keri-ts 1.0.0 → 2.0.0

package/esm/keri/npm/src/vdr/credential-tsn.js

@@ -1,230 +0,0 @@
-import { Dater, Diger, SerderKERI, TraitDex } from "cesr-ts";
-import { acceptEscrow, dropEscrow, keepEscrow } from "../core/kever-decisions.js";
-import { VcStateRecord } from "../core/records.js";
-import { acceptReplyDecision, unverifiedReplyDecision, } from "../core/routing.js";
-import { dgKey } from "../db/core/keys.js";
-import { encodeDateTimeToDater, timestampMicros } from "../time/mod.js";
-import { Tever, Tevery } from "./eventing.js";
-import { qualifiedPrefix, registryRecord } from "./registry-tsn.js";
-/** Legacy storage ordinals are safe integers even though protocol numbers may be wider. */
-function ordinal(value) {
-    return typeof value === "string" && /^[0-9a-f]{1,14}$/i.test(value)
-        && BigInt(`0x${value}`) <= BigInt(Number.MAX_SAFE_INTEGER);
-}
-/** Require the full qualified digest rather than accepting trailing bytes. */
-function qualifiedDigest(value) {
-    try {
-        return typeof value === "string" && new Diger({ qb64: value }).qb64 === value;
-    }
-    catch {
-        return false;
-    }
-}
-/** Validate unknown fields and construct an owned record without erasing its guarantees. */
-function credentialRecord(data) {
-    if (!data || typeof data !== "object" || Array.isArray(data))
-        return null;
-    if (Object.keys(data).some((key) => !["vn", "i", "s", "d", "ri", "ra", "a", "dt", "et"].includes(key))
-        || !("s" in data) || !ordinal(data.s)
-        || !("et" in data) || (data.et !== "iss" && data.et !== "bis" && data.et !== "rev" && data.et !== "brv")
-        || !("ri" in data) || !qualifiedPrefix(data.ri)
-        || !("dt" in data) || typeof data.dt !== "string" || timestampMicros(data.dt) === null
-        || !("i" in data) || !qualifiedDigest(data.i) || !("d" in data) || !qualifiedDigest(data.d)
-        || !("vn" in data) || !Array.isArray(data.vn) || data.vn.length !== 2
-        || !("a" in data) || !data.a || typeof data.a !== "object" || Array.isArray(data.a)
-        || !("ra" in data) || !data.ra || typeof data.ra !== "object" || Array.isArray(data.ra))
-        return null;
-    const version = data.vn;
-    const [major, minor] = version;
-    const a = data.a, rawSeal = data.ra;
-    if (typeof major !== "number" || !Number.isSafeInteger(major) || major < 0
-        || typeof minor !== "number" || !Number.isSafeInteger(minor) || minor < 0
-        || Object.keys(a).length !== 2 || !("s" in a) || typeof a.s !== "number"
-        || !Number.isSafeInteger(a.s) || a.s < 0 || !("d" in a) || !qualifiedDigest(a.d))
-        return null;
-    let ra = {};
-    if (Object.keys(rawSeal).length) {
-        if (Object.keys(rawSeal).length !== 3 || !("i" in rawSeal) || !qualifiedPrefix(rawSeal.i)
-            || !("s" in rawSeal) || !ordinal(rawSeal.s) || !("d" in rawSeal) || !qualifiedDigest(rawSeal.d))
-            return null;
-        ra = { i: rawSeal.i, s: rawSeal.s, d: rawSeal.d };
-    }
-    return Object.assign(new VcStateRecord(), {
-        vn: [major, minor],
-        i: data.i,
-        s: data.s,
-        d: data.d,
-        ri: data.ri,
-        ra,
-        a: { s: a.s, d: a.d },
-        dt: data.dt,
-        et: data.et,
-    });
-}
-/** Credential TSN admission owns its attester proof, registry dependency and current TEL commitment.
- * Accepted configuration supplies trust; Broker owns pending proofs outside legacy Revery escrow.
- * Publication retains the outer reply SAID and refuses forged anchors or superseded issuance notices,
- * intentional corrections to actual 714's BADA and credential correspondence gaps.
- */
-export class CredentialStateReceiver {
-    constructor(tvy, rvy) {
-        Object.defineProperty(this, "tvy", {
-            enumerable: true,
-            configurable: true,
-            writable: true,
-            value: tvy
-        });
-        Object.defineProperty(this, "rvy", {
-            enumerable: true,
-            configurable: true,
-            writable: true,
-            value: rvy
-        });
-    }
-    /** Revery's canonical route and Broker retries use the same current-state checks. */
-    processReply({ serder, diger, route, aid, cigars = [], tsgs = [] }) {
-        const record = credentialRecord(serder.ked?.a);
-        const stamp = serder.ked?.dt;
-        if (!record || !qualifiedPrefix(aid) || typeof stamp !== "string" || timestampMicros(stamp) === null
-            || route !== `/tsn/credential/${aid}` || serder.said !== diger.qb64 || !serder.verify())
-            return unverifiedReplyDecision("Invalid credential transaction-state notice.");
-        const vci = record.i, regk = record.ri, sn = Number.parseInt(record.s, 16);
-        const previous = this.tvy.reger.txnsb.current([vci, aid]);
-        const disposeIncoming = () => {
-            if (previous?.qb64 !== diger.qb64)
-                this.rvy.removeReply(diger);
-        };
-        const reject = (reason) => {
-            disposeIncoming();
-            return unverifiedReplyDecision(reason);
-        };
-        const saved = this.tvy.reger.states.get(regk);
-        const stored = saved ? registryRecord(saved.asDict()) : null;
-        if (saved && !stored)
-            throw new Error("Corrupt stored registry state.");
-        const issuer = stored?.ii ?? aid;
-        let queryCues = [];
-        const escrow = (typ, query, proof) => {
-            const isNew = !this.tvy.reger.txnsb.hasStateNotice(typ, vci, aid, diger);
-            const cues = !isNew || !query
-                ? []
-                : typ === "credential-mae"
-                    ? [{ kin: "query", pre: issuer, src: aid, route: "logs", q: {} }]
-                    : [{
-                            kin: "query",
-                            pre: issuer,
-                            src: aid,
-                            route: "tels",
-                            q: { ri: regk, i: typ === "credential-mre" ? "" : vci },
-                        }];
-            if (proof)
-                this.rvy.writeReply(proof);
-            const added = this.tvy.reger.txnsb.escrowStateNotice({
-                typ,
-                pre: vci,
-                aid,
-                serder,
-                diger,
-                dater: new Dater({ qb64: encodeDateTimeToDater(stamp) }),
-                cigars,
-                tsgs,
-            });
-            if (added !== isNew)
-                throw new Error("Credential escrow membership changed before publication");
-            disposeIncoming();
-            if (queryCues.length)
-                this.rvy.cues.extend(queryCues);
-            if (cues.length)
-                this.rvy.cues.extend(cues);
-            return {
-                kind: "unverified",
-                reason: "dependencyPending",
-                family: typ,
-                message: "Credential state dependency unavailable.",
-            };
-        };
-        const regsn = record.ra.s === undefined ? 0 : Number.parseInt(record.ra.s, 16);
-        if (!stored || Number.parseInt(stored.s, 16) < regsn)
-            return escrow("credential-mre", true);
-        const tever = new Tever({ db: this.tvy.db, reger: this.tvy.reger, rsr: stored });
-        if (!tever.serder.verify() || tever.serder.said !== stored.d
-            || this.tvy.reger.tels.getOn(regk, tever.sn)?.qb64 !== stored.d)
-            throw new Error("Corrupt accepted registry TEL state.");
-        const kever = this.tvy.db.getKever(issuer, { refresh: true });
-        if (!kever)
-            return escrow("credential-mae", true);
-        const watchers = new Set();
-        for (const [, habitat] of this.tvy.db.getHabItemIter()) {
-            for (const watcher of habitat.watchers ?? [])
-                watchers.add(watcher);
-        }
-        if (aid !== issuer && !watchers.has(aid)
-            && !(stored.c.includes(TraitDex.NoBackers) ? kever.wits : stored.b).includes(aid)) {
-            return reject("Untrusted credential state attester.");
-        }
-        if (previous && (!this.tvy.db.sdts.get([previous.qb64]) || !this.tvy.db.rpys.get([previous.qb64]))) {
-            throw new Error("Corrupt prior credential reply evidence.");
-        }
-        const proof = this.rvy.decideReply({
-            serder,
-            saider: diger,
-            route,
-            aid,
-            cigars,
-            tsgs,
-            osaider: previous?.qb64 === diger.qb64 ? null : previous,
-            retainPrevious: true,
-            externalEscrow: true,
-        });
-        queryCues = proof.cues;
-        if (proof.kind !== "accept") {
-            if (proof.reason === "proofPending")
-                return escrow("credential-mae", false, proof);
-            this.rvy.writeReply(proof);
-            if (queryCues.length)
-                this.rvy.cues.extend(queryCues);
-            return reject("Unverified credential state attester.");
-        }
-        const accepted = this.tvy.reger.tels.getOn(vci, sn);
-        if (!accepted)
-            return escrow("credential-ooo", true, proof);
-        const current = tever.vcState(vci);
-        const raw = this.tvy.reger.tvts.get(dgKey(vci, accepted.qb64));
-        if (!raw || !current)
-            throw new Error("Corrupt accepted credential TEL state.");
-        const event = new SerderKERI({ raw });
-        if (!event.verify() || event.pre !== vci || event.sn !== sn || event.said !== accepted.qb64) {
-            throw new Error("Corrupt accepted credential TEL body.");
-        }
-        if (Tevery.registryKey(event) !== regk)
-            return reject("Credential belongs to a different registry.");
-        const fields = ["vn", "i", "s", "d", "ri", "dt", "et"];
-        if (accepted.qb64 !== record.d || fields.some((key) => JSON.stringify(record[key]) !== JSON.stringify(current[key]))
-            || ["s", "d"].some((key) => record.a[key] !== current.a[key])
-            || ["i", "s", "d"].some((key) => record.ra[key] !== current.ra[key]))
-            return reject("Credential state does not match current accepted TEL and anchors.");
-        const cues = [{ kin: "txnStateSaved", record }];
-        this.rvy.writeReply(proof);
-        this.tvy.reger.txnsb.updateReply(aid, serder, diger, new Dater({ qb64: encodeDateTimeToDater(stamp) }));
-        if (previous?.qb64 !== diger.qb64)
-            this.rvy.removeReply(previous);
-        if (queryCues.length)
-            this.rvy.cues.extend(queryCues);
-        if (cues.length)
-            this.rvy.cues.extend(cues);
-        return acceptReplyDecision();
-    }
-    /** Dependency migration and terminal refusal remove indexes; the bounded Broker pass owns retry. */
-    processEscrows() {
-        for (const typ of ["credential-mre", "credential-mae", "credential-ooo"]) {
-            this.tvy.reger.txnsb.retryStateNotices(typ, (args) => {
-                const decision = this.processReply(args);
-                if (decision.kind === "accept")
-                    return acceptEscrow();
-                return decision.reason === "dependencyPending" && decision.family === typ
-                    ? keepEscrow("recoverableError")
-                    : dropEscrow("processingError");
-            });
-        }
-    }
-}

package/esm/keri/npm/src/vdr/registry-tsn.js

@@ -1,217 +0,0 @@
-import { Dater, Diger, Prefixer, SerderKERI, TraitDex } from "cesr-ts";
-import { acceptEscrow, dropEscrow, keepEscrow } from "../core/kever-decisions.js";
-import { RegStateRecord } from "../core/records.js";
-import { acceptReplyDecision, unverifiedReplyDecision, } from "../core/routing.js";
-import { dgKey } from "../db/core/keys.js";
-import { encodeDateTimeToDater, timestampMicros } from "../time/mod.js";
-/** Require the entire qualified prefix, not a valid prefix followed by untrusted suffix bytes. */
-export function qualifiedPrefix(value) {
-    try {
-        return typeof value === "string" && new Prefixer({ qb64: value }).qb64 === value;
-    }
-    catch {
-        return false;
-    }
-}
-/** Validate unknown notice fields and return the existing record with every field required. */
-export function registryRecord(data) {
-    if (!data || typeof data !== "object" || Array.isArray(data))
-        return null;
-    if (Object.keys(data).some((key) => !["vn", "i", "s", "d", "ii", "dt", "et", "bt", "b", "c"].includes(key))
-        || !("i" in data) || !qualifiedPrefix(data.i) || !("ii" in data) || !qualifiedPrefix(data.ii)
-        || !("s" in data) || typeof data.s !== "string" || !/^[0-9a-f]{1,14}$/i.test(data.s)
-        || BigInt(`0x${data.s}`) > BigInt(Number.MAX_SAFE_INTEGER)
-        || !("bt" in data) || typeof data.bt !== "string" || !/^[0-9a-f]{1,14}$/i.test(data.bt)
-        || !("et" in data) || (data.et !== "vcp" && data.et !== "vrt")
-        || !("dt" in data) || typeof data.dt !== "string" || timestampMicros(data.dt) === null
-        || !("vn" in data) || !Array.isArray(data.vn) || data.vn.length !== 2
-        || !("b" in data) || !Array.isArray(data.b) || !("c" in data) || !Array.isArray(data.c)
-        || !("d" in data) || typeof data.d !== "string")
-        return null;
-    // Array.isArray erases item types; narrow untrusted elements before constructing owned projections.
-    const version = data.vn, backers = data.b, config = data.c;
-    const [major, minor] = version;
-    if (typeof major !== "number" || !Number.isSafeInteger(major) || major < 0
-        || typeof minor !== "number" || !Number.isSafeInteger(minor) || minor < 0
-        || !backers.every(qualifiedPrefix) || !config.every((item) => typeof item === "string"))
-        return null;
-    try {
-        if (new Diger({ qb64: data.d }).qb64 !== data.d)
-            return null;
-    }
-    catch {
-        return null;
-    }
-    // Keep required-field types while constructing the existing record; these arrays are fresh owned copies.
-    return Object.assign(new RegStateRecord(), {
-        vn: [major, minor],
-        i: data.i,
-        s: data.s,
-        d: data.d,
-        ii: data.ii,
-        dt: data.dt,
-        et: data.et,
-        bt: data.bt,
-        b: [...backers],
-        c: [...config],
-    });
-}
-/** Registry-only TSN admission; every reply owns its attester proof and accepted TEL correspondence.
- * Accepted configuration supplies trust, correcting 714's self-listed backer flaw.
- * The accepted pointer is the outer reply SAID, correcting 714's TEL-digest BADA bug.
- * Credential and registry notices require independent reply authentication.
- */
-export class RegistryStateReceiver {
-    constructor(tvy, rvy) {
-        Object.defineProperty(this, "tvy", {
-            enumerable: true,
-            configurable: true,
-            writable: true,
-            value: tvy
-        });
-        Object.defineProperty(this, "rvy", {
-            enumerable: true,
-            configurable: true,
-            writable: true,
-            value: rvy
-        });
-    }
-    /** Called by Revery's SAID-checked route or typed Broker retry. */
-    processReply({ serder, diger, route, aid, cigars = [], tsgs = [] }) {
-        const record = registryRecord(serder.ked?.a);
-        const stamp = serder.ked?.dt;
-        if (!record || !qualifiedPrefix(aid) || typeof stamp !== "string" || timestampMicros(stamp) === null
-            || route !== `/tsn/registry/${aid}`
-            || serder.said !== diger.qb64 || !serder.verify()) {
-            return unverifiedReplyDecision("Invalid registry transaction-state notice.");
-        }
-        const regk = record.i, issuer = record.ii, sn = Number.parseInt(record.s, 16);
-        const previous = this.tvy.reger.txnsb.current([regk, aid]);
-        const disposeIncoming = () => {
-            if (previous?.qb64 !== diger.qb64)
-                this.rvy.removeReply(diger);
-        };
-        const reject = (reason) => {
-            disposeIncoming();
-            return unverifiedReplyDecision(reason);
-        };
-        const saved = this.tvy.reger.states.get(regk);
-        const stored = saved ? registryRecord(saved.asDict()) : null;
-        if (saved && !stored)
-            throw new Error("Corrupt stored registry state.");
-        if (stored && (stored.ii !== issuer || BigInt(`0x${stored.s}`) > BigInt(sn))) {
-            return reject("Mismatched issuer or stale registry state.");
-        }
-        const kever = this.tvy.db.getKever(issuer, { refresh: true });
-        let queryCues = [];
-        const escrow = (typ, query, proof) => {
-            const isNew = !this.tvy.reger.txnsb.hasStateNotice(typ, regk, aid, diger);
-            const cues = !isNew || !query
-                ? []
-                : typ === "registry-mae"
-                    ? [{ kin: "query", pre: issuer, src: aid, route: "logs", q: {} }]
-                    : [{ kin: "query", pre: issuer, src: aid, route: "tels", q: { ri: regk, i: "" } }];
-            if (proof)
-                this.rvy.writeReply(proof);
-            const added = this.tvy.reger.txnsb.escrowStateNotice({
-                typ,
-                pre: regk,
-                aid,
-                serder,
-                diger,
-                dater: new Dater({ qb64: encodeDateTimeToDater(stamp) }),
-                cigars,
-                tsgs,
-            });
-            if (added !== isNew)
-                throw new Error("Registry escrow membership changed before publication");
-            // Broker now owns copied pending proof; retain prior accepted BADA evidence in Baser.
-            disposeIncoming();
-            if (queryCues.length)
-                this.rvy.cues.extend(queryCues);
-            if (cues.length)
-                this.rvy.cues.extend(cues);
-            return {
-                kind: "unverified",
-                reason: "dependencyPending",
-                family: typ,
-                message: "Registry state dependency unavailable.",
-            };
-        };
-        if (!kever)
-            return escrow("registry-mae", true);
-        const watchers = new Set();
-        for (const [, habitat] of this.tvy.db.getHabItemIter()) {
-            for (const watcher of habitat.watchers ?? [])
-                watchers.add(watcher);
-        }
-        const trusted = aid === issuer || watchers.has(aid)
-            || (!!stored && (stored.c.includes(TraitDex.NoBackers) ? kever.wits : stored.b).includes(aid));
-        if (!trusted && stored)
-            return reject("Untrusted registry state attester.");
-        if (previous && (!this.tvy.db.sdts.get([previous.qb64]) || !this.tvy.db.rpys.get([previous.qb64]))) {
-            throw new Error("Corrupt prior registry reply evidence.");
-        }
-        const proof = this.rvy.decideReply({
-            serder,
-            saider: diger,
-            route,
-            aid,
-            cigars,
-            tsgs,
-            osaider: previous?.qb64 === diger.qb64 ? null : previous,
-            retainPrevious: true,
-            externalEscrow: true,
-        });
-        queryCues = proof.cues;
-        if (proof.kind !== "accept") {
-            if (proof.reason === "proofPending")
-                return escrow("registry-mae", false, proof);
-            this.rvy.writeReply(proof);
-            if (queryCues.length)
-                this.rvy.cues.extend(queryCues);
-            return reject("Unverified registry state attester.");
-        }
-        const accepted = this.tvy.reger.tels.getOn(regk, sn);
-        if (!accepted)
-            return escrow("registry-ooo", true, proof);
-        const raw = this.tvy.reger.tvts.get(dgKey(regk, accepted.qb64));
-        if (!raw || !stored || stored.d !== accepted.qb64)
-            throw new Error("Corrupt accepted registry TEL state.");
-        const event = new SerderKERI({ raw });
-        if (!event.verify() || event.said !== accepted.qb64 || event.pre !== regk || event.sn !== sn) {
-            throw new Error("Corrupt accepted registry TEL body.");
-        }
-        if (!trusted || accepted.qb64 !== record.d)
-            return reject("Registry state does not match accepted TEL.");
-        // Receiver-generated record time is descriptive; configuration and state fields must agree.
-        const fields = ["vn", "i", "s", "d", "ii", "et", "bt", "b", "c"];
-        if (fields.some((key) => JSON.stringify(record[key]) !== JSON.stringify(stored[key]))) {
-            return reject("Registry state metadata mismatch.");
-        }
-        const dater = new Dater({ qb64: encodeDateTimeToDater(stamp) });
-        const cues = [{ kin: "txnStateSaved", record }];
-        this.rvy.writeReply(proof);
-        this.tvy.reger.txnsb.updateReply(aid, serder, diger, dater);
-        if (previous?.qb64 !== diger.qb64)
-            this.rvy.removeReply(previous);
-        if (queryCues.length)
-            this.rvy.cues.extend(queryCues);
-        if (cues.length)
-            this.rvy.cues.extend(cues);
-        return acceptReplyDecision();
-    }
-    /** Recheck trust, BADA and current dependencies on every finite retry pass. */
-    processEscrows() {
-        for (const typ of ["registry-mae", "registry-ooo"]) {
-            this.tvy.reger.txnsb.retryStateNotices(typ, (args) => {
-                const decision = this.processReply(args);
-                if (decision.kind === "accept")
-                    return acceptEscrow();
-                if (decision.reason === "dependencyPending" && decision.family === typ)
-                    return keepEscrow("recoverableError");
-                return dropEscrow("processingError");
-            });
-        }
-    }
-}

package/types/app/abortable.d.ts

@@ -1,13 +0,0 @@
-import { type Operation, type Scope } from "effection";
-/** Preserve foreign cleanup failures, removing only this owner's exact abort reason. */
-export declare function rethrowCleanupFailure(error: unknown, signal: AbortSignal): void;
-/**
- * Own one cancellable Promise leaf inside an Effection operation.
- * The leaf must observe its signal; teardown aborts it and joins its cleanup before returning.
- * An isolated call scope keeps cancellation abrupt even while finalization yields.
- * Register dependent owner resources before this leaf so reverse teardown joins it before disposal.
- * Owned concurrent work uses the supplied leaf scope, so its signal aborts before child cleanup joins.
- * Borrow that scope only for work joined within the leaf, never for later operations.
- */
-export declare function abortable<T>(start: (signal: AbortSignal, scope: Scope) => Promise<T>, upstream?: AbortSignal): Operation<T>;
-//# sourceMappingURL=abortable.d.ts.map

package/types/app/abortable.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"abortable.d.ts","sourceRoot":"","sources":["../../src/app/abortable.ts"],"names":[],"mappings":"AAAA,OAAO,EAAgB,KAAK,SAAS,EAAE,KAAK,KAAK,EAAY,MAAM,WAAW,CAAC;AAY/E,wFAAwF;AACxF,wBAAgB,qBAAqB,CAAC,KAAK,EAAE,OAAO,EAAE,MAAM,EAAE,WAAW,GAAG,IAAI,CAI/E;AAED;;;;;;;GAOG;AACH,wBAAgB,SAAS,CAAC,CAAC,EACzB,KAAK,EAAE,CAAC,MAAM,EAAE,WAAW,EAAE,KAAK,EAAE,KAAK,KAAK,OAAO,CAAC,CAAC,CAAC,EACxD,QAAQ,CAAC,EAAE,WAAW,GACrB,SAAS,CAAC,CAAC,CAAC,CA+Bd"}