keri-ts 1.0.0 → 2.0.1

package/types/app/credentials/credential-workflows.d.ts

@@ -0,0 +1,149 @@
+/**
+ * Credential registry and lifecycle workflow orchestration.
+ *
+ * CLI adapters parse inputs and render outputs. This module owns registry state,
+ * credential issuance/import/export,
+ * and multisig VC proposal coordination.
+ */
+import { SerderACDC, type SerderKERI } from "cesr-ts";
+import { type Operation } from "effection";
+import { Reger } from "../../db/reger.js";
+import { Regery } from "../../vdr/credentialing.js";
+import { type TelProcessDecision } from "../../vdr/eventing.js";
+import type { Poster } from "../delivery/forwarding.js";
+import type { Hab, Habery } from "../identity/habbing.js";
+import { MULTISIG_ISS_ROUTE, MULTISIG_VCP_ROUTE, type MultisigVdrProposal } from "../multisig/grouping.js";
+import type { Reactor } from "../protocol/reactor.js";
+import type { VerifierDecision } from "./verifying.js";
+import { type GroupSendResult } from "../multisig/multisig-messaging.js";
+export interface CredentialRegistryInceptOptions {
+    registryName: string;
+    estOnly?: boolean;
+    usage?: string;
+}
+export interface CredentialCreateOptions {
+    registryName: string;
+    schema: string;
+    recipient?: string;
+    data: Record<string, unknown> | string;
+    edges?: Record<string, unknown> | Record<string, unknown>[];
+    rules?: Record<string, unknown> | Record<string, unknown>[];
+}
+export interface CredentialListOptions {
+    issued?: boolean;
+    aid?: string;
+    schema?: string;
+}
+export interface CredentialListItem {
+    said: string;
+    issuer: string | null;
+    issuee: string | null;
+    schema: string | null;
+    status: string | null;
+}
+/**
+ * Registry creation/proposal facts for one operation. The same result shape
+ * covers single-author and group paths; group adds coordination facts without
+ * changing registry identity into a different variant. Consumers must distinguish
+ * successful member delivery from accepted registry state.
+ */
+export interface RegistryResult {
+    /** Completed local witness collection and TEL publication; never remote acknowledgement. */
+    publicationComplete: boolean;
+    name: string;
+    /** Registry identifier when constructed; null if this operation has none to report. */
+    registry: string | null;
+    /** Registry controller AID; may identify a group rather than the signing member. */
+    issuer: string;
+    /** Present for group coordination, with acceptance assessed separately from sending. */
+    group?: GroupSendResult & {
+        route: typeof MULTISIG_VCP_ROUTE;
+        status: TelProcessDecision["kind"];
+        accepted: boolean;
+    };
+}
+/**
+ * Credential issuance facts, leaving JSON projection to the command adapter.
+ * A constructed ACDC and successful transport do not establish accepted TEL or
+ * saved verifier state. Those results are reported independently below.
+ */
+export interface IssueResult {
+    /** TEL publication is independent of credential saving and member transport outcomes. */
+    publicationComplete: boolean;
+    /** Constructed credential; ordinary Serder data remains usable after store closure. */
+    creder: SerderACDC;
+    /** Resolved issuee retained for later export/delivery, not a transport endpoint. */
+    recipient: string;
+    /** Issuance TEL event SAID, when available. */
+    tel: string | null;
+    /** Credential verifier decision for this issuance attempt. */
+    status: VerifierDecision["kind"];
+    group?: GroupSendResult & {
+        route: typeof MULTISIG_ISS_ROUTE;
+        /** Registry event processor decision, independent of the credential verifier decision. */
+        telStatus: TelProcessDecision["kind"];
+        /** Whether the credential is actually saved; sending a proposal does not make it so. */
+        saved: boolean;
+    };
+}
+export interface CredentialExportResult {
+    creder: SerderACDC;
+    recipient: string;
+    bytes: Uint8Array;
+}
+/** Pin a JSON schema body into the local schema table. */
+export declare function pinSchemaBytes(hby: Habery, raw: Uint8Array): string;
+/**
+ * Create a single-sig registry or propose a group registry inception.
+ *
+ * @param rgy Borrowed legacy registry/credential owner.
+ * @param input Borrowed byte intake; commits each exact local wrapper before peer delivery.
+ * @param postman Borrowed Poster; its delivery worker must run while this operation awaits outcomes.
+ * @param hab Local signing habitat; its state/store lifetime remains with the caller.
+ * @param options Registry name/configuration and optional group proposal usage.
+ * @returns Registry/proposal state and actual deliveries, with acceptance reported separately.
+ */
+export declare function inceptCredentialRegistry(rgy: Regery, input: Reactor, postman: Poster, hab: Hab, options: CredentialRegistryInceptOptions): Operation<RegistryResult>;
+/** Return locally known credential registry records. */
+export declare function credentialRegistryRecords(reger: Reger): Array<{
+    name: string | undefined;
+    registry: string;
+    issuer: string;
+}>;
+/** Return current TEL status for one local registry name. */
+export declare function credentialRegistryStatus(rgy: Regery, registryName: string): {
+    name: string;
+    registry: string;
+    issuer: string;
+    state: Required<import("../../core/records.js").RegStateRecord> | null;
+};
+/**
+ * Create and issue one registry-backed credential.
+ *
+ * @param rgy Borrowed registry/TEL/credential owner.
+ * @param input Borrowed byte intake; commits each exact local wrapper before peer delivery.
+ * @param postman Borrowed Poster; its delivery worker must run while this operation awaits outcomes.
+ * @param options Issuer registry, credential data/schema, and optional delivery/export choices.
+ * @returns Credential/TEL result with saved/accepted state distinct from delivered URLs.
+ */
+export declare function createCredential(rgy: Regery, input: Reactor, postman: Poster, options: CredentialCreateOptions): Operation<IssueResult>;
+/** List locally saved credentials through wallet indexes. */
+export declare function listCredentials(rgy: Regery, options: CredentialListOptions): CredentialListItem[];
+/** Build a KERIpy-compatible credential export stream. */
+export declare function exportCredentialStream(hby: Habery, reger: Reger, credentialSaid: string, recipient?: string): CredentialExportResult;
+/** Build a KERIpy-compatible credential stream for an already loaded credential. */
+export declare function credentialStreamBytes(hby: Habery, reger: Reger, creder: SerderACDC, recipient: string): Uint8Array;
+/** Author the required group anchor after all available business evidence has been validated. */
+export declare function anchorGroupCredentialEvent(hby: Habery, hab: Hab, event: SerderKERI, estOnly: boolean): import("../identity/habbing.js").GroupHabRotation;
+/**
+ * Send one signed proposal per remote signing member and await each delivery.
+ * Local members are skipped; a failed outcome throws before reporting success.
+ *
+ * @param hby Borrowed local identities and accepted-state stores.
+ * @param postman Borrowed Poster; its delivery worker must run while this operation awaits outcomes.
+ * @param groupHab Group issuer habitat whose remote signing members receive the proposal.
+ * @param proposal Registry, issuance or revocation route with its required named evidence.
+ * @returns Stable proposal/wrapper identities and successful target URLs after concrete Poster completion.
+ */
+export declare function publishGroupVcProposal(hby: Habery, input: Reactor, postman: Poster, groupHab: Hab, proposal: MultisigVdrProposal): Operation<GroupSendResult>;
+//# sourceMappingURL=credential-workflows.d.ts.map

package/types/app/credentials/credential-workflows.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"credential-workflows.d.ts","sourceRoot":"","sources":["../../../src/app/credentials/credential-workflows.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AACH,OAAO,EAML,UAAU,EACV,KAAK,UAAU,EAEhB,MAAM,SAAS,CAAC;AACjB,OAAO,EAAE,KAAK,SAAS,EAAE,MAAM,WAAW,CAAC;AAK3C,OAAO,EAAE,KAAK,EAAE,MAAM,mBAAmB,CAAC;AAC1C,OAAO,EAAkC,MAAM,EAAiC,MAAM,4BAA4B,CAAC;AACnH,OAAO,EAAE,KAAK,kBAAkB,EAA6B,MAAM,uBAAuB,CAAC;AAC3F,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,2BAA2B,CAAC;AACxD,OAAO,KAAK,EAAE,GAAG,EAAE,MAAM,EAAE,MAAM,wBAAwB,CAAC;AAG1D,OAAO,EACL,kBAAkB,EAClB,kBAAkB,EAClB,KAAK,mBAAmB,EAEzB,MAAM,yBAAyB,CAAC;AACjC,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,wBAAwB,CAAC;AAKtD,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,gBAAgB,CAAC;AAEvD,OAAO,EAGL,KAAK,eAAe,EAIrB,MAAM,mCAAmC,CAAC;AAE3C,MAAM,WAAW,+BAA+B;IAC9C,YAAY,EAAE,MAAM,CAAC;IACrB,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAED,MAAM,WAAW,uBAAuB;IACtC,YAAY,EAAE,MAAM,CAAC;IACrB,MAAM,EAAE,MAAM,CAAC;IACf,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,MAAM,CAAC;IACvC,KAAK,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAAE,CAAC;IAC5D,KAAK,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAAE,CAAC;CAC7D;AAED,MAAM,WAAW,qBAAqB;IACpC,MAAM,CAAC,EAAE,OAAO,CAAC;IACjB,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB;AAED,MAAM,WAAW,kBAAkB;IACjC,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC;IACtB,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC;IACtB,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC;IACtB,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC;CACvB;AAED;;;;;GAKG;AACH,MAAM,WAAW,cAAc;IAC7B,4FAA4F;IAC5F,mBAAmB,EAAE,OAAO,CAAC;IAC7B,IAAI,EAAE,MAAM,CAAC;IACb,uFAAuF;IACvF,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAC;IACxB,oFAAoF;IACpF,MAAM,EAAE,MAAM,CAAC;IACf,wFAAwF;IACxF,KAAK,CAAC,EAAE,eAAe,GAAG;QACxB,KAAK,EAAE,OAAO,kBAAkB,CAAC;QACjC,MAAM,EAAE,kBAAkB,CAAC,MAAM,CAAC,CAAC;QACnC,QAAQ,EAAE,OAAO,CAAC;KACnB,CAAC;CACH;AAED;;;;GAIG;AACH,MAAM,WAAW,WAAW;IAC1B,yFAAyF;IACzF,mBAAmB,EAAE,OAAO,CAAC;IAC7B,uFAAuF;IACvF,MAAM,EAAE,UAAU,CAAC;IACnB,oFAAoF;IACpF,SAAS,EAAE,MAAM,CAAC;IAClB,+CAA+C;IAC/C,GAAG,EAAE,MAAM,GAAG,IAAI,CAAC;IACnB,8DAA8D;IAC9D,MAAM,EAAE,gBAAgB,CAAC,MAAM,CAAC,CAAC;IACjC,KAAK,CAAC,EAAE,eAAe,GAAG;QACxB,KAAK,EAAE,OAAO,kBAAkB,CAAC;QACjC,0FAA0F;QAC1F,SAAS,EAAE,kBAAkB,CAAC,MAAM,CAAC,CAAC;QACtC,wFAAwF;QACxF,KAAK,EAAE,OAAO,CAAC;KAChB,CAAC;CACH;AAED,MAAM,WAAW,sBAAsB;IACrC,MAAM,EAAE,UAAU,CAAC;IACnB,SAAS,EAAE,MAAM,CAAC;IAClB,KAAK,EAAE,UAAU,CAAC;CACnB;AAED,0DAA0D;AAC1D,wBAAgB,cAAc,CAAC,GAAG,EAAE,MAAM,EAAE,GAAG,EAAE,UAAU,GAAG,MAAM,CAInE;AAED;;;;;;;;;GASG;AACH,wBAAiB,wBAAwB,CACvC,GAAG,EAAE,MAAM,EACX,KAAK,EAAE,OAAO,EACd,OAAO,EAAE,MAAM,EACf,GAAG,EAAE,GAAG,EACR,OAAO,EAAE,+BAA+B,GACvC,SAAS,CAAC,cAAc,CAAC,CAe3B;AAED,wDAAwD;AACxD,wBAAgB,yBAAyB,CACvC,KAAK,EAAE,KAAK,GACX,KAAK,CAAC;IAAE,IAAI,EAAE,MAAM,GAAG,SAAS,CAAC;IAAC,QAAQ,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,CAAC,CAUvE;AAED,6DAA6D;AAC7D,wBAAgB,wBAAwB,CAAC,GAAG,EAAE,MAAM,EAAE,YAAY,EAAE,MAAM;;;;;EAYzE;AAED;;;;;;;;GAQG;AACH,wBAAiB,gBAAgB,CAC/B,GAAG,EAAE,MAAM,EACX,KAAK,EAAE,OAAO,EACd,OAAO,EAAE,MAAM,EACf,OAAO,EAAE,uBAAuB,GAC/B,SAAS,CAAC,WAAW,CAAC,CA6BxB;AAED,6DAA6D;AAC7D,wBAAgB,eAAe,CAC7B,GAAG,EAAE,MAAM,EACX,OAAO,EAAE,qBAAqB,GAC7B,kBAAkB,EAAE,CAetB;AAED,0DAA0D;AAC1D,wBAAgB,sBAAsB,CACpC,GAAG,EAAE,MAAM,EACX,KAAK,EAAE,KAAK,EACZ,cAAc,EAAE,MAAM,EACtB,SAAS,CAAC,EAAE,MAAM,GACjB,sBAAsB,CAQxB;AAED,oFAAoF;AACpF,wBAAgB,qBAAqB,CACnC,GAAG,EAAE,MAAM,EACX,KAAK,EAAE,KAAK,EACZ,MAAM,EAAE,UAAU,EAClB,SAAS,EAAE,MAAM,GAChB,UAAU,CAEZ;AAED,iGAAiG;AACjG,wBAAgB,0BAA0B,CAAC,GAAG,EAAE,MAAM,EAAE,GAAG,EAAE,GAAG,EAAE,KAAK,EAAE,UAAU,EAAE,OAAO,EAAE,OAAO,qDAIpG;AA4ID;;;;;;;;;GASG;AACH,wBAAiB,sBAAsB,CACrC,GAAG,EAAE,MAAM,EACX,KAAK,EAAE,OAAO,EACd,OAAO,EAAE,MAAM,EACf,QAAQ,EAAE,GAAG,EACb,QAAQ,EAAE,mBAAmB,GAC5B,SAAS,CAAC,eAAe,CAAC,CAS5B"}

package/types/app/{schema-resolving.d.ts → credentials/schema-resolving.d.ts}

@@ -8,8 +8,8 @@
  *
  * DID URL dereferencing is intentionally represented but not implemented yet.
  */
-import type { Schemer } from "../core/scheming.js";
-import type { Habery } from "./habbing.js";
+import type { Schemer } from "../../core/scheming.js";
+import type { Habery } from "../identity/habbing.js";
 export type SchemaReference = {
     kind: "bare";
     said: string;

package/types/app/credentials/schema-resolving.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"schema-resolving.d.ts","sourceRoot":"","sources":["../../../src/app/credentials/schema-resolving.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AACH,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,wBAAwB,CAAC;AACtD,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,wBAAwB,CAAC;AAErD,MAAM,MAAM,eAAe,GACvB;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAA;CAAE,GAC9B;IAAE,IAAI,EAAE,KAAK,CAAC;IAAC,IAAI,EAAE,MAAM,CAAA;CAAE,GAC7B;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,GAAG,EAAE,MAAM,CAAC;IAAC,IAAI,CAAC,EAAE,MAAM,CAAA;CAAE,GAC5C;IAAE,IAAI,EAAE,KAAK,CAAC;IAAC,GAAG,EAAE,MAAM,CAAA;CAAE,CAAC;AAEjC,uEAAuE;AACvE,wBAAgB,oBAAoB,CAAC,SAAS,EAAE,MAAM,GAAG,eAAe,CAevE;AAED,mEAAmE;AACnE,wBAAgB,mBAAmB,CACjC,GAAG,EAAE,MAAM,EACX,SAAS,EAAE,MAAM,GAChB,OAAO,GAAG,IAAI,CAShB"}

package/types/app/credentials/tel-publishing.d.ts

@@ -0,0 +1,16 @@
+/** Finite legacy TEL receipt collection and witness publication; no delivery acknowledgement is inferred. */
+import type { Operation } from "effection";
+import type { TelPublication } from "../../vdr/tel-publication.js";
+import type { Habery } from "../identity/habbing.js";
+import type { RuntimeClock } from "../runtime/runtime-clock.js";
+import type { HttpClient } from "../transport/http-client.js";
+import { type Receiptor } from "../witness/receipting.js";
+/**
+ * Advance one captured set of protocol escrows. Receipt collection includes
+ * fanout; a crash before its commit repeats that ordinary finite operation.
+ * Dissemination replays accepted TEL evidence to the anchor's historical witness
+ * cohort and commits ctel only after every local transmission finished. Failure
+ * retains the corresponding escrow for explicit resume, without an outbox.
+ */
+export declare function publishPendingTel(hby: Habery, publication: TelPublication, receiptor: Receiptor, http: HttpClient, clock: RuntimeClock): Operation<void>;
+//# sourceMappingURL=tel-publishing.d.ts.map

package/types/app/credentials/tel-publishing.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"tel-publishing.d.ts","sourceRoot":"","sources":["../../../src/app/credentials/tel-publishing.ts"],"names":[],"mappings":"AAAA,6GAA6G;AAC7G,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,WAAW,CAAC;AAE3C,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,8BAA8B,CAAC;AACnE,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,wBAAwB,CAAC;AACrD,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,6BAA6B,CAAC;AAChE,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,6BAA6B,CAAC;AAE9D,OAAO,EAAE,KAAK,SAAS,EAAE,MAAM,0BAA0B,CAAC;AAE1D;;;;;;GAMG;AACH,wBAAiB,iBAAiB,CAChC,GAAG,EAAE,MAAM,EACX,WAAW,EAAE,cAAc,EAC3B,SAAS,EAAE,SAAS,EACpB,IAAI,EAAE,UAAU,EAChB,KAAK,EAAE,YAAY,GAClB,SAAS,CAAC,IAAI,CAAC,CAgBjB"}

package/types/app/{verifying.d.ts → credentials/verifying.d.ts}

@@ -10,12 +10,12 @@
  *   flow; durable corruption and unsupported `DI2I` still fail explicitly
  */
 import { Diger, NumberPrimitive, Prefixer, SerderACDC } from "cesr-ts";
-import type { AgentCue } from "../core/cues.js";
-import { Deck } from "../core/deck.js";
-import type { VcStateRecordShape } from "../core/records.js";
-import type { Reger } from "../db/reger.js";
-import type { Habery } from "./habbing.js";
-import type { AcdcDispatchArgs } from "./parsering.js";
+import type { AgentCue } from "../../core/cues.js";
+import { Deck } from "../../core/deck.js";
+import type { VcStateRecordShape } from "../../core/records.js";
+import type { Reger } from "../../db/reger.js";
+import type { Habery } from "../identity/habbing.js";
+import type { AcdcDispatchArgs } from "../protocol/parsering.js";
 export type VerifierEscrowReason = "missingRegistry" | "missingSchema" | "missingChain";
 export type VerifierRejectReason = "missingAnchor" | "invalidCredential" | "invalidSchema" | "invalidEdge" | "revokedChain" | "unsupportedChainOperator";
 export type VerifierDecision = {
@@ -30,6 +30,8 @@ export type VerifierDecision = {
     reason: VerifierRejectReason;
     said: string;
     detail?: string;
+    /** Original validation failure, retained for owner diagnostics without changing the decision. */
+    cause?: unknown;
 };
 export type VerifierCue = Extract<AgentCue, {
     kin: "telquery" | "query" | "proof" | "saved";
@@ -45,7 +47,7 @@ export interface VerifierOptions {
     missingIssuerTimeoutMs?: number;
 }
 /**
- * Concrete credential verifier supplied directly to `Reactor`.
+ * Concrete credential verifier supplied to the shared `ProtocolProcessor`.
  *
  * The verifier owns only credential validation/indexing and its own VDR escrows.
  * TEL processing remains delegated to `Tevery`, and webhook/application policy
@@ -109,6 +111,16 @@ export declare class Verifier {
     }): void;
     /** Verify the credential at the far end of an edge. */
     verifyChain(nodeSaid: string, op: string | undefined, issuer: string): VcStateRecordShape | null;
+    /**
+     * Retry one dependency family and report terminal removals after they succeed.
+     *
+     * Acceptance and migration to another family are ordinary progress, not ejection.
+     * Storage failures propagate with the original evidence still owned by its escrow.
+     *
+     * @param db Pending credential identities and their original admission timestamps.
+     * @param expectedReason Dependency family whose membership this pass owns.
+     * @param timeoutMs Maximum pending age in milliseconds; equality remains eligible.
+     */
     private processEscrow;
     private isCredentialStateStale;
 }

package/types/app/credentials/verifying.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"verifying.d.ts","sourceRoot":"","sources":["../../../src/app/credentials/verifying.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AACH,OAAO,EAEL,KAAK,EAEL,eAAe,EACf,QAAQ,EAER,UAAU,EACX,MAAM,SAAS,CAAC;AACjB,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,oBAAoB,CAAC;AACnD,OAAO,EAAE,IAAI,EAAE,MAAM,oBAAoB,CAAC;AAG1C,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,uBAAuB,CAAC;AAChE,OAAO,KAAK,EAAE,KAAK,EAAE,MAAM,mBAAmB,CAAC;AAE/C,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,wBAAwB,CAAC;AACrD,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,0BAA0B,CAAC;AAGjE,MAAM,MAAM,oBAAoB,GAAG,iBAAiB,GAAG,eAAe,GAAG,cAAc,CAAC;AACxF,MAAM,MAAM,oBAAoB,GAC5B,eAAe,GACf,mBAAmB,GACnB,eAAe,GACf,aAAa,GACb,cAAc,GACd,0BAA0B,CAAC;AAE/B,MAAM,MAAM,gBAAgB,GACxB;IAAE,IAAI,EAAE,QAAQ,CAAC;IAAC,IAAI,EAAE,MAAM,CAAA;CAAE,GAChC;IAAE,IAAI,EAAE,QAAQ,CAAC;IAAC,MAAM,EAAE,oBAAoB,CAAC;IAAC,IAAI,EAAE,MAAM,CAAA;CAAE,GAC9D;IACA,IAAI,EAAE,QAAQ,CAAC;IACf,MAAM,EAAE,oBAAoB,CAAC;IAC7B,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,iGAAiG;IACjG,KAAK,CAAC,EAAE,OAAO,CAAC;CACjB,CAAC;AAEJ,MAAM,MAAM,WAAW,GAAG,OAAO,CAC/B,QAAQ,EACR;IAAE,GAAG,EAAE,UAAU,GAAG,OAAO,GAAG,OAAO,GAAG,OAAO,CAAA;CAAE,CAClD,CAAC;AAEF,MAAM,WAAW,uBAAuB;IACtC,OAAO,CAAC,IAAI,EAAE,MAAM,GAAG,kBAAkB,GAAG,IAAI,GAAG,SAAS,CAAC;CAC9D;AAED,MAAM,WAAW,eAAe;IAC9B,KAAK,EAAE,KAAK,CAAC;IACb,IAAI,CAAC,EAAE,IAAI,CAAC,QAAQ,CAAC,CAAC;IACtB,kBAAkB,CAAC,EAAE,MAAM,CAAC;IAC5B,wBAAwB,CAAC,EAAE,MAAM,CAAC;IAClC,sBAAsB,CAAC,EAAE,MAAM,CAAC;CACjC;AAED;;;;;;GAMG;AACH,qBAAa,QAAQ;IACnB,MAAM,CAAC,QAAQ,CAAC,yBAAyB,kBAAsB;IAC/D,MAAM,CAAC,QAAQ,CAAC,+BAA+B,WAAa;IAC5D,MAAM,CAAC,QAAQ,CAAC,6BAA6B,WAAa;IAE1D,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;IACrB,QAAQ,CAAC,KAAK,EAAE,KAAK,CAAC;IACtB,QAAQ,CAAC,IAAI,EAAE,IAAI,CAAC,QAAQ,CAAC,CAAC;IAC9B,QAAQ,CAAC,kBAAkB,EAAE,MAAM,CAAC;IACpC,QAAQ,CAAC,wBAAwB,EAAE,MAAM,CAAC;IAC1C,QAAQ,CAAC,sBAAsB,EAAE,MAAM,CAAC;gBAE5B,GAAG,EAAE,MAAM,EAAE,OAAO,EAAE,eAAe;IASjD,+CAA+C;IAC/C,IAAI,MAAM,IAAI,GAAG,CAAC,MAAM,EAAE,OAAO,CAAC,CAEjC;IAED,sCAAsC;IACtC,WAAW,CAAC,IAAI,EAAE,gBAAgB,GAAG,gBAAgB;IAiBrD,wDAAwD;IACxD,iBAAiB,CAAC,IAAI,EAAE;QACtB,MAAM,EAAE,UAAU,CAAC;QACnB,QAAQ,EAAE,QAAQ,CAAC;QACnB,MAAM,EAAE,eAAe,CAAC;QACxB,MAAM,EAAE,KAAK,CAAC;KACf,GAAG,gBAAgB;IA4HpB;;OAEG;IACH,OAAO,CAAC,gBAAgB;IAaxB,+BAA+B;IAC/B,SAAS,CAAC,IAAI,EAAE;QACd,MAAM,EAAE,UAAU,CAAC;QACnB,QAAQ,EAAE,QAAQ,CAAC;QACnB,MAAM,EAAE,eAAe,CAAC;QACxB,MAAM,EAAE,KAAK,CAAC;KACf,GAAG,OAAO;IAKX,4BAA4B;IAC5B,SAAS,CAAC,IAAI,EAAE;QACd,MAAM,EAAE,UAAU,CAAC;QACnB,QAAQ,EAAE,QAAQ,CAAC;QACnB,MAAM,EAAE,eAAe,CAAC;QACxB,MAAM,EAAE,KAAK,CAAC;KACf,GAAG,OAAO;IAKX,6BAA6B;IAC7B,SAAS,CAAC,IAAI,EAAE;QACd,MAAM,EAAE,UAAU,CAAC;QACnB,QAAQ,EAAE,QAAQ,CAAC;QACnB,MAAM,EAAE,eAAe,CAAC;QACxB,MAAM,EAAE,KAAK,CAAC;KACf,GAAG,OAAO;IAKX,gFAAgF;IAChF,cAAc,IAAI,IAAI;IAMtB,uEAAuE;IACvE,cAAc,CAAC,IAAI,EAAE;QACnB,MAAM,EAAE,UAAU,CAAC;QACnB,QAAQ,EAAE,QAAQ,CAAC;QACnB,MAAM,EAAE,eAAe,CAAC;QACxB,MAAM,EAAE,KAAK,CAAC;KACf,GAAG,IAAI;IAmBR,uDAAuD;IACvD,WAAW,CAAC,QAAQ,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,GAAG,SAAS,EAAE,MAAM,EAAE,MAAM,GAAG,kBAAkB,GAAG,IAAI;IAkChG;;;;;;;;;OASG;IACH,OAAO,CAAC,aAAa;IA6CrB,OAAO,CAAC,sBAAsB;CAO/B"}

package/types/app/delivery/forwarding.d.ts

@@ -0,0 +1,227 @@
+import { type Operation } from "effection";
+import { Deck } from "../../core/deck.js";
+import type { Mailboxer } from "../../db/mailbox/mailboxing.js";
+import type { Habery } from "../identity/habbing.js";
+import type { ProtocolProcessor } from "../protocol/protocol-processing.js";
+import type { RuntimeClock } from "../runtime/runtime-clock.js";
+import type { HttpClient } from "../transport/http-client.js";
+/** Prepared signed source; Poster copies its bytes before publishing an ordinary admission. */
+export interface PosterMsg {
+    /**
+     * Local sender AID used to resolve the signing habitat on each attempt.
+     */
+    readonly src: string;
+    /**
+     * Final recipient AID; this is not necessarily the intermediary endpoint.
+     */
+    readonly dest: string;
+    /**
+     * Mailbox routing topic; required when using indirect delivery.
+     */
+    readonly topic: string;
+    /**
+     * Original signed message copied at admission; caller mutation cannot change queued work.
+     */
+    readonly msg: Uint8Array;
+    /**
+     * Request same-socket TCP reply processing; requires a protocol processor.
+     */
+    readonly replies?: boolean;
+}
+/** One finite stream whose endpoint selection is shared by every constituent message. */
+export interface PosterStream extends Omit<PosterMsg, "msg"> {
+    /** Complete signed source messages, copied into one finite stream before publication. */
+    readonly msgs: readonly Uint8Array[];
+}
+/** Concrete queued operation identity, shared by execution and its optional completion waiter. */
+export interface PosterEvent extends PosterMsg {
+    /** Ordinary traversal or first-present-role stream delivery, selected by the producer operation. */
+    readonly kin: "msg" | "stream";
+}
+/** Optional terminal observation of one concrete delivery attempt, not remote acceptance. */
+export type PosterOutcome = {
+    /** Terminal local attempt result; neither variant proves remote protocol acceptance. */
+    kin: "sent";
+    /** Exact admitted event identity matched by wait(evt), including repeated same-SAID sends. */
+    evt: PosterEvent;
+    /** Successful network URLs or local-mailbox:<eid> publications, including partial success. */
+    deliveries: string[];
+} | {
+    /** Terminal local attempt result; neither variant proves remote protocol acceptance. */
+    kin: "failed";
+    /** Exact admitted event identity matched by wait(evt), including repeated same-SAID sends. */
+    evt: PosterEvent;
+    /** Successful network URLs or local-mailbox:<eid> publications, including partial success. */
+    deliveries: string[];
+    /** Observed failure with original status/cause, including any aggregated target failures. */
+    error: unknown;
+};
+/**
+ * Deliver queued signed messages using KERIpy's ordinary Poster role traversal.
+ *
+ * Send to every controller and agent endpoint, then one mailbox (or provider-local
+ * storage). Only recipients without those roles use one witness. Transport
+ * completion and opt-in outcomes do not prove remote protocol acceptance. Finite
+ * stream admissions use the first present role through the same execution owner.
+ */
+export declare class Poster {
+    /** Borrowed habitat collection and backing accepted protocol state. */
+    readonly hby: Habery;
+    /** Borrowed mailbox store (mbx); null means this host provides no local mailbox. */
+    readonly mbx: Mailboxer | null;
+    /** Borrowed HTTP client selected explicitly by composition. */
+    readonly http: HttpClient;
+    /** Borrowed clock for this owner's actual network deadlines. */
+    readonly clock: RuntimeClock;
+    /** Runnable signed messages in admission order; the delivery worker is the sole consumer. */
+    readonly evts: Deck<PosterEvent>;
+    /** Opt-in terminal outcomes, matched by concrete admitted event identity. */
+    readonly cues: Deck<PosterOutcome>;
+    /** Events whose callers requested one terminal observation. */
+    private readonly notifications;
+    /** Enforce one active completion observer per event. */
+    private readonly waiters;
+    /** Prevent overlapping drains of the runnable queue. */
+    private processing;
+    /** Terminal admission state; closing a Poster cannot be reversed. */
+    private closed;
+    /** Cancels the current delivery pass before store teardown. */
+    private active?;
+    /** Resolves after active delivery and its owned cleanup have joined. */
+    private joined?;
+    /** Borrowed same-socket protocol receiver; null explicitly selects send-only capability. */
+    private readonly protocol;
+    /**
+     * Bind actual collaborators; Poster owns queue/I/O lifetimes and borrows their stores.
+     *
+     * @param hby Borrowed local habitat collection and accepted-state database.
+     * @param mbx Borrowed provider mailbox store, or null when local storage is unavailable.
+     * @param protocol Borrowed same-database processor for TCP replies; null permits send-only work.
+     * @param http Borrowed HTTP implementation selected by composition.
+     * @param clock Borrowed clock for transport deadlines; times are milliseconds.
+     * @throws RangeError if protocol state belongs to a different database.
+     */
+    constructor(hby: Habery, mbx: Mailboxer | null, protocol: ProtocolProcessor | null, http: HttpClient, clock: RuntimeClock);
+    /**
+     * Admit signed source bytes; callers must observe an outcome before reporting transmission.
+     *
+     * @param evt Concrete source-message record; completion/failure lookup uses object identity, not message SAID.
+     * @param options Set notify to retain one terminal outcome for this admission; default false.
+     * @returns A fresh admitted record with copied msg bytes; admission is not transmission.
+     * @throws Closed owner or unsupported reply capability rejects before queue publication.
+     */
+    send(evt: PosterMsg, { notify }?: {
+        notify?: boolean;
+    }): PosterEvent;
+    /**
+     * Admit a complete finite stream using KERIpy StreamPoster's first-present-role selection.
+     * All messages share one selected direct-endpoint set or one relay for the attempt.
+     *
+     * @param stream Signed source messages in production order; no iterator survives admission.
+     * @param options Set notify to request the same concrete-event completion contract as send.
+     * @returns Copied queued stream identity; admission does not establish delivery.
+     */
+    sendStream({ msgs, ...evt }: PosterStream, { notify }?: {
+        notify?: boolean;
+    }): PosterEvent;
+    /**
+     * Copy one source and atomically publish its concrete operation.
+     * @param evt Resolved producer record; source bytes remain caller-owned until copied.
+     * @param kin Real ordinary or finite-stream operation, not a user routing preference.
+     * @param notify Whether this admission needs one terminal observation.
+     * @returns New identity owned by the runnable queue.
+     */
+    private admit;
+    /**
+     * Construct all source records before atomically publishing a complete cue or reply pair.
+     *
+     * @param evts Finite iterable for one cue/pair; every record is checked and copied before atomic queue publication.
+     * @throws Any construction/capability failure leaves the runnable queue unchanged.
+     */
+    sendAll(evts: Iterable<PosterMsg>): void;
+    /**
+     * Wait for one admission without owning its delivery.
+     * The delivery worker must run independently. Cancellation removes the observer and
+     * its notification; it does not withdraw queued work or abort the attempt.
+     *
+     * @param evt Exact record returned by send with notify enabled.
+     * @returns This admission's sent or failed outcome, consuming its notification.
+     * @throws Missing notification, duplicate waiter or closure before an outcome is available.
+     */
+    wait(evt: PosterEvent): Operation<PosterOutcome>;
+    /**
+     * Consume only this event's outcome while preserving other observers' queue order.
+     *
+     * @param evt Concrete source-message record; completion/failure lookup uses object identity, not message SAID.
+     * @returns Matching outcome, or undefined; other outcome order is preserved.
+     */
+    private takeOutcome;
+    /** Run queued delivery independently of query response intake and producer lifetimes. */
+    deliverDo(): Operation<void>;
+    /** Runnable and active work determine convergence; consumable observations do not. */
+    get hasPending(): boolean;
+    /** Reject new production before a closed output owner can consume its source. */
+    ensureOpen(): void;
+    /** Abort/join active I/O, report unconsumed failures, then release process-local work. */
+    close(): Operation<void>;
+    /** Deliver the current FIFO contents; recognized refusals publish failure and allow later work. */
+    process(): Operation<void>;
+    /**
+     * Publish an opted-in terminal outcome or report an unobserved failure once.
+     * This owner retains no recovery history. Cancellation and close return abandoned
+     * observations here after removing their notification, so failed work stays visible.
+     *
+     * @param outcome Completed attempt, including source identity, original cause and partial delivery.
+     */
+    private publishOutcome;
+    /**
+     * Resolve and execute one event using sequential current endpoints.
+     * Observed HTTP refusal and TransportError permit remaining targets to run.
+     * Unexpected construction/parser/storage/cleanup errors propagate so process can
+     * publish or report the failed outcome before exposing the error.
+     *
+     * @param evt Concrete source-message record; completion/failure lookup uses object identity, not message SAID.
+     * @param deliveries Mutable accumulator of successfully delivered target URLs, retained even if a later target throws.
+     * @param signal Active Poster pass cancellation; forwarded into each messenger attempt.
+     * @returns Sent if every target completes; otherwise a failure with partial successes.
+     */
+    private deliverEvent;
+    /** Execute one prepared target, adapting completed HTTP refusal to this owner's fanout outcome. */
+    private sendPreparedTarget;
+    /**
+     * Snapshot ordinary Poster's current role traversal without network execution.
+     *
+     * Controller and agent roles each retain all endpoints. An indirect role picks
+     * one random provider, unless an explicitly composed store owns an eligible local
+     * AID. Empty location maps retain role selection and become execution failures.
+     *
+     * @param hab Local signing habitat borrowing accepted role/location state.
+     * @param recipient Resolved final recipient AID.
+     * @param topic Recipient mailbox topic; indirect routes require a nonempty topic.
+     * @param kin Ordinary messages traverse all primary roles; streams retain the first present role.
+     * @returns Ordered role groups; no eligible role returns an empty array.
+     */
+    private findBytesRoutes;
+    /**
+     * Prepare a target using the supplied wire and selected endpoint.
+     *
+     * @param hab Local habitat used to construct/sign this output; stores remain borrowed.
+     * @param route Selected direct or forwarded endpoint group.
+     * @param endpoint One selected endpoint AID and URL from the route.
+     * @param evt Original signed source and concrete ordinary/stream operation.
+     * @returns A prepared remote target, or stored after authorized local mailbox publication.
+     */
+    private prepareBytesTarget;
+    /**
+     * Prepare complete signed wire and its introduction before opening transport.
+     *
+     * @param hab Local habitat used to construct/sign this output; stores remain borrowed.
+     * @param recipient Final recipient AID, distinct from the intermediary endpoint.
+     * @param topic Recipient mailbox topic used by the forwarding envelope.
+     * @param evt Original signed source and operation; outer envelopes may be rebuilt.
+     * @param endpoint Mailbox/witness endpoint selected for this attempt.
+     * @returns Stored for a local endpoint, or signed forwarding wire with its introduction.
+     */
+    private prepareForwardedTarget;
+}
+//# sourceMappingURL=forwarding.d.ts.map

package/types/app/delivery/forwarding.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"forwarding.d.ts","sourceRoot":"","sources":["../../../src/app/delivery/forwarding.ts"],"names":[],"mappings":"AAWA,OAAO,EAAQ,KAAK,SAAS,EAAY,MAAM,WAAW,CAAC;AAC3D,OAAO,EAAE,IAAI,EAAE,MAAM,oBAAoB,CAAC;AAI1C,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,gCAAgC,CAAC;AAChE,OAAO,KAAK,EAAO,MAAM,EAAE,MAAM,wBAAwB,CAAC;AAG1D,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,oCAAoC,CAAC;AAE5E,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,6BAA6B,CAAC;AAGhE,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,6BAA6B,CAAC;AAM9D,+FAA+F;AAC/F,MAAM,WAAW,SAAS;IACxB;;OAEG;IACH,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;IACrB;;OAEG;IACH,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB;;OAEG;IACH,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB;;OAEG;IACH,QAAQ,CAAC,GAAG,EAAE,UAAU,CAAC;IACzB;;OAEG;IACH,QAAQ,CAAC,OAAO,CAAC,EAAE,OAAO,CAAC;CAC5B;AAED,yFAAyF;AACzF,MAAM,WAAW,YAAa,SAAQ,IAAI,CAAC,SAAS,EAAE,KAAK,CAAC;IAC1D,yFAAyF;IACzF,QAAQ,CAAC,IAAI,EAAE,SAAS,UAAU,EAAE,CAAC;CACtC;AAED,kGAAkG;AAClG,MAAM,WAAW,WAAY,SAAQ,SAAS;IAC5C,oGAAoG;IACpG,QAAQ,CAAC,GAAG,EAAE,KAAK,GAAG,QAAQ,CAAC;CAChC;AAED,6FAA6F;AAC7F,MAAM,MAAM,aAAa,GACrB;IACA,wFAAwF;IACxF,GAAG,EAAE,MAAM,CAAC;IACZ,8FAA8F;IAC9F,GAAG,EAAE,WAAW,CAAC;IACjB,8FAA8F;IAC9F,UAAU,EAAE,MAAM,EAAE,CAAC;CACtB,GACC;IACA,wFAAwF;IACxF,GAAG,EAAE,QAAQ,CAAC;IACd,8FAA8F;IAC9F,GAAG,EAAE,WAAW,CAAC;IACjB,8FAA8F;IAC9F,UAAU,EAAE,MAAM,EAAE,CAAC;IACrB,6FAA6F;IAC7F,KAAK,EAAE,OAAO,CAAC;CAChB,CAAC;AA4DJ;;;;;;;GAOG;AACH,qBAAa,MAAM;IACjB,uEAAuE;IACvE,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;IACrB,oFAAoF;IACpF,QAAQ,CAAC,GAAG,EAAE,SAAS,GAAG,IAAI,CAAC;IAC/B,+DAA+D;IAC/D,QAAQ,CAAC,IAAI,EAAE,UAAU,CAAC;IAC1B,gEAAgE;IAChE,QAAQ,CAAC,KAAK,EAAE,YAAY,CAAC;IAC7B,6FAA6F;IAC7F,QAAQ,CAAC,IAAI,oBAA2B;IACxC,6EAA6E;IAC7E,QAAQ,CAAC,IAAI,sBAA6B;IAC1C,+DAA+D;IAC/D,OAAO,CAAC,QAAQ,CAAC,aAAa,CAA0B;IACxD,wDAAwD;IACxD,OAAO,CAAC,QAAQ,CAAC,OAAO,CAA0B;IAClD,wDAAwD;IACxD,OAAO,CAAC,UAAU,CAAS;IAC3B,qEAAqE;IACrE,OAAO,CAAC,MAAM,CAAS;IACvB,+DAA+D;IAC/D,OAAO,CAAC,MAAM,CAAC,CAAkB;IACjC,wEAAwE;IACxE,OAAO,CAAC,MAAM,CAAC,CAAgB;IAC/B,4FAA4F;IAC5F,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAA2B;IAEpD;;;;;;;;;OASG;gBAED,GAAG,EAAE,MAAM,EACX,GAAG,EAAE,SAAS,GAAG,IAAI,EACrB,QAAQ,EAAE,iBAAiB,GAAG,IAAI,EAClC,IAAI,EAAE,UAAU,EAChB,KAAK,EAAE,YAAY;IAUrB;;;;;;;OAOG;IACH,IAAI,CAAC,GAAG,EAAE,SAAS,EAAE,EAAE,MAAc,EAAE,GAAE;QAAE,MAAM,CAAC,EAAE,OAAO,CAAA;KAAO,GAAG,WAAW;IAIhF;;;;;;;OAOG;IACH,UAAU,CAAC,EAAE,IAAI,EAAE,GAAG,GAAG,EAAE,EAAE,YAAY,EAAE,EAAE,MAAc,EAAE,GAAE;QAAE,MAAM,CAAC,EAAE,OAAO,CAAA;KAAO,GAAG,WAAW;IAItG;;;;;;OAMG;IACH,OAAO,CAAC,KAAK;IASb;;;;;OAKG;IACH,OAAO,CAAC,IAAI,EAAE,QAAQ,CAAC,SAAS,CAAC,GAAG,IAAI;IAWxC;;;;;;;;OAQG;IACF,IAAI,CAAC,GAAG,EAAE,WAAW,GAAG,SAAS,CAAC,aAAa,CAAC;IAqBjD;;;;;OAKG;IACH,OAAO,CAAC,WAAW;IAWnB,yFAAyF;IACxF,SAAS,IAAI,SAAS,CAAC,IAAI,CAAC;IAO7B,sFAAsF;IACtF,IAAI,UAAU,IAAI,OAAO,CAExB;IAED,iFAAiF;IACjF,UAAU,IAAI,IAAI;IAIlB,0FAA0F;IACzF,KAAK,IAAI,SAAS,CAAC,IAAI,CAAC;IAUzB,mGAAmG;IACnG,OAAO,IAAI,SAAS,CAAC,IAAI,CAAC;IAyC1B;;;;;;OAMG;IACH,OAAO,CAAC,cAAc;IAUtB;;;;;;;;;;OAUG;IACH,OAAO,CAAE,YAAY;IAyDrB,mGAAmG;IACnG,OAAO,CAAE,kBAAkB;IAwC3B;;;;;;;;;;;;OAYG;IACH,OAAO,CAAC,eAAe;IA2BvB;;;;;;;;OAQG;IACH,OAAO,CAAE,kBAAkB;IAY3B;;;;;;;;;OASG;IACH,OAAO,CAAE,sBAAsB;CA2ChC"}

package/types/app/delivery/introducing.d.ts

@@ -0,0 +1,21 @@
+import type { Hab } from "../identity/habbing.js";
+/**
+ * Borrow a Hab/store for lazy introduction output, preserving target KEL, oldest
+ * delegator first, then endpoint/location replies. Capture begins on iteration.
+ * No source is opened when a witness/receipt already makes introduction unnecessary.
+ * V2 proof/key copies and the large-history transport caller remain separately qualified.
+ *
+ * @param hab Local signing habitat; its state/store lifetime remains with the caller.
+ * @param remote Remote endpoint AID whose receipt history determines whether introduction is needed.
+ * @returns Reopenable introduction iterable.
+ */
+export declare function introductionMessages(hab: Hab, remote: string): Iterable<Uint8Array>;
+/**
+ * Collect the introduction required by the existing finite query/forwarding path.
+ *
+ * @param hab Local signing habitat; its state/store lifetime remains with the caller.
+ * @param remote Remote endpoint AID whose receipt history determines whether introduction is needed.
+ * @returns Collected introduction bytes, possibly empty.
+ */
+export declare function introduce(hab: Hab, remote: string): Uint8Array;
+//# sourceMappingURL=introducing.d.ts.map

package/types/app/delivery/introducing.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"introducing.d.ts","sourceRoot":"","sources":["../../../src/app/delivery/introducing.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,GAAG,EAAE,MAAM,wBAAwB,CAAC;AAElD;;;;;;;;;GASG;AACH,wBAAgB,oBAAoB,CAClC,GAAG,EAAE,GAAG,EACR,MAAM,EAAE,MAAM,GACb,QAAQ,CAAC,UAAU,CAAC,CAkBtB;AAED;;;;;;GAMG;AACH,wBAAgB,SAAS,CAAC,GAAG,EAAE,GAAG,EAAE,MAAM,EAAE,MAAM,GAAG,UAAU,CAE9D"}

package/types/app/delivery/reply-streams.d.ts

@@ -0,0 +1,49 @@
+/** Own lazy HTTP replay readers until EOF, transport cancellation, or runtime shutdown. */
+export declare class ReplyStreams {
+    /** Closing readers do not retain their replay source or its current event. */
+    private readonly readers;
+    /** Shutdown permanently closes this runtime's response creation. */
+    private closed;
+    /**
+     * Acquire one source iterator without advancing until HTTP requests bytes.
+     * Transfer the optional disposer through source closure, including acquisition failure.
+     *
+     * @param messages Synchronous wire-message iterable; its iterator remains owned by the response until EOF/cancel/close.
+     * @param dispose Cleanup callback retained through iterator closure; invoked once even if acquisition fails.
+     * @returns Request-owned Web stream.
+     * @throws Source or disposer failures propagate; independent cleanup failures are retained.
+     */
+    open(messages: Iterable<Uint8Array>, dispose?: () => void): ReadableStream<Uint8Array>;
+    /**
+     * Prime one message; empty output closes ownership for a caller's 404 decision.
+     *
+     * @param messages Synchronous wire-message iterable; its iterator remains owned by the response until EOF/cancel/close.
+     * @param dispose Cleanup callback retained through iterator closure; invoked once even if acquisition fails.
+     * @returns Request-owned Web stream, or null after empty-source cleanup.
+     * @throws Source or disposer failures propagate; independent cleanup failures are retained.
+     */
+    openNonEmpty(messages: Iterable<Uint8Array>, dispose?: () => void): ReadableStream<Uint8Array> | null;
+    /**
+     * Optional priming shares the same response owner/disposer; ordinary open always returns a stream.
+     *
+     * @param messages Synchronous wire-message iterable; its iterator remains owned by the response until EOF/cancel/close.
+     * @param dispose Cleanup callback retained through iterator closure; invoked once even if acquisition fails.
+     * @param requireContent Prime one nonempty message before publishing; empty sources close and return null.
+     * @returns Request-owned Web stream, or null after empty-source cleanup.
+     * @throws Source or disposer failures propagate; independent cleanup failures are retained.
+     */
+    private openChecked;
+    /**
+     * Keep the optional disposer through iterator cleanup, including cancellation before the first pull.
+     *
+     * @param messages Synchronous wire-message iterable; its iterator remains owned by the response until EOF/cancel/close.
+     * @param release Cleanup callback retained through iterator closure; invoked once even if acquisition fails.
+     * @param requireContent Prime one nonempty message before publishing; empty sources close and return null.
+     * @returns Request-owned Web stream, or null after empty-source cleanup.
+     * @throws Source or disposer failures propagate; independent cleanup failures are retained.
+     */
+    private openOwned;
+    /** Abort all response readers before their underlying runtime/database owners close. */
+    close(): void;
+}
+//# sourceMappingURL=reply-streams.d.ts.map

package/types/app/delivery/reply-streams.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"reply-streams.d.ts","sourceRoot":"","sources":["../../../src/app/delivery/reply-streams.ts"],"names":[],"mappings":"AAAA,2FAA2F;AAC3F,qBAAa,YAAY;IACvB,8EAA8E;IAC9E,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAyC;IACjE,oEAAoE;IACpE,OAAO,CAAC,MAAM,CAAS;IACvB;;;;;;;;OAQG;IACH,IAAI,CAAC,QAAQ,EAAE,QAAQ,CAAC,UAAU,CAAC,EAAE,OAAO,CAAC,EAAE,MAAM,IAAI,GAAG,cAAc,CAAC,UAAU,CAAC;IAItF;;;;;;;OAOG;IACH,YAAY,CAAC,QAAQ,EAAE,QAAQ,CAAC,UAAU,CAAC,EAAE,OAAO,CAAC,EAAE,MAAM,IAAI,GAAG,cAAc,CAAC,UAAU,CAAC,GAAG,IAAI;IAIrG;;;;;;;;OAQG;IACH,OAAO,CAAC,WAAW;IAuBnB;;;;;;;;OAQG;IACH,OAAO,CAAC,SAAS;IA0HjB,wFAAwF;IACxF,KAAK,IAAI,IAAI;CAad"}

package/types/app/delivery/respondant.d.ts

@@ -0,0 +1,52 @@
+import type { AgentCue } from "../../core/cues.js";
+import { Deck } from "../../core/deck.js";
+import type { Hab, Habery } from "../identity/habbing.js";
+import type { Poster } from "./forwarding.js";
+/**
+ * Shared host-side responder for indirect and witness runtimes.
+ *
+ * KERIpy correspondence:
+ * - this is the local analogue of `Respondant` for reply/replay/receipt-style
+ *   cues
+ * - `BaseHab.processCuesIter()` interprets the cue; `Poster` delivers the
+ *   resulting bytes
+ * - mailbox-query `stream` cues stay with mailbox storage/query coordination
+ *
+ * Boundary rule:
+ * - this class constructs signed non-`stream` output and admits it to Poster
+ * - `MailboxDirector` owns provider publication and `stream` cue correlation,
+ *   using its separately owned Mailboxer for actual storage
+ * - ordinary query replies follow this output path rather than returning from
+ *   the HTTP query POST; direct TCP correlation claims its own reply cues first
+ *
+ * Source cue removal proves complete output admission, not delivery. Poster runs
+ * independently and owns routing, transport attempts and failure outcomes. Keep
+ * mailbox provider writes in that routing path, not in responder cue interpretation.
+ */
+export declare class Respondant {
+    /** Borrowed local signer and accepted-state collection. */
+    private readonly hby;
+    /** Delivery owner; source cues are consumed only after its admission succeeds. */
+    private readonly postman;
+    /** Bind borrowed identity and delivery owners without acquiring stores or network lifetimes. */
+    constructor(hby: Habery, postman: Poster);
+    /**
+     * Produce a whole cue before publishing or removing it; construction failure leaves the source visible.
+     *
+     * @param hab Local habitat used to construct/sign this output; stores remain borrowed.
+     * @param cues Source Deck; only its current head is interpreted, and removed after full publication.
+     * @param hint Optional local sender hint used when cue provenance does not resolve a habitat.
+     * @returns True after complete admission/removal; false if the head has no routable responder output.
+     * @throws Construction/admission failures leave the source cue present.
+     */
+    enqueueCue(hab: Hab, cues: Deck<AgentCue>, hint?: Hab | null): boolean;
+    /**
+     * Admit already produced witness messages without signing them again.
+     *
+     * @param hab Local habitat used to construct/sign this output; stores remain borrowed.
+     * @param cue Routing/provenance cue for the already-signed output.
+     * @param msgs Complete signed messages; Poster copies them during atomic admission.
+     */
+    enqueueMsgs(hab: Hab, cue: AgentCue, msgs: readonly Uint8Array[]): void;
+}
+//# sourceMappingURL=respondant.d.ts.map

package/types/app/delivery/respondant.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"respondant.d.ts","sourceRoot":"","sources":["../../../src/app/delivery/respondant.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,oBAAoB,CAAC;AACnD,OAAO,EAAE,IAAI,EAAE,MAAM,oBAAoB,CAAC;AAC1C,OAAO,KAAK,EAAE,GAAG,EAAE,MAAM,EAAE,MAAM,wBAAwB,CAAC;AAC1D,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,iBAAiB,CAAC;AAE9C;;;;;;;;;;;;;;;;;;;;GAoBG;AACH,qBAAa,UAAU;IACrB,2DAA2D;IAC3D,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAS;IAC7B,kFAAkF;IAClF,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAS;IACjC,gGAAgG;gBACpF,GAAG,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM;IAKxC;;;;;;;;OAQG;IACH,UAAU,CAAC,GAAG,EAAE,GAAG,EAAE,IAAI,EAAE,IAAI,CAAC,QAAQ,CAAC,EAAE,IAAI,CAAC,EAAE,GAAG,GAAG,IAAI,GAAG,OAAO;IAatE;;;;;;OAMG;IACH,WAAW,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,QAAQ,EAAE,IAAI,EAAE,SAAS,UAAU,EAAE,GAAG,IAAI;CAMxE"}

package/types/app/{stored-replies.d.ts → delivery/stored-replies.d.ts}

@@ -1,6 +1,6 @@
 /** Finite stored endpoint-reply reconstruction; current proof rows are borrowed only during this synchronous call. */
 import { type Versionage } from "cesr-ts";
-import type { Baser } from "../db/basing.js";
+import type { Baser } from "../../db/basing.js";
 /**
  * Rebuild one persisted reply with all stored groups and exactly one optional cigar.
  *