keri-ts 1.0.0 → 2.0.0

package/types/app/{mailboxing.d.ts → mailbox/mailboxing.d.ts}

@@ -16,13 +16,17 @@
  *   layer serves both root and non-root mailbox/OOBI paths
  */
 import type { Operation } from "effection";
-import { type Mailboxer, type MailboxerOptions } from "../db/mailboxing.js";
-import type { Hab, Habery } from "./habbing.js";
+import { type Mailboxer, type MailboxerOptions } from "../../db/mailbox/mailboxing.js";
+import type { Hab, Habery } from "../identity/habbing.js";
 /**
  * Derive mailbox open options from one existing habery.
  *
  * This is the supported bridge from core habery state to the additive
  * provider-side mailbox store lifecycle.
+ *
+ * @param hby Borrowed local identities and accepted-state stores.
+ * @param options Explicit store options overriding the Habery-derived name/path/temp/read-only settings.
+ * @returns Derived open settings.
  */
 export declare function mailboxerOptionsForHabery(hby: Habery, options?: Partial<MailboxerOptions>): MailboxerOptions;
 /**
@@ -31,6 +35,10 @@ export declare function mailboxerOptionsForHabery(hby: Habery, options?: Partial
  * Ownership rule:
  * - this helper only derives open settings from habery state
  * - the caller that opens the mailboxer owns its lifecycle
+ *
+ * @param hby Borrowed local identities and accepted-state stores.
+ * @param options Explicit store options overriding the Habery-derived name/path/temp/read-only settings.
+ * @returns Provider sidecar whose acquisition/lifetime belongs to the caller scope.
  */
 export declare function openMailboxerForHabery(hby: Habery, options?: Partial<MailboxerOptions>): Operation<Mailboxer>;
 /**
@@ -38,6 +46,10 @@ export declare function openMailboxerForHabery(hby: Habery, options?: Partial<Ma
  *
  * Topic buckets are normalized as `pre/topic`, with `topic` already carrying
  * the leading slash when it is a protocol mailbox topic like `/challenge`.
+ *
+ * @param pre AID whose mailbox or accepted state is addressed.
+ * @param topic Protocol mailbox topic; leading slash is normalized where required.
+ * @returns Storage key joining the AID and one slash-prefixed topic.
  */
 export declare function mailboxTopicKey(pre: string, topic: string): string;
 /**
@@ -45,6 +57,12 @@ export declare function mailboxTopicKey(pre: string, topic: string): string;
  *
  * Cursor records store the last seen ordinal, while mailbox queries ask for
  * the next ordinal wanted.
+ *
+ * @param hby Borrowed local identities and accepted-state stores.
+ * @param pre AID whose mailbox or accepted state is addressed.
+ * @param witness Remote endpoint AID used in the durable cursor key.
+ * @param topics Topics requested by the poller.
+ * @returns Next-wanted ordinal map, derived from last-consumed rows plus one.
  */
 export declare function mailboxQueryTopics(hby: Habery, pre: string, witness: string, topics: Iterable<string>): Record<string, number>;
 /**
@@ -52,55 +70,55 @@ export declare function mailboxQueryTopics(hby: Habery, pre: string, witness: st
  *
  * These cursors live in `Baser.tops` because they describe the consumer's
  * remote poll progress, not the provider's stored inbox contents.
+ *
+ * @param hby Borrowed local identities and accepted-state stores.
+ * @param pre AID whose mailbox or accepted state is addressed.
+ * @param witness Remote endpoint AID.
+ * @param topic Protocol mailbox topic; leading slash is normalized where required.
+ * @param idx Last successfully consumed provider ordinal.
  */
 export declare function updateMailboxRemoteCursor(hby: Habery, pre: string, witness: string, topic: string, idx: number): void;
 /**
- * Return the remote mailbox or witness endpoints a local habitat should poll.
+ * Enumerate authorized mailbox providers and the subject's current KEL witnesses.
  *
- * KERIpy parity rule:
- * - mailbox role endpoints take precedence when authorized
- * - otherwise poll every eligible witness mailbox endpoint
- * - SSE uses HTTP(S) only; a TCP-only mailbox keeps role precedence while awaiting HTTP
+ * Both sets are polled, as in KERIpy MailboxDirector. A provider in both roles
+ * shares one history and cursor, so it gets one worker. Locally controlled AIDs
+ * remain eligible for HTTP polling; provider storage is never scanned directly.
+ * Missing HTTP(S) locations produce no poll target until a location is available.
  *
- * The result is intentionally already flattened to one preferred URL per
- * endpoint identifier so runtime pollers can stay focused on mailbox protocol
- * work instead of URL selection policy.
+ * @param hab Mailbox subject habitat supplying accepted roles and current witnesses.
+ * @returns One HTTPS-preferred HTTP target per provider AID, with stable worker keys.
  */
-export declare function mailboxPollEndpoints(hby: Habery, hab: Hab): Array<{
+export declare function mailboxPollEndpoints(hab: Hab): Array<{
     key: string;
     eid: string;
     url: string;
 }>;
-/**
- * Return the currently authorized mailbox endpoints for one remote recipient.
- *
- * `Poster` treats this as the mailbox-first broadcast target set.
- */
-export declare function mailboxDeliveryEndpoints(hab: Hab, recipient: string): Array<{
-    eid: string;
-    url: string;
-}>;
-/**
- * Return the direct controller and agent endpoints for one remote recipient.
- *
- * These are fallback transport targets only when no mailbox endpoints are
- * configured or when the caller explicitly forces direct delivery.
- */
-export declare function directDeliveryEndpoints(hab: Hab, recipient: string): Array<{
-    eid: string;
-    url: string;
-}>;
 /**
  * Read one endpoint's currently stored URLs directly from shared DB state.
  *
  * This stays DB-oriented on purpose so CLI, server, and forwarding code can
  * inspect authoritative location state without carrying a second cache.
+ *
+ * @param hby Borrowed local identities and accepted-state stores.
+ * @param eid Endpoint AID whose accepted location replies are loaded.
+ * @param scheme Optional scheme filter; omission returns all recorded schemes.
+ * @returns Scheme-to-URL map from accepted location state.
  */
 export declare function fetchEndpointUrls(hby: Habery, eid: string, scheme?: string): Record<string, string>;
 /** One locally hosted endpoint plus its advertised preferred URL and base path. */
 export interface HostedEndpoint {
+    /**
+     * Hosted local endpoint AID selected from accepted location state.
+     */
     eid: string;
+    /**
+     * Preferred advertised URL for this endpoint.
+     */
     url: string;
+    /**
+     * Normalized path prefix under which this endpoint is served.
+     */
     basePath: string;
 }
 /**
@@ -110,6 +128,9 @@ export interface HostedEndpoint {
  * and OOBI resources without reparsing the original absolute request path.
  */
 export interface HostedEndpointPathMatch extends HostedEndpoint {
+    /**
+     * Slash-prefixed request path beneath the endpoint's base path.
+     */
     relativePath: string;
 }
 /**
@@ -125,8 +146,17 @@ export interface HostedEndpointPathMatch extends HostedEndpoint {
  * than one hosted AID" mean the same thing. They do not.
  */
 export interface HostedRouteResolution {
+    /**
+     * Whether no endpoint, one endpoint or an ambiguous longest-prefix match was found.
+     */
     kind: "none" | "one" | "ambiguous";
+    /**
+     * Selected endpoint only when kind is one; otherwise null.
+     */
     endpoint: HostedEndpointPathMatch | null;
+    /**
+     * Request-relative path only when one endpoint was selected.
+     */
     relativePath: string | null;
 }
 /**
@@ -137,6 +167,12 @@ export interface HostedRouteResolution {
  * - optionally append a resource suffix like `/mailboxes`
  * - when more than one local endpoint matches, the caller must treat that as
  *   ambiguous instead of guessing
+ *
+ * @param hby Borrowed local identities and accepted-state stores.
+ * @param pathname Incoming URL pathname to compare against accepted endpoint base paths.
+ * @param resourceSuffix Protocol resource suffix sought beneath the hosted base path.
+ * @param eids Optional explicit hosted-AID filter; do not infer host eligibility from all local identities.
+ * @returns Matching hosted endpoint projection; ambiguity follows this helper's documented selection policy.
  */
 export declare function hostedEndpointMatches(hby: Habery, pathname: string, resourceSuffix?: string, eids?: Iterable<string>): HostedEndpoint[];
 /**
@@ -144,6 +180,12 @@ export declare function hostedEndpointMatches(hby: Habery, pathname: string, res
  *
  * Callers that need ambiguity details should use `hostedEndpointPathMatches()`
  * directly.
+ *
+ * @param hby Borrowed local identities and accepted-state stores.
+ * @param pathname Incoming URL pathname to compare against accepted endpoint base paths.
+ * @param resourceSuffix Protocol resource suffix sought beneath the hosted base path.
+ * @param eids Optional explicit hosted-AID filter; do not infer host eligibility from all local identities.
+ * @returns Matching hosted endpoint projection; ambiguity follows this helper's documented selection policy.
  */
 export declare function hostedEndpointForPath(hby: Habery, pathname: string, resourceSuffix?: string, eids?: Iterable<string>): HostedEndpoint | null;
 /**
@@ -155,6 +197,11 @@ export declare function hostedEndpointForPath(hby: Habery, pathname: string, res
  * - non-root endpoints match their exact base path or any subpath beneath it
  * - callers should prefer the longest matching base path and treat ties as
  *   ambiguous instead of guessing
+ *
+ * @param hby Borrowed local identities and accepted-state stores.
+ * @param pathname Incoming URL pathname to compare against accepted endpoint base paths.
+ * @param eids Optional explicit hosted-AID filter; do not infer host eligibility from all local identities.
+ * @returns Matching hosted endpoint projection; ambiguity follows this helper's documented selection policy.
  */
 export declare function hostedEndpointPathMatches(hby: Habery, pathname: string, eids?: Iterable<string>): HostedEndpointPathMatch[];
 /**
@@ -167,6 +214,12 @@ export declare function hostedEndpointPathMatches(hby: Habery, pathname: string,
  * hit?" Keeping it here means `protocol-handler.ts` can reason in terms of
  * explicit route matches while `server.ts` stays out of endpoint-selection
  * policy entirely.
+ *
+ * @param hby Borrowed local identities and accepted-state stores.
+ * @param pathname Incoming URL pathname to compare against accepted endpoint base paths.
+ * @param resourceSuffix Protocol resource suffix sought beneath the hosted base path.
+ * @param eids Optional explicit hosted-AID filter; do not infer host eligibility from all local identities.
+ * @returns Matching hosted endpoint projection; ambiguity follows this helper's documented selection policy.
  */
 export declare function resolveHostedEndpointPath(hby: Habery, pathname: string, resourceSuffix?: string, eids?: Iterable<string>): HostedRouteResolution;
 /**
@@ -174,26 +227,22 @@ export declare function resolveHostedEndpointPath(hby: Habery, pathname: string,
  *
  * This converts stored end-role location shape into the transport-ready tuples
  * used by forwarding and polling logic.
+ *
+ * @param roleUrls Accepted endpoint-AID to scheme/URL map for one role, possibly absent.
+ * @returns All endpoint/preferred-URL pairs.
  */
 export declare function flattenRoleUrls(roleUrls?: Record<string, Record<string, string>>): Array<{
     eid: string;
     url: string;
 }>;
-/**
- * Return the deterministic first preferred endpoint from one role map.
- *
- * Forwarding fallback chooses one witness deterministically; mailbox polling
- * enumerates its eligible witnesses separately.
- */
-export declare function firstSortedEndpoint(roleUrls?: Record<string, Record<string, string>>): {
-    eid: string;
-    url: string;
-} | null;
 /**
  * Return the preferred URL for one endpoint location set.
  *
  * HTTPS wins when present because mailbox and admin URLs are externally
  * advertised endpoints.
+ *
+ * @param urls Accepted scheme-to-URL map for one endpoint.
+ * @returns HTTPS, then HTTP, then TCP; null when no supported location is recorded.
  */
 export declare function preferredUrl(urls: Record<string, string>): string | null;
 /**
@@ -201,6 +250,9 @@ export declare function preferredUrl(urls: Record<string, string>): string | nul
  *
  * Mailbox and OOBI hosts serve routes relative to this base path, not only
  * from `/`.
+ *
+ * @param url Advertised endpoint URL; its pathname defines hosted routing.
+ * @returns Normalized base pathname.
  */
 export declare function endpointBasePath(url: string): string;
 //# sourceMappingURL=mailboxing.d.ts.map

package/types/app/mailbox/mailboxing.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"mailboxing.d.ts","sourceRoot":"","sources":["../../../src/app/mailbox/mailboxing.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;GAgBG;AACH,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,WAAW,CAAC;AAG3C,OAAO,EAAmB,KAAK,SAAS,EAAE,KAAK,gBAAgB,EAAE,MAAM,gCAAgC,CAAC;AACxG,OAAO,KAAK,EAAE,GAAG,EAAE,MAAM,EAAE,MAAM,wBAAwB,CAAC;AAE1D;;;;;;;;;GASG;AACH,wBAAgB,yBAAyB,CACvC,GAAG,EAAE,MAAM,EACX,OAAO,GAAE,OAAO,CAAC,gBAAgB,CAAM,GACtC,gBAAgB,CAWlB;AAED;;;;;;;;;;GAUG;AACH,wBAAiB,sBAAsB,CACrC,GAAG,EAAE,MAAM,EACX,OAAO,GAAE,OAAO,CAAC,gBAAgB,CAAM,GACtC,SAAS,CAAC,SAAS,CAAC,CAEtB;AAED;;;;;;;;;GASG;AACH,wBAAgB,eAAe,CAAC,GAAG,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,MAAM,CAElE;AAED;;;;;;;;;;;GAWG;AACH,wBAAgB,kBAAkB,CAChC,GAAG,EAAE,MAAM,EACX,GAAG,EAAE,MAAM,EACX,OAAO,EAAE,MAAM,EACf,MAAM,EAAE,QAAQ,CAAC,MAAM,CAAC,GACvB,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAYxB;AAED;;;;;;;;;;;GAWG;AACH,wBAAgB,yBAAyB,CACvC,GAAG,EAAE,MAAM,EACX,GAAG,EAAE,MAAM,EACX,OAAO,EAAE,MAAM,EACf,KAAK,EAAE,MAAM,EACb,GAAG,EAAE,MAAM,GACV,IAAI,CAIN;AAED;;;;;;;;;;GAUG;AACH,wBAAgB,oBAAoB,CAAC,GAAG,EAAE,GAAG,GAAG,KAAK,CAAC;IAAE,GAAG,EAAE,MAAM,CAAC;IAAC,GAAG,EAAE,MAAM,CAAC;IAAC,GAAG,EAAE,MAAM,CAAA;CAAE,CAAC,CAc/F;AAED;;;;;;;;;;GAUG;AACH,wBAAgB,iBAAiB,CAC/B,GAAG,EAAE,MAAM,EACX,GAAG,EAAE,MAAM,EACX,MAAM,SAAK,GACV,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAexB;AAED,mFAAmF;AACnF,MAAM,WAAW,cAAc;IAC7B;;OAEG;IACH,GAAG,EAAE,MAAM,CAAC;IACZ;;OAEG;IACH,GAAG,EAAE,MAAM,CAAC;IACZ;;OAEG;IACH,QAAQ,EAAE,MAAM,CAAC;CAClB;AAED;;;;;GAKG;AACH,MAAM,WAAW,uBAAwB,SAAQ,cAAc;IAC7D;;OAEG;IACH,YAAY,EAAE,MAAM,CAAC;CACtB;AAED;;;;;;;;;;;GAWG;AACH,MAAM,WAAW,qBAAqB;IACpC;;OAEG;IACH,IAAI,EAAE,MAAM,GAAG,KAAK,GAAG,WAAW,CAAC;IACnC;;OAEG;IACH,QAAQ,EAAE,uBAAuB,GAAG,IAAI,CAAC;IACzC;;OAEG;IACH,YAAY,EAAE,MAAM,GAAG,IAAI,CAAC;CAC7B;AAqBD;;;;;;;;;;;;;;GAcG;AACH,wBAAgB,qBAAqB,CACnC,GAAG,EAAE,MAAM,EACX,QAAQ,EAAE,MAAM,EAChB,cAAc,SAAK,EACnB,IAAI,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,GACtB,cAAc,EAAE,CAqBlB;AAED;;;;;;;;;;;GAWG;AACH,wBAAgB,qBAAqB,CACnC,GAAG,EAAE,MAAM,EACX,QAAQ,EAAE,MAAM,EAChB,cAAc,SAAK,EACnB,IAAI,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,GACtB,cAAc,GAAG,IAAI,CAGvB;AAED;;;;;;;;;;;;;;GAcG;AACH,wBAAgB,yBAAyB,CACvC,GAAG,EAAE,MAAM,EACX,QAAQ,EAAE,MAAM,EAChB,IAAI,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,GACtB,uBAAuB,EAAE,CAsB3B;AAED;;;;;;;;;;;;;;;;GAgBG;AACH,wBAAgB,yBAAyB,CACvC,GAAG,EAAE,MAAM,EACX,QAAQ,EAAE,MAAM,EAChB,cAAc,SAAK,EACnB,IAAI,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,GACtB,qBAAqB,CAuBvB;AAED;;;;;;;;GAQG;AACH,wBAAgB,eAAe,CAC7B,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,GAChD,KAAK,CAAC;IAAE,GAAG,EAAE,MAAM,CAAC;IAAC,GAAG,EAAE,MAAM,CAAA;CAAE,CAAC,CAarC;AAED;;;;;;;;GAQG;AACH,wBAAgB,YAAY,CAAC,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,GAAG,MAAM,GAAG,IAAI,CAExE;AAED;;;;;;;;GAQG;AACH,wBAAgB,gBAAgB,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,CAMpD"}

package/types/app/mailbox/topic-routing.d.ts

@@ -0,0 +1,18 @@
+/**
+ * KERIpy `/fwd` modifiers use the bare topic name, e.g. `multisig`.
+ *
+ * @param topic Protocol mailbox topic; leading slash is normalized where required.
+ * @returns Bare /fwd modifier topic.
+ */
+export declare function transportMailboxTopic(topic: string): string;
+/**
+ * Public helper for deriving mailbox topic defaults from one EXN route.
+ *
+ * This stays exported because CLI and runtime call sites both need one shared
+ * answer for "which mailbox topic should this route land in by default?"
+ *
+ * @param route Exchange route whose first nonempty segment chooses the mailbox topic.
+ * @returns Derived topic under the existing route mapping.
+ */
+export declare function mailboxTopicForRoute(route: string): string;
+//# sourceMappingURL=topic-routing.d.ts.map

package/types/app/mailbox/topic-routing.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"topic-routing.d.ts","sourceRoot":"","sources":["../../../src/app/mailbox/topic-routing.ts"],"names":[],"mappings":"AAwCA;;;;;GAKG;AACH,wBAAgB,qBAAqB,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,CAE3D;AAED;;;;;;;;GAQG;AACH,wBAAgB,oBAAoB,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,CAE1D"}

package/types/app/multisig/group-members.d.ts

@@ -0,0 +1,60 @@
+import type { SerderKERI, Verfer } from "cesr-ts";
+import { TransIdxSigGroup } from "../../core/dispatch.js";
+import type { Baser } from "../../db/basing.js";
+import type { Hab, Habery } from "../identity/habbing.js";
+/** True when the selected habitat is a local group habitat. */
+export declare function isLocalGroupHab(hby: Habery, hab: Hab): boolean;
+/** Return the local member habitat for a persisted group identifier. */
+export declare function localGroupMember(hby: Habery, groupPre: string): Hab;
+/** Find the member's latest accepted single-key contribution to the supplied group keys. */
+export declare function latestGroupContribution(db: Baser, member: string, verfers: readonly Verfer[]): {
+    event: SerderKERI;
+    index: number;
+    verfer: Verfer;
+} | null;
+/** Exact accepted group event that supplies the ordinary witnesser election. */
+export interface GroupCoordinator {
+    sn: number;
+    said: string;
+}
+/**
+ * Verify an accepted coordinator against its historical establishment threshold.
+ * index is the initial election; a frozen operation rechecks indices without
+ * replacing its earlier choice when more valid signatures arrive.
+ */
+export declare function groupWitnesserSelection(db: Baser, group: string, { sn, said }: GroupCoordinator): {
+    establishment: SerderKERI;
+    index: number;
+    indices: number[];
+} | null;
+/** Return current group signing member AIDs in signing-index order. */
+export declare function groupSigningMembers(hby: Habery, groupPre: string): string[];
+/** Return the first locally available habitat from `members`, if any. */
+export declare function findLocalGroupMember(hby: Habery, members: readonly string[]): Hab | null;
+/** Return unique non-empty member AIDs while preserving first-seen order. */
+export declare function uniqueMembers(members: readonly string[]): string[];
+/** Match a group signing key to one member's accepted establishment history, including retired keys. */
+export declare function groupMemberHasKey(db: Baser, member: string, key: string): boolean;
+/**
+ * Select only a cryptographically valid local partial at an accepted group establishment.
+ * The shared esigs table can hold unverified escrow candidates, so a matching
+ * index or an authenticated parent wrapper alone is not recorded child approval.
+ */
+export declare function localIpexContribution(db: Baser, member: string, embedded: SerderKERI, proofs: readonly TransIdxSigGroup[]): TransIdxSigGroup | null;
+/** Members of a group's latest accepted establishment event, ordered by key index. */
+export interface AcceptedGroupMembers {
+    event: SerderKERI;
+    smids: string[];
+    rmids: string[];
+}
+/**
+ * Derive the members of `group`'s latest accepted establishment event from
+ * local KELs, as KERIpy `GroupHab.acceptedMembers`.
+ *
+ * Each signing key is attributed to the candidate whose latest contributing
+ * establishment event supplied it, and each next-key digest to the candidate
+ * whose establishment event committed to it. Returns null when the event is
+ * missing or any key cannot be attributed to exactly one candidate.
+ */
+export declare function acceptedGroupMembers(db: Baser, group: string, candidates: Iterable<string>): AcceptedGroupMembers | null;
+//# sourceMappingURL=group-members.d.ts.map

package/types/app/multisig/group-members.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"group-members.d.ts","sourceRoot":"","sources":["../../../src/app/multisig/group-members.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,EAAE,MAAM,SAAS,CAAC;AAClD,OAAO,EAAE,gBAAgB,EAAE,MAAM,wBAAwB,CAAC;AAG1D,OAAO,KAAK,EAAE,KAAK,EAAE,MAAM,oBAAoB,CAAC;AAEhD,OAAO,KAAK,EAAE,GAAG,EAAE,MAAM,EAAE,MAAM,wBAAwB,CAAC;AAE1D,+DAA+D;AAC/D,wBAAgB,eAAe,CAAC,GAAG,EAAE,MAAM,EAAE,GAAG,EAAE,GAAG,GAAG,OAAO,CAE9D;AAED,wEAAwE;AACxE,wBAAgB,gBAAgB,CAAC,GAAG,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,GAAG,CAOnE;AAED,4FAA4F;AAC5F,wBAAgB,uBAAuB,CACrC,EAAE,EAAE,KAAK,EACT,MAAM,EAAE,MAAM,EACd,OAAO,EAAE,SAAS,MAAM,EAAE,GACzB;IAAE,KAAK,EAAE,UAAU,CAAC;IAAC,KAAK,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,GAAG,IAAI,CAe7D;AAED,gFAAgF;AAChF,MAAM,WAAW,gBAAgB;IAC/B,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,MAAM,CAAC;CACd;AAED;;;;GAIG;AACH,wBAAgB,uBAAuB,CACrC,EAAE,EAAE,KAAK,EACT,KAAK,EAAE,MAAM,EACb,EAAE,EAAE,EAAE,IAAI,EAAE,EAAE,gBAAgB,GAC7B;IAAE,aAAa,EAAE,UAAU,CAAC;IAAC,KAAK,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,MAAM,EAAE,CAAA;CAAE,GAAG,IAAI,CAkBxE;AAED,uEAAuE;AACvE,wBAAgB,mBAAmB,CAAC,GAAG,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,MAAM,EAAE,CAO3E;AAED,yEAAyE;AACzE,wBAAgB,oBAAoB,CAAC,GAAG,EAAE,MAAM,EAAE,OAAO,EAAE,SAAS,MAAM,EAAE,GAAG,GAAG,GAAG,IAAI,CAQxF;AAED,6EAA6E;AAC7E,wBAAgB,aAAa,CAAC,OAAO,EAAE,SAAS,MAAM,EAAE,GAAG,MAAM,EAAE,CAElE;AAED,wGAAwG;AACxG,wBAAgB,iBAAiB,CAAC,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,GAAG,OAAO,CAMjF;AAED;;;;GAIG;AACH,wBAAgB,qBAAqB,CACnC,EAAE,EAAE,KAAK,EACT,MAAM,EAAE,MAAM,EACd,QAAQ,EAAE,UAAU,EACpB,MAAM,EAAE,SAAS,gBAAgB,EAAE,GAClC,gBAAgB,GAAG,IAAI,CAczB;AAED,sFAAsF;AACtF,MAAM,WAAW,oBAAoB;IACnC,KAAK,EAAE,UAAU,CAAC;IAClB,KAAK,EAAE,MAAM,EAAE,CAAC;IAChB,KAAK,EAAE,MAAM,EAAE,CAAC;CACjB;AAED;;;;;;;;GAQG;AACH,wBAAgB,oBAAoB,CAClC,EAAE,EAAE,KAAK,EACT,KAAK,EAAE,MAAM,EACb,UAAU,EAAE,QAAQ,CAAC,MAAM,CAAC,GAC3B,oBAAoB,GAAG,IAAI,CAqC7B"}

package/types/app/{grouping.d.ts → multisig/grouping.d.ts}

@@ -6,24 +6,32 @@
  * own group key-event counseling; local group habitat state still lives under
  * `Habery.makeGroupHab(...)`, `Baser.habs`, and the keeper member stores.
  */
-import { type CesrFrame, type Kind, Serder, SerderKERI, type Versionage } from "cesr-ts";
+import { type CesrFrame, type Kind, Serder, SerderACDC, SerderKERI, type Versionage } from "cesr-ts";
 import { type Operation } from "effection";
-import { Kevery } from "../core/eventing.js";
-import { Revery } from "../core/routing.js";
-import { Exchanger, type ExchangeRouteHandler } from "./exchanging.js";
-import type { Hab, Habery } from "./habbing.js";
-import type { Notifier } from "./notifying.js";
+import type { RegistryObserver } from "../../acdc/observing.js";
+import { type RegistryEvent } from "../../acdc/regeventing.js";
+import type { RegistryStore } from "../../acdc/registering.js";
+import { Kevery } from "../../core/kel/eventing.js";
+import { Revery } from "../../core/routing.js";
+import { Exchanger, type ExchangeRouteHandler, type ExchangeRouteVerification } from "../exchanges/exchanging.js";
+import type { Hab, Habery } from "../identity/habbing.js";
+import type { Notifier } from "../notifications/notifying.js";
 /** KERIpy multisig route constants. */
 export declare const MULTISIG_ICP_ROUTE = "/multisig/icp";
 export declare const MULTISIG_ROT_ROUTE = "/multisig/rot";
 export declare const MULTISIG_IXN_ROUTE = "/multisig/ixn";
+export declare const MULTISIG_RIP_ROUTE = "/multisig/rip";
+export declare const MULTISIG_BUP_ROUTE = "/multisig/bup";
 export declare const MULTISIG_VCP_ROUTE = "/multisig/vcp";
 export declare const MULTISIG_ISS_ROUTE = "/multisig/iss";
 export declare const MULTISIG_REV_ROUTE = "/multisig/rev";
 export declare const MULTISIG_EXN_ROUTE = "/multisig/exn";
 export declare const MULTISIG_RPY_ROUTE = "/multisig/rpy";
+/** Local v2 coordination profile routes, as in KERIpy core; not upstream KERI or #1740 routes. */
+export declare const MULTISIG_QRY_ROUTE = "/multisig/qry";
+export declare const MULTISIG_IPEX_PROOF_ROUTE = "/multisig/ipex-proof";
 /** Ordered route list used for handler registration. */
-export declare const MULTISIG_ROUTES: readonly ["/multisig/icp", "/multisig/rot", "/multisig/ixn", "/multisig/vcp", "/multisig/iss", "/multisig/rev", "/multisig/exn", "/multisig/rpy"];
+export declare const MULTISIG_ROUTES: readonly ["/multisig/rip", "/multisig/bup", "/multisig/icp", "/multisig/rot", "/multisig/ixn", "/multisig/vcp", "/multisig/iss", "/multisig/rev", "/multisig/exn", "/multisig/rpy", "/multisig/qry", "/multisig/ipex-proof"];
 export type MultisigRoute = typeof MULTISIG_ROUTES[number];
 /** Event proposal input; each supported route requires its own attributes. Child commitments are derived. */
 export type MultisigEventProposal = {
@@ -51,7 +59,59 @@ export type MultisigEventProposal = {
     attrs: {
         gid: string;
     };
+} | {
+    route: typeof MULTISIG_EXN_ROUTE;
+    attrs: {
+        gid: string;
+    };
+} | {
+    route: typeof MULTISIG_QRY_ROUTE;
+    attrs: {
+        gid: string;
+    };
+} | {
+    route: typeof MULTISIG_IPEX_PROOF_ROUTE;
+    attrs: {
+        gid: string;
+    };
+};
+/** Legacy registry proposals require their own named evidence, not arbitrary embed bags. */
+export type MultisigVdrProposal = {
+    route: typeof MULTISIG_VCP_ROUTE;
+    attrs: {
+        gid: string;
+        usage?: string;
+        cgvrsn?: readonly [number, number];
+    };
+    embeds: {
+        vcp: Uint8Array;
+        anc: Uint8Array;
+    };
+} | {
+    route: typeof MULTISIG_ISS_ROUTE;
+    attrs: {
+        gid: string;
+        cgvrsn?: readonly [number, number];
+    };
+    embeds: {
+        acdc: Uint8Array;
+        iss: Uint8Array;
+        anc: Uint8Array;
+    };
+} | {
+    route: typeof MULTISIG_REV_ROUTE;
+    attrs: {
+        gid: string;
+        said: string;
+        cgvrsn?: readonly [number, number];
+    };
+    embeds: {
+        rev: Uint8Array;
+        anc: Uint8Array;
+    };
 };
+/** Build an unsigned legacy VDR wrapper with its required named children. */
+export declare function prepareMultisigVdrExn(sender: string, proposal: MultisigVdrProposal, options?: MultisigBuilderOptions): MultisigMessage;
 interface RawMessage {
     readonly raw: Uint8Array;
 }
@@ -83,7 +143,20 @@ export type MultisigDecision = {
 export interface MultisigHandlerOptions {
     mux?: Multiplexor;
     notifier?: Notifier | null;
+    registry?: RegistryObserver | null;
+    messageKevery?: Kevery;
 }
+/** Validate public TEL linkage before proposing or signing an anchor; no state is inferred from b. */
+export declare function registryProposalEvent(tel: SerderACDC, gid: string, store: RegistryStore | null): RegistryEvent | null;
+/** Exact authenticated consent may share an anchor index with unrelated v2 TEL proposals. */
+export declare function sameRegistryProposal(left: SerderKERI, right: SerderKERI): boolean;
+/** Validate both child commitments and every supplied source coordinate without writing evidence. */
+export declare function acdcV2RegistryProposal(wrapper: SerderKERI, nests: readonly CesrFrame[], store: RegistryStore | null): {
+    tel: SerderACDC;
+    anchor: SerderKERI;
+} | null;
+/** Commit one exact ACDC v2 registry/anchor pair using the ordinary nested-wire serializer. */
+export declare function prepareAcdcV2RegistryExn(sender: string, tel: Uint8Array, anchor: Uint8Array, store: RegistryStore | null, options?: MultisigBuilderOptions): Operation<MultisigMessage>;
 /** Coordinate one proposed group inception event. */
 export declare function multisigInceptExn(member: Hab, smids: readonly string[], rmids: readonly string[] | null, icp: Uint8Array | RawMessage, delegator?: string | null, options?: MultisigBuilderOptions): Operation<MultisigMessage>;
 /** Coordinate one proposed group rotation event. */
@@ -98,6 +171,21 @@ export declare function multisigIssueExn(group: string | Hab, member: Hab, acdc:
 export declare function multisigRevokeExn(group: string | Hab, member: Hab, said: string, rev: Uint8Array | RawMessage, anc: Uint8Array | RawMessage, options?: MultisigBuilderOptions): MultisigMessage;
 /** Coordinate one proposed multisig reply event. */
 export declare function multisigRpyExn(group: string | Hab, member: Hab, rpy: Uint8Array | RawMessage, options?: MultisigBuilderOptions): Operation<MultisigMessage>;
+/**
+ * Propose one exact signed v2 query authored by the group to its members.
+ *
+ * KERIpy `multisigQueryExn`: local v2 coordination profile route `/multisig/qry`
+ * whose `a` is `{gid, qry}` and whose single nested substream is the query stream.
+ */
+export declare function multisigQueryExn(group: string | Hab, member: Hab, qry: Uint8Array | RawMessage, options?: Omit<MultisigBuilderOptions, "version" | "pvrsn">): Operation<MultisigMessage>;
+/**
+ * Share one exact v2 IPEX Grant stream, with its proofs, with group members.
+ *
+ * KERIpy `multisigIpexProofExn`: local v2 coordination profile route
+ * `/multisig/ipex-proof` whose `a` is `{gid, grant}` and whose single nested
+ * substream is the complete Grant stream, authored by or addressed to the group.
+ */
+export declare function multisigIpexProofExn(group: string | Hab, member: Hab, grant: Uint8Array | RawMessage, options?: Omit<MultisigBuilderOptions, "version" | "pvrsn">): Operation<MultisigMessage>;
 /** Wrap one business EXN, such as `/ipex/grant`, for group approval. */
 export declare function multisigExn(group: string | Hab, member: Hab, exn: Uint8Array | RawMessage, options?: MultisigBuilderOptions): MultisigMessage;
 /**
@@ -113,7 +201,12 @@ export declare function multisigChildGenusAttrs(child: Serder, genus: Versionage
 };
 /**
  * Prepare finite child input, construct the parent and serialize its nested evidence.
- * The v1 pathed path retains its established encoding; v2 delegates parsing to parseBytes
+ * KEL (icp/rot/ixn) and reply proposals default to KERIpy's form for both v1 and v2
+ * groups: a v1 wrapper with a named `e` embed and pathed child attachments in the
+ * child's own genus. The group's version is the child KEL/reply version; the wrapper
+ * is only the coordination envelope. Other routes default to v2 nested wrappers, and
+ * an explicit `version`/`pvrsn` selects either form. The v1 pathed path retains
+ * its established encoding; v2 delegates parsing to parseBytes
  * once and borrows the resulting child only until nestedPayload has been fully consumed.
  * Parsed child evidence consists of ordinary values; serialization observes cancellation.
  * Sending v2 requires enclosing these bytes and the parent's signatures together.
@@ -125,18 +218,16 @@ export declare class MultisigNotificationHandler implements ExchangeRouteHandler
     private readonly mux;
     /** Bind one registered route to its shared approval coordinator. */
     constructor(resource: MultisigRoute, mux: Multiplexor);
-    /** Only the four frozen-reference v2 routes have child consumers. */
+    /** Only supported nested multisig routes have child consumers. */
     get acceptsNests(): boolean;
-    /** Authenticate the signed child relationship before exchange evidence is published. */
-    verify(args: {
-        serder: SerderKERI;
-        nests?: readonly CesrFrame[];
-    }): boolean;
+    /**
+     * Authenticate the signed child relationship before exchange evidence is published.
+     * A child handler registered with `Multiplexor.addChildHandler` for this route and
+     * the nested child's route owns verification instead.
+     */
+    verify(args: Parameters<NonNullable<ExchangeRouteHandler["verify"]>>[0]): ExchangeRouteVerification;
     /** Borrow persisted children until approval replay and coordination indexing finish. */
-    handle(args: {
-        serder: SerderKERI;
-        nests?: readonly CesrFrame[];
-    }): Operation<void>;
+    handle(args: Parameters<ExchangeRouteHandler["handle"]>[0]): Operation<void>;
 }
 /** Register the KERIpy multisig route family with one exchanger. */
 export declare function loadMultisigHandlers(hby: Habery, exchanger: Exchanger, options?: MultisigHandlerOptions): Multiplexor;
@@ -153,10 +244,37 @@ export declare class Multiplexor {
     readonly kvy: Kevery;
     readonly rvy: Revery;
     private readonly replay;
+    private readonly exchanger?;
+    private readonly registry?;
+    private readonly messageKevery;
+    /** Owners sharing one registered wrapper route, keyed by wrapper and nested child route. */
+    private readonly childHandlers;
     /** Reuse durable group membership and separate child processors without sharing parent proof state. */
-    constructor(hby: Habery, { notifier }?: {
+    constructor(hby: Habery, { notifier, exchanger, registry, messageKevery }?: {
         notifier?: Notifier | null;
+        exchanger?: Exchanger;
+        registry?: RegistryObserver;
+        messageKevery?: Kevery;
     });
+    /**
+     * Delegate one wrapper route's v2 children with route `child` to `handler`.
+     *
+     * KERIpy `Multiplexor.addChildHandler`: several owners share one registered
+     * `/multisig/*` Exchanger route without replacing `Exchanger.routes` entries.
+     * The delegate's `verify` and `handle` own all validation, indexing and
+     * notification for those children; the Multiplexor performs none of them.
+     * Registering a key twice is refused.
+     */
+    addChildHandler(route: string, child: string, handler: ExchangeRouteHandler): void;
+    /**
+     * Release a finite owner's delegation. A TypeScript runtime can outlive one
+     * command phase, unlike KERIpy's per-process CLI owners; the shared route stays.
+     */
+    removeChildHandler(route: string, child: string, handler: ExchangeRouteHandler): void;
+    /** Return the delegate for this v2 wrapper's single child route, if any. */
+    childHandlerFor(serder: SerderKERI, nests?: readonly CesrFrame[]): ExchangeRouteHandler | null;
+    /** V2 child replay borrows the caller's configured IPEX, registry, reply and KRAM owners. */
+    private v2IpexOwners;
     /** Index an authenticated proposal; child acceptance still requires local approval and its own proofs. */
     add(serder: SerderKERI, nests?: readonly CesrFrame[]): Operation<MultisigDecision>;
     /** Return true when this wrapper can be accepted for local group work. */
@@ -188,6 +306,11 @@ export interface MultisigChild {
 }
 /** Read one stored v1 child at the wire boundary, without authenticating its independent proof. */
 export declare function multisigChild(hby: Habery, wrapper: SerderKERI, label: string): MultisigChild | null;
+/** Resolve the stored proof and signed genus independently of the child protocol. */
+export declare function multisigChildEvidence(hby: Habery, wrapper: SerderKERI, label: string, child: Serder): {
+    attachment: Uint8Array;
+    genus: Versionage;
+};
 /** Extract raw attachment bytes for one label from a stored multisig wrapper. */
 export declare function multisigPathedAttachment(hby: Habery, wrapperSaid: string, label: string): Uint8Array;
 export {};

package/types/app/multisig/grouping.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"grouping.d.ts","sourceRoot":"","sources":["../../../src/app/multisig/grouping.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AACH,OAAO,EACL,KAAK,SAAS,EAId,KAAK,IAAI,EAOT,MAAM,EACN,UAAU,EACV,UAAU,EACV,KAAK,UAAU,EAGhB,MAAM,SAAS,CAAC;AACjB,OAAO,EAAgB,KAAK,SAAS,EAAE,MAAM,WAAW,CAAC;AACzD,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,yBAAyB,CAAC;AAChE,OAAO,EAAE,KAAK,aAAa,EAA+B,MAAM,2BAA2B,CAAC;AAC5F,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,2BAA2B,CAAC;AAU/D,OAAO,EAAE,MAAM,EAAE,MAAM,4BAA4B,CAAC;AACpD,OAAO,EAA0B,MAAM,EAAU,MAAM,uBAAuB,CAAC;AAC/E,OAAO,EAAE,SAAS,EAAE,KAAK,oBAAoB,EAAE,KAAK,yBAAyB,EAAE,MAAM,4BAA4B,CAAC;AAClH,OAAO,KAAK,EAAE,GAAG,EAAE,MAAM,EAAE,MAAM,wBAAwB,CAAC;AAE1D,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,+BAA+B,CAAC;AAM9D,uCAAuC;AACvC,eAAO,MAAM,kBAAkB,kBAAkB,CAAC;AAClD,eAAO,MAAM,kBAAkB,kBAAkB,CAAC;AAClD,eAAO,MAAM,kBAAkB,kBAAkB,CAAC;AAClD,eAAO,MAAM,kBAAkB,kBAAkB,CAAC;AAClD,eAAO,MAAM,kBAAkB,kBAAkB,CAAC;AAClD,eAAO,MAAM,kBAAkB,kBAAkB,CAAC;AAClD,eAAO,MAAM,kBAAkB,kBAAkB,CAAC;AAClD,eAAO,MAAM,kBAAkB,kBAAkB,CAAC;AAClD,eAAO,MAAM,kBAAkB,kBAAkB,CAAC;AAClD,eAAO,MAAM,kBAAkB,kBAAkB,CAAC;AAClD,kGAAkG;AAClG,eAAO,MAAM,kBAAkB,kBAAkB,CAAC;AAClD,eAAO,MAAM,yBAAyB,yBAAyB,CAAC;AAEhE,wDAAwD;AACxD,eAAO,MAAM,eAAe,8NAalB,CAAC;AAKX,MAAM,MAAM,aAAa,GAAG,OAAO,eAAe,CAAC,MAAM,CAAC,CAAC;AAE3D,6GAA6G;AAC7G,MAAM,MAAM,qBAAqB,GAC7B;IACA,KAAK,EAAE,OAAO,kBAAkB,CAAC;IACjC,KAAK,EAAE;QAAE,KAAK,EAAE,SAAS,MAAM,EAAE,CAAC;QAAC,KAAK,EAAE,SAAS,MAAM,EAAE,CAAC;QAAC,SAAS,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC;CACnF,GACC;IACA,KAAK,EAAE,OAAO,kBAAkB,CAAC;IACjC,KAAK,EAAE;QAAE,GAAG,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,SAAS,MAAM,EAAE,CAAC;QAAC,KAAK,EAAE,SAAS,MAAM,EAAE,CAAA;KAAE,CAAC;CAC5E,GACC;IACA,KAAK,EAAE,OAAO,kBAAkB,CAAC;IACjC,KAAK,EAAE;QAAE,GAAG,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,SAAS,MAAM,EAAE,CAAA;KAAE,CAAC;CAClD,GACC;IAAE,KAAK,EAAE,OAAO,kBAAkB,CAAC;IAAC,KAAK,EAAE;QAAE,GAAG,EAAE,MAAM,CAAA;KAAE,CAAA;CAAE,GAC5D;IAAE,KAAK,EAAE,OAAO,kBAAkB,CAAC;IAAC,KAAK,EAAE;QAAE,GAAG,EAAE,MAAM,CAAA;KAAE,CAAA;CAAE,GAC5D;IAAE,KAAK,EAAE,OAAO,kBAAkB,CAAC;IAAC,KAAK,EAAE;QAAE,GAAG,EAAE,MAAM,CAAA;KAAE,CAAA;CAAE,GAC5D;IAAE,KAAK,EAAE,OAAO,yBAAyB,CAAC;IAAC,KAAK,EAAE;QAAE,GAAG,EAAE,MAAM,CAAA;KAAE,CAAA;CAAE,CAAC;AAExE,4FAA4F;AAC5F,MAAM,MAAM,mBAAmB,GAC3B;IACA,KAAK,EAAE,OAAO,kBAAkB,CAAC;IACjC,KAAK,EAAE;QAAE,GAAG,EAAE,MAAM,CAAC;QAAC,KAAK,CAAC,EAAE,MAAM,CAAC;QAAC,MAAM,CAAC,EAAE,SAAS,CAAC,MAAM,EAAE,MAAM,CAAC,CAAA;KAAE,CAAC;IAC3E,MAAM,EAAE;QAAE,GAAG,EAAE,UAAU,CAAC;QAAC,GAAG,EAAE,UAAU,CAAA;KAAE,CAAC;CAC9C,GACC;IACA,KAAK,EAAE,OAAO,kBAAkB,CAAC;IACjC,KAAK,EAAE;QAAE,GAAG,EAAE,MAAM,CAAC;QAAC,MAAM,CAAC,EAAE,SAAS,CAAC,MAAM,EAAE,MAAM,CAAC,CAAA;KAAE,CAAC;IAC3D,MAAM,EAAE;QAAE,IAAI,EAAE,UAAU,CAAC;QAAC,GAAG,EAAE,UAAU,CAAC;QAAC,GAAG,EAAE,UAAU,CAAA;KAAE,CAAC;CAChE,GACC;IACA,KAAK,EAAE,OAAO,kBAAkB,CAAC;IACjC,KAAK,EAAE;QAAE,GAAG,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAC;QAAC,MAAM,CAAC,EAAE,SAAS,CAAC,MAAM,EAAE,MAAM,CAAC,CAAA;KAAE,CAAC;IACzE,MAAM,EAAE;QAAE,GAAG,EAAE,UAAU,CAAC;QAAC,GAAG,EAAE,UAAU,CAAA;KAAE,CAAC;CAC9C,CAAC;AAEJ,6EAA6E;AAC7E,wBAAgB,qBAAqB,CACnC,MAAM,EAAE,MAAM,EACd,QAAQ,EAAE,mBAAmB,EAC7B,OAAO,GAAE,sBAA2B,GACnC,eAAe,CAEjB;AAED,UAAU,UAAU;IAClB,QAAQ,CAAC,GAAG,EAAE,UAAU,CAAC;CAC1B;AAED,MAAM,WAAW,sBAAsB;IACrC,oEAAoE;IACpE,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,8EAA8E;IAC9E,UAAU,CAAC,EAAE,UAAU,CAAC;IACxB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,OAAO,CAAC,EAAE,UAAU,CAAC;IACrB,KAAK,CAAC,EAAE,UAAU,CAAC;IACnB,KAAK,CAAC,EAAE,UAAU,GAAG,IAAI,CAAC;IAC1B,IAAI,CAAC,EAAE,IAAI,CAAC;CACb;AAED,iHAAiH;AACjH,MAAM,MAAM,eAAe,GAAG,SAAS,CAAC,MAAM,EAAE,UAAU,EAAE,WAAW,EAAE,UAAU,CAAC,CAAC;AAErF,MAAM,MAAM,gBAAgB,GACxB;IACA,IAAI,EAAE,QAAQ,GAAG,WAAW,CAAC;IAC7B,IAAI,EAAE,MAAM,CAAC;IACb,YAAY,EAAE,MAAM,CAAC;IACrB,KAAK,EAAE,MAAM,CAAC;IACd,MAAM,EAAE,MAAM,CAAC;CAChB,GACC;IACA,IAAI,EAAE,QAAQ,CAAC;IACf,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,EAAE,MAAM,CAAC;CAChB,CAAC;AAsBJ,MAAM,WAAW,sBAAsB;IACrC,GAAG,CAAC,EAAE,WAAW,CAAC;IAClB,QAAQ,CAAC,EAAE,QAAQ,GAAG,IAAI,CAAC;IAC3B,QAAQ,CAAC,EAAE,gBAAgB,GAAG,IAAI,CAAC;IACnC,aAAa,CAAC,EAAE,MAAM,CAAC;CACxB;AAED,sGAAsG;AACtG,wBAAgB,qBAAqB,CAAC,GAAG,EAAE,UAAU,EAAE,GAAG,EAAE,MAAM,EAAE,KAAK,EAAE,aAAa,GAAG,IAAI,GAAG,aAAa,GAAG,IAAI,CAwBrH;AAED,6FAA6F;AAC7F,wBAAgB,oBAAoB,CAAC,IAAI,EAAE,UAAU,EAAE,KAAK,EAAE,UAAU,GAAG,OAAO,CAKjF;AAED,qGAAqG;AACrG,wBAAgB,sBAAsB,CAAC,OAAO,EAAE,UAAU,EAAE,KAAK,EAAE,SAAS,SAAS,EAAE,EAAE,KAAK,EAAE,aAAa,GAAG,IAAI;;;SAsCnH;AAOD,+FAA+F;AAC/F,wBAAiB,wBAAwB,CACvC,MAAM,EAAE,MAAM,EACd,GAAG,EAAE,UAAU,EACf,MAAM,EAAE,UAAU,EAClB,KAAK,EAAE,aAAa,GAAG,IAAI,EAC3B,OAAO,GAAE,sBAA2B,GACnC,SAAS,CAAC,eAAe,CAAC,CAqB5B;AAED,qDAAqD;AACrD,wBAAiB,iBAAiB,CAChC,MAAM,EAAE,GAAG,EACX,KAAK,EAAE,SAAS,MAAM,EAAE,EACxB,KAAK,EAAE,SAAS,MAAM,EAAE,GAAG,IAAI,EAC/B,GAAG,EAAE,UAAU,GAAG,UAAU,EAC5B,SAAS,CAAC,EAAE,MAAM,GAAG,IAAI,EACzB,OAAO,GAAE,sBAA2B,GACnC,SAAS,CAAC,eAAe,CAAC,CAc5B;AAED,oDAAoD;AACpD,wBAAiB,iBAAiB,CAChC,KAAK,EAAE,MAAM,GAAG,GAAG,EACnB,MAAM,EAAE,GAAG,EACX,KAAK,EAAE,SAAS,MAAM,EAAE,EACxB,KAAK,EAAE,SAAS,MAAM,EAAE,EACxB,GAAG,EAAE,UAAU,GAAG,UAAU,EAC5B,OAAO,GAAE,sBAA2B,GACnC,SAAS,CAAC,eAAe,CAAC,CAc5B;AAED,uDAAuD;AACvD,wBAAiB,mBAAmB,CAClC,KAAK,EAAE,MAAM,GAAG,GAAG,EACnB,MAAM,EAAE,GAAG,EACX,IAAI,EAAE,SAAS,MAAM,EAAE,EACvB,GAAG,EAAE,UAAU,GAAG,UAAU,EAC5B,OAAO,GAAE,sBAA2B,GACnC,SAAS,CAAC,eAAe,CAAC,CAa5B;AAED,sEAAsE;AACtE,wBAAgB,yBAAyB,CACvC,KAAK,EAAE,MAAM,GAAG,GAAG,EACnB,MAAM,EAAE,GAAG,EACX,KAAK,EAAE,MAAM,EACb,GAAG,EAAE,UAAU,GAAG,UAAU,EAC5B,GAAG,EAAE,UAAU,GAAG,UAAU,EAC5B,OAAO,GAAE,sBAA2B,GACnC,eAAe,CAMjB;AAED,4DAA4D;AAC5D,wBAAgB,gBAAgB,CAC9B,KAAK,EAAE,MAAM,GAAG,GAAG,EACnB,MAAM,EAAE,GAAG,EACX,IAAI,EAAE,UAAU,GAAG,UAAU,EAC7B,GAAG,EAAE,UAAU,GAAG,UAAU,EAC5B,GAAG,EAAE,UAAU,GAAG,UAAU,EAC5B,OAAO,GAAE,sBAA2B,GACnC,eAAe,CAMjB;AAED,8DAA8D;AAC9D,wBAAgB,iBAAiB,CAC/B,KAAK,EAAE,MAAM,GAAG,GAAG,EACnB,MAAM,EAAE,GAAG,EACX,IAAI,EAAE,MAAM,EACZ,GAAG,EAAE,UAAU,GAAG,UAAU,EAC5B,GAAG,EAAE,UAAU,GAAG,UAAU,EAC5B,OAAO,GAAE,sBAA2B,GACnC,eAAe,CAMjB;AAED,oDAAoD;AACpD,wBAAiB,cAAc,CAC7B,KAAK,EAAE,MAAM,GAAG,GAAG,EACnB,MAAM,EAAE,GAAG,EACX,GAAG,EAAE,UAAU,GAAG,UAAU,EAC5B,OAAO,GAAE,sBAA2B,GACnC,SAAS,CAAC,eAAe,CAAC,CAY5B;AAED;;;;;GAKG;AACH,wBAAiB,gBAAgB,CAC/B,KAAK,EAAE,MAAM,GAAG,GAAG,EACnB,MAAM,EAAE,GAAG,EACX,GAAG,EAAE,UAAU,GAAG,UAAU,EAC5B,OAAO,GAAE,IAAI,CAAC,sBAAsB,EAAE,SAAS,GAAG,OAAO,CAAM,GAC9D,SAAS,CAAC,eAAe,CAAC,CAO5B;AAED;;;;;;GAMG;AACH,wBAAiB,oBAAoB,CACnC,KAAK,EAAE,MAAM,GAAG,GAAG,EACnB,MAAM,EAAE,GAAG,EACX,KAAK,EAAE,UAAU,GAAG,UAAU,EAC9B,OAAO,GAAE,IAAI,CAAC,sBAAsB,EAAE,SAAS,GAAG,OAAO,CAAM,GAC9D,SAAS,CAAC,eAAe,CAAC,CAO5B;AAED,wEAAwE;AACxE,wBAAgB,WAAW,CACzB,KAAK,EAAE,MAAM,GAAG,GAAG,EACnB,MAAM,EAAE,GAAG,EACX,GAAG,EAAE,UAAU,GAAG,UAAU,EAC5B,OAAO,GAAE,sBAA2B,GACnC,eAAe,CAOjB;AACD;;;;;GAKG;AACH,wBAAgB,eAAe,CAC7B,MAAM,EAAE,MAAM,EACd,QAAQ,EAAE,qBAAqB,EAC/B,KAAK,EAAE,UAAU,EACjB,OAAO,GAAE,IAAI,CAAC,sBAAsB,EAAE,YAAY,CAAM,GACvD,UAAU,CAiBZ;AA2BD,qFAAqF;AACrF,wBAAgB,uBAAuB,CACrC,KAAK,EAAE,MAAM,EACb,KAAK,EAAE,UAAU,GAChB;IAAE,MAAM,CAAC,EAAE,SAAS,CAAC,MAAM,EAAE,MAAM,CAAC,CAAA;CAAE,CAIxC;AACD;;;;;;;;;;;GAWG;AACH,wBAAiB,uBAAuB,CACtC,MAAM,EAAE,MAAM,EACd,QAAQ,EAAE,qBAAqB,EAC/B,IAAI,EAAE,UAAU,EAChB,OAAO,GAAE,sBAA2B,GACnC,SAAS,CAAC,eAAe,CAAC,CAkC5B;AAeD,+EAA+E;AAC/E,qBAAa,2BAA4B,YAAW,oBAAoB;IACtE,QAAQ,CAAC,QAAQ,EAAE,aAAa,CAAC;IACjC,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAc;IAElC,oEAAoE;gBACxD,QAAQ,EAAE,aAAa,EAAE,GAAG,EAAE,WAAW;IAKrD,kEAAkE;IAClE,IAAI,YAAY,IAAI,OAAO,CAE1B;IAED;;;;OAIG;IACH,MAAM,CAAC,IAAI,EAAE,UAAU,CAAC,WAAW,CAAC,oBAAoB,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,yBAAyB;IAMnG,wFAAwF;IACvF,MAAM,CAAC,IAAI,EAAE,UAAU,CAAC,oBAAoB,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,SAAS,CAAC,IAAI,CAAC;CAS9E;AAED,oEAAoE;AACpE,wBAAgB,oBAAoB,CAClC,GAAG,EAAE,MAAM,EACX,SAAS,EAAE,SAAS,EACpB,OAAO,GAAE,sBAA2B,GACnC,WAAW,CAYb;AACD;;;;;GAKG;AACH,qBAAa,WAAW;IACtB,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;IACrB,QAAQ,CAAC,QAAQ,EAAE,QAAQ,GAAG,IAAI,CAAC;IACnC,iFAAiF;IACjF,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;IACrB,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;IACrB,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAY;IACnC,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAY;IACvC,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAmB;IAC7C,OAAO,CAAC,QAAQ,CAAC,aAAa,CAAS;IACvC,4FAA4F;IAC5F,OAAO,CAAC,QAAQ,CAAC,aAAa,CAA2C;IAEzE,uGAAuG;gBAErG,GAAG,EAAE,MAAM,EACX,EAAE,QAAQ,EAAE,SAAS,EAAE,QAAQ,EAAE,aAAa,EAAE,GAAE;QAChD,QAAQ,CAAC,EAAE,QAAQ,GAAG,IAAI,CAAC;QAC3B,SAAS,CAAC,EAAE,SAAS,CAAC;QACtB,QAAQ,CAAC,EAAE,gBAAgB,CAAC;QAC5B,aAAa,CAAC,EAAE,MAAM,CAAC;KACnB;IAiBR;;;;;;;;OAQG;IACH,eAAe,CAAC,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,OAAO,EAAE,oBAAoB,GAAG,IAAI;IAQlF;;;OAGG;IACH,kBAAkB,CAAC,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,OAAO,EAAE,oBAAoB,GAAG,IAAI;IAKrF,4EAA4E;IAC5E,eAAe,CAAC,MAAM,EAAE,UAAU,EAAE,KAAK,GAAE,SAAS,SAAS,EAAO,GAAG,oBAAoB,GAAG,IAAI;IAOlG,6FAA6F;IAC7F,OAAO,CAAC,YAAY;IAUpB,0GAA0G;IACzG,GAAG,CAAC,MAAM,EAAE,UAAU,EAAE,KAAK,GAAE,SAAS,SAAS,EAAO,GAAG,SAAS,CAAC,gBAAgB,CAAC;IAiEvF,0EAA0E;IAC1E,MAAM,CAAC,MAAM,EAAE,UAAU,EAAE,KAAK,GAAE,SAAS,SAAS,EAAO,GAAG,OAAO;IAIrE,oFAAoF;IACpF,OAAO,CAAE,eAAe;IAoBxB,mGAAmG;IACnG,OAAO,CAAE,qBAAqB;IAwB9B,oFAAoF;IACpF,OAAO,CAAC,cAAc;IAiDtB,yFAAyF;IACzF,OAAO,CAAC,OAAO;IA8Ff,oEAAoE;IACpE,GAAG,CAAC,YAAY,EAAE,MAAM,GAAG,KAAK,CAAC;QAAE,GAAG,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;QAAC,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAA;KAAE,CAAC;IAejG,oEAAoE;IACpE,OAAO,CAAC,gBAAgB;IAcxB,OAAO,CAAC,UAAU;CAGnB;AAED,4EAA4E;AAC5E,wBAAgB,sBAAsB,CAAC,MAAM,EAAE,UAAU,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI,CAIzF;AAED,yGAAyG;AACzG,MAAM,WAAW,aAAa;IAC5B,KAAK,EAAE,UAAU,CAAC;IAClB,UAAU,EAAE,UAAU,CAAC;IACvB,KAAK,EAAE,UAAU,CAAC;CACnB;AACD,mGAAmG;AACnG,wBAAgB,aAAa,CAAC,GAAG,EAAE,MAAM,EAAE,OAAO,EAAE,UAAU,EAAE,KAAK,EAAE,MAAM,GAAG,aAAa,GAAG,IAAI,CAOnG;AAED,qFAAqF;AACrF,wBAAgB,qBAAqB,CACnC,GAAG,EAAE,MAAM,EACX,OAAO,EAAE,UAAU,EACnB,KAAK,EAAE,MAAM,EACb,KAAK,EAAE,MAAM,GACZ;IAAE,UAAU,EAAE,UAAU,CAAC;IAAC,KAAK,EAAE,UAAU,CAAA;CAAE,CAI/C;AAED,iFAAiF;AACjF,wBAAgB,wBAAwB,CACtC,GAAG,EAAE,MAAM,EACX,WAAW,EAAE,MAAM,EACnB,KAAK,EAAE,MAAM,GACZ,UAAU,CASZ"}