keri-ts 1.0.0 → 2.0.0

package/types/app/witness/http-endpoints.d.ts

@@ -0,0 +1,77 @@
+import { type Operation } from "effection";
+import { type Hab } from "../identity/habbing.js";
+import type { AgentRuntime } from "../runtime/agent-runtime.js";
+/** Host-side decision for `POST /receipts`. */
+export type WitnessReceiptPostResult = {
+    kind: "accepted";
+    status: 200;
+    body: Uint8Array;
+} | {
+    kind: "escrow";
+    status: 202;
+} | {
+    kind: "reject";
+    status: number;
+    message: string;
+};
+/** Host-side decision for `GET /receipts`. */
+export type WitnessReceiptGetResult = {
+    kind: "accepted";
+    status: 200;
+    body: Uint8Array;
+} | {
+    kind: "reject";
+    status: number;
+    message: string;
+};
+/** Host-side decision for `GET /query`. */
+export type WitnessQueryGetResult = {
+    kind: "accepted";
+    status: 200;
+    messages: Iterable<Uint8Array>;
+} | {
+    kind: "reject";
+    status: number;
+    message: string;
+};
+/** Options for one witness receipt POST. */
+export interface WitnessReceiptPostOptions {
+    /**
+     * Process the event with witness-local authority (default true). Hosts that
+     * gate receipting on controller authentication pass false for an
+     * unauthenticated request: the event is processed as remote input, so a new
+     * event naming this witness goes to misfit escrow (202) while an already
+     * accepted event is still receipted (200), as witness-hk does.
+     */
+    local?: boolean;
+}
+/** Handle the synchronous witness receipt POST policy. */
+export declare function witnessReceiptPost(runtime: AgentRuntime, serviceHab: Hab, bytes: Uint8Array, { local }?: WitnessReceiptPostOptions): Operation<WitnessReceiptPostResult>;
+/** Handle `GET /receipts` witness retrieval. */
+export declare function witnessReceiptGet(serviceHab: Hab, query: {
+    pre?: string | null;
+    sn?: number | null;
+    said?: string | null;
+}): WitnessReceiptGetResult;
+/** Handle `GET /query` witness log replay. */
+export declare function witnessQueryGet(serviceHab: Hab, query: {
+    typ?: string | null;
+    pre?: string | null;
+    sn?: number | null;
+}): WitnessQueryGetResult;
+/** Host-side decision for an endorsed, fully witnessed key-state notice. */
+export type WitnessKeyStateGetResult = {
+    kind: "accepted";
+    status: 200;
+    body: Uint8Array;
+} | {
+    kind: "reject";
+    status: number;
+    message: string;
+};
+/** Return an actual signed KERI reply; unknown or incompletely witnessed state is not advertised. */
+export declare function witnessKeyStateGet(serviceHab: Hab, query: {
+    pre?: string | null;
+    destination?: string | null;
+}): WitnessKeyStateGetResult;
+//# sourceMappingURL=http-endpoints.d.ts.map

package/types/app/witness/http-endpoints.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"http-endpoints.d.ts","sourceRoot":"","sources":["../../../src/app/witness/http-endpoints.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,KAAK,SAAS,EAAE,MAAM,WAAW,CAAC;AAG3C,OAAO,EAAE,KAAK,GAAG,EAAE,MAAM,wBAAwB,CAAC;AAClD,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,6BAA6B,CAAC;AAShE,+CAA+C;AAC/C,MAAM,MAAM,wBAAwB,GAChC;IAAE,IAAI,EAAE,UAAU,CAAC;IAAC,MAAM,EAAE,GAAG,CAAC;IAAC,IAAI,EAAE,UAAU,CAAA;CAAE,GACnD;IAAE,IAAI,EAAE,QAAQ,CAAC;IAAC,MAAM,EAAE,GAAG,CAAA;CAAE,GAC/B;IAAE,IAAI,EAAE,QAAQ,CAAC;IAAC,MAAM,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,MAAM,CAAA;CAAE,CAAC;AAExD,8CAA8C;AAC9C,MAAM,MAAM,uBAAuB,GAC/B;IAAE,IAAI,EAAE,UAAU,CAAC;IAAC,MAAM,EAAE,GAAG,CAAC;IAAC,IAAI,EAAE,UAAU,CAAA;CAAE,GACnD;IAAE,IAAI,EAAE,QAAQ,CAAC;IAAC,MAAM,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,MAAM,CAAA;CAAE,CAAC;AAExD,2CAA2C;AAC3C,MAAM,MAAM,qBAAqB,GAC7B;IAAE,IAAI,EAAE,UAAU,CAAC;IAAC,MAAM,EAAE,GAAG,CAAC;IAAC,QAAQ,EAAE,QAAQ,CAAC,UAAU,CAAC,CAAA;CAAE,GACjE;IAAE,IAAI,EAAE,QAAQ,CAAC;IAAC,MAAM,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,MAAM,CAAA;CAAE,CAAC;AAkCxD,4CAA4C;AAC5C,MAAM,WAAW,yBAAyB;IACxC;;;;;;OAMG;IACH,KAAK,CAAC,EAAE,OAAO,CAAC;CACjB;AAED,0DAA0D;AAC1D,wBAAiB,kBAAkB,CACjC,OAAO,EAAE,YAAY,EACrB,UAAU,EAAE,GAAG,EACf,KAAK,EAAE,UAAU,EACjB,EAAE,KAAY,EAAE,GAAE,yBAA8B,GAC/C,SAAS,CAAC,wBAAwB,CAAC,CAuCrC;AAED,gDAAgD;AAChD,wBAAgB,iBAAiB,CAC/B,UAAU,EAAE,GAAG,EACf,KAAK,EAAE;IAAE,GAAG,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAAC,EAAE,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAAC,IAAI,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;CAAE,GACvE,uBAAuB,CAqDzB;AAED,8CAA8C;AAC9C,wBAAgB,eAAe,CAC7B,UAAU,EAAE,GAAG,EACf,KAAK,EAAE;IAAE,GAAG,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAAC,GAAG,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAAC,EAAE,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;CAAE,GACtE,qBAAqB,CAmDvB;AAED,4EAA4E;AAC5E,MAAM,MAAM,wBAAwB,GAChC;IAAE,IAAI,EAAE,UAAU,CAAC;IAAC,MAAM,EAAE,GAAG,CAAC;IAAC,IAAI,EAAE,UAAU,CAAA;CAAE,GACnD;IAAE,IAAI,EAAE,QAAQ,CAAC;IAAC,MAAM,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,MAAM,CAAA;CAAE,CAAC;AAExD,qGAAqG;AACrG,wBAAgB,kBAAkB,CAChC,UAAU,EAAE,GAAG,EACf,KAAK,EAAE;IAAE,GAAG,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAAC,WAAW,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;CAAE,GAC1D,wBAAwB,CAqB1B"}

package/types/app/witness/ingress.d.ts

@@ -0,0 +1,65 @@
+import { type Operation } from "effection";
+import type { AgentCue } from "../../core/cues.js";
+import { type Deck } from "../../core/deck.js";
+import { type Hab } from "../identity/habbing.js";
+import type { AgentRuntime } from "../runtime/agent-runtime.js";
+/**
+ * Route one initial witness cue batch, leaving saved key-state facts for the
+ * application cue worker and its optional command-owned noticer destination.
+ * Respondant publishes Poster work; this ingress helper never drains Poster
+ * network delivery. Query network I/O stays with the independent sender.
+ *
+ * @param runtime Borrowed composed runtime; caller owns its worker and store lifetime.
+ * @param serviceHab Optional hosted witness signer; absent selection must be unambiguous.
+ * @param cues Exact runtime application Deck; foreign Decks are rejected.
+ * @param options deliver defaults true: publish outgoing work for the independent senders. False performs local signing side effects only.
+ */
+export declare function drainWitnessCues(runtime: AgentRuntime, serviceHab: Hab | undefined, cues: Deck<AgentCue>, { deliver }?: {
+    deliver?: boolean;
+}): Operation<void>;
+/** Witness-local dispatch and existing responder delivery policy for one ingress source. */
+export interface WitnessIngressOptions {
+    /** Accept with witness-local semantics; default false preserves ordinary ingress policy. */
+    local?: boolean;
+    /** Route queries/replies through their owners; receipts use false to produce their own finite proof. */
+    deliver?: boolean;
+}
+/**
+ * Own one witness input and settle each frame before requesting more input.
+ * Each complete frame publishes its prepared replies before requesting more input.
+ * Source abort and cleanup belong to this input scope.
+ *
+ * @param runtime Borrowed composed runtime; caller owns its worker and store lifetime.
+ * @param serviceHab Hosted witness/controller habitat used for local replies.
+ * @param source Creates cancellation-aware wire input owned by this operation.
+ * @param options local defaults false; deliver defaults true and controls cue publication, not Poster queue draining.
+ */
+export declare function processWitnessIngressSource(runtime: AgentRuntime, serviceHab: Hab, source: (signal: AbortSignal) => AsyncIterable<Uint8Array>, { local, deliver }?: WitnessIngressOptions): Operation<void>;
+/**
+ * Parse and settle one inbound witness-host payload.
+ *
+ * This is the witness-host counterpart to generic runtime ingress.
+ *
+ * Responsibilities:
+ * - settle one inbound CESR payload with the correct witness-local semantics
+ * - immediately drain the resulting cues through the hosted witness habitat
+ * - leave request-scoped receipt construction with the endpoint owner
+ *
+ * `local=true` is the crucial switch for the witness receipt path: accepted
+ * events that list the hosted witness emit `witness` cues instead of ordinary
+ * `receipt` cues.
+ *
+ * Durable routing rule:
+ * - TCP witness ingress, witness `/receipts`, and ordinary HTTP root ingress
+ *   that targets the hosted witness AID should all reach this seam when the
+ *   host is acting as that witness
+ * - generic runtime ingress should remain separate for mailbox streaming,
+ *   `/ksn` replay publication, and other non-witness-root policies
+ *
+ * @param runtime Borrowed composed runtime; caller owns its worker and store lifetime.
+ * @param serviceHab Hosted reply signer.
+ * @param bytes Finite signed input bytes adapted to the same source path.
+ * @param options Witness intake/local-production policy forwarded to processWitnessIngressSource.
+ */
+export declare function processWitnessIngress(runtime: AgentRuntime, serviceHab: Hab, bytes: Uint8Array, options?: WitnessIngressOptions): Operation<void>;
+//# sourceMappingURL=ingress.d.ts.map

package/types/app/witness/ingress.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"ingress.d.ts","sourceRoot":"","sources":["../../../src/app/witness/ingress.ts"],"names":[],"mappings":"AAEA,OAAO,EAAgB,KAAK,SAAS,EAAE,MAAM,WAAW,CAAC;AACzD,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,oBAAoB,CAAC;AACnD,OAAO,EAAE,KAAK,IAAI,EAAE,MAAM,oBAAoB,CAAC;AAC/C,OAAO,EAAE,KAAK,GAAG,EAAE,MAAM,wBAAwB,CAAC;AAElD,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,6BAA6B,CAAC;AAahE;;;;;;;;;;GAUG;AACH,wBAAiB,gBAAgB,CAC/B,OAAO,EAAE,YAAY,EACrB,UAAU,EAAE,GAAG,GAAG,SAAS,EAC3B,IAAI,EAAE,IAAI,CAAC,QAAQ,CAAC,EACpB,EAAE,OAAc,EAAE,GAAE;IAAE,OAAO,CAAC,EAAE,OAAO,CAAA;CAAO,GAC7C,SAAS,CAAC,IAAI,CAAC,CA4BjB;AAED,4FAA4F;AAC5F,MAAM,WAAW,qBAAqB;IACpC,4FAA4F;IAC5F,KAAK,CAAC,EAAE,OAAO,CAAC;IAChB,wGAAwG;IACxG,OAAO,CAAC,EAAE,OAAO,CAAC;CACnB;AAED;;;;;;;;;GASG;AACH,wBAAiB,2BAA2B,CAC1C,OAAO,EAAE,YAAY,EACrB,UAAU,EAAE,GAAG,EACf,MAAM,EAAE,CAAC,MAAM,EAAE,WAAW,KAAK,aAAa,CAAC,UAAU,CAAC,EAC1D,EAAE,KAAa,EAAE,OAAc,EAAE,GAAE,qBAA0B,GAC5D,SAAS,CAAC,IAAI,CAAC,CA2CjB;AAED;;;;;;;;;;;;;;;;;;;;;;;;;GAyBG;AACH,wBAAiB,qBAAqB,CACpC,OAAO,EAAE,YAAY,EACrB,UAAU,EAAE,GAAG,EACf,KAAK,EAAE,UAAU,EACjB,OAAO,GAAE,qBAA0B,GAClC,SAAS,CAAC,IAAI,CAAC,CAOjB"}

package/types/app/witness/receipt-client.d.ts

@@ -0,0 +1,82 @@
+/** Controller-side witness transport: HTTP receipts, explicit media fallback and optional duplex TCP intake. */
+import { Cigar, type Siger, type Versionage } from "cesr-ts";
+import { type Operation } from "effection";
+import { type Hab } from "../identity/habbing.js";
+import { type ProtocolProcessor } from "../protocol/protocol-processing.js";
+import type { RuntimeClock } from "../runtime/runtime-clock.js";
+import type { HttpClient } from "../transport/http-client.js";
+/** Controller-side result of posting to one witness receipt endpoint. */
+export type WitnessReceiptEndpointResponse = {
+    kind: "accepted";
+    status: 200;
+    body: Uint8Array;
+    wigers: readonly Siger[];
+    cigars: readonly Cigar[];
+} | {
+    kind: "escrow";
+    status: 202;
+} | {
+    kind: "reject";
+    status: number;
+    message: string;
+};
+/** Resolve the HTTP or HTTPS witness endpoint when available. */
+export declare function witnessHttpUrl(hab: Hab, witness: string): string | null;
+/** Resolve the TCP witness endpoint when available. */
+export declare function witnessTcpUrl(hab: Hab, witness: string): string | null;
+/**
+ * Send via HTTP first; an explicit protocol processor processes same-socket TCP replies.
+ * Without a protocol processor TCP reports local transmission only. Actual socket/parser
+ * cleanup finishes before this borrowed protocol processor can be released.
+ *
+ * @param hab Local signing habitat; its state/store lifetime remains with the caller.
+ * @param witness Target witness AID whose accepted locations choose HTTP-first/TCP fallback.
+ * @param bytes Complete signed event/introduction wire.
+ * @param http Borrowed HTTP implementation selected by composition.
+ * @param clock Borrowed clock with epoch-millisecond now and millisecond timer delays.
+ * @param protocol Optional same-socket reply processor; null selects transmit-only TCP.
+ * @param auth Optional HTTP Authorization header value.
+ * @throws Missing endpoint, peer refusal, transport/parser or cleanup failures propagate.
+ */
+export declare function sendWitnessMessage(hab: Hab, witness: string, bytes: Uint8Array, http: HttpClient, clock: RuntimeClock, protocol: ProtocolProcessor | null, auth?: string): Operation<void>;
+/**
+ * Poll one witness `GET /receipts` endpoint until the receipt becomes available.
+ *
+ * @param hab Local signing habitat; its state/store lifetime remains with the caller.
+ * @param witness Witness AID whose HTTP receipt endpoint is selected.
+ * @param pre Event subject AID.
+ * @param sn Event sequence number.
+ * @param said Exact event SAID to verify against returned proof.
+ * @param http Borrowed HTTP implementation selected by composition.
+ * @param gvrsn Configured endpoint's reply attachment genus, selected before its complete response body.
+ * @returns Receipt endpoint status and wire result for later verification; HTTP success alone is not accepted witness state.
+ */
+export declare function pollWitnessReceipt(hab: Hab, witness: string, pre: string, sn: number, said: string, http: HttpClient, gvrsn?: Versionage): Operation<WitnessReceiptEndpointResponse>;
+/**
+ * Request one witness receipt via `POST /receipts`.
+ *
+ * @param hab Local signing habitat; its state/store lifetime remains with the caller.
+ * @param witness Witness AID whose HTTP receipt endpoint is selected.
+ * @param message Complete signed event wire requesting a witness receipt.
+ * @param http Borrowed HTTP implementation selected by composition.
+ * @param auth Optional witness HTTP Authorization value.
+ * @param gvrsn Reply attachment genus; the caller already encoded request proofs with this endpoint's selection.
+ * @returns Receipt endpoint status and wire result for later verification; HTTP success alone is not accepted witness state.
+ */
+export declare function postWitnessReceiptEndpoint(hab: Hab, witness: string, message: Uint8Array, http: HttpClient, auth?: string, gvrsn?: Versionage): Operation<WitnessReceiptEndpointResponse>;
+/**
+ * Request one stored witness receipt via `GET /receipts`.
+ *
+ * @param hab Local signing habitat; its state/store lifetime remains with the caller.
+ * @param witness Witness AID whose HTTP receipt endpoint is selected.
+ * @param query Receipt lookup subject, sequence and digest fields.
+ * @param http Borrowed HTTP implementation selected by composition.
+ * @param gvrsn Explicit response attachment genus; preserve v1 by default.
+ * @returns Receipt endpoint status and wire result for later verification; HTTP success alone is not accepted witness state.
+ */
+export declare function getWitnessReceiptEndpoint(hab: Hab, witness: string, query: {
+    pre: string;
+    sn?: number;
+    said?: string;
+}, http: HttpClient, gvrsn?: Versionage): Operation<WitnessReceiptEndpointResponse>;
+//# sourceMappingURL=receipt-client.d.ts.map

package/types/app/witness/receipt-client.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"receipt-client.d.ts","sourceRoot":"","sources":["../../../src/app/witness/receipt-client.ts"],"names":[],"mappings":"AAAA,gHAAgH;AAChH,OAAO,EAAE,KAAK,EAAwB,KAAK,KAAK,EAAE,KAAK,UAAU,EAAY,MAAM,SAAS,CAAC;AAC7F,OAAO,EAAgB,KAAK,SAAS,EAAU,MAAM,WAAW,CAAC;AAGjE,OAAO,EAAE,KAAK,GAAG,EAAE,MAAM,wBAAwB,CAAC;AAClD,OAAO,EAAE,KAAK,iBAAiB,EAAE,MAAM,oCAAoC,CAAC;AAE5E,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,6BAA6B,CAAC;AAGhE,OAAO,KAAK,EAAE,UAAU,EAAsB,MAAM,6BAA6B,CAAC;AAgBlF,yEAAyE;AACzE,MAAM,MAAM,8BAA8B,GACtC;IACA,IAAI,EAAE,UAAU,CAAC;IACjB,MAAM,EAAE,GAAG,CAAC;IACZ,IAAI,EAAE,UAAU,CAAC;IACjB,MAAM,EAAE,SAAS,KAAK,EAAE,CAAC;IACzB,MAAM,EAAE,SAAS,KAAK,EAAE,CAAC;CAC1B,GACC;IAAE,IAAI,EAAE,QAAQ,CAAC;IAAC,MAAM,EAAE,GAAG,CAAA;CAAE,GAC/B;IAAE,IAAI,EAAE,QAAQ,CAAC;IAAC,MAAM,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,MAAM,CAAA;CAAE,CAAC;AA4BxD,iEAAiE;AACjE,wBAAgB,cAAc,CAC5B,GAAG,EAAE,GAAG,EACR,OAAO,EAAE,MAAM,GACd,MAAM,GAAG,IAAI,CAGf;AAED,uDAAuD;AACvD,wBAAgB,aAAa,CAC3B,GAAG,EAAE,GAAG,EACR,OAAO,EAAE,MAAM,GACd,MAAM,GAAG,IAAI,CAGf;AAUD;;;;;;;;;;;;;GAaG;AACH,wBAAiB,kBAAkB,CACjC,GAAG,EAAE,GAAG,EACR,OAAO,EAAE,MAAM,EACf,KAAK,EAAE,UAAU,EACjB,IAAI,EAAE,UAAU,EAChB,KAAK,EAAE,YAAY,EACnB,QAAQ,EAAE,iBAAiB,GAAG,IAAI,EAClC,IAAI,CAAC,EAAE,MAAM,GACZ,SAAS,CAAC,IAAI,CAAC,CAsBjB;AAYD;;;;;;;;;;;GAWG;AACH,wBAAiB,kBAAkB,CACjC,GAAG,EAAE,GAAG,EACR,OAAO,EAAE,MAAM,EACf,GAAG,EAAE,MAAM,EACX,EAAE,EAAE,MAAM,EACV,IAAI,EAAE,MAAM,EACZ,IAAI,EAAE,UAAU,EAChB,KAAK,GAAE,UAAqB,GAC3B,SAAS,CAAC,8BAA8B,CAAC,CAsC3C;AAED;;;;;;;;;;GAUG;AACH,wBAAiB,0BAA0B,CACzC,GAAG,EAAE,GAAG,EACR,OAAO,EAAE,MAAM,EACf,OAAO,EAAE,UAAU,EACnB,IAAI,EAAE,UAAU,EAChB,IAAI,CAAC,EAAE,MAAM,EACb,KAAK,GAAE,UAAqB,GAC3B,SAAS,CAAC,8BAA8B,CAAC,CAwD3C;AAED;;;;;;;;;GASG;AACH,wBAAiB,yBAAyB,CACxC,GAAG,EAAE,GAAG,EACR,OAAO,EAAE,MAAM,EACf,KAAK,EAAE;IAAE,GAAG,EAAE,MAAM,CAAC;IAAC,EAAE,CAAC,EAAE,MAAM,CAAC;IAAC,IAAI,CAAC,EAAE,MAAM,CAAA;CAAE,EAClD,IAAI,EAAE,UAAU,EAChB,KAAK,GAAE,UAAqB,GAC3B,SAAS,CAAC,8BAA8B,CAAC,CAuC3C"}

package/types/app/witness/receipt-messages.d.ts

@@ -0,0 +1,21 @@
+/** Receipt framing follows the receipt body version; core serialization owns the counters. */
+import { type Cigar, type SerderKERI, type Siger } from "cesr-ts";
+/** Build a collected receipt with an attachment enclosure. Signatures cover the receipted event. */
+export declare function buildDetachedReceiptMessage(serder: SerderKERI, { wigers, cigars }: {
+    wigers?: readonly Siger[];
+    cigars?: readonly Cigar[];
+}): Uint8Array;
+/** Match KERIpy receipt endpoints: body plus receipt material without an attachment enclosure. */
+export declare function buildEndpointDetachedReceiptMessage(serder: SerderKERI, { wigers, cigars }: {
+    wigers?: readonly Siger[];
+    cigars?: readonly Cigar[];
+}): Uint8Array;
+/** Build one attached `rct` message carrying witness indexed signatures. */
+export declare function buildWitnessReceiptMessage(serder: SerderKERI, wigers: readonly Siger[]): Uint8Array;
+/** Inspect one complete receipt; hydrated proof values have no asynchronous lifetime. */
+export declare function inspectReceiptMessage(bytes: Uint8Array): {
+    serder: SerderKERI;
+    wigers: readonly Siger[];
+    cigars: readonly Cigar[];
+};
+//# sourceMappingURL=receipt-messages.d.ts.map

package/types/app/witness/receipt-messages.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"receipt-messages.d.ts","sourceRoot":"","sources":["../../../src/app/witness/receipt-messages.ts"],"names":[],"mappings":"AAAA,8FAA8F;AAC9F,OAAO,EAAE,KAAK,KAAK,EAAc,KAAK,UAAU,EAAE,KAAK,KAAK,EAAE,MAAM,SAAS,CAAC;AAK9E,oGAAoG;AACpG,wBAAgB,2BAA2B,CAAC,MAAM,EAAE,UAAU,EAAE,EAAE,MAAW,EAAE,MAAW,EAAE,EAAE;IAC5F,MAAM,CAAC,EAAE,SAAS,KAAK,EAAE,CAAC;IAC1B,MAAM,CAAC,EAAE,SAAS,KAAK,EAAE,CAAC;CAC3B,GAAG,UAAU,CAGb;AAED,kGAAkG;AAClG,wBAAgB,mCAAmC,CAAC,MAAM,EAAE,UAAU,EAAE,EAAE,MAAW,EAAE,MAAW,EAAE,EAAE;IACpG,MAAM,CAAC,EAAE,SAAS,KAAK,EAAE,CAAC;IAC1B,MAAM,CAAC,EAAE,SAAS,KAAK,EAAE,CAAC;CAC3B,GAAG,UAAU,CAGb;AAED,4EAA4E;AAC5E,wBAAgB,0BAA0B,CACxC,MAAM,EAAE,UAAU,EAClB,MAAM,EAAE,SAAS,KAAK,EAAE,GACvB,UAAU,CAEZ;AAED,yFAAyF;AACzF,wBAAgB,qBAAqB,CACnC,KAAK,EAAE,UAAU,GAChB;IAAE,MAAM,EAAE,UAAU,CAAC;IAAC,MAAM,EAAE,SAAS,KAAK,EAAE,CAAC;IAAC,MAAM,EAAE,SAAS,KAAK,EAAE,CAAA;CAAE,CAK5E"}

package/types/app/witness/receipting.d.ts

@@ -0,0 +1,117 @@
+/** Collect accepted historical witness receipts and fan them out before reporting event completion. */
+import { type Versionage } from "cesr-ts";
+import { type Operation } from "effection";
+import { type Habery } from "../identity/habbing.js";
+import { type ProtocolProcessor } from "../protocol/protocol-processing.js";
+import type { RuntimeClock } from "../runtime/runtime-clock.js";
+import type { HttpClient } from "../transport/http-client.js";
+/** Supported witness-auth payloads keyed by witness AID. */
+export type WitnessAuthMap = Record<string, string>;
+/** Result of one full witness receipt orchestration pass. */
+export interface WitnessReceiptRunResult {
+    readonly witnesses: readonly string[];
+    readonly statuses: Readonly<Record<string, number>>;
+}
+/**
+ * Controller-side synchronous witness receipt orchestration.
+ *
+ * Responsibilities:
+ * - publish through HTTP receipt endpoints (generic submission opts into TCP reply intake)
+ * - catch up newly added witnesses before receipting
+ * - persist returned receipts locally through the protocol processor
+ * - fan witness receipts out to the complementary witnesses
+ */
+export declare class Receiptor {
+    /** Borrowed accepted state and local signer collection. */
+    readonly hby: Habery;
+    /** Shared receipt verification, cue publication and escrow processing. */
+    readonly protocol: ProtocolProcessor;
+    /** Input-owned Kevery (kvy) for request-owned receipt GET/POST evidence. */
+    private readonly kvy;
+    /** Borrowed HTTP and clock services used by actual receipt operations. */
+    readonly http: HttpClient;
+    /** Borrowed clock for this owner's actual network deadlines. */
+    readonly clock: RuntimeClock;
+    /** Explicit attachment framing for the configured witness endpoints; independent of KEL body version. */
+    readonly gvrsn: Versionage;
+    /**
+     * Bind configured intake over the same Habery; acquire no stores or background workers.
+     *
+     * @param hby Borrowed local identities and accepted-state stores.
+     * @param protocol Borrowed same-database protocol owner for receipt intake.
+     * @param http Borrowed HTTP implementation selected by composition.
+     * @param clock Borrowed clock with epoch-millisecond now and millisecond timer delays.
+     * @param options Explicit witness attachment genus; the historical v1 default is independent of KEL body version.
+     */
+    constructor(hby: Habery, protocol: ProtocolProcessor, http: HttpClient, clock: RuntimeClock, { gvrsn }?: {
+        gvrsn?: Versionage;
+    });
+    /** Submit the latest or specified event to all witnesses and gather receipts. */
+    receipt(pre: string, { sn, auths, allowTcp }?: {
+        sn?: number;
+        auths?: WitnessAuthMap;
+        /** Generic WitnessReceiptor permits TCP; explicit receipt endpoints remain HTTP-only. */
+        allowTcp?: boolean;
+    }): Operation<WitnessReceiptRunResult>;
+    /**
+     * One scoped attempt joins actual receipt HTTP/TCP work before returning.
+     *
+     * @param pre Local event subject AID.
+     * @param options Optional event sequence and witness Authorization map.
+     * @param allowTcp Whether missing HTTP receipt routes may use TCP message delivery.
+     * @returns Receipt-attempt result based on verified local witness proof.
+     */
+    private receiptOnce;
+    /**
+     * Query a stored witness receipt and apply it to local state when found.
+     *
+     * @param pre Event subject AID.
+     * @param options Optional sequence/SAID selection; defaults follow current accepted state.
+     * @returns Whether matching verified witness receipt state was obtained.
+     */
+    get(pre: string, { sn, said }?: {
+        sn?: number;
+        said?: string;
+    }): Operation<boolean>;
+    /**
+     * Catch one witness up through the same protocol processor used for receipt intake.
+     *
+     * @param pre Local KEL subject to replay.
+     * @param witness Witness AID to catch up.
+     */
+    catchup(pre: string, witness: string): Operation<void>;
+    /** Complete streams select their framing before the body; detached receipt headers retain their existing enclosure. */
+    private selected;
+}
+/**
+ * Higher-level full witness submission helper.
+ *
+ * HTTP uses finite receipt endpoints; TCP uses same-socket local reply intake
+ * and requires the requested witness signature to be persisted before fanout.
+ */
+export declare class WitnessReceiptor {
+    /** Actual receipt-intake/fanout owner over the same shared protocol domain. */
+    readonly receiptor: Receiptor;
+    /** Borrowed identities and accepted witness cohorts. */
+    readonly hby: Habery;
+    /** Existing explicit request to publish even when cached receipt completion is available. */
+    readonly force: boolean;
+    /**
+     * Bind actual protocol/I/O dependencies; only the scalar force choice is optional.
+     *
+     * @param hby Borrowed local identities and accepted-state stores.
+     * @param protocol Borrowed same-database protocol owner for receipt intake.
+     * @param http Borrowed HTTP implementation selected by composition.
+     * @param clock Borrowed clock with epoch-millisecond now and millisecond timer delays.
+     * @param options force defaults false; true requests the existing forced witness submission policy.
+     */
+    constructor(hby: Habery, protocol: ProtocolProcessor, http: HttpClient, clock: RuntimeClock, { force }?: {
+        force?: boolean;
+    });
+    /** Ensure the current event reaches full witness receipt convergence. */
+    submit(pre: string, { sn, auths }?: {
+        sn?: number;
+        auths?: WitnessAuthMap;
+    }): Operation<WitnessReceiptRunResult>;
+}
+//# sourceMappingURL=receipting.d.ts.map

package/types/app/witness/receipting.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"receipting.d.ts","sourceRoot":"","sources":["../../../src/app/witness/receipting.ts"],"names":[],"mappings":"AAAA,uGAAuG;AACvG,OAAO,EAQL,KAAK,UAAU,EAEhB,MAAM,SAAS,CAAC;AACjB,OAAO,EAAQ,KAAK,SAAS,EAAE,MAAM,WAAW,CAAC;AAMjD,OAAO,EAAwC,KAAK,MAAM,EAAE,MAAM,wBAAwB,CAAC;AAC3F,OAAO,EAAE,KAAK,iBAAiB,EAAE,MAAM,oCAAoC,CAAC;AAC5E,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,6BAA6B,CAAC;AAEhE,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,6BAA6B,CAAC;AAY9D,4DAA4D;AAC5D,MAAM,MAAM,cAAc,GAAG,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;AAEpD,6DAA6D;AAC7D,MAAM,WAAW,uBAAuB;IACtC,QAAQ,CAAC,SAAS,EAAE,SAAS,MAAM,EAAE,CAAC;IACtC,QAAQ,CAAC,QAAQ,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC;CACrD;AAmBD;;;;;;;;GAQG;AACH,qBAAa,SAAS;IACpB,2DAA2D;IAC3D,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;IACrB,0EAA0E;IAC1E,QAAQ,CAAC,QAAQ,EAAE,iBAAiB,CAAC;IACrC,4EAA4E;IAC5E,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAS;IAC7B,0EAA0E;IAC1E,QAAQ,CAAC,IAAI,EAAE,UAAU,CAAC;IAC1B,gEAAgE;IAChE,QAAQ,CAAC,KAAK,EAAE,YAAY,CAAC;IAC7B,yGAAyG;IACzG,QAAQ,CAAC,KAAK,EAAE,UAAU,CAAC;IAE3B;;;;;;;;OAQG;gBAED,GAAG,EAAE,MAAM,EACX,QAAQ,EAAE,iBAAiB,EAC3B,IAAI,EAAE,UAAU,EAChB,KAAK,EAAE,YAAY,EACnB,EAAE,KAAgB,EAAE,GAAE;QAAE,KAAK,CAAC,EAAE,UAAU,CAAA;KAAO;IAWnD,iFAAiF;IAChF,OAAO,CAAC,GAAG,EAAE,MAAM,EAAE,EAAE,EAAE,EAAE,KAAU,EAAE,QAAgB,EAAE,GAAE;QAC1D,EAAE,CAAC,EAAE,MAAM,CAAC;QACZ,KAAK,CAAC,EAAE,cAAc,CAAC;QACvB,yFAAyF;QACzF,QAAQ,CAAC,EAAE,OAAO,CAAC;KACf,GAAG,SAAS,CAAC,uBAAuB,CAAC;IAG3C;;;;;;;OAOG;IACH,OAAO,CAAE,WAAW;IAkIpB;;;;;;OAMG;IACF,GAAG,CAAC,GAAG,EAAE,MAAM,EAAE,EAAE,EAAE,EAAE,IAAI,EAAE,GAAE;QAC9B,EAAE,CAAC,EAAE,MAAM,CAAC;QACZ,IAAI,CAAC,EAAE,MAAM,CAAC;KACV,GAAG,SAAS,CAAC,OAAO,CAAC;IAoC3B;;;;;OAKG;IACF,OAAO,CAAC,GAAG,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,SAAS,CAAC,IAAI,CAAC;IAevD,uHAAuH;IACvH,OAAO,CAAC,QAAQ;CAGjB;AAED;;;;;GAKG;AACH,qBAAa,gBAAgB;IAC3B,+EAA+E;IAC/E,QAAQ,CAAC,SAAS,EAAE,SAAS,CAAC;IAC9B,wDAAwD;IACxD,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;IACrB,6FAA6F;IAC7F,QAAQ,CAAC,KAAK,EAAE,OAAO,CAAC;IAExB;;;;;;;;OAQG;gBACS,GAAG,EAAE,MAAM,EAAE,QAAQ,EAAE,iBAAiB,EAAE,IAAI,EAAE,UAAU,EAAE,KAAK,EAAE,YAAY,EAAE,EAAE,KAAa,EAAE,GAAE;QAC9G,KAAK,CAAC,EAAE,OAAO,CAAC;KACZ;IAKN,yEAAyE;IACxE,MAAM,CAAC,GAAG,EAAE,MAAM,EAAE,EAAE,EAAE,EAAE,KAAU,EAAE,GAAE;QACvC,EAAE,CAAC,EAAE,MAAM,CAAC;QACZ,KAAK,CAAC,EAAE,cAAc,CAAC;KACnB,GAAG,SAAS,CAAC,uBAAuB,CAAC;CAmB5C"}

package/types/app/witness/registration.d.ts

@@ -0,0 +1,27 @@
+import { type Operation } from "effection";
+import { type Hab } from "../identity/habbing.js";
+import type { HttpClient } from "../transport/http-client.js";
+/** One witness to register with: its AID and the base URL serving `/aids`. */
+export interface WitnessRegistrationTarget {
+    eid: string;
+    url: string;
+}
+/** Plaintext TOTP secret and the witness's controller OOBI from one registration. */
+export interface WitnessRegistration {
+    secret: string;
+    oobi: string;
+}
+/**
+ * Register `hab` with one witness and return the plaintext TOTP secret.
+ *
+ * Locksmith correspondence: `register_with_witness`. The controller's full KEL
+ * (and, when delegated, its delegation chain as `delkel`) and an optional batch
+ * `secret` go as multipart text fields with `CESR-DESTINATION`; the returned
+ * `totp` ciphertext is opened with the habitat's current keys (`Hab.decrypt`).
+ * Because the full KEL is sent, registration works at any key state. Nothing
+ * is persisted here: retaining or displaying the secret is the caller's choice.
+ */
+export declare function registerWithWitness(hab: Hab, witness: WitnessRegistrationTarget, http: HttpClient, { secret }?: {
+    secret?: string;
+}): Operation<WitnessRegistration>;
+//# sourceMappingURL=registration.d.ts.map

package/types/app/witness/registration.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"registration.d.ts","sourceRoot":"","sources":["../../../src/app/witness/registration.ts"],"names":[],"mappings":"AAEA,OAAO,EAAQ,KAAK,SAAS,EAAE,MAAM,WAAW,CAAC;AAEjD,OAAO,EAAE,KAAK,GAAG,EAAE,MAAM,wBAAwB,CAAC;AAElD,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,6BAA6B,CAAC;AAE9D,8EAA8E;AAC9E,MAAM,WAAW,yBAAyB;IACxC,GAAG,EAAE,MAAM,CAAC;IACZ,GAAG,EAAE,MAAM,CAAC;CACb;AAED,qFAAqF;AACrF,MAAM,WAAW,mBAAmB;IAClC,MAAM,EAAE,MAAM,CAAC;IACf,IAAI,EAAE,MAAM,CAAC;CACd;AAED;;;;;;;;;GASG;AACH,wBAAiB,mBAAmB,CAClC,GAAG,EAAE,GAAG,EACR,OAAO,EAAE,yBAAyB,EAClC,IAAI,EAAE,UAAU,EAChB,EAAE,MAAM,EAAE,GAAE;IAAE,MAAM,CAAC,EAAE,MAAM,CAAA;CAAO,GACnC,SAAS,CAAC,mBAAmB,CAAC,CA4BhC"}

package/types/cli/common/bootstrap.d.ts

@@ -0,0 +1,5 @@
+/** CLI-only presentation of the finite bootstrap operation's typed result. */
+import type { BootstrapResult } from "../../app/bootstrap/bootstrapping.js";
+/** Refuse unsuccessful bootstrap before command effects or success output continue. */
+export declare function assertBootstrapComplete(result: BootstrapResult): void;
+//# sourceMappingURL=bootstrap.d.ts.map

package/types/cli/common/bootstrap.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"bootstrap.d.ts","sourceRoot":"","sources":["../../../src/cli/common/bootstrap.ts"],"names":[],"mappings":"AAAA,8EAA8E;AAC9E,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,sCAAsC,CAAC;AAG5E,uFAAuF;AACvF,wBAAgB,uBAAuB,CAAC,MAAM,EAAE,eAAe,GAAG,IAAI,CAWrE"}

package/types/{app/cli → cli}/common/context.d.ts

@@ -1,7 +1,6 @@
 import { type Operation } from "effection";
-import { type AgentRuntime, createAgentRuntime } from "../../agent-runtime.js";
-import type { CesrBodyMode } from "../../cesr-http.js";
-import type { Hab, Habery } from "../../habbing.js";
+import type { Hab, Habery } from "../../app/identity/habbing.js";
+import { type AgentRuntime, createAgentRuntime } from "../../app/runtime/agent-runtime.js";
 import { setupHby } from "./existing.js";
 /** Common store-location and unlock arguments shared by existing-store CLI commands. */
 export interface CommandStoreArgs {
@@ -17,7 +16,6 @@ export interface CommandHaberyOptions {
     readonly?: boolean;
     skipConfig?: boolean;
     skipSignator?: boolean;
-    cesrBodyMode?: CesrBodyMode;
     /**
      * Internal lifecycle seam for focused helper tests and specialized adapters.
      *
@@ -51,7 +49,14 @@ type ContextUse<TContext, TResult> = (context: TContext) => Operation<TResult>;
 export declare function withExistingHabery<TResult>(args: CommandStoreArgs, options: CommandHaberyOptions, use: ContextUse<HaberyContext, TResult>): Operation<TResult>;
 /** Open an existing Habery and required local habitat alias for one CLI command. */
 export declare function withExistingHab<TResult>(args: CommandStoreArgs, alias: string | undefined, options: CommandHaberyOptions, use: ContextUse<HabContext, TResult>): Operation<TResult>;
-/** Open an existing Habery plus local AgentRuntime and close runtime before Habery. */
+/**
+ * Open an existing Habery plus local AgentRuntime and close runtime before Habery.
+ *
+ * @param args Command store identity, path and unlocking inputs.
+ * @param options Habery open/policy choices forwarded by the command root.
+ * @param use Awaited callback borrowing the opened Habery/runtime; start required workers inside its scope.
+ * @returns Callback result after runtime closes before Habery.
+ */
 export declare function withAgentRuntime<TResult>(args: CommandStoreArgs, options: CommandHaberyOptions, use: ContextUse<AgentRuntimeContext, TResult>): Operation<TResult>;
 /** Open an existing Habery, local AgentRuntime, and required local habitat alias. */
 export declare function withHabAndAgentRuntime<TResult>(args: CommandStoreArgs, alias: string | undefined, options: CommandHaberyOptions, use: ContextUse<HabAgentRuntimeContext, TResult>): Operation<TResult>;

package/types/cli/common/context.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"context.d.ts","sourceRoot":"","sources":["../../../src/cli/common/context.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,SAAS,EAAE,MAAM,WAAW,CAAC;AAC3C,OAAO,KAAK,EAAE,GAAG,EAAE,MAAM,EAAE,MAAM,+BAA+B,CAAC;AACjE,OAAO,EAAE,KAAK,YAAY,EAAE,kBAAkB,EAAE,MAAM,oCAAoC,CAAC;AAK3F,OAAO,EAAE,QAAQ,EAAE,MAAM,eAAe,CAAC;AAEzC,wFAAwF;AACxF,MAAM,WAAW,gBAAgB;IAC/B,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,MAAM,CAAC,EAAE,OAAO,CAAC;CAClB;AAED,+EAA+E;AAC/E,MAAM,WAAW,oBAAoB;IACnC,MAAM,CAAC,EAAE,OAAO,CAAC;IACjB,QAAQ,CAAC,EAAE,OAAO,CAAC;IACnB,UAAU,CAAC,EAAE,OAAO,CAAC;IACrB,YAAY,CAAC,EAAE,OAAO,CAAC;IACvB;;;;OAIG;IACH,YAAY,CAAC,EAAE,0BAA0B,CAAC;CAC3C;AAED,gFAAgF;AAChF,MAAM,WAAW,0BAA0B;IACzC,QAAQ,CAAC,EAAE,OAAO,QAAQ,CAAC;IAC3B,kBAAkB,CAAC,EAAE,OAAO,kBAAkB,CAAC;CAChD;AAED,sCAAsC;AACtC,MAAM,WAAW,aAAa;IAC5B,GAAG,EAAE,MAAM,CAAC;CACb;AAED,iEAAiE;AACjE,MAAM,WAAW,mBAAoB,SAAQ,aAAa;IACxD,OAAO,EAAE,YAAY,CAAC;CACvB;AAED,iEAAiE;AACjE,MAAM,WAAW,UAAW,SAAQ,aAAa;IAC/C,GAAG,EAAE,GAAG,CAAC;CACV;AAED,iFAAiF;AACjF,MAAM,WAAW,sBAAuB,SAAQ,mBAAmB;IACjE,GAAG,EAAE,GAAG,CAAC;CACV;AAED,KAAK,UAAU,CAAC,QAAQ,EAAE,OAAO,IAAI,CAAC,OAAO,EAAE,QAAQ,KAAK,SAAS,CAAC,OAAO,CAAC,CAAC;AAE/E,mFAAmF;AACnF,wBAAiB,kBAAkB,CAAC,OAAO,EACzC,IAAI,EAAE,gBAAgB,EACtB,OAAO,EAAE,oBAAoB,EAC7B,GAAG,EAAE,UAAU,CAAC,aAAa,EAAE,OAAO,CAAC,GACtC,SAAS,CAAC,OAAO,CAAC,CAiCpB;AAED,oFAAoF;AACpF,wBAAiB,eAAe,CAAC,OAAO,EACtC,IAAI,EAAE,gBAAgB,EACtB,KAAK,EAAE,MAAM,GAAG,SAAS,EACzB,OAAO,EAAE,oBAAoB,EAC7B,GAAG,EAAE,UAAU,CAAC,UAAU,EAAE,OAAO,CAAC,GACnC,SAAS,CAAC,OAAO,CAAC,CASpB;AAED;;;;;;;GAOG;AACH,wBAAiB,gBAAgB,CAAC,OAAO,EACvC,IAAI,EAAE,gBAAgB,EACtB,OAAO,EAAE,oBAAoB,EAC7B,GAAG,EAAE,UAAU,CAAC,mBAAmB,EAAE,OAAO,CAAC,GAC5C,SAAS,CAAC,OAAO,CAAC,CA6BpB;AAED,qFAAqF;AACrF,wBAAiB,sBAAsB,CAAC,OAAO,EAC7C,IAAI,EAAE,gBAAgB,EACtB,KAAK,EAAE,MAAM,GAAG,SAAS,EACzB,OAAO,EAAE,oBAAoB,EAC7B,GAAG,EAAE,UAAU,CAAC,sBAAsB,EAAE,OAAO,CAAC,GAC/C,SAAS,CAAC,OAAO,CAAC,CASpB"}

package/types/{app/cli → cli}/common/existing.d.ts

@@ -1,7 +1,6 @@
 import { type Operation } from "effection";
-import { type CesrBodyMode } from "../../cesr-http.js";
-import type { Configer } from "../../configing.js";
-import { Habery } from "../../habbing.js";
+import type { Configer } from "../../app/identity/configing.js";
+import { Habery } from "../../app/identity/habbing.js";
 /** Low-level habery-open knobs shared by CLI startup helpers. */
 interface OpenHaberyOptions {
     compat?: boolean;
@@ -9,7 +8,6 @@ interface OpenHaberyOptions {
     skipConfig?: boolean;
     skipSignator?: boolean;
     cf?: Configer;
-    cesrBodyMode?: CesrBodyMode;
 }
 /** Result of "open if present, create if absent" CLI startup behavior. */
 export interface EnsuredHabery {

package/types/cli/common/existing.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"existing.d.ts","sourceRoot":"","sources":["../../../src/cli/common/existing.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,KAAK,SAAS,EAAE,MAAM,WAAW,CAAC;AAC3C,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,iCAAiC,CAAC;AAChE,OAAO,EAAgB,MAAM,EAAE,MAAM,+BAA+B,CAAC;AAIrE,iEAAiE;AACjE,UAAU,iBAAiB;IACzB,MAAM,CAAC,EAAE,OAAO,CAAC;IACjB,QAAQ,CAAC,EAAE,OAAO,CAAC;IACnB,UAAU,CAAC,EAAE,OAAO,CAAC;IACrB,YAAY,CAAC,EAAE,OAAO,CAAC;IACvB,EAAE,CAAC,EAAE,QAAQ,CAAC;CACf;AAED,0EAA0E;AAC1E,MAAM,WAAW,aAAa;IAC5B,GAAG,EAAE,MAAM,CAAC;IACZ,OAAO,EAAE,OAAO,CAAC;CAClB;AA0CD;;;GAGG;AACH,wBAAiB,QAAQ,CACvB,IAAI,EAAE,MAAM,EACZ,IAAI,SAAK,EACT,IAAI,CAAC,EAAE,MAAM,EACb,IAAI,UAAQ,EACZ,WAAW,CAAC,EAAE,MAAM,EACpB,OAAO,GAAE,iBAAsB,GAC9B,SAAS,CAAC,MAAM,CAAC,CA8CnB;AAED;;;;;;GAMG;AACH,wBAAiB,SAAS,CACxB,IAAI,EAAE,MAAM,EACZ,IAAI,SAAK,EACT,IAAI,CAAC,EAAE,MAAM,EACb,IAAI,UAAQ,EACZ,WAAW,CAAC,EAAE,MAAM,EACpB,OAAO,GAAE,iBAAsB,GAC9B,SAAS,CAAC,aAAa,CAAC,CA6B1B"}

package/types/{app/cli → cli}/common/parsing.d.ts

@@ -1,4 +1,18 @@
-import type { ThresholdSith } from "cesr-ts";
+import { type ThresholdSith, type Versionage } from "cesr-ts";
+/** Keep omission and explicit empty strings distinct; command policy handles emptiness. */
+export declare function parseStringOption(value: unknown, flag: string): string | undefined;
+/** Preserve an omitted flag until command/file precedence and defaults are applied. */
+export declare function parseBooleanOption(value: unknown, flag: string): boolean | undefined;
+/** Preserve optional decimal quantities while rejecting coercion of booleans, blanks or nonfinite values. */
+export declare function parseNumberOption(value: unknown, flag: string): number | undefined;
+/** Validate a whole decimal count without collapsing omission or zero. */
+export declare function parseIntegerOption(value: unknown, flag: string): number | undefined;
+/** Validate every list member; an explicit empty list remains an override. */
+export declare function parseStringListOption(value: unknown, flag: string): string[] | undefined;
+/** Parse a KLI-style `--version` KERI protocol selection (`1.0` or `2.0`); omission stays undefined. */
+export declare function parseKeriVersionOption(value: unknown, flag?: string): Versionage | undefined;
+/** Require nonnegative whole counts for key and witness options. */
+export declare function parseCountOption(value: unknown, flag: string): number | undefined;
 /**
  * JSON file schema for `tufa incept --file` option loading.
  *
@@ -21,9 +35,8 @@ export interface InceptFileOptions {
 /**
  * JSON file schema for `tufa rotate --file` option loading.
  *
- * The merge semantics intentionally stay close to KLI so tests and operator
- * expectations do not depend on whether an option came from the file or the
- * command line.
+ * Explicit CLI values override file values; omitted flags leave these values
+ * intact until the command applies its defaults.
  */
 export interface RotateFileOptions {
     isith?: ThresholdSith;
@@ -36,10 +49,11 @@ export interface RotateFileOptions {
     data?: unknown[];
 }
 /**
- * Parse one CLI/file threshold input into semantic numeric or weighted form.
+ * Normalize one threshold input from CLI/file JSON into the internal
+ * `ThresholdSith` representation.
  *
- * This is a thin public seam over `normalizeThresholdOption(...)` so command
- * modules do not duplicate threshold coercion rules.
+ * Accepted forms intentionally match the operator-facing KLI shapes:
+ * numeric, hex-string, weighted JSON-array string, or structured array data.
  */
 export declare function parseThresholdOption(value: unknown): ThresholdSith | undefined;
 /**
@@ -67,15 +81,12 @@ export declare function parseExnDataItems(items: string[] | undefined): Record<s
  * direct CLI flag.
  */
 export declare function loadInceptFileOptions(path: string): InceptFileOptions;
-/**
- * Load one JSON file of rotation options using the CLI file-input contract.
- *
- * KLI compatibility notes:
- * - threshold fields are normalized immediately
- * - witness collections are filtered down to strings so malformed JSON does
- *   not propagate surprising non-string values into witness math
- */
+/** Load known rotation fields, rejecting malformed values rather than filtering them. */
 export declare function loadRotateFileOptions(path: string): RotateFileOptions;
+/** JSON option files are objects; individual command fields are validated by their loaders. */
+export declare function loadOptionObject(path: string): Record<string, unknown>;
+/** Anchored JSON data is application-defined, but its outer collection must be an array. */
+export declare function parseFileData(value: unknown): unknown[] | undefined;
 /**
  * Load one required CLI text argument or `@file` reference as UTF-8 bytes.
  *

package/types/cli/common/parsing.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"parsing.d.ts","sourceRoot":"","sources":["../../../src/cli/common/parsing.ts"],"names":[],"mappings":"AACA,OAAO,EAAW,KAAK,aAAa,EAAE,KAAK,UAAU,EAAsB,MAAM,SAAS,CAAC;AAG3F,2FAA2F;AAC3F,wBAAgB,iBAAiB,CAAC,KAAK,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS,CAIlF;AAED,uFAAuF;AACvF,wBAAgB,kBAAkB,CAAC,KAAK,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,GAAG,OAAO,GAAG,SAAS,CAIpF;AAED,6GAA6G;AAC7G,wBAAgB,iBAAiB,CAAC,KAAK,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS,CAYlF;AAED,0EAA0E;AAC1E,wBAAgB,kBAAkB,CAAC,KAAK,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS,CAUnF;AAED,8EAA8E;AAC9E,wBAAgB,qBAAqB,CAAC,KAAK,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,GAAG,MAAM,EAAE,GAAG,SAAS,CAMxF;AAED,wGAAwG;AACxG,wBAAgB,sBAAsB,CAAC,KAAK,EAAE,OAAO,EAAE,IAAI,SAAY,GAAG,UAAU,GAAG,SAAS,CAK/F;AAED,oEAAoE;AACpE,wBAAgB,gBAAgB,CAAC,KAAK,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS,CAIjF;AAED;;;;;;GAMG;AACH,MAAM,WAAW,iBAAiB;IAChC,YAAY,CAAC,EAAE,OAAO,CAAC;IACvB,IAAI,CAAC,EAAE,MAAM,EAAE,CAAC;IAChB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,KAAK,CAAC,EAAE,aAAa,CAAC;IACtB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,KAAK,CAAC,EAAE,aAAa,CAAC;IACtB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB,IAAI,CAAC,EAAE,OAAO,EAAE,CAAC;IACjB,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB;AAED;;;;;GAKG;AACH,MAAM,WAAW,iBAAiB;IAChC,KAAK,CAAC,EAAE,aAAa,CAAC;IACtB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,KAAK,CAAC,EAAE,aAAa,CAAC;IACtB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,IAAI,CAAC,EAAE,MAAM,EAAE,CAAC;IAChB,OAAO,CAAC,EAAE,MAAM,EAAE,CAAC;IACnB,OAAO,CAAC,EAAE,MAAM,EAAE,CAAC;IACnB,IAAI,CAAC,EAAE,OAAO,EAAE,CAAC;CAClB;AAED;;;;;;GAMG;AACH,wBAAgB,oBAAoB,CAAC,KAAK,EAAE,OAAO,GAAG,aAAa,GAAG,SAAS,CAc9E;AAED;;;;;;GAMG;AACH,wBAAgB,cAAc,CAAC,KAAK,EAAE,MAAM,EAAE,GAAG,SAAS,GAAG,OAAO,EAAE,CAarE;AAwCD;;;;;;;GAOG;AACH,wBAAgB,iBAAiB,CAC/B,KAAK,EAAE,MAAM,EAAE,GAAG,SAAS,GAC1B,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAiDzB;AAED;;;;;;GAMG;AACH,wBAAgB,qBAAqB,CAAC,IAAI,EAAE,MAAM,GAAG,iBAAiB,CAcrE;AAED,yFAAyF;AACzF,wBAAgB,qBAAqB,CAAC,IAAI,EAAE,MAAM,GAAG,iBAAiB,CAYrE;AAED,+FAA+F;AAC/F,wBAAgB,gBAAgB,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAMtE;AAED,4FAA4F;AAC5F,wBAAgB,aAAa,CAAC,KAAK,EAAE,OAAO,GAAG,OAAO,EAAE,GAAG,SAAS,CAInE;AAED;;;;;GAKG;AACH,wBAAgB,gBAAgB,CAAC,IAAI,EAAE,MAAM,GAAG,UAAU,CAKzD;AAED,mEAAmE;AACnE,wBAAgB,WAAW,CAAC,KAAK,EAAE,MAAM,GAAG,SAAS,EAAE,KAAK,EAAE,MAAM,GAAG,MAAM,CAK5E;AAED,kFAAkF;AAClF,wBAAgB,eAAe,CAAC,KAAK,EAAE,MAAM,GAAG,SAAS,EAAE,KAAK,EAAE,MAAM,GAAG,IAAI,CAI9E"}

package/types/cli/common/passcode.d.ts

@@ -0,0 +1,9 @@
+/** Hidden terminal input owned by the command, including cancellation cleanup. */
+import type { Operation } from "effection";
+/**
+ * Read one hidden passcode on a real terminal and join prompt teardown.
+ * Noninteractive callers must provide explicit credentials. Ctrl-D and stream
+ * EOF cancel the prompt rather than leaving readline waiting for an answer.
+ */
+export declare function readPasscode(message: string): Operation<string>;
+//# sourceMappingURL=passcode.d.ts.map

package/types/cli/common/passcode.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"passcode.d.ts","sourceRoot":"","sources":["../../../src/cli/common/passcode.ts"],"names":[],"mappings":"AAAA,kFAAkF;AAClF,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,WAAW,CAAC;AAO3C;;;;GAIG;AACH,wBAAiB,YAAY,CAAC,OAAO,EAAE,MAAM,GAAG,SAAS,CAAC,MAAM,CAAC,CAkDhE"}

package/types/cli/common/rendering.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"rendering.d.ts","sourceRoot":"","sources":["../../../src/cli/common/rendering.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,uDAAuD;AACvD,wBAAgB,aAAa,CAAC,KAAK,EAAE,OAAO,GAAG,IAAI,CAElD;AAED,0CAA0C;AAC1C,wBAAgB,cAAc,CAAC,KAAK,EAAE,SAAS,MAAM,EAAE,GAAG,IAAI,CAI7D"}

package/types/cli/common/tel-completion.d.ts

@@ -0,0 +1,8 @@
+/** Finite CLI observations over the publication owner's durable facts; host workers make progress. */
+import { type Operation } from "effection";
+import type { TelPublication } from "../../vdr/tel-publication.js";
+/** Observe one exact TEL coordinate until completion or an epoch-millisecond deadline; never drive workers here. */
+export declare function waitForTelPublication(publication: TelPublication, pre: string, sn: number, deadline: number): Operation<boolean>;
+/** Issuance additionally needs saved credential evidence; publication alone is not verifier acceptance. */
+export declare function waitForIssuedCredential(publication: TelPublication, said: string, deadline: number): Operation<boolean>;
+//# sourceMappingURL=tel-completion.d.ts.map

package/types/cli/common/tel-completion.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"tel-completion.d.ts","sourceRoot":"","sources":["../../../src/cli/common/tel-completion.ts"],"names":[],"mappings":"AAAA,sGAAsG;AACtG,OAAO,EAAE,KAAK,SAAS,EAAS,MAAM,WAAW,CAAC;AAClD,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,8BAA8B,CAAC;AAEnE,oHAAoH;AACpH,wBAAiB,qBAAqB,CACpC,WAAW,EAAE,cAAc,EAC3B,GAAG,EAAE,MAAM,EACX,EAAE,EAAE,MAAM,EACV,QAAQ,EAAE,MAAM,GACf,SAAS,CAAC,OAAO,CAAC,CAOpB;AAED,2GAA2G;AAC3G,wBAAiB,uBAAuB,CACtC,WAAW,EAAE,cAAc,EAC3B,IAAI,EAAE,MAAM,EACZ,QAAQ,EAAE,MAAM,GACf,SAAS,CAAC,OAAO,CAAC,CAQpB"}

package/types/{app/cli → cli}/common/witness-auth.d.ts

@@ -1,4 +1,4 @@
-import type { WitnessAuthMap } from "../../witnessing.js";
+import type { WitnessAuthMap } from "../../app/witness/receipting.js";
 export interface WitnessAuthOptions {
     codeTime?: string;
     promptMissing?: boolean;

package/types/cli/common/witness-auth.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"witness-auth.d.ts","sourceRoot":"","sources":["../../../src/cli/common/witness-auth.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,iCAAiC,CAAC;AAItE,MAAM,WAAW,kBAAkB;IACjC,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,aAAa,CAAC,EAAE,OAAO,CAAC;IACxB,UAAU,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,KAAK,MAAM,GAAG,IAAI,CAAC;IAChD,GAAG,CAAC,EAAE,MAAM,MAAM,CAAC;IACnB,iBAAiB,CAAC,EAAE,CAAC,KAAK,EAAE,MAAM,KAAK,MAAM,CAAC;CAC/C;AAED,sEAAsE;AACtE,wBAAgB,mBAAmB,CACjC,SAAS,EAAE,SAAS,MAAM,EAAE,EAC5B,KAAK,EAAE,SAAS,MAAM,EAAE,EACxB,OAAO,GAAE,kBAAuB,GAC/B,cAAc,CA+BhB"}