,YAAY,GAAG,IAAI,CAAA;KAAE,CAAC;IAC5D,gEAAgE;IAChE,QAAQ,CAAC,IAAI,EAAE,UAAU,CAAC;IAC1B,gEAAgE;IAChE,QAAQ,CAAC,KAAK,EAAE,YAAY,CAAC;IAC7B,uGAAuG;IACvG,QAAQ,CAAC,QAAQ,EAAE,iBAAiB,GAAG,IAAI,CAAC;IAC5C,yFAAyF;IACzF,QAAQ,CAAC,oBAAoB,sBAA6B;IAC1D,mFAAmF;IACnF,QAAQ,CAAC,sBAAsB,sBAA6B;IAE5D;;;;;;;;;OASG;gBAED,GAAG,EAAE,MAAM,EACX,OAAO,EAAE,MAAM,EACf,QAAQ,EAAE,QAAQ,CAAC,UAAU,CAAC,EAC9B,QAAQ,EAAE,iBAAiB,GAAG,IAAI,EAClC,IAAI,EAAE,UAAU,EAChB,KAAK,EAAE,YAAY;IAarB;;;;;OAKG;IACH,KAAK,CACH,MAAM,EAAE,UAAU,EAClB,OAAO,GAAE;QAAE,gBAAgB,CAAC,EAAE,GAAG,CAAA;KAAO,GACvC,IAAI;IAeP,8EAA8E;IAC9E,WAAW,CACT,GAAG,EAAE,MAAM,EACX,EAAE,CAAC,EAAE,MAAM,EACX,OAAO,GAAE;QAAE,gBAAgB,CAAC,EAAE,GAAG,CAAA;KAAO,GACvC,UAAU;IAsBb,+EAA+E;IAC/E,cAAc,CACZ,GAAG,EAAE,MAAM,EACX,GAAG,EAAE,MAAM,GACV,wBAAwB;IA0B3B,wEAAwE;IACxE,QAAQ,CAAC,GAAG,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,GAAG,MAAM,GAAG,OAAO;IAkBnD,uFAAuF;IACtF,cAAc,IAAI,SAAS,CAAC,wBAAwB,EAAE,CAAC;IAiCxD;;;;;OAKG;IACH,OAAO,CAAE,2BAA2B;IA2GpC,+GAA+G;IAC/G,OAAO,CAAE,uBAAuB;IAuEhC,8FAA8F;IAC9F,OAAO,CAAE,yBAAyB;IAiBlC,iHAAiH;IACjH,OAAO,CAAC,gBAAgB;IAoBxB,8GAA8G;IAC9G,OAAO,CAAC,6BAA6B;IAkCrC,4EAA4E;IAC5E,OAAO,CAAC,0BAA0B;IAwDlC,2EAA2E;IAC3E,OAAO,CAAC,iBAAiB;IAMzB,qGAAqG;IACrG,OAAO,CAAC,uBAAuB;IAY/B;;;;OAIG;IACH,OAAO,CAAE,gBAAgB;CAoC1B"}

package/types/app/{endpoint-roleing.d.ts → identity/endpoint-roleing.d.ts}

@@ -1,31 +1,42 @@
 import { SerderKERI, Siger, type Versionage } from "cesr-ts";
 import { type Operation } from "effection";
-import type { AgentRuntime } from "./agent-runtime.js";
-import { MULTISIG_RPY_ROUTE } from "./grouping.js";
+import type { Poster } from "../delivery/forwarding.js";
+import { MULTISIG_RPY_ROUTE } from "../multisig/grouping.js";
+import type { ProtocolProcessor } from "../protocol/protocol-processing.js";
 import type { Hab, Habery } from "./habbing.js";
-export { groupSigningMembers, isLocalGroupHab, localGroupMember } from "./group-members.js";
-/** Result of proposing one group endpoint-role authorization reply. */
-export interface GroupEndpointRoleProposalResult {
+import { type GroupSendResult } from "../multisig/multisig-messaging.js";
+export { groupSigningMembers, isLocalGroupHab, localGroupMember } from "../multisig/group-members.js";
+/**
+ * One group endpoint-role proposal: coordination send facts plus the current
+ * accepted authorization predicate. The signed rpy bytes are library evidence;
+ * Tufa's output adapter deliberately omits them from its JSON summary.
+ */
+export interface GroupRoleResult extends GroupSendResult {
     route: typeof MULTISIG_RPY_ROUTE;
-    proposals: {
-        recipient: string;
-        said: string;
-    }[];
     group: string;
+    /** Current Baser.ends authorization, not proof that other participants approved. */
     accepted: boolean;
-    deliveries: string[];
     rpy: Uint8Array;
 }
 /** Return whether endpoint-role state currently authorizes `eid` for `cid`. */
 export declare function endpointRoleAccepted(hby: Habery, cid: string, role: string, eid: string): boolean;
 /** Load an accepted endpoint-role reply or throw a command-facing error. */
 export declare function loadAcceptedEndpointRole(hab: Hab, eid: string, role?: string): Uint8Array;
-/** Propose one group endpoint-role reply under `/multisig/rpy`. */
-export declare function proposeGroupEndpointRole(runtime: AgentRuntime, groupHab: Hab, args: {
+/**
+ * Propose one group endpoint-role reply under `/multisig/rpy`.
+ *
+ * @param hby Borrowed identities and accepted group state.
+ * @param protocol Shared semantic owner; the proposal owns its local byte-input context.
+ * @param postman Borrowed delivery owner; the caller runs and joins its worker.
+ * @param groupHab Local group habitat whose endpoint-role reply needs member approvals.
+ * @param args Endpoint AID, role and allow/cut decision used to construct the signed proposal.
+ * @returns Proposal identifiers, current acceptance and actual delivery URLs.
+ */
+export declare function proposeGroupEndpointRole(hby: Habery, protocol: ProtocolProcessor, postman: Poster, groupHab: Hab, args: {
     eid: string;
     role?: string;
     allow?: boolean;
-}): Operation<GroupEndpointRoleProposalResult>;
+}): Operation<GroupRoleResult>;
 /** Endorse one reply with locally available group member signatures. */
 export declare function groupEndorseReply(hby: Habery, groupPre: string, serder: SerderKERI, gvrsn?: Versionage): Uint8Array;
 /**

package/types/app/identity/endpoint-roleing.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"endpoint-roleing.d.ts","sourceRoot":"","sources":["../../../src/app/identity/endpoint-roleing.ts"],"names":[],"mappings":"AAAA,OAAO,EAAe,UAAU,EAAE,KAAK,EAAE,KAAK,UAAU,EAAE,MAAM,SAAS,CAAC;AAC1E,OAAO,EAAE,KAAK,SAAS,EAAE,MAAM,WAAW,CAAC;AAM3C,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,2BAA2B,CAAC;AAExD,OAAO,EAAE,kBAAkB,EAAE,MAAM,yBAAyB,CAAC;AAC7D,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,oCAAoC,CAAC;AAE5E,OAAO,KAAK,EAAE,GAAG,EAAE,MAAM,EAAE,MAAM,cAAc,CAAC;AAEhD,OAAO,EAGL,KAAK,eAAe,EAIrB,MAAM,mCAAmC,CAAC;AAE3C,OAAO,EAAE,mBAAmB,EAAE,eAAe,EAAE,gBAAgB,EAAE,MAAM,8BAA8B,CAAC;AAEtG;;;;GAIG;AACH,MAAM,WAAW,eAAgB,SAAQ,eAAe;IACtD,KAAK,EAAE,OAAO,kBAAkB,CAAC;IACjC,KAAK,EAAE,MAAM,CAAC;IACd,oFAAoF;IACpF,QAAQ,EAAE,OAAO,CAAC;IAClB,GAAG,EAAE,UAAU,CAAC;CACjB;AAED,+EAA+E;AAC/E,wBAAgB,oBAAoB,CAClC,GAAG,EAAE,MAAM,EACX,GAAG,EAAE,MAAM,EACX,IAAI,EAAE,MAAM,EACZ,GAAG,EAAE,MAAM,GACV,OAAO,CAET;AAED,4EAA4E;AAC5E,wBAAgB,wBAAwB,CACtC,GAAG,EAAE,GAAG,EACR,GAAG,EAAE,MAAM,EACX,IAAI,GAAE,MAAyB,GAC9B,UAAU,CAQZ;AAED;;;;;;;;;GASG;AACH,wBAAiB,wBAAwB,CACvC,GAAG,EAAE,MAAM,EACX,QAAQ,EAAE,iBAAiB,EAC3B,OAAO,EAAE,MAAM,EACf,QAAQ,EAAE,GAAG,EACb,IAAI,EAAE;IACJ,GAAG,EAAE,MAAM,CAAC;IACZ,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,KAAK,CAAC,EAAE,OAAO,CAAC;CACjB,GACA,SAAS,CAAC,eAAe,CAAC,CAgC5B;AAED,wEAAwE;AACxE,wBAAgB,iBAAiB,CAC/B,GAAG,EAAE,MAAM,EACX,QAAQ,EAAE,MAAM,EAChB,MAAM,EAAE,UAAU,EAClB,KAAK,CAAC,EAAE,UAAU,GACjB,UAAU,CAgBZ;AAED;;;;;GAKG;AACH,wBAAgB,cAAc,CAC5B,GAAG,EAAE,MAAM,EACX,QAAQ,EAAE,MAAM,EAChB,MAAM,EAAE,UAAU,GACjB,MAAM,EAAE,CAgBV;AAED;;;GAGG;AACH,wBAAgB,mBAAmB,CACjC,GAAG,EAAE,MAAM,EACX,MAAM,EAAE,UAAU,EAClB,KAAK,EAAE,SAAS,MAAM,EAAE,EACxB,IAAI,EAAE,SAAS,MAAM,EAAE,GACtB,KAAK,EAAE,CAoBT"}

package/types/app/{habbing.d.ts → identity/habbing.d.ts}

@@ -14,17 +14,16 @@
  */
 import { Cigar, SerderKERI, Siger, type ThresholdSith, type Tier, Verfer, type Versionage } from "cesr-ts";
 import { type Operation } from "effection";
-import type { AgentCue, CueEmission, QueryInstruction } from "../core/cues.js";
-import { Deck } from "../core/deck.js";
-import { Kevery } from "../core/eventing.js";
-import { Kever } from "../core/kever.js";
-import type { MbxTopicCursor } from "../core/mailbox-topics.js";
-import { type Role } from "../core/roles.js";
-import { BasicReplyRouteHandler, Revery, Router } from "../core/routing.js";
-import { type Scheme } from "../core/schemes.js";
-import { Baser } from "../db/basing.js";
-import { Keeper } from "../db/keeping.js";
-import { type CesrBodyMode } from "./cesr-http.js";
+import type { AgentCue, QueryInstruction } from "../../core/cues.js";
+import { Deck } from "../../core/deck.js";
+import { Kevery } from "../../core/kel/eventing.js";
+import { Kever } from "../../core/kel/kever.js";
+import type { MbxTopicCursor } from "../../core/mailbox/mailbox-topics.js";
+import { type Role } from "../../core/roles.js";
+import { BasicReplyRouteHandler, Revery, Router } from "../../core/routing.js";
+import { type Scheme } from "../../core/schemes.js";
+import { Baser } from "../../db/basing.js";
+import { Keeper } from "../../db/keeping.js";
 import { Configer } from "./configing.js";
 import { Algos, Manager } from "./keeping.js";
 /** Reserved alias for the local signatory habitat record. */
@@ -46,7 +45,6 @@ export interface HaberyArgs {
     salt?: string;
     algo?: Algos;
     tier?: Tier;
-    cesrBodyMode?: CesrBodyMode;
 }
 /** Habitat inception options consumed by the local bootstrap `Hab.make()` flow. */
 export interface MakeHabArgs {
@@ -68,9 +66,13 @@ export interface MakeHabArgs {
     algo?: Algos;
     salt?: string;
     tier?: Tier;
+    /** KERI version of the new KEL and its proof framing; defaults to 2.0. */
+    version?: Versionage;
 }
 /** Group habitat inception options for local member-collected group creation. */
 export interface MakeGroupHabArgs {
+    /** KERI version of the new group KEL and its proof framing; defaults to 2.0. */
+    version?: Versionage;
     isith?: ThresholdSith;
     nsith?: ThresholdSith;
     toad?: number;
@@ -150,6 +152,14 @@ export declare class Hab {
     get accepted(): boolean;
     /** Return the live accepted-state `Kever` for this habitat when available. */
     get kever(): Kever | null;
+    /**
+     * KERI version of this habitat's accepted KEL.
+     *
+     * Replies and queries this habitat authors use the same version, so a stream
+     * that carries the KEL followed by its endpoint replies never mixes protocol
+     * or attachment genera.
+     */
+    get kelVersion(): Versionage;
     /**
      * Accept one locally generated event through the same `Kevery`/`Kever` path
      * used by remote processing.
@@ -176,7 +186,8 @@ export declare class Hab {
      */
     reconfigure(): boolean;
     /**
-     * Incept this habitat through the shared accepted-state path.
+     * Incept this habitat through the shared accepted-state path, as KERI v2
+     * unless `version` selects KERI v1 for v1-only peers.
      *
      * KERIpy correspondence:
      * - mirrors the pattern where local inception is signed in the habitat layer
@@ -200,6 +211,8 @@ export declare class Hab {
         cuts?: string[];
         adds?: string[];
         data?: unknown[];
+        /** Must match the accepted KEL version when given. */
+        version?: Versionage;
     }): Uint8Array;
     /**
      * Create and locally accept one interaction event for this habitat.
@@ -215,7 +228,18 @@ export declare class Hab {
      */
     interact(args?: {
         data?: unknown[];
+        /** Must match the accepted KEL version when given. */
+        version?: Versionage;
     }): Uint8Array;
+    /**
+     * Decrypt `ser` (sealed-box ciphertext, qb64 or raw) with the private keys of
+     * `verfers`, defaulting to this habitat's current accepted keys.
+     *
+     * KERIpy correspondence: `BaseHab.decrypt` delegating to `Manager.decrypt`.
+     * As there, every selected key opens the ciphertext in turn, so a
+     * multi-key habitat passes the single verfer the ciphertext was sealed to.
+     */
+    decrypt(ser: string | Uint8Array, verfers?: Verfer[]): Uint8Array;
     /**
      * Sign with accepted current keys. Group habitats use only their designated
      * member's latest single-key contribution, located in its accepted KEL.
@@ -308,7 +332,12 @@ export declare class Hab {
      *
      * Witnesses are derived from current key state as well as stored location
      * replies because witness membership is partly a KEL concern, not just an
-     * endpoint-authorization concern.
+     * endpoint-authorization concern. Empty location maps retain endpoint identity
+     * so routing can report missing locations rather than select a lower role.
+     * Unlike KERIpy 71438328, stored roles without allowed or enabled approval are excluded.
+     *
+     * @param pre Controller AID whose accepted roles and current witnesses are projected.
+     * @returns Role to endpoint AID to scheme/URL map, including empty location maps.
      */
     endsFor(pre: string): Record<string, Record<string, Record<string, string>>>;
     /**
@@ -342,24 +371,18 @@ export declare class Hab {
     /** Collect explicitly finite OOBI output; incomplete delegated state still returns empty bytes. */
     replyToOobi(aid: string, role?: Role | string, eids?: string[]): Uint8Array;
     /**
-     * Process KERI-style cues and yield structured runtime cue emissions.
+     * Yield signed wire messages for one finite cue pass, like KERIpy's BaseHab.
      *
-     * KERIpy correspondence:
-     * - this is the `keri-ts` equivalent of `BaseHab.processCuesIter()`
+     * A Deck is consumed through its initial extent. Other iterables are copied to
+     * a local Deck, so callers can borrow an array while retaining their source.
+     * Query, stream, and notification ownership stays with the caller; only
+     * complete query instructions produce wire output here.
      *
-     * `keri-ts` difference:
-     * - the cue identity is preserved in the yielded `CueEmission` instead of
-     *   collapsing everything immediately to raw bytes
-     *
-     * Current support:
-     * - `receipt`, `witness`, `replay`, `reply`, and complete `query` cues emit
-     *   wire messages
-     * - `stream` emits transport requests without flattening them into bytes
-     * - observer/runtime cues remain visible as notify emissions
+     * @param cues Deck to consume through its initial extent, or borrowed iterable copied into a local Deck.
+     * @returns A synchronous generator of signed wire messages, not delivery outcomes.
+     * @throws Signing/replay construction failures propagate; a supplied Deck head is already pulled when construction begins.
      */
-    processCuesIter(cues: Deck<AgentCue> | Iterable<AgentCue>): Generator<CueEmission>;
-    /** Interpret one borrowed cue synchronously; callers own queue removal and retained output. */
-    interpretCue(cue: AgentCue): CueEmission | undefined;
+    processCuesIter(cues: Deck<AgentCue> | Iterable<AgentCue>): Generator<Uint8Array>;
 }
 /**
  * Internal signatory habitat wrapper used for habery-scoped signatures.
@@ -439,7 +462,6 @@ export declare class Habery {
     readonly readonly: boolean;
     readonly db: Baser;
     readonly ks: Keeper;
-    readonly cesrBodyMode: CesrBodyMode;
     readonly mgr: Manager;
     readonly cf?: Configer;
     readonly habs: Map<string, Hab>;
@@ -449,7 +471,7 @@ export declare class Habery {
     readonly replyRoutes: BasicReplyRouteHandler;
     readonly signator: Signator | null;
     /** Compose one habery from already-opened storage, manager, and config surfaces. */
-    constructor(name: string, base: string, temp: boolean, headDirPath: string | undefined, compat: boolean, readonly: boolean, db: Baser, ks: Keeper, cesrBodyMode: CesrBodyMode, mgr: Manager, cf?: Configer, skipSignator?: boolean);
+    constructor(name: string, base: string, temp: boolean, headDirPath: string | undefined, compat: boolean, readonly: boolean, db: Baser, ks: Keeper, mgr: Manager, cf?: Configer, skipSignator?: boolean);
     /** Live config snapshot from the optional config file surface. */
     get config(): Record<string, unknown>;
     /**
@@ -459,6 +481,21 @@ export declare class Habery {
      * so `Habery.habs` only contains reopenable local habitats.
      */
     private loadHabs;
+    /**
+     * Commit the members of a local group's latest accepted establishment event
+     * when the stored record is stale (KERIpy `GroupHab.recoverAcceptedMembers`).
+     *
+     * A process that stopped after a rotation was accepted but before its live
+     * `commitAcceptedGroupMembers` leaves `smids`/`rmids` stale. Members are
+     * derived from local KELs, trying the stored members first and every AID
+     * with local key state only when they do not account for every key. They
+     * are committed only when they differ from the stored record and the local
+     * member contributes to that event; a record that does not yet include the
+     * local member is a pending join, not a stale commit. Only the latest
+     * accepted event is committed, so this never rolls members back, and
+     * repeating it changes nothing. Returns whether stale members were committed.
+     */
+    recoverAcceptedGroupMembers(pre: string): boolean;
     /** Local AID prefixes currently managed by this habery. */
     get prefixes(): string[];
     /**
@@ -507,6 +544,8 @@ export declare class Habery {
      * - member AIDs should already be in the key state intended for the new
      *   group key list, matching KLI's operator workflow of rotating members
      *   before rotating the group
+     * Body and returned proof framing follow the group's accepted KEL version;
+     * a conflicting explicit `version` is refused.
      */
     rotateGroupHab(group: string, smids?: string[], rmids?: string[], args?: {
         isith?: ThresholdSith;
@@ -515,10 +554,12 @@ export declare class Habery {
         cuts?: string[];
         adds?: string[];
         data?: unknown[];
+        version?: Versionage;
     }): GroupHabRotation;
-    /** Create a locally signed group interaction event. */
+    /** Create a locally signed group interaction in the group's accepted KEL version; conflicts are refused. */
     interactGroupHab(group: string, smids?: string[], args?: {
         data?: unknown[];
+        version?: Versionage;
     }): GroupHabInteraction;
     /** Extract the single current verifier from each group signing member. */
     private extractGroupMemberKeys;

package/types/app/identity/habbing.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"habbing.d.ts","sourceRoot":"","sources":["../../../src/app/identity/habbing.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AACH,OAAO,EACL,KAAK,EASL,UAAU,EACV,KAAK,EACL,KAAK,aAAa,EAClB,KAAK,IAAI,EAET,MAAM,EACN,KAAK,UAAU,EAGhB,MAAM,SAAS,CAAC;AACjB,OAAO,EAAE,KAAK,SAAS,EAAE,MAAM,WAAW,CAAC;AAC3C,OAAO,KAAK,EAAE,QAAQ,EAAE,gBAAgB,EAAE,MAAM,oBAAoB,CAAC;AACrE,OAAO,EAAE,IAAI,EAAE,MAAM,oBAAoB,CAAC;AAG1C,OAAO,EAAE,MAAM,EAAE,MAAM,4BAA4B,CAAC;AACpD,OAAO,EAAE,KAAK,EAAE,MAAM,yBAAyB,CAAC;AAChD,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,sCAAsC,CAAC;AAW3E,OAAO,EAAE,KAAK,IAAI,EAAS,MAAM,qBAAqB,CAAC;AACvD,OAAO,EAAE,sBAAsB,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,uBAAuB,CAAC;AAC/E,OAAO,EAAE,KAAK,MAAM,EAAW,MAAM,uBAAuB,CAAC;AAC7D,OAAO,EAAE,KAAK,EAAe,MAAM,oBAAoB,CAAC;AAExD,OAAO,EAAgB,MAAM,EAAU,MAAM,qBAAqB,CAAC;AAKnE,OAAO,EAAE,QAAQ,EAAkB,MAAM,gBAAgB,CAAC;AAC1D,OAAO,EACL,KAAK,EAIL,OAAO,EAGR,MAAM,cAAc,CAAC;AAEtB,6DAA6D;AAC7D,eAAO,MAAM,MAAM,kBAAkB,CAAC;AAEtC,2DAA2D;AAC3D,MAAM,WAAW,UAAU;IACzB,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,IAAI,CAAC,EAAE,OAAO,CAAC;IACf,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,MAAM,CAAC,EAAE,OAAO,CAAC;IACjB,QAAQ,CAAC,EAAE,OAAO,CAAC;IACnB,EAAE,CAAC,EAAE,QAAQ,CAAC;IACd,UAAU,CAAC,EAAE,OAAO,CAAC;IACrB,YAAY,CAAC,EAAE,OAAO,CAAC;IACvB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,IAAI,CAAC,EAAE,KAAK,CAAC;IACb,IAAI,CAAC,EAAE,IAAI,CAAC;CACb;AAED,mFAAmF;AACnF,MAAM,WAAW,WAAW;IAC1B,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,YAAY,CAAC,EAAE,OAAO,CAAC;IACvB,KAAK,CAAC,EAAE,aAAa,CAAC;IACtB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,KAAK,CAAC,EAAE,aAAa,CAAC;IACtB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,IAAI,CAAC,EAAE,MAAM,EAAE,CAAC;IAChB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB,GAAG,CAAC,EAAE,OAAO,CAAC;IACd,MAAM,CAAC,EAAE,OAAO,CAAC;IACjB,IAAI,CAAC,EAAE,OAAO,EAAE,CAAC;IACjB,IAAI,CAAC,EAAE,KAAK,CAAC;IACb,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,IAAI,CAAC,EAAE,IAAI,CAAC;IACZ,0EAA0E;IAC1E,OAAO,CAAC,EAAE,UAAU,CAAC;CACtB;AAED,iFAAiF;AACjF,MAAM,WAAW,gBAAgB;IAC/B,gFAAgF;IAChF,OAAO,CAAC,EAAE,UAAU,CAAC;IACrB,KAAK,CAAC,EAAE,aAAa,CAAC;IACtB,KAAK,CAAC,EAAE,aAAa,CAAC;IACtB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,IAAI,CAAC,EAAE,MAAM,EAAE,CAAC;IAChB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,IAAI,CAAC,EAAE,OAAO,EAAE,CAAC;IACjB,MAAM,CAAC,EAAE,OAAO,CAAC;CAClB;AAED,0DAA0D;AAC1D,MAAM,WAAW,gBAAgB;IAC/B,GAAG,EAAE,GAAG,CAAC;IACT,MAAM,EAAE,UAAU,CAAC;IACnB,MAAM,EAAE,KAAK,EAAE,CAAC;IAChB,6GAA6G;IAC7G,OAAO,EAAE,UAAU,CAAC;CACrB;AAED,6DAA6D;AAC7D,MAAM,WAAW,gBAAgB;IAC/B,GAAG,EAAE,GAAG,CAAC;IACT,MAAM,EAAE,UAAU,CAAC;IACnB,MAAM,EAAE,KAAK,EAAE,CAAC;IAChB,OAAO,EAAE,UAAU,CAAC;CACrB;AAED,qEAAqE;AACrE,MAAM,WAAW,mBAAmB;IAClC,GAAG,EAAE,GAAG,CAAC;IACT,MAAM,EAAE,UAAU,CAAC;IACnB,MAAM,EAAE,KAAK,EAAE,CAAC;IAChB,OAAO,EAAE,UAAU,CAAC;CACrB;AAyHD;;;;;;GAMG;AACH,wBAAgB,kBAAkB,CAChC,GAAG,EAAE,MAAM,EACX,MAAM,EAAE,UAAU,EAClB,KAAK,GAAE,UAAqB,GAC3B,UAAU,CAeZ;AAED;;;;;;GAMG;AACH,wBAAgB,mBAAmB,CACjC,GAAG,EAAE,MAAM,EACX,MAAM,EAAE,UAAU,GACjB,UAAU,CAiBZ;AAED,qEAAqE;AACrE,wBAAgB,0BAA0B,CACxC,GAAG,EAAE,MAAM,EACX,GAAG,EAAE,MAAM,EACX,EAAE,EAAE,MAAM,EACV,KAAK,GAAE,UAAqB,GAC3B;IAAE,MAAM,EAAE,UAAU,CAAC;IAAC,OAAO,EAAE,UAAU,CAAA;CAAE,CAc7C;AAED;;;;;;;GAOG;AAEH,uEAAuE;AACvE,qBAAa,GAAG;IACd,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,EAAE,CAAC,EAAE,MAAM,CAAC;IACrB,QAAQ,CAAC,EAAE,EAAE,KAAK,CAAC;IACnB,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,GAAG,EAAE,OAAO,CAAC;IACtB,QAAQ,CAAC,EAAE,CAAC,EAAE,QAAQ,CAAC;IACvB,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;IACrB,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;IACrB,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;IACrB,GAAG,SAAM;IAET,+EAA+E;gBAE7E,IAAI,EAAE,MAAM,EACZ,EAAE,EAAE,KAAK,EACT,EAAE,EAAE,MAAM,EACV,GAAG,EAAE,OAAO,EACZ,EAAE,EAAE,QAAQ,GAAG,SAAS,EACxB,GAAG,EAAE,MAAM,EACX,GAAG,EAAE,MAAM,EACX,GAAG,EAAE,MAAM,EACX,EAAE,CAAC,EAAE,MAAM,EACX,GAAG,SAAK;IAcV,iEAAiE;IACjE,IAAI,MAAM,IAAI,MAAM,CAEnB;IAED,kEAAkE;IAClE,IAAI,QAAQ,IAAI,OAAO,CAEtB;IAED,8EAA8E;IAC9E,IAAI,KAAK,IAAI,KAAK,GAAG,IAAI,CAExB;IAED;;;;;;OAMG;IACH,IAAI,UAAU,IAAI,UAAU,CAI3B;IAED;;;;;;;OAOG;IACH,OAAO,CAAC,aAAa;IA0BrB,4FAA4F;IAC5F,OAAO,CAAC,WAAW;IAenB,mGAAmG;IACnG,OAAO,CAAC,iBAAiB;IAQzB,4EAA4E;IAC5E,iBAAiB,IAAI,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI;IAQnD,8EAA8E;IAC9E,gBAAgB,IAAI,OAAO;IAI3B;;;;;;OAMG;IACH,WAAW,IAAI,OAAO;IAkBtB;;;;;;;;OAQG;IACH,IAAI,CAAC,IAAI,GAAE,WAAgB,GAAG,IAAI;IAmGlC;;;;;;;OAOG;IACH,MAAM,CAAC,IAAI,GAAE;QACX,KAAK,CAAC,EAAE,aAAa,CAAC;QACtB,KAAK,CAAC,EAAE,aAAa,CAAC;QACtB,MAAM,CAAC,EAAE,MAAM,CAAC;QAChB,IAAI,CAAC,EAAE,MAAM,CAAC;QACd,IAAI,CAAC,EAAE,MAAM,EAAE,CAAC;QAChB,IAAI,CAAC,EAAE,MAAM,EAAE,CAAC;QAChB,IAAI,CAAC,EAAE,OAAO,EAAE,CAAC;QACjB,sDAAsD;QACtD,OAAO,CAAC,EAAE,UAAU,CAAC;KACjB,GAAG,UAAU;IAmFnB;;;;;;;;;;;OAWG;IACH,QAAQ,CACN,IAAI,GAAE;QACJ,IAAI,CAAC,EAAE,OAAO,EAAE,CAAC;QACjB,sDAAsD;QACtD,OAAO,CAAC,EAAE,UAAU,CAAC;KACjB,GACL,UAAU;IAsBb;;;;;;;OAOG;IACH,OAAO,CAAC,GAAG,EAAE,MAAM,GAAG,UAAU,EAAE,OAAO,CAAC,EAAE,MAAM,EAAE,GAAG,UAAU;IAQjE;;;;;OAKG;IACH,IAAI,CAAC,GAAG,EAAE,UAAU,EAAE,OAAO,EAAE,IAAI,GAAG,KAAK,EAAE;IAC7C,IAAI,CAAC,GAAG,EAAE,UAAU,EAAE,OAAO,CAAC,EAAE,KAAK,GAAG,KAAK,EAAE;IAuC/C;;;;;;;;;OASG;IACH,OAAO,CACL,MAAM,EAAE,UAAU,EAClB,OAAO,GAAE;QACP,SAAS,CAAC,EAAE,OAAO,CAAC;QACpB,KAAK,CAAC,EAAE,UAAU,CAAC;QACnB,MAAM,CAAC,EAAE,OAAO,CAAC;QACjB,QAAQ,CAAC,EAAE,OAAO,CAAC;KACf,GACL,UAAU;IA2Cb;;;;;;OAMG;IACH,KAAK,CACH,KAAK,EAAE,MAAM,EACb,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAC7B,KAAK,SAAmB,GACvB,UAAU;IAOb;;;;;;;OAOG;IACH,KAAK,CACH,GAAG,EAAE,MAAM,EACX,GAAG,EAAE,MAAM,EACX,WAAW,EAAE,gBAAgB,GAAG;QAAE,KAAK,EAAE,KAAK,CAAC;QAAC,CAAC,EAAE;YAAE,MAAM,EAAE,cAAc,CAAA;SAAE,CAAA;KAAE,EAC/E,KAAK,SAAmB,GACvB,UAAU;IAcb;;;;;;;;OAQG;IACH,OAAO,CAAC,MAAM,EAAE,UAAU,GAAG,UAAU;IA0DvC;;;;;OAKG;IACH,OAAO,CAAC,MAAM,EAAE,UAAU,GAAG,UAAU;IA2CvC;;;;;OAKG;IACH,WAAW,CACT,GAAG,EAAE,MAAM,EACX,IAAI,GAAE,IAAI,GAAG,MAAyB,EACtC,KAAK,UAAO,EACZ,KAAK,SAAmB,GACvB,UAAU;IAQb;;;;;OAKG;IACH,aAAa,CACX,GAAG,EAAE,MAAM,EACX,GAAG,SAAW,EACd,MAAM,GAAE,MAAM,GAAG,MAAqB,EACtC,KAAK,SAAmB,GACvB,UAAU;IAIb;;;;;OAKG;IACH,SAAS,CAAC,GAAG,EAAE,MAAM,EAAE,MAAM,SAAK,GAAG,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC;IAiB3D;;;;;;;;;;;;;;OAcG;IACH,OAAO,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC;IA+B5E;;;;;OAKG;IACH,WAAW,CACT,GAAG,EAAE,MAAM,EACX,GAAG,EAAE,MAAM,EACX,IAAI,GAAE,IAAI,GAAG,MAAyB,GACrC,UAAU;IASb;;;;;OAKG;IACH,aAAa,CAAC,GAAG,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,MAAM,GAAG,UAAU;IAWvD;;;;;;OAMG;IACH,cAAc,CAAC,GAAG,EAAE,MAAM,EAAE,MAAM,SAAK,GAAG,UAAU;IAUpD,4GAA4G;IAC5G,oBAAoB,CAClB,GAAG,EAAE,MAAM,EACX,IAAI,CAAC,EAAE,IAAI,GAAG,MAAM,EACpB,IAAI,GAAE,SAAS,MAAM,EAAO,EAC5B,MAAM,SAAK,GACV,QAAQ,CAAC,UAAU,CAAC;IAIvB,qEAAqE;IACrE,YAAY,CAAC,GAAG,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,IAAI,GAAG,MAAM,EAAE,IAAI,GAAE,MAAM,EAAO,EAAE,MAAM,SAAK,GAAG,UAAU;IAI7F,oGAAoG;IACpG,mBAAmB,CACjB,GAAG,EAAE,MAAM,EACX,IAAI,CAAC,EAAE,IAAI,GAAG,MAAM,EACpB,IAAI,GAAE,SAAS,MAAM,EAAO,GAC3B,QAAQ,CAAC,UAAU,CAAC;IAIvB,mGAAmG;IACnG,WAAW,CAAC,GAAG,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,IAAI,GAAG,MAAM,EAAE,IAAI,GAAE,MAAM,EAAO,GAAG,UAAU;IAI/E;;;;;;;;;;;OAWG;IACF,eAAe,CACd,IAAI,EAAE,IAAI,CAAC,QAAQ,CAAC,GAAG,QAAQ,CAAC,QAAQ,CAAC,GACxC,SAAS,CAAC,UAAU,CAAC;CA8BzB;AAED;;;;;;;;;;;;GAYG;AACH,qBAAa,QAAQ;IACnB,QAAQ,CAAC,EAAE,EAAE,KAAK,CAAC;IACnB,QAAQ,CAAC,GAAG,EAAE,GAAG,CAAC;IAClB,GAAG,EAAE,MAAM,CAAC;IAEZ,yEAAyE;gBAC7D,IAAI,EAAE;QAChB,EAAE,EAAE,KAAK,CAAC;QACV,EAAE,EAAE,MAAM,CAAC;QACX,GAAG,EAAE,OAAO,CAAC;QACb,EAAE,CAAC,EAAE,QAAQ,CAAC;QACd,GAAG,EAAE,MAAM,CAAC;QACZ,GAAG,EAAE,MAAM,CAAC;QACZ,GAAG,EAAE,MAAM,CAAC;KACb;IAqCD;;;;;;OAMG;IACH,IAAI,CAAC,GAAG,EAAE,UAAU,GAAG,KAAK;IAM5B,mFAAmF;IACnF,IAAI,MAAM,IAAI,MAAM,CAMnB;IAED,iFAAiF;IACjF,MAAM,CAAC,GAAG,EAAE,UAAU,EAAE,KAAK,EAAE,KAAK,GAAG,OAAO;CAG/C;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA4BG;AACH,qBAAa,MAAM;IACjB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,IAAI,EAAE,OAAO,CAAC;IACvB,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,MAAM,EAAE,OAAO,CAAC;IACzB,QAAQ,CAAC,QAAQ,EAAE,OAAO,CAAC;IAC3B,QAAQ,CAAC,EAAE,EAAE,KAAK,CAAC;IACnB,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,GAAG,EAAE,OAAO,CAAC;IACtB,QAAQ,CAAC,EAAE,CAAC,EAAE,QAAQ,CAAC;IACvB,QAAQ,CAAC,IAAI,mBAA0B;IACvC,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;IACrB,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;IACrB,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,WAAW,EAAE,sBAAsB,CAAC;IAC7C,QAAQ,CAAC,QAAQ,EAAE,QAAQ,GAAG,IAAI,CAAC;IAEnC,oFAAoF;gBAElF,IAAI,EAAE,MAAM,EACZ,IAAI,EAAE,MAAM,EACZ,IAAI,EAAE,OAAO,EACb,WAAW,EAAE,MAAM,GAAG,SAAS,EAC/B,MAAM,EAAE,OAAO,EACf,QAAQ,EAAE,OAAO,EACjB,EAAE,EAAE,KAAK,EACT,EAAE,EAAE,MAAM,EACV,GAAG,EAAE,OAAO,EACZ,EAAE,CAAC,EAAE,QAAQ,EACb,YAAY,UAAQ;IAyCtB,kEAAkE;IAClE,IAAI,MAAM,IAAI,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAEpC;IAED;;;;;OAKG;IACH,OAAO,CAAC,QAAQ;IAyChB;;;;;;;;;;;;;OAaG;IACH,2BAA2B,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO;IAejD,2DAA2D;IAC3D,IAAI,QAAQ,IAAI,MAAM,EAAE,CAEvB;IAED;;;;;;;;;OASG;IACH,WAAW,IAAI,IAAI;IAiBnB,0DAA0D;IAC1D,OAAO,CAAC,IAAI,EAAE,MAAM,EAAE,EAAE,CAAC,EAAE,MAAM,EAAE,IAAI,GAAE,WAAgB,GAAG,GAAG;IAoB/D;;;;;;;;;;;;OAYG;IACH,YAAY,CACV,KAAK,EAAE,MAAM,EACb,IAAI,EAAE,GAAG,EACT,KAAK,EAAE,MAAM,EAAE,EACf,KAAK,CAAC,EAAE,MAAM,EAAE,EAChB,EAAE,CAAC,EAAE,MAAM,EACX,IAAI,GAAE,gBAAqB,GAC1B,gBAAgB;IAsGnB;;;;;;;OAOG;IACH,YAAY,CACV,GAAG,EAAE,MAAM,EACX,KAAK,EAAE,MAAM,EACb,IAAI,EAAE,GAAG,EACT,KAAK,EAAE,SAAS,MAAM,EAAE,EACxB,KAAK,CAAC,EAAE,SAAS,MAAM,EAAE,EACzB,EAAE,CAAC,EAAE,MAAM,GACV,GAAG;IA+DN,6FAA6F;IAC7F,qBAAqB,CACnB,GAAG,EAAE,MAAM,EACX,KAAK,EAAE,SAAS,MAAM,EAAE,EACxB,KAAK,GAAE,SAAS,MAAM,EAAU,GAC/B,IAAI;IAuBP;;;;;;;;;;OAUG;IACH,cAAc,CACZ,KAAK,EAAE,MAAM,EACb,KAAK,CAAC,EAAE,MAAM,EAAE,EAChB,KAAK,CAAC,EAAE,MAAM,EAAE,EAChB,IAAI,GAAE;QACJ,KAAK,CAAC,EAAE,aAAa,CAAC;QACtB,KAAK,CAAC,EAAE,aAAa,CAAC;QACtB,IAAI,CAAC,EAAE,MAAM,CAAC;QACd,IAAI,CAAC,EAAE,MAAM,EAAE,CAAC;QAChB,IAAI,CAAC,EAAE,MAAM,EAAE,CAAC;QAChB,IAAI,CAAC,EAAE,OAAO,EAAE,CAAC;QACjB,OAAO,CAAC,EAAE,UAAU,CAAC;KACjB,GACL,gBAAgB;IAuEnB,4GAA4G;IAC5G,gBAAgB,CACd,KAAK,EAAE,MAAM,EACb,KAAK,CAAC,EAAE,MAAM,EAAE,EAChB,IAAI,GAAE;QAAE,IAAI,CAAC,EAAE,OAAO,EAAE,CAAC;QAAC,OAAO,CAAC,EAAE,UAAU,CAAA;KAAO,GACpD,mBAAmB;IAwDtB,0EAA0E;IAC1E,OAAO,CAAC,sBAAsB;IAqB9B,0EAA0E;IAC1E,OAAO,CAAC,6BAA6B;IAoBrC;;;;;;;;;OASG;IACH,OAAO,CAAC,8BAA8B;IA+BtC,0DAA0D;IAC1D,OAAO,CAAC,qBAAqB;IAwB7B,kEAAkE;IAClE,OAAO,CAAC,oBAAoB;IAK5B,+EAA+E;IAC/E,OAAO,CAAC,oBAAoB;IAS5B,kEAAkE;IAClE,OAAO,CAAC,iBAAiB;IASzB;;;;;;OAMG;IACH,SAAS,CAAC,IAAI,EAAE,MAAM,EAAE,EAAE,CAAC,EAAE,MAAM,GAAG,GAAG,GAAG,IAAI;IAuBhD,mEAAmE;IAClE,KAAK,CAAC,KAAK,UAAQ,GAAG,SAAS,CAAC,IAAI,CAAC;CAcvC;AAED;;;;;;GAMG;AACH,wBAAgB,cAAc,CAAC,IAAI,EAAE,MAAM,GAAG;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAA;CAAE,CAI3E;AAED;;;;;GAKG;AACH,wBAAiB,YAAY,CAAC,IAAI,EAAE,UAAU,GAAG,SAAS,CAAC,MAAM,CAAC,CAkHjE"}

package/types/app/{keeping.d.ts → identity/keeping.d.ts}

@@ -1,5 +1,5 @@
 import { Cigar, Diger, Salter, Siger, Signer, type Tier, Verfer } from "cesr-ts";
-import { Keeper } from "../db/keeping.js";
+import { Keeper } from "../../db/keeping.js";
 /**
  * Root key-creation strategy selectors stored in keeper globals.
  *
@@ -216,7 +216,7 @@ export declare class Creatory {
  * - `randy` and `salty` creator algorithms are live; `group` and `extern`
  *   remain explicit unsupported-algorithm seams
  * - AEID handling now includes real sealed-box encryption for keeper-global
- *   salt, per-prefix salts, and signer seeds, while keeping the encrypted
+ *   salt, per-prefix salts, signer seeds and registry roots, while keeping the encrypted
  *   runtime dependency local to the KERI package instead of CESR
  * - readonly opens intentionally avoid keeper mutation so visibility commands
  *   can inspect stores without side effects
@@ -281,22 +281,36 @@ export declare class Manager {
      * Re-encryption scope:
      * - keeper-global root salt in `gbls.salt`
      * - per-prefix salts in `prms.salt`
-     * - signer seeds in `pris.`
+     * - signer seeds in `pris.` and Salt128 registry roots in `rroots.`
      *
      * Behavior matrix:
      * - `current AEID -> same AEID`: validate and keep stable
      * - `current AEID -> new AEID`: decrypt with old seed, re-encrypt with new
      *   public box key
-     * - `current AEID -> empty`: decrypt and persist plaintext secrets
-     * - `empty -> new AEID`: encrypt newly managed secrets going forward
+     * - `current AEID -> empty`: refuse retained registry roots; otherwise persist plaintext secrets
+     * - `empty -> new AEID`: encrypt existing and subsequently managed secrets
      *
      * Failure model:
      * - current seed must authenticate the currently stored AEID before any
      *   secret migration is attempted
      * - new seed must authenticate the new AEID before any re-encryption is
      *   attempted
+     * - Keeper owns one synchronous native transaction for all affected rows;
+     *   refusal or failure leaves durable and live crypto state unchanged
+     * - publish encrypter/decrypter/seed only after that transaction commits;
+     *   readonly and borrowed-writer changes are refused
      */
     updateAeid(aeid: string, seed: string): void;
+    /** Require full canonical keys; local ownership is the calling operation's responsibility. */
+    private registryRootKeys;
+    /** Authenticate live policy as well as process-local crypto, refusing stale managers. */
+    private registryRootCrypto;
+    /** Assert encrypted, unlocked current policy before authorizing an operation with no root yet. */
+    requireRegistryRootAccess(): void;
+    /** Return the retained Salt128 root; absent reads require no encryption. */
+    getRegistryRoot(aid: string, regid: string): Salter | null;
+    /** Retain once, returning false for the identical root without replacing ciphertext. */
+    putRegistryRoot(aid: string, regid: string, root: Salter): boolean;
     private signerDecrypter;
     /** Load one managed signer seed by its public verifier key. */
     private getSignerByPub;

package/types/app/identity/keeping.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"keeping.d.ts","sourceRoot":"","sources":["../../../src/app/identity/keeping.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,KAAK,EAGL,KAAK,EAUL,MAAM,EACN,KAAK,EACL,MAAM,EACN,KAAK,IAAI,EAET,MAAM,EACP,MAAM,SAAS,CAAC;AAGjB,OAAO,EAAE,MAAM,EAAwE,MAAM,qBAAqB,CAAC;AAEnH;;;;;GAKG;AACH,oBAAY,KAAK;IACf,KAAK,UAAU;IACf,KAAK,UAAU;IACf,KAAK,UAAU;IACf,MAAM,WAAW;CAClB;AAED;;;;;;GAMG;AACH,MAAM,WAAW,WAAW;IAC1B,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,IAAI,CAAC,EAAE,KAAK,CAAC;IACb,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,IAAI,CAAC,EAAE,IAAI,CAAC;CACb;AAED;;;;;;;GAOG;AACH,MAAM,WAAW,iBAAiB;IAChC,MAAM,CAAC,EAAE,MAAM,EAAE,CAAC;IAClB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,MAAM,CAAC,EAAE,MAAM,EAAE,CAAC;IAClB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,IAAI,CAAC,EAAE,KAAK,CAAC;IACb,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,IAAI,CAAC,EAAE,IAAI,CAAC;IACZ,MAAM,CAAC,EAAE,OAAO,CAAC;IACjB,YAAY,CAAC,EAAE,OAAO,CAAC;IACvB,IAAI,CAAC,EAAE,OAAO,CAAC;CAChB;AAED,qFAAqF;AACrF,MAAM,WAAW,iBAAiB;IAChC,GAAG,EAAE,MAAM,CAAC;IACZ,MAAM,CAAC,EAAE,MAAM,EAAE,CAAC;IAClB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,YAAY,CAAC,EAAE,OAAO,CAAC;IACvB,IAAI,CAAC,EAAE,OAAO,CAAC;IACf,KAAK,CAAC,EAAE,OAAO,CAAC;CACjB;AAED;;;;;;;;;;;;;GAaG;AACH,MAAM,WAAW,WAAW;IAC1B,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,IAAI,EAAE,MAAM,CAAC;CACd;AAED;;;;;;;GAOG;AACH,MAAM,WAAW,eAAe;IAC9B,IAAI,CAAC,EAAE,MAAM,EAAE,CAAC;IAChB,OAAO,CAAC,EAAE,MAAM,EAAE,CAAC;IACnB,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB,OAAO,CAAC,EAAE,MAAM,EAAE,CAAC;IACnB,OAAO,CAAC,EAAE,KAAK,CAAC,MAAM,GAAG,IAAI,GAAG,SAAS,CAAC,CAAC;IAC3C,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,IAAI,CAAC,EAAE,WAAW,CAAC;CACpB;AAED,mFAAmF;AACnF,MAAM,WAAW,kBAAkB;IACjC,IAAI,CAAC,EAAE,MAAM,EAAE,CAAC;IAChB,OAAO,CAAC,EAAE,MAAM,EAAE,CAAC;CACpB;AAED;;;;;;;;GAQG;AACH,MAAM,WAAW,iBAAiB;IAChC,SAAS,EAAE,MAAM,EAAE,EAAE,CAAC;IACtB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,IAAI,CAAC,EAAE,KAAK,CAAC;IACb,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,IAAI,CAAC,EAAE,IAAI,CAAC;IACZ,MAAM,CAAC,EAAE,OAAO,CAAC;IACjB,YAAY,CAAC,EAAE,OAAO,CAAC;IACvB,IAAI,CAAC,EAAE,OAAO,CAAC;CAChB;AAED,2EAA2E;AAC3E,MAAM,WAAW,iBAAiB;IAChC,GAAG,EAAE,MAAM,CAAC;IACZ,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB,KAAK,CAAC,EAAE,OAAO,CAAC;CACjB;AAED,qFAAqF;AACrF,MAAM,WAAW,iBAAiB;IAChC,KAAK,CAAC,EAAE,MAAM,EAAE,CAAC;IACjB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,YAAY,CAAC,EAAE,OAAO,CAAC;IACvB,IAAI,CAAC,EAAE,OAAO,CAAC;CAChB;AAED,uFAAuF;AACvF,UAAU,cAAc;IACtB,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,MAAM,CAAC;CAChB;AA4CD;;;;;;;;;;GAUG;AACH,wBAAgB,WAAW,CACzB,QAAQ,EAAE,MAAM,EAChB,IAAI,EAAE,MAAM,EACZ,YAAY,EAAE,OAAO,EACrB,IAAI,EAAE,IAAI,EACV,IAAI,EAAE,OAAO,GACZ,cAAc,CAShB;AA2BD,gFAAgF;AAChF,qBAAa,OAAO;IAClB,uEAAuE;IACvE,MAAM,CAAC,KAAK,GAAE,iBAAsB,GAAG,MAAM,EAAE;IAI/C,oFAAoF;IACpF,IAAI,IAAI,IAAI,MAAM,CAEjB;IAED,6EAA6E;IAC7E,IAAI,IAAI,IAAI,MAAM,CAEjB;IAED,sEAAsE;IACtE,IAAI,IAAI,IAAI,IAAI,CAEf;CACF;AAED,2EAA2E;AAC3E,qBAAa,YAAa,SAAQ,OAAO;IAC9B,MAAM,CAAC,EACd,KAAK,EACL,KAAS,EACT,IAA0B,EAC1B,YAAmB,GACpB,GAAE,iBAAsB,GAAG,MAAM,EAAE;CAIrC;AAED,sFAAsF;AACtF,qBAAa,YAAa,SAAQ,OAAO;IACvC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAS;gBAG7B,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,GAAE;QAAE,IAAI,CAAC,EAAE,MAAM,CAAC;QAAC,IAAI,CAAC,EAAE,MAAM,CAAC;QAAC,IAAI,CAAC,EAAE,IAAI,CAAA;KAAO;IAU1E,IAAa,IAAI,IAAI,MAAM,CAE1B;IAED,IAAa,IAAI,IAAI,MAAM,CAE1B;IAED,IAAa,IAAI,IAAI,IAAI,CAExB;IAEQ,MAAM,CAAC,EACd,KAAK,EACL,KAAS,EACT,IAA0B,EAC1B,IAAQ,EACR,IAAQ,EACR,IAAQ,EACR,YAAmB,EACnB,IAAY,GACb,GAAE,iBAAsB,GAAG,MAAM,EAAE;CAarC;AAED,yDAAyD;AACzD,qBAAa,QAAQ;IACP,OAAO,CAAC,QAAQ,CAAC,IAAI;gBAAJ,IAAI,GAAE,KAAmB;IAEtD,oFAAoF;IACpF,IAAI,CACF,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,GAAE;QAAE,IAAI,CAAC,EAAE,MAAM,CAAC;QAAC,IAAI,CAAC,EAAE,MAAM,CAAC;QAAC,IAAI,CAAC,EAAE,IAAI,CAAA;KAAO,GACvE,OAAO;CASX;AA0DD;;;;;;;;;;;;;;;;;;;GAmBG;AACH,qBAAa,OAAO;IAClB,OAAO,CAAC,KAAK,CAAS;IACtB,OAAO,CAAC,GAAG,CAAS;IACpB,kFAAkF;IAClF,OAAO,CAAC,SAAS,CAA0B;IAC3C,gFAAgF;IAChF,OAAO,CAAC,SAAS,CAA0B;gBAE/B,IAAI,EAAE,WAAW;IAwB7B,IAAI,EAAE,IAAI,MAAM,CAEf;IAED,mGAAmG;IACnG,IAAI,IAAI,IAAI,MAAM,CAEjB;IAED,qFAAqF;IACrF,IAAI,IAAI,IAAI,MAAM,CAEjB;IAED,uFAAuF;IACvF,IAAI,IAAI,IAAI,MAAM,GAAG,IAAI,CAIxB;IAED,uEAAuE;IACvE,IAAI,IAAI,CAAC,IAAI,EAAE,MAAM,EAEpB;IAED,kFAAkF;IAClF,IAAI,IAAI,IAAI,KAAK,GAAG,IAAI,CAIvB;IAED,2DAA2D;IAC3D,IAAI,IAAI,CAAC,IAAI,EAAE,KAAK,EAEnB;IAED;;;;;;;;;;OAUG;IACH,IAAI,IAAI,IAAI,MAAM,GAAG,IAAI,CAQxB;IAED,IAAI,IAAI,CAAC,IAAI,EAAE,MAAM,EAOpB;IAED,IAAI,IAAI,IAAI,IAAI,GAAG,IAAI,CAGtB;IAED,kFAAkF;IAClF,IAAI,IAAI,CAAC,IAAI,EAAE,IAAI,EAElB;IAED;;;;;;;;;;;;;;;OAeG;IACH,KAAK,CAAC,IAAI,SAAK,EAAE,IAAI,SAAK,GAAG,IAAI;IAyBjC;;;;;;;;;;;;;;;;;;;;;;;;OAwBG;IACH,UAAU,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,IAAI;IAoB5C,8FAA8F;IAC9F,OAAO,CAAC,gBAAgB;IAOxB,yFAAyF;IACzF,OAAO,CAAC,kBAAkB;IAQ1B,kGAAkG;IAClG,yBAAyB,IAAI,IAAI;IAIjC,4EAA4E;IAC5E,eAAe,CAAC,GAAG,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI;IAW1D,wFAAwF;IACxF,eAAe,CAAC,GAAG,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,OAAO;IAOlE,OAAO,CAAC,eAAe;IASvB,+DAA+D;IAC/D,OAAO,CAAC,cAAc;IAQtB,kFAAkF;IAClF,OAAO,CAAC,UAAU;IAelB,yFAAyF;IACzF,OAAO,CAAC,eAAe;IAWvB;;;;;;OAMG;IACH,OAAO,CAAC,kBAAkB;IA2C1B,kFAAkF;IAClF,OAAO,CAAC,iBAAiB;IA2BzB;;;;;;OAMG;IACH,OAAO,CAAC,yBAAyB;IAsCjC;;;;;;;OAOG;IACH,OAAO,CAAC,qBAAqB;IAoD7B,+EAA+E;IAC/E,OAAO,CAAC,cAAc;IAUtB;;;;;;;;;;;;;;;;OAgBG;IACH,MAAM,CAAC,IAAI,GAAE,iBAAsB,GAAG,CAAC,MAAM,EAAE,EAAE,KAAK,EAAE,CAAC;IA8HzD;;;;;;;OAOG;IACH,IAAI,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,IAAI;IAmE1C;;;;;;;;;;;;OAYG;IACH,MAAM,CAAC,IAAI,EAAE,iBAAiB,GAAG,CAAC,MAAM,EAAE,EAAE,KAAK,EAAE,CAAC;IAiFpD;;;;;;;;;;;;;;;;;;;;;;;;OAwBG;IACH,IAAI,CAAC,GAAG,EAAE,UAAU,EAAE,IAAI,EAAE,MAAM,EAAE,EAAE,OAAO,EAAE,IAAI,GAAG,KAAK,EAAE;IAC7D,IAAI,CAAC,GAAG,EAAE,UAAU,EAAE,IAAI,EAAE,MAAM,EAAE,EAAE,OAAO,CAAC,EAAE,KAAK,GAAG,KAAK,EAAE;IAC/D,IAAI,CAAC,GAAG,EAAE,UAAU,EAAE,IAAI,EAAE,eAAe,GAAG;QAAE,OAAO,EAAE,IAAI,CAAA;KAAE,GAAG,KAAK,EAAE;IACzE,IAAI,CAAC,GAAG,EAAE,UAAU,EAAE,IAAI,CAAC,EAAE,eAAe,GAAG,KAAK,EAAE,GAAG,KAAK,EAAE;IAiDhE;;;;;;;;;;OAUG;IACH,OAAO,CACL,IAAI,EAAE,MAAM,GAAG,UAAU,EACzB,IAAI,GAAE,kBAAuB,GAC5B,UAAU;IAyBb,qGAAqG;IACrG,IAAI,CAAC,UAAU,EAAE,UAAU,EAAE,MAAM,EAAE,MAAM,GAAG,UAAU,GAAG,IAAI;IAQ/D;;;;;;;;;;;;;;;;;;;OAmBG;IACH,MAAM,CAAC,IAAI,EAAE,iBAAiB,GAAG,CAAC,MAAM,EAAE,MAAM,EAAE,EAAE,CAAC;IAwKrD;;;;;;;;;OASG;IACH,MAAM,CAAC,IAAI,EAAE,iBAAiB,GAAG,CAAC,MAAM,EAAE,EAAE,KAAK,EAAE,CAAC;CAwDrD;AAED;;;;;GAKG;AACH,wBAAgB,iBAAiB,CAAC,IAAI,CAAC,EAAE,MAAM,GAAG,MAAM,CAIvD;AAED,gFAAgF;AAChF,wBAAgB,cAAc,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAKnD;AAED,uFAAuF;AACvF,wBAAgB,eAAe,CAAC,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,MAAM,CAEnE;AAED,8EAA8E;AAC9E,wBAAgB,gBAAgB,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,CAQpD;AAED,iGAAiG;AACjG,wBAAgB,iBAAiB,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAEtD;AAED,gFAAgF;AAChF,wBAAgB,UAAU,CAAC,GAAG,EAAE,UAAU,GAAG,MAAM,CAElD;AAED,wEAAwE;AACxE,wBAAgB,YAAY,CAAC,IAAI,EAAE,MAAM,GAAG,UAAU,CAErD;AAED;;;;;;GAMG;AACH,wBAAgB,uBAAuB,IAAI,IAAI,CAE9C"}

package/types/app/{organizing.d.ts → identity/organizing.d.ts}

@@ -1,4 +1,5 @@
-import type { Habery } from "./habbing.js";
+import type { Baser } from "../../db/basing.js";
+import type { Habery, Signator } from "./habbing.js";
 export interface ContactRecord extends Record<string, unknown> {
     id: string;
 }
@@ -11,8 +12,22 @@ export interface ContactRecord extends Record<string, unknown> {
  * - no broader contact-management CLI surface yet
  */
 export declare class Organizer {
-    readonly hby: Habery;
-    constructor(hby: Habery);
+    readonly db: Baser;
+    readonly signator: Signator | null;
+    /** Borrow contact storage and its optional signing authority without owning their lifetime. */
+    constructor(db: Baser, signator: Signator | null);
+    /**
+     * Resolve one application recipient input into the actual destination prefix.
+     *
+     * Resolution order matches the mailbox CLI mental model:
+     * - exact known prefix wins
+     * - otherwise exact organizer alias lookup is required
+     *
+     * @param recipient Known AID prefix or exact organizer alias.
+     * @returns Resolved destination AID.
+     * @throws ValidationError for absent or ambiguous aliases.
+     */
+    resolveRecipient(recipient: string): string;
     /** Load one signed contact record by identifier prefix. */
     get(pre: string): ContactRecord | null;
     /**
@@ -32,5 +47,5 @@ export declare function persistResolvedContact(hby: Habery, pre: string | null |
     oobi?: string | null;
 }): void;
 /** Debug helper kept local so organizer serialization stays reviewable. */
-export declare function signedContactJson(hby: Habery, pre: string): string | null;
+export declare function signedContactJson(db: Baser, pre: string): string | null;
 //# sourceMappingURL=organizing.d.ts.map

package/types/app/identity/organizing.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"organizing.d.ts","sourceRoot":"","sources":["../../../src/app/identity/organizing.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,KAAK,EAAE,MAAM,oBAAoB,CAAC;AAChD,OAAO,KAAK,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,cAAc,CAAC;AAKrD,MAAM,WAAW,aAAc,SAAQ,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC;IAC5D,EAAE,EAAE,MAAM,CAAC;CACZ;AAED;;;;;;;GAOG;AACH,qBAAa,SAAS;IAER,QAAQ,CAAC,EAAE,EAAE,KAAK;IAAE,QAAQ,CAAC,QAAQ,EAAE,QAAQ,GAAG,IAAI;IADlE,+FAA+F;gBAC1E,EAAE,EAAE,KAAK,EAAW,QAAQ,EAAE,QAAQ,GAAG,IAAI;IAElE;;;;;;;;;;OAUG;IACH,gBAAgB,CAAC,SAAS,EAAE,MAAM,GAAG,MAAM;IAkB3C,2DAA2D;IAC3D,GAAG,CAAC,GAAG,EAAE,MAAM,GAAG,aAAa,GAAG,IAAI;IAoBtC;;;;;;OAMG;IACH,MAAM,CACJ,GAAG,EAAE,MAAM,EACX,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAC5B,IAAI;IAwBP,2EAA2E;IAC3E,SAAS,CAAC,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,aAAa,EAAE;CAezD;AAUD,6EAA6E;AAC7E,wBAAgB,sBAAsB,CACpC,GAAG,EAAE,MAAM,EACX,GAAG,EAAE,MAAM,GAAG,IAAI,GAAG,SAAS,EAC9B,IAAI,EAAE;IACJ,KAAK,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACtB,IAAI,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;CACtB,GACA,IAAI,CAiBN;AAED,2EAA2E;AAC3E,wBAAgB,iBAAiB,CAC/B,EAAE,EAAE,KAAK,EACT,GAAG,EAAE,MAAM,GACV,MAAM,GAAG,IAAI,CAGf"}

package/types/app/ipex/ipex-building.d.ts

@@ -0,0 +1,30 @@
+/** Pure v2 IPEX body construction and finite, cancellable byte-input preparation. */
+import { SerderACDC, type SerderKERI } from "cesr-ts";
+import type { Operation } from "effection";
+import { type DisclosurePlan } from "./ipex-graph.js";
+import type { IpexBuilderOptions, IpexMessage, IpexRoute } from "./ipexing.js";
+/** Explicit body inputs; openers derive their transaction identity from their XIP SAID. */
+export interface IpexV2BodyOptions extends Omit<IpexBuilderOptions, "version" | "pvrsn"> {
+    message: string;
+    recipient?: string;
+    prior?: SerderKERI;
+    plan?: DisclosurePlan;
+    anchor?: boolean;
+    /** KERIpy apply/offer/grant permit application-defined payload fields; named protocol inputs stay reserved. */
+    attrs?: Record<string, unknown>;
+}
+/**
+ * Construct an XIP opener or EXN continuation from parsed credential bodies, without reading or owning wire.
+ * The first node is the origin SAID commitment; offer callers may send just that
+ * commitment or borrow the frames' nestedPayloads. A commitment authenticates no
+ * child signature. Conversation storage, signing and anchoring belong to callers.
+ */
+export declare function ipexExnBody(sender: string, route: IpexRoute, nodes: readonly SerderACDC[], options: IpexV2BodyOptions): SerderKERI;
+/**
+ * Parse a finite stream of direct child messages once, then consume their nested
+ * wire for the enclosing exchange. Parsed frames and Texters are ordinary values;
+ * serialization observes the operation signal.
+ * Returned nested bytes must share the enclosure with the parent's own proofs.
+ */
+export declare function prepareIpexExn(sender: string, route: IpexRoute, wire: Uint8Array, options: IpexV2BodyOptions): Operation<IpexMessage>;
+//# sourceMappingURL=ipex-building.d.ts.map

package/types/app/ipex/ipex-building.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"ipex-building.d.ts","sourceRoot":"","sources":["../../../src/app/ipex/ipex-building.ts"],"names":[],"mappings":"AAAA,qFAAqF;AACrF,OAAO,EAA6C,UAAU,EAAE,KAAK,UAAU,EAAY,MAAM,SAAS,CAAC;AAC3G,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,WAAW,CAAC;AAG3C,OAAO,EACL,KAAK,cAAc,EAKpB,MAAM,iBAAiB,CAAC;AACzB,OAAO,KAAK,EAAE,kBAAkB,EAAE,WAAW,EAAE,SAAS,EAAE,MAAM,cAAc,CAAC;AAE/E,2FAA2F;AAC3F,MAAM,WAAW,iBAAkB,SAAQ,IAAI,CAAC,kBAAkB,EAAE,SAAS,GAAG,OAAO,CAAC;IACtF,OAAO,EAAE,MAAM,CAAC;IAChB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,KAAK,CAAC,EAAE,UAAU,CAAC;IACnB,IAAI,CAAC,EAAE,cAAc,CAAC;IACtB,MAAM,CAAC,EAAE,OAAO,CAAC;IACjB,+GAA+G;IAC/G,KAAK,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CACjC;AAED;;;;;GAKG;AACH,wBAAgB,WAAW,CACzB,MAAM,EAAE,MAAM,EACd,KAAK,EAAE,SAAS,EAChB,KAAK,EAAE,SAAS,UAAU,EAAE,EAC5B,OAAO,EAAE,iBAAiB,GACzB,UAAU,CA+GZ;AACD;;;;;GAKG;AACH,wBAAiB,cAAc,CAC7B,MAAM,EAAE,MAAM,EACd,KAAK,EAAE,SAAS,EAChB,IAAI,EAAE,UAAU,EAChB,OAAO,EAAE,iBAAiB,GACzB,SAAS,CAAC,WAAW,CAAC,CAoBxB"}